nas/MoviePilot
1
0
Fork 0
mirror of https://github.com/jxxghp/MoviePilot.git synced 2026-11-06 15:22:05 +08:00
Code Issues Packages Projects Releases Wiki Activity
10,736 Commits 4 Branches 379 Tags
v3
Commit Graph

865 Commits

Author SHA1 Message Date
jxxghp
054119e885 fix(event): isolate durable broadcast handler delivery 2026-11-05 02:51:43 +08:00
jxxghp
a87c005322 fix(indexer): parse cspt dashboard traffic metrics 2026-11-04 14:30:50 +08:00
jxxghp
f9c010fc91 fix(plugin): preserve startup recovery transaction ownership (#7297) 2026-11-04 12:30:12 +08:00
freeman
68cfc377ee feat(history): register externally completed transfers (#7293) 2026-11-04 06:24:38 +08:00
@huluohu
9eaaf5f715 fix(subscribe): 整理入库后及时同步订阅事实以修复日历入库状态 (#7270) 2026-11-02 06:58:55 +08:00
jxxghp
83243d2418 fix: 限制插件生命周期准入并保留慢钩子所有权 (#7268) 2026-11-01 22:22:04 +08:00
SmallSpider
7f227857d8 fix: 修复 WebAgent 会话与选择状态 (#7266) 
* fix(agent): preserve WebAgent session state

* test: separate subscription pressure coordination and owner waits

---------

Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-11-01 17:49:20 +08:00
jxxghp
699a436bea chore: sync v3 before merging search diagnostics 2026-11-01 12:47:05 +08:00
DDSRem
c4e1caeb3a fix(metainfo): align Python title recovery with Rust 0.3.13 (#7265) 
* chore: bump moviepilot-rust to 0.3.13

* fix(metainfo): preserve anime titles in Python fallback

---------

Co-authored-by: jxxghp <51039935+jxxghp@users.noreply.github.com>
Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-11-01 10:40:06 +08:00
SmallSpider
05050376ea fix(search): load diagnostics lazily and cover user context forwarding 2026-11-01 10:07:09 +08:00
SmallSpider
9ce3d7a292 feat(search): add scoped page diagnostics 2026-11-01 09:51:24 +08:00
jxxghp
e3e5184d42 fix(anilist): persist Chinese titles and use official API 2026-11-01 08:16:03 +08:00
jxxghp
6c17ba4fa1 fix(torrent): follow first-download confirmation redirects 2026-10-31 22:30:30 +08:00
jxxghp
10e9ade7de fix(site): preserve text category IDs and replay resource configs 2026-10-31 17:25:29 +08:00
jxxghp
6ca7b294a0 fix(download): 共享站点流控并保留频控错误原因 (#7246) 
* fix(download): share site limits and preserve frequency errors

* test(startup): record shared site throttle module
 2026-10-30 14:53:32 +08:00
jxxghp
586a4f595e fix(transfer): settle tasks with missing metadata safely (#7245) 2026-10-30 14:34:07 +08:00
jxxghp
9aab7c0f4c fix(agent): pin scheduled tasks to real execution accounts (#7241) 2026-10-29 22:39:08 +08:00
Cat
87561a90d1 fix(agent): route agent command receipts to the signed channel user (#7228) 
- Agent 代渠道用户调用内部 API 时，把会话渠道与渠道用户写入宿主签发令牌的签名
  声明（agent_channel、agent_channel_user），不再新增可伪造的请求头。
- /commands/run 对 Telegram 等通知渠道只使用与请求渠道一致的签名渠道用户执行命令
  和投递回执；缺少该声明时明确拒绝，不再把 MoviePilot 用户表主键当作渠道 chat id。
  Web、WebAgent 与无渠道调用仍按 MoviePilot 用户 ID 处理。
- 只读公共资料借用宿主身份，不携带渠道发起人声明。
- 同步依赖基线与架构总览中的内部导入边数量。

