P1: the books keep how they are kept

Settings, conventions (posting templates, approval rules, policies,
close steps, calendar, mappings, notes), decisions, open items and
entry approvals are journal events (journal format 2). Books that keep
their settings never read wanderbooks.toml or config.json; the server
and the viewer take the vault key from --vault-key-file instead.
books.import_settings moves a settings file in once, exactly as the
server reads it. Approval rules, when enforced, gate every posting
path. Replay refuses what it can't read as newer, never as corrupt.

Lean: a record changes no figure. Mutation on the whole diff: every
survivor killed by a test but two equivalent (docs/testing.md). The
Company page says a late open item is overdue in words, not colour
alone.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj
This commit is contained in:
swaitsandClaude Opus 5.5 committed 2026-10-17 19:27:48 -06:00
1 parent e60ecc5317
commit c587593d78
71 files changed
+12249 -461

No files matched your search

@@ -0,0 +1,81 @@
{
"assets": [],
"bills": [],
"entries": [
{
"date": "2026-10-05",
"description": "Joint contribution",
"id": 1,
"lines": [
{
"account": 1,
"amount": {
"amount": "1000.01",
"currency": [
85,
83,
68
]
},
"side": "Debit"
},
{
"account": 3,
"amount": {
"amount": "500.01",
"currency": [
85,
83,
68
]
},
"side": "Credit"
},
{
"account": 4,
"amount": {
"amount": "500.00",
"currency": [
85,
83,
68
]
},
"side": "Credit"
}
],
"reversal_of": null,
"status": "Draft"
}
],
"entry_parties": [],
"invoices": [],
"payroll_runs": [],
"periods": [],
"recurring": [],
"schedules": [],
"snapshot": {
"Ok": {
"balance_sheet": {
"assets": "0",
"balanced": true,
"current_earnings": "0",
"equity": "0",
"liabilities": "0"
},
"profit_and_loss": {
"expenses": "0",
"net_income": "0",
"revenue": "0"
},
"trial_balance": {
"lines": [],
"total_credits": "0",
"total_debits": "0"
}
}
},
"verify": {
"Ok": null
}
}
@@ -0,0 +1,25 @@
{"payload":{"base_currency":"USD"},"prev":"0000000000000000000000000000000000000000000000000000000000000000","seq":1,"ts":"2026-10-17T19:53:25Z","type":"store.created"}
{"payload":{"account_type":"Asset","code":"1000","currency":"USD","id":1,"name":"Bank","parent":null,"placeholder":false},"prev":"d831941701fea09ffd8217f36cba5da99d1a45d0113dc50a47248dcb80280ff6","seq":2,"ts":"2026-10-17T19:53:25Z","type":"account.added"}
{"payload":{"account_type":"Liability","code":"2100","currency":"USD","id":2,"name":"Due to Members","parent":null,"placeholder":false},"prev":"b50cde605a07e1ea7f3d2706337b3c78c89e98059e31d2a7f8dcfb4263a544e4","seq":3,"ts":"2026-10-17T19:53:25Z","type":"account.added"}
{"payload":{"account_type":"Equity","code":"3000","currency":"USD","id":3,"name":"Capital A","parent":null,"placeholder":false},"prev":"a25661e16d53f331435bee703b2ec5025323c6f403bdf20d323209415108ac8d","seq":4,"ts":"2026-10-17T19:53:25Z","type":"account.added"}
{"payload":{"account_type":"Equity","code":"3001","currency":"USD","id":4,"name":"Capital B","parent":null,"placeholder":false},"prev":"6cdb2d87b823654180c453e845b8352a029f9ec088950565a358edb5b1763395","seq":5,"ts":"2026-10-17T19:53:25Z","type":"account.added"}
{"payload":{"account_type":"Expense","code":"6000","currency":"USD","id":5,"name":"Software","parent":null,"placeholder":false},"prev":"909accf560d58465cc34052bf3f0142cc6125e8ad1a04597e7c4f833dbccee4e","seq":6,"ts":"2026-10-17T19:53:25Z","type":"account.added"}
