autoreg-skills-max: initial public release (restored, redacted, hardened)

2026-10-20 02:16:32 +03:00
commit f58eafeb48
565 changed files with 60064 additions and 0 deletions
--- a/skills/lobehub-pool/references/cloud-chat-internal-endpoint-2026-07-05.md
+++ b/skills/lobehub-pool/references/cloud-chat-internal-endpoint-2026-07-05.md
@@ -0,0 +1,110 @@
+# LobeHub Cloud Internal Chat Endpoint (2026-07-05)
+
+## Discovery
+
+`POST https://app.lobehub.com/webapi/chat/lobehub` is exposed but requires a live browser session with Cloudflare clearance (`cf_clearance`) and a valid Better Auth session cookie. Direct curl from a datacenter IP fails with 403/500 even with a valid API key.
+
+The **programmatic chat path** discovered via Playwright network capture is the tRPC call:
+
+```text
+POST https://app.lobehub.com/trpc/lambda/aiAgent.execAgent?batch=1
+GET  https://app.lobehub.com/trpc/lambda/message.getMessages
+```
+
+## Execute agent
+
+```python
+import requests, json, time
+
+s = requests.Session()
+# ... login first (see cloud-apikey-trpc-bypass-2026-07-05.md) ...
+
+r = s.post("https://app.lobehub.com/trpc/lambda/aiAgent.execAgent?batch=1", headers={
+    "Origin": "https://app.lobehub.com",
+    "Referer": "https://app.lobehub.com/",
+    "Content-Type": "application/json",
+}, json={
+    "0": {
+        "json": {
+            "agentId": "agt_CuyRvAsGEBtc",
+            "appContext": {
+                "agentDocumentId": None,
+                "defaultTaskAssigneeAgentId": None,
+                "documentId": None,
+                "groupId": None,
+                "orchestrationRole": None,
+                "scope": None,
+                "taskId": None,
+                "threadId": None,
+                "topicId": None,
+            },
+            "prompt": "Say hi in one word",
+            "deviceId": None,
+            "fileIds": [],
+            "parentMessageId": None,
+            "resumeApproval": None,
+            "selectedToolIds": None,
+            "trigger": None,
+            "userInterventionConfig": {"approvalMode": "manual", "allowList": []},
+        },
+        "meta": {
+            "values": {
+                "appContext.agentDocumentId": ["undefined"],
+                "appContext.defaultTaskAssigneeAgentId": ["undefined"],
+                "appContext.documentId": ["undefined"],
+                "appContext.groupId": ["undefined"],
+                "appContext.orchestrationRole": ["undefined"],
+                "appContext.scope": ["undefined"],
+                "appContext.taskId": ["undefined"],
+                "appContext.threadId": ["undefined"],
+                "appContext.topicId": ["undefined"],
+                "deviceId": ["undefined"],
+                "parentMessageId": ["undefined"],
+                "resumeApproval": ["undefined"],
+                "selectedToolIds": ["undefined"],
+                "trigger": ["undefined"],
+            },
+            "v": 1,
+        },
+    }
+}, timeout=60)
+
+data = r.json()[0]["result"]["data"]["json"]
+topic_id = data["topicId"]
+message_id = data["messageId"]
+```
+
+## Poll for response
+
+```python
+for attempt in range(15):
+    time.sleep(3)
+    r = s.get("https://app.lobehub.com/trpc/lambda/message.getMessages", params={
+        "batch": "1",
+        "input": json.dumps({"0": {"json": {
+            "agentId": "agt_CuyRvAsGEBtc",
+            "isolatedTopic": True,
+            "topicId": topic_id,
+        }}}},
+        headers={"Origin": "https://app.lobehub.com", "Referer": "https://app.lobehub.com/"},
+        timeout=15,
+    )
+    msgs = r.json()[0]["result"]["data"]["json"]
+    for msg in msgs:
+        print(msg.get("role"), msg.get("content"))
+```
+
+## Observed models in chat UI
+
+- `gpt-5.4-mini`
+- `gpt-5.5`
+- `claude-sonnet-5`
+- `claude-fable-5`
+- `nano-banana-2-lite`
+- `seedance-2.0`
+
+## Notes
+
+- `/api/v1/models` and `/api/v1/chat/completions` are not functional entry points for Cloud.
+- A full OpenAI-compatible proxy would need to wrap `aiAgent.execAgent` + `message.getMessages` polling.
+- This was verified from DO server `[REDACTED-IP]`; local/DC IPs are blocked by Cloudflare for the tRPC endpoints too unless session + `cf_clearance` cookies are present.