@codai/axiom-mcp 1.0.24 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,2288 @@
1
+ [
2
+ {
3
+ "name": "axiom_plan_validate",
4
+ "description": "Validate a Plan against PlanSchema and, when all sources are inline, compute its planDigest. Read-only; touches no files.",
5
+ "riskClass": "READ",
6
+ "annotations": {
7
+ "readOnlyHint": true,
8
+ "destructiveHint": false,
9
+ "idempotentHint": true,
10
+ "openWorldHint": false
11
+ },
12
+ "inputSchema": {
13
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
14
+ "type": "object",
15
+ "properties": {
16
+ "plan": {
17
+ "type": "object",
18
+ "propertyNames": {
19
+ "type": "string"
20
+ },
21
+ "additionalProperties": {},
22
+ "description": "Plan document (apiVersion axiom.dev/v2, kind Plan)"
23
+ }
24
+ },
25
+ "required": [
26
+ "plan"
27
+ ]
28
+ },
29
+ "outputSchema": {
30
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
31
+ "type": "object",
32
+ "properties": {
33
+ "ok": {
34
+ "type": "boolean"
35
+ },
36
+ "planDigest": {
37
+ "type": "string",
38
+ "pattern": "^sha256:[a-f0-9]{64}$",
39
+ "description": "sha256:<64 lowercase hex>"
40
+ },
41
+ "errors": {
42
+ "type": "array",
43
+ "items": {
44
+ "type": "object",
45
+ "properties": {
46
+ "path": {
47
+ "type": "string"
48
+ },
49
+ "message": {
50
+ "type": "string"
51
+ },
52
+ "code": {
53
+ "type": "string"
54
+ }
55
+ },
56
+ "required": [
57
+ "path",
58
+ "message"
59
+ ]
60
+ }
61
+ }
62
+ },
63
+ "required": [
64
+ "ok",
65
+ "errors"
66
+ ]
67
+ }
68
+ },
69
+ {
70
+ "name": "axiom_plan_compile",
71
+ "description": "Compile a Plan into a content-addressed ManifestBundle (sorted artifacts, sha256 digests, in-toto planDigest). `store: cas` writes blobs under <root>/.axiom/cas instead of inlining them. When a root is given the bundle is stored under <root>/.axiom/manifests/<hex>.json so later tools can reference it by digest. `template` sources are rendered by the built-in `web` emitter (see `axiom emitters`); its version is recorded in toolchain.emitters.",
72
+ "riskClass": "ACT",
73
+ "annotations": {
74
+ "readOnlyHint": false,
75
+ "destructiveHint": false,
76
+ "idempotentHint": true,
77
+ "openWorldHint": false
78
+ },
79
+ "inputSchema": {
80
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
81
+ "type": "object",
82
+ "properties": {
83
+ "plan": {
84
+ "type": "object",
85
+ "propertyNames": {
86
+ "type": "string"
87
+ },
88
+ "additionalProperties": {},
89
+ "description": "Plan document"
90
+ },
91
+ "store": {
92
+ "description": "Blob transport; default inline",
93
+ "type": "string",
94
+ "enum": [
95
+ "inline",
96
+ "cas"
97
+ ]
98
+ },
99
+ "root": {
100
+ "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
101
+ "type": "string"
102
+ }
103
+ },
104
+ "required": [
105
+ "plan"
106
+ ]
107
+ },
108
+ "outputSchema": {
109
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
110
+ "type": "object",
111
+ "properties": {
112
+ "manifest": {
113
+ "type": "object",
114
+ "properties": {
115
+ "apiVersion": {
116
+ "type": "string",
117
+ "const": "axiom.dev/v2"
118
+ },
119
+ "kind": {
120
+ "type": "string",
121
+ "const": "Manifest"
122
+ },
123
+ "name": {
124
+ "type": "string",
125
+ "pattern": "^[a-z0-9][a-z0-9-]{0,63}$"
126
+ },
127
+ "profile": {
128
+ "type": "string",
129
+ "minLength": 1
130
+ },
131
+ "planDigest": {
132
+ "type": "string",
133
+ "pattern": "^sha256:[a-f0-9]{64}$",
134
+ "description": "sha256:<64 lowercase hex>"
135
+ },
136
+ "artifacts": {
137
+ "minItems": 1,
138
+ "maxItems": 2000,
139
+ "type": "array",
140
+ "items": {
141
+ "type": "object",
142
+ "properties": {
143
+ "path": {
144
+ "type": "string",
145
+ "minLength": 1,
146
+ "maxLength": 1024,
147
+ "description": "Relative POSIX path, NFC, no reserved names"
148
+ },
149
+ "op": {
150
+ "type": "string",
151
+ "enum": [
152
+ "create",
153
+ "overwrite",
154
+ "delete"
155
+ ]
156
+ },
157
+ "mode": {
158
+ "type": "string",
159
+ "enum": [
160
+ "0644",
161
+ "0755"
162
+ ]
163
+ },
164
+ "digest": {
165
+ "type": "object",
166
+ "properties": {
167
+ "sha256": {
168
+ "type": "string",
169
+ "pattern": "^[a-f0-9]{64}$",
170
+ "description": "Lowercase hex-encoded sha256"
171
+ }
172
+ },
173
+ "required": [
174
+ "sha256"
175
+ ],
176
+ "additionalProperties": false
177
+ },
178
+ "bytes": {
179
+ "type": "integer",
180
+ "minimum": 0,
181
+ "maximum": 9007199254740991
182
+ },
183
+ "origin": {
184
+ "type": "string",
185
+ "enum": [
186
+ "inline",
187
+ "template",
188
+ "cas",
189
+ "ref"
190
+ ]
191
+ }
192
+ },
193
+ "required": [
194
+ "path",
195
+ "op",
196
+ "mode"
197
+ ],
198
+ "additionalProperties": false
199
+ }
200
+ },
201
+ "checks": {
202
+ "type": "array",
203
+ "items": {
204
+ "type": "object",
205
+ "properties": {
206
+ "id": {
207
+ "type": "string",
208
+ "minLength": 1,
209
+ "maxLength": 128
210
+ },
211
+ "predicate": {
212
+ "type": "string",
213
+ "pattern": "^[a-z][a-zA-Z0-9]*\\.[a-zA-Z][a-zA-Z0-9]*$"
214
+ },
215
+ "params": {
216
+ "$ref": "#/$defs/__schema0"
217
+ },
218
+ "severity": {
219
+ "default": "error",
220
+ "type": "string",
221
+ "enum": [
222
+ "error",
223
+ "warn",
224
+ "info"
225
+ ]
226
+ }
227
+ },
228
+ "required": [
229
+ "id",
230
+ "predicate",
231
+ "params"
232
+ ],
233
+ "additionalProperties": false
234
+ }
235
+ },
236
+ "toolchain": {
237
+ "type": "object",
238
+ "properties": {
239
+ "axiom": {
240
+ "type": "string",
241
+ "minLength": 1
242
+ },
243
+ "emitters": {
244
+ "type": "object",
245
+ "propertyNames": {
246
+ "type": "string"
247
+ },
248
+ "additionalProperties": {
249
+ "type": "string"
250
+ }
251
+ }
252
+ },
253
+ "required": [
254
+ "axiom",
255
+ "emitters"
256
+ ],
257
+ "additionalProperties": false
258
+ },
259
+ "counter": {
260
+ "type": "integer",
261
+ "minimum": 0,
262
+ "maximum": 9007199254740991
263
+ }
264
+ },
265
+ "required": [
266
+ "apiVersion",
267
+ "kind",
268
+ "name",
269
+ "profile",
270
+ "planDigest",
271
+ "artifacts",
272
+ "checks",
273
+ "toolchain"
274
+ ],
275
+ "additionalProperties": false
276
+ },
277
+ "manifestDigest": {
278
+ "type": "string",
279
+ "pattern": "^sha256:[a-f0-9]{64}$",
280
+ "description": "sha256:<64 lowercase hex>"
281
+ },
282
+ "attestation": {
283
+ "type": "object",
284
+ "properties": {
285
+ "_type": {
286
+ "type": "string",
287
