Every change of one session, oldest first

GET

/v1/audit/sessions/{hash}

const url = 'https://beta-api.plune.ai/v1/audit/sessions/example';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://beta-api.plune.ai/v1/audit/sessions/example \
  --header 'Authorization: Bearer <token>'

A session is one agent run — every write it made carries the same sessionHash. The Activity screen opens a grouped row into this list; it is also the preview of what POST /v1/audit/sessions/{hash}/restore would undo, in the order it was done. An unknown hash is an empty list, not a 404: a session that wrote nothing and one that never existed look the same, and neither is an error.

Authorizations

bearerAuth
cookieAuth

Parameters

Path Parameters

hash

required

string

Responses

200

The session entries

application/json

object

entries

required

Array<object>

object

required

string

projectId

string

entity

required

string

Allowed values: test_case suite run review_item project snippet plan ai_settings storage_settings

entityId

required

string

action

required

string

Allowed values: create update delete state_change event restore

actorType

required

A bearer token WITH a session header is an agent; without one it is a token; a session cookie is a user.

string

Allowed values: user token agent

actorId

required

For a token this is the TOKEN id — when one leaks, the question is what that credential did.

string

sessionHash

Keyed with the deployment secret, so one client cannot compute another’s.

string

nullable

diff

required

Only the fields that moved. A field whose NAME says it holds a credential is masked, though the fact that it changed is still recorded.

object

key

additional properties

object

before

after

meta

required

object

restorable

required

False when the diff was truncated — the previous values were not kept in full.

boolean

truncated

boolean

restoredFrom

On a restore entry: the entry it undid.

string

reason

string

createdAt

required

string format: date-time

Example

{
  "entries": [
    {
      "entity": "test_case",
      "action": "create",
      "actorType": "user"
    }
  ]
}

401

No / invalid token or session