@cdot65/prisma-airs-cli 2.12.0 → 3.0.1

package/dist/backup/io.js

@@ -1,67 +0,0 @@
-import fs from 'node:fs';
-import path from 'node:path';
-import yaml from 'js-yaml';
-/**
- * Sanitize a resource name into a filesystem-safe filename (no extension).
- * Lowercases, replaces non-alphanumeric with hyphens, collapses runs, trims.
- */
-export function sanitizeFilename(name) {
-    if (!name)
-        return 'unnamed';
-    const sanitized = name
-        .toLowerCase()
-        .replace(/[^a-z0-9-]/g, '-')
-        .replace(/-{2,}/g, '-')
-        .replace(/^-+|-+$/g, '');
-    return sanitized || 'unnamed';
-}
-/** Resolve output directory — user-specified or default `./airs-backup/<subdir>/`. */
-export function resolveOutputDir(userDir, defaultSubdir) {
-    if (userDir)
-        return path.resolve(userDir);
-    return path.resolve('./airs-backup', defaultSubdir);
-}
-/** Serialize envelope and write to `dir/filename.{json|yaml}`. Creates dir if needed. */
-export function writeBackupFile(dir, filename, envelope, format) {
-    fs.mkdirSync(dir, { recursive: true });
-    const ext = format === 'yaml' ? 'yaml' : 'json';
-    const filePath = path.join(dir, `${filename}.${ext}`);
-    const content = format === 'yaml'
-        ? yaml.dump(envelope, { lineWidth: -1, noRefs: true })
-        : `${JSON.stringify(envelope, null, 2)}\n`;
-    fs.writeFileSync(filePath, content, 'utf-8');
-}
-/** Read and parse a single backup file. Detects format from extension. */
-export function readBackupFile(filePath) {
-    const ext = path.extname(filePath).toLowerCase();
-    if (ext !== '.json' && ext !== '.yaml' && ext !== '.yml') {
-        throw new Error(`Unsupported file format: ${ext} (expected .json, .yaml, or .yml)`);
-    }
-    const raw = fs.readFileSync(filePath, 'utf-8');
-    const parsed = ext === '.json' ? JSON.parse(raw) : yaml.load(raw);
-    if (!parsed || typeof parsed !== 'object' || !('version' in parsed) || !('data' in parsed)) {
-        throw new Error(`Invalid backup file: ${filePath} (missing version or data)`);
-    }
-    return parsed;
-}
-/** Read all backup files from a directory, filtering by resourceType. */
-export function readBackupDir(dirPath, resourceType) {
-    const files = fs
-        .readdirSync(dirPath)
-        .filter((f) => /\.(json|ya?ml)$/i.test(f))
-        .map((f) => path.join(dirPath, f));
-    const envelopes = [];
-    for (const filePath of files) {
-        try {
-            const envelope = readBackupFile(filePath);
-            if (envelope.resourceType === resourceType) {
-                envelopes.push(envelope);
-            }
-        }
-        catch {
-            // Skip malformed or unrelated files
-        }
-    }
-    return envelopes;
-}
-//# sourceMappingURL=io.js.map

package/dist/backup/io.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"io.js","sourceRoot":"","sources":["../../src/backup/io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,SAAS,CAAC;AAG3B;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI;SACnB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3B,OAAO,SAAS,IAAI,SAAS,CAAC;AAChC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,OAA2B,EAAE,aAAqB;IACjF,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,QAAgB,EAChB,QAA2B,EAC3B,MAAoB;IAEpB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC,CAAC;IACtD,MAAM,OAAO,GACX,MAAM,KAAK,MAAM;QACf,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC/C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAI,QAAgB;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACjD,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,mCAAmC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,4BAA4B,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAA2B,CAAC;AACrC,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAI,OAAe,EAAE,YAA0B;IAC1E,MAAM,KAAK,GAAG,EAAE;SACb,WAAW,CAAC,OAAO,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,cAAc,CAAI,QAAQ,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gBAC3C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/backup/types.d.ts

