kunchenguid__axi/catalog.yaml

# Single source of truth for the AXI catalog.
#
# To add your AXI: append an entry below, run `pnpm run docs:gen`, and commit
# this file together with the regenerated README.md and docs/index.html.
# CI (`pnpm run docs:check`) fails if the rendered tables drift from this file.
#
# Descriptions support `inline code` and [markdown links](https://example.com);
# keep them to one sentence or two short clauses.

official:
  - name: gh-axi
    url: https://github.com/kunchenguid/gh-axi
    domain: GitHub
    description: "Issues, PRs, workflow runs, releases, and more. Wraps the official `gh` CLI with agent-ergonomic output."
  - name: chrome-devtools-axi
    url: https://github.com/kunchenguid/chrome-devtools-axi
    domain: Browser automation
    description: "Navigate, click, fill, and extract with combined operations and query filtering. Wraps chrome-devtools-mcp."
  - name: lavish-axi
    url: https://github.com/kunchenguid/lavish-axi
    domain: Human review
    description: "Turns agent-generated HTML artifacts into collaborative review surfaces - annotate, comment, and send feedback back to the agent."
  - name: quota-axi
    url: https://github.com/kunchenguid/quota-axi
    domain: Quota / usage
    description: "Reports local Claude, Codex, Cursor, Copilot, and Grok quota/usage windows for routing-aware agents - data-only and local-first."

community:
  - name: jj-axi
    url: https://github.com/aivv73/jj-axi
    author: aivv73
    domain: Version control
    description: "Inspect and reshape Jujutsu history through deterministic, non-interactive commands with compact TOON output and operation-aware undo."
  - name: npm-axi
    url: https://github.com/SSBrouhard/npm-axi
    author: SSBrouhard
    domain: npm
    description: "Search and inspect npm registry packages, versions, dependencies, README previews, and downloads with token-efficient output."
  - name: sqlite-axi
    url: https://github.com/SSBrouhard/sqlite-axi
    author: SSBrouhard
    domain: SQLite
    description: "Inspect schemas, sample rows, and run capped read-only SQLite queries with token-efficient TOON output."
  - name: slack-axi
    url: https://github.com/JarvusInnovations/slack-axi
    author: Jarvus Innovations
    domain: Slack
    description: "Read, search, sweep, and safely draft Slack messages with token-efficient output."
  - name: gws-axi
    url: https://github.com/JarvusInnovations/gws-axi
    author: Jarvus Innovations
    domain: Google Workspace
    description: "Gmail, Calendar, Docs, Drive, and Slides behind one command, with multi-account write-safety - drafts mail, never sends."
  - name: harvest-axi
    url: https://github.com/JarvusInnovations/harvest-axi
    author: Jarvus Innovations
    domain: Time tracking
    description: "Review, log, and edit Harvest time entries by period - for yourself, your team, a project, or a client."
  - name: specops
    url: https://github.com/JarvusInnovations/specops
    author: Jarvus Innovations
    domain: Spec-driven dev
    description: "Spec-driven development for agents - and a demo of shipping an AXI embedded in a skill, not a standalone npm executable."
  - name: gitsheets-axi
    url: https://github.com/JarvusInnovations/gitsheets/tree/main/packages/gitsheets-axi
    author: Jarvus Innovations
    domain: Git-backed data
    description: "Read and mutate git-backed record sheets over the shell - TOON output, idempotent commits."
  - name: metabase-axi
    url: https://github.com/JarvusInnovations/metabase-axi
    author: Jarvus Innovations
    domain: Analytics / BI
    description: "Query, explore, and export from Metabase over the shell - SQL/MBQL, saved questions, schema introspection, full-data export."
  - name: otter-axi
    url: https://github.com/JarvusInnovations/otter-axi
    author: Jarvus Innovations
    domain: Meetings
    description: "Find and pull Otter.ai meeting transcripts from the shell - wraps Otter.ai's hosted MCP server as a scriptable, headless CLI."
  - name: notion-axi
    url: https://github.com/maximebrmd/notion-axi
    author: maximebrmd
    domain: Notion
    description: "Search, read, create, and update Notion pages and databases over the shell - token-efficient TOON output, PAT or integration auth."
  - name: clickup-axi
    url: https://github.com/JanSuthacheeva/clickup-axi
    author: JanSuthacheeva
    domain: ClickUp
    description: "List your open tasks, view a task with its newest comments inline, and change task status - truncation-aware, TOON-style output."
  - name: databricks-axi
    url: https://github.com/p33ves/databricks-axi
    author: p33ves
    domain: Databricks
    description: "Run Databricks jobs, watch runs, and pull failure logs inline over the official databricks CLI - more domains coming soon."
  - name: aws-axi
    url: https://github.com/thatdudealso/aws-axi
    author: thatdudealso
    domain: AWS
    description: "Discover, plan, provision, deploy, and inspect AWS services for hosting web, backend, database, and AI workloads through safe token-efficient CLI workflows."
  - name: docker-axi
    url: https://github.com/thatdudealso/docker-axi
    author: thatdudealso
    domain: Docker
    description: "Discover, build, run, debug, publish, inspect, and clean up Docker apps through safe token-efficient CLI workflows."
