Fleet Sessions API

openapi: 3.2.0
info:
  title: Fleet Orchestrator Sessions API
  version: 0.1.0
servers:
- url: https://orchestrator.fleetai.com
  description: Fleet Orchestrator (named by the official fleet-python SDK)
tags:
- name: Sessions
paths:
  /v1/sessions/{session_id}/grading:
    get:
      tags:
      - Sessions
      summary: Get Session Grading
      description: 'Return verifier executions for a session with per-row run-time verifier

        source plus the verifier version the session''s task version pins, so the

        UI can badge grading that ran something other than the pin.


        Ported from the Next.js /api/session-grading/[sessionId] route. Response

        shape and access policy match the original: caller''s team must directly

        own the session or own a session_store containing it; admin bypasses.

        The UI''s GradingSection should be migrated to call this endpoint in a

        follow-up; the Next.js route stays in place until then.'
      operationId: get_session_grading_v1_sessions__session_id__grading_get
      security:
      - HTTPBearer: []
      parameters:
      - name: session_id
        in: path
        required: true
        schema:
          type: string
          title: Session Id
      - name: include_database_diff
        in: query
        required: false
        schema:
          type: boolean
          default: false
          title: Include Database Diff
      - name: X-JWT-Token
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Jwt-Token
      - name: X-Team-ID
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Team-Id
      - name: X-API-Key
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Api-Key
      - name: Authorization
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SessionGradingResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/sessions/{session_id}/network-ndjson-verifier-replays:
    post:
      tags:
      - Sessions
      summary: Replay Network Ndjson Verifier
      description: Grade one sealed historical capture with jq inside the exact task image.
      operationId: replay_network_ndjson_verifier_v1_sessions__session_id__network_ndjson_verifier_replays_post
      security:
      - HTTPBearer: []
      parameters:
      - name: session_id
        in: path
        required: true
        schema:
          type: string
          title: Session Id
      - name: X-JWT-Token
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Jwt-Token
      - name: X-Team-ID
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Team-Id
      - name: X-API-Key
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Api-Key
      - name: Authorization
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/NetworkNdjsonReplayRequest'
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/NetworkNdjsonReplayResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/sessions/{session_id}/reference-traces:
    get:
      tags:
      - Sessions
      summary: Get Session Reference Traces
      operationId: get_session_reference_traces_v1_sessions__session_id__reference_traces_get
      security:
      - HTTPBearer: []
      parameters:
      - name: session_id
        in: path
        required: true
        schema:
          type: string
          title: Session Id
      - name: job_id
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          description: Optional job id. When supplied, the visible job must own the session.
          title: Job Id
        description: Optional job id. When supplied, the visible job must own the session.
      - name: X-JWT-Token
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Jwt-Token
      - name: X-Team-ID
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Team-Id
      - name: X-API-Key
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Api-Key
      - name: Authorization
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SessionReferenceTracesResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/sessions/{session_id}/starter-files:
    get:
      tags:
      - Sessions
      summary: Get Session Starter Files
      operationId: get_session_starter_files_v1_sessions__session_id__starter_files_get
      security:
      - HTTPBearer: []
      parameters:
      - name: session_id
        in: path
        required: true
        schema:
          type: string
          title: Session Id
      - name: X-JWT-Token
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Jwt-Token
      - name: X-Team-ID
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Team-Id
      - name: X-API-Key
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: X-Api-Key
      - name: Authorization
        in: header
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/AttachmentListResponse'
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    ReferenceTraceItem:
      properties:
        trace_id:
          type: string
          title: Trace Id
        source:
          type: string
          title: Source
        name:
          type: string
          title: Name
        label:
          type: string
          title: Label
        kind:
          type: string
          title: Kind
        is_primary:
          type: boolean
          title: Is Primary
        sort_order:
          type: integer
          title: Sort Order
        source_trace_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Source Trace Id
        step_count:
