@cdot65/prisma-airs-cli 3.0.0 → 3.1.0

package/dist/{chunk-JXHYQFEK.js → chunk-DSNQSBLE.js}

@@ -456,6 +456,51 @@ function normalizeFile(raw) {
     result: raw.result
   };
 }
+function normalizeModel(raw) {
+  return {
+    uuid: raw.uuid,
+    tsgId: raw.tsg_id,
+    name: raw.name,
+    createdAt: raw.created_at,
+    updatedAt: raw.updated_at,
+    latestVersionUuid: raw.latest_version_uuid,
+    latestVersionFingerprint: raw.latest_version_fingerprint,
+    latestVersionRevision: raw.latest_version_revision,
+    latestVersionHfCommitSha: raw.latest_version_hf_commit_sha,
+    latestVersionOutcome: raw.latest_version_outcome,
+    latestVersionFormats: raw.latest_version_formats,
+    latestVersionSourceTypes: raw.latest_version_source_types,
+    latestVersionScanTime: raw.latest_version_scan_time
+  };
+}
+function normalizeModelVersion(raw) {
+  const summary = raw.last_eval_summary;
+  return {
+    uuid: raw.uuid,
+    tsgId: raw.tsg_id,
+    modelUuid: raw.model_uuid,
+    revision: raw.revision,
+    createdAt: raw.created_at,
+    updatedAt: raw.updated_at,
+    fingerprint: raw.fingerprint,
+    fileCount: raw.file_count,
+    license: raw.license,
+    latestScanTime: raw.latest_scan_time,
+    hfCommitSha: raw.hf_commit_sha,
+    hfCommitTitle: raw.hf_commit_title,
+    hfCommitAuthors: raw.hf_commit_authors,
+    hfModelName: raw.hf_model_name,
+    hfOrganization: raw.hf_organization,
+    modelFormats: raw.model_formats,
+    sourceTypes: raw.source_types,
+    lastEvalOutcome: raw.last_eval_outcome,
+    lastEvalSummary: summary ? {
+      rulesFailed: summary.rules_failed ?? 0,
+      rulesPassed: summary.rules_passed ?? 0,
+      totalRules: summary.total_rules ?? 0
+    } : summary
+  };
+}
 var SdkModelSecurityService = class {
   client;
   constructor(opts) {
@@ -680,6 +725,58 @@ var SdkModelSecurityService = class {
       expiresAt: raw.expires_at
     };
   }
+  // -----------------------------------------------------------------------
+  // Models (read-only catalog)
+  // -----------------------------------------------------------------------
+  async listModels(opts) {
+    const sdkOpts = {};
+    if (opts?.search) sdkOpts.search = opts.search;
+    if (opts?.searchQuery) sdkOpts.search_query = opts.searchQuery;
+    if (opts?.sortField) sdkOpts.sort_field = opts.sortField;
+    if (opts?.sortOrder) sdkOpts.sort_order = opts.sortOrder;
+    if (opts?.skip !== void 0) sdkOpts.skip = opts.skip;
+    if (opts?.limit !== void 0) sdkOpts.limit = opts.limit;
+    const response = await this.client.models.listModels(sdkOpts);
+    const raw = response;
+    return {
+      totalItems: raw.pagination.total_items ?? 0,
+      models: raw.models.map(normalizeModel)
+    };
+  }
+  async getModel(uuid) {
+    const response = await this.client.models.getModel(uuid);
+    return normalizeModel(response);
+  }
+  async listModelVersions(modelUuid, opts) {
+    const sdkOpts = {};
+    if (opts?.sortOrder) sdkOpts.sort_order = opts.sortOrder;
+    if (opts?.skip !== void 0) sdkOpts.skip = opts.skip;
+    if (opts?.limit !== void 0) sdkOpts.limit = opts.limit;
+    const response = await this.client.models.listModelVersions(modelUuid, sdkOpts);
+    const raw = response;
+    return {
+      totalItems: raw.pagination.total_items ?? 0,
+      versions: raw.model_versions.map(normalizeModelVersion)
+    };
+  }
+  async getModelVersion(uuid) {
+    const response = await this.client.models.getModelVersion(uuid);
+    return normalizeModelVersion(response);
+  }
+  async listModelVersionFiles(modelVersionUuid, opts) {
+    const sdkOpts = {};
+    if (opts?.skip !== void 0) sdkOpts.skip = opts.skip;
+    if (opts?.limit !== void 0) sdkOpts.limit = opts.limit;
+    const response = await this.client.models.listModelVersionFiles(
+      modelVersionUuid,
+      sdkOpts
+    );
+    const raw = response;
+    return {
+      totalItems: raw.pagination.total_items ?? 0,
+      files: raw.files.map(normalizeFile)
+    };
+  }
 };
 
