Method UpdateAgentScanConfig

internal/identity/scanconfig.go:95–119

UpdateAgentScanConfig writes the full screening config for an agent owned by userID, validating the effective posture first. Returns an error if the agent isn't found or isn't owned by the user.

(ctx context.Context, agentID, userID string, c ScanConfig)

// userID, validating the effective posture first. Returns an error if the agent
// isn't found or isn't owned by the user.
func (s *Store) UpdateAgentScanConfig(ctx context.Context, agentID, userID string, c ScanConfig) error {
	if err := ValidateScanConfig(c); err != nil {
		return err
	}
	tag, err := s.pool.Exec(ctx,
		`UPDATE agent_identities SET
		    inbound_policy_action = $3,
		    outbound_policy = $4, outbound_allowlist = $5, outbound_policy_action = $6,
		    inbound_scan = $7, inbound_scan_review_threshold = $8, inbound_scan_block_threshold = $9,
		    outbound_scan = $10, outbound_scan_review_threshold = $11, outbound_scan_block_threshold = $12
		  WHERE id = $1 AND user_id = $2`,
		agentID, userID,
		c.InboundPolicyAction,
		c.OutboundPolicy, c.OutboundAllowlist, c.OutboundPolicyAction,
		c.InboundScan, c.InboundScanReviewThreshold, c.InboundScanBlockThreshold,
		c.OutboundScan, c.OutboundScanReviewThreshold, c.OutboundScanBlockThreshold,
	)
	if err != nil {
		return err
	}
	if tag.RowsAffected() == 0 {
		return fmt.Errorf("agent not found or not owned by user")
	}
	return nil
}