@knowttl/artium-axi 0.0.14 → 0.0.16

package/bin/artium-axi.mjs

@@ -6,9 +6,9 @@ var __export = (target, all) => {
 };
 
 // src/cli/main.ts
-import { randomUUID as randomUUID4 } from "node:crypto";
+import { randomUUID as randomUUID5 } from "node:crypto";
 import { homedir as homedir3 } from "node:os";
-import { resolve as resolve3, relative, sep, isAbsolute } from "node:path";
+import { resolve as resolve4, relative, sep, isAbsolute as isAbsolute2 } from "node:path";
 
 // node_modules/.pnpm/zod@4.6.5/node_modules/zod/v4/classic/external.js
 var external_exports = {};
@@ -5036,7 +5036,7 @@ var recursive = /* @__PURE__ */ new WeakMap();
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve4) {
+function isRecursive(inst, stack, resolve5) {
   const cached2 = recursive.get(inst);
   if (cached2 !== void 0)
     return cached2 ? PROVEN : NONE;
@@ -5046,7 +5046,7 @@ function isRecursive(inst, stack, resolve4) {
   let result = NONE;
   const check2 = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve4);
+      const answer = isRecursive(child, stack, resolve5);
       if (answer > result)
         result = answer;
     }
@@ -5057,7 +5057,7 @@ function isRecursive(inst, stack, resolve4) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve4) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve5) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -5121,7 +5121,7 @@ function isRecursive(inst, stack, resolve4) {
       break;
     // `$ZodLazy` caches its inner on the def, so a resolved edge is followed exactly
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve4 ? inst._zod.innerType : void 0);
+      const inner = def._cachedInner ?? (resolve5 ? inst._zod.innerType : void 0);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -19679,11 +19679,12 @@ function date4(params) {
 }
 
 // src/shared/errors.ts
+var cliOutdatedDownloadNext = "Download the current CLI from /cli/artium-axi.mjs on this server, verify it with the SHA-256 checksum at /cli/artium-axi.mjs.sha256, and install it as artium-axi.";
 var definitions = {
   STORE_SCHEMA_INVALID: { status: 503, message: "The store schema is unsupported by this image.", next: "Use the matching image, or restore the pre-upgrade backup into a new volume with its matching image and key." },
   BACKUP_FAILED: { status: 500, message: "Database backup did not complete.", next: "Check the source store and a writable backup directory; choose a new output file." },
   RESTORE_FAILED: { status: 500, message: "Database restore did not complete.", next: "Stop the destination server and use an empty new data volume, an intact backup and its matching master key." },
-  CLI_OUTDATED: { status: 426, message: "The CLI version is too old for this server.", next: "Run artium-axi update to install the current CLI." },
+  CLI_OUTDATED: { status: 426, message: "The CLI version is too old for this server.", next: cliOutdatedDownloadNext },
   CERTIFICATE_INVALID: { status: 503, message: "The server certificate could not be verified.", next: "Check certificate trust or set ARTIUM_AXI_CA_FILE to the trusted CA file." },
   ADMIN_REQUIRED: { status: 403, message: "Administrator capability is required.", next: "Ask an administrator to perform this operation." },
   REVISION_CONFLICT: { status: 409, message: "The record changed since it was read.", next: "Read the current record revision and retry your edit." },
@@ -19719,6 +19720,9 @@ var definitions = {
   PASSWORD_CHANGE_REQUIRED: { status: 409, message: "Change your temporary password before using tools.", next: "Run artium-axi passwd --password-stdin." },
   SERVER_UNAVAILABLE: { status: 503, message: "The CLI could not receive a server response.", next: "Check the server address and certificate trust; confirm the previous call outcome before retrying." },
   INVALID_RESPONSE: { status: 500, message: "The server returned an invalid response.", next: "Check the server URL and API version." },
+  KEY_LEVEL_RESTRICTED: { status: 403, message: "HTTP 403: restricted key cannot download.", next: "Request vetted-account download access. Administrator write settings cannot grant upstream entitlement. No other key or route was tried." },
+  PERMISSION_DENIED: { status: 403, message: "HTTP 403: download denied; key level unknown.", next: "Check upstream entitlement and request account vetting where required. Administrator write settings cannot grant upstream entitlement. No other key or route was tried." },
+  ARTIFACT_SAVE_FAILED: { status: 400, message: "The archive was not verified and saved.", next: "Check the dedicated private destination directory. Start a fresh preview and confirmation; interrupted transfers cannot be retried." },
   DEV_AUTH_INVALID: { status: 503, message: "Development authentication settings are unsupported.", next: "Remove ARTIUM_AXI_DEV and ARTIUM_AXI_DEV_TOKEN_FILE and use local sign-in." },
   PROXY_HEADERS_UNTRUSTED: { status: 400, message: "Forwarding headers came from an untrusted address.", next: "Connect through the configured trusted proxy or remove forwarding headers." },
   NOT_FOUND: { status: 404, message: "The endpoint does not exist.", next: "Use a supported API endpoint and tool name." },
@@ -19781,6 +19785,103 @@ var inputLimits = {
   totalFileBytes: 4 * 1024 * 1024,
   files: 8
 };
+var transferLimits = {
+  artifactBytes: 250 * 1024 * 1024,
+  reservationsPerUser: 1,
+  reservations: 4,
+  reservedBytes: 1024 * 1024 * 1024,
+  lifetimeMs: 10 * 60 * 1e3
+};
+var transferWarning = "Live malware: this archive may contain executable malware. Save only; do not extract or execute. Password protection is unverified; bytes are saved exactly as provided.";
+var sha256Schema = external_exports.string().regex(/^[a-f0-9]{64}$/);
+var sampleSha256Schema = external_exports.string().regex(/^[a-f0-9]{64}$/i);
+var reportIdSchema = external_exports.string().regex(/^(?:[A-Za-z0-9_-]{1,256}|[a-f0-9]{64}:\d+)$/i);
+var transferOwnerIdSchema = external_exports.string().regex(/^[A-Za-z0-9_-]{1,256}$/);
+var transferSelectionSchema = external_exports.discriminatedUnion("operation", [
+  external_exports.strictObject({ operation: external_exports.literal("hash-download-bin"), selector: sampleSha256Schema, type: external_exports.literal("bin") }),
+  external_exports.strictObject({ operation: external_exports.literal("report-download-bin"), selector: reportIdSchema, type: external_exports.literal("bin") }),
+  external_exports.strictObject({ operation: external_exports.literal("report-download-dropped-files"), selector: reportIdSchema, type: external_exports.literal("dropped-files") }),
+  external_exports.strictObject({ operation: external_exports.literal("report-download-memory"), selector: reportIdSchema, type: external_exports.literal("memory") })
+]);
+var transferPrepareSchema = external_exports.strictObject({ selection: transferSelectionSchema, targetDigest: sha256Schema });
+var transferIdSchema = external_exports.uuid();
+var transferScopeSchema = external_exports.strictObject({
+  transferId: transferIdSchema,
+  userId: transferOwnerIdSchema,
+  sessionFamilyId: transferOwnerIdSchema,
+  credentialRevision: external_exports.number().int().positive(),
+  selection: transferSelectionSchema,
+  targetDigest: sha256Schema,
+  preparedAt: external_exports.number().int().nonnegative(),
+  expiresAt: external_exports.number().int().nonnegative()
+}).refine((scope) => scope.expiresAt === scope.preparedAt + transferLimits.lifetimeMs);
+var transferPreviewSchema = external_exports.strictObject({
+  transferId: transferIdSchema,
+  expiresAt: external_exports.number().int(),
+  confirm: external_exports.string().min(1).max(64 * 1024),
+  warnings: external_exports.array(external_exports.string()),
+  targetDigest: sha256Schema
+});
+var transferExecuteSchema = external_exports.strictObject({
+  transferId: transferIdSchema,
+  selection: transferSelectionSchema,
+  targetDigest: sha256Schema,
+  execute: external_exports.literal(true),
+  confirm: external_exports.string().min(1).max(64 * 1024)
+});
+var transferRetrieveSchema = transferPrepareSchema.extend({ transferId: transferIdSchema });
+var transferOutcomeSchema = external_exports.enum([
+  "preview",
+  "denied-not-sent",
+  "native-outcome-unknown",
+  "upstream-failure",
+  "ready",
+  "delivery-completed",
+  "delivery-interrupted",
+  "expired",
+  "deleted",
+  "interrupted"
+]);
+var transferSaveOutcomeSchema = external_exports.enum(["unconfirmed", "verified-save", "save-failed"]);
+var transferArchiveSchema = external_exports.strictObject({
+  archiveBytes: external_exports.number().int().nonnegative().max(transferLimits.artifactBytes),
+  archiveSha256: sha256Schema
+});
+var transferReceiptSchema = transferRetrieveSchema.extend({
+  archive: transferArchiveSchema,
+  saveOutcome: external_exports.enum(["verified-save", "save-failed"])
+});
+var transferEvidenceSchema = external_exports.strictObject({
+  outcome: transferOutcomeSchema,
+  archive: transferArchiveSchema.nullable(),
+  saveOutcome: transferSaveOutcomeSchema
+}).refine((evidence) => !["ready", "delivery-completed"].includes(evidence.outcome) || evidence.archive !== null).refine((evidence) => !["preview", "denied-not-sent", "native-outcome-unknown", "upstream-failure"].includes(evidence.outcome) || evidence.archive === null).refine((evidence) => evidence.saveOutcome !== "verified-save" || evidence.archive !== null);
+var transferStatusSchema = transferEvidenceSchema.safeExtend({ transferId: transferIdSchema, expiresAt: external_exports.number().int() });
+var transferRoutes = {
+  prepare: { method: "POST", path: "/v1/transfers/hybrid/prepare", input: transferPrepareSchema, response: transferPreviewSchema },
