@cdot65/prisma-airs-cli 2.8.0 → 2.10.0

package/dist/cli/commands/dlp/build-body.js

@@ -0,0 +1,174 @@
+/**
+ * Body-builders for DLP CLI commands. Each function takes parsed commander opts
+ * and returns a plain object suitable for the SDK request. Validation is light —
+ * Zod in the SDK does the heavy lifting on the wire.
+ */
+function asCsv(v) {
+    if (!v)
+        return undefined;
+    return v
+        .split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+}
+function asNum(v) {
+    if (v == null)
+        return undefined;
+    const n = Number(v);
+    return Number.isFinite(n) ? n : undefined;
+}
+function parseTags(values) {
+    if (!values || values.length === 0)
+        return undefined;
+    const out = {};
+    for (const v of values) {
+        const eq = v.indexOf('=');
+        if (eq < 0)
+            throw new Error(`--tag must be 'key=value' (got '${v}')`);
+        const key = v.slice(0, eq).trim();
+        const val = v.slice(eq + 1).trim();
+        if (!key)
+            throw new Error(`--tag missing key (got '${v}')`);
+        if (!out[key])
+            out[key] = [];
+        for (const part of val
+            .split(',')
+            .map((s) => s.trim())
+            .filter(Boolean)) {
+            out[key].push(part);
+        }
+    }
+    return out;
+}
+function parseRegexes(plain, weighted) {
+    const out = [];
+    for (const r of plain ?? [])
+        out.push({ regex: r, weight: 1 });
+    for (const r of weighted ?? []) {
+        const pipe = r.lastIndexOf('|');
+        if (pipe < 0)
+            throw new Error(`--weighted-regex must be 'PATTERN|weight' (got '${r}')`);
+        const pattern = r.slice(0, pipe);
+        const weight = Number(r.slice(pipe + 1));
+        if (!Number.isFinite(weight))
+            throw new Error(`--weighted-regex weight invalid in '${r}'`);
+        out.push({ regex: pattern, weight });
+    }
+    return out.length > 0 ? out : undefined;
+}
+/**
+ * Build a Data Pattern request body from CLI flags.
+ * `requireRequired` enforces name + type (use false for replace where caller already validated).
+ */
+export function buildPatternBody(opts, requireRequired = true) {
+    if (requireRequired) {
+        if (!opts.name)
+            throw new Error('--name is required');
+    }
+    const technique = opts.technique ?? 'regex';
+    const confidence = asCsv(opts.confidenceLevels);
+    const regexes = parseRegexes(opts.regex, opts.weightedRegex);
+    const tags = parseTags(opts.tag);
+    const detectionConfig = { technique };
+    if (confidence)
+        detectionConfig.supported_confidence_levels = confidence;
+    const matchingRules = {};
+    if (opts.delimiter != null)
+        matchingRules.delimiter = opts.delimiter;
+    if (opts.proximityDistance != null)
+        matchingRules.proximity_distance = asNum(opts.proximityDistance);
+    if (opts.proximityKeyword?.length)
+        matchingRules.proximity_keywords = opts.proximityKeyword;
+    if (regexes)
+        matchingRules.regexes = regexes;
+    const body = {
+        name: opts.name,
+        type: opts.type ?? 'custom',
+        detection_config: detectionConfig,
+    };
+    if (opts.description != null)
+        body.description = opts.description;
+    if (Object.keys(matchingRules).length > 0)
+        body.matching_rules = matchingRules;
+    if (tags)
+        body.tags = tags;
+    return body;
+}
+/**
+ * Build a Data Filtering Profile request body from CLI flags.
+ * Required: --file-based, --non-file-based (booleans).
+ */
+export function buildFilteringProfileBody(opts) {
+    if (opts.fileBased == null || opts.nonFileBased == null) {
+        throw new Error('--file-based and --non-file-based are both required');
+    }
+    const body = {
+        file_based: !!opts.fileBased,
+        non_file_based: !!opts.nonFileBased,
+    };
+    if (opts.description != null)
+        body.description = opts.description;
+    if (opts.direction != null)
+        body.direction = opts.direction;
+    if (opts.logSeverity != null)
+        body.log_severity = opts.logSeverity;
+    if (opts.scanType != null)
+        body.scan_type = opts.scanType;
+    if (opts.dataProfileId != null)
+        body.data_profile_id = asNum(opts.dataProfileId);
+    if (opts.eucTemplateId != null)
+        body.euc_template_id = opts.eucTemplateId;
+    if (opts.endUserCoaching != null)
+        body.is_end_user_coaching_enabled = !!opts.endUserCoaching;
+    if (opts.granular != null)
+        body.is_granular_profile = !!opts.granular;
+    if (opts.fileType?.length)
+        body.file_type = opts.fileType;
+    return body;
+}
+/**
+ * Build a Data Profile request body. Supports the simple case: a single
+ * expression_tree rule that ORs (or ANDs) named pattern IDs. Complex rule
+ * trees fall back to --body-file.
+ */
+export function buildProfileBody(opts) {
+    if (!opts.name)
+        throw new Error('--name is required');
+    const profileType = opts.profileType ?? 'advanced';
+    const body = {
+        name: opts.name,
+        profile_type: profileType,
+    };
+    if (opts.description != null)
+        body.description = opts.description;
+    if (opts.granular != null)
+        body.is_granular_data_profile = !!opts.granular;
+    if (opts.patternId?.length) {
+        const op = (opts.combinator ?? 'or').toLowerCase();
+        if (!['and', 'or', 'not', 'and_not', 'or_not'].includes(op)) {
+            throw new Error(`--combinator must be one of and|or|not|and_not|or_not (got '${op}')`);
+        }
+        body.detection_rules = [
+            {
+                rule_type: 'expression_tree',
+                expression_tree: {
+                    operator_type: op,
+                    condition_pattern: opts.patternId.map((id) => ({
+                        data_pattern_id: id,
+                        confidence_level: opts.confidence ?? 'high',
+                        occurrence_operator_type: 'any',
+                        occurrence_count: 1,
+                    })),
+                },
+            },
+        ];
+    }
+    return body;
+}
+/**
+ * Collect repeatable options. Use as the commander parser function.
+ */
+export function repeatable(value, prev = []) {
+    return [...prev, value];
+}
+//# sourceMappingURL=build-body.js.map