 // src/airs/promptsets.ts
@@ -862,6 +959,37 @@ function sanitizeTargetMetadata(metadata) {
   }
   return metadata;
 }
+function normalizeChannel(raw) {
+  return {
+    uuid: raw.uuid,
+    name: raw.name,
+    description: raw.description,
+    status: raw.status,
+    addedBy: raw.added_by,
+    createdAt: raw.created_at,
+    updatedAt: raw.updated_at,
+    lastOnlineAt: raw.last_online_at,
+    connectedClientsCount: raw.connected_clients_count,
+    outdatedClientsCount: raw.outdated_clients_count,
+    features: raw.features
+  };
+}
+function normalizeErrorLog(raw) {
+  return {
+    createdAt: raw.created_at,
+    updatedAt: raw.updated_at,
+    jobId: raw.job_id,
+    targetId: raw.target_id,
+    targetVersion: raw.target_version,
+    attackId: raw.attack_id,
+    errorType: raw.error_type,
+    errorSource: raw.error_source,
+    errorMessage: raw.error_message,
+    targetObject: raw.target_object,
+    extraInfo: raw.extra_info,
+    version: raw.version
+  };
+}
 function normalizeTargetDetail(raw) {
   return {
     uuid: raw.uuid,
@@ -1210,6 +1338,76 @@ var SdkRedTeamService = class {
       await delay(intervalMs);
     }
   }
+  async listChannels(opts) {
+    const sdkOpts = {};
+    if (opts?.limit != null) sdkOpts.limit = opts.limit;
+    if (opts?.offset != null) sdkOpts.skip = opts.offset;
+    if (opts?.search) sdkOpts.search = opts.search;
+    if (opts?.status) sdkOpts.status = opts.status;
+    const raw = await this.client.networkBroker.listChannels(sdkOpts);
+    const pagination = raw.pagination;
+    return {
+      channels: (raw.data ?? []).map(normalizeChannel),
+      totalItems: pagination?.total_items
+    };
+  }
+  async getChannel(channelId) {
+    const raw = await this.client.networkBroker.getChannel(channelId);
+    return normalizeChannel(raw);
+  }
+  async createChannel(request) {
+    const body = { name: request.name };
+    if (request.description !== void 0) body.description = request.description;
+    const raw = await this.client.networkBroker.createChannel(
+      body
+    );
+    return normalizeChannel(raw);
+  }
+  async updateChannel(channelId, request) {
+    const body = {};
+    if (request.name !== void 0) body.name = request.name;
+    if (request.description !== void 0) body.description = request.description;
+    const raw = await this.client.networkBroker.updateChannel(
+      channelId,
+      body
+    );
+    return normalizeChannel(raw);
+  }
+  async getChannelStats() {
+    const raw = await this.client.networkBroker.getChannelStats();
+    return {
+      serverDomain: raw.network_channels_server_domain,
+      dockerRegistry: raw.docker_registry,
+      helmChart: raw.helm_chart,
+      dockerImage: raw.docker_image,
+      onlineChannels: raw.online_channels,
+      totalChannels: raw.total_channels,
+      clientVersion: raw.client_version
+    };
+  }
+  async getLanguages(management = false) {
+    const raw = await (management ? this.client.getManagementLanguages() : this.client.getLanguages());
+    return {
+      multilingualEnabled: Boolean(raw.multilingual_enabled),
+      supportedJobTypes: raw.supported_job_types ?? [],
+      languages: (raw.languages ?? []).map((l) => ({
+        code: l.code,
+        name: l.name
+      }))
+    };
+  }
+  async getTargetProfileErrorLogs(targetId, opts) {
+    const sdkOpts = {};
+    if (opts?.limit != null) sdkOpts.limit = opts.limit;
+    if (opts?.offset != null) sdkOpts.skip = opts.offset;
+    if (opts?.search) sdkOpts.search = opts.search;
+    const raw = await this.client.getTargetProfileErrorLogs(targetId, sdkOpts);
+    const pagination = raw.pagination;
+    return {
+      logs: (raw.data ?? []).map(normalizeErrorLog),
+      totalItems: pagination?.total_items
+    };
+  }
 };
 
 // src/airs/runtime.ts
@@ -1509,6 +1707,7 @@ var ConfigSchema = z.object({
   redTeamDataEndpoint: z.string().optional(),
   redTeamMgmtEndpoint: z.string().optional(),
   redTeamTokenEndpoint: z.string().optional(),
+  redTeamNetworkBrokerEndpoint: z.string().optional(),
   // Model Security (endpoints only; creds shared with mgmt*)
   modelSecDataEndpoint: z.string().optional(),
   modelSecMgmtEndpoint: z.string().optional(),
@@ -1539,6 +1738,7 @@ function fromEnv() {
     redTeamDataEndpoint: env.PANW_RED_TEAM_DATA_ENDPOINT,
     redTeamMgmtEndpoint: env.PANW_RED_TEAM_MGMT_ENDPOINT,
     redTeamTokenEndpoint: env.PANW_RED_TEAM_TOKEN_ENDPOINT,
+    redTeamNetworkBrokerEndpoint: env.PANW_RED_TEAM_NETWORK_BROKER_ENDPOINT,
     modelSecDataEndpoint: env.PANW_MODEL_SEC_DATA_ENDPOINT,
     modelSecMgmtEndpoint: env.PANW_MODEL_SEC_MGMT_ENDPOINT,
     modelSecTokenEndpoint: env.PANW_MODEL_SEC_TOKEN_ENDPOINT,

package/dist/cli/index.js

@@ -19,7 +19,7 @@ import {
   sanitizeFilename,
   validateTopic,
   writeBackupFile
-} from "../chunk-JXHYQFEK.js";
+} from "../chunk-DSNQSBLE.js";
 
