@memberjunction/server 6.2.0-edge.4 → 6.2.0-edge.6

package/dist/realtimeSessions/ownedRealtimeSession.js

@@ -0,0 +1,56 @@
+/**
+ * @fileoverview The ownership gate for client-direct realtime session writes: the GraphQL mutations of
+ * `RealtimeClientSessionResolver` and the recording REST routes both load the session through
+ * {@link LoadOwnedRealtimeSession}, so "may this caller write to this session?" is decided in one place.
+ *
+ * @module @memberjunction/server/realtimeSessions
+ */
+import { LogError } from '@memberjunction/core';
+import { UUIDsEqual } from '@memberjunction/global';
+import { AuthorizeSessionAccess, LoadSessionConversationScope } from './sessionAccess.js';
+const SESSION_ENTITY = 'MJ: AI Agent Sessions';
+/** The session does not exist, or the caller cannot read it. */
+export class RealtimeSessionNotFoundError extends Error {
+    constructor(AgentSessionID) {
+        super(`Realtime session ${AgentSessionID} not found`);
+        this.AgentSessionID = AgentSessionID;
+        this.name = 'RealtimeSessionNotFoundError';
+    }
+}
+/** The session exists but the caller may not use it: another user owns it, or (for a scoped or anonymous caller) its conversation carries another scope identity. */
+export class RealtimeSessionOwnershipError extends Error {
+    constructor(AgentSessionID) {
+        super('Not authorized: you do not own this realtime session');
+        this.AgentSessionID = AgentSessionID;
+        this.name = 'RealtimeSessionOwnershipError';
+    }
+}
+/**
+ * Loads a session under the caller's identity and enforces ownership: `UserID === contextUser.ID`, then the
+ * scope rule of {@link AuthorizeSessionAccess} (every anonymous visitor shares one Anonymous user, so the
+ * session's conversation `ExternalID` must equal the caller's scope identity). It deliberately does NOT
+ * reject `Closed` sessions: the final channel-state flush and the recording terminal signal legitimately
+ * arrive after the session closed. Loading as the caller also applies the entity's row-level security.
+ *
+ * @throws RealtimeSessionNotFoundError when the row does not load
+ * @throws RealtimeSessionOwnershipError when another user owns the session (logged with both user ids) or
+ *   the scope rule refuses the caller (logged with the refusal reason)
+ */
+export async function LoadOwnedRealtimeSession(agentSessionId, contextUser, provider) {
+    const session = await provider.GetEntityObject(SESSION_ENTITY, contextUser);
+    if (!(await session.Load(agentSessionId))) {
+        throw new RealtimeSessionNotFoundError(agentSessionId);
+    }
+    if (!UUIDsEqual(session.UserID, contextUser.ID)) {
+        LogError(`LoadOwnedRealtimeSession: ownership check failed — user ${contextUser.ID} attempted to operate on session ${agentSessionId} owned by ${session.UserID}`);
+        throw new RealtimeSessionOwnershipError(agentSessionId);
+    }
+    const conversation = await LoadSessionConversationScope(session, contextUser, provider);
+    const access = AuthorizeSessionAccess({ SessionUserID: session.UserID, ConversationExternalID: conversation.ExternalID, ConversationReadable: conversation.Readable }, contextUser);
+    if (!access.Allowed) {
+        LogError(`LoadOwnedRealtimeSession: session access refused (${access.Reason}) — user ${contextUser.ID} attempted to operate on session ${agentSessionId}`);
+        throw new RealtimeSessionOwnershipError(agentSessionId);
+    }
+    return session;
+}
+//# sourceMappingURL=ownedRealtimeSession.js.map

package/dist/realtimeSessions/ownedRealtimeSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ownedRealtimeSession.js","sourceRoot":"","sources":["../../src/realtimeSessions/ownedRealtimeSession.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAqB,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAE1F,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAE/C,gEAAgE;AAChE,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACnD,YAA4B,cAAsB;QAC9C,KAAK,CAAC,oBAAoB,cAAc,YAAY,CAAC,CAAC;QAD9B,mBAAc,GAAd,cAAc,CAAQ;QAE9C,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC/C,CAAC;CACJ;AAED,qKAAqK;AACrK,MAAM,OAAO,6BAA8B,SAAQ,KAAK;IACpD,YAA4B,cAAsB;QAC9C,KAAK,CAAC,sDAAsD,CAAC,CAAC;QADtC,mBAAc,GAAd,cAAc,CAAQ;QAE9C,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAChD,CAAC;CACJ;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC1C,cAAsB,EACtB,WAAqB,EACrB,QAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAyB,cAAc,EAAE,WAAW,CAAC,CAAC;IACpG,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,4BAA4B,CAAC,cAAc,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9C,QAAQ,CACJ,2DAA2D,WAAW,CAAC,EAAE,oCAAoC,cAAc,aAAa,OAAO,CAAC,MAAM,EAAE,CAC3J,CAAC;QACF,MAAM,IAAI,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,sBAAsB,CACjC,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,UAAU,EAAE,oBAAoB,EAAE,YAAY,CAAC,QAAQ,EAAE,EAC/H,WAAW,CACd,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,QAAQ,CACJ,qDAAqD,MAAM,CAAC,MAAM,YAAY,WAAW,CAAC,EAAE,oCAAoC,cAAc,EAAE,CACnJ,CAAC;QACF,MAAM,IAAI,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/realtimeSessions/sessionAccess.d.ts

