Local changedapi/compliance/apps/sessions/local
Nearest release: v2.1.242, published an hour before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+52added
Lines−14removed
From line
34
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits15to this page, all time
The whole hunk
from line 34, old and new numbered
/
from line 34
3434
3535 Opaque pagination token from a previous response's `next_page` field. Pass this to retrieve the next page of results. Clients should treat this value as an opaque string and not attempt to parse or interpret its contents, as the format may change without notice.
3636
37- `updated_at: optional object { gte }`
38
39 - `gte: optional string`
40
41 Only return sessions whose last inference call is at or after this time (RFC 3339; a UTC offset is required). Combines with `created_at.gte` / `created_at.lt`; the ordering and pagination are unchanged. Use it to poll for sessions that have been active since a previous pass — a session that becomes active later can only enter the result, never leave it.
42
3743### Header Parameters
3844
3945- `"x-api-key": optional string`
from line 46
4046
4147### Returns
4248
43- `data: array of object { id, created_at, organization_uuid, 4 more }`
49- `data: array of object { id, created_at, organization_uuid, 5 more }`
4450
45 Page of local sessions, ordered by `created_at` descending; ties are broken by a fixed server-side order.
51 Page of local sessions, ordered by `created_at` descending; ties are broken by a fixed server-side order. `updated_at` never participates in the ordering; the `updated_at.gte` query parameter filters on it without changing the order or the pagination cursor.
4652
4753 - `id: string`
4854
from line 70
6470
6571 - `"compliance_local_session"`
6672
73 - `updated_at: string`
74
75 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
76
6777 - `user: object { id, email_address }`
6878
6979 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 116
107117 },
108118 "product_surface": "cowork",
109 "created_at": "2026-07-09T14:02:11Z"
119 "created_at": "2026-07-09T14:02:11Z",
120 "updated_at": "2026-07-09T15:47:33Z"
110121 }
111122 ]
112123}
from line 164
153164
154165 - `"compliance_local_session"`
155166
167- `updated_at: string`
168
169 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
170
156171- `user: object { id, email_address }`
157172
158173 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 204
190205 },
191206 "product_surface": "cowork",
192 "created_at": "2026-07-09T14:02:11Z"
207 "created_at": "2026-07-09T14:02:11Z",
208 "updated_at": "2026-07-09T15:47:33Z"
193209}
194210```
195211
from line 213
197213
198214### Local List Response
199215
200- `LocalListResponse object { id, created_at, organization_uuid, 4 more }`
216- `LocalListResponse object { id, created_at, organization_uuid, 5 more }`
201217
202218 A Cowork or Claude Code session that a user ran on their own computer
203219 while signed in with their organization account.
from line 238
222238
223239 - `"compliance_local_session"`
224240
241 - `updated_at: string`
242
243 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
244
225245 - `user: object { id, email_address }`
226246
227247 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 260
240260
241261### Local Retrieve Response
242262
243- `LocalRetrieveResponse object { id, created_at, organization_uuid, 4 more }`
263- `LocalRetrieveResponse object { id, created_at, organization_uuid, 5 more }`
244264
245265 A Cowork or Claude Code session that a user ran on their own computer
246266 while signed in with their organization account.
from line 285
265285
266286 - `"compliance_local_session"`
267287
288 - `updated_at: string`
289
290 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
291
268292 - `user: object { id, email_address }`
269293
270294 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 357
333357
334358### Returns
335359
336- `data: array of object { id, content, created_at, 3 more }`
360- `data: array of object { id, content, created_at, 4 more }`
337361
338 Transcript turns for this page, ordered by `created_at` in the direction selected by the `order` parameter (ascending by default). Turns sharing a `created_at` (all messages of one inference call carry the call's timestamp) are returned in transcript order.
362 Transcript turns for this page, in call order: oldest call first by default, newest call first with `order=desc`. The messages of one call carry the call's timestamp and follow each other in transcript order; a page boundary can fall between them.
339363
340364 - `id: string`
341365
from line 449
425449
426450 When the message was recorded (RFC 3339, UTC)
427451
452 - `model: string or null`
453
454 The model that served this assistant turn, as reported in the `model` field of the underlying Messages API response. Null on user messages and on any assistant message whose `provenance` is set: client-asserted history and synthetic markers were not produced by a model during this session, and for unavailable content the serving model is not known.
