refactor(protocol): mark transient session controls