First slice: ledger-store (journal+blobs+sqlite) and ledger-mcp (18 tools, receipt policy)

crates/ledger-store/src/lib.rs

@@ -0,0 +1,30 @@
+//! `ledger-store`: durable persistence for the books.
+//!
+//! Three pieces, one job — keep the books safe:
+//!
+//! * [`journal`] — the source of truth. An append-only, hash-chained JSONL
+//!   journal. Every state change is an immutable fact, fsync'd on append.
+//! * [`blob`] — the bytes. Content-addressed (SHA-256), immutable,
+//!   deduplicated receipt and document storage.
+//! * [`Store`] — the SQLite projection plus the write path. SQLite is the
+//!   query engine and is disposable by design: [`Store::rebuild`] drops it
+//!   and replays the journal. [`Store::verify`] replays the journal into a
+//!   fresh engine and diffs its reports against both the live ledger and
+//!   the projection.
+//!
+//! The write path is singular: **validate → journal → mutate → apply**.
+//! Journal first means a failed write leaves nothing behind; a failed
+//! SQLite apply leaves the journal ahead, and the next open heals it via
+//! `last_applied_seq`. There is exactly one writer: `Store` is `!Sync` by
+//! construction (it owns a `rusqlite::Connection`).
+
+pub mod blob;
+pub mod error;
+pub mod journal;
+pub mod schema;
+pub mod store;
+
+pub use blob::BlobStore;
+pub use error::StoreError;
+pub use journal::{GENESIS_PREV, JournalLine, JournalWriter};
+pub use store::{Attachment, DB_FILE, EntryRow, EventRow, JOURNAL_FILE, Store};