@knowttl/artium-axi 0.0.29 → 0.0.31

package/bin/artium-axi.mjs

@@ -20,7 +20,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "artium-axi",
-      version: "0.0.29",
+      version: "0.0.31",
       private: true,
       license: "MIT",
       type: "module",
@@ -55,8 +55,12 @@ var init_package = __esm({
       devDependencies: {
         "@actions/expressions": "0.3.61",
         "@types/better-sqlite3": "9.6.0",
+        "@types/css-tree": "3.2.0",
         "@types/node": "22.20.5",
+        "css-tree": "3.2.1",
         esbuild: "0.28.2",
+        parse5: "8.0.0",
+        postcss: "8.5.29",
         typescript: "5.9.3",
         vitest: "4.1.0",
         yaml: "2.9.1"
@@ -20520,13 +20524,13 @@ var init_errors3 = __esm({
       CREDENTIAL_INVALID: { status: 503, message: "The stored credential is invalid.", next: "Ask an administrator to check the named field, matching master key and credential JSON, then save and test again." },
       CREDENTIAL_EXPIRED: { status: 503, message: "The GitHub credential expired or was revoked.", next: "Ask an administrator to reconnect at /admin/tools/gh-axi. Tokens are never refreshed automatically." },
       FLAG_BLOCKED: { status: 400, message: "The arguments override the managed tool boundary.", next: "Remove destination, tenant, credential or local configuration overrides." },
-      CREDENTIAL_NOT_CONFIGURED: { status: 503, message: "No credential is configured for the tool.", next: "Ask an administrator to save a credential and run Test credential." },
+      CREDENTIAL_NOT_CONFIGURED: { status: 503, message: "No credential is configured for the tool.", next: "Ask an administrator to save a credential and run Test connection." },
       UPSTREAM_AUTH_FAILED: { status: 503, message: "The upstream service rejected the credential.", next: "Ask an administrator to check the provider code, identity, secret expiry and permissions, then test again." },
       UPSTREAM_NETWORK_FAILED: { status: 503, message: "The upstream service could not be reached.", next: "Ask an administrator to check DNS, routing, firewall rules and the diagnostic host and stage." },
       UPSTREAM_TLS_FAILED: { status: 503, message: "The upstream certificate could not be verified.", next: "Ask an administrator to check the host, certificate chain and trusted CA configuration." },
       UPSTREAM_RESPONSE_INVALID: { status: 503, message: "The upstream service returned a response the tool could not accept.", next: "Ask an administrator to inspect the diagnostic message and hint, check the service endpoint and API compatibility, then test again." },
       TOOL_REJECTED_INPUT: { status: 503, message: "The tool rejected its configuration or arguments.", next: "Ask an administrator to correct the field or combination named by the tool and test again." },
-      TOOL_FAILED: { status: 503, message: "The tool exited unsuccessfully.", next: "Ask an administrator to inspect the diagnostic message and hint from Test credential." },
+      TOOL_FAILED: { status: 503, message: "The tool exited unsuccessfully.", next: "Ask an administrator to inspect the diagnostic message and hint from Test connection." },
       INVALID_INPUT: { status: 400, message: "The request input is invalid.", next: "Check the request fields and content type." },
       UNSUPPORTED_INPUT: { status: 400, message: "The input file is not a matching upload.", next: "Upload the file using a reviewed input-file flag." },
       SECRET_IN_OUTPUT: { status: 500, message: "A known secret was detected in tool output.", next: "Check upstream output redaction before retrying." },
@@ -23325,18 +23329,18 @@ var init_falcon_axi = __esm({
       generatedBy: "scripts/falcon-inventory.mjs",
       tool: "falcon-axi",
       repository: "https://github.com/knowttl/falcon-axi.git",
-      tag: "v0.8.4",
-      commit: "3cb3b59faa59ca881daaa9bb3b6c5ffcd300d92c",
-      version: "0.8.4",
+      tag: "v0.9.0",
+      commit: "dd9fa40569912587794223f3042513eec1f61ff6",
+      version: "0.9.0",
       distribution: {
-        filename: "falcon_axi-0.8.4-py3-none-any.whl",
-        sha256: "bb4d428eceac453375ae000faf2f7c8abb8e59fd305b564e248f6199686932b9",
-        provenance: "https://pypi.org/integrity/falcon-axi/0.8.4/falcon_axi-0.8.4-py3-none-any.whl/provenance"
+        filename: "falcon_axi-0.9.0-py3-none-any.whl",
+        sha256: "f1d83f7302709fc0f5ead3c4688c3ce956fa03536cec4566925b760e3ee09ac6",
+        provenance: "https://pypi.org/integrity/falcon-axi/0.9.0/falcon_axi-0.9.0-py3-none-any.whl/provenance"
       },
       skillSha256: "893c2ad3a474d76734117e4e46a91b19278f1fdeafaf1b69189be4a09da333b1",
       parser: {
         path: "falcon_axi/cli.py",
-        sha256: "46922e76fea39c6b3d1697e3801c226703f2b868dd284f74fc0444ed06f38742",
+        sha256: "f7e5bc5fd97b7e6456bfd3ba2d766d826173fc43bf700059e7a3db9bdd17f3cb",
         aliases: {},
         shortFlags: {},
         repeats: "last value wins",
@@ -23508,7 +23512,8 @@ var init_falcon_axi = __esm({
             config: "value",
             profile: "value",
             since: "value",
-            limit: "value"
+            limit: "value",
+            hostname: "value"
           },
           input: "No file or raw URL input; cursors and queries remain native values"
         },
@@ -23521,7 +23526,8 @@ var init_falcon_axi = __esm({
             "member-cid": "value",
             "no-member-cid": "boolean",
             config: "value",
-            profile: "value"
+            profile: "value",
+            hostname: "value"
           },
           input: "No file or raw URL input; cursors and queries remain native values"
         },
@@ -25067,11 +25073,11 @@ var init_vectra_axi = __esm({
     vectra_axi_default = {
       generatedBy: "scripts/upstream-inventory.mjs",
       tool: "vectra-axi",
-      version: "0.1.13",