Refs #7225

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-10-28 19:05:52 +08:00
Cat
252b702875 fix(site): keep redirect failures from aborting site requests (#7227) 2026-10-28 18:43:19 +08:00
jxxghp
d9afaba8dd feat(plugin): expose documentation before installation (#7222) 2026-10-27 21:37:00 +08:00
JontyLee
6e405a67b3 fix(cache): Redis 故障日志遮盖缓存键中携带的请求凭据 (#7220) 2026-10-27 20:54:42 +08:00
jxxghp
e9563b0346 perf(api): 合并卡片状态查询并减轻推荐轮询 (#7207) 2026-10-27 06:05:49 +08:00
Aqr-K
71c2e9e3df fix(storage): retain history until target cleanup is confirmed (#7202) 2026-10-27 05:42:07 +08:00
jxxghp
42edfd1da8 fix(api): bound collection views and query calendar dates (#7200) 2026-10-27 00:40:09 +08:00
jxxghp
1bf496d0f3 fix(api): enforce token authentication for subscription list 
Refs #7198
 2026-10-26 23:19:31 +08:00
JontyLee
0ba73f5b87 fix(database-operation): 拦截未显式授权的凭据配置表读取 
systemconfig 按 SystemConfigKey 聚合实例级 API Key、Cookie 与口令，托管
config.system.get 默认脱敏，但数据库技能脚本与 MCP database_operation 接受
任意 SQL，一条 SELECT 就能整包取回明文。

现在由脚本本身按表拦截：引用 systemconfig 的语句（含引号标识符、模式限定名、
CTE 与子查询）在读写两种模式下都默认拒绝，只有显式 --show-secrets /
show_secrets=true 才放行，失败信息直接给出可执行的下一步，因此 MCP 工具、
技能调用与命令行入口共享同一道边界。宿主策略把开启该开关的查询判定为
SENSITIVE_READ：要求系统管理员确认，结果标记为 SECRET，回执摘要不再保留内容。

门禁范围收敛为单表：userconfig 只承载界面偏好，plugindata 是文档化的诊断路径，
其余表的凭据残留风险改由 SKILL.md 的窄投影要求约束，避免以不可绕过的方式破坏
既有可运维性。MCP 文档、技能说明与相关契约测试同步更新。
 2026-10-26 20:20:16 +08:00
jxxghp
53f455cac8 fix(resources): normalize GitHub proxy and retry downloads 
Reuse the checked resource manifest within each download and retain phase-specific retry errors. Preserve application update error contracts.

Refs #7185
 2026-10-26 09:04:54 +08:00
jxxghp
d66b58c475 feat(widget): enrich system and combined media summaries 2026-10-25 14:53:54 +08:00
jxxghp
d5ecf2927c feat(widget): 显示下载上传速度和剩余磁盘空间 (#7177) 2026-10-25 11:28:36 +08:00
jxxghp
721c03734a feat(widget): 提供受限凭据和只读快照接口 (#7175) 
* feat(widget): add restricted read-only snapshot foundation

* test(widget): 补齐运行时与文档迁移契约
 2026-10-25 06:02:47 +08:00
jxxghp
6680e090e6 feat: 自动登记中心推送实例并安全轮换凭据 2026-10-24 09:17:24 +08:00
jxxghp
3ac7526930 feat(notification): relay AppPush through private MoviePilot Server 2026-10-24 07:32:00 +08:00
jxxghp
d8cb95ab9e fix(filter): 修复分类名称与目录不一致时跳过规则组 (#7165) 
* fix(filter): match rule groups to effective media categories

* docs(architecture): sync dependency count for category matching
 2026-10-23 23:15:28 +08:00
jxxghp
b51f93f60f fix(subscribe): reconcile inferred media type conflicts (#7166) 2026-10-23 23:08:10 +08:00
JontyLee
8c156d4f47 fix(rss): 遮盖失败日志与诊断报告中的 URL 凭据 (#7157) 
站点 RSS 地址把 passkey、sign 等凭据放在查询串里，请求失败时这些原文会随
错误日志落盘，并被 Doctor 摘录进可外发的诊断报告；连接串形式的 userinfo 口令
同样存在。新增 app.foundation.url.mask_url_credentials 纯函数与两条共享正则，
RSS 失败日志改用遮盖后的地址，Doctor 的日志遮盖规则复用同一模式，避免两处实现分叉。
 2026-10-23 17:43:30 +08:00
Aqr-K
7584d4b9fc fix: isolate agent sessions and retain runtime resource ownership (#7149) 
* fix: arbitrate subscription identity and restore workflow state

