feat(llm): mask API keys in UI responses and prevent masked-key leakage in fetch/test/save payloads

- Add mask_api_key() and is_masked_or_placeholder() to llm_provider service
- Return masked keys in all provider CRUD endpoints
- Reject masked/placeholder keys in fetch_models and test_provider_config
- Show masked key with Change button in ProviderConfig.svelte edit form
- Exclude masked keys from fetch-models, test, and submit payloads on frontend
- Update semantics-core skill with clarified complexity tier rules
- Switch agent modes from subagent to all
This commit is contained in:
2026-05-15 23:34:09 +03:00
parent b3572ce443
commit 30ba70933d
203 changed files with 158083 additions and 28396 deletions

View File

@@ -0,0 +1,343 @@
{
"/videos": {
"get": {
"tags": [
"videos"
],
"summary": "Video List",
"description": "Video list endpoint for retrieving a list of videos.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos\n\nExample:\n```bash\ncurl -X GET \"http://localhost:4000/v1/videos\" -H \"Authorization: Bearer sk-1234\"\n```",
"operationId": "video_list_videos_get",
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
},
"post": {
"tags": [
"videos"
],
"summary": "Video Generation",
"description": "Video generation endpoint for creating videos from text prompts.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos\n\nExample:\n```bash\ncurl -X POST \"http://localhost:4000/v1/videos\" -H \"Authorization: Bearer sk-1234\" -H \"Content-Type: application/json\" -d '{\n \"model\": \"sora-2\",\n \"prompt\": \"A beautiful sunset over the ocean\"\n }'\n```",
"operationId": "video_generation_videos_post",
"requestBody": {
"content": {
"multipart/form-data": {
"schema": {
"$ref": "#/components/schemas/Body_video_generation_videos_post"
}
}
}
},
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
},
"422": {
"description": "Validation Error",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HTTPValidationError"
}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
}
},
"/videos/characters": {
"post": {
"tags": [
"videos"
],
"summary": "Video Create Character",
"description": "Create a character from an uploaded video file.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos/create-character\n\nExample:\n```bash\ncurl -X POST \"http://localhost:4000/v1/videos/characters\" -H \"Authorization: Bearer sk-1234\" -F \"video=@character_video.mp4\" -F \"name=my_character\"\n```",
"operationId": "video_create_character_videos_characters_post",
"requestBody": {
"content": {
"multipart/form-data": {
"schema": {
"$ref": "#/components/schemas/Body_video_create_character_videos_characters_post"
}
}
},
"required": true
},
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
},
"422": {
"description": "Validation Error",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HTTPValidationError"
}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
}
},
"/videos/characters/{character_id}": {
"get": {
"tags": [
"videos"
],
"summary": "Video Get Character",
"description": "Retrieve a character by ID.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos/get-character\n\nExample:\n```bash\ncurl -X GET \"http://localhost:4000/v1/videos/characters/char_123\" -H \"Authorization: Bearer sk-1234\"\n```",
"operationId": "video_get_character_videos_characters__character_id__get",
"security": [
{
"APIKeyHeader": []
}
],
"parameters": [
{
"name": "character_id",
"in": "path",
"required": true,
"schema": {
"type": "string",
"title": "Character Id"
}
}
],
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
},
"422": {
"description": "Validation Error",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HTTPValidationError"
}
}
}
}
}
}
},
"/videos/edits": {
"post": {
"tags": [
"videos"
],
"summary": "Video Edit",
"description": "Create a video edit job.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos/create-edit\n\nExample:\n```bash\ncurl -X POST \"http://localhost:4000/v1/videos/edits\" -H \"Authorization: Bearer sk-1234\" -H \"Content-Type: application/json\" -d '{\"prompt\": \"Make it brighter\", \"video\": {\"id\": \"video_123\"}}'\n```",
"operationId": "video_edit_videos_edits_post",
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
}
},
"/videos/extensions": {
"post": {
"tags": [
"videos"
],
"summary": "Video Extension",
"description": "Create a video extension.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos/create-extension\n\nExample:\n```bash\ncurl -X POST \"http://localhost:4000/v1/videos/extensions\" -H \"Authorization: Bearer sk-1234\" -H \"Content-Type: application/json\" -d '{\"prompt\": \"Continue the scene\", \"seconds\": \"5\", \"video\": {\"id\": \"video_123\"}}'\n```",
"operationId": "video_extension_videos_extensions_post",
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
}
},
"security": [
{
"APIKeyHeader": []
}
]
}
},
"/videos/{video_id}": {
"get": {
"tags": [
"videos"
],
"summary": "Video Status",
"description": "Video status endpoint for retrieving video status and metadata.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos\n\nExample:\n```bash\ncurl -X GET \"http://localhost:4000/v1/videos/video_123\" -H \"Authorization: Bearer sk-1234\"\n```",
"operationId": "video_status_videos__video_id__get",
"security": [
{
"APIKeyHeader": []
}
],
"parameters": [
{
"name": "video_id",
"in": "path",
"required": true,
"schema": {
"type": "string",
"title": "Video Id"
}
}
],
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
},
"422": {
"description": "Validation Error",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HTTPValidationError"
}
}
}
}
}
}
},
"/videos/{video_id}/content": {
"get": {
"tags": [
"videos"
],
"summary": "Video Content",
"description": "Video content endpoint for downloading video content.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos\n\nExample:\n```bash\ncurl -X GET \"http://localhost:4000/v1/videos/{video_id}/content\" -H \"Authorization: Bearer sk-1234\" --output video.mp4\n```",
"operationId": "video_content_videos__video_id__content_get",
"security": [
{
"APIKeyHeader": []
}
],
"parameters": [
{
"name": "video_id",
"in": "path",
"required": true,
"schema": {
"type": "string",
"title": "Video Id"
}
}
],
"responses": {
"200": {
"description": "Successful Response"
},
"422": {
"description": "Validation Error",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HTTPValidationError"
}
}
}
}
}
}
},
"/videos/{video_id}/remix": {
"post": {
"tags": [
"videos"
],
"summary": "Video Remix",
"description": "Video remix endpoint for remixing existing videos with new prompts.\n\nFollows the OpenAI Videos API spec:\nhttps://platform.openai.com/docs/api-reference/videos\n\nExample:\n```bash\ncurl -X POST \"http://localhost:4000/v1/videos/video_123/remix\" -H \"Authorization: Bearer sk-1234\" -H \"Content-Type: application/json\" -d '{\n \"prompt\": \"A new version with different colors\"\n }'\n```",
"operationId": "video_remix_videos__video_id__remix_post",
"security": [
{
"APIKeyHeader": []
}
],
"parameters": [
{
"name": "video_id",
"in": "path",
"required": true,
"schema": {
"type": "string",
"title": "Video Id"
}
}
],
"responses": {
"200": {
"description": "Successful Response",
"content": {
"application/json": {
"schema": {}
}
}
},
"422": {
"description": "Validation Error",
"content": {
"application/json": {
"schema": {
"$ref": "#/components/schemas/HTTPValidationError"
}
}
}
}
}
}
}
}