@knowttl/artium-axi 0.0.14 → 0.0.16

package/README.md

@@ -98,7 +98,9 @@ Replace the synthetic username with your account; login uses a hidden terminal p
 For `PASSWORD_CHANGE_REQUIRED`, run `artium-axi passwd`, then log in again.
 For SSO, use `artium-axi login --sso` and approve only the browser code matching your own terminal.
 After ordinary login, later commands, installed hooks and skills use [saved connection settings](docs/client-reference.md#client-settings).
-After a server upgrade, run `artium-axi update`, then `artium-axi --version`.
+After a server upgrade, run `artium-axi update` if your client has that command, then `artium-axi --version`.
+For clients without `update`, repeat the verified download and checksum check above to install the server's current client.
+For `CLI_OUTDATED`, the server uses the client version header to select the update hint or safe download guidance; the capability boundary is defined by `firstVersionWithUpdate` in [the version contract](src/shared/version.ts).
 The updater uses those connection settings, verifies the server download’s SHA-256, replaces the running client file and keeps the previous client beside it as `<client-file>.bak`.
 The client file and its directory must be writable.
 The Falcon read requires an enabled tool, a role grant and API permissions; choose the example from an available tool's detail view.
@@ -161,6 +163,8 @@ Artium's authenticated setup fetches managed skills; a standalone skill installe
 All tools start disabled; write access defaults to off.
 Administrator capability alone grants no tool access; upstream permissions remain an additional boundary.
 
+Microsoft Graph supports the `entra` pack only; the bundled upstream `security hunting query` command for Defender XDR advanced hunting is unavailable through Artium.
+
 Falcon investigation reads include detection lineage, process details and trees, existing sandbox reports, FileVantage changes and device-control policy details.
 
 Vectra supports selected QUX/RUX writes for detection close/open and mark-fixed, host/account close, key assets, tags, notes (including bulk notes), assignments and outcomes, triage labels and rules, groups and membership, proxies, threat feeds, internal-network settings, syslog/Kafka, notification destinations and Match, subject to deployment support in the [reviewed inventory](tools/inventories/vectra-axi.json).
@@ -178,10 +182,11 @@ See [client input handling](docs/client-reference.md#command-surface-and-subcomm
 | Azure DevOps | Reviewed mutations with administrator `allowWrites: true`; raw `api` remains GET-only. |
 | AWX | Launch/cancel/relaunch, workflow approval/denial, project/inventory-source sync and notification tests with `allowWrites: true` and upstream `--confirm`; configuration, deletion and security writes stay blocked. |
 | Tenable One | Business writes and export-job creation with administrator `writes.allowWrites: true`, an explicit operations allow-list, native preview, `--execute`, exact `--confirm` and durable journaling; downloads and local configuration stay blocked. |
-| Hybrid Analysis | Sandbox submissions, YARA create/update/delete and consuming hunting matches require administrator `writes.allowWrites: true`, an explicit operations allow-list, native preview, `--execute`, exact `--confirm` and durable journaling. All downloads, including report artifacts, samples, dropped-file archives and memory dumps, are unavailable pending a separate hosted download path with its own security design; use hybrid-axi locally with its native guards and live-malware warnings. Local configuration and credential/origin overrides are blocked. |
+| Hybrid Analysis | Sandbox submissions, YARA create/update/delete, consuming hunting matches and the four reviewed archive downloads require administrator `writes.allowWrites: true`, independently selected operations, native preview, `--execute`, exact `--confirm` and durable journaling. Downloads are limited to `hash-download-bin`, `report-download-bin`, `report-download-dropped-files` and `report-download-memory`, through the [authenticated CLI verified-save path](docs/client-reference.md#hybrid-analysis-archive-saving) after the [operator prerequisites](docs/runbook.md#scope-and-prerequisites) pass. All operations default off; enabling other writes never enables downloads or grants upstream entitlement. The browser provides warnings, command guidance and metadata/save status only. Ordinary tool-run downloads, local configuration and credential/origin overrides are blocked. |
 
 Hybrid Analysis quick scans transmit the supplied sample or URL as read exceptions without a write gate; sandbox submission previews disclose that samples and reports can become visible to the community.
-Consuming hunting matches marks every returned match delivered; reconcile ambiguous outcomes using the audit ID, durable native journal and returned read-back guidance before retrying.
+Consuming hunting matches is account-wide across all rules, with no rule selector, and irreversibly marks every returned match delivered; reconcile ambiguous outcomes using the audit ID, durable native journal and returned read-back guidance before retrying.
+Updating a YARA rule with `reset_counter:true` resets its all-time match counter and changes its rule ID; use the returned ID for subsequent commands.
 Labs hunting and search contracts are experimental.
 
 There is no universal Artium confirmation flag.
@@ -239,6 +244,7 @@ This summary follows the [CLI help registry](src/cli/help.ts); `artium-axi --hel
 | `tools` / `tools show <tool>` | Granted enabled tools / pinned help and first call |
 | `doctor` | Server, TLS, token, version and cached health; five-second request deadlines |
 | `update` | Update the [server-downloaded client](#verified-client) |
+| `download` | Preview and explicitly verify/save administrator-selected Hybrid Analysis archives through the local CLI. Run `artium-axi download --help` for guards and warnings. |
 | `setup --host <host>` | Install managed skills and optional Claude hook |
 | `<tool> <args>` | Run any of the nine managed tools above |
 | `--managed-session --help` | Private-pipe session protocol |
@@ -248,7 +254,9 @@ The [full client reference](docs/client-reference.md#command-surface-and-subcomm
 
 ### TOON output and errors
 Discovery and Artium errors use TOON on stdout; progress uses stderr.
-Upstream stdout, stderr and exit status pass through, with managed suggestions adapted to Artium commands.
+Upstream stdout, stderr and exit status pass through, subject to managed suggestion adaptation and hosted status filtering.
+Hosted home and authentication status omit server executable and configuration paths; secret references report only their source kind, `env` or `file`.
+Malformed or truncated hosted status output is withheld with `INVALID_RESPONSE`.
 Artium exits 0 for success, 2 for usage/configuration errors and 1 for authentication/server/transport failures.
 See the generated [error catalogue](docs/errors.md) for actionable codes and retry guidance.