quoxcli 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -0,0 +1,61 @@
+# Changelog
+
+User-visible changes to the `quoxcli` package. Items marked *(unproven)* ship in
+the package and pass their tests, but nobody has run them end to end from the
+published package yet.
+
+## 0.5.0 (unreleased)
+
+### New commands
+- `quox wazuh`: first-class Wazuh commands. `agents`, `fim`, `sca`, `rootcheck`
+  and `coverage` are reads. `vulns --priority` ranks CVEs by CISA KEV, EPSS,
+  CVSS and how many hosts each one hits (driven live across the fleet before
+  this release). Fleet-wide reads cover up to 200 active agents (it was a
+  silent 25 before).
+- `quox wazuh report generate | list | show | verify`: signed vulnerability
+  reports. `verify` works offline against a pinned PEM or a raw key.
+  *(unproven from the package)*
+- `quox wazuh connect`, `quox wazuh hooks create | list | rotate | delete | install`,
+  `quox wazuh incidents [--open] [--since] | show | close | diagnose | escalate`
+  and `quox wazuh triage`. Writes go through one approval per call.
+  *(unproven from the package)*
+- `quox compliance reports list | show` (read): framework, period, score,
+  status per control and sampled evidence ids. `quox compliance jobs list`, and
+  jobs can now be named. *(unproven from the package)*
+- `quox tool installed` and `quox tool uninstall`, to read back and undo a
+  `quox tool install`. *(unproven from the package)*
+- `quox approvals approve | deny | list` by id or short tail, `quox approvals withdraw`
+  (the requester takes its own hold back), and `quox approvals call-me [status|on|off]`
+  (needs the quox-voice licence).
+- `quox connect <url>` with certificate pinning per profile (`--trust-cert`,
+  `--fingerprint`), and `quox server install` (with `--dry-run`, `--yes`, `--json`).
+- `quox notes seal init | status | new | open | edit | print`: ENQRYPT sealed
+  notes. Encryption happens on your machine and the server stores only the
+  envelope. *(unproven from the package)*
+- `quox admin users verify-email <email> --reason` (step-up PIN).
+- `quox memory sync`: Claude file memory is saved to Quox memory too
+  (idempotent; credential-shaped text is refused).
+- `quox inbox unread <id...>`, `quox x whoami | accounts`, `quox linkedin whoami`,
+  `quox workflow create | apply | import-n8n --activate` (a plain create is not armed).
+
+### Terminal UI (quoxon)
+- New approvals and questions open by themselves as the walkthrough card.
+- Approve verbs ask for the step-up PIN on a terminal; destructive approvals
+  need the target name typed.
+- Do not disturb and `/sleep` survive restarts; `/morningreport` gives a grouped
+  digest of what arrived while you were away.
+- `/mail` reads triaged email (read-only), `/outbox` queues `/say` sends that
+  failed on connectivity and sends them in order once you are back online.
+- Other-org approvals show on the bar, with a hint about how many more are waiting.
+- A secret paste guard asks before it sends text that looks like a credential,
+  and redacts it from history.
+- Extensions hot-reload, and extension host contract v1 is out (panels, tabs,
+  settings).
+
+### Fixes
+- An explicit `-p <profile>` with no session now fails, instead of quietly
+  using the service key.
+- `quox workflow update` finds engine workflows. `quox run list` fills in its
+  columns again.
+- Watch and loop streams back off and give up cleanly, instead of polling forever.
+- Docs links point at quox.ai/cli.

package/README.md

@@ -12,7 +12,7 @@ npm install -g quoxcli
 
 Needs Node.js 20 or later. This installs two commands: `quox`, and `quoxon` (an alias that opens the conversation).
 
-Docs: https://cli.quox.ai/docs/start/
+Docs: https://quox.ai/cli/docs/quickstart/
 
 ## Prerequisite: a running QuoxCORE
 
@@ -142,4 +142,4 @@ export NODE_EXTRA_CA_CERTS=/path/to/your-ca.pem
 Quox Community Source Licence 1.0. This is source-available software, not open source. You may self-host and inspect it freely; redistribution and repackaging are restricted. Read the full text in the `LICENSE` file or at https://github.com/quoxai/quoxcore.
 
