@archstone/cli - npm Package Compare versions

Comparing version 0.12.0 to 0.13.0

dist/index.js

@@ -444,3 +444,4 @@ #!/usr/bin/env node
     if (f.phase && r.status.phase !== f.phase) return false;
-    if (f.principal !== void 0 && (r.spec.principal ?? "") !== f.principal) return false;
+    if (f.anonymous && r.spec.principal !== void 0) return false;
+    if (f.principal !== void 0 && r.spec.principal !== f.principal) return false;
     return true;
@@ -538,3 +539,3 @@ });
   console.error(
-    "usage: archstone audit <file\u2026> [--since <date>] [--until <date>] [--capability <id>]\n                            [--principal <p>] [--phase succeeded|failed|denied]\n                            [--format summary|jsonl|csv]\n\n  Read Execution audit records (JSON Lines) that your own deployment wrote, and report on\n  them. Nothing is uploaded: these are your files, read locally.\n\n  --since <date>       inclusive lower bound on startedAt (date or ISO timestamp)\n  --until <date>       exclusive upper bound \u2014 so adjacent ranges tile without overlap\n  --capability <id>    exact CDL capability id, e.g. framing.estimate-frame-price\n  --principal <p>      exact principal; use '' for anonymous invocations\n  --phase <p>          succeeded | failed | denied\n  --format <f>         summary (default) \xB7 jsonl (filtered passthrough) \xB7 csv (spreadsheet)\n\n  Pass rotated generations too \u2014 the sink writes <path>.1, <path>.2, \u2026:\n    archstone audit audit.log audit.log.1 --since 2026-08-01 --format csv > q3.csv\n"
+    "usage: archstone audit <file\u2026> [--since <date>] [--until <date>] [--capability <id>]\n                            [--principal <p>] [--phase succeeded|failed|denied]\n                            [--format summary|jsonl|csv]\n\n  Read Execution audit records (JSON Lines) that your own deployment wrote, and report on\n  them. Nothing is uploaded: these are your files, read locally.\n\n  --since <date>       inclusive lower bound on startedAt (date or ISO timestamp)\n  --until <date>       exclusive upper bound \u2014 so adjacent ranges tile without overlap\n  --capability <id>    exact CDL capability id, e.g. framing.estimate-frame-price\n  --principal <p>      exact principal, e.g. user:alice\n  --anonymous          only invocations that carried no principal at all\n  --phase <p>          succeeded | failed | denied\n  --format <f>         summary (default) \xB7 jsonl (filtered passthrough) \xB7 csv (spreadsheet)\n\n  Pass rotated generations too \u2014 the sink writes <path>.1, <path>.2, \u2026:\n    archstone audit audit.log audit.log.1 --since 2026-08-01 --format csv > q3.csv\n"
   );
@@ -562,4 +563,15 @@ }
     principal: argv.includes("--principal") ? flag(argv, "--principal") ?? "" : void 0,
+    anonymous: argv.includes("--anonymous"),
     phase: flag(argv, "--phase")
   };
+  if (filter.principal === "") {
+    console.error(
+      "archstone audit: --principal '' is not how you select anonymous invocations \u2014 use --anonymous.\n  (An empty principal would mean the host supplied the empty string, which is a different thing.)"
+    );
+    return 2;
+  }
+  if (filter.anonymous && filter.principal !== void 0) {
+    console.error("archstone audit: --anonymous and --principal are mutually exclusive \u2014 a call is one or the other.");
+    return 2;
+  }
   const records = [];
@@ -566,0 +578,0 @@ let skipped = 0;

package.json

 {
   "name": "@archstone/cli",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "private": false,
@@ -40,7 +40,7 @@ "type": "module",
   "dependencies": {
-    "@archstone/init": "0.12.0",
-    "@archstone/emitter-support": "0.12.0",
-    "@archstone/runtime": "0.12.0",
-    "@archstone/schema": "0.12.0",
-    "@archstone/compiler": "0.12.0"
+    "@archstone/compiler": "0.13.0",
+    "@archstone/emitter-support": "0.13.0",
+    "@archstone/runtime": "0.13.0",
+    "@archstone/init": "0.13.0",
+    "@archstone/schema": "0.13.0"
   },
@@ -47,0 +47,0 @@ "devDependencies": {

New alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Fixed alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Improved metrics

Total package byte prevSize

152561

1.86%

Lines of code

872

1.4%

Dependency changes

• + Added

  @archstone/compiler@0.13.0
  (transitive)

• + Added

  @archstone/emitter-support@0.13.0
  (transitive)

• + Added

  @archstone/init@0.13.0
  (transitive)

• + Added

  @archstone/provider-rest@0.13.0
  (transitive)

• + Added

  @archstone/runtime@0.13.0
  (transitive)

• + Added

  @archstone/schema@0.13.0
  (transitive)

• - Removed

  @archstone/compiler@0.12.0
  (transitive)

• - Removed

  @archstone/emitter-support@0.12.0
  (transitive)

• - Removed

  @archstone/init@0.12.0
  (transitive)

• - Removed

  @archstone/provider-rest@0.12.0
  (transitive)

• - Removed

  @archstone/runtime@0.12.0
  (transitive)

• - Removed

  @archstone/schema@0.12.0
  (transitive)

• Updated

  @archstone/compiler@0.13.0

• Updated

  @archstone/emitter-support@0.13.0

• Updated

  @archstone/init@0.13.0

• Updated

  @archstone/runtime@0.13.0

• Updated

  @archstone/schema@0.13.0