Lomo CodeSecurity

The API reference is in English.

Immutable source snapshot

DELETE /v1/auth/ide/capabilities/{capability_id}/invalid

Recover invalid ide capability. Permissions, parameters, responses and examples.

0.1.0 · source bccff29 · Current reference · Download OpenAPI specification

This address preserves one reviewed source snapshot. Use the current entry point for the selected documentation version.

Read pinned handler: apps/api/kodesec_api/auth.py:3115

Recover invalid ide capability

Delete only the exact redacted invalid slot state the browser reviewed.

Source preview; no stable third-party integration promise. This page makes no request to a local installation.

Authority

Browser operator session only at the middleware boundary. Route-specific ownership and generation checks also apply.

Browser mutations require the exact control Origin and session-bound CSRF header. IDE callers use only their admitted route scope and exact generation.

Inspect the authority source · Authentication guide

Parameters and headers

NameLocationContract
capability_idpath
Required

string

Schema
{
  "title": "Capability Id",
  "type": "string"
}
X-CSRF-Tokenheader
Conditional / optional

Required for browser mutations with the exact control Origin. Not an IDE capability.

Schema
{
  "type": "string"
}

Request body

JSON body · required · InvalidCapabilityRecoveryRequest

FieldTypePresence
recovery_tokenstringRequired
Complete declared request schema
{
  "additionalProperties": false,
  "properties": {
    "recovery_token": {
      "pattern": "^kir1_[0-9a-f]{64}$",
      "title": "Recovery Token",
      "type": "string"
    }
  },
  "required": [
    "recovery_token"
  ],
  "title": "InvalidCapabilityRecoveryRequest",
  "type": "object"
}

Responses

StatusMeaning and declared shape
200

Successful Response

application/json · InvalidCapabilityRecoveryResponse
{
  "properties": {
    "recovered": {
      "const": true,
      "default": true,
      "title": "Recovered",
      "type": "boolean"
    }
  },
  "title": "InvalidCapabilityRecoveryResponse",
  "type": "object"
}
400

Exact host, malformed request or URL credential refusal

application/json · object
{
  "properties": {
    "detail": {
      "type": "string"
    }
  },
  "required": [
    "detail"
  ],
  "type": "object"
}
401

Missing or invalid membership

application/json · object
{
  "properties": {
    "detail": {
      "type": "string"
    }
  },
  "required": [
    "detail"
  ],
  "type": "object"
}
403

Exact origin, CSRF or route authority refusal

application/json · object
{
  "properties": {
    "detail": {
      "type": "string"
    }
  },
  "required": [
    "detail"
  ],
  "type": "object"
}
404

Refresh the collection and verify the resource identity before retrying. See source-linked error catalog.

422

Validation Error

application/json · HTTPValidationError
{
  "properties": {
    "detail": {
      "items": {
        "$ref": "#/components/schemas/ValidationError"
      },
      "title": "Detail",
      "type": "array"
    }
  },
  "title": "HTTPValidationError",
  "type": "object"
}
429

Authentication rate or connection limit

application/json · object
{
  "properties": {
    "detail": {
      "type": "string"
    }
  },
  "required": [
    "detail"
  ],
  "type": "object"
}

An empty or broad schema preserves the source contract. It is not a promise of an empty response.

Source-linked errors

Literal HTTP errors in this handler and same-file helper call graph, plus control middleware. Dynamic and cross-module failures may add other errors; source links are authoritative.

2 source error observations
StatusSource detailRecovery
404 ↗IDE client slot not foundRefresh the collection and verify the resource identity before retrying.
404 ↗IDE client slot not foundRefresh the collection and verify the resource identity before retrying.

Read the recovery guide

Synthetic examples

These examples validate declared JSON shapes and formats. They contain no real installation data and do not prove runtime admission, cross-field validation, authority or successful work.

Request JSON
{
  "recovery_token": "kir1_0000000000000000000000000000000000000000000000000000000000000000"
}
Response 200 JSON
{}
Download this service's complete OpenAPI

All referenced models remain in its components section. Browse control model definitions.