 Website: https://quox.ai  
-CLI home: https://cli.quox.ai
+CLI home: https://quox.ai/cli

package/bin/quox.js

@@ -11,6 +11,14 @@ if (!process.env.QUOX_SESSION_ID && process.env.QUOX_SESSION_ID_FILE) {
   try { process.env.QUOX_SESSION_ID = (await import('node:fs')).readFileSync(process.env.QUOX_SESSION_ID_FILE, 'utf8').trim(); } catch { /* turn ended: no session */ }
 }
 
+// ONBOARD-P1: a profile that trusts its server's own certificate (quox connect) makes this run trust it too, via a
+// one-time re-run with NODE_EXTRA_CA_CERTS set for this process tree only. Before anything else loads.
+{
+  const { reexecWithProfileTrust } = await import('../lib/core/profileTrust.js');
+  const code = reexecWithProfileTrust(process.argv.slice(2), process.env);
+  if (code !== null) process.exit(code);
+}
+
 // CORTEX-BENCH: Node's fetch parses HTTP with a WebAssembly module, and V8
 // recompiles it at the optimising tier on a background thread; Node waits for
 // that compile before exiting, adding 350-700ms to every short command after
@@ -167,7 +175,17 @@ if (process.argv.includes('--no-color') || process.env.NO_COLOR) {
 const config = loadConfig(resolveProfileFlagFromArgv(process.argv.slice(2)));
 const auth = createAuth(config);
 const client = createClient(config, auth);
-const ctx = { config, auth, client, program };
+// A client on the SAME user's token for another org the user belongs to (minted per org, window scope, never moves the
+// profile's org). Lazy: nothing is minted unless a verb asks (approvals --org, the "more waiting in <org>" hint).
+let _orgClients = null;
+const clientForOrg = async (orgId) => {
+  if (!_orgClients) {
+    const { createWindowClient } = await import('../lib/quoxon/windowOrg.js');
+    _orgClients = createWindowClient({ config, auth, createClient }).clientForOrg;
+  }
+  return _orgClients(orgId);
+};
+const ctx = { config, auth, client, program, clientForOrg };
 
 // Register all command groups
 // Command groups, in registration order. CORTEX-BENCH (quox#7xx CLI startup):

package/bin/quoxon.js

@@ -1,6 +1,11 @@
 #!/usr/bin/env node
 import '../lib/core/prodEnv.js'; // first: production React unless NODE_ENV is set (before anything loads React)
-import { main } from '../lib/quoxon/main.js';
+{
+  const { reexecWithProfileTrust } = await import('../lib/core/profileTrust.js');
+  const code = reexecWithProfileTrust(process.argv.slice(2), process.env);
+  if (code !== null) process.exit(code);
+}
+const { main } = await import('../lib/quoxon/main.js');
 
 main().catch((err) => {
   console.error(err?.message || err);

package/lib/api/endpoints/admin.js

@@ -17,6 +17,13 @@ export const admin = {
     path: () => '/api/admin/agent-identities',
     tags: ['admin-write'],
   },
+  // ADMIN-VERIFY-EMAIL: instance-admin + human + step-up (scope override). Served by services/auth/routes/admin.js.
+  'admin.users.verify_email': {
+    method: 'POST',
+    service: 'auth',
+    path: () => '/api/admin/users/verify-email',
+    tags: ['admin-write'],
+  },
   // Instance basics after setup (app URL etc). Served by services/auth/routes/admin-instance.js.
   'admin.instance.basics.get': {
     method: 'GET',

package/lib/api/endpoints/agent-attach.js

@@ -27,6 +27,13 @@ export const agentAttach = {
     path: ({ leaseId }) => `/api/agent-attach/lease/${encodeURIComponent(leaseId)}/release`,
     tags: ['live-write'],
   },
+  // Org-wide list of live attaches (org owner/admin). Feeds `quox agent attaches` and the quoxon /roster.
+  'agent-attach.list': {
+    method: 'GET',
+    service: 'auth',
+    path: () => '/api/agent-attach',
+    tags: ['live-safe'],
+  },
   'agent-attach.status': {
     method: 'GET',
     service: 'auth',

