How to use Session

What this section is for

Creates an agent session, sets its goal and execution mode, and shows the timeline, approvals, result and budget usage.

Before you start

You need access to IAM.Core, the correct tenant/workspace and permission to change this configuration. Prepare a non-sensitive example value such as Проверь доступность tools и верни краткий отчёт без изменений.

Buttons and forms

Control	What it does
Run	Runs a check or dry run so the result can be reviewed before production use.
Cancel	Stops or pauses the current operation without deleting its configuration.
Mode	Performs the action named in the interface. Review the resulting state or message before continuing.
Approve	Performs the action named in the interface. Review the resulting state or message before continuing.
Deny	Performs the action named in the interface. Review the resulting state or message before continuing.

Form fields

Field	Safe example	Input rule
`Goal`	`Проверь health зарегистрированных tools`	Describe the result and constraint; do not paste secrets.
`Mode`	`ask`	For the first run use a mode that requires approval for write/execute.

Primary path in the interface

Open the application link above and sign in with the least-privileged role required for this section.
Select the intended tenant or workspace. Do not continue while the header shows a different tenant.
In the navigation, click Session. The expected address is https://core.iamrouter.ru.
Click Run. Enter the documented safe values: Goal = Проверь health зарегистрированных tools, Mode = ask. Do not paste a production secret into a free-text field.
Review every field before the final Save, Run, Publish or Confirm action. If a preview or validation control exists, run it first.
Review the validation message or changed row. The result must match this purpose: Creates an agent session, sets its goal and execution mode, and shows the timeline, approvals, result and budget usage.
Only then continue to the next dependent section. Copy the request/correlation ID when the interface shows one.

Second path: direct link and CLI/API

Open the deep link https://core.iamrouter.ru instead of navigating through the sidebar.
Confirm the tenant/workspace after the page loads; a deep link must not silently switch scope.
Before automating the API path, run this product-specific read-only or validation command. It proves reachability but does not bypass application permissions:

export IAM_CORE_URL=https://core.iamrouter.ru
curl --fail --silent --show-error "$IAM_CORE_URL/healthz"

How to verify the result

The session reaches a final status, the timeline contains every tool call and the result matches the stated goal.

If it did not work

Symptom	What to do
401 / sign-in screen	Sign in again, then return to this page. Do not put a session token in a URL.
403	Check the selected tenant and request the documented role; retrying with the same role will not help.
404	Verify the exact path and whether the feature is enabled in this environment.
409	Search for an object named `Проверь доступность tools и верни краткий отчёт без изменений`; continue with it or choose a unique name.
422 / validation error	Correct only the highlighted fields. Keep identifiers lowercase unless the form explicitly allows otherwise.
429	Wait for the displayed retry interval or reduce the request scope; do not start parallel retries.
5xx / timeout	Refresh once after the server has recovered; do not repeat a destructive action while its result is unknown. Save the correlation ID and timestamp for support.