refactor(agents): allow root-scoped sessions