framesail

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

The server exposes a public surface before authorization: list_channels, create_channel, list_projects, create_project, get_project, update_project, delete_project, set_project_style, update_caption_config, get_pipeline_progress, get_workflow_status, await_jobs, get_section_template, list_models, generate_script, get_script, save_script, revise_script, activate_script_version, scan_script, list_assets, create_asset, update_asset, delete_asset, generate_asset_reference, set_character_voice, list_voices, set_narrator_voice, list_voice_blocks, update_voice_block, rescan_voice_blocks, generate_voiceover, generate_storyboard, get_segments, get_segment_assets, regenerate_segment_asset, change_segment_type, update_segment_content, split_segment, combine_segments, set_segment_continuation, add_segment_sfx, remove_segment_sfx, generate_segments, build_scenes, list_scenes, director_note, project_director_note, export_video, get_video_url, list_styles, get_style, update_style_fields, list_style_presets, create_style, analyze_style, generate_style_template, delete_style, set_provider_key, list_provider_keys, whoami, get_credit_balance, browse_audio_library, list_music_tracks, add_music_track, update_music_track, remove_music_track, view_image.