  - name: doctl-axi
    url: https://github.com/batamire/doctl-axi
    author: batamire
    domain: DigitalOcean
    description: "Manage Droplets, Kubernetes, App Platform, databases, networking, and Spaces via doctl with token-efficient TOON output."
  - name: dynamodb-axi
    url: https://github.com/thatdudealso/dynamodb-axi
    author: thatdudealso
    domain: DynamoDB
    description: "Discover, inspect, query, scan, create, update, back up, restore, export, import, and safely operate DynamoDB tables through token-efficient CLI workflows."
  - name: pg-axi
    url: https://github.com/thatdudealso/pg-axi
    author: thatdudealso
    domain: PostgreSQL
    description: "Discover, create, inspect, query, back up, restore, and maintain PostgreSQL databases through safe token-efficient CLI workflows."
  - name: mongodb-axi
    url: https://github.com/thatdudealso/mongodb-axi
    author: thatdudealso
    domain: MongoDB
    description: "Discover, create, inspect, query, export, import, maintain, and diagnose MongoDB databases through safe token-efficient CLI workflows."
  - name: elasticsearch-axi
    url: https://github.com/thatdudealso/elasticsearch-axi
    author: thatdudealso
    domain: Elasticsearch
    description: "Discover, inspect, query, index, map, snapshot, restore, diagnose, and operate Elasticsearch clusters through safe token-efficient CLI workflows."
  - name: kubernetes-axi
    url: https://github.com/thatdudealso/kubernetes-axi
    author: thatdudealso
    domain: Kubernetes
    description: "Discover, inspect, deploy, debug, scale, roll out, expose, and clean up Kubernetes workloads through safe token-efficient CLI workflows."
  - name: redis-axi
    url: https://github.com/thatdudealso/redis-axi
    author: thatdudealso
    domain: Redis
    description: "Discover, inspect, query, export, import, maintain, and diagnose Redis databases through safe token-efficient CLI workflows."
  - name: celery-axi
    url: https://github.com/thatdudealso/celery-axi
    author: thatdudealso
    domain: Celery
    description: "Discover, inspect, run, debug, monitor, schedule, control, and safely operate Celery task queues through token-efficient CLI workflows."
  - name: cyber-mux
    url: https://github.com/cyberuni/cyber-mux
    author: unional
    domain: Terminal multiplexers
    description: "Open, send, read, focus, and close terminal panes across tmux, herdr, and WezTerm through one detection-driven contract with token-efficient output."
  - name: oracle-axi
    url: https://github.com/thatdudealso/oracle-axi
    author: thatdudealso
    domain: Oracle Database
    description: "Discover, create, inspect, query, export, import, maintain, and diagnose Oracle databases through safe token-efficient CLI workflows."
  - name: glab-axi
    url: https://github.com/karotkriss/glab-axi
    author: karotkriss
    domain: GitLab
    description: "Issues, merge requests, CI/CD pipelines, variables and secrets, releases, and raw API access. Wraps the official glab CLI with agent-ergonomic TOON output."
  - name: reactive-axi
    url: https://github.com/adeeshsharma/reactive-axi
    author: adeeshsharma
    domain: UI review
    description: "Click any element in your live React, Vue, or Svelte dev server and resolve it to the exact source file and line before it reaches your agent."
  - name: obsidian-axi
    url: https://github.com/AndersHoffmann/obsidian-axi
    author: AndersHoffmann
    domain: Obsidian
    description: "Read, search, create, update, organize, and link Obsidian notes from the filesystem - compact TOON output, atomic writes, no plugin or server."
  - name: comfy-cloud-axi
    url: https://github.com/intelligentrascal/comfy-cloud-axi
    author: intelligentrascal
    domain: AI generation
    description: "Generate images, video, and audio via 22 partner models, submit ComfyUI workflows and templates, track jobs, estimate credits before generating, search nodes, and report usage — wraps the Comfy Cloud MCP server with token-efficient TOON output."
    admission:
      status: exception
      reviewed_revision: 0f5b75eb201512604c87f6d75f4234bb685e0879
      exception: "The published 0.1.6 package reports version 0.1.4; `generate ... --confirm --type` defaults to image and `job chain <id> --dry-run` passes NaN before MCP calls; nodes and saved workflows report empty results for `{}` responses; paid `workflow run` and `templates run` ignore surplus positionals; and other mutating commands can ignore trailing flags."
  - name: mobbin-axi
    url: https://github.com/intelligentrascal/mobbin-axi
    author: intelligentrascal
    domain: UI/UX research
    description: "Search real-world UI/UX patterns from production apps via Mobbin - wraps Mobbin's OAuth-gated MCP server as a scriptable, headless CLI with token-efficient TOON output."
    admission:
      status: exception
      reviewed_revision: 8eda65af7d760efe45907ad3368d3164abe3062e
      exception: "The published 0.1.3 package reports version 0.1.1; search-command --help is rejected; empty-content MCP responses can become successful `0 results`; sections ignores --platform; control commands lack per-command flag sets; and legacy --full and --json flags are no-ops."
