Delete Session
Sessions
Delete Session
Soft-delete a session and cascade to its messages.
Delegates to the conversation service’s soft_delete_session,
which sets is_active = False AND deleted_at = now on the
session and on its active messages in one transaction (anchoring the
30-day purge window). Returns 404 when the session is not owned by
the authenticated user so cross-tenant existence is not leaked.
IDOR AUDIT PASS — the service filters every write by user_id.
DELETE
Delete Session
