kill_session
- Category: auth
- Access: write
- Audience: administrative (ordinary users do not normally call this directly)
Purpose
Revokes one live session immediately. Call it to cut off a single compromised or stuck session without touching its principal.
Arguments
Required: session_id.
Optional: reason.
-
session_id. -
reason.
Result
Object with killed (echoed session_id) and matched (1 revoked, 0 untouched).
Boundaries
Conductor role required. Any live session may be targeted; the killed session denies on its very next operation.
Lifecycle / side effects
Moves one live session entry to revoked with timestamp and reason. The principal entry is untouched.
Errors
Non-conductor callers get a requires-conductor error payload. Missing session_id is a tool error. Unknown or already-dead sessions report matched 0.
Example
{
"session_id": "<uuid>"
}
Result shape:
{
"killed": "<uuid>",
"matched": 1
}