package/dist/cli/commands/dlp/build-body.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-body.js","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/build-body.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,SAAS,KAAK,CAAC,CAAqB;IAClC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,CAAC;SACL,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,KAAK,CAAC,CAAqB;IAClC,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,SAAS,SAAS,CAAC,MAA4B;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,GAAG,GAA6B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,GAAG;aACnB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CACnB,KAA2B,EAC3B,QAA8B;IAE9B,MAAM,GAAG,GAAwC,EAAE,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,GAAG,CAAC,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAU,EAAE,eAAe,GAAG,IAAI;IACjE,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,eAAe,GAA4B,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,UAAU;QAAE,eAAe,CAAC,2BAA2B,GAAG,UAAU,CAAC;IAEzE,MAAM,aAAa,GAA4B,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;QAAE,aAAa,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACrE,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI;QAChC,aAAa,CAAC,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,gBAAgB,EAAE,MAAM;QAAE,aAAa,CAAC,kBAAkB,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC5F,IAAI,OAAO;QAAE,aAAa,CAAC,OAAO,GAAG,OAAO,CAAC;IAE7C,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,QAAQ;QAC3B,gBAAgB,EAAE,eAAe;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAClE,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;IAC/E,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAC3B,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAU;IAClD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,IAAI,GAA4B;QACpC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS;QAC5B,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY;KACpC,CAAC;IACF,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAClE,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAC5D,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI;QAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC;IACnE,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1D,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI;QAAE,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI;QAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC;IAC1E,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI;QAAE,IAAI,CAAC,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC;IAC7F,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI;QAAE,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IACtE,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM;QAAE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAU;IACzC,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,UAAU,CAAC;IACnD,MAAM,IAAI,GAA4B;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,YAAY,EAAE,WAAW;KAC1B,CAAC;IACF,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI;QAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAClE,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI;QAAE,IAAI,CAAC,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;IAC3E,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,+DAA+D,EAAE,IAAI,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,eAAe,GAAG;YACrB;gBACE,SAAS,EAAE,iBAAiB;gBAC5B,eAAe,EAAE;oBACf,aAAa,EAAE,EAAE;oBACjB,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC;wBACrD,eAAe,EAAE,EAAE;wBACnB,gBAAgB,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM;wBAC3C,wBAAwB,EAAE,KAAK;wBAC/B,gBAAgB,EAAE,CAAC;qBACpB,CAAC,CAAC;iBACJ;aACF;SACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa,EAAE,OAAiB,EAAE;IAC3D,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC;AAC1B,CAAC"}

