Sessions changedapi/compliance/apps/sessions
Nearest release: v2.1.242, published an hour before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+52added
Lines−14removed
From line
36
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits14to this page, all time
The whole hunk
from line 36, old and new numbered
/
from line 36
3636
3737 Opaque pagination token from a previous response's `next_page` field. Pass this to retrieve the next page of results. Clients should treat this value as an opaque string and not attempt to parse or interpret its contents, as the format may change without notice.
3838
39- `updated_at: optional object { gte }`
40
41 - `gte: optional string`
42
43 Only return sessions whose last inference call is at or after this time (RFC 3339; a UTC offset is required). Combines with `created_at.gte` / `created_at.lt`; the ordering and pagination are unchanged. Use it to poll for sessions that have been active since a previous pass — a session that becomes active later can only enter the result, never leave it.
44
3945### Header Parameters
4046
4147- `"x-api-key": optional string`
from line 48
4248
4349### Returns
4450
45- `data: array of object { id, created_at, organization_uuid, 4 more }`
51- `data: array of object { id, created_at, organization_uuid, 5 more }`
4652
47 Page of local sessions, ordered by `created_at` descending; ties are broken by a fixed server-side order.
53 Page of local sessions, ordered by `created_at` descending; ties are broken by a fixed server-side order. `updated_at` never participates in the ordering; the `updated_at.gte` query parameter filters on it without changing the order or the pagination cursor.
4854
4955 - `id: string`
5056
from line 72
6672
6773 - `"compliance_local_session"`
6874
75 - `updated_at: string`
76
77 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
78
6979 - `user: object { id, email_address }`
7080
7181 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 118
109119 },
110120 "product_surface": "cowork",
111 "created_at": "2026-07-09T14:02:11Z"
121 "created_at": "2026-07-09T14:02:11Z",
122 "updated_at": "2026-07-09T15:47:33Z"
112123 }
113124 ]
114125}
from line 166
155166
156167 - `"compliance_local_session"`
157168
169- `updated_at: string`
170
171 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
172
158173- `user: object { id, email_address }`
159174
160175 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 206
192207 },
193208 "product_surface": "cowork",
194 "created_at": "2026-07-09T14:02:11Z"
209 "created_at": "2026-07-09T14:02:11Z",
210 "updated_at": "2026-07-09T15:47:33Z"
195211}
196212```
197213
from line 215
199215
200216### Local List Response
201217
202- `LocalListResponse object { id, created_at, organization_uuid, 4 more }`
218- `LocalListResponse object { id, created_at, organization_uuid, 5 more }`
203219
204220 A Cowork or Claude Code session that a user ran on their own computer
205221 while signed in with their organization account.
from line 240
224240
225241 - `"compliance_local_session"`
226242
243 - `updated_at: string`
244
245 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
246
227247 - `user: object { id, email_address }`
228248
229249 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 262
242262
243263### Local Retrieve Response
244264
245- `LocalRetrieveResponse object { id, created_at, organization_uuid, 4 more }`
265- `LocalRetrieveResponse object { id, created_at, organization_uuid, 5 more }`
246266
247267 A Cowork or Claude Code session that a user ran on their own computer
248268 while signed in with their organization account.
from line 287
267287
268288 - `"compliance_local_session"`
269289
290 - `updated_at: string`
291
292 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
293
270294 - `user: object { id, email_address }`
271295
272296 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 359
335359
336360### Returns
337361
338- `data: array of object { id, content, created_at, 3 more }`
362- `data: array of object { id, content, created_at, 4 more }`
339363
340 Transcript turns for this page, ordered by `created_at` in the direction selected by the `order` parameter (ascending by default). Turns sharing a `created_at` (all messages of one inference call carry the call's timestamp) are returned in transcript order.
364 Transcript turns for this page, in call order: oldest call first by default, newest call first with `order=desc`. The messages of one call carry the call's timestamp and follow each other in transcript order; a page boundary can fall between them.
