diff --git a/docs-site/src/content/docs/reference/cli/agents.md b/docs-site/src/content/docs/reference/cli/agents.md
index 882c7ef59db..f0d1f4b55d1 100644
--- a/docs-site/src/content/docs/reference/cli/agents.md
+++ b/docs-site/src/content/docs/reference/cli/agents.md
@@ -450,6 +450,24 @@ Any displayed totals reflect readable records only. If a filter has no readable
 the warning and guidance instead of total lines; skipped records may contain matches.
 `--json` preserves the response-level `usageIncomplete` diagnostic and reason.
 
+### Page indexed request history
+
+```bash
+ocx logs history --provider xai --status 200 --limit 50 --json
+ocx logs history --cursor '<nextCursor>' --json
+ocx logs get <request-id> --json
+```
+
+`ocx observe logs history` and `ocx observe logs get` are the equivalent family
+forms. These read the derived request-history index, not the recent `ocx logs`
+ring. `--limit` is 1–100 (default 50). `--from` and `--to` accept epoch
+milliseconds or full ISO datetimes with a timezone and are inclusive. `--json`
+returns `{entries,hasMore,nextCursor,index}`. `--jsonl` emits rows only; when
+more pages exist, `nextCursor=…` is printed on stderr so a caller can resume
+without mixing the token into the row stream. Empty matches succeed. `get`
+returns one canonical row by request ID; `ocx logs explain` remains the
+route-decision view for that same ID.
+
 ### Filter a bounded log snapshot
 
 ```bash
diff --git a/docs-site/src/content/docs/reference/configuration/routing.md b/docs-site/src/content/docs/reference/configuration/routing.md
index ff299a2b440..47c688e9509 100644
--- a/docs-site/src/content/docs/reference/configuration/routing.md
+++ b/docs-site/src/content/docs/reference/configuration/routing.md
@@ -367,7 +367,8 @@ Returned history and route-decision payloads expose only masked request metadata
 (for example opaque `apiKeyId` labels). They do not include credentials, raw
 prompt bodies, or provider secrets.
 
-CLI: `ocx logs explain <request-id>`, `ocx logs rebuild-index`,
+CLI: `ocx logs history`, `ocx logs get <request-id>`,
+`ocx logs explain <request-id>`, `ocx logs rebuild-index`,
 `ocx logs index-status`, `ocx route policy list | show | dry-run | evaluate`.
 
 ## Migration
diff --git a/scripts/test-layout/layout.json b/scripts/test-layout/layout.json
index 16227fe5cf1..68630b8f8e1 100644
--- a/scripts/test-layout/layout.json
+++ b/scripts/test-layout/layout.json
@@ -22,7 +22,7 @@
     "management-sidecar-anthropic-instance.test.ts": "server", "anthropic2-usage-attribution.test.ts": "usage", "vision-anthropic-instance-sidecar.test.ts": "vision", "web-search-anthropic-instance.test.ts": "web-search",
     "provider-anthropic-instance.test.ts": "providers", "config-anthropic-instance-pool.test.ts": "config", "oauth-anthropic-instance-registration.test.ts": "oauth", "oauth-anthropic-instance-refresh.test.ts": "oauth",
     "claude-picker-upload.test.ts": "claude-integration", "claude-picker-linger.test.ts": "claude-integration", "messages-native-scope.test.ts": "claude-integration", "catalog-auto-review-row.test.ts": "codex-integration",
-    "cli-log-view-filter.test.ts": "cli", "cli-usage-model-search.test.ts": "cli", "cli-companion-usage.test.ts": "cli", "cli-account-key-quota.test.ts": "cli",
+    "cli-log-view-filter.test.ts": "cli", "cli-log-history.test.ts": "cli", "cli-usage-model-search.test.ts": "cli", "cli-companion-usage.test.ts": "cli", "cli-account-key-quota.test.ts": "cli",
     "cli-observe-snapshot.test.ts": "cli", "cli-access-data-plane.test.ts": "cli", "cli-access-key-guard.test.ts": "cli", "cli-access-rename.test.ts": "cli",
     "cli-access-audio.test.ts": "cli", "cli-access-audio-live.test.ts": "cli", "cli-log-follow.test.ts": "cli", "cli-injection-follow.test.ts": "cli",
     "cli-usage-scope.test.ts": "cli", "cli-system-health.test.ts": "cli", "cli-companion-timeline.test.ts": "cli", "server-cli-key-probe-admission.test.ts": "server",
diff --git a/skills/ocx/references/01_management_surface.md b/skills/ocx/references/01_management_surface.md
index 901cb97f388..f00b52a573e 100644
--- a/skills/ocx/references/01_management_surface.md
+++ b/skills/ocx/references/01_management_surface.md
@@ -30,7 +30,7 @@ These answer in the CLI head and never reach the proxy, so they work with nothin
 | [accounts](01_surface_accounts.md) | 40 |
 | [agents-routing](01_surface_agents-routing.md) | 51 |
 | [integrations](01_surface_integrations.md) | 41 |
-| [observe-system](01_surface_observe-system.md) | 92 |
+| [observe-system](01_surface_observe-system.md) | 94 |
 | [access-remote](01_surface_access-remote.md) | 32 |
 | [lab](01_surface_lab.md) | 21 |
 
@@ -923,6 +923,14 @@ Original invocation order. These headings preserve links to the previous single-
 
 [Read-oriented task](01_surface_observe-system.md#ocx-observe-logs)
 
+### `ocx logs history`
+
+[Read-oriented task](01_surface_observe-system.md#ocx-logs-history)
+
+### `ocx logs get`
+
+[Read-oriented task](01_surface_observe-system.md#ocx-logs-get)
+
 ### `ocx logs explain`
 
 [Read-oriented task](01_surface_observe-system.md#ocx-logs-explain)
@@ -1393,6 +1401,6 @@ Original invocation order. These headings preserve links to the previous single-
 
 ## Counts
 
-- declared capabilities: 336
+- declared capabilities: 338
 - of those, state-changing: 205
 - head-resolved invocations: 2
diff --git a/skills/ocx/references/01_surface_observe-system.md b/skills/ocx/references/01_surface_observe-system.md
index 2c6f86aded2..ad8e60897fc 100644
--- a/skills/ocx/references/01_surface_observe-system.md
+++ b/skills/ocx/references/01_surface_observe-system.md
@@ -8,7 +8,7 @@
 Use these declarations to choose a task, then check its flags and authority before execution.