-      integrity: "sha512-oUaTXzT/O9YzVfxHwSarEvLxvUBGwyPoYnAMWa0+tv/7KvG62fkDrOSBb6gXHl9uxfTvpHTOLxzpNATR1VgMwA==",
+      version: "0.1.14",
+      integrity: "sha512-3fQ2IwQxJnd88lIKlGW0N3bce2/sS+iLWe2oUEEJ82Ntid2kVQtXnUdawJtmXQRqiwssBe/HAsH0QGi2pqhejg==",
       parserEvidence: "Installed pinned catalogue exports, provisional until adapter acceptance",
-      packageManifestSha256: "b763137981f5f8ff2c188de28d436e28f4ab09edfabd5a0d29df318351604475",
-      skillSha256: "d56d7dd6f5da32d21baaf3ded909908767a2519e025373f3447bfc4755bd1e09",
+      packageManifestSha256: "cceb0e722a79800cc9c21b50f5b83afac2a31278e88ecd7134918def53b58786",
+      skillSha256: "4c14b7fa56eae1a9bdf24b3fdeefe6d77ba7c470b056bd854fb561eebb511714",
       environment: [
         {
           name: "VECTRA_AXI_CONFIG",
@@ -25328,7 +25334,8 @@ var init_vectra_axi = __esm({
             "--state <state>": "Filter by server-side detection state",
             "--detection-type <type>": "Filter by server-side detection type",
             "--detection-category <category>": "Filter by server-side detection category",
-            "--host-id <id>": "Filter by server-side host ID (positive integer); find it with host list --name <text>, then detection list --host-id <id>",
+            "--host-id <id>": "Filter by server-side host ID (positive integer); cannot combine with --host-name",
+            "--host-name <text>": "Resolve a server-side host name search before listing detections; requires one unique ID in a complete bounded lookup, shares traversal budgets; cannot combine with --host-id",
             "--tags <tags>": "Filter by server-side tags",
             "--certainty-gte <score>": "Filter by server-side minimum certainty",
             "--threat-gte <score>": "Filter by server-side minimum threat",
@@ -25372,7 +25379,7 @@ var init_vectra_axi = __esm({
         },
         source: {
           path: "dist/src/catalogue.js",
-          sha256: "a9cb858df84d6d48f6e745b906235514743c08716a99d9a7f05b15e16b8d1b01"
+          sha256: "0a8b291772b3dd246ed8ee12868d6c0253063e69d697d0e9e80cf357306c4025"
         }
       },
       flags: [
@@ -25548,6 +25555,10 @@ var init_vectra_axi = __esm({
           name: "host-id",
           disposition: "passthrough candidate"
         },
+        {
+          name: "host-name",
+          disposition: "passthrough candidate"
+        },
         {
           name: "id",
           disposition: "passthrough candidate"
@@ -25792,6 +25803,7 @@ var init_vectra_axi = __esm({
             "detection-type": "value",
             "detection-category": "value",
             "host-id": "value",
+            "host-name": "value",
             tags: "value",
             "certainty-gte": "value",
             "threat-gte": "value",
@@ -27131,11 +27143,11 @@ var init_az_axi = __esm({
     az_axi_default = {
       generatedBy: "scripts/upstream-inventory.mjs",
       tool: "az-axi",
-      version: "0.1.16",
-      integrity: "sha512-rYAA0J3Af8UiNj5si+T5dfAm1zVmxUcbvppF6uIdSCVrN6eVZH6N7GqKv5PY32Bcu8b/fAHh+VPFiuRliCRD1Q==",
+      version: "0.1.17",
+      integrity: "sha512-+c5nDJGeX4p51VbRhca2W93LcIRiSda0jLGpfGZH8KhXnh+zneq/PjzpGdNd2ZbvWtJ3l70uq7fxYxFp13XZQw==",
       parserEvidence: "Installed pinned catalogue exports, provisional until adapter acceptance",
-      packageManifestSha256: "fa9645a992d8884d6035f40e0ef5d31f46051faae824199fde793c61aeac6ccc",
-      skillSha256: "3054197371c475a805e51b184ab1a528dfd19f39a13ede5d919f265e586edc01",
+      packageManifestSha256: "a10755b0cbce704e1e8549c153c625881bee78b74b63096be7ebe56d43c3491c",
+      skillSha256: "8fee4f47425068234548e808506d21a3d6966382e155e914007cbc66c04d5c75",
       environment: [
         {
           name: "AZ_AXI_CONFIG",
@@ -27394,7 +27406,7 @@ var init_az_axi = __esm({
       tokenResourceSources: [
         {
           path: "dist/lib/registry.js",
-          sha256: "dc1eb46c43aa5232b58acfb1d174fe2728491a3a6da28fa3cca27fed79494efd"
+          sha256: "4ad87874cf0d9c675ac5d792696c2f2ba97c3088d8ede8696afb6ffef1fe225a"
         },
         {
           path: "dist/lib/client.js",
@@ -27446,6 +27458,10 @@ var init_az_axi = __esm({
           name: "aggregation",
           disposition: "passthrough candidate"
         },
+        {
+          name: "alert-limit",
+          disposition: "passthrough candidate"
+        },
         {
           name: "all",
           disposition: "passthrough candidate"
@@ -27554,6 +27570,10 @@ var init_az_axi = __esm({
           name: "end-time",
           disposition: "passthrough candidate"
         },
+        {
+          name: "entity-limit",
+          disposition: "passthrough candidate"
+        },
         {
           name: "execute",
           disposition: "passthrough candidate"
@@ -29223,6 +29243,46 @@ var init_az_axi = __esm({
           },
           positionalInput: false
         },
+        {
+          command: "sentinel incident bundle",
+          canonicalCommand: "sentinel incident bundle",
+          handlerCommand: "sentinel incident bundle",
+          tokenResources: [
+            "arm"
+          ],
+          effect: "read",
+          capability: "native",
+          flags: {
+            profile: "value",
+            tenant: "value",
+            subscription: "list",
+            "management-group": "value",
+            config: "value",
+            help: "boolean",
+            full: "boolean",
+            fields: "list",
+            limit: "value",
+            all: "boolean",
+            "max-rows": "value",
+            "workspace-name": "value",
+            "resource-group": "value",
+            workspace: "value",
+            name: "value",
+            "incident-id": "value",
+            ids: "value",
+            "alert-limit": "value",
+            "entity-limit": "value"
+          },
+          flagAliases: {},
