@cdot65/prisma-airs-cli 5.3.0 → 5.5.0

package/dist/cli/index.js

@@ -13,11 +13,17 @@ import {
   collectRedTeamEnvironmentReport,
   collectRuntimeDailyReport,
   computeMetrics,
+  createTenant,
+  defaultTenantConfigPath,
+  deleteTenant,
+  expandConfigPath,
   getOrCreateManagementClient,
   inspectConfig,
   loadConfig,
   readBackupDir,
   readBackupFile,
+  readTenantConfig,
+  readTenantStore,
   renderEnvironmentReportHtml,
   renderEnvironmentReportMarkdown,
   renderRedTeamReportHtml,
@@ -27,10 +33,11 @@ import {
   resolveConfigFilePath,
   resolveOutputDir,
   sanitizeFilename,
+  switchTenant,
   validateTopic,
   writeBackupFile,
   writeReportFile
-} from "../chunk-7Z76VCB3.js";
+} from "../chunk-NKAVUBKI.js";
 
 // src/cli/index.ts
 import "dotenv/config";
@@ -49,189 +56,36 @@ function installProcessGuards() {
 }
 
 // src/cli/program.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 import { readFileSync as readFileSync4 } from "fs";
 import { dirname as dirname4, join as join4 } from "path";
 import { fileURLToPath } from "url";
 import { Command } from "commander";
 
-// src/cli/commands/aigateway.ts
+// src/cli/commands/agentguard.ts
+import { randomUUID } from "crypto";
+import { lstat } from "fs/promises";
+import { resolve } from "path";
 import {
-  GatewayDefaultsInputSchema,
-  GatewayRateLimitInputSchema,
-  GatewayUsageLimitInputSchema
+  AgentGuardClient,
+  AgentGuardPageOptionsSchema,
+  AgentGuardScanListOptionsSchema,
+  AgentGuardStatsOptionsSchema
 } from "@cdot65/prisma-airs-sdk";
+import { dump as dump3 } from "js-yaml";
+import { z } from "zod";
 
-// src/airs/aigateway.ts
-import {
-  AIGatewayChartFiltersSchema,
-  AIGatewayClient
-} from "@cdot65/prisma-airs-sdk";
-function toLimitArray(value) {
-  if (Array.isArray(value)) return value;
-  if (value !== null && typeof value === "object") return [value];
-  return [];
-}
-function normalizeWorkspace(raw) {
-  return {
-    id: raw.id,
-    slug: raw.slug,
-    name: raw.name,
-    icon: raw.icon,
-    description: raw.description,
-    createdAt: raw.created_at,
-    lastUpdatedAt: raw.last_updated_at,
-    isDefault: Boolean(raw.is_default),
-    status: raw.status,
-    scopeName: raw.scope_name
-  };
-}
-function normalizeWorkspaceDetail(raw) {
+// src/config/client-options.ts
+function agentGuardClientOptions(config) {
   return {
-    ...normalizeWorkspace(raw),
-    defaults: raw.defaults,
-    usageLimits: toLimitArray(raw.usage_limits),
-    rateLimits: toLimitArray(raw.rate_limits),
-    securitySettings: raw.security_settings,
-    dataPlaneSecuritySettings: raw.data_plane_security_settings,
-    settings: raw.settings
+    clientId: config.mgmtClientId,
+    clientSecret: config.mgmtClientSecret,
+    tsgId: config.mgmtTsgId,
+    dataEndpoint: config.agentGuardDataEndpoint,
+    mgmtEndpoint: config.agentGuardMgmtEndpoint,
+    tokenEndpoint: config.agentGuardTokenEndpoint ?? config.mgmtTokenEndpoint
   };
 }
-function aiGatewayGrantHint(err) {
-  const status = err?.status ?? err?.statusCode;
-  if (status !== 403) return void 0;
-  const message = err instanceof Error ? err.message : String(err);
-  const grant = message.includes("AB03") ? "the service account is missing a workspace-scope grant (data plane, /ai_gw/v2)" : "the service account is missing a tenant-root admin grant (admin plane, /ai_gw/admin/v2)";