 Non-mutating probes may still contact providers, consume quota or refresh caches.
 
-Declared capabilities: 92.
+Declared capabilities: 94.
 
 ### `ocx companion`
 
@@ -95,7 +95,7 @@ JSON mode: `payload`.
 - Follow uses the server cursor and a bounded ordered window, preserving same-ID amendments and repeated row occurrences. It never enables logging.
 - --events emits version1 snapshots/appends with cursor and limit for observed-window reconstruction. Legacy row JSONL cannot express removals or resets exactly; neither mode promises lossless history between polls.
 - Follow limit is1–2000, default200. Polling is serial and cancellable; SIGINT exits130 and SIGTERM143. Malformed/oversized/unavailable responses stop without a fabricated empty snapshot or retry.
-- Nested explain reads recorded decisions; rebuild-index and index-status touch the local derived index and retain separate declarations.
+- Nested history pages the derived index and get reads one canonical row; explain reads recorded decisions; rebuild-index and index-status touch the local derived index and retain separate declarations.
 
 ### `ocx storage report`
 
@@ -565,6 +565,63 @@ JSON mode: `payload`.
 - --events emits version1 snapshots/appends with cursor and limit for observed-window reconstruction. Legacy row JSONL cannot express removals or resets exactly; neither mode promises lossless history between polls.
 - Follow limit is1–2000, default200. Polling is serial and cancellable; SIGINT exits130 and SIGTERM143. Malformed/oversized/unavailable responses stop without a fabricated empty snapshot or retry.
 
+### `ocx logs history`
+
+Usage: `ocx logs history [--provider <name>] [--model <id>] [--requested-model <id>] [--status <code>] [--conversation <id>] [--surface <name>] [--protocol <responses|chat|messages>] [--api-key-id <id>] [--profile <id>] [--fallback <true|false>] [--from <epoch-ms|ISO-datetime>] [--to <epoch-ms|ISO-datetime>] [--cursor <token>] [--limit <1-100>] [--json|--jsonl]`
+
+Page the indexed request-history ledger with filters and a resumable cursor.
+
+State-changing: no.
+
+| Method | Route |
+|---|---|
+| GET | `/api/request-history` |
+
+| Flag | Value | Meaning |
+|---|---|---|
+| `--provider` | string | Filter provider, including failover attempts. |
+| `--model` | string | Filter served model, including failover attempts. |
+| `--requested-model` | string | Filter the model the client asked for. |
+| `--status` | number | HTTP status 100-599. |
+| `--conversation` | string | Conversation ID or stored hash. |
+| `--conversationId` | string | Alias of --conversation. |
+| `--surface` | string | Calling client surface recorded on the row. |
+| `--protocol` | string | Inbound wire: responses, chat or messages. |
+| `--api-key-id` | string | Exact management key id recorded on the row. |
+| `--profile` | string | Routing profile id. |
+| `--fallback` | string | true selects rows that failed over; false selects rows that did not. |
+| `--from` | string | Inclusive start as epoch milliseconds or ISO datetime with timezone. |
+| `--to` | string | Inclusive end as epoch milliseconds or ISO datetime with timezone. |
+| `--cursor` | string | Opaque nextCursor from a previous page. |
+| `--limit` | number | 1-100 rows; default 50. |
+| `--json` | boolean | Emit the management payload, including hasMore, nextCursor and index. |
+| `--jsonl` | boolean | Matching rows only; hasMore and nextCursor go to stderr. |
+
+JSON mode: `payload`.
+
+- Pages the derived request-history index, not the recent /api/logs ring. Empty matches succeed. Also accepted after observe logs.
+- JSON is the management payload. JSONL emits entries only; resume with --cursor from stderr when hasMore is true.
+
+### `ocx logs get`
+
+Usage: `ocx logs get <request-id> [--json]`
+
+Read one canonical request-history row by request ID.
+
+State-changing: no.
+
+| Method | Route |
+|---|---|
+| GET | `/api/request-history/{id}` |
+
+| Flag | Value | Meaning |
+|---|---|---|
+| `--json` | boolean | Emit the canonical row as JSON. |
+
+JSON mode: `payload`.
+
+- The request ID is URI-encoded. This is the stored row, not the route-decision view from logs explain. A missing id is a 404. Also accepted after observe logs.
+
 ### `ocx logs explain`
 
 Usage: `ocx logs explain <request-id> [--json]`
diff --git a/skills/ocx/references/02_json_shapes.md b/skills/ocx/references/02_json_shapes.md
index 0a36442ff36..f8fcbb35037 100644
--- a/skills/ocx/references/02_json_shapes.md
+++ b/skills/ocx/references/02_json_shapes.md
@@ -40,7 +40,7 @@ One row per line. The fields worth branching on:
 
 | Field | Meaning |
 |---|---|
-| `requestId` | pass to `ocx logs explain` |
+| `requestId` | pass to `ocx logs get` or `ocx logs explain` |
 | `conversationId` | groups a conversation; also printed as `conv=<id>` in human output |
 | `accountLogLabel` | which account served it (`main`, `p<hex6>`, `o<hex6>`); also printed as `acct=<label>` in human output |
 | `provider` / `model` | what actually served it |
@@ -62,6 +62,16 @@ to `requestedModel` is how you get a wrong answer about which provider served it
 One configured provider per line. Each object has the same fields as an item in the
 `configured` array from `ocx provider list --json`; the `registryCount` summary is omitted.
