audit_events
const url = 'https://api.canopyhq.dev/console/sessions/000000000000000000000000000000000000000000000000000000000000000000000000/events';const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url https://api.canopyhq.dev/console/sessions/000000000000000000000000000000000000000000000000000000000000000000000000/events \ --header 'Authorization: Bearer <token>'Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”A stream id: 72 hex chars, the shard then the owner digest.
The session to read.
Query Parameters
Section titled “Query Parameters”opened=1 serves every record the session landed, addressed ones included, and opens each call’s arguments; owners, on an ended session.
Responses
Section titled “Responses”One JSON line per record: {"Ok": <record>}. Plain, the public records alone. Opened, every record the session landed, at every cursor from one to the tip, with each call on a turn carrying arguments and each completion its result, or an error saying why not; the authorizer’s invoke.allowed is served without its gate.
A landed record: the envelope plus the opaque body beneath it.
object
The opaque layers beneath the envelope.
The envelope: the only surface the filter is evaluated on. Trellis never reads beneath it.
object
Unix milliseconds, minted with the cursor at the single point of intake.
Monotonic per-stream position, minted at the single point of intake. Producers never carry or assert one.
A kind string and the version of its body, one unit.
object
Who landed a record. Asserted on the offer, checked by the write clause.
A stream id: 72 hex chars, the shard then the owner digest.
Example
{ "envelope": { "stream": "000000000000000000000000000000000000000000000000000000000000000000000000" }}A query string that did not parse.
No console token, or one that did not verify.
Only an owner reads the opened face.
No such session under this tenant.
The session is still live; the opened face waits for its end.