-  return `${grant}. SCM Access Management edits the existing role row by default \u2014 use "Add Role" so the account ends up with both role rows, not one row moved.`;
-}
-var SdkAiGatewayService = class {
-  client;
-  constructor(opts) {
-    this.client = new AIGatewayClient(opts);
-  }
-  async listWorkspaces(options) {
-    const response = await this.client.workspaces.list(options);
-    return response.data.map(normalizeWorkspace);
-  }
-  async listAllWorkspaces() {
-    const [active, archived] = await Promise.all([
-      this.client.workspaces.list({ plane: "admin" }),
-      this.client.workspaces.list({ plane: "admin", status: "archived" })
-    ]);
-    return [
-      ...active.data,
-      ...archived.data
-    ].map(normalizeWorkspace);
-  }
-  async getWorkspace(workspaceRef, options) {
-    try {
-      const raw = await this.client.workspaces.get(workspaceRef, options);
-      return normalizeWorkspaceDetail(raw);
-    } catch (err) {
-      const status = err.statusCode;
-      if (status !== 404) throw err;
-      const resolved = await this.resolveWorkspaceRef(workspaceRef, [
-        options?.plane ?? "data",
-        "admin"
-      ]);
-      if (resolved === workspaceRef) throw err;
-      const raw = await this.client.workspaces.get(resolved, options);
-      return normalizeWorkspaceDetail(raw);
-    }
-  }
-  async createWorkspace(request) {
-    const body = {
-      name: request.name,
-      scope_name: request.scopeName
-    };
-    if (request.description !== void 0) body.description = request.description;
-    if (request.icon !== void 0) body.icon = request.icon;
-    if (request.defaults !== void 0) body.defaults = request.defaults;
-    if (request.users !== void 0) body.users = request.users;
-    if (request.usageLimits !== void 0) body.usage_limits = request.usageLimits;
-    if (request.rateLimits !== void 0) body.rate_limits = request.rateLimits;
-    const created = await this.client.workspaces.create(body);
-    return this.refetchAfterWrite(created.id, created);
-  }
-  async updateWorkspace(workspaceRef, request) {
-    const ref = await this.resolveWorkspaceRef(workspaceRef, ["admin"]);
-    const body = {};
-    if (request.name !== void 0) body.name = request.name;
-    if (request.description !== void 0) body.description = request.description;
-    if (request.icon !== void 0) body.icon = request.icon;
-    if (request.defaults !== void 0) body.defaults = request.defaults;
-    if (request.usageLimits !== void 0) body.usage_limits = request.usageLimits;
-    if (request.rateLimits !== void 0) body.rate_limits = request.rateLimits;
-    await this.client.workspaces.update(ref, body);
-    return this.getWorkspace(ref, { plane: "admin" });
-  }
-  async deleteWorkspace(workspaceRef) {
-    const ref = await this.resolveWorkspaceRef(workspaceRef, ["admin"]);
-    await this.client.workspaces.delete(ref);
-  }
-  /**
-   * The API accepts only a UUID or slug as a workspace ref — a display name
-   * gets a misleading 400 AB01 ("No update fields provided") on writes.
-   * Match a user-supplied ref against the workspace list so name | slug |
-   * uuid all work. Unmatched refs pass through so the API's own error stands.