@@ -9,13 +9,17 @@
  * ## The two ownership rules
  *
  * 1. **Owner.** The session's `UserID` must be the caller's user.
- * 2. **Scope.** A *named* user is fully identified by (1). An **anonymous widget guest** is not:
- *    every guest authenticates as the one shared Anonymous user, so (1) alone would let any guest
- *    address any other guest's session. What separates guests is the signed per-session scope in
- *    their token (`MagicLinkScope.ResourceID`), which `SessionManager` stamps onto the session's
- *    Conversation as `ExternalID`. So a principal that carries a scope must match it, and an
- *    anonymous principal that carries NO scope is refused outright — it cannot be told apart from
- *    every other anonymous principal.
+ * 2. **Scope.** A *named* user is fully identified by (1). An **anonymous visitor** (widget guest or
+ *    anonymous magic-link invitee) is not: every one authenticates as the one shared Anonymous user, so
+ *    (1) alone would let any visitor address any other visitor's session. What separates them is the
+ *    scope identity {@link ResolveSessionScopeIdentity} reads off the signed token — the resource scope
+ *    (`MagicLinkScope.ResourceID`) when the token carries one, else the per-token `mj_sid`
+ *    (`AnonymousVisitorID`). `SessionManager` stamps that same value onto the session's Conversation as
+ *    `ExternalID`, so a principal with a scope identity must match it, and an anonymous principal with
+ *    none is refused outright — it cannot be told apart from every other anonymous principal.
+ *    One allowance: a NAMED principal with a resource scope may also use its own session whose
+ *    conversation carries no stamp at all, when it could read that conversation (see the comment in
+ *    {@link AuthorizeSessionAccess}).
  *
  * The decision is deliberately pure (no I/O) so it can be applied identically to a freshly loaded
  * row at subscribe time and to the owner/scope snapshot carried inside each published event.
@@ -34,13 +38,21 @@ export interface SessionAccessSubject {
      * could not be loaded.
      */
     ConversationExternalID: string | null | undefined;
+    /**
+     * True when the conversation was loaded under the CALLER's identity (so its row-level security allowed
+     * the read). Only consulted for a named principal with a resource scope on a conversation that carries
+     * no `ExternalID`; omitted means unknown and is treated as unreadable (fail closed).
+     */
+    ConversationReadable?: boolean;
 }
 /** What the decision needs to know about the caller (a subset of `UserInfo`). */
 export interface SessionAccessPrincipal {
     /** The caller's user id. */
     ID: string;
-    /** True for the shared-Anonymous-user principal of a public-widget guest. */
+    /** True for the shared-Anonymous-user principal of a public-widget guest or anonymous magic-link invitee. */
     IsMagicLinkAnonymous?: boolean;
+    /** Per-visitor session identity (`mj_sid`) for an anonymous principal. */
+    AnonymousVisitorID?: string;
     /** The signed per-session scope carried by the caller's token, when any. */
     MagicLinkScope?: {
         ResourceID?: string;
@@ -51,10 +63,24 @@ export type SessionAccessRefusal = 'not_owner' | 'scope_missing' | 'scope_mismat
 /** Outcome of {@link AuthorizeSessionAccess}. */
 export type SessionAccessDecision = {
     Allowed: true;
+    Reason?: undefined;
 } | {
     Allowed: false;
     Reason: SessionAccessRefusal;
 };
+/**
+ * The scope identity a session is keyed on for `principal` — the one value `SessionManager` stamps as
+ * the session conversation's `ExternalID` and {@link AuthorizeSessionAccess} compares against it.
+ *
+ * - The token's resource scope (`MagicLinkScope.ResourceID`) when it carries one. A widget guest's
+ *   resource scope IS its `mj_sid`; an anonymous magic-link invite with a `ResourceID` (e.g. a Caliber
+ *   Invite Scope, one per subject) shares that scope across its redemptions by design, and the
+ *   `{{ScopeResourceID}}` RLS filters key on the same value, so the visitor can read its own rows.
+ * - Otherwise, for an anonymous principal, the per-token `mj_sid` (`AnonymousVisitorID`), which tells two
+ *   redemptions of an unscoped multi-use invite apart.
+ * - Otherwise `undefined` (a named user without a resource scope).
+ */
+export declare function ResolveSessionScopeIdentity(principal: SessionAccessPrincipal): string | undefined;
 /**
  * Decides whether `principal` may address the session described by `subject`.
  *
@@ -70,6 +96,8 @@ export interface LoadedSessionForAccess {
     Session: MJAIAgentSessionEntity;
     /** The session's conversation `ExternalID` (anonymous scope id), or null. */
     ConversationExternalID: string | null;
+    /** Whether the caller could read the session's conversation (false when there is none). */
+    ConversationReadable: boolean;
 }
 /**
  * Loads a session (and its conversation's scope id) under `contextUser`'s identity.
@@ -83,4 +111,59 @@ export interface LoadedSessionForAccess {
  *   which {@link AuthorizeSessionAccess} then treats as "no scope to match" (refused for a scoped caller).
  */
 export declare function LoadSessionForAccess(agentSessionId: string, contextUser: UserInfo, provider: IMetadataProvider): Promise<LoadedSessionForAccess | null>;
+/** What the caller could learn about a session's conversation: the scope half of {@link SessionAccessSubject}. */
+export interface SessionConversationScope {
+    /** The conversation's `ExternalID` (the anonymous scope id), or null when it has none or was not read. */
+    ExternalID: string | null;
+    /** Whether the caller could read the conversation (false when the session has none). */
+    Readable: boolean;
+}
+/** {@link SessionConversationScope} plus the conversation's owner, for a conversation addressed without a session. */
+export interface ConversationScope extends SessionConversationScope {
+    /** `Conversation.UserID`, or null when the conversation was not read. */
+    UserID: string | null;
+}
+/**
+ * Reads an already-loaded session's conversation under `contextUser` (so its row-level security applies).
+ * A missing conversation, a refused read and a failed read (logged) all report `Readable: false`. For
+ * callers that loaded the session through another gate and only need the scope half of
+ * {@link AuthorizeSessionAccess}'s subject.
+ */
+export declare function LoadSessionConversationScope(session: MJAIAgentSessionEntity, contextUser: UserInfo, provider: IMetadataProvider): Promise<SessionConversationScope>;
+/**
+ * Reads a conversation's owner and scope id under `contextUser` (so its row-level security applies), for a
+ * caller that addresses the conversation directly rather than through a session — a text agent turn, for
+ * example, whose only handle is a message in it. Together with the caller's principal this is exactly the
+ * subject {@link AuthorizeSessionAccess} decides on: `SessionUserID` is the conversation's owner, since the
+ * session a conversation belongs to is owned by the same user.
+ *
+ * An empty id, a missing conversation, a refused read and a failed read (logged) all report
+ * `Readable: false` with no owner, which {@link AuthorizeSessionAccess} then refuses for any scoped caller.
+ */
+export declare function LoadConversationScope(conversationId: string | null | undefined, contextUser: UserInfo, provider: IMetadataProvider): Promise<ConversationScope>;
+/**
+ * Who may run a conversation turn (a text agent turn, addressed by a message in the conversation) in
+ * `conversationId`, decided the same way as session access.
+ *
+ * A NAMED principal is allowed without a read: its entity permissions and row filters already decided
+ * whether it could load the message, and a named user is fully identified by its `UserID`. An ANONYMOUS
+ * principal is not (see the module doc), so the conversation is read as the caller and
+ * {@link AuthorizeSessionAccess} compares its scope id with the conversation's stamp — the same
+ * decision #5997 applies to the realtime gates, so the text and voice paths agree on ownership.
+ * An unreadable conversation refuses (`not_owner`, there is no owner to match).
+ */
+export declare function AuthorizeConversationTurn(conversationId: string, principal: UserInfo, provider: IMetadataProvider): Promise<SessionAccessDecision>;
+/**
+ * Whether an anonymous caller owns any of a LiveKit room's agent sessions — the check MJServer registers with
+ * `RoomAuthorizationService.SetAnonymousSessionOwnerCheck` (`@memberjunction/livekit-room-server` cannot import
+ * this package). Each session is loaded as the caller (its row-level security applies) and decided by
+ * {@link AuthorizeSessionAccess}, the same decision every realtime gate makes, so a room admits exactly the visitor
+ * whose scope id its session's conversation carries (MJ#6044). Nothing to read, or no provider: refused.
+ */
+export declare function AuthorizeAnonymousRoomSessions(agentSessionIds: string[], user: UserInfo, provider: IMetadataProvider | undefined): Promise<boolean>;
+/**
+ * The session conversation's `ExternalID` alone; null when there is none or it cannot be read.
+ * Prefer {@link LoadSessionConversationScope}, which also says whether the read succeeded.
+ */
+export declare function LoadSessionConversationExternalID(session: MJAIAgentSessionEntity, contextUser: UserInfo, provider: IMetadataProvider): Promise<string | null>;
 //# sourceMappingURL=sessionAccess.d.ts.map

