# listFormActivity

Recent per-session activity for one form, newest first, cursor-paginated via after. Each row is a viewer session with its status, submit/abandon timestamps, traffic source, device, seconds-to-submit, the matched contact name, and the assigned point-person. Pass excludeViewOnly: true to drop sessions that never started filling.

- Call: `POST https://server.goliathdata.com/api/v1/call` with `{ "operationId": "listFormActivity", "variables": {...} }`
- Scope: `READ`
- Type: query
- Idempotency: a read; rejects `Idempotency-Key`
- Rate-limited: yes
- Result cap: `limit` is clamped to 50, without an error

## Variables

- `formId`: `ID!` (required)
- `limit`: `Int` (default `25`)
- `after`: `String`
- `excludeViewOnly`: `Boolean`

## Response (data, an example)

```json
{
  "embedFormQuery": {
    "analyticsActivity": {
      "rows": [
        {
          "sessionId": "<ID>",
          "firstViewAt": "…",
          "lastActivityAt": "…",
          "submittedAt": "…",
          "abandonedAt": "…",
          "sessionStatus": "…",
          "trafficSource": "…",
          "deviceClass": "…",
          "secondsToSubmit": 0,
          "embedFormSubmissionId": "<ID>",
          "city": "…",
          "regionCode": "…",
          "country": "…",
          "contactName": "…",
          "assignedTo": {
            "userId": "<ID>",
            "firstName": "…",
            "lastName": "…"
          }
        }
      ],
      "nextCursor": "…"
    }
  }
}
```

## Example

```bash
curl https://server.goliathdata.com/api/v1/call \
  -H "Authorization: Bearer $GOLIATH_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "operationId": "listFormActivity",
    "variables": {
      "formId": "<formId>"
    }
  }'
```