-   */
-  async resolveWorkspaceRef(ref, planes, requireSlug = false) {
-    for (const plane of planes) {
-      let rows;
-      try {
-        rows = await this.listWorkspaces({ plane });
-      } catch {
-        continue;
-      }
-      const byRef = rows.find((w) => w.id === ref || w.slug === ref);
-      if (byRef) return requireSlug ? byRef.slug : ref;
-      const byName = rows.filter((w) => w.name === ref);
-      if (byName.length > 1) {
-        throw new Error(
-          `workspace name '${ref}' is ambiguous (${byName.map((w) => w.slug).join(", ")}) \u2014 use a slug or UUID`
-        );
-      }
-      if (byName.length === 1) return byName[0].slug;
-    }
-    return ref;
-  }
-  async getTelemetryCost(opts) {
-    const { workspaceSlug: workspaceRef, days = 7, ...rawFilters } = opts;
-    const filters = AIGatewayChartFiltersSchema.parse(rawFilters);
-    if (!Number.isSafeInteger(days) || days <= 0)
-      throw new Error("Expected days to be a positive integer");
-    const workspaceSlug = await this.resolveWorkspaceRef(workspaceRef, ["data", "admin"], true);
-    const raw = await this.client.telemetry.cost({
-      workspaceSlug,
-      days,
-      ...filters
-    });
-    return {
-      workspaceSlug,
-      days,
-      totalCents: raw.data.total,
-      totalUsd: raw.data.total / 100,
-      avgCents: raw.data.avg,
-      avgUsd: raw.data.avg / 100,
-      quotaExceeded: raw.data.isQuotaExceeded,
-      records: raw.data.records.map((r) => ({
-        date: r.x,
-        costCents: r.y,
-        costUsd: r.y / 100
-      }))
-    };
-  }
-  /** Re-read after a write, falling back to the (partial) write response if the get fails. */
-  async refetchAfterWrite(workspaceRef, writeResponse) {
-    try {
-      return await this.getWorkspace(workspaceRef, { plane: "admin" });
-    } catch {
-      return normalizeWorkspaceDetail(writeResponse);
-    }
-  }
-};
-
-// src/config/client-options.ts
 function managementClientOptions(config) {
   return {
     clientId: config.mgmtClientId,
@@ -283,6 +137,207 @@ function modelSecurityClientOptions(config) {
   };
 }
 
+// src/reports/agentguard.ts
+async function collectAgentGuardReport(client, options = {}) {
+  const maxPages2 = options.maxPages ?? 40;
+  if (!Number.isSafeInteger(maxPages2) || maxPages2 < 1 || maxPages2 > 100)
+    throw new Error("maxPages must be between 1 and 100");
+  const now = options.now ?? (() => /* @__PURE__ */ new Date());
+  const end = now();
+  const window2 = {
+    start: new Date(end.getTime() - 30 * 864e5).toISOString(),
+    end: end.toISOString()
+  };
+  const report = {
+    schemaVersion: 1,
+    product: "Prisma AIRS AI Supply Chain \u2014 AgentGuard",
+    title: options.title ?? "AgentGuard environment report",
+    collectionStartedAt: end.toISOString(),
+    generatedAt: "",
+    window: window2,
+    windowLabel: "30-day scan inventory; rolling 30_DAYS statistics; current rule catalog",
+    schemaLabel: "Experimental browser APIs",
+    health: "unknown",
+    sources: [],
+    findings: [],
+    tables: [],
+    limitations: [
+      "Read-only evidence, not a security certification or numerical health score. Browser APIs are undocumented and may change.",
+      "Scans use explicit start/end timestamps; statistics use the server rolling 30_DAYS window. These independently read sources are not an atomic snapshot and need not reconcile.",
+      "Scan rows are not unique skills. Parent/batch rows are excluded from outcome counts to avoid counting them alongside children; per-scan vulnerability counts are never summed.",
+      "Rule default states describe the catalog, not effective tenant policies. No scan creation, policy changes or skill uploads are performed.",
+      "Missing or incomplete evidence is unknown, not zero. Scan names, identifiers, URLs, device metadata, source code and finding text are excluded."