+          shortFlags: {
+            h: "help",
+            s: "subscription",
+            g: "resource-group",
+            n: "name",
+            w: "workspace"
+          },
+          positionalInput: false
+        },
         {
           command: "sentinel incident list-alert",
           canonicalCommand: "sentinel incident list-alert",
@@ -31855,11 +31915,11 @@ var init_mg_axi = __esm({
     mg_axi_default = {
       generatedBy: "scripts/upstream-inventory.mjs",
       tool: "mg-axi",
-      version: "0.1.18",
-      integrity: "sha512-eAdAfMWD7gx+1bX7keI4inSzP+7e7JlFk1X7Y6E3DNx4bo5eTfBxdSv/MT62B6uWFsLKVHu0WEhuBB553u5pDw==",
+      version: "0.1.19",
+      integrity: "sha512-8y7vQ32jGnzhMQ2zKBQWtLljZI1rgxkJVpY1Qxww2FtSnTwmaOzdo5+djdDXDJxYXE/azqI6Wrs6/5nceuL7jA==",
       parserEvidence: "Installed pinned catalogue exports",
-      packageManifestSha256: "10e74ec55cddc3125609be50e633db0ff8bcd1b350a0cde4f02f205f80ec0ba7",
-      skillSha256: "682d1d608593aa438488a41b894c3068243ab9897cbcadcac0184aaa2dd09d49",
+      packageManifestSha256: "2805d8d261be14b9b7601867c3bcfd78ab831cb7a383bf81308af91f7974c76e",
+      skillSha256: "efdc55d2c4a7cee3dd46250bc844385c2b6c4ebf0c9e0072147c08599461f885",
       environment: [
         {
           name: "MG_AXI_CONFIG"
@@ -31897,11 +31957,11 @@ var init_mg_axi = __esm({
       environmentSources: [
         {
           path: "dist/profiles.js",
-          sha256: "2f681aeb6e28398b3850865ff239490f74569f02a21926af97f7777fa4350b1f"
+          sha256: "94c9684de6b0db8a41c7d66aa99ad9263b618dd37d76cbb6d0ecf639b3ce791c"
         },
         {
           path: "dist/mutations.js",
-          sha256: "80857b6fadd16a884d8441a2b23bf1bee0f25d1fc3c52e19b8f11a5d220ddb38"
+          sha256: "ecfb0f5bf8bf4a388f1b5c53783b0904207c9b7b9a2d0f21808f58d80548d526"
         },
         {
           path: "dist/msal-app-provider.js",
@@ -31951,11 +32011,11 @@ var init_mg_axi = __esm({
         sources: [
           {
             path: "dist/profiles.js",
-            sha256: "2f681aeb6e28398b3850865ff239490f74569f02a21926af97f7777fa4350b1f"
+            sha256: "94c9684de6b0db8a41c7d66aa99ad9263b618dd37d76cbb6d0ecf639b3ce791c"
           },
           {
             path: "dist/mutations.js",
-            sha256: "80857b6fadd16a884d8441a2b23bf1bee0f25d1fc3c52e19b8f11a5d220ddb38"
+            sha256: "ecfb0f5bf8bf4a388f1b5c53783b0904207c9b7b9a2d0f21808f58d80548d526"
           }
         ]
       },
@@ -32052,15 +32112,15 @@ var init_mg_axi = __esm({
         sources: [
           {
             path: "dist/catalogue.js",
-            sha256: "cb5ceac3c11aa79697cb0b51bf416d70e3a5b3382058b102de128ea147dbe318"
+            sha256: "74379919181b079e6323d8a76342fd4b32f253031886e3c42b3e61b9e3ecbefc"
           },
           {
             path: "dist/cli.js",
-            sha256: "d11e0f6b5c5c694b0be07d7862d59bc74609cfe01c02ceee8627122bf9c1a683"
+            sha256: "762b0e3bffbd311730cae8456d7cfc289f08b0fe3825632a8b5d2acef58d19c0"
           },
           {
             path: "dist/profiles.js",
-            sha256: "2f681aeb6e28398b3850865ff239490f74569f02a21926af97f7777fa4350b1f"
+            sha256: "94c9684de6b0db8a41c7d66aa99ad9263b618dd37d76cbb6d0ecf639b3ce791c"
           },
           {
             path: "dist/msal-app-provider.js",
@@ -32068,7 +32128,7 @@ var init_mg_axi = __esm({
           },
           {
             path: "dist/mutations.js",
-            sha256: "80857b6fadd16a884d8441a2b23bf1bee0f25d1fc3c52e19b8f11a5d220ddb38"
+            sha256: "ecfb0f5bf8bf4a388f1b5c53783b0904207c9b7b9a2d0f21808f58d80548d526"
           }
         ]
       },
@@ -32194,11 +32254,11 @@ var init_mg_axi = __esm({
         parserSources: [
           {
             path: "dist/catalogue.js",
-            sha256: "cb5ceac3c11aa79697cb0b51bf416d70e3a5b3382058b102de128ea147dbe318"
+            sha256: "74379919181b079e6323d8a76342fd4b32f253031886e3c42b3e61b9e3ecbefc"
           },
           {
             path: "dist/cli.js",
-            sha256: "d11e0f6b5c5c694b0be07d7862d59bc74609cfe01c02ceee8627122bf9c1a683"
+            sha256: "762b0e3bffbd311730cae8456d7cfc289f08b0fe3825632a8b5d2acef58d19c0"
           },
           {
             path: "dist/mail-message-writes.js",
@@ -32214,7 +32274,7 @@ var init_mg_axi = __esm({
           },
           {
             path: "dist/mail-write-runner.js",
-            sha256: "5baeb554c6f4c7a329eef51b8e5d5f477d3dead71e1074028033f718eb4a141c"
+            sha256: "99ff0f353dce588f97edebfd97e11285456d370bf6199bebd0c5303aac606397"
           },
           {
             path: "dist/mail-download.js",
@@ -32222,7 +32282,7 @@ var init_mg_axi = __esm({
           },
           {
             path: "dist/mutations.js",
-            sha256: "80857b6fadd16a884d8441a2b23bf1bee0f25d1fc3c52e19b8f11a5d220ddb38"
+            sha256: "ecfb0f5bf8bf4a388f1b5c53783b0904207c9b7b9a2d0f21808f58d80548d526"
           }
         ]
       },
@@ -32395,6 +32455,9 @@ var init_mg_axi = __esm({
         {
           name: "odata"
         },
+        {
+          name: "offline"
+        },
         {
           name: "operation-id"
         },
@@ -32483,6 +32546,7 @@ var init_mg_axi = __esm({
           flags: {
             help: "boolean",
             profile: "value",
+            offline: "boolean",
             config: "value"
           },
           positionalInput: false
@@ -34974,6 +35038,18 @@ var init_mg_axi = __esm({
           },
           positionalInput: false
         },
+        {
+          command: "entra risk-detection correlate",
+          flags: {
+            help: "boolean",
+            profile: "value",
+            "api-version": "value",
+            id: "value",
+            limit: "value",
+            config: "value"
+          },
+          positionalInput: false
+        },
         {
