Method resolveHeldDirection

internal/httpapi/hitl.go:73–82

resolveHeldDirection looks up a held message scoped to the resolved owned agent and reports whether it is inbound. It returns (meta, true, nil) for an inbound hold (route to the release path), (nil, false, nil) for an outbound hold (fall through to the send-approval path), or a 404 envelope when the

(ctx context.Context, messageID, agentID string)

// exist for this agent. When the GetReviewMessage dep is not wired the endpoints
// stay outbound-only (pre-slice-3 behavior).
func (s *Server) resolveHeldDirection(ctx context.Context, messageID, agentID string) (*identity.ReviewMessageMeta, bool, error) {
	if s.deps.GetReviewMessage == nil {
		return nil, false, nil
	}
	meta, err := s.deps.GetReviewMessage(ctx, messageID, agentID)
	if err != nil || meta == nil {
		return nil, false, NewError(http.StatusNotFound, "not_found", "message not found")
	}
	return meta, meta.Direction == "inbound", nil
}

func (s *Server) handleApprove(ctx context.Context, in *approveInput) (*approveOutput, error) {
	// HITL approval is an account-owner action. An agent-scoped credential