autoreg-skills-max: initial public release (restored, redacted, hardened)

skills/apodex-batch-reg/references/apodex-api-endpoints.md

@@ -0,0 +1,82 @@
+# Apodex API Endpoints Reference (2026-06-26)
+
+## Core Endpoints
+
+| Endpoint | Method | Auth | Purpose |
+|----------|--------|------|---------|
+| `https://api.apodex.ai/v1/chat/completions` | POST | Bearer API Key | Chat completions (OpenAI-compatible) |
+| `https://api.apodex.ai/v1/models` | GET | Bearer API Key | List available models |
+| `https://api.apodex.ai/v1/api-keys` | GET | Bearer Supabase JWT | List/Create API keys |
+| `https://hgejqhubxceqppqkgqgx.supabase.co/auth/v1/otp` | POST | apikey header | Trigger OTP |
+| `https://hgejqhubxceqppqkgqgx.supabase.co/auth/v1/verify` | POST | apikey header | Verify OTP → session |
+
+## Models (confirmed via `/v1/models`)
+
+| Model ID | Context | Max Output |
+|----------|---------|------------|
+| `apodex-1-0-deep-discovery` | 131,072 | 262,144 |
+| `apodex-1-0-deep-reasoning` | 262,144 | 16,384 |
+| `apodex-1-0-deep-research` | 262,144 | 16,384 |
+
+## Auth Systems
+
+### 1. API Key (for completions)
+- Format: `sk-<base64 string ending with =>`
+- Example: `[REDACTED-KEY]=`
+- Header: `Authorization: Bearer <key>`
+- Works on: `/v1/chat/completions`, `/v1/models`
+- Does NOT work on: `/v1/api-keys` (returns `{"error":"invalid token"}`)
+
+### 2. Supabase Session JWT (for key management)
+- Format: JWT (`eyJ...`)
+- Stored in: `localStorage.getItem('sb-hgejqhubxceqppqkgqgx-auth-token')`
+- Header: `Authorization: Bearer <jwt>`
+- Works on: `/v1/api-keys`
+- Obtained via: OTP verify flow
+
+### 3. Session Cookie
+- Format: 32 hex chars (e.g., `[REDACTED-KEY]`)
+- NOT a valid Bearer token for ANY endpoint (returns `invalid api key` on chat completions)
+- May work for Supabase session lookup
+
+## Error Messages
+
+| Error | Meaning | Where |
+|-------|---------|-------|
+| `{"error":"invalid token"}` | API key used on wrong endpoint | `/v1/api-keys` with API key |
+| `{"error":"invalid api key"}` | Session cookie used as Bearer | any endpoint |
+| `{"error":{"message":"Only POST is supported",...}}` | GET on chat completions | `/v1/chat/completions` |
+| `{"error":"invalid api key"}` | Wrong/missing auth | any endpoint |
+| `PASSWORDLESS_SEND_RATE_LIMITED` | IP-based rate limit on OTP | Supabase auth |
+
+## Working Keys (2026-06-26)
+
+| Account | Key | Status |
+|---------|-----|--------|
+| `[REDACTED-EMAIL]` | `[REDACTED-KEY]=` | ✅ Live |
+| `[REDACTED-EMAIL]` | `[REDACTED-KEY]=` | ✅ Live |
+
+## Account Table (20 total, 2026-06-26)
+
+| # | Email | API Key | Status |
+|---|-------|---------|--------|
+| 1 | `[REDACTED-EMAIL]` | `[REDACTED-KEY]=` | ✅ |
+| 2 | `[REDACTED-EMAIL]` | `[REDACTED-KEY]=` | ✅ |
+| 3 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 4 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 5 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 6 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 7 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 8 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 9 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 10 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 11 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 12 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 13 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 14 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 15 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 16 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 17 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 18 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 19 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |
+| 20 | `[REDACTED-EMAIL]` | ❓ | ✅ Created |