axiom

A monorepo of high-performance, Rust-built developer infrastructure. Each project below is self-contained and ships its own README — follow the links for details.

Projects

Project	What it is
agentic-workflow	Agentic Workflow (aw) is a project-iteration CLI that lets coding agents ship bounded, verified work without a human steering every step.
cap	cap keeps heavy local commands (cargo test, uv run, pnpm build, …) from eating the whole machine.
vat	vat is a local development test runner for the one operator Docker was never designed for: a coding/ML agent.
courier	courier is a stateless, GCP-hosted proxy that centralizes GitHub-issue access for every axiom CLI.
loom	Loom is the workflow scheduler in the Axiom service stack.
preview	preview manages MR-scoped UAT preview environments for GKE.
tape	Tape is the topic replay journal in the Axiom service stack.
defer	Defer is the Cloud Tasks-like delayed push-queue dispatch service in the Axiom stack.
cube	Cube is the OLAP service in the Axiom service stack.
beam	Beam is the GPU vector database in the Axiom service stack.
sift	Sift is the GCP/GKE-first operational event platform for structured logs, traces, errors, metrics, audit, and change events.
arena	N-target competitive comparison runner — fan one workload across targets, ratio + ratchet-gate, one agent-readable JSON report.
guard	Security posture gate for the cclab ecosystem.
rig	Declarative test-scenario harness engine for the cclab ecosystem.
mamba	Force-typed Python compiler.
lumen	A K8s-native, log-replicated search specialist.
jet	Jet is a Rust-native frontend toolchain.
relay	relay is the online single-cast pull work-queue broker in the Axiom stack (RabbitMQ/SQS-shaped): a producer publishes a task, a worker pulls (leases) it, runs it, and acks — each message is delivered exactly once to one of the competing consumers, then reclaimed (delete-on-ack).
keep	Cloud-native, multi-core key-value / claim-check store — the loom/relay data plane and a Redis / Dragonfly replacement.
pgpool	pgpool is the working app id for Axiom's Kubernetes-native PostgreSQL connection pooler.
meter	Local resource measurement for agent-driven Rust development.

Shared Libraries

Services and tools compose the internal libraries below instead of reimplementing transport, auth, metrics, codegen, replication, durable local storage, backup, or operator plumbing locally. Shared service capabilities belong in libs/*; apps supply domain behavior and wiring. Libraries have no user-facing CLI or release pipeline; those surfaces belong under apps/.

The prefix is the map: server-* is protocol runtime, transport-* is wire transport, service-* is an app-integrated capability, and narrower storage-*, metrics-*, peer-*, and raft-* families name their owned mechanism directly. Directory, Cargo package, and Rust crate identities move together; see Shared-library naming grammar.

Library	What it is
build-stamp	Shared build.rs stamping for service CLIs: git short SHA, build epoch, and target triple.
claim-token	Scoped claim-check access tokens; issuers sign bounded payload/key access and services verify the scope.
cli-std	Shared implementation for the required llm, upgrade, and issue CLI convention.
compass	Code-intelligence engine for navigation, analysis, refactoring, and watch workflows.
transport-h2c	Shared HTTP/2 cleartext transport: client, pool, frame-level manager, connection sizing, and optional per-connection HTTP/1.1+h2c protocol handling.
openapi-codegen	Typed TypeScript, Python, and Rust API client generation from OpenAPI 3.0/3.1 documents.
server-lifecycle	Protocol-neutral server lifecycle: bind config, shutdown/drain, readiness signals, connection budgets, and metrics hooks.
server-tcp	Shared TCP accept/runtime layer for raw protocols, proxies, and poolers, built on server-lifecycle.
server-http	Shared listener-level HTTP runtime: composes server-tcp admission/lifecycle with transport-h2c per-connection HTTP/1.1+h2c handling.
service-k8s	Kubernetes service integration: reconcile controller, leader election, workload rendering, stateful capacity planning, and resize primitives.
raft-core	Transport- and storage-agnostic, step-driven Raft consensus core.
raft-runtime	Shared Raft runtime over h2c peer transport with apply, topology, snapshots, compaction, and read-your-write propose.
service-auth	Shared request-auth middleware: extract, verify, reject, and inject verified identity into service handlers.
service-backup	Shared backup contract: destination and policy schema, sink trait, local and S3-compatible sinks, and runner primitive.
service-executor	Generic bounded asynchronous executor mechanics; services retain committed ownership, fencing, retry, and outcome policy.
storage-durable	Shared durable local storage primitives: fsync policy, atomic replace, CRC-framed append logs, and sequence-named snapshot stores.
service-observability	Protocol-neutral service observability composition: logging, stable identity, optional OTLP export, metric-provider semantics, and lifecycle counters.
service-http	Standard HTTP service policy shell: probes, lifecycle adapters, OpenAPI/docs routes, request-context propagation, and shared errors.
metrics-prometheus	Lock-free Prometheus primitives and text encoder for service metrics.
peer-tls	Peer mTLS material loading and rustls server/client config builders.
surface	Renderer-neutral UI element model shared by Jet WASM, native readers, renderers, and parity tools.
ui-runtime	Renderer-neutral component runtime: hooks, fiber storage, mount, flush, and update scheduling.

Install

Each binary ships a curl | sh installer that downloads the right prebuilt binary from GitHub Releases and drops it on your PATH (default $HOME/.local/bin). Self-update later with <binary> upgrade. Projects without an installer yet are marked coming soon.

Project	Binary	Install
agentic-workflow	aw	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/agentic-workflow/install.sh | sh
arena	arena	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/arena/install.sh | sh
cap	cap	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/cap/install.sh | sh
courier	courier	coming soon
guard	guard	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/guard/install.sh | sh
jet	jet	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/jet/install.sh | sh
beam	beam	coming soon
cube	cube	coming soon
defer	defer	coming soon
keep	keep	coming soon
loom	loom	coming soon
lumen	lumen	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/lumen/install.sh | sh
mamba	mamba	coming soon
meter	meter	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/meter/install.sh | sh
pgpool	pgpool	coming soon
preview	preview	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/preview/install.sh | sh
sift	sift	coming soon
relay	relay	coming soon
rig	rig	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/rig/install.sh | sh
tape	tape	coming soon
vat	vat	curl -fsSL https://raw.githubusercontent.com/chrischeng-c4/axiom/main/apps/vat/install.sh | sh

Runtime Evidence Loop

The runtime tools are intentionally split by responsibility:

• vat prepares and runs the local environment.
• rig drives requests, queries, and workload traffic.
• meter measure observes a running executable or service from the outside and records cpu time, wall time, peak RSS, and optional stack samples under .meter/.
• meter profile folds embedded/source-aware profiling data, such as phase breakdowns emitted by code that uses meter APIs.
• arena compares collected benchmark results across targets.
• guard turns static and runtime security evidence into one posture report.

Contributing

See CONTRIBUTING.md for the repo-wide authoring contract: how to shape files, paths, and names so the tree stays legible to agents and tooling, plus the shared service archetype (a common service baseline with StatefulSet and Deployment workload profiles, HTTP/2 + OpenAPI, k8s-native) and the CLI convention every binary follows (llm / upgrade / issue).

License

MIT