+    ]
+  };
+  const label = (v, allowed) => v === null ? "UNKNOWN" : allowed.includes(v) ? v : "OTHER";
+  async function source(name, method, range, read) {
+    const s = {
+      name,
+      method,
+      window: range,
+      status: "unavailable",
+      pages: 0,
+      records: 0,
+      notes: []
+    };
+    report.sources.push(s);
+    try {
+      await read(s);
+      if (s.status !== "partial") s.status = "complete";
+    } catch {
+      s.status = s.records ? "partial" : "unavailable";
+      s.notes.push("Request or validation failed; no upstream error body included.");
+    }
+    if (s.status !== "complete")
+      report.findings.push({
+        priority: "review",
+        title: `${name} incomplete`,
+        evidence: s.notes.join(" "),
+        recommendation: "Check service access or increase the page budget, then regenerate.",
+        source: name
+      });
+  }
+  async function pages(s, read, pageCount = false) {
+    const rows = [];
+    const seen = /* @__PURE__ */ new Set();
+    let total;
+    try {
+      for (let page = 0; page < maxPages2; page++) {
+        const r = await read(rows.length);
+        s.pages++;
+        if (!Number.isSafeInteger(r.total) || r.total < 0 || !Array.isArray(r.rows) || r.rows.length > 10)
+          throw new Error();
+        total ??= r.total;
+        if (!pageCount && (r.total !== total || rows.length + r.rows.length > total))
+          throw new Error();
+        for (const row of r.rows) {
+          if (!row.uuid || seen.has(row.uuid)) throw new Error();
+          seen.add(row.uuid);
+          rows.push(row);
+          s.records = rows.length;
+        }
+        if (pageCount ? r.rows.length < 10 : rows.length === total) return rows;
+        if (!r.rows.length) throw new Error();
+      }
+      s.notes.push(`Reached the ${maxPages2}-page budget.`);
+      throw new Error();
+    } catch (error) {
+      if (!rows.length) throw error;
+      s.status = "partial";
+      s.notes.push(
+        "Inventory incomplete: pagination changed, repeated, stopped early, failed or reached its budget."
+      );
+      return rows;
+    }
+  }
+  await source("Scans", "listScans()", `${window2.start} to ${window2.end}`, async (s) => {
+    const rows = await pages(s, async (skip) => {
+      const p = await client.listScans({
+        skip,
+        limit: 10,
+        start_time: window2.start,
+        end_time: window2.end,
+        isBackgroundRefresh: false
+      });
+      return { rows: p.scans, total: p.pagination.total_items };
+    });
+    const inside = rows.filter((r) => {
+      const t = Date.parse(r.created_at);
+      return Number.isFinite(t) && t >= Date.parse(window2.start) && t <= end.getTime();
+    });
+    if (inside.length !== rows.length) {
+      s.status = "partial";
+      s.notes.push("Rows with missing or out-of-window creation timestamps were excluded.");
+    }
+    const leaf = inside.filter((r) => !r.is_batch && r.child_scan_uuids.length === 0);
+    const groups = /* @__PURE__ */ new Map();
+    for (const r of leaf) {
+      const key = `${label(r.artifact_type, ["SKILL", "AGENT"])} / ${label(r.eval_outcome, ["BLOCKED", "ALLOWED", "PENDING", "ERROR"])}`;
+      groups.set(key, (groups.get(key) ?? 0) + 1);
+    }
+    report.tables.push({
+      title: "Scan outcomes",
+      note: `Collected ${s.records} rows; excluded ${inside.length - leaf.length} parent/batch rows. ${s.status === "partial" ? "Partial inventory only." : "Complete inventory for requested window."}`,
+      headers: ["Artifact / outcome", "Scan rows"],
+      rows: [...groups].sort(([a], [b]) => a.localeCompare(b))
+    });
+    const blocked = leaf.filter((r) => r.eval_outcome === "BLOCKED").length;
+    if (blocked)
+      report.findings.push({
+        priority: "attention",
+        title: "Blocked scans require review",
+        evidence: `${blocked} collected non-parent scan rows have BLOCKED evaluations.`,