          type: integer
          title: Step Count
        created_by:
          anyOf:
          - type: string
          - type: 'null'
          title: Created By
        created_at:
          anyOf:
          - type: string
          - type: 'null'
          title: Created At
        tool_use_workflow:
          title: Tool Use Workflow
      type: object
      required:
      - trace_id
      - source
      - name
      - label
      - kind
      - is_primary
      - sort_order
      - step_count
      - tool_use_workflow
      title: ReferenceTraceItem
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    SessionGradingExecution:
      properties:
        id:
          anyOf:
          - type: string
          - type: 'null'
          title: Id
        created_at:
          anyOf:
          - type: string
          - type: 'null'
          title: Created At
        score:
          anyOf:
          - type: number
          - type: 'null'
          title: Score
        success:
          anyOf:
          - type: boolean
          - type: 'null'
          title: Success
        stdout:
          anyOf:
          - type: string
          - type: 'null'
          title: Stdout
        execution_time_ms:
          anyOf:
          - type: integer
          - type: 'null'
          title: Execution Time Ms
        result:
          title: Result
        runtime_verifier_version_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Runtime Verifier Version Id
        runtime_verifier_parent_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Runtime Verifier Parent Id
        runtime_verifier_key:
          anyOf:
          - type: string
          - type: 'null'
          title: Runtime Verifier Key
        runtime_verifier_team_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Runtime Verifier Team Id
        runtime_verifier_version:
          anyOf:
          - type: integer
          - type: 'null'
          title: Runtime Verifier Version
        runtime_display_src:
          anyOf:
          - type: string
          - type: 'null'
          title: Runtime Display Src
        pinned_verifier_version_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Pinned Verifier Version Id
        pinned_verifier_version:
          anyOf:
          - type: integer
          - type: 'null'
          title: Pinned Verifier Version
        pinned_verifier_parent_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Pinned Verifier Parent Id
        is_runtime_pinned:
          anyOf:
          - type: boolean
          - type: 'null'
          title: Is Runtime Pinned
        database_diff_evidence:
          anyOf:
          - $ref: '#/components/schemas/SessionDatabaseDiffEvidence'
          - type: 'null'
      type: object
      required:
      - id
      - created_at
      - score
      - success
      - stdout
      - execution_time_ms
      - result
      - runtime_verifier_version_id
      - runtime_verifier_parent_id
      - runtime_verifier_key
      - runtime_verifier_team_id
      - runtime_verifier_version
      - runtime_display_src
      - pinned_verifier_version_id
      - pinned_verifier_version
      - pinned_verifier_parent_id
      - is_runtime_pinned
      title: SessionGradingExecution
    AttachmentListResponse:
      properties:
        attachments:
          additionalProperties:
            items:
              $ref: '#/components/schemas/AttachmentDownloadItem'
            type: array
          type: object
          title: Attachments
      type: object
      required:
      - attachments
      title: AttachmentListResponse
    NetworkNdjsonReplayRequest:
      properties:
        verifier_version_id:
          type: string
          format: uuid
          title: Verifier Version Id
        replay_request_id:
          type: string
          format: uuid
          title: Replay Request Id
      type: object
      required:
      - verifier_version_id
      - replay_request_id
      title: NetworkNdjsonReplayRequest
      description: Select one immutable standalone verifier version for the replay.
    SessionDatabaseDiffEvidence:
      properties:
        source_owner_team_id:
          type: string
          title: Source Owner Team Id
        source_environment_version_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Source Environment Version Id
        session_id:
          type: string
          title: Session Id
        job_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Job Id
        instance_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Instance Id
        task_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Task Id
        task_version_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Task Version Id
        execution_id:
          type: string
          title: Execution Id
        runtime_verifier_version_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Runtime Verifier Version Id
        state:
          type: string
          enum:
          - absent
          - present_empty
          - present
          title: State
        database_diff:
          anyOf:
          - type: string
          - type: 'null'
          title: Database Diff
        sha256:
          anyOf:
          - type: string
          - type: 'null'
          title: Sha256
        utf8_bytes:
          anyOf:
          - type: integer
          - type: 'null'
          title: Utf8 Bytes
