---
title: "Every file of the current version, and whether you may edit them"
method: GET
path: "/builder/sessions/{sessionId}/code"
tags: ["Builder"]
---

# Every file of the current version, and whether you may edit them

`GET /builder/sessions/{sessionId}/code`

## Request

- Base URL: `https://hostingsurge.com/api/v1`
- URL: `https://hostingsurge.com/api/v1/builder/sessions/{sessionId}/code`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-hs_session`

## Path parameters

- `sessionId` string, uuid, required

## Response `200`

The code

- object
  - `sessionId` string, uuid, required
  - `version` integer, required: The session's version number (its turn count); a save names it as baseVersion
  - `commitSha` string, nullable, required
  - `files` object[], required
    - `path` string, required
    - `content` string, required
  - `editable` boolean, required: Whether this caller may save code (a paid plan, write access, an active site)
  - `readOnlyReason` 'plan' | 'role' | 'archived' | 'draft_closed' | 'null', nullable, required

## Other responses

- `400`: Invalid request (code invalid_request)
- `401`: Missing or invalid session/token (code unauthorized)
- `402`: Code editing and GitHub sync need a paid plan (code upgrade_required, details.feature builder.github_export), or a limit was reached
- `403`: Authenticated but not permitted (code forbidden)
- `404`: Not found or not visible to the caller (code not_found)
- `409`: A change is running, the editor is stale (details.reason stale), a secret is in the code (secret_detected), or the draft is closed
- `501`: Not available on this server (code not_configured)

---

[API](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api.md) · [All operations](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/llms.txt) · [OpenAPI document](https://skmtc.dev/hostingsurge/apis/hostingsurge-platform-api/revisions/4d08337cdff1?raw)