@cdot65/prisma-airs-cli 4.0.0 → 4.0.1

package/dist/cli/index.js

@@ -287,7 +287,10 @@ var OUTPUT_FORMATS = [
 ];
 async function resolveOutput(command, opts, resolution = {}) {
   const localIsExplicit = command.getOptionValueSource?.("output") === "cli";
-  const root = command.parent ? command.optsWithGlobals() : command.opts();
+  let rootCommand = command;
+  while (rootCommand.parent) rootCommand = rootCommand.parent;
+  const globalIsExplicit = rootCommand.getOptionValueSource?.("output") === "cli";
+  const globalOutput = globalIsExplicit ? rootCommand.opts().output : void 0;
   let configured;
   try {
     configured = (await loadConfig()).defaultOutput;
@@ -295,7 +298,9 @@ async function resolveOutput(command, opts, resolution = {}) {
     if (process.env.PANW_CLI_OUTPUT !== void 0) configured = process.env.PANW_CLI_OUTPUT;
     else throw error;
   }
-  const candidate = String(localIsExplicit ? opts.output : root.output ?? configured ?? "pretty");
+  const candidate = String(
+    localIsExplicit ? opts.output : globalOutput ?? configured ?? "pretty"
+  );
   if (!OUTPUT_FORMATS.includes(candidate))
     throw new CliUsageError(
       `Invalid output format '${candidate}'. Expected: ${OUTPUT_FORMATS.join(", ")}`
@@ -320,7 +325,11 @@ function markdownCell(value) {
   return displayValue(value).replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\r?\n/g, "<br>");
 }
 function formatOutput(rows, columns, format) {
-  if (rows.length === 0) return format === "json" ? "[]" : "";
+  if (rows.length === 0) {
+    if (format === "json") return "[]";
+    if (format === "yaml") return "[]\n";
+    return "";
+  }
   const projected = rows.map((row) => columns.map((column) => row[column.key]));
   switch (format) {
     case "json":
@@ -2880,7 +2889,8 @@ function renderDeploymentProfileList(profiles, format = "pretty") {
 }
 function renderScanLogList(results, pageToken, format = "pretty") {
   if (results.length === 0) {
-    ui.emptyList("scan logs");
+    if (format === "pretty") ui.emptyList("scan logs");
+    else console.log(formatOutput([], [], format));
     return;
   }
   if (format !== "pretty") {
@@ -3013,7 +3023,7 @@ function scopeNameLooksUnrelated(name, scopeName) {
 function registerAiGatewayCommand(program) {
   const aigateway = program.command("aigateway").description("AI Gateway operations");
   const workspace = aigateway.command("workspace").description("Manage AI Gateway workspaces");
-  workspace.command("list").description("List workspaces (default: active workspaces you are scoped to)").option("--plane <plane>", "Plane to read from: data (scoped) or admin (whole tenant)").option("--status <status>", "Filter by lifecycle state: active or archived").option("--all", "Merge active + archived admin-plane reads (whole tenant, both states)").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").addHelpText(
+  const workspaceList = workspace.command("list").description("List workspaces (default: active workspaces you are scoped to)").option("--plane <plane>", "Plane to read from: data (scoped) or admin (whole tenant)").option("--status <status>", "Filter by lifecycle state: active or archived").option("--all", "Merge active + archived admin-plane reads (whole tenant, both states)").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
     "after",
     examples(
       "airs aigateway workspace list",
@@ -3023,7 +3033,7 @@ function registerAiGatewayCommand(program) {
     )
   ).action(async (opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(workspaceList, opts);
       if (fmt === "pretty") renderAiGatewayHeader();
       const plane = parsePlane(opts.plane);
       const status = parseStatus(opts.status);
@@ -3044,7 +3054,7 @@ function registerAiGatewayCommand(program) {
       failWithGrantHint(err);
     }
   });
-  workspace.command("get <ref>").description("Get one workspace by UUID or slug (includes settings blocks)").option("--plane <plane>", "Plane to read from: data (scoped) or admin (whole tenant)").option("--output <format>", "Output format: pretty, json, yaml", "pretty").addHelpText(
+  const workspaceGet = workspace.command("get <ref>").description("Get one workspace by UUID or slug (includes settings blocks)").option("--plane <plane>", "Plane to read from: data (scoped) or admin (whole tenant)").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
     "after",
     examples(
       "airs aigateway workspace get ws-main-a-349e0e",
@@ -3052,7 +3062,7 @@ function registerAiGatewayCommand(program) {
     )
   ).action(async (ref, opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(workspaceGet, opts);
       if (fmt === "pretty") renderAiGatewayHeader();
       const plane = parsePlane(opts.plane);
       const service = await createService();
@@ -3820,9 +3830,9 @@ async function createService2() {
 function registerModelSecurityCommand(program) {
   const ms = program.command("model-security").description("AI Model Security operations \u2014 groups, rules, scans");
   const groups = ms.command("groups").description("Manage security groups");
-  groups.command("list").description("List security groups").option("--source-types <types>", "Filter by source types (comma-separated)").option("--search <query>", "Search by name or UUID").option("--sort-field <field>", "Sort field (created_at, updated_at)").option("--sort-dir <dir>", "Sort direction (asc, desc)").option("--enabled-rules <uuids>", "Filter by enabled rule UUIDs (comma-separated)").option("--limit <n>", "Max results", "20").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (opts) => {
+  const groupsList = groups.command("list").description("List security groups").option("--source-types <types>", "Filter by source types (comma-separated)").option("--search <query>", "Search by name or UUID").option("--sort-field <field>", "Sort field (created_at, updated_at)").option("--sort-dir <dir>", "Sort direction (asc, desc)").option("--enabled-rules <uuids>", "Filter by enabled rule UUIDs (comma-separated)").option("--limit <n>", "Max results", "20").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(groupsList, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const listOptions = {
@@ -3840,9 +3850,9 @@ function registerModelSecurityCommand(program) {
       fail(err);
     }
   });
-  groups.command("get <uuid>").description("Get security group details").option("--output <format>", "Output format: pretty, json, yaml", "pretty").action(async (uuid, opts) => {