@@ -1,25 +0,0 @@
-/** Supported backup serialization formats. */
-export type BackupFormat = 'json' | 'yaml';
-/** Discriminator for multi-resource backup directories. */
-export type ResourceType = 'redteam-target';
-/** Envelope wrapping any backed-up resource. */
-export interface BackupEnvelope<T> {
-    version: string;
-    resourceType: ResourceType;
-    exportedAt: string;
-    data: T;
-}
-/** Per-target result reported after a backup run. */
-export interface BackupResult {
-    name: string;
-    filename: string;
-    status: 'ok' | 'failed';
-    error?: string;
-}
-/** Per-target result reported after a restore run. */
-export interface RestoreResult {
-    name: string;
-    action: 'created' | 'updated' | 'skipped' | 'failed';
-    error?: string;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/backup/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/backup/types.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3C,2DAA2D;AAC3D,MAAM,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAE5C,gDAAgD;AAChD,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,YAAY,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,CAAC,CAAC;CACT;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,IAAI,GAAG,QAAQ,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB"}

package/dist/backup/types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=types.js.map

package/dist/backup/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/backup/types.ts"],"names":[],"mappings":""}

package/dist/cli/builders/profile-builder.d.ts

@@ -1,45 +0,0 @@
-import type { CreateSecurityProfileRequest, Policy } from '@cdot65/prisma-airs-sdk';
-/**
- * Parsed CLI flag values for profile create/update commands.
- */
-export interface ProfileFlags {
-    name: string;
-    active?: boolean;
-    promptInjection?: string;
-    toxicContent?: string;
-    contextualGrounding?: string;
-    maliciousCode?: string;
-    urlAction?: string;
-    allowUrlCategories?: string;
-    blockUrlCategories?: string;
-    alertUrlCategories?: string;
-    agentSecurity?: string;
-    dlpAction?: string;
-    dlpProfiles?: string;
-    maskDataInline?: boolean;
-    dbSecurityCreate?: string;
-    dbSecurityRead?: string;
-    dbSecurityUpdate?: string;
-    dbSecurityDelete?: string;
-    inlineTimeoutAction?: string;
-    maxInlineLatency?: number;
-    maskDataInStorage?: boolean;
-}
-/** Build a full CreateSecurityProfileRequest from CLI flags (used by `create`). */
-export declare function buildProfileRequest(flags: ProfileFlags): CreateSecurityProfileRequest;
-/** Build a partial Policy from flags (used by `update` — merged into existing). */
-export declare function buildProfileOverrides(flags: Partial<ProfileFlags>): Policy | undefined;
-/**
- * Deep-merge overrides INTO the existing policy.
- *
- * Merge rules:
- * - model-protection: keyed merge by `name`, preserves unmentioned items
- * - topic-guardrails: NEVER modified by flags — always preserved from existing
- * - app-protection: field-level overlay, preserves unmentioned fields
- * - agent-protection: keyed merge by `name`
- * - data-protection: field-level overlay; database-security merged by `name`
- * - latency: field-level overlay
- * - dlp-data-profiles: preserved unless overridden
- */
-export declare function mergeProfilePolicy(existing: Record<string, unknown> | undefined, overrides: Policy | undefined): Policy;
-//# sourceMappingURL=profile-builder.d.ts.map

package/dist/cli/builders/profile-builder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile-builder.d.ts","sourceRoot":"","sources":["../../../src/cli/builders/profile-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEpF;;GAEG;AACH,MAAM,WAAW,YAAY;IAE3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IAGjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAG7B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAG5B,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAG1B,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAyKD,mFAAmF;AACnF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,4BAA4B,CAsCrF;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,MAAM,GAAG,SAAS,CAYtF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC7C,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,MAAM,CAqGR"}