  - name: calendly-axi
    url: https://github.com/JarvusInnovations/calendly-axi
    author: Jarvus Innovations
    domain: Scheduling
    description: "The Calendly booking loop from the shell - see what's scheduled, mint single-use booking links, book directly, cancel, and manage event types, availability, and webhooks."
  - name: remarkable-axi
    url: https://github.com/JarvusInnovations/remarkable-axi
    author: Jarvus Innovations
    domain: E-ink tablets
    description: "Manage content on your reMarkable tablet through the reMarkable cloud - browse and organize files, upload PDFs and EPUBs, and send web articles as reflowable EPUBs."
  - name: ado-axi
    url: https://github.com/dtabolich/ado-axi
    author: dtabolich
    domain: Azure DevOps
    description: "Pull requests, branches, repositories, and pipeline runs. Wraps Azure CLI (`az devops` / `az repos`) with agent-ergonomic TOON output."
  - name: ado-axi
    url: https://github.com/jeffreyhaen/ado-axi
    author: jeffreyhaen
    domain: Azure DevOps
    description: "Work items, pull requests, Git refs, pipelines, and raw Azure DevOps REST calls with safe mutations, profiles, and token-efficient TOON output."
    admission:
      status: admitted
      reviewed_revision: 5b997626c17a7798f8aea4ff31613e97886a3cc1
      reviewed_components:
        - src/bin/ado-axi.ts
        - src/lib/args.ts
        - src/lib/format.ts
        - src/commands/home.ts
        - src/commands/workItem.ts
        - src/commands/pr.ts
        - src/commands/pipeline.ts
        - src/commands/ref.ts
        - src/commands/api.ts
        - src/commands/config.ts
        - src/lib/client.ts
      source_observations:
        - "src/commands/api.ts accepts an optional positional HTTP verb, validates path, host, query, body, content type, and raw-response options before calling the shared request client."
        - "src/commands/config.ts lists configured profiles and initializes named profiles with organization, optional project, and az or PAT authentication settings."
        - "src/lib/client.ts constructs encoded Azure DevOps request URLs, resolves credentials, and translates network and HTTP failures into AxiError responses."
  - name: supabase-axi
    url: https://github.com/laizhenyoong/supabase-axi
    author: laizhenyoong
    domain: Supabase
    description: "Inspect schemas, run SQL, and audit RLS, indexes, and logs across Supabase projects. Wraps the Supabase Management API."
  - name: homebrew-axi
    url: https://github.com/mstuart/homebrew-axi
    author: mstuart
    domain: Homebrew
    description: "Inspect Homebrew formulae, casks, and installed packages — versions, dependencies, outdated status, and install stats — with token-efficient TOON output; read-only, never mutates."
  - name: pypi-axi
    url: https://github.com/mstuart/pypi-axi
    author: mstuart
    domain: PyPI
    description: "Inspect PyPI packages, versions, dependencies, and download stats with token-efficient TOON output — read-only, no auth required."
  - name: cargo-axi
    url: https://github.com/AG9898/cargo-axi
    author: AG9898
    domain: Rust / Cargo
    description: "Inspect Rust workspaces and run safe `check` or Clippy validation with compact TOON output and opt-in session context."
  - name: forgejo-axi
    url: https://github.com/escidmore/forgejo-axi
    author: escidmore
    domain: Forgejo
    description: "Pull request lifecycle, issues, and raw API access for self-hosted Forgejo - non-interactive, reconciling mutations, with token-efficient TOON output."
  - name: mastra-axi
    url: https://github.com/taltas/mastra-axi
    author: taltas
    domain: Mastra
    description: "Discover and run a Mastra app's agents, tools, and workflows through agent-native shell commands with compact TOON output."
  - name: axi-axi
    url: https://github.com/CodyEngel/axi-axi
    author: CodyEngel
    domain: AXI authoring
    description: "Scaffold a compliant AXI, read the 10 principles in token-tuned slices, and run read-only compliance checks against a candidate CLI."
  - name: jira-axi
    url: https://github.com/emilchristensen/atlassian-axi/tree/main/packages/jira-axi
    author: emilchristensen
    domain: Issue tracking
    description: "Create, search, transition, and comment on Jira work items, boards, and sprints through Atlassian's acli with token-efficient TOON output and idempotent mutations."
  - name: confluence-axi
    url: https://github.com/emilchristensen/atlassian-axi/tree/main/packages/confluence-axi
    author: emilchristensen
    domain: Documentation
    description: "Read and write Confluence Cloud pages and spaces directly over the REST API with token-efficient TOON output and OAuth 3LO or API-token auth."
  - name: az-axi
    url: https://github.com/masyanru/az-axi
    author: masyanru
    domain: Azure
    description: "Discover, inspect, query, and safely mutate Azure through token-efficient CLI workflows over every az module."
  - name: mssql-axi
    url: https://github.com/jeffreyhaen/mssql-axi
    author: jeffreyhaen
    domain: Microsoft SQL Server / Azure SQL
    description: "Inspect schemas, sample rows, run capped read-only queries and showplans over the native ODBC driver - mutations double-gated with dry-run by default, TOON output."