{"payload":{"features":[],"format":2},"prev":"5784dc3749592777a990411ece951993d547579bd25249b7f4bc10a48b0e1924","seq":7,"ts":"2026-10-17T19:53:25Z","type":"journal.format_set"}
{"payload":{"changes":[{"key":"company.name","value":"Fixture Labs LLC"},{"key":"company.tax_classification","value":"partnership"},{"key":"company.ein","value":"98-7814321"},{"key":"company.timezone","value":"America/Denver"},{"key":"policy.evidence.threshold","value":"0.00"},{"key":"books.cash_accounts","value":["1000"]},{"key":"books.financing_accounts","value":["2100"]},{"key":"policy.parties","value":"require"},{"key":"company.members","value":[{"capital_account":"3000","files_jointly_with":"B","name":"A","share":"0.5"},{"capital_account":"3001","files_jointly_with":"A","name":"B","share":"0.5"}]}],"source":{"decided_by":"Tobin Harlow","decided_on":"2026-10-17","note":"Imported from wanderbooks.toml."}},"prev":"3c4dc4a46cdb8ecf6c6dc453f1cabe68a4790a75c7ee8b5f9e300bd6599d384e","seq":8,"ts":"2026-10-17T19:53:25Z","type":"settings.set"}
{"payload":{"body_md":"Cash in from both members, half each.","id":"joint-contribution","kind":"posting_template","source":{"decided_by":"A","decided_on":"2026-10-17"},"structured":{"lines":[{"account":"1000","share":"1","side":"debit"},{"account":"3000","share":"0.5","side":"credit"},{"account":"3001","share":"0.5","side":"credit"}]},"title":"Joint contribution"},"prev":"6bddf895bc9859850abeab08c26829e98d6f46f3c9b7b841809cb119152af749","seq":9,"ts":"2026-10-17T19:53:25Z","type":"convention.set"}
{"payload":{"body_md":"Cash in from both members, half each; one entry per member when they pay separately.","id":"joint-contribution","kind":"posting_template","source":{"decided_by":"A","decided_on":"2026-10-17"},"structured":{"lines":[{"account":"1000","share":"1","side":"debit"},{"account":"3000","share":"0.5","side":"credit"},{"account":"3001","share":"0.5","side":"credit"}]},"title":"Joint contribution"},"prev":"68128433262822b6188f25bb6223bdedfaf11ab55576cc115a2a9607c48f79ec","seq":10,"ts":"2026-10-17T19:53:25Z","type":"convention.set"}
{"payload":{"body_md":"Software over 500 needs B.","id":"over-500","kind":"approval_rule","source":{"decided_by":"Tobin Harlow","decided_on":"2026-10-17"},"structured":{"accounts":["6000"],"amount_over":"500","approver":"B"},"title":"Big spends"},"prev":"6d59543e96136ab30e443c8549c015d352a7849407f437571abcaabcc700b7da","seq":11,"ts":"2026-10-17T19:53:25Z","type":"convention.set"}
{"payload":{"body_md":"Ask whether a member paid anything personally.","id":"close-ask","kind":"close_step","source":{"decided_by":"Tobin Harlow","decided_on":"2026-10-17"},"title":"Ask about personal cards"},"prev":"d7129c6e6607d697eb926dfd1a704d6373e832e1c2b211b2e9fe2ac58d19a4eb","seq":12,"ts":"2026-10-17T19:53:25Z","type":"convention.set"}
{"payload":{"id":"close-ask","reason":"Folded into the checklist.","source":{"decided_by":"Tobin Harlow","decided_on":"2026-10-17"}},"prev":"0931af3493613606b6d3c48cc9e480c29c3b96fd7366b0cea7a961d624d5c33e","seq":13,"ts":"2026-10-17T19:53:25Z","type":"convention.retired"}
{"payload":{"attachment_id":1,"blob_sha":"c5c2e8be6ad0825a56ded1f1a153ceaf11dc060ab44b120a94406a08207babc2","category":"legal","description":null,"entry_id":null,"file_name":"oa.pdf","mime_type":"application/pdf","size_bytes":16},"prev":"4720deee65d5731edde087f976e81bb00a995b2eceb3e917ea9b43cab8b484da","seq":14,"ts":"2026-10-17T19:53:25Z","type":"document.filed"}
