@adminforth/agent 2.7.4 → 2.7.5

package/dist/application/runTurnUseCase.d.ts

@@ -3,7 +3,7 @@ import type { AgentSessionStore } from "../persistence/sessionStore.js";
 import type { SteerBuffer } from "../domain/steerBuffer.js";
 import type { PluginOptions } from "../types.js";
 import type { LlmPort } from "./ports.js";
-import type { DebugSink, HandleTurnInput, HandleEditTurnInput, PendingInterrupt, RunAndPersistAgentResponseInput, RunAndPersistAgentResponseResult } from "../domain/turnTypes.js";
+import type { BaseAgentTurnInput, DebugSink, HandleTurnInput, HandleEditTurnInput, PendingInterrupt, RunAndPersistAgentResponseInput, RunAndPersistAgentResponseResult } from "../domain/turnTypes.js";
 /**
  * Build the provider-agnostic resume payload for a human-in-the-loop turn.
  * Exported for unit testing; the LLM port wraps it into a LangGraph Command.
@@ -72,7 +72,7 @@ export declare class RunTurnUseCase {
     private resolvePendingInterrupts;
     private requiresSessionOwnership;
     /** Verify the session exists and belongs to the requesting admin user. */
-    private assertSessionOwnership;
+    assertSessionOwnership(sessionId: string, adminUser: BaseAgentTurnInput["adminUser"]): Promise<void>;
     /**
      * Prepare an edit/branch turn: resolve the fork checkpoint from the previous turn,
      * truncate the conversation after the edited turn, and reuse the edited turn's id

package/dist/index.js

@@ -154,10 +154,11 @@ export default class AdminForthAgentPlugin extends AdminForthPlugin {
             handleTurn: this.runTurnUseCase.handleTurn.bind(this.runTurnUseCase),
             handleEditTurn: this.runTurnUseCase.handleEditTurn.bind(this.runTurnUseCase),
             handleSpeechTurn: this.speechTurnService.handle.bind(this.speechTurnService),
-            steer: ({ sessionId, message }) => {
+            steer: (_a) => __awaiter(this, [_a], void 0, function* ({ sessionId, message, adminUser }) {
+                yield this.runTurnUseCase.assertSessionOwnership(sessionId, adminUser);
                 const { id } = this.steerBuffer.add(sessionId, message);
                 return { id, queued: this.steerBuffer.size(sessionId) };
-            },
+            }),
             runAndPersistAgentResponse: this.runTurnUseCase.runAndPersistAgentResponse.bind(this.runTurnUseCase),
             getSessionTurns: this.sessionStore.getSessionTurns.bind(this.sessionStore),
             createNewTurn: this.sessionStore.createNewTurn.bind(this.sessionStore),

package/dist/transport/http/context.d.ts

@@ -15,10 +15,11 @@ export type AgentEndpointsContext = {
     steer(input: {
         sessionId: string;
         message: string;
-    }): {
+        adminUser: any;
+    }): Promise<{
         id: string;
         queued: number;
-    };
+    }>;
     runAndPersistAgentResponse(input: RunAndPersistAgentResponseInput): Promise<RunAndPersistAgentResponseResult>;
     getSessionTurns(sessionId: string): Promise<SessionTurn[]>;
     createNewTurn(sessionId: string, prompt: string, response?: string): Promise<string>;

package/dist/transport/http/coreEndpoints.js

@@ -167,14 +167,15 @@ export function setupCoreEndpoints(ctx, server) {
         method: 'POST',
         path: `/agent/steer`,
         request_schema: agentSteerBodySchema,
-        handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body }) {
+        handler: (_a) => __awaiter(this, [_a], void 0, function* ({ body, adminUser }) {
             const data = body;
             // Fire-and-forget: the steer is buffered and folded into the running turn by the
             // beforeModel steer middleware, which signals `data-steer-applied` on that turn's
             // SSE stream once consumed. This endpoint only confirms it was received/queued.
-            const { id, queued } = ctx.steer({
+            const { id, queued } = yield ctx.steer({
                 sessionId: data.sessionId,
                 message: data.message,
+                adminUser: adminUser
             });
             return { ok: true, id, queued };
         })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adminforth/agent",
-  "version": "2.7.4",
+  "version": "2.7.5",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",