package/dist/realtimeSessions/sessionAccess.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessionAccess.d.ts","sourceRoot":"","sources":["../../src/realtimeSessions/sessionAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,iBAAiB,EAAY,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE7E,OAAO,KAAK,EAAE,sBAAsB,EAAwB,MAAM,+BAA+B,CAAC;AAMlG,yDAAyD;AACzD,MAAM,WAAW,oBAAoB;IACjC,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,sBAAsB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACrD;AAED,iFAAiF;AACjF,MAAM,WAAW,sBAAsB;IACnC,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,6EAA6E;IAC7E,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,4EAA4E;IAC5E,cAAc,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACxD;AAED,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEpF,iDAAiD;AACjD,MAAM,MAAM,qBAAqB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEzG;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAClC,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GACrD,qBAAqB,CAYvB;AAED,0FAA0F;AAC1F,MAAM,WAAW,sBAAsB;IACnC,+FAA+F;IAC/F,OAAO,EAAE,sBAAsB,CAAC;IAChC,6EAA6E;IAC7E,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CACzC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACtC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CASxC"}
+{"version":3,"file":"sessionAccess.d.ts","sourceRoot":"","sources":["../../src/realtimeSessions/sessionAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,iBAAiB,EAAY,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAE7E,OAAO,KAAK,EAAE,sBAAsB,EAAwB,MAAM,+BAA+B,CAAC;AAMlG,yDAAyD;AACzD,MAAM,WAAW,oBAAoB;IACjC,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,sBAAsB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAClD;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,iFAAiF;AACjF,MAAM,WAAW,sBAAsB;IACnC,4BAA4B;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,6GAA6G;IAC7G,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,4EAA4E;IAC5E,cAAc,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;CACxD;AAED,qFAAqF;AACrF,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEpF,iDAAiD;AACjD,MAAM,MAAM,qBAAqB,GAC3B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GACrC;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEvD;;;;;;;;;;;GAWG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,sBAAsB,GAAG,MAAM,GAAG,SAAS,CAMjG;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAClC,OAAO,EAAE,oBAAoB,EAC7B,SAAS,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GACrD,qBAAqB,CAwBvB;AAED,0FAA0F;AAC1F,MAAM,WAAW,sBAAsB;IACnC,+FAA+F;IAC/F,OAAO,EAAE,sBAAsB,CAAC;IAChC,6EAA6E;IAC7E,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,2FAA2F;IAC3F,oBAAoB,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACtC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAUxC;AAED,kHAAkH;AAClH,MAAM,WAAW,wBAAwB;IACrC,0GAA0G;IAC1G,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,wFAAwF;IACxF,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,sHAAsH;AACtH,MAAM,WAAW,iBAAkB,SAAQ,wBAAwB;IAC/D,yEAAyE;IACzE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAsB,4BAA4B,CAC9C,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC,wBAAwB,CAAC,CAMnC;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACvC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACzC,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAgB5B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,yBAAyB,CAC3C,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,QAAQ,EACnB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC,qBAAqB,CAAC,CAShC;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAChD,eAAe,EAAE,MAAM,EAAE,EACzB,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,iBAAiB,GAAG,SAAS,GACxC,OAAO,CAAC,OAAO,CAAC,CAkBlB;AAED;;;GAGG;AACH,wBAAsB,iCAAiC,CACnD,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,QAAQ,EACrB,QAAQ,EAAE,iBAAiB,GAC5B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAExB"}