{"payload":{"citation":"Treas. Reg. 1.263(a)-1(f)","decided_by":["Tobin Harlow","B"],"decided_on":"2026-10-11","decision_md":"Expense tangible items up to 2,500.","evidence_attachment":1,"id":1,"subject":"Materiality"},"prev":"01835e5e1cc4532c80f283053a3ea3bfe2c61c2203fe8302a378bef43f44305c","seq":15,"ts":"2026-10-17T19:53:25Z","type":"decision.recorded"}
{"payload":{"decided_by":["Tobin Harlow"],"decided_on":"2026-10-16","decision_md":"Corrected: prepaid services follow the 12-month rule.","id":2,"subject":"Materiality","supersedes":1},"prev":"3e2044a5d1e14e18efb98da5327c6b9db2edcef6da2bb4ce084d41204e157edb","seq":16,"ts":"2026-10-17T19:53:25Z","type":"decision.recorded"}
{"payload":{"detail_md":"Signed; mailing pending.","due":"2026-10-24","id":1,"source":{"decided_by":"Tobin Harlow","decided_on":"2026-10-17"},"title":"Mail the letter"},"prev":"f550f1c4cff806c46d1e7f480c1f60c0f83d24459073d063537dc794e6de9c08","seq":17,"ts":"2026-10-17T19:53:25Z","type":"open_item.raised"}
{"payload":{"id":2,"source":{"decided_by":"Tobin Harlow","decided_on":"2026-10-17"},"title":"Ask the CPA"},"prev":"7b1c11c8e27a20878a4ca6c37e64f120e9da2d07c6efff9f403f58c5bcc02117","seq":18,"ts":"2026-10-17T19:53:25Z","type":"open_item.raised"}
{"payload":{"id":2,"resolution":"Asked.","source":{"decided_by":"Tobin Harlow","decided_on":"2026-10-17"}},"prev":"1d8ec03ce7f7c7acbd204e09a6933476ff9fd6fd1054acf3a577028c03b56a76","seq":19,"ts":"2026-10-17T19:53:25Z","type":"open_item.resolved"}
{"payload":{"date":"2026-10-05","description":"Joint contribution","id":1},"prev":"1ce065493ae594be02b4dc60025112cf6e8e77f21f88acccafefcd41f609e94a","seq":20,"ts":"2026-10-17T19:53:25Z","type":"entry.created"}
{"payload":{"account":1,"amount":"1000.01","currency":"USD","id":1,"side":"debit"},"prev":"a6cf489178b080706038fd67a6ab92a30100f3be72a35c7d5b6d54a90670a278","seq":21,"ts":"2026-10-17T19:53:25Z","type":"entry.line_added"}
{"payload":{"account":3,"amount":"500.01","currency":"USD","id":1,"side":"credit"},"prev":"dbe1c0cc261ddd1fd3102f9c49fa7cd136b80db50e1d7fb0beb2f53e611d3f17","seq":22,"ts":"2026-10-17T19:53:25Z","type":"entry.line_added"}
{"payload":{"account":4,"amount":"500.00","currency":"USD","id":1,"side":"credit"},"prev":"48a5248ca5611de8eacf53732263449076d51ceacac02137049b16ac6e3fa93c","seq":23,"ts":"2026-10-17T19:53:25Z","type":"entry.line_added"}
{"payload":{"approver":"B","entry_id":1,"fingerprint":"807a5fdd769adedb","note":"ok","source":{"decided_by":"B","decided_on":"2026-10-17"}},"prev":"3c2063b5f7496c3a59e155d9c9f4d3e23340874d6ca6b5ea8722ed9fd8b84697","seq":24,"ts":"2026-10-17T19:53:25Z","type":"entry.approved"}
{"payload":{"changes":[{"key":"policy.approval_rules","value":"enforce"},{"key":"company.timezone","value":null}],"source":{"decided_by":"Tobin Harlow","decided_on":"2026-10-17"}},"prev":"6c598422c71c531506af255c932ee123b64732e8504eccf9fb1210a0cdda7140","seq":25,"ts":"2026-10-17T19:53:25Z","type":"settings.set"}
@@ -0,0 +1,289 @@
{
"approvals": [
{
"approver": "B",
"entry": 1,
"fingerprint": "807a5fdd769adedb",
"note": "ok",
"seq": 24,
"source": {
"citation": null,
"decided_by": "B",
"decided_on": "2026-10-17",
"note": null
}
}
],
"conventions": [
{
"body_md": "Ask whether a member paid anything personally.",
"id": "close-ask",
"kind": "close_step",
"retired": {
"seq": 13,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": null
},
"text": "Folded into the checklist."