package/dist/cli/builders/profile-builder.js

@@ -1,308 +0,0 @@
-/** Parse comma-separated string into trimmed array. */
-function parseList(value) {
-    if (!value)
-        return undefined;
-    return value
-        .split(',')
-        .map((s) => s.trim())
-        .filter(Boolean);
-}
-/** Build model-protection items from flags. Returns undefined if none set. */
-function buildModelProtection(flags) {
-    const items = [];
-    if (flags.promptInjection) {
-        items.push({ name: 'prompt-injection', action: flags.promptInjection });
-    }
-    if (flags.toxicContent) {
-        // AIRS UI expects "high:<action>, moderate:<action>" format — expand bare values
-        const tc = flags.toxicContent;
-        const toxicAction = tc.includes(':') ? tc : `high:${tc}, moderate:${tc}`;
-        items.push({ name: 'toxic-content', action: toxicAction });
-    }
-    if (flags.contextualGrounding) {
-        items.push({ name: 'contextual-grounding', action: flags.contextualGrounding });
-    }
-    return items.length > 0 ? items : undefined;
-}
-/** Build app-protection object from flags. Returns undefined if none set. */
-function buildAppProtection(flags) {
-    const ap = {};
-    let hasAny = false;
-    if (flags.maliciousCode) {
-        ap['malicious-code-protection'] = {
-            name: 'malicious-code-detection',
-            action: flags.maliciousCode,
-        };
-        hasAny = true;
-    }
-    if (flags.urlAction) {
-        ap['url-detected-action'] = flags.urlAction;
-        hasAny = true;
-    }
-    const allowCats = parseList(flags.allowUrlCategories);
-    if (allowCats) {
-        ap['allow-url-category'] = { member: allowCats };
-        hasAny = true;
-    }
-    const blockCats = parseList(flags.blockUrlCategories);
-    if (blockCats) {
-        ap['block-url-category'] = { member: blockCats };
-        hasAny = true;
-    }
-    const alertCats = parseList(flags.alertUrlCategories);
-    if (alertCats) {
-        ap['alert-url-category'] = { member: alertCats };
-        hasAny = true;
-    }
-    return hasAny ? ap : undefined;
-}
-/** Build agent-protection array from flags. Returns undefined if none set. */
-function buildAgentProtection(flags) {
-    if (!flags.agentSecurity)
-        return undefined;
-    return [{ name: 'agent-security', action: flags.agentSecurity }];
-}
-/** Build data-protection object from flags. Returns undefined if none set. */
-function buildDataProtection(flags) {
-    const dp = {};
-    let hasAny = false;
-    if (flags.dlpAction) {
-        const dld = { action: flags.dlpAction };
-        const profiles = parseList(flags.dlpProfiles);
-        if (profiles) {
-            dld.member = profiles.map((text) => ({ text }));
-        }
-        if (flags.maskDataInline != null) {
-            dld['mask-data-inline'] = flags.maskDataInline;
-        }
-        dp['data-leak-detection'] = dld;
-        hasAny = true;
-    }
-    const dbItems = [];
-    if (flags.dbSecurityCreate) {
-        dbItems.push({ name: 'database-security-create', action: flags.dbSecurityCreate });
-    }
-    if (flags.dbSecurityRead) {
-        dbItems.push({ name: 'database-security-read', action: flags.dbSecurityRead });
-    }
-    if (flags.dbSecurityUpdate) {
-        dbItems.push({ name: 'database-security-update', action: flags.dbSecurityUpdate });
-    }
-    if (flags.dbSecurityDelete) {
-        dbItems.push({ name: 'database-security-delete', action: flags.dbSecurityDelete });
-    }
-    if (dbItems.length > 0) {
-        dp['database-security'] = dbItems;
-        hasAny = true;
-    }
-    return hasAny ? dp : undefined;
-}
-/** Build latency object from flags. Returns undefined if none set. */
-function buildLatency(flags) {
-    if (!flags.inlineTimeoutAction && flags.maxInlineLatency == null)
-        return undefined;
-    const lat = {};
-    if (flags.inlineTimeoutAction)
