@cdot65/prisma-airs-cli 2.11.0 → 3.0.0

package/dist/index.d.ts

@@ -1,28 +1,1398 @@
+import { CreateCustomTopicRequest, CustomTopic as CustomTopic$1, CreateSecurityProfileRequest, ManagementClientOptions, ModelSecurityClientOptions, RedTeamClientOptions, InitOptions } from '@cdot65/prisma-airs-sdk';
+import { z } from 'zod';
+
 /**
- * Prisma AIRS CLI — Public library API
+ * AIRS integration types — scan results and service interfaces for the
+ * Prisma AIRS scanner, topic management, and red team APIs.
+ */
+
+/** Enriched topic entry read from a profile's policy. */
+interface ProfileTopic {
+    topicId: string;
+    topicName: string;
+    action: 'allow' | 'block';
+    description: string;
+    examples: string[];
+}
+
+/** Normalized output from a single AIRS prompt scan. */
+interface ScanResult {
+    scanId: string;
+    reportId: string;
+    action: 'allow' | 'block';
+    /** Whether the topic guardrail was triggered for this prompt. */
+    triggered: boolean;
+    category?: string;
+    raw?: unknown;
+}
+/** Normalized result from a runtime prompt scan (sync or async). */
+interface RuntimeScanResult {
+    prompt: string;
+    response?: string;
+    scanId: string;
+    reportId: string;
+    action: 'allow' | 'block';
+    category: string;
+    triggered: boolean;
+    detections: Record<string, boolean>;
+}
+/** Contract for runtime scanning operations (sync + async). */
+interface RuntimeService {
+    /** Scan a single prompt (and optional response) synchronously. */
+    scanPrompt(profileName: string, prompt: string, response?: string): Promise<RuntimeScanResult>;
+    /** Submit prompts for async bulk scanning, returns scan IDs. */
+    submitBulkScan(profileName: string, prompts: string[]): Promise<string[]>;
+    /** Poll async scan results until all complete. */
+    pollResults(scanIds: string[], intervalMs?: number): Promise<RuntimeScanResult[]>;
+}
+/** Contract for AIRS prompt scanning operations. */
+interface ScanService {
+    /** Scan a single prompt against a security profile. */
+    scan(profileName: string, prompt: string, sessionId?: string): Promise<ScanResult>;
+    /** Scan multiple prompts with concurrency control. */
+    scanBatch(profileName: string, prompts: string[], concurrency?: number, sessionId?: string): Promise<ScanResult[]>;
+}
+/** Contract for custom prompt set operations in AI Red Team. */
+interface PromptSetService {
+    /** Create a new custom prompt set. */
+    createPromptSet(name: string, description?: string): Promise<{
+        uuid: string;
+        name: string;
+    }>;
+    /** Add a prompt to an existing prompt set. */
+    addPrompt(promptSetId: string, prompt: string, goal?: string): Promise<{
+        uuid: string;
+        prompt: string;
+    }>;
+    /** List all custom prompt sets. */
+    listPromptSets(): Promise<Array<{
+        uuid: string;
+        name: string;
+        active: boolean;
+    }>>;
+    /** Get prompt set details. */
+    getPromptSet(uuid: string): Promise<PromptSetDetail>;
+    /** Update prompt set name/description. */
+    updatePromptSet(uuid: string, request: {
+        name?: string;
+        description?: string;
+    }): Promise<PromptSetDetail>;
+    /** Archive or unarchive a prompt set. */
+    archivePromptSet(uuid: string, archive: boolean): Promise<void>;
+    /** Get prompt set version info with stats. */
+    getPromptSetVersionInfo(uuid: string): Promise<PromptSetVersionInfo>;
+    /** Download CSV template for a prompt set. */
+    downloadTemplate(uuid: string): Promise<string>;
+    /** Upload CSV file to a prompt set. */
+    uploadPromptsCsv(uuid: string, file: Blob): Promise<{
+        message: string;
+        status: number;
+    }>;
+    /** List prompts in a prompt set. */
+    listPrompts(setUuid: string, opts?: {
+        limit?: number;
+        skip?: number;
+    }): Promise<PromptDetail[]>;
+    /** Get a single prompt. */
+    getPrompt(setUuid: string, promptUuid: string): Promise<PromptDetail>;
+    /** Update a prompt. */
+    updatePrompt(setUuid: string, promptUuid: string, request: {
+        prompt?: string;
+        goal?: string;
+    }): Promise<PromptDetail>;
+    /** Delete a prompt. */
+    deletePrompt(setUuid: string, promptUuid: string): Promise<void>;
+    /** List property names. */
+    getPropertyNames(): Promise<string[]>;
+    /** Create a property name. */
+    createPropertyName(name: string): Promise<MutationResponse>;
+    /** Get values for a property. */
+    getPropertyValues(name: string): Promise<PropertyValueList>;
+    /** Create a property value. */
+    createPropertyValue(name: string, value: string): Promise<MutationResponse>;
+}
+/** Normalized red team job/scan info. */
+interface RedTeamJob {
+    uuid: string;
+    name: string;
+    status: string;
+    jobType: string;
+    targetId: string;
+    targetName?: string;
+    score?: number | null;
+    asr?: number | null;
+    total?: number | null;
+    completed?: number | null;
+    createdAt?: string | null;
+}
+/** Normalized red team target info. */
+interface RedTeamTarget {
+    uuid: string;
+    name: string;
+    status: string;
+    targetType?: string;
+    active: boolean;
+}
+/** Detailed target info with connection params and metadata. */
+interface RedTeamTargetDetail extends RedTeamTarget {
+    connectionType?: string | null;
+    apiEndpointType?: string | null;
+    responseMode?: string | null;
+    authType?: string | null;
+    authConfig?: Record<string, unknown> | null;
+    networkBrokerChannelUuid?: string | null;
+    sessionSupported?: boolean;
+    extraInfo?: Record<string, unknown> | null;
+    description?: string | null;
+    connectionParams?: Record<string, unknown>;
+    background?: {
+        industry?: string | null;
+        use_case?: string | null;
+        competitors?: string[] | null;
+    };
+    additionalContext?: {
+        system_prompt?: string | null;
+        use_case_description?: string | null;
+        documents?: unknown[] | null;
+    };
+    metadata?: {
+        multi_turn?: boolean;
+        rate_limit?: number | null;
+        rate_limit_error_json?: Record<string, unknown> | null;
+        is_streaming_enabled?: boolean | null;
+        max_turns?: number | null;
+        api_endpoint_type?: string | null;
+        response_mode?: string | null;
+    };
+}
+/** Request to create a red team target. */
+interface RedTeamTargetCreateRequest {
+    name: string;
+    target_type: string;
+    connection_params: Record<string, unknown>;
+    background?: Record<string, unknown>;
+    additional_context?: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+}
+/** Request to update a red team target. */
+interface RedTeamTargetUpdateRequest {
+    name?: string;
+    target_type?: string;
+    connection_params?: Record<string, unknown>;
+    background?: Record<string, unknown>;
+    additional_context?: Record<string, unknown>;
+    metadata?: Record<string, unknown>;
+}
+/** Options for target create/update operations. */
+interface TargetOperationOptions {
+    validate?: boolean;
+}
+/** Normalized prompt set detail. */
+interface PromptSetDetail {
+    uuid: string;
+    name: string;
+    active: boolean;
+    archive: boolean;
+    description?: string;
+    createdAt?: string;
+    updatedAt?: string;
+}
+/** Prompt set version info with stats. */
+interface PromptSetVersionInfo {
+    uuid: string;
+    version: number;
+    stats: {
+        total: number;
+        active: number;
+        inactive: number;
+    };
+}
+/** Normalized individual prompt. */
+interface PromptDetail {
+    uuid: string;
+    prompt: string;
+    goal?: string;
+    active: boolean;
+    promptSetId: string;
+}
+/** Values for a single property name (SDK 0.10.0 shape). */
+interface PropertyValueList {
+    name: string;
+    values: string[];
+}
