Cat
|
87561a90d1
|
fix(agent): route agent command receipts to the signed channel user (#7228)
- Agent 代渠道用户调用内部 API 时，把会话渠道与渠道用户写入宿主签发令牌的签名
声明（agent_channel、agent_channel_user），不再新增可伪造的请求头。
- /commands/run 对 Telegram 等通知渠道只使用与请求渠道一致的签名渠道用户执行命令
和投递回执；缺少该声明时明确拒绝，不再把 MoviePilot 用户表主键当作渠道 chat id。
Web、WebAgent 与无渠道调用仍按 MoviePilot 用户 ID 处理。
- 只读公共资料借用宿主身份，不携带渠道发起人声明。
- 同步依赖基线与架构总览中的内部导入边数量。
Refs #7225
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: jxxghp <jxxghp@gmail.com>
|
2026-10-28 19:05:52 +08:00 |
|
andyxu8023
|
e1b276bf9b
|
fix(agent): encode API session header as ASCII (#7210)
|
2026-10-27 10:36:28 +08:00 |
|
DDSRem
|
2de976f6b3
|
Merge pull request #7050 from DDSRem-Dev/codex-comment-migration
docs: 统一全项目中文注释和结构化契约说明
|
2026-10-17 19:26:29 +08:00 |
|
jxxghp
|
4d74d4c2e9
|
fix(agent): route API calls to the local backend (#6875)
|
2026-10-04 09:05:33 +08:00 |
|
cyt-666
|
6e92a02255
|
fix: extend search.torrents timeout (#6734)
|
2026-09-20 15:23:47 +08:00 |
|
jxxghp
|
d6bcedd3e0
|
test(agent): cover default API session header
|
2026-09-11 16:40:16 +08:00 |
|
jxxghp
|
738e78043e
|
fix(agent): percent-encode API context headers
|
2026-09-03 18:27:04 +08:00 |
|
jxxghp
|
0f8aad2daf
|
fix(agent): encode channel metadata in API headers
|
2026-09-03 18:09:40 +08:00 |
|
jxxghp
|
2f7f2da300
|
fix(agent): preserve collection totals in truncated results
|
2026-09-01 10:49:22 +08:00 |
|
jxxghp
|
a73714e5e7
|
feat(agent): add compatible collection pagination
|
2026-09-01 07:43:55 +08:00 |
|