feat(device-plugins): add profiled K1 lifecycle and canonical data plane

src/k1link/web/app.py

@@ -6,7 +6,9 @@ from contextlib import asynccontextmanager
 from pathlib import Path
 from typing import Any
 
-from fastapi import FastAPI, HTTPException, WebSocket, WebSocketDisconnect
+from fastapi import FastAPI, HTTPException, Request, WebSocket, WebSocketDisconnect
+from fastapi.exceptions import RequestValidationError
+from fastapi.responses import JSONResponse
 from fastapi.staticfiles import StaticFiles
 from pydantic import ValidationError
 
@@ -23,6 +25,7 @@ from k1link.web.plugin_runtime import (
 )
 
 REPOSITORY_ROOT = Path(__file__).resolve().parents[3]
+INVALID_REQUEST_DETAIL = "Некорректные параметры запроса."
 
 
 plugin_environment = load_installed_device_plugins(REPOSITORY_ROOT)
@@ -48,6 +51,16 @@ app = FastAPI(
 )
 
 
+@app.exception_handler(RequestValidationError)
+async def request_validation_error_handler(
+    _: Request,
+    __: RequestValidationError,
+) -> JSONResponse:
+    """Return validation failures without reflecting request values or credentials."""
+
+    return JSONResponse(status_code=422, content={"detail": INVALID_REQUEST_DETAIL})
+
+
 @app.get("/api/health")
 def health() -> dict[str, Any]:
     return {
@@ -86,7 +99,7 @@ async def invoke_device_plugin_action(
     except (PluginNotFoundError, PluginActionNotFoundError) as exc:
         raise HTTPException(status_code=404, detail=str(exc)) from exc
     except ValidationError as exc:
-        raise HTTPException(status_code=422, detail=str(exc)) from exc
+        raise HTTPException(status_code=422, detail=INVALID_REQUEST_DETAIL) from exc
     except ValueError as exc:
         raise HTTPException(status_code=400, detail=str(exc)) from exc
     except PluginExecutionError as exc: