Apps changedapi/compliance/apps
Nearest release: v2.1.242, published an hour before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+73added
Lines−26removed
From line
15
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits19to this page, all time
The whole hunk
from line 15, old and new numbered
/
from line 15
1515compliance review. Results are sorted chronologically (time ascending)
1616by the `order_by` key, with ties broken by id.
1717
18**Deprecation notice:** Combining `user_ids[]` with any `updated_at.*`
19filter is deprecated and will be rejected with HTTP 400 after
202026-09-22. For incremental polling by update time, omit `user_ids[]`
21and set `order_by=updated_at` with `after_id` cursor pagination —
22this returns the same chats across the whole organization in a single
23request stream. For per-user listing, use `created_at.*` filters (or
24no time filter) with the default `order_by`. `user_ids[]` with
25`order_by=updated_at` is already rejected.
26
1827### Query Parameters
1928
2029- `after_id: optional string`
from line 76
6776
6877 - `gt: optional string`
6978
70 Filter chats updated after this time (RFC 3339 format)
79 Filter chats updated after this time (RFC 3339 format). Combining updated_at filters with `user_ids[]` is deprecated and will be rejected after 2026-09-22; for updated_at-windowed polling, omit `user_ids[]` and use `order_by=updated_at` with `after_id` pagination.
7180
7281 - `gte: optional string`
7382
74 Filter chats updated at or after this time (RFC 3339 format)
83 Filter chats updated at or after this time (RFC 3339 format). Combining updated_at filters with `user_ids[]` is deprecated and will be rejected after 2026-09-22; for updated_at-windowed polling, omit `user_ids[]` and use `order_by=updated_at` with `after_id` pagination.
7584
7685 - `lt: optional string`
7786
78 Filter chats updated before this time (RFC 3339 format)
87 Filter chats updated before this time (RFC 3339 format). Combining updated_at filters with `user_ids[]` is deprecated and will be rejected after 2026-09-22; for updated_at-windowed polling, omit `user_ids[]` and use `order_by=updated_at` with `after_id` pagination.
7988
8089 - `lte: optional string`
8190
82 Filter chats updated at or before this time (RFC 3339 format)
91 Filter chats updated at or before this time (RFC 3339 format). Combining updated_at filters with `user_ids[]` is deprecated and will be rejected after 2026-09-22; for updated_at-windowed polling, omit `user_ids[]` and use `order_by=updated_at` with `after_id` pagination.
8392
8493- `user_ids: optional array of string`
8594
86 Filter to chats created by specific users (max 10 per request). Omit for an org-wide query. Enumerate IDs via `GET /v1/compliance/organizations/{org_uuid}/users`.
95 Filter to chats created by specific users (max 10 per request). Omit for an org-wide query. Enumerate IDs via `GET /v1/compliance/organizations/{org_uuid}/users`. Deprecated combination: passing `user_ids[]` together with any `updated_at.*` filter is deprecated and will be rejected after 2026-09-22. For `updated_at`-windowed polling, omit `user_ids[]` and use `order_by=updated_at` with `after_id` pagination.