+/** Generic write-op response from custom-attack endpoints (SDK BaseResponseSchema). */
+interface MutationResponse {
+    message: string;
+    status?: number;
+}
+/** Normalized attack category with subcategories. */
+interface RedTeamCategory {
+    id: string;
+    displayName: string;
+    description?: string;
+    subCategories: Array<{
+        id: string;
+        displayName: string;
+        description?: string;
+    }>;
+}
+/** Normalized static report summary. */
+interface RedTeamStaticReport {
+    score?: number | null;
+    asr?: number | null;
+    severityBreakdown: Array<{
+        severity: string;
+        successful: number;
+        failed: number;
+    }>;
+    reportSummary?: string | null;
+    categories: Array<{
+        id: string;
+        displayName: string;
+        asr: number;
+        successful: number;
+        failed: number;
+        total: number;
+    }>;
+}
+/** Normalized dynamic scan report summary. */
+interface RedTeamDynamicReport {
+    score?: number;
+    asr?: number;
+    totalGoals?: number;
+    goalsAchieved?: number;
+    totalStreams?: number;
+    totalThreats?: number;
+    reportSummary?: string | null;
+}
+/** Normalized custom attack report summary. */
+interface RedTeamCustomReport {
+    totalPrompts: number;
+    totalAttacks: number;
+    totalThreats: number;
+    failedAttacks: number;
+    score: number;
+    asr: number;
+    promptSets: Array<{
+        promptSetId: string;
+        promptSetName: string;
+        totalPrompts: number;
+        totalAttacks: number;
+        totalThreats: number;
+        threatRate: number;
+    }>;
+}
+/** Normalized attack list item (static/dynamic scans). */
+interface RedTeamAttack {
+    id: string;
+    name: string;
+    severity?: string;
+    category?: string;
+    subCategory?: string;
+    subCategoryDisplayName?: string;
+    successful: boolean;
+}
+/** Normalized custom attack item (custom prompt set scans). */
+interface RedTeamCustomAttack {
+    promptId: string;
+    promptText: string;
+    goal?: string;
+    threat: boolean;
+    asr?: number;
+    promptSetName?: string;
+}
+/** EULA content response. */
+interface EulaContent {
+    content: string;
+}
+/** Normalized EULA acceptance status. */
+interface EulaStatus {
+    isAccepted: boolean;
+    acceptedAt?: string;
+    acceptedByUserId?: string;
+}
+/** Request to validate target auth credentials. */
+interface TargetAuthValidationRequest {
+    authType: string;
+    authConfig: unknown;
+    targetId?: string;
+}
+/** Result of target auth validation. */
+interface TargetAuthValidationResult {
+    validated: boolean;
+    tokenPreview?: string;
+    expiresIn?: number;
+}
+/** Request to create/update an instance. */
+interface InstanceRequest {
+    tsgId: string;
+    tenantId: string;
+    appId: string;
+    region: string;
+}
+/** Normalized instance response. */
+interface InstanceResponse {
+    tsgId: string;
+    tenantId?: string;
+    appId?: string;
+    isSuccess?: boolean;
+}
+/** Normalized instance detail (from GET). */
+interface InstanceDetail {
+    tsgId: string;
+    tenantId: string;
+    appId: string;
+    region: string;
+}
+/** Registry credentials. */
+interface RegistryCredentials {
+    token: string;
+    expiry: string;
+}
+/** Contract for AI Red Team scan operations. */
+interface RedTeamService {
+    /** Get EULA content. */
+    getEulaContent(): Promise<EulaContent>;
+    /** Get EULA acceptance status. */
+    getEulaStatus(): Promise<EulaStatus>;
+    /** Accept the EULA. */
+    acceptEula(eulaContent: string): Promise<EulaStatus>;
+    /** Create an instance. */
+    createInstance(request: InstanceRequest): Promise<InstanceResponse>;
+    /** Get instance details. */
+    getInstance(tenantId: string): Promise<InstanceDetail>;
+    /** Update an instance. */
+    updateInstance(tenantId: string, request: InstanceRequest): Promise<InstanceResponse>;
+    /** Delete an instance. */
+    deleteInstance(tenantId: string): Promise<InstanceResponse>;
+    /** Create devices for an instance. */
+    createDevices(tenantId: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /** Update devices (PATCH). */
+    updateDevices(tenantId: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /** Delete devices by serial numbers. */
+    deleteDevices(tenantId: string, serialNumbers: string): Promise<Record<string, unknown>>;
+    /** Get or create registry credentials. */
+    getRegistryCredentials(): Promise<RegistryCredentials>;
+    /** Validate target auth credentials. */
+    validateTargetAuth(request: TargetAuthValidationRequest): Promise<TargetAuthValidationResult>;
+    /** Get target field metadata. */
+    getTargetMetadata(): Promise<Record<string, unknown>>;
+    /** Get provider-specific target templates. */
+    getTargetTemplates(): Promise<Record<string, unknown>>;
+    /** List configured red team targets. */
+    listTargets(): Promise<RedTeamTarget[]>;
+    /** Get target details. */
+    getTarget(uuid: string): Promise<RedTeamTargetDetail>;
+    /** Create a red team target. */
+    createTarget(request: RedTeamTargetCreateRequest, opts?: TargetOperationOptions): Promise<RedTeamTargetDetail>;
+    /** Update a red team target. */
+    updateTarget(uuid: string, request: RedTeamTargetUpdateRequest, opts?: TargetOperationOptions): Promise<RedTeamTargetDetail>;
+    /** Delete a red team target. */
+    deleteTarget(uuid: string): Promise<void>;
+    /** Probe a target connection. */
+    probeTarget(request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /** Get target profile. */
+    getTargetProfile(uuid: string): Promise<Record<string, unknown>>;
+    /** Update target profile. */
+    updateTargetProfile(uuid: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    /** Create a red team scan job. */
+    createScan(request: {
+        name: string;
+        targetUuid: string;
+        jobType: string;
+        categories?: Record<string, unknown>;
+        customPromptSets?: string[];
+        attackGoals?: string[];
+        streamDepth?: number;
+        streamBreadth?: number;
+    }): Promise<RedTeamJob>;
+    /** Get scan status by job ID. */
+    getScan(jobId: string): Promise<RedTeamJob>;
+    /** List recent scans with optional filters. */
+    listScans(opts?: {
+        status?: string;
+        jobType?: string;
+        targetId?: string;
+        limit?: number;
+    }): Promise<RedTeamJob[]>;
+    /** Abort a running scan. */
+    abortScan(jobId: string): Promise<void>;
+    /** Get static scan report. */
+    getStaticReport(jobId: string): Promise<RedTeamStaticReport>;
+    /** Get dynamic scan report. */
+    getDynamicReport(jobId: string): Promise<RedTeamDynamicReport>;
+    /** Get custom attack report. */
+    getCustomReport(jobId: string): Promise<RedTeamCustomReport>;
+    /** List attacks from a static/dynamic scan. */
+    listAttacks(jobId: string, opts?: {
+        severity?: string;
+        limit?: number;
+    }): Promise<{
+        attacks: RedTeamAttack[];
+        totalItems?: number;
+    }>;
+    /** List attacks from a custom prompt set scan. */
+    listCustomAttacks(jobId: string, opts?: {
+        limit?: number;
+    }): Promise<RedTeamCustomAttack[]>;
+    /** List available attack categories. */
+    getCategories(): Promise<RedTeamCategory[]>;
+    /** Poll until scan completes. Calls onProgress for status updates. */
+    waitForCompletion(jobId: string, onProgress?: (job: RedTeamJob) => void, intervalMs?: number): Promise<RedTeamJob>;
+}
+/** Normalized security group. */
+interface ModelSecurityGroup {
+    uuid: string;
+    name: string;
+    description: string;
+    sourceType: string;
+    state: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/** Request to create a security group. */
+interface ModelSecurityGroupCreateRequest {
+    name: string;
+    sourceType: string;