 
+## `ocx logs history --json`
+
+The management page: `entries[]`, `hasMore`, optional `nextCursor`, and `index` (schema version,
+indexed row count, source size). Resume with `--cursor <nextCursor>`. `--jsonl` emits `entries`
+only; `nextCursor` is printed on stderr when `hasMore` is true.
+
+## `ocx logs get <request-id>`
+
+One canonical request-history row, the same DTO as a history `entries[]` item. Missing ids are 404.
+
 ## `ocx logs explain <request-id>`
 
 ```json
diff --git a/skills/ocx/references/03_recipes.md b/skills/ocx/references/03_recipes.md
index 7b0c7b84b0c..3451516d8aa 100644
--- a/skills/ocx/references/03_recipes.md
+++ b/skills/ocx/references/03_recipes.md
@@ -69,13 +69,16 @@ returns a `reason` you can read.
 ## 3. Trace one conversation end to end
 
 ```bash
-ocx logs --conversation <conversation-id> --jsonl
+ocx logs history --conversation <conversation-id> --json
+ocx logs get <request-id> --json
 ocx logs explain <request-id>
 ```
 
-**There is no `ocx request-history` command.** `ocx logs explain <request-id>` is the route-decision
-view; it returns `routeDecision` with `routeKind`, every `candidates[]` entry with its `eligible`
-flag and `exclusions`, and `selected` naming the winner and the `reason` it won.
+`ocx logs history` pages the derived request-history index (not the recent ring). `--json` includes
+`nextCursor` when another page exists; pass it back as `--cursor`. `ocx logs get <request-id>` is
+the canonical stored row. `ocx logs explain <request-id>` is the route-decision view; it returns
+`routeDecision` with `routeKind`, every `candidates[]` entry with its `eligible` flag and
+`exclusions`, and `selected` naming the winner and the `reason` it won.
 
 `--jsonl` rows carry `requestId`, `conversationId`, `provider`, `model`, `status`, `durationMs`, and
 `attempts[]`. Human output prints `conv=<id>` so a conversation filter can be distinguished from an
diff --git a/src/cli/capabilities-base.ts b/src/cli/capabilities-base.ts
index 4a374354b43..ed12d36f0c6 100644
--- a/src/cli/capabilities-base.ts
+++ b/src/cli/capabilities-base.ts
@@ -406,7 +406,7 @@ export const CAPABILITIES: readonly Capability[] = [
     flags: [{"name":"--provider","value":"string","summary":"Filter provider, including failover attempts."},{"name":"--model","value":"string","summary":"Filter model, including failover attempts."},{"name":"--status","value":"string","summary":"Filter status code."},{"name":"--conversation","value":"string","summary":"Filter conversation ID."},{"name":"--conversationId","value":"string","summary":"Alias of --conversation."},{"name":"--account","value":"string","summary":"Filter stable account log label."},{"name":"--limit","value":"number","summary":"Positive row limit; default 200."},{"name":"--follow","value":"boolean","summary":"Poll for new rows; add --jsonl to emit JSONL."},{"name":"-f","value":"boolean","summary":"Alias of --follow."},{"name":"--json","value":"boolean","summary":"Emit the result as JSON."},{"name":"--jsonl","value":"boolean","summary":"Emit one row per JSON line; exclusive with --json."},{"name":"--events","value":"boolean","summary":"Versioned snapshot/append JSONL; requires --follow, conflicts with --json. Redundant --jsonl is accepted."}],
     mutates: false,
     json: "payload",
-    details: ["Follow uses the server cursor and a bounded ordered window, preserving same-ID amendments and repeated row occurrences. It never enables logging.","--events emits version1 snapshots/appends with cursor and limit for observed-window reconstruction. Legacy row JSONL cannot express removals or resets exactly; neither mode promises lossless history between polls.","Follow limit is1–2000, default200. Polling is serial and cancellable; SIGINT exits130 and SIGTERM143. Malformed/oversized/unavailable responses stop without a fabricated empty snapshot or retry.","Nested explain reads recorded decisions; rebuild-index and index-status touch the local derived index and retain separate declarations."],
+    details: ["Follow uses the server cursor and a bounded ordered window, preserving same-ID amendments and repeated row occurrences. It never enables logging.","--events emits version1 snapshots/appends with cursor and limit for observed-window reconstruction. Legacy row JSONL cannot express removals or resets exactly; neither mode promises lossless history between polls.","Follow limit is1–2000, default200. Polling is serial and cancellable; SIGINT exits130 and SIGTERM143. Malformed/oversized/unavailable responses stop without a fabricated empty snapshot or retry.","Nested history pages the derived index and get reads one canonical row; explain reads recorded decisions; rebuild-index and index-status touch the local derived index and retain separate declarations."],
     usage: "ocx logs [--provider <name>] [--model <id>] [--status <code>] [--conversation <id>] [--account <label>] [--limit <n>] [--follow] [--json|--jsonl]; ocx logs --follow --events [--limit <1-2000>]",
   },
   {
diff --git a/src/cli/capabilities-observe-system.ts b/src/cli/capabilities-observe-system.ts
index 4f2027a2d25..16b9153b761 100644
--- a/src/cli/capabilities-observe-system.ts
+++ b/src/cli/capabilities-observe-system.ts
@@ -16,6 +16,47 @@ export const OBSERVE_SYSTEM_CAPABILITIES: readonly Capability[] = [
     json: "payload",