package/lib/api/endpoints/compliance.js

@@ -0,0 +1,25 @@
+/**
+ * 'compliance.*' endpoints: scheduled compliance report jobs and generated reports.
+ * See cli/lib/api/endpoints/index.js for aggregation + the fragment convention.
+ */
+
+export const compliance = {
+  'compliance.jobs.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/compliance/jobs`,
+    tags: ['live-safe'],
+  },
+  'compliance.reports.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/compliance/reports`,
+    tags: ['live-safe'],
+  },
+  'compliance.reports.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id }) => `/compliance/reports/${encodeURIComponent(id)}`,
+    tags: ['live-safe'],
+  },
+};

package/lib/api/endpoints/inbox.js

@@ -30,6 +30,12 @@ export const inbox = {
     path: ({ orgId, itemId }) => `/api/orgs/${orgId}/inbox/${itemId}/respond`,
     tags: ['live-write'],
   },
+  'inbox.withdraw': {
+    method: 'POST',
+    service: 'auth',
+    path: ({ orgId, itemId }) => `/api/orgs/${orgId}/inbox/${itemId}/withdraw`,
+    tags: ['live-write'],
+  },
   // quox ask: a session files a decision request (one inbox item) and waits for the human's answer.
   'inbox.decision.create': {
     method: 'POST',

package/lib/api/endpoints/inboxq.js

@@ -26,6 +26,19 @@ export const inboxq = {
     path: ({ accountId }) => `/api/v1/inboxq/accounts/${accountId}`,
     tags: ['live-write'],
   },
+  // quox#1504: per-account TLS certificate pin (human org admin only).
+  'inboxq.accounts.tlsPin': {
+    method: 'PUT',
+    service: 'collector',
+    path: ({ accountId }) => `/api/v1/inboxq/accounts/${encodeURIComponent(accountId)}/tls-pin`,
+    tags: ['live-write'],
+  },
+  'inboxq.syncStatus': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/inboxq/sync-status`,
+    tags: ['live-safe'],
+  },
   'inboxq.messages.get': {
     method: 'GET',
     service: 'collector',
@@ -99,6 +112,12 @@ export const inboxq = {
     path: ({ watchId }) => `/api/v1/inboxq/watches/${watchId}/active`,
     tags: ['live-write'],
   },
+  'inboxq.watches.delete': {
+    method: 'DELETE',
+    service: 'collector',
+    path: ({ watchId }) => `/api/v1/inboxq/watches/${watchId}`,
+    tags: ['live-write'],
+  },
   'inboxq.proposals.list': {
     method: 'GET',
     service: 'collector',

package/lib/api/endpoints/index.js

@@ -74,6 +74,7 @@ import { budgets } from './budgets.js';
 import { calendarq } from './calendarq.js';
 import { catalog } from './catalog.js';
 import { chat } from './chat.js';
+import { compliance } from './compliance.js';
 import { consent } from './consent.js';
 import { conversations } from './conversations.js';
 import { customRoles } from './custom-roles.js';
@@ -166,6 +167,7 @@ export const ENDPOINTS = {
   ...calendarq,
   ...catalog,
   ...chat,
+  ...compliance,
   ...consent,
   ...conversations,
   ...customRoles,

