Who controls the screen
bearerAuthorizationBearer <token>An API token
id*stringA session id
The agent, or a person until until
application/json- response
holder*unknowncurl -X GET 'http://127.0.0.1:7777/sessions/ses_6c1f2a0b9d3e4f5a6b7c/control'{ "holder": "agent"}Watch the sandbox's screen GET
`multipart/x-mixed-replace; boundary=pistis-frame`, for as long as you read it. Each part is a picture (`image/jpeg`, with `X-Screen-Width` and `X-Screen-Height` when known), sent only when the screen changed, or `application/json` `{"none": "<why>"}` while there is no picture (no browser open yet, the agent isn't using the sandbox). The sandbox makes pictures only while someone watches; a slow reader gets the newest picture, never a backlog. Nothing is recorded. Whoever may read the session may watch it.
List the decisions people made in a session GET
Every decision a person made that shaped the work, newest first: approvals and denials (the exact call), answers to the agent's questions, take-overs of the screen (how long, the note), annotations, retried stopped steps, pauses. Read from the session's own record, so a later message can't change it. Whoever may view the session may.