swaitsandClaude Opus 5.5
754d616a9d
mise.toml: pin cargo-mutants 27.1.0 and cargo-fuzz 0.13.2 (the latest published, and what is installed) instead of "latest", so mutation and fuzz runs repeat (plan/served.md I-13, P0). docs/mcp-interface.md: the spec had two Transports sections, and the first claimed bearer-token auth on Streamable HTTP. There is none: the server uses rmcp's default config, whose only guard is a Host check for localhost, 127.0.0.1 and ::1, with no token and no Origin check. One section now says so plainly and points to plan/served.md P2 for auth. ledger-cli AGENTS.md template: "the journal is the evidence - read it, don't guess" led an agent to cat the journal file instead of asking the books. The template now says to trace a figure through books.get_entry, books.search_entries, or books.export (journal or general_ledger), and a new bullet says the books are reached only through the wanderbooks MCP tools: never open, list or parse the books' files, not even to look; if a tool can't answer, say so. The other lines that sent the agent to the data dir go too: onboarding is triggered by an empty books.chart instead of a missing journal.jsonl, the CPA paragraph drops the ledger-gui --data-dir books-data command, and the backup note no longer names the journal's path. Test agents_md_reaches_the_books_only_through_tools pins this; agents_md_carries_the_contract no longer expects journal.jsonl. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj
23 lines
895 B
TOML
23 lines
895 B
TOML
# Everything needed to build, test, prove, and ship wanderbooks.
|
|
# `mise install` in this directory, then `just` lists the recipes.
|
|
|
|
[tools]
|
|
# Workspace toolchain (clippy and rustfmt for `just check`).
|
|
rust = [
|
|
{ version = "1.99", components = "clippy,rustfmt" },
|
|
# Fuzzing (cargo-fuzz) and Miri need nightly; pinned so runs repeat.
|
|
{ version = "nightly-2026-10-01", components = "miri,rust-src" },
|
|
]
|
|
just = "1"
|
|
# `just deploy` runs the Netlify CLI through npx.
|
|
node = "26"
|
|
# `just prove`: Kani model-checks the accounting kernel. Kani fetches its
|
|
# own pinned nightly and CBMC under ~/.kani on first run.
|
|
"cargo:kani-verifier" = "0.68.0"
|
|
# `just prove`: Lean proves the accounting laws (verify/lean). Matches
|
|
# verify/lean/lean-toolchain.
|
|
"github:leanprover/lean4" = "4.34.1"
|
|
# Mutation testing and fuzzing (docs/oracle.md).
|
|
"cargo:cargo-mutants" = "27.1.0"
|
|
"cargo:cargo-fuzz" = "0.13.2"
|