           command: "entra risk-detection show",
           flags: {
@@ -37191,6 +37267,7 @@ var init_mg_axi = __esm({
             mailbox: "value",
             fields: "value",
             full: "boolean",
+            scopes: "value",
             limit: "value",
             cursor: "value",
             config: "value"
@@ -37206,6 +37283,7 @@ var init_mg_axi = __esm({
             mailbox: "value",
             fields: "value",
             full: "boolean",
+            scopes: "value",
             id: "value",
             config: "value"
           },
@@ -39919,8 +39997,8 @@ var init_awx_axi = __esm({
     awx_axi_default = {
       generatedBy: "scripts/awx-inventory.mjs",
       tool: "awx-axi",
-      version: "0.1.9",
-      integrity: "sha512-7m/IWbfU7bd5JbKqu9FaLK1Pf5QaxQBl+tOAaHHOBzgUOHQDpHKRAVL4xy5Ww0vLiR7PcsRK/kDp71GqS/Kb6g==",
+      version: "0.1.11",
+      integrity: "sha512-lU2dJwxaspKkIyV58PGosCVa/0i9Jw2miuvI+45Vgkz4fZx0F1mbXGD6M2kryid/K6pnJs/RKKtCk5dXW8yLpA==",
       parserEvidence: "Published domain registry, reviewed plan effects and transport safety gates",
       sources: [
         {
@@ -39929,7 +40007,7 @@ var init_awx_axi = __esm({
         },
         {
           path: "dist/cli.js",
-          sha256: "a53f9f52a3f5e85e9dd336a0341cd25a16b69725ce3f1ddaf671215923e2d024"
+          sha256: "db8f120dcd1f6a4d2e99a334bb7608170007f889c2ae6a230a3f2fdf9450711e"
         },
         {
           path: "dist/commands/auth.js",
@@ -39941,11 +40019,11 @@ var init_awx_axi = __esm({
         },
         {
           path: "dist/commands/setup.js",
-          sha256: "1eb8493b36d922d9e6ce3ad62072328c194f8345e9a572a9219538093246d0cc"
+          sha256: "19b02ffd65a8b66cb0f33d03294a7a896a38d5a0f4e4ae4396bb9b58956bce5a"
         },
         {
           path: "dist/core/auth.js",
-          sha256: "154de0a41b56e4aa82df170319b439bc77f4367254d3df934c13c28f678262c4"
+          sha256: "413520f3e17113c7bf294033f24569d2317a559e491f707fd3d6cd3bc75efb55"
         },
         {
           path: "dist/core/controller-discovery.js",
@@ -39953,7 +40031,7 @@ var init_awx_axi = __esm({
         },
         {
           path: "dist/core/errors.js",
-          sha256: "1727d3b326fbe02e27554acf7c3249ce7aa9d80c95c2bf98d311349c4325b3ff"
+          sha256: "1eac1099f11889159b57b6b5bc810e080f0343ee8fab2a73ead8b59fa3b7ada5"
         },
         {
           path: "dist/core/flags.js",
@@ -39969,7 +40047,7 @@ var init_awx_axi = __esm({
         },
         {
           path: "dist/core/paginate.js",
-          sha256: "d952bc390a4ac2da263b1d98c24f05e416652335904de37b26379576632059a3"
+          sha256: "c2b470e1f1d6c3384fc985f288725121362c84840cb2662e5e6046e8d3820082"
         },
         {
           path: "dist/core/poll.js",
@@ -39989,11 +40067,11 @@ var init_awx_axi = __esm({
         },
         {
           path: "dist/core/registry.js",
-          sha256: "89d3983928dd3a63712e9c78a4959c2e9c950097a3d200f6d1ccf2c3327bbdfd"
+          sha256: "08903d2ebdaa7364f2e3544a68d52189ce2f3ea8128da41b27a7ad6657cda3bf"
         },
         {
           path: "dist/core/resolve.js",
-          sha256: "04f423ff03641e02a0cd679b638c651a6cd31615fedaec6f7f2f4561ad1e33d0"
+          sha256: "74e4976ab119cc8bb7fa36d158ca7c9ecd31ecd094b8946e2c639cadeeead1b5"
         },
         {
           path: "dist/core/tls-fetch.js",
@@ -40001,7 +40079,7 @@ var init_awx_axi = __esm({
         },
         {
           path: "dist/core/transport.js",
-          sha256: "142d2104e9025b7e37c6df2cbae818b9ab7743f31cee6a2cbd1d8ee6697c02de"
+          sha256: "afe5116739206fa77f5105076816c9d775658ad972d00698b0fdd9b1fec70721"
         },
         {
           path: "dist/domains/activity-stream/index.js",
@@ -40029,7 +40107,7 @@ var init_awx_axi = __esm({
         },
         {
           path: "dist/domains/host/index.js",
-          sha256: "478ff268a6a6a8452aa206be7671e402782fbfde8504808d9cc4fe10205b6707"
+          sha256: "b877d333f0edb1b0b47179a73efa68d48f53c6fa27517d583c826cc1d4ad1ad0"
         },
         {
           path: "dist/domains/inventory-source/index.js",
@@ -40091,9 +40169,13 @@ var init_awx_axi = __esm({
           path: "dist/domains/workflow/index.js",
           sha256: "811a3b1df2bfa7a2f76f6fb1c3464de91ed2b7c171788bc82ae4cd991ce4c52a"
         },
+        {
+          path: "dist/response-diagnostics.js",
+          sha256: "8bb941f0511e32952707cda6330ddf458642fe33c286085562fe55fc49b58918"
+        },
         {
           path: "dist/skill.js",
-          sha256: "c90e9659a17a6bb21e75588ec86c1fcf47490251fb42aae5447efd2c5a93723e"
+          sha256: "ed64c8fbefe21a9f20e21393d7831e776ab24ad011e99084b609851f3f90500d"
         }
       ],
       credentialSchema: {
@@ -40185,7 +40267,7 @@ var init_awx_axi = __esm({
           }
         }
       },
-      skillSha256: "91c6cc7e30b0786a349c970c5bf1f689ebcb74f7d008016f0ee1a6a2f8e3cb93",
+      skillSha256: "50660f4e39ecf72c20a598ff4e5324aae780d223ffb7ab834a476f56b4d68284",
       adapterBoundary: {
         unsafeOverrides: [
           "config",
@@ -42599,6 +42681,20 @@ var init_awx_axi = __esm({
             required: 1
           }
         },
+        {
+          command: "host inspect",
+          effect: "read",
+          flags: {
+            help: "boolean",
+            inventory: "value"
+          },
+          positionals: {
+            names: [
+              "<selectors>"
+            ],
+            required: 1
+          }
+        },
         {
           command: "host list",
           effect: "read",
@@ -43765,8 +43861,8 @@ var init_tenable_axi = __esm({
     tenable_axi_default = {
       generatedBy: "scripts/tenable-inventory.mjs",
       tool: "tenable-axi",
-      version: "0.1.5",
-      integrity: "sha512-jvsQ/xPesbNjmXX3dJgTmTrt+e2dnsyo5V7bW4+q2UgWpYi6KY/eURrrEQNGI6Vt9nWhU3ESWEs0O+8iW+Lexw==",
