@codai/axiom-mcp 2.0.0 → 2.1.0

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@codai/axiom-mcp",
-  "version": "2.0.0",
+  "mcpName": "io.github.dragoscv/axiom",
+  "version": "2.1.0",
   "description": "AXIOM v2 MCP server (stdio) and CLI: validate, compile, check and transactionally apply content-addressed manifest bundles inside an allowlisted set of roots",
   "license": "MIT",
   "author": "Dragos Catalin Vladulescu",
@@ -44,12 +45,13 @@
     "README.md"
   ],
   "dependencies": {
-    "@codai/axiom-apply": "2.0.0",
-    "@codai/axiom-axm": "2.0.0",
-    "@codai/axiom-canon": "2.0.0",
-    "@codai/axiom-checks": "2.0.0",
-    "@codai/axiom-plan": "2.0.0",
-    "@codai/axiom-schema": "2.0.0",
+    "@codai/axiom-apply": "2.1.0",
+    "@codai/axiom-axm": "2.1.0",
+    "@codai/axiom-canon": "2.1.0",
+    "@codai/axiom-checks": "2.1.0",
+    "@codai/axiom-emitters-web": "2.1.0",
+    "@codai/axiom-plan": "2.1.0",
+    "@codai/axiom-schema": "2.1.0",
     "@modelcontextprotocol/sdk": "1.30.0",
     "zod": "4.6.5"
   },

package/spec/codai-tools.json

@@ -26,7 +26,7 @@
     {
       "name": "axiom_plan_compile",
       "risk": "ACT",
-      "description": "Compile a Plan into a content-addressed ManifestBundle (sorted artifacts, sha256 digests, in-toto planDigest). `store: cas` writes blobs under <root>/.axiom/cas instead of inlining them. When a root is given the bundle is stored under <root>/.axiom/manifests/<hex>.json so later tools can reference it by digest.",
+      "description": "Compile a Plan into a content-addressed ManifestBundle (sorted artifacts, sha256 digests, in-toto planDigest). `store: cas` writes blobs under <root>/.axiom/cas instead of inlining them. When a root is given the bundle is stored under <root>/.axiom/manifests/<hex>.json so later tools can reference it by digest. `template` sources are rendered by the built-in `web` emitter (see `axiom emitters`); its version is recorded in toolchain.emitters.",
       "parameters": {
         "type": "object",
         "properties": {
@@ -59,7 +59,7 @@
     {
       "name": "axiom_manifest_verify",
       "risk": "READ",
-      "description": "Structural and content-address verification: schema, recomputed manifestDigest, every inline blob hashes to its key, attestation subject matches. Never writes.",
+      "description": "Structural and content-address verification: schema, recomputed manifestDigest, every inline blob hashes to its key, attestation subject matches. When a root with .axiom/trust/keys.json is available, detached DSSE signatures are verified and the trusted keyids are reported under `signatures`. Never writes.",
       "parameters": {
         "type": "object",
         "properties": {
@@ -70,6 +70,10 @@
             },
             "additionalProperties": {},
             "description": "ManifestBundle"
+          },
+          "root": {
+            "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+            "type": "string"
           }
         },
         "required": [
@@ -278,6 +282,65 @@
         "type": "object",
         "properties": {}
       }
+    },
+    {
+      "name": "axiom_repo_snapshot",
+      "risk": "READ",
+      "description": "Deterministic, content-addressed inventory of a root: every regular file (and symlink) as { path, bytes, sha256, mode, kind }, sorted by code point, with snapshotDigest = sha256(JCS(body)). No timestamps, no absolute paths — the same tree gives the same digest on every machine. Honours the root .gitignore, always skips .git/ and .axiom/, never follows symlinks, never leaves the root. Use it to build Plans against real pre-image digests, or diff two snapshots with `axiom snapshot-diff`.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "root": {
+            "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+            "type": "string"
+          },
+          "include": {
+            "description": "Relative globs (*, **, ?) to keep; default everything",
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "exclude": {
+            "description": "Relative globs to drop",
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "maxFiles": {
+            "default": 20000,
+            "description": "Stop after this many files (cap 50000); sets truncated",
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 50000
+          },
+          "maxBytes": {
+            "default": 67108864,
+            "description": "Stop once the summed size would exceed this; sets truncated",
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 9007199254740991
+          },
+          "followSymlinks": {
+            "default": false,
