> ## Documentation Index
> Fetch the complete documentation index at: https://docs.bluee.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# List captured sessions visible to the caller

> Organization administrators see their organization for audit; members see owned and shared sessions. Resumable mode always applies own/shared picker visibility. Callers may use cursor parameters or numbered page parameters, but must not combine the two modes.




## OpenAPI

````yaml /openapi/next.yaml get /session-uploads
openapi: 3.1.0
info:
  title: Blue — Service Contract
  version: 0.1.0
  description: >
    The client-side contract the `blue` CLI expects from the provisioned
    service. The reference `control-api` implements it; any BYO service that
    honors these shapes can be swapped in. Gateway-mode inference JWT issuance
    is OPTIONAL — governance-only deployments need only `GET
    /governance-config`. CLI callers use OAuth 2.0 access tokens issued through
    RFC 8628 device authorization; dashboard callers use an HTTP-only Better
    Auth session cookie.
servers:
  - url: https://harness.example.com
    description: Replace with the Control API URL for your deployment.
security:
  - oauthDevice: []
tags:
  - name: System
    description: Service health and authenticated identity.
  - name: Configuration
    description: Personalized governance policy and client reconciliation state.
  - name: Gateway
    description: Per-user managed inference-gateway credential lifecycle.
  - name: Sessions
    description: Raw-session upload, metadata, and download lifecycle.
  - name: Administration
    description: Organization-administrator policy and client operations.
  - name: User management
    description: >-
      Organization user lifecycle, session revocation, and invitation
      operations.
  - name: Identity provisioning
    description: SCIM 2.0 user and group provisioning for an external identity provider.
paths:
  /session-uploads:
    get:
      tags:
        - Sessions
      summary: List captured sessions visible to the caller
      description: >
        Organization administrators see their organization for audit; members
        see owned and shared sessions. Resumable mode always applies own/shared
        picker visibility. Callers may use cursor parameters or numbered page
        parameters, but must not combine the two modes.
      operationId: listSessionUploads
      parameters:
        - name: limit
          in: query
          schema:
            type: integer
            minimum: 1
            maximum: 100
        - name: cursor
          in: query
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            minimum: 1
            default: 1
        - name: per_page
          in: query
          schema:
            type: integer
            minimum: 1
            maximum: 100
            default: 25
        - name: q
          in: query
          description: >-
            Case-insensitive literal substring matched against native session ID
            and working directory.
          schema:
            type: string
            maxLength: 200
        - name: harness
          in: query
          schema:
            type: string
        - name: user_id
          in: query
          schema:
            type: string
            format: uuid
        - name: status
          in: query
          schema:
            type: string
            enum:
              - pending
              - complete
              - superseded
              - failed
        - name: updated_from
          in: query
          description: Inclusive UTC calendar date.
          schema:
            type: string
            format: date
        - name: updated_to
          in: query
          description: Inclusive UTC calendar date.
          schema:
            type: string
            format: date
        - name: sort
          in: query
          schema:
            type: string
            enum:
              - updated_desc
              - updated_asc
            default: updated_desc
        - name: resumable
          in: query
          description: >-
            Return only owned or explicitly shared portable sessions;
            administrator audit access is not applied.
          schema:
            type: boolean
      responses:
        '200':
          description: >-
            A cursor page or numbered page of database-registered captured
            sessions
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CapturedSessionList'
        '400':
          description: Invalid or incompatible list parameters
components:
  schemas:
    CapturedSessionList:
      type: object
      required:
        - items
      properties:
        items:
          type: array
          items:
            $ref: '#/components/schemas/CapturedSession'
        next_cursor:
          type:
            - string
            - 'null'
          format: uuid
        page:
          type: integer
        per_page:
          type: integer
        total:
          type: integer
        total_pages:
          type: integer
    CapturedSession:
      type: object
      required:
        - id
        - user_id
        - user_email
        - harness
        - compatibility_profile
        - native_session_id
        - artifact_format
        - resumable
        - sharing_mode
        - share_recipient_count
        - updated_at
      properties:
        id:
          type: string
          format: uuid
        user_id:
          type: string
          format: uuid
        user_email:
          type: string
          format: email
        harness:
          type: string
        compatibility_profile:
          type: string
        native_session_id:
          type: string
        cwd:
          type:
            - string
            - 'null'
        artifact_format:
          type: string
        resumable:
          type: boolean
        title:
          type:
            - string
            - 'null'
        summary:
          type:
            - string
            - 'null'
        source_captured_at:
          type:
            - string
            - 'null'
          format: date-time
        repository:
          type: object
          properties:
            root:
              type:
                - string
                - 'null'
            remote:
              type:
                - string
                - 'null'
        sharing_mode:
          type: string
          enum:
            - private
            - workspace
            - selected
        share_recipient_count:
          type: integer
          minimum: 0
        shared:
          type: boolean
          description: Present in resumable picker mode.
        updated_at:
          type: string
          format: date-time
        status:
          type:
            - string
            - 'null'
        size_bytes:
          type:
            - integer
            - 'null'
        content_type:
          type:
            - string
            - 'null'
        retention_expires_at:
          type:
            - string
            - 'null'
          format: date-time
  securitySchemes:
    oauthDevice:
      type: http
      scheme: bearer
      bearerFormat: JWT
      description: >
        OAuth 2.0 access token obtained through RFC 8628 at
        /api/auth/device/code and /api/auth/oauth2/token. The API enforces
        governance:read, session:write, and client-status:write as appropriate.

````