package/dist/realtimeSessions/sessionAccess.js

@@ -9,13 +9,17 @@
  * ## The two ownership rules
  *
  * 1. **Owner.** The session's `UserID` must be the caller's user.
- * 2. **Scope.** A *named* user is fully identified by (1). An **anonymous widget guest** is not:
- *    every guest authenticates as the one shared Anonymous user, so (1) alone would let any guest
- *    address any other guest's session. What separates guests is the signed per-session scope in
- *    their token (`MagicLinkScope.ResourceID`), which `SessionManager` stamps onto the session's
- *    Conversation as `ExternalID`. So a principal that carries a scope must match it, and an
- *    anonymous principal that carries NO scope is refused outright — it cannot be told apart from
- *    every other anonymous principal.
+ * 2. **Scope.** A *named* user is fully identified by (1). An **anonymous visitor** (widget guest or
+ *    anonymous magic-link invitee) is not: every one authenticates as the one shared Anonymous user, so
+ *    (1) alone would let any visitor address any other visitor's session. What separates them is the
+ *    scope identity {@link ResolveSessionScopeIdentity} reads off the signed token — the resource scope
+ *    (`MagicLinkScope.ResourceID`) when the token carries one, else the per-token `mj_sid`
+ *    (`AnonymousVisitorID`). `SessionManager` stamps that same value onto the session's Conversation as
+ *    `ExternalID`, so a principal with a scope identity must match it, and an anonymous principal with
+ *    none is refused outright — it cannot be told apart from every other anonymous principal.
+ *    One allowance: a NAMED principal with a resource scope may also use its own session whose
+ *    conversation carries no stamp at all, when it could read that conversation (see the comment in
+ *    {@link AuthorizeSessionAccess}).
  *
  * The decision is deliberately pure (no I/O) so it can be applied identically to a freshly loaded
  * row at subscribe time and to the owner/scope snapshot carried inside each published event.
@@ -27,6 +31,25 @@ import { IsValidUUID, UUIDsEqual } from '@memberjunction/global';
 /** Entity names, centralised so the `MJ: ` prefix convention lives in one place. */
 const SESSION_ENTITY = 'MJ: AI Agent Sessions';
 const CONVERSATION_ENTITY = 'MJ: Conversations';
+/**
+ * The scope identity a session is keyed on for `principal` — the one value `SessionManager` stamps as
+ * the session conversation's `ExternalID` and {@link AuthorizeSessionAccess} compares against it.
+ *
+ * - The token's resource scope (`MagicLinkScope.ResourceID`) when it carries one. A widget guest's
+ *   resource scope IS its `mj_sid`; an anonymous magic-link invite with a `ResourceID` (e.g. a Caliber
+ *   Invite Scope, one per subject) shares that scope across its redemptions by design, and the
+ *   `{{ScopeResourceID}}` RLS filters key on the same value, so the visitor can read its own rows.
+ * - Otherwise, for an anonymous principal, the per-token `mj_sid` (`AnonymousVisitorID`), which tells two
+ *   redemptions of an unscoped multi-use invite apart.
+ * - Otherwise `undefined` (a named user without a resource scope).
+ */
+export function ResolveSessionScopeIdentity(principal) {
+    const resourceId = principal.MagicLinkScope?.ResourceID;
+    if (resourceId) {
+        return resourceId;
+    }
+    return principal.IsMagicLinkAnonymous ? principal.AnonymousVisitorID || undefined : undefined;
+}
 /**
  * Decides whether `principal` may address the session described by `subject`.
  *
@@ -39,14 +62,26 @@ export function AuthorizeSessionAccess(subject, principal) {
     if (!principal?.ID || !subject.SessionUserID || !UUIDsEqual(subject.SessionUserID, principal.ID)) {
         return { Allowed: false, Reason: 'not_owner' };
     }
-    const scopeId = principal.MagicLinkScope?.ResourceID;
+    const scopeId = ResolveSessionScopeIdentity(principal);
     if (!scopeId) {
-        // An anonymous principal without a per-session scope is indistinguishable from every other
-        // anonymous principal: owning "the Anonymous user's" session proves nothing.
+        // A named user without a scope is identified by the owner check alone; an anonymous principal
+        // without one cannot be told apart from any other anonymous principal.
         return principal.IsMagicLinkAnonymous ? { Allowed: false, Reason: 'scope_missing' } : { Allowed: true };
     }
     // Scope ids are opaque base64url strings (case-significant), so compare exactly — not UUIDsEqual.
-    return subject.ConversationExternalID === scopeId ? { Allowed: true } : { Allowed: false, Reason: 'scope_mismatch' };
+    if (subject.ConversationExternalID === scopeId) {
+        return { Allowed: true };
+    }
+    // A named user is identified by the owner check; its scope only keeps one link's sessions apart from
+    // the same person's other links (magic links resolve the user by email, so one person can hold several).
+    // A conversation with no stamp belongs to no link (one started from the Conversations app), so the owner
+    // may use it when its own row-level security let it read the conversation. `ExternalID` is not stamped
+    // here because other features own that column on their conversations (meeting room names, for example).
+    // An anonymous visitor gets no such allowance: the stamp is the only thing that identifies it.
+    if (!principal.IsMagicLinkAnonymous && subject.ConversationExternalID === null && subject.ConversationReadable === true) {
+        return { Allowed: true };
+    }
+    return { Allowed: false, Reason: 'scope_mismatch' };
 }
 /**
  * Loads a session (and its conversation's scope id) under `contextUser`'s identity.
@@ -67,24 +102,96 @@ export async function LoadSessionForAccess(agentSessionId, contextUser, provider
     if (!(await session.Load(agentSessionId))) {
         return null;
     }
-    return { Session: session, ConversationExternalID: await loadConversationExternalID(session, contextUser, provider) };
+    const conversation = await LoadSessionConversationScope(session, contextUser, provider);
+    return { Session: session, ConversationExternalID: conversation.ExternalID, ConversationReadable: conversation.Readable };
 }
-/** Reads the session conversation's `ExternalID`; null when there is no conversation or it cannot be read. */
-async function loadConversationExternalID(session, contextUser, provider) {
+/**
+ * Reads an already-loaded session's conversation under `contextUser` (so its row-level security applies).
+ * A missing conversation, a refused read and a failed read (logged) all report `Readable: false`. For
+ * callers that loaded the session through another gate and only need the scope half of
+ * {@link AuthorizeSessionAccess}'s subject.
+ */
+export async function LoadSessionConversationScope(session, contextUser, provider) {
     if (!session.ConversationID) {
-        return null;
+        return { ExternalID: null, Readable: false };
+    }
+    const { ExternalID, Readable } = await LoadConversationScope(session.ConversationID, contextUser, provider);
+    return { ExternalID, Readable };
+}
+/**
+ * Reads a conversation's owner and scope id under `contextUser` (so its row-level security applies), for a
+ * caller that addresses the conversation directly rather than through a session — a text agent turn, for
+ * example, whose only handle is a message in it. Together with the caller's principal this is exactly the
+ * subject {@link AuthorizeSessionAccess} decides on: `SessionUserID` is the conversation's owner, since the
+ * session a conversation belongs to is owned by the same user.
+ *
+ * An empty id, a missing conversation, a refused read and a failed read (logged) all report
+ * `Readable: false` with no owner, which {@link AuthorizeSessionAccess} then refuses for any scoped caller.
+ */
+export async function LoadConversationScope(conversationId, contextUser, provider) {
+    const unreadable = { UserID: null, ExternalID: null, Readable: false };
+    if (!conversationId) {
+        return unreadable;
     }
     try {
         const conversation = await provider.GetEntityObject(CONVERSATION_ENTITY, contextUser);
-        if (!(await conversation.Load(session.ConversationID))) {
-            return null;
+        if (!(await conversation.Load(conversationId))) {
+            return unreadable;
         }
-        return conversation.ExternalID ?? null;
+        return { UserID: conversation.UserID ?? null, ExternalID: conversation.ExternalID ?? null, Readable: true };
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);
-        LogError(`LoadSessionForAccess: could not read conversation ${session.ConversationID} of session ${session.ID}: ${message}`);
-        return null;
+        LogError(`LoadConversationScope: could not read conversation ${conversationId} for user ${contextUser?.ID}: ${message}`);
+        return unreadable;
     }
 }
+/**
+ * Who may run a conversation turn (a text agent turn, addressed by a message in the conversation) in
+ * `conversationId`, decided the same way as session access.
+ *
+ * A NAMED principal is allowed without a read: its entity permissions and row filters already decided
+ * whether it could load the message, and a named user is fully identified by its `UserID`. An ANONYMOUS
+ * principal is not (see the module doc), so the conversation is read as the caller and
+ * {@link AuthorizeSessionAccess} compares its scope id with the conversation's stamp — the same
+ * decision #5997 applies to the realtime gates, so the text and voice paths agree on ownership.
+ * An unreadable conversation refuses (`not_owner`, there is no owner to match).
+ */
+export async function AuthorizeConversationTurn(conversationId, principal, provider) {
+    if (!principal?.IsMagicLinkAnonymous) {
+        return { Allowed: true };
+    }
+    const scope = await LoadConversationScope(conversationId, principal, provider);
+    return AuthorizeSessionAccess({ SessionUserID: scope.UserID ?? '', ConversationExternalID: scope.ExternalID, ConversationReadable: scope.Readable }, principal);
+}
+/**
+ * Whether an anonymous caller owns any of a LiveKit room's agent sessions — the check MJServer registers with
+ * `RoomAuthorizationService.SetAnonymousSessionOwnerCheck` (`@memberjunction/livekit-room-server` cannot import
+ * this package). Each session is loaded as the caller (its row-level security applies) and decided by
+ * {@link AuthorizeSessionAccess}, the same decision every realtime gate makes, so a room admits exactly the visitor
+ * whose scope id its session's conversation carries (MJ#6044). Nothing to read, or no provider: refused.
+ */
+export async function AuthorizeAnonymousRoomSessions(agentSessionIds, user, provider) {
+    if (agentSessionIds.length === 0 || !provider) {
+        return false;
+    }
+    for (const agentSessionId of agentSessionIds) {
+        const loaded = await LoadSessionForAccess(agentSessionId, user, provider);
+        if (!loaded) {
+            continue;
+        }
+        const decision = AuthorizeSessionAccess({ SessionUserID: loaded.Session.UserID, ConversationExternalID: loaded.ConversationExternalID, ConversationReadable: loaded.ConversationReadable }, user);
+        if (decision.Allowed) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * The session conversation's `ExternalID` alone; null when there is none or it cannot be read.
+ * Prefer {@link LoadSessionConversationScope}, which also says whether the read succeeded.
+ */
+export async function LoadSessionConversationExternalID(session, contextUser, provider) {
+    return (await LoadSessionConversationScope(session, contextUser, provider)).ExternalID;
+}
 //# sourceMappingURL=sessionAccess.js.map

