UHD_Media_Tool

448 Commits 1 Branch 0 Tags

2 Commits

Include renames

Author	SHA1	Message	Date
rootandClaude Opus 5.5	f48e1aac96	fix(security): W4-E1 approvals admin-session only, shared redact table, TMDB key redaction, prod mock gate - POST /approvals and PATCH /approvals/{id} require a console admin session (EndpointDef auth:"session"); API keys incl. admin scope get 403, so an organize.execute key can no longer approve its own plan (S1) - tests for single-use approval checks: expired, revision/payload hash mismatch, consumed, revoked, pending/rejected, plan mismatch; re-approve after plan change succeeds once and cannot be replayed (S4) - one redact key table in @umt/contracts shared by server logger and agent redactForModel: rsskey, torrent_pass, authkey, downhash, c_secure_pass, passkey variants, x-api-key, cookie headers, nested objects/arrays (S2) - TMDB network errors: message and cause redacted via redactUrl (S3) - web Agent ?mock=1 only in DEV builds or when pi.provider is fake (S7) - EndpointDef auth annotations for /auth/*, asserted against PUBLIC_AUTH_PATHS (S10); doc drift fixes (S11) Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-09-27 22:24:44 +08:00
rootandClaude Fable 5.1	9c881e737f	feat(agent): capability registry, Pi AgentRuntimePort, fake model provider and redaction guard (W1-5) - CapabilityRegistry: descriptor(id/version/schema/scope/risk/idempotent/preview/replay), invoke = scope limit -> input schema -> server-side authorize -> idempotency key -> handler -> output schema -> audit; capability id <-> tool name mapping (download.submit <-> download__submit) - PiAgentRuntime (pi-agent-core AgentHarness 0.87.1): whitelist tools + before_tool re-check, redacted event stream, JSONL session at sessionDir/<runId>.jsonl, resume/abort/compact, tool-call/duration/token/cost budgets -> abort + run_failed(budget) - AgentSettings -> pi-ai createProvider (anthropic / openai-compatible), compaction mapping - FakeModelProvider + createFakeRuntime (scripted, transcript-derived, survives crash/resume) - buildSystemPrompt, redactForModel; 27 tests incl. SIGKILL + resume Co-Authored-By: Claude Fable 5.1 <[email protected]>	2026-09-27 17:55:28 +08:00

Author

SHA1

Message

Date

rootandClaude Opus 5.5

f48e1aac96

fix(security): W4-E1 approvals admin-session only, shared redact table, TMDB key redaction, prod mock gate

- POST /approvals and PATCH /approvals/{id} require a console admin session
  (EndpointDef auth:"session"); API keys incl. admin scope get 403, so an
  organize.execute key can no longer approve its own plan (S1)
- tests for single-use approval checks: expired, revision/payload hash
  mismatch, consumed, revoked, pending/rejected, plan mismatch; re-approve
  after plan change succeeds once and cannot be replayed (S4)
- one redact key table in @umt/contracts shared by server logger and agent
  redactForModel: rsskey, torrent_pass, authkey, downhash, c_secure_pass,
  passkey variants, x-api-key, cookie headers, nested objects/arrays (S2)
- TMDB network errors: message and cause redacted via redactUrl (S3)
- web Agent ?mock=1 only in DEV builds or when pi.provider is fake (S7)
- EndpointDef auth annotations for /auth/*, asserted against
  PUBLIC_AUTH_PATHS (S10); doc drift fixes (S11)

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-09-27 22:24:44 +08:00

rootandClaude Fable 5.1

9c881e737f

feat(agent): capability registry, Pi AgentRuntimePort, fake model provider and redaction guard (W1-5)

- CapabilityRegistry: descriptor(id/version/schema/scope/risk/idempotent/preview/replay),
  invoke = scope limit -> input schema -> server-side authorize -> idempotency key -> handler
  -> output schema -> audit; capability id <-> tool name mapping (download.submit <-> download__submit)
- PiAgentRuntime (pi-agent-core AgentHarness 0.87.1): whitelist tools + before_tool re-check,
  redacted event stream, JSONL session at sessionDir/<runId>.jsonl, resume/abort/compact,
  tool-call/duration/token/cost budgets -> abort + run_failed(budget)
- AgentSettings -> pi-ai createProvider (anthropic / openai-compatible), compaction mapping
- FakeModelProvider + createFakeRuntime (scripted, transcript-derived, survives crash/resume)
- buildSystemPrompt, redactForModel; 27 tests incl. SIGKILL + resume

Co-Authored-By: Claude Fable 5.1 <[email protected]>

2026-09-27 17:55:28 +08:00