8796
8897### Header Parameters
8998
from line 122
113122
114123 - `model: string or null`
115124
116 Model selected for this chat (e.g. 'claude-opus-4-7'). May be null for legacy chats that never had a model recorded.
125 Model selected for this chat (e.g. 'claude-opus-5'). May be null for legacy chats that never had a model recorded.
117126
118127 - `name: string`
119128
from line 186
177186 "created_at": "2025-06-07T08:09:10Z",
178187 "updated_at": "2025-06-07T09:10:11Z",
179188 "organization_id": "org_abc123",
180 "organization_uuid": "abcdef0123-4567-89ab-cdef-0123456789ab",
189 "organization_uuid": "abcdef01-2345-6789-abcd-ef0123456789",
181190 "project_id": "claude_proj_xyz789",
182 "model": "claude-opus-4-7",
191 "model": "claude-opus-5",
183192 "user": {
184193 "id": "user_xyz456",
from line 274
265274
266275 - `model: string or null`
267276
268 Model selected for this chat (e.g. 'claude-opus-4-7'). May be null for legacy chats that never had a model recorded.
277 Model selected for this chat (e.g. 'claude-opus-5'). May be null for legacy chats that never had a model recorded.
269278
270279 - `name: string`
271280
from line 632
623632
624633- `model: string or null`
625634
626 Model selected for this chat (e.g. 'claude-opus-4-7'). May be null for legacy chats that never had a model recorded.
635 Model selected for this chat (e.g. 'claude-opus-5'). May be null for legacy chats that never had a model recorded.
627636
628637- `name: string`
629638
from line 682
673682 "created_at": "2025-06-07T08:09:10Z",
674683 "updated_at": "2025-06-07T08:09:11Z",
675684 "organization_id": "org_abc123",
676 "organization_uuid": "abcdef0123-4567-89ab-cdef-0123456789ab",
685 "organization_uuid": "abcdef01-2345-6789-abcd-ef0123456789",
677686 "project_id": "claude_proj_xyz789",
678 "model": "claude-opus-4-7",
687 "model": "claude-opus-5",
679688 "user": {
680689 "id": "user_xyz456",
from line 2789
27802789
27812790 Opaque pagination token from a previous response's `next_page` field. Pass this to retrieve the next page of results. Clients should treat this value as an opaque string and not attempt to parse or interpret its contents, as the format may change without notice.
27822791
2792- `updated_at: optional object { gte }`
2793
2794 - `gte: optional string`
2795
2796 Only return sessions whose last inference call is at or after this time (RFC 3339; a UTC offset is required). Combines with `created_at.gte` / `created_at.lt`; the ordering and pagination are unchanged. Use it to poll for sessions that have been active since a previous pass — a session that becomes active later can only enter the result, never leave it.
2797
27832798### Header Parameters
27842799
27852800- `"x-api-key": optional string`
from line 2801
27862801
27872802### Returns
27882803
2789- `data: array of object { id, created_at, organization_uuid, 4 more }`
2804- `data: array of object { id, created_at, organization_uuid, 5 more }`
27902805
2791 Page of local sessions, ordered by `created_at` descending; ties are broken by a fixed server-side order.
2806 Page of local sessions, ordered by `created_at` descending; ties are broken by a fixed server-side order. `updated_at` never participates in the ordering; the `updated_at.gte` query parameter filters on it without changing the order or the pagination cursor.
27922807
27932808 - `id: string`
27942809
from line 2825
28102825
28112826 - `"compliance_local_session"`
28122827
2828 - `updated_at: string`
2829
2830 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
2831
28132832 - `user: object { id, email_address }`
28142833
28152834 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 2871
28532872 },
28542873 "product_surface": "cowork",
2855 "created_at": "2026-07-09T14:02:11Z"
2874 "created_at": "2026-07-09T14:02:11Z",
2875 "updated_at": "2026-07-09T15:47:33Z"
28562876 }
28572877 ]
28582878}
from line 2919
28992919
29002920 - `"compliance_local_session"`
29012921
2922- `updated_at: string`
2923
2924 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
2925
29022926- `user: object { id, email_address }`
29032927
29042928 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 2959
29362960 },
29372961 "product_surface": "cowork",
2938 "created_at": "2026-07-09T14:02:11Z"
2962 "created_at": "2026-07-09T14:02:11Z",
2963 "updated_at": "2026-07-09T15:47:33Z"
29392964}
29402965```
29412966
from line 2968
29432968
29442969### Local List Response
29452970
2946- `LocalListResponse object { id, created_at, organization_uuid, 4 more }`
2971- `LocalListResponse object { id, created_at, organization_uuid, 5 more }`
29472972
29482973 A Cowork or Claude Code session that a user ran on their own computer
29492974 while signed in with their organization account.
from line 2993
29682993
29692994 - `"compliance_local_session"`
29702995
2996 - `updated_at: string`
2997
2998 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
2999
29713000 - `user: object { id, email_address }`
29723001
29733002 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 3015
29863015
29873016### Local Retrieve Response
29883017
2989- `LocalRetrieveResponse object { id, created_at, organization_uuid, 4 more }`
3018- `LocalRetrieveResponse object { id, created_at, organization_uuid, 5 more }`
29903019
29913020 A Cowork or Claude Code session that a user ran on their own computer
29923021 while signed in with their organization account.
from line 3040
30113040
30123041 - `"compliance_local_session"`
30133042
3043 - `updated_at: string`
3044
3045 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
3046
30143047 - `user: object { id, email_address }`
30153048
30163049 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 3112
30793112
30803113### Returns
30813114
3082- `data: array of object { id, content, created_at, 3 more }`
3115- `data: array of object { id, content, created_at, 4 more }`
30833116
3084 Transcript turns for this page, ordered by `created_at` in the direction selected by the `order` parameter (ascending by default). Turns sharing a `created_at` (all messages of one inference call carry the call's timestamp) are returned in transcript order.