-        lat['inline-timeout-action'] = flags.inlineTimeoutAction;
-    if (flags.maxInlineLatency != null)
-        lat['max-inline-latency'] = flags.maxInlineLatency;
-    return lat;
-}
-/** Check if any protection/config flag is set. */
-function hasAnyProtectionFlag(flags) {
-    return !!(flags.promptInjection ||
-        flags.toxicContent ||
-        flags.contextualGrounding ||
-        flags.maliciousCode ||
-        flags.urlAction ||
-        flags.allowUrlCategories ||
-        flags.blockUrlCategories ||
-        flags.alertUrlCategories ||
-        flags.agentSecurity ||
-        flags.dlpAction ||
-        flags.dbSecurityCreate ||
-        flags.dbSecurityRead ||
-        flags.dbSecurityUpdate ||
-        flags.dbSecurityDelete ||
-        flags.inlineTimeoutAction ||
-        flags.maxInlineLatency != null ||
-        flags.maskDataInStorage != null);
-}
-/** Assemble model-configuration from flags, only including non-empty sections. */
-function buildModelConfiguration(flags) {
-    const config = {};
-    const mp = buildModelProtection(flags);
-    if (mp)
-        config['model-protection'] = mp;
-    const ap = buildAppProtection(flags);
-    if (ap)
-        config['app-protection'] = ap;
-    const agp = buildAgentProtection(flags);
-    if (agp)
-        config['agent-protection'] = agp;
-    const dp = buildDataProtection(flags);
-    if (dp)
-        config['data-protection'] = dp;
-    const lat = buildLatency(flags);
-    if (lat)
-        config.latency = lat;
-    if (flags.maskDataInStorage != null) {
-        config['mask-data-in-storage'] = flags.maskDataInStorage;
-    }
-    return config;
-}
-/** Build a full CreateSecurityProfileRequest from CLI flags (used by `create`). */
-export function buildProfileRequest(flags) {
-    const request = {
-        profile_name: flags.name,
-        active: flags.active ?? true,
-    };
-    if (hasAnyProtectionFlag(flags)) {
-        const modelConfig = buildModelConfiguration(flags);
-        // AIRS UI requires these sections to exist — crashes with "is not iterable" otherwise
-        if (!modelConfig['app-protection']) {
-            modelConfig['app-protection'] = {
-                'default-url-category': { member: ['malicious'] },
-                'url-detected-action': 'block',
-            };
-        }
-        if (!modelConfig['data-protection']) {
-            modelConfig['data-protection'] = {
-                'data-leak-detection': { action: '', 'mask-data-inline': false, member: null },
-                'database-security': null,
-            };
-        }
-        if (!modelConfig.latency) {
-            modelConfig.latency = { 'inline-timeout-action': 'block', 'max-inline-latency': 5 };
-        }
-        if (modelConfig['mask-data-in-storage'] == null) {
-            modelConfig['mask-data-in-storage'] = false;
-        }
-        request.policy = {
-            'ai-security-profiles': [
-                {
-                    'model-type': 'default',
-                    'model-configuration': modelConfig,
-                },
-            ],
-        };
-    }
-    return request;
-}
-/** Build a partial Policy from flags (used by `update` — merged into existing). */
-export function buildProfileOverrides(flags) {
-    if (!hasAnyProtectionFlag(flags))
-        return undefined;
-    const modelConfig = buildModelConfiguration(flags);
-    return {
-        'ai-security-profiles': [
-            {
-                'model-type': 'default',
-                'model-configuration': modelConfig,
-            },
-        ],
-    };
-}
-/**
- * Deep-merge overrides INTO the existing policy.
- *
- * Merge rules:
- * - model-protection: keyed merge by `name`, preserves unmentioned items
- * - topic-guardrails: NEVER modified by flags — always preserved from existing
- * - app-protection: field-level overlay, preserves unmentioned fields
- * - agent-protection: keyed merge by `name`