package/dist/realtimeSessions/sessionAccess.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionAccess.js","sourceRoot":"","sources":["../../src/realtimeSessions/sessionAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAqB,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGjE,oFAAoF;AACpF,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AA8BhD;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAClC,OAA6B,EAC7B,SAAoD;IAEpD,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,EAAE,UAAU,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,2FAA2F;QAC3F,6EAA6E;QAC7E,OAAO,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5G,CAAC;IACD,kGAAkG;IAClG,OAAO,OAAO,CAAC,sBAAsB,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AACzH,CAAC;AAUD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,cAAsB,EACtB,WAAqB,EACrB,QAA2B;IAE3B,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAyB,cAAc,EAAE,WAAW,CAAC,CAAC;IACpG,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC1H,CAAC;AAED,8GAA8G;AAC9G,KAAK,UAAU,0BAA0B,CACrC,OAA+B,EAC/B,WAAqB,EACrB,QAA2B;IAE3B,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,WAAW,CAAC,CAAC;QAC5G,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,YAAY,CAAC,UAAU,IAAI,IAAI,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,QAAQ,CAAC,qDAAqD,OAAO,CAAC,cAAc,eAAe,OAAO,CAAC,EAAE,KAAK,OAAO,EAAE,CAAC,CAAC;QAC7H,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC"}
+{"version":3,"file":"sessionAccess.js","sourceRoot":"","sources":["../../src/realtimeSessions/sessionAccess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAqB,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGjE,oFAAoF;AACpF,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,mBAAmB,GAAG,mBAAmB,CAAC;AAwChD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,2BAA2B,CAAC,SAAiC;IACzE,MAAM,UAAU,GAAG,SAAS,CAAC,cAAc,EAAE,UAAU,CAAC;IACxD,IAAI,UAAU,EAAE,CAAC;QACb,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAClG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAClC,OAA6B,EAC7B,SAAoD;IAEpD,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/F,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,OAAO,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,8FAA8F;QAC9F,uEAAuE;QACvE,OAAO,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC5G,CAAC;IACD,kGAAkG;IAClG,IAAI,OAAO,CAAC,sBAAsB,KAAK,OAAO,EAAE,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,qGAAqG;IACrG,yGAAyG;IACzG,yGAAyG;IACzG,uGAAuG;IACvG,wGAAwG;IACxG,+FAA+F;IAC/F,IAAI,CAAC,SAAS,CAAC,oBAAoB,IAAI,OAAO,CAAC,sBAAsB,KAAK,IAAI,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI,EAAE,CAAC;QACtH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;AACxD,CAAC;AAYD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,cAAsB,EACtB,WAAqB,EACrB,QAA2B;IAE3B,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAyB,cAAc,EAAE,WAAW,CAAC,CAAC;IACpG,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,YAAY,CAAC,UAAU,EAAE,oBAAoB,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC;AAC9H,CAAC;AAgBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAC9C,OAA+B,EAC/B,WAAqB,EACrB,QAA2B;IAE3B,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5G,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AACpC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,cAAyC,EACzC,WAAqB,EACrB,QAA2B;IAE3B,MAAM,UAAU,GAAsB,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1F,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,IAAI,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAuB,mBAAmB,EAAE,WAAW,CAAC,CAAC;QAC5G,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,UAAU,CAAC;QACtB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAChH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,QAAQ,CAAC,sDAAsD,cAAc,aAAa,WAAW,EAAE,EAAE,KAAK,OAAO,EAAE,CAAC,CAAC;QACzH,OAAO,UAAU,CAAC;IACtB,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,cAAsB,EACtB,SAAmB,EACnB,QAA2B;IAE3B,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/E,OAAO,sBAAsB,CACzB,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,sBAAsB,EAAE,KAAK,CAAC,UAAU,EAAE,oBAAoB,EAAE,KAAK,CAAC,QAAQ,EAAE,EACrH,SAAS,CACZ,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAChD,eAAyB,EACzB,IAAc,EACd,QAAuC;IAEvC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,cAAc,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,SAAS;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,sBAAsB,CACnC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,EAClJ,IAAI,CACP,CAAC;QACF,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,OAA+B,EAC/B,WAAqB,EACrB,QAA2B;IAE3B,OAAO,CAAC,MAAM,4BAA4B,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;AAC3F,CAAC"}