  # Admission review (independent source review per VISION.md): inspected
  # Holaxis-ai/superbee at release v0.1.3, commit
  # f4e1c37349627030f8201ff52028f71a9c92570a. Direct source observations:
  # packages/cli/AXI-CONTRACT.md pins the agent-facing interaction contract;
  # src/output.ts renders TOON by default with a compact --json escape hatch;
  # src/errors.ts maps typed failures to stable error codes on the capped
  # 0/1/2/4/5/6 exit taxonomy with structured error envelopes; src/commands/
  # list.ts bounds repeated rows and reports count/shown with a --limit 0
  # escape; src/commands/doc/common.ts gates doc update/delete behind
  # --expected-version compare-and-swap and keeps delete idempotent; and
  # src/commands/home.ts serves a zero-arg live orientation view. Verdict:
  # the source-defined interface and behavior at that revision satisfy the
  # applicable AXI principles; admitted.
  - name: superbee
    url: https://github.com/Holaxis-ai/superbee
    author: Holaxis
    domain: Agent knowledge infrastructure
    description: "Turns what agents know into durable, domain-shaped infrastructure through local OKF bundles with declared schemas, exact queries, conflict-safe writes, and portable Views."
  - name: figma-axi
    url: https://github.com/ardaatahan/figma-axi
    author: ardaatahan
    domain: Design / Figma
    description: "Inspect Figma files, export nodes to PNG/SVG/PDF, and read styles, components, and comments - summarizes huge files instead of dumping raw JSON."
  - name: trello-axi
    url: https://github.com/enzodevs/trello-axi
    author: enzodevs
    domain: Project management
    description: "Create, search, update, move, comment on, and archive Trello cards through the REST API with compact TOON output, complete pagination, idempotent mutations, and non-interactive batch workflows."
  - name: railway-axi
    url: https://github.com/simkimsia/railway-axi
    author: simkimsia
    domain: Railway
    description: "List projects and inspect linked project status, environments, and services. Wraps the Railway CLI with agent-ergonomic TOON output and structured errors."
  - name: netlify-axi
    url: https://github.com/simkimsia/netlify-axi
    author: simkimsia
    domain: Netlify
    description: "List sites and inspect the linked site's status and the logged-in account. Wraps the Netlify CLI with agent-ergonomic TOON output and structured errors."
  # Admission review (independent source review per VISION.md): inspected
  # ardaatahan/vercel-axi at commit
  # 81c88e3582c3018fca8fcc1c4db40c993ece6f18 (no tagged release exists).
  # Direct source observations: src/commands/vercel.ts gates production
  # deploys, promote/rollback, domain add/remove, dns add/remove, and env
  # add/remove behind requireConfirm(), which throws UsageError absent
  # --confirm; src/output/errors.ts maps UsageError to exit 2 and AxiError
  # to exit 1 on the documented 0/1/2 taxonomy; src/vercel/process.ts wraps
  # the official `vercel` binary via spawnSync, converts a missing binary
  # or non-zero exit into a structured AxiError, and detects auth failures
  # to point at `vercel login`/VERCEL_TOKEN; env list redacts value/secret/
  # decryptedValue fields by default (vercel.ts redact()); src/index.ts
  # registers only these gated commands, with no ungated destructive path.
  # Verdict: the source-defined interface and behavior at that revision
  # satisfy the applicable AXI principles; admitted.
  - name: vercel-axi
    url: https://github.com/ardaatahan/vercel-axi
    author: ardaatahan
    domain: Deployment / Vercel
    description: "Deploy and inspect Vercel deployments, projects, domains, DNS, environment variables, and teams through the official Vercel CLI, with explicit confirmation gates for production and infrastructure changes."
  - name: cloudflare-axi
    url: https://github.com/simkimsia/cloudflare-axi
    author: simkimsia
    domain: Cloudflare
    description: "Inspect the current Worker's deployments, Pages projects, KV namespaces, and the logged-in account. Wraps the Cloudflare CLI (wrangler) with agent-ergonomic TOON output and structured errors."
  - name: coolify-axi
    url: https://github.com/radityasurya/coolify-axi
    author: radityasurya
    domain: Coolify
    description: "Apps, databases, services, and deployments on self-hosted or cloud Coolify - name-based addressing, redacted secrets, and TOON output over the official coolify CLI."
    admission:
      status: exception
      reviewed_revision: 513e9bb2d9addf35135c9fcdd8d7f57ce0de4a43
      reviewed_components:
        - bin/coolify-axi.js
        - src/cli.js
        - src/args.js
        - src/coolify.js
        - src/commands/app.js
        - src/commands/db.js
      source_observations:
        - "src/cli.js passes a `home` handler to runAxiCli that fetches `resource list` and returns counts, a state rollup, and per-resource state, so a no-argument run emits live data rather than the static TOON help in TOP_HELP."
        - "src/args.js parses each subcommand with node:util parseArgs in strict mode and converts ERR_PARSE_ARGS_UNKNOWN_OPTION into an AxiError with code VALIDATION_ERROR whose suggestion names that subcommand's valid flags."
        - "src/coolify.js runs the `coolify` binary through execFile and translates failures into AxiError codes MISSING_DEPENDENCY (ENOENT), AUTH_ERROR, NOT_FOUND, and COOLIFY_ERROR after dropping the wrapped CLI's update banner from stderr; redact()/redactValue() replace secret-named fields and the password segment matched by URL_CREDENTIALS in connection URLs unless --reveal is passed; resolveResource() raises VALIDATION_ERROR listing candidate uuids when a name matches more than one resource."