package/dist/cli/commands/dlp/dictionaries.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function register(dlp: Command): void;
+//# sourceMappingURL=dictionaries.d.ts.map

package/dist/cli/commands/dlp/dictionaries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dictionaries.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/dictionaries.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBzC,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAsJ3C"}

package/dist/cli/commands/dlp/dictionaries.js

@@ -0,0 +1,167 @@
+import { readFile } from 'node:fs/promises';
+import { basename } from 'node:path';
+import { SdkDictionariesService } from '../../../airs/dlp/dictionaries.js';
+import { dlpDictionaries, renderError } from '../../renderer/index.js';
+import { buildMergePatch, parseBody } from './patch.js';
+// biome-ignore lint/suspicious/noExplicitAny: opts object from commander
+async function buildMetadata(opts) {
+    if (opts.metadataFile) {
+        return JSON.parse(await readFile(opts.metadataFile, 'utf-8'));
+    }
+    if (!opts.name || !opts.category || !opts.region || !opts.file) {
+        throw new Error('--name, --category, --region, and --file are required');
+    }
+    return {
+        name: opts.name,
+        category: opts.category,
+        region_name: opts.region,
+        original_file_name: basename(opts.file),
+        description: opts.description,
+        classification: opts.classification,
+    };
+}
+export function register(dlp) {
+    const group = dlp.command('dictionaries').description('DLP dictionaries (multipart upload)');
+    group
+        .command('list')
+        .description('List dictionaries')
+        .option('--page <n>', '', (v) => Number.parseInt(v, 10))
+        .option('--size <n>', '', (v) => Number.parseInt(v, 10))
+        .option('--sort <field,dir>', '(repeatable)', (v, p = []) => [...p, v])
+        .option('--keywords', 'Include keyword list in response')
+        .option('--include-keywords', 'Alias for --keywords')
+        .option('--output <fmt>', 'Output format', 'pretty')
+        .action(async (opts) => {
+        try {
+            const includeKeywords = opts.keywords || opts.includeKeywords;
+            dlpDictionaries.renderList(await new SdkDictionariesService().list({
+                page: opts.page,
+                size: opts.size,
+                sort: opts.sort,
+                keywords: includeKeywords ? true : undefined,
+            }), opts.output);
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    group
+        .command('create')
+        .description('Create dictionary via multipart upload')
+        .option('--name <s>', '')
+        .option('--category <s>', '')
+        .option('--region <s>', '')
+        .option('--description <s>', '')
+        .option('--classification <s>', '')
+        .option('--file <path>', 'Keyword file')
+        .option('--metadata-file <path>', 'JSON metadata file (overrides --name/--category/...)')
+        .option('--include-keywords', 'Include keywords in response')
+        .option('--output <fmt>', 'Output format', 'pretty')
+        .action(async (opts) => {
+        try {
+            const metadata = await buildMetadata(opts);
+            if (!opts.file)
+                throw new Error('--file is required (multipart upload)');
+            const file = await readFile(opts.file);
+            const r = await new SdkDictionariesService().create({
+                metadata,
+                file,
+                includeKeywords: opts.includeKeywords,
+            });
+            dlpDictionaries.renderCreated(r, opts.output);
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(2);
+        }
+    });
+    group
+        .command('get <id>')
+        .option('--keywords', '')
+        .option('--include-keywords', 'Alias for --keywords')
+        .option('--output <fmt>', 'Output format', 'pretty')
+        .action(async (id, opts) => {
+        try {
+            const includeKeywords = opts.keywords || opts.includeKeywords;
+            dlpDictionaries.renderGet(await new SdkDictionariesService().get(id, { includeKeywords }), opts.output);
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    group
+        .command('replace <id>')
+        .description('Full-replace via multipart upload. --file required. May return 200 (body) ' +
+        'or 204 (re-get; falls back to "(state not echoed)" on transient failure).')
+        .option('--name <s>', '')
+        .option('--category <s>', '')
+        .option('--region <s>', '')
+        .option('--description <s>', '')
+        .option('--classification <s>', '')
+        .option('--file <path>', 'Keyword file (required)')
+        .option('--metadata-file <path>', 'JSON metadata file')
+        .option('--include-keywords', '')
+        .option('--output <fmt>', 'Output format', 'pretty')
+        .action(async (id, opts) => {
+        try {
+            const metadata = await buildMetadata(opts);
+            if (!opts.file)
+                throw new Error('--file is required (multipart upload)');
+            const file = await readFile(opts.file);
+            const r = await new SdkDictionariesService().replace(id, {
+                metadata,
+                file,
+                includeKeywords: opts.includeKeywords,
+            });
+            if ('kind' in r && r.kind === 'fallback') {
+                dlpDictionaries.renderReplaced204Fallback(id);
+            }
+            else {
+                dlpDictionaries.renderReplaced(r, opts.output);
+            }
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(2);
+        }
+    });
+    group
+        .command('patch <id>')
+        .option('--body-file <path>', '')
+        .option('--set <k=v...>', '(repeatable)', (v, p = []) => [...p, v])
+        .option('--clear <key...>', '(repeatable)', (v, p = []) => [...p, v])
+        .option('--output <fmt>', 'Output format', 'pretty')
+        .action(async (id, opts) => {
+        try {
+            if (opts.bodyFile && (opts.set || opts.clear)) {
+                throw new Error('--body-file is mutually exclusive with --set/--clear');
+            }
+            const body = opts.bodyFile
+                ? await parseBody({ bodyFile: opts.bodyFile })
+                : buildMergePatch({ set: opts.set, clear: opts.clear });
+            dlpDictionaries.renderPatched(
+            // biome-ignore lint/suspicious/noExplicitAny: buildMergePatch returns Record<string, unknown>, cast for patch()
+            await new SdkDictionariesService().patch(id, body), opts.output);
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(2);
+        }
+    });
+    group
+        .command('delete <id>')
+        .description('Delete a dictionary')
+        .action(async (id) => {
+        try {
+            await new SdkDictionariesService().delete(id);
+            dlpDictionaries.renderDeleted(id);
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+}
+//# sourceMappingURL=dictionaries.js.map

