Method userOwnsAgent

internal/identity/store.go:3453–3460

userOwnsAgent reports whether agentID exists and is owned by userID.

(ctx context.Context, agentID, userID string)

// userOwnsAgent reports whether agentID exists and is owned by userID.
func (s *Store) userOwnsAgent(ctx context.Context, agentID, userID string) (bool, error) {
	var exists bool
	err := s.pool.QueryRow(ctx,
		`SELECT EXISTS(SELECT 1 FROM agent_identities WHERE id = $1 AND user_id = $2)`,
		agentID, userID,
	).Scan(&exists)
	return exists, err
}

func (s *Store) ListAPIKeys(ctx context.Context, userID string) ([]APIKey, error) {
	rows, err := s.pool.Query(ctx,