rootandClaude Opus 5.5
f48e1aac96
- POST /approvals and PATCH /approvals/{id} require a console admin session
(EndpointDef auth:"session"); API keys incl. admin scope get 403, so an
organize.execute key can no longer approve its own plan (S1)
- tests for single-use approval checks: expired, revision/payload hash
mismatch, consumed, revoked, pending/rejected, plan mismatch; re-approve
after plan change succeeds once and cannot be replayed (S4)
- one redact key table in @umt/contracts shared by server logger and agent
redactForModel: rsskey, torrent_pass, authkey, downhash, c_secure_pass,
passkey variants, x-api-key, cookie headers, nested objects/arrays (S2)
- TMDB network errors: message and cause redacted via redactUrl (S3)
- web Agent ?mock=1 only in DEV builds or when pi.provider is fake (S7)
- EndpointDef auth annotations for /auth/*, asserted against
PUBLIC_AUTH_PATHS (S10); doc drift fixes (S11)
Co-Authored-By: Claude Opus 5.5 <[email protected]>
@umt/adapters
外部系统适配层:qBittorrent、RSS、站点(观众 NexusPHP / 馒头 API)、TMDB、Emby 兼容服务器、浏览器服务与文件系统。对上只暴露端口接口,凭证经 secret reference 注入,日志一律脱敏(键表与规则取 @umt/contracts 的 redact.ts)。
包入口 src/index.ts 逐个 export * 下列子模块:
| 子模块 | 主要入口 | 说明 |
|---|---|---|
qbittorrent |
createQbClient / QbClient、DownloaderRegistry、assertSafeToDeleteData、mapQbState |
qB WebUI v2:提交、标签接管、暂停/恢复、带安全校验的删数据 |
rss |
createRssFetcher、applyFeedItems、redactUrl、buildRssLinkRequest |
RSS 2.0 / RDF / Atom 抓取解析、条件请求、退避熔断、去重 |
sites |
createSiteAdapter / getSiteAdapter、listSiteDefinitions、siteFetch |
观众(NexusPHP 配置驱动 spider)与馒头 M-Team API |
tmdb |
createTmdbClient / TmdbClient、matchTmdb、matchTmdbMulti、TmdbError |
多语言搜索、详情、季集;缓存限流;错误信息不带 api_key |
emby |
createEmbyClient / EmbyClient、MediaServerRegistry |
Emby / Jellyfin 库存查询,失败返回 unknown 而不是"不存在" |
fs |
copyWithVerify、moveSafe、crossDeviceMove、checkRoot、scanIncremental、diskUsage、ffprobe |
校验复制、跨卷移动、库根哨兵、增量扫描 |
browser |
BrowserProvider 合同、createNoneBrowserProvider、camofox 适配骨架、redactBrowserUrl |
浏览器服务接口(M1 只有接口与骨架) |
测试:deno task test(vitest,外部服务全部用 @umt/testkit 的 mock)。