Cat 87561a90d1 fix(agent): route agent command receipts to the signed channel user (#7228) ...

- Agent 代渠道用户调用内部 API 时，把会话渠道与渠道用户写入宿主签发令牌的签名
  声明（agent_channel、agent_channel_user），不再新增可伪造的请求头。
- /commands/run 对 Telegram 等通知渠道只使用与请求渠道一致的签名渠道用户执行命令
  和投递回执；缺少该声明时明确拒绝，不再把 MoviePilot 用户表主键当作渠道 chat id。
  Web、WebAgent 与无渠道调用仍按 MoviePilot 用户 ID 处理。
- 只读公共资料借用宿主身份，不携带渠道发起人声明。
- 同步依赖基线与架构总览中的内部导入边数量。

Refs #7225

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: jxxghp <jxxghp@gmail.com>

2026-10-28 19:05:52 +08:00

..

chain

…

classification

fix(filter): 修复分类名称与目录不一致时跳过规则组 (#7165)

2026-10-23 23:15:28 +08:00

community

…

download

…

history

…

messaging

fix(notification): persist independent media posters

2026-10-24 19:11:27 +08:00

music

…

nettest

…

plugin

feat(plugin): expose documentation before installation (#7222)

2026-10-27 21:37:00 +08:00

search

…

security

fix(agent): route agent command receipts to the signed channel user (#7228)

2026-10-28 19:05:52 +08:00

server

…

settings

fix(plugin): support mirrors for Release asset downloads (#7224)

2026-10-27 22:21:48 +08:00

site

…

subscription

fix(search): release unused site request reservations

2026-10-26 09:23:29 +08:00

torrent

fix(subscribe): reconcile inferred media type conflicts (#7166)

2026-10-23 23:08:10 +08:00

transfer

…

__init__.py

…

agent.py

…

agenttask.py

…

audio.py

…

backup.py

…

commands.py

fix(agent): route agent command receipts to the signed channel user (#7228)

2026-10-28 19:05:52 +08:00

configuration.py

…

dashboard.py

feat(widget): 提供受限凭据和只读快照接口 (#7175)

2026-10-25 06:02:47 +08:00

database.py

…

directory.py

…

downloader.py

…

filtering.py

…

formatting.py

…

github_auth.py

…

image.py

…

invocation.py

…

maintenance.py

…

mediaserver.py

…

module.py

…

network.py

…

notification.py

…

outbox.py

…

query.py

…

recognition.py

…

rss.py

…

rules.py

fix(filter): 修复分类名称与目录不一致时跳过规则组 (#7165)

2026-10-23 23:15:28 +08:00

scheduling.py

fix(scheduler): 让声明为不限时的协程任务预算真正生效

2026-10-26 10:34:42 +08:00

servarr.py

…

service.py

…

storage.py

…

system.py

…

widget.py

feat(widget): enrich system and combined media summaries

2026-10-25 14:53:54 +08:00

workflow.py

…