@cdot65/prisma-airs-cli 4.5.0 → 5.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -1645,6 +1645,7 @@ declare const ConfigSchema: z.ZodObject<{
1645
1645
  mgmtClientSecret: z.ZodOptional<z.ZodString>;
1646
1646
  mgmtTsgId: z.ZodOptional<z.ZodString>;
1647
1647
  mgmtEndpoint: z.ZodOptional<z.ZodString>;
1648
+ mgmtDashboardEndpoint: z.ZodOptional<z.ZodString>;
1648
1649
  mgmtTokenEndpoint: z.ZodOptional<z.ZodString>;
1649
1650
  dlpEndpoint: z.ZodOptional<z.ZodString>;
1650
1651
  redTeamDataEndpoint: z.ZodOptional<z.ZodString>;
@@ -1675,6 +1676,7 @@ declare const ConfigSchema: z.ZodObject<{
1675
1676
  mgmtClientSecret?: string | undefined;
1676
1677
  mgmtTsgId?: string | undefined;
1677
1678
  mgmtEndpoint?: string | undefined;
1679
+ mgmtDashboardEndpoint?: string | undefined;
1678
1680
  mgmtTokenEndpoint?: string | undefined;
1679
1681
  dlpEndpoint?: string | undefined;
1680
1682
  redTeamDataEndpoint?: string | undefined;
@@ -1701,6 +1703,7 @@ declare const ConfigSchema: z.ZodObject<{
1701
1703
  mgmtClientSecret?: string | undefined;
1702
1704
  mgmtTsgId?: string | undefined;
1703
1705
  mgmtEndpoint?: string | undefined;
1706
+ mgmtDashboardEndpoint?: string | undefined;
1704
1707
  mgmtTokenEndpoint?: string | undefined;
1705
1708
  dlpEndpoint?: string | undefined;
1706
1709
  redTeamDataEndpoint?: string | undefined;
@@ -1847,10 +1850,9 @@ declare function writeReportFile(path: string, content: string): Promise<void>;
1847
1850
 
1848
1851
  /** Read-only SDK surface needed by the first product report. */
1849
1852
  interface RuntimeReportClient {
1850
- dashboard: Pick<ManagementClient['dashboard'], 'applicationsOverview'>;
1853
+ dashboard: Pick<ManagementClient['dashboard'], 'applicationsOverview' | 'sessionsOverview' | 'sessionsChart' | 'topApplicationsViolations' | 'applicationsViolationsTrend'>;
1851
1854
  profiles: Pick<ManagementClient['profiles'], 'list'>;
1852
1855
  customerApps: Pick<ManagementClient['customerApps'], 'list'>;
1853
- scanLogs: Pick<ManagementClient['scanLogs'], 'query'>;
1854
1856
  }
1855
1857
  type ReportSourceStatus = 'complete' | 'partial' | 'unavailable';
1856
1858
  type ReportPriority = 'attention' | 'review' | 'info';
@@ -1892,23 +1894,50 @@ interface ReportRegisteredApp {
1892
1894
  model: string;
1893
1895
  keyAssociations: number | null;
1894
1896
  }
1895
- interface ReportLogSummary {
1896
- entries: number;
1897
- actions: Array<{
1897
+ interface ReportSessionSummary {
1898
+ entries: number | null;
1899
+ statuses: Array<{
1898
1900
  name: string;
1899
1901
  count: number;
1900
1902
  }>;
1901
- verdicts: Array<{
1902
- name: string;
1903
- count: number;
1904
- }>;
1905
- tokens: number | null;
1903
+ violatingSessions: number | null;
1906
1904
  missingTimestamps: number;
1907
1905
  outsideWindow: number;
1908
1906
  }
1907
+ interface ReportSeverity {
1908
+ critical: number | null;
1909
+ high: number | null;
1910
+ medium: number | null;
1911
+ low: number | null;
1912
+ total: number | null;
1913
+ }
1914
+ interface ReportDailyTelemetry {
1915
+ chart: {
1916
+ sessions: number | null;
1917
+ violatingSessions: number | null;
1918
+ buckets: Array<{
1919
+ time: string;
1920
+ sessions: number | null;
1921
+ violatingSessions: number | null;
1922
+ violations: ReportSeverity;