package/dist/realtimeSessions/sessionConfigStamps.js

@@ -84,7 +84,7 @@ export async function LoadInheritedVerifiedIdentity(lastSessionId, contextUser,
     if (!prior) {
         return undefined;
     }
-    const decision = AuthorizeSessionAccess({ SessionUserID: prior.Session.UserID, ConversationExternalID: prior.ConversationExternalID }, contextUser);
+    const decision = AuthorizeSessionAccess({ SessionUserID: prior.Session.UserID, ConversationExternalID: prior.ConversationExternalID, ConversationReadable: prior.ConversationReadable }, contextUser);
     if (decision.Allowed === false) {
         return undefined;
     }

package/dist/realtimeSessions/sessionConfigStamps.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessionConfigStamps.js","sourceRoot":"","sources":["../../src/realtimeSessions/sessionConfigStamps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EACH,mDAAmD,EACnD,mCAAmC,EACnC,sBAAsB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACH,iBAAiB,EACjB,6BAA6B,EAC7B,8BAA8B,GAGjC,MAAM,uBAAuB,CAAC;AAO/B;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAKrC;IACG,MAAM,KAAK,GAAG,mDAAmD,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,aAAa,GAAG,6BAA6B,CAAC,IAAI,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACjH,MAAM,KAAK,GAA8B;QACrC,GAAG,aAAa;QAChB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAClI,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,UAAU;QAC1B,CAAC,CAAC,sBAAsB,CAAC,OAAO,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,GAAG,UAAU,GAAG,IAAI,CAAC;QAC7H,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,EAAE,aAAa,EAAE,8BAA8B,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;AACzG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAC/C,aAAiC,EACjC,WAAqB,EACrB,QAA2B;IAE3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CACnC,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,EAAE,EAC7F,WAAW,CACd,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC,QAAQ,CAAC;AAC9G,CAAC"}
+{"version":3,"file":"sessionConfigStamps.js","sourceRoot":"","sources":["../../src/realtimeSessions/sessionConfigStamps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EACH,mDAAmD,EACnD,mCAAmC,EACnC,sBAAsB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACH,iBAAiB,EACjB,6BAA6B,EAC7B,8BAA8B,GAGjC,MAAM,uBAAuB,CAAC;AAO/B;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAKrC;IACG,MAAM,KAAK,GAAG,mDAAmD,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,aAAa,GAAG,6BAA6B,CAAC,IAAI,CAAC,iBAAiB,EAAE,mCAAmC,CAAC,CAAC;IACjH,MAAM,KAAK,GAA8B;QACrC,GAAG,aAAa;QAChB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAClI,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAC5F,MAAM,WAAW,GAAG,UAAU;QAC1B,CAAC,CAAC,sBAAsB,CAAC,OAAO,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,GAAG,UAAU,GAAG,IAAI,CAAC;QAC7H,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,EAAE,aAAa,EAAE,8BAA8B,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;AACzG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAC/C,aAAiC,EACjC,WAAqB,EACrB,QAA2B;IAE3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CACnC,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,KAAK,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE,EAC/I,WAAW,CACd,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,6BAA6B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,mCAAmC,CAAC,CAAC,QAAQ,CAAC;AAC9G,CAAC"}

package/dist/realtimeSessions/subscriptionAuthorization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subscriptionAuthorization.d.ts","sourceRoot":"","sources":["../../src/realtimeSessions/subscriptionAuthorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAsB,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAgD,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC/G,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AAEzF;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IACzC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC7B;AAUD;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAC9C,OAAO,EAAE,gCAAgC,CAAC;IAC1C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,EAAE,4BAA4B,GAAG,SAAS,CAAC;CACrD,GAAG,OAAO,CAUV;AAED,0FAA0F;AAC1F,MAAM,WAAW,6BAA6B;IAC1C,mDAAmD;IACnD,WAAW,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,KAAK,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC7H,2FAA2F;IAC3F,WAAW,EAAE,MAAM,iBAAiB,CAAC;CACxC;AAED,+BAA+B;AAC/B,eAAO,MAAM,uCAAuC,EAAE,6BAGrD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,oCAAoC,CACtD,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,4BAA4B,GAAG,SAAS,EACjD,IAAI,GAAE,6BAAuE,GAC9E,OAAO,CAAC,MAAM,CAAC,CAmBjB"}
+{"version":3,"file":"subscriptionAuthorization.d.ts","sourceRoot":"","sources":["../../src/realtimeSessions/subscriptionAuthorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,iBAAiB,EAAsB,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEvF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAgD,KAAK,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC/G,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AAEzF;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,4BAA4B;IACzC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC7B;AAUD;;;;;;;;;GASG;AACH,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAC9C,OAAO,EAAE,gCAAgC,CAAC;IAC1C,IAAI,EAAE,yBAAyB,CAAC;IAChC,OAAO,EAAE,4BAA4B,GAAG,SAAS,CAAC;CACrD,GAAG,OAAO,CAYV;AAED,0FAA0F;AAC1F,MAAM,WAAW,6BAA6B;IAC1C,mDAAmD;IACnD,WAAW,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,KAAK,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;IAC7H,2FAA2F;IAC3F,WAAW,EAAE,MAAM,iBAAiB,CAAC;CACxC;AAED,+BAA+B;AAC/B,eAAO,MAAM,uCAAuC,EAAE,6BAGrD,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAsB,oCAAoC,CACtD,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,4BAA4B,GAAG,SAAS,EACjD,IAAI,GAAE,6BAAuE,GAC9E,OAAO,CAAC,MAAM,CAAC,CAmBjB"}

package/dist/realtimeSessions/subscriptionAuthorization.js

@@ -34,7 +34,10 @@ export function RealtimeSessionEventsFilter(data) {
     if (typeof args?.agentSessionId !== 'string' || !payload?.AgentSessionID || !UUIDsEqual(payload.AgentSessionID, args.agentSessionId)) {
         return false;
     }
-    const decision = AuthorizeSessionAccess({ SessionUserID: payload.OwnerUserID, ConversationExternalID: payload.ScopeKey }, connectionPrincipal(context));
+    const decision = AuthorizeSessionAccess(
+    // Readability is per caller and was proven when this subscription opened (it only receives events for
+    // that one session); the snapshot carries just the stamp, so a null ScopeKey stays usable by that owner.
+    { SessionUserID: payload.OwnerUserID, ConversationExternalID: payload.ScopeKey, ConversationReadable: true }, connectionPrincipal(context));
     return decision.Allowed;
 }
 /** Production dependencies. */
@@ -61,7 +64,7 @@ export async function AuthorizeRealtimeSessionSubscription(args, context, deps =
     if (!loaded) {
         throw new Error(REFUSAL_MESSAGE);
     }
-    const decision = AuthorizeSessionAccess({ SessionUserID: loaded.Session.UserID, ConversationExternalID: loaded.ConversationExternalID }, principal);
+    const decision = AuthorizeSessionAccess({ SessionUserID: loaded.Session.UserID, ConversationExternalID: loaded.ConversationExternalID, ConversationReadable: loaded.ConversationReadable }, principal);
     if (decision.Allowed === false) {
         LogError(`RealtimeSessionEvents: refused subscription by user ${principal.ID} to session ${agentSessionId} (${decision.Reason}).`);
         throw new Error(REFUSAL_MESSAGE);

