@cdot65/prisma-airs-cli 4.1.0 → 4.1.1

package/dist/cli/index.js

@@ -3604,6 +3604,16 @@ function registerScopedReads(root, name, description, select, options = {}) {
   return group;
 }
 var knownValues = (values) => values.join(", ");
+function redactApiKeyMaterial(value) {
+  if (Array.isArray(value)) return value.map(redactApiKeyMaterial);
+  if (value === null || typeof value !== "object") return value;
+  return Object.fromEntries(
+    Object.entries(value).map(([key, entry]) => [
+      key,
+      key === "key" ? "***" : redactApiKeyMaterial(entry)
+    ])
+  );
+}
 function parseNamedDate(value, flag) {
   try {
     return parseDateOption(value);
@@ -3666,23 +3676,22 @@ function registerApiKeys(root) {
   for (const kind of ["service", "user"]) {
     const group = showHelpOnEmpty(apiKeys.command(kind).description(`Manage ${kind} API keys`));
     const list = addReadOutput(
-      group.command("list").description(`List ${kind} API keys in a workspace (data plane)`).requiredOption("--workspace <uuid>", "Workspace UUID")
+      group.command("list").description(`List ${kind} API keys in a workspace (data plane)`).requiredOption("--workspace <uuid>", "Workspace UUID").option("--reveal-sensitive", "Show API key material")
     );
     list.action(
-      (opts) => runList(
-        list,
-        opts,
-        `${kind} API keys`,
-        (client) => kind === "service" ? client.apiKeys.listService({ workspaceId: opts.workspace }) : client.apiKeys.listUser({ workspaceId: opts.workspace })
-      )
+      (opts) => runList(list, opts, `${kind} API keys`, async (client) => {
+        const result = await (kind === "service" ? client.apiKeys.listService({ workspaceId: opts.workspace }) : client.apiKeys.listUser({ workspaceId: opts.workspace }));
+        return opts.revealSensitive ? result : redactApiKeyMaterial(result);
+      })
+    );
+    const get = addReadOutput(
+      group.command("get <id>").description(`Get one ${kind} API key`).option("--reveal-sensitive", "Show API key material")
     );
-    const get = addReadOutput(group.command("get <id>").description(`Get one ${kind} API key`));
     get.action(
-      (id, opts) => runDetail(
-        get,
-        opts,
-        (client) => kind === "service" ? client.apiKeys.getService(id) : client.apiKeys.getUser(id)
-      )
+      (id, opts) => runDetail(get, opts, async (client) => {
+        const result = await (kind === "service" ? client.apiKeys.getService(id) : client.apiKeys.getUser(id));
+        return opts.revealSensitive ? result : redactApiKeyMaterial(result);
+      })
     );
     const createFields = [
       { option: "alertEmails", path: "alert_emails", parse: parseCsvOption },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "4.1.0",
+  "version": "4.1.1",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",