1923
+ }>;
1924
+ };
1925
+ topApplications: Array<{
1926
+ name: string;
1927
+ violations: number | null;
1928
+ detectors: Array<{
1929
+ name: string;
1930
+ count: number | null;
1931
+ }>;
1932
+ }>;
1933
+ violationTrend: Array<{
1934
+ time: string;
1935
+ violations: ReportSeverity;
1936
+ }>;
1937
+ }
1909
1938
  /** Allowlisted, credential-free projection; never contains raw responses or scan content. */
1910
1939
  interface RuntimeDailyReport {
1911
- schemaVersion: 1;
1940
+ schemaVersion: 2;
1912
1941
  product: 'Prisma AIRS AI Runtime Security';
1913
1942
  title: string;
1914
1943
  generatedAt: string;
@@ -1929,12 +1958,13 @@ interface RuntimeDailyReport {
1929
1958
  };
1930
1959
  profiles: ReportProfile[];
1931
1960
  registeredApps: ReportRegisteredApp[];
1932
- logs: ReportLogSummary;
1961
+ sessions: ReportSessionSummary;
1962
+ dailyTelemetry: ReportDailyTelemetry;
1933
1963
  limitations: string[];
1934
1964
  }
1935
1965
  interface RuntimeReportOptions {
1936
1966
  title?: string;
1937
- /** Per-source page budget (1–100); partial results are explicitly marked. Default 10. */
1967
+ /** Per-source page budget (1–100); partial results are explicitly marked. Default 40. */
1938
1968
  maxPages?: number;
1939
1969
  /** Inject a clock for deterministic tests. */
1940
1970
  now?: () => Date;
@@ -1947,8 +1977,8 @@ declare function renderRuntimeReportHtml(report: RuntimeDailyReport): string;
1947
1977
 
1948
1978
  /**
1949
1979
  * Build a daily environment report through SDK reads only. No scan submissions or mutations.
1950
- * Application sessions, log entries and current inventory remain separate units of evidence.
1980
+ * Application buckets, session inventory and detector violations remain separate units of evidence.
1951
1981
  */
1952
1982
  declare function collectRuntimeDailyReport(client: RuntimeReportClient, options?: RuntimeReportOptions): Promise<RuntimeDailyReport>;
1953
1983
 
1954
- export { AirsScanService, type AnalysisReport, type ApiKeyInfo, type ApiKeyListResult, type BackupEnvelope, type BackupFormat, type BackupResult, type BatchEntry, type BulkScanAction, type BulkScanResult, type CategoryBreakdown, type ConsumptionAppListEntry, type ConsumptionQueryOptions, type ConsumptionTimeInterval, type CustomTopic, type CustomerAppConsumption, type CustomerAppInfo, type CustomerAppListResult, type DeleteResponse, type DeploymentProfileInfo, type EfficacyMetrics, type EulaContent, type EulaStatus, type IndexedPrompt, type InstanceDetail, type InstanceRequest, type InstanceResponse, type IterationResult, type ManagementService, type ModelSecurityEvaluation, type ModelSecurityFile, type ModelSecurityFileListOptions, type ModelSecurityGroup, type ModelSecurityGroupCreateRequest, type ModelSecurityGroupListOptions, type ModelSecurityGroupUpdateRequest, type ModelSecurityLabel, type ModelSecurityModel, type ModelSecurityModelListOptions, type ModelSecurityModelVersion, type ModelSecurityModelVersionListOptions, type ModelSecurityPyPIAuth, type ModelSecurityRule, type ModelSecurityRuleEditableField, type ModelSecurityRuleInstance, type ModelSecurityRuleInstanceListOptions, type ModelSecurityRuleInstanceUpdateRequest, type ModelSecurityRuleListOptions, type ModelSecurityScan, type ModelSecurityScanListOptions, type