@atrib/action-gate 0.0.1 → 0.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -29
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -6,43 +6,15 @@ agent actions before the action body runs.
|
|
|
6
6
|
Use it when a host already knows where an action boundary is: browser
|
|
7
7
|
automation, computer use, support tooling, payment workflows, admin changes, or
|
|
8
8
|
production writes. The host owns policy, identity, approval UI, and execution.
|
|
9
|
-
|
|
9
|
+
atrib records what the host decided and what happened next.
|
|
10
10
|
|
|
11
11
|
The core use case is an action that must outlive the session that proposed it.
|
|
12
12
|
One browser or computer-use run can sign the proposed action, policy decision,
|
|
13
13
|
and outcome. A later session, a different agent, or a reviewer team can accept
|
|
14
14
|
those hashes as verifiable context before continuing work.
|
|
15
15
|
|
|
16
|
-
## Release state
|
|
17
|
-
|
|
18
|
-
`@atrib/action-gate` is a publish target, but the package has not been created
|
|
19
|
-
on npm yet. Use the workspace dependency or a packed tarball until the manual
|
|
20
|
-
first publish creates version `0.0.1`. Later releases use npm Trusted Publisher
|
|
21
|
-
through `.github/workflows/release.yml`.
|
|
22
|
-
|
|
23
16
|
## Install
|
|
24
17
|
|
|
25
|
-
Inside the monorepo, depend on the workspace package:
|
|
26
|
-
|
|
27
|
-
```json
|
|
28
|
-
"@atrib/action-gate": "workspace:*"
|
|
29
|
-
```
|
|
30
|
-
|
|
31
|
-
Before the first npm publish, test the packed tarball from a clean temp project:
|
|
32
|
-
|
|
33
|
-
```bash
|
|
34
|
-
npx -y pnpm@9.15.4 --filter @atrib/action-gate build
|
|
35
|
-
cd packages/action-gate
|
|
36
|
-
tarball=$(npx -y pnpm@9.15.4 --silent pack --pack-destination /tmp | tail -n 1)
|
|
37
|
-
tmpdir=$(mktemp -d)
|
|
38
|
-
cd "$tmpdir"
|
|
39
|
-
npm init -y
|
|
40
|
-
npm install "$tarball"
|
|
41
|
-
node --input-type=module -e "import('@atrib/action-gate').then((m) => console.log(Object.keys(m).sort()))"
|
|
42
|
-
```
|
|
43
|
-
|
|
44
|
-
After the first npm release:
|
|
45
|
-
|
|
46
18
|
```bash
|
|
47
19
|
pnpm add @atrib/action-gate
|
|
48
20
|
```
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@atrib/action-gate",
|
|
3
|
-
"version": "0.0.
|
|
3
|
+
"version": "0.0.2",
|
|
4
4
|
"type": "module",
|
|
5
5
|
"main": "./dist/index.js",
|
|
6
6
|
"types": "./dist/index.d.ts",
|
|
@@ -13,7 +13,7 @@
|
|
|
13
13
|
"files": [
|
|
14
14
|
"dist"
|
|
15
15
|
],
|
|
16
|
-
"description": "Host-owned action gate helpers for
|
|
16
|
+
"description": "Host-owned action gate helpers for atrib's verifiable action layer. Signs policy decisions and outcomes before high-impact agent actions run.",
|
|
17
17
|
"author": "atrib <hello@atrib.dev>",
|
|
18
18
|
"license": "Apache-2.0",
|
|
19
19
|
"homepage": "https://atrib.dev",
|