kami 4793d77fa9 mavweb: gate /api/revert behind passkey step-up ...

RevertFact voids the latest fact for a key — a store mutation — but
/api/revert had no step-up gate, while POST /tools required L3. Close the
inconsistency: thread the same *webauthn.PasskeySession into handleRevert
and reject with 403 when a configured session isn't asserted. nil session
(WebAuthn unconfigured) keeps prior behavior — transport-level auth only.

Tests: un-asserted session → 403 and RevertFact not called; asserted → 200.
The RevertFact mock now records its key so the gate assertion is meaningful.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-06 12:04:11 +04:00

cmd

mavweb: gate /api/revert behind passkey step-up

2026-07-06 12:04:11 +04:00

deploy

maven: seed safe tool allowlist (task 2)

2026-07-06 04:04:17 +04:00

internal

maven: dedupe knowledge prompt to router.KnowledgePrompt (task 4 follow-up)

2026-07-06 11:51:31 +04:00

scripts

scripts: add maven-backup.sh for encrypted DB backup/restore

2026-07-05 11:48:46 +04:00

.dockerignore

deploy: wire voice in the container — bind + real onnxruntime 1.26

2026-07-03 23:07:59 +04:00

.gitignore

auth: add RevertFact method to recordingAPI test helper

2026-07-05 02:40:52 +04:00

AGENTS.md

mavweb: unify UI — shared ui.css + nav partial across all pages

2026-07-05 18:36:31 +04:00

docker-compose.yml

fix: local timezone for replies + quiet-hours; guard presence "ago" overflow

2026-07-04 00:13:13 +04:00

Dockerfile

fix: local timezone for replies + quiet-hours; guard presence "ago" overflow

2026-07-04 00:13:13 +04:00

go.mod

reminders: add recurring reminder support

2026-07-05 11:46:12 +04:00

go.sum

reminders: add recurring reminder support

2026-07-05 11:46:12 +04:00

kill-maven.sh

initial commit

2026-07-03 00:32:48 +02:00

Makefile

make: add race+coverprofile to test target; add build-caldav target

2026-07-05 02:07:04 +04:00

maven-feature-ranking.md

docs: correct missed-reminder item in feature ranking

2026-07-03 21:22:11 +04:00

maven.md

initial commit

2026-07-03 00:32:48 +02:00

PROGRESS.md

progress: refresh for overnight-jul6 (calendar/weather/knowledge query surface)

2026-07-06 11:57:54 +04:00

PROTOCOL.md

PROTOCOL.md + away-channel fallthrough

2026-07-03 13:18:38 +02:00

SESSION-05-07-2026.md

fix: code-review findings on overnight-jul5

2026-07-05 17:50:21 +04:00

SESSION-06-07-2026.md

maven: update session status board with commit SHAs

2026-07-06 04:20:41 +04:00

SPEC.md

spec: item 2 clarify ErrNoSession gap vs store.Away routing

2026-07-03 13:07:53 +02:00

start-maven.sh

initial commit

2026-07-03 00:32:48 +02:00

START.md

maven: embedder config validation + docs (task 1)

2026-07-06 04:02:32 +04:00

S

Description

No description provided

70 MiB

Languages

Go 97.1%

HTML 0.9%

Shell 0.6%

CSS 0.5%

Makefile 0.3%

Other 0.6%