Lomo CodeSecurity

The API reference is in English.

Current source preview reference

GET /v1/auth/ide/enrollments/current/wait

Wait for ide enrollment decision. Permissions, parameters, responses and examples.

0.1.0 · source bccff29 · Immutable snapshot · Download OpenAPI specification

Read pinned handler: apps/api/kodesec_api/auth.py:2106

Wait for ide enrollment decision

Long-wait on a durable enrollment revision, then re-read its DB state.

Source preview; no stable third-party integration promise. This page makes no request to a local installation.

Authority

Exact pending IDE capability protocol. Activation and owner-claim/wait have source-defined active-generation reconciliation.

Inspect the authority source · Authentication guide

Parameters and headers

NameLocationContract
after_revisionquery
Required

integer

Schema
{
  "maximum": 2147483647,
  "minimum": 0,
  "title": "After Revision",
  "type": "integer"
}

Request body

No typed JSON body is declared by this handler. That does not rule out source-level request parsing; inspect the pinned implementation, especially for internal connector protocols.

Responses

StatusMeaning and declared shape
200

Successful Response

application/json · IdeEnrollmentStatusResponse
{
  "additionalProperties": false,
  "properties": {
    "activation_expires_at": {
      "format": "date-time",
      "title": "Activation Expires At",
      "type": "string"
    },
    "decision_at": {
      "anyOf": [
        {
          "format": "date-time",
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "title": "Decision At"
    },
    "request_id": {
      "pattern": "^ker1_[A-Za-z0-9_-]{24}$",
      "title": "Request Id",
      "type": "string"
    },
    "revision": {
      "maximum": 2147483647,
      "minimum": 1,
      "title": "Revision",
      "type": "integer"
    },
    "state": {
      "enum": [
        "awaiting_approval",
        "approved",
        "rejected",
        "expired"
      ],
      "title": "State",
      "type": "string"
    }
  },
  "required": [
    "request_id",
    "state",
    "revision",
    "decision_at",
    "activation_expires_at"
  ],
  "title": "IdeEnrollmentStatusResponse",
  "type": "object"
}
400

Exact host, malformed request or URL credential refusal

application/json · object
{
  "properties": {
    "detail": {
      "type": "string"
    }
  },
  "required": [
    "detail"
  ],
  "type": "object"
}
401

Missing or invalid membership

application/json · object
{
  "properties": {
    "detail": {
      "type": "string"
    }
  },
  "required": [
    "detail"
  ],
  "type": "object"
}
403

Exact origin, CSRF or route authority refusal

application/json · object
{
  "properties": {
    "detail": {
      "type": "string"
    }
  },
  "required": [
    "detail"
  ],
  "type": "object"
}
404

Refresh the collection and verify the resource identity before retrying. See source-linked error catalog.

422

Validation Error

application/json · HTTPValidationError
{
  "properties": {
    "detail": {
      "items": {
        "$ref": "#/components/schemas/ValidationError"
      },
      "title": "Detail",
      "type": "array"
    }
  },
  "title": "HTTPValidationError",
  "type": "object"
}
429

Authentication rate or connection limit

application/json · object
{
  "properties": {
    "detail": {
      "type": "string"
    }
  },
  "required": [
    "detail"
  ],
  "type": "object"
}

An empty or broad schema preserves the source contract. It is not a promise of an empty response.

Source-linked errors

Literal HTTP errors in this handler and same-file helper call graph, plus control middleware. Dynamic and cross-module failures may add other errors; source links are authoritative.

4 source error observations
StatusSource detailRecovery
404 ↗browser invitation not foundRefresh the collection and verify the resource identity before retrying.
404 ↗browser invitation not foundRefresh the collection and verify the resource identity before retrying.
404 ↗browser invitation not foundRefresh the collection and verify the resource identity before retrying.
403 ↗IDE enrollment authority requiredReview exact origin, CSRF, IDE scope and owner approval. Do not broaden authority.

Read the recovery guide

Synthetic examples

These examples validate declared JSON shapes and formats. They contain no real installation data and do not prove runtime admission, cross-field validation, authority or successful work.

Response 200 JSON
{
  "activation_expires_at": "2026-01-01T00:00:00Z",
  "decision_at": "2026-01-01T00:00:00Z",
  "request_id": "ker1_AAAAAAAAAAAAAAAAAAAAAAAA",
  "revision": 1,
  "state": "awaiting_approval"
}
Download this service's complete OpenAPI

All referenced models remain in its components section. Browse control model definitions.