+        recommendation: "Inspect the affected scans and findings before approving the artifacts.",
+        source: "Scans"
+      });
+    const unsettled = leaf.filter(
+      (r) => r.status !== "COMPLETED" || !["ALLOWED", "BLOCKED"].includes(r.eval_outcome ?? "")
+    ).length;
+    if (unsettled)
+      report.findings.push({
+        priority: "review",
+        title: "Scans without a completed decision",
+        evidence: `${unsettled} collected non-parent rows are pending, failed or have an unfamiliar status.`,
+        recommendation: "Review scan status; absence of a completed decision is not a passing evaluation.",
+        source: "Scans"
+      });
+  });
+  await source("Statistics", "getScanStats()", "Server rolling 30_DAYS", async (s) => {
+    const r = await client.getScanStats({ time_period: "30_DAYS" });
+    report.tables.push({
+      title: "Skill statistics",
+      note: "Server aggregates; percentage changes may be unavailable.",
+      headers: ["Metric", "Count", "Change (%)"],
+      rows: [
+        [
+          "Unique skills scanned",
+          r.unique_skills_scanned.count,
+          r.unique_skills_scanned.percent_change
+        ],
+        [
+          "Vulnerabilities found",
+          r.total_vulnerabilities_found.count,
+          r.total_vulnerabilities_found.percent_change
+        ]
+      ]
+    });
+    if (r.total_vulnerabilities_found.count > 0)
+      report.findings.push({
+        priority: "attention",
+        title: "Skill vulnerabilities reported",
+        evidence: `${r.total_vulnerabilities_found.count} findings reported in the server statistics window.`,
+        recommendation: "Review vulnerability details and remediate before use; findings are not a count of distinct vulnerable skills.",
+        source: "Statistics"
+      });
+    s.records = 1;
+    s.pages = 1;
+  });
+  await source("Rules", "listRules()", "Current catalog", async (s) => {
+    const rows = await pages(
+      s,
+      async (skip) => {
+        const p = await client.listRules({ skip, limit: 10 });
+        return { rows: p.rules, total: p.pagination.total_items };
+      },
+      true
+    );
+    const groups = /* @__PURE__ */ new Map();
+    for (const r of rows) {
+      const state = label(r.default_state, ["BLOCKING", "ALLOWING"]);
+      groups.set(state, (groups.get(state) ?? 0) + 1);
+    }
+    report.tables.push({
+      title: "Rule catalog defaults",
+      note: "These are not effective tenant policy settings.",
+      headers: ["Default state", "Rules"],
+      rows: [...groups].sort(([a], [b]) => a.localeCompare(b))
+    });
+  });
+  report.health = report.sources.every((s) => s.status === "unavailable") ? "unknown" : report.findings.some((f) => f.priority === "attention") ? "attention" : report.findings.length ? "review" : "no-findings";
+  report.generatedAt = now().toISOString();
+  return report;
+}
+
 // src/cli/renderer/aigateway.ts
 import chalk4 from "chalk";
 import { dump as yamlDump } from "js-yaml";
@@ -327,7 +382,7 @@ async function resolveOutput(command, opts, resolution = {}) {
   const globalOutput = globalIsExplicit ? rootCommand.opts().output : void 0;
   let configured;
   try {
-    configured = (await loadConfig()).defaultOutput;
+    configured = resolution.ignoreConfig ? process.env.PANW_CLI_OUTPUT : (await loadConfig()).defaultOutput;
   } catch (error) {
     if (process.env.PANW_CLI_OUTPUT !== void 0) configured = process.env.PANW_CLI_OUTPUT;
     else throw error;
@@ -2546,13 +2601,13 @@ function statusColor4(status) {
 function renderRuntimeConfigHeader() {
   ui.header("Prisma AIRS \u2014 Runtime Configuration", "Security profile and topic management");
 }
-function renderProfileList(profiles, format = "pretty") {
-  if (profiles.length === 0) {
+function renderProfileList(profiles2, format = "pretty") {
+  if (profiles2.length === 0) {
     ui.emptyList("profiles");
     return;
   }
   if (format !== "pretty") {
