swaitsandClaude Opus 5.5
3f20df9700
check / check (push) Canceled after 0s
ledger-config: parse gets a sourced spec. A fiscal year starts on the first of a month (IRS Pub. 538); tax_classification is read by whole words (Treas. Reg. 301.7701-3, Schedule C instructions; "business corp" no longer reads as an S corp, "corporation or S corporation" is refused); duplicate or blank members and shared capital accounts are refused; a negative or non-grammatical receipt threshold is refused; codes trimmed. tests/spec_config.rs (65 spec-blind tests, 14 properties), fuzz target fuzz_config_parse (weekly). Mutation: 55 of 55 viable caught (from 25/38). The receipt policy moves to ledger-config, with one loader (effective_receipt_policy) and one decimal grammar, so the server and the viewer enforce and show the same rule (the viewer had its own: only expense-like debits, a silent $25 default, and no config.json). ledger-mcp: a module spec (MCP 2025-06-18 tools, JSON-RPC 2.0, the operating contract). Amounts in are exactly -?digits[.digits]; a number that is one account's code and another's id (vendors, classes alike) is refused, not guessed; the threshold is validated at startup. Fixed: add_line with a bad class journaled the line before refusing; profit_and_loss_by_class ignored `class`; aging buckets said "0". A wire in front of rmcp answers malformed JSON with -32700 and invalid requests with -32600 and their id (rmcp dropped the first, omitted the id). tests/spec_mcp.rs (26 spec-blind tests: every tool's result against its own outputSchema, a random-call state machine checking the journal is untouched by every refusal, amount grammar, previews, the receipt policy). ledger-gui: money, accounting, and dollars never round (they rounded to cents, banker's style); export file names avoid Windows device names, trailing dots and spaces, empty names, and 255-byte overflow; specs on attention, history, fuzzy search, and axis ticks. ledger-core: the lifetime profit_and_loss is renamed unclosed_earnings (docs/testing.md #3). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GWVo7x3UHw5kwCUaWxiejX
34 lines
1.1 KiB
Rust
34 lines
1.1 KiB
Rust
// Fuzz target: `wanderbooks.toml` is written by people and agents, so its
|
|
// text is untrusted input. Parsing must return settings or an error, never
|
|
// panic or hang, and what it accepts must honor parse's invariants: the
|
|
// fiscal year starts on the first of a month, and members' shares (each in
|
|
// (0, 1]) sum to exactly 1.
|
|
#![no_main]
|
|
|
|
use libfuzzer_sys::fuzz_target;
|
|
use rust_decimal::Decimal;
|
|
|
|
fuzz_target!(|data: &[u8]| {
|
|
let Ok(text) = std::str::from_utf8(data) else {
|
|
return;
|
|
};
|
|
if let Ok(s) = ledger_config::parse(text) {
|
|
let (m, d) = s.company.fiscal_year_start;
|
|
assert!(
|
|
(1..=12).contains(&m) && d == 1,
|
|
"{:?}",
|
|
s.company.fiscal_year_start
|
|
);
|
|
if !s.company.members.is_empty() {
|
|
let total: Decimal = s.company.members.iter().map(|m| m.share).sum();
|
|
assert_eq!(total, Decimal::ONE, "{:?}", s.company.members);
|
|
for mem in &s.company.members {
|
|
assert!(
|
|
mem.share > Decimal::ZERO && mem.share <= Decimal::ONE,
|
|
"{mem:?}"
|
|
);
|
|
}
|
|
}
|
|
}
|
|
});
|