@cynodia/axiom 0.7.0-alpha.1 → 0.7.0-alpha.2

package/README.md

@@ -6,13 +6,15 @@ Axiom represents application behavior, state, UI structure and presentation as s
 semantic data executed by generic runtimes. An application is a typed graph, not source
 files: the JavaScript and HTML that reach the browser are output, and are never edited.
 
-**Status: experimental / alpha (0.6.0-alpha.x).** The API may change between alpha
+**Status: experimental / alpha (0.7.0-alpha.x).** The API may change between alpha
 releases. The documentation in `docs/` describes this exact version.
 
 ## Installation
 
 ```bash
-npm install @cynodia/axiom
+npm install @cynodia/axiom            # the graph, compiler, runtime and agent API
+npm install @cynodia/axiom-ui         # semantic UI authoring patterns (build time only)
+npm install @cynodia/axiom-server     # only if the application has an authority
 ```
 
 ## Canonical mental model
@@ -26,15 +28,24 @@ npm install @cynodia/axiom
 | `ActionDef` | A transactional semantic operation. |
 | `ConstraintDef` | An invariant over proposed state. |
 | `TransitionConstraintDef` | An invariant over previous committed state → proposed state. |
-| UI nodes | Semantic interaction structure. |
+| UI nodes | Semantic interaction structure (view, container, text, repeat, field-display, form, input, button, conditional, diagnostic, dialog). |
 | `Presentation` | Semantic UX intent. Roles and tokens, never CSS. |
 | `Theme` | Translation of presentation intent into visual design. |
 | Renderer | Platform-specific materialization. Not part of the graph. |
+| `StateDef.authority` | Who may commit a value: the client, or the server. The one declaration the split follows from. |
+| `ServerIR` | The half an authority executes. Portable JSON, frozen as `axiom.server.v1`. |
+| Semantic protocol | What a client may ask for: named actions with arguments, never mutation programs. |
+| `PersistenceAdapter` | Where a decided value survives. Not part of the semantics. |
 
 ```text
-ApplicationGraph → validateGraph → compileToIR → runtime (+ theme → renderer) → application
+ApplicationGraph → validateGraph → compileToIR      → runtime (+ theme → renderer) → page
+                                 → compileToServerIR → authority (+ persistence)
 ```
 
+Authority is **derived, never declared twice**: an action that writes server-owned state is a
+server action, so where code runs cannot disagree with what it does. Full model:
+`docs/AUTHORITY.md`.
+
 ## Load-bearing invariants
 
 Know these before authoring an application. Each is stated in full in
@@ -53,6 +64,10 @@ Know these before authoring an application. Each is stated in full in
 11. **`null` and `[]` are distinct.** `null` fails a collection operator; `[]` does not. A collection is truthy only when non-empty.
 12. **`required(x)` asks only whether a value exists.** `required([])` is `true`.
 13. **A theme changes presentation only.**
+14. **A client cannot commit server-authoritative state**, by any path. An action that writes it executes on the authority.
+15. **The client is untrusted.** Guards, authorization and argument types are checked again on the authority.
+16. **A client requests semantic actions, never mutation programs.** The protocol carries no way to send operations.
+17. **`axiom.server.v1` is frozen and language-independent.** Its semantics are defined by `docs/AUTHORITY.md`, the published JSON Schemas and the conformance fixtures — not by this implementation.
 
 ## Minimal application
 
@@ -126,6 +141,7 @@ The complete operational contract ships with this package, in `docs/`.
 | Semantic UI nodes and bindings | `docs/UI.md` |
 | Presentation, UX intent, themes, formatting | `docs/PRESENTATION.md` |
 | Runtime API and diagnostic codes | `docs/RUNTIME.md` |
+| Server authority, Server IR, the protocol and persistence | `docs/AUTHORITY.md` |
 | Machine queries and graph transformations | `docs/AGENT_API.md` |
 | Validation codes | `docs/VALIDATION.md` |
 | Mistakes that compile but are wrong | `docs/ANTI_PATTERNS.md` |
@@ -144,6 +160,13 @@ This package re-exports four, which can also be installed individually:
 | `@cynodia/axiom-runtime` | State store, evaluation, mutation engine, constraint checking, renderer, routing. |
 | `@cynodia/axiom-agent-api` | Semantic and presentation queries, mutation impact, transactional transformations. |
 