+  execute: { method: "POST", path: "/v1/transfers/hybrid/execute", input: transferExecuteSchema, response: transferStatusSchema },
+  retrieve: { method: "POST", path: "/v1/transfers/hybrid/retrieve", input: transferRetrieveSchema },
+  receipt: { method: "POST", path: "/v1/transfers/hybrid/receipt", input: transferReceiptSchema },
+  cancel: { method: "POST", path: "/v1/transfers/hybrid/cancel", input: transferRetrieveSchema },
+  status: { method: "POST", path: "/v1/transfers/hybrid/status", input: transferRetrieveSchema, response: transferStatusSchema }
+};
+var transferAuditSchema = external_exports.strictObject({
+  transfer_id: transferIdSchema,
+  session_family_id: transferOwnerIdSchema,
+  transfer_operation: transferSelectionSchema.options[0].shape.operation.or(transferSelectionSchema.options[1].shape.operation).or(transferSelectionSchema.options[2].shape.operation).or(transferSelectionSchema.options[3].shape.operation),
+  artifact_type: external_exports.enum(["bin", "dropped-files", "memory"]),
+  artifact_selector: sha256Schema.or(reportIdSchema),
+  requested_target_digest: sha256Schema,
+  archive_bytes: external_exports.number().int().nonnegative().max(transferLimits.artifactBytes).nullable(),
+  archive_sha256: sha256Schema.nullable(),
+  native_audit_id: external_exports.uuid().nullable(),
+  native_journal_result: external_exports.enum(["SUCCESS", "FAILED", "NOT_SENT", "OUTCOME_UNKNOWN"]).nullable(),
+  client_save_outcome: transferSaveOutcomeSchema
+}).refine((fields) => fields.archive_bytes === null === (fields.archive_sha256 === null)).refine((fields) => transferSelectionSchema.safeParse({
+  operation: fields.transfer_operation,
+  type: fields.artifact_type,
+  selector: fields.artifact_selector
+}).success);
 var byteLength = (value) => new TextEncoder().encode(value).length;
 var passwordSchema = external_exports.string().min(1).refine((value) => byteLength(value) <= 512, "Expected at most 512 UTF-8 bytes");
 var passwordChangeSchema = external_exports.strictObject({ newPassword: external_exports.string(), currentPassword: external_exports.string().optional() });
@@ -19998,7 +20099,8 @@ var auditFiltersSchema = external_exports.strictObject({
   event: external_exports.string().min(1).max(100).optional(),
   outcome: external_exports.string().min(1).max(100).optional(),
   from: external_exports.iso.datetime().optional(),
-  to: external_exports.iso.datetime().optional()
+  to: external_exports.iso.datetime().optional(),
+  errorCode: external_exports.string().min(1).max(100).optional()
 });
 var orderedAuditRange = (input2) => !input2.from || !input2.to || Date.parse(input2.from) <= Date.parse(input2.to);
 var adminAuditQuerySchema = auditFiltersSchema.extend({
@@ -20036,7 +20138,18 @@ var adminAuditRecordSchema = external_exports.strictObject({
   error_code: external_exports.string().nullable(),
   authentication_method: external_exports.string().nullable(),
   provider_id: external_exports.string().nullable(),
-  subject: external_exports.string().nullable()
+  subject: external_exports.string().nullable(),
+  transfer_id: transferIdSchema.nullable(),
+  session_family_id: external_exports.string().nullable(),
+  transfer_operation: external_exports.string().nullable(),
+  artifact_type: external_exports.string().nullable(),
+  artifact_selector: external_exports.string().nullable(),
+  requested_target_digest: sha256Schema.nullable(),
+  archive_bytes: external_exports.number().int().nullable(),
+  archive_sha256: sha256Schema.nullable(),
+  native_audit_id: external_exports.string().nullable(),
+  native_journal_result: external_exports.string().nullable(),
+  client_save_outcome: transferSaveOutcomeSchema.nullable()
 });
 var adminAuditRoute = {
   method: "GET",
@@ -20117,7 +20230,7 @@ var diagnosticSchema = external_exports.strictObject({
   credentialRevision: external_exports.number().int().nullable().optional()
 });
 var healthSchema = external_exports.strictObject({
-  status: external_exports.enum(["unconfigured", "unknown", "ok", "error", "disabled"]),
+  status: external_exports.enum(["unconfigured", "unknown", "checking", "ok", "error", "disabled"]),
   diagnostic: diagnosticSchema.optional(),
   readOnly: external_exports.boolean().default(true),
   checkedAt: external_exports.number().int().nullable(),
@@ -20575,7 +20688,7 @@ var toolsResponseSchema = external_exports.strictObject({
     name: toolSchema,
     version: external_exports.string(),
     readOnly: external_exports.boolean().default(true),
-    status: external_exports.enum(["unconfigured", "unknown", "ok", "error", "disabled"])
+    status: external_exports.enum(["unconfigured", "unknown", "checking", "ok", "error", "disabled"])
   }))
 });
 var inputFileSchema = external_exports.strictObject({
@@ -20624,7 +20737,6 @@ var runResponseSchema = external_exports.union([runSuccessSchema, errorResponseS
 
 // src/cli/http.ts
 import { readFileSync as readFileSync2 } from "node:fs";
-import { request as httpRequest } from "node:http";
 import { request as httpsRequest } from "node:https";
 import { rootCertificates } from "node:tls";
 import { resolve } from "node:path";
@@ -20632,7 +20744,7 @@ import { resolve } from "node:path";
 // package.json
 var package_default = {
   name: "artium-axi",
-  version: "0.0.14",
+  version: "0.0.16",
   private: true,
   license: "MIT",
   type: "module",
@@ -20821,8 +20933,8 @@ var SessionStore = class {
     while (true) {
       const watcher = watch(this.directory);
       let timer;
-      const changed = new Promise((resolve4, reject) => {
-        watcher.once("change", () => resolve4());
+      const changed = new Promise((resolve5, reject) => {
+        watcher.once("change", () => resolve5());
         watcher.once("error", () => reject(new ArtiumError("SESSION_STORAGE_UNAVAILABLE")));
         timer = setTimeout(() => reject(new ArtiumError("SESSION_BUSY")), Math.max(0, deadline - Date.now()));
       });
@@ -20848,6 +20960,8 @@ var SessionStore = class {
 };
 
 // src/cli/http.ts
+var { request: httpRequest } = process.getBuiltinModule("node:http");
+var ACCESS_EXPIRY_SKEW_MS = 3e4;
 var DEFAULT_REQUEST_DEADLINE_MS = 9e4;
 var Client = class {
   constructor(environment = process.env, managed2, requestDeadlineMs = DEFAULT_REQUEST_DEADLINE_MS) {
@@ -20870,6 +20984,10 @@ var Client = class {
   }
   managed;
   requestDeadlineMs;
+  cancellation = new AbortController();
+  cancel() {
+    this.cancellation.abort();
+  }
   serverUrl;
   serverUrlSource;
   caFile;
@@ -20879,7 +20997,7 @@ var Client = class {
     return this.storedSessions;
   }
   certificateVerified = false;
-  async request(path, method, input2, token, bytes = false) {
+  async request(path, method, input2, token, bytes = false, headers = {}) {
     this.certificateVerified = false;
     let ca;
     try {
@@ -20891,13 +21009,13 @@ var Client = class {
     const controller = new AbortController();
     const deadline = setTimeout(() => controller.abort(), this.requestDeadlineMs);
     const url2 = new URL(`${this.serverUrl}${path}`);
-    const result = await new Promise((resolve4, reject) => {
+    const result = await new Promise((resolve5, reject) => {
       const request = (url2.protocol === "https:" ? httpsRequest : httpRequest)(url2, {
         method,
         ca,
         rejectUnauthorized: true,
-        signal: controller.signal,
-        headers: { "x-artium-cli-version": cliVersion, ...token ? { authorization: `Bearer ${token}` } : {}, ...body ? { "content-type": "application/json" } : {} }
+        signal: AbortSignal.any([controller.signal, this.cancellation.signal]),
+        headers: { ...headers, "x-artium-cli-version": cliVersion, ...token ? { authorization: `Bearer ${token}` } : {}, ...body ? { "content-type": "application/json" } : {} }
       }, (response) => {
         if (response.statusCode >= 300 && response.statusCode < 400) {
           response.destroy();
@@ -20909,7 +21027,7 @@ var Client = class {
         response.on("error", () => reject(new ArtiumError("SERVER_UNAVAILABLE")));
         response.on("end", () => {
           try {
-            resolve4({
+            resolve5({
               status: response.statusCode,
               body: bytes ? Buffer.concat(chunks) : response.statusCode === 204 ? void 0 : JSON.parse(Buffer.concat(chunks).toString("utf8")),
               serverVersion: typeof response.headers["x-artium-cli-version"] === "string" ? response.headers["x-artium-cli-version"] : void 0
@@ -20959,9 +21077,13 @@ var Client = class {
       (token) => this.request(path, method, input2, token),
       (refreshToken) => this.request("/v1/auth/refresh", "POST", { refreshToken })
     );
-    const session = previous ? this.reload(previous) : this.sessions.read();
+    let session = previous ? this.reload(previous) : this.sessions.read();
     if (!session) throw new ArtiumError("TOKEN_INVALID", void 0, "Run artium-axi login --username <username> --password-stdin.");
     if (session.status === "password-change-required") throw new ArtiumError("PASSWORD_CHANGE_REQUIRED");
+    if (session.accessExpiresAt <= Date.now() + ACCESS_EXPIRY_SKEW_MS) {
+      const expiring = session;
+      session = await this.sessions.locked(() => this.refresh(expiring));
+    }
     let result;
     try {
       result = await this.request(path, method, input2, session.accessToken);
@@ -20973,6 +21095,70 @@ var Client = class {
     if (previous) this.reload(previous);
     return result;
   }
+  // Transfers never refresh/replay a request, including an ambiguous execute or
+  // a retrieval whose response was interrupted before headers arrived.