},
"revision": 1,
"seq": 12,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": null
},
"structured": null,
"title": "Ask about personal cards"
},
{
"body_md": "Cash in from both members, half each; one entry per member when they pay separately.",
"id": "joint-contribution",
"kind": "posting_template",
"retired": null,
"revision": 2,
"seq": 10,
"source": {
"citation": null,
"decided_by": "A",
"decided_on": "2026-10-17",
"note": null
},
"structured": {
"lines": [
{
"account": "1000",
"share": "1",
"side": "debit"
},
{
"account": "3000",
"share": "0.5",
"side": "credit"
},
{
"account": "3001",
"share": "0.5",
"side": "credit"
}
]
},
"title": "Joint contribution"
},
{
"body_md": "Software over 500 needs B.",
"id": "over-500",
"kind": "approval_rule",
"retired": null,
"revision": 1,
"seq": 11,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": null
},
"structured": {
"accounts": [
"6000"
],
"amount_over": "500",
"approver": "B"
},
"title": "Big spends"
}
],
"decisions": [
{
"citation": "Treas. Reg. 1.263(a)-1(f)",
"decided_by": [
"Tobin Harlow",
"B"
],
"decided_on": "2026-10-11",
"decision_md": "Expense tangible items up to 2,500.",
"evidence_attachment": 1,
"id": 1,
"seq": 15,
"subject": "Materiality",
"superseded_by": 2,
"supersedes": null
},
{
"citation": null,
"decided_by": [
"Tobin Harlow"
],
"decided_on": "2026-10-16",
"decision_md": "Corrected: prepaid services follow the 12-month rule.",
"evidence_attachment": null,
"id": 2,
"seq": 16,
"subject": "Materiality",
"superseded_by": null,
"supersedes": 1
}
],
"open_items": [
{
"detail_md": "Signed; mailing pending.",
"due": "2026-10-24",
"id": 1,
"resolved": null,
"seq": 17,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": null
},
"title": "Mail the letter"
},
{
"detail_md": null,
"due": null,
"id": 2,
"resolved": {
"seq": 19,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": null
},
"text": "Asked."
},
"seq": 18,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": null
},
"title": "Ask the CPA"
}
],
"settings": [
{
"key": "company.name",
"seq": 8,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": "Imported from wanderbooks.toml."
},
"value": "Fixture Labs LLC"
},
{
"key": "company.tax_classification",
"seq": 8,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": "Imported from wanderbooks.toml."
},
"value": "partnership"
},
{
"key": "company.ein",
"seq": 8,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": "Imported from wanderbooks.toml."
},
"value": "98-7814321"
},
{
"key": "company.members",
"seq": 8,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": "Imported from wanderbooks.toml."