- * - data-protection: field-level overlay; database-security merged by `name`
- * - latency: field-level overlay
- * - dlp-data-profiles: preserved unless overridden
- */
-export function mergeProfilePolicy(existing, overrides) {
-    const base = structuredClone(existing ?? {});
-    if (!overrides)
-        return base;
-    const overrideProfiles = overrides['ai-security-profiles'];
-    if (!overrideProfiles?.length)
-        return base;
-    // Ensure base has ai-security-profiles structure
-    if (!base['ai-security-profiles']) {
-        base['ai-security-profiles'] = [{ 'model-type': 'default', 'model-configuration': {} }];
-    }
-    const baseProfiles = base['ai-security-profiles'];
-    const baseConfig = (baseProfiles[0]['model-configuration'] ?? {});
-    const overConfig = (overrideProfiles[0]['model-configuration'] ?? {});
-    // Merge model-protection (keyed by name, topic-guardrails preserved)
-    if (overConfig['model-protection']) {
-        const baseMp = (baseConfig['model-protection'] ?? []);
-        const overMp = overConfig['model-protection'];
-        for (const overItem of overMp) {
-            const existing = baseMp.find((b) => b.name === overItem.name);
-            if (existing) {
-                Object.assign(existing, overItem);
-            }
-            else {
-                baseMp.push(overItem);
-            }
-        }
-        baseConfig['model-protection'] = baseMp;
-    }
-    // Merge app-protection (field-level overlay)
-    if (overConfig['app-protection']) {
-        const baseAp = (baseConfig['app-protection'] ?? {});
-        const overAp = overConfig['app-protection'];
-        Object.assign(baseAp, overAp);
-        baseConfig['app-protection'] = baseAp;
-    }
-    // Merge agent-protection (keyed by name)
-    if (overConfig['agent-protection']) {
-        const baseAgp = (baseConfig['agent-protection'] ?? []);
-        const overAgp = overConfig['agent-protection'];
-        for (const overItem of overAgp) {
-            const existing = baseAgp.find((b) => b.name === overItem.name);
-            if (existing) {
-                Object.assign(existing, overItem);
-            }
-            else {
-                baseAgp.push(overItem);
-            }
-        }
-        baseConfig['agent-protection'] = baseAgp;
-    }
-    // Merge data-protection (field-level overlay, database-security by name)
-    if (overConfig['data-protection']) {
-        const baseDp = (baseConfig['data-protection'] ?? {});
-        const overDp = overConfig['data-protection'];
-        // data-leak-detection: overlay
-        if (overDp['data-leak-detection']) {
-            baseDp['data-leak-detection'] = overDp['data-leak-detection'];
-        }
-        // database-security: merge by name
-        if (overDp['database-security']) {
-            const baseDb = (baseDp['database-security'] ?? []);
-            const overDb = overDp['database-security'];
-            for (const overItem of overDb) {
-                const existing = baseDb.find((b) => b.name === overItem.name);
-                if (existing) {
-                    Object.assign(existing, overItem);
-                }
-                else {
-                    baseDb.push(overItem);
-                }
-            }
-            baseDp['database-security'] = baseDb;
-        }
-        baseConfig['data-protection'] = baseDp;
-    }
-    // Merge latency (field-level overlay)
-    if (overConfig.latency) {
-        const baseLat = (baseConfig.latency ?? {});
-        const overLat = overConfig.latency;
-        Object.assign(baseLat, overLat);
-        baseConfig.latency = baseLat;
-    }
-    // Merge mask-data-in-storage
-    if (overConfig['mask-data-in-storage'] != null) {
-        baseConfig['mask-data-in-storage'] = overConfig['mask-data-in-storage'];
-    }
-    baseProfiles[0]['model-configuration'] = baseConfig;
-    return base;
-}
-//# sourceMappingURL=profile-builder.js.map

