Method requireAgentAccess

internal/httpapi/scope.go:54–64

requireAgentAccess authenticates the caller and confirms it may act as agentID. Account-scoped credentials may act as any agent they own (ownership is still checked separately by the handler). An agent-scoped credential is pinned: it may act ONLY as the single agent it is bound to — any other agent

(ctx context.Context, agentID string)

// pinned: it may act ONLY as the single agent it is bound to — any other agent
// is 403, even if the same owner owns both.
func (s *Server) requireAgentAccess(ctx context.Context, agentID string) (*identity.Principal, error) {
	p, err := s.requirePrincipal(ctx)
	if err != nil {
		return nil, err
	}
	if p.Scope == identity.ScopeAgent && p.AgentID != agentID {
		return nil, NewError(http.StatusForbidden, "forbidden",
			"this agent-scoped credential is bound to a different agent")
	}
	return p, nil
}