+ "const": "https://in-toto.io/Statement/v1"
288
+ },
289
+ "subject": {
290
+ "minItems": 1,
291
+ "type": "array",
292
+ "items": {
293
+ "type": "object",
294
+ "properties": {
295
+ "name": {
296
+ "type": "string"
297
+ },
298
+ "digest": {
299
+ "type": "object",
300
+ "properties": {
301
+ "sha256": {
302
+ "type": "string",
303
+ "pattern": "^[a-f0-9]{64}$",
304
+ "description": "Lowercase hex-encoded sha256"
305
+ }
306
+ },
307
+ "required": [
308
+ "sha256"
309
+ ],
310
+ "additionalProperties": false
311
+ }
312
+ },
313
+ "required": [
314
+ "name",
315
+ "digest"
316
+ ],
317
+ "additionalProperties": false
318
+ }
319
+ },
320
+ "predicateType": {
321
+ "type": "string",
322
+ "format": "uri"
323
+ },
324
+ "predicate": {
325
+ "type": "object",
326
+ "propertyNames": {
327
+ "type": "string"
328
+ },
329
+ "additionalProperties": {}
330
+ }
331
+ },
332
+ "required": [
333
+ "_type",
334
+ "subject",
335
+ "predicateType",
336
+ "predicate"
337
+ ],
338
+ "additionalProperties": false
339
+ },
340
+ "envelope": {
341
+ "type": "object",
342
+ "properties": {
343
+ "payloadType": {
344
+ "type": "string",
345
+ "const": "application/vnd.in-toto+json"
346
+ },
347
+ "payload": {
348
+ "type": "string",
349
+ "format": "base64",
350
+ "contentEncoding": "base64",
351
+ "pattern": "^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$"
352
+ },
353
+ "signatures": {
354
+ "type": "array",
355
+ "items": {
356
+ "type": "object",
357
+ "properties": {
358
+ "keyid": {
359
+ "type": "string"
360
+ },
361
+ "sig": {
362
+ "type": "string",
363
+ "format": "base64",
364
+ "contentEncoding": "base64",
365
+ "pattern": "^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$"
366
+ }
367
+ },
368
+ "required": [
369
+ "sig"
370
+ ],
371
+ "additionalProperties": false
372
+ }
373
+ }
374
+ },
375
+ "required": [
376
+ "payloadType",
377
+ "payload",
378
+ "signatures"
379
+ ],
380
+ "additionalProperties": false
381
+ },
382
+ "signatures": {
383
+ "type": "array",
384
+ "items": {
385
+ "type": "object",
386
+ "properties": {
387
+ "payloadType": {
388
+ "type": "string",
389
+ "const": "application/vnd.axiom.manifest+json"
390
+ },
391
+ "payload": {
392
+ "type": "string",
393
+ "format": "base64",
394
+ "contentEncoding": "base64",
395
+ "pattern": "^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$"
396
+ },
397
+ "signatures": {
398
+ "minItems": 1,
399
+ "type": "array",
400
+ "items": {
401
+ "type": "object",
402
+ "properties": {
403
+ "keyid": {
404
+ "type": "string"
405
+ },
406
+ "sig": {
407
+ "type": "string",
408
+ "format": "base64",
409
+ "contentEncoding": "base64",
410
+ "pattern": "^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$"
411
+ }
412
+ },
413
+ "required": [
414
+ "sig"
415
+ ],
416
+ "additionalProperties": false
417
+ }
418
+ }
419
+ },
420
+ "required": [
421
+ "payloadType",
422
+ "payload",
423
+ "signatures"
424
+ ],
425
+ "additionalProperties": false
426
+ }
427
+ },
428
+ "blobs": {
429
+ "default": {},
430
+ "type": "object",
431
+ "propertyNames": {
432
+ "type": "string",
433
+ "pattern": "^sha256:[a-f0-9]{64}$",
434
+ "description": "sha256:<64 lowercase hex>"
435
+ },
436
+ "additionalProperties": {
437
+ "type": "object",
438
+ "properties": {
439
+ "encoding": {
440
+ "type": "string",
441
+ "enum": [
442
+ "utf8",
443
+ "base64"
444
+ ]
445
+ },
446
+ "data": {
447
+ "type": "string"
448
+ }
449
+ },
450
+ "required": [
451
+ "encoding",
452
+ "data"
453
+ ],
454
+ "additionalProperties": false
455
+ }
456
+ }
457
+ },
458
+ "required": [
459
+ "manifest",
460
+ "manifestDigest"
461
+ ],
462
+ "additionalProperties": false,
463
+ "$defs": {
464
+ "__schema0": {
465
+ "anyOf": [
466
+ {
467
+ "type": "string"
468
+ },
469
+ {
470
+ "type": "number"
471
+ },
472
+ {
473
+ "type": "boolean"
474
+ },
475
+ {
476
+ "type": "null"
477
+ },
478
+ {
479
+ "type": "array",
480
+ "items": {
481
+ "$ref": "#/$defs/__schema0"
482
+ }
483
+ },
484
+ {
485
+ "type": "object",
486
+ "propertyNames": {
487
+ "type": "string"
488
+ },
489
+ "additionalProperties": {
490
+ "$ref": "#/$defs/__schema0"
491
+ }
492
+ }
493
+ ]
494
+ }
495
+ }
496
+ }
497
+ },
498
+ {
499
+ "name": "axiom_manifest_verify",
500
+ "description": "Structural and content-address verification: schema, recomputed manifestDigest, every inline blob hashes to its key, attestation subject matches. When a root with .axiom/trust/keys.json is available, detached DSSE signatures are verified and the trusted keyids are reported under `signatures`. Never writes.",
501
+ "riskClass": "READ",
502
+ "annotations": {
503
+ "readOnlyHint": true,
504
+ "destructiveHint": false,
505
+ "idempotentHint": true,
506
+ "openWorldHint": false
507
+ },
508
+ "inputSchema": {
509
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
510
+ "type": "object",
511
+ "properties": {
512
+ "bundle": {
513
+ "type": "object",
514
+ "propertyNames": {
515
+ "type": "string"
516
+ },
517
+ "additionalProperties": {},
518
+ "description": "ManifestBundle"
519
+ },
520
+ "root": {
521
+ "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
522
+ "type": "string"
523
+ }
524
+ },
525
+ "required": [
526
+ "bundle"
527
+ ]
528
+ },
529
+ "outputSchema": {
530
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
531
+ "type": "object",
532
+ "properties": {
533
+ "ok": {
534
+ "type": "boolean"
535
+ },
536
+ "manifestDigest": {
537
+ "type": "string",
538
+ "pattern": "^sha256:[a-f0-9]{64}$",
539
+ "description": "sha256:<64 lowercase hex>"
540
+ },
541
+ "canonical": {
542
+ "type": "boolean"
543
+ },
544
+ "signed": {
545
+ "type": "boolean"
546
+ },
547
+ "missing": {
548
+ "type": "array",
549
+ "items": {
550
+ "type": "string"
551
+ }
552
+ },
553
+ "errors": {
554
+ "type": "array",
555
+ "items": {
556
+ "type": "object",
557
+ "properties": {
558
+ "code": {
559
+ "type": "string",
560
+ "enum": [
561
+ "ERR_PATH_NOT_RELATIVE_POSIX",
562
+ "ERR_PATH_SEGMENT",
563
+ "ERR_PATH_NOT_NFC",
564
+ "ERR_PATH_RESERVED_NAME",
565
+ "ERR_PATH_INVALID_CHAR",
566
+ "ERR_PATH_CASE_COLLISION",
567
+ "ERR_SYMLINK_IN_PATH",
568
+ "ERR_CONTAINMENT",
569
+ "ERR_TARGET_TYPE",
570
+ "ERR_EXISTS",
571
+ "ERR_NOT_FOUND",
572
+ "ERR_BLOB_MISSING",
573
+ "ERR_DIGEST_FORMAT",
574
+ "ERR_DIGEST_MISMATCH",
575
+ "ERR_SIZE_MISMATCH",
576
+ "ERR_BLOB_TOO_LARGE",
577