+  async transferSession(work) {
+    if (this.managed) return this.managed.once(work);
+    const session = this.sessions.read();
+    if (!session) throw new ArtiumError("TOKEN_INVALID");
+    if (session.status !== "authenticated") throw new ArtiumError("PASSWORD_CHANGE_REQUIRED");
+    return work(session.accessToken);
+  }
+  async artifact(path, input2, token, ticket, expiresAt, consume) {
+    let ca;
+    try {
+      if (this.caFile) ca = [...rootCertificates, readFileSync2(this.caFile, "utf8")];
+    } catch {
+      throw new ArtiumError("CLIENT_CONFIG_INVALID");
+    }
+    const url2 = new URL(`${this.serverUrl}${path}`);
+    const controller = new AbortController();
+    const signal = AbortSignal.any([controller.signal, this.cancellation.signal]);
+    const deadline = setTimeout(() => controller.abort(), Math.max(0, expiresAt - Date.now()));
+    try {
+      await new Promise((resolve5, reject) => {
+        let incoming;
+        const request = (url2.protocol === "https:" ? httpsRequest : httpRequest)(url2, {
+          method: "POST",
+          ca,
+          rejectUnauthorized: true,
+          signal,
+          headers: {
+            authorization: `Bearer ${token}`,
+            "x-artium-cli-version": cliVersion,
+            "x-artium-reauth-ticket": ticket,
+            "accept-encoding": "identity",
+            "content-type": "application/json"
+          }
+        }, (response) => {
+          incoming = response;
+          void (async () => {
+            if (response.statusCode !== 200) {
+              const chunks = [];
+              let size = 0;
+              for await (const chunk of response) {
+                size += chunk.length;
+                if (size > 64 * 1024) throw new ArtiumError("INVALID_RESPONSE");
+                chunks.push(chunk);
+              }
+              const failure2 = errorResponseSchema.safeParse(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+              if (failure2.success) throw new ArtiumError(failure2.data.error.code, failure2.data.error.message, failure2.data.error.next);
+              throw new ArtiumError("INVALID_RESPONSE");
+            }
+            await consume(response, signal);
+          })().then(resolve5, reject).finally(() => response.destroy());
+        });
+        request.on("error", () => {
+          const error62 = new ArtiumError("SERVER_UNAVAILABLE");
+          if (incoming) incoming.destroy(error62);
+          else reject(error62);
+        });
+        request.end(JSON.stringify(input2));
+      });
+    } finally {
+      clearTimeout(deadline);
+    }
+  }
   // The caller holds the session lock, including the reload after acquisition.
   async refresh(previous) {
     const current = this.reload(previous);
@@ -21021,13 +21207,13 @@ async function readPassword(stdin, environmentVariable) {
   process.stdin.setRawMode(true);
   process.stdin.resume();
   try {
-    return await new Promise((resolve4, reject) => {
+    return await new Promise((resolve5, reject) => {
       let password = "";
       const keypress = (text2, key) => {
         if (key.name === "return" || key.ctrl && key.name === "c") {
           process.stdin.off("keypress", keypress);
           if (key.ctrl) reject(new ArtiumError("CANCELLED"));
-          else resolve4(password);
+          else resolve5(password);
         } else if (key.name === "backspace") password = Array.from(password).slice(0, -1).join("");
         else if (text2 && !key.ctrl && !new RegExp("\\p{Cc}", "u").test(text2)) password += text2;
       };
@@ -24835,10 +25021,10 @@ var vectra_axi_default = {
 var az_axi_default = {
   generatedBy: "scripts/upstream-inventory.mjs",
   tool: "az-axi",
-  version: "0.1.10",
-  integrity: "sha512-9RGnZrFOKpCIMC66nwxpWAzFLYrNlUJqaZWz8i/W1WexcP3sRj6BK4JWg0loc4zn+X7QKHRynKIx3pkdDOpTyw==",
+  version: "0.1.11",
+  integrity: "sha512-XiCwLaSh6A6xb9sk7RQ7T3FvkYpkWFIoGUCi7HxYlHF4kssVpF5gun4V7Taw9eKcm0HEWftnLci9l4EBSaFj0w==",
   parserEvidence: "Installed pinned catalogue exports, provisional until adapter acceptance",
-  packageManifestSha256: "7ec6a1ca9fd18e24bf0405bb49702d6846e40bcb089b270e8bdafedf345d9545",
+  packageManifestSha256: "8bdf756d4f0b3d006543471320eb14d83f258122752bd1e07c76a2a74868691c",
   environment: [
     {
       name: "AZ_AXI_CONFIG",
@@ -25014,7 +25200,7 @@ var az_axi_default = {
       "sub",
       "list"
     ],
-    help: "Command: az-axi sub list\nNative operation: az-axi account list; existing scope, defaults and TOON output apply.\nFlags: --subscription, --management-group, --help, --full, --fields, --limit, --all, --max-rows\nShort flags where accepted: -h help, -s subscription, -g resource-group, -n name, -w workspace, -t timespan.\nLists accept comma-separated, space-separated and repeated values after the leaf path.\nBooleans accept bare flags or true/false. Conflicting scalar values are refused.\n\nLists live ARM subscriptions in selected scope (flags, environment, profile, else all accessible), resolving unambiguous names to IDs. This is not Azure CLI's cached account list. Legacy sub list still lists all visible subscriptions with inScope markers.\nDefault: name, id (subscription GUID), state, tenantId. --full adds ARM metadata and shows all fetched rows; --fields selects metadata. --limit defaults to 50. Paging stops at 100 pages with lower-bound counts. Management-group scope is unsupported.\nExamples: az-axi account list; az-axi account list -s <subscription> --full\nFetch budget per subscription: 1000 rows by default; --all raises it to 10000 (Key Vault: at most 2500 scanned at 25/page). --max-rows <1..100000> overrides either row budget. Every walk stops at 100 pages. Budgets count rows before local filters. --limit controls display only (default 50); --full shows every fetched row and expands display only, never bypassing fetch budgets. Incomplete totals are lower bounds; narrow the scope or raise --max-rows to search further."
+    help: "Command: az-axi sub list\nNative operation: az-axi account list; existing scope, defaults and TOON output apply.\nFlags: --subscription, --management-group, --help, --full, --fields, --limit, --all, --max-rows\nShort flags where accepted: -h help, -s subscription, -g resource-group, -n name, -w workspace, -t timespan.\nLists accept comma-separated, space-separated and repeated values after the leaf path.\nBooleans accept bare flags or true/false. Conflicting scalar values are refused.\n\nLists live ARM subscriptions in selected scope (flags, environment, profile, else all accessible), resolving unambiguous names to IDs. This is not Azure CLI's cached account list. Legacy sub list still lists all visible subscriptions with inScope markers.\nDefault: name, id (subscription GUID), state, tenantId. --full adds ARM metadata and shows all fetched rows; --fields selects metadata. --limit defaults to 50. Lists follow the shared fetch budget (up to 100 pages and the row budget per subscription); incomplete counts are disclosed as lower bounds. Management-group scope is unsupported.\nExamples: az-axi account list; az-axi account list -s <subscription> --full\nFetch budget per subscription or collection (Resource Graph: across selected scope, per exposure check): 1000 rows by default; --all raises it to 10000 (Key Vault: at most 2500 scanned at 25/page). --max-rows <1..100000> overrides either row budget. Every walk stops at 100 pages. Budgets count rows before local filters. --limit controls display only (usually 50; Defender assessments 25, exposure overview 10 per check); --full shows every fetched row and expands display only, never bypassing fetch budgets. Incomplete totals are lower bounds; narrow the scope or raise --max-rows to search further."