+      version: "0.1.6",
+      integrity: "sha512-nE+1hpNUQ5uKydfD4Fe8wUq+f1BoaO25Sp2LfDf4sNl1OE54l15KiYC+86IREaI4kywnxqZcnnlSOyB7FIssvg==",
       parserEvidence: "Published command catalogue, mutation registry and reviewed native parsers and transport gates",
       sources: [
         {
@@ -43775,11 +43871,11 @@ var init_tenable_axi = __esm({
         },
         {
           path: "dist/src/attack-export-catalogue.js",
-          sha256: "7127a33fdbb01db34886b2c91b36bdc174131819b5753c1201c56999389584ee"
+          sha256: "d5cd664440a29a9b8747ccfdd682781b4a51c33033ffdfb557bb43a81ca66048"
         },
         {
           path: "dist/src/attack-export.js",
-          sha256: "38adf6d13ab1afe4f8d0123803257c2f10a1c47b9a7f9b216ee9107ea30368c8"
+          sha256: "14bc4a0270bcc2970718533747ea68a0d91aae7b8fae9d9833d3a5b09e090754"
         },
         {
           path: "dist/src/attack.js",
@@ -43791,19 +43887,23 @@ var init_tenable_axi = __esm({
         },
         {
           path: "dist/src/cli.js",
-          sha256: "df6dfee98019af2da15ac7a3c4d1ea7b3860c73021cbf2f08ac52386a64f441c"
+          sha256: "66e75b328ea54d9f278c8fc474a92d450f1f1477698c4922d66e1211c09f6514"
         },
         {
           path: "dist/src/export-file.js",
           sha256: "2eb4f73e2d9a3361283a62e887c6cf95de70d5d3f353441bcd4de738377d57df"
         },
+        {
+          path: "dist/src/export-wait.js",
+          sha256: "9e92fdefb57934de12f5d8140eebe1976aa223083787ea96d098bafe4c3887a6"
+        },
         {
           path: "dist/src/exposure-contracts.js",
           sha256: "febe68635d243ce801607d76af753d21f2ff30712c0efe9c3a2805209cc4b915"
         },
         {
           path: "dist/src/exposure.js",
-          sha256: "db005db00fbf1dba311bad8e78a872836994909a9ce46b9bd8d498d72cfc7d2d"
+          sha256: "86b583fc297d130a6e80873eed8e994535cb271419dfa9cb944d02b66faff0a8"
         },
         {
           path: "dist/src/hook-install.js",
@@ -43811,19 +43911,19 @@ var init_tenable_axi = __esm({
         },
         {
           path: "dist/src/inventory-catalogue.js",
-          sha256: "9000156bdbc7e9e8a461f89a602f6fa1e9d7217eabe30a67195be79442f8afe6"
+          sha256: "9d3957672261e032858848cc149767c4eb3b8ad00ad0f41507a31be0b8e29f18"
         },
         {
           path: "dist/src/inventory-export-catalogue.js",
-          sha256: "cf07efc8540e83fcda3f79df4a5ec6c75e081e1557a52e6e178a24ee7d393905"
+          sha256: "573f3222ff8372cc41e09212b75cb6a7abee0153d9d1ff01a2b7093979b84e61"
         },
         {
           path: "dist/src/inventory-export.js",
-          sha256: "176bd2aef67901383e29f5984867d104fdb8278a40d13d1281aa459ea44a8f9c"
+          sha256: "4272b9fa021946a271e5c0336eb3a83a88399e4633b95b4b7dfb992befc8a6ce"
         },
         {
           path: "dist/src/inventory.js",
-          sha256: "700efba15d086ba88be5444d66f131c9d7482e198dfd050eefc7ecd4f1b96bfe"
+          sha256: "2eee9ae55561676a3b99034f4a64a358cca715186b4fa593f19650a0afea0ced"
         },
         {
           path: "dist/src/inventory/schema.js",
@@ -43831,7 +43931,7 @@ var init_tenable_axi = __esm({
         },
         {
           path: "dist/src/local-commands.js",
-          sha256: "4169d7a4bc6753d202d515b488ca8863b7368e31e8166f9e958c2fd1c6b05d22"
+          sha256: "278626e84bac8d81ecd5c6b1b858a977b2eeb45043f9d21553b1326e57b0df7b"
         },
         {
           path: "dist/src/platform-tag-catalogue.js",
@@ -43867,7 +43967,7 @@ var init_tenable_axi = __esm({
         },
         {
           path: "dist/src/setup.js",
-          sha256: "2e9c8430b4fbf0f95e0e31267ba828107fd054e9d525a5c970f7c9c2e20d5348"
+          sha256: "70a1c0bb0e7ad33b5ecb13e86fbf757f087b900741958bab6a9d4a5cf5ac5139"
         },
         {
           path: "dist/src/transport-core.js",
@@ -43879,7 +43979,7 @@ var init_tenable_axi = __esm({
         },
         {
           path: "dist/src/writes-core.js",
-          sha256: "55a76961512751653c8d14778b6b74094318ba1527b50dedf2167127f1e7c1f9"
+          sha256: "9b05c6b10a5806bb2d0b01d117080d510af5c0125c72485f4294fc18f9c92fb1"
         },
         {
           path: "dist/src/writes.js",
@@ -43969,7 +44069,7 @@ var init_tenable_axi = __esm({
           }
         }
       },
-      skillSha256: "40f40ad818e54c71aa11654a039922bb48cd0d9c303b8a812598c9c0661ad5e7",
+      skillSha256: "b8a0370a3573fa4466265624023b7c1fa554e3f17abe4eb9b0f4cfd839246b21",
       nativeWriteSettings: {
         supportedOperations: [
           "apa-export-attack-path",
@@ -44052,6 +44152,21 @@ var init_tenable_axi = __esm({
       ],
       format: "TOON",
       commands: [
+        {
+          command: "asset investigate",
+          effect: "read",
+          flags: {
+            config: "Config path; default credential precedence",
+            profile: "Profile name; default credential precedence",
+            fields: "Comma-separated display or wire properties; display names: id, name, severity, state, sensor_type; default compact view",
+            full: "Show untruncated text; does not add fields or rows; default false",
+            help: "Show help",
+            query: "Required asset simple query text; lookup returns at most two compact asset candidates",
+            limit: "Maximum emitted rows, 1-10000; default 100",
+            all: "Read up to 10000 rows within invocation budgets; excludes --limit",
+            "extra-properties": "Comma-separated extra wire properties"
+          }
+        },
         {
           command: "asset list",
           effect: "read",
@@ -44346,7 +44461,8 @@ var init_tenable_axi = __esm({
             execute: "Create once; default preview",
             "dry-run": "Explicit preview; excludes --execute",
             confirm: "Exact confirmation from preview",
-            "intent-id": "Unique execution intent for replay protection"