     details: ["Follow uses the server cursor and a bounded ordered window, preserving same-ID amendments and repeated row occurrences. It never enables logging.","--events emits version1 snapshots/appends with cursor and limit for observed-window reconstruction. Legacy row JSONL cannot express removals or resets exactly; neither mode promises lossless history between polls.","Follow limit is1–2000, default200. Polling is serial and cancellable; SIGINT exits130 and SIGTERM143. Malformed/oversized/unavailable responses stop without a fabricated empty snapshot or retry."],
   },
+  {
+    command: ["logs", "history"],
+    summary: "Page the indexed request-history ledger with filters and a resumable cursor.",
+    usage: "ocx logs history [--provider <name>] [--model <id>] [--requested-model <id>] [--status <code>] [--conversation <id>] [--surface <name>] [--protocol <responses|chat|messages>] [--api-key-id <id>] [--profile <id>] [--fallback <true|false>] [--from <epoch-ms|ISO-datetime>] [--to <epoch-ms|ISO-datetime>] [--cursor <token>] [--limit <1-100>] [--json|--jsonl]",
+    routes: [{"method": "GET", "path": "/api/request-history"}],
+    flags: [
+      {"name": "--provider", "value": "string", "summary": "Filter provider, including failover attempts."},
+      {"name": "--model", "value": "string", "summary": "Filter served model, including failover attempts."},
+      {"name": "--requested-model", "value": "string", "summary": "Filter the model the client asked for."},
+      {"name": "--status", "value": "number", "summary": "HTTP status 100-599."},
+      {"name": "--conversation", "value": "string", "summary": "Conversation ID or stored hash."},
+      {"name": "--conversationId", "value": "string", "summary": "Alias of --conversation."},
+      {"name": "--surface", "value": "string", "summary": "Calling client surface recorded on the row."},
+      {"name": "--protocol", "value": "string", "summary": "Inbound wire: responses, chat or messages."},
+      {"name": "--api-key-id", "value": "string", "summary": "Exact management key id recorded on the row."},
+      {"name": "--profile", "value": "string", "summary": "Routing profile id."},
+      {"name": "--fallback", "value": "string", "summary": "true selects rows that failed over; false selects rows that did not."},
+      {"name": "--from", "value": "string", "summary": "Inclusive start as epoch milliseconds or ISO datetime with timezone."},
+      {"name": "--to", "value": "string", "summary": "Inclusive end as epoch milliseconds or ISO datetime with timezone."},
+      {"name": "--cursor", "value": "string", "summary": "Opaque nextCursor from a previous page."},
+      {"name": "--limit", "value": "number", "summary": "1-100 rows; default 50."},
+      {"name": "--json", "value": "boolean", "summary": "Emit the management payload, including hasMore, nextCursor and index."},
+      {"name": "--jsonl", "value": "boolean", "summary": "Matching rows only; hasMore and nextCursor go to stderr."},
+    ],
+    mutates: false, json: "payload",
+    details: [
+      "Pages the derived request-history index, not the recent /api/logs ring. Empty matches succeed. Also accepted after observe logs.",
+      "JSON is the management payload. JSONL emits entries only; resume with --cursor from stderr when hasMore is true.",
+    ],
+  },
+  {
+    command: ["logs", "get"],
+    summary: "Read one canonical request-history row by request ID.",
+    usage: "ocx logs get <request-id> [--json]",
+    routes: [{"method": "GET", "path": "/api/request-history/{id}"}],
+    flags: [{"name": "--json", "value": "boolean", "summary": "Emit the canonical row as JSON."}],
+    mutates: false, json: "payload",
+    details: [
+      "The request ID is URI-encoded. This is the stored row, not the route-decision view from logs explain. A missing id is a 404. Also accepted after observe logs.",
+    ],
+  },
   {
     command: ["logs", "explain"], summary: "Explain the recorded routing decision for one request.",
     usage: "ocx logs explain <request-id> [--json]",
diff --git a/src/cli/log-history.ts b/src/cli/log-history.ts
new file mode 100644
index 00000000000..b06926f7b9a
--- /dev/null
+++ b/src/cli/log-history.ts
@@ -0,0 +1,172 @@
+/**
+ * Indexed request-history reads: page the derived ledger, or fetch one canonical row.
+ *
+ * Distinct from `ocx logs` (the recent ring) and `ocx logs explain` (route-decision).
+ */
+import { REQUEST_HISTORY_DEFAULT_PAGE_SIZE, REQUEST_HISTORY_MAX_PAGE_SIZE } from "../routing/history/indexer";
+import { parseUsageTimeWindow } from "../usage/time-range";
+import {
+  CliUsageError,
+  printData,
+  rejectArgs,
+  runtimeRequest,
+  takeFlag,
+  takeIntegerOption,
+  takeOption,
+  type RuntimeApiDeps,
+} from "./runtime-api";
+
+type LogRow = Record<string, unknown>;
+
+export const LOG_HISTORY_USAGE = `Usage:
+  ocx logs history [--provider <name>] [--model <id>] [--requested-model <id>]
+      [--status <code>] [--conversation <id>] [--surface <name>] [--protocol <responses|chat|messages>]
+      [--api-key-id <id>] [--profile <id>] [--fallback <true|false>]
+      [--from <epoch-ms|ISO-datetime>] [--to <epoch-ms|ISO-datetime>]
+      [--cursor <token>] [--limit <1-${REQUEST_HISTORY_MAX_PAGE_SIZE}>] [--json|--jsonl]
+  ocx logs get <request-id> [--json]`;
+
+const GET_USAGE = "Usage: ocx logs get <request-id> [--json]";
+const PROTOCOLS = ["responses", "chat", "messages"] as const;
+