-    const rows = profiles.map((p) => ({
+    const rows = profiles2.map((p) => ({
       id: p.profileId,
       name: p.profileName,
       status: p.active ? "active" : "inactive",
@@ -2568,7 +2623,7 @@ function renderProfileList(profiles, format = "pretty") {
     return;
   }
   ui.section("Security Profiles:");
-  for (const p of profiles) {
+  for (const p of profiles2) {
     ui.dim(p.profileId);
     const status = p.active ? chalk9.green("active") : chalk9.yellow("inactive");
     const rev = p.revision != null ? chalk9.dim(` rev:${p.revision}`) : "";
@@ -2656,13 +2711,13 @@ function renderCleanupResult(results, format = "pretty") {
   }
   console.log();
 }
-function renderTopicList(topics, format = "pretty") {
-  if (topics.length === 0) {
+function renderTopicList(topics2, format = "pretty") {
+  if (topics2.length === 0) {
     ui.emptyList("topics");
     return;
   }
   if (format !== "pretty") {
-    const rows = topics.map((t) => ({
+    const rows = topics2.map((t) => ({
       id: t.topic_id ?? "",
       name: t.topic_name,
       revision: t.revision ?? "",
@@ -2683,7 +2738,7 @@ function renderTopicList(topics, format = "pretty") {
     return;
   }
   ui.section("Custom Topics:");
-  for (const t of topics) {
+  for (const t of topics2) {
     ui.dim(String(t.topic_id));
     const rev = t.revision != null ? chalk9.dim(` rev:${t.revision}`) : "";
     const desc = t.description ? chalk9.dim(` \u2014 ${t.description.slice(0, 80)}`) : "";
@@ -2885,13 +2940,13 @@ function renderCustomerAppConsumption(data, format = "pretty") {
   }
   console.log();
 }
-function renderDeploymentProfileList(profiles, format = "pretty") {
-  if (profiles.length === 0) {
+function renderDeploymentProfileList(profiles2, format = "pretty") {
+  if (profiles2.length === 0) {
     ui.emptyList("deployment profiles");
     return;
   }
   if (format !== "pretty") {
-    const rows = profiles.map((p) => ({
+    const rows = profiles2.map((p) => ({
       name: p.raw.dp_name ?? p.raw.profile_name ?? p.raw.name ?? "",
       status: p.raw.status ?? "",
       authCode: p.raw.auth_code ?? ""
@@ -2909,18 +2964,419 @@ function renderDeploymentProfileList(profiles, format = "pretty") {
     );
     return;
   }
-  ui.section("Deployment Profiles:");
-  for (const p of profiles) {
-    const name = p.raw.dp_name ?? p.raw.profile_name ?? p.raw.name ?? "unknown";
-    const status = p.raw.status;
-    const authCode = p.raw.auth_code;
-    const statusColor5 = status === "active" ? chalk9.green : chalk9.dim;
-    console.log(
-      `    ${name}${status ? `  ${statusColor5(status)}` : ""}${authCode ? `  ${chalk9.dim(authCode)}` : ""}`
-    );
+  ui.section("Deployment Profiles:");
+  for (const p of profiles2) {
+    const name = p.raw.dp_name ?? p.raw.profile_name ?? p.raw.name ?? "unknown";
+    const status = p.raw.status;
+    const authCode = p.raw.auth_code;
+    const statusColor5 = status === "active" ? chalk9.green : chalk9.dim;
+    console.log(
+      `    ${name}${status ? `  ${statusColor5(status)}` : ""}${authCode ? `  ${chalk9.dim(authCode)}` : ""}`
+    );
+  }
+  console.log();
+}
+
+// src/cli/commands/agentguard.ts
+var createClient = async () => new AgentGuardClient({ ...agentGuardClientOptions(await loadConfig()), numRetries: 0 });
+var integer = (value) => {
+  if (!/^\d+$/.test(value) || !Number.isSafeInteger(Number(value)))
+    usageError("Pagination requires a safe nonnegative integer");
+  return Number(value);
+};
+var pageOptions = (cmd) => cmd.option("--limit <n>", "Page size", integer, 10).option("--offset <n>", "Starting offset", integer, 0);
+var readOutput = (cmd) => cmd.option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml");
+var query = (schema, value) => {
+  const result = schema.safeParse(value);
+  if (!result.success)
+    usageError(
+      "Invalid AgentGuard query. Check pagination, UUID and ISO timestamps; statistics support 30_DAYS only."