        - "src/commands/app.js projects `app get` through the DETAIL_FIELDS allow-list, truncates `app logs` to the last LOG_LIMIT (4000) characters with a size hint and a --full escape hatch, and returns `unchanged: true` without calling the wrapped CLI when start or stop targets a resource already in that state."
      exception: "`db get <name|uuid>` in src/commands/db.js returns a normal result payload reading `no database named <name>` for a lookup miss, so the process exits 0; the equivalent miss for applications, services, and servers goes through resolveResource() in src/coolify.js and raises a NOT_FOUND AxiError."
  - name: porkbun-axi
    url: https://github.com/ardaatahan/porkbun-axi
    author: ardaatahan
    domain: Domains / Porkbun
    description: "Manage Porkbun domains, DNS records, SSL certificates, URL forwarding, nameservers, and glue records through the Porkbun API, with compact TOON output and explicit confirmation gates for registrations and destructive updates/deletes."
    admission:
      status: exception
      reviewed_revision: 394fb206ea58c6d0aaa33a0f24bd6f70f84f206e
      reviewed_components:
        - src/commands/porkbun.ts
        - src/output/errors.ts
        - src/api.ts
        - src/cli/args.ts
        - src/index.ts
      source_observations:
        - "src/commands/porkbun.ts defines gate() which prints the change then throws UsageError unless --confirm is set; dns update/delete, forwarding delete, nameservers set, and glue update/delete call gate(); domains register uses its own --confirm check (not gate()), preflights checkDomain, then submits cost in cents with agreeToTerms only after --confirm; dns update refuses to run without --name."
        - "src/output/errors.ts maps UsageError to exit 2 and AxiError to exit 1 on the documented 0/1/2 taxonomy; src/cli/args.ts throws UsageError on unknown flags with the valid flag set for that command; src/index.ts registers only allCommands from porkbun.ts."
        - "src/api.ts reads PORKBUN_API_KEY and PORKBUN_SECRET_KEY from the environment into X-API-Key / X-Secret-API-Key headers (never the request body) and attaches a fresh Idempotency-Key UUID on idempotent writes; src/commands/porkbun.ts ssl retrieve prints PEM component sizes by default and only emits the certificate material with --json."
      exception: "`dns create`, `forwarding create`, and `glue create` in src/commands/porkbun.ts print a change line then POST the mutation; they do not take --confirm or call gate()."
  - name: wrangler-axi
    url: https://github.com/masculinecache/wrangler-axi
    author: masculinecache
    domain: Cloudflare Wrangler
    description: "Deploy Workers and Pages, manage KV namespaces, D1 databases, R2 buckets, and Worker secrets, and tail live logs with hard bounds - wraps the official Wrangler CLI with predictable TOON lists and structured errors."
    admission:
      status: exception
      reviewed_revision: 67ff6c45e12f4bb71e42ee8b71d586480c0861be
      reviewed_components:
        - src/cli.ts
        - src/commands/workers.ts
        - src/args.ts
        - src/util.ts
        - src/wrangler.ts
        - src/errors.ts
        - bin/wrangler-axi.ts
      source_observations:
        - "src/cli.ts registers whoami, workers, secrets, kv, d1, r2, and pages areas and returns structured output plus exit codes without calling process.exit; src/commands/workers.ts bounds tail streams by --max-entries or --timeout and renders compact event summaries."
        - "src/args.ts and src/util.ts validate flags and convert unknown areas, subcommands, and flags into AxiError VALIDATION_ERROR responses with corrective suggestions; src/wrangler.ts maps non-zero Wrangler results into structured errors and reports a missing Wrangler dependency explicitly."
      exception: "Mutating commands do not provide an AXI-level --confirm gate; delete and similar operations only forward Wrangler's --force behavior as -f or -y."
  - name: chezmoi-axi
    url: https://github.com/masculinecache/chezmoi-axi
    author: masculinecache
    domain: Dotfiles
    description: "List, diff, add, re-add, apply, verify, and sync chezmoi-managed dotfiles with compact TOON output - template-aware re-add verdicts, preview dry-runs, and idempotent operations."
    admission:
      status: exception
      reviewed_revision: ba1c969e1c92471c2fdfc82a6bfad70361fcf2d1
      reviewed_components:
        - chezmoi-axi
      source_observations:
        - "chezmoi-axi implements status, list, diff, add, re-add, apply, verify, sync, and commit as a single shell entrypoint with compact structured output, command-specific help, and exit 0/1/2 handling for success, runtime errors, and usage errors."
        - "re-add uses chezmoi's verbose dry-run to distinguish changed, template-managed, and in-sync files; list caps output at 50 rows with --full, and sync adds branch protection, bounded log rotation, and a preview mode for headless operation."
      exception: "apply and sync mutate the chezmoi state without an AXI-level --confirm gate; --preview provides a dry-run escape hatch."
