act.toml

[std]
name = "python-env"
# Pyodide-style versioning: major = CPython ABI line (314 = CPython 3.14);
# minor.patch = python-env's own iteration. A CPython minor bump forces a major
# bump (enforced by `just check-version`). Superseded 0.16.0.
version = "314.1.2"
description = "Stateful, batteries-included Python environment for AI agents (per-session namespace, pure-Python libs + numpy + pandas, runtime pip install)"

[std.capabilities."wasi:http"]
description = "Fetch pure-Python wheels from PyPI for the `install` tool. No other network use."

[[std.capabilities."wasi:http".allow]]
host = "pypi.org"
[[std.capabilities."wasi:http".allow]]
host = "files.pythonhosted.org"

[std.capabilities."wasi:filesystem"]
description = "Read / write data files so exec can process serialized data (CSV, JSON, Parquet, images, …). Denied unless granted; path scope delegated to the host policy."

[[std.capabilities."wasi:filesystem".allow]]
path = "**"
mode = "rw"