2005406 - Clarify sessionId vs flowId terminology for AI Window Security Layer

Status: RESOLVED FIXED

(Core :: Machine Learning: General, task)

Description

[Randy Concepcion]

The security layer uses sessionId to identify AI Window sessions. Telemetry uses flowId for a similar concept. We should check with @thasan whether these refer to the same thing, and if so, align on consistent terminology to avoid confusion.

Reference

• toolkit/components/ml/MLTelemetry.sys.mjs contains flowId

Acceptance Criteria:

• Clarification from @thasan on whether sessionId and flowId are the same concept
• If they are the same, update security layer code and docs with consistent terminology

Comment 1

[Randy Concepcion]

Confirmed with @thasan: flowId comes from pipelineOptions.flowId if provided; otherwise MLTelemetry auto-generates a new UUID. Each feature owns its flowId lifecycle (ephemeral vs persistent). For AI Window session-level tracking, AI Window should generate a persistent ID per session and pass it via pipelineOptions.flowId. No terminology changes needed in the security layer at this time.