   },
   adapterBoundary: {
     unsafeOverrides: [
@@ -25097,7 +25283,7 @@ var az_axi_default = {
   tokenResourceSources: [
     {
       path: "dist/lib/registry.js",
-      sha256: "e53b5e91dd69c4555960f7d69f0ea377090c8c80ecd38b200885ed31c69d3889"
+      sha256: "1b0354317f721989465190b4a276fce811d559bcbbd9871129b02dd366a5beb5"
     },
     {
       path: "dist/lib/client.js",
@@ -25121,7 +25307,7 @@ var az_axi_default = {
     },
     {
       path: "dist/commands/rbac.js",
-      sha256: "140ee55e6e9c139de95c13198c9b24557dd7b3c510b33d2560e52acf55978eb0"
+      sha256: "a0b5d0e92d47b78be10ef210b657399b3386ca67d0869d466913b31451dcdcaa"
     },
     {
       path: "dist/commands/logs.js",
@@ -25826,6 +26012,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "resource-group": "value",
         name: "value"
       },
@@ -25890,6 +26078,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "resource-group": "value",
         name: "value"
       },
@@ -25953,6 +26143,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "resource-group": "value",
         name: "value"
       },
@@ -26016,6 +26208,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         resource: "value"
       },
       flagAliases: {},
@@ -26075,6 +26269,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         resource: "value",
         metric: "list",
         "start-time": "value",
@@ -26334,6 +26530,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         principal: "value",
         role: "value",
         scope: "value",
@@ -26367,6 +26565,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         principal: "value",
         role: "value",
         scope: "value",
@@ -26401,6 +26601,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         since: "value",
         caller: "value",
         "resource-group": "value",
@@ -26434,6 +26636,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         since: "value",
         caller: "value",
         "resource-group": "value",
@@ -26469,6 +26673,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         severity: "list",
         status: "value",
         since: "value"
@@ -26499,6 +26705,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         severity: "list",
         status: "value",
         since: "value"
@@ -26556,6 +26764,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         name: "value"
       },
       flagAliases: {},
@@ -26615,6 +26825,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         name: "value",
         "assessment-name": "value",
         "assessed-resource-id": "value"
@@ -26754,6 +26966,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         severity: "list",
         status: "value",
         resource: "value",
@@ -26784,7 +26998,9 @@ var az_axi_default = {
         help: "boolean",
         full: "boolean",
         fields: "list",
-        limit: "value"
+        limit: "value",
+        all: "boolean",
+        "max-rows": "value"
       },
       flagAliases: {},
       shortFlags: {
@@ -26811,7 +27027,9 @@ var az_axi_default = {
         help: "boolean",
         full: "boolean",
         fields: "list",
-        limit: "value"
+        limit: "value",
+        all: "boolean",
+        "max-rows": "value"
       },
       flagAliases: {},
       shortFlags: {
@@ -26913,6 +27131,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "workspace-name": "value",
         "resource-group": "value",
         workspace: "value",
@@ -26949,6 +27169,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "workspace-name": "value",
         "resource-group": "value",
         workspace: "value",
@@ -27207,6 +27429,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         check: "value",
         "show-query": "boolean"
       },
@@ -28146,6 +28370,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "resource-group": "value",
         name: "value"
       },
@@ -28209,6 +28435,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         name: "value"
       },
       flagAliases: {},
@@ -28268,6 +28496,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         name: "value"
       },
       flagAliases: {},
@@ -28327,6 +28557,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "resource-group": "value",
         name: "value",
         assignment: "value",
@@ -28360,6 +28592,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "resource-group": "value",
         name: "value"
       },
@@ -28423,6 +28657,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "resource-group": "value",
         name: "value"
       },
@@ -28486,6 +28722,8 @@ var az_axi_default = {
         full: "boolean",
         fields: "list",
         limit: "value",
+        all: "boolean",
+        "max-rows": "value",
         "resource-group": "value",
         name: "value",
         "custom-role-only": "boolean"
@@ -29501,10 +29739,10 @@ var az_axi_default = {
 var mg_axi_default = {
   generatedBy: "scripts/upstream-inventory.mjs",
   tool: "mg-axi",
-  version: "0.1.10",
-  integrity: "sha512-rsd8KjyXxojDF3Gu6C95xsJokATeEmUaIRO7Zcaw9h/sF9WLXpW/gh6tKB1niU2QTGe2tsZjPsqXvzpyG34UUA==",
+  version: "0.1.12",
+  integrity: "sha512-TBt2y2rpfn8oi4YOq95uIo43RTsV/iOc0xFa3e3YCjhqd/ZL/y2is+7W0+B5/g1sdwb95yJbcU1eqeJEzmKJ5g==",
   parserEvidence: "Installed pinned catalogue exports",
-  packageManifestSha256: "9526463c1fff30f32a30a58dffbbb2e3d6eaf21a3e06edb904f223d7a535da4d",
+  packageManifestSha256: "e686938dd356bffe87d9884d656a139b91e7eb6d62370f6aba3b5fd14283fb45",
   environment: [
     {
       name: "MG_AXI_CONFIG"
@@ -29542,7 +29780,7 @@ var mg_axi_default = {
   environmentSources: [
     {
       path: "dist/profiles.js",
-      sha256: "97c12ad60bc54bb4180c12eda9a324411070ad08a2cf4555db12eaade1ef3f30"
+      sha256: "5a683251d3427b1642a3d60b5168ae56656506d12aae614ad4469dde6c6d624e"
     },
     {
       path: "dist/mutations.js",
@@ -29582,7 +29820,7 @@ var mg_axi_default = {
     sources: [
       {
         path: "dist/profiles.js",
-        sha256: "97c12ad60bc54bb4180c12eda9a324411070ad08a2cf4555db12eaade1ef3f30"
+        sha256: "5a683251d3427b1642a3d60b5168ae56656506d12aae614ad4469dde6c6d624e"
       },
       {
         path: "dist/mutations.js",
@@ -29661,15 +29899,15 @@ var mg_axi_default = {
     sources: [
       {
         path: "dist/catalogue.js",
-        sha256: "4f7710d0feb1bdaeaae1ae68f4e9e41d67f77f20620b824d2f44a95f2c63ee31"
+        sha256: "b6a764b7e50c3f4c84d40dcef1290a2e6a784fe73809977d6b04c06884b7a516"
       },
       {
         path: "dist/cli.js",
-        sha256: "19485f95fc3eeb5447fe05a55eec028dcf5d3c4e17a12f3bee1e0cffc239f00d"
+        sha256: "613fc3ac4870e5538d2c53b0760244c7e3bb3837fa3d97c1b89b7916c557af44"
       },
       {
         path: "dist/profiles.js",
-        sha256: "97c12ad60bc54bb4180c12eda9a324411070ad08a2cf4555db12eaade1ef3f30"
+        sha256: "5a683251d3427b1642a3d60b5168ae56656506d12aae614ad4469dde6c6d624e"
       },
       {
         path: "dist/msal-app-provider.js",
@@ -29737,11 +29975,11 @@ var mg_axi_default = {
     parserSources: [
       {
         path: "dist/catalogue.js",
-        sha256: "4f7710d0feb1bdaeaae1ae68f4e9e41d67f77f20620b824d2f44a95f2c63ee31"
+        sha256: "b6a764b7e50c3f4c84d40dcef1290a2e6a784fe73809977d6b04c06884b7a516"
       },
       {
         path: "dist/cli.js",
-        sha256: "19485f95fc3eeb5447fe05a55eec028dcf5d3c4e17a12f3bee1e0cffc239f00d"
+        sha256: "613fc3ac4870e5538d2c53b0760244c7e3bb3837fa3d97c1b89b7916c557af44"
       }
     ]
   },
@@ -29842,6 +30080,9 @@ var mg_axi_default = {
     {
       name: "fields"
     },
+    {
+      name: "file"
+    },
     {
       name: "filter"
     },
@@ -29935,6 +30176,9 @@ var mg_axi_default = {
     {
       name: "tenant-id"
     },
+    {
+      name: "timespan"
+    },
     {
       name: "transitive"
     },
@@ -34275,6 +34519,20 @@ var mg_axi_default = {
         required: true
       }
     },
+    {
+      command: "security hunting query",
+      flags: {
+        help: "boolean",
+        profile: "value",
+        "api-version": "value",
+        file: "value",
+        timespan: "value",
+        limit: "value",
+        full: "boolean",
+        config: "value"
+      },
+      positionalInput: false
+    },
     {
       command: "login",
       flags: {
@@ -34858,8 +35116,8 @@ var ldap_axi_default = {
 var ado_axi_default = {
   generatedBy: "scripts/ado-inventory.mjs",
   tool: "ado-axi",
-  version: "0.4.6",
-  integrity: "sha512-DThi4K9uO/jz93QQMBXtpnCXeHaYsOWSt6TFdYGhnqDN8aScow3bwbhVTIg4KEMVT0KHPYPdH00V9UOPX0c2fA==",
+  version: "0.4.7",
+  integrity: "sha512-qA7qpO0vjlib6r1hOOBfY0+cWn0mVCLBmkFUktJJANPelwbTiZuqgfwgk5D1lGG0q9rgCv+aPJrHOphmWJv0fw==",
   parserEvidence: "Reviewed published dispatch switches, aliases and command flag constants",
   sources: [
     {
@@ -34920,7 +35178,7 @@ var ado_axi_default = {
     },
     {
       path: "dist/commands/pr.js",
-      sha256: "7b4f81ce93f18c1079294e71237be8e85a4c71313ae0bceac50b0245324d8772"
+      sha256: "b85a81782aa806201facd9fc414a62959bc96db9858fa4ba804015395d001c32"
     },
     {
       path: "dist/commands/ref.js",
@@ -39787,8 +40045,8 @@ var awx_axi_default = {
 var tenable_axi_default = {
   generatedBy: "scripts/tenable-inventory.mjs",
   tool: "tenable-axi",
-  version: "0.1.1",
-  integrity: "sha512-ukWwVny4DeEBLqqWJhaM0au4Z5dvQTsDKoE2NhROIE3p114WUz2tT5dOfWL8MaalVrmU/zSMhk+S29sUocR3xg==",
+  version: "0.1.2",
+  integrity: "sha512-csjV0urIUbZZlkA9VQpEGbsOWOnLgZTFMi0yRQD3uGlmlyPIxA6gKyvMzifSqcRvfyOaBEv7U5OjcWL1rs5NAw==",
   parserEvidence: "Published command catalogue, mutation registry and reviewed native parsers and transport gates",
   sources: [
     {
@@ -39809,7 +40067,7 @@ var tenable_axi_default = {
     },
     {
       path: "dist/src/catalogue.js",
-      sha256: "d05c8dfebce3219c2ee0a305888fa336e62db5fc3b3b4bc95a27c0588943587b"
+      sha256: "d99e739f4a9d61cf13c91fd18e69a248f639c33d3e2e5b37efb320f0f50cef16"
     },
     {
       path: "dist/src/cli.js",
@@ -39825,7 +40083,7 @@ var tenable_axi_default = {
     },
     {
       path: "dist/src/exposure.js",
-      sha256: "5e93b01dc54368627f1f7c1ac4a96579af2f4beae7c2b10189ba190cf5cc9af6"
