@knowttl/artium-axi 0.0.16 → 0.0.18

package/README.md

@@ -155,6 +155,7 @@ Use `--host codex`, `--host opencode` or `--host pi` without `--hook` for those
 Only Claude Code supports the optional `SessionStart` hook, which injects the `tools` discovery output.
 Setup preserves unrelated settings and refuses edited/unmanaged skills unless `--force` is explicit.
 Re-run setup after moving the executable or changing grants; skills for removed grants are retained and reported.
+On Windows, installed skills include labelled PowerShell and Git Bash invocations; use the command for your shell.
 See [installation paths and manual removal](docs/client-reference.md#agent-installation) before uninstalling.
 Artium's authenticated setup fetches managed skills; a standalone skill installer does not configure this server account.
 
@@ -163,7 +164,13 @@ Artium's authenticated setup fetches managed skills; a standalone skill installe
 All tools start disabled; write access defaults to off.
 Administrator capability alone grants no tool access; upstream permissions remain an additional boundary.
 
-Microsoft Graph supports the `entra` pack only; the bundled upstream `security hunting query` command for Defender XDR advanced hunting is unavailable through Artium.
+Microsoft Graph defaults to the `entra` pack.
+Administrators can opt in to the single read-only `security hunting query` command for Defender XDR advanced hunting with `enabledPacks: ["entra", "security"]` in the managed tool settings.
+Hunting accepts exactly one UTF-8 plain-text upload named `query.kql`, at most 64 KiB, through `artium-axi mg-axi security hunting query --file query.kql`.
+See [client input handling](docs/client-reference.md#command-surface-and-subcommands) for local file paths and upload restrictions.
+Queries must use the upstream restricted read-only KQL subset.
+The existing mg-axi role grant is required; other security commands remain unavailable.
+See [Graph credential setup](docs/tool-credentials.md#microsoft-graph) for hunting permissions and consent; tenant acceptance remains unverified.
 
 Falcon investigation reads include detection lineage, process details and trees, existing sandbox reports, FileVantage changes and device-control policy details.
 

package/bin/artium-axi.mjs

@@ -20191,10 +20191,14 @@ var nativeSettingsSchemas = {
   "awx-axi": external_exports.strictObject({ allowWrites: external_exports.boolean().optional() }),
   "ldap-axi": external_exports.strictObject({}),
   "ado-axi": external_exports.strictObject({ allowWrites: external_exports.boolean().optional() }),
-  "mg-axi": external_exports.strictObject({ preview: external_exports.boolean().optional(), writes: external_exports.strictObject({
-    allowWrites: external_exports.boolean(),
-    operations: external_exports.array(external_exports.string().min(1).max(256)).min(1).max(64)
-  }).optional() }),
+  "mg-axi": external_exports.strictObject({
+    enabledPacks: external_exports.array(external_exports.enum(["entra", "security"])).min(1).max(2).refine((packs) => packs.includes("entra") && new Set(packs).size === packs.length).optional(),
+    preview: external_exports.boolean().optional(),
+    writes: external_exports.strictObject({
+      allowWrites: external_exports.boolean(),
+      operations: external_exports.array(external_exports.string().min(1).max(256)).min(1).max(64)
+    }).optional()
+  }),
   "falcon-axi": external_exports.strictObject({
     allowWrites: external_exports.boolean().optional(),
     rtr: falconRtrSettingsSchema.optional(),
@@ -20744,7 +20748,7 @@ import { resolve } from "node:path";
 // package.json
 var package_default = {
   name: "artium-axi",
-  version: "0.0.16",
+  version: "0.0.18",
   private: true,
   license: "MIT",
   type: "module",
@@ -29837,7 +29841,8 @@ var mg_axi_default = {
       "home",
       "doctor",
       "entra",
-      "api get"
+      "api get",
+      "security hunting query"
     ],
     example: [
       "entra",
@@ -29937,11 +29942,12 @@ var mg_axi_default = {
       "home",
       "doctor",
       "entra",
-      "api get"
+      "api get",
+      "security hunting query"
     ],
     inputs: {
       stdin: "cursor - only",
-      files: "unsupported",
+      files: "security hunting query only: one UTF-8 query.kql upload, at most 64 KiB; fixed runner leaf name",
       cursor: "opaque token or stdin; never a path",
       api: "reviewed GET routes only; pinned Graph destination and operation gates retained"
     },
@@ -29956,7 +29962,8 @@ var mg_axi_default = {
     ],
     knownOutputScanValues: [
       "clientSecret and trimmed clientSecret",
-      "privateKey and normalized PEM"
+      "privateKey and normalized PEM",
+      "hunting query text"
     ],
     outputScanLimit: "Upstream-minted Graph tokens and assertions are not available during prepare; live redaction remains unverified.",
     resources: {
@@ -44207,7 +44214,7 @@ import { homedir as homedir2 } from "node:os";
 import { dirname as dirname2, join as join2, resolve as resolve2 } from "node:path";
 
