@actcore/act 0.14.0 → 0.14.2

package/README.md

@@ -4,7 +4,7 @@ Host and build [ACT](https://actcore.dev) (Agent Component Tools) WebAssembly co
 
 This repo contains two tools:
 
-- **`act`** — run, call, inspect, and serve ACT components from local files, HTTP URLs, or OCI registries
+- **`act`** — run, call, inspect, and serve ACT components from local files, HTTP URLs, or OCI registries. Components built for `wasm32-wasip2` (with async) and `wasm32-wasip3` run the same way, under the same capability grants
 - **`act-build`** — post-process compiled WASM components: embed metadata, skills, and custom sections
 
 ## Install
@@ -27,23 +27,24 @@ Pre-built binaries available on [GitHub Releases](https://github.com/actcore/act
 
 ```bash
 # Discover tools in a component
-act info --tools ghcr.io/actpkg/sqlite:0.1.0
+act info --tools actpkg.dev/library/sqlite
 
-# Call a tool
-act call ghcr.io/actpkg/sqlite:0.1.0 query \
+# Call a tool. sqlite is session-based: --session-args opens a session for
+# this one call. --allow lets it touch /data and nothing else.
+act call actpkg.dev/library/sqlite query \
   --args '{"sql":"SELECT sqlite_version()"}' \
-  -m database_path=/data/app.db \
-  --grant '{"wasi:filesystem":{"mode":"allowlist","allow":[{"path":"/data/**","mode":"rw"}]}}'
-
-# Serve over HTTP
-act run -l ghcr.io/actpkg/sqlite:0.1.0
+  --session-args '{"database_path":"/data/app.db"}' \
+  --allow 'fs=/data/**'
 
 # Serve over MCP stdio
-act run --mcp ghcr.io/actpkg/sqlite:0.1.0
+act run --mcp actpkg.dev/library/sqlite --allow 'fs=/data/**'
+
+# Serve over MCP Streamable HTTP, at http://[::1]:3000/mcp
+act run --mcp --http -l '[::1]:3000' actpkg.dev/library/sqlite --allow 'fs=/data/**'
 ```
 
 Components can be referenced as:
-- **OCI refs:** `ghcr.io/actpkg/sqlite:0.1.0`
+- **OCI refs:** `actpkg.dev/library/sqlite` (a tag or `@sha256:` digest is optional)
 - **HTTP URLs:** `https://example.com/component.wasm`
 - **Local paths:** `./component.wasm`
 
@@ -53,32 +54,55 @@ Remote components are cached in `~/.cache/act/components/`.
 
 | Command | Description |
 |---------|-------------|
-| `run`   | Serve a component over MCP — stdio (`--mcp`) or Streamable HTTP (`--mcp --http -l`) |
-| `call`  | Call a tool directly, print result to stdout |
-| `info`  | Show component metadata, tools, and schemas (`--tools`, `--format text\|json\|toon`) |
-| `pull`  | Download a component from OCI or HTTP to local file |
+| `run`     | Serve a component over MCP — stdio (`--mcp`) or Streamable HTTP (`--mcp --http -l`) |
+| `call`    | Call a tool directly, print result to stdout |
+| `info`    | Show component metadata, tools, and schemas (`--tools`, `--format text\|json\|toon`) |
+| `skill`   | Extract the Agent Skills a component embeds |
+| `pull`    | Download a component from OCI or HTTP to a local file |
+| `session` | Show a session-based component's `open-args-schema` |
+| `store`   | Manage the local component store (`list`, `update`, `gc`) |
+| `inspect` | Read a component's raw manifest or tool list without instantiating it |
+| `secret`  | Store credentials a component declares (there is no `get`) |
+| `login`   | Provision a declared credential by prompting |
+
+### Granting capabilities
+
+The default mode is `ask`: an interactive run prompts, a headless one denies.
+Grants come from flags, or per profile in `~/.config/act/config.toml`.
+
+| Flag | Effect |
+|---|---|
+| `--allow fs` | the whole declared ceiling of `wasi:filesystem` |
+| `--allow 'fs=/data/**'` | only `/data/**`, read-write (`fs=/data/**:ro` for read-only) |
+| `--allow 'http=https://api.example.com'` | one host (and scheme) |
+| `--allow 'sockets=db.local:5432/tcp'` | one host, port and protocol |
+| `--allow 'db:drop=test_*'` | a component-defined class, narrowed by key |
+| `--deny 'fs=/data/secret/**'` | carve a rule out of whatever else was granted |
+| `--grant '<json>'` | the full form, for anything the shorthand doesn't cover |
+
+Aliases: `fs` = `wasi:filesystem`, `http` = `wasi:http`, `sockets` = `wasi:sockets`,
+`creds` = `act:credentials`; output always shows the full id. IPv6 goes in
+brackets (`http=[::1]:8080`). A rule never exceeds what the component declared.
+`act run --help` lists every class and its shorthand.
 