+ "ERR_BUNDLE_TOO_LARGE",
578
+ "ERR_LOCKED",
579
+ "ERR_ROOT_NOT_ALLOWED",
580
+ "ERR_ROOT_REQUIRED",
581
+ "ERR_ROOT_NOT_DIR",
582
+ "ERR_CONFIRM_DIGEST_MISMATCH",
583
+ "ERR_CHECKS_FAILED",
584
+ "ERR_PREIMAGE_CHANGED",
585
+ "ERR_JOURNAL_CORRUPT",
586
+ "ERR_EBUSY",
587
+ "ERR_INVALID_PLAN",
588
+ "ERR_INVALID_MANIFEST",
589
+ "ERR_INVALID_PROFILE",
590
+ "ERR_PREDICATE_UNKNOWN",
591
+ "ERR_PREDICATE_PARAMS",
592
+ "ERR_PROVIDER_FAILED",
593
+ "ERR_GUARD_TIMEOUT",
594
+ "ERR_GUARD_OUTPUT",
595
+ "ERR_SIGNATURE_MISSING",
596
+ "ERR_SIGNATURE_INVALID",
597
+ "ERR_ROLLBACK",
598
+ "ERR_EMITTER_UNKNOWN",
599
+ "ERR_TEMPLATE_UNKNOWN",
600
+ "ERR_TEMPLATE_PARAMS",
601
+ "ERR_GIT_NOT_FOUND",
602
+ "ERR_GIT_NOT_REPO",
603
+ "ERR_GIT_DIRTY",
604
+ "ERR_GIT_BRANCH_EXISTS",
605
+ "ERR_GIT_BRANCH_INVALID",
606
+ "ERR_GIT_FAILED",
607
+ "ERR_REF_OFFLINE",
608
+ "ERR_NET_DISABLED",
609
+ "ERR_NET_DENIED",
610
+ "ERR_NET_FAILED",
611
+ "ERR_NOT_CANONICAL",
612
+ "ERR_UNSUPPORTED_OP",
613
+ "ERR_INTERNAL"
614
+ ]
615
+ },
616
+ "message": {
617
+ "type": "string"
618
+ },
619
+ "path": {
620
+ "type": "string"
621
+ }
622
+ },
623
+ "required": [
624
+ "code",
625
+ "message"
626
+ ]
627
+ }
628
+ },
629
+ "signatures": {
630
+ "type": "object",
631
+ "properties": {
632
+ "trustFile": {
633
+ "type": "string"
634
+ },
635
+ "keyids": {
636
+ "type": "array",
637
+ "items": {
638
+ "type": "string"
639
+ }
640
+ },
641
+ "findings": {
642
+ "type": "array",
643
+ "items": {
644
+ "type": "object",
645
+ "properties": {
646
+ "id": {
647
+ "type": "string"
648
+ },
649
+ "message": {
650
+ "type": "string"
651
+ }
652
+ },
653
+ "required": [
654
+ "id",
655
+ "message"
656
+ ]
657
+ }
658
+ },
659
+ "ok": {
660
+ "type": "boolean"
661
+ }
662
+ },
663
+ "required": [
664
+ "trustFile",
665
+ "keyids",
666
+ "findings",
667
+ "ok"
668
+ ]
669
+ }
670
+ },
671
+ "required": [
672
+ "ok",
673
+ "canonical",
674
+ "signed",
675
+ "missing",
676
+ "errors"
677
+ ]
678
+ }
679
+ },
680
+ {
681
+ "name": "axiom_check",
682
+ "description": "Evaluate the profile's predicates (plus the manifest's own checks) against the bundle. Repo facts are read from the root when one is available and the profile allows it. Verdict `error` means a provider could not run — never a silent pass.",
683
+ "riskClass": "READ",
684
+ "annotations": {
685
+ "readOnlyHint": true,
686
+ "destructiveHint": false,
687
+ "idempotentHint": true,
688
+ "openWorldHint": false
689
+ },
690
+ "inputSchema": {
691
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
692
+ "type": "object",
693
+ "properties": {
694
+ "bundle": {
695
+ "type": "object",
696
+ "propertyNames": {
697
+ "type": "string"
698
+ },
699
+ "additionalProperties": {},
700
+ "description": "ManifestBundle"
701
+ },
702
+ "profile": {
703
+ "description": "Profile name (builtin default|strict|permissive, or <root>/.axiom/profiles/<name>.json)",
704
+ "type": "string"
705
+ },
706
+ "root": {
707
+ "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
708
+ "type": "string"
709
+ }
710
+ },
711
+ "required": [
712
+ "bundle"
713
+ ]
714
+ },
715
+ "outputSchema": {
716
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
717
+ "type": "object",
718
+ "properties": {
719
+ "apiVersion": {
720
+ "type": "string",
721
+ "const": "axiom.dev/v2"
722
+ },
723
+ "kind": {
724
+ "type": "string",
725
+ "const": "CheckReport"
726
+ },
727
+ "manifestDigest": {
728
+ "type": "string",
729
+ "pattern": "^sha256:[a-f0-9]{64}$",
730
+ "description": "sha256:<64 lowercase hex>"
731
+ },
732
+ "profile": {
733
+ "type": "string"
734
+ },
735
+ "verdict": {
736
+ "type": "string",
737
+ "enum": [
738
+ "pass",
739
+ "fail",
740
+ "error"
741
+ ]
742
+ },
743
+ "findings": {
744
+ "type": "array",
745
+ "items": {
746
+ "type": "object",
747
+ "properties": {
748
+ "id": {
749
+ "type": "string"
750
+ },
751
+ "severity": {
752
+ "type": "string",
753
+ "enum": [
754
+ "error",
755
+ "warn",
756
+ "info"
757
+ ]
758
+ },
759
+ "predicate": {
760
+ "type": "string"
761
+ },
762
+ "message": {
763
+ "type": "string"
764
+ },
765
+ "path": {
766
+ "type": "string",
767
+ "minLength": 1,
768
+ "maxLength": 1024,
769
+ "description": "Relative POSIX path, NFC, no reserved names"
770
+ },
771
+ "facts": {
772
+ "default": {},
773
+ "type": "object",
774
+ "propertyNames": {
775
+ "type": "string"
776
+ },
777
+ "additionalProperties": {
778
+ "$ref": "#/$defs/__schema0"
779
+ }
780
+ }
781
+ },
782
+ "required": [
783
+ "id",
784
+ "severity",
785
+ "predicate",
786
+ "message"
787
+ ],
788
+ "additionalProperties": false
789
+ }
790
+ },
791
+ "factsDigest": {
792
+ "type": "string",
793
+ "pattern": "^sha256:[a-f0-9]{64}$",
794
+ "description": "sha256:<64 lowercase hex>"
795
+ },
796
+ "durationMs": {
797
+ "type": "integer",
798
+ "minimum": 0,
799
+ "maximum": 9007199254740991
800
+ },
801
+ "providers": {
802
+ "type": "array",
803
+ "items": {
804
+ "type": "object",
805
+ "properties": {
806
+ "name": {
807
+ "type": "string"
808
+ },
809
+ "status": {
810
+ "type": "string",
811
+ "enum": [
812
+ "ok",
813
+ "skipped",
814
+ "error"
815
+ ]
816
+ },
817
+ "ms": {
818
+ "type": "integer",
819
+ "minimum": 0,
820
+ "maximum": 9007199254740991
821
+ }
822
+ },
823
+ "required": [
824
+ "name",
825
+ "status",
826
+ "ms"
827
+ ],
828
+ "additionalProperties": false
829
+ }
830
+ }
831
+ },
832
+ "required": [
833
+ "apiVersion",
834
+ "kind",
835
+ "manifestDigest",
836
+ "profile",
837
+ "verdict",
838
+ "findings",
839
+ "factsDigest",
840
+ "durationMs",
841
+ "providers"
842
+ ],
843
+ "additionalProperties": false,
844
+ "$defs": {
845
+ "__schema0": {
846
+ "anyOf": [
847
+ {
848
+ "type": "string"
849
+ },
850
+ {
851
+ "type": "number"
852
+ },
853
+ {
854
+ "type": "boolean"
855
+ },
856
+ {
857
+ "type": "null"
858
+ },
859
+ {
860
+ "type": "array",
861
+ "items": {
862
+ "$ref": "#/$defs/__schema0"
863
+ }
864
+ },
865
+ {
866
+ "type": "object",
867
+ "propertyNames": {
868
+ "type": "string"
869
+ },
870
+ "additionalProperties": {
871
+ "$ref": "#/$defs/__schema0"
872
+ }
873
+ }
874
+ ]
875
+ }
876
+ }
877
+ }
878
+ },
879
+ {
880
+ "name": "axiom_apply_dry_run",
881
+ "description": "Stage the bundle under <root>/.axiom/staging, run pre-apply checks and produce a unified diff against the current tree. Nothing outside .axiom/ is touched. Echo the returned manifestDigest as `confirmDigest` to axiom_apply.",
