Cat
|
87561a90d1
|
fix(agent): route agent command receipts to the signed channel user (#7228)
- Agent 代渠道用户调用内部 API 时,把会话渠道与渠道用户写入宿主签发令牌的签名
声明(agent_channel、agent_channel_user),不再新增可伪造的请求头。
- /commands/run 对 Telegram 等通知渠道只使用与请求渠道一致的签名渠道用户执行命令
和投递回执;缺少该声明时明确拒绝,不再把 MoviePilot 用户表主键当作渠道 chat id。
Web、WebAgent 与无渠道调用仍按 MoviePilot 用户 ID 处理。
- 只读公共资料借用宿主身份,不携带渠道发起人声明。
- 同步依赖基线与架构总览中的内部导入边数量。
Refs #7225
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: jxxghp <jxxghp@gmail.com>
|
2026-10-28 19:05:52 +08:00 |
|
andyxu8023
|
e1b276bf9b
|
fix(agent): encode API session header as ASCII (#7210)
|
2026-10-27 10:36:28 +08:00 |
|
jxxghp
|
c85f9b262f
|
feat(agent): isolate interactive execution from background services (#7083)
|
2026-10-19 18:12:05 +08:00 |
|
DDSRem
|
e0642eafa7
|
chore(types): reduce v3 host mypy debt (#7057)
* chore(types): clear AniList endpoint mypy debt
* chore(types): clear Douban endpoint mypy debt
* chore(types): clear recommendation endpoint mypy debt
* chore(types): clear subscription notification mypy debt
* chore(types): clear SDK string compatibility mypy debt
* chore(types): ratchet v3 host mypy across remaining files
* chore(types): reduce v3 host mypy debt and retire ledger
* chore(types): reconcile host snapshot with upstream HTTP pool
* test(types): cover host paths exposed by mypy cleanup
|
2026-10-18 09:37:49 +08:00 |
|
DDSRem
|
2de976f6b3
|
Merge pull request #7050 from DDSRem-Dev/codex-comment-migration
docs: 统一全项目中文注释和结构化契约说明
|
2026-10-17 19:26:29 +08:00 |
|
jxxghp
|
bd1e6eb899
|
fix(agent): separate public API queries from bound user operations
|
2026-10-12 07:30:35 +08:00 |
|
jxxghp
|
4d74d4c2e9
|
fix(agent): route API calls to the local backend (#6875)
|
2026-10-04 09:05:33 +08:00 |
|
q10710
|
37d9680674
|
fix(agent): restore JSON-encoded string bodies in api argument canonicalization
|
2026-10-02 22:19:07 +08:00 |
|
jxxghp
|
dc0ad842fb
|
fix(agent): make API input errors actionable
|
2026-09-30 19:16:35 +08:00 |
|
jxxghp
|
82b840ff49
|
fix(agent): keep API timeout types compatible
|
2026-09-20 16:08:57 +08:00 |
|
cyt-666
|
6e92a02255
|
fix: extend search.torrents timeout (#6734)
|
2026-09-20 15:23:47 +08:00 |
|
jxxghp
|
0f8aa4dfa9
|
fix(agent): return operation input contracts on errors
|
2026-09-11 08:07:54 +08:00 |
|
jxxghp
|
5fa5b414aa
|
feat(agent): harden tool outcomes, recovery and discovery
|
2026-09-09 19:55:21 +08:00 |
|
jxxghp
|
738e78043e
|
fix(agent): percent-encode API context headers
|
2026-09-03 18:27:04 +08:00 |
|
jxxghp
|
0f8aad2daf
|
fix(agent): encode channel metadata in API headers
|
2026-09-03 18:09:40 +08:00 |
|
jxxghp
|
2f7f2da300
|
fix(agent): preserve collection totals in truncated results
|
2026-09-01 10:49:22 +08:00 |
|
jxxghp
|
a73714e5e7
|
feat(agent): add compatible collection pagination
|
2026-09-01 07:43:55 +08:00 |
|
jxxghp
|
6d4d7331d1
|
refactor: complete agent skill API contracts
|
2026-09-01 01:19:45 +08:00 |
|
jxxghp
|
fdba2c7d64
|
refactor(agent): unify tools behind API gateway and provider skills
|
2026-08-31 16:57:54 +08:00 |
|