 // skill/artium-axi/SKILL.md
-var SKILL_default = "---\nname: artium-axi\ndescription: Discover and run managed commands through Artium, using the signed-in account and its granted tools.\n---\n\nUse artium-axi tools first for requests involving data from Artium-managed tools.\nRun `artium-axi tools` to discover the tools available to this account before choosing a tool.\nRun `artium-axi tools show <tool>` for its commands and a vetted example, then run `artium-axi <tool> <args>`.\nFollow the returned next commands; they already include the Artium prefix.\nKeep upstream arguments intact and use the managed credentials rather than configuring an upstream CLI directly.\n\nIf artium-axi is absent from PATH, use the installed command below in place of `artium-axi` in every example:\n\n<!-- artium-axi executable -->\nThe setup command records the standalone bundle's Node invocation here.\n<!-- /artium-axi executable -->\n\nIf sign-in is required, ask the user to follow `artium-axi login --help` for their SSO or local account.\nNever request or print tokens or put passwords in arguments.\nAn empty tool list means no enabled runtime tool is available through the account's roles; ask an administrator to check grants and enabled tools.\nUse `artium-axi doctor` for connection or cached health diagnostics.\nDo not retry an uncertain command outcome, especially a write.\n";
+var SKILL_default = "---\nname: artium-axi\ndescription: Discover and run managed commands through Artium, using the signed-in account and its granted tools.\n---\n\nUse artium-axi tools first for requests involving data from Artium-managed tools.\nRun `artium-axi tools` to discover the tools available to this account before choosing a tool.\nRun `artium-axi tools show <tool>` for its commands and a vetted example, then run `artium-axi <tool> <args>`.\nFollow the returned next commands; they already include the Artium prefix.\nKeep upstream arguments intact and use the managed credentials rather than configuring an upstream CLI directly.\nSee [client input handling](https://github.com/knowttl/artium-axi/blob/main/docs/client-reference.md#command-surface-and-subcommands) for Azure stdin selection and Tenable local uploads or explicit stdin.\n\nIf artium-axi is absent from PATH, use the installed command below in place of `artium-axi` in every example:\nOn Windows, choose the labelled PowerShell or Git Bash command for your shell.\n\n<!-- artium-axi executable -->\nThe setup command records the standalone bundle's Node invocation here.\n<!-- /artium-axi executable -->\n\nIf sign-in is required, ask the user to follow `artium-axi login --help` for their SSO or local account.\nNever request or print tokens or put passwords in arguments.\nAn empty tool list means no enabled runtime tool is available through the account's roles; ask an administrator to check grants and enabled tools.\nUse `artium-axi doctor` for connection or cached health diagnostics.\nDo not retry an uncertain command outcome, especially a write.\n";
 
 // src/cli/setup.ts
 var hosts = {
@@ -44304,12 +44311,23 @@ async function setup(args) {
     throw new ArtiumError("INVALID_INPUT", `Hook installation is unsupported for ${host}: this installer has no verified ${host} hook implementation. No files were written.`, `Install the skill with artium-axi setup --host ${host} without --hook; Claude Code supports --hook.`);
   }
   const executable = resolve2(process.argv[1]);
-  const invocation = process.platform === "win32" ? `& '${process.execPath.replaceAll("'", "''")}' '${executable.replaceAll("'", "''")}'` : `${quote(process.execPath)} ${quote(executable)}`;
-  const executableBlock = `<!-- artium-axi executable -->
+  const gitBashQuote = (path) => `"${path.replaceAll("\\", "/").replaceAll(/["$`]/g, "\\$&")}"`;
+  const invocation = process.platform === "win32" ? `PowerShell:
+
+\`\`\`powershell
+& '${process.execPath.replaceAll("'", "''")}' '${executable.replaceAll("'", "''")}'
+\`\`\`
+
+Git Bash:
 
 \`\`\`sh
+${gitBashQuote(process.execPath)} ${gitBashQuote(executable)}
+\`\`\`` : `\`\`\`sh
+${quote(process.execPath)} ${quote(executable)}
+\`\`\``;
+  const executableBlock = `<!-- artium-axi executable -->
+
 ${invocation}
-\`\`\`
 