 // src/cli/index.ts
 import "dotenv/config";
@@ -1032,6 +1032,171 @@ function renderLabelValues(key, values) {
   }
   console.log();
 }
+function renderModelList(models, format = "pretty") {
+  if (models.length === 0) {
+    ui.emptyList("models");
+    return;
+  }
+  if (format !== "pretty") {
+    const rows = models.map((m) => ({
+      id: m.uuid,
+      name: m.name,
+      outcome: m.latestVersionOutcome ?? "",
+      formats: (m.latestVersionFormats ?? []).join(", "),
+      scanned: m.latestVersionScanTime ?? ""
+    }));
+    console.log(
+      formatOutput(
+        rows,
+        [
+          { key: "id", label: "ID" },
+          { key: "name", label: "Name" },
+          { key: "outcome", label: "Outcome" },
+          { key: "formats", label: "Formats" },
+          { key: "scanned", label: "Last Scan" }
+        ],
+        format
+      )
+    );
+    return;
+  }
+  ui.section("Models:");
+  for (const m of models) {
+    ui.dim(m.uuid);
+    const outcome = m.latestVersionOutcome ? stateColor(m.latestVersionOutcome)(m.latestVersionOutcome) : chalk6.dim("unscanned");
+    const formats = m.latestVersionFormats && m.latestVersionFormats.length > 0 ? chalk6.dim(` [${m.latestVersionFormats.join(", ")}]`) : "";
+    console.log(`    ${m.name}  ${outcome}${formats}`);
+    console.log();
+  }
+}
+function renderModelDetail(model, format = "pretty") {
+  if (format !== "pretty") {
+    console.log(format === "json" ? JSON.stringify(model, null, 2) : yamlDump2(model));
+    return;
+  }
+  ui.section("Model Detail:");
+  const pairs = [
+    ["UUID", model.uuid],
+    ["Name", model.name],
+    ["Created", model.createdAt],
+    ["Updated", model.updatedAt]
+  ];
+  if (model.latestVersionUuid != null) pairs.push(["Latest Version", model.latestVersionUuid]);
+  if (model.latestVersionRevision != null)
+    pairs.push(["Latest Revision", model.latestVersionRevision]);
+  if (model.latestVersionOutcome != null)
+    pairs.push([
+      "Latest Outcome",
+      stateColor(model.latestVersionOutcome)(model.latestVersionOutcome)
+    ]);
+  if (model.latestVersionFormats?.length)
+    pairs.push(["Formats", model.latestVersionFormats.join(", ")]);
+  if (model.latestVersionSourceTypes?.length)
+    pairs.push(["Source Types", model.latestVersionSourceTypes.join(", ")]);
+  if (model.latestVersionScanTime != null) pairs.push(["Last Scan", model.latestVersionScanTime]);
+  ui.keyValue(pairs);
+  console.log();
+}
+function renderModelVersionList(versions, format = "pretty") {
+  if (versions.length === 0) {
+    ui.emptyList("versions");
+    return;
+  }
+  if (format !== "pretty") {
+    const rows = versions.map((v) => ({
+      id: v.uuid,
+      revision: v.revision,
+      files: v.fileCount ?? "",
+      outcome: v.lastEvalOutcome ?? "",
+      scanned: v.latestScanTime ?? ""
+    }));
+    console.log(
+      formatOutput(
+        rows,
+        [
+          { key: "id", label: "ID" },
+          { key: "revision", label: "Revision" },
+          { key: "files", label: "Files" },
+          { key: "outcome", label: "Outcome" },
+          { key: "scanned", label: "Last Scan" }
+        ],
+        format
+      )
+    );
+    return;
+  }
+  ui.section("Model Versions:");
+  for (const v of versions) {
+    ui.dim(v.uuid);
+    const outcome = v.lastEvalOutcome ? stateColor(v.lastEvalOutcome)(v.lastEvalOutcome) : chalk6.dim("unscanned");
+    const files = v.fileCount != null ? `  files: ${v.fileCount}` : "";
+    console.log(`    ${v.revision}  ${outcome}${files}`);
+    console.log();
+  }
+}
+function renderModelVersionDetail(version, format = "pretty") {
+  if (format !== "pretty") {
+    console.log(format === "json" ? JSON.stringify(version, null, 2) : yamlDump2(version));
+    return;
+  }
+  ui.section("Model Version Detail:");
+  const pairs = [
+    ["UUID", version.uuid],
+    ["Model", version.modelUuid],
+    ["Revision", version.revision],
+    ["Created", version.createdAt],
+    ["Updated", version.updatedAt]
+  ];
+  if (version.fileCount != null) pairs.push(["File Count", version.fileCount]);
+  if (version.license != null) pairs.push(["License", version.license]);
+  if (version.modelFormats?.length) pairs.push(["Formats", version.modelFormats.join(", ")]);
+  if (version.sourceTypes?.length) pairs.push(["Source Types", version.sourceTypes.join(", ")]);
+  if (version.hfModelName != null) pairs.push(["HF Model", version.hfModelName]);
+  if (version.hfOrganization != null) pairs.push(["HF Organization", version.hfOrganization]);
+  if (version.lastEvalOutcome != null)
+    pairs.push(["Last Outcome", stateColor(version.lastEvalOutcome)(version.lastEvalOutcome)]);
+  if (version.latestScanTime != null) pairs.push(["Last Scan", version.latestScanTime]);
+  ui.keyValue(pairs);
+  if (version.lastEvalSummary) {
+    ui.section("Last Eval Summary:");
+    ui.keyValue([
+      ["Passed", version.lastEvalSummary.rulesPassed],
+      ["Failed", version.lastEvalSummary.rulesFailed],
+      ["Total", version.lastEvalSummary.totalRules]
+    ]);
+  }
+  console.log();
+}
+function renderModelFileList(files, format = "pretty") {
+  if (files.length === 0) {
+    ui.emptyList("files");
+    return;
+  }
+  if (format !== "pretty") {
+    const rows = files.map((f) => ({
+      id: f.uuid,
+      path: f.path,
+      type: f.type,
+      formats: f.formats.join(", "),
+      result: f.result
+    }));
+    console.log(
+      formatOutput(
+        rows,
+        [
+          { key: "id", label: "ID" },
+          { key: "path", label: "Path" },
+          { key: "type", label: "Type" },
+          { key: "formats", label: "Formats" },
+          { key: "result", label: "Result" }
+        ],
+        format
+      )
+    );
+    return;
+  }
+  renderFileList(files);
+}
 