package/dist/realtimeSessions/subscriptionAuthorization.js.map

@@ -1 +1 @@
-{"version":3,"file":"subscriptionAuthorization.js","sourceRoot":"","sources":["../../src/realtimeSessions/subscriptionAuthorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAqB,QAAQ,EAAE,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAA+B,MAAM,oBAAoB,CAAC;AAmB/G,gGAAgG;AAChG,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,mEAAmE;AACnE,SAAS,mBAAmB,CAAC,OAAiD;IAC1E,OAAO,OAAO,EAAE,WAAW,EAAE,UAAkC,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAI3C;IACG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACxC,IAAI,OAAO,IAAI,EAAE,cAAc,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,cAAc,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACnI,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CACnC,EAAE,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,sBAAsB,EAAE,OAAO,CAAC,QAAQ,EAAE,EAChF,mBAAmB,CAAC,OAAO,CAAC,CAC/B,CAAC;IACF,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC5B,CAAC;AAUD,+BAA+B;AAC/B,MAAM,CAAC,MAAM,uCAAuC,GAAkC;IAClF,WAAW,EAAE,oBAAoB;IACjC,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,oFAAoF;CAC7H,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACtD,IAA+B,EAC/B,OAAiD,EACjD,OAAsC,uCAAuC;IAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,IAAI,CAAC,SAAS,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CACnC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,EAAE,EAC/F,SAAS,CACZ,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,uDAAuD,SAAS,CAAC,EAAE,eAAe,cAAc,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QACnI,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,cAAc,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"subscriptionAuthorization.js","sourceRoot":"","sources":["../../src/realtimeSessions/subscriptionAuthorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAqB,QAAQ,EAAE,QAAQ,EAAY,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEjE,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAA+B,MAAM,oBAAoB,CAAC;AAmB/G,gGAAgG;AAChG,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAEtD,mEAAmE;AACnE,SAAS,mBAAmB,CAAC,OAAiD;IAC1E,OAAO,OAAO,EAAE,WAAW,EAAE,UAAkC,CAAC;AACpE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CAAC,IAI3C;IACG,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACxC,IAAI,OAAO,IAAI,EAAE,cAAc,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,cAAc,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACnI,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB;IACnC,sGAAsG;IACtG,yGAAyG;IACzG,EAAE,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,sBAAsB,EAAE,OAAO,CAAC,QAAQ,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAC5G,mBAAmB,CAAC,OAAO,CAAC,CAC/B,CAAC;IACF,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC5B,CAAC;AAUD,+BAA+B;AAC/B,MAAM,CAAC,MAAM,uCAAuC,GAAkC;IAClF,WAAW,EAAE,oBAAoB;IACjC,WAAW,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,oFAAoF;CAC7H,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oCAAoC,CACtD,IAA+B,EAC/B,OAAiD,EACjD,OAAsC,uCAAuC;IAE7E,MAAM,SAAS,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAG,IAAI,EAAE,cAAc,CAAC;IAC5C,IAAI,CAAC,SAAS,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,sBAAsB,CACnC,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,EAAE,EAClJ,SAAS,CACZ,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7B,QAAQ,CAAC,uDAAuD,SAAS,CAAC,EAAE,eAAe,cAAc,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QACnI,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,cAAc,CAAC;AAC1B,CAAC"}

package/dist/realtimeSessions/verificationWorkflow.d.ts

@@ -64,6 +64,8 @@ export interface SessionSnapshot {
     OwnerUserID: string;
     /** `Conversation.ExternalID` (anonymous scope id), or null. */
     ConversationExternalID: string | null;
+    /** Whether the caller could read the session's conversation. */
+    ConversationReadable: boolean;
     Status: 'Active' | 'Idle' | 'Closed';
     /** `AIAgentSession.Config` as stored. */
     ConfigRaw: string | null;

