swaitsandClaude Fable 5.1
ee4f8cd58a
The agent path was Linux-only because tokens had a keyring store only there (every other OS hit NOT_YET, so `connect` and the bridge failed). D-56's destination is one installation for macOS, Windows and Linux. Both new stores sit behind the same Items trait as the Secret Service, so INVARIANT 4 (one account, one item, locked is an error) is kept once and tested once through the file keyring. Windows credentials have a unique target name, so a probe stands in for a search. New dependencies (ledger-host only, target-gated): apple-native-keyring-store (feature keychain) and windows-native-keyring-store, the stores the keyring-core 1 API we already use is published with. No ledger-core change. The `portable` job builds and tests the workspace on macos-latest and windows-latest. Windows is allowed to fail: the rest of the host is Unix-only (inventory in docs/packaging.md). Not verified locally: no macOS or Windows target is installed; CI is the evidence. Also pins cargo-packager, cargo-packager-updater and cargo-generate-rpm in mise.toml for the trial, and records that the trial is not yet run. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HS8WZziDnyxunC23MUxrLp
47 lines
1.5 KiB
TOML
47 lines
1.5 KiB
TOML
[package]
|
|
name = "ledger-host"
|
|
version = "0.1.0"
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
description = "wanderbooks: the books open while something holds them (the host, its leases, the helper and the agents' bridge)."
|
|
|
|
[dependencies]
|
|
ledger-core = { path = "../ledger-core" }
|
|
ledger-mcp = { path = "../ledger-mcp" }
|
|
ledger-store = { path = "../ledger-store" }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
tokio = { version = "1", features = ["rt-multi-thread", "macros", "io-util", "io-std", "sync", "net", "signal", "time", "process"] }
|
|
reqwest = "0.13"
|
|
base64 = "0.22"
|
|
# `wanderbooks download` checks what arrived against its Repr-Digest.
|
|
sha2 = "0.10"
|
|
tokio-util = { version = "0.7", features = ["rt"] }
|
|
# Agents' tokens are kept in the OS keyring (plan 3.3, 3.5): the Secret
|
|
# Service on Linux, the login Keychain on macOS, the Credential Manager on
|
|
# Windows (P11a step 0).
|
|
keyring-core = "1"
|
|
# The owner passphrase is typed at the terminal, unechoed.
|
|
rpassword = "7"
|
|
# Token texts and passphrases are wiped from memory when dropped.
|
|
zeroize = "1"
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = "0.2"
|
|
|
|
[target.'cfg(target_os = "linux")'.dependencies]
|
|
zbus-secret-service-keyring-store = { version = "1", features = ["rt-async-io-crypto-rust"] }
|
|
|
|
[target.'cfg(target_os = "macos")'.dependencies]
|
|
apple-native-keyring-store = { version = "1.0.2", features = ["keychain"] }
|
|
|
|
[target.'cfg(windows)'.dependencies]
|
|
windows-native-keyring-store = "1.1.0"
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
|
|
[lints]
|
|
workspace = true
|