ModelSecurityService, type ModelSecurityViolation, type MutationResponse, type PaginationOptions, type PollRetryOptions, type ProfileTopic, type PromptDetail, type PromptSetDetail, type PromptSetService, type PromptSetVersionInfo, type PropertyValueList, type RedTeamAdapterCreateRequest, type RedTeamAdapterDetail, type RedTeamAdapterListItem, type RedTeamAdapterListOptions, type RedTeamAdapterUpdateOverrides, type RedTeamAdapterValidateRequest, type RedTeamAdapterValidationResult, type RedTeamAdapterVar, type RedTeamAttack, type RedTeamCategory, type RedTeamChannel, type RedTeamChannelCreateRequest, type RedTeamChannelListOptions, type RedTeamChannelStats, type RedTeamChannelUpdateRequest, type RedTeamCustomAttack, type RedTeamCustomReport, type RedTeamDynamicReport, type RedTeamErrorLog, type RedTeamJob, type RedTeamLanguages, type RedTeamService, type RedTeamStaticReport, type RedTeamTarget, type RedTeamTargetCreateRequest, type RedTeamTargetDetail, type RedTeamTargetUpdateRequest, type RegistryCredentials, type ReliableRuntimeService, type ReportApplication, type ReportFinding, type ReportFormat, type ReportLogSummary, type ReportPriority, type ReportProfile, type ReportRegisteredApp, type ReportSource, type ReportSourceStatus, type ResourceType, type RestoreResult, type RunState, type RuntimeDailyReport, type RuntimeReportClient, type RuntimeReportOptions, type RuntimeScanResult, type RuntimeService, SDK_ASYNC_BATCH_SIZE, type ScanLogQueryOptions, type ScanLogQueryResult, type ScanResult, type ScanService, SdkManagementService, SdkModelSecurityService, SdkPromptSetService, SdkRedTeamService, SdkRuntimeService, type SecurityProfileInfo, type SecurityProfileListResult, type SubmittedBatch, type TargetAuthValidationRequest, type TargetAuthValidationResult, type TargetOperationOptions, type TestCase, type TestResult, type UserInput, type ValidationError, collectRuntimeDailyReport, computeCategoryBreakdown, computeMetrics, loadConfig, readBackupDir, readBackupFile, renderRuntimeReportHtml, renderRuntimeReportMarkdown, resolveOutputDir, sanitizeFilename, validateDescription, validateExamples, validateName, validateTopic, writeBackupFile, writeReportFile };
1984
+ export { AirsScanService, type AnalysisReport, type ApiKeyInfo, type ApiKeyListResult, type BackupEnvelope, type BackupFormat, type BackupResult, type BatchEntry, type BulkScanAction, type BulkScanResult, type CategoryBreakdown, type ConsumptionAppListEntry, type ConsumptionQueryOptions, type ConsumptionTimeInterval, type CustomTopic, type CustomerAppConsumption, type CustomerAppInfo, type CustomerAppListResult, type DeleteResponse, type DeploymentProfileInfo, type EfficacyMetrics, type EulaContent, type EulaStatus, type IndexedPrompt, type InstanceDetail, type InstanceRequest, type InstanceResponse, type IterationResult, type ManagementService, type ModelSecurityEvaluation, type ModelSecurityFile, type ModelSecurityFileListOptions, type ModelSecurityGroup, type ModelSecurityGroupCreateRequest, type ModelSecurityGroupListOptions, type ModelSecurityGroupUpdateRequest, type ModelSecurityLabel, type ModelSecurityModel, type ModelSecurityModelListOptions, type ModelSecurityModelVersion, type ModelSecurityModelVersionListOptions, type ModelSecurityPyPIAuth, type ModelSecurityRule, type