+function query(params: Record<string, string | number | boolean | undefined>): string {
+  const search = new URLSearchParams();
+  for (const [key, value] of Object.entries(params)) {
+    if (value !== undefined) search.set(key, String(value));
+  }
+  const encoded = search.toString();
+  return encoded ? `?${encoded}` : "";
+}
+
+function timestampOption(args: string[], flag: string): number | undefined {
+  const raw = takeOption(args, flag);
+  if (raw === undefined) return undefined;
+  try {
+    return parseUsageTimeWindow(raw, raw)!.since;
+  } catch (error) {
+    throw new CliUsageError(error instanceof Error ? `${flag}: ${error.message}` : `${flag} is invalid`, LOG_HISTORY_USAGE);
+  }
+}
+
+function record(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+function formatCost(row: Record<string, unknown>): string {
+  const metrics = record(row.displayMetrics) ? row.displayMetrics : undefined;
+  const cost = metrics && record(metrics.cost) ? metrics.cost : undefined;
+  if (!cost || cost.kind !== "value" || !record(cost.estimate) || !record(cost.estimate.cost)) return "";
+  const total = cost.estimate.cost.total;
+  return typeof total === "number" && Number.isFinite(total) ? `~$${total.toFixed(4)}` : "";
+}
+
+function formatHistoryRow(row: LogRow, formatRow: (row: LogRow) => string): string {
+  const tokens = typeof row.totalTokens === "number" && Number.isFinite(row.totalTokens)
+    ? `${row.totalTokens}tok`
+    : "";
+  return [formatRow(row), tokens, formatCost(row)].filter(Boolean).join("  ");
+}
+
+function historyPage(raw: unknown): {
+  entries: Record<string, unknown>[];
+  nextCursor?: string;
+  hasMore: boolean;
+  index?: Record<string, unknown>;
+} {
+  if (!record(raw) || !Array.isArray(raw.entries) || typeof raw.hasMore !== "boolean") {
+    throw new Error("Invalid request-history page. Upgrade the proxy and retry.");
+  }
+  const entries = raw.entries;
+  if (!entries.every(record)) throw new Error("Invalid request-history page. Upgrade the proxy and retry.");
+  const nextCursor = typeof raw.nextCursor === "string" && raw.nextCursor.length > 0 ? raw.nextCursor : undefined;
+  const index = record(raw.index) ? raw.index : undefined;
+  return { entries, nextCursor, hasMore: raw.hasMore, index };
+}
+
+/** Page the derived request-history index through GET /api/request-history. */
+export async function handleLogHistoryCommand(
+  argv: string[],
+  deps: RuntimeApiDeps,
+  formatRow: (row: LogRow) => string,
+): Promise<void> {
+  const args = [...argv];
+  const wantsJson = takeFlag(args, "--json");
+  const wantsJsonl = takeFlag(args, "--jsonl");
+  const provider = takeOption(args, "--provider");
+  const model = takeOption(args, "--model");
+  const requestedModel = takeOption(args, "--requested-model");
+  const conversationId = takeOption(args, "--conversation") ?? takeOption(args, "--conversationId");
+  const surface = takeOption(args, "--surface");
+  const protocol = takeOption(args, "--protocol");
+  const apiKeyId = takeOption(args, "--api-key-id");
+  const profileId = takeOption(args, "--profile");
+  const fallbackRaw = takeOption(args, "--fallback");
+  const cursor = takeOption(args, "--cursor");
+  const status = takeIntegerOption(args, "--status", { min: 100 });
+  const limit = takeIntegerOption(args, "--limit", { min: 1 }) ?? REQUEST_HISTORY_DEFAULT_PAGE_SIZE;
+  const from = timestampOption(args, "--from");
+  const to = timestampOption(args, "--to");
+  rejectArgs(args, LOG_HISTORY_USAGE);
+  if (wantsJson && wantsJsonl) throw new CliUsageError("--json and --jsonl cannot be combined", LOG_HISTORY_USAGE);
+  if (status !== undefined && status > 599) throw new CliUsageError("--status must be an integer from 100 to 599", LOG_HISTORY_USAGE);
+  if (limit > REQUEST_HISTORY_MAX_PAGE_SIZE) {
+    throw new CliUsageError(`--limit must be between 1 and ${REQUEST_HISTORY_MAX_PAGE_SIZE}`, LOG_HISTORY_USAGE);
+  }
+  if (protocol !== undefined && !PROTOCOLS.includes(protocol as (typeof PROTOCOLS)[number])) {
+    throw new CliUsageError(`--protocol must be one of ${PROTOCOLS.join(", ")}`, LOG_HISTORY_USAGE);
+  }
+  let fallback: boolean | undefined;
+  if (fallbackRaw !== undefined) {
+    if (fallbackRaw !== "true" && fallbackRaw !== "false") {
+      throw new CliUsageError("--fallback must be true or false", LOG_HISTORY_USAGE);
+    }
+    fallback = fallbackRaw === "true";
+  }
+  if (from !== undefined && to !== undefined && from > to) {
+    throw new CliUsageError("--from must not be after --to", LOG_HISTORY_USAGE);
+  }
+  const data = await runtimeRequest(`/api/request-history${query({
+    provider, model, requestedModel, status, conversationId, surface,
+    inboundProtocol: protocol, apiKeyId, profileId, fallback, from, to, cursor, limit,
+  })}`, {}, deps);
+  const page = historyPage(data);
+  if (wantsJson) {
+    printData(data, true);
+    return;
+  }
+  if (wantsJsonl) {
+    for (const row of page.entries) console.log(JSON.stringify(row));
+    if (page.hasMore && page.nextCursor) console.error(`nextCursor=${page.nextCursor}`);
+    return;
+  }
+  const indexed = typeof page.index?.indexedRows === "number" ? page.index.indexedRows : undefined;
+  if (page.entries.length === 0) {
+    printData(data, false, [
+      "No request-history row matched the filters.",
+      ...(indexed !== undefined ? [`indexedRows=${indexed}`] : []),
+    ]);
+    return;
+  }
+  const footer = [
