@cdot65/prisma-airs-cli 5.2.0 → 5.3.0

package/README.md

@@ -15,8 +15,8 @@
 
 - **Runtime Scanning** — scan prompts and responses against AIRS security profiles, single or bulk with CSV export
 - **Daily environment report** — `airs runtime report` delivers a read-only AI Runtime Security dashboard as self-contained HTML (default) or Markdown in your working directory, with explicit evidence gaps and configuration review findings
-- **Red Team environment dashboard** — `airs redteam dashboard` collects seven read-only SDK feeds into private HTML/Markdown deliverables, with source completeness, quota and risk review findings, and independently scoped scan-creation activity
-- **AI Gateway daily dashboard** — `airs aigateway dashboard --workspace dev` collects 25 read-only SDK feeds into private offline HTML/Markdown, with a fixed telemetry window, transaction pagination, error review findings and explicit source completeness
+- **Red Team environment report** — `airs redteam report` collects seven read-only SDK feeds into private HTML/Markdown deliverables, with source completeness, quota and risk review findings, and independently scoped scan-creation activity
+- **AI Gateway daily report** — `airs aigateway report --workspace dev` collects 25 read-only SDK feeds into private offline HTML/Markdown, with a fixed telemetry window, transaction pagination, error review findings and explicit source completeness
 - **SCM dashboard and sessions** — `runtime dashboard` and `runtime sessions` expose application activity, daily trends, checked pagination and explicit session-to-content drill-down. Legacy `scan-logs query` is **broken/under refactor** and exits with migration guidance; see the [session reference](https://cdot65.github.io/prisma-airs-cli/cli/runtime/sessions/)
 - **Guardrail Optimization** — atomic CLI commands (`create`, `apply`, `eval`, `revert`) for custom topic guardrails, designed for autonomous agent loops (see [`AGENTS.md`](AGENTS.md))
 - **AI Red Teaming** — adversarial scanning with static, dynamic, and custom prompt set attack modes
@@ -49,7 +49,7 @@ airs doctor
 airs runtime scan --profile "my-profile" "Is this prompt safe?"
 airs runtime bulk-scan --profile "my-profile" --file prompts.csv --output-file results.csv --batch-size 25
 
-# Daily read-only environment dashboard, delivered in the current directory
+# Daily read-only environment report, delivered in the current directory
 airs runtime report
 airs runtime report --output markdown
 
@@ -67,8 +67,8 @@ airs runtime topics revert --profile my-profile --name "Explosives"
 airs redteam scan --target <uuid> --name "Full Scan" --type STATIC
 airs redteam report <job-id>
 
-# Read-only environment dashboard (HTML by default; --output markdown also supported)
-airs redteam dashboard --strict
+# Read-only environment report (HTML by default; --output markdown also supported)
+airs redteam report --strict
 
 # Red team custom target adapters
 airs redteam adapter list --output json

package/dist/cli/index.js

@@ -4746,23 +4746,23 @@ function parseNonnegativePage(value) {
   return Number(value);
 }
 
