UHD_Media_Tool

180 Commits 1 Branch 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
rootandClaude Opus 5.5	05a7706dde	feat(sources): site center backend (credentials, refresh login, user data, health check, delete) PUT /sites/{id}/credentials by kind (moved from auth-settings, legacy body accepted), POST refresh-login (async task or wait), POST health-check, GET user-data history, DELETE /sites/{id} (soft delete, releases kept), DELETE /site-accounts/{id}, GET /sites?include=accounts; refreshSiteAccount task with login-failure decisions and auto re-login on auth_expired; scheduled jobs sites.user_data (6h) and sites.health_check (1h); settings.sites defaults for rate limit, snapshot interval, UA and proxy. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-28 15:18:40 +08:00
rootandClaude Opus 5.5	3e37ac8ae7	refactor(agent): runAgent uses Agent upstreams only; deprecate legacy settings.pi fields pi.provider / baseUrl / model / thinkingLevel / apiKeySecretRef are now DEPRECATED_SETTINGS_FIELDS: kept in the schema for stored JSON, dropped from PATCH /settings and from the settings sections, never read by the server. runAgent fails with a clear message when no upstream is set. The agent demo gate checks the default upstream provider; e2e seeds a fake upstream as default. OpenAPI summaries say Agent upstream. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-28 13:45:40 +08:00
rootandClaude Opus 5.5	ff230e5da7	feat(server): W2-A login gate, secrets, settings, instances, audit, engine panel API and PG-backed SSE bus - Admin login gate (docs/design/auth-reference.md): admin_user/admin_session/login_attempt (migration 0015), one-time setup token logged once + conditional UPDATE, argon2id via hash-wasm (WASM; compiled binary has no --allow-ffi), sha256-stored sessions in HttpOnly SameSite=Lax cookie umt_session (fixed 12h TTL, soft revoke), HMAC-derived double-submit CSRF, IP (5) + account (15) failure limits per 15 min, password change revokes other sessions, optional TOTP with replay counter, AuditAction enum. - Unified auth middleware: cookie session or Bearer API key -> c.var.actor {type: admin\|api_key, id, name, scopes}; requireScope works for both; requireAdminSession. - ctx.secrets: AES-256-GCM, per-secret HKDF-SHA256 key from SECRET_MASTER_KEY, AAD bound to (id, purpose); ctx.settings: 30s cache invalidated by settings.changed events. - Endpoints: /auth/*, /settings, /api-keys, /secrets, /audit-events, library-roots, downloader/media-server instances (+test), path-mappings (+verify), PUT /sites/{id}/credentials, /engine/runs\|stats\|cancel (read-only openworkflow schema). - SSE: PgEventBus (sse_event table, migration 0016, LISTEN/NOTIFY umt_events, catch-up by seq, pruning, resync); EventBusPort is now async. - Tests: login/rate limit/revocation/CSRF/TOTP, secrets round trip and no log leakage, admin APIs against mock qB/Emby, SSE across two Deno subprocesses. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-27 19:59:54 +08:00

Author

SHA1

Message

Date

rootandClaude Opus 5.5

05a7706dde

feat(sources): site center backend (credentials, refresh login, user data, health check, delete)

PUT /sites/{id}/credentials by kind (moved from auth-settings, legacy body
accepted), POST refresh-login (async task or wait), POST health-check,
GET user-data history, DELETE /sites/{id} (soft delete, releases kept),
DELETE /site-accounts/{id}, GET /sites?include=accounts; refreshSiteAccount
task with login-failure decisions and auto re-login on auth_expired;
scheduled jobs sites.user_data (6h) and sites.health_check (1h);
settings.sites defaults for rate limit, snapshot interval, UA and proxy.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-28 15:18:40 +08:00

rootandClaude Opus 5.5

3e37ac8ae7

refactor(agent): runAgent uses Agent upstreams only; deprecate legacy settings.pi fields

pi.provider / baseUrl / model / thinkingLevel / apiKeySecretRef are now
DEPRECATED_SETTINGS_FIELDS: kept in the schema for stored JSON, dropped
from PATCH /settings and from the settings sections, never read by the
server. runAgent fails with a clear message when no upstream is set.
The agent demo gate checks the default upstream provider; e2e seeds a
fake upstream as default. OpenAPI summaries say Agent upstream.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-28 13:45:40 +08:00

rootandClaude Opus 5.5

ff230e5da7

feat(server): W2-A login gate, secrets, settings, instances, audit, engine panel API and PG-backed SSE bus

- Admin login gate (docs/design/auth-reference.md): admin_user/admin_session/login_attempt
  (migration 0015), one-time setup token logged once + conditional UPDATE, argon2id via
  hash-wasm (WASM; compiled binary has no --allow-ffi), sha256-stored sessions in HttpOnly
  SameSite=Lax cookie umt_session (fixed 12h TTL, soft revoke), HMAC-derived double-submit
  CSRF, IP (5) + account (15) failure limits per 15 min, password change revokes other
  sessions, optional TOTP with replay counter, AuditAction enum.
- Unified auth middleware: cookie session or Bearer API key -> c.var.actor
  {type: admin|api_key, id, name, scopes}; requireScope works for both; requireAdminSession.
- ctx.secrets: AES-256-GCM, per-secret HKDF-SHA256 key from SECRET_MASTER_KEY, AAD bound
  to (id, purpose); ctx.settings: 30s cache invalidated by settings.changed events.
- Endpoints: /auth/*, /settings, /api-keys, /secrets, /audit-events, library-roots,
  downloader/media-server instances (+test), path-mappings (+verify),
  PUT /sites/{id}/credentials, /engine/runs|stats|cancel (read-only openworkflow schema).
- SSE: PgEventBus (sse_event table, migration 0016, LISTEN/NOTIFY umt_events, catch-up by
  seq, pruning, resync); EventBusPort is now async.
- Tests: login/rate limit/revocation/CSRF/TOTP, secrets round trip and no log leakage,
  admin APIs against mock qB/Emby, SSE across two Deno subprocesses.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-27 19:59:54 +08:00