882
+ "riskClass": "READ",
883
+ "annotations": {
884
+ "readOnlyHint": true,
885
+ "destructiveHint": false,
886
+ "idempotentHint": true,
887
+ "openWorldHint": false
888
+ },
889
+ "inputSchema": {
890
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
891
+ "type": "object",
892
+ "properties": {
893
+ "bundle": {
894
+ "type": "object",
895
+ "propertyNames": {
896
+ "type": "string"
897
+ },
898
+ "additionalProperties": {},
899
+ "description": "ManifestBundle"
900
+ },
901
+ "root": {
902
+ "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
903
+ "type": "string"
904
+ },
905
+ "profile": {
906
+ "description": "Profile name (builtin default|strict|permissive, or <root>/.axiom/profiles/<name>.json)",
907
+ "type": "string"
908
+ }
909
+ },
910
+ "required": [
911
+ "bundle"
912
+ ]
913
+ },
914
+ "outputSchema": {
915
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
916
+ "type": "object",
917
+ "properties": {
918
+ "apiVersion": {
919
+ "type": "string",
920
+ "const": "axiom.dev/v2"
921
+ },
922
+ "kind": {
923
+ "type": "string",
924
+ "const": "ApplyResult"
925
+ },
926
+ "manifestDigest": {
927
+ "type": "string",
928
+ "pattern": "^sha256:[a-f0-9]{64}$",
929
+ "description": "sha256:<64 lowercase hex>"
930
+ },
931
+ "mode": {
932
+ "type": "string",
933
+ "enum": [
934
+ "dry-run",
935
+ "fs",
936
+ "pr"
937
+ ]
938
+ },
939
+ "status": {
940
+ "type": "string",
941
+ "enum": [
942
+ "applied",
943
+ "noop",
944
+ "rolled-back",
945
+ "failed"
946
+ ]
947
+ },
948
+ "root": {
949
+ "type": "string",
950
+ "minLength": 1
951
+ },
952
+ "files": {
953
+ "type": "array",
954
+ "items": {
955
+ "type": "object",
956
+ "properties": {
957
+ "path": {
958
+ "type": "string",
959
+ "minLength": 1,
960
+ "maxLength": 1024,
961
+ "description": "Relative POSIX path, NFC, no reserved names"
962
+ },
963
+ "op": {
964
+ "type": "string",
965
+ "enum": [
966
+ "create",
967
+ "overwrite",
968
+ "delete"
969
+ ]
970
+ },
971
+ "digest": {
972
+ "type": "object",
973
+ "properties": {
974
+ "sha256": {
975
+ "type": "string",
976
+ "pattern": "^[a-f0-9]{64}$",
977
+ "description": "Lowercase hex-encoded sha256"
978
+ }
979
+ },
980
+ "required": [
981
+ "sha256"
982
+ ],
983
+ "additionalProperties": false
984
+ },
985
+ "status": {
986
+ "type": "string",
987
+ "enum": [
988
+ "written",
989
+ "deleted",
990
+ "unchanged",
991
+ "skipped"
992
+ ]
993
+ }
994
+ },
995
+ "required": [
996
+ "path",
997
+ "op",
998
+ "status"
999
+ ],
1000
+ "additionalProperties": false
1001
+ }
1002
+ },
1003
+ "diff": {
1004
+ "type": "string"
1005
+ },
1006
+ "journal": {
1007
+ "type": "string"
1008
+ },
1009
+ "git": {
1010
+ "type": "object",
1011
+ "properties": {
1012
+ "branch": {
1013
+ "type": "string",
1014
+ "minLength": 1
1015
+ },
1016
+ "commit": {
1017
+ "type": "string",
1018
+ "pattern": "^[a-f0-9]{40}$"
1019
+ },
1020
+ "compareUrl": {
1021
+ "type": "string",
1022
+ "format": "uri"
1023
+ }
1024
+ },
1025
+ "required": [
1026
+ "branch"
1027
+ ],
1028
+ "additionalProperties": false
1029
+ },
1030
+ "error": {
1031
+ "type": "object",
1032
+ "properties": {
1033
+ "code": {
1034
+ "type": "string",
1035
+ "enum": [
1036
+ "ERR_PATH_NOT_RELATIVE_POSIX",
1037
+ "ERR_PATH_SEGMENT",
1038
+ "ERR_PATH_NOT_NFC",
1039
+ "ERR_PATH_RESERVED_NAME",
1040
+ "ERR_PATH_INVALID_CHAR",
1041
+ "ERR_PATH_CASE_COLLISION",
1042
+ "ERR_SYMLINK_IN_PATH",
1043
+ "ERR_CONTAINMENT",
1044
+ "ERR_TARGET_TYPE",
1045
+ "ERR_EXISTS",
1046
+ "ERR_NOT_FOUND",
1047
+ "ERR_BLOB_MISSING",
1048
+ "ERR_DIGEST_FORMAT",
1049
+ "ERR_DIGEST_MISMATCH",
1050
+ "ERR_SIZE_MISMATCH",
1051
+ "ERR_BLOB_TOO_LARGE",
1052
+ "ERR_BUNDLE_TOO_LARGE",
1053
+ "ERR_LOCKED",
1054
+ "ERR_ROOT_NOT_ALLOWED",
1055
+ "ERR_ROOT_REQUIRED",
1056
+ "ERR_ROOT_NOT_DIR",
1057
+ "ERR_CONFIRM_DIGEST_MISMATCH",
1058
+ "ERR_CHECKS_FAILED",
1059
+ "ERR_PREIMAGE_CHANGED",
1060
+ "ERR_JOURNAL_CORRUPT",
1061
+ "ERR_EBUSY",
1062
+ "ERR_INVALID_PLAN",
1063
+ "ERR_INVALID_MANIFEST",
1064
+ "ERR_INVALID_PROFILE",
1065
+ "ERR_PREDICATE_UNKNOWN",
1066
+ "ERR_PREDICATE_PARAMS",
1067
+ "ERR_PROVIDER_FAILED",
1068
+ "ERR_GUARD_TIMEOUT",
1069
+ "ERR_GUARD_OUTPUT",
1070
+ "ERR_SIGNATURE_MISSING",
1071
+ "ERR_SIGNATURE_INVALID",
1072
+ "ERR_ROLLBACK",
1073
+ "ERR_EMITTER_UNKNOWN",
1074
+ "ERR_TEMPLATE_UNKNOWN",
1075
+ "ERR_TEMPLATE_PARAMS",
1076
+ "ERR_GIT_NOT_FOUND",
1077
+ "ERR_GIT_NOT_REPO",
1078
+ "ERR_GIT_DIRTY",
1079
+ "ERR_GIT_BRANCH_EXISTS",
1080
+ "ERR_GIT_BRANCH_INVALID",
1081
+ "ERR_GIT_FAILED",
1082
+ "ERR_REF_OFFLINE",
1083
+ "ERR_NET_DISABLED",
1084
+ "ERR_NET_DENIED",
1085
+ "ERR_NET_FAILED",
1086
+ "ERR_NOT_CANONICAL",
1087
+ "ERR_UNSUPPORTED_OP",
1088
+ "ERR_INTERNAL"
1089
+ ]
1090
+ },
1091
+ "message": {
1092
+ "type": "string"
1093
+ },
1094
+ "path": {
1095
+ "type": "string",
1096
+ "minLength": 1,
1097
+ "maxLength": 1024,
1098
+ "description": "Relative POSIX path, NFC, no reserved names"
1099
+ }
1100
+ },
1101
+ "required": [
1102
+ "code",
1103
+ "message"
1104
+ ],
1105
+ "additionalProperties": false
1106
+ }
1107
+ },
1108
+ "required": [
1109
+ "apiVersion",
1110
+ "kind",
1111
+ "manifestDigest",
1112
+ "mode",
1113
+ "status",
1114
+ "root",
1115
+ "files"
1116
+ ],
1117
+ "additionalProperties": false
1118
+ }
1119
+ },
1120
+ {
1121
+ "name": "axiom_apply",
1122
+ "description": "Transactionally write the bundle into the root: pre-image verification, staging, journal, atomic renames, scoped rollback on failure. Requires `confirmDigest === bundle.manifestDigest` (echo the digest you saw in dry-run). Idempotent: re-applying an applied digest is a no-op.",
1123
+ "riskClass": "SENSITIVE",
1124
+ "annotations": {
1125
+ "readOnlyHint": false,
1126
+ "destructiveHint": true,
1127
+ "idempotentHint": true,
1128
+ "openWorldHint": false
1129
+ },
1130
+ "inputSchema": {
1131
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
1132
+ "type": "object",
1133
+ "properties": {
1134
+ "bundle": {
1135
+ "type": "object",
1136
+ "propertyNames": {
1137
+ "type": "string"
1138
+ },
1139
+ "additionalProperties": {},
1140
+ "description": "ManifestBundle"
1141
+ },
1142
+ "root": {
1143
+ "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
1144
+ "type": "string"
1145
+ },
1146
+ "profile": {
