Function prepare_session 

pub fn prepare_session(workspace_root: &Path, thread_id: &str) -> AgentTempInfo

Return the session policy without deleting files whose runtime ownership cannot be established here. The active directory is not created here; file tools create it on demand through their normal parent-directory path.