@cdot65/prisma-airs-cli 4.5.0 → 5.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +6 -1
- package/dist/{chunk-NWK7RG2N.js → chunk-IRLIFMGQ.js} +206 -76
- package/dist/cli/index.js +356 -147
- package/dist/index.d.ts +45 -15
- package/dist/index.js +1 -1
- package/package.json +2 -2
package/dist/index.d.ts
CHANGED
|
@@ -1645,6 +1645,7 @@ declare const ConfigSchema: z.ZodObject<{
|
|
|
1645
1645
|
mgmtClientSecret: z.ZodOptional<z.ZodString>;
|
|
1646
1646
|
mgmtTsgId: z.ZodOptional<z.ZodString>;
|
|
1647
1647
|
mgmtEndpoint: z.ZodOptional<z.ZodString>;
|
|
1648
|
+
mgmtDashboardEndpoint: z.ZodOptional<z.ZodString>;
|
|
1648
1649
|
mgmtTokenEndpoint: z.ZodOptional<z.ZodString>;
|
|
1649
1650
|
dlpEndpoint: z.ZodOptional<z.ZodString>;
|
|
1650
1651
|
redTeamDataEndpoint: z.ZodOptional<z.ZodString>;
|
|
@@ -1675,6 +1676,7 @@ declare const ConfigSchema: z.ZodObject<{
|
|
|
1675
1676
|
mgmtClientSecret?: string | undefined;
|
|
1676
1677
|
mgmtTsgId?: string | undefined;
|
|
1677
1678
|
mgmtEndpoint?: string | undefined;
|
|
1679
|
+
mgmtDashboardEndpoint?: string | undefined;
|
|
1678
1680
|
mgmtTokenEndpoint?: string | undefined;
|
|
1679
1681
|
dlpEndpoint?: string | undefined;
|
|
1680
1682
|
redTeamDataEndpoint?: string | undefined;
|
|
@@ -1701,6 +1703,7 @@ declare const ConfigSchema: z.ZodObject<{
|
|
|
1701
1703
|
mgmtClientSecret?: string | undefined;
|
|
1702
1704
|
mgmtTsgId?: string | undefined;
|
|
1703
1705
|
mgmtEndpoint?: string | undefined;
|
|
1706
|
+
mgmtDashboardEndpoint?: string | undefined;
|
|
1704
1707
|
mgmtTokenEndpoint?: string | undefined;
|
|
1705
1708
|
dlpEndpoint?: string | undefined;
|
|
1706
1709
|
redTeamDataEndpoint?: string | undefined;
|
|
@@ -1847,10 +1850,9 @@ declare function writeReportFile(path: string, content: string): Promise<void>;
|
|
|
1847
1850
|
|
|
1848
1851
|
/** Read-only SDK surface needed by the first product report. */
|
|
1849
1852
|
interface RuntimeReportClient {
|
|
1850
|
-
dashboard: Pick<ManagementClient['dashboard'], 'applicationsOverview'>;
|
|
1853
|
+
dashboard: Pick<ManagementClient['dashboard'], 'applicationsOverview' | 'sessionsOverview' | 'sessionsChart' | 'topApplicationsViolations' | 'applicationsViolationsTrend'>;
|
|
1851
1854
|
profiles: Pick<ManagementClient['profiles'], 'list'>;
|
|
1852
1855
|
customerApps: Pick<ManagementClient['customerApps'], 'list'>;
|
|
1853
|
-
scanLogs: Pick<ManagementClient['scanLogs'], 'query'>;
|
|
1854
1856
|
}
|
|
1855
1857
|
type ReportSourceStatus = 'complete' | 'partial' | 'unavailable';
|
|
1856
1858
|
type ReportPriority = 'attention' | 'review' | 'info';
|
|
@@ -1892,23 +1894,50 @@ interface ReportRegisteredApp {
|
|
|
1892
1894
|
model: string;
|
|
1893
1895
|
keyAssociations: number | null;
|
|
1894
1896
|
}
|
|
1895
|
-
interface
|
|
1896
|
-
entries: number;
|
|
1897
|
-
|
|
1897
|
+
interface ReportSessionSummary {