 // src/cli/renderer/redteam.ts
 import chalk7 from "chalk";
@@ -1582,6 +1747,170 @@ function renderRegistryCredentials(creds, format = "pretty") {
   ]);
   console.log();
 }
+function channelStatusColor(status) {
+  switch (status.toUpperCase()) {
+    case "ONLINE":
+      return chalk7.green;
+    case "DRAFT":
+      return chalk7.yellow;
+    case "OFFLINE":
+      return chalk7.red;
+    default:
+      return chalk7.white;
+  }
+}
+function renderChannelList(channels, format = "pretty") {
+  if (channels.length === 0) {
+    ui.emptyList("channels");
+    return;
+  }
+  if (format !== "pretty") {
+    const rows = channels.map((c) => ({
+      id: c.uuid ?? "",
+      name: c.name ?? "",
+      status: c.status ?? "",
+      clients: c.connectedClientsCount ?? "",
+      lastOnline: c.lastOnlineAt ?? ""
+    }));
+    console.log(
+      formatOutput(
+        rows,
+        [
+          { key: "id", label: "ID" },
+          { key: "name", label: "Name" },
+          { key: "status", label: "Status" },
+          { key: "clients", label: "Clients" },
+          { key: "lastOnline", label: "Last Online" }
+        ],
+        format
+      )
+    );
+    return;
+  }
+  ui.section("Network Broker Channels:");
+  for (const c of channels) {
+    if (c.uuid) ui.dim(c.uuid);
+    const status = c.status ? channelStatusColor(c.status)(c.status) : chalk7.dim("unknown");
+    const clients = c.connectedClientsCount != null ? `  clients: ${c.connectedClientsCount}` : "";
+    console.log(`    ${c.name ?? "(unnamed)"}  ${status}${clients}`);
+    console.log();
+  }
+}
+function renderChannelDetail(channel, format = "pretty") {
+  if (format !== "pretty") {
+    console.log(format === "json" ? JSON.stringify(channel, null, 2) : yamlDump3(channel));
+    return;
+  }
+  ui.section("Channel Detail:");
+  const pairs = [["UUID", channel.uuid]];
+  if (channel.name != null) pairs.push(["Name", channel.name]);
+  if (channel.description != null) pairs.push(["Description", channel.description]);
+  if (channel.status != null)
+    pairs.push(["Status", channelStatusColor(channel.status)(channel.status)]);
+  if (channel.connectedClientsCount != null)
+    pairs.push(["Connected Clients", channel.connectedClientsCount]);
+  if (channel.outdatedClientsCount != null)
+    pairs.push(["Outdated Clients", channel.outdatedClientsCount]);
+  if (channel.lastOnlineAt != null) pairs.push(["Last Online", channel.lastOnlineAt]);
+  if (channel.addedBy != null) pairs.push(["Added By", channel.addedBy]);
+  if (channel.createdAt != null) pairs.push(["Created", channel.createdAt]);
+  if (channel.updatedAt != null) pairs.push(["Updated", channel.updatedAt]);
+  ui.keyValue(pairs);
+  if (channel.features && Object.keys(channel.features).length > 0) {
+    ui.section("Features:");
+    ui.keyValue(Object.entries(channel.features).map(([k, v]) => [k, v]));
+  }
+  console.log();
+}
+function renderChannelStats(stats, format = "pretty") {
+  if (format !== "pretty") {
+    console.log(format === "json" ? JSON.stringify(stats, null, 2) : yamlDump3(stats));
+    return;
+  }
+  ui.section("Network Broker Stats:");
+  const pairs = [];
+  if (stats.onlineChannels != null) pairs.push(["Online Channels", stats.onlineChannels]);
+  if (stats.totalChannels != null) pairs.push(["Total Channels", stats.totalChannels]);
+  if (stats.serverDomain != null) pairs.push(["Server Domain", stats.serverDomain]);
+  if (stats.dockerRegistry != null) pairs.push(["Docker Registry", stats.dockerRegistry]);
+  if (stats.dockerImage != null) pairs.push(["Docker Image", stats.dockerImage]);
+  if (stats.helmChart != null) pairs.push(["Helm Chart", stats.helmChart]);
+  if (stats.clientVersion != null) pairs.push(["Client Version", stats.clientVersion]);
+  ui.keyValue(pairs);
+  console.log();
+}
+function renderLanguages(data, format = "pretty") {
+  if (format !== "pretty") {
+    if (format === "json" || format === "yaml") {
+      console.log(format === "json" ? JSON.stringify(data, null, 2) : yamlDump3(data));
+      return;
+    }
+    console.log(
+      formatOutput(
+        data.languages.map((l) => ({ code: l.code, name: l.name })),
+        [
+          { key: "code", label: "Code" },
+          { key: "name", label: "Name" }
+        ],
+        format
+      )
+    );
+    return;
+  }
+  ui.section("Tenant Languages:");
+  ui.keyValue([
+    ["Multilingual", data.multilingualEnabled ? activeState(true) : activeState(false)],
+    ["Supported Job Types", data.supportedJobTypes.join(", ") || "(none)"]
+  ]);
+  if (data.languages.length === 0) {
+    ui.emptyList("languages");
+    return;
+  }
+  ui.section("Languages:");
+  for (const l of data.languages) {
+    console.log(`    ${chalk7.dim(l.code)}  ${l.name}`);
+  }
+  console.log();
+}
+function renderErrorLogs(logs, format = "pretty") {
+  if (logs.length === 0) {
+    ui.emptyList("error logs");
+    return;
+  }
+  if (format !== "pretty") {
+    const rows = logs.map((l) => ({
+      createdAt: l.createdAt,
+      errorType: l.errorType ?? "",
+      errorSource: l.errorSource ?? "",
+      jobId: l.jobId ?? "",
+      message: l.errorMessage ?? ""
+    }));
+    console.log(
+      formatOutput(
+        rows,
+        [
+          { key: "createdAt", label: "Created" },
+          { key: "errorType", label: "Type" },
+          { key: "errorSource", label: "Source" },
+          { key: "jobId", label: "Job" },
+          { key: "message", label: "Message" }
+        ],
+        format
+      )
+    );
+    return;
+  }
+  ui.section("Target-Profile Error Logs:");
+  for (const l of logs) {
+    const type = l.errorType ? chalk7.red(l.errorType) : chalk7.dim("error");
+    console.log(
+      `    ${chalk7.dim(l.createdAt)}  ${type}${l.errorSource ? `  (${l.errorSource})` : ""}`
+    );
+    if (l.errorMessage) console.log(`      ${l.errorMessage}`);
+    if (l.jobId) console.log(`      ${chalk7.dim(`job: ${l.jobId}`)}`);
+    console.log();
+  }
+}
 
