@codai/axiom-mcp 2.0.0 → 2.1.0

package/dist/gate-lazy.js

@@ -4,6 +4,7 @@ import { readFile } from "node:fs/promises";
 import { cpus, homedir } from "node:os";
 import * as path from "node:path";
 import { parseArgs, promisify } from "node:util";
+import "node:crypto";
 import "node:child_process";
 var __create = Object.create;
 var __defProp = Object.defineProperty;
@@ -27,6 +28,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	enumerable: true
 }) : target, mod));
 new TextEncoder();
+Buffer.from("302a300506032b6570032100", "hex");
+Buffer.from("302e020100300506032b657004220420", "hex");
 function getEnumValues(entries) {
 	const numericValues = Object.values(entries).filter((v) => typeof v === "number");
 	return Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
@@ -5677,6 +5680,12 @@ const ERROR_CODES = [
 	"ERR_PROVIDER_FAILED",
 	"ERR_GUARD_TIMEOUT",
 	"ERR_GUARD_OUTPUT",
+	"ERR_SIGNATURE_MISSING",
+	"ERR_SIGNATURE_INVALID",
+	"ERR_ROLLBACK",
+	"ERR_EMITTER_UNKNOWN",
+	"ERR_TEMPLATE_UNKNOWN",
+	"ERR_TEMPLATE_PARAMS",
 	"ERR_GIT_NOT_FOUND",
 	"ERR_GIT_NOT_REPO",
 	"ERR_GIT_DIRTY",
@@ -5684,6 +5693,9 @@ const ERROR_CODES = [
 	"ERR_GIT_BRANCH_INVALID",
 	"ERR_GIT_FAILED",
 	"ERR_REF_OFFLINE",
+	"ERR_NET_DISABLED",
+	"ERR_NET_DENIED",
+	"ERR_NET_FAILED",
 	"ERR_NOT_CANONICAL",
 	"ERR_UNSUPPORTED_OP",
 	"ERR_INTERNAL"
@@ -5856,6 +5868,7 @@ object({
 	capabilities: array(CapabilitySchema).default([]),
 	artifacts: array(PlanArtifactSchema).min(1).max(2e3),
 	checks: array(CheckRefSchema).default([]),
+	counter: int().nonnegative().optional(),
 	metadata: record(string(), json()).default({})
 }).strict();
 const ErrorCodeSchema = _enum(ERROR_CODES);
@@ -5982,7 +5995,8 @@ const ManifestBodySchema = object({
 	planDigest: DigestRefSchema,
 	artifacts: array(ManifestArtifactSchema).min(1).max(2e3),
 	checks: array(CheckRefSchema),
-	toolchain: ToolchainSchema
+	toolchain: ToolchainSchema,
+	counter: int().nonnegative().optional()
 }).strict().superRefine((m, ctx) => {
 	if (!isSortedUnique(m.artifacts.map((a) => a.path))) ctx.addIssue({
 		code: "custom",
@@ -6023,11 +6037,37 @@ const DsseEnvelopeSchema = object({
 		sig: base64()
 	}).strict())
 }).strict();
+const ManifestSignatureSchema = object({
+	payloadType: literal("application/vnd.axiom.manifest+json"),
+	payload: base64(),
+	signatures: array(object({
+		keyid: string().optional(),
+		sig: base64()
+	}).strict()).min(1)
+}).strict();
+const TrustedKeySchema = object({
+	keyid: string().regex(/^[0-9a-f]{64}$/),
+	alg: literal("ed25519"),
+	publicKey: base64(),
+	name: string().min(1).max(200).optional(),
+	notBefore: int().nonnegative().optional()
+}).strict();
+object({
+	version: literal(1),
+	keys: array(TrustedKeySchema),
+	minCounter: int().nonnegative().optional()
+}).strict();
+object({
+	version: literal(1),
+	lastCounter: int().nonnegative(),
+	manifestDigest: DigestRefSchema.optional()
+}).strict();
 object({
 	manifest: ManifestBodySchema,
 	manifestDigest: DigestRefSchema,
 	attestation: InTotoStatementLooseSchema.optional(),
 	envelope: DsseEnvelopeSchema.optional(),
+	signatures: array(ManifestSignatureSchema).optional(),
 	blobs: record(DigestRefSchema, BlobSchema).default({})
 }).strict().superRefine((b, ctx) => {
 	let total = 0;
@@ -6062,6 +6102,28 @@ object({
 	limits: ProfileLimitsSchema.default({}),
 	facts: ProfileFactsSchema.prefault({})
 }).strict();
+const RepoSnapshotEntryKindSchema = _enum(["file", "symlink"]);
+const RepoSnapshotBodySchema = object({
+	files: array(object({
+		path: RelPathSchema,
+		bytes: int().nonnegative(),
+		sha256: Sha256HexSchema.optional(),
+		mode: ArtifactModeSchema,
+		kind: RepoSnapshotEntryKindSchema
+	}).strict()),
+	truncated: boolean(),
+	counts: object({
+		files: int().nonnegative(),
+		bytes: int().nonnegative()
+	}).strict()
+}).strict();
+object({
+	apiVersion: ApiVersionSchema,
+	kind: literal("RepoSnapshot"),
+	root: object({ kind: literal("relative") }).strict(),
+	snapshotDigest: DigestRefSchema,
+	body: RepoSnapshotBodySchema
+}).strict();
 var Diff = class {
 	diff(oldStr, newStr, options = {}) {
 		let callback;
@@ -8244,6 +8306,15 @@ function finding(f) {
 	if (f.path !== void 0) out.path = f.path;
 	return out;
 }
+object({
+	expression: string().min(1).max(4096),
+	message: string().max(2e3).optional(),
+	severity: _enum([
+		"error",
+		"warn",
+		"info"
+	]).optional()
+}).strict();
 const SECRET_PATTERNS = [
 	{
 		name: "cnp",
@@ -8429,6 +8500,11 @@ object({ rules: array(object({
 		match: string().min(1)
 	}).strict()).min(1)
 }).strict()).min(1) }).strict();
+object({
+	minSignatures: int().min(1).max(16).default(1),
+	antiRollback: boolean().default(false),
+	trustFile: string().min(1).default(".axiom/trust/keys.json")
+}).strict();
 Math.max(1, Math.min(4, cpus().length));
 const realpathNative = promisify(realpath.native);
 const IS_WIN32 = process.platform === "win32";