+    ...(indexed !== undefined ? [`indexedRows=${indexed}`] : []),
+    `hasMore=${page.hasMore}`,
+    ...(page.nextCursor ? [`nextCursor=${page.nextCursor}`] : []),
+  ];
+  printData(data, false, [...page.entries.map(row => formatHistoryRow(row, formatRow)), ...footer]);
+}
+
+/** Read one canonical request-history row through GET /api/request-history/{id}. */
+export async function handleLogGetCommand(
+  argv: string[],
+  deps: RuntimeApiDeps,
+  formatRow: (row: LogRow) => string,
+): Promise<void> {
+  const args = [...argv];
+  const requestId = args.shift();
+  const wantsJson = takeFlag(args, "--json");
+  if (!requestId) throw new CliUsageError("request id is required", GET_USAGE);
+  rejectArgs(args, GET_USAGE);
+  const result = await runtimeRequest(`/api/request-history/${encodeURIComponent(requestId)}`, {}, deps);
+  if (!record(result)) throw new Error("Invalid request-history row. Upgrade the proxy and retry.");
+  printData(result, wantsJson, wantsJson ? undefined : [formatHistoryRow(result, formatRow)]);
+}
diff --git a/src/cli/observe.ts b/src/cli/observe.ts
index 4cdc7727a41..6e33e4446b6 100644
--- a/src/cli/observe.ts
+++ b/src/cli/observe.ts
@@ -14,6 +14,7 @@ import {
 } from "./runtime-api";
 import { followLogs } from "./log-follow";
 import { handleLogFilterCommand } from "./log-view-filter";
+import { handleLogGetCommand, handleLogHistoryCommand } from "./log-history";
 import { followInjection } from "./injection-follow";
 import type { ObserveStreamDeps } from "./observe-stream";
 import { formatUsageReport } from "./usage-report";
@@ -30,6 +31,8 @@ const USAGE = `Usage:
   ocx observe logs [--provider <name>] [--model <id>] [--status <code>]
       [--conversation <id>] [--account <label>] [--limit <n>] [--follow] [--json|--jsonl] [--events]
   ocx logs explain <request-id> [--json]
+  ocx logs history [selectors] [--cursor <token>] [--limit <1-100>] [--json|--jsonl]
+  ocx logs get <request-id> [--json]
   ocx logs filter [selectors] [--scan-limit <1..2000>] [--limit <1..2000>] [--json|--jsonl]
   ocx logs rebuild-index
   ocx logs index-status
@@ -320,6 +323,8 @@ export async function handleObserveCommand(argv: string[], deps: ObserveStreamDe
     if (sub === "logs") {
       const action = rest[0];
       if (action === "filter") streamExit = await handleLogFilterCommand(rest.slice(1), deps, formatLog);
+      else if (action === "history") await handleLogHistoryCommand(rest.slice(1), deps, formatLog);
+      else if (action === "get") await handleLogGetCommand(rest.slice(1), deps, formatLog);
       else if (action === "explain") await explain(rest.slice(1), deps);
       else if (action === "rebuild-index") await rebuildIndex(rest.slice(1), deps);
       else if (action === "index-status") await indexStatus(rest.slice(1), deps);
diff --git a/src/cli/registry.ts b/src/cli/registry.ts
index f31b42cbda5..eb9ac4bef67 100644
--- a/src/cli/registry.ts
+++ b/src/cli/registry.ts
@@ -444,7 +444,14 @@ export const CLI_COMMANDS: CliCommandEntry[] = [
       "`inspect star` reads the repository star status only. Starring uses your GitHub identity and is available from the dashboard alone.",
     ],
   },
-  { name: "logs", usage: "ocx logs [filters] [--follow] [--json|--jsonl|--events]", summary: "Read or follow request logs." },
+  {
+    name: "logs",
+    usage: "ocx logs [filters] [--follow] [--json|--jsonl|--events]; ocx logs history [selectors] [--cursor <token>] [--json|--jsonl]; ocx logs get <request-id> [--json]",
+    summary: "Read or follow request logs.",
+    details: [
+      "Default reads the recent ring. `history` pages the derived index with a resumable cursor; `get` reads one canonical row; `explain` is the route-decision view.",
+    ],
+  },
   {
     name: "usage",
     usage: "ocx usage [--range <today|1d|7d|30d|all>] [--surface <all|codex|claude|grok>] [--provider <name>] [--model <id>] [--api-key-id <id>] [--search <text>] [--json]",
diff --git a/structure/cli-management.md b/structure/cli-management.md
index ec0a2af8f04..6d2f1de6046 100644
--- a/structure/cli-management.md
+++ b/structure/cli-management.md
@@ -106,6 +106,8 @@ Storage policy flags in `src/cli/storage.ts` preserve omitted enable/settings an
 
 ## Bounded display selections and per-key quota
 
+`src/cli/log-history.ts` pages `GET /api/request-history` and reads one canonical row by id. It is distinct from the recent `/api/logs` ring and from `ocx logs explain`. JSON is the management payload; JSONL emits entries and prints `nextCursor` on stderr when `hasMore` is true. Bounds reuse the usage timestamp parser. Invalid options fail before the request.
+
 `src/cli/log-view-filter.ts` owns the additive logs-filter snapshot, separate from existing follow/event transport. It fetches only the fixed log endpoint with a scan limit of at most 2000, applies GUI-equivalent local selectors, then returns the newest matches in source order without deduplicating. Model/provider matching covers resolved/served/attempt identities; protocol and conversation matching reuse their actual owners. Speed bounds accept observed value-kind metrics only. The versioned JSON view separates loaded, matched and returned counts from configured scan/output limits; JSONL is rows only. Neither a match count nor a cursor claims historical completeness or resumable search. Invalid options fail before discovery; malformed windows never become empty success.
