Session Context Revoke

context_id is a UUID path parameter. Requires a current user token (and DPoP for bound tokens). Only an active context belonging to the same user and sid can close. Repeating deletion of a closed context returns ACCESS_DENIED. Does not close SSO, client sessions or sibling contexts. Records an audit entry in the same transaction. Records a snapshot invalidation intent in the same transaction, then attempts cache eviction after commit. Worker retries retain the durable intent on failure; sibling contexts stay active.

DELETE /api/sessions/contexts/{context_id}