 <!-- /artium-axi executable -->`;
   const content = SKILL_default.replace(/<!-- artium-axi executable -->[\s\S]*?<!-- \/artium-axi executable -->/, () => executableBlock);
@@ -44372,23 +44390,25 @@ async function toolInput(tool, original) {
   const args = [...original];
   const input2 = {};
   let totalFileBytes = 0;
-  if ((tool === "az-axi" || tool === "hybrid-axi") && !args.some((arg) => ["--help", "-h", "--version", "-v", "-V"].includes(arg))) {
-    const fileFlags = tool === "hybrid-axi" ? hybrid_axi_default.adapterBoundary.inputFileFlags : az_axi_default.adapterBoundary.inputFileFlags;
+  const hunting = tool === "mg-axi" && args.slice(0, 3).join(" ") === "security hunting query";
+  if ((tool === "az-axi" || tool === "hybrid-axi" || tool === "tenable-axi" || hunting) && !args.some((arg) => ["--help", "-h", "--version", "-v", "-V"].includes(arg))) {
+    const fileFlags = hunting ? ["file"] : tool === "tenable-axi" ? tenable_axi_default.adapterBoundary.inputFileFlags : tool === "hybrid-axi" ? hybrid_axi_default.adapterBoundary.inputFileFlags : az_axi_default.adapterBoundary.inputFileFlags;
     for (let index = 0; index < args.length; index++) {
       if (args[index] === "--") break;
       const [flag] = args[index].split("=");
       if (!fileFlags.some((name2) => flag === `--${name2}`)) continue;
       const equals = args[index].indexOf("=");
       const path = equals < 0 ? args[++index] : args[index].slice(equals + 1);
-      if (path === "-" && tool === "hybrid-axi" && flag === "--body-file") {
+      if (path === "-" && (tool === "tenable-axi" || tool === "hybrid-axi" && flag === "--body-file")) {
         input2.stdin = (await readBounded(process.stdin, inputLimits.stdinBytes)).toString("utf8");
         continue;
       }
       if (!path || path === "-") throw new ArtiumError("UNSUPPORTED_INPUT", "A file flag requires a local file path.");
-      const name = basename(path);
+      if (hunting && (path.split(/[\\/]/).includes("..") || input2.files?.length)) throw new ArtiumError("INVALID_INPUT");
+      const name = hunting ? "query.kql" : basename(path);
       if (input2.files?.some((file2) => file2.name === name)) throw new ArtiumError("INVALID_INPUT", "Upload file names must be distinct.");
       if ((input2.files?.length ?? 0) >= inputLimits.files) throw new ArtiumError("INVALID_INPUT", "Too many upload files.");
-      const content = await readBounded(createReadStream(path), inputLimits.fileBytes);
+      const content = await readBounded(createReadStream(path), hunting ? 65536 : inputLimits.fileBytes);
       totalFileBytes += content.length;
       if (totalFileBytes > inputLimits.totalFileBytes) throw new ArtiumError("INVALID_INPUT", "Uploads exceed the total byte limit.");
       input2.files ??= [];
@@ -44403,8 +44423,35 @@ async function toolInput(tool, original) {
       leading++;
       if (!token.includes("=") && (name !== "full" || ["true", "false"].includes(args[leading]))) leading++;
     }
-    const consumesStdin = az_axi_default.commands.some((route) => ["rg query", "logs query", "api"].includes(route.handlerCommand) && route.command.split(" ").every((word, index) => args[leading + index] === word));
-    if (tool === "az-axi" && consumesStdin && !process.stdin.isTTY) {
+    const route = az_axi_default.commands.find((route2) => ["rg query", "logs query", "api"].includes(route2.handlerCommand) && route2.command.split(" ").every((word, index) => args[leading + index] === word));
+    let positional = false;
+    if (route) {
+      for (let index = leading + route.command.split(" ").length; index < args.length; index++) {
+        const token = args[index];
+        if (token === "--") {
+          positional = index + 1 < args.length;
+          break;
+        }
+        if (!token.startsWith("-") || token === "-") {
+          positional = true;
+          break;
+        }
+        const raw = token.slice(token.startsWith("--") ? 2 : 1).split("=")[0];
+        const expanded = token.startsWith("--") ? raw : route.shortFlags[raw] ?? raw;
+        const name = route.flagAliases[expanded] ?? expanded;
+        const kind = route.flags[name];
+        if (token.includes("=") || !kind) continue;
+        if (kind === "boolean") {
+          if (["true", "false"].includes(args[index + 1])) index++;
+        } else {
+          while (args[index + 1] !== void 0 && (!args[index + 1].startsWith("-") || /^-\d/.test(args[index + 1]) || az_axi_default.adapterBoundary.inputFileFlags.includes(name) && input2.files?.some((file2) => file2.name === args[index + 1]))) {
+            index++;
+            if (!["list", "literal-list"].includes(kind) || route.positionalInput) break;
+          }
+        }
+      }
+    }
+    if (tool === "az-axi" && route && !input2.files?.length && !positional && !process.stdin.isTTY) {
       const stdin = await readBounded(process.stdin, inputLimits.stdinBytes);
       if (stdin.length) input2.stdin = stdin.toString("utf8");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knowttl/artium-axi",
-  "version": "0.0.16",
+  "version": "0.0.18",
   "description": "Client CLI and embedded skill for the Artium managed tools server.",
   "license": "MIT",
   "type": "module",

package/skill/artium-axi/SKILL.md

@@ -8,8 +8,10 @@ Run `artium-axi tools` to discover the tools available to this account before ch
 Run `artium-axi tools show <tool>` for its commands and a vetted example, then run `artium-axi <tool> <args>`.
 Follow the returned next commands; they already include the Artium prefix.
 Keep upstream arguments intact and use the managed credentials rather than configuring an upstream CLI directly.
+See [client input handling](https://github.com/knowttl/artium-axi/blob/main/docs/client-reference.md#command-surface-and-subcommands) for Azure stdin selection and Tenable local uploads or explicit stdin.
 
 If artium-axi is absent from PATH, use the installed command below in place of `artium-axi` in every example:
+On Windows, choose the labelled PowerShell or Git Bash command for your shell.
 
 <!-- artium-axi executable -->
 The setup command records the standalone bundle's Node invocation here.