[hercemer42]

A single-record action triggered on several record ids now answers 422 ("This action can only be triggered on one record at a time.") instead of running on the first record and answering success.

Refs: PRD-1704

What changes

1. A single-record action on two or more ids. Before: the action ran on the first record only and answered success, so the other records were skipped and nobody was told. After: 422, and nothing runs.
2. The same request on an action that requires approval. Before: the agent asked for an approval, so the caller created an approval request that later ran on the first record only. After: 422 at submit time, before the permission check, so no approval request is created. Approving one already stored with several ids answers 422 too.
3. A single-record action on a select-all selection. Before: it ran on whichever record came first. After: 422. The UI already disables single-record actions on a select-all, so it never sends this.
4. Loading a single-record action's form with several ids (/hooks/load, /hooks/change, /hooks/search). Before: the form loaded against the first record. After: 422.

A single-record action on exactly one id and a bulk action on several ids behave as before. The test asserting that audited ids are narrowed to the caller's authorized subset sent two ids to a single-record action, which is now refused, so it moved to the bulk-action block it actually describes.

Definition of Done

General

• Write an explicit title for the Pull Request, following Conventional Commits specification
• Test manually the implemented changes
• Validate the code quality (indentation, syntax, style, simplicity, readability)

Security

• Consider the security impact of the changes made

Squash message

fix(agent): refuse a single-record action given several records

A single-record action triggered on several record ids ran on the first
record only and answered success, skipping the others silently; approving
an approval request naming several ids did the same.

The action route now answers 422 for a single-record action whose
selection names more than one id or is a select-all, before the
authorization check, on execute and on the form hooks alike.

🤖 Generated with Claude Code

Note

Reject multi-record selections for single-record actions in ActionRoute

Single-scope actions now return an UnprocessableError when the selection is select-all, uses excluded records, or contains more than one ID. The check runs in the action-filter builder in action.ts before the selection filter is applied, covering direct requests, approval flows, and form-load hooks.

• Adds tests for two-ID requests, approval-required execution, signed approvals with two IDs, and select-all/excluded selections; each asserts execution does not run and approval authorization is not requested
• Adds a load-hook test verifying rejection happens before getForm is called
• Risk: clients that previously sent multiple IDs to a Single action will now get a 422 instead of the action applying to one record

Changes since #2028 opened

• Tightened validation in ActionRoute class to reject 'Single' scope actions when the selection is either excluded or does not contain exactly one record identifier [a3a5ec7]
• Added test coverage for 'Single' scope actions receiving empty selections [a3a5ec7]

^{Macroscope summarized 2054676.}

[linear-code]

PRD-1704

[qltysh]

Coverage Impact

This PR will not change total coverage.

Modified Files with Diff Coverage (1)

Rating	File	% Diff	Uncovered Line #s
	packages/agent/src/routes/modification/action/action.ts	100.0%
	Total	100.0%

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

[hercemer42]

Spec (PRD-1704): conforms.

[matthv]

Spec (PRD-1704): conforms.

[Scra3]

Approved after /validator run 2028-20261022165445-Scra3: nothing blocking posted, 0 preferential or code style, 0 suppressed below all.