 ### Audit trail
 
 `run` and `call` write a structured audit trail to stderr: what component is running and under what capability modes, every capability decision as it resolves, and a per-call summary. It is on by default and independent of `RUST_LOG` — only `--no-audit` (or `[audit] enabled = false` in the config file) turns it off.
 
 ```
-audit: act-cli/tests/fixtures/fs-canary.wasm sha256:92342c │ wasi:filesystem=ask wasi:http=deny wasi:sockets=deny
+audit: act-cli/tests/fixtures/fs-canary.wasm sha256:f17cda │ act:credentials=deny wasi:filesystem=ask wasi:http=deny wasi:sockets=deny
 audit: ⚠ declared ask, no prompt channel — every access will be denied: wasi:filesystem
-audit: ? ask-deny  wasi:filesystem  /tmp/probe.txt   denied by user
-audit: ● read  tool-error 1ms  args:43ebc7  req:00392e
+audit: ? ask-deny  wasi:filesystem  /tmp/probe.txt   no prompt channel  mode:ask
+audit: ● read  tool-error 1ms  args:43ebc7  req:0005a4
 ```
 
 That's a real, captured transcript of one headless call with no `--grant`: the first line is the instantiation header (component, digest, resolved mode per capability class); the second warns that a declared `ask` capability has no prompt channel to answer it, so every access degrades to deny; the third is the immediate denial (denials and asks print the moment they resolve, never batched); the fourth is the per-call rollup — outcome, duration, an `args:` digest of the tool arguments (or the full values with `--audit-args`), and a `req:` id for joining this line back to a client log. Allowed operations coalesce into that rollup line instead of one line each, e.g. `filesystem: 12 read under /data/**`.
 
-### HTTP Endpoints (`run -l`)
+### MCP over HTTP (`run --mcp --http`)
 
-| Method | Path | Description |
-|--------|------|-------------|
-| `GET` | `/info` | Component metadata |
-| `POST` | `/metadata-schema` | JSON Schema for metadata |
-| `POST/QUERY` | `/tools` | List tools |
-| `POST/QUERY` | `/tools/{name}` | Call a tool (SSE with `Accept: text/event-stream`) |
+`act run --mcp --http -l <addr>` serves the same MCP server as stdio over
+Streamable HTTP, at one endpoint: `/mcp`. `--http` requires `--mcp`. The
+earlier REST binding (`/info`, `/tools`, …) was removed in 0.12.0.
 
 ## act-build — Component Build Tool
 
@@ -90,7 +114,7 @@ act-build pack target/wasm32-wasip2/release/my_component.wasm
 act-build validate target/wasm32-wasip2/release/my_component.wasm
 
 # Publish as a CNCF Wasm OCI Artifact
-act-build push my_component.wasm ghcr.io/actpkg/my-component:0.1.0 \
+act-build push my_component.wasm ghcr.io/you/my-component:0.1.0 \
   --also-tag latest \
   --source https://github.com/actpkg/my-component \
   --skip-if-identical
@@ -99,7 +123,7 @@ act-build push my_component.wasm ghcr.io/actpkg/my-component:0.1.0 \
 Metadata is resolved via merge-patch from project manifests:
 
 1. **Base** from `Cargo.toml`, `pyproject.toml`, or `package.json` (name, version, description)
-2. **Inline patch** from the same manifest (`[package.metadata.act-component]`, `[tool.act-component]`, or `actComponent`)
+2. **Inline patch** from the same manifest (`[package.metadata.act]`, `[tool.act]`, or `"act"` in `package.json`)
 3. **`act.toml`** — highest priority, applied last
 
 `act-build push` produces artifacts conformant with the [CNCF

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@actcore/act",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "description": "CLI host for ACT (Agent Component Tools) WebAssembly components",
   "license": "MIT OR Apache-2.0",
   "repository": {
@@ -14,13 +14,13 @@
   },
   "files": ["bin"],
   "optionalDependencies": {
-    "@actcore/act-cli-linux-x64": "0.14.0",
-    "@actcore/act-cli-linux-arm64": "0.14.0",
-    "@actcore/act-cli-linux-riscv64": "0.14.0",
-    "@actcore/act-cli-darwin-x64": "0.14.0",
-    "@actcore/act-cli-darwin-arm64": "0.14.0",
-    "@actcore/act-cli-win32-x64": "0.14.0",
-    "@actcore/act-cli-win32-arm64": "0.14.0"
+    "@actcore/act-cli-linux-x64": "0.14.2",
+    "@actcore/act-cli-linux-arm64": "0.14.2",
+    "@actcore/act-cli-linux-riscv64": "0.14.2",
+    "@actcore/act-cli-darwin-x64": "0.14.2",
+    "@actcore/act-cli-darwin-arm64": "0.14.2",
+    "@actcore/act-cli-win32-x64": "0.14.2",
+    "@actcore/act-cli-win32-arm64": "0.14.2"
   },
   "publishConfig": {
     "access": "public",