mirror of
https://github.com/nearai/ironclaw.git
synced 2026-09-03 08:06:01 +08:00
032d527540
Bumps the wasm group with 4 updates in the / directory: [wasmtime](https://github.com/bytecodealliance/wasmtime), [wasmtime-wasi](https://github.com/bytecodealliance/wasmtime), [wit-component](https://github.com/bytecodealliance/wasm-tools) and [wit-parser](https://github.com/bytecodealliance/wasm-tools). Updates `wasmtime` from 47.0.4 to 48.0.1 - [Release notes](https://github.com/bytecodealliance/wasmtime/releases) - [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v48.0.1/RELEASES.md) - [Commits](https://github.com/bytecodealliance/wasmtime/compare/v47.0.4...v48.0.1) Updates `wasmtime-wasi` from 47.0.4 to 48.0.1 - [Release notes](https://github.com/bytecodealliance/wasmtime/releases) - [Changelog](https://github.com/bytecodealliance/wasmtime/blob/v48.0.1/RELEASES.md) - [Commits](https://github.com/bytecodealliance/wasmtime/compare/v47.0.4...v48.0.1) Updates `wit-component` from 0.254.0 to 0.258.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/commits) Updates `wit-parser` from 0.254.0 to 0.258.0 - [Release notes](https://github.com/bytecodealliance/wasm-tools/releases) - [Commits](https://github.com/bytecodealliance/wasm-tools/commits) --- updated-dependencies: - dependency-name: wasmtime dependency-version: 48.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: wasm - dependency-name: wasmtime-wasi dependency-version: 48.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: wasm - dependency-name: wit-component dependency-version: 0.257.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: wasm - dependency-name: wit-parser dependency-version: 0.257.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: wasm ... Signed-off-by: dependabot[bot] <support@github.com>
123 lines
6.0 KiB
TOML
123 lines
6.0 KiB
TOML
[package]
|
|
name = "ironclaw_host_runtime"
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
publish = false
|
|
|
|
[package.metadata.ironclaw]
|
|
layer = "kernel"
|
|
|
|
[features]
|
|
test-support = []
|
|
|
|
[dependencies]
|
|
async-trait = "0.1"
|
|
# ES256 signing for the RFC 8292 `vapid_authorization` egress credential
|
|
# injection (Web Push). Already in the lockfile via jsonwebtoken's
|
|
# aws_lc_rs backend; no new lockfile entry.
|
|
aws-lc-rs = "1"
|
|
base64 = "0.23.0"
|
|
chrono = { version = "0.4", default-features = false, features = ["clock"] }
|
|
chrono-tz = "0.10"
|
|
deadpool-postgres = "0.14"
|
|
futures-util = "0.3"
|
|
dirs = "6"
|
|
hex = "0.4"