+Two published packages are deliberately **not** re-exported, and are installed separately:
+
+| Package | Why it stands apart |
+| --- | --- |
+| `@cynodia/axiom-server` | The authoritative runtime: Server IR execution, persistence adapters, the semantic protocol and the Node host. It imports `node:http` and `node:sqlite`, and a browser bundle must not. |
+| `@cynodia/axiom-ui` | Semantic UI authoring patterns, expanded into ordinary graph nodes at **build time**. Re-exporting it would make every application carry an authoring dependency forever, and would make "this application no longer needs the toolkit" impossible to state or to test. |
+
 ## License
 
 MIT

package/docs/ACTIONS_TRANSACTIONS.md

@@ -1,6 +1,6 @@
 # Actions and transactions
 
-Axiom 0.7.0-alpha.1. An action is behavior expressed as data, executed as a transaction.
+Axiom 0.7.0-alpha.2. An action is behavior expressed as data, executed as a transaction.
 
 ```ts
 {

package/docs/AGENT_API.md

@@ -1,6 +1,6 @@
 # Agent API
 
-Axiom 0.7.0-alpha.1. The machine-facing interface. Agents query semantics and apply
+Axiom 0.7.0-alpha.2. The machine-facing interface. Agents query semantics and apply
 structural transformations; they never edit generated code.
 
 ```ts

package/docs/AGENT_REFERENCE.md

@@ -1,6 +1,6 @@
 # Agent reference
 
-Axiom 0.7.0-alpha.1. Compressed operational contract. Read this plus the `.d.ts`
+Axiom 0.7.0-alpha.2. Compressed operational contract. Read this plus the `.d.ts`
 declarations before authoring or modifying an Axiom application.
 
 Formal guarantees: [`SEMANTIC_CONTRACT.md`](SEMANTIC_CONTRACT.md). Mistakes that compile:
@@ -31,7 +31,7 @@ One canonical term per concept. These are not interchangeable.
 ## Graph construction
 
 ```ts
-const graph = new ApplicationGraph(id, name);      // version defaults to '0.6.0'
+const graph = new ApplicationGraph(id, name);      // version defaults to '0.7.0'
 graph.addNode<StateDef>({ id, kind: 'state', ... }); // returns NodeId; throws if id exists
 graph.getNode<StateDef>(id);                        // deep clone, or undefined
 graph.updateNode(node);                             // write a modified node back

package/docs/ANTI_PATTERNS.md

@@ -1,6 +1,6 @@
 # Anti-patterns
 
-Axiom 0.7.0-alpha.1. Each of these compiles. Each is wrong. Each is followed by the correct
+Axiom 0.7.0-alpha.2. Each of these compiles. Each is wrong. Each is followed by the correct
 alternative.
 
 ## 1. Field names as entity runtime keys

package/docs/AUTHORITY.md

@@ -1,6 +1,6 @@
 # Authority
 
-Axiom 0.7.0-alpha.1. How an application crosses the trust boundary.
+Axiom 0.7.0-alpha.2. How an application crosses the trust boundary.
 
 Until 0.5.x an Axiom application executed locally. 0.6 adds an **authority**: a generic
 runtime that owns state, decides mutations and persists them. The same semantic graph

package/docs/CONSTRAINTS.md

@@ -1,6 +1,6 @@
 # Constraints
 
-Axiom 0.7.0-alpha.1. Two constructs, answering different questions. They are not
+Axiom 0.7.0-alpha.2. Two constructs, answering different questions. They are not
 interchangeable.
 
 | | Question | Sees |

package/docs/EXPRESSIONS.md

@@ -1,6 +1,6 @@
 # Expressions
 
-Axiom 0.7.0-alpha.1. An expression describes **what value is computed**. It is a tree of
+Axiom 0.7.0-alpha.2. An expression describes **what value is computed**. It is a tree of
 plain data, never source text and never a callback. Evaluation is pure: an expression MUST
 NOT change state.
 

package/docs/GRAPH_MODEL.md

@@ -1,6 +1,6 @@
 # Graph model
 
-Axiom 0.7.0-alpha.1. The `ApplicationGraph` is the authoritative representation of an
+Axiom 0.7.0-alpha.2. The `ApplicationGraph` is the authoritative representation of an
 application. Everything else — the IR, the page, the DOM — is derived from it and is never
 edited.
 
@@ -25,7 +25,7 @@ edited.
 ## API
 
