UHD_Media_Tool

243 Commits 1 Branch 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
rootandClaude Opus 5.5	86af723b2a	feat(agent): W4-E2 in-grant auto recovery for decisions with verified outcome - settings.agent.autoInvestigateMode investigate\|recover, investigateMaxAttempts, recoverVerifySec - new capability download.recheck (execute, replay never): qB force recheck / resume, no source swap/delete - autoInvestigate moves to agent/investigate.ts: recover mode runs execute with a recovery allowlist only when an active grant (published policy if bound) covers the recovery actions; otherwise degrades to read-only investigation and leaves suggestion + recheck option on the decision - runAgent verifies recovery against business facts (download_task/task/source_release) before finalize; verified -> decision resolved by system:auto-recover, run summary '已恢复(系统核实)'; otherwise stays awaiting_user; per-root-cause attempt cap - e2e E6: missingFiles -> download_failed -> recheck -> verified; no grant degrades; swap rejected; dedupe; attempts exhausted; budget exceeded keeps attention Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-27 22:35:03 +08:00
rootandClaude Opus 5.5	6280d52ec3	feat(server): W2-D agent assembly, session API, runAgent/resolveDecision and backend e2e - Capabilities: all 14 registered (AO: inventory.query, download.plan/submit, organize.plan/execute, policy.preview/apply; agent: task.inspect/retry/cancel); startup asserts count == 14. Registry injects server-side authorize (automation_grant by action/scope/policy version/budget, one-shot approval bound to plan id + payload hash + revision + expiry; model claims ignored; automation switch), audit_event, server idempotency keys and a capability_invocation op ledger (migration 0021) used for crash reconciliation. download.plan creates draft plans only; download.submit promotes draft -> reserved after authorization. - Agent session API: POST/GET /agent/runs, GET /agent/runs/{id} (events by seq, messages, report), POST .../messages (wake), POST .../abort; automation-grants, approvals, capabilities invoke, tasks. - runAgent task: Pi or fake provider from settings (apiKey via secrets), events persisted to agent_run_event then published, resume + ledger reconciliation when pendingOperations > 0, waits for goal-linked downloads/imports and reports from business tables (submitted != imported). - Background triggers: decision.created -> bounded plan_only investigation (dedupe per decision); decision.updated(resolved) -> resolveDecision executes chosen option. - W2 closure: all OpenAPI routes registered in contracts api.ts (+ subset test); TMDB key from settings secret_ref with env fallback; PUT /sites/{id}/credentials documented as alias of /site-accounts; completion events documented as existing status events. - e2e (real PG + OpenWorkflow + testkit mocks): RSS->library, agent delegation with grant/deny, background continuation, worker kill -9 recovery (single qB add), auto investigation dedupe. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-27 20:52:12 +08:00
rootandClaude Opus 5.5	9858b8494d	feat(server): ServerModule skeleton with shared ServerContext, worker runs engine + outbox relay (B6) modules/{auth-settings,sources-identity,acquisition-organize,agent} placeholders listed in SERVER_MODULES; ServerModule registers routes (under /api/v1, authenticated), tasks, outbox routes, capabilities and background loops. bootstrap() builds ServerContext (db, config, logger, events, engine, outbox writer, secrets placeholder, settings reader, capability registry), fills unregistered tasks with stubs and rejects duplicate task or outbox ownership. worker starts the OpenWorkflow worker, OutboxRelay and module start(). --role migrate also migrates the engine schema; api/worker connect without migrating. tasks: TaskRegistry.has, migrateEngineSchema. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-27 19:30:55 +08:00

Author

SHA1

Message

Date

rootandClaude Opus 5.5

86af723b2a

feat(agent): W4-E2 in-grant auto recovery for decisions with verified outcome

- settings.agent.autoInvestigateMode investigate|recover, investigateMaxAttempts, recoverVerifySec
- new capability download.recheck (execute, replay never): qB force recheck / resume, no source swap/delete
- autoInvestigate moves to agent/investigate.ts: recover mode runs execute with a recovery allowlist
  only when an active grant (published policy if bound) covers the recovery actions; otherwise degrades
  to read-only investigation and leaves suggestion + recheck option on the decision
- runAgent verifies recovery against business facts (download_task/task/source_release) before finalize;
  verified -> decision resolved by system:auto-recover, run summary '已恢复(系统核实)'; otherwise stays
  awaiting_user; per-root-cause attempt cap
- e2e E6: missingFiles -> download_failed -> recheck -> verified; no grant degrades; swap rejected;
  dedupe; attempts exhausted; budget exceeded keeps attention

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-27 22:35:03 +08:00

rootandClaude Opus 5.5

6280d52ec3

feat(server): W2-D agent assembly, session API, runAgent/resolveDecision and backend e2e

- Capabilities: all 14 registered (AO: inventory.query, download.plan/submit, organize.plan/execute,
  policy.preview/apply; agent: task.inspect/retry/cancel); startup asserts count == 14.
  Registry injects server-side authorize (automation_grant by action/scope/policy version/budget,
  one-shot approval bound to plan id + payload hash + revision + expiry; model claims ignored;
  automation switch), audit_event, server idempotency keys and a capability_invocation op ledger
  (migration 0021) used for crash reconciliation. download.plan creates draft plans only;
  download.submit promotes draft -> reserved after authorization.
- Agent session API: POST/GET /agent/runs, GET /agent/runs/{id} (events by seq, messages, report),
  POST .../messages (wake), POST .../abort; automation-grants, approvals, capabilities invoke, tasks.
- runAgent task: Pi or fake provider from settings (apiKey via secrets), events persisted to
  agent_run_event then published, resume + ledger reconciliation when pendingOperations > 0,
  waits for goal-linked downloads/imports and reports from business tables (submitted != imported).
- Background triggers: decision.created -> bounded plan_only investigation (dedupe per decision);
  decision.updated(resolved) -> resolveDecision executes chosen option.
- W2 closure: all OpenAPI routes registered in contracts api.ts (+ subset test); TMDB key from
  settings secret_ref with env fallback; PUT /sites/{id}/credentials documented as alias of
  /site-accounts; completion events documented as existing status events.
- e2e (real PG + OpenWorkflow + testkit mocks): RSS->library, agent delegation with grant/deny,
  background continuation, worker kill -9 recovery (single qB add), auto investigation dedupe.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-27 20:52:12 +08:00

rootandClaude Opus 5.5

9858b8494d

feat(server): ServerModule skeleton with shared ServerContext, worker runs engine + outbox relay (B6)

modules/{auth-settings,sources-identity,acquisition-organize,agent} placeholders listed in
SERVER_MODULES; ServerModule registers routes (under /api/v1, authenticated), tasks,
outbox routes, capabilities and background loops. bootstrap() builds ServerContext (db,
config, logger, events, engine, outbox writer, secrets placeholder, settings reader,
capability registry), fills unregistered tasks with stubs and rejects duplicate task or
outbox ownership. worker starts the OpenWorkflow worker, OutboxRelay and module start().
--role migrate also migrates the engine schema; api/worker connect without migrating.
tasks: TaskRegistry.has, migrateEngineSchema.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-27 19:30:55 +08:00