Skip to main content
POST
Restore a previous record version

Authorizations

Authorization
string
header
required

Human personal access token (sk-actrl-pat-...).

Headers

Idempotency-Key
string

Stable key for safely retrying this write. Reuse the same key only with the same request body; results are retained for 24 hours and conflicting reuse returns 409.

Path Parameters

id
string
required

Body

application/json
dekVersion
integer
required

Record DEK version read before opening its source wrapper.

Required range: x >= 1
sourceWrappedDek
object
required

Exact encrypted source wrapper opened by the client; never plaintext key material.

sourceVersionId
string<uuid> | null
required

Current content version read by the client; null for an empty Environment variant or an unversioned legacy record.

targetVersionId
string<uuid>
required

Historical version opened locally before reciphering under the current DEK.

ciphertext
string
required

Historical plaintext re-encrypted client-side under the current DEK.

cipherMeta
object
required

Client-generated AES-GCM metadata for the new current version.

sourceProjectKeyVersion
integer

Required only when the source is the project copy; omit for an individual wrapper.

Required range: x >= 1

Response

Previous version restored.

ok
enum<boolean>
required
Available options:
true
data
object
required