1147
+ "description": "Profile name (builtin default|strict|permissive, or <root>/.axiom/profiles/<name>.json)",
1148
+ "type": "string"
1149
+ },
1150
+ "confirmDigest": {
1151
+ "description": "Must equal bundle.manifestDigest",
1152
+ "type": "string"
1153
+ },
1154
+ "mode": {
1155
+ "description": "fs (default) writes files; pr additionally creates a git branch and commits exactly the touched paths (no push, no PR creation)",
1156
+ "type": "string",
1157
+ "enum": [
1158
+ "fs",
1159
+ "pr"
1160
+ ]
1161
+ },
1162
+ "branch": {
1163
+ "description": "pr mode: branch name (default axiom/<name>/<digest12>)",
1164
+ "type": "string"
1165
+ },
1166
+ "commitMessage": {
1167
+ "description": "pr mode: commit message (passed to git on stdin)",
1168
+ "type": "string"
1169
+ }
1170
+ },
1171
+ "required": [
1172
+ "bundle"
1173
+ ]
1174
+ },
1175
+ "outputSchema": {
1176
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
1177
+ "type": "object",
1178
+ "properties": {
1179
+ "apiVersion": {
1180
+ "type": "string",
1181
+ "const": "axiom.dev/v2"
1182
+ },
1183
+ "kind": {
1184
+ "type": "string",
1185
+ "const": "ApplyResult"
1186
+ },
1187
+ "manifestDigest": {
1188
+ "type": "string",
1189
+ "pattern": "^sha256:[a-f0-9]{64}$",
1190
+ "description": "sha256:<64 lowercase hex>"
1191
+ },
1192
+ "mode": {
1193
+ "type": "string",
1194
+ "enum": [
1195
+ "dry-run",
1196
+ "fs",
1197
+ "pr"
1198
+ ]
1199
+ },
1200
+ "status": {
1201
+ "type": "string",
1202
+ "enum": [
1203
+ "applied",
1204
+ "noop",
1205
+ "rolled-back",
1206
+ "failed"
1207
+ ]
1208
+ },
1209
+ "root": {
1210
+ "type": "string",
1211
+ "minLength": 1
1212
+ },
1213
+ "files": {
1214
+ "type": "array",
1215
+ "items": {
1216
+ "type": "object",
1217
+ "properties": {
1218
+ "path": {
1219
+ "type": "string",
1220
+ "minLength": 1,
1221
+ "maxLength": 1024,
1222
+ "description": "Relative POSIX path, NFC, no reserved names"
1223
+ },
1224
+ "op": {
1225
+ "type": "string",
1226
+ "enum": [
1227
+ "create",
1228
+ "overwrite",
1229
+ "delete"
1230
+ ]
1231
+ },
1232
+ "digest": {
1233
+ "type": "object",
1234
+ "properties": {
1235
+ "sha256": {
1236
+ "type": "string",
1237
+ "pattern": "^[a-f0-9]{64}$",
1238
+ "description": "Lowercase hex-encoded sha256"
1239
+ }
1240
+ },
1241
+ "required": [
1242
+ "sha256"
1243
+ ],
1244
+ "additionalProperties": false
1245
+ },
1246
+ "status": {
1247
+ "type": "string",
1248
+ "enum": [
1249
+ "written",
1250
+ "deleted",
1251
+ "unchanged",
1252
+ "skipped"
1253
+ ]
1254
+ }
1255
+ },
1256
+ "required": [
1257
+ "path",
1258
+ "op",
1259
+ "status"
1260
+ ],
1261
+ "additionalProperties": false
1262
+ }
1263
+ },
1264
+ "diff": {
1265
+ "type": "string"
1266
+ },
1267
+ "journal": {
1268
+ "type": "string"
1269
+ },
1270
+ "git": {
1271
+ "type": "object",
1272
+ "properties": {
1273
+ "branch": {
1274
+ "type": "string",
1275
+ "minLength": 1
1276
+ },
1277
+ "commit": {
1278
+ "type": "string",
1279
+ "pattern": "^[a-f0-9]{40}$"
1280
+ },
1281
+ "compareUrl": {
1282
+ "type": "string",
1283
+ "format": "uri"
1284
+ }
1285
+ },
1286
+ "required": [
1287
+ "branch"
1288
+ ],
1289
+ "additionalProperties": false
1290
+ },
1291
+ "error": {
1292
+ "type": "object",
1293
+ "properties": {
1294
+ "code": {
1295
+ "type": "string",
1296
+ "enum": [
1297
+ "ERR_PATH_NOT_RELATIVE_POSIX",
1298
+ "ERR_PATH_SEGMENT",
1299
+ "ERR_PATH_NOT_NFC",
1300
+ "ERR_PATH_RESERVED_NAME",
1301
+ "ERR_PATH_INVALID_CHAR",
1302
+ "ERR_PATH_CASE_COLLISION",
1303
+ "ERR_SYMLINK_IN_PATH",
1304
+ "ERR_CONTAINMENT",
1305
+ "ERR_TARGET_TYPE",
1306
+ "ERR_EXISTS",
1307
+ "ERR_NOT_FOUND",
1308
+ "ERR_BLOB_MISSING",
1309
+ "ERR_DIGEST_FORMAT",
1310
+ "ERR_DIGEST_MISMATCH",
1311
+ "ERR_SIZE_MISMATCH",
1312
+ "ERR_BLOB_TOO_LARGE",
1313
+ "ERR_BUNDLE_TOO_LARGE",
1314
+ "ERR_LOCKED",
1315
+ "ERR_ROOT_NOT_ALLOWED",
1316
+ "ERR_ROOT_REQUIRED",
1317
+ "ERR_ROOT_NOT_DIR",
1318
+ "ERR_CONFIRM_DIGEST_MISMATCH",
1319
+ "ERR_CHECKS_FAILED",
1320
+ "ERR_PREIMAGE_CHANGED",
1321
+ "ERR_JOURNAL_CORRUPT",
1322
+ "ERR_EBUSY",
1323
+ "ERR_INVALID_PLAN",
1324
+ "ERR_INVALID_MANIFEST",
1325
+ "ERR_INVALID_PROFILE",
1326
+ "ERR_PREDICATE_UNKNOWN",
1327
+ "ERR_PREDICATE_PARAMS",
1328
+ "ERR_PROVIDER_FAILED",
1329
+ "ERR_GUARD_TIMEOUT",
1330
+ "ERR_GUARD_OUTPUT",
1331
+ "ERR_SIGNATURE_MISSING",
1332
+ "ERR_SIGNATURE_INVALID",
1333
+ "ERR_ROLLBACK",
1334
+ "ERR_EMITTER_UNKNOWN",
1335
+ "ERR_TEMPLATE_UNKNOWN",
1336
+ "ERR_TEMPLATE_PARAMS",
1337
+ "ERR_GIT_NOT_FOUND",
1338
+ "ERR_GIT_NOT_REPO",
1339
+ "ERR_GIT_DIRTY",
1340
+ "ERR_GIT_BRANCH_EXISTS",
1341
+ "ERR_GIT_BRANCH_INVALID",
1342
+ "ERR_GIT_FAILED",
1343
+ "ERR_REF_OFFLINE",
1344
+ "ERR_NET_DISABLED",
1345
+ "ERR_NET_DENIED",
1346
+ "ERR_NET_FAILED",
1347
+ "ERR_NOT_CANONICAL",
1348
+ "ERR_UNSUPPORTED_OP",
1349
+ "ERR_INTERNAL"
1350
+ ]
1351
+ },
1352
+ "message": {
1353
+ "type": "string"
1354
+ },
1355
+ "path": {
1356
+ "type": "string",
1357
+ "minLength": 1,
1358
+ "maxLength": 1024,
1359
+ "description": "Relative POSIX path, NFC, no reserved names"
1360
+ }
1361
+ },
1362
+ "required": [
1363
+ "code",
1364
+ "message"
1365
+ ],
1366
+ "additionalProperties": false
1367
+ }
1368
+ },
1369
+ "required": [
1370
+ "apiVersion",
1371
+ "kind",
1372
+ "manifestDigest",
1373
+ "mode",
1374
+ "status",
1375
+ "root",
1376
+ "files"
1377
+ ],
1378
+ "additionalProperties": false
1379
+ }
1380
+ },
1381
+ {
1382
+ "name": "axiom_rollback",
1383
+ "description": "Replay the journal of a committed/committing manifest in reverse: restore backups, remove created files, drop the applied marker.",
1384
+ "riskClass": "SENSITIVE",
1385
+ "annotations": {
1386
+ "readOnlyHint": false,
1387
+ "destructiveHint": true,
1388
+ "idempotentHint": true,
1389
+ "openWorldHint": false
1390
+ },
1391
+ "inputSchema": {
1392
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
1393
+ "type": "object",
1394
+ "properties": {
1395
+ "root": {
1396
+ "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
1397
+ "type": "string"
1398
+ },
1399
+ "manifestDigest": {
1400
+ "type": "string",
1401
+ "description": "`sha256:<hex>` (or bare hex) of the manifest to roll back"
1402
+ }
1403
+ },
1404
+ "required": [
1405
+ "manifestDigest"
1406
+ ]
1407
+ },
1408
+ "outputSchema": {
1409
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
1410