+    );
+  return result.data;
+};
+function emit(value, format) {
+  if (format === "json") console.log(JSON.stringify(value, null, 2));
+  else if (format === "yaml") console.log(dump3(value, { noRefs: true, lineWidth: -1 }).trimEnd());
+  else {
+    const records = Object.values(value).find(Array.isArray);
+    if (records) {
+      const keys = [...new Set(records.flatMap((r) => Object.keys(r)))].filter((k) => !["description", "remediation"].includes(k)).slice(0, 9);
+      console.log(
+        formatOutput(
+          records,
+          keys.map((key) => ({ key, label: key.replaceAll("_", " ") })),
+          format === "pretty" ? "table" : format
+        )
+      );
+      ui.status(`Returned ${records.length} records; see JSON/YAML for pagination metadata.`);
+      return;
+    }
+    const rows = Object.entries(value).map(([key, v]) => ({
+      key,
+      value: typeof v === "object" ? JSON.stringify(v) : String(v)
+    }));
+    console.log(
+      formatOutput(
+        rows,
+        [
+          { key: "key", label: "Field" },
+          { key: "value", label: "Value" }
+        ],
+        format === "pretty" ? "table" : format
+      )
+    );
+  }
+}
+async function run(read, cmd) {
+  try {
+    const format = await resolveOutput(cmd, cmd.opts());
+    emit(await read(), format);
+  } catch (error) {
+    const status = error?.statusCode;
+    ui.error(
+      `AgentGuard request failed${typeof status === "number" && Number.isInteger(status) && status >= 400 && status <= 599 ? ` (HTTP ${status})` : ""}. Check credentials, query options and service availability. No upstream body is included.`
+    );
+    process.exitCode = 1;
+  }
+}
+async function inventory(read, options, pageCount = false) {
+  if (options.max !== void 0 && (!Number.isSafeInteger(options.max) || options.max < 0))
+    usageError("--max must be a safe nonnegative integer");
+  const rows = [];
+  const seen = /* @__PURE__ */ new Set();
+  let total;
+  const cap = options.all ? options.max || Number.MAX_SAFE_INTEGER : options.limit;
+  for (let page = 0; page < 1e3; page++) {
+    const limit = Math.min(options.limit, cap - rows.length);
+    const p = await read(options.offset + rows.length, limit);
+    total ??= p.total;
+    if (!pageCount && p.total !== total || p.rows.length > limit)
+      throw new Error("Unstable pagination");
+    for (const row of p.rows) {
+      if (!row.uuid || seen.has(row.uuid)) throw new Error("Repeated identity");
+      seen.add(row.uuid);
+      rows.push(row);
+    }
+    const next = options.offset + rows.length;
+    if (!pageCount && next > total && rows.length) throw new Error("Invalid total");
+    const complete = pageCount ? p.rows.length < limit : next >= total;
+    if (!options.all || complete || rows.length === cap)
+      return {
+        rows,
+        pagination: {
+          total_items: pageCount ? complete && options.offset === 0 ? rows.length : null : total,
+          returned: rows.length,
+          skip: options.offset,
+          next_offset: complete ? null : next,
+          truncated: !complete
+        }
+      };
+    if (!p.rows.length) throw new Error("Premature empty page");
+  }
+  throw new Error("Pagination safety limit reached");
+}
+function registerAgentGuardCommand(program) {
+  const group = program.command("agentguard").description("AI Supply Chain agent and skill scan telemetry (experimental, OAuth)");
+  const scans = group.command("scans").description("Inspect agent and skill scans (read-only)");
+  const list = readOutput(
+    pageOptions(
+      scans.command("list").description("List one page of scans; sensitive metadata is excluded")
+    )
+  ).option("--start <iso>", "Inclusive creation time start (ISO timestamp)").option("--end <iso>", "Creation time end (ISO timestamp)").action(async (opts) => {
+    const options = query(AgentGuardScanListOptionsSchema, {
+      skip: opts.offset,
+      limit: opts.limit,
+      start_time: opts.start,
+      end_time: opts.end,
+      isBackgroundRefresh: false
+    });
+    await run(async () => {
+      const client = await createClient();
+      const p = await inventory(async (skip, limit) => {