+    description?: string;
+    ruleConfigurations?: Record<string, Record<string, unknown>>;
+}
+/** Request to update a security group. */
+interface ModelSecurityGroupUpdateRequest {
+    name?: string;
+    description?: string;
+}
+/** Filter options for listing security groups. */
+interface ModelSecurityGroupListOptions {
+    sourceTypes?: string[];
+    searchQuery?: string;
+    sortField?: string;
+    sortDir?: string;
+    enabledRules?: string[];
+    skip?: number;
+    limit?: number;
+}
+/** Normalized security rule. */
+interface ModelSecurityRule {
+    uuid: string;
+    name: string;
+    description: string;
+    ruleType: string;
+    compatibleSources: string[];
+    defaultState: string;
+    remediation: {
+        description: string;
+        steps: string[];
+        url: string;
+    };
+    editableFields: ModelSecurityRuleEditableField[];
+    constantValues: Record<string, unknown>;
+    defaultValues: Record<string, unknown>;
+}
+/** Editable field spec for a security rule. */
+interface ModelSecurityRuleEditableField {
+    attributeName: string;
+    type: string;
+    displayName: string;
+    displayType: string;
+    description?: string;
+    dropdownValues?: Array<{
+        value: string;
+        label: string;
+    }>;
+}
+/** Filter options for listing security rules. */
+interface ModelSecurityRuleListOptions {
+    sourceType?: string;
+    searchQuery?: string;
+    skip?: number;
+    limit?: number;
+}
+/** Normalized rule instance within a security group. */
+interface ModelSecurityRuleInstance {
+    uuid: string;
+    securityGroupUuid: string;
+    securityRuleUuid: string;
+    state: string;
+    createdAt: string;
+    updatedAt: string;
+    rule: Record<string, unknown>;
+    fieldValues: Record<string, unknown>;
+}
+/** Filter options for listing rule instances. */
+interface ModelSecurityRuleInstanceListOptions {
+    securityRuleUuid?: string;
+    state?: string;
+    skip?: number;
+    limit?: number;
+}
+/** Request to update a rule instance. */
+interface ModelSecurityRuleInstanceUpdateRequest {
+    state?: string;
+    fieldValues?: Record<string, unknown>;
+}
+/** Normalized model security scan. */
+interface ModelSecurityScan {
+    uuid: string;
+    evalOutcome: string;
+    modelUri: string;
+    scanOrigin: string;
+    sourceType: string;
+    securityGroupName: string;
+    evalSummary: {
+        rulesFailed: number;
+        rulesPassed: number;
+        totalRules: number;
+    } | null;
+    createdAt: string;
+    updatedAt: string;
+    labels: Array<{
+        key: string;
+        value: string;
+    }>;
+}
+/** Filter options for listing scans. */
+interface ModelSecurityScanListOptions {
+    evalOutcome?: string;
+    sourceType?: string;
+    scanOrigin?: string;
+    search?: string;
+    skip?: number;
+    limit?: number;
+}
+/** Normalized rule evaluation from a scan. */
+interface ModelSecurityEvaluation {
+    uuid: string;
+    result: string;
+    violationCount: number;
+    ruleInstanceUuid: string;
+    ruleName: string;
+    ruleDescription: string;
+    ruleInstanceState: string;
+}
+/** Normalized violation from a scan. */
+interface ModelSecurityViolation {
+    uuid: string;
+    description: string;
+    threat: string;
+    threatDescription: string;
+    file: string;
+    ruleName: string;
+    ruleDescription: string;
+    ruleInstanceState: string;
+}
+/** Normalized scanned file from a scan. */
+interface ModelSecurityFile {
+    uuid: string;
+    path: string;
+    type: string;
+    formats: string[];
+    result: string;
+}
+/** Filter options for listing scanned files. */
+interface ModelSecurityFileListOptions {
+    type?: string;
+    result?: string;
+    skip?: number;
+    limit?: number;
+}
+/** Label key-value pair. */
+interface ModelSecurityLabel {
+    key: string;
+    value: string;
+}
+/** PyPI authentication response. */
+interface ModelSecurityPyPIAuth {
+    url: string;
+    expiresAt: string;
+}
+/** Contract for Model Security operations. */
+interface ModelSecurityService {
+    listGroups(opts?: ModelSecurityGroupListOptions): Promise<{
+        totalItems: number;
+        groups: ModelSecurityGroup[];
+    }>;
+    getGroup(uuid: string): Promise<ModelSecurityGroup>;
+    createGroup(request: ModelSecurityGroupCreateRequest): Promise<ModelSecurityGroup>;
+    updateGroup(uuid: string, request: ModelSecurityGroupUpdateRequest): Promise<ModelSecurityGroup>;
+    deleteGroup(uuid: string): Promise<void>;
+    listRuleInstances(groupUuid: string, opts?: ModelSecurityRuleInstanceListOptions): Promise<{
+        totalItems: number;
+        ruleInstances: ModelSecurityRuleInstance[];
+    }>;
+    getRuleInstance(groupUuid: string, instanceUuid: string): Promise<ModelSecurityRuleInstance>;
+    updateRuleInstance(groupUuid: string, instanceUuid: string, request: ModelSecurityRuleInstanceUpdateRequest): Promise<ModelSecurityRuleInstance>;
+    listRules(opts?: ModelSecurityRuleListOptions): Promise<{
+        totalItems: number;
+        rules: ModelSecurityRule[];
+    }>;
+    getRule(uuid: string): Promise<ModelSecurityRule>;
+    createScan(request: Record<string, unknown>): Promise<ModelSecurityScan>;
+    listScans(opts?: ModelSecurityScanListOptions): Promise<{
+        totalItems: number;
+        scans: ModelSecurityScan[];
+    }>;
+    getScan(uuid: string): Promise<ModelSecurityScan>;
+    getEvaluations(scanUuid: string, opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        evaluations: ModelSecurityEvaluation[];
+    }>;
+    getEvaluation(uuid: string): Promise<ModelSecurityEvaluation>;
+    getViolations(scanUuid: string, opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        violations: ModelSecurityViolation[];
+    }>;
+    getViolation(uuid: string): Promise<ModelSecurityViolation>;
+    getFiles(scanUuid: string, opts?: ModelSecurityFileListOptions): Promise<{
+        totalItems: number;
+        files: ModelSecurityFile[];
+    }>;
+    addLabels(scanUuid: string, labels: ModelSecurityLabel[]): Promise<void>;
+    setLabels(scanUuid: string, labels: ModelSecurityLabel[]): Promise<void>;
+    deleteLabels(scanUuid: string, keys: string[]): Promise<void>;
+    getLabelKeys(opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        keys: string[];
+    }>;
+    getLabelValues(key: string, opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        values: string[];
+    }>;
+    getPyPIAuth(): Promise<ModelSecurityPyPIAuth>;
+}
+/** Normalized security profile. */
+interface SecurityProfileInfo {
+    profileId: string;
+    profileName: string;
+    revision?: number;
+    active?: boolean;
+    createdBy?: string;
+    updatedBy?: string;
+    lastModifiedTs?: string;
+    policy?: Record<string, unknown>;
+}
+/** Paginated profile list result. */
+interface SecurityProfileListResult {
+    profiles: SecurityProfileInfo[];
+    nextOffset?: number;
+}
+/** Delete response from profile/topic deletion. */
+interface DeleteResponse {
+    message: string;
+}
+/** Pagination options for list operations. */
+interface PaginationOptions {
+    offset?: number;
+    limit?: number;
+}
+/** Normalized API key. */
+interface ApiKeyInfo {
+    id: string;
+    name: string;
+    apiKey?: string;
+    last8?: string;
+    createdAt?: string;
+    expiresAt?: string;
+}
+/** Paginated API key list. */
+interface ApiKeyListResult {
+    apiKeys: ApiKeyInfo[];
+    nextOffset?: number;
+}
+/** Normalized customer app. */
+interface CustomerAppInfo {
+    id?: string;
+    name: string;
+    description?: string;
+    raw: Record<string, unknown>;
+}
+/** Paginated customer app list. */
+interface CustomerAppListResult {
+    apps: CustomerAppInfo[];
+    nextOffset?: number;
+}
+/**
+ * Per-app consumption + violation snapshot, normalized from the SDK's dashboard endpoints.