package/dist/cli/builders/profile-builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile-builder.js","sourceRoot":"","sources":["../../../src/cli/builders/profile-builder.ts"],"names":[],"mappings":"AA0CA,uDAAuD;AACvD,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,OAAO,KAAK;SACT,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,KAA4B;IACxD,MAAM,KAAK,GAA8B,EAAE,CAAC;IAE5C,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,iFAAiF;QACjF,MAAM,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC;QAC9B,MAAM,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,EAAE,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,6EAA6E;AAC7E,SAAS,kBAAkB,CAAC,KAA4B;IACtD,MAAM,EAAE,GAA4B,EAAE,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,EAAE,CAAC,2BAA2B,CAAC,GAAG;YAChC,IAAI,EAAE,0BAA0B;YAChC,MAAM,EAAE,KAAK,CAAC,aAAa;SAC5B,CAAC;QACF,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,EAAE,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5C,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACjD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACjD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtD,IAAI,SAAS,EAAE,CAAC;QACd,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACjD,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjC,CAAC;AAED,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,KAA4B;IACxD,IAAI,CAAC,KAAK,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAC3C,OAAO,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,8EAA8E;AAC9E,SAAS,mBAAmB,CAAC,KAA4B;IACvD,MAAM,EAAE,GAA4B,EAAE,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,GAAG,GAA4B,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,KAAK,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC;YACjC,GAAG,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;QACjD,CAAC;QACD,EAAE,CAAC,qBAAqB,CAAC,GAAG,GAAG,CAAC;QAChC,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,EAAE,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC;QAClC,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjC,CAAC;AAED,sEAAsE;AACtE,SAAS,YAAY,CAAC,KAA4B;IAChD,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,KAAK,CAAC,gBAAgB,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACnF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,KAAK,CAAC,mBAAmB;QAAE,GAAG,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,mBAAmB,CAAC;IACxF,IAAI,KAAK,CAAC,gBAAgB,IAAI,IAAI;QAAE,GAAG,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,gBAAgB,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kDAAkD;AAClD,SAAS,oBAAoB,CAAC,KAA4B;IACxD,OAAO,CAAC,CAAC,CACP,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,mBAAmB;QACzB,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,kBAAkB;QACxB,KAAK,CAAC,kBAAkB;QACxB,KAAK,CAAC,kBAAkB;QACxB,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,mBAAmB;QACzB,KAAK,CAAC,gBAAgB,IAAI,IAAI;QAC9B,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAChC,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,SAAS,uBAAuB,CAAC,KAA4B;IAC3D,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,MAAM,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,EAAE;QAAE,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC;IAExC,MAAM,EAAE,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,EAAE;QAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC;IAEtC,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,GAAG;QAAE,MAAM,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC;IAE1C,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,EAAE;QAAE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC;IAEvC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG;QAAE,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC;IAE9B,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;QACpC,MAAM,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,iBAAiB,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,mBAAmB,CAAC,KAAmB;IACrD,MAAM,OAAO,GAAiC;QAC5C,YAAY,EAAE,KAAK,CAAC,IAAI;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;KAC7B,CAAC;IAEF,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACnD,sFAAsF;QACtF,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACnC,WAAW,CAAC,gBAAgB,CAAC,GAAG;gBAC9B,sBAAsB,EAAE,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE;gBACjD,qBAAqB,EAAE,OAAO;aAC/B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpC,WAAW,CAAC,iBAAiB,CAAC,GAAG;gBAC/B,qBAAqB,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;gBAC9E,mBAAmB,EAAE,IAAI;aAC1B,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,WAAW,CAAC,OAAO,GAAG,EAAE,uBAAuB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;QACtF,CAAC;QACD,IAAI,WAAW,CAAC,sBAAsB,CAAC,IAAI,IAAI,EAAE,CAAC;YAChD,WAAW,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,MAAM,GAAG;YACf,sBAAsB,EAAE;gBACtB;oBACE,YAAY,EAAE,SAAS;oBACvB,qBAAqB,EAAE,WAAW;iBACnC;aACF;SACQ,CAAC;IACd,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,KAA4B;IAChE,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnD,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO;QACL,sBAAsB,EAAE;YACtB;gBACE,YAAY,EAAE,SAAS;gBACvB,qBAAqB,EAAE,WAAW;aACnC;SACF;KACQ,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA6C,EAC7C,SAA6B;IAE7B,MAAM,IAAI,GAAG,eAAe,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACxE,IAAI,CAAC,SAAS;QAAE,OAAO,IAAc,CAAC;IAEtC,MAAM,gBAAgB,GAAI,SAAqC,CAAC,sBAAsB,CAEzE,CAAC;IACd,IAAI,CAAC,gBAAgB,EAAE,MAAM;QAAE,OAAO,IAAc,CAAC;IAErD,iDAAiD;IACjD,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,CAA8B,CAAC;IAC/E,MAAM,UAAU,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC7F,MAAM,UAAU,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAA4B,CAAC;IAEjG,qEAAqE;IACrE,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAA8B,CAAC;QACnF,MAAM,MAAM,GAAG,UAAU,CAAC,kBAAkB,CAA8B,CAAC;QAE3E,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC9D,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,UAAU,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC;IAC1C,CAAC;IAED,6CAA6C;IAC7C,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAA4B,CAAC;QAC/E,MAAM,MAAM,GAAG,UAAU,CAAC,gBAAgB,CAA4B,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9B,UAAU,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC;IACxC,CAAC;IAED,yCAAyC;IACzC,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAA8B,CAAC;QACpF,MAAM,OAAO,GAAG,UAAU,CAAC,kBAAkB,CAA8B,CAAC;QAE5E,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,UAAU,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC;IAC3C,CAAC;IAED,yEAAyE;IACzE,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAA4B,CAAC;QAChF,MAAM,MAAM,GAAG,UAAU,CAAC,iBAAiB,CAA4B,CAAC;QAExE,+BAA+B;QAC/B,IAAI,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,qBAAqB,CAAC,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAChE,CAAC;QAED,mCAAmC;QACnC,IAAI,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAA8B,CAAC;YAChF,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,CAA8B,CAAC;YAExE,KAAK,MAAM,QAAQ,IAAI,MAAM,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC9D,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,MAAM,CAAC,mBAAmB,CAAC,GAAG,MAAM,CAAC;QACvC,CAAC;QAED,UAAU,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC;IACzC,CAAC;IAED,sCAAsC;IACtC,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;QACtE,MAAM,OAAO,GAAG,UAAU,CAAC,OAAkC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAC/B,CAAC;IAED,6BAA6B;IAC7B,IAAI,UAAU,CAAC,sBAAsB,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/C,UAAU,CAAC,sBAAsB,CAAC,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC1E,CAAC;IAED,YAAY,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,UAAU,CAAC;IACpD,OAAO,IAAc,CAAC;AACxB,CAAC"}