+ "type": "object",
1411
+ "properties": {
1412
+ "manifestDigest": {
1413
+ "type": "string",
1414
+ "pattern": "^sha256:[a-f0-9]{64}$",
1415
+ "description": "sha256:<64 lowercase hex>"
1416
+ },
1417
+ "status": {
1418
+ "type": "string",
1419
+ "const": "rolled-back"
1420
+ },
1421
+ "phase": {
1422
+ "type": "string",
1423
+ "enum": [
1424
+ "staged",
1425
+ "committing",
1426
+ "committed",
1427
+ "rolling-back",
1428
+ "rolled-back"
1429
+ ]
1430
+ },
1431
+ "steps": {
1432
+ "type": "integer",
1433
+ "minimum": 0,
1434
+ "maximum": 9007199254740991
1435
+ },
1436
+ "root": {
1437
+ "type": "string"
1438
+ }
1439
+ },
1440
+ "required": [
1441
+ "manifestDigest",
1442
+ "status",
1443
+ "phase",
1444
+ "steps",
1445
+ "root"
1446
+ ]
1447
+ }
1448
+ },
1449
+ {
1450
+ "name": "axiom_manifest_diff",
1451
+ "description": "Compare two manifests by artifact path and digest. Each side is a ManifestBundle or a `sha256:<hex>` reference to a bundle stored under an allowlisted root.",
1452
+ "riskClass": "READ",
1453
+ "annotations": {
1454
+ "readOnlyHint": true,
1455
+ "destructiveHint": false,
1456
+ "idempotentHint": true,
1457
+ "openWorldHint": false
1458
+ },
1459
+ "inputSchema": {
1460
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
1461
+ "type": "object",
1462
+ "properties": {
1463
+ "a": {
1464
+ "anyOf": [
1465
+ {
1466
+ "type": "string",
1467
+ "pattern": "^sha256:[a-f0-9]{64}$",
1468
+ "description": "sha256:<64 lowercase hex>"
1469
+ },
1470
+ {
1471
+ "type": "object",
1472
+ "propertyNames": {
1473
+ "type": "string"
1474
+ },
1475
+ "additionalProperties": {}
1476
+ }
1477
+ ],
1478
+ "description": "A ManifestBundle object, or `sha256:<hex>` of a bundle stored under <root>/.axiom/manifests"
1479
+ },
1480
+ "b": {
1481
+ "anyOf": [
1482
+ {
1483
+ "type": "string",
1484
+ "pattern": "^sha256:[a-f0-9]{64}$",
1485
+ "description": "sha256:<64 lowercase hex>"
1486
+ },
1487
+ {
1488
+ "type": "object",
1489
+ "propertyNames": {
1490
+ "type": "string"
1491
+ },
1492
+ "additionalProperties": {}
1493
+ }
1494
+ ],
1495
+ "description": "A ManifestBundle object, or `sha256:<hex>` of a bundle stored under <root>/.axiom/manifests"
1496
+ }
1497
+ },
1498
+ "required": [
1499
+ "a",
1500
+ "b"
1501
+ ]
1502
+ },
1503
+ "outputSchema": {
1504
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
1505
+ "type": "object",
1506
+ "properties": {
1507
+ "added": {
1508
+ "type": "array",
1509
+ "items": {
1510
+ "type": "string"
1511
+ }
1512
+ },
1513
+ "removed": {
1514
+ "type": "array",
1515
+ "items": {
1516
+ "type": "string"
1517
+ }
1518
+ },
1519
+ "changed": {
1520
+ "type": "array",
1521
+ "items": {
1522
+ "type": "object",
1523
+ "properties": {
1524
+ "path": {
1525
+ "type": "string"
1526
+ },
1527
+ "from": {
1528
+ "type": [
1529
+ "string",
1530
+ "null"
1531
+ ]
1532
+ },
1533
+ "to": {
1534
+ "type": [
1535
+ "string",
1536
+ "null"
1537
+ ]
1538
+ }
1539
+ },
1540
+ "required": [
1541
+ "path",
1542
+ "from",
1543
+ "to"
1544
+ ]
1545
+ }
1546
+ }
1547
+ },
1548
+ "required": [
1549
+ "added",
1550
+ "removed",
1551
+ "changed"
1552
+ ]
1553
+ }
1554
+ },
1555
+ {
1556
+ "name": "axiom_axm_parse",
1557
+ "description": "Parse .axm v2 text into a Plan with 1-based {line, column} diagnostics; `plan` is present only when error-free. Read-only.",
1558
+ "riskClass": "READ",
1559
+ "annotations": {
1560
+ "readOnlyHint": true,
1561
+ "destructiveHint": false,
1562
+ "idempotentHint": true,
1563
+ "openWorldHint": false
1564
+ },
1565
+ "inputSchema": {
1566
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
1567
+ "type": "object",
1568
+ "properties": {
1569
+ "source": {
1570
+ "type": "string",
1571
+ "description": ".axm source text"
1572
+ }
1573
+ },
1574
+ "required": [
1575
+ "source"
1576
+ ]
1577
+ },
1578
+ "outputSchema": {
1579
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
1580
+ "type": "object",
1581
+ "properties": {
1582
+ "plan": {
1583
+ "type": "object",
1584
+ "properties": {
1585
+ "apiVersion": {
1586
+ "type": "string",
1587
+ "const": "axiom.dev/v2"
1588
+ },
1589
+ "kind": {
1590
+ "type": "string",
1591
+ "const": "Plan"
1592
+ },
1593
+ "name": {
1594
+ "type": "string",
1595
+ "pattern": "^[a-z0-9][a-z0-9-]{0,63}$"
1596
+ },
1597
+ "intent": {
1598
+ "type": "string",
1599
+ "maxLength": 2000
1600
+ },
1601
+ "profile": {
1602
+ "default": "default",
1603
+ "type": "string",
1604
+ "minLength": 1
1605
+ },
1606
+ "capabilities": {
1607
+ "default": [],
1608
+ "type": "array",
1609
+ "items": {
1610
+ "type": "string",
1611
+ "enum": [
1612
+ "fs",
1613
+ "net",
1614
+ "secret",
1615
+ "ai",
1616
+ "compute",
1617
+ "git"
1618
+ ]
1619
+ }
1620
+ },
1621
+ "artifacts": {
1622
+ "minItems": 1,
1623
+ "maxItems": 2000,
1624
+ "type": "array",
1625
+ "items": {
1626
+ "type": "object",
1627
+ "properties": {
1628
+ "path": {
1629
+ "type": "string",
1630
+ "minLength": 1,
1631
+ "maxLength": 1024,
1632
+ "description": "Relative POSIX path, NFC, no reserved names"
1633
+ },
1634
+ "mode": {
1635
+ "default": "0644",
1636
+ "type": "string",
1637
+ "enum": [
1638
+ "0644",
1639
+ "0755"
1640
+ ]
1641
+ },
1642
+ "op": {
1643
+ "default": "create",
1644
+ "type": "string",
1645
+ "enum": [
1646
+ "create",
1647
+ "overwrite",
1648
+ "delete"
1649
+ ]
1650
+ },
1651
+ "source": {
1652
+ "oneOf": [
1653
+ {
1654
+ "type": "object",
1655
+ "properties": {
1656
+ "type": {
1657
+ "type": "string",
1658
+ "const": "inline"
1659
+ },
1660
+ "content": {
1661
+ "type": "string",
1662
+ "maxLength": 262144
1663
+ },
1664
+ "encoding": {
1665
+ "default": "utf8",
1666
+ "type": "string",
1667
+ "enum": [
1668
+ "utf8",
1669
+ "base64"
1670
+ ]
1671
+ }
1672
+ },
1673
+ "required": [
1674
+ "type",
1675
+ "content"
1676
+ ],
1677
+ "additionalProperties": false
1678
+ },
1679
+ {
1680
+ "type": "object",
1681
+ "properties": {
1682
+ "type": {
1683
+ "type": "string",
1684
+ "const": "cas"
1685
+ },
1686
+ "digest": {
1687
+ "type": "string",
1688
+ "pattern": "^sha256:[a-f0-9]{64}$",
1689
+ "description": "sha256:<64 lowercase hex>"
1690
+ }
1691
+ },
1692
+ "required": [
1693
+ "type",
1694
+ "digest"
1695
+ ],
1696
+ "additionalProperties": false
1697
+ },
1698
+ {
1699
+ "type": "object",
1700
+ "properties": {
1701
+ "type": {
1702
+ "type": "string",
1703
+ "const": "ref"
1704
+ },