+  const groupsGet = groups.command("get <uuid>").description("Get security group details").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (uuid, opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(groupsGet, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const group = await service.getGroup(uuid);
@@ -4070,9 +4080,9 @@ function registerModelSecurityCommand(program) {
     }
   });
   const rules = ms.command("rules").description("Browse security rules");
-  rules.command("list").description("List available security rules").option("--source-type <type>", "Filter by source type").option("--search <query>", "Search by name or UUID").option("--limit <n>", "Max results", "20").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (opts) => {
+  const rulesList = rules.command("list").description("List available security rules").option("--source-type <type>", "Filter by source type").option("--search <query>", "Search by name or UUID").option("--limit <n>", "Max results", "20").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(rulesList, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const listOptions = {
@@ -4099,7 +4109,7 @@ function registerModelSecurityCommand(program) {
     }
   });
   const scans = ms.command("scans").description("Model security scan operations");
-  scans.command("list").description("List model security scans").option("--eval-outcome <outcome>", "Filter by eval outcome").option("--source-type <type>", "Filter by source type").option("--scan-origin <origin>", "Filter by scan origin").option("--search <query>", "Search scans").option("--limit <n>", "Max results", "20").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").addHelpText(
+  const scansList = scans.command("list").description("List model security scans").option("--eval-outcome <outcome>", "Filter by eval outcome").option("--source-type <type>", "Filter by source type").option("--scan-origin <origin>", "Filter by scan origin").option("--search <query>", "Search scans").option("--limit <n>", "Max results", "20").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
     "after",
     examples(
       "airs model-security scans list",
@@ -4108,7 +4118,7 @@ function registerModelSecurityCommand(program) {
     )
   ).action(async (opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(scansList, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const listOptions = {
@@ -4207,9 +4217,9 @@ function registerModelSecurityCommand(program) {
     }
   });
   const models = ms.command("models").description("Browse the scanned model catalog (read-only)");
-  models.command("list").description("List models in the catalog").option("--search <text>", "Filter by search text").option("--search-query <text>", "Filter by model UUID or name").option("--sort-field <field>", "Sort field: created_at, updated_at").option("--sort-order <order>", "Sort order: asc, desc").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").addHelpText("after", examples("airs model-security models list")).action(async (opts) => {
+  const modelsList = models.command("list").description("List models in the catalog").option("--search <text>", "Filter by search text").option("--search-query <text>", "Filter by model UUID or name").option("--sort-field <field>", "Sort field: created_at, updated_at").option("--sort-order <order>", "Sort order: asc, desc").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText("after", examples("airs model-security models list")).action(async (opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(modelsList, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const listOptions = {
@@ -4226,9 +4236,9 @@ function registerModelSecurityCommand(program) {
       fail(err);
     }
   });
-  models.command("get <uuid>").description("Get a model by UUID").option("--output <format>", "Output format: pretty, json, yaml", "pretty").action(async (uuid, opts) => {
+  const modelsGet = models.command("get <uuid>").description("Get a model by UUID").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (uuid, opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(modelsGet, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const model = await service.getModel(uuid);
@@ -4237,9 +4247,9 @@ function registerModelSecurityCommand(program) {
       fail(err);
     }
   });
-  models.command("versions <modelUuid>").description("List versions of a model").option("--sort-order <order>", "Sort order: asc, desc").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (modelUuid, opts) => {
+  const modelVersions = models.command("versions <modelUuid>").description("List versions of a model").option("--sort-order <order>", "Sort order: asc, desc").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (modelUuid, opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(modelVersions, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const result = await service.listModelVersions(modelUuid, {
@@ -4252,9 +4262,9 @@ function registerModelSecurityCommand(program) {
       fail(err);
     }
   });
-  models.command("version <uuid>").description("Get a model version by UUID").option("--output <format>", "Output format: pretty, json, yaml", "pretty").action(async (uuid, opts) => {
+  const modelVersion = models.command("version <uuid>").description("Get a model version by UUID").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (uuid, opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(modelVersion, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const version = await service.getModelVersion(uuid);
@@ -4263,9 +4273,9 @@ function registerModelSecurityCommand(program) {
       fail(err);
     }
   });
-  models.command("files <modelVersionUuid>").description("List files in a model version").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (modelVersionUuid, opts) => {
+  const modelFiles = models.command("files <modelVersionUuid>").description("List files in a model version").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (modelVersionUuid, opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(modelFiles, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
       const service = await createService2();
       const result = await service.listModelVersionFiles(modelVersionUuid, {
@@ -7912,14 +7922,14 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  customerApps.command("consumption").argument(
+  const customerAppsConsumption = customerApps.command("consumption").argument(
     "[appName]",
     "Dashboard application name \u2014 the literal scan-payload metadata.app_name, as shown in the SCM AI Applications view (may differ from the SCM-registered customer-app name). Omit to report every dashboard bucket."
