using Backend.Domain; using Backend.Security; namespace Backend.Endpoints; internal static class AdminEndpointConventions { public static UserSession CurrentSession(HttpContext context) => context.GetCurrentSession() ?? throw new InvalidOperationException("Admin session missing from request context."); }