 // src/cli/renderer/runtime.ts
 import chalk8 from "chalk";
@@ -2340,7 +2669,8 @@ function redTeamClientOptions(config) {
     tsgId: config.mgmtTsgId,
     dataEndpoint: config.redTeamDataEndpoint,
     mgmtEndpoint: config.redTeamMgmtEndpoint,
-    tokenEndpoint: config.redTeamTokenEndpoint ?? config.mgmtTokenEndpoint
+    tokenEndpoint: config.redTeamTokenEndpoint ?? config.mgmtTokenEndpoint,
+    networkBrokerEndpoint: config.redTeamNetworkBrokerEndpoint
   };
 }
 function modelSecurityClientOptions(config) {
@@ -3057,6 +3387,76 @@ function registerModelSecurityCommand(program) {
       fail(err);
     }
   });
+  const models = ms.command("models").description("Browse the scanned model catalog (read-only)");
+  models.command("list").description("List models in the catalog").option("--search <text>", "Filter by search text").option("--search-query <text>", "Filter by model UUID or name").option("--sort-field <field>", "Sort field: created_at, updated_at").option("--sort-order <order>", "Sort order: asc, desc").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").addHelpText("after", examples("airs model-security models list")).action(async (opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderModelSecurityHeader();
+      const service = await createService();
+      const result = await service.listModels({
+        search: opts.search,
+        searchQuery: opts.searchQuery,
+        sortField: opts.sortField,
+        sortOrder: opts.sortOrder,
+        limit: opts.limit ? Number.parseInt(opts.limit, 10) : void 0,
+        skip: opts.offset ? Number.parseInt(opts.offset, 10) : void 0
+      });
+      renderModelList(result.models, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  models.command("get <uuid>").description("Get a model by UUID").option("--output <format>", "Output format: pretty, json, yaml", "pretty").action(async (uuid, opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderModelSecurityHeader();
+      const service = await createService();
+      const model = await service.getModel(uuid);
+      renderModelDetail(model, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  models.command("versions <modelUuid>").description("List versions of a model").option("--sort-order <order>", "Sort order: asc, desc").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (modelUuid, opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderModelSecurityHeader();
+      const service = await createService();
+      const result = await service.listModelVersions(modelUuid, {
+        sortOrder: opts.sortOrder,
+        limit: opts.limit ? Number.parseInt(opts.limit, 10) : void 0,
+        skip: opts.offset ? Number.parseInt(opts.offset, 10) : void 0
+      });
+      renderModelVersionList(result.versions, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  models.command("version <uuid>").description("Get a model version by UUID").option("--output <format>", "Output format: pretty, json, yaml", "pretty").action(async (uuid, opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderModelSecurityHeader();
+      const service = await createService();
+      const version = await service.getModelVersion(uuid);
+      renderModelVersionDetail(version, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  models.command("files <modelVersionUuid>").description("List files in a model version").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (modelVersionUuid, opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderModelSecurityHeader();
+      const service = await createService();
+      const result = await service.listModelVersionFiles(modelVersionUuid, {
+        limit: opts.limit ? Number.parseInt(opts.limit, 10) : void 0,
+        skip: opts.offset ? Number.parseInt(opts.offset, 10) : void 0
+      });
+      renderModelFileList(result.files, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
 }
 
