---
title: "Read an upload session (redacted)"
method: GET
path: "/vaults/v1/{vault_id}/upload-sessions/{upload_session_id}"
tags: ["vault"]
---

# Read an upload session (redacted)

`GET /vaults/v1/{vault_id}/upload-sessions/{upload_session_id}`

## Request

- Base URL: `https://api.run402.com`
- URL: `https://api.run402.com/vaults/v1/{vault_id}/upload-sessions/{upload_session_id}`
- Auth: one of:
  - API key in header `SIGN-IN-WITH-X`
  - HTTP bearer
  - HTTP bearer

State, lease, reservation, and the manifest's kinds/ids/hashes/sizes. Presigned URLs are returned ONLY at issuance and are never re-served here.

## Path parameters

- `vault_id` string, required
- `upload_session_id` string, required

## Headers

- `SIGN-IN-WITH-X` string, required

## Response `200`

Redacted session view

- object
  - `upload_session_id` string, uuid
  - `repo_id` string
  - `state` 'open' | 'expired' | 'finalized' | 'aborted'
  - `resource_binding` object: Which resource lane the session draws on. Defaults to `ordinary_push`.
    - `kind` 'ordinary_push' | 'maintenance_cycle' | 'repair_attempt', required
    - `maintenance_lease_id` string
    - `repair_attempt_id` string
  - `lease_expires_at` string, date-time, nullable
  - `created_at` string, date-time, nullable
  - `finalized_at` string, date-time, nullable
  - `aborted_at` string, date-time, nullable
  - `reserved_bytes` string: Decimal byte count as a string (values exceed 2^53).
  - `charged_bytes` string: Decimal byte count as a string (values exceed 2^53).
  - `objects` object[]
    - `object_kind` 'wal_pack' | 'ref_state' | 'retention_roots' | 'checkpoint_manifest' | 'checkpoint_pack' | 'checkpoint_claim_set' | 'maintenance_stage_claim_set' | 'maintenance_stage_page' | 'verifier_receipt' | 'key_envelope', required
    - `object_id` string: Id-addressed kinds only (`<prefix>_<32 hex>`).
    - `epoch` string: key_envelope only: 16 lowercase hex.
    - `recipient_fingerprint` string: key_envelope only: `ek_<32 hex>`.
    - `sha256` string, required: FULL_OBJECT SHA-256 of the bytes as stored, 64 lowercase hex.
    - `size_bytes` string, required: Decimal byte count as a string (values exceed 2^53).
    - `base_generation` string: wal_pack only: 16 lowercase hex.

## Other responses

- `403`: Not authorized (VAULT_ACCESS_DENIED)
- `404`: No such session on this vault

---

[API](https://skmtc.dev/run402/apis/run402-api.md) · [All operations](https://skmtc.dev/run402/apis/run402-api/llms.txt) · [OpenAPI document](https://skmtc.dev/run402/apis/run402-api/revisions/893607557f50?raw)