  - name: mem-axi
    url: https://github.com/masculinecache/axi-memory
    author: masculinecache
    domain: Agent memory
    description: "Durable cross-session agent memory as markdown + YAML frontmatter in a git repo - typed memories, priority-ranked search with L0 abstracts, OS-side dedup, and cross-machine sync."
    admission:
      status: admitted
      reviewed_revision: f6fd3d37079540efb168a189b7a81573b472fb31
      reviewed_components:
        - mem
        - docs/design.md
        - docs/integration.md
        - docs/harnesses.md
      source_observations:
        - "mem stores typed markdown memories with YAML frontmatter under objects/<type>, supports init, add, update, merge, dedup, search, show, list, review, status, sync, and stats, and emits compact structured output with explicit empty states and exit 0/1/2 errors."
        - "mem add refuses credential-like title or body content unless --force is supplied, while dedup is dry-run by default and search/list rank results by priority and freshness with --limit and --min-priority controls; sync bounds pull and push operations with a 30-second timeout."
  - name: fal-axi
    url: https://github.com/ardaatahan/fal-axi
    author: ardaatahan
    domain: Image / Video Generation
    description: "Generate images and videos and poll fal.ai queue status/results through the official @fal-ai/client, with compact TOON output, FAL_KEY env-only auth, and --confirm gates on paid generates."
    admission:
      status: exception
      reviewed_revision: 532c85a4afcf13cb76b9d7f352fe947182a3ccb8
      reviewed_components:
        - src/commands/fal.ts
        - src/commands/home.ts
        - src/api/fal.ts
        - src/cli/args.ts
        - src/cli/router.ts
        - src/output/errors.ts
        - src/index.ts
        - bin/fal-axi.js
      source_observations:
        - "src/commands/fal.ts registers models list, image generate, video generate, job status, and job result; image/video generate call requireConfirmation() which throws UsageError unless --confirm is set before createApi().submit(), and reject empty/whitespace prompts locally."
        - "src/api/fal.ts reads FAL_KEY from the environment only via requireFalKey(), wraps @fal-ai/client queue.submit/status/result, and validates endpoint IDs (rejecting empty/`.`/`..` segments) plus request IDs before any network call."
        - "src/output/errors.ts maps UsageError to exit 1 and RuntimeError to exit 2; src/cli/args.ts supports a `--` end-of-options terminator; src/index.ts registers only allCommands from fal.ts plus home help."
      exception: "src/output/errors.ts maps UsageError to exit 1 and RuntimeError to exit 2, inverting AXI principle 6 (1=runtime, 2=usage); version probing only accepts `--version` via src/commands/home.ts and prints `fal-axi: <version>`, while `-v`/`-V` are rejected by short-flag handling in src/cli/args.ts instead of printing the bare version and exiting 0 (AXI principle 10)."
  - name: canva-axi
    url: https://github.com/ardaatahan/canva-axi
    author: ardaatahan
    domain: Design / Canva
    description: "List, get, create, export, and autofill Canva designs through the official Canva Connect API, with compact TOON output, CANVA_ACCESS_TOKEN env-only auth, HTTPS-only API bases, and --confirm gates on mutating writes."
    admission:
      status: exception
      reviewed_revision: 2ed9911e00172c735814d871c139346bd505f37a
      reviewed_components:
        - src/commands/canva.ts
        - src/commands/home.ts
        - src/api/client.ts
        - src/cli/args.ts
        - src/cli/router.ts
        - src/output/errors.ts
        - src/index.ts
        - bin/canva-axi.js
      source_observations:
        - "src/commands/canva.ts registers designs list/get/create/dataset/export-formats, exports create/get/download, and autofills update/get; designs create, exports create, exports download, and autofills update call requireConfirmation() which throws UsageError unless --confirm is set before createApi() network calls."
        - "src/api/client.ts reads CANVA_ACCESS_TOKEN from the environment only via requireAccessToken(), enforces HTTPS-only BASE_CANVA_CONNECT_API_URL (default https://api.canva.com/rest), validates IDs before requests, and rejects non-HTTPS download URLs/redirects."
        - "src/output/errors.ts maps UsageError to exit 1 and RuntimeError to exit 2; src/cli/args.ts supports a `--` end-of-options terminator and rejects short flags; src/index.ts registers only allCommands from canva.ts plus home help."
      exception: "src/output/errors.ts maps UsageError to exit 1 and RuntimeError to exit 2, inverting AXI principle 6 (1=runtime, 2=usage); version probing only accepts `--version` via src/commands/home.ts and prints `canva-axi: <version>`, while `-v`/`-V` are rejected by short-flag handling in src/cli/args.ts instead of printing the bare version and exiting 0 (AXI principle 10)."
  - name: bws-axi
    url: https://github.com/masculinecache/bws-axi
    author: masculinecache
    domain: Bitwarden Secrets Manager
    description: "Agent-ergonomic Bitwarden Secrets Manager CLI - TOON output, values redacted by default, project/key scoped listings."
    admission:
      status: exception
      reviewed_revision: e3a122cf5e24790e93279760e3f32a2d552beb0b
      reviewed_components:
        - bin/bws-axi
        - bin/common.mjs
        - skill/SKILL.md
        - package.json
      source_observations:
        - "Read-only Bitwarden Secrets Manager CLI: list projects/secrets, key-scoped listings; values redacted unless `--full` is passed; token goes via BWS_ACCESS_TOKEN env or BWS_TOKEN_FILE (never argv)."