341365
342366 - `id: string`
343367
from line 451
427451
428452 When the message was recorded (RFC 3339, UTC)
429453
454 - `model: string or null`
455
456 The model that served this assistant turn, as reported in the `model` field of the underlying Messages API response. Null on user messages and on any assistant message whose `provenance` is set: client-asserted history and synthetic markers were not produced by a model during this session, and for unavailable content the serving model is not known.
457
430458 - `provenance: object { reason, type } or object { type } or object { type } or null`
431459
432460 Where this turn's content came from, discriminated on `type`. Null (the common case) means verified content: on an assistant message, content Claude produced during this session; on a user message, content the user sent. `content_unavailable`: the turn's content cannot be returned and `content` is empty; `reason` says why. `client_asserted`: assistant content the client supplied as conversation history; `content` shows what the model received but its authorship is not verified; never on user-role messages. `synthetic_marker`: a transcript marker the endpoint generated rather than content either party sent during the session. Both `client_asserted` and `synthetic_marker` can result from normal request or client processing, not only client modification. Callers should tolerate unrecognized `type` values.
from line 465
437465
438466 - `reason: string`
439467
440 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
468 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `client_aborted` (the client closed the connection or cancelled the request before the response completed, so the response was not captured for this turn; any partial output already streamed to the client is not included; assistant-role turns only), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
441469
442470 - `type: "content_unavailable"`
443471
from line 515
487515
488516 Opaque pagination cursor (prefixed `page_`) for the next page. Null when there is no further page. Treat as an opaque string; the format may change without notice.
489517
490- `session: object { id, created_at, organization_uuid, 4 more }`
518- `session: object { id, created_at, organization_uuid, 5 more }`
491519
492520 The local session the messages belong to. `user.email_address` is always null on this endpoint; the messages endpoint does not resolve email addresses.
493521
from line 539
511539
512540 - `"compliance_local_session"`
513541
542 - `updated_at: string`
543
544 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
545
514546 - `user: object { id, email_address }`
515547
516548 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 581
549581 }
550582 ],
551583 "created_at": "2025-03-12T18:22:41.123456Z",
584 "model": "claude-opus-5",
552585 "provenance": {
553586 "reason": "not_captured",
554587 "type": "content_unavailable"
from line 597
564597 "organization_uuid": "a1b2c3d4-e5f6-4789-a012-3456789abcde",
565598 "product_surface": "cowork",
566599 "type": "compliance_local_session",
600 "updated_at": "2025-03-12T18:22:41.123456Z",
567601 "user": {
568602 "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
from line 611
577611
578612### Message List Response
579613
580- `MessageListResponse object { id, content, created_at, 3 more }`
614- `MessageListResponse object { id, content, created_at, 4 more }`
581615
582616 A single user or assistant turn in a local session transcript.
583617
from line 703
669703
670704 When the message was recorded (RFC 3339, UTC)
671705
706 - `model: string or null`
707
708 The model that served this assistant turn, as reported in the `model` field of the underlying Messages API response. Null on user messages and on any assistant message whose `provenance` is set: client-asserted history and synthetic markers were not produced by a model during this session, and for unavailable content the serving model is not known.
709
672710 - `provenance: object { reason, type } or object { type } or object { type } or null`
673711
674712 Where this turn's content came from, discriminated on `type`. Null (the common case) means verified content: on an assistant message, content Claude produced during this session; on a user message, content the user sent. `content_unavailable`: the turn's content cannot be returned and `content` is empty; `reason` says why. `client_asserted`: assistant content the client supplied as conversation history; `content` shows what the model received but its authorship is not verified; never on user-role messages. `synthetic_marker`: a transcript marker the endpoint generated rather than content either party sent during the session. Both `client_asserted` and `synthetic_marker` can result from normal request or client processing, not only client modification. Callers should tolerate unrecognized `type` values.
from line 717
679717
680718 - `reason: string`
681719
682 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
720 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `client_aborted` (the client closed the connection or cancelled the request before the response completed, so the response was not captured for this turn; any partial output already streamed to the client is not included; assistant-role turns only), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
683721
684722 - `type: "content_unavailable"`
685723
No line in this hunk matches that.