+            "description": "Always false; symlinks are recorded, never followed",
+            "type": "boolean",
+            "const": false
+          },
+          "respectGitignore": {
+            "default": true,
+            "type": "boolean"
+          },
+          "withContentDigest": {
+            "default": true,
+            "description": "false → sizes only, no sha256",
+            "type": "boolean"
+          }
+        }
+      }
     }
   ]
 }

package/spec/tools.json

@@ -68,7 +68,7 @@
   },
   {
     "name": "axiom_plan_compile",
-    "description": "Compile a Plan into a content-addressed ManifestBundle (sorted artifacts, sha256 digests, in-toto planDigest). `store: cas` writes blobs under <root>/.axiom/cas instead of inlining them. When a root is given the bundle is stored under <root>/.axiom/manifests/<hex>.json so later tools can reference it by digest.",
+    "description": "Compile a Plan into a content-addressed ManifestBundle (sorted artifacts, sha256 digests, in-toto planDigest). `store: cas` writes blobs under <root>/.axiom/cas instead of inlining them. When a root is given the bundle is stored under <root>/.axiom/manifests/<hex>.json so later tools can reference it by digest. `template` sources are rendered by the built-in `web` emitter (see `axiom emitters`); its version is recorded in toolchain.emitters.",
     "riskClass": "ACT",
     "annotations": {
       "readOnlyHint": false,
@@ -255,6 +255,11 @@
                 "emitters"
               ],
               "additionalProperties": false
+            },
+            "counter": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
             }
           },
           "required": [
@@ -374,6 +379,52 @@
           ],
           "additionalProperties": false
         },
+        "signatures": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "payloadType": {
+                "type": "string",
+                "const": "application/vnd.axiom.manifest+json"
+              },
+              "payload": {
+                "type": "string",
+                "format": "base64",
+                "contentEncoding": "base64",
+                "pattern": "^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$"
+              },
+              "signatures": {
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "keyid": {
+                      "type": "string"
+                    },
+                    "sig": {
+                      "type": "string",
+                      "format": "base64",
+                      "contentEncoding": "base64",
+                      "pattern": "^$|^(?:[0-9a-zA-Z+/]{4})*(?:(?:[0-9a-zA-Z+/]{2}==)|(?:[0-9a-zA-Z+/]{3}=))?$"
+                    }
+                  },
+                  "required": [
+                    "sig"
+                  ],
+                  "additionalProperties": false
+                }
+              }
+            },
+            "required": [
+              "payloadType",
+              "payload",
+              "signatures"
+            ],
+            "additionalProperties": false
+          }
+        },
         "blobs": {
           "default": {},
           "type": "object",
@@ -446,7 +497,7 @@
   },
   {
     "name": "axiom_manifest_verify",
-    "description": "Structural and content-address verification: schema, recomputed manifestDigest, every inline blob hashes to its key, attestation subject matches. Never writes.",
+    "description": "Structural and content-address verification: schema, recomputed manifestDigest, every inline blob hashes to its key, attestation subject matches. When a root with .axiom/trust/keys.json is available, detached DSSE signatures are verified and the trusted keyids are reported under `signatures`. Never writes.",
     "riskClass": "READ",
     "annotations": {
       "readOnlyHint": true,
@@ -465,6 +516,10 @@
           },
           "additionalProperties": {},
           "description": "ManifestBundle"
+        },
+        "root": {
+          "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+          "type": "string"
         }
       },
       "required": [
@@ -537,6 +592,12 @@
                   "ERR_PROVIDER_FAILED",
                   "ERR_GUARD_TIMEOUT",
                   "ERR_GUARD_OUTPUT",
+                  "ERR_SIGNATURE_MISSING",
+                  "ERR_SIGNATURE_INVALID",
+                  "ERR_ROLLBACK",
+                  "ERR_EMITTER_UNKNOWN",
+                  "ERR_TEMPLATE_UNKNOWN",
+                  "ERR_TEMPLATE_PARAMS",
                   "ERR_GIT_NOT_FOUND",
                   "ERR_GIT_NOT_REPO",
                   "ERR_GIT_DIRTY",
@@ -544,6 +605,9 @@
