Agent tokens (wb_ and 64 hex digits), one book and one name each, kept only as SHA-256 in a chain log and in the OS keyring; made, listed and revoked only through the admin socket (`wanderbooks token ...`). The door checks them, scopes cover every tool, every call is in the access log (fail closed), and the owner passphrase is an Argon2id hash. Setup's terminal test waits for its prompts. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj
22 lines
754 B
TOML
22 lines
754 B
TOML
[workspace]
|
|
resolver = "2"
|
|
members = ["crates/ledger-core", "crates/ledger-store", "crates/ledger-config", "crates/ledger-mcp", "crates/ledger-import", "crates/ledger-cli", "crates/ledger-gui", "crates/ledger-vault", "crates/ledger-host"]
|
|
|
|
[workspace.package]
|
|
edition = "2024"
|
|
license = "MIT OR Apache-2.0"
|
|
repository = "https://git.swaits.com/swaits/wanderbooks"
|
|
|
|
[workspace.lints.rust]
|
|
missing_docs = "warn"
|
|
# `cargo kani` sets cfg(kani) for the proof harnesses.
|
|
unexpected_cfgs = { level = "warn", check-cfg = ["cfg(kani)"] }
|
|
|
|
# Argon2id at the plan's 64 MiB, three passes, takes seconds unoptimized:
|
|
# its crates are built optimized in debug and test builds too.
|
|
[profile.dev.package.argon2]
|
|
opt-level = 3
|
|
|
|
[profile.dev.package.blake2]
|
|
opt-level = 3
|