 // src/cli/commands/redteam.ts
@@ -4051,6 +4451,103 @@ function registerRedteamCommand(program) {
       fail(err);
     }
   });
+  targets.command("error-logs <targetId>").description("List target-profile error logs").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--search <text>", "Filter by search text").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").addHelpText("after", examples("airs redteam targets error-logs <targetId>")).action(async (targetId, opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderRedteamHeader();
+      const service = await createService2();
+      const { logs } = await service.getTargetProfileErrorLogs(targetId, {
+        limit: opts.limit ? parsePositiveInt(opts.limit, "--limit") : void 0,
+        offset: opts.offset ? Number.parseInt(opts.offset, 10) : void 0,
+        search: opts.search
+      });
+      renderErrorLogs(logs, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  const networkBroker = redteam.command("network-broker").description("Manage red team network broker channels");
+  const channels = networkBroker.command("channels").description("Manage network broker channels");
+  channels.command("list").description("List network broker channels").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--search <text>", "Filter by search text").option("--status <status...>", "Filter by status (ONLINE, OFFLINE, DRAFT)").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderRedteamHeader();
+      const service = await createService2();
+      const { channels: list } = await service.listChannels({
+        limit: opts.limit ? parsePositiveInt(opts.limit, "--limit") : void 0,
+        offset: opts.offset ? Number.parseInt(opts.offset, 10) : void 0,
+        search: opts.search,
+        status: opts.status
+      });
+      renderChannelList(list, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  channels.command("get <channelId>").description("Get a network broker channel").option("--output <format>", "Output format: pretty, json, yaml", "pretty").action(async (channelId, opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderRedteamHeader();
+      const service = await createService2();
+      const channel = await service.getChannel(channelId);
+      renderChannelDetail(channel, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  channels.command("create").description("Create a network broker channel").requiredOption("--name <name>", "Channel name").option("--description <text>", "Channel description").action(async (opts) => {
+    try {
+      renderRedteamHeader();
+      const service = await createService2();
+      const channel = await service.createChannel({
+        name: opts.name,
+        description: opts.description
+      });
+      ui.success(`Channel created: ${channel.uuid}`);
+      renderChannelDetail(channel);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  channels.command("update <channelId>").description("Update a network broker channel").option("--name <name>", "New channel name").option("--description <text>", "New channel description").action(async (channelId, opts) => {
+    try {
+      if (opts.name === void 0 && opts.description === void 0) {
+        usageError("Specify --name and/or --description to update");
+      }
+      renderRedteamHeader();
+      const service = await createService2();
+      const channel = await service.updateChannel(channelId, {
+        name: opts.name,
+        description: opts.description
+      });
+      ui.success(`Channel updated: ${channel.uuid}`);
+      renderChannelDetail(channel);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  networkBroker.command("stats").description("Show network broker channel statistics").option("--output <format>", "Output format: pretty, json, yaml", "pretty").action(async (opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderRedteamHeader();
+      const service = await createService2();
+      const stats = await service.getChannelStats();
+      renderChannelStats(stats, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
+  redteam.command("languages").description("List tenant languages and supported job types").option("--management", "Query the management-plane endpoint instead of the data plane").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (opts) => {
+    try {
+      const fmt = opts.output;
+      if (fmt === "pretty") renderRedteamHeader();
+      const service = await createService2();
+      const data = await service.getLanguages(Boolean(opts.management));
+      renderLanguages(data, fmt);
+    } catch (err) {
+      fail(err);
+    }
+  });
 }
 
