Agent Wiki 0.9.0

Agent Wiki 0.9.0 adds optional two-factor authentication for human accounts after Google/OIDC or local password sign-in. Users can enroll user-verified passkeys, an authenticator app (TOTP), or both, with single-use recovery codes. Security changes require a recent sign-in and revoke other browser sessions. Named-agent credentials and explicit grants remain separate.

Local CLI login accepts a code through a private --second-factor-file. A trusted operator can recover one exact principal using the packaged agent-wiki-reset-mfa-direct command through the managed maintenance workflow.

Upgrade and recovery: enrollment is optional, and existing accounts remain unenrolled. TOTP setup creates a private encryption-key file beside the control database; back up that matching key with the database using the new lifecycle tools. Restores invalidate browser sessions, pending challenges and all old recovery codes while preserving enrolled factors. Once factors are enrolled, retain a 0.9.0-or-newer server and lifecycle tools. See the MFA guide and upgrade notes.

Validation: 237 source tests and 75 browser tests passed on Linux and macOS; the exact source commit passed managed Linux CI and native Nix package checks. Independent application review found no P0/P1/P2 issues. Native upgrade from 0.8.18 and synthetic container adoption, replacement, authenticated reads/writes and backup/restore qualification passed.

The attached Linux amd64 OCI archive is qualified and signed. Native host closure distribution is not qualified or published. The production npm audit has one existing low finding and no moderate/high/critical findings; 132 immutable runtime artifacts are unchanged from 0.8.18 and retain the earlier documented vulnerability dispositions. No fresh runtime vulnerability scan or clean-dependency claim is made. Signed qualification and security records describe the tested scope.

Source: 554aa45e6d9c823a1bd2aa23d3b1dc3adfead092. Verify the SSH-signed annotated tag and artifact signatures against the trusted release key. This remains initial-development software. Source publication does not automatically deploy existing installations.