        complete_terminal_state:
          type: boolean
          const: false
          title: Complete Terminal State
          default: false
        identity_bindings_complete:
          type: boolean
          const: false
          title: Identity Bindings Complete
          default: false
      type: object
      required:
      - source_owner_team_id
      - source_environment_version_id
      - session_id
      - job_id
      - instance_id
      - task_id
      - task_version_id
      - execution_id
      - runtime_verifier_version_id
      - state
      - database_diff
      - sha256
      - utf8_bytes
      title: SessionDatabaseDiffEvidence
    SessionGradingResponse:
      properties:
        executions:
          items:
            $ref: '#/components/schemas/SessionGradingExecution'
          type: array
          title: Executions
      type: object
      required:
      - executions
      title: SessionGradingResponse
    AttachmentDownloadItem:
      properties:
        filename:
          type: string
          title: Filename
        category:
          type: string
          title: Category
        content_type:
          type: string
          title: Content Type
        s3_key:
          type: string
          title: S3 Key
        url:
          type: string
          title: Url
        target_path:
          anyOf:
          - type: string
          - type: 'null'
          title: Target Path
        size_bytes:
          anyOf:
          - type: integer
          - type: 'null'
          title: Size Bytes
        sha256:
          anyOf:
          - type: string
          - type: 'null'
          title: Sha256
      type: object
      required:
      - filename
      - category
      - content_type
      - s3_key
      - url
      title: AttachmentDownloadItem
    SessionReferenceTracesResponse:
      properties:
        session_id:
          type: string
          title: Session Id
        job_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Job Id
        eval_task_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Eval Task Id
        eval_task_version_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Eval Task Version Id
        task_key:
          anyOf:
          - type: string
          - type: 'null'
          title: Task Key
        status:
          type: string
          title: Status
        primary_reference_trace_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Primary Reference Trace Id
        reference_trace_count:
          type: integer
          title: Reference Trace Count
        reference_traces:
          items:
            $ref: '#/components/schemas/ReferenceTraceItem'
          type: array
          title: Reference Traces
      type: object
      required:
      - session_id
      - status
      - reference_trace_count
      - reference_traces
      title: SessionReferenceTracesResponse
    NetworkNdjsonReplayResponse:
      properties:
        schema_version:
          type: string
          const: cyber.network_ndjson_historical_replay.v1
          title: Schema Version
        status:
          type: string
          const: graded
          title: Status
        session_id:
          type: string
          title: Session Id
        task_version_id:
          type: string
          title: Task Version Id
        pinned_verifier_version_id:
          type: string
          title: Pinned Verifier Version Id
        verifier_id:
          type: string
          title: Verifier Id
        verifier_version_id:
          type: string
          title: Verifier Version Id
        verifier_execution_id:
          type: string
          title: Verifier Execution Id
        replay_request_id:
          type: string
          title: Replay Request Id
        replay_instance_id:
          type: string
          title: Replay Instance Id
        score:
          type: integer
          enum:
          - 0
          - 1
          title: Score
        result:
          type: boolean
          title: Result
        query_sha256:
          type: string
          title: Query Sha256
        exchanges_sha256:
          type: string
          title: Exchanges Sha256
        raw_http_sha256:
          type: string
          title: Raw Http Sha256
        runner_abi:
          type: string
          const: cyber.network_ndjson_jq_runner.v4
          title: Runner Abi
        execution_host:
          type: string
          const: task_environment
          title: Execution Host
        capture_transport:
          type: string
          const: environment_local_files
          title: Capture Transport
        cleanup_completed:
          type: boolean
          title: Cleanup Completed
      type: object
      required:
      - schema_version
      - status
      - session_id
      - task_version_id
      - pinned_verifier_version_id
      - verifier_id
      - verifier_version_id
      - verifier_execution_id
      - replay_request_id
      - replay_instance_id
      - score
      - result
      - query_sha256
      - exchanges_sha256
      - raw_http_sha256
      - runner_abi
      - execution_host
      - capture_transport
      - cleanup_completed
      title: NetworkNdjsonReplayResponse
      description: Receipt for a real environment-local jq execution.
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
  securitySchemes:
    HTTPBearer:
      type: http
      scheme: bearer