@adminforth/agent 2.7.0 → 2.7.2

package/dist/application/runTurnUseCase.d.ts

@@ -70,12 +70,13 @@ export declare class RunTurnUseCase {
      * MemorySaver the in-process cache is authoritative (single process, cannot be stale).
      */
     private resolvePendingInterrupts;
+    private requiresSessionOwnership;
     /** Verify the session exists and belongs to the requesting admin user. */
     private assertSessionOwnership;
     /**
-     * Prepare an edit/branch turn: validate ownership, resolve the fork checkpoint from
-     * the previous turn, truncate the conversation after the edited turn, and reuse the
-     * edited turn's id for the regenerated response.
+     * Prepare an edit/branch turn: resolve the fork checkpoint from the previous turn,
+     * truncate the conversation after the edited turn, and reuse the edited turn's id
+     * for the regenerated response. Ownership is already asserted by `prepareTurn`.
      */
     private prepareEditTurn;
     private prepareTurn;

package/dist/application/runTurnUseCase.js

@@ -121,6 +121,9 @@ export class RunTurnUseCase {
             return (_a = this.pendingInterrupts.get(sessionId)) !== null && _a !== void 0 ? _a : [];
         });
     }
+    requiresSessionOwnership(input) {
+        return !input.chatSurface;
+    }
     /** Verify the session exists and belongs to the requesting admin user. */
     assertSessionOwnership(sessionId, adminUser) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -135,9 +138,9 @@ export class RunTurnUseCase {
         });
     }
     /**
-     * Prepare an edit/branch turn: validate ownership, resolve the fork checkpoint from
-     * the previous turn, truncate the conversation after the edited turn, and reuse the
-     * edited turn's id for the regenerated response.
+     * Prepare an edit/branch turn: resolve the fork checkpoint from the previous turn,
+     * truncate the conversation after the edited turn, and reuse the edited turn's id
+     * for the regenerated response. Ownership is already asserted by `prepareTurn`.
      */
     prepareEditTurn(input) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -147,7 +150,6 @@ export class RunTurnUseCase {
             if (!this.deps.turnCheckpointsEnabled) {
                 throw new Error("Edit/fork requires checkpointIdField to be configured on turnResource.");
             }
-            yield this.assertSessionOwnership(input.sessionId, input.adminUser);
             const agentTurns = yield this.deps.sessions.getAgentTurns(input.sessionId);
             const targetIndex = agentTurns.findIndex((turn) => turn.id === editTurnId);
             if (targetIndex === -1) {
@@ -201,6 +203,9 @@ export class RunTurnUseCase {
             const mode = this.resolveMode(input.modeName);
             const approvalDecision = getApprovalDecision(input);
             const shouldResume = Boolean(approvalDecision);
+            if (this.requiresSessionOwnership(input)) {
+                yield this.assertSessionOwnership(input.sessionId, input.adminUser);
+            }
             if (input.editTurnId && !shouldResume) {
                 return this.prepareEditTurn(input);
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/agent",
-  "version": "2.7.0",
+  "version": "2.7.2",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",