1705
+ "uri": {
1706
+ "type": "string",
1707
+ "format": "uri"
1708
+ },
1709
+ "digest": {
1710
+ "type": "string",
1711
+ "pattern": "^sha256:[a-f0-9]{64}$",
1712
+ "description": "sha256:<64 lowercase hex>"
1713
+ }
1714
+ },
1715
+ "required": [
1716
+ "type",
1717
+ "uri",
1718
+ "digest"
1719
+ ],
1720
+ "additionalProperties": false
1721
+ },
1722
+ {
1723
+ "type": "object",
1724
+ "properties": {
1725
+ "type": {
1726
+ "type": "string",
1727
+ "const": "template"
1728
+ },
1729
+ "emitter": {
1730
+ "type": "string",
1731
+ "minLength": 1
1732
+ },
1733
+ "template": {
1734
+ "type": "string",
1735
+ "minLength": 1
1736
+ },
1737
+ "params": {
1738
+ "default": {},
1739
+ "type": "object",
1740
+ "propertyNames": {
1741
+ "type": "string"
1742
+ },
1743
+ "additionalProperties": {
1744
+ "$ref": "#/$defs/__schema0"
1745
+ }
1746
+ }
1747
+ },
1748
+ "required": [
1749
+ "type",
1750
+ "emitter",
1751
+ "template"
1752
+ ],
1753
+ "additionalProperties": false,
1754
+ "description": "v2.1"
1755
+ }
1756
+ ]
1757
+ }
1758
+ },
1759
+ "required": [
1760
+ "path"
1761
+ ],
1762
+ "additionalProperties": false
1763
+ }
1764
+ },
1765
+ "checks": {
1766
+ "default": [],
1767
+ "type": "array",
1768
+ "items": {
1769
+ "type": "object",
1770
+ "properties": {
1771
+ "id": {
1772
+ "type": "string",
1773
+ "minLength": 1,
1774
+ "maxLength": 128
1775
+ },
1776
+ "predicate": {
1777
+ "type": "string",
1778
+ "pattern": "^[a-z][a-zA-Z0-9]*\\.[a-zA-Z][a-zA-Z0-9]*$"
1779
+ },
1780
+ "params": {
1781
+ "$ref": "#/$defs/__schema1"
1782
+ },
1783
+ "severity": {
1784
+ "default": "error",
1785
+ "type": "string",
1786
+ "enum": [
1787
+ "error",
1788
+ "warn",
1789
+ "info"
1790
+ ]
1791
+ }
1792
+ },
1793
+ "required": [
1794
+ "id",
1795
+ "predicate",
1796
+ "params"
1797
+ ],
1798
+ "additionalProperties": false
1799
+ }
1800
+ },
1801
+ "counter": {
1802
+ "type": "integer",
1803
+ "minimum": 0,
1804
+ "maximum": 9007199254740991
1805
+ },
1806
+ "metadata": {
1807
+ "default": {},
1808
+ "type": "object",
1809
+ "propertyNames": {
1810
+ "type": "string"
1811
+ },
1812
+ "additionalProperties": {
1813
+ "$ref": "#/$defs/__schema2"
1814
+ }
1815
+ }
1816
+ },
1817
+ "required": [
1818
+ "apiVersion",
1819
+ "kind",
1820
+ "name",
1821
+ "intent",
1822
+ "artifacts"
1823
+ ],
1824
+ "additionalProperties": false
1825
+ },
1826
+ "diagnostics": {
1827
+ "type": "array",
1828
+ "items": {
1829
+ "type": "object",
1830
+ "properties": {
1831
+ "severity": {
1832
+ "type": "string",
1833
+ "enum": [
1834
+ "error",
1835
+ "warning"
1836
+ ]
1837
+ },
1838
+ "code": {
1839
+ "type": "string",
1840
+ "enum": [
1841
+ "ERR_PATH_NOT_RELATIVE_POSIX",
1842
+ "ERR_PATH_SEGMENT",
1843
+ "ERR_PATH_NOT_NFC",
1844
+ "ERR_PATH_RESERVED_NAME",
1845
+ "ERR_PATH_INVALID_CHAR",
1846
+ "ERR_PATH_CASE_COLLISION",
1847
+ "ERR_SYMLINK_IN_PATH",
1848
+ "ERR_CONTAINMENT",
1849
+ "ERR_TARGET_TYPE",
1850
+ "ERR_EXISTS",
1851
+ "ERR_NOT_FOUND",
1852
+ "ERR_BLOB_MISSING",
1853
+ "ERR_DIGEST_FORMAT",
1854
+ "ERR_DIGEST_MISMATCH",
1855
+ "ERR_SIZE_MISMATCH",
1856
+ "ERR_BLOB_TOO_LARGE",
1857
+ "ERR_BUNDLE_TOO_LARGE",
1858
+ "ERR_LOCKED",
1859
+ "ERR_ROOT_NOT_ALLOWED",
1860
+ "ERR_ROOT_REQUIRED",
1861
+ "ERR_ROOT_NOT_DIR",
1862
+ "ERR_CONFIRM_DIGEST_MISMATCH",
1863
+ "ERR_CHECKS_FAILED",
1864
+ "ERR_PREIMAGE_CHANGED",
1865
+ "ERR_JOURNAL_CORRUPT",
1866
+ "ERR_EBUSY",
1867
+ "ERR_INVALID_PLAN",
1868
+ "ERR_INVALID_MANIFEST",
1869
+ "ERR_INVALID_PROFILE",
1870
+ "ERR_PREDICATE_UNKNOWN",
1871
+ "ERR_PREDICATE_PARAMS",
1872
+ "ERR_PROVIDER_FAILED",
1873
+ "ERR_GUARD_TIMEOUT",
1874
+ "ERR_GUARD_OUTPUT",
1875
+ "ERR_SIGNATURE_MISSING",
1876
+ "ERR_SIGNATURE_INVALID",
1877
+ "ERR_ROLLBACK",
1878
+ "ERR_EMITTER_UNKNOWN",
1879
+ "ERR_TEMPLATE_UNKNOWN",
1880
+ "ERR_TEMPLATE_PARAMS",
1881
+ "ERR_GIT_NOT_FOUND",
1882
+ "ERR_GIT_NOT_REPO",
1883
+ "ERR_GIT_DIRTY",
1884
+ "ERR_GIT_BRANCH_EXISTS",
1885
+ "ERR_GIT_BRANCH_INVALID",
1886
+ "ERR_GIT_FAILED",
1887
+ "ERR_REF_OFFLINE",
1888
+ "ERR_NET_DISABLED",
1889
+ "ERR_NET_DENIED",
1890
+ "ERR_NET_FAILED",
1891
+ "ERR_NOT_CANONICAL",
1892
+ "ERR_UNSUPPORTED_OP",
1893
+ "ERR_INTERNAL"
1894
+ ]
1895
+ },
1896
+ "message": {
1897
+ "type": "string"
1898
+ },
1899
+ "range": {
1900
+ "type": "object",
1901
+ "properties": {
1902
+ "start": {
1903
+ "type": "object",
1904
+ "properties": {
1905
+ "line": {
1906
+ "type": "integer",
1907
+ "exclusiveMinimum": 0,
1908
+ "maximum": 9007199254740991
1909
+ },
1910
+ "column": {
1911
+ "type": "integer",
1912
+ "exclusiveMinimum": 0,
1913
+ "maximum": 9007199254740991
1914
+ }
1915
+ },
1916
+ "required": [
1917
+ "line",
1918
+ "column"
1919
+ ]
1920
+ },
1921
+ "end": {
1922
+ "type": "object",
1923
+ "properties": {
1924
+ "line": {
1925
+ "type": "integer",
1926
+ "exclusiveMinimum": 0,
1927
+ "maximum": 9007199254740991
1928
+ },
1929
+ "column": {
1930
+ "type": "integer",
1931
+ "exclusiveMinimum": 0,
1932
+ "maximum": 9007199254740991
1933
+ }
1934
+ },
1935
+ "required": [
1936
+ "line",
1937
+ "column"
1938
+ ]
1939
+ }
1940
+ },
1941
+ "required": [
1942
+ "start",
1943
+ "end"
1944
+ ]
1945
+ }
1946
+ },
1947
+ "required": [
1948
+ "severity",
1949
+ "code",
1950
+ "message",
1951
+ "range"
1952
+ ]
1953
+ }
1954
+ }
1955
+ },
1956
+ "required": [
1957
+ "diagnostics"
1958
+ ],
1959
+ "$defs": {
1960
+ "__schema0": {
1961
+ "anyOf": [
1962
+ {
1963
+ "type": "string"
1964
+ },
1965
+ {
1966
+ "type": "number"
1967
+ },
1968
+ {
1969
+ "type": "boolean"
1970
+ },
1971
+ {
1972
+ "type": "null"
1973
+ },
1974
+ {
1975
+ "type": "array",
1976
+ "items": {
1977
+ "$ref": "#/$defs/__schema0"
1978
+ }
1979
+ },
1980
+ {
1981
+ "type": "object",
1982
+ "propertyNames": {
1983
+ "type": "string"
1984
+ },
1985
+ "additionalProperties": {
1986
+ "$ref": "#/$defs/__schema0"
1987
+ }
1988
+ }
1989
+ ]
1990
+ },
1991
+ "__schema1": {
1992
+ "anyOf": [
1993
+ {
1994
+ "type": "string"
1995
+ },
1996
+ {
1997
+ "type": "number"
1998
+ },
1999
+ {
2000
+ "type": "boolean"
2001
+ },
2002
+ {
2003
+ "type": "null"
2004
+ },
2005
+ {
2006
+ "type": "array",
2007
+ "items": {
2008
+ "$ref": "#/$defs/__schema1"
2009
+ }
2010
+ },
2011
+ {
2012
+ "type": "object",
2013
+ "propertyNames": {
2014
+ "type": "string"
2015
+ },
2016
+ "additionalProperties": {
2017
+ "$ref": "#/$defs/__schema1"
2018
+ }