package/dist/cli/bulk-scan-state.d.ts

@@ -1,15 +0,0 @@
-export interface BulkScanState {
-    scanIds: string[];
-    profile: string;
-    promptCount: number;
-    sessionId?: string;
-    timestamp?: string;
-}
-/**
- * Persist bulk scan IDs to a JSON file so polling can be resumed
- * if the process crashes or hits a rate limit.
- */
-export declare function saveBulkScanState(state: BulkScanState, dir: string): Promise<string>;
-/** Load a previously saved bulk scan state file. */
-export declare function loadBulkScanState(filePath: string): Promise<BulkScanState>;
-//# sourceMappingURL=bulk-scan-state.d.ts.map

package/dist/cli/bulk-scan-state.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"bulk-scan-state.d.ts","sourceRoot":"","sources":["../../src/cli/bulk-scan-state.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO1F;AAED,oDAAoD;AACpD,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAGhF"}

package/dist/cli/bulk-scan-state.js

@@ -1,20 +0,0 @@
-import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
-/**
- * Persist bulk scan IDs to a JSON file so polling can be resumed
- * if the process crashes or hits a rate limit.
- */
-export async function saveBulkScanState(state, dir) {
-    await fs.mkdir(dir, { recursive: true });
-    const ts = new Date().toISOString().replace(/[:.]/g, '-');
-    const filePath = path.join(dir, `${ts}.bulk-scan.json`);
-    const payload = { ...state, timestamp: new Date().toISOString() };
-    await fs.writeFile(filePath, JSON.stringify(payload, null, 2), 'utf-8');
-    return filePath;
-}
-/** Load a previously saved bulk scan state file. */
-export async function loadBulkScanState(filePath) {
-    const raw = await fs.readFile(filePath, 'utf-8');
-    return JSON.parse(raw);
-}
-//# sourceMappingURL=bulk-scan-state.js.map

package/dist/cli/bulk-scan-state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"bulk-scan-state.js","sourceRoot":"","sources":["../../src/cli/bulk-scan-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAUlC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAoB,EAAE,GAAW;IACvE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAClE,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IACtD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;AAC1C,CAAC"}

package/dist/cli/commands/audit.d.ts

@@ -1,4 +0,0 @@
-import type { Command } from 'commander';
-/** Register the `audit` command — evaluate all topics in a profile. */
-export declare function registerAuditCommand(parent: Command): void;
-//# sourceMappingURL=audit.d.ts.map

package/dist/cli/commands/audit.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/audit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgBzC,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CA6G1D"}

