Method requireAgentSessionTaskLease

internal/task/block_service.go:196–255

(ctx context.Context, taskID string, actor ActorContext)

}

func (m *Service) requireAgentSessionTaskLease(ctx context.Context, taskID string, actor ActorContext) error {
	if actor.Actor.Kind.Normalize() != ActorKindAgentSession {
		return nil
	}
	sessionID := strings.TrimSpace(actor.Actor.Ref)
	normalizedTaskID := strings.TrimSpace(taskID)
	if sessionID == "" {
		return autonomyError(AutonomySessionRequired, ErrPermissionDenied, "agent session identity is required")
	}
	if normalizedTaskID == "" {
		return fmt.Errorf("%w: task.id is required", ErrValidation)
	}
	leaseStore, ok := m.store.(AutonomyLeaseStore)
	if !ok {
		return errors.New("task: autonomy lease lookup store is unavailable")
	}
	handles, err := leaseStore.ListAutonomyLeaseHandles(ctx, sessionID)
	if err != nil {
		return err
	}
	activeCount := 0
	matched := false
	now := m.now().UTC()
	for _, handle := range handles {
		normalized := normalizeAutonomyLeaseHandle(handle)
		if !isScopedTaskLeaseActive(normalized, sessionID, now) {
			continue
		}
		activeCount++
		if normalized.TaskID == normalizedTaskID {
			matched = true
		}
	}
	switch {
	case activeCount > 1:
		return autonomyError(
			AutonomyLeaseAlreadyHeld,
			ErrActiveRunLease,
			"session %q owns multiple active task-run leases",
			sessionID,
		)
	case matched:
		return nil
	case activeCount == 1:
		return autonomyError(
			AutonomyForeignRun,
			ErrPermissionDenied,
			"task %q is not leased by session %q",
			normalizedTaskID,
			sessionID,
		)
	default:
		return autonomyError(
			AutonomyNoActiveLease,
			ErrInvalidClaimToken,
			"session %q has no active task-run lease",
			sessionID,
		)