media-downloader-development

media-downloader development

This repository owns the media-downloader connector: the yt-dlp based download library and CLI, its MCP tools, the media graph ingest (kg_media.py), and the network/filesystem trust boundaries in security.py. Shared connector contracts and transports belong to scion-sdk; admission, serving, and durable graph state belong to their owning repositories. Read AGENTS.md before changing code and keep provider credentials and endpoints out of source, logs, and skill content.

Rapid delivery: the 5-minute contract

Specs are already designed. Deliver small, reviewable slices and cite the owning spec row in the commit trailer.

• Find the owning row first with git grep -n "<term>" -- specs and extend that spec before adding new requirement text.
• Reuse existing SDK clients, transport policies, and tool factories. Do not create a second implementation of a connector capability.
• Keep changes scoped to this connector. A change owned by the SDK, Arbora, or the knowledge graph belongs in that repository instead.
• Every delivered requirement needs a bound test. Generated status.json files are produced by pipelines-hook spec-status; never hand-edit them.
• One logical change per commit, with Spec: <ID> and the assisting agent trailer adjacent in the final paragraph.

Setup and gates

Use the pinned environment from uv sync --locked --all-extras. Run the repository gate from the checkout root:

uvx pre-commit run --all-files

For focused feedback, run the relevant tests with the repository's pinned environment, for example:

uv run --all-extras pytest tests/test_security_boundaries.py -q
uv run --all-extras pytest tests/test_mcp.py tests/test_kg_media.py -q
uv run --all-extras pytest tests/test_publication_workflow.py -q

The canonical .pre-commit-config.yaml delegates connector-standard, secrets, spec, tests-fast, and dependency-readiness checks to Knuckles-Team/pipelines at rev: main. Do not replace those shared hooks with local copies or bypass a failing check.