swaits
5e474cd1ac
The local socket and the tunnel already mount the same four routes; naming that table `router` gives the fuzz targets the very door a client reaches, not a copy of it. `local/fuzz_door` (behind the `fuzzing` feature, off in every shipped build) builds a book, two live tokens and that router, and answers one request through `tower::oneshot`: no socket, no port, no clock. The target's oracle is then the code that enforces it: INVARIANT 8 (a book only behind a live bearer token) is checked by asking `Books::bearer`, not by a second model of the rule that could drift from it.
63 lines
2.1 KiB
TOML
63 lines
2.1 KiB
TOML
[package]
|
|
name = "ledger-mcp"
|
|
version = "0.1.0"
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
description = "The books server's MCP tools for wanderbooks: the AI-first bookkeeping interface over ledger-store."
|
|
|
|
[lib]
|
|
path = "src/lib.rs"
|
|
|
|
[dependencies]
|
|
ledger-core = { path = "../ledger-core" }
|
|
ledger-store = { path = "../ledger-store" }
|
|
ledger-import = { path = "../ledger-import" }
|
|
ledger-config = { path = "../ledger-config" }
|
|
ledger-vault = { path = "../ledger-vault" }
|
|
# The CPA package, the 1099 worksheet, and the reports they share with
|
|
# the viewer.
|
|
ledger-package = { path = "../ledger-package" }
|
|
base64 = "0.22"
|
|
# A download's Repr-Digest (local.rs).
|
|
sha2 = "0.10"
|
|
rust_decimal = "1"
|
|
rmcp = { version = "3", features = ["server", "schemars", "transport-streamable-http-server"] }
|
|
axum = "0.8"
|
|
http-body-util = "0.1"
|
|
tower = "0.5"
|
|
schemars = "1"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
chrono = "0.4"
|
|
thiserror = "2"
|
|
tokio = { version = "1", features = ["rt-multi-thread", "macros", "io-util", "sync", "net", "signal", "time"] }
|
|
tokio-util = { version = "0.7", features = ["rt", "io", "io-util"] }
|
|
# A call that panics is recorded before the panic goes on (access.rs).
|
|
futures-util = "0.3"
|
|
toml = "1"
|
|
# The vault's TINs, decoded for the filing scan (tin_files.rs), are wiped
|
|
# from memory when dropped, as the vault's own are.
|
|
zeroize = "1"
|
|
tempfile = { version = "3", optional = true }
|
|
|
|
# The socket's peer credentials (SO_PEERCRED, getpeereid) for local.rs's
|
|
# same-user check: std has no call for them.
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = "0.2"
|
|
|
|
[features]
|
|
# The door in-process, for fuzz/ (local.rs fuzz_door). Off in every build
|
|
# but the fuzz workspace's.
|
|
fuzzing = ["dep:tempfile"]
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dev-dependencies]
|
|
# The unit tests drive the tools as a client would (the integration tests,
|
|
# through a real books server, are ledger-cli's: plan D-44).
|
|
tokio = { version = "1", features = ["time", "macros", "rt-multi-thread"] }
|
|
rmcp = { version = "3", features = ["client", "transport-streamable-http-client-reqwest"] }
|
|
tempfile = "3"
|