-// src/cli/commands/aigateway-dashboard.ts
+// src/cli/commands/aigateway-report.ts
 import { lstat } from "fs/promises";
 import { resolve } from "path";
 import { AIGatewayClient as AIGatewayClient3 } from "@cdot65/prisma-airs-sdk";
 import { z } from "zod";
 import { randomUUID } from "crypto";
-function registerAiGatewayDashboardCommand(aigateway) {
-  const command = aigateway.command("dashboard").description("Generate an AI Gateway environment dashboard (read-only)").requiredOption("--workspace <ref>", "Workspace slug, UUID, or unique display name").option("--days <n>", "Rolling window in days (default: 1)", "1").option("--start <iso>", "Explicit ISO-8601 start; requires --end").option("--end <iso>", "Explicit ISO-8601 end; requires --start").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
+function registerAiGatewayReportCommand(aigateway) {
+  const command = aigateway.command("report").alias("dashboard").description("Generate an AI Gateway environment report (read-only)").requiredOption("--workspace <ref>", "Workspace slug, UUID, or unique display name").option("--days <n>", "Rolling window in days (default: 1)", "1").option("--start <iso>", "Explicit ISO-8601 start; requires --end").option("--end <iso>", "Explicit ISO-8601 end; requires --start").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
     "--output-file <path>",
     "Destination (default: new timestamped file in CWD); - for stdout; never overwrite"
   ).option("--title <text>", "Report title", "AI Gateway environment report").option("--max-pages <n>", "Page budget per source, 1\u2013100 (50 transactions/page)", "40").option("--strict", "Exit 1 after writing if any source is incomplete").addHelpText(
     "after",
     examples(
-      "airs aigateway dashboard --workspace ws-develo-71f8d8 --output-file ./airs-daily.html",
-      "airs aigateway dashboard --workspace ws-develo-71f8d8 --output markdown --output-file ./airs-daily.md",
-      "airs aigateway dashboard --workspace ws-develo-71f8d8",
-      "airs aigateway dashboard --workspace ws-develo-71f8d8 --strict --max-pages 20 --output-file - > daily.html"
+      "airs aigateway report --workspace ws-develo-71f8d8 --output-file ./airs-daily.html",
+      "airs aigateway report --workspace ws-develo-71f8d8 --output markdown --output-file ./airs-daily.md",
+      "airs aigateway report --workspace ws-develo-71f8d8",
+      "airs aigateway report --workspace ws-develo-71f8d8 --strict --max-pages 20 --output-file - > daily.html"
     )
   ).action(async (opts) => {
     const format = opts.output ?? command.parent?.parent?.opts().output ?? "html";
@@ -4896,7 +4896,7 @@ function scopeNameLooksUnrelated(name, scopeName) {
 function registerAiGatewayCommand(program) {
   const aigateway = program.command("aigateway").description("Manage and observe Prisma AIRS AI Gateway resources").action(() => aigateway.outputHelp());
   registerAiGatewayInventory(aigateway);
-  registerAiGatewayDashboardCommand(aigateway);
+  registerAiGatewayReportCommand(aigateway);
   registerAiGatewayInference(aigateway);
   const workspace = aigateway.command("workspaces").alias("workspace").description("Manage gateway workspaces").action(() => workspace.outputHelp());
   const workspaceList = workspace.command("list").description("List workspaces (default: active workspaces you are scoped to)").option("--plane <plane>", "Plane to read from: data (scoped) or admin (whole tenant)").option("--status <status>", "Filter by lifecycle state: active or archived").option("--all", "Merge active + archived admin-plane reads (whole tenant, both states)").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
@@ -6291,24 +6291,33 @@ async function backupTargets(opts) {
   return results;
 }
 