455
428456 - `provenance: object { reason, type } or object { type } or object { type } or null`
429457
430458 Where this turn's content came from, discriminated on `type`. Null (the common case) means verified content: on an assistant message, content Claude produced during this session; on a user message, content the user sent. `content_unavailable`: the turn's content cannot be returned and `content` is empty; `reason` says why. `client_asserted`: assistant content the client supplied as conversation history; `content` shows what the model received but its authorship is not verified; never on user-role messages. `synthetic_marker`: a transcript marker the endpoint generated rather than content either party sent during the session. Both `client_asserted` and `synthetic_marker` can result from normal request or client processing, not only client modification. Callers should tolerate unrecognized `type` values.
from line 463
435463
436464 - `reason: string`
437465
438 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
466 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `client_aborted` (the client closed the connection or cancelled the request before the response completed, so the response was not captured for this turn; any partial output already streamed to the client is not included; assistant-role turns only), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
439467
440468 - `type: "content_unavailable"`
441469
from line 513
485513
486514 Opaque pagination cursor (prefixed `page_`) for the next page. Null when there is no further page. Treat as an opaque string; the format may change without notice.
487515
488- `session: object { id, created_at, organization_uuid, 4 more }`
516- `session: object { id, created_at, organization_uuid, 5 more }`
489517
490518 The local session the messages belong to. `user.email_address` is always null on this endpoint; the messages endpoint does not resolve email addresses.
491519
from line 537
509537
510538 - `"compliance_local_session"`
511539
540 - `updated_at: string`
541
542 Timestamp of the session's last retained inference call (RFC 3339, UTC). Always at or after `created_at`. When a session's activity spans the child organization's retention boundary, calls older than the boundary are no longer reflected — but because retention removes only the oldest calls, this value (unlike `created_at`) is unaffected until the entire session has aged out. On the list endpoint this value is a lower bound: for a session still active at a page or `created_at.lt` window boundary it can momentarily lag the session's true last activity. Retrieving the session, or its messages, always reflects the exact latest retained call.
543
512544 - `user: object { id, email_address }`
513545
514546 The authenticated user at the time of the session. Always set; `user.id` is always populated. `user.email_address` is null when the user's account has been deleted or the user is no longer a member of an organization the key may read.
from line 579
547579 }
548580 ],
549581 "created_at": "2025-03-12T18:22:41.123456Z",
582 "model": "claude-opus-5",
550583 "provenance": {
551584 "reason": "not_captured",
552585 "type": "content_unavailable"
from line 595
562595 "organization_uuid": "a1b2c3d4-e5f6-4789-a012-3456789abcde",
563596 "product_surface": "cowork",
564597 "type": "compliance_local_session",
598 "updated_at": "2025-03-12T18:22:41.123456Z",
565599 "user": {
566600 "id": "user_01WCz1FkmYMm4gnmykNKUu3Q",
from line 609
575609
576610### Message List Response
577611
578- `MessageListResponse object { id, content, created_at, 3 more }`
612- `MessageListResponse object { id, content, created_at, 4 more }`
579613
580614 A single user or assistant turn in a local session transcript.
581615
from line 701
667701
668702 When the message was recorded (RFC 3339, UTC)
669703
704 - `model: string or null`
705
706 The model that served this assistant turn, as reported in the `model` field of the underlying Messages API response. Null on user messages and on any assistant message whose `provenance` is set: client-asserted history and synthetic markers were not produced by a model during this session, and for unavailable content the serving model is not known.
707
670708 - `provenance: object { reason, type } or object { type } or object { type } or null`
671709
672710 Where this turn's content came from, discriminated on `type`. Null (the common case) means verified content: on an assistant message, content Claude produced during this session; on a user message, content the user sent. `content_unavailable`: the turn's content cannot be returned and `content` is empty; `reason` says why. `client_asserted`: assistant content the client supplied as conversation history; `content` shows what the model received but its authorship is not verified; never on user-role messages. `synthetic_marker`: a transcript marker the endpoint generated rather than content either party sent during the session. Both `client_asserted` and `synthetic_marker` can result from normal request or client processing, not only client modification. Callers should tolerate unrecognized `type` values.
from line 715
677715
678716 - `reason: string`
679717
680 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
718 Why this turn's content cannot be returned, e.g. `not_captured` (the content was not captured for compliance retrieval), `client_aborted` (the client closed the connection or cancelled the request before the response completed, so the response was not captured for this turn; any partial output already streamed to the client is not included; assistant-role turns only), `cmek_key_revoked` (the content is encrypted under the organization's customer-managed key and that key is unavailable), `retention_elapsed` (the content lies past the organization's retention boundary; on the placeholder standing in for every pre-boundary turn), or `oversize` (the message exceeds the server's per-message size bound even after per-block truncation). Callers should tolerate unrecognized values. `not_captured` is not proof that no record was stored: content withheld by the storage layer's fail-closed access policies carries the same reason and is deliberately indistinguishable from content that was never captured.
681719
682720 - `type: "content_unavailable"`
683721
No line in this hunk matches that.