        - "Exit codes mapped correctly (0 success, 2 usage, 1 runtime), output is TOON-ish with values redacted by default."
        - "Reviewed against the published npm tarball @masculinecache/bws-axi@1.0.1 (gitHead e3a122cf…, sha256 e8cbfab67f826a0cf3a6e977bffe248b931072d64fc200d9e255e326a3a4266)."
      exception: "Missing `-v`/`-V` fast path — `--version` probing only via AXI principle 10: the CLI rejects the short hand and prints an error, no bare `bws-axi <version>` probing."
  - name: ha-axi
    url: https://github.com/batamire/ha-axi
    author: batamire
    domain: Home Assistant
    description: "Inspect entities, call services behind safety gates, render templates, and read area/device registries over Home Assistant REST and WebSocket with token-efficient TOON output."
    admission:
      status: exception
      reviewed_revision: cad5c4532db19f9d6a2187082f136e2daccfa467
      reviewed_components:
        - src/cli.ts
        - src/ha.ts
        - src/service.ts
        - src/safety.ts
        - src/config.ts
        - src/ws.ts
        - src/bridge.ts
        - src/bin/ha-axi.ts
      source_observations:
        - "src/cli.ts registers ping, entity, service, template, history, logbook, area, device, statistics, and setup through runAxiCli, and its formatError maps AxiError VALIDATION_ERROR/AUTH_MISSING to exit 2 and every other failure to exit 1 while emitting a structured TOON error object with corrective suggestions."
        - "src/service.ts serviceCall refuses the gated domains from src/safety.ts (lock, alarm_control_panel, cover) before any network activity with no override, refuses bulk or non-concrete targets (--all, area, device, entity_id 'all', or no explicit target) unless --i-mean-all is passed, and --dry-run prints the exact request without sending anything."
        - "src/ha.ts sends the token only via the Authorization header, retries GET requests once on 5xx while never retrying POST mutations, applies a 5s connect timeout plus a configurable request timeout, and scrub()s the token out of every error message; src/config.ts resolves flags > HASS_URL/HASS_TOKEN env > config profiles and warns when the profile file is group/world-readable."
        - "src/ws.ts runs a stateless one-shot WebSocket bridge (connect, auth hello, one id-correlated request/response, close, hard deadline) requiring Node >=22's native WebSocket, used by src/bridge.ts for area/device registry and statistics reads; all output is TOON-encoded via @toon-format/toon."
      exception: "`service call` performs mutations without an AXI-level --confirm flag; safety relies on hard-refused gated domains, bulk-target refusals with the explicit --i-mean-all override, and --dry-run, and a profile with `insecure = true` disables TLS verification with a stderr warning."
  - name: calcom-axi
    url: https://github.com/simkimsia/calcom-axi
    author: simkimsia
    domain: Scheduling
    description: "Read your Cal.com agenda, bookings and one booking's attendees and meeting link, event types, availability schedules, free slots for an event type, and the logged-in account. Wraps the Cal.com CLI (calcom) with agent-ergonomic TOON output and structured errors."
  - name: screencast-axi
    url: https://github.com/Valzon/screencast-axi
    author: Valzon
    domain: Screencasts
    description: "Scaffold, rehearse, and record scripted Playwright walkthroughs of any website into mp4, webm, and a poster with a synthetic cursor and burnt-in captions - TOON output, structured errors, and a content-first status view via axi-sdk-js. Requires ffmpeg."
  - name: basecamp-axi
    url: https://github.com/calebl/basecamp-axi
    author: calebl
    domain: Project management
    description: "Projects, to-dos, cards, messages, comments, Campfire chat, people, search, and cross-project assignment reports. Wraps the official `basecamp` CLI with TOON output, pre-computed totals, idempotent mutations, and a `--confirm` gate on trash/archive/restore."
    admission:
      status: admitted
      reviewed_revision: ef8d0ea4b549d3441cbd0286a7d7ae638d58c8a9
      reviewed_components:
        - bin/basecamp-axi.ts
        - src/cli.ts
        - src/basecamp.ts
        - src/errors.ts
        - src/args.ts
        - src/toon.ts
        - src/commands/home.ts
        - src/commands/todo.ts
        - src/commands/report.ts
        - src/commands/recording.ts
      source_observations:
        - "bin/basecamp-axi.ts answers -v/--version through axi-sdk-js/fast-path before importing the command graph; src/cli.ts registers project, todo, todolist, card, message, comment, chat, people, search, report, recording, url, and setup through runAxiCli with per-command help text, and its formatError renders every failure as a TOON `error`/`code`/`help` block with the exit code from exitCodeForError."
        - "src/basecamp.ts shells out to `basecamp <args> --json --no-hints --no-stats`, parses the JSON envelope, and src/errors.ts maps envelope codes and exit codes to AxiError codes (VALIDATION_ERROR, DEPENDENCY_MISSING, DEPENDENCY_OUTDATED, TOOL_DISABLED, NOT_FOUND, AUTH_REQUIRED, FORBIDDEN, RATE_LIMITED, NETWORK_ERROR, AMBIGUOUS, API_ERROR) with a corrective suggestion each; src/args.ts rejects unknown flags and extra positionals as VALIDATION_ERROR."
