> ## Documentation Index
> Fetch the complete documentation index at: https://docs.terminal3.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Read your organization's activity log

> Page through every audited contract dispatch in your organization with client.getActivityLog().

`client.getActivityLog(opts?)` returns one page of your **organization's** agent-activity audit log — every audited contract dispatch (actor, on-behalf-of, contract, function, outcome), reconstructed from the cluster's append-only ledger. The scope organization is resolved server-side from your session DID: there's no scope parameter, and a page carries **every member's** activity in that org, not just your own.

```typescript theme={null}
let cursor: number | undefined;
do {
  const page = await client.getActivityLog({
    limit: 200,
    ...(cursor !== undefined && { before_seq: cursor }),
  });
  render(page.entries);
  cursor = page.next_seq ?? undefined;
} while (cursor !== undefined);
```

<Warning>
  **Page until `next_seq` is `null` — never stop on a short or empty page.** The node caps how much ledger a single call decrypts, so a page can come back shorter than `limit` (even empty) while the window still has rows and `next_seq` is still non-null. Only a `null` `next_seq` means the window is exhausted.
</Warning>

Rows come back **newest first** (descending `seq_no`). Each `ActivityEntry`:

| Field          | Type                               | Meaning                                                                                                                                                                                |
| -------------- | ---------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `seq_no`       | `number`                           | Ledger index — the ordering key. Use this, not `timestamp_ms`, to sort: entries from different nodes can have skewed clocks.                                                           |
| `hash`         | `string`                           | Hex SHA-256 of the stored entry — read-time tamper evidence.                                                                                                                           |
| `timestamp_ms` | `number`                           | Call time in Unix ms, stamped on the node that took the request (per-node wall clock, not cluster-assigned).                                                                           |
| `caller_type`  | `"agent" \| "human"`               | Decided server-side by an existence check on `actor` in the agent registry.                                                                                                            |
| `actor`        | `string`                           | DID that actually invoked the contract.                                                                                                                                                |
| `on_behalf_of` | `string`                           | DID of the owner the caller acted for. Equals `actor` on a self / own-authority call — never null.                                                                                     |
| `org`          | `string`                           | Organization the acting principal belongs to — identical on every row of a page.                                                                                                       |
| `contract`     | `string`                           | Contract that ran, e.g. `tee:user/contracts`.                                                                                                                                          |
| `function`     | `string`                           | Contract function invoked, e.g. `user-upsert`.                                                                                                                                         |
| `outcome`      | `"success" \| "denied" \| "error"` | Host-stamped result of the dispatch.                                                                                                                                                   |
| `roles?`       | `string[]`                         | Role ids the acting authority carried at call time. Omitted when the authority carried no role. **On a `denied` entry this is the caller's *claimed* authority, not a validated one.** |

Params (`GetActivityLogOptions`), all optional — `{}` is a valid call: `from_ms` / `to_ms` bound the window (Unix ms, inclusive); `before_seq` is the paging cursor (the previous page's `next_seq`); `limit` is clamped server-side to 1–1000 (default 200).

Like `execute`, this runs the session-payload encryption rather than plain HTTPS — entries carry principal DIDs, so `getActivityLog()` requires an authenticated session.

<Note>
  **Not the same method as `getAuditEvents()`.** `getAuditEvents()` returns *your own* audit trail (every actor, PII-bearing action/target/details included) — it's the right call when you need your own history with detail. `getActivityLog()` returns your *organization's* activity, metadata only (no call arguments or payloads), scoped to every member. Reach for `getActivityLog()` for an org-wide activity view; reach for `getAuditEvents()` for your own detailed trail.
</Note>