Repository navigation
v0.1.1
Added
- H2 static shell (#46):
acon build --static --nodes id=https://origin[,id=origin] [--out dist], fixed credential-free assets and Vercel/Workers static config, per-node bearer/Access auth, namespaced tools, node-owned actions and allowlisted credentialed CORS. Node-specific expiring GET-only grants serve authenticated modules/assets without exposing bearer tokens in URLs. Two-node ui-check covers ownership and distinct offline/origin-refused states. Hosted preview readback remains unverified. - H1 follow-ups (#45):
acon serve --read-only/ACON_READ_ONLY=1refuses every plugin action (403read-only node, no plugin call, no confirm token, a replayed token is not honoured), reportsreadOnly: truein/tools, and the shell shows a Read-only chip with verb, answer and confirm buttons disabled.acon token new [--file] [--force]writes a 0600 base64url bearer token and prints only its path.acon setup launchd [--label] [--apply]prints (or installs) a LaunchAgent foracon servewith auth passed as env names and file paths. The Dockerfile carries OCIsourceandrevisionlabels. - Release images (#45): behind
IMAGE_PUBLISH_ENABLED, tagged releases push multi-arch (linux/amd64,linux/arm64) images toghcr.io/staixbwlb/agent-console:<version>(andlatestfor stable versions) with OCI labels, read the manifest back and run--versionon amd64.
Install
npm i -g @staix/agent-console@0.1.1
Published to npm with provenance through GitHub OIDC trusted publishing. The validated tarball (SHA-256 09e6e471e0e5570a77411d5a493fc53857c9c3d51e643a0bfb43256c5ab4d710) and its manifest (tag, commit, SHA-256) from this run are attached.
Full changelog: v0.1.0...v0.1.1