25 Commits

Author SHA1 Message Date
jxxghp
9aab7c0f4c fix(agent): pin scheduled tasks to real execution accounts (#7241) 2026-10-29 22:39:08 +08:00
Cat
87561a90d1 fix(agent): route agent command receipts to the signed channel user (#7228)
- Agent 代渠道用户调用内部 API 时,把会话渠道与渠道用户写入宿主签发令牌的签名
  声明(agent_channel、agent_channel_user),不再新增可伪造的请求头。
- /commands/run 对 Telegram 等通知渠道只使用与请求渠道一致的签名渠道用户执行命令
  和投递回执;缺少该声明时明确拒绝,不再把 MoviePilot 用户表主键当作渠道 chat id。
  Web、WebAgent 与无渠道调用仍按 MoviePilot 用户 ID 处理。
- 只读公共资料借用宿主身份,不携带渠道发起人声明。
- 同步依赖基线与架构总览中的内部导入边数量。

Refs #7225

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: jxxghp <jxxghp@gmail.com>
2026-10-28 19:05:52 +08:00
jxxghp
ec5ff575f0 fix(agent): restore API bodies before direct request dispatch 2026-10-23 07:55:16 +08:00
jxxghp
6d4ce83837 fix(types): clear host mypy debt and prevent typing regressions
严格检查全部宿主源码,清零类型错误预算并移除按模块类型豁免。
按原因、所属方法、错误码及语法指纹锁定必要兼容例外和站点类型桩,
CI 阻断新增忽略、检查范围退化、本地桩替代真实接口及新的类型错误。

修复空值、异步和供应方类型边界,保持插件与 API 兼容合同,
并补充存储、订阅、通知、Agent 和工作流边界的回归覆盖。
2026-10-21 22:03:18 +08:00
DDSRem
2de976f6b3 Merge pull request #7050 from DDSRem-Dev/codex-comment-migration
docs: 统一全项目中文注释和结构化契约说明
2026-10-17 19:26:29 +08:00
jxxghp
bd1e6eb899 fix(agent): separate public API queries from bound user operations 2026-10-12 07:30:35 +08:00
jxxghp
e51fd44964 fix(agent): resolve alternative QQ and Feishu user bindings
Keep strict binding lookup as the default and explicitly match alternative channel identifiers for the Agent API gateway. Reject ambiguous active-user matches and cover single-field bindings with database-backed tests.

Refs #6905
2026-10-07 09:16:33 +08:00
jxxghp
6b8f5f90df fix(agent): type and cover encoded api bodies 2026-10-02 23:12:48 +08:00
q10710
37d9680674 fix(agent): restore JSON-encoded string bodies in api argument canonicalization 2026-10-02 22:19:07 +08:00
jxxghp
dc0ad842fb fix(agent): make API input errors actionable 2026-09-30 19:16:35 +08:00
jxxghp
4f72b77ef0 fix(agent): constrain API request body shapes 2026-09-23 14:24:06 +08:00
cyt-666
6e92a02255 fix: extend search.torrents timeout (#6734) 2026-09-20 15:23:47 +08:00
jxxghp
d665426157 fix(agent): constrain API body input to JSON values 2026-09-15 18:15:31 +08:00
jxxghp
0f8aa4dfa9 fix(agent): return operation input contracts on errors 2026-09-11 08:07:54 +08:00
jxxghp
3a22cb0118 Revert "fix(agent): surface common API field contracts"
This reverts commit bdeef730b9.
2026-09-11 07:54:02 +08:00
jxxghp
bdeef730b9 fix(agent): surface common API field contracts 2026-09-11 07:50:13 +08:00
jxxghp
f383a8a5a3 feat(agent): 接入媒体自动分类策略 API 2026-09-10 22:36:50 +08:00
jxxghp
5fa5b414aa feat(agent): harden tool outcomes, recovery and discovery 2026-09-09 19:55:21 +08:00
jxxghp
449ef4b8df fix(agent): show API parameters in verbose mode 2026-09-01 11:57:36 +08:00
jxxghp
41c54d138d refactor(agent): relocate static resources 2026-09-01 11:55:21 +08:00
jxxghp
2f7f2da300 fix(agent): preserve collection totals in truncated results 2026-09-01 10:49:22 +08:00
jxxghp
6d4d7331d1 refactor: complete agent skill API contracts 2026-09-01 01:19:45 +08:00
jxxghp
632363730a feat(agent): expose self-describing service operations 2026-08-31 20:45:33 +08:00
jxxghp
ec1a878a32 fix(agent): auto-load gateway skill before API calls 2026-08-31 18:42:25 +08:00
jxxghp
fdba2c7d64 refactor(agent): unify tools behind API gateway and provider skills 2026-08-31 16:57:54 +08:00