Append-only command timeline

GET

/commands/{command_id}/events

const url = 'https://api.flotera.com/api/v1/commands/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/events?limit=50';
const options = {
  method: 'GET',
  headers: {cookie: '__Host-erm_session=<__Host-erm_session>'}
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url 'https://api.flotera.com/api/v1/commands/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0/events?limit=50' \
  --cookie __Host-erm_session=<__Host-erm_session>

Ordered by aggregate_version (from control.command_events).

Authorizations

sessionCookie
pat

Parameters

Path Parameters

command_id

required

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

Query Parameters

cursor

string

>= 1 characters <= 512 characters

Opaque pagination cursor from a previous next_cursor.

limit

integer

default: 50 >= 1 <= 200

Page size.

Responses

200

Page of timeline events.

application/json

object

items

required

Array<object>

<= 200 items

One append-only command timeline entry.

object

required

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

command_id

required

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

aggregate_version

required

integer

>= 1

type

required

Timeline fact (created/sent/accepted/started/progressed/succeeded/failed/cancelled/expired).

string

<= 64 characters

actor

Any of:

object
null

Who observed the timeline fact (02 §8.4). Deliberately a different vocabulary from CommandActor, which answers “who issued the command”: sent is an observation of the gateway, not a message from the agent.

object

type

required

string

Allowed values: api command_service gateway agent worker

stage

string | null

Allowed values: validate queue publish deliver accept execute rollback

level

required

string

Allowed values: info warn error

code

Stable machine-readable reason code.

string | null

<= 64 characters

message

Safe user-facing description. No secrets, no raw stdout.

string | null

<= 512 characters

occurred_at

required

RFC 3339 UTC with microsecond precision.

string format: date-time

recorded_at

required

RFC 3339 UTC with microsecond precision.

string format: date-time

payload

Bounded fact payload (no secrets, no raw stdout).

object

attempt

integer | null

>= 1

next_cursor

required

Opaque cursor for the next page; null when there are no more rows.

string | null

>= 1 characters <= 512 characters

Example

{
  "items": [
    {
      "actor": {
        "type": "api"
      },
      "stage": "validate",
      "level": "info",
      "occurred_at": "2026-07-25T10:15:30.123456Z",
      "recorded_at": "2026-07-25T10:15:30.123456Z"
    }
  ]
}

401

Missing/invalid credentials (code=unauthorized).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

Allowed values: unauthorized forbidden csrf_rejected not_found conflict idempotency_conflict validation_failed rate_limited payload_too_large unsupported_agent_version temporarily_unavailable offline_queue_full online_queue_full plan_required server_limit_reached feature_not_entitled account_in_grace account_frozen payment_pending payment_expired payment_amount_mismatch change_already_pending change_already_applied change_effective reserve_not_covered direction_changed

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

403

Authenticated but not permitted. code=forbidden — role/scope mismatch; code=feature_not_entitled — the plan does not include the capability; code=account_frozen — the account is frozen and this operation is declared x-ermeon-frozen: deny. The three are deliberately distinct: only the last one is fixed by a top-up (13 §5.6).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}

404

Resource does not exist in this tenant. Foreign identifiers also return 404 (anti-enumeration).

application/problem+json

RFC 9457 problem document with a stable machine code.

object

type

required

string format: uri

title

required

string

<= 256 characters

status

required

integer

>= 100 <= 599

code

required

Stable machine-readable error code (03 §2.4).

string

detail

string

<= 2048 characters

instance

string

<= 512 characters

request_id

UUID (v7 for new entities; v4 accepted during migration).

string format: uuid

errors

Array<object>

<= 100 items

object

path

required

JSON Pointer to the offending field.

string

<= 512 characters

code

required

string

<= 64 characters

Example

{
  "type": "https://ermeon.com/problems/validation",
  "code": "unauthorized"
}