@codai/axiom-mcp 2.0.0 → 2.2.0

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@codai/axiom-mcp",
-  "version": "2.0.0",
+  "mcpName": "io.github.dragoscv/axiom",
+  "version": "2.2.0",
   "description": "AXIOM v2 MCP server (stdio) and CLI: validate, compile, check and transactionally apply content-addressed manifest bundles inside an allowlisted set of roots",
   "license": "MIT",
   "author": "Dragos Catalin Vladulescu",
@@ -44,16 +45,22 @@
     "README.md"
   ],
   "dependencies": {
-    "@codai/axiom-apply": "2.0.0",
-    "@codai/axiom-axm": "2.0.0",
-    "@codai/axiom-canon": "2.0.0",
-    "@codai/axiom-checks": "2.0.0",
-    "@codai/axiom-plan": "2.0.0",
-    "@codai/axiom-schema": "2.0.0",
-    "@modelcontextprotocol/sdk": "1.30.0",
+    "@codai/axiom-apply": "2.2.0",
+    "@codai/axiom-axm": "2.2.0",
+    "@codai/axiom-canon": "2.2.0",
+    "@codai/axiom-checks": "2.2.0",
+    "@codai/axiom-emitters-web": "2.2.0",
+    "@codai/axiom-plan": "2.2.0",
+    "@codai/axiom-schema": "2.2.0",
+    "@modelcontextprotocol/server": "2.0.0",
     "zod": "4.6.5"
   },
+  "optionalDependencies": {
+    "@cedar-policy/cedar-wasm": "4.13.0"
+  },
   "devDependencies": {
+    "@modelcontextprotocol/client": "2.0.0",
+    "fast-check": "4.10.1",
     "tsdown": "0.23.0",
     "tsx": "4.23.13",
     "typescript": "7.0.2",

