@knowttl/artium-axi 0.0.0 → 0.0.2

package/README.md

@@ -20,7 +20,7 @@ See the [evidence ledger](docs/evidence-ledger.md) for the acceptance boundaries
 ## Agent Ergonomics
 
 - Running without arguments shows identity, roles, available tools, cached health and pinned versions.
-- Tool lists use a compact `name`, `status`, `version` schema and suggest a detail view and first call.
+- Tool lists show cached health, pinned versions and write-access status and suggest a detail view and first call.
 - Empty lists explain why no enabled tool is available and direct you to an administrator.
 - Local help works before sign-in and includes usage, purpose, flags and an example.
 - Artium errors use TOON on stdout; upstream calls preserve separate stdout, stderr and exit status.
@@ -369,6 +369,7 @@ After signing in, run `node dist/cli/artium-axi.mjs setup --host codex` to insta
 The root package remains private for server development; `pnpm build:npm` stages the separate public client package in `dist/npm` using the root package version.
 Run `npm pack --dry-run ./dist/npm` to inspect the client tarball before release.
 Only the bundled CLI, skill, README, LICENSE, NOTICE and client package metadata are included.
+See [npm client releases](docs/runbook.md#npm-client-releases) for automated publishing and owner setup.
 
 ## Usage
 
@@ -377,6 +378,7 @@ Only the bundled CLI, skill, README, LICENSE, NOTICE and client package metadata
 | Command | Purpose |
 | --- | --- |
 | `artium-axi` | Show identity, roles and available tools. |
+| `artium-axi --version` | Print only the client package version and a newline, then exit without configuration, sign-in or network access. |
 | `artium-axi login --username synthetic-user` | Sign in with a local account. |
 | `artium-axi login --sso` | Sign in through browser approval with an enabled SSO provider; works on headless and SSH hosts. |
 | `artium-axi passwd` | Change your password, then sign in again. |
@@ -411,9 +413,8 @@ Other Azure commands, including the dashboard and `home`, leave stdin unread; he
 Local upload paths become leaf names in the request; duplicate leaf names and oversized input are refused.
 The API supports bounded stdin and named uploads through the [shared API contract](src/shared/api.ts).
 
-Write permission remains subject to the pinned tool's native gates and the configured adapter policy.
-Vectra writes require its configured allowlist and upstream confirmation; Artium does not add a universal confirmation flag.
-Falcon has no editable native write settings.
+See [write-access administration](docs/runbook.md#roles-credentials-and-health) for per-tool switches, native write gates and the current Falcon limitation.
+Artium does not add a universal confirmation flag.
 
 Azure writes whose outcome is unknown are not retried and return `UNKNOWN_OUTCOME` with state-check guidance; reads may still retry.
 Artium also returns this error when its runner times out, cancels or receives a process signal after starting an executed Azure write; read timeouts remain `TIMEOUT`.