+      sha256: "ef5fbe0d3525b741cc14a51b2ab9cc0cbd5289a1ec97fe01312b4d351beaf0b0"
     },
     {
       path: "dist/src/hook-install.js",
@@ -39833,7 +40091,7 @@ var tenable_axi_default = {
     },
     {
       path: "dist/src/inventory-catalogue.js",
-      sha256: "ccd42834a43aabffbd90e7326926660e9cff788997ab836cb2eb858fc36f1119"
+      sha256: "a0cc6abc55f11815fbacf4e7f869ce0e70e06f678ebbb012afe7500a26fb4de8"
     },
     {
       path: "dist/src/inventory-export-catalogue.js",
@@ -39845,7 +40103,7 @@ var tenable_axi_default = {
     },
     {
       path: "dist/src/inventory.js",
-      sha256: "83bd3b19b1ad54785fdf107b57a66ffc882141706337bb886108b67f75565bb1"
+      sha256: "bc712463ee14db76ff511c4b3ec8d6cadd43b3895e08f1baee785fe3a415916f"
     },
     {
       path: "dist/src/inventory/schema.js",
@@ -39853,7 +40111,7 @@ var tenable_axi_default = {
     },
     {
       path: "dist/src/local-commands.js",
-      sha256: "4bb2769049b72126c47857f850b3cd008a371f952c479e0b288d5279d7aaa77a"
+      sha256: "4169d7a4bc6753d202d515b488ca8863b7368e31e8166f9e958c2fd1c6b05d22"
     },
     {
       path: "dist/src/platform-tag-catalogue.js",
@@ -39865,11 +40123,11 @@ var tenable_axi_default = {
     },
     {
       path: "dist/src/private-file.js",
-      sha256: "a5f01182fe09394ecf508deb46d54c9fb0b39c9fd205094d155ace212bbd1c8b"
+      sha256: "436847d36438fa3d73edfbd45cb14faf9935308230fb8b24573926b7f07b6979"
     },
     {
       path: "dist/src/profiles.js",
-      sha256: "12defbf234e4da8584e1f6ba601eb3826733ff85c76445197b0162ac52299b4a"
+      sha256: "b52aa17032f025a81682f0459dcdbed45cf0ed84e10e5aefe31677c31f26414a"
     },
     {
       path: "dist/src/redact.js",
@@ -40076,14 +40334,14 @@ var tenable_axi_default = {
       flags: {
         config: "Config path; default credential precedence",
         profile: "Profile name; default credential precedence",
-        fields: "Comma-separated display or wire properties; default compact view",
+        fields: "Comma-separated display or wire properties; display names: id, name, class, exposureScore; default compact view",
         full: "Show full text; default false",
         help: "Show help",
         limit: "Maximum emitted rows, 1-10000; default 100",
         all: "Read up to 10000 rows within invocation budgets; excludes --limit",
         cursor: "Opaque resume cursor; retain the original selectors and filters",
         query: "Simple query text",
-        filter: "Repeatable: <property> <operator> <JSON string array>",
+        filter: 'Repeatable: <property> <operator> <JSON string array>, e.g. asset_class = ["DEVICE"]',
         "filter-file": "JSON flat array of {property, operator, value: string[]}; '-' reads stdin; excludes --filter",
         sort: "Wire property:asc|desc",
         "extra-properties": "Comma-separated extra wire properties",
@@ -40097,7 +40355,7 @@ var tenable_axi_default = {
       flags: {
         config: "Config path; default credential precedence",
         profile: "Profile name; default credential precedence",
-        fields: "Comma-separated display or wire properties; default compact view",
+        fields: "Comma-separated output fields; accepted: key, readable_name, operators, sortable, filterable, control, description; default compact view",
         full: "Show full text; default false",
         help: "Show help",
         limit: "Maximum emitted rows, 1-10000; default 100",
@@ -40112,7 +40370,7 @@ var tenable_axi_default = {
       flags: {
         config: "Config path; default credential precedence",
         profile: "Profile name; default credential precedence",
-        fields: "Comma-separated display or wire properties; default compact view",
+        fields: "Comma-separated display or wire properties; display names: id, name, class, exposureScore; default compact view",
         full: "Show full text; default false",
         help: "Show help",
         id: "Required exact inventory ID",
@@ -40162,7 +40420,7 @@ var tenable_axi_default = {
       command: "auth status",
       effect: "read",
       flags: {
-        config: "Config path; default TENABLE_AXI_CONFIG or platform path",
+        config: "Config path; default environment override or platform path",
         profile: "Profile name; default credential precedence",
         fields: "Comma-separated output fields; default all",
         full: "Show full text; default false",
@@ -40505,14 +40763,14 @@ var tenable_axi_default = {
       flags: {
         config: "Config path; default credential precedence",
         profile: "Profile name; default credential precedence",
-        fields: "Comma-separated display or wire properties; default compact view",
+        fields: "Comma-separated display or wire properties; display names: id, name, severity, state; default compact view",
         full: "Show full text; default false",
         help: "Show help",
         limit: "Maximum emitted rows, 1-10000; default 100",
         all: "Read up to 10000 rows within invocation budgets; excludes --limit",
         cursor: "Opaque resume cursor; retain the original selectors and filters",
         query: "Simple query text",
-        filter: "Repeatable: <property> <operator> <JSON string array>",
+        filter: 'Repeatable: <property> <operator> <JSON string array>, e.g. severity = ["HIGH"]',
         "filter-file": "JSON flat array of {property, operator, value: string[]}; '-' reads stdin; excludes --filter",
         sort: "Wire property:asc|desc",
         "extra-properties": "Comma-separated extra wire properties",
@@ -40525,7 +40783,7 @@ var tenable_axi_default = {
       flags: {
         config: "Config path; default credential precedence",
         profile: "Profile name; default credential precedence",
-        fields: "Comma-separated display or wire properties; default compact view",
+        fields: "Comma-separated output fields; accepted: key, readable_name, operators, sortable, filterable, control, description; default compact view",
         full: "Show full text; default false",
         help: "Show help",
         limit: "Maximum emitted rows, 1-10000; default 100",
@@ -40539,7 +40797,7 @@ var tenable_axi_default = {
       flags: {
         config: "Config path; default credential precedence",
         profile: "Profile name; default credential precedence",
-        fields: "Comma-separated display or wire properties; default compact view",
+        fields: "Comma-separated display or wire properties; display names: id, name, severity, state; default compact view",
         full: "Show full text; default false",
         help: "Show help",
         id: "Required exact inventory ID",
@@ -40665,14 +40923,14 @@ var tenable_axi_default = {
       flags: {
         config: "Config path; default credential precedence",
         profile: "Profile name; default credential precedence",
-        fields: "Comma-separated display or wire properties; default compact view",
+        fields: "Comma-separated display or wire properties; display names: name, version, publisher; default compact view",
         full: "Show full text; default false",
         help: "Show help",
         limit: "Maximum emitted rows, 1-10000; default 100",
         all: "Read up to 10000 rows within invocation budgets; excludes --limit",
         cursor: "Opaque resume cursor; retain the original selectors and filters",
         query: "Simple query text",
-        filter: "Repeatable: <property> <operator> <JSON string array>",
+        filter: 'Repeatable: <property> <operator> <JSON string array>, e.g. application = ["example-app"]',
         "filter-file": "JSON flat array of {property, operator, value: string[]}; '-' reads stdin; excludes --filter",
         sort: "Wire property:asc|desc",
         "extra-properties": "Comma-separated extra wire properties",
@@ -40685,7 +40943,7 @@ var tenable_axi_default = {
       flags: {
         config: "Config path; default credential precedence",
         profile: "Profile name; default credential precedence",
-        fields: "Comma-separated display or wire properties; default compact view",
+        fields: "Comma-separated output fields; accepted: key, readable_name, operators, sortable, filterable, control, description; default compact view",
         full: "Show full text; default false",
         help: "Show help",
         limit: "Maximum emitted rows, 1-10000; default 100",
@@ -40989,8 +41247,8 @@ var tenable_axi_default = {
 var hybrid_axi_default = {
   generatedBy: "scripts/hybrid-inventory.mjs",
   tool: "hybrid-axi",
-  version: "0.1.0",
-  integrity: "sha512-eQdks/92bP8wCn7mpLGqkl5bAI/kYLgRzrRXumtuwpe4sQytNXuAiXY/lNyTYdPT6/WXEFGL9JoaTwWA37F01A==",
+  version: "0.1.1",
+  integrity: "sha512-8K39EZadEq302GcuCKrWmdKJ6NvtFegpGWiStTF8T8gn+lbzbYNiBnRMt5lI0o+hCm7glUdOFahZqw62ylpi7w==",
   parserEvidence: "Published command catalogue, mutation registry and reviewed native parsers and transport gates",
   sources: [
     {
@@ -40999,7 +41257,7 @@ var hybrid_axi_default = {
     },
     {
       path: "dist/src/cli.js",
-      sha256: "541b529cf64eeae007dac76898ffe288f03c8317f8e24b8c34ef13cb94c95665"
+      sha256: "85424239ee66a94aeb77789392277c300d784c9e77297c72a2b40fa22349abc7"
     },
     {
       path: "dist/src/download-catalogue.js",
@@ -41007,11 +41265,11 @@ var hybrid_axi_default = {
     },
     {
       path: "dist/src/hunting-catalogue.js",
-      sha256: "899c3a2e5a199fc899364ba2c324d188b3b030a13cb73d7b32927abda0fa562e"
+      sha256: "f013f3f508b15805cabe58c3c6e8f44088dee6448b08469b1dbe8d9d07fae6df"
     },
     {
       path: "dist/src/hunting.js",
-      sha256: "65de316b45aadbaf1d043c44899a3f95acb55f3c1626cef1951a69b80b036d6c"
+      sha256: "323486f2003b1f97979400028b0350e978c84249700f05fed032eb9a1fe413f4"
     },
     {
       path: "dist/src/key-contracts.js",
@@ -41019,7 +41277,7 @@ var hybrid_axi_default = {
     },
     {
       path: "dist/src/local-commands.js",
-      sha256: "80555cd34f3cfb55e72afb76080138b343bbfef000e0ae16060247ef547de7e9"
+      sha256: "c151a3662a623360ef3d4d40d7c268b8a090983ee7949131237a7704d02a63b8"
     },
     {
       path: "dist/src/private-file.js",
@@ -41027,7 +41285,7 @@ var hybrid_axi_default = {