package/lib/api/endpoints/mon.js

@@ -163,6 +163,12 @@ export const mon = {
     path: ({ id } = {}) => `/api/v1/kuma/monitors/${encodeURIComponent(id)}/resume`,
     tags: ['live-write'],
   },
+  'mon.kuma.monitors.wire-alerts': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/kuma/monitors/${encodeURIComponent(id)}/wire-alerts`,
+    tags: ['live-write'],
+  },
   'mon.kuma.monitors.delete': {
     method: 'DELETE',
     service: 'collector',
@@ -318,12 +324,36 @@ export const mon = {
     path: () => `/api/v1/wazuh/agents`,
     tags: ['live-safe'],
   },
+  'mon.wazuh.read': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ tool }) => `/api/v1/wazuh/read/${tool}`,
+    tags: ['live-safe'],
+  },
   'mon.wazuh.alerts.list': {
     method: 'GET',
     service: 'collector',
     path: () => `/api/v1/wazuh/alerts`,
     tags: ['live-safe'],
   },
+  'mon.wazuh.alerts.triage': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/wazuh/alerts/triage`,
+    tags: ['live-safe'],
+  },
+  'mon.wazuh.coverage': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/wazuh/coverage`,
+    tags: ['live-safe'],
+  },
+  'mon.wazuh.credential.import-instance-env': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/wazuh/credential/import-instance-env`,
+    tags: ['live-write'],
+  },
   'mon.wazuh.deploy-agent': {
     method: 'POST',
     service: 'collector',
@@ -348,6 +378,98 @@ export const mon = {
     path: () => `/api/v1/wazuh/manager/status`,
     tags: ['live-safe'],
   },
+  'mon.wazuh.reports.create': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/wazuh/reports`,
+    tags: ['live-safe'],
+  },
+  'mon.wazuh.reports.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/wazuh/reports`,
+    tags: ['live-safe'],
+  },
+  'mon.wazuh.reports.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/wazuh/reports/${encodeURIComponent(id)}`,
+    tags: ['live-safe'],
+  },
+  'mon.wazuh.reports.verify': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/wazuh/reports/${encodeURIComponent(id)}/verify`,
+    tags: ['live-safe'],
+  },
+  // WAZ P6: Wazuh integratord alert hooks (org admin) and the incidents they open.
+  'mon.wazuh.hooks.list': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/wazuh/hooks`,
+    tags: ['live-safe'],
+  },
+  'mon.wazuh.hooks.create': {
+    method: 'POST',
+    service: 'collector',
+    path: () => `/api/v1/wazuh/hooks`,
+    tags: ['live-write'],
+  },
+  'mon.wazuh.hooks.rotate': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/wazuh/hooks/${encodeURIComponent(id)}/rotate`,
+    tags: ['live-write'],
+  },
+  'mon.wazuh.hooks.delete': {
+    method: 'DELETE',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/wazuh/hooks/${encodeURIComponent(id)}`,
+    tags: ['live-write'],
+  },
+  'mon.wazuh.incidents.list': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ open, since, limit } = {}) => {
+      const q = [];
+      if (open) q.push('open=1');
+      if (since) q.push(`since=${encodeURIComponent(since)}`);
+      if (limit) q.push(`limit=${encodeURIComponent(limit)}`);
+      return `/api/v1/wazuh/incidents${q.length ? `?${q.join('&')}` : ''}`;
+    },
+    tags: ['live-safe'],
+  },
+  'mon.wazuh.incidents.get': {
+    method: 'GET',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/wazuh/incidents/${encodeURIComponent(id)}`,
+    tags: ['live-safe'],
+  },
+  'mon.wazuh.incidents.close': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/wazuh/incidents/${encodeURIComponent(id)}/close`,
+    tags: ['live-write'],
+  },
+  // WAZ P7: read-only host diagnosis (off-list reads are held by the ssh_exec approval gate) and hand-off to QuoxSecurity.
+  'mon.wazuh.incidents.diagnose': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/wazuh/incidents/${encodeURIComponent(id)}/diagnose`,
+    tags: ['live-write'],
+  },
+  'mon.wazuh.incidents.escalate': {
+    method: 'POST',
+    service: 'collector',
+    path: ({ id } = {}) => `/api/v1/wazuh/incidents/${encodeURIComponent(id)}/escalate`,
+    tags: ['live-write'],
+  },
+  'mon.wazuh.vulnerabilities.priority': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/wazuh/vulnerabilities/priority`,
+    tags: ['live-safe'],
+  },
   'mon.wazuh.vulnerabilities.list': {
     method: 'GET',
     service: 'collector',

package/lib/api/endpoints/tools.js

@@ -29,6 +29,19 @@ export const tools = {
     path: () => `/api/tools/install-to-scope`,
     tags: ['live-write'],
   },
+  // CLI-COV 2026-11-05: read and undo what `tool install` wrote (tool_installations, not the org's tool definitions)
+  'tools.installed': {
+    method: 'GET',
+    service: 'auth',
+    path: () => `/api/tools/installed`,
+    tags: ['live-safe'],
+  },
+  'tools.uninstall-from-scope': {
+    method: 'DELETE',
+    service: 'auth',
+    path: ({ toolId }) => `/api/tools/install-to-scope/${encodeURIComponent(toolId)}`,
+    tags: ['live-write'],
+  },
   'tools.list': {
     method: 'GET',
     service: 'auth',

