@codai/axiom-mcp 2.1.0 → 2.2.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@codai/axiom-mcp",
   "mcpName": "io.github.dragoscv/axiom",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "AXIOM v2 MCP server (stdio) and CLI: validate, compile, check and transactionally apply content-addressed manifest bundles inside an allowlisted set of roots",
   "license": "MIT",
   "author": "Dragos Catalin Vladulescu",
@@ -45,17 +45,22 @@
     "README.md"
   ],
   "dependencies": {
-    "@codai/axiom-apply": "2.1.0",
-    "@codai/axiom-axm": "2.1.0",
-    "@codai/axiom-canon": "2.1.0",
-    "@codai/axiom-checks": "2.1.0",
-    "@codai/axiom-emitters-web": "2.1.0",
-    "@codai/axiom-plan": "2.1.0",
-    "@codai/axiom-schema": "2.1.0",
-    "@modelcontextprotocol/sdk": "1.30.0",
+    "@codai/axiom-apply": "2.2.0",
+    "@codai/axiom-axm": "2.2.0",
+    "@codai/axiom-canon": "2.2.0",
+    "@codai/axiom-checks": "2.2.0",
+    "@codai/axiom-emitters-web": "2.2.0",
+    "@codai/axiom-plan": "2.2.0",
+    "@codai/axiom-schema": "2.2.0",
+    "@modelcontextprotocol/server": "2.0.0",
     "zod": "4.6.5"
   },
+  "optionalDependencies": {
+    "@cedar-policy/cedar-wasm": "4.13.0"
+  },
   "devDependencies": {
+    "@modelcontextprotocol/client": "2.0.0",
+    "fast-check": "4.10.1",
     "tsdown": "0.23.0",
     "tsx": "4.23.13",
     "typescript": "7.0.2",

package/spec/codai-tools.json

@@ -110,6 +110,289 @@
         ]
       }
     },
+    {
+      "name": "axiom_check_start",
+      "risk": "READ",
+      "description": "Same evaluation as axiom_check, but returned immediately as a task so long `guard.external` suites (up to 15 min per guard) outlive the client's per-call timeout. Poll axiom_task_get with the returned taskId every pollIntervalMs until status is completed|failed|cancelled; the CheckReport is in `result`. Finished tasks are pollable for ttlMs, then forgotten. Tasks live in this server process only (D-24 — tool-level tasks, not the io.modelcontextprotocol/tasks wire extension).",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "bundle": {
+            "type": "object",
+            "propertyNames": {
+              "type": "string"
+            },
+            "additionalProperties": {},
+            "description": "ManifestBundle"
+          },
+          "profile": {
+            "description": "Profile name (builtin default|strict|permissive, or <root>/.axiom/profiles/<name>.json)",
+            "type": "string"
+          },
+          "root": {
+            "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+            "type": "string"
+          }
+        },
+        "required": [
+          "bundle"
+        ]
+      }
+    },
+    {
+      "name": "axiom_task_get",
+      "risk": "READ",
+      "description": "Status of a task created by axiom_check_start. While `working` only the descriptor is returned; once terminal, `result` (completed) or `error` (failed|cancelled) is attached. Unknown or expired taskId → ERR_TASK_NOT_FOUND.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "taskId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "taskId returned by axiom_check_start"
+          }
+        },
+        "required": [
+          "taskId"
+        ]
+      }
+    },
+    {
+      "name": "axiom_task_cancel",
+      "risk": "ACT",
+      "description": "Abort a `working` task: every running guard process tree is killed and the task ends `cancelled` with error ERR_TASK_CANCELLED. Idempotent — a terminal task is returned unchanged.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "taskId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "taskId returned by axiom_check_start"
+          }
+        },
+        "required": [
+          "taskId"
+        ]
+      }
+    },
+    {
+      "name": "axiom_plan_begin",
+      "risk": "ACT",
+      "description": "Start assembling a Plan whose JSON would exceed the 4 MiB per-call cap: send the header here (everything except `artifacts`), append artifacts in chunks with axiom_plan_add, then axiom_plan_seal compiles the whole. The sealed bundle's manifestDigest is identical to a one-shot axiom_plan_compile of the same Plan. Sessions are in-memory, expire after 30 min idle, and hold at most 2000 artifacts / 64 MiB.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "pattern": "^[a-z0-9][a-z0-9-]{0,63}$"
+          },
+          "intent": {
+            "type": "string",
+            "maxLength": 2000
+          },
+          "profile": {
+            "default": "default",
+            "type": "string",
+            "minLength": 1
+          },
+          "capabilities": {
+            "default": [],
+            "type": "array",
+            "items": {
+              "type": "string",
+              "enum": [
+                "fs",
+                "net",
+                "secret",
+                "ai",
+                "compute",
+                "git"
+              ]