package/dist/cli/commands/dlp/dictionaries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dictionaries.js","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/dictionaries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAE3E,OAAO,EAAE,eAAe,EAAqB,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAExD,yEAAyE;AACzE,KAAK,UAAU,aAAa,CAAC,IAAS;IACpC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI,CAAC,MAAM;QACxB,kBAAkB,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACvC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;KACf,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;IAE7F,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,mBAAmB,CAAC;SAChC,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SACvD,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SACvD,MAAM,CAAC,oBAAoB,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,IAAc,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;SAChF,MAAM,CAAC,YAAY,EAAE,kCAAkC,CAAC;SACxD,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;SACpD,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC;YAC9D,eAAe,CAAC,UAAU,CACxB,MAAM,IAAI,sBAAsB,EAAE,CAAC,IAAI,CAAC;gBACtC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aAC7C,CAAC,EACF,IAAI,CAAC,MAAsB,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wCAAwC,CAAC;SACrD,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;SACxB,MAAM,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC5B,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;SAC1B,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAC/B,MAAM,CAAC,sBAAsB,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,eAAe,EAAE,cAAc,CAAC;SACvC,MAAM,CAAC,wBAAwB,EAAE,sDAAsD,CAAC;SACxF,MAAM,CAAC,oBAAoB,EAAE,8BAA8B,CAAC;SAC5D,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,IAAI,sBAAsB,EAAE,CAAC,MAAM,CAAC;gBAClD,QAAQ;gBACR,IAAI;gBACJ,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;YACH,eAAe,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,MAAsB,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,UAAU,CAAC;SACnB,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;SACxB,MAAM,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;SACpD,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC;YAC9D,eAAe,CAAC,SAAS,CACvB,MAAM,IAAI,sBAAsB,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,EAC/D,IAAI,CAAC,MAAsB,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CACV,4EAA4E;QAC1E,2EAA2E,CAC9E;SACA,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;SACxB,MAAM,CAAC,gBAAgB,EAAE,EAAE,CAAC;SAC5B,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;SAC1B,MAAM,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAC/B,MAAM,CAAC,sBAAsB,EAAE,EAAE,CAAC;SAClC,MAAM,CAAC,eAAe,EAAE,yBAAyB,CAAC;SAClD,MAAM,CAAC,wBAAwB,EAAE,oBAAoB,CAAC;SACtD,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAC;SAChC,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,IAAI,sBAAsB,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE;gBACvD,QAAQ;gBACR,IAAI;gBACJ,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC,CAAC,CAAC;YACH,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACzC,eAAe,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,MAAsB,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,YAAY,CAAC;SACrB,MAAM,CAAC,oBAAoB,EAAE,EAAE,CAAC;SAChC,MAAM,CAAC,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,IAAc,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;SAC5E,MAAM,CAAC,kBAAkB,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,IAAc,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;SAC9E,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ;gBACxB,CAAC,CAAC,MAAM,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9C,CAAC,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1D,eAAe,CAAC,aAAa;YAC3B,gHAAgH;YAChH,MAAM,IAAI,sBAAsB,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,IAAW,CAAC,EACzD,IAAI,CAAC,MAAsB,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,aAAa,CAAC;SACtB,WAAW,CAAC,qBAAqB,CAAC;SAClC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,IAAI,sBAAsB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9C,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/dlp/filtering-profiles.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function register(dlp: Command): void;
+//# sourceMappingURL=filtering-profiles.d.ts.map