package/bin/artium-axi.mjs

@@ -20048,7 +20048,7 @@ var nativeSettingsSchemas = {
     allowWrites: external_exports.boolean(),
     operations: external_exports.array(external_exports.string().min(1).max(256)).min(1).max(64)
   }).optional() }),
-  "falcon-axi": external_exports.strictObject({}),
+  "falcon-axi": external_exports.strictObject({ allowWrites: external_exports.boolean().optional() }),
   "vectra-axi": external_exports.strictObject({ writes: external_exports.strictObject({
     allowWrites: external_exports.boolean(),
     operations: external_exports.array(external_exports.string().min(1).refine((value) => value.trim().length > 0)).min(1)
@@ -20063,6 +20063,7 @@ var nativeSettingsSchemas = {
 };
 var healthSchema = external_exports.strictObject({
   status: external_exports.enum(["unconfigured", "unknown", "ok", "error", "disabled"]),
+  readOnly: external_exports.boolean().default(true),
   checkedAt: external_exports.number().int().nullable(),
   credentialRevision: external_exports.number().int().nullable(),
   errorCode: external_exports.enum(Object.keys(errors)).nullable()
@@ -20071,6 +20072,7 @@ var adminToolSchema = external_exports.strictObject({
   name: toolSchema,
   enabled: external_exports.boolean(),
   version: external_exports.string(),
+  readOnly: external_exports.boolean().default(true),
   nativeSettings: external_exports.record(external_exports.string(), external_exports.unknown()),
   revision: external_exports.number().int().positive(),
   updatedAt: external_exports.number().int().nullable(),
@@ -20394,6 +20396,7 @@ var toolsResponseSchema = external_exports.strictObject({
   tools: external_exports.array(external_exports.strictObject({
     name: toolSchema,
     version: external_exports.string(),
+    readOnly: external_exports.boolean().default(true),
     status: external_exports.enum(["unconfigured", "unknown", "ok", "error", "disabled"])
   }))
 });
@@ -20449,7 +20452,7 @@ import { rootCertificates } from "node:tls";
 // package.json
 var package_default = {
   name: "artium-axi",
-  version: "0.0.0",
+  version: "0.0.2",
   private: true,
   license: "MIT",
   type: "module",
@@ -22830,7 +22833,7 @@ var ldap_axi_default = {
 
 // src/cli/help.ts
 var commands = {
-  home: { usage: "artium-axi [tools [show <tool>]|whoami|login|passwd|logout|doctor|setup|<tool> <args>]", purpose: "Show your identity, roles and available tools.", flags: [], example: "artium-axi" },
+  home: { usage: "artium-axi [tools [show <tool>]|whoami|login|passwd|logout|doctor|setup|<tool> <args>]", purpose: "Show your identity, roles and available tools.", flags: ["--version (default false; print the client package version and exit)"], example: "artium-axi" },
   setup: {
     usage: "artium-axi setup --host <claude|codex|opencode|pi> [--hook] [--force]",
     purpose: "Install skills for your signed-in account\u2019s granted tools and an optional Claude Code session hook.",
@@ -33958,8 +33961,8 @@ accessExpiresAt: ${user.accessExpiresAt}
 }
 function toolsView(tools) {
   if (!tools.length) return "tools: 0 available\nreason: No enabled runtime tool is available through your assigned roles.\ncontact: Ask an administrator to check your role assignments and enabled tools.\nnext[1]:\n  - artium-axi whoami\n";
-  return `tools[${tools.length}]{name,status,version}:
-${tools.map((tool) => `  ${tool.name},${tool.status},${JSON.stringify(tool.version)}`).join("\n")}
+  return `tools[${tools.length}]{name,status,version,readOnly}:
+${tools.map((tool) => `  ${tool.name},${tool.status},${JSON.stringify(tool.version)},${tool.readOnly ?? true}`).join("\n")}
 next[2]:
   - artium-axi tools show ${tools[0].name}
   - artium-axi ${tools[0].name} ${toolManifests[tools[0].name].discovery.example.join(" ")}
@@ -33973,6 +33976,7 @@ function toolView(tool) {
   return `tool: ${tool.name}
 version: ${JSON.stringify(tool.version)}
 status: ${tool.status}
+readOnly: ${tool.readOnly ?? true}
 commands[${commands2.length}]: ${commands2.join(",")}
 example: artium-axi ${tool.name} ${manifest.discovery.example.join(" ")}
 upstreamHelp: ${JSON.stringify(help)}
@@ -34226,6 +34230,11 @@ next: artium-axi tools
 
 // src/cli/main.ts
 async function main(args) {
+  if (args.length === 1 && args[0] === "--version") {
+    process.stdout.write(`${cliVersion}
+`);
+    return;
+  }
   const prefixHelp = args[0] === "--help";
   if (prefixHelp) args = args.slice(1);
   const command = args[0];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knowttl/artium-axi",
-  "version": "0.0.0",
+  "version": "0.0.2",
   "description": "Client CLI and embedded skill for the Artium managed tools server.",
   "license": "MIT",
   "type": "module",