D-63: the 0700 data root is the trust boundary already (I-1: hidden, not locked), so the OS keyring added no wall and cost headless servers a D-Bus session, CI a knob and every OS its own store. The file keeper is the only store: run/tokens/, 0600, written atomically. The three keyring stores, the file_keyring knob and their tests are removed; an unreadable token file is an error, never no token. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HS8WZziDnyxunC23MUxrLp
34 lines
1.0 KiB
TOML
34 lines
1.0 KiB
TOML
[package]
|
|
name = "ledger-host"
|
|
version = "0.1.0"
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
description = "wanderbooks: the books open while something holds them (the host, its leases, the helper and the agents' bridge)."
|
|
|
|
[dependencies]
|
|
ledger-core = { path = "../ledger-core" }
|
|
ledger-mcp = { path = "../ledger-mcp" }
|
|
ledger-store = { path = "../ledger-store" }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
tokio = { version = "1", features = ["rt-multi-thread", "macros", "io-util", "io-std", "sync", "net", "signal", "time", "process"] }
|
|
reqwest = "0.13"
|
|
base64 = "0.22"
|
|
# `wanderbooks download` checks what arrived against its Repr-Digest.
|
|
sha2 = "0.10"
|
|
tokio-util = { version = "0.7", features = ["rt"] }
|
|
# The owner passphrase is typed at the terminal, unechoed.
|
|
rpassword = "7"
|
|
# Token texts and passphrases are wiped from memory when dropped.
|
|
zeroize = "1"
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = "0.2"
|
|
|
|
[dev-dependencies]
|
|
tempfile = "3"
|
|
|
|
[lints]
|
|
workspace = true
|