+ * Time window is fixed at construction.
+ */
+interface CustomerAppConsumption {
+    appId: string;
+    appName: string;
+    cloud?: string;
+    source?: string;
+    /** ISO timestamp of first monitoring (corresponds to SCM panel's "Monitoring Since"). */
+    monitoringSince?: string;
+    /** Attached security profile names. */
+    profiles: string[];
+    /** Token consumption stats with scale qualifier (K = thousands, M = millions). */
+    tokens: {
+        dailyAverage?: number;
+        dailyAverageScale?: string;
+        monthlyTotal?: number;
+        monthlyTotalScale?: string;
+    };
+    /** Session activity counts over the window. */
+    sessions: {
+        total: number;
+        violating: number;
+    };
+    /** Per-detector violation severity counts, one entry per detection_type. */
+    detectors: Array<{
+        type: string;
+        critical: number;
+        high: number;
+        medium: number;
+        low: number;
+        total: number;
+    }>;
+    /** Sum of violating sessions across all detectors (mirrors SCM panel's badge). */
+    totalViolating: number;
+}
+/** Allowed values for `--time-interval`. The API enforces this enum (other values return 400). */
+type ConsumptionTimeInterval = 7 | 30 | 60;
+/** Options for {@link ManagementService.getCustomerAppConsumption}. */
+interface ConsumptionQueryOptions {
+    timeInterval?: ConsumptionTimeInterval;
+}
+/**
+ * One entry from the dashboard's apps-overview enumeration.
+ *
+ * One per dashboard bucket. A single registered customer-app can produce multiple buckets when
+ * scan payloads sent under its API key carry different `metadata.app_name` values - the
+ * dashboard tracks each as its own bucket. The `id` field is the registered `customer_appId`
+ * UUID; the `name` field is the literal scan-payload value.
+ */
+interface ConsumptionAppListEntry {
+    /** Registered customer_appId UUID. */
+    appId: string;
+    /** Dashboard bucket name (literal scan-payload `metadata.app_name`). */
+    appName: string;
+    /** Cloud provider tag, if reported by the dashboard. */
+    cloud?: string;
+    /** Origin of the bucket, e.g. 'api'. */
+    source?: string;
+}
+/** Normalized deployment profile. */
+interface DeploymentProfileInfo {
+    raw: Record<string, unknown>;
+}
+/** Options for querying scan logs. */
+interface ScanLogQueryOptions {
+    timeInterval: number;
+    timeUnit: string;
+    pageNumber: number;
+    pageSize: number;
+    filter: string;
+    pageToken?: string;
+}
+/** Scan log query result. */
+interface ScanLogQueryResult {
+    results: Record<string, unknown>[];
+    pageToken?: string;
+    raw: Record<string, unknown>;
+}
+/** Contract for AIRS topic CRUD, profile CRUD, and profile linking operations. */
+interface ManagementService {
+    /** Create a new custom topic. */
+    createTopic(request: CreateCustomTopicRequest): Promise<CustomTopic$1>;
+    /** Update an existing custom topic by ID. */
+    updateTopic(topicId: string, request: CreateCustomTopicRequest): Promise<CustomTopic$1>;
+    /** Delete a custom topic by ID. */
+    deleteTopic(topicId: string): Promise<void>;
+    /** Force-delete a custom topic (removes from all referencing profiles). */
+    forceDeleteTopic(topicId: string, updatedBy?: string): Promise<DeleteResponse>;
+    /** List all custom topics. */
+    listTopics(): Promise<CustomTopic$1[]>;
+    /** Get a single custom topic by ID. */
+    getTopic(topicId: string): Promise<CustomTopic$1>;
+    /** Get a single custom topic by name. */
+    getTopicByName(topicName: string): Promise<CustomTopic$1>;
+    /** Assign a topic to a security profile's topic-guardrails. */
+    assignTopicToProfile(profileName: string, topicId: string, topicName: string, action: 'allow' | 'block'): Promise<void>;
+    /** Assign multiple topics to a security profile's topic-guardrails. */
+    assignTopicsToProfile(profileName: string, topics: Array<{
+        topicId: string;
+        topicName: string;
+        action: 'allow' | 'block';
+    }>, guardrailAction?: 'allow' | 'block'): Promise<void>;
+    /** List all topics configured in a profile with full details. */
+    getProfileTopics(profileName: string): Promise<ProfileTopic[]>;
+    /** Get a single security profile by UUID. */
+    getProfile(profileId: string): Promise<SecurityProfileInfo>;
+    /** Get a single security profile by name (returns highest revision). */
+    getProfileByName(profileName: string): Promise<SecurityProfileInfo>;
+    /** List security profiles. */
+    listProfiles(opts?: PaginationOptions): Promise<SecurityProfileListResult>;
+    /** Create a security profile. */
+    createProfile(request: CreateSecurityProfileRequest): Promise<SecurityProfileInfo>;
+    /** Update a security profile. */
+    updateProfile(profileId: string, request: CreateSecurityProfileRequest): Promise<SecurityProfileInfo>;
+    /** Delete a security profile. */
+    deleteProfile(profileId: string): Promise<DeleteResponse>;
+    /** Force-delete a security profile (removes from referencing policies). */
+    forceDeleteProfile(profileId: string, updatedBy: string): Promise<DeleteResponse>;
+    listApiKeys(opts?: PaginationOptions): Promise<ApiKeyListResult>;
+    createApiKey(request: Record<string, unknown>): Promise<ApiKeyInfo>;
+    regenerateApiKey(apiKeyId: string, request: Record<string, unknown>): Promise<ApiKeyInfo>;
+    deleteApiKey(apiKeyName: string, updatedBy: string): Promise<DeleteResponse>;
+    listCustomerApps(opts?: PaginationOptions): Promise<CustomerAppListResult>;
+    getCustomerApp(appName: string): Promise<CustomerAppInfo>;
+    updateCustomerApp(appId: string, request: Record<string, unknown>): Promise<CustomerAppInfo>;
+    deleteCustomerApp(appName: string, updatedBy: string): Promise<CustomerAppInfo>;
+    /** Get per-app token consumption + violation breakdown from the SCM dashboard endpoints. */
+    getCustomerAppConsumption(appName: string, opts?: ConsumptionQueryOptions): Promise<CustomerAppConsumption>;
+    /**
+     * List dashboard application buckets - the canonical apps source for consumption reporting.