 // src/cli/commands/runtime.ts

package/dist/index.d.ts

@@ -349,6 +349,71 @@ interface RegistryCredentials {
     token: string;
     expiry: string;
 }
+/** Normalized network broker channel. */
+interface RedTeamChannel {
+    uuid?: string;
+    name?: string | null;
+    description?: string | null;
+    status?: string | null;
+    addedBy?: string | null;
+    createdAt?: string | null;
+    updatedAt?: string | null;
+    lastOnlineAt?: string | null;
+    connectedClientsCount?: number | null;
+    outdatedClientsCount?: number | null;
+    features?: Record<string, boolean> | null;
+}
+/** Filters for listing network broker channels. */
+interface RedTeamChannelListOptions {
+    limit?: number;
+    offset?: number;
+    search?: string;
+    status?: string | string[];
+}
+/** Request to create a network broker channel. */
+interface RedTeamChannelCreateRequest {
+    name: string;
+    description?: string;
+}
+/** Request to update a network broker channel. */
+interface RedTeamChannelUpdateRequest {
+    name?: string;
+    description?: string;
+}
+/** Normalized network broker channel statistics. */
+interface RedTeamChannelStats {
+    serverDomain?: string | null;
+    dockerRegistry?: string | null;
+    helmChart?: string | null;
+    dockerImage?: string | null;
+    onlineChannels?: number | null;
+    totalChannels?: number | null;
+    clientVersion?: string | null;
+}
+/** Normalized tenant language configuration. */
+interface RedTeamLanguages {
+    multilingualEnabled: boolean;
+    supportedJobTypes: string[];
+    languages: Array<{
+        code: string;
+        name: string;
+    }>;
+}
+/** Normalized target-profile error log entry. */
+interface RedTeamErrorLog {
+    createdAt: string;
+    updatedAt: string;
+    jobId?: string | null;
+    targetId?: string | null;
+    targetVersion?: number | null;
+    attackId?: string | null;
+    errorType?: string | null;
+    errorSource?: string | null;
+    errorMessage?: string | null;
+    targetObject?: Record<string, unknown> | null;
+    extraInfo?: Record<string, unknown> | null;
+    version?: number;
+}
 /** Contract for AI Red Team scan operations. */
 interface RedTeamService {
     /** Get EULA content. */
@@ -439,6 +504,30 @@ interface RedTeamService {
     getCategories(): Promise<RedTeamCategory[]>;
     /** Poll until scan completes. Calls onProgress for status updates. */
     waitForCompletion(jobId: string, onProgress?: (job: RedTeamJob) => void, intervalMs?: number): Promise<RedTeamJob>;
+    /** List network broker channels. */
+    listChannels(opts?: RedTeamChannelListOptions): Promise<{
+        channels: RedTeamChannel[];
+        totalItems?: number;
+    }>;
+    /** Get a network broker channel by ID. */
+    getChannel(channelId: string): Promise<RedTeamChannel>;
+    /** Create a network broker channel. */
+    createChannel(request: RedTeamChannelCreateRequest): Promise<RedTeamChannel>;
+    /** Update a network broker channel. */
+    updateChannel(channelId: string, request: RedTeamChannelUpdateRequest): Promise<RedTeamChannel>;
+    /** Get network broker channel statistics. */
+    getChannelStats(): Promise<RedTeamChannelStats>;
+    /** List tenant languages (data plane, or management plane when `management`). */
+    getLanguages(management?: boolean): Promise<RedTeamLanguages>;
+    /** List target-profile error logs. */
+    getTargetProfileErrorLogs(targetId: string, opts?: {
+        limit?: number;
+        offset?: number;
+        search?: string;
+    }): Promise<{
+        logs: RedTeamErrorLog[];
+        totalItems?: number;
+    }>;
 }
 /** Normalized security group. */
 interface ModelSecurityGroup {
@@ -606,6 +695,63 @@ interface ModelSecurityPyPIAuth {
     url: string;
     expiresAt: string;
 }
+/** Normalized model catalog entry. */
+interface ModelSecurityModel {
+    uuid: string;
+    tsgId: string;
+    name: string;
+    createdAt: string;
+    updatedAt: string;
+    latestVersionUuid?: string | null;
+    latestVersionFingerprint?: string | null;
+    latestVersionRevision?: string | null;
+    latestVersionHfCommitSha?: string | null;
+    latestVersionOutcome?: string | null;
+    latestVersionFormats?: string[] | null;
+    latestVersionSourceTypes?: string[] | null;
+    latestVersionScanTime?: string | null;
+}
+/** Filter options for listing models. */
+interface ModelSecurityModelListOptions {
+    search?: string;
+    searchQuery?: string;
+    sortField?: string;
+    sortOrder?: string;
+    skip?: number;
+    limit?: number;
+}
+/** Normalized model version. */
+interface ModelSecurityModelVersion {
+    uuid: string;
+    tsgId: string;
+    modelUuid: string;
+    revision: string;
+    createdAt: string;
+    updatedAt: string;
+    fingerprint?: string | null;
+    fileCount?: number | null;
+    license?: string | null;
+    latestScanTime?: string | null;
+    hfCommitSha?: string | null;
+    hfCommitTitle?: string | null;
+    hfCommitAuthors?: string[] | null;
+    hfModelName?: string | null;
+    hfOrganization?: string | null;
+    modelFormats?: string[] | null;
+    sourceTypes?: string[] | null;
+    lastEvalOutcome?: string | null;
+    lastEvalSummary?: {
+        rulesFailed: number;
+        rulesPassed: number;
+        totalRules: number;
+    } | null;
+}
+/** Filter options for listing model versions. */
+interface ModelSecurityModelVersionListOptions {
+    sortOrder?: string;
+    skip?: number;
+    limit?: number;
+}
 /** Contract for Model Security operations. */
 interface ModelSecurityService {
     listGroups(opts?: ModelSecurityGroupListOptions): Promise<{
@@ -671,6 +817,23 @@ interface ModelSecurityService {
         values: string[];
     }>;
     getPyPIAuth(): Promise<ModelSecurityPyPIAuth>;
+    listModels(opts?: ModelSecurityModelListOptions): Promise<{
+        totalItems: number;
+        models: ModelSecurityModel[];
+    }>;
+    getModel(uuid: string): Promise<ModelSecurityModel>;
+    listModelVersions(modelUuid: string, opts?: ModelSecurityModelVersionListOptions): Promise<{
+        totalItems: number;
+        versions: ModelSecurityModelVersion[];
+    }>;
+    getModelVersion(uuid: string): Promise<ModelSecurityModelVersion>;
+    listModelVersionFiles(modelVersionUuid: string, opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        files: ModelSecurityFile[];
+    }>;
 }
 /** Normalized security profile. */
 interface SecurityProfileInfo {
@@ -1016,6 +1179,23 @@ declare class SdkModelSecurityService implements ModelSecurityService {
         values: string[];
     }>;
     getPyPIAuth(): Promise<ModelSecurityPyPIAuth>;
+    listModels(opts?: ModelSecurityModelListOptions): Promise<{
+        totalItems: number;
+        models: ModelSecurityModel[];
+    }>;
+    getModel(uuid: string): Promise<ModelSecurityModel>;
+    listModelVersions(modelUuid: string, opts?: ModelSecurityModelVersionListOptions): Promise<{
+        totalItems: number;
+        versions: ModelSecurityModelVersion[];
+    }>;
+    getModelVersion(uuid: string): Promise<ModelSecurityModelVersion>;
+    listModelVersionFiles(modelVersionUuid: string, opts?: {
+        skip?: number;
+        limit?: number;
+    }): Promise<{
+        totalItems: number;
+        files: ModelSecurityFile[];
+    }>;
 }
 