        - "src/toon.ts encodes lists and details with @toon-format/toon, and countLine prints `count: N of T total` from the totals parsed in src/basecamp.ts; src/commands/home.ts is a content-first dashboard of assigned items with an overdue count and next-step help lines, degrading to a structured unavailable message when the CLI is missing or unauthenticated."
        - "src/commands/todo.ts `done`/`reopen` read current state first and report `already done (no-op)` instead of re-mutating; src/commands/recording.ts gates trash, archive, and restore behind --confirm, printing a `would_change` preview with from/to status and the exact command to apply when the flag is absent, skipping items already in the target status, and emitting an undo hint after applying. No other command deletes or destroys data."
  - name: msgraph-axi
    url: https://github.com/jeffreyhaen/msgraph-axi
    author: jeffreyhaen
    domain: Microsoft 365 / Outlook
    description: "Read, search, draft, and send Outlook mail and manage calendars over the `m365` CLI - read-only by default, with TOON output and mutations behind `--execute`/`--confirm`."
    admission:
      status: admitted
      reviewed_revision: cd31b17b1f2594b5a77f1738ec0f359eb5fb1555
      reviewed_components:
        - src/bin/msgraph-axi.ts
        - src/main.ts
        - src/toon.ts
        - src/flags.ts
        - src/backend.ts
        - src/commands/home.ts
        - src/commands/mail.ts
        - src/commands/calendar.ts
        - src/commands/mailflow.ts
        - src/commands/raw.ts
      source_observations:
        - "src/bin/msgraph-axi.ts answers -v/--version and --help through axi-sdk-js/fast-path before importing the command graph, and src/main.ts registers auth, mail, calendar, user, and raw through runAxiCli with per-command help plus a `home` handler, so a bare run renders the content-first view instead of help text."
        - "src/toon.ts caps cells at CELL_LIMIT = 200 with an ellipsis unless --full is passed, and each list command declares a token-efficient default schema (MAIL_LIST_DEFAULTS = id/from/subject/received, EVENT_DEFAULTS = id/subject/start/end) that `--fields a,b` extends; list results carry a `count` aggregate, a `truncated` marker, and `help[]` next-step lines, while src/commands/home.ts degrades to a signedIn: false object with sign-in help instead of throwing when unauthenticated."
        - "src/flags.ts collects unknown --flags and raises VALIDATION_ERROR naming the subcommand's valid flags (observed at this revision: `mail list --bogus` prints a TOON error/code/help block and exits 2, and an unknown command exits 2); src/backend.ts spawns `m365` with stdin ignored so no agent-driven path can block on a prompt, and the single stdio: inherit call is the explicit `auth login` device-code flow."
        - "Writes are gated consistently: src/commands/mail.ts `mail send`, src/commands/calendar.ts `calendar create`/`update`, and src/commands/mailflow.ts `mail draft` return a preview with `Run with --execute ...` help and never call `m365` without --execute; `mail delete`, `calendar cancel`, and `calendar delete` require an exact-match `--execute --confirm <id>`; src/commands/raw.ts applies the same --execute rule to raw POST/PUT/PATCH/DELETE."
  - name: frontier-axi
    url: https://github.com/oguzalp7/frontier-axi
    author: oguzalp7
    domain: Pre-flight SDLC & Cognitive Bridge
    description: "Stage ambiguous ideas and architectural inquiries until grilling settles them into tasks-axi tickets with token-efficient TOON output."
    admission:
      status: exception
      reviewed_revision: 6e17b3ec0895843c396c9c4c72e22252be99beb4
      reviewed_components:
        - bin/frontier-axi.ts
        - src/cli.ts
        - src/toon.ts
        - src/storage.ts
        - src/commands/promote.ts
        - src/commands/crud.ts
        - src/commands/home.ts
        - src/errors.ts
        - src/args.ts
        - src/index.ts
        - src/version.ts
      source_observations:
        - "bin/frontier-axi.ts answers bare -v/-V/--version through axi-sdk-js/fast-path with leaf src/version.ts before dynamically importing the command graph; src/cli.ts registers add/list/show/update/question/promote/done/cancel/reopen via runAxiCli with content-first home."
        - "src/toon.ts encodes dashboard/list/show with @toon-format/toon; home summary carries active_frontiers/open_questions plus help[]; show accepts --full while truncate() caps body/reason/question text at 80 chars."
        - "src/args.ts requireNoUnknownFlags raises VALIDATION_ERROR on command paths; errors use axi-sdk-js exitCodeForError (VALIDATION_ERROR→2, else→1); add/done/cancel/reopen/promote are idempotent already-no-ops; promote blocks open questions unless --force and spawns tasks-axi via spawnSync argv (not shell)."
      exception: "src/toon.ts truncate()/renderShow truncates body/reason/question text to 80 chars with '...' only — no total-size hint and no --full help line when truncated (AXI principle 3); src/toon.ts renderActiveList empty path emits encode({ active: [] }) without definitive zero-results text (AXI principle 5)."