feat: add secure agent and MCP extensions

backend/apps/modelhub/api.py

@@ -158,7 +158,7 @@ def create_deployment(request, payload: ModelDeploymentIn):
         raise HttpError(400, "Temperature must be between 0 and 2")
     if not 1 <= payload.max_output_tokens <= 32768:
         raise HttpError(400, "Max output tokens are out of range")
-    if payload.capability not in {"text_chat", "vision_chat"}:
+    if payload.capability not in {"text_chat", "vision_chat", "embedding", "rerank"}:
         raise HttpError(400, "Unknown model capability")
     deployment = ModelDeployment.objects.create(**payload.dict())
     deployment = ModelDeployment.objects.select_related("provider").get(id=deployment.id)
@@ -177,7 +177,12 @@ def update_deployment(request, deployment_id: int, payload: ModelDeploymentUpdat
     require_permission(request, "model.manage")
     deployment = ModelDeployment.objects.select_related("provider").get(id=deployment_id)
     values = payload.dict(exclude_unset=True)
-    if "capability" in values and values["capability"] not in {"text_chat", "vision_chat"}:
+    if "capability" in values and values["capability"] not in {
+        "text_chat",
+        "vision_chat",
+        "embedding",
+        "rerank",
+    }:
         raise HttpError(400, "Unknown model capability")
     for field, value in values.items():
         setattr(deployment, field, value)
@@ -196,6 +201,8 @@ def update_deployment(request, deployment_id: int, payload: ModelDeploymentUpdat
 def test_deployment(request, deployment_id: int, payload: ModelTestIn):
     require_permission(request, "model.manage")
     deployment = ModelDeployment.objects.select_related("provider").get(id=deployment_id)
+    if deployment.capability == "embedding":
+        raise HttpError(400, "Embedding 模型请通过知识检索验证")
     invocation = create_model_test(deployment, payload.prompt, request.user)
     run_model_test.delay(invocation.id)
     invocation.refresh_from_db()