+     *
+     * Drawn from `dashboard.applicationsOverview`. One entry per dashboard bucket, which is one
+     * per distinct scan-payload `metadata.app_name` per registered customer-app. Distinct from
+     * {@link ManagementService.listCustomerApps}, which enumerates registered customer-apps
+     * (different granularity).
+     */
+    listConsumptionApps(opts?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<ConsumptionAppListEntry[]>;
+    listDeploymentProfiles(opts?: {
+        unactivated?: boolean;
+    }): Promise<DeploymentProfileInfo[]>;
+    queryScanLogs(opts: ScanLogQueryOptions): Promise<ScanLogQueryResult>;
+}
+
+/**
+ * Wraps the SDK's ManagementClient to implement our ManagementService interface.
+ * OAuth2 token management, caching, and retry are handled by the SDK.
+ */
+declare class SdkManagementService implements ManagementService {
+    private client;
+    constructor(opts?: ManagementClientOptions);
+    createTopic(request: CreateCustomTopicRequest): Promise<CustomTopic$1>;
+    updateTopic(topicId: string, request: CreateCustomTopicRequest): Promise<CustomTopic$1>;
+    deleteTopic(topicId: string): Promise<void>;
+    forceDeleteTopic(topicId: string, updatedBy?: string): Promise<DeleteResponse>;
+    listTopics(): Promise<CustomTopic$1[]>;
+    getTopic(topicId: string): Promise<CustomTopic$1>;
+    getTopicByName(topicName: string): Promise<CustomTopic$1>;
+    /**
+     * Sets a single custom topic on a profile's topic-guardrails config.
+     * Delegates to {@link assignTopicsToProfile} for backward compatibility.
+     */
+    assignTopicToProfile(profileName: string, topicId: string, topicName: string, action: 'allow' | 'block'): Promise<void>;
+    /**
+     * Sets one or more custom topics on a profile's topic-guardrails config.
+     * Replaces any existing topics — previous runs' stale topics are cleared.
+     * Groups topics by action; skips empty action groups (AIRS rejects them).
+     *
+     * CRITICAL: Each topic entry MUST include the current `revision` number.
+     * AIRS pins topic content to the revision specified in the profile — omitting
+     * it defaults to revision 0 (original content), not the latest.
+     */
+    assignTopicsToProfile(profileName: string, topics: Array<{
+        topicId: string;
+        topicName: string;
+        action: 'allow' | 'block';
+    }>, guardrailAction?: 'allow' | 'block'): Promise<void>;
+    getProfileTopics(profileName: string): Promise<ProfileTopic[]>;
+    private normalizeProfile;
+    getProfile(profileId: string): Promise<SecurityProfileInfo>;
+    getProfileByName(profileName: string): Promise<SecurityProfileInfo>;
+    listProfiles(opts?: PaginationOptions): Promise<SecurityProfileListResult>;
+    createProfile(request: CreateSecurityProfileRequest): Promise<SecurityProfileInfo>;
+    updateProfile(profileId: string, request: CreateSecurityProfileRequest): Promise<SecurityProfileInfo>;
+    deleteProfile(profileId: string): Promise<DeleteResponse>;
+    forceDeleteProfile(profileId: string, updatedBy: string): Promise<DeleteResponse>;
+    private normalizeApiKey;
+    listApiKeys(opts?: PaginationOptions): Promise<ApiKeyListResult>;
+    createApiKey(request: Record<string, unknown>): Promise<ApiKeyInfo>;
+    regenerateApiKey(apiKeyId: string, request: Record<string, unknown>): Promise<ApiKeyInfo>;
+    deleteApiKey(apiKeyName: string, updatedBy: string): Promise<DeleteResponse>;
+    private normalizeCustomerApp;
+    listCustomerApps(opts?: PaginationOptions): Promise<CustomerAppListResult>;
+    getCustomerApp(appName: string): Promise<CustomerAppInfo>;
+    updateCustomerApp(appId: string, request: Record<string, unknown>): Promise<CustomerAppInfo>;
+    deleteCustomerApp(appName: string, updatedBy: string): Promise<CustomerAppInfo>;
+    listConsumptionApps(opts?: {
+        limit?: number;
+        offset?: number;
+    }): Promise<ConsumptionAppListEntry[]>;
+    getCustomerAppConsumption(appName: string, opts?: ConsumptionQueryOptions): Promise<CustomerAppConsumption>;
+    listDeploymentProfiles(opts?: {
+        unactivated?: boolean;
+    }): Promise<DeploymentProfileInfo[]>;
+    queryScanLogs(opts: ScanLogQueryOptions): Promise<ScanLogQueryResult>;
+}
+
+/**
+ * Wraps the SDK's ModelSecurityClient to implement ModelSecurityService.
+ * Provides security group CRUD, rule browsing, scan operations, and label management.
+ */
+declare class SdkModelSecurityService implements ModelSecurityService {
+    private client;
+    constructor(opts?: ModelSecurityClientOptions);
+    listGroups(opts?: ModelSecurityGroupListOptions): Promise<{
+        totalItems: number;
+        groups: ModelSecurityGroup[];
+    }>;
+    getGroup(uuid: string): Promise<ModelSecurityGroup>;
+    createGroup(request: ModelSecurityGroupCreateRequest): Promise<ModelSecurityGroup>;
+    updateGroup(uuid: string, request: ModelSecurityGroupUpdateRequest): Promise<ModelSecurityGroup>;
+    deleteGroup(uuid: string): Promise<void>;
+    /**
+     * Delete a group, then verify whether it is actually gone. The API soft/async-deletes
+     * security groups — a successful DELETE does not immediately remove the resource, so a
+     * follow-up `get` may still return it as ACTIVE (see prisma-airs-cli#239). The SDK delete
+     * returns void, so re-reading is the only way to report the real outcome rather than
+     * claiming an unconditional success. Returns `{ confirmed: true }` when the group no longer
+     * resolves, or `{ confirmed: false, state }` when it still does.
+     */
+    deleteGroupAndVerify(uuid: string): Promise<{
+        confirmed: boolean;
+        state?: string;
+    }>;
+    listRuleInstances(groupUuid: string, opts?: ModelSecurityRuleInstanceListOptions): Promise<{
+        totalItems: number;
+        ruleInstances: ModelSecurityRuleInstance[];
+    }>;
+    getRuleInstance(groupUuid: string, instanceUuid: string): Promise<ModelSecurityRuleInstance>;
+    updateRuleInstance(groupUuid: string, instanceUuid: string, request: ModelSecurityRuleInstanceUpdateRequest): Promise<ModelSecurityRuleInstance>;
+    listRules(opts?: ModelSecurityRuleListOptions): Promise<{
+        totalItems: number;
+        rules: ModelSecurityRule[];
+    }>;
+    getRule(uuid: string): Promise<ModelSecurityRule>;
+    createScan(request: Record<string, unknown>): Promise<ModelSecurityScan>;
+    listScans(opts?: ModelSecurityScanListOptions): Promise<{
+        totalItems: number;
+        scans: ModelSecurityScan[];
+    }>;
+    getScan(uuid: string): Promise<ModelSecurityScan>;
+    getEvaluations(scanUuid: string, opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        evaluations: ModelSecurityEvaluation[];
+    }>;
+    getEvaluation(uuid: string): Promise<ModelSecurityEvaluation>;
+    getViolations(scanUuid: string, opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        violations: ModelSecurityViolation[];
+    }>;
+    getViolation(uuid: string): Promise<ModelSecurityViolation>;
+    getFiles(scanUuid: string, opts?: ModelSecurityFileListOptions): Promise<{
+        totalItems: number;
+        files: ModelSecurityFile[];
+    }>;
+    addLabels(scanUuid: string, labels: ModelSecurityLabel[]): Promise<void>;
+    setLabels(scanUuid: string, labels: ModelSecurityLabel[]): Promise<void>;
+    deleteLabels(scanUuid: string, keys: string[]): Promise<void>;
+    getLabelKeys(opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        keys: string[];
+    }>;
+    getLabelValues(key: string, opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        values: string[];
+    }>;
+    getPyPIAuth(): Promise<ModelSecurityPyPIAuth>;
+}
+
+/**
+ * Wraps the SDK's RedTeamClient.customAttacks to implement PromptSetService.