                   "ERR_GIT_BRANCH_INVALID",
                   "ERR_GIT_FAILED",
                   "ERR_REF_OFFLINE",
+                  "ERR_NET_DISABLED",
+                  "ERR_NET_DENIED",
+                  "ERR_NET_FAILED",
                   "ERR_NOT_CANONICAL",
                   "ERR_UNSUPPORTED_OP",
                   "ERR_INTERNAL"
@@ -561,6 +625,47 @@
               "message"
             ]
           }
+        },
+        "signatures": {
+          "type": "object",
+          "properties": {
+            "trustFile": {
+              "type": "string"
+            },
+            "keyids": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "findings": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "id": {
+                    "type": "string"
+                  },
+                  "message": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "id",
+                  "message"
+                ]
+              }
+            },
+            "ok": {
+              "type": "boolean"
+            }
+          },
+          "required": [
+            "trustFile",
+            "keyids",
+            "findings",
+            "ok"
+          ]
         }
       },
       "required": [
@@ -962,6 +1067,12 @@
                 "ERR_PROVIDER_FAILED",
                 "ERR_GUARD_TIMEOUT",
                 "ERR_GUARD_OUTPUT",
+                "ERR_SIGNATURE_MISSING",
+                "ERR_SIGNATURE_INVALID",
+                "ERR_ROLLBACK",
+                "ERR_EMITTER_UNKNOWN",
+                "ERR_TEMPLATE_UNKNOWN",
+                "ERR_TEMPLATE_PARAMS",
                 "ERR_GIT_NOT_FOUND",
                 "ERR_GIT_NOT_REPO",
                 "ERR_GIT_DIRTY",
@@ -969,6 +1080,9 @@
                 "ERR_GIT_BRANCH_INVALID",
                 "ERR_GIT_FAILED",
                 "ERR_REF_OFFLINE",
+                "ERR_NET_DISABLED",
+                "ERR_NET_DENIED",
+                "ERR_NET_FAILED",
                 "ERR_NOT_CANONICAL",
                 "ERR_UNSUPPORTED_OP",
                 "ERR_INTERNAL"
@@ -1214,6 +1328,12 @@
                 "ERR_PROVIDER_FAILED",
                 "ERR_GUARD_TIMEOUT",
                 "ERR_GUARD_OUTPUT",
+                "ERR_SIGNATURE_MISSING",
+                "ERR_SIGNATURE_INVALID",
+                "ERR_ROLLBACK",
+                "ERR_EMITTER_UNKNOWN",
+                "ERR_TEMPLATE_UNKNOWN",
+                "ERR_TEMPLATE_PARAMS",
                 "ERR_GIT_NOT_FOUND",
                 "ERR_GIT_NOT_REPO",
                 "ERR_GIT_DIRTY",
@@ -1221,6 +1341,9 @@
                 "ERR_GIT_BRANCH_INVALID",
                 "ERR_GIT_FAILED",
                 "ERR_REF_OFFLINE",
+                "ERR_NET_DISABLED",
+                "ERR_NET_DENIED",
+                "ERR_NET_FAILED",
                 "ERR_NOT_CANONICAL",
                 "ERR_UNSUPPORTED_OP",
                 "ERR_INTERNAL"
@@ -1675,6 +1798,11 @@
                 "additionalProperties": false
               }
             },
+            "counter": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 9007199254740991
+            },
             "metadata": {
               "default": {},
               "type": "object",
@@ -1744,6 +1872,12 @@
                   "ERR_PROVIDER_FAILED",
                   "ERR_GUARD_TIMEOUT",
                   "ERR_GUARD_OUTPUT",
+                  "ERR_SIGNATURE_MISSING",
+                  "ERR_SIGNATURE_INVALID",
+                  "ERR_ROLLBACK",
+                  "ERR_EMITTER_UNKNOWN",
+                  "ERR_TEMPLATE_UNKNOWN",
+                  "ERR_TEMPLATE_PARAMS",
                   "ERR_GIT_NOT_FOUND",
                   "ERR_GIT_NOT_REPO",
                   "ERR_GIT_DIRTY",
@@ -1751,6 +1885,9 @@
                   "ERR_GIT_BRANCH_INVALID",
                   "ERR_GIT_FAILED",
                   "ERR_REF_OFFLINE",
+                  "ERR_NET_DISABLED",
+                  "ERR_NET_DENIED",
+                  "ERR_NET_FAILED",
                   "ERR_NOT_CANONICAL",
                   "ERR_UNSUPPORTED_OP",
                   "ERR_INTERNAL"
@@ -1962,5 +2099,190 @@
         "roots"
       ]
     }
+  },
+  {
+    "name": "axiom_repo_snapshot",
+    "description": "Deterministic, content-addressed inventory of a root: every regular file (and symlink) as { path, bytes, sha256, mode, kind }, sorted by code point, with snapshotDigest = sha256(JCS(body)). No timestamps, no absolute paths — the same tree gives the same digest on every machine. Honours the root .gitignore, always skips .git/ and .axiom/, never follows symlinks, never leaves the root. Use it to build Plans against real pre-image digests, or diff two snapshots with `axiom snapshot-diff`.",
