fix(docker): run real questions through trusted Pi gate

backend/src/routes/sessions.ts

@@ -29,12 +29,13 @@ export function sessionRoutes(
       model: s.model,
       thinking: s.thinking,
       author: getUser(req).id,
+      question: b.question,
     });
     rt.bridge.onClientEvent((e) => d.hub.publish(id, e.type, e));
     return { id };
   });
-  app.get("/sessions", async () => d.tht.sessionList());
-  app.get("/sessions/:id", async (req) => d.tht.sessionShow((req.params as any).id));
+  app.get("/sessions", async () => d.tht.sessionList(d.getSettings().workspace));
+  app.get("/sessions/:id", async (req) => d.tht.sessionShow((req.params as any).id, d.getSettings().workspace));
   app.post("/sessions/:id/response", async (req, reply) => {
     const id = (req.params as any).id;
     const rt = d.mgr.get(id);
@@ -50,7 +51,7 @@ export function sessionRoutes(
   });
   app.post("/sessions/:id/resume", async (req, reply) => {
     const id = (req.params as any).id;
-    const manifest = (await d.tht.sessionShow(id)) as { status?: string; archived?: boolean } | null;
+    const manifest = (await d.tht.sessionShow(id, d.getSettings().workspace)) as { status?: string; archived?: boolean } | null;
     if (manifest?.status === "finalized" || manifest?.archived) {
       return reply.code(409).send({ error: "sessione in sola lettura (finalizzata o archiviata)" });
     }
@@ -103,7 +104,7 @@ export function sessionRoutes(
   app.delete("/sessions/:id", async (req, reply) => {
     const id = (req.params as any).id;
     d.mgr.teardown(id); // drop any live runtime before deleting on disk
-    await d.tht.deleteSession(id);
+    await d.tht.deleteSession(id, d.getSettings().workspace);
     return reply.code(204).send();
   });
   app.get("/sessions/:id/documents", async (req) => d.tht.documents((req.params as any).id));