-// src/cli/commands/redteam-dashboard.ts
+// src/cli/commands/redteam-report.ts
 import { lstat as lstat2 } from "fs/promises";
 import { resolve as resolve2 } from "path";
 import { RedTeamClient } from "@cdot65/prisma-airs-sdk";
 import { randomUUID as randomUUID3 } from "crypto";
-function registerRedTeamDashboardCommand(redteam) {
-  const command = redteam.command("dashboard").description("Generate a Red Team environment dashboard (read-only)").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
+function registerRedTeamReportCommand(redteam, scanReport) {
+  const command = redteam.command("report [jobId]").alias("dashboard").description("Generate an environment report, or view an individual scan report by job ID").option("--attacks", "Individual scan only: include attack list", false).option("--severity <level>", "Individual scan only: filter attacks by severity").option("--limit <n>", "Individual scan only: max attacks to show", "20").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
     "--output-file <path>",
     "Destination (default: new timestamped file in CWD); - for stdout; never overwrite"
   ).option("--title <text>", "Report title", "Red Team environment report").option("--max-pages <n>", "Page budget per source, 1\u2013100 (15 records/page)", "40").option("--strict", "Exit 1 after writing if any source is incomplete").addHelpText(
     "after",
     examples(
-      "airs redteam dashboard --output-file ./airs-daily.html",
-      "airs redteam dashboard --output markdown --output-file ./airs-daily.md",
-      "airs redteam dashboard",
-      "airs redteam dashboard --strict --max-pages 20 --output-file - > daily.html"
+      "airs redteam report --output-file ./airs-daily.html",
+      "airs redteam report --output markdown --output-file ./airs-daily.md",
+      "airs redteam report",
+      "airs redteam report --strict --max-pages 20 --output-file - > daily.html"
     )
-  ).action(async (opts) => {
+  ).action(async (jobId, opts) => {
+    const explicit = (name) => command.getOptionValueSource(name) === "cli";
+    if (jobId !== void 0) {
+      if (["output", "outputFile", "title", "maxPages", "strict"].some(explicit) || ["html", "markdown"].includes(command.parent?.parent?.opts().output))
+        usageError("Environment report options cannot be combined with a scan job ID");
+      await scanReport(jobId, opts);
+      return;
+    }
+    if (["attacks", "severity", "limit"].some(explicit))
+      usageError("--attacks, --severity and --limit require a scan job ID");
     const format = opts.output ?? command.parent?.parent?.opts().output ?? "html";
     if (format !== "html" && format !== "markdown")
       usageError("Report output must be html or markdown");
@@ -6603,7 +6612,6 @@ function parseAdapterVariables(input) {
 }
 function registerRedteamCommand(program) {
   const redteam = program.command("redteam").description("AI Red Team scan operations");
-  registerRedTeamDashboardCommand(redteam);
   redteam.command("abort <jobId>").description("Abort a running scan").action(async (jobId) => {
     try {
       renderRedteamHeader();
@@ -6986,7 +6994,7 @@ function registerRedteamCommand(program) {
       fail(err);
     }
   });
-  redteam.command("report <jobId>").description("View scan report").option("--attacks", "Include attack list", false).option("--severity <level>", "Filter attacks by severity").option("--limit <n>", "Max attacks to show", "20").action(async (jobId, opts) => {
+  registerRedTeamReportCommand(redteam, async (jobId, opts) => {
     try {
       renderRedteamHeader();
       const service = await createService3();
@@ -9421,7 +9429,7 @@ import { lstat as lstat4 } from "fs/promises";
 import { resolve as resolve5 } from "path";
 import { randomUUID as randomUUID6 } from "crypto";
 function registerRuntimeReportCommand(runtime) {
-  const command = runtime.command("report").description("Generate a daily AI Runtime Security environment dashboard (read-only)").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
+  const command = runtime.command("report").description("Generate a daily AI Runtime Security environment report (read-only)").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
     "--output-file <path>",
     "Destination (default: new timestamped file in CWD); - for stdout; never overwrite"
   ).option("--title <text>", "Report title", "Daily environment report").option("--max-pages <n>", "Page budget per source, 1\u2013100 (25 sessions/page)", "40").option("--strict", "Exit 1 after writing if any source is incomplete").addHelpText(
@@ -10779,12 +10787,12 @@ function buildProgram() {
   program.hook("preAction", async (_thisCommand, actionCommand) => {
     const root = actionCommand.optsWithGlobals?.() ?? _thisCommand.opts();
     setQuiet(Boolean(root.quiet));
-    const isEnvironmentReport = actionCommand.name() === "report" && actionCommand.parent?.name() === "runtime" || actionCommand.name() === "dashboard" && ["redteam", "aigateway"].includes(actionCommand.parent?.name() ?? "");
+    const isEnvironmentReport = actionCommand.name() === "report" && ["runtime", "redteam", "aigateway"].includes(actionCommand.parent?.name() ?? "") && !(actionCommand.parent?.name() === "redteam" && actionCommand.args.length > 0);
     if (isEnvironmentReport && (root.debug || /^(1|true|yes|on)$/i.test(process.env.PANW_AI_SEC_DEBUG?.trim() ?? "")))
       usageError(
         "Disable --debug and PANW_AI_SEC_DEBUG for environment reports to avoid persisting sensitive traffic content"
       );
-    if (!isEnvironmentReport && READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
+    if (!isEnvironmentReport && !(actionCommand.name() === "report" && actionCommand.parent?.name() === "redteam") && READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
       try {
         const format = await resolveOutput(actionCommand, actionCommand.opts());
         actionCommand.setOptionValueWithSource("output", format, "implied");

package/dist/index.d.ts

@@ -2005,7 +2005,7 @@ interface GatewayReportOptions {
 /** Collect all 25 supplied read feeds; retain only allowlisted aggregate evidence. */
 declare function collectGatewayEnvironmentReport(client: GatewayReportClient, options: GatewayReportOptions): Promise<EnvironmentReport>;
 
-/** Portable Markdown using the same allowlisted evidence as the HTML dashboard. */
+/** Portable Markdown using the same allowlisted evidence as the HTML report. */
 declare function renderEnvironmentReportMarkdown(r: EnvironmentReport): string;
 /** Self-contained HTML with hash-based CSP, static inline JS/CSS and no remote resources. */
 declare function renderEnvironmentReportHtml(r: EnvironmentReport): string;
@@ -2047,7 +2047,7 @@ interface RedTeamEnvironmentReport {
 /** Collect seven read-only feeds, with explicit source budgets and independent metric windows. */
 declare function collectRedTeamEnvironmentReport(client: RedTeamReportClient, options?: RuntimeReportOptions): Promise<RedTeamEnvironmentReport>;
 
-/** Portable Markdown using the same allowlisted evidence as the HTML dashboard. */
+/** Portable Markdown using the same allowlisted evidence as the HTML report. */
 declare function renderRedTeamReportMarkdown(report: RedTeamEnvironmentReport): string;
 /** Self-contained HTML with hash-based CSP and no remote resources. */
 declare function renderRedTeamReportHtml(report: RedTeamEnvironmentReport): string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "5.2.0",
+  "version": "5.3.0",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",