+    "riskClass": "READ",
+    "annotations": {
+      "readOnlyHint": true,
+      "destructiveHint": false,
+      "idempotentHint": true,
+      "openWorldHint": false
+    },
+    "inputSchema": {
+      "$schema": "https://json-schema.org/draft/2020-12/schema",
+      "type": "object",
+      "properties": {
+        "root": {
+          "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+          "type": "string"
+        },
+        "include": {
+          "description": "Relative globs (*, **, ?) to keep; default everything",
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "exclude": {
+          "description": "Relative globs to drop",
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "maxFiles": {
+          "default": 20000,
+          "description": "Stop after this many files (cap 50000); sets truncated",
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 50000
+        },
+        "maxBytes": {
+          "default": 67108864,
+          "description": "Stop once the summed size would exceed this; sets truncated",
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 9007199254740991
+        },
+        "followSymlinks": {
+          "default": false,
+          "description": "Always false; symlinks are recorded, never followed",
+          "type": "boolean",
+          "const": false
+        },
+        "respectGitignore": {
+          "default": true,
+          "type": "boolean"
+        },
+        "withContentDigest": {
+          "default": true,
+          "description": "false → sizes only, no sha256",
+          "type": "boolean"
+        }
+      }
+    },
+    "outputSchema": {
+      "$schema": "https://json-schema.org/draft/2020-12/schema",
+      "type": "object",
+      "properties": {
+        "apiVersion": {
+          "type": "string",
+          "const": "axiom.dev/v2"
+        },
+        "kind": {
+          "type": "string",
+          "const": "RepoSnapshot"
+        },
+        "root": {
+          "type": "object",
+          "properties": {
+            "kind": {
+              "type": "string",
+              "const": "relative"
+            }
+          },
+          "required": [
+            "kind"
+          ],
+          "additionalProperties": false
+        },
+        "snapshotDigest": {
+          "type": "string",
+          "pattern": "^sha256:[a-f0-9]{64}$",
+          "description": "sha256:<64 lowercase hex>"
+        },
+        "body": {
+          "type": "object",
+          "properties": {
+            "files": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "path": {
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 1024,
+                    "description": "Relative POSIX path, NFC, no reserved names"
+                  },
+                  "bytes": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 9007199254740991
+                  },
+                  "sha256": {
+                    "type": "string",
+                    "pattern": "^[a-f0-9]{64}$",
+                    "description": "Lowercase hex-encoded sha256"
+                  },
+                  "mode": {
+                    "type": "string",
+                    "enum": [
+                      "0644",
+                      "0755"
+                    ]
+                  },
+                  "kind": {
+                    "type": "string",
+                    "enum": [
+                      "file",
+                      "symlink"
+                    ]
+                  }
+                },
+                "required": [
+                  "path",
+                  "bytes",
+                  "mode",
+                  "kind"
+                ],
+                "additionalProperties": false
+              }
+            },
+            "truncated": {
+              "type": "boolean"
+            },
+            "counts": {
+              "type": "object",
+              "properties": {
+                "files": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 9007199254740991
+                },
+                "bytes": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 9007199254740991
+                }
+              },
+              "required": [
+                "files",
+                "bytes"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "required": [
+            "files",
+            "truncated",
+            "counts"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "apiVersion",
+        "kind",
+        "root",
+        "snapshotDigest",
+        "body"
+      ],
+      "additionalProperties": false
+    }
   }
 ]