+ * Creates and populates custom prompt sets for AI Red Team.
+ */
+declare class SdkPromptSetService implements PromptSetService {
+    private client;
+    constructor(opts?: RedTeamClientOptions);
+    createPromptSet(name: string, description?: string): Promise<{
+        uuid: string;
+        name: string;
+    }>;
+    addPrompt(promptSetId: string, prompt: string, goal?: string): Promise<{
+        uuid: string;
+        prompt: string;
+    }>;
+    listPromptSets(): Promise<Array<{
+        uuid: string;
+        name: string;
+        active: boolean;
+    }>>;
+    getPromptSet(uuid: string): Promise<PromptSetDetail>;
+    updatePromptSet(uuid: string, request: {
+        name?: string;
+        description?: string;
+    }): Promise<PromptSetDetail>;
+    archivePromptSet(uuid: string, archive: boolean): Promise<void>;
+    getPromptSetVersionInfo(uuid: string): Promise<PromptSetVersionInfo>;
+    /**
+     * Fetch a prompt set and its version info in one call, degrading gracefully when the
+     * version-info endpoint is unavailable. The upstream `/version-info` route currently
+     * returns 500 for every prompt set (see prisma-airs-cli#117); without this, a 500 there
+     * would abort the whole `prompt-sets get` command even though the set itself fetched fine.
+     * The set is always returned; `versionInfo` is `undefined` when that lookup fails.
+     */
+    getPromptSetWithVersionInfo(uuid: string): Promise<{
+        set: PromptSetDetail;
+        versionInfo?: PromptSetVersionInfo;
+    }>;
+    downloadTemplate(uuid: string): Promise<string>;
+    uploadPromptsCsv(uuid: string, file: Blob): Promise<{
+        message: string;
+        status: number;
+    }>;
+    listPrompts(setUuid: string, opts?: {
+        limit?: number;
+        skip?: number;
+    }): Promise<PromptDetail[]>;
+    getPrompt(setUuid: string, promptUuid: string): Promise<PromptDetail>;
+    updatePrompt(setUuid: string, promptUuid: string, request: {
+        prompt?: string;
+        goal?: string;
+    }): Promise<PromptDetail>;
+    deletePrompt(setUuid: string, promptUuid: string): Promise<void>;
+    getPropertyNames(): Promise<string[]>;
+    createPropertyName(name: string): Promise<MutationResponse>;
+    getPropertyValues(name: string): Promise<PropertyValueList>;
+    createPropertyValue(name: string, value: string): Promise<MutationResponse>;
+}
+
+/**
+ * Wraps the SDK's RedTeamClient to implement RedTeamService.
+ * Provides scan creation, status polling, report retrieval, and target/category listing.
+ */
+declare class SdkRedTeamService implements RedTeamService {
+    private client;
+    constructor(opts?: RedTeamClientOptions);
+    getEulaContent(): Promise<EulaContent>;
+    getEulaStatus(): Promise<EulaStatus>;
+    acceptEula(eulaContent: string): Promise<EulaStatus>;
+    createInstance(request: InstanceRequest): Promise<InstanceResponse>;
+    getInstance(tenantId: string): Promise<InstanceDetail>;
+    updateInstance(tenantId: string, request: InstanceRequest): Promise<InstanceResponse>;
+    deleteInstance(tenantId: string): Promise<InstanceResponse>;
+    createDevices(tenantId: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    updateDevices(tenantId: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    deleteDevices(tenantId: string, serialNumbers: string): Promise<Record<string, unknown>>;
+    getRegistryCredentials(): Promise<RegistryCredentials>;
+    validateTargetAuth(request: TargetAuthValidationRequest): Promise<TargetAuthValidationResult>;
+    getTargetMetadata(): Promise<Record<string, unknown>>;
+    getTargetTemplates(): Promise<Record<string, unknown>>;
+    listTargets(): Promise<RedTeamTarget[]>;
+    getTarget(uuid: string): Promise<RedTeamTargetDetail>;
+    createTarget(request: RedTeamTargetCreateRequest, opts?: TargetOperationOptions): Promise<RedTeamTargetDetail>;
+    updateTarget(uuid: string, request: RedTeamTargetUpdateRequest, opts?: TargetOperationOptions): Promise<RedTeamTargetDetail>;
+    deleteTarget(uuid: string): Promise<void>;
+    probeTarget(request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    getTargetProfile(uuid: string): Promise<Record<string, unknown>>;
+    updateTargetProfile(uuid: string, request: Record<string, unknown>): Promise<Record<string, unknown>>;
+    createScan(request: {
+        name: string;
+        targetUuid: string;
+        jobType: string;
+        categories?: Record<string, unknown>;
+        customPromptSets?: string[];
+        attackGoals?: string[];
+        streamDepth?: number;
+        streamBreadth?: number;
+    }): Promise<RedTeamJob>;
+    getScan(jobId: string): Promise<RedTeamJob>;
+    listScans(opts?: {
+        status?: string;
+        jobType?: string;
+        targetId?: string;
+        limit?: number;
+    }): Promise<RedTeamJob[]>;
+    abortScan(jobId: string): Promise<void>;
+    getStaticReport(jobId: string): Promise<RedTeamStaticReport>;
+    getDynamicReport(jobId: string): Promise<RedTeamDynamicReport>;
+    getCustomReport(jobId: string): Promise<RedTeamCustomReport>;
+    listAttacks(jobId: string, opts?: {
+        severity?: string;
+        limit?: number;
+    }): Promise<{
+        attacks: RedTeamAttack[];
+        totalItems?: number;
+    }>;
+    listCustomAttacks(jobId: string, opts?: {
+        limit?: number;
+    }): Promise<RedTeamCustomAttack[]>;
+    getCategories(): Promise<RedTeamCategory[]>;
+    waitForCompletion(jobId: string, onProgress?: (job: RedTeamJob) => void, intervalMs?: number): Promise<RedTeamJob>;
+}
+
+interface PollRetryOptions {
+    /** Max retries per rate-limit error before giving up. Default: 5. */
+    maxRetries?: number;
+    /** Base delay in ms for exponential backoff. Default: 10000. */
+    baseDelayMs?: number;
+    /** Called on each retry with (attempt, delayMs). */
+    onRetry?: (attempt: number, delayMs: number) => void;
+}
+declare class SdkRuntimeService implements RuntimeService {
+    private scanner;
+    constructor(opts: InitOptions);
+    scanPrompt(profileName: string, prompt: string, response?: string): Promise<RuntimeScanResult>;
+    submitBulkScan(profileName: string, prompts: string[], sessionId?: string): Promise<string[]>;
+    /**
+     * Poll async scan results until all complete or fail.
