Get full flag details with history

GET 
/flags/:id/details

Returns the full flag object plus its audit history trail (newest first), keyed by flag id. Includes the resolved certifyPractitionerId and history attachment metadata (no signed URLs). The payload carries both updatedAt (raw flags.updated_at — the change-detection signal for pollers) and updatedOn (the display value preferring metaData.sourceUpdateDate). Note comment-only history rows may not bump updatedAt, so clients should also diff the history array; status changes such as closures do bump it. Requires MONITORING_WORKFLOW_READ. npdb-data flags also carry an npdbPdf block; its signed URL is issued only to callers holding MONITORING_WORKFLOW_NPDB_PDF_READ, otherwise the block's status is PERMISSION_REQUIRED with no URL.

Request

Responses

200

The full flag detail payload with history trail

401

Unauthorized — authentication is required; the JWT is missing or invalid

403

Forbidden — the caller lacks the MONITORING_WORKFLOW_READ permission

404

Not Found — no flag exists with the given id for the requesting tenant, or the endpoint is disabled by configuration

500

Internal server error — an unexpected error occurred while processing the request, including when the upstream DAL flagFindById returns no history enrichment (enrichment disabled or degraded) or a truncated history trail (the flag has more rows than the DAL's inline history limit)

502

Bad Gateway — the upstream data service returned an error; the body is a sanitized generic message, never the upstream error payload