 
 `src/cli/usage-model-search.ts` applies optional substring search only after the existing usage target/scope acknowledgment. A copied model list sorts stably by total tokens, searches model/provider/resolvedModel and caps at 100. The report's other fields remain intact; explicit modelView metadata distinguishes a view miss from no usage. `src/cli/usage-report.ts` retains the legacy renderer when no view is supplied and renders up to the selected 100 rows when one is supplied. Search never becomes a server attribution query or widens connected-client/key scope.
diff --git a/structure/dashboard-and-usage.md b/structure/dashboard-and-usage.md
index 3cbebeb3a11..0a379ad1ef9 100644
--- a/structure/dashboard-and-usage.md
+++ b/structure/dashboard-and-usage.md
@@ -165,7 +165,7 @@ keeps the saved state and renders fixed `ocx sync` guidance without server/accou
 `OcxUsage.providerCredits` preserves provider-reported credit spend in request and attempt rows
 through `src/usage/log.ts` normalization and ledger reloads. Missing readings stay absent, and zero
 is a measured value. Separate attempts add credits when usage is merged. The field is independent
-of token estimation (`estimated` describes tokens) and is never treated as USD or token usage. The human log projection in `src/cli/observe.ts` includes the persisted request ID as `id=...` for direct use with `ocx logs explain`. Rows without an ID or with control characters in their ID omit it rather than rewriting the lookup key; JSON and JSONL keep the API payload.
+of token estimation (`estimated` describes tokens) and is never treated as USD or token usage. The human log projection in `src/cli/observe.ts` includes the persisted request ID as `id=...` for direct use with `ocx logs get` and `ocx logs explain`. Rows without an ID or with control characters in their ID omit it rather than rewriting the lookup key; JSON and JSONL keep the API payload. `ocx logs history` pages the same derived index the dashboard uses (`GET /api/request-history`) with a resumable `nextCursor`.
 
 ### Upstream key account attribution
 
diff --git a/tests/cli/cli-capabilities.test.ts b/tests/cli/cli-capabilities.test.ts
index 6ad31c359e6..c4f69599cee 100644
--- a/tests/cli/cli-capabilities.test.ts
+++ b/tests/cli/cli-capabilities.test.ts
@@ -207,8 +207,6 @@ describe("ocx capabilities output", () => {
  */
 const UNDECLARED_ROUTES_2026_08_28: readonly string[] = [
   "GET /api/codex-auth/quota",
-  "GET /api/request-history",
-  "GET /api/request-history/{id}",
   "GET /api/system/windows-replace-retries",
   "GET /api/update/badge",
   "PATCH /api/codex-auth/pool-strategy",
diff --git a/tests/cli/cli-capability-operation-workflows.test.ts b/tests/cli/cli-capability-operation-workflows.test.ts
index 04359da9d1f..a10dd412368 100644
--- a/tests/cli/cli-capability-operation-workflows.test.ts
+++ b/tests/cli/cli-capability-operation-workflows.test.ts
@@ -80,6 +80,16 @@ describe("operation capability workflows use existing handlers", () => {
     expect(await handleObserveCommand(["logs", "explain", "req/1", "--json"], explain.deps)).toBe(0);
     expect(explain.requests).toEqual([{ method: "GET", path: "/api/request-history/req%2F1/route-decision", body: null }]);
   });
+  test("logs history pages the index and get reads one canonical row", async () => {
+    const io = transport({ entries: [], hasMore: false, index: { indexedRows: 0 } });
+    expect(capability("logs history").routes).toEqual([{ method: "GET", path: "/api/request-history" }]);
+    expect(await handleObserveCommand(["logs", "history", "--provider", "xai", "--limit", "10", "--json"], io.deps)).toBe(0);
+    expect(io.requests).toEqual([{ method: "GET", path: "/api/request-history?provider=xai&limit=10", body: null }]);
+    const get = transport({ requestId: "req/1" });
+    expect(capability("logs get").routes).toEqual([{ method: "GET", path: "/api/request-history/{id}" }]);
+    expect(await handleObserveCommand(["logs", "get", "req/1", "--json"], get.deps)).toBe(0);
+    expect(get.requests).toEqual([{ method: "GET", path: "/api/request-history/req%2F1", body: null }]);
+  });
   test("usage keeps surface and custom bounds in the actual request", async () => {
     const io = transport({ customWindow: true, since: 1000, until: 2000 });
     expect(capability("observe usage").flags.map(flag => flag.name)).toContain("--surface");
diff --git a/tests/cli/cli-log-history.test.ts b/tests/cli/cli-log-history.test.ts
new file mode 100644
index 00000000000..111f4e52689
--- /dev/null
+++ b/tests/cli/cli-log-history.test.ts
@@ -0,0 +1,146 @@
+/**
+ * `ocx logs history` pages GET /api/request-history; `ocx logs get` reads one canonical row.
