feat: implement circuit breaker, fix auth vulnerability

internal/server/server.go

@@ -131,32 +131,36 @@ func (s *Server) RefreshProviders() error {
 		}
 
 		// Initialize provider
+		var p providers.Provider
 		switch id {
 		case "openai":
 			cfg := s.cfg.Providers.OpenAI
 			cfg.BaseURL = baseURL
-			s.providers["openai"] = providers.NewOpenAIProvider(cfg, apiKey)
+			p = providers.NewOpenAIProvider(cfg, apiKey)
 		case "gemini":
 			cfg := s.cfg.Providers.Gemini
 			cfg.BaseURL = baseURL
-			s.providers["gemini"] = providers.NewGeminiProvider(cfg, apiKey)
+			p = providers.NewGeminiProvider(cfg, apiKey)
 		case "deepseek":
 			cfg := s.cfg.Providers.DeepSeek
 			cfg.BaseURL = baseURL
-			s.providers["deepseek"] = providers.NewDeepSeekProvider(cfg, apiKey)
+			p = providers.NewDeepSeekProvider(cfg, apiKey)
 		case "moonshot":
 			cfg := s.cfg.Providers.Moonshot
 			cfg.BaseURL = baseURL
-			s.providers["moonshot"] = providers.NewMoonshotProvider(cfg, apiKey)
+			p = providers.NewMoonshotProvider(cfg, apiKey)
 		case "grok":
 			cfg := s.cfg.Providers.Grok
 			cfg.BaseURL = baseURL
-			s.providers["grok"] = providers.NewGrokProvider(cfg, apiKey)
+			p = providers.NewGrokProvider(cfg, apiKey)
 		case "ollama":
 			cfg := s.cfg.Providers.Ollama
-			fmt.Printf("[DEBUG] Ollama config: Enabled=%v, BaseURL=%s, Models=%v\n", cfg.Enabled, baseURL, cfg.Models)
 			cfg.BaseURL = baseURL
-			s.providers["ollama"] = providers.NewOllamaProvider(cfg)
+			p = providers.NewOllamaProvider(cfg)
+		}
+
+		if p != nil {
+			s.providers[id] = providers.NewCircuitBreakerProvider(p)
 		}
 	}
 
@@ -182,6 +186,7 @@ func (s *Server) setupRoutes() {
 	{
 		v1.POST("/chat/completions", s.handleChatCompletions)
 		v1.GET("/models", s.handleListModels)
+		v1.GET("/responses", s.handleListResponses)
 	}
 
 	// Dashboard API Group
@@ -238,6 +243,11 @@ func (s *Server) setupRoutes() {
 	})
 }
 
+func (s *Server) handleListResponses(c *gin.Context) {
+	// This is a placeholder for the /v1/responses endpoint
+	c.JSON(http.StatusOK, gin.H{"data": []interface{}{}})
+}
+
 func (s *Server) handleListModels(c *gin.Context) {
 	type OpenAIModel struct {
 		ID      string `json:"id"`