package/lib/api/endpoints/v1.js

@@ -365,6 +365,19 @@ export const v1 = {
     path: ({ id }) => `/api/v1/approvals/grants/${encodeURIComponent(id)}/revoke`,
     tags: ['live-write'],
   },
+  // ApprovalsQ call-me policy (2026-11-03): human org admin only; flips the stale-approval phone watcher.
+  'v1.approvals.call-me.get': {
+    method: 'GET',
+    service: 'collector',
+    path: () => `/api/v1/approvalsq/call-me`,
+    tags: ['live-safe'],
+  },
+  'v1.approvals.call-me.put': {
+    method: 'PUT',
+    service: 'collector',
+    path: () => `/api/v1/approvalsq/call-me`,
+    tags: ['live-write'],
+  },
   'v1.tools.list': {
     method: 'GET',
     service: 'collector',

package/lib/commands/admin.js

@@ -4,6 +4,9 @@
 
 import { formatOutput, formatDetail, printSuccess } from '../core/output.js';
 import { resolveEndpoint } from '../api/endpoints.js';
+import { withStepUp } from '../core/stepUpPrompt.js';
+import { announce, announceFailure } from '../core/announce.js';
+import { resolveOrgId } from './helpers.js';
 
 export function registerAdminCommands(program, ctx) {
   const { client, auth } = ctx;
@@ -154,6 +157,38 @@ export function registerAdminCommands(program, ctx) {
       console.log(data.token);
     });
 
+  // ADMIN-VERIFY-EMAIL: accounts with no real mailbox (test/service accounts) can never click the
+  // emailed link, so they never see org invites. Instance-admin, human, step-up PIN (hidden prompt).
+  const users = admin
+    .command('users')
+    .description('Instance user administration');
+
+  users
+    .command('verify-email')
+    .description('Mark a user email verified (instance admin; asks for your step-up PIN; audited)')
+    .argument('<email>', 'the email address to mark verified')
+    .requiredOption('--reason <text>', 'why this address is verified without a mailbox (recorded in the audit log)')
+    .option('--user-id <id>', 'refuse unless the email belongs to this user id')
+    .action(async (email, opts) => {
+      auth.requireAuth();
+      const reason = String(opts.reason || '').trim();
+      if (!reason) throw new Error('--reason must not be empty');
+      const orgId = resolveOrgId(auth, program);
+      const ep = resolveEndpoint('admin.users.verify_email');
+      let data;
+      try {
+        data = await withStepUp(
+          (headers) => client.post(ep.path, { service: ep.service, headers, body: { email, reason, ...(opts.userId ? { user_id: opts.userId } : {}) } }),
+          { client, orgId, scope: 'override', io: ctx.stepUpIO, what: 'Verifying an email address' },
+        );
+      } catch (err) {
+        announceFailure('quox', `admin verify-email ${email}`, err);
+        throw err;
+      }
+      announce('quox', `admin verify-email ${email}`, { result: `verified · user ${data.user_id}` });
+      printSuccess(`Email ${data.email} is now verified. Reason recorded in the audit log.`);
+    });
+
   // Email / SMTP (QCPRO-SMTP): instance email onboarding parity
   const email = admin
     .command('email')

package/lib/commands/agentAttach.js

@@ -1322,6 +1322,21 @@ export function registerAgentAttachCommands(agent, ctx, program) {
       if (program.opts().output === 'json') formatDetail(data, { format: 'json' });
     });
 
+  agent
+    .command('attaches')
+    .description('List every live agent attach in the org (agent, splinter, session, lease, heartbeat, expiry)')
+    .action(async () => {
+      auth.requireAuth();
+      const ep = resolveEndpoint('agent-attach.list');
+      const data = await client.get(ep.path, { service: ep.service });
+      const rows = Array.isArray(data?.attaches) ? data.attaches : [];
+      if (program.opts().output === 'json') return formatDetail(data, { format: 'json' });
+      if (!rows.length) return printInfo('No live agent attaches in this org.');
+      for (const a of rows) {
+        printInfo(`${a.agent_id} ${a.splinter || 'S1'} · ${a.session_label || '(no label)'} · lease ${a.lease_id} · heartbeat ${fmtAge(a.last_heartbeat_at)} · expires ${a.expires_at || '?'}`);
+      }
+    });
+
   agent
     .command('attach-heartbeat')
     .description("Heartbeat this session's attach lease, rotating the stored token if one is issued")