Method resolveAgentForUser

internal/agent/api.go:870–879

resolveAgentForUser loads an agent by email address and verifies the user owns it.

(r *http.Request, email string, user *identity.User)

// resolveAgentForUser loads an agent by email address and verifies the user owns it.
func (a *API) resolveAgentForUser(r *http.Request, email string, user *identity.User) (*identity.AgentIdentity, error) {
	agent, err := a.store.GetAgentByEmail(r.Context(), email)
	if err != nil {
		return nil, fmt.Errorf("agent not found")
	}
	if agent.UserID != user.ID {
		return nil, fmt.Errorf("forbidden")
	}
	return agent, nil
}

// --- Domain Management ---