ModelSecurityRuleEditableField, type ModelSecurityRuleInstance, type ModelSecurityRuleInstanceListOptions, type ModelSecurityRuleInstanceUpdateRequest, type ModelSecurityRuleListOptions, type ModelSecurityScan, type ModelSecurityScanListOptions, type ModelSecurityService, type ModelSecurityViolation, type MutationResponse, type PaginationOptions, type PollRetryOptions, type ProfileTopic, type PromptDetail, type PromptSetDetail, type PromptSetService, type PromptSetVersionInfo, type PropertyValueList, type RedTeamAdapterCreateRequest, type RedTeamAdapterDetail, type RedTeamAdapterListItem, type RedTeamAdapterListOptions, type RedTeamAdapterUpdateOverrides, type RedTeamAdapterValidateRequest, type RedTeamAdapterValidationResult, type RedTeamAdapterVar, type RedTeamAttack, type RedTeamCategory, type RedTeamChannel, type RedTeamChannelCreateRequest, type RedTeamChannelListOptions, type RedTeamChannelStats, type RedTeamChannelUpdateRequest, type RedTeamCustomAttack, type RedTeamCustomReport, type RedTeamDynamicReport, type RedTeamErrorLog, type RedTeamJob, type RedTeamLanguages, type RedTeamService, type RedTeamStaticReport, type RedTeamTarget, type RedTeamTargetCreateRequest, type RedTeamTargetDetail, type RedTeamTargetUpdateRequest, type RegistryCredentials, type ReliableRuntimeService, type ReportApplication, type ReportDailyTelemetry, type ReportFinding, type ReportFormat, type ReportPriority, type ReportProfile, type ReportRegisteredApp, type ReportSessionSummary, type ReportSeverity, type ReportSource, type ReportSourceStatus, type ResourceType, type RestoreResult, type RunState, type RuntimeDailyReport, type RuntimeReportClient, type RuntimeReportOptions, type RuntimeScanResult, type RuntimeService, SDK_ASYNC_BATCH_SIZE, type ScanLogQueryOptions, type ScanLogQueryResult, type ScanResult, type ScanService, SdkManagementService, SdkModelSecurityService, SdkPromptSetService, SdkRedTeamService, SdkRuntimeService, type SecurityProfileInfo, type SecurityProfileListResult, type SubmittedBatch, type TargetAuthValidationRequest, type TargetAuthValidationResult, type TargetOperationOptions, type TestCase, type TestResult, type UserInput, type ValidationError, collectRuntimeDailyReport, computeCategoryBreakdown, computeMetrics, loadConfig, readBackupDir, readBackupFile, renderRuntimeReportHtml, renderRuntimeReportMarkdown, resolveOutputDir, sanitizeFilename, validateDescription, validateExamples, validateName, validateTopic, writeBackupFile, writeReportFile };
package/dist/index.js CHANGED
@@ -22,7 +22,7 @@ import {
22
22
  validateTopic,
23
23
  writeBackupFile,
24
24
  writeReportFile
25
- } from "./chunk-NWK7RG2N.js";
25
+ } from "./chunk-IRLIFMGQ.js";
26
26
  export {
27
27
  AirsScanService,
28
28
  SDK_ASYNC_BATCH_SIZE,
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@cdot65/prisma-airs-cli",
3
3
  "packageManager": "pnpm@10.6.5",
4
- "version": "4.5.0",
4
+ "version": "5.0.0",
5
5
  "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
6
6
  "type": "module",
7
7
  "main": "dist/index.js",
@@ -59,7 +59,7 @@
59
59
  },
60
60
  "license": "MIT",
61
61
  "dependencies": {
62
- "@cdot65/prisma-airs-sdk": "0.25.0",
62
+ "@cdot65/prisma-airs-sdk": "0.26.0",
63
63
  "@inquirer/prompts": "^8.3.0",
64
64
  "chalk": "^5.6.2",
65
65
  "commander": "^14.0.3",