},
"value": [
{
"capital_account": "3000",
"files_jointly_with": "B",
"name": "A",
"share": "0.5"
},
{
"capital_account": "3001",
"files_jointly_with": "A",
"name": "B",
"share": "0.5"
}
]
},
{
"key": "books.cash_accounts",
"seq": 8,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": "Imported from wanderbooks.toml."
},
"value": [
"1000"
]
},
{
"key": "books.financing_accounts",
"seq": 8,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": "Imported from wanderbooks.toml."
},
"value": [
"2100"
]
},
{
"key": "policy.evidence.threshold",
"seq": 8,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": "Imported from wanderbooks.toml."
},
"value": "0.00"
},
{
"key": "policy.parties",
"seq": 8,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": "Imported from wanderbooks.toml."
},
"value": "require"
},
{
"key": "policy.approval_rules",
"seq": 25,
"source": {
"citation": null,
"decided_by": "Tobin Harlow",
"decided_on": "2026-10-17",
"note": null
},
"value": "enforce"
}
],
"settings_last_seq": 25
}
+23 -23
View File
@@ -118,21 +118,21 @@ fn assert_corrupt<T>(got: Result<T, StoreError>) {
/// Oracle (plan/served.md 5.1): an older reader meets books a newer
/// wanderbooks wrote. A valid line of an unknown type, and a declared
/// format 2, are each NewerJournal, from the writer and the viewer alike,
/// format 3, are each NewerJournal, from the writer and the viewer alike,
/// and the refusal reads nothing further: the database isn't rebuilt and
/// the journal is untouched.
#[test]
fn old_reader_gets_newer_journal() {
let cases = [
(
"settings.set",
"period.attested",
json!({"key": "company.name", "value": "X"}),
"an event type this version doesn't know",
),
(
FORMAT_SET,
json!({"format": 2, "features": []}),
"journal format 2",
json!({"format": 3, "features": []}),
"journal format 3",
),
(
FORMAT_SET,
@@ -218,12 +218,12 @@ fn the_writer_and_the_viewer_agree_on_newer_books() {
&[
// Chained and of a known type, but replay refuses it.
("entry.posted", json!({"id": 99})),
("settings.set", json!({"key": "company.name"})),
("period.attested", json!({"key": "company.name"})),
],
)[1];
let need = "an event type this version doesn't know";
assert_newer(Store::open(&dir), seq, "settings.set", need, false);
assert_newer(Snapshot::load(&dir), seq, "settings.set", need, false);
assert_newer(Store::open(&dir), seq, "period.attested", need, false);
assert_newer(Snapshot::load(&dir), seq, "period.attested", need, false);
}
/// Damage stays corruption, whatever the damaged line's type: the gate
@@ -256,8 +256,8 @@ fn damaged_journals_are_still_corrupt() {
}),
];
let newer = [
(FORMAT_SET, json!({"format": 2, "features": []})),
("settings.set", json!({"key": "company.name"})),
(FORMAT_SET, json!({"format": 3, "features": []})),
("period.attested", json!({"key": "company.name"})),
];
for (name, damage) in damages {
for (i, last) in newer.iter().enumerate() {
@@ -541,32 +541,32 @@ fn a_newer_format_frames_its_lines_its_own_way() {
let nexts: [(&str, Next, Option<bool>); 6] = [
(
"float",
|seq, prev| json!({"seq": seq, "ts": "t", "type": "settings.set", "payload": {"rate": 0.5}, "prev": prev}),
|seq, prev| json!({"seq": seq, "ts": "t", "type": "period.attested", "payload": {"rate": 0.5}, "prev": prev}),
Some(true),
),
(
"string-seq",
|seq, prev| json!({"seq": seq.to_string(), "ts": "t", "type": "settings.set", "payload": {}, "prev": prev}),
