@cdot65/prisma-airs-cli 5.2.0 → 5.4.1

package/README.md

@@ -15,8 +15,8 @@
 
 - **Runtime Scanning** — scan prompts and responses against AIRS security profiles, single or bulk with CSV export
 - **Daily environment report** — `airs runtime report` delivers a read-only AI Runtime Security dashboard as self-contained HTML (default) or Markdown in your working directory, with explicit evidence gaps and configuration review findings
-- **Red Team environment dashboard** — `airs redteam dashboard` collects seven read-only SDK feeds into private HTML/Markdown deliverables, with source completeness, quota and risk review findings, and independently scoped scan-creation activity
-- **AI Gateway daily dashboard** — `airs aigateway dashboard --workspace dev` collects 25 read-only SDK feeds into private offline HTML/Markdown, with a fixed telemetry window, transaction pagination, error review findings and explicit source completeness
+- **Red Team environment report** — `airs redteam report` collects seven read-only SDK feeds into private HTML/Markdown deliverables, with source completeness, quota and risk review findings, and independently scoped scan-creation activity
+- **AI Gateway daily report** — `airs aigateway report --workspace dev` collects 25 read-only SDK feeds into private offline HTML/Markdown, with a fixed telemetry window, transaction pagination, error review findings and explicit source completeness
 - **SCM dashboard and sessions** — `runtime dashboard` and `runtime sessions` expose application activity, daily trends, checked pagination and explicit session-to-content drill-down. Legacy `scan-logs query` is **broken/under refactor** and exits with migration guidance; see the [session reference](https://cdot65.github.io/prisma-airs-cli/cli/runtime/sessions/)
 - **Guardrail Optimization** — atomic CLI commands (`create`, `apply`, `eval`, `revert`) for custom topic guardrails, designed for autonomous agent loops (see [`AGENTS.md`](AGENTS.md))
 - **AI Red Teaming** — adversarial scanning with static, dynamic, and custom prompt set attack modes
@@ -49,7 +49,7 @@ airs doctor
 airs runtime scan --profile "my-profile" "Is this prompt safe?"
 airs runtime bulk-scan --profile "my-profile" --file prompts.csv --output-file results.csv --batch-size 25
 
-# Daily read-only environment dashboard, delivered in the current directory
+# Daily read-only environment report, delivered in the current directory
 airs runtime report
 airs runtime report --output markdown
 
@@ -67,8 +67,8 @@ airs runtime topics revert --profile my-profile --name "Explosives"
 airs redteam scan --target <uuid> --name "Full Scan" --type STATIC
 airs redteam report <job-id>
 
-# Read-only environment dashboard (HTML by default; --output markdown also supported)
-airs redteam dashboard --strict
+# Read-only environment report (HTML by default; --output markdown also supported)
+airs redteam report --strict
 
 # Red team custom target adapters
 airs redteam adapter list --output json

package/dist/{chunk-7Z76VCB3.js → chunk-36Z6IPH6.js}

@@ -679,8 +679,11 @@ var SdkModelSecurityService = class {
   }
   async listScans(opts) {
     const sdkOpts = {};
-    if (opts?.evalOutcome) sdkOpts.eval_outcome = opts.evalOutcome;
-    if (opts?.sourceType) sdkOpts.source_type = opts.sourceType;
+    if (opts?.evalOutcome) sdkOpts.eval_outcomes = [opts.evalOutcome];
+    if (opts?.sourceType) sdkOpts.source_types = [opts.sourceType];
+    if (opts?.modelVersionUuid) sdkOpts.model_version_uuid = opts.modelVersionUuid;
+    if (opts?.startTime) sdkOpts.start_time = opts.startTime;
+    if (opts?.endTime) sdkOpts.end_time = opts.endTime;
     if (opts?.scanOrigin) sdkOpts.scan_origin = opts.scanOrigin;
     if (opts?.search) sdkOpts.search = opts.search;
     if (opts?.skip !== void 0) sdkOpts.skip = opts.skip;
@@ -694,6 +697,9 @@ var SdkModelSecurityService = class {
   }
   async listAllScans(opts = {}) {
     const rows = await this.client.scans.listAll({
+      model_version_uuid: opts.modelVersionUuid,
+      start_time: opts.startTime,
+      end_time: opts.endTime,
       eval_outcomes: opts.evalOutcome === void 0 ? void 0 : [opts.evalOutcome],
       source_types: opts.sourceType === void 0 ? void 0 : [opts.sourceType],
       search_query: opts.search,
@@ -793,6 +799,8 @@ var SdkModelSecurityService = class {
     const sdkOpts = {};
     if (opts?.search) sdkOpts.search = opts.search;
     if (opts?.searchQuery) sdkOpts.search_query = opts.searchQuery;
+    if (opts?.startTime) sdkOpts.start_time = opts.startTime;
+    if (opts?.endTime) sdkOpts.end_time = opts.endTime;
     if (opts?.sortField) sdkOpts.sort_field = opts.sortField;
     if (opts?.sortOrder) sdkOpts.sort_order = opts.sortOrder;
     if (opts?.skip !== void 0) sdkOpts.skip = opts.skip;
@@ -806,6 +814,8 @@ var SdkModelSecurityService = class {
   }
   async listAllModels(opts = {}) {
     const rows = await this.client.models.listAllModels({
+      start_time: opts.startTime,
+      end_time: opts.endTime,
       search: opts.search,
       search_query: opts.searchQuery,
       sort_field: opts.sortField,
@@ -2251,6 +2261,9 @@ var ConfigSchema = z.object({
   modelSecDataEndpoint: z.string().optional(),
   modelSecMgmtEndpoint: z.string().optional(),
   modelSecTokenEndpoint: z.string().optional(),
+  agentGuardDataEndpoint: z.string().url().optional(),
+  agentGuardMgmtEndpoint: z.string().url().optional(),
+  agentGuardTokenEndpoint: z.string().url().optional(),
   // AI Gateway (endpoints only; creds shared with mgmt*)
   aiGwDataEndpoint: z.string().optional(),
   aiGwAdminEndpoint: z.string().optional(),
@@ -2292,6 +2305,9 @@ function fromEnv() {
     modelSecDataEndpoint: env.PANW_MODEL_SEC_DATA_ENDPOINT,
     modelSecMgmtEndpoint: env.PANW_MODEL_SEC_MGMT_ENDPOINT,
     modelSecTokenEndpoint: env.PANW_MODEL_SEC_TOKEN_ENDPOINT,
+    agentGuardDataEndpoint: env.PANW_AGENT_GUARD_DATA_ENDPOINT,
+    agentGuardMgmtEndpoint: env.PANW_AGENT_GUARD_MGMT_ENDPOINT,
+    agentGuardTokenEndpoint: env.PANW_AGENT_GUARD_TOKEN_ENDPOINT,
     aiGwDataEndpoint: env.PANW_AI_GW_DATA_ENDPOINT,
     aiGwAdminEndpoint: env.PANW_AI_GW_ADMIN_ENDPOINT,
     aiGwTokenEndpoint: env.PANW_AI_GW_TOKEN_ENDPOINT,