package/dist/cli/commands/audit.js

@@ -1,113 +0,0 @@
-import { writeFile } from 'node:fs/promises';
-import chalk from 'chalk';
-import { SdkManagementService } from '../../airs/management.js';
-import { AirsScanService } from '../../airs/scanner.js';
-import { buildAuditReportHtml, buildAuditReportJson } from '../../audit/report.js';
-import { runAudit } from '../../audit/runner.js';
-import { loadConfig } from '../../config/loader.js';
-import { createLlmProvider } from '../../llm/provider.js';
-import { LangChainLlmService } from '../../llm/service.js';
-import { renderAuditComplete, renderAuditTopics, renderConflicts, renderError, renderMetrics, } from '../renderer/index.js';
-/** Register the `audit` command — evaluate all topics in a profile. */
-export function registerAuditCommand(parent) {
-    parent
-        .command('audit <profileName>')
-        .description('Evaluate all topics in a security profile')
-        .option('--max-tests-per-topic <n>', 'Max tests per topic', '20')
-        .option('--format <format>', 'Output format: terminal, json, html', 'terminal')
-        .option('--output <path>', 'Output file path (json/html)')
-        .option('--provider <provider>', 'LLM provider override')
-        .option('--model <model>', 'LLM model override')
-        .action(async (profileName, opts) => {
-        try {
-            const config = await loadConfig({
-                llmProvider: opts.provider,
-                llmModel: opts.model,
-            });
-            const model = await createLlmProvider({
-                provider: config.llmProvider,
-                model: config.llmModel,
-                anthropicApiKey: config.anthropicApiKey,
-                googleApiKey: config.googleApiKey,
-                googleCloudProject: config.googleCloudProject,
-                googleCloudLocation: config.googleCloudLocation,
-                awsRegion: config.awsRegion,
-                awsAccessKeyId: config.awsAccessKeyId,
-                awsSecretAccessKey: config.awsSecretAccessKey,
-            });
-            const llm = new LangChainLlmService(model);
-            const management = new SdkManagementService({
-                clientId: config.mgmtClientId,
-                clientSecret: config.mgmtClientSecret,
-                tsgId: config.mgmtTsgId,
-                tokenEndpoint: config.mgmtTokenEndpoint,
-            });
-            if (!config.airsApiKey) {
-                renderError('PANW_AI_SEC_API_KEY is required');
-                process.exit(1);
-            }
-            const scanner = new AirsScanService(config.airsApiKey);
-            const format = opts.format;
-            console.log(chalk.bold.cyan('\n  Prisma AIRS Profile Audit'));
-            console.log(chalk.dim(`  Evaluating all topics in "${profileName}"\n`));
-            for await (const event of runAudit({
-                profileName,
-                maxTestsPerTopic: Number.parseInt(opts.maxTestsPerTopic, 10),
-                scanConcurrency: config.scanConcurrency,
-            }, { llm, management, scanner })) {
-                switch (event.type) {
-                    case 'topics:loaded':
-                        console.log(chalk.dim(`  Found ${event.topics.length} topic(s) in profile\n`));
-                        renderAuditTopics(event.topics);
-                        break;
-                    case 'tests:generated':
-                        console.log(chalk.dim(`  Generated ${event.count} tests for "${event.topicName}"`));
-                        break;
-                    case 'scan:progress':
-                        console.log(chalk.dim(`\n  Scanned ${event.completed}/${event.total} prompts`));
-                        break;
-                    case 'evaluate:complete':
-                        break;
-                    case 'audit:complete': {
-                        const { result } = event;
-                        if (format === 'json') {
-                            const report = buildAuditReportJson(result);
-                            const output = JSON.stringify(report, null, 2);
-                            if (opts.output) {
-                                await writeFile(opts.output, output, 'utf-8');
-                                console.log(chalk.green(`\n  Report written to ${opts.output}`));
-                            }
-                            else {
-                                console.log(output);
-                            }
-                            return;
-                        }
-                        if (format === 'html') {
-                            const html = buildAuditReportHtml(result);
-                            const outputPath = opts.output ?? `audit-${profileName.replace(/\s+/g, '-')}.html`;
-                            await writeFile(outputPath, html, 'utf-8');
-                            console.log(chalk.green(`\n  Report written to ${outputPath}`));
-                            return;
-                        }
-                        // Terminal format
-                        renderAuditComplete(result);
-                        console.log(chalk.bold('\n  Composite Metrics:'));
-                        renderMetrics(result.compositeMetrics);
-                        if (result.conflicts.length > 0) {
-                            renderConflicts(result.conflicts);
-                        }
-                        else {
-                            console.log(chalk.green('\n  No cross-topic conflicts detected.\n'));
-                        }
-                        break;
-                    }
-                }
-            }
-        }
-        catch (err) {
-            renderError(err instanceof Error ? err.message : String(err));
-            process.exit(1);
-        }
-    });
-}
-//# sourceMappingURL=audit.js.map