act-cli 0.7.2__tar.gz → 0.7.3__tar.gz

{act_cli-0.7.2 → act_cli-0.7.3}/Cargo.lock

@@ -4,18 +4,23 @@ version = 4
 
 [[package]]
 name = "act-build"
-version = "0.7.2"
+version = "0.7.3"
 dependencies = [
  "act-types",
  "anyhow",
+ "base64",
  "ciborium",
  "clap",
+ "dirs",
  "globset",
  "json-patch",
+ "oci-client",
  "serde",
  "serde_json",
+ "sha2 0.11.0",
  "tar",
  "tempfile",
+ "tokio",
  "toml 1.1.2+spec-1.1.0",
  "tracing",
  "tracing-subscriber",
@@ -25,7 +30,7 @@ dependencies = [
 
 [[package]]
 name = "act-cli"
-version = "0.7.2"
+version = "0.7.3"
 dependencies = [
  "act-types",
  "anyhow",

{act_cli-0.7.2 → act_cli-0.7.3}/Cargo.toml

@@ -3,7 +3,7 @@ members = ["act-cli"]
 resolver = "3"
 
 [workspace.package]
-version = "0.7.2"
+version = "0.7.3"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 repository = "https://github.com/actcore/act-cli"

{act_cli-0.7.2 → act_cli-0.7.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: act-cli
-Version: 0.7.2
+Version: 0.7.3
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
@@ -92,6 +92,12 @@ act-build pack target/wasm32-wasip2/release/my_component.wasm
 
 # Validate without modifying
 act-build validate target/wasm32-wasip2/release/my_component.wasm
+
+# Publish as a CNCF Wasm OCI Artifact
+act-build push my_component.wasm ghcr.io/actpkg/my-component:0.1.0 \
+  --also-tag latest \
+  --source https://github.com/actpkg/my-component \
+  --skip-if-identical
 ```
 
 Metadata is resolved via merge-patch from project manifests:
@@ -100,6 +106,17 @@ Metadata is resolved via merge-patch from project manifests:
 2. **Inline patch** from the same manifest (`[package.metadata.act-component]`, `[tool.act-component]`, or `actComponent`)
 3. **`act.toml`** — highest priority, applied last
 
+`act-build push` produces artifacts conformant with the [CNCF
+TAG-Runtime Wasm OCI Artifact spec](https://tag-runtime.cncf.io/wgs/wasm/deliverables/wasm-oci-artifact/):
+manifest config has media type `application/vnd.wasm.config.v0+json`
+(with `architecture`, `os`, `layerDigests`, and
+`component.{exports,imports}` derived from the component's exports
+and imports), and the layer is `application/wasm`.
+
+Authentication is resolved in order: `OCI_USERNAME`/`OCI_PASSWORD`
+env, then `GITHUB_TOKEN` for `ghcr.io`, then `~/.docker/config.json`
+(or `$DOCKER_CONFIG/config.json`), then anonymous.
+
 ## Platform Support
 
 | Architecture | Linux (GNU) | Linux (musl) | macOS | Windows | Docker |

{act_cli-0.7.2/act-cli → act_cli-0.7.3}/README.md

@@ -75,6 +75,12 @@ act-build pack target/wasm32-wasip2/release/my_component.wasm
 
 # Validate without modifying
 act-build validate target/wasm32-wasip2/release/my_component.wasm
+
+# Publish as a CNCF Wasm OCI Artifact
+act-build push my_component.wasm ghcr.io/actpkg/my-component:0.1.0 \
+  --also-tag latest \
+  --source https://github.com/actpkg/my-component \
+  --skip-if-identical
 ```
 
 Metadata is resolved via merge-patch from project manifests:
@@ -83,6 +89,17 @@ Metadata is resolved via merge-patch from project manifests:
 2. **Inline patch** from the same manifest (`[package.metadata.act-component]`, `[tool.act-component]`, or `actComponent`)
 3. **`act.toml`** — highest priority, applied last
 
+`act-build push` produces artifacts conformant with the [CNCF
+TAG-Runtime Wasm OCI Artifact spec](https://tag-runtime.cncf.io/wgs/wasm/deliverables/wasm-oci-artifact/):
+manifest config has media type `application/vnd.wasm.config.v0+json`
+(with `architecture`, `os`, `layerDigests`, and
+`component.{exports,imports}` derived from the component's exports
+and imports), and the layer is `application/wasm`.
+
+Authentication is resolved in order: `OCI_USERNAME`/`OCI_PASSWORD`
+env, then `GITHUB_TOKEN` for `ghcr.io`, then `~/.docker/config.json`
+(or `$DOCKER_CONFIG/config.json`), then anonymous.
+
 ## Platform Support
 
 | Architecture | Linux (GNU) | Linux (musl) | macOS | Windows | Docker |

{act_cli-0.7.2 → act_cli-0.7.3/act-cli}/README.md

@@ -75,6 +75,12 @@ act-build pack target/wasm32-wasip2/release/my_component.wasm
 
 # Validate without modifying
 act-build validate target/wasm32-wasip2/release/my_component.wasm
+
+# Publish as a CNCF Wasm OCI Artifact
+act-build push my_component.wasm ghcr.io/actpkg/my-component:0.1.0 \
+  --also-tag latest \
+  --source https://github.com/actpkg/my-component \
+  --skip-if-identical
 ```
 
 Metadata is resolved via merge-patch from project manifests:
@@ -83,6 +89,17 @@ Metadata is resolved via merge-patch from project manifests:
 2. **Inline patch** from the same manifest (`[package.metadata.act-component]`, `[tool.act-component]`, or `actComponent`)
 3. **`act.toml`** — highest priority, applied last
 
+`act-build push` produces artifacts conformant with the [CNCF
+TAG-Runtime Wasm OCI Artifact spec](https://tag-runtime.cncf.io/wgs/wasm/deliverables/wasm-oci-artifact/):
+manifest config has media type `application/vnd.wasm.config.v0+json`
+(with `architecture`, `os`, `layerDigests`, and
+`component.{exports,imports}` derived from the component's exports
+and imports), and the layer is `application/wasm`.
+
+Authentication is resolved in order: `OCI_USERNAME`/`OCI_PASSWORD`
+env, then `GITHUB_TOKEN` for `ghcr.io`, then `~/.docker/config.json`
+(or `$DOCKER_CONFIG/config.json`), then anonymous.
+
 ## Platform Support
 
 | Architecture | Linux (GNU) | Linux (musl) | macOS | Windows | Docker |

{act_cli-0.7.2 → act_cli-0.7.3}/act-cli/src/resolve.rs

@@ -224,6 +224,17 @@ async fn resolve_oci(reference: &str, fresh: bool) -> Result<PathBuf> {
         .first()
         .context("no layers in OCI manifest")?;
 
+    // Per the CNCF Wasm OCI Artifact spec, the layer media type must be
+    // `application/wasm`. We tolerate the empty/legacy case for backwards
+    // compatibility but log a warning — anything else is rejected.
+    match layer.media_type.as_str() {
+        "application/wasm" => {}
+        "" => tracing::warn!(%reference, "OCI layer has no media type (legacy artifact)"),
+        other => anyhow::bail!(
+            "unexpected layer media type for {reference}: '{other}' (expected 'application/wasm')"
+        ),
+    }
+
     let total = if layer.size > 0 {
         Some(layer.size as u64)
     } else {