|
|
1898
|
+
entries: number | null;
|
|
1899
|
+
statuses: Array<{
|
|
1898
1900
|
name: string;
|
|
1899
1901
|
count: number;
|
|
1900
1902
|
}>;
|
|
1901
|
-
|
|
1902
|
-
name: string;
|
|
1903
|
-
count: number;
|
|
1904
|
-
}>;
|
|
1905
|
-
tokens: number | null;
|
|
1903
|
+
violatingSessions: number | null;
|
|
1906
1904
|
missingTimestamps: number;
|
|
1907
1905
|
outsideWindow: number;
|
|
1908
1906
|
}
|
|
1907
|
+
interface ReportSeverity {
|
|
1908
|
+
critical: number | null;
|
|
1909
|
+
high: number | null;
|
|
1910
|
+
medium: number | null;
|
|
1911
|
+
low: number | null;
|
|
1912
|
+
total: number | null;
|
|
1913
|
+
}
|
|
1914
|
+
interface ReportDailyTelemetry {
|
|
1915
|
+
chart: {
|
|
1916
|
+
sessions: number | null;
|
|
1917
|
+
violatingSessions: number | null;
|
|
1918
|
+
buckets: Array<{
|
|
1919
|
+
time: string;
|
|
1920
|
+
sessions: number | null;
|
|
1921
|
+
violatingSessions: number | null;
|
|
1922
|
+
violations: ReportSeverity;
|
|
1923
|
+
}>;
|
|
1924
|
+
};
|
|
1925
|
+
topApplications: Array<{
|
|
1926
|
+
name: string;
|
|
1927
|
+
violations: number | null;
|
|
1928
|
+
detectors: Array<{
|
|
1929
|
+
name: string;
|
|
1930
|
+
count: number | null;
|
|
1931
|
+
}>;
|
|
1932
|
+
}>;
|
|
1933
|
+
violationTrend: Array<{
|
|
1934
|
+
time: string;
|
|
1935
|
+
violations: ReportSeverity;
|
|
1936
|
+
}>;
|
|
1937
|
+
}
|
|
1909
1938
|
/** Allowlisted, credential-free projection; never contains raw responses or scan content. */
|
|
1910
1939
|
interface RuntimeDailyReport {
|
|
1911
|
-
schemaVersion:
|
|
1940
|
+
schemaVersion: 2;
|
|
1912
1941
|
product: 'Prisma AIRS AI Runtime Security';
|
|
1913
1942
|
title: string;
|
|
1914
1943
|
generatedAt: string;
|
|
@@ -1929,12 +1958,13 @@ interface RuntimeDailyReport {
|
|
|
1929
1958
|
};
|
|
1930
1959
|
profiles: ReportProfile[];
|
|
1931
1960
|
registeredApps: ReportRegisteredApp[];
|
|
1932
|
-
|
|
1961
|
+
sessions: ReportSessionSummary;
|
|
1962
|
+
dailyTelemetry: ReportDailyTelemetry;
|
|
1933
1963
|
limitations: string[];
|
|
1934
1964
|
}
|
|
1935
1965
|
interface RuntimeReportOptions {
|
|
1936
1966
|
title?: string;
|
|
1937
|
-
/** Per-source page budget (1–100); partial results are explicitly marked. Default
|
|
1967
|
+
/** Per-source page budget (1–100); partial results are explicitly marked. Default 40. */
|
|
1938
1968
|
maxPages?: number;
|
|
1939
1969
|
/** Inject a clock for deterministic tests. */
|
|
1940
1970
|
now?: () => Date;
|
|
@@ -1947,8 +1977,8 @@ declare function renderRuntimeReportHtml(report: RuntimeDailyReport): string;
|
|
|
1947
1977
|
|
|
1948
1978
|
/**
|
|
1949
1979
|
* Build a daily environment report through SDK reads only. No scan submissions or mutations.
|
|
1950
|
-
* Application
|
|
1980
|
+
* Application buckets, session inventory and detector violations remain separate units of evidence.