+            }
+          },
+          "checks": {
+            "default": [],
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "id": {
+                  "type": "string",
+                  "minLength": 1,
+                  "maxLength": 128
+                },
+                "predicate": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-zA-Z0-9]*\\.[a-zA-Z][a-zA-Z0-9]*$"
+                },
+                "params": {
+                  "$ref": "#/$defs/__schema0"
+                },
+                "severity": {
+                  "default": "error",
+                  "type": "string",
+                  "enum": [
+                    "error",
+                    "warn",
+                    "info"
+                  ]
+                }
+              },
+              "required": [
+                "id",
+                "predicate",
+                "params"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "counter": {
+            "type": "integer",
+            "minimum": 0,
+            "maximum": 9007199254740991
+          },
+          "metadata": {
+            "default": {},
+            "type": "object",
+            "propertyNames": {
+              "type": "string"
+            },
+            "additionalProperties": {
+              "$ref": "#/$defs/__schema1"
+            }
+          }
+        },
+        "required": [
+          "name",
+          "intent"
+        ],
+        "$defs": {
+          "__schema0": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "number"
+              },
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "null"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "$ref": "#/$defs/__schema0"
+                }
+              },
+              {
+                "type": "object",
+                "propertyNames": {
+                  "type": "string"
+                },
+                "additionalProperties": {
+                  "$ref": "#/$defs/__schema0"
+                }
+              }
+            ]
+          },
+          "__schema1": {
+            "anyOf": [
+              {
+                "type": "string"
+              },
+              {
+                "type": "number"
+              },
+              {
+                "type": "boolean"
+              },
+              {
+                "type": "null"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "$ref": "#/$defs/__schema1"
+                }
+              },
+              {
+                "type": "object",
+                "propertyNames": {
+                  "type": "string"
+                },
+                "additionalProperties": {
+                  "$ref": "#/$defs/__schema1"
+                }
+              }
+            ]
+          }
+        }
+      }
+    },
+    {
+      "name": "axiom_plan_add",
+      "risk": "ACT",
+      "description": "Add a chunk of Plan artifacts (each ≤ 4 MiB call, inline content ≤ 256 KiB per artifact as in a Plan) to an open session. Paths must be unique across every chunk (ERR_INVALID_PLAN otherwise); a sealed or over-budget session is ERR_PLAN_SESSION_STATE.",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "sessionId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "sessionId returned by axiom_plan_begin"
+          },
+          "artifacts": {
+            "minItems": 1,
+            "type": "array",
+            "items": {
+              "type": "object",
+              "propertyNames": {
+                "type": "string"
+              },
+              "additionalProperties": {}
+            },
+            "description": "Plan artifacts, same shape as Plan.artifacts[]"
+          }
+        },
+        "required": [
+          "sessionId",
+          "artifacts"
+        ]
+      }
+    },
+    {
+      "name": "axiom_plan_seal",
+      "risk": "ACT",
+      "description": "Assemble the session's header + every added artifact into one Plan and compile it exactly like axiom_plan_compile (same options, same digest). The session is consumed whether or not compilation succeeds. Bundles whose inline blobs exceed 4 MiB need `store: cas` (and therefore a root).",
+      "parameters": {
+        "type": "object",
+        "properties": {
+          "sessionId": {
+            "type": "string",
+            "minLength": 1,
+            "description": "sessionId returned by axiom_plan_begin"
+          },
+          "store": {
+            "description": "Blob transport; default inline",
+            "type": "string",
+            "enum": [
+              "inline",
+              "cas"
+            ]
+          },
+          "root": {
+            "description": "Absolute repository root; must equal or lie inside an allowlisted --root",
+            "type": "string"
+          }
+        },
+        "required": [
+          "sessionId"
+        ]
+      }
+    },
     {
       "name": "axiom_apply_dry_run",
       "risk": "READ",