API54 routes
Web va admin API
Session-authenticated API va infratuzilmaning barcha 54 route’i.
Infrastructure va auth
| Method | Path | Access | Vazifa |
|---|---|---|---|
| GET | /health | Public | API liveness |
| GET | /ready | Public | DB/Redis readiness |
| GET | /metrics | Private | Prometheus metrics |
| POST | /api/auth/login | Public | Session yaratish |
| POST | /api/auth/logout | Session + CSRF | Joriy sessiyani revoke qilish |
| GET | /api/me | Session | Joriy user va CSRF konteksti |
| POST | /api/password | Session + CSRF | Parolni almashtirish |
| GET | /api/sessions | Session | Aktiv sessiyalar |
| DELETE | /api/sessions/{id} | Session + CSRF | Sessiyani revoke qilish |
Katalog, suhbat va project
| Method | Path | Access | Vazifa |
|---|---|---|---|
| GET | /api/models | Session | Ruxsat etilgan active modellar |
| GET | /api/conversations | Session | Cursorli conversation ro‘yxati |
| GET | /api/conversations/{id} | Owner | Detail va message pagination |
| PATCH | /api/conversations/{id} | Owner + CSRF | Nom, archive yoki projectni yangilash |
| DELETE | /api/conversations/{id} | Owner + CSRF | Soft-delete |
| POST | /api/conversations/{id}/share | Owner + CSRF | Public snapshot yaratish |
| DELETE | /api/conversations/{id}/share | Owner + CSRF | Share’ni revoke qilish |
| GET | /api/public/shares/{token} | Public | Public snapshotni o‘qish |
| GET | /api/projects | Session | Project ro‘yxati |
| POST | /api/projects | Session + CSRF | Project yaratish |
| GET | /api/projects/{id} | Owner | Project detail |
| PATCH | /api/projects/{id} | Owner + CSRF | Projectni yangilash |
| DELETE | /api/projects/{id} | Owner + CSRF | Projectni o‘chirish |
| GET | /api/search/messages | Session | Message/conversation qidiruvi |
| POST | /api/chat/stream | Session + CSRF | Oqimli web inference |
| GET | /api/usage | Session | Joriy user usage’i |
Conversation detail message_limit va before_message_id query parametrlarini; list/search route’lari cursor, limit, q va kerak bo‘lsa project_id filtrlashini qo‘llaydi.
Fayllar va API keylar
| Method | Path | Access | Vazifa |
|---|---|---|---|
| POST | /api/files/presign | Session + CSRF | Upload intent/URL yaratish |
| PUT | /api/files/{id}/content | Owner | API-proxy single upload |
| POST | /api/files/{id}/complete | Owner + CSRF | Integrity tekshirish va finalize |
| GET | /api/files/{id} | Owner | Fayl holati |
| DELETE | /api/files/{id} | Owner + CSRF | Cleanup state machine boshlash |
| POST | /api/files/{id}/parts/presign | Owner + CSRF | Multipart part URL |
| POST | /api/files/{id}/multipart/complete | Owner + CSRF | ETaglar bilan multipart finalize |
| POST | /api/files/{id}/multipart/abort | Owner + CSRF | Multipartni bekor qilish |
| GET | /api/files/{id}/preview | Owner | Inline-safe preview |
| GET | /api/files/{id}/download | Owner | Attachment download |
| GET | /api/api-keys | Session | Key metadata ro‘yxati |
| POST | /api/api-keys | Session + CSRF | Yangi key; token bir marta ko‘rinadi |
| DELETE | /api/api-keys/{id} | Owner + CSRF | Key’ni revoke qilish |
Admin
| Method | Path | Vazifa |
|---|---|---|
| GET | /api/admin/stats | Platforma statistikasi |
| GET | /api/admin/users | User ro‘yxati |
| POST | /api/admin/users | User yaratish |
| PATCH | /api/admin/users/{id} | User/role/holatni yangilash |
| GET | /api/admin/usage/users | Userlar kesimida usage |
| GET | /api/admin/usage/users/{id} | Bitta user usage detaili |
| GET | /api/admin/providers | Providerlar |
| POST | /api/admin/providers | Provider + credential yaratish |
| PATCH | /api/admin/providers/{id} | Provider/credential yangilash |
| DELETE | /api/admin/providers/{id} | Providerni o‘chirish |
| POST | /api/admin/providers/{id}/test | Connection test |
| GET | /api/admin/models | Model katalogi |
| POST | /api/admin/models | Model yaratish |
| PATCH | /api/admin/models/{id} | Model/capability/pricing yangilash |
| DELETE | /api/admin/models/{id} | Modelni o‘chirish |
| GET | /api/admin/audit | Filterlanadigan audit log |
Mutation qoidasi
Admin mutationlari admin role, active session, password-change gate va CSRF tekshiruvlarining barchasidan o‘tadi. Credential qiymati list javoblarida qaytarilmaydi.