 ```ts
-const graph = new ApplicationGraph(id, name, version?);   // version defaults to '0.6.0'
+const graph = new ApplicationGraph(id, name, version?);   // version defaults to '0.7.0'
 
 graph.addNode<T>(node): NodeId        // generates an id if omitted; throws if it exists
 graph.getNode<T>(id): T | undefined   // deep clone

package/docs/LOCATIONS.md

@@ -1,6 +1,6 @@
 # Locations
 
-Axiom 0.7.0-alpha.1.
+Axiom 0.7.0-alpha.2.
 
 ```text
 Expression = a value

package/docs/PRESENTATION.md

@@ -1,6 +1,6 @@
 # Presentation
 
-Axiom 0.7.0-alpha.1. Presentation is **semantic UX intent**, expressed as data on a UI
+Axiom 0.7.0-alpha.2. Presentation is **semantic UX intent**, expressed as data on a UI
 node. It names roles, tokens and device classes. It never names a colour, a length, a media
 query or a CSS property.
 

package/docs/RUNTIME.md

@@ -1,6 +1,6 @@
 # Runtime
 
-Axiom 0.7.0-alpha.1. The runtime executes an `ApplicationIR`. It is domain-independent: it
+Axiom 0.7.0-alpha.2. The runtime executes an `ApplicationIR`. It is domain-independent: it
 contains no knowledge of any application.
 
 ## Constructing

package/docs/SEMANTIC_CONTRACT.md

@@ -1,6 +1,6 @@
 # Semantic contract
 
-Axiom 0.7.0-alpha.1. Runtime guarantees, stated formally. This file defines behavior; it
+Axiom 0.7.0-alpha.2. Runtime guarantees, stated formally. This file defines behavior; it
 does not teach. Where this file and any specification in `../specs/` disagree, this file
 describes the implementation and is authoritative.
 

package/docs/STATE.md

@@ -1,6 +1,6 @@
 # State
 
-Axiom 0.7.0-alpha.1. A `StateDef` is a named application value: stored, or computed from
+Axiom 0.7.0-alpha.2. A `StateDef` is a named application value: stored, or computed from
 other state.
 
 ```ts

package/docs/UI.md

@@ -1,6 +1,6 @@
 # UI
 
-Axiom 0.7.0-alpha.1. Eleven semantic UI node kinds describe **what exists and what it does**.
+Axiom 0.7.0-alpha.2. Eleven semantic UI node kinds describe **what exists and what it does**.
 How it looks is [presentation](PRESENTATION.md).
 
 All eleven share `UIBase`:

package/docs/VALIDATION.md

@@ -1,6 +1,6 @@
 # Validation
 
-Axiom 0.7.0-alpha.1. Validation is authoring-time structural checking. It is not the same
+Axiom 0.7.0-alpha.2. Validation is authoring-time structural checking. It is not the same
 as runtime constraint evaluation — see [`CONSTRAINTS.md`](CONSTRAINTS.md) for the four
 layers of correctness.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cynodia/axiom",
-  "version": "0.7.0-alpha.1",
+  "version": "0.7.0-alpha.2",
   "description": "AI-native semantic web application framework.",
   "license": "MIT",
   "author": "AskTech AS",
@@ -32,10 +32,10 @@
     }
   },
   "dependencies": {
-    "@cynodia/axiom-core": "0.7.0-alpha.1",
-    "@cynodia/axiom-runtime": "0.7.0-alpha.1",
-    "@cynodia/axiom-compiler": "0.7.0-alpha.1",
-    "@cynodia/axiom-agent-api": "0.7.0-alpha.1"
+    "@cynodia/axiom-core": "0.7.0-alpha.2",
+    "@cynodia/axiom-runtime": "0.7.0-alpha.2",
+    "@cynodia/axiom-compiler": "0.7.0-alpha.2",
+    "@cynodia/axiom-agent-api": "0.7.0-alpha.2"
   },
   "scripts": {
     "build": "tsc -b tsconfig.json"