+            "intent-id": "Unique execution intent for replay protection",
+            wait: "After confirmed creation, poll within the shared 20-second/20-request budgets; never creates a replacement; default false"
           }
         },
         {
@@ -44387,7 +44503,8 @@ var init_tenable_axi = __esm({
             "body-file": "Required strict operation-specific JSON file, at most 1 MiB; '-' reads stdin",
             execute: "Create the previewed job once; default false",
             "dry-run": "Preview only; excludes --execute",
-            confirm: "Exact confirmation string from preview; required with --execute"
+            confirm: "Exact confirmation string from preview; required with --execute",
+            wait: "After confirmed creation, poll within the shared 20-second/20-request budgets; never creates a replacement; default false"
           }
         },
         {
@@ -44402,7 +44519,8 @@ var init_tenable_axi = __esm({
             "body-file": "Required strict operation-specific JSON file, at most 1 MiB; '-' reads stdin",
             execute: "Create the previewed job once; default false",
             "dry-run": "Preview only; excludes --execute",
-            confirm: "Exact confirmation string from preview; required with --execute"
+            confirm: "Exact confirmation string from preview; required with --execute",
+            wait: "After confirmed creation, poll within the shared 20-second/20-request budgets; never creates a replacement; default false"
           }
         },
         {
@@ -44437,7 +44555,8 @@ var init_tenable_axi = __esm({
             execute: "Create once; default preview",
             "dry-run": "Explicit preview; excludes --execute",
             confirm: "Exact confirmation from preview",
-            "intent-id": "Unique execution intent for replay protection"
+            "intent-id": "Unique execution intent for replay protection",
+            wait: "After confirmed creation, poll within the shared 20-second/20-request budgets; never creates a replacement; default false"
           }
         },
         {
@@ -44463,7 +44582,8 @@ var init_tenable_axi = __esm({
             fields: "Comma-separated output fields; default compact view",
             full: "Full output; default false",
             help: "Show help",
-            id: "Required export UUID"
+            id: "Required export UUID",
+            wait: "Poll once per second within 20-second/20-request budgets; default false"
           }
         },
         {
@@ -44478,7 +44598,8 @@ var init_tenable_axi = __esm({
             "body-file": "Required strict operation-specific JSON file, at most 1 MiB; '-' reads stdin",
             execute: "Create the previewed job once; default false",
             "dry-run": "Preview only; excludes --execute",
-            confirm: "Exact confirmation string from preview; required with --execute"
+            confirm: "Exact confirmation string from preview; required with --execute",
+            wait: "After confirmed creation, poll within the shared 20-second/20-request budgets; never creates a replacement; default false"
           }
         },
         {
@@ -44985,17 +45106,21 @@ var init_hybrid_axi = __esm({
     hybrid_axi_default = {
       generatedBy: "scripts/hybrid-inventory.mjs",
       tool: "hybrid-axi",
-      version: "0.1.4",
-      integrity: "sha512-PD1uoPTvVVLTXPPdTowJ4Mg13wY87fI9Om+omVqSfuHOtedm1HR+llYQmrlwm2EeHhiTqVXXP8Q4A2f3HXabnw==",
+      version: "0.1.5",
+      integrity: "sha512-iwCPxkAlwni9NRsirBv5F7lBZPHZLzvxY4nhA+VRPDAiPkEr0g2W8/bE2/3ab+5GtiXpY9PI7wJgUPkh/fYf2Q==",
       parserEvidence: "Published command catalogue, mutation registry and reviewed native parsers and transport gates",
       sources: [
+        {
+          path: "dist/src/bounded-wait.js",
+          sha256: "624f7be57ac4997c36a97c1aba74a9545bb626056b58bd911c4ab3ab3678fc87"
+        },
         {
           path: "dist/src/catalogue.js",
-          sha256: "cf353500382a0c33a6fa2c1735543ae43ecc10eb53c68e727a8940f7f881b380"
+          sha256: "d0d4f9b302ef4576a576e7139182b3b7ad317b11d8c18c8eecccc730a20a92fc"
         },
         {
           path: "dist/src/cli.js",
-          sha256: "85424239ee66a94aeb77789392277c300d784c9e77297c72a2b40fa22349abc7"
+          sha256: "558763b0bade950ef5b5f6a9372e2ae56c89a941bed956376a114ad0b1013772"
         },
         {
           path: "dist/src/download-catalogue.js",
@@ -45015,7 +45140,7 @@ var init_hybrid_axi = __esm({
         },
         {
           path: "dist/src/local-commands.js",
-          sha256: "c151a3662a623360ef3d4d40d7c268b8a090983ee7949131237a7704d02a63b8"
+          sha256: "bc5893b3d11179d3b99d462efee57e22603b4e5ea0af919def92bb906f32e620"
         },
         {
           path: "dist/src/private-file.js",
@@ -45031,7 +45156,7 @@ var init_hybrid_axi = __esm({
         },
         {
           path: "dist/src/report-catalogue.js",
-          sha256: "3c3346176cf5aabaf177c40a03efd1c67683640a95c8899f71cab1ec4bd95195"
+          sha256: "e22cca8feb6daff90efe18232db07d185b5c84a5630b1ff5322f003fa163c1b1"
         },
         {
           path: "dist/src/report-file.js",
@@ -45039,7 +45164,7 @@ var init_hybrid_axi = __esm({
         },
         {
           path: "dist/src/reports.js",
-          sha256: "167fa9b8a542b149b8056dbb5f27bbe70c0ed4385662fc6ae9698c40e421a8d7"
+          sha256: "9f25a4430dc0330fdcc7cee8b8369f69af18dbd4558bad81141c7695031c661a"
         },
         {
           path: "dist/src/response-diagnostics.js",
@@ -45055,23 +45180,23 @@ var init_hybrid_axi = __esm({
         },
         {
           path: "dist/src/search.js",
-          sha256: "cf6192817869625e1d70030c2df748535c39d48632d8e5604cd020003807ef37"
+          sha256: "0e359414e24518e103e4fb15e67dfca6c495b6c5d5d6a6d8c12eb7b359b72d0a"
         },
         {
           path: "dist/src/session.js",
