Method ownerOfPending

mcp/src/client.ts:301–314

(messageId: string)

  // only /v1/reviews/{id}, which 403s an agent-scoped credential. For a pinned
  // session this is one list call.
  private async ownerOfPending(messageId: string): Promise<string> {
    const addresses = this.agentEmail
      ? [this.agentEmail]
      : (await this.listAgents()).map((a) => a.email);
    for (const address of addresses) {
      const rows = await this.sdk.messages
        .list(address, { direction: "outbound" })
        .toArray({ limit: DEFAULT_LIST_LIMIT });
      if (rows.some((r) => r.messageId === messageId)) return address;
    }
    throw new Error(
      `pending message ${messageId} not found on any owned agent (it may have already been approved, rejected, or expired).`,
    );
  }

  async getPendingMessage(messageId: string): Promise<MessageView> {
    // Runtime-tier (agent-visible): use the agent-reachable messages path, not