     },
     {
       path: "dist/src/profiles.js",
-      sha256: "13efc4d1755319813ddd08ca3a23b89df34c6decfe568e90d71d6c217dfcf1b4"
+      sha256: "a2b567d31d3d1f04bc86970fc8b736b3510c1d7b7848f685c347415387f85543"
     },
     {
       path: "dist/src/redact.js",
@@ -41043,11 +41301,11 @@ var hybrid_axi_default = {
     },
     {
       path: "dist/src/reports.js",
-      sha256: "404a6bd21adcf33d1808b0703175f952b66220f1ad0821489d42720e0cfbc0fa"
+      sha256: "be256f71a04c2f19371b6eb862b88caff9f2e481b95551749bca172058d70396"
     },
     {
       path: "dist/src/search-catalogue.js",
-      sha256: "205bcc21e3d48f36b1b0d4501ab8a33b12f72d1998c74f7b40a9101328dfcbaa"
+      sha256: "e5cba3e769308123a560f7e9bcbb0f0ab36e428ce3631a173298953f063b8f7e"
     },
     {
       path: "dist/src/search-contracts.js",
@@ -41055,7 +41313,7 @@ var hybrid_axi_default = {
     },
     {
       path: "dist/src/search.js",
-      sha256: "03c3a4169cb5b731b820ef52278baf7573f9eaaf75b7c0a5f205de2751424da5"
+      sha256: "bd9362c96f6ff2a90c3297308cb7e1ef91469a4b233228abfa3d7a8849d28204"
     },
     {
       path: "dist/src/session.js",
@@ -41087,7 +41345,7 @@ var hybrid_axi_default = {
     },
     {
       path: "dist/src/writes-core.js",
-      sha256: "c231cae7b8ee78090c4eee94b0f0f1bd0ab3aa9433d0a02711bbd923183f7dc2"
+      sha256: "c91ce1b7b8e2735d60565e0cc043bc3aa76d7d31e81fa6745c01fbb42035baa0"
     },
     {
       path: "dist/src/writes.js",
@@ -41170,11 +41428,15 @@ var hybrid_axi_default = {
       }
     }
   },
-  skillSha256: "3b75c852fcfd4a18589145e1f7ae0cabac7e1896bd427d8ed8a3a43da989e20f",
+  skillSha256: "1d0266cf0237630d063531b567a6b960dca48a731e7917e72b50fb59f757d384",
   nativeWriteSettings: {
     supportedOperations: [
       "convertQuickScan",
+      "hash-download-bin",
       "huntingMatches",
+      "report-download-bin",
+      "report-download-dropped-files",
+      "report-download-memory",
       "submitDroppedFile",
       "submitFile",
       "submitUrl",
@@ -41206,7 +41468,7 @@ var hybrid_axi_default = {
     inputs: {
       stdin: "body-file - only",
       files: "uploaded leaves only",
-      downloads: "not available through artium; use hybrid-axi locally"
+      downloads: "artium-axi download only; authenticated one-shot CLI verified save"
     },
     nativeWrites: "native preview, operation allow-list, execute, exact confirm and durable journal"
   },
@@ -41229,7 +41491,7 @@ var hybrid_axi_default = {
     example: [
       "quota"
     ],
-    help: "hybrid-axi quota\nArtium manages the API key and fixed Hybrid Analysis origin. Submissions, YARA mutations and consuming matches are off by default; administrator-enabled operations still require native preview, --execute, exact --confirm and journal. Quick scans transmit the supplied sample or URL as read exceptions. File flags accept uploaded leaves; body-file also accepts explicit stdin (-). Downloads are not available through artium; use hybrid-axi locally.\n"
+    help: "hybrid-axi quota\nArtium manages the API key and fixed Hybrid Analysis origin. Submissions, YARA mutations, consuming matches and the four reviewed archive downloads are off by default and selected independently; administrator-enabled operations still require native preview, --execute, exact --confirm and journal. Quick scans transmit the supplied sample or URL as read exceptions. File flags accept uploaded leaves; body-file also accepts explicit stdin (-). Use artium-axi download --help for authenticated one-shot CLI verified saving and live-malware warnings.\n"
   },
   suggestionFields: [
     "help"
@@ -41348,7 +41610,8 @@ var hybrid_axi_default = {
         fields: "Comma-separated response fields; default compact fields",
         full: "Include all response fields; default false",
         hash: "One MD5/SHA1/SHA256/SHA512; exactly one selector required",
-        "hashes-file": "Newline-separated MD5/SHA1/SHA256 file; deprecated bulk route"
+        "hashes-file": "Newline-separated MD5/SHA1/SHA256 file; deprecated bulk route",
+        limit: "Local row limit; default 100; --full does not change it"
       }
     },
     {
@@ -41360,7 +41623,8 @@ var hybrid_axi_default = {
         profile: "Profile name; default profile precedence",
         fields: "Comma-separated response fields; default compact fields",
         full: "Include all response fields; default false",
-        labs: "Experimental Labs overview; default false"
+        labs: "Experimental Labs overview; default false",
+        limit: "Local row limit; default 100; --full does not change it"
       }
     },
     {
@@ -43448,7 +43712,7 @@ function managedFlagRanges(command, tool) {
 function hostedHelp(help, tool, flags, commands2) {
   if (tool === "hybrid-axi") {
     help = help.split("\n").filter((line) => !/HYBRID_AXI_|SecretRefs|hybrid-axi (?:setup|config|profile)|--(?:config|profile|origin|output)\b/.test(line)).join("\n");
-    const guidance = "Artium manages the API key and fixed origin. Submissions, YARA mutations and consuming matches require administrator-enabled operations, native preview, execute, exact confirmation and journal. Quick scans transmit the supplied sample or URL. Downloads are not available through artium; use hybrid-axi locally.";
+    const guidance = "Artium manages the API key and fixed origin. Submissions, YARA mutations, consuming matches and four reviewed archive downloads require independently selected administrator-enabled operations, native preview, execute, exact confirmation and journal. Quick scans transmit the supplied sample or URL. Use artium-axi download --help for authenticated one-shot CLI verified saving and live-malware warnings.";
     if (commands2 && !help.includes(guidance)) help = help.trimEnd() + "\n" + guidance + "\n";
   }
   if (tool === "tenable-axi") {
@@ -43700,12 +43964,19 @@ async function doctor(createClient = (deadline) => new Client(process.env, void
     try {
       const parsed = toolsResponseSchema.safeParse(await client.authenticated("/v1/tools", "GET"));
       if (!parsed.success) throw new ArtiumError("INVALID_RESPONSE");
-      for (const tool of parsed.data.tools) line(
-        tool.name,
-        tool.status === "ok",
-        tool.status,
-        new ArtiumError(tool.status === "unconfigured" ? "CREDENTIAL_NOT_CONFIGURED" : tool.status === "error" ? "TOOL_FAILED" : tool.status === "disabled" ? "TOOL_DISABLED" : "SERVER_UNAVAILABLE")
-      );
+      for (const tool of parsed.data.tools) {
+        if (tool.status === "checking") {
+          write(`pass: ${tool.name} (checking)
+`);
+          continue;
+        }
+        line(
+          tool.name,
+          tool.status === "ok",
+          tool.status,
+          new ArtiumError(tool.status === "unconfigured" ? "CREDENTIAL_NOT_CONFIGURED" : tool.status === "error" ? "TOOL_FAILED" : tool.status === "disabled" ? "TOOL_DISABLED" : "SERVER_UNAVAILABLE")
+        );
+      }
     } catch (error62) {
       const cause = error62 instanceof ArtiumError ? error62 : new ArtiumError("INVALID_RESPONSE");
       line("tools", false, cause.code, cause);
@@ -43716,7 +43987,7 @@ async function doctor(createClient = (deadline) => new Client(process.env, void
 
 // src/cli/help.ts
 var commands = {
-  home: { usage: "artium-axi [tools [show <tool>]|whoami|login|passwd|logout|doctor|setup|update|<tool> <args>]", purpose: "Show your identity, roles and available tools.", flags: ["--version (default false; print the client package version and exit)"], example: "artium-axi" },
+  home: { usage: "artium-axi [tools [show <tool>]|whoami|login|passwd|logout|doctor|setup|update|download|<tool> <args>]", purpose: "Show your identity, roles and available tools.", flags: ["--version (default false; print the client package version and exit)"], example: "artium-axi" },
   setup: {
     usage: "artium-axi setup --host <claude|codex|opencode|pi> [--hook] [--force]",
     purpose: "Install skills for your signed-in account\u2019s granted tools and an optional Claude Code session hook.",
@@ -43741,6 +44012,24 @@ var commands = {
   logout: { usage: "artium-axi logout", purpose: "Remove local tokens and revoke the server session.", flags: [], example: "artium-axi logout" },
   doctor: { usage: "artium-axi doctor", purpose: "Check the server, certificate, token, CLI version and cached tool health.", flags: [], example: "artium-axi doctor" },
   update: { usage: "artium-axi update", purpose: "Download and verify the server\u2019s client, replace this file and keep a .bak backup. npm installations must use npm install -g @knowttl/artium-axi.", flags: [], example: "artium-axi update" },
+  download: {
+    usage: "artium-axi download --operation <operation> --selector <hash|report-id> --type <bin|dropped-files|memory> --destination <absolute-new-path> [--transfer <id> --execute --confirm <exact-confirm>] [--password-stdin|--sso]",
+    purpose: "Preview or explicitly save a hosted Hybrid Analysis archive. Operations remain unavailable until adapter enablement.",
+    flags: [
+      "--operation <hash-download-bin|report-download-bin|report-download-dropped-files|report-download-memory> (required)",
+      "--selector <hash|report-id> (required)",
+      "--type <bin|dropped-files|memory> (required)",
+      "--destination <absolute-new-path> (required; Linux private 0700 directory, no symlink components or overwrite)",
+      "--transfer <id> (required for execution; preview transfer ID)",
+      "--execute (default false)",
+      "--confirm <exact-confirm> (required for execution; unchanged native preview string)",
+      "--password-stdin (default false; otherwise terminal password)",
+      "--sso (default false; browser identity confirmation)",
+      transferWarning,
+      `Limit ${transferLimits.artifactBytes / 1024 ** 2} MiB; ${transferLimits.reservationsPerUser} reservation per user, ${transferLimits.reservations} globally, ${transferLimits.reservedBytes / 1024 ** 3} GiB total artifact capacity; absolute expiry ${transferLimits.lifetimeMs / 6e4} minutes after preview preparation, including generation and retrieval. No resume or automatic retry. Missing receipt is unconfirmed.`
+    ],