package/dist/cli/commands/dlp/filtering-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filtering-profiles.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/filtering-profiles.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuBzC,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAgE3C"}

package/dist/cli/commands/dlp/filtering-profiles.js

@@ -0,0 +1,82 @@
+import { SdkDataFilteringProfilesService } from '../../../airs/dlp/data-filtering-profiles.js';
+import { dlpFilteringProfiles, renderError } from '../../renderer/index.js';
+import { buildFilteringProfileBody, repeatable } from './build-body.js';
+import { parseBody } from './patch.js';
+function listFlags(cmd) {
+    return cmd
+        .option('--page <n>', 'Zero-indexed page number', (v) => Number.parseInt(v, 10))
+        .option('--size <n>', 'Page size', (v) => Number.parseInt(v, 10))
+        .option('--sort <field,dir>', 'Sort criteria (repeatable)', repeatable)
+        .option('--output <fmt>', 'Output format', 'pretty');
+}
+async function resolveReplaceBody(opts) {
+    if (opts.body || opts.bodyFile) {
+        const body = await parseBody({ body: opts.body, bodyFile: opts.bodyFile });
+        if (!body)
+            throw new Error('--body or --body-file was empty');
+        return body;
+    }
+    return buildFilteringProfileBody(opts);
+}
+export function register(dlp) {
+    const group = dlp
+        .command('filtering-profiles')
+        .description('DLP data filtering profiles. Read + full-replace only. ' +
+        'Create, patch, and delete are not exposed by the DLP API.');
+    listFlags(group.command('list').description('List filtering profiles')).action(async (opts) => {
+        try {
+            const svc = new SdkDataFilteringProfilesService();
+            const r = await svc.list({ page: opts.page, size: opts.size, sort: opts.sort });
+            dlpFilteringProfiles.renderList(r, opts.output);
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    group
+        .command('get <id>')
+        .description('Get a filtering profile by id')
+        .option('--output <fmt>', 'Output format', 'pretty')
+        .action(async (id, opts) => {
+        try {
+            const svc = new SdkDataFilteringProfilesService();
+            dlpFilteringProfiles.renderGet(await svc.get(id), opts.output);
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(1);
+        }
+    });
+    group
+        .command('replace <id>')
+        .description('Full-replace a filtering profile (PUT)')
+        .option('--file-based', 'Apply to file-based scans (boolean)')
+        .option('--non-file-based', 'Apply to non-file-based scans (boolean)')
+        .option('--description <s>', 'Description')
+        .option('--direction <s>', 'Direction: BOTH|UPLOAD|DOWNLOAD')
+        .option('--log-severity <s>', 'Severity: CRITICAL|HIGH|MEDIUM|LOW|INFORMATIONAL')
+        .option('--scan-type <s>', 'Scan type: include|exclude')
+        .option('--data-profile-id <n>', 'Data profile ID', (v) => Number(v))
+        .option('--euc-template-id <s>', 'EUC template ID')
+        .option('--end-user-coaching', 'Enable end-user coaching')
+        .option('--granular', 'Granular profile')
+        .option('--file-type <s>', 'File type (repeatable)', repeatable)
+        .option('--body <json|->', 'Raw JSON body (escape hatch; or "-" for stdin)')
+        .option('--body-file <path>', 'Raw JSON body file (escape hatch)')
+        .option('--output <fmt>', 'Output format', 'pretty')
+        .action(async (id, opts) => {
+        try {
+            const body = await resolveReplaceBody(opts);
+            const svc = new SdkDataFilteringProfilesService();
+            dlpFilteringProfiles.renderReplaced(
+            // biome-ignore lint/suspicious/noExplicitAny: body shape verified by SDK Zod
+            await svc.replace(id, body), opts.output);
+        }
+        catch (err) {
+            renderError(err instanceof Error ? err.message : String(err));
+            process.exit(2);
+        }
+    });
+}
+//# sourceMappingURL=filtering-profiles.js.map

