mavend: centralize action validation boundary (slice 4)

2026-09-06 12:53:54 +04:00
parent 6a402bf556
commit 356766bce1
32 changed files with 2061 additions and 178 deletions
@@ -201,14 +201,14 @@ ToolSearch("select:mcp__vikunja__list_tasks,mcp__vikunja__get_task_details,mcp__
 ```

 - This repo is Vikunja project **Maven** (ID 2), MCP at
-  `http://localhost:9100/mcp`, or `http://192.168.1.104:9100/mcp` from workpc.
- **A session with no task id asks for one before it starts**, because work
-  without one is work nobody can resume.
+  `http://localhost:9100/mcp` on homesrv. **`vikunja-mcp` publishes to
+  `127.0.0.1:9100` only, so the LAN address never answers from workpc.** A
+  refused connection is that, not an outage: three sessions read it as "Vikunja
+  is down" and filed nothing. Tunnel first, then use `localhost`:
+  `ssh -N -f -L 9100:127.0.0.1:9100 kami@192.168.1.104`.
 - **Close a finished task with `done: true` and nothing else** (owner's call,
  2026-08-07). `update_task` carrying a `description` resets `done` to false.
 - **`pre-commit` refuses master** and more than 300 changed lines in
  non-markdown files. Markdown is exempt and may land as one batch.
- **`commit-msg` requires the subject to end with `(V-<id>)`.** `V-` and not
-  `#`, because Gitea autolinks `#123` to the wrong tracker.
 - **`diff-budget.sh` blocks edits past 600 changed lines** on a `task/` branch.
 - **`--no-verify` exists.** Using it means saying why in the commit body.