|seq, prev| json!({"seq": seq.to_string(), "ts": "t", "type": "period.attested", "payload": {}, "prev": prev}),
Some(true),
),
(
"envelope-key",
|seq, prev| json!({"seq": seq, "ts": "t", "type": "settings.set", "payload": {}, "prev": prev, "actor": "agent"}),
|seq, prev| json!({"seq": seq, "ts": "t", "type": "period.attested", "payload": {}, "prev": prev, "actor": "agent"}),
Some(true),
),
(
"no-prev",
|seq, prev| json!({"seq": seq, "ts": "t", "type": "settings.set", "payload": {}, "parent": prev}),
|seq, prev| json!({"seq": seq, "ts": "t", "type": "period.attested", "payload": {}, "parent": prev}),
Some(false),
),
(
"prev-not-text",
|seq, _| json!({"seq": seq, "ts": "t", "type": "settings.set", "payload": {}, "prev": 1.5}),
|seq, _| json!({"seq": seq, "ts": "t", "type": "period.attested", "payload": {}, "prev": 1.5}),
Some(false),
),
(
"wrong-prev",
|seq, _| json!({"seq": seq, "ts": "t", "type": "settings.set", "payload": {"rate": 0.5}, "prev": "00"}),
|seq, _| json!({"seq": seq, "ts": "t", "type": "period.attested", "payload": {"rate": 0.5}, "prev": "00"}),
None,
),
];
@@ -575,7 +575,7 @@ fn a_newer_format_frames_its_lines_its_own_way() {
books(&dir);
let seq = append(
&dir,
&[(FORMAT_SET, json!({"format": 2, "features": ["actors"]}))],
&[(FORMAT_SET, json!({"format": 3, "features": ["actors"]}))],
)[0];
let (_, hash) = last_line(&dir);
append_raw(
@@ -584,8 +584,8 @@ fn a_newer_format_frames_its_lines_its_own_way() {
);
match verified {
Some(v) => {
assert_newer(Store::open(&dir), seq, FORMAT_SET, "journal format 2", v);
assert_newer(Snapshot::load(&dir), seq, FORMAT_SET, "journal format 2", v);
assert_newer(Store::open(&dir), seq, FORMAT_SET, "journal format 3", v);
assert_newer(Snapshot::load(&dir), seq, FORMAT_SET, "journal format 3", v);
}
None => {
assert_corrupt(Store::open(&dir));
@@ -661,11 +661,11 @@ fn a_line_that_is_not_utf8_is_corrupt_for_the_viewer_and_the_writer() {
} else {
// After a refused line, it is a next line without a readable
// prev: unverified, for both.
let seq = append(&dir, &[("settings.set", json!({}))])[0];
let seq = append(&dir, &[("period.attested", json!({}))])[0];
append_raw(&dir, b"{\"prev\":\"\xff\"}\n");
let need = "an event type this version doesn't know";
assert_newer(Store::open(&dir), seq, "settings.set", need, false);
assert_newer(Snapshot::load(&dir), seq, "settings.set", need, false);
assert_newer(Store::open(&dir), seq, "period.attested", need, false);
assert_newer(Snapshot::load(&dir), seq, "period.attested", need, false);
}
}
}
@@ -678,12 +678,12 @@ fn a_line_that_is_not_utf8_is_corrupt_for_the_viewer_and_the_writer() {
fn an_old_reader_never_repairs_newer_books() {
let dir = test_dir("newer-torn");
books(&dir);
let seq = append(&dir, &[("settings.set", json!({"key": "company.name"}))])[0];
let seq = append(&dir, &[("period.attested", json!({"key": "company.name"}))])[0];
append_raw(&dir, b"{\"seq\":");
let path = dir.join(JOURNAL_FILE);
let before = std::fs::read(&path).unwrap();
let need = "an event type this version doesn't know";
assert_newer(Store::open(&dir), seq, "settings.set", need, false);
assert_newer(Store::open(&dir), seq, "period.attested", need, false);
assert_eq!(std::fs::read(&path).unwrap(), before);
let set_aside: Vec<_> = std::fs::read_dir(&dir)
.unwrap()
File diff suppressed because it is too large. Load diff