|
|
1951
1981
|
*/
|
|
1952
1982
|
declare function collectRuntimeDailyReport(client: RuntimeReportClient, options?: RuntimeReportOptions): Promise<RuntimeDailyReport>;
|
|
1953
1983
|
|
|
1954
|
-
export { AirsScanService, type AnalysisReport, type ApiKeyInfo, type ApiKeyListResult, type BackupEnvelope, type BackupFormat, type BackupResult, type BatchEntry, type BulkScanAction, type BulkScanResult, type CategoryBreakdown, type ConsumptionAppListEntry, type ConsumptionQueryOptions, type ConsumptionTimeInterval, type CustomTopic, type CustomerAppConsumption, type CustomerAppInfo, type CustomerAppListResult, type DeleteResponse, type DeploymentProfileInfo, type EfficacyMetrics, type EulaContent, type EulaStatus, type IndexedPrompt, type InstanceDetail, type InstanceRequest, type InstanceResponse, type IterationResult, type ManagementService, type ModelSecurityEvaluation, type ModelSecurityFile, type ModelSecurityFileListOptions, type ModelSecurityGroup, type ModelSecurityGroupCreateRequest, type ModelSecurityGroupListOptions, type ModelSecurityGroupUpdateRequest, type ModelSecurityLabel, type ModelSecurityModel, type ModelSecurityModelListOptions, type ModelSecurityModelVersion, type ModelSecurityModelVersionListOptions, type ModelSecurityPyPIAuth, type ModelSecurityRule, type ModelSecurityRuleEditableField, type ModelSecurityRuleInstance, type ModelSecurityRuleInstanceListOptions, type ModelSecurityRuleInstanceUpdateRequest, type ModelSecurityRuleListOptions, type ModelSecurityScan, type ModelSecurityScanListOptions, type ModelSecurityService, type ModelSecurityViolation, type MutationResponse, type PaginationOptions, type PollRetryOptions, type ProfileTopic, type PromptDetail, type PromptSetDetail, type PromptSetService, type PromptSetVersionInfo, type PropertyValueList, type RedTeamAdapterCreateRequest, type RedTeamAdapterDetail, type RedTeamAdapterListItem, type RedTeamAdapterListOptions, type RedTeamAdapterUpdateOverrides, type RedTeamAdapterValidateRequest, type RedTeamAdapterValidationResult, type RedTeamAdapterVar, type RedTeamAttack, type RedTeamCategory, type RedTeamChannel, type RedTeamChannelCreateRequest, type RedTeamChannelListOptions, type RedTeamChannelStats, type RedTeamChannelUpdateRequest, type RedTeamCustomAttack, type RedTeamCustomReport, type RedTeamDynamicReport, type RedTeamErrorLog, type RedTeamJob, type RedTeamLanguages, type RedTeamService, type RedTeamStaticReport, type RedTeamTarget, type RedTeamTargetCreateRequest, type RedTeamTargetDetail, type RedTeamTargetUpdateRequest, type RegistryCredentials, type ReliableRuntimeService, type ReportApplication, type
|
|
1984
|
+
export { AirsScanService, type AnalysisReport, type ApiKeyInfo, type ApiKeyListResult, type BackupEnvelope, type BackupFormat, type BackupResult, type BatchEntry, type BulkScanAction, type BulkScanResult, type CategoryBreakdown, type ConsumptionAppListEntry, type ConsumptionQueryOptions, type ConsumptionTimeInterval, type CustomTopic, type CustomerAppConsumption, type CustomerAppInfo, type CustomerAppListResult, type DeleteResponse, type DeploymentProfileInfo, type EfficacyMetrics, type EulaContent, type EulaStatus, type IndexedPrompt, type InstanceDetail, type InstanceRequest, type InstanceResponse, type IterationResult, type ManagementService, type ModelSecurityEvaluation, type ModelSecurityFile, type ModelSecurityFileListOptions, type ModelSecurityGroup, type ModelSecurityGroupCreateRequest, type