+    example: "artium-axi download --operation report-download-bin --selector synthetic-report --type bin --destination /controlled/artifacts/new-archive.bin --sso"
+  },
   "falcon-axi": {
     usage: "artium-axi falcon-axi [<args>]",
     purpose: "Run Falcon commands with your managed credentials.",
@@ -43780,7 +44069,7 @@ var commands = {
   "hybrid-axi": {
     usage: "artium-axi hybrid-axi [<args>]",
     purpose: "Investigate Hybrid Analysis with a managed API key.",
-    flags: ["Submissions, YARA mutations and consuming matches are off by default and require administrator-enabled operations, preview, --execute and exact --confirm. Downloads are unavailable through Artium."],
+    flags: ["Submissions, YARA mutations, consuming matches and four reviewed archive downloads are off by default and selected independently by an administrator. Native preview, --execute and exact --confirm remain required. Use artium-axi download --help for authenticated CLI verified saving.", transferWarning],
     example: "artium-axi hybrid-axi quota"
   },
   "az-axi": {
@@ -43853,7 +44142,7 @@ function validateArguments(args, prefixHelp) {
     start = 2;
   }
   const entry = commands[level];
-  const validFlags = ["--help", ...entry.flags.map((flag) => flag.split(" ")[0])];
+  const validFlags = ["--help", ...entry.flags.filter((flag) => flag.startsWith("--")).map((flag) => flag.split(" ")[0])];
   const choices = `Valid flags for ${level}: ${validFlags.join(", ")}.` + (level === "tools" ? " Valid subcommands: show <tool>." : level === "tools show" ? ` Valid tools: ${toolSchema.options.join(", ")}.` : "");
   let tool = false;
   const seen = /* @__PURE__ */ new Set();
@@ -43865,8 +44154,9 @@ function validateArguments(args, prefixHelp) {
     } else {
       if (!validFlags.includes(token) || seen.has(token)) fail(token, level, choices);
       seen.add(token);
-      if (token === "--username" || token === "--host") {
+      if (token === "--username" || token === "--host" || command === "download" && ["--operation", "--selector", "--type", "--destination", "--transfer", "--confirm"].includes(token)) {
         const value = args[index + 1];
+        if (!value && command === "download") fail(value, `${level} ${token}`, `Supply a value for ${token}. Use ${entry.usage}. ${choices}`);
         if (!value) fail(value, `${level} ${token}`, `Supply ${token} ${token === "--host" ? "<claude|codex|opencode|pi>" : "<username>"}. ${choices}`);
         if (token === "--host" && !["claude", "codex", "opencode", "pi"].includes(value)) fail(value, `${level} --host`, `Valid hosts: claude, codex, opencode, pi. Use ${entry.usage}.`);
         index++;
@@ -43876,6 +44166,7 @@ function validateArguments(args, prefixHelp) {
   if (level === "tools show" && !tool && !seen.has("--help") && !prefixHelp) fail(void 0, level, choices);
 }
 function helpCommand(args, prefixHelp = false) {
+  if (args[0] === "download" && args.includes("--help")) return "download";
   if (args[0] === "setup" && args.includes("--help")) {
     const path2 = args.filter((arg) => arg !== "--help");
     for (let index = 1; index < path2.length; index++) {
@@ -44240,6 +44531,7 @@ var ManagedSession = class _ManagedSession {
   }
   channel;
   session;
+  refreshing;
   secrets = [];
   output = { stdout: "", stderr: "" };
   static async read(signIn = false) {
@@ -44279,19 +44571,31 @@ var ManagedSession = class _ManagedSession {
   checkServer(serverUrl) {
     if (this.session && this.session.serverUrl.replace(/\/$/, "") !== serverUrl) throw new ArtiumError("SESSION_SERVER_MISMATCH");
   }
+  async once(request) {
+    if (!this.session) throw new ArtiumError("TOKEN_INVALID");
+    return request(this.session.accessToken);
+  }
   async authenticated(request, refresh) {
     if (!this.session) throw new ArtiumError("TOKEN_INVALID");
+    const session = this.session;
     try {
-      return await request(this.session.accessToken);
+      return await request(session.accessToken);
     } catch (error62) {
       if (!(error62 instanceof ArtiumError) || error62.code !== "TOKEN_EXPIRED" || !this.session.refreshToken) throw error62;
     }
-    const parsed = loginResponseSchema.safeParse(await refresh(this.session.refreshToken));
-    if (!parsed.success || parsed.data.status !== "authenticated" || !parsed.data.accessToken || !parsed.data.refreshToken) {
-      throw new ArtiumError("INVALID_RESPONSE");
+    if (!this.refreshing && this.session.accessToken === session.accessToken) {
+      this.refreshing = (async () => {
+        const parsed = loginResponseSchema.safeParse(await refresh(session.refreshToken));
+        if (!parsed.success || parsed.data.status !== "authenticated" || !parsed.data.accessToken || !parsed.data.refreshToken) {
+          throw new ArtiumError("INVALID_RESPONSE");
+        }
+        await this.emit(session.serverUrl, parsed.data);
+        this.session = { serverUrl: session.serverUrl, ...parsed.data };
+      })().finally(() => {
+        this.refreshing = void 0;
+      });
     }
-    await this.emit(this.session.serverUrl, parsed.data);
-    this.session = { serverUrl: this.session.serverUrl, ...parsed.data };
+    await this.refreshing;
     return request(this.session.accessToken);
   }
   protect(...secrets) {
@@ -44301,9 +44605,9 @@ var ManagedSession = class _ManagedSession {
     if (session.status === "authenticated") this.protect(session.accessToken, session.refreshToken);
     else this.protect(session.passwordChangeToken);
     try {
-      await new Promise((resolve4, reject) => {
+      await new Promise((resolve5, reject) => {
         this.channel.write(`${JSON.stringify({ serverUrl, ...session })}
-`, (error62) => error62 ? reject(error62) : resolve4());
+`, (error62) => error62 ? reject(error62) : resolve5());
       });
     } catch {
       throw new ArtiumError(
@@ -44316,6 +44620,12 @@ var ManagedSession = class _ManagedSession {
   write(stream, text2) {
     this.output[stream] += text2;
   }
+  // Identity approval and pre-execution notices must reach the caller before
+  // the pending operation. Tool output retains the buffered flush contract.
+  notice(text2) {
+    if (new SecretScanner(this.secrets).scan("stdout", Buffer.from(text2))) throw new ArtiumError("SECRET_IN_OUTPUT");
+    process.stdout.write(text2);
+  }
   flush() {
     this.channel.destroy();
     const scanner = new SecretScanner(this.secrets);
@@ -44357,6 +44667,255 @@ async function update() {
   return "status: updated\nnext: artium-axi --version\n";
 }
 
+// src/cli/download.ts
+import { createHash as createHash4 } from "node:crypto";
+import { setTimeout as delay } from "node:timers/promises";
+
+// src/cli/artifact-save.ts
+import { createHash as createHash3, randomUUID as randomUUID4 } from "node:crypto";
+import { constants } from "node:fs";
+import { link, open as open2, unlink } from "node:fs/promises";
+import { basename as basename2, dirname as dirname4, isAbsolute, resolve as resolve3 } from "node:path";
+async function privateParent(destination) {
+  let parent = await open2("/", constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+  try {
+    for (const component of dirname4(destination).split("/").filter(Boolean)) {
+      const child = await open2(`/proc/self/fd/${parent.fd}/${component}`, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+      await parent.close();
+      parent = child;
+    }
+    const info = await parent.stat();
+    if (info.uid !== process.getuid?.() || (info.mode & 511) !== 448) throw new ArtiumError("ARTIFACT_SAVE_FAILED");
+    return parent;
+  } catch (error62) {
+    await parent.close();
+    throw error62;
+  }
+}
+async function artifactDestination(destination) {
+  if (process.platform !== "linux" || !isAbsolute(destination) || resolve3(destination) !== destination || basename2(destination) === "") {
+    throw new ArtiumError("ARTIFACT_SAVE_FAILED");
+  }
+  let parent;
+  try {
+    parent = await privateParent(destination);
+  } catch {
+    throw new ArtiumError("ARTIFACT_SAVE_FAILED");
+  }
+  let temporary;
+  let file2;
+  let closed = false;
+  try {
+    const info = await parent.stat();
+    const target = `/proc/self/fd/${parent.fd}/${basename2(destination)}`;
+    try {
+      const existing = await open2(target, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+      await existing.close();
+      throw new ArtiumError("ARTIFACT_SAVE_FAILED");
+    } catch (error62) {
+      if (error62.code !== "ENOENT") throw error62;
+    }
+    return {
+      async save(response, archive, signal) {
+        signal.throwIfAborted();
+        if (response.headers["content-type"] !== "application/octet-stream" || response.headers["content-length"] !== String(archive.archiveBytes) || response.headers["x-artium-archive-sha256"] !== archive.archiveSha256 || response.headers["content-encoding"] || response.headers["content-range"]) throw new ArtiumError("INVALID_RESPONSE");
+        temporary = `/proc/self/fd/${parent.fd}/.artium-${randomUUID4()}.tmp`;
+        file2 = await open2(temporary, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 384);
+        const hash2 = createHash3("sha256");
+        let size = 0;
+        for await (const chunk of response) {
+          signal.throwIfAborted();
+          size += chunk.length;
+          if (size > archive.archiveBytes) throw new ArtiumError("INVALID_RESPONSE");
+          hash2.update(chunk);
+          await file2.writeFile(chunk);
+        }
+        if (size !== archive.archiveBytes || hash2.digest("hex") !== archive.archiveSha256) throw new ArtiumError("INVALID_RESPONSE");
+        await file2.sync();
+        await file2.close();
+        file2 = void 0;
+        const current = await privateParent(destination);
+        try {
+          const actual = await current.stat();
+          if (info.dev !== actual.dev || info.ino !== actual.ino) throw new ArtiumError("ARTIFACT_SAVE_FAILED");
+        } finally {
+          await current.close();
+        }
+        signal.throwIfAborted();
+        await link(temporary, target);
+      },
+      async close() {
+        if (closed) return;
+        closed = true;
+        try {
+          await file2?.close();
+        } finally {
+          try {