package/dist/cli/commands/dlp/filtering-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filtering-profiles.js","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/filtering-profiles.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,+BAA+B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,EAAE,oBAAoB,EAAqB,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,SAAS,SAAS,CAAoB,GAAM;IAC1C,OAAO,GAAG;SACP,MAAM,CAAC,YAAY,EAAE,0BAA0B,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAC/E,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAChE,MAAM,CAAC,oBAAoB,EAAE,4BAA4B,EAAE,UAAU,CAAC;SACtE,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAA6B;IAC7D,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAc,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAkB,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,MAAM,KAAK,GAAG,GAAG;SACd,OAAO,CAAC,oBAAoB,CAAC;SAC7B,WAAW,CACV,yDAAyD;QACvD,2DAA2D,CAC9D,CAAC;IAEJ,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,yBAAyB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5F,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAClD,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChF,oBAAoB,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,MAAsB,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK;SACF,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAClD,oBAAoB,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAsB,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,wCAAwC,CAAC;SACrD,MAAM,CAAC,cAAc,EAAE,qCAAqC,CAAC;SAC7D,MAAM,CAAC,kBAAkB,EAAE,yCAAyC,CAAC;SACrE,MAAM,CAAC,mBAAmB,EAAE,aAAa,CAAC;SAC1C,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;SAC5D,MAAM,CAAC,oBAAoB,EAAE,kDAAkD,CAAC;SAChF,MAAM,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;SACvD,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;SACpE,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC;SAClD,MAAM,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;SACzD,MAAM,CAAC,YAAY,EAAE,kBAAkB,CAAC;SACxC,MAAM,CAAC,iBAAiB,EAAE,wBAAwB,EAAE,UAAU,CAAC;SAC/D,MAAM,CAAC,iBAAiB,EAAE,gDAAgD,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,mCAAmC,CAAC;SACjE,MAAM,CAAC,gBAAgB,EAAE,eAAe,EAAE,QAAQ,CAAC;SACnD,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAClD,oBAAoB,CAAC,cAAc;YACjC,6EAA6E;YAC7E,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,IAAW,CAAC,EAClC,IAAI,CAAC,MAAsB,CAC5B,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/cli/commands/dlp/index.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerDlpCommands(runtime: Command): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/commands/dlp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMzC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAW1D"}

package/dist/cli/commands/dlp/index.js

@@ -0,0 +1,15 @@
+import { register as registerDictionaries } from './dictionaries.js';
+import { register as registerFilteringProfiles } from './filtering-profiles.js';
+import { register as registerPatterns } from './patterns.js';
+import { register as registerProfiles } from './profiles.js';
+export function registerDlpCommands(runtime) {
+    const dlp = runtime
+        .command('dlp')
+        .description('DLP management (filtering-profiles, patterns, profiles, dictionaries). ' +
+        'For the read-only DLP profile list used in Security Profiles, see `runtime dlp-profiles list`.');
+    registerFilteringProfiles(dlp);
+    registerPatterns(dlp);
+    registerProfiles(dlp);
+    registerDictionaries(dlp);
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/commands/dlp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AAChF,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE7D,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,MAAM,GAAG,GAAG,OAAO;SAChB,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CACV,yEAAyE;QACvE,gGAAgG,CACnG,CAAC;IACJ,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC/B,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtB,oBAAoB,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC"}