   ).description(
     "Show per-app token consumption + violation breakdown (SCM dashboard). Omit appName to scan all apps."
-  ).option("--time-interval <n>", "Window in days: 7, 30, or 60", "30").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (appName, opts) => {
+  ).option("--time-interval <n>", "Window in days: 7, 30, or 60", "30").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (appName, opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(customerAppsConsumption, opts);
       const interval = Number.parseInt(opts.timeInterval, 10);
       if (interval !== 7 && interval !== 30 && interval !== 60) {
         usageError("--time-interval must be 7, 30, or 60 (the API rejects other values)");
@@ -7953,9 +7963,9 @@ function registerRuntimeCommand(program) {
     }
   });
   const deploymentProfiles = runtime.command("deployment-profiles").description("List AIRS deployment profiles");
-  deploymentProfiles.command("list").description("List deployment profiles").option("--unactivated", "Include unactivated profiles").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty").action(async (opts) => {
+  const deploymentProfilesList = deploymentProfiles.command("list").description("List deployment profiles").option("--unactivated", "Include unactivated profiles").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
     try {
-      const fmt = opts.output;
+      const fmt = await resolveOutput(deploymentProfilesList, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
       const service = await createMgmtService();
       const profiles2 = await service.listDeploymentProfiles({
@@ -8307,12 +8317,12 @@ function registerRuntimeCommand(program) {
     }
   });
   const scanLogs = runtime.command("scan-logs").description("Query AIRS scan logs");
-  const scanLogsQuery = scanLogs.command("query").description("Query scan logs").requiredOption("--interval <n>", "Time interval").requiredOption("--unit <unit>", "Time unit (hours)").option("--filter <filter>", "Filter: all, benign, threat", "all").option("--limit <n>", "Max results per page (API page size)", "50").option("--offset <n>", "Starting offset \u2014 rounds down to a page boundary", "0").option("--output <format>", "Output format: pretty, table, csv, json, yaml", "pretty");
+  const scanLogsQuery = scanLogs.command("query").description("Query scan logs").requiredOption("--interval <n>", "Time interval").requiredOption("--unit <unit>", "Time unit (hours)").option("--filter <filter>", "Filter: all, benign, threat", "all").option("--limit <n>", "Max results per page (API page size)", "50").option("--offset <n>", "Starting offset \u2014 rounds down to a page boundary", "0").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml");
   registerPageAliases(scanLogsQuery, { sizeFlag: "--page-size", sizeKey: "pageSize" });
   scanLogsQuery.action(async (opts) => {
     try {
       const { page, size } = resolvePageParams(scanLogsQuery, opts, { indexBase: 1 });
-      const fmt = opts.output;
+      const fmt = await resolveOutput(scanLogsQuery, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
       const service = await createMgmtService();
       const result = await service.queryScanLogs({
@@ -8591,6 +8601,27 @@ function installDebugLogger(logPath) {
 }
 
 // src/cli/program.ts
+var READ_COMMAND_NAMES = /* @__PURE__ */ new Set([
+  "categories",
+  "consumption",
+  "evaluation",
+  "evaluations",
+  "files",
+  "get",
+  "languages",
+  "list",
+  "pypi-auth",
+  "query",
+  "registry-credentials",
+  "report",
+  "stats",
+  "status",
+  "values",
+  "version",
+  "versions",
+  "violation",
+  "violations"
+]);
 function applyListDeleteAliases(cmd) {
   for (const sub of cmd.commands) {
     if (sub.name() === "list" && !sub.aliases().includes("ls")) sub.alias("ls");
@@ -8629,7 +8660,7 @@ function buildProgram() {
   program.hook("preAction", async (_thisCommand, actionCommand) => {
     const root = actionCommand.optsWithGlobals?.() ?? _thisCommand.opts();
     setQuiet(Boolean(root.quiet));
-    if ((actionCommand.name() === "list" || actionCommand.name() === "get") && actionCommand.options.some((option) => option.long === "--output")) {
+    if (READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
       try {
         const format = await resolveOutput(actionCommand, actionCommand.opts());
         actionCommand.setOptionValueWithSource("output", format, "implied");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",