@cdot65/prisma-airs-cli 3.2.0 → 3.3.0

package/dist/index.d.ts

@@ -572,6 +572,17 @@ interface RedTeamService {
         logs: RedTeamErrorLog[];
         totalItems?: number;
     }>;
+    listAdapters(opts?: RedTeamAdapterListOptions): Promise<{
+        adapters: RedTeamAdapterListItem[];
+        totalItems?: number;
+    }>;
+    getAdapter(uuid: string): Promise<RedTeamAdapterDetail>;
+    createAdapter(request: RedTeamAdapterCreateRequest, validate?: boolean): Promise<RedTeamAdapterDetail>;
+    /** Read-modify-write: merges overrides onto the current record (upstream PUT is full-replacement). */
+    updateAdapter(uuid: string, overrides: RedTeamAdapterUpdateOverrides, validate?: boolean): Promise<RedTeamAdapterDetail>;
+    deleteAdapter(uuid: string): Promise<void>;
+    /** Run a script end-to-end through the broker channel; returns an execution outcome. */
+    validateAdapter(request: RedTeamAdapterValidateRequest): Promise<RedTeamAdapterValidationResult>;
 }
 /** Normalized security group. */
 interface ModelSecurityGroup {
@@ -1077,6 +1088,83 @@ interface ManagementService {
     }): Promise<DeploymentProfileInfo[]>;
     queryScanLogs(opts: ScanLogQueryOptions): Promise<ScanLogQueryResult>;
 }
+/** An adapter configuration variable. Secrets are masked; key off `isRedacted`, not the value. */
+interface RedTeamAdapterVar {
+    key: string;
+    value?: string | null;
+    type: 'VAR' | 'SECRET';
+    isRedacted?: boolean;
+}
+/** Adapter list row — no script, description, or variables; `get` for the full record. */
+interface RedTeamAdapterListItem {
+    uuid: string;
+    name: string;
+    status: string;
+    createdAt?: string;
+    updatedAt?: string;
+    createdByUserId?: string | null;
+    targetCount?: number | null;
+}
+/** Full adapter record. */
+interface RedTeamAdapterDetail {
+    uuid: string;
+    tsgId?: string;
+    name: string;
+    scriptB64: string;
+    status: string;
+    description?: string | null;
+    networkBrokerChannelUuid?: string | null;
+    variables: RedTeamAdapterVar[];
+    targetCount?: number | null;
+    createdAt?: string | null;
+    updatedAt?: string | null;
+    createdByUserId?: string | null;
+    updatedByUserId?: string | null;
+}
+interface RedTeamAdapterListOptions {
+    limit?: number;
+    offset?: number;
+    search?: string;
+}
+interface RedTeamAdapterCreateRequest {
+    name: string;
+    scriptB64: string;
+    /** Sample prompt used to exercise the adapter during validation. Not stored. */
+    prompt: string;
+    description?: string;
+    /** Optional while DRAFT; required to activate (validate: true). */
+    networkBrokerChannelUuid?: string;
+    variables?: RedTeamAdapterVar[];
+}
+/**
+ * CLI-side overrides for adapter update. The upstream PUT is a full
+ * replacement, so the service merges these onto the current record —
+ * `prompt` is the only always-required field because it is never stored.
+ */
+interface RedTeamAdapterUpdateOverrides {
+    prompt: string;
+    name?: string;
+    scriptB64?: string;
+    description?: string;
+    networkBrokerChannelUuid?: string;
+    /** Replaces the WHOLE variable set when given; omitted keys are deleted upstream. */
+    variables?: RedTeamAdapterVar[];
+}
+interface RedTeamAdapterValidateRequest {
+    scriptB64: string;
+    networkBrokerChannelUuid: string;
+    prompt: string;
+    variables?: RedTeamAdapterVar[];
+    /** Resolve redacted/null variable values from this stored adapter before the run. */
+    adapterUuid?: string;
+}
+/** Execution outcome of a validation run — not an adapter record. */
+interface RedTeamAdapterValidationResult {
+    validated: boolean;
+    stdout?: string | null;
+    stderr?: string | null;
+    traceback?: string | null;
+}
 