2019
+ }
2020
+ ]
2021
+ },
2022
+ "__schema2": {
2023
+ "anyOf": [
2024
+ {
2025
+ "type": "string"
2026
+ },
2027
+ {
2028
+ "type": "number"
2029
+ },
2030
+ {
2031
+ "type": "boolean"
2032
+ },
2033
+ {
2034
+ "type": "null"
2035
+ },
2036
+ {
2037
+ "type": "array",
2038
+ "items": {
2039
+ "$ref": "#/$defs/__schema2"
2040
+ }
2041
+ },
2042
+ {
2043
+ "type": "object",
2044
+ "propertyNames": {
2045
+ "type": "string"
2046
+ },
2047
+ "additionalProperties": {
2048
+ "$ref": "#/$defs/__schema2"
2049
+ }
2050
+ }
2051
+ ]
2052
+ }
2053
+ }
2054
+ }
2055
+ },
2056
+ {
2057
+ "name": "axiom_roots_list",
2058
+ "description": "The frozen set of roots this server may read and write, as given by --root at startup.",
2059
+ "riskClass": "READ",
2060
+ "annotations": {
2061
+ "readOnlyHint": true,
2062
+ "destructiveHint": false,
2063
+ "idempotentHint": true,
2064
+ "openWorldHint": false
2065
+ },
2066
+ "inputSchema": {
2067
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
2068
+ "type": "object",
2069
+ "properties": {}
2070
+ },
2071
+ "outputSchema": {
2072
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
2073
+ "type": "object",
2074
+ "properties": {
2075
+ "roots": {
2076
+ "type": "array",
2077
+ "items": {
2078
+ "type": "object",
2079
+ "properties": {
2080
+ "path": {
2081
+ "type": "string"
2082
+ },
2083
+ "writable": {
2084
+ "type": "boolean"
2085
+ },
2086
+ "hasGit": {
2087
+ "type": "boolean"
2088
+ }
2089
+ },
2090
+ "required": [
2091
+ "path",
2092
+ "writable",
2093
+ "hasGit"
2094
+ ]
2095
+ }
2096
+ }
2097
+ },
2098
+ "required": [
2099
+ "roots"
2100
+ ]
2101
+ }
2102
+ },
2103
+ {
2104
+ "name": "axiom_repo_snapshot",
2105
+ "description": "Deterministic, content-addressed inventory of a root: every regular file (and symlink) as { path, bytes, sha256, mode, kind }, sorted by code point, with snapshotDigest = sha256(JCS(body)). No timestamps, no absolute paths — the same tree gives the same digest on every machine. Honours the root .gitignore, always skips .git/ and .axiom/, never follows symlinks, never leaves the root. Use it to build Plans against real pre-image digests, or diff two snapshots with `axiom snapshot-diff`.",
2106
+ "riskClass": "READ",
2107
+ "annotations": {
2108
+ "readOnlyHint": true,
2109
+ "destructiveHint": false,
2110
+ "idempotentHint": true,
2111
+ "openWorldHint": false
2112
+ },
2113
+ "inputSchema": {
2114
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
2115
+ "type": "object",
2116
+ "properties": {
2117
+ "root": {
2118
+ "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
2119
+ "type": "string"
2120
+ },
2121
+ "include": {
2122
+ "description": "Relative globs (*, **, ?) to keep; default everything",
2123
+ "type": "array",
2124
+ "items": {
2125
+ "type": "string",
2126
+ "minLength": 1
2127
+ }
2128
+ },
2129
+ "exclude": {
2130
+ "description": "Relative globs to drop",
2131
+ "type": "array",
2132
+ "items": {
2133
+ "type": "string",
2134
+ "minLength": 1
2135
+ }
2136
+ },
2137
+ "maxFiles": {
2138
+ "default": 20000,
2139
+ "description": "Stop after this many files (cap 50000); sets truncated",
2140
+ "type": "integer",
2141
+ "minimum": 1,
2142
+ "maximum": 50000
2143
+ },
2144
+ "maxBytes": {
2145
+ "default": 67108864,
2146
+ "description": "Stop once the summed size would exceed this; sets truncated",
2147
+ "type": "integer",
2148
+ "minimum": 0,
2149
+ "maximum": 9007199254740991
2150
+ },
2151
+ "followSymlinks": {
2152
+ "default": false,
2153
+ "description": "Always false; symlinks are recorded, never followed",
2154
+ "type": "boolean",
2155
+ "const": false
2156
+ },
2157
+ "respectGitignore": {
2158
+ "default": true,
2159
+ "type": "boolean"
2160
+ },
2161
+ "withContentDigest": {
2162
+ "default": true,
2163
+ "description": "false → sizes only, no sha256",
2164
+ "type": "boolean"
2165
+ }
2166
+ }
2167
+ },
2168
+ "outputSchema": {
2169
+ "$schema": "https://json-schema.org/draft/2020-12/schema",
2170
+ "type": "object",
2171
+ "properties": {
2172
+ "apiVersion": {
2173
+ "type": "string",
2174
+ "const": "axiom.dev/v2"
2175
+ },
2176
+ "kind": {
2177
+ "type": "string",
2178
+ "const": "RepoSnapshot"
2179
+ },
2180
+ "root": {
2181
+ "type": "object",
2182
+ "properties": {
2183
+ "kind": {
2184
+ "type": "string",
2185
+ "const": "relative"
2186
+ }
2187
+ },
2188
+ "required": [
2189
+ "kind"
2190
+ ],
2191
+ "additionalProperties": false
2192
+ },
2193
+ "snapshotDigest": {
2194
+ "type": "string",
2195
+ "pattern": "^sha256:[a-f0-9]{64}$",
2196
+ "description": "sha256:<64 lowercase hex>"
2197
+ },
2198
+ "body": {
2199
+ "type": "object",
2200
+ "properties": {
2201
+ "files": {
2202
+ "type": "array",
2203
+ "items": {
2204
+ "type": "object",
2205
+ "properties": {
2206
+ "path": {
2207
+ "type": "string",
2208
+ "minLength": 1,
2209
+ "maxLength": 1024,
2210
+ "description": "Relative POSIX path, NFC, no reserved names"
2211
+ },
2212
+ "bytes": {
2213
+ "type": "integer",
2214
+ "minimum": 0,
2215
+ "maximum": 9007199254740991
2216
+ },
2217
+ "sha256": {
2218
+ "type": "string",
2219
+ "pattern": "^[a-f0-9]{64}$",
2220
+ "description": "Lowercase hex-encoded sha256"
2221
+ },
2222
+ "mode": {
2223
+ "type": "string",
2224
+ "enum": [
2225
+ "0644",
2226
+ "0755"
2227
+ ]
2228
+ },
2229
+ "kind": {
2230
+ "type": "string",
2231
+ "enum": [
2232
+ "file",
2233
+ "symlink"
2234
+ ]
2235
+ }
2236
+ },
2237
+ "required": [
2238
+ "path",
2239
+ "bytes",
2240
+ "mode",
2241
+ "kind"
2242
+ ],
2243
+ "additionalProperties": false
2244
+ }
2245
+ },
2246
+ "truncated": {
2247
+ "type": "boolean"
2248
+ },
2249
+ "counts": {
2250
+ "type": "object",
2251
+ "properties": {
2252
+ "files": {
2253
+ "type": "integer",
2254
+ "minimum": 0,
2255
+ "maximum": 9007199254740991
2256
+ },
2257
+ "bytes": {
2258
+ "type": "integer",
2259
+ "minimum": 0,
2260
+ "maximum": 9007199254740991
2261
+ }
2262
+ },
2263
+ "required": [
2264
+ "files",
2265
+ "bytes"
2266
+ ],
2267
+ "additionalProperties": false
2268
+ }
2269
+ },
2270
+ "required": [
2271
+ "files",
2272
+ "truncated",
2273
+ "counts"
2274
+ ],
2275
+ "additionalProperties": false
2276
+ }
2277
+ },
2278
+ "required": [
2279
+ "apiVersion",
2280
+ "kind",
2281
+ "root",
2282
+ "snapshotDigest",
2283
+ "body"
2284
+ ],
2285
+ "additionalProperties": false
2286
+ }
2287
+ }
2288
+ ]