3117 Transcript turns for this page, in call order: oldest call first by default, newest call first with `order=desc`. The messages of one call carry the call's timestamp and follow each other in transcript order; a page boundary can fall between them.
30853118
30863119 - `id: string`
30873120
from line 3204
31713204
31723205 When the message was recorded (RFC 3339, UTC)
31733206
3207 - `model: string or null`
3208
3209 The model that served this assistant turn, as reported in the `model` field of the underlying Messages API response. Null on user messages and on any assistant message whose `provenance` is set: client-asserted history and synthetic markers were not produced by a model during this session, and for unavailable content the serving model is not known.
3210
31743211 - `provenance: object { reason, type } or object { type } or object { type } or null`
31753212
31763213 Where this turn's content came from, discriminated on `type`. Null (the common case) means verified content: on an assistant message, content Claude produced during this session; on a user message, content the user sent. `content_unavailable`: the turn's content cannot be returned and `content` is empty; `reason` says why. `client_asserted`: assistant content the client supplied as conversation history; `content` shows what the model received but its authorship is not verified; never on user-role messages. `synthetic_marker`: a transcript marker the endpoint generated rather than content either party sent during the session. Both `client_asserted` and `synthetic_marker` can result from normal request or client processing, not only client modification. Callers should tolerate unrecognized `type` values.
from line 3218
31813218
31823219 - `reason: string`
31833220
3184 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
3221 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `client_aborted` (the client closed the connection or cancelled the request before the response completed, so the response was not captured for this turn; any partial output already streamed to the client is not included; assistant-role turns only), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
31853222
31863223 - `type: "content_unavailable"`
31873224
from line 3268
32313268
32323269 Opaque pagination cursor (prefixed `page_`) for the next page. Null when there is no further page. Treat as an opaque string; the format may change without notice.
32333270
3234- `session: object { id, created_at, organization_uuid, 4 more }`
3271- `session: object { id, created_at, organization_uuid, 5 more }`
32353272
32363273 The local session the messages belong to. `user.email_address` is always null on this endpoint; the messages endpoint does not resolve email addresses.
32373274
from line 3292
32553292
32563293 - `"compliance_local_session"`
32573294
3295 - `updated_at: string`
3296
3297 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
3298
32583299 - `user: object { id, email_address }`
32593300
32603301 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 3334
32933334 }
32943335 ],
32953336 "created_at": "2025-03-12T18:22:41.123456Z",
3337 "model": "claude-opus-5",
32963338 "provenance": {
32973339 "reason": "not_captured",
32983340 "type": "content_unavailable"
from line 3350
33083350 "organization_uuid": "a1b2c3d4-e5f6-4789-a012-3456789abcde",
33093351 "product_surface": "cowork",
33103352 "type": "compliance_local_session",
3353 "updated_at": "2025-03-12T18:22:41.123456Z",
33113354 "user": {
33123355 "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
from line 3364
33213364
33223365### Message List Response
33233366
3324- `MessageListResponse object { id, content, created_at, 3 more }`
3367- `MessageListResponse object { id, content, created_at, 4 more }`
33253368
33263369 A single user or assistant turn in a local session transcript.
33273370
from line 3456
34133456
34143457 When the message was recorded (RFC 3339, UTC)
34153458
3459 - `model: string or null`
3460
3461 The model that served this assistant turn, as reported in the `model` field of the underlying Messages API response. Null on user messages and on any assistant message whose `provenance` is set: client-asserted history and synthetic markers were not produced by a model during this session, and for unavailable content the serving model is not known.
3462
34163463 - `provenance: object { reason, type } or object { type } or object { type } or null`
34173464
34183465 Where this turn's content came from, discriminated on `type`. Null (the common case) means verified content: on an assistant message, content Claude produced during this session; on a user message, content the user sent. `content_unavailable`: the turn's content cannot be returned and `content` is empty; `reason` says why. `client_asserted`: assistant content the client supplied as conversation history; `content` shows what the model received but its authorship is not verified; never on user-role messages. `synthetic_marker`: a transcript marker the endpoint generated rather than content either party sent during the session. Both `client_asserted` and `synthetic_marker` can result from normal request or client processing, not only client modification. Callers should tolerate unrecognized `type` values.
from line 3470
34233470
34243471 - `reason: string`
34253472
3426 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
3473 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `client_aborted` (the client closed the connection or cancelled the request before the response completed, so the response was not captured for this turn; any partial output already streamed to the client is not included; assistant-role turns only), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
34273474
34283475 - `type: "content_unavailable"`
34293476
No line in this hunk matches that.