swaitsandClaude Opus 5.5
ebb5fcb46f
check / check (push) Canceled after 0s
The owner (2026-10-23, via the question tool): "Uploads only"; and before it: "What we would DEFINITELY want to avoid is passing a bunch of BLOBs through AI context windows. That's just a pure waste." No file passes through an agent's context, in either direction. In: the inline arguments are gone with the 256 KiB limit (INLINE_MAX, take_file's inline branch): content_base64 and its sha256 on books.attach_receipt and books.file_document, w9_content_base64 and w9_sha256 on books.set_w9, csv_text on the two CSV imports. A file comes only by books.begin_upload and `wanderbooks upload`, named by its upload_id; existing_attachment_id still names bytes stored already. The five filing tools deny unknown fields, and any inline argument to any tool is refused before it runs as an unknown argument pointing to books.begin_upload (access log: refused inline_file). Out: books.export (every format), books.asset_labels and books.get_receipt view bytes hand the file over (HandedFile: download command and expiry, D-29), as the CPA package and the W-9 do. Resource reads stay text. A token keeps up to 64 handed files (was 16). The access log's digest no longer exempts file bytes. Docs: handbook files-in-out and parties-and-tins, mcp-interface.md, rules.md, receipt-store.md, parties-and-attachments.md, plan/served.md (D-46; the inline decisions marked superseded), STATUS.md, testing.md (D-46: tests migrated to uploads and downloads, rewritten, removed, added). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj
50 lines
1.4 KiB
Rust
50 lines
1.4 KiB
Rust
//! `ledger-mcp`: the AI-first bookkeeping interface. It is served one way
|
|
//! (plan D-44): by the books server, `wanderbooks server` ([`local`]),
|
|
//! every book of the data root on the root's local sockets, which agents
|
|
//! reach through the bridge `wanderbooks mcp --book ID`. Files come in only
|
|
//! as uploads and go out only as downloads: never through an agent's
|
|
//! context (D-46).
|
|
|
|
pub mod access;
|
|
pub mod admin;
|
|
pub mod backup;
|
|
mod handbook;
|
|
#[cfg(unix)]
|
|
pub mod local;
|
|
pub mod opening;
|
|
mod policy;
|
|
pub mod scopes;
|
|
mod server;
|
|
mod settings;
|
|
mod tin_files;
|
|
mod types;
|
|
|
|
pub use server::{NOT_RUN_CLOSING, NOT_RUN_CLOSING_CODE};
|
|
|
|
/// How a mode of the one executable stops when it can't go on: the
|
|
/// reason is already printed on stderr, and the number is the process's
|
|
/// exit code (2: a bad argument). A library never ends the process
|
|
/// itself, so the books it opened are closed properly on the way out;
|
|
/// the executable turns this into the exit.
|
|
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
|
|
pub struct Exit(pub i32);
|
|
|
|
impl std::fmt::Display for Exit {
|
|
fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
|
|
write!(f, "exit code {}", self.0)
|
|
}
|
|
}
|
|
|
|
impl std::error::Error for Exit {}
|
|
|
|
#[cfg(test)]
|
|
mod exit_tests {
|
|
use super::Exit;
|
|
|
|
#[test]
|
|
fn an_exit_says_its_code() {
|
|
assert_eq!(Exit(2).to_string(), "exit code 2");
|
|
assert_eq!(Exit(1).to_string(), "exit code 1");
|
|
}
|
|
}
|