Mint a short-lived resume token to reconnect to a live session (TASK-S21-003)
POST
/api/sessions/{session_id}/ws-token/resume
Mint a 30-second single-use resume token so the browser can reconnect.
The caller must be the original session owner. The session must still be ACTIVE with ended_at IS NULL. The gateway must have a live grace context for the session (checked by the gateway when the token is used).
Authz: org member + must be the session’s user_id.
Errors
403 — caller is not the session owner. 404 — session not found in this org. 409 — session already ended. 502 — gateway error.
Audit
Appends EVT_SESSION_RESUMED with hash chain intact.
Authorizations
Parameters
Path Parameters
session_id
required
string format: uuid
Query Parameters
organization_id
required
string format: uuid
Responses
200
Successful Response
Response body for POST /sessions/{id}/ws-token/resume.
object
expires_at
required
string format: date-time
resume_token
required
string
ws_resume_path
required
string
422
Validation Error
object
detail
Array<object>
object
loc
required
Array
msg
required
string
type
required
string