 /**
@@ -1139,6 +1319,23 @@ declare class SdkRedTeamService implements RedTeamService {
     }): Promise<RedTeamCustomAttack[]>;
     getCategories(): Promise<RedTeamCategory[]>;
     waitForCompletion(jobId: string, onProgress?: (job: RedTeamJob) => void, intervalMs?: number): Promise<RedTeamJob>;
+    listChannels(opts?: RedTeamChannelListOptions): Promise<{
+        channels: RedTeamChannel[];
+        totalItems?: number;
+    }>;
+    getChannel(channelId: string): Promise<RedTeamChannel>;
+    createChannel(request: RedTeamChannelCreateRequest): Promise<RedTeamChannel>;
+    updateChannel(channelId: string, request: RedTeamChannelUpdateRequest): Promise<RedTeamChannel>;
+    getChannelStats(): Promise<RedTeamChannelStats>;
+    getLanguages(management?: boolean): Promise<RedTeamLanguages>;
+    getTargetProfileErrorLogs(targetId: string, opts?: {
+        limit?: number;
+        offset?: number;
+        search?: string;
+    }): Promise<{
+        logs: RedTeamErrorLog[];
+        totalItems?: number;
+    }>;
 }
 
 interface PollRetryOptions {
@@ -1230,6 +1427,7 @@ declare const ConfigSchema: z.ZodObject<{
     redTeamDataEndpoint: z.ZodOptional<z.ZodString>;
     redTeamMgmtEndpoint: z.ZodOptional<z.ZodString>;
     redTeamTokenEndpoint: z.ZodOptional<z.ZodString>;
+    redTeamNetworkBrokerEndpoint: z.ZodOptional<z.ZodString>;
     modelSecDataEndpoint: z.ZodOptional<z.ZodString>;
     modelSecMgmtEndpoint: z.ZodOptional<z.ZodString>;
     modelSecTokenEndpoint: z.ZodOptional<z.ZodString>;
@@ -1251,6 +1449,7 @@ declare const ConfigSchema: z.ZodObject<{
     redTeamDataEndpoint?: string | undefined;
     redTeamMgmtEndpoint?: string | undefined;
     redTeamTokenEndpoint?: string | undefined;
+    redTeamNetworkBrokerEndpoint?: string | undefined;
     modelSecDataEndpoint?: string | undefined;
     modelSecMgmtEndpoint?: string | undefined;
     modelSecTokenEndpoint?: string | undefined;
@@ -1268,6 +1467,7 @@ declare const ConfigSchema: z.ZodObject<{
     redTeamDataEndpoint?: string | undefined;
     redTeamMgmtEndpoint?: string | undefined;
     redTeamTokenEndpoint?: string | undefined;
+    redTeamNetworkBrokerEndpoint?: string | undefined;
     modelSecDataEndpoint?: string | undefined;
     modelSecMgmtEndpoint?: string | undefined;
     modelSecTokenEndpoint?: string | undefined;

package/dist/index.js

@@ -17,7 +17,7 @@ import {
   validateName,
   validateTopic,
   writeBackupFile
-} from "./chunk-JXHYQFEK.js";
+} from "./chunk-DSNQSBLE.js";
 export {
   AirsScanService,
   SdkManagementService,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",
@@ -44,7 +44,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@cdot65/prisma-airs-sdk": "^0.12.0",
+    "@cdot65/prisma-airs-sdk": "^0.13.0",
     "@inquirer/prompts": "^8.3.0",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",