@actcore/act 0.10.1 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +14 -1
- package/package.json +8 -8
package/README.md
CHANGED
|
@@ -33,7 +33,7 @@ act info --tools ghcr.io/actpkg/sqlite:0.1.0
|
|
|
33
33
|
act call ghcr.io/actpkg/sqlite:0.1.0 query \
|
|
34
34
|
--args '{"sql":"SELECT sqlite_version()"}' \
|
|
35
35
|
-m database_path=/data/app.db \
|
|
36
|
-
--allow
|
|
36
|
+
--grant '{"wasi:filesystem":{"mode":"allowlist","allow":[{"path":"/data/**","mode":"rw"}]}}'
|
|
37
37
|
|
|
38
38
|
# Serve over HTTP
|
|
39
39
|
act run -l ghcr.io/actpkg/sqlite:0.1.0
|
|
@@ -58,6 +58,19 @@ Remote components are cached in `~/.cache/act/components/`.
|
|
|
58
58
|
| `info` | Show component metadata, tools, and schemas (`--tools`, `--format text\|json\|toon`) |
|
|
59
59
|
| `pull` | Download a component from OCI or HTTP to local file |
|
|
60
60
|
|
|
61
|
+
### Audit trail
|
|
62
|
+
|
|
63
|
+
`run` and `call` write a structured audit trail to stderr: what component is running and under what capability modes, every capability decision as it resolves, and a per-call summary. It is on by default and independent of `RUST_LOG` — only `--no-audit` (or `[audit] enabled = false` in the config file) turns it off.
|
|
64
|
+
|
|
65
|
+
```
|
|
66
|
+
audit: act-cli/tests/fixtures/fs-canary.wasm sha256:92342c │ wasi:filesystem=ask wasi:http=deny wasi:sockets=deny
|
|
67
|
+
audit: ⚠ declared ask, no prompt channel — every access will be denied: wasi:filesystem
|
|
68
|
+
audit: ? ask-deny wasi:filesystem /tmp/probe.txt denied by user
|
|
69
|
+
audit: ● read tool-error 1ms args:43ebc7 req:00392e
|
|
70
|
+
```
|
|
71
|
+
|
|
72
|
+
That's a real, captured transcript of one headless call with no `--grant`: the first line is the instantiation header (component, digest, resolved mode per capability class); the second warns that a declared `ask` capability has no prompt channel to answer it, so every access degrades to deny; the third is the immediate denial (denials and asks print the moment they resolve, never batched); the fourth is the per-call rollup — outcome, duration, an `args:` digest of the tool arguments (or the full values with `--audit-args`), and a `req:` id for joining this line back to a client log. Allowed operations coalesce into that rollup line instead of one line each, e.g. `filesystem: 12 read under /data/**`.
|
|
73
|
+
|
|
61
74
|
### HTTP Endpoints (`run -l`)
|
|
62
75
|
|
|
63
76
|
| Method | Path | Description |
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@actcore/act",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.11.0",
|
|
4
4
|
"description": "CLI host for ACT (Agent Component Tools) WebAssembly components",
|
|
5
5
|
"license": "MIT OR Apache-2.0",
|
|
6
6
|
"repository": {
|
|
@@ -14,13 +14,13 @@
|
|
|
14
14
|
},
|
|
15
15
|
"files": ["bin"],
|
|
16
16
|
"optionalDependencies": {
|
|
17
|
-
"@actcore/act-cli-linux-x64": "0.
|
|
18
|
-
"@actcore/act-cli-linux-arm64": "0.
|
|
19
|
-
"@actcore/act-cli-linux-riscv64": "0.
|
|
20
|
-
"@actcore/act-cli-darwin-x64": "0.
|
|
21
|
-
"@actcore/act-cli-darwin-arm64": "0.
|
|
22
|
-
"@actcore/act-cli-win32-x64": "0.
|
|
23
|
-
"@actcore/act-cli-win32-arm64": "0.
|
|
17
|
+
"@actcore/act-cli-linux-x64": "0.11.0",
|
|
18
|
+
"@actcore/act-cli-linux-arm64": "0.11.0",
|
|
19
|
+
"@actcore/act-cli-linux-riscv64": "0.11.0",
|
|
20
|
+
"@actcore/act-cli-darwin-x64": "0.11.0",
|
|
21
|
+
"@actcore/act-cli-darwin-arm64": "0.11.0",
|
|
22
|
+
"@actcore/act-cli-win32-x64": "0.11.0",
|
|
23
|
+
"@actcore/act-cli-win32-arm64": "0.11.0"
|
|
24
24
|
},
|
|
25
25
|
"publishConfig": {
|
|
26
26
|
"access": "public",
|