-          sha256: "c55dce9aea70c4f213a040968783bb81296127395367136593985bfe99b4788c"
+          sha256: "2f72f041746cc43f3e367fc67633863babeacd0e2faf5c32ec17f6175dda8799"
         },
         {
           path: "dist/src/setup.js",
-          sha256: "1360cb697983a40d92525e3e16d019157b40eed05a0b22b515d6b13b33b616ec"
+          sha256: "7c95554f669578bbce26d4cbd2e787fd1e13401f60a767276ffaa8f1f828ed1f"
         },
         {
           path: "dist/src/submission-catalogue.js",
-          sha256: "91632f5c8edf427a17acaf960b872aec68f2ac946dcdecbf4bba67657117778b"
+          sha256: "2a2a3c2ab4aaa86bce63b01529091f64c7a205ee17ce2f1632922f3a91593c3a"
         },
         {
           path: "dist/src/submissions.js",
-          sha256: "a723e2c911eed849e7a101bf1f0d193732f52d61f6057e78d1af7f95b68808c1"
+          sha256: "8969794cb3a57189c3a60a38af69fcbe001c0acda2fc34bf512771c6aa802f2f"
         },
         {
           path: "dist/src/transport-core.js",
@@ -45170,7 +45295,7 @@ var init_hybrid_axi = __esm({
           }
         }
       },
-      skillSha256: "59ce5bf65f22710bc33fbbf6279668f32752b5a8ef7e3cab8ab185fff626bbd2",
+      skillSha256: "89f8a9d5fc5d7afdaee0b44fc5e09b7c2380df9fce09166bf62f9d70063c92fe",
       nativeWriteSettings: {
         supportedOperations: [
           "convertQuickScan",
@@ -45373,6 +45498,7 @@ var init_hybrid_axi = __esm({
           command: "home",
           effect: "read",
           flags: {
+            offline: "Local profile and policy only; no HTTP or credential-file reads; default false",
             help: "Show help; default false",
             config: "Config path; default HYBRID_AXI_CONFIG or platform config",
             profile: "Profile name; default HYBRID_AXI_PROFILE or profile precedence"
@@ -45556,6 +45682,18 @@ var init_hybrid_axi = __esm({
             "scan-type": "Required: all, all_lookup, all_scan, lookup_ha, scan_crowdstrike_ml, scan_metadefender, lookup_cleandns, lookup_bforeai, scan_urlscanio, scan_scamadviser, scan_criminalip, scan_vipre"
           }
         },
+        {
+          command: "quick-scan wait",
+          effect: "read",
+          flags: {
+            help: "Show help; default false",
+            config: "Config path; default platform config",
+            profile: "Profile name; default profile precedence",
+            full: "All response fields; default false",
+            fields: "Comma-separated response fields; default compact fields",
+            timeout: "Required deadline in seconds, integer 1-20; checks every second within shared transport budgets"
+          }
+        },
         {
           command: "quota",
           effect: "read",
@@ -45565,6 +45703,18 @@ var init_hybrid_axi = __esm({
             profile: "Profile name; default profile precedence"
           }
         },
+        {
+          command: "report batch",
+          effect: "read",
+          flags: {
+            help: "Show help; default false",
+            config: "Config path; default platform config",
+            profile: "Profile name; default profile precedence",
+            fields: "Comma-separated response fields; default compact fields",
+            full: "All fields and untruncated text; default false",
+            limit: "Required maximum summaries, integer 1-20; remaining IDs are disclosed as incomplete"
+          }
+        },
         {
           command: "report children",
           effect: "read",
@@ -45663,6 +45813,18 @@ var init_hybrid_axi = __esm({
             full: "All fields and untruncated text; default false"
           }
         },
+        {
+          command: "report wait",
+          effect: "read",
+          flags: {
+            help: "Show help; default false",
+            config: "Config path; default platform config",
+            profile: "Profile name; default profile precedence",
+            fields: "Comma-separated response fields; default compact fields",
+            full: "All fields and untruncated text; default false",
+            timeout: "Required deadline in seconds, integer 1-20; checks every second within shared transport budgets"
+          }
+        },
         {
           command: "search results",
           effect: "read",
@@ -49774,7 +49936,7 @@ var init_awx_axi_parity = __esm({
     awx_axi_parity_default = {
       generatedBy: "scripts/awx-parity.mjs",
       tool: "awx-axi",
-      version: "0.1.9",
+      version: "0.1.11",
       extraction: "Offline DOMAINS subcommands/flags/positionals/help; main --help and update --help; AUTH_HELP and SETUP_HELP; reviewed inventory router aliases and transport tags",
       sources: [
         {
@@ -49783,7 +49945,7 @@ var init_awx_axi_parity = __esm({
         },
         {
           path: "dist/cli.js",
-          sha256: "a53f9f52a3f5e85e9dd336a0341cd25a16b69725ce3f1ddaf671215923e2d024"
+          sha256: "db8f120dcd1f6a4d2e99a334bb7608170007f889c2ae6a230a3f2fdf9450711e"
         },
         {
           path: "dist/commands/auth.js",
@@ -49795,11 +49957,11 @@ var init_awx_axi_parity = __esm({
         },
         {
           path: "dist/commands/setup.js",
-          sha256: "1eb8493b36d922d9e6ce3ad62072328c194f8345e9a572a9219538093246d0cc"
+          sha256: "19b02ffd65a8b66cb0f33d03294a7a896a38d5a0f4e4ae4396bb9b58956bce5a"
         },
         {
           path: "dist/core/auth.js",
-          sha256: "154de0a41b56e4aa82df170319b439bc77f4367254d3df934c13c28f678262c4"
+          sha256: "413520f3e17113c7bf294033f24569d2317a559e491f707fd3d6cd3bc75efb55"
         },
         {
           path: "dist/core/controller-discovery.js",
@@ -49807,7 +49969,7 @@ var init_awx_axi_parity = __esm({
         },
         {
           path: "dist/core/errors.js",
-          sha256: "1727d3b326fbe02e27554acf7c3249ce7aa9d80c95c2bf98d311349c4325b3ff"