package/dist/realtimeSessions/verificationWorkflow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verificationWorkflow.d.ts","sourceRoot":"","sources":["../../src/realtimeSessions/verificationWorkflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAuB,KAAK,iBAAiB,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAElG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAGjF,OAAO,EAKH,KAAK,0BAA0B,EAElC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAWH,KAAK,gBAAgB,EACxB,MAAM,uBAAuB,CAAC;AAK/B,6GAA6G;AAC7G,MAAM,MAAM,kBAAkB,GACxB;IACI,IAAI,EAAE,WAAW,CAAC;IAClB,2GAA2G;IAC3G,WAAW,EAAE,QAAQ,CAAC;IACtB,mCAAmC;IACnC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAEjF,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,yCAAyC;IACzC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,qGAAqG;AACrG,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,KAAK;IAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC;AAE3G,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACnC,yFAAyF;IACzF,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,qDAAqD;IACrD,SAAS,EAAE,OAAO,CAAC;IACnB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAwB;AACxB,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CAChB;AAED,iEAAiE;AACjE,MAAM,WAAW,sBAAsB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACjC,kGAAkG;IAClG,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,cAAc,EAAE,0BAA0B,CAAC;IAC3C,6FAA6F;IAC7F,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,qDAAqD;IACrD,UAAU,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,sBAAsB,EAAE,MAAM,CAAC;KAClC,CAAC;CACL;AAED,4CAA4C;AAC5C,MAAM,WAAW,iBAAiB;IAC9B,WAAW,IAAI,oBAAoB,CAAC;IACpC,8BAA8B;IAC9B,GAAG,IAAI,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACjG,2GAA2G;IAC3G,mBAAmB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACxI,qEAAqE;IACrE,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtF,oEAAoE;IACpE,eAAe,CACX,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EACjF,OAAO,EAAE,4BAA4B,GACtC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,+CAA+C;IAC/C,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAID,yEAAyE;AACzE,MAAM,MAAM,qBAAqB,GAC3B,0BAA0B,GAC1B,eAAe,GACf,eAAe,GACf,mBAAmB,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,oBAAoB,GACpB,cAAc,GACd,mBAAmB,GACnB,yBAAyB,GACzB,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,cAAc,GACd,gBAAgB,CAAC;AAEvB,8BAA8B;AAC9B,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAAG,SAAS,GAAG,UAAU,CAAC;AAE1E,0CAA0C;AAC1C,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,6GAA6G;IAC7G,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAClC;AAoCD;;GAEG;AACH,qBAAa,mCAAmC;IAOhC,OAAO,CAAC,QAAQ,CAAC,KAAK;IANlC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;gBAE7B,KAAK,EAAE,iBAAiB;IAQrD,0CAA0C;IAC1C,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED;;;;;OAKG;IACU,mBAAmB,CAC5B,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC9D,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,2BAA2B,CAAC;IA4BvC;;;OAGG;IACU,UAAU,CACnB,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAC/C,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,2BAA2B,CAAC;IA4BvC;;;;OAIG;IACU,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,kBAAkB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAanI;;;;OAIG;IACU,SAAS,CAAC,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA0BxH,+FAA+F;IAC/F,OAAO,CAAC,oBAAoB;IAoB5B,gGAAgG;IAChG,OAAO,CAAC,mBAAmB;IAgB3B,wGAAwG;YAC1F,YAAY;IAmD1B,wGAAwG;IACxG,OAAO,CAAC,mBAAmB;IAe3B,mGAAmG;YACrF,eAAe;IAgB7B;;;;OAIG;YACW,MAAM;IAuCpB,iGAAiG;YACnF,oBAAoB;IA2ClC,0EAA0E;IAC1E,OAAO,CAAC,aAAa;IAwBrB;;;;OAIG;YACW,SAAS;IA2BvB,wFAAwF;YAC1E,eAAe;CAmBhC"}
+{"version":3,"file":"verificationWorkflow.d.ts","sourceRoot":"","sources":["../../src/realtimeSessions/verificationWorkflow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAuB,KAAK,iBAAiB,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAElG,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAGjF,OAAO,EAKH,KAAK,0BAA0B,EAElC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAWH,KAAK,gBAAgB,EACxB,MAAM,uBAAuB,CAAC;AAK/B,6GAA6G;AAC7G,MAAM,MAAM,kBAAkB,GACxB;IACI,IAAI,EAAE,WAAW,CAAC;IAClB,2GAA2G;IAC3G,WAAW,EAAE,QAAQ,CAAC;IACtB,mCAAmC;IACnC,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,2DAA2D;AAC3D,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC;AAEjF,+DAA+D;AAC/D,MAAM,WAAW,eAAe;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,gEAAgE;IAChE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;IACrC,yCAAyC;IACzC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;CACvB;AAED,qGAAqG;AACrG,MAAM,MAAM,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,KAAK;IAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,CAAC,CAAA;CAAE,CAAC;AAE3G,+DAA+D;AAC/D,MAAM,WAAW,oBAAoB,CAAC,CAAC;IACnC,yFAAyF;IACzF,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,qDAAqD;IACrD,SAAS,EAAE,OAAO,CAAC;IACnB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAwB;AACxB,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CAChB;AAED,iEAAiE;AACjE,MAAM,WAAW,sBAAsB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACjC,kGAAkG;IAClG,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,4CAA4C;IAC5C,cAAc,EAAE,0BAA0B,CAAC;IAC3C,6FAA6F;IAC7F,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,qDAAqD;IACrD,UAAU,EAAE;QACR,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,aAAa,EAAE,MAAM,CAAC;QACtB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,sBAAsB,EAAE,MAAM,CAAC;KAClC,CAAC;CACL;AAED,4CAA4C;AAC5C,MAAM,WAAW,iBAAiB;IAC9B,WAAW,IAAI,oBAAoB,CAAC;IACpC,8BAA8B;IAC9B,GAAG,IAAI,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACjG,2GAA2G;IAC3G,mBAAmB,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACxI,qEAAqE;IACrE,SAAS,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtF,oEAAoE;IACpE,eAAe,CACX,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EACjF,OAAO,EAAE,4BAA4B,GACtC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,+CAA+C;IAC/C,UAAU,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAID,yEAAyE;AACzE,MAAM,MAAM,qBAAqB,GAC3B,0BAA0B,GAC1B,eAAe,GACf,eAAe,GACf,mBAAmB,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,oBAAoB,GACpB,cAAc,GACd,mBAAmB,GACnB,yBAAyB,GACzB,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,cAAc,GACd,gBAAgB,CAAC;AAEvB,8BAA8B;AAC9B,MAAM,MAAM,qBAAqB,GAAG,YAAY,GAAG,SAAS,GAAG,UAAU,CAAC;AAE1E,0CAA0C;AAC1C,MAAM,WAAW,2BAA2B;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,6GAA6G;IAC7G,iBAAiB,EAAE,qBAAqB,CAAC;IACzC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAClC;AAoCD;;GAEG;AACH,qBAAa,mCAAmC;IAOhC,OAAO,CAAC,QAAQ,CAAC,KAAK;IANlC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;IACxD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA2B;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoC;gBAE7B,KAAK,EAAE,iBAAiB;IAQrD,0CAA0C;IAC1C,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED;;;;;OAKG;IACU,mBAAmB,CAC5B,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC9D,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,2BAA2B,CAAC;IA4BvC;;;OAGG;IACU,UAAU,CACnB,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAC/C,MAAM,EAAE,eAAe,GACxB,OAAO,CAAC,2BAA2B,CAAC;IA4BvC;;;;OAIG;IACU,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,kBAAkB,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,2BAA2B,CAAC;IAanI;;;;OAIG;IACU,SAAS,CAAC,KAAK,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA0BxH,+FAA+F;IAC/F,OAAO,CAAC,oBAAoB;IAoB5B,gGAAgG;IAChG,OAAO,CAAC,mBAAmB;IAgB3B,wGAAwG;YAC1F,YAAY;IAmD1B,wGAAwG;IACxG,OAAO,CAAC,mBAAmB;IAe3B,mGAAmG;YACrF,eAAe;IAgB7B;;;;OAIG;YACW,MAAM;IAuCpB,iGAAiG;YACnF,oBAAoB;IA2ClC,0EAA0E;IAC1E,OAAO,CAAC,aAAa;IAwBrB;;;;OAIG;YACW,SAAS;IA2BvB,wFAAwF;YAC1E,eAAe;CAmBhC"}

package/dist/realtimeSessions/verificationWorkflow.js

@@ -395,7 +395,7 @@ export class RealtimeSessionVerificationWorkflow {
         if (!session) {
             return notFound;
         }
-        const decision = AuthorizeSessionAccess({ SessionUserID: session.OwnerUserID, ConversationExternalID: session.ConversationExternalID }, caller.ContextUser);
+        const decision = AuthorizeSessionAccess({ SessionUserID: session.OwnerUserID, ConversationExternalID: session.ConversationExternalID, ConversationReadable: session.ConversationReadable }, caller.ContextUser);
         if (decision.Allowed === false) {
             LogError(`RealtimeSessionVerification: refused user ${caller.ContextUser.ID} on session ${agentSessionId} (${decision.Reason}).`);
             return notFound;