+ */
+import { describe, expect, test } from "bun:test";
+import { handleObserveCommand } from "../../src/cli/observe";
+
+function page(overrides: Record<string, unknown> = {}): Record<string, unknown> {
+  return {
+    entries: [
+      {
+        requestId: "req/1",
+        timestamp: 1_700_000_000_000,
+        status: 200,
+        provider: "xai",
+        model: "grok-4.6",
+        durationMs: 42,
+        totalTokens: 120,
+        displayMetrics: { cost: { kind: "value", estimate: { cost: { total: 0.0123 } } } },
+      },
+    ],
+    hasMore: true,
+    nextCursor: "cursor-2",
+    index: { indexedRows: 9, schemaVersion: 1 },
+    ...overrides,
+  };
+}
+
+async function run(
+  argv: string[],
+  body: unknown,
+  status = 200,
+): Promise<{ code: number; out: string; err: string; urls: string[] }> {
+  const urls: string[] = [];
+  const fetchImpl: typeof fetch = async input => {
+    urls.push(String(input));
+    return new Response(JSON.stringify(body), { status, headers: { "content-type": "application/json" } });
+  };
+  const lines: string[] = [];
+  const errors: string[] = [];
+  const originalLog = console.log;
+  const originalErr = console.error;
+  console.log = (...args: unknown[]) => { lines.push(args.map(String).join(" ")); };
+  console.error = (...args: unknown[]) => { errors.push(args.map(String).join(" ")); };
+  try {
+    const code = await handleObserveCommand(argv, { baseUrl: "http://cli.test", fetchImpl });
+    return { code, out: lines.join("\n"), err: errors.join("\n"), urls };
+  } finally {
+    console.log = originalLog;
+    console.error = originalErr;
+  }
+}
+
+describe("ocx logs history", () => {
+  test("forwards filters, default limit, and prints cost plus a resumable cursor", async () => {
+    const result = await run([
+      "logs", "history",
+      "--provider", "xai",
+      "--model", "grok-4.6",
+      "--requested-model", "grok",
+      "--status", "200",
+      "--conversation", "c/1",
+      "--surface", "codex",
+      "--protocol", "responses",
+      "--api-key-id", "key-1",
+      "--profile", "p1",
+      "--fallback", "true",
+      "--from", "1000",
+      "--to", "2000",
+    ], page());
+    expect(result.code).toBe(0);
+    const url = new URL(result.urls[0]!);
+    expect(url.pathname).toBe("/api/request-history");
+    expect(url.searchParams.get("provider")).toBe("xai");
+    expect(url.searchParams.get("model")).toBe("grok-4.6");
+    expect(url.searchParams.get("requestedModel")).toBe("grok");
+    expect(url.searchParams.get("status")).toBe("200");
+    expect(url.searchParams.get("conversationId")).toBe("c/1");
+    expect(url.searchParams.get("surface")).toBe("codex");
+    expect(url.searchParams.get("inboundProtocol")).toBe("responses");
+    expect(url.searchParams.get("apiKeyId")).toBe("key-1");
+    expect(url.searchParams.get("profileId")).toBe("p1");
+    expect(url.searchParams.get("fallback")).toBe("true");
+    expect(url.searchParams.get("from")).toBe("1000");
+    expect(url.searchParams.get("to")).toBe("2000");
+    expect(url.searchParams.get("limit")).toBe("50");
+    expect(result.out).toContain("id=req/1");
+    expect(result.out).toContain("120tok");
+    expect(result.out).toContain("~$0.0123");
+    expect(result.out).toContain("nextCursor=cursor-2");
+    expect(result.out).toContain("indexedRows=9");
+  });
+
+  test("JSON keeps the management payload and JSONL sends the cursor to stderr", async () => {
+    const json = await run(["logs", "history", "--json", "--cursor", "abc", "--limit", "2"], page());
+    expect(json.code).toBe(0);
+    expect(new URL(json.urls[0]!).searchParams.get("cursor")).toBe("abc");
+    expect(new URL(json.urls[0]!).searchParams.get("limit")).toBe("2");
+    const parsed = JSON.parse(json.out) as { nextCursor: string; entries: unknown[] };
+    expect(parsed.nextCursor).toBe("cursor-2");
+    expect(parsed.entries).toHaveLength(1);
+
+    const jsonl = await run(["logs", "history", "--jsonl"], page());
+    expect(jsonl.code).toBe(0);
+    expect(jsonl.out).toContain("\"requestId\":\"req/1\"");
+    expect(jsonl.out).not.toContain("nextCursor");
+    expect(jsonl.err).toBe("nextCursor=cursor-2");
+  });
+
+  test("empty matches succeed and ISO bounds are forwarded as epoch milliseconds", async () => {
+    const result = await run([
+      "logs", "history",
+      "--from", "2026-10-01T00:00:00Z",
+      "--to", "2026-10-01T00:00:00.000Z",
+    ], page({ entries: [], hasMore: false, nextCursor: undefined }));
+    expect(result.code).toBe(0);
+    expect(result.out).toContain("No request-history row matched the filters.");
+    const epoch = String(Date.parse("2026-10-01T00:00:00Z"));
+    expect(new URL(result.urls[0]!).searchParams.get("from")).toBe(epoch);
+    expect(new URL(result.urls[0]!).searchParams.get("to")).toBe(epoch);
+  });
+
+  test("rejects conflicting output flags, inverted bounds, and an out-of-range status", async () => {
+    expect((await run(["logs", "history", "--json", "--jsonl"], page())).code).toBe(2);
+    expect((await run(["logs", "history", "--from", "2000", "--to", "1000"], page())).code).toBe(2);
+    expect((await run(["logs", "history", "--status", "99"], page())).code).toBe(2);
+    expect((await run(["logs", "history", "--limit", "101"], page())).code).toBe(2);
+    expect((await run(["logs", "history", "--protocol", "smtp"], page())).code).toBe(2);
+    expect((await run(["logs", "history", "--fallback", "maybe"], page())).code).toBe(2);
+  });
+});
+
+describe("ocx logs get", () => {
+  test("URI-encodes the request id and prints the canonical row", async () => {
+    const row = (page().entries as Record<string, unknown>[])[0]!;
+    const result = await run(["logs", "get", "req/1", "--json"], row);
+    expect(result.code).toBe(0);
+    expect(result.urls[0]).toBe("http://cli.test/api/request-history/req%2F1");
+    expect(JSON.parse(result.out).requestId).toBe("req/1");
+  });
+
+  test("missing request id is usage, and a 404 is exit 4", async () => {
+    expect((await run(["logs", "get"], {})).code).toBe(2);
+    const missing = await run(["logs", "get", "missing"], { error: "not found" }, 404);
+    expect(missing.code).toBe(4);
+  });
+});
diff --git a/tests/fixtures/test-layout-expected.json b/tests/fixtures/test-layout-expected.json
index 210221f4d50..635feebaf0a 100644
--- a/tests/fixtures/test-layout-expected.json
+++ b/tests/fixtures/test-layout-expected.json
@@ -36,6 +36,7 @@
   "claude-picker-upload.test.ts": "claude-integration", "claude-picker-linger.test.ts": "claude-integration",
   "messages-native-scope.test.ts": "claude-integration", "catalog-auto-review-row.test.ts": "codex-integration",
   "cli-log-view-filter.test.ts": "cli",
+  "cli-log-history.test.ts": "cli",
   "cli-usage-model-search.test.ts": "cli",
   "cli-companion-usage.test.ts": "cli",
   "cli-account-key-quota.test.ts": "cli",