package/dist/cli/commands/dlp/patch.d.ts

@@ -0,0 +1,15 @@
+import type { Readable } from 'node:stream';
+export interface BuildMergePatchOpts {
+    set?: string[];
+    clear?: string[];
+}
+/** Build a JSON Merge Patch object from --set/--clear CLI flags. Pure. */
+export declare function buildMergePatch(opts: BuildMergePatchOpts): Record<string, unknown>;
+export interface ParseBodyOpts {
+    body?: string;
+    bodyFile?: string;
+    stdin?: Readable;
+}
+/** Read --body or --body-file and JSON.parse. Returns undefined if neither supplied. */
+export declare function parseBody(opts: ParseBodyOpts): Promise<unknown | undefined>;
+//# sourceMappingURL=patch.d.ts.map

package/dist/cli/commands/dlp/patch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/patch.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,0EAA0E;AAC1E,wBAAgB,eAAe,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAyBlF;AAkBD,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,QAAQ,CAAC;CAClB;AAED,wFAAwF;AACxF,wBAAsB,SAAS,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAmBjF"}

package/dist/cli/commands/dlp/patch.js

@@ -0,0 +1,70 @@
+import { readFile } from 'node:fs/promises';
+/** Build a JSON Merge Patch object from --set/--clear CLI flags. Pure. */
+export function buildMergePatch(opts) {
+    const out = {};
+    for (const entry of opts.set ?? []) {
+        const eq = entry.indexOf('=');
+        if (eq < 1)
+            throw new Error(`--set expected key=value, got: ${entry}`);
+        const key = entry.slice(0, eq);
+        const raw = entry.slice(eq + 1);
+        if (key.includes('.')) {
+            throw new Error(`--set ${key}: use --body-file for nested fields`);
+        }
+        if (raw === 'null') {
+            throw new Error(`--set ${key}=null: to clear a field, use --clear ${key}`);
+        }
+        out[key] = coerceValue(raw);
+    }
+    for (const key of opts.clear ?? []) {
+        if (key.includes('.')) {
+            throw new Error(`--clear ${key}: use --body-file for nested fields`);
+        }
+        out[key] = null;
+    }
+    return out;
+}
+function coerceValue(raw) {
+    if (raw === 'true')
+        return true;
+    if (raw === 'false')
+        return false;
+    if (raw !== '' && !Number.isNaN(Number(raw)) && /^-?\d+(\.\d+)?$/.test(raw)) {
+        return Number(raw);
+    }
+    if (raw.startsWith('{') || raw.startsWith('[') || raw.startsWith('"')) {
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return raw;
+        }
+    }
+    return raw;
+}
+/** Read --body or --body-file and JSON.parse. Returns undefined if neither supplied. */
+export async function parseBody(opts) {
+    let raw;
+    if (opts.bodyFile) {
+        raw = await readFile(opts.bodyFile, 'utf-8');
+    }
+    else if (opts.body === '-') {
+        const chunks = [];
+        for await (const chunk of opts.stdin ?? process.stdin) {
+            chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+        }
+        raw = Buffer.concat(chunks).toString('utf-8');
+    }
+    else if (opts.body !== undefined) {
+        raw = opts.body;
+    }
+    if (raw === undefined)
+        return undefined;
+    try {
+        return JSON.parse(raw);
+    }
+    catch (e) {
+        throw new Error(`invalid JSON in body: ${e.message}`);
+    }
+}
+//# sourceMappingURL=patch.js.map

package/dist/cli/commands/dlp/patch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.js","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/patch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAQ5C,0EAA0E;AAC1E,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,qCAAqC,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,wCAAwC,GAAG,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,WAAW,GAAG,qCAAqC,CAAC,CAAC;QACvE,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAmB;IACjD,IAAI,GAAuB,CAAC;IAC5B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;IAClB,CAAC;IACD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,yBAA0B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}

package/dist/cli/commands/dlp/patterns.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function register(dlp: Command): void;
+//# sourceMappingURL=patterns.d.ts.map

package/dist/cli/commands/dlp/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/dlp/patterns.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyCzC,wBAAgB,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAwG3C"}