+          sha256: "1eac1099f11889159b57b6b5bc810e080f0343ee8fab2a73ead8b59fa3b7ada5"
         },
         {
           path: "dist/core/flags.js",
@@ -49823,7 +49985,7 @@ var init_awx_axi_parity = __esm({
         },
         {
           path: "dist/core/paginate.js",
-          sha256: "d952bc390a4ac2da263b1d98c24f05e416652335904de37b26379576632059a3"
+          sha256: "c2b470e1f1d6c3384fc985f288725121362c84840cb2662e5e6046e8d3820082"
         },
         {
           path: "dist/core/poll.js",
@@ -49843,11 +50005,11 @@ var init_awx_axi_parity = __esm({
         },
         {
           path: "dist/core/registry.js",
-          sha256: "89d3983928dd3a63712e9c78a4959c2e9c950097a3d200f6d1ccf2c3327bbdfd"
+          sha256: "08903d2ebdaa7364f2e3544a68d52189ce2f3ea8128da41b27a7ad6657cda3bf"
         },
         {
           path: "dist/core/resolve.js",
-          sha256: "04f423ff03641e02a0cd679b638c651a6cd31615fedaec6f7f2f4561ad1e33d0"
+          sha256: "74e4976ab119cc8bb7fa36d158ca7c9ecd31ecd094b8946e2c639cadeeead1b5"
         },
         {
           path: "dist/core/tls-fetch.js",
@@ -49855,7 +50017,7 @@ var init_awx_axi_parity = __esm({
         },
         {
           path: "dist/core/transport.js",
-          sha256: "142d2104e9025b7e37c6df2cbae818b9ab7743f31cee6a2cbd1d8ee6697c02de"
+          sha256: "afe5116739206fa77f5105076816c9d775658ad972d00698b0fdd9b1fec70721"
         },
         {
           path: "dist/domains/activity-stream/index.js",
@@ -49883,7 +50045,7 @@ var init_awx_axi_parity = __esm({
         },
         {
           path: "dist/domains/host/index.js",
-          sha256: "478ff268a6a6a8452aa206be7671e402782fbfde8504808d9cc4fe10205b6707"
+          sha256: "b877d333f0edb1b0b47179a73efa68d48f53c6fa27517d583c826cc1d4ad1ad0"
         },
         {
           path: "dist/domains/inventory-source/index.js",
@@ -49945,9 +50107,13 @@ var init_awx_axi_parity = __esm({
           path: "dist/domains/workflow/index.js",
           sha256: "811a3b1df2bfa7a2f76f6fb1c3464de91ed2b7c171788bc82ae4cd991ce4c52a"
         },
+        {
+          path: "dist/response-diagnostics.js",
+          sha256: "8bb941f0511e32952707cda6330ddf458642fe33c286085562fe55fc49b58918"
+        },
         {
           path: "dist/skill.js",
-          sha256: "c90e9659a17a6bb21e75588ec86c1fcf47490251fb42aae5447efd2c5a93723e"
+          sha256: "ed64c8fbefe21a9f20e21393d7831e776ab24ad011e99084b609851f3f90500d"
         }
       ],
       globalFlagScope: "Four selection overrides accepted upstream before/after commands; inherited by every leaf. --help is universal. Version flags are bare only.",
@@ -60872,6 +61038,46 @@ Examples:
             }
           ]
         },
+        {
+          command: "host inspect",
+          effect: "read",
+          status: "supported",
+          targetSlice: "f",
+          requiredAdminControl: "Managed account access; no write authorization",
+          positionals: {
+            names: [
+              "<selectors>"
+            ],
+            required: 1
+          },
+          help: "awx-axi host inspect <selectors> [--inventory <id>]\nSelectors: 1-10 comma-separated IDs or names. Inventory scopes names and checks IDs.\nRead-only limits: 100 GET attempts including retries/pages, 60 seconds, 20000 rendered characters; groups up to 1000 rows/100 pages.\nEach host reports complete/failed/skipped; any ambiguous selector exits 2, other incomplete details exit 1. Oversized details become labeled previews; use host show for full detail.\nExamples: awx-axi host inspect 501,601; awx-axi host inspect web-01,web-02 --inventory 11",
+          flags: [
+            {
+              name: "help",
+              takesValue: false,
+              description: "Command help",
+              effect: "read",
+              status: "supported",
+              targetSlice: "f",
+              requiredAdminControl: "Managed account access; no write authorization",
+              secret: false,
+              file: false,
+              stdin: false
+            },
+            {
+              name: "inventory",
+              description: "scope names and verify host inventory id",
+              takesValue: true,
+              effect: "read",
+              status: "supported",
+              targetSlice: "f",
+              requiredAdminControl: "Managed account access; no write authorization",
+              secret: false,
+              file: false,
+              stdin: false
+            }
+          ]
+        },
         {
           command: "host list",
           effect: "read",
@@ -68156,6 +68362,22 @@ function encodeSuggestion(value, inline) {
 function rewriteSuggestions(output3, tool, truncated = false, invocation) {
   if (truncated) return output3;
   if (tool === "gh-axi") return rewriteGhSuggestions(output3, invocation, truncated);
+  if (tool === "vectra-axi") {
+    try {
+      const json2 = output3.trimStart().startsWith("{");
+      const document = json2 ? JSON.parse(output3) : decode3(output3);
+      const help = document.live?.help;
+      if (typeof help === "string" || Array.isArray(help) && help.every((item) => typeof item === "string")) {
+        const original = encode3({ help });
+        const rewritten = rewriteSuggestions(original, tool);
+        if (rewritten !== original) {
+          document.live.help = decode3(rewritten).help;
+          output3 = (json2 ? JSON.stringify(document) : encode3(document)) + (output3.endsWith("\n") ? "\n" : "");
+        }
+      }
+    } catch {
+    }
+  }
   if (tool === "beyondtrust-axi") {
     try {
       const document = decode3(output3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@knowttl/artium-axi",
-  "version": "0.0.29",
+  "version": "0.0.31",
   "description": "Client CLI and embedded skill for the Artium managed tools server.",
   "license": "MIT",
   "type": "module",