 /**
  * Wraps the SDK's ManagementClient to implement our ManagementService interface.
@@ -1301,10 +1389,6 @@ declare class SdkPromptSetService implements PromptSetService {
     createPropertyValue(name: string, value: string): Promise<MutationResponse>;
 }
 
-/**
- * Wraps the SDK's RedTeamClient to implement RedTeamService.
- * Provides scan creation, status polling, report retrieval, and target/category listing.
- */
 declare class SdkRedTeamService implements RedTeamService {
     private client;
     constructor(opts?: RedTeamClientOptions);
@@ -1380,6 +1464,15 @@ declare class SdkRedTeamService implements RedTeamService {
         logs: RedTeamErrorLog[];
         totalItems?: number;
     }>;
+    listAdapters(opts?: RedTeamAdapterListOptions): Promise<{
+        adapters: RedTeamAdapterListItem[];
+        totalItems?: number;
+    }>;
+    getAdapter(uuid: string): Promise<RedTeamAdapterDetail>;
+    createAdapter(request: RedTeamAdapterCreateRequest, validate?: boolean): Promise<RedTeamAdapterDetail>;
+    updateAdapter(uuid: string, overrides: RedTeamAdapterUpdateOverrides, validate?: boolean): Promise<RedTeamAdapterDetail>;
+    deleteAdapter(uuid: string): Promise<void>;
+    validateAdapter(request: RedTeamAdapterValidateRequest): Promise<RedTeamAdapterValidationResult>;
 }
 
 /** Maximum async request objects accepted by the installed AIRS SDK. */
@@ -1482,6 +1575,9 @@ declare const ConfigSchema: z.ZodObject<{
     modelSecDataEndpoint: z.ZodOptional<z.ZodString>;
     modelSecMgmtEndpoint: z.ZodOptional<z.ZodString>;
     modelSecTokenEndpoint: z.ZodOptional<z.ZodString>;
+    aiGwDataEndpoint: z.ZodOptional<z.ZodString>;
+    aiGwAdminEndpoint: z.ZodOptional<z.ZodString>;
+    aiGwTokenEndpoint: z.ZodOptional<z.ZodString>;
     scanConcurrency: z.ZodDefault<z.ZodNumber>;
     dataDir: z.ZodDefault<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
@@ -1504,6 +1600,9 @@ declare const ConfigSchema: z.ZodObject<{
     modelSecDataEndpoint?: string | undefined;
     modelSecMgmtEndpoint?: string | undefined;
     modelSecTokenEndpoint?: string | undefined;
+    aiGwDataEndpoint?: string | undefined;
+    aiGwAdminEndpoint?: string | undefined;
+    aiGwTokenEndpoint?: string | undefined;
 }, {
     airsApiKey?: string | undefined;
     airsApiToken?: string | undefined;
@@ -1522,6 +1621,9 @@ declare const ConfigSchema: z.ZodObject<{
     modelSecDataEndpoint?: string | undefined;
     modelSecMgmtEndpoint?: string | undefined;
     modelSecTokenEndpoint?: string | undefined;
+    aiGwDataEndpoint?: string | undefined;
+    aiGwAdminEndpoint?: string | undefined;
+    aiGwTokenEndpoint?: string | undefined;
     scanConcurrency?: number | undefined;
     dataDir?: string | undefined;
 }>;

package/dist/index.js

@@ -18,7 +18,7 @@ import {
   validateName,
   validateTopic,
   writeBackupFile
-} from "./chunk-TTBN7YHC.js";
+} from "./chunk-2VIUZRPB.js";
 export {
   AirsScanService,
   SDK_ASYNC_BATCH_SIZE,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "3.2.0",
+  "version": "3.3.0",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",
@@ -44,7 +44,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@cdot65/prisma-airs-sdk": "^0.13.2",
+    "@cdot65/prisma-airs-sdk": "^0.17.0",
     "@inquirer/prompts": "^8.3.0",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",