+     *
+     * Note: The async query API (`queryByScanIds`) does not return `prompt`,
+     * `response`, `triggered`, or `detections` fields. These are set to
+     * defaults (`''`, `undefined`, `false`, `{}`) in the returned results.
+     * Use `scanPrompt()` (sync API) when these fields are needed.
+     */
+    pollResults(scanIds: string[], intervalMs?: number, retryOpts?: PollRetryOptions): Promise<RuntimeScanResult[]>;
+    private processQueryResults;
+    static formatResultsCsv(results: RuntimeScanResult[]): string;
+}
+
+/** Scans prompts against AIRS security profiles via the Prisma AIRS SDK. */
+declare class AirsScanService implements ScanService {
+    private scanner;
+    constructor(opts: InitOptions);
+    /** Scan a single prompt synchronously and return the normalized result. */
+    scan(profileName: string, prompt: string, sessionId?: string): Promise<ScanResult>;
+    /** Scan multiple prompts concurrently (default 5) and return results in order. */
+    scanBatch(profileName: string, prompts: string[], concurrency?: number, sessionId?: string): Promise<ScanResult[]>;
+}
+
+/** Supported backup serialization formats. */
+type BackupFormat = 'json' | 'yaml';
+/** Discriminator for multi-resource backup directories. */
+type ResourceType = 'redteam-target';
+/** Envelope wrapping any backed-up resource. */
+interface BackupEnvelope<T> {
+    version: string;
+    resourceType: ResourceType;
+    exportedAt: string;
+    data: T;
+}
+/** Per-target result reported after a backup run. */
+interface BackupResult {
+    name: string;
+    filename: string;
+    status: 'ok' | 'failed';
+    error?: string;
+}
+/** Per-target result reported after a restore run. */
+interface RestoreResult {
+    name: string;
+    action: 'created' | 'updated' | 'skipped' | 'failed';
+    error?: string;
+}
+
+/**
+ * Sanitize a resource name into a filesystem-safe filename (no extension).
+ * Lowercases, replaces non-alphanumeric with hyphens, collapses runs, trims.
+ */
+declare function sanitizeFilename(name: string): string;
+/** Resolve output directory — user-specified or default `./airs-backup/<subdir>/`. */
+declare function resolveOutputDir(userDir: string | undefined, defaultSubdir: string): string;
+/** Serialize envelope and write to `dir/filename.{json|yaml}`. Creates dir if needed. */
+declare function writeBackupFile<T>(dir: string, filename: string, envelope: BackupEnvelope<T>, format: BackupFormat): void;
+/** Read and parse a single backup file. Detects format from extension. */
+declare function readBackupFile<T>(filePath: string): BackupEnvelope<T>;
+/** Read all backup files from a directory, filtering by resourceType. */
+declare function readBackupDir<T>(dirPath: string, resourceType: ResourceType): BackupEnvelope<T>[];
+
+declare const ConfigSchema: z.ZodObject<{
+    airsApiKey: z.ZodOptional<z.ZodString>;
+    airsApiToken: z.ZodOptional<z.ZodString>;
+    airsApiEndpoint: z.ZodOptional<z.ZodString>;
+    airsNumRetries: z.ZodOptional<z.ZodNumber>;
+    mgmtClientId: z.ZodOptional<z.ZodString>;
+    mgmtClientSecret: z.ZodOptional<z.ZodString>;
+    mgmtTsgId: z.ZodOptional<z.ZodString>;
+    mgmtEndpoint: z.ZodOptional<z.ZodString>;
+    mgmtTokenEndpoint: z.ZodOptional<z.ZodString>;
+    dlpEndpoint: z.ZodOptional<z.ZodString>;
+    redTeamDataEndpoint: z.ZodOptional<z.ZodString>;
+    redTeamMgmtEndpoint: z.ZodOptional<z.ZodString>;
+    redTeamTokenEndpoint: z.ZodOptional<z.ZodString>;
+    modelSecDataEndpoint: z.ZodOptional<z.ZodString>;
+    modelSecMgmtEndpoint: z.ZodOptional<z.ZodString>;
+    modelSecTokenEndpoint: z.ZodOptional<z.ZodString>;
+    scanConcurrency: z.ZodDefault<z.ZodNumber>;
+    dataDir: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    scanConcurrency: number;
+    dataDir: string;
+    airsApiKey?: string | undefined;
+    airsApiToken?: string | undefined;
+    airsApiEndpoint?: string | undefined;
+    airsNumRetries?: number | undefined;
+    mgmtClientId?: string | undefined;
+    mgmtClientSecret?: string | undefined;
+    mgmtTsgId?: string | undefined;
+    mgmtEndpoint?: string | undefined;
+    mgmtTokenEndpoint?: string | undefined;
+    dlpEndpoint?: string | undefined;
+    redTeamDataEndpoint?: string | undefined;
+    redTeamMgmtEndpoint?: string | undefined;
+    redTeamTokenEndpoint?: string | undefined;
+    modelSecDataEndpoint?: string | undefined;
+    modelSecMgmtEndpoint?: string | undefined;
+    modelSecTokenEndpoint?: string | undefined;
+}, {
+    airsApiKey?: string | undefined;
+    airsApiToken?: string | undefined;
+    airsApiEndpoint?: string | undefined;
+    airsNumRetries?: number | undefined;
+    mgmtClientId?: string | undefined;
+    mgmtClientSecret?: string | undefined;
+    mgmtTsgId?: string | undefined;
+    mgmtEndpoint?: string | undefined;
+    mgmtTokenEndpoint?: string | undefined;
+    dlpEndpoint?: string | undefined;
+    redTeamDataEndpoint?: string | undefined;
+    redTeamMgmtEndpoint?: string | undefined;
+    redTeamTokenEndpoint?: string | undefined;
+    modelSecDataEndpoint?: string | undefined;
+    modelSecMgmtEndpoint?: string | undefined;
+    modelSecTokenEndpoint?: string | undefined;
+    scanConcurrency?: number | undefined;
+    dataDir?: string | undefined;
+}>;
+type Config = z.infer<typeof ConfigSchema>;
+
+declare function loadConfig(cliOverrides?: Record<string, unknown>, configFilePath?: string): Promise<Config>;
+
+/**
+ * Core domain types — shared across all Prisma AIRS CLI modules.