|
|
ironclaw_approvals = { path = "../ironclaw_approvals" }
|
|
ironclaw_attachments = { path = "../../domains/ironclaw_attachments" }
|
|
ironclaw_authorization = { path = "../ironclaw_authorization" }
|
|
ironclaw_capabilities = { path = "../ironclaw_capabilities" }
|
|
# `sandbox_process::connect` reads the `IRONCLAW_REBORN_DOCKER_HOST` override
|
|
# through `ironclaw_common::env_helpers::env_or_override`, so the retry path
|
|
# honors the same runtime-override precedence the rest of Reborn uses instead
|
|
# of a second, bare `std::env::var` lookup.
|
|
ironclaw_common = { path = "../../contracts/ironclaw_common" }
|
|
ironclaw_sandbox = { path = "../../lanes/ironclaw_sandbox" }
|
|
ironclaw_event_log = { path = "../../events/ironclaw_event_log" }
|
|
ironclaw_event_projections = { path = "../../events/ironclaw_event_projections" }
|
|
ironclaw_extension_registry = { path = "../../extensions/ironclaw_extension_registry" }
|
|
ironclaw_extractors = { path = "../../domains/ironclaw_extractors" }
|
|
ironclaw_filesystem = { path = "../../substrates/ironclaw_filesystem" }
|
|
ironclaw_extension_support = { path = "../../extensions/ironclaw_extension_support" }
|
|
ironclaw_host_api = { path = "../../contracts/ironclaw_host_api" }
|
|
ironclaw_extension_contracts = { path = "../../contracts/ironclaw_extension_contracts", version = "0.1.0" }
|
|
ironclaw_memory = { path = "../../domains/ironclaw_memory" }
|
|
ironclaw_memory_native = { path = "../../extensions/packages/memory-native" }
|
|
ironclaw_mcp = { path = "../../lanes/ironclaw_mcp" }
|
|
ironclaw_network = { path = "../../substrates/ironclaw_network" }
|
|
ironclaw_observability = { path = "../../substrates/ironclaw_observability" }
|
|
ironclaw_outbound = { path = "../../domains/ironclaw_outbound" }
|
|
ironclaw_processes = { path = "../ironclaw_processes" }
|
|
ironclaw_prompt_envelope = { path = "../../contracts/ironclaw_prompt_envelope" }
|
|
ironclaw_event_store = { path = "../../events/ironclaw_event_store" }
|
|
ironclaw_trace_commons = { path = "../../domains/ironclaw_trace_commons" }
|
|
ironclaw_resources = { path = "../ironclaw_resources" }
|
|
ironclaw_runtime_policy = { path = "../ironclaw_runtime_policy" }
|
|
ironclaw_safety = { path = "../../substrates/ironclaw_safety" }
|
|
ironclaw_secrets = { path = "../../substrates/ironclaw_secrets" }
|
|
ironclaw_triggers = { path = "../../domains/ironclaw_triggers" }
|
|
ironclaw_trust = { path = "../ironclaw_trust" }
|
|
ironclaw_loop_contracts = { path = "../../contracts/ironclaw_loop_contracts", version = "0.1.0" }
|
|
ironclaw_turns = { path = "../ironclaw_turns" }
|
|
ironclaw_wasm = { path = "../../lanes/ironclaw_wasm" }
|
|
libsql = { version = "0.9", default-features = false, features = ["core", "replication", "remote", "tls"] }
|
|
jsonschema = { version = "0.49", default-features = false }
|
|
libc = "0.2"
|
|
# Internal per-tenant CA for the sandbox egress proxy (W5, design doc
|
|
# 2026-07-26-sandbox-credential-firewall-design.md §4). Generates the root
|
|
# key/cert in-memory and issues short-lived leaf certs; ships unwired until
|
|
# W6 (proxy TLS termination) exists to call it.
|
|
rust_decimal = { version = "1", features = ["serde", "serde-with-str"] }
|
|
secrecy = "0.10"
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
sha2 = "0.11"
|
|
static_assertions = "1"
|
|
thiserror = "2"
|
|
# — needed directly to compute the CA's leaf-cert validity window.
|
|
tokio = { version = "1", features = ["io-util", "macros", "process", "rt", "sync", "time"] }
|
|
tokio-util = { version = "0.7" }
|
|
tracing = "0.1"
|
|
url = "2"
|
|
uuid = { version = "1", features = ["v4"] }
|
|
|
|
[dev-dependencies]
|
|
axum = { version = "0.8", features = ["json"] }
|
|
hex = "0.4"
|
|
# Test-only since WS3: the skill-install bundle limits these tests exercise are
|
|
# owned by `ironclaw_skills`, but the executor that enforces them now lives in
|
|
# `ironclaw_extension_support::skills` — a normal dep here would re-open the
|
|
# kernel→domain edge the move closed.
|
|
ironclaw_skills = { path = "../../domains/ironclaw_skills" }
|
|
# Test-only since WS3: the ZIP-bundle fixtures these tests build stay here; the
|
|
# extractor moved to `ironclaw_extension_support::skills::url_install`.
|
|
zip = { version = "8", default-features = false, features = ["deflate"] }
|
|
# Enables the in-memory-backed approval store constructors for tests only.
|
|
ironclaw_approvals = { path = "../ironclaw_approvals", features = ["test-support"] }
|
|
# Enables the in-memory-backed capability-lease store constructor for tests only.
|
|
ironclaw_authorization = { path = "../ironclaw_authorization", features = ["test-support"] }
|
|
# FaultInjecting decorator: drive store fault paths through the real store.
|
|
ironclaw_filesystem = { path = "../../substrates/ironclaw_filesystem", features = ["test-support"] }
|
|
# shared TestDispatcher double
|
|
ironclaw_host_api = { path = "../../contracts/ironclaw_host_api", features = ["test-support"] }
|
|
# Enables the sanctioned in-memory-backed outbound store constructor for tests.
|
|
ironclaw_outbound = { path = "../../domains/ironclaw_outbound", features = ["test-support"] }
|
|
# Enables the in-memory-backed process store constructors for tests only.
|
|
ironclaw_processes = { path = "../ironclaw_processes", features = ["test-support"] }
|
|
# Enables the in-memory-backed run-state/approval store constructors for tests only.
|
|
sha2 = "0.11"
|
|
parking_lot = "0.12"
|
|
tempfile = "3"
|
|
tokio = { version = "1", features = ["macros", "rt", "sync", "time"] }
|
|
tokio-postgres = "0.7"
|
|
tracing-subscriber = "0.3"
|
|
tracing-test = { version = "0.2", features = ["no-env-filter"] }
|
|
zeroize = "1"
|
|
wat = "1.245.1"
|
|
wit-component = "0.258.0"
|
|
wit-parser = "0.258.0"
|
|
# tests (chain-of-trust, SAN, validity window) without hand-rolling ASN.1.
|
|
|
|
[lints]
|
|
workspace = true
|