kami
de2058c851
- handlers_test.go: first tests for cmd/mavweb (feature-ranking #2). Covers the /tools enable/disable surface (arg parsing, error mapping, html escaping) and the webauthn handler contracts (method guards, malformed input). 14 cases. Verified the enable path is genuinely gated: an un-asserted call fails at the mavend IPC boundary (Requirement(EnableTool)=AuthStepUp), so mavweb stays a trust-nothing pass-through and core mediates. - policy.go: DisableTool now also requires AuthStepUp. It mutates the same tool allowlist as EnableTool and is a lever to silence a security-relevant tool; gating allowlist mutation uniformly beats a split rule. ProposeTool stays maven-callable (no passkey). Corrects the stale api.go comment that claimed all three gated. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>