package/spec/codai-tools.json

@@ -26,7 +26,7 @@
     {
       "name": "axiom_plan_compile",
       "risk": "ACT",
-      "description": "Compile a Plan into a content-addressed ManifestBundle (sorted artifacts, sha256 digests, in-toto planDigest). `store: cas` writes blobs under <root>/.axiom/cas instead of inlining them. When a root is given the bundle is stored under <root>/.axiom/manifests/<hex>.json so later tools can reference it by digest.",
+      "description": "Compile a Plan into a content-addressed ManifestBundle (sorted artifacts, sha256 digests, in-toto planDigest). `store: cas` writes blobs under <root>/.axiom/cas instead of inlining them. When a root is given the bundle is stored under <root>/.axiom/manifests/<hex>.json so later tools can reference it by digest. `template` sources are rendered by the built-in `web` emitter (see `axiom emitters`); its version is recorded in toolchain.emitters.",
       "parameters": {
         "type": "object",
         "properties": {
@@ -59,7 +59,7 @@
     {
       "name": "axiom_manifest_verify",
       "risk": "READ",
-      "description": "Structural and content-address verification: schema, recomputed manifestDigest, every inline blob hashes to its key, attestation subject matches. Never writes.",
+      "description": "Structural and content-address verification: schema, recomputed manifestDigest, every inline blob hashes to its key, attestation subject matches. When a root with .axiom/trust/keys.json is available, detached DSSE signatures are verified and the trusted keyids are reported under `signatures`. Never writes.",
       "parameters": {
         "type": "object",
         "properties": {
@@ -70,6 +70,10 @@
             },
             "additionalProperties": {},
             "description": "ManifestBundle"
+          },
+          "root": {
+            "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+            "type": "string"
           }
         },
         "required": [
@@ -106,6 +110,289 @@
         ]
       }
     },
+    {
+      "name": "axiom_check_start",
+      "risk": "READ",
+      "description": "Same evaluation as axiom_check, but returned immediately as a task so long `guard.external` suites (up to 15 min per guard) outlive the client's per-call timeout. Poll axiom_task_get with the returned taskId every pollIntervalMs until status is completed|failed|cancelled; the CheckReport is in `result`. Finished tasks are pollable for ttlMs, then forgotten. Tasks live in this server process only (D-24 — tool-level tasks, not the io.modelcontextprotocol/tasks wire extension).",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "bundle": {
+            "type": "object",
+            "propertyNames": {
+              "type": "string"
+            },
+            "additionalProperties": {},
+            "description": "ManifestBundle"
+          },
+          "profile": {
+            "description": "Profile name (builtin default|strict|permissive, or <root>/.axiom/profiles/<name>.json)",
+            "type": "string"
+          },
+          "root": {
+            "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+            "type": "string"
+          }
+        },
+        "required": [
+          "bundle"
+        ]
+      }
+    },
+    {
+      "name": "axiom_task_get",
+      "risk": "READ",
+      "description": "Status of a task created by axiom_check_start. While `working` only the descriptor is returned; once terminal, `result` (completed) or `error` (failed|cancelled) is attached. Unknown or expired taskId → ERR_TASK_NOT_FOUND.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "taskId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "taskId returned by axiom_check_start"
+          }
+        },
+        "required": [
+          "taskId"
+        ]
+      }
+    },
+    {
+      "name": "axiom_task_cancel",
+      "risk": "ACT",
+      "description": "Abort a `working` task: every running guard process tree is killed and the task ends `cancelled` with error ERR_TASK_CANCELLED. Idempotent — a terminal task is returned unchanged.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "taskId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "taskId returned by axiom_check_start"
+          }
+        },
+        "required": [
+          "taskId"
+        ]
+      }
+    },
+    {
+      "name": "axiom_plan_begin",
+      "risk": "ACT",
+      "description": "Start assembling a Plan whose JSON would exceed the 4 MiB per-call cap: send the header here (everything except `artifacts`), append artifacts in chunks with axiom_plan_add, then axiom_plan_seal compiles the whole. The sealed bundle's manifestDigest is identical to a one-shot axiom_plan_compile of the same Plan. Sessions are in-memory, expire after 30 min idle, and hold at most 2000 artifacts / 64 MiB.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]{0,63}$"
+          },
+          "intent": {
+            "type": "string",
+            "maxLength": 2000
+          },
+          "profile": {
+            "default": "default",
+            "type": "string",
+            "minLength": 1
+          },
+          "capabilities": {
+            "default": [],
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "fs",
+                "net",
+                "secret",
+                "ai",
+                "compute",
+                "git"
+              ]
+            }
+          },
+          "checks": {
+            "default": [],
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "maxLength": 128
+                },
+                "predicate": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-zA-Z0-9]*\\.[a-zA-Z][a-zA-Z0-9]*$"
+                },
+                "params": {
+                  "$ref": "#/$defs/__schema0"
+                },
+                "severity": {
+                  "default": "error",
+                  "type": "string",
+                  "enum": [
+                    "error",
+                    "warn",
+                    "info"
+                  ]
+                }
+              },
+              "required": [
+                "id",
+                "predicate",
+                "params"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "counter": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 9007199254740991
+          },
+          "metadata": {
+            "default": {},
+            "type": "object",
+            "propertyNames": {
+              "type": "string"
+            },
+            "additionalProperties": {
+              "$ref": "#/$defs/__schema1"
+            }
+          }
+        },
+        "required": [
+          "name",
+          "intent"
+        ],
+        "$defs": {
+          "__schema0": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "number"
+              },
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "null"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "$ref": "#/$defs/__schema0"
+                }
+              },
+              {
+                "type": "object",
+                "propertyNames": {
+                  "type": "string"
+                },
+                "additionalProperties": {
+                  "$ref": "#/$defs/__schema0"
+                }
+              }
+            ]
+          },
+          "__schema1": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "number"
+              },
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "null"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "$ref": "#/$defs/__schema1"
+                }
+              },
+              {
+                "type": "object",
+                "propertyNames": {
+                  "type": "string"
+                },
+                "additionalProperties": {
+                  "$ref": "#/$defs/__schema1"
+                }
+              }
+            ]
+          }
+        }
+      }
+    },
+    {
+      "name": "axiom_plan_add",
+      "risk": "ACT",
+      "description": "Add a chunk of Plan artifacts (each ≤ 4 MiB call, inline content ≤ 256 KiB per artifact as in a Plan) to an open session. Paths must be unique across every chunk (ERR_INVALID_PLAN otherwise); a sealed or over-budget session is ERR_PLAN_SESSION_STATE.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "sessionId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "sessionId returned by axiom_plan_begin"
+          },
+          "artifacts": {
+            "minItems": 1,
+            "type": "array",
+            "items": {
+              "type": "object",
+              "propertyNames": {
+                "type": "string"
+              },
+              "additionalProperties": {}
+            },
+            "description": "Plan artifacts, same shape as Plan.artifacts[]"
+          }
+        },
+        "required": [
+          "sessionId",
+          "artifacts"
+        ]
+      }
+    },
+    {
+      "name": "axiom_plan_seal",
+      "risk": "ACT",
+      "description": "Assemble the session's header + every added artifact into one Plan and compile it exactly like axiom_plan_compile (same options, same digest). The session is consumed whether or not compilation succeeds. Bundles whose inline blobs exceed 4 MiB need `store: cas` (and therefore a root).",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "sessionId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "sessionId returned by axiom_plan_begin"
+          },
+          "store": {
+            "description": "Blob transport; default inline",
+            "type": "string",
+            "enum": [
+              "inline",
+              "cas"
+            ]
+          },
+          "root": {
+            "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+            "type": "string"
+          }
+        },
+        "required": [
+          "sessionId"
+        ]
+      }
+    },
     {
       "name": "axiom_apply_dry_run",
       "risk": "READ",
@@ -278,6 +565,65 @@
         "type": "object",
         "properties": {}
       }
+    },
+    {
+      "name": "axiom_repo_snapshot",
+      "risk": "READ",
+      "description": "Deterministic, content-addressed inventory of a root: every regular file (and symlink) as { path, bytes, sha256, mode, kind }, sorted by code point, with snapshotDigest = sha256(JCS(body)). No timestamps, no absolute paths — the same tree gives the same digest on every machine. Honours the root .gitignore, always skips .git/ and .axiom/, never follows symlinks, never leaves the root. Use it to build Plans against real pre-image digests, or diff two snapshots with `axiom snapshot-diff`.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "root": {
+            "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+            "type": "string"
+          },
+          "include": {
+            "description": "Relative globs (*, **, ?) to keep; default everything",
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "exclude": {
+            "description": "Relative globs to drop",
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "maxFiles": {
+            "default": 20000,
+            "description": "Stop after this many files (cap 50000); sets truncated",
+            "type": "integer",
+            "minimum": 1,
+            "maximum": 50000
+          },
+          "maxBytes": {
+            "default": 67108864,
+            "description": "Stop once the summed size would exceed this; sets truncated",
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 9007199254740991
+          },
+          "followSymlinks": {
+            "default": false,
+            "description": "Always false; symlinks are recorded, never followed",
+            "type": "boolean",
+            "const": false
+          },
+          "respectGitignore": {
+            "default": true,
+            "type": "boolean"
+          },
+          "withContentDigest": {
+            "default": true,
+            "description": "false → sizes only, no sha256",
+            "type": "boolean"
+          }
+        }
+      }
     }
   ]
 }