AnaxiGraph 0.2.0
AnaxiGraph 0.2.0 turns the architecture observatory into a practical local engineering companion: one command starts the dashboard and AnaxiMCP, and a connected coding agent can build durable semantic understanding with its own model context and tokens.
Highlights
- One-command local startup with external state, adaptive background history, clean shutdown, and optional browser opening.
- Explicit, idempotent Codex and Claude MCP connection with dry-run, project/user scopes, backups, and
anaxigraph doctor. - A shared Codex and Claude plugin for scope, impact, findings, and the complete agent-funded semantic dossier loop.
- Delta-driven Git history and canonical temporal facts that avoid re-reading and re-materializing unchanged files.
- Ranked top-20 attention queue plus a lossless, filterable findings ledger with evidence and lifecycle state.
- Honest relationship provenance for resolved, ambiguous, unresolved, and external references.
- Hardened generated Docker sidecars and a simplified four-step onboarding path.
- Reproducible wheel, source distribution, plugin bundle, SBOM, checksums, attestations, and versioned multi-architecture container release contracts.
Start locally
uvx anaxigraph up . --open --semantic agent --connect codexFor Claude Code, replace codex with claude. The durable Docker sidecar remains available through anaxigraph init . --start.
Safety boundary
The REST and MCP endpoints remain unauthenticated in 0.2.0. Keep them on loopback or behind an SSH tunnel; authenticated shared/team deployment is planned for a later phase.
Publication record
The protected workflow built and attested the release bundle successfully. Its initial OIDC exchange was rejected because the corresponding trusted publisher had not yet been registered in the existing PyPI project. With explicit maintainer authorization, the exact downloaded and checksum-verified workflow artifacts were uploaded through the emergency project-token path. PyPI's recorded SHA-256 digests match the attested GitHub assets, and a clean public uvx anaxigraph up journey passed. Register the documented release.yml / pypi publisher before the next version so routine releases use short-lived OIDC credentials.
Trusted publisher verification
The missing PyPI publisher was subsequently registered. Protected workflow run 32412357679 successfully exchanged the exact hcekne/anaxigraph / release.yml / pypi GitHub identity for a short-lived PyPI token, masked it, and discarded it without building or uploading an artifact. The temporary diagnostic branch allowance was removed; routine publication remains restricted to reviewed v* tags.