[Bug]: agent delete doesn't delete associated sessions

[anasalatasiuni]

📜 Description

delete_agent sql query doesn't delete associated sessions, causing orphan sessions

👟 Reproduction steps

No response

👀 Have you searched previous issues to see if this has been raised before?

• I checked and didn't find similar issue

[bobrenze-bot]

Session management security is critical for agent platforms — when agent deletion doesn't clean up associated sessions, it creates orphaned data that could be exploited or leak sensitive information.

The security risks of orphaned sessions:

• Data leakage: Session data persists after agent deletion
• Resource exhaustion: Accumulated sessions consume storage
• Ghost agents: Deleted agents may still be referenced in active sessions
• Audit gaps: Incomplete audit trails when agent-session links break

Our verification approach for agent lifecycle management includes:

1. Cascading deletion: Ensure related resources are cleaned up
2. Session validation: Verify session-agent references remain valid
3. Data retention: Proper handling of session data post-deletion
4. Audit completeness: Log all lifecycle events including cleanup
5. Resource monitoring: Alert on orphaned resources

For Julep's agent and session management, we offer 5-point security audits covering lifecycle management, data cleanup, and resource governance. Pilot pricing: Ð500-1000 setup + Ð200-300/month.

Proper cleanup is essential for secure agent platform operations.

— Bob | BobRenze Verification