+            if (temporary) await unlink(temporary);
+          } finally {
+            await parent.close();
+          }
+        }
+      }
+    };
+  } catch {
+    await parent.close();
+    throw new ArtiumError("ARTIFACT_SAVE_FAILED");
+  }
+}
+
+// src/cli/download.ts
+async function download(args, output3, managed2) {
+  const announce = (value) => {
+    const text2 = encode3(value) + "\n";
+    if (managed2) managed2.notice(text2);
+    else output3(text2);
+  };
+  announce({ warning: transferWarning });
+  const flags = /* @__PURE__ */ new Map();
+  for (let index = 0; index < args.length; index++) {
+    const name = args[index];
+    if (["--execute", "--password-stdin", "--sso"].includes(name)) flags.set(name, "true");
+    else flags.set(name, args[++index]);
+  }
+  const destination = flags.get("--destination") ?? "";
+  const input2 = transferPrepareSchema.safeParse({
+    selection: {
+      operation: flags.get("--operation"),
+      selector: flags.get("--selector"),
+      type: flags.get("--type")
+    },
+    targetDigest: createHash4("sha256").update(destination).digest("hex")
+  });
+  if (!input2.success || !destination || flags.has("--sso") && flags.has("--password-stdin")) throw new ArtiumError("INVALID_INPUT");
+  const execute = flags.has("--execute");
+  if (execute !== flags.has("--transfer") || execute !== flags.has("--confirm")) throw new ArtiumError("INVALID_INPUT");
+  let execution;
+  if (execute) {
+    const parsed = transferExecuteSchema.safeParse({
+      ...input2.data,
+      transferId: flags.get("--transfer"),
+      execute: true,
+      confirm: flags.get("--confirm")
+    });
+    if (!parsed.success) throw new ArtiumError("INVALID_INPUT");
+    execution = parsed.data;
+  }
+  const client = new Client(process.env, managed2);
+  const local = await artifactDestination(destination);
+  const interrupt = () => client.cancel();
+  process.once("SIGINT", interrupt);
+  process.once("SIGTERM", interrupt);
+  try {
+    await client.transferSession(async (token) => {
+      let proof;
+      if (flags.has("--sso")) {
+        const start = deviceStartResponseSchema.parse(await client.request("/v1/auth/reauth", "POST", {}, token));
+        if (start.verificationUri !== client.serverUrl + "/device") throw new ArtiumError("INVALID_RESPONSE");
+        managed2?.protect(start.deviceCode);
+        announce({ status: "approval-required", open: start.verificationUri, code: start.userCode, expiresAt: start.expiresAt });
+        while (Date.now() < start.expiresAt) {
+          try {
+            proof = ssoReauthResponseSchema.parse(await client.request("/v1/auth/reauth", "POST", { deviceCode: start.deviceCode }, token));
+            if (reauthResponseSchema.safeParse(proof).success) break;
+          } catch (error62) {
+            if (!(error62 instanceof ArtiumError) || error62.code !== "DEVICE_POLL_LIMITED") throw error62;
+          }
+          await delay(Math.min(start.intervalMs, Math.max(0, start.expiresAt - Date.now())));
+        }
+      } else {
+        const password = await readPassword(flags.has("--password-stdin"));
+        managed2?.protect(password);
+        proof = await client.request("/v1/auth/reauth", "POST", { password }, token);
+      }
+      const { ticket } = reauthResponseSchema.parse(proof);
+      managed2?.protect(ticket);
+      const request = (path, body) => client.request(
+        path,
+        "POST",
+        body,
+        token,
+        false,
+        { "x-artium-reauth-ticket": ticket }
+      );
+      if (!execution) {
+        const preview = transferPreviewSchema.parse(await request(transferRoutes.prepare.path, input2.data));
+        if (preview.targetDigest !== input2.data.targetDigest) throw new ArtiumError("INVALID_RESPONSE");
+        announce({
+          ...input2.data.selection,
+          destination,
+          limits: transferLimits,
+          ...preview,
+          saveOutcome: "unconfirmed",
+          next: "Repeat this exact selection and destination with --transfer <transferId> --execute --confirm <exact confirm> and recent identity confirmation. No automatic retries."
+        });
+        return;
+      }
+      const retrieval = { ...input2.data, transferId: execution.transferId };
+      let archive;
+      let saved = false;
+      let receipt = "unconfirmed";
+      try {
+        const pending = transferStatusSchema.parse(await request(transferRoutes.status.path, retrieval));
+        if (pending.transferId !== execution.transferId || pending.outcome !== "preview" || pending.archive !== null) throw new ArtiumError("INVALID_RESPONSE");
+        announce({
+          ...input2.data.selection,
+          destination,
+          limits: transferLimits,
+          expiresAt: pending.expiresAt,
+          saveOutcome: "unconfirmed"
+        });
+        const status = transferStatusSchema.parse(await request(transferRoutes.execute.path, execution));
+        if (status.transferId !== execution.transferId || status.expiresAt !== pending.expiresAt || status.outcome !== "ready" || !status.archive) throw new ArtiumError("INVALID_RESPONSE");
+        archive = status.archive;
+        await client.artifact(
+          transferRoutes.retrieve.path,
+          retrieval,
+          token,
+          ticket,
+          status.expiresAt,
+          (response, signal) => local.save(response, archive, signal)
+        );
+        saved = true;
+        await local.close();
+        try {
+          await request(transferRoutes.receipt.path, { ...retrieval, archive, saveOutcome: "verified-save" });
+          receipt = "confirmed";
+        } catch {
+        }
+      } catch (error62) {
+        if (archive && !saved) {
+          try {
+            await request(transferRoutes.receipt.path, { ...retrieval, archive, saveOutcome: "save-failed" });
+          } catch {
+          }
+        }
+        try {
+          await request(transferRoutes.cancel.path, retrieval);
+        } catch {
+        }
+        throw error62;
+      } finally {
+        output3(encode3({
+          ...input2.data.selection,
+          destination,
+          archiveBytes: archive?.archiveBytes ?? null,
+          archiveSha256: archive?.archiveSha256 ?? null,
+          saveOutcome: saved ? "verified-save" : "save-failed",
+          receipt
+        }) + "\n");
+      }
+    });
+  } catch (error62) {
+    if (error62 instanceof ZodError) throw new ArtiumError("INVALID_RESPONSE");
+    throw error62;
+  } finally {
+    process.off("SIGINT", interrupt);
+    process.off("SIGTERM", interrupt);
+    await local.close();
+  }
+}
+
 // src/cli/main.ts
 var managed;
 for (const stream of [process.stdout, process.stderr]) {
@@ -44406,6 +44965,10 @@ async function main(args) {
     output2("stdout", await update());
     return;
   }
+  if (command === "download") {
+    await download(args.slice(1), (text2) => output2("stdout", text2), managed);
+    return;
+  }
   if (command === "setup") {
     output2("stdout", await setup(args.slice(1)));
     return;
@@ -44517,17 +45080,23 @@ remoteRevocation: ${verified ? "verified" : "unverified"}
   const client = new Client(process.env, managed);
   const homeSession = home && !managed ? client.sessions.read() : void 0;
   if (home && !managed && !homeSession) throw new ArtiumError("TOKEN_INVALID", void 0, "Run artium-axi login --username <username> --password-stdin.");
-  const result = await client.authenticated(home || whoami ? "/v1/me" : `/v1/tools${listing ? "" : `/${command}/run`}`, home || listing || whoami ? "GET" : "POST", input2, homeSession);
+  const [result, homeTools] = (await Promise.allSettled([
+    client.authenticated(home || whoami ? "/v1/me" : `/v1/tools${listing ? "" : `/${command}/run`}`, home || listing || whoami ? "GET" : "POST", input2, homeSession),
+    home ? client.authenticated("/v1/tools", "GET", void 0, homeSession) : void 0
+  ])).map((response) => {
+    if (response.status === "rejected") throw response.reason;
+    return response.value;
+  });
   if (home || whoami) {
     const parsed = meResponseSchema.safeParse(result);
     if (!parsed.success) throw new ArtiumError("INVALID_RESPONSE");
     let view = identityView(parsed.data, client.serverUrl);
     if (home) {
-      const tools = toolsResponseSchema.safeParse(await client.authenticated("/v1/tools", "GET", void 0, homeSession));
+      const tools = toolsResponseSchema.safeParse(homeTools);
       if (!tools.success) throw new ArtiumError("INVALID_RESPONSE");
-      const executable = resolve3(process.argv[1]);
+      const executable = resolve4(process.argv[1]);
       const local = relative(homedir3(), executable);
-      const bin = local && !isAbsolute(local) && !local.startsWith(`..${sep}`) && local !== ".." ? `~${sep}${local}` : executable;
+      const bin = local && !isAbsolute2(local) && !local.startsWith(`..${sep}`) && local !== ".." ? `~${sep}${local}` : executable;
       view = `bin: ${JSON.stringify(bin)}
 description: Run managed upstream tools through one local sign-in.
 ${view}${toolsView(tools.data.tools)}`;
@@ -44554,16 +45123,20 @@ ${view}${toolsView(tools.data.tools)}`;
   }
 }
 function printError(response) {
+  if (process.argv[2] === "download" || process.argv[2] === "--managed-session" && process.argv[3] === "download") {
+    output2("stdout", `warning: ${JSON.stringify(transferWarning)}
+`);
+  }
   output2("stdout", `error:
 ${Object.entries(response.error).map(([key, value]) => `  ${key}: ${JSON.stringify(value)}`).join("\n")}
 `);
   process.exitCode = errors[response.error.code].exitCode;
 }
-main(process.argv.slice(2)).catch((error62) => printError(errorResponse(error62 instanceof ArtiumError ? error62 : new ArtiumError("INTERNAL_ERROR"), randomUUID4()))).then(() => {
+main(process.argv.slice(2)).catch((error62) => printError(errorResponse(error62 instanceof ArtiumError ? error62 : new ArtiumError("INTERNAL_ERROR"), randomUUID5()))).then(() => {
   try {
     managed?.flush();
   } catch {
     managed = void 0;
-    printError(errorResponse(new ArtiumError("SECRET_IN_OUTPUT"), randomUUID4()));
+    printError(errorResponse(new ArtiumError("SECRET_IN_OUTPUT"), randomUUID5()));
   }
 });