@codai/axiom-plan

Plan → ManifestBundle compiler for AXIOM v2 (design §2).

What: compilePlan(plan, opts) validates a Plan, resolves every artifact's bytes (inline utf8/base64, or CAS under <root>/.axiom/cas), hashes them, and emits a canonical ManifestBody whose manifestDigest is sha256(JCS(body)). Content travels beside the manifest — inline blobs (default) or the CAS (store: "cas") — so the digest is transport-independent. An in-toto Statement v1 / SLSA provenance is attached as attestation.

Determinism: artifacts sorted by UTF-8 path order, checks by id, toolchain keys sorted, no timestamps in the body. Permuting a plan's artifacts, switching inline↔CAS, or passing a clock never changes manifestDigest.

API

• compilePlan(plan, { store?, root?, net?, toolchain?, now?, invocationId? }) → { bundle, statement } Errors are AxiomError with codes ERR_INVALID_PLAN, ERR_BLOB_TOO_LARGE, ERR_BUNDLE_TOO_LARGE, ERR_BLOB_MISSING, ERR_DIGEST_MISMATCH, ERR_REF_OFFLINE (ref without a root), ERR_NET_DISABLED / ERR_NET_DENIED / ERR_NET_FAILED (ref not in the CAS; net: { allowNet, allowlist?, allowFile?, fetchImpl? }, offline by default — resolveRef in src/ref.ts); template sources need compilePlan(plan, { emitters }) — ERR_EMITTER_UNKNOWN / ERR_TEMPLATE_UNKNOWN / ERR_TEMPLATE_PARAMS otherwise (createEmitterRegistry, TemplateEmitter; see docs/guides/emitters.md).
• verifyBundle(bundle) — schema, recomputed digest, blob hashes, attestation subject. Never throws.
• diffManifests(a, b) — { added, removed, changed[{path, from, to}] } by path/digest.
• casPath / casPut / casGet / casHas — tmp→fsync→rename content store.

Build: tsdown, ESM, Node ≥ 22.14. isolatedDeclarations is off in this package's tsconfig because inferred Zod types cannot be annotated explicitly.