swaitsandClaude Opus 5.5
d1f3ad891a
Agent tokens (wb_ and 64 hex digits), one book and one name each, kept only as SHA-256 in a chain log and in the OS keyring; made, listed and revoked only through the admin socket (`wanderbooks token ...`). The door checks them, scopes cover every tool, every call is in the access log (fail closed), and the owner passphrase is an Argon2id hash. Setup's terminal test waits for its prompts. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj
60 lines
1.9 KiB
TOML
60 lines
1.9 KiB
TOML
[package]
|
|
name = "ledger-mcp"
|
|
version = "0.1.0"
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
description = "MCP server for wanderbooks: the AI-first bookkeeping interface over ledger-store."
|
|
|
|
[lib]
|
|
path = "src/lib.rs"
|
|
|
|
[[bin]]
|
|
name = "ledger-mcp"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
ledger-core = { path = "../ledger-core" }
|
|
ledger-store = { path = "../ledger-store" }
|
|
ledger-import = { path = "../ledger-import" }
|
|
ledger-config = { path = "../ledger-config" }
|
|
ledger-vault = { path = "../ledger-vault" }
|
|
base64 = "0.22"
|
|
mime_guess = "2"
|
|
rust_decimal = "1"
|
|
rmcp = { version = "3", features = ["server", "transport-io", "schemars", "transport-streamable-http-server"] }
|
|
axum = "0.8"
|
|
http-body-util = "0.1"
|
|
tower = "0.5"
|
|
schemars = "1"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
chrono = "0.4"
|
|
thiserror = "2"
|
|
tokio = { version = "1", features = ["rt-multi-thread", "macros", "io-util", "io-std", "sync", "net", "signal", "time"] }
|
|
tokio-util = { version = "0.7", features = ["rt"] }
|
|
# A call that panics is recorded before the panic goes on (access.rs).
|
|
futures-util = "0.3"
|
|
zip = "9.0.1"
|
|
toml = "1"
|
|
# The vault's TINs, decoded for the filing scan (tin_files.rs), are wiped
|
|
# from memory when dropped, as the vault's own are.
|
|
zeroize = "1"
|
|
|
|
# O_NOFOLLOW and O_NONBLOCK for books.import_local_file's open (local_files.rs
|
|
# INVARIANT 6): std has no names for these open flags.
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = "0.2"
|
|
|
|
[lints]
|
|
workspace = true
|
|
|
|
[dev-dependencies]
|
|
tokio = { version = "1", features = ["time", "macros", "rt-multi-thread"] }
|
|
rmcp = { version = "3", features = ["client", "transport-streamable-http-client-reqwest"] }
|
|
jsonschema = { version = "0.58", default-features = false }
|
|
proptest = "1"
|
|
tempfile = "3"
|
|
# read_only_tools_change_nothing compares the database by its rows (spec_mcp.rs).
|
|
rusqlite = { version = "0.32", features = ["bundled"] }
|