UHD_Media_Tool

811 Commits 1 Branch 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
rootandClaude Opus 5.5	f48e1aac96	fix(security): W4-E1 approvals admin-session only, shared redact table, TMDB key redaction, prod mock gate - POST /approvals and PATCH /approvals/{id} require a console admin session (EndpointDef auth:"session"); API keys incl. admin scope get 403, so an organize.execute key can no longer approve its own plan (S1) - tests for single-use approval checks: expired, revision/payload hash mismatch, consumed, revoked, pending/rejected, plan mismatch; re-approve after plan change succeeds once and cannot be replayed (S4) - one redact key table in @umt/contracts shared by server logger and agent redactForModel: rsskey, torrent_pass, authkey, downhash, c_secure_pass, passkey variants, x-api-key, cookie headers, nested objects/arrays (S2) - TMDB network errors: message and cause redacted via redactUrl (S3) - web Agent ?mock=1 only in DEV builds or when pi.provider is fake (S7) - EndpointDef auth annotations for /auth/*, asserted against PUBLIC_AUTH_PATHS (S10); doc drift fixes (S11) Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-27 22:24:44 +08:00
rootandClaude Opus 5.5	fa9221086b	feat(adapters,testkit): guarded qB data deletion (B7) and mock qB file materialization (B8) adapters: assertSafeToDeleteData({contentPath, libraryRoots, importVerified}) rejects paths inside/equal to/above any library root, relative or root paths, empty roots and unverified imports; QbClient.delete({deleteFiles:true}) requires a per-hash SafeDeleteCheck and throws DownloaderError('unsafe_delete') before sending anything. testkit: mock qB complete(hash, {files, writeFiles}) writes random-content files under save_path (opt-in, size-capped, traversal-safe); deleteFiles=true removes them. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-27 19:22:56 +08:00
umtandClaude Fable 5.1	b22c440139	chore: scaffold monorepo and migrate uhd_web design system (W0-A) - pnpm workspace: apps/{web,server}, packages/{contracts,db,domain,adapters,tasks,agent,testkit} - server: Hono + zod-openapi, API Key auth with scopes, redacting pino logger, SSE event bus with replay, worker heartbeat - db: Kysely + pg, file migrator, 0001_init (settings/api_key/audit_event/outbox_event) - web: React Router 7 SPA console shell with 12 workspace placeholders, uhd_web tokens/ui/guard scripts - docs: ADR-001 (Node over Deno), dev runbook, design system rules Co-Authored-By: Claude Fable 5.1 <[email protected]>	2026-09-27 17:36:26 +08:00

Author

SHA1

Message

Date

rootandClaude Opus 5.5

f48e1aac96

fix(security): W4-E1 approvals admin-session only, shared redact table, TMDB key redaction, prod mock gate

- POST /approvals and PATCH /approvals/{id} require a console admin session
  (EndpointDef auth:"session"); API keys incl. admin scope get 403, so an
  organize.execute key can no longer approve its own plan (S1)
- tests for single-use approval checks: expired, revision/payload hash
  mismatch, consumed, revoked, pending/rejected, plan mismatch; re-approve
  after plan change succeeds once and cannot be replayed (S4)
- one redact key table in @umt/contracts shared by server logger and agent
  redactForModel: rsskey, torrent_pass, authkey, downhash, c_secure_pass,
  passkey variants, x-api-key, cookie headers, nested objects/arrays (S2)
- TMDB network errors: message and cause redacted via redactUrl (S3)
- web Agent ?mock=1 only in DEV builds or when pi.provider is fake (S7)
- EndpointDef auth annotations for /auth/*, asserted against
  PUBLIC_AUTH_PATHS (S10); doc drift fixes (S11)

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-27 22:24:44 +08:00

rootandClaude Opus 5.5

fa9221086b

feat(adapters,testkit): guarded qB data deletion (B7) and mock qB file materialization (B8)

adapters: assertSafeToDeleteData({contentPath, libraryRoots, importVerified}) rejects
paths inside/equal to/above any library root, relative or root paths, empty roots and
unverified imports; QbClient.delete({deleteFiles:true}) requires a per-hash
SafeDeleteCheck and throws DownloaderError('unsafe_delete') before sending anything.

testkit: mock qB complete(hash, {files, writeFiles}) writes random-content files under
save_path (opt-in, size-capped, traversal-safe); deleteFiles=true removes them.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-27 19:22:56 +08:00

umtandClaude Fable 5.1

b22c440139

chore: scaffold monorepo and migrate uhd_web design system (W0-A)

- pnpm workspace: apps/{web,server}, packages/{contracts,db,domain,adapters,tasks,agent,testkit}
- server: Hono + zod-openapi, API Key auth with scopes, redacting pino logger, SSE event bus with replay, worker heartbeat
- db: Kysely + pg, file migrator, 0001_init (settings/api_key/audit_event/outbox_event)
- web: React Router 7 SPA console shell with 12 workspace placeholders, uhd_web tokens/ui/guard scripts
- docs: ADR-001 (Node over Deno), dev runbook, design system rules

Co-Authored-By: Claude Fable 5.1 <[email protected]>

2026-09-27 17:36:26 +08:00