fz-mirrors/AstrBot
1
0
Fork 0
mirror of https://github.com/AstrBotDevs/AstrBot synced 2026-07-18 02:00:09 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/master' into codex/workspace-skills

Browse Source
This commit is contained in:
Soulter
2026-06-19 00:52:24 +08:00
parent 6cac0881f5 59734c22b6
commit 0dfa481f0d
13 changed files with 309 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/en/dev/openapi.md
View File

@@ -130,6 +130,8 @@ Notes:
`POST /api/v1/chat` additionally requires `username`, with optional `session_id` (a UUID is auto-generated if omitted).
`username` is a caller-declared WebChat identity. It is used as the message sender and session owner in the message pipeline, including sender-ID-based command permission checks. Treat API keys with the `chat` scope as trusted backend credentials. If you expose chat access to end users, proxy requests through your own service and map each external user to an allowed `username`; do not let clients submit administrator IDs or other reserved sender IDs directly.
```json
{
"username": "alice",