+ */
+interface CustomTopic {
+    name: string;
+    description: string;
+    examples: string[];
+}
+interface UserInput {
+    topicDescription: string;
+    intent: 'allow' | 'block';
+    seedExamples?: string[];
+    profileName: string;
+    maxIterations?: number;
+    targetCoverage?: number;
+    maxRegressions?: number;
+    plateauWindow?: number;
+    plateauBand?: number;
+    accumulateTests?: boolean;
+    maxAccumulatedTests?: number;
+    createPromptSet?: boolean;
+    promptSetName?: string;
+    /** Max AIRS scan API calls per second. Undefined = unlimited. */
+    scanRate?: number;
+}
+interface TestCase {
+    prompt: string;
+    expectedTriggered: boolean;
+    category: string;
+    /** How this test entered the suite. Default: 'generated'. */
+    source?: 'generated' | 'carried-fp' | 'carried-fn' | 'regression';
+    /** Which topic this test targets (used by audit). */
+    targetTopic?: string;
+}
+/** Per-category error breakdown from a previous iteration's results. */
+interface CategoryBreakdown {
+    category: string;
+    total: number;
+    fp: number;
+    fn: number;
+    errorRate: number;
+}
+interface TestResult {
+    testCase: TestCase;
+    actualTriggered: boolean;
+    scanAction: 'allow' | 'block';
+    scanId: string;
+    reportId: string;
+    correct: boolean;
+}
+interface EfficacyMetrics {
+    truePositives: number;
+    trueNegatives: number;
+    falsePositives: number;
+    falseNegatives: number;
+    truePositiveRate: number;
+    trueNegativeRate: number;
+    accuracy: number;
+    coverage: number;
+    f1Score: number;
+    /** Count of regression-tier tests that failed (previously correct, now wrong). */
+    regressionCount: number;
+}
+interface AnalysisReport {
+    summary: string;
+    falsePositivePatterns: string[];
+    falseNegativePatterns: string[];
+    suggestions: string[];
+}
+interface IterationResult {
+    iteration: number;
+    timestamp: string;
+    topic: CustomTopic;
+    testCases: TestCase[];
+    testResults: TestResult[];
+    metrics: EfficacyMetrics;
+    analysis: AnalysisReport;
+    durationMs: number;
+}
+interface RunState {
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    userInput: UserInput;
+    iterations: IterationResult[];
+    currentIteration: number;
+    bestIteration: number;
+    bestCoverage: number;
+    consecutiveRegressions: number;
+    hasRevertedToBest: boolean;
+    hasTriedSimplification: boolean;
+    /** Companion allow topic created for block-intent two-phase generation. */
+    companionTopic?: CustomTopic;
+    status: 'running' | 'paused' | 'completed' | 'failed';
+}
+
+interface ValidationError {
+    field: string;
+    message: string;
+}
+declare function validateName(name: string): ValidationError[];
+declare function validateDescription(description: string): ValidationError[];
+declare function validateExamples(examples: string[]): ValidationError[];
+declare function validateTopic(topic: CustomTopic): ValidationError[];
+
+/**
+ * Classify test results into TP/TN/FP/FN and compute efficacy metrics.
  *
- * Automated generation, testing, and iterative refinement of
- * Palo Alto Prisma AIRS custom topic guardrails.
- */
-export { SdkManagementService } from './airs/management.js';
-export { SdkModelSecurityService } from './airs/modelsecurity.js';
-export { SdkPromptSetService } from './airs/promptsets.js';
-export { SdkRedTeamService } from './airs/redteam.js';
-export { SdkRuntimeService } from './airs/runtime.js';
-export { AirsScanService } from './airs/scanner.js';
-export type { ModelSecurityEvaluation, ModelSecurityFile, ModelSecurityFileListOptions, ModelSecurityGroup, ModelSecurityGroupCreateRequest, ModelSecurityGroupListOptions, ModelSecurityGroupUpdateRequest, ModelSecurityLabel, ModelSecurityPyPIAuth, ModelSecurityRule, ModelSecurityRuleEditableField, ModelSecurityRuleInstance, ModelSecurityRuleInstanceListOptions, ModelSecurityRuleInstanceUpdateRequest, ModelSecurityRuleListOptions, ModelSecurityScan, ModelSecurityScanListOptions, ModelSecurityService, ModelSecurityViolation, PromptDetail, PromptSetDetail, PromptSetService, PromptSetVersionInfo, PropertyName, PropertyValue, RedTeamAttack, RedTeamCategory, RedTeamCustomAttack, RedTeamCustomReport, RedTeamJob, RedTeamService, RedTeamStaticReport, RedTeamTarget, RedTeamTargetCreateRequest, RedTeamTargetDetail, RedTeamTargetUpdateRequest, RuntimeScanResult, RuntimeService, TargetOperationOptions, } from './airs/types.js';
-export { computeCompositeMetrics, computeTopicAuditResults, detectConflicts, } from './audit/evaluator.js';
-export { buildAuditReportHtml, buildAuditReportJson } from './audit/report.js';
-export { runAudit } from './audit/runner.js';
-export type { AuditEvent, AuditResult, ConflictPair, ProfileTopic, TopicAuditResult, } from './audit/types.js';
-export { readBackupDir, readBackupFile, resolveOutputDir, sanitizeFilename, writeBackupFile, } from './backup/io.js';
-export type { BackupEnvelope, BackupFormat, BackupResult, ResourceType, RestoreResult, } from './backup/types.js';
-export { loadConfig } from './config/loader.js';
-export type { ValidationError } from './core/constraints.js';
-export { validateDescription, validateExamples, validateName, validateTopic, } from './core/constraints.js';
-export { computeCategoryBreakdown, computeMetrics } from './core/metrics.js';
-export type { AnalysisReport, CategoryBreakdown, CustomTopic, EfficacyMetrics, IterationResult, RunState, TestCase, TestResult, UserInput, } from './core/types.js';
-export { buildReportHtml } from './report/html.js';
-export { buildReportJson } from './report/json.js';
-export type { IterationSummary, MetricsDelta, ReportOutput, RunDiff, RunSummary, TestDetail, } from './report/types.js';
-//# sourceMappingURL=index.d.ts.map
+ * @param results - Scan results paired with their expected outcomes.
+ * @returns Confusion matrix counts, rates (TPR, TNR, accuracy, coverage, F1),
+ *          and regression failure count. Division-by-zero yields 0.
+ *          Coverage = min(TPR, TNR) — the loop's stop condition target.
+ */
+declare function computeMetrics(results: TestResult[]): EfficacyMetrics;
+/** Compute per-category error breakdown from test results. Sorted by error rate descending. */
+declare function computeCategoryBreakdown(results: TestResult[]): CategoryBreakdown[];
+
+export { AirsScanService, type AnalysisReport, type BackupEnvelope, type BackupFormat, type BackupResult, type CategoryBreakdown, type CustomTopic, type EfficacyMetrics, type IterationResult, type ModelSecurityEvaluation, type ModelSecurityFile, type ModelSecurityFileListOptions, type ModelSecurityGroup, type ModelSecurityGroupCreateRequest, type ModelSecurityGroupListOptions, type ModelSecurityGroupUpdateRequest, type ModelSecurityLabel, type ModelSecurityPyPIAuth, type ModelSecurityRule, type ModelSecurityRuleEditableField, type ModelSecurityRuleInstance, type ModelSecurityRuleInstanceListOptions, type ModelSecurityRuleInstanceUpdateRequest, type ModelSecurityRuleListOptions, type ModelSecurityScan, type ModelSecurityScanListOptions, type ModelSecurityService, type ModelSecurityViolation, type MutationResponse, type ProfileTopic, type PromptDetail, type PromptSetDetail, type PromptSetService, type PromptSetVersionInfo, type PropertyValueList, type RedTeamAttack, type RedTeamCategory, type RedTeamCustomAttack, type RedTeamCustomReport, type RedTeamJob, type RedTeamService, type RedTeamStaticReport, type RedTeamTarget, type RedTeamTargetCreateRequest, type RedTeamTargetDetail, type RedTeamTargetUpdateRequest, type ResourceType, type RestoreResult, type RunState, type RuntimeScanResult, type RuntimeService, SdkManagementService, SdkModelSecurityService, SdkPromptSetService, SdkRedTeamService, SdkRuntimeService, type TargetOperationOptions, type TestCase, type TestResult, type UserInput, type ValidationError, computeCategoryBreakdown, computeMetrics, loadConfig, readBackupDir, readBackupFile, resolveOutputDir, sanitizeFilename, validateDescription, validateExamples, validateName, validateTopic, writeBackupFile };