* fix: isolate agent sessions and retain runtime resource ownership

* test: preserve legacy empty-owner subscription transactions

* test: handle reaped terminal descendants during shutdown polling

* fix: align shared atomic configuration method with lifecycle prerequisite

* test: cover subagent cancellation and completion lifecycle boundaries

---------

Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-10-23 08:20:59 +08:00
Aqr-K
951cdc5b27 fix: arbitrate subscription identity and restore workflow state (#7147) 
* fix: arbitrate subscription identity and restore workflow state

* test: preserve legacy empty-owner subscription transactions

* fix: align shared atomic configuration method with lifecycle prerequisite

---------

Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-10-23 08:14:15 +08:00
Aqr-K
fc0eed08cc fix: preserve directed messaging and channel interaction contracts (#7148) 
* fix: retain plugin lifecycle ownership and recover installation state

* fix: preserve directed messaging and channel interaction contracts

* test: cover plugin rollback and uninstall lifecycle boundaries

---------

Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-10-23 07:49:53 +08:00
Aqr-K
6610a8c008 fix: retain plugin lifecycle ownership and recover installation state (#7146) 
* fix: retain plugin lifecycle ownership and recover installation state

* test: cover plugin rollback and uninstall lifecycle boundaries

---------

Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-10-23 07:44:07 +08:00
Aqr-K
bcbf79f030 fix(media): preserve recognition and rule mutation identities (#7144) 
* fix(media): preserve recognition and rule mutation identities

* test: cover typed classification facts with alias policies

---------

Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-10-23 07:33:27 +08:00
Aqr-K
598d1663b1 fix(download): preserve protocol failures and isolate site updates (#7143) 
* fix(download): preserve protocol failures and isolate site updates

* test: cover tracker token lifecycle and record dependency facts

---------

Co-authored-by: jxxghp <jxxghp@gmail.com>
 2026-10-23 07:22:22 +08:00
Aqr-K
d666ae9d86 fix: preserve media library cache on incomplete enumeration (#7145) 2026-10-23 06:53:14 +08:00
Aqr-K
f3c1449c8b fix(storage): preserve transfer contents and cleanup identities (#7142) 2026-10-23 06:51:54 +08:00
Aqr-K
d51320103c fix: make local setup and bundled skill operations recoverable (#7150) 
* fix: make local setup and bundled skill operations recoverable

* test: verify user updates with real transaction runners
 2026-10-23 06:49:13 +08:00
jxxghp
17a866f47b fix(transfer): restore AI takeover for failed transfers 2026-10-22 09:43:03 +08:00
jxxghp
fa67be8e4a fix(scraping): normalize artwork and reuse downloads for aliases 
Add independent alias and Fanart 4K switches, identify exact artwork names, preserve episode and season conventions, and detect missing images across case and format variants. Normalize downloaded bytes to JPEG or PNG and reuse one request with storage hard links or local upload copies.

Refs #7128
 2026-10-22 09:25:42 +08:00
jxxghp
6d4ce83837 fix(types): clear host mypy debt and prevent typing regressions 
严格检查全部宿主源码，清零类型错误预算并移除按模块类型豁免。
按原因、所属方法、错误码及语法指纹锁定必要兼容例外和站点类型桩，
CI 阻断新增忽略、检查范围退化、本地桩替代真实接口及新的类型错误。

修复空值、异步和供应方类型边界，保持插件与 API 兼容合同，
并补充存储、订阅、通知、Agent 和工作流边界的回归覆盖。
 2026-10-21 22:03:18 +08:00
jxxghp
53c5344f4e fix(agent): avoid replaying delivered streaming progress 2026-10-21 00:20:13 +08:00
jxxghp
6766a0516e fix(transfer): recover legacy 115 receipts and isolate cloud copies 
Validate old instant-upload receipts against frozen source bytes and the original cloud file ID before source deletion. Isolate native 115 copies before renaming, verify moved object IDs, and quarantine uncertain native operations instead of replaying them. Require explicit delete success.

Refs #7099
 2026-10-20 17:33:51 +08:00
jxxghp
c732844f46 chore(architecture): sync download notification dependencies 2026-10-20 12:18:59 +08:00