@codai/axiom-mcp 2.0.0 → 2.1.0

package/dist/axm-lazy.js

@@ -5809,6 +5809,12 @@ const ERROR_CODES = [
 	"ERR_PROVIDER_FAILED",
 	"ERR_GUARD_TIMEOUT",
 	"ERR_GUARD_OUTPUT",
+	"ERR_SIGNATURE_MISSING",
+	"ERR_SIGNATURE_INVALID",
+	"ERR_ROLLBACK",
+	"ERR_EMITTER_UNKNOWN",
+	"ERR_TEMPLATE_UNKNOWN",
+	"ERR_TEMPLATE_PARAMS",
 	"ERR_GIT_NOT_FOUND",
 	"ERR_GIT_NOT_REPO",
 	"ERR_GIT_DIRTY",
@@ -5816,6 +5822,9 @@ const ERROR_CODES = [
 	"ERR_GIT_BRANCH_INVALID",
 	"ERR_GIT_FAILED",
 	"ERR_REF_OFFLINE",
+	"ERR_NET_DISABLED",
+	"ERR_NET_DENIED",
+	"ERR_NET_FAILED",
 	"ERR_NOT_CANONICAL",
 	"ERR_UNSUPPORTED_OP",
 	"ERR_INTERNAL"
@@ -5981,6 +5990,8 @@ const PlanSchema = object({
 	capabilities: array(CapabilitySchema).default([]),
 	artifacts: array(PlanArtifactSchema).min(1).max(2e3),
 	checks: array(CheckRefSchema).default([]),
+	/** Anti-rollback counter (D-16); copied verbatim into `ManifestBody.counter`. */
+	counter: int().nonnegative().optional(),
 	metadata: record(string(), json()).default({})
 }).strict();
 const ErrorCodeSchema = _enum(ERROR_CODES);
@@ -6120,7 +6131,12 @@ const ManifestBodySchema = object({
 	artifacts: array(ManifestArtifactSchema).min(1).max(2e3),
 	/** Sorted by id, unique (§2.4 determinism). */
 	checks: array(CheckRefSchema),
-	toolchain: ToolchainSchema
+	toolchain: ToolchainSchema,
+	/**
+	* Anti-rollback counter (D-16): monotonic per root, part of the canonical body so a
+	* signature binds it. Verified by `manifest.requireSigned { antiRollback: true }`.
+	*/
+	counter: int().nonnegative().optional()
 }).strict().superRefine((m, ctx) => {
 	if (!isSortedUnique(m.artifacts.map((a) => a.path))) ctx.addIssue({
 		code: "custom",
@@ -6155,7 +6171,7 @@ const InTotoStatementLooseSchema = object({
 	predicateType: url(),
 	predicate: record(string(), unknown())
 }).strict();
-/** DSSE envelope (secure-systems-lab/dsse v1.0.2). */
+/** DSSE envelope (secure-systems-lab/dsse v1.0.2) around an in-toto attestation. */
 const DsseEnvelopeSchema = object({
 	payloadType: literal("application/vnd.in-toto+json"),
 	payload: base64(),
@@ -6164,11 +6180,48 @@ const DsseEnvelopeSchema = object({
 		sig: base64()
 	}).strict())
 }).strict();
+/**
+* DSSE envelope whose payload is `base64(JCS(manifest))`, signed with Ed25519 (D-16).
+* Lives outside the canonical body: `manifestDigest` is unchanged whether signed or not.
+*/
+const ManifestSignatureSchema = object({
+	payloadType: literal("application/vnd.axiom.manifest+json"),
+	payload: base64(),
+	signatures: array(object({
+		keyid: string().optional(),
+		sig: base64()
+	}).strict()).min(1)
+}).strict();
+/** `.axiom/trust/keys.json` — the per-root allowlist of signing keys (D-16). */
+const TrustedKeySchema = object({
+	/** sha256(raw 32-byte public key), lowercase hex. */
+	keyid: string().regex(/^[0-9a-f]{64}$/),
+	alg: literal("ed25519"),
+	/** base64 of the raw 32-byte Ed25519 public key. */
+	publicKey: base64(),
+	name: string().min(1).max(200).optional(),
+	/** Lowest manifest `counter` this key may sign for. */
+	notBefore: int().nonnegative().optional()
+}).strict();
+object({
+	version: literal(1),
+	keys: array(TrustedKeySchema),
+	/** Floor for `counter` when no state has been recorded yet. */
+	minCounter: int().nonnegative().optional()
+}).strict();
+object({
+	version: literal(1),
+	lastCounter: int().nonnegative(),
+	/** Digest of the manifest that advanced `lastCounter` (informational). */
+	manifestDigest: DigestRefSchema.optional()
+}).strict();
 object({
 	manifest: ManifestBodySchema,
 	manifestDigest: DigestRefSchema,
 	attestation: InTotoStatementLooseSchema.optional(),
 	envelope: DsseEnvelopeSchema.optional(),
+	/** Detached DSSE signatures over `manifest` (D-16). Not part of `manifestDigest`. */
+	signatures: array(ManifestSignatureSchema).optional(),
 	/** Inline side-channel keyed by `sha256:<hex>`. */
 	blobs: record(DigestRefSchema, BlobSchema).default({})
 }).strict().superRefine((b, ctx) => {
@@ -6204,6 +6257,32 @@ object({
 	limits: ProfileLimitsSchema.default({}),
 	facts: ProfileFactsSchema.prefault({})
 }).strict();
+const RepoSnapshotEntryKindSchema = _enum(["file", "symlink"]);
+/** The hashed part: `snapshotDigest = sha256(JCS(body))`. No timestamps, no absolute paths. */
+const RepoSnapshotBodySchema = object({
+	/** Sorted by `compareUtf8(path)`. */
+	files: array(object({
+		path: RelPathSchema,
+		bytes: int().nonnegative(),
+		sha256: Sha256HexSchema.optional(),
+		mode: ArtifactModeSchema,
+		kind: RepoSnapshotEntryKindSchema
+	}).strict()),
+	/** True when `maxFiles` or `maxBytes` stopped the walk; `files` is then a prefix of the full order. */
+	truncated: boolean(),
+	counts: object({
+		files: int().nonnegative(),
+		bytes: int().nonnegative()
+	}).strict()
+}).strict();
+object({
+	apiVersion: ApiVersionSchema,
+	kind: literal("RepoSnapshot"),
+	/** Paths are relative to the walked root; the root itself is deliberately not recorded. */
+	root: object({ kind: literal("relative") }).strict(),
+	snapshotDigest: DigestRefSchema,
+	body: RepoSnapshotBodySchema
+}).strict();
 //#endregion
 //#region ../../node_modules/.pnpm/@chevrotain+utils@13.2.0/node_modules/@chevrotain/utils/lib/src/print.js
 function PRINT_ERROR(msg) {