Assets

Serve Session File

Serve files written by the agent sandbox, with auth + ownership + path validation.

Security layers:

  1. Auth: optional, unauthenticated access allowed for public (shared) chats
  2. Org access: authenticated users must belong to the org or its parent org
  3. Chat ownership: public chats are open; private chats require ownership or admin
  4. Path: resolved inside the session, outside its picture store, an allowed extension, then opened as a real file inside the session (confined_fs.open_read) and served from that handle
  5. MIME denylist: dangerous content types forced to application/octet-stream
get/api/session-file/{chat_id}

Request

  • Base URL: https://app.getdot.ai (the document declares no server; this is the origin it was published from)
  • URL: https://app.getdot.ai/api/session-file/{chat_id}
  • Auth: none declared

Path parameters

chat_idstring required

Query parameters

pathstring required

Relative path within the session directory

org_idstring required

Organization ID that owns the chat

winteger nullable

Max width for an image preview; ignored for other files

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.