busya/ss-tools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(llm): mask API keys in UI responses and prevent masked-key leakage in fetch/test/save payloads

Browse Source 
- Add mask_api_key() and is_masked_or_placeholder() to llm_provider service
- Return masked keys in all provider CRUD endpoints
- Reject masked/placeholder keys in fetch_models and test_provider_config
- Show masked key with Change button in ProviderConfig.svelte edit form
- Exclude masked keys from fetch-models, test, and submit payloads on frontend
- Update semantics-core skill with clarified complexity tier rules
- Switch agent modes from subagent to all
This commit is contained in:
busya
2026-05-15 23:34:09 +03:00
parent b3572ce443
commit 30ba70933d
203 changed files with 158083 additions and 28396 deletions
Download Patch File Download Diff File Expand all files Collapse all files

120
docs/openapi/litellm/chunks_paths/paths_config_overrides.json Normal file
View File

@@ -0,0 +1,120 @@
{
"/config_overrides/hashicorp_vault": {
"get": {
"tags": [
"Config Overrides"
],
"summary": "Get Hashicorp Vault Config",
"description": "Get current Hashicorp Vault configuration.\nReturns decrypted values from DB, or falls back to current env vars.",
"operationId": "get_hashicorp_vault_config_config_overrides_hashicorp_vault_get",
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/ConfigOverrideSettingsResponse"
}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
},
"post": {
"tags": [
"Config Overrides"
],
"summary": "Update Hashicorp Vault Config",
"description": "Update Hashicorp Vault secret manager configuration.\nSets environment variables, encrypts sensitive fields, and stores in DB.\nReinitializes the secret manager on this pod.",
"operationId": "update_hashicorp_vault_config_config_overrides_hashicorp_vault_post",
"requestBody": {
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HashicorpVaultConfig"
}
}
},
"required": true
},
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
},
"422": {
"description": "Validation Error",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HTTPValidationError"
}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
},
"delete": {
"tags": [
"Config Overrides"
],
"summary": "Delete Hashicorp Vault Config",
"description": "Delete Hashicorp Vault configuration. Idempotent.",
"operationId": "delete_hashicorp_vault_config_config_overrides_hashicorp_vault_delete",
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
}
},
"/config_overrides/hashicorp_vault/test_connection": {
"post": {
"tags": [
"Config Overrides"
],
"summary": "Test Hashicorp Vault Connection",
"description": "Test the connection to the currently configured Hashicorp Vault.\nUses the already-initialized secret manager client. Does not modify any state.",
"operationId": "test_hashicorp_vault_connection_config_overrides_hashicorp_vault_test_connection_post",
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
}
}
}