ModelSecurityGroupListOptions, type ModelSecurityGroupUpdateRequest, type ModelSecurityLabel, type ModelSecurityModel, type ModelSecurityModelListOptions, type ModelSecurityModelVersion, type ModelSecurityModelVersionListOptions, type ModelSecurityPyPIAuth, type ModelSecurityRule, type ModelSecurityRuleEditableField, type ModelSecurityRuleInstance, type ModelSecurityRuleInstanceListOptions, type ModelSecurityRuleInstanceUpdateRequest, type ModelSecurityRuleListOptions, type ModelSecurityScan, type ModelSecurityScanListOptions, type ModelSecurityService, type ModelSecurityViolation, type MutationResponse, type PaginationOptions, type PollRetryOptions, type ProfileTopic, type PromptDetail, type PromptSetDetail, type PromptSetService, type PromptSetVersionInfo, type PropertyValueList, type RedTeamAdapterCreateRequest, type RedTeamAdapterDetail, type RedTeamAdapterListItem, type RedTeamAdapterListOptions, type RedTeamAdapterUpdateOverrides, type RedTeamAdapterValidateRequest, type RedTeamAdapterValidationResult, type RedTeamAdapterVar, type RedTeamAttack, type RedTeamCategory, type RedTeamChannel, type RedTeamChannelCreateRequest, type RedTeamChannelListOptions, type RedTeamChannelStats, type RedTeamChannelUpdateRequest, type RedTeamCustomAttack, type RedTeamCustomReport, type RedTeamDynamicReport, type RedTeamErrorLog, type RedTeamJob, type RedTeamLanguages, type RedTeamService, type RedTeamStaticReport, type RedTeamTarget, type RedTeamTargetCreateRequest, type RedTeamTargetDetail, type RedTeamTargetUpdateRequest, type RegistryCredentials, type ReliableRuntimeService, type ReportApplication, type ReportDailyTelemetry, type ReportFinding, type ReportFormat, type ReportPriority, type ReportProfile, type ReportRegisteredApp, type ReportSessionSummary, type ReportSeverity, type ReportSource, type ReportSourceStatus, type ResourceType, type RestoreResult, type RunState, type RuntimeDailyReport, type RuntimeReportClient, type RuntimeReportOptions, type RuntimeScanResult, type RuntimeService, SDK_ASYNC_BATCH_SIZE, type ScanLogQueryOptions, type ScanLogQueryResult, type ScanResult, type ScanService, SdkManagementService, SdkModelSecurityService, SdkPromptSetService, SdkRedTeamService, SdkRuntimeService, type SecurityProfileInfo, type SecurityProfileListResult, type SubmittedBatch, type TargetAuthValidationRequest, type TargetAuthValidationResult, type TargetOperationOptions, type TestCase, type TestResult, type UserInput, type ValidationError, collectRuntimeDailyReport, computeCategoryBreakdown, computeMetrics, loadConfig, readBackupDir, readBackupFile, renderRuntimeReportHtml, renderRuntimeReportMarkdown, resolveOutputDir, sanitizeFilename, validateDescription, validateExamples, validateName, validateTopic, writeBackupFile, writeReportFile };
|
package/dist/index.js
CHANGED
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cdot65/prisma-airs-cli",
|
|
3
3
|
"packageManager": "pnpm@10.6.5",
|
|
4
|
-
"version": "
|
|
4
|
+
"version": "5.0.1",
|
|
5
5
|
"description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
|
|
6
6
|
"type": "module",
|
|
7
7
|
"main": "dist/index.js",
|
|
@@ -59,7 +59,7 @@
|
|
|
59
59
|
},
|
|
60
60
|
"license": "MIT",
|
|
61
61
|
"dependencies": {
|
|
62
|
-
"@cdot65/prisma-airs-sdk": "0.
|
|
62
|
+
"@cdot65/prisma-airs-sdk": "0.26.0",
|
|
63
63
|
"@inquirer/prompts": "^8.3.0",
|
|
64
64
|
"chalk": "^5.6.2",
|
|
65
65
|
"commander": "^14.0.3",
|