+        const page = await client.listScans({ ...options, skip, limit });
+        return { rows: page.scans, total: page.pagination.total_items };
+      }, opts);
+      return {
+        pagination: p.pagination,
+        scans: p.rows.map((r) => ({
+          uuid: r.uuid,
+          artifact_type: r.artifact_type,
+          status: r.status,
+          eval_outcome: r.eval_outcome,
+          created_at: r.created_at,
+          vulnerability_count: r.summary?.vulnerability_count ?? null,
+          attack_chain_count: r.summary?.attack_chain_count ?? null,
+          is_batch: r.is_batch,
+          parent_uuid: r.parent_uuid
+        }))
+      };
+    }, list);
+  });
+  const vulnerabilities = readOutput(
+    scans.command("vulnerabilities <scanUuid>").description("List finding metadata; --include-content explicitly reveals sensitive details")
+  ).option("--include-content", "Include source code, paths and finding text (sensitive)").action(async (id, opts) => {
+    query(z.string().uuid(), id);
+    await run(async () => {
+      const p = await (await createClient()).listScanVulnerabilities(id);
+      return {
+        pagination: p.pagination,
+        vulnerabilities: p.vulnerabilities.map(
+          (r) => opts.includeContent ? r : {
+            uuid: r.uuid,
+            scan_uuid: r.scan_uuid,
+            vulnerability_type: r.vulnerability_type,
+            attack_chain_count: r.attack_chain_count
+          }
+        ),
+        content_included: !!opts.includeContent
+      };
+    }, vulnerabilities);
+  });
+  const stats = readOutput(
+    group.command("stats").description("Read server rolling 30-day skill statistics")
+  ).option("--time-period <period>", "Verified period: 30_DAYS", "30_DAYS").action(async (opts) => {
+    const options = query(AgentGuardStatsOptionsSchema, { time_period: opts.timePeriod });
+    await run(async () => (await createClient()).getScanStats(options), stats);
+  });
+  const rulesGroup = group.command("rules").description("Rule catalog (not effective tenant policy)");
+  const rules = readOutput(
+    pageOptions(rulesGroup.command("list").description("List rule catalog defaults"))
+  ).action(async (opts) => {
+    const options = query(AgentGuardPageOptionsSchema, { skip: opts.offset, limit: opts.limit });
+    await run(async () => {
+      const client = await createClient();
+      const p = await inventory(
+        async (skip, limit) => {
+          const page = await client.listRules({ ...options, skip, limit });
+          return { rows: page.rules, total: page.pagination.total_items };
+        },
+        opts,
+        true
+      );
+      return { pagination: p.pagination, rules: p.rows };
+    }, rules);
+  });
+  group.command("report").description("Generate an aggregate-only 30-day HTML/Markdown report").option("--output <format>", "Deliverable: html (default) or markdown").option("--output-file <path>", "New file in CWD by default; - for stdout; never overwrite").option("--max-pages <n>", "Page budget per inventory (1\u2013100, 10 rows/page)", integer, 40).option("--title <text>", "Report title", "AgentGuard environment report").option("--strict", "Exit 1 after writing if any source is incomplete").action(async (opts) => {
+    const format = opts.output ?? program.opts().output ?? "html";
+    if (!["html", "markdown"].includes(format))
+      usageError("Report output must be html or markdown");
+    if (opts.maxPages < 1 || opts.maxPages > 100)
+      usageError("--max-pages must be between 1 and 100");
+    if (!opts.title.trim() || opts.title.length > 240)
+      usageError("--title must contain 1\u2013240 characters");
+    if (opts.outputFile !== void 0 && !opts.outputFile.trim())
+      usageError("--output-file cannot be empty");
+    const path3 = opts.outputFile === "-" ? void 0 : resolve(
+      opts.outputFile ?? `airs-agentguard-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID().slice(0, 8)}.${format === "html" ? "html" : "md"}`
+    );
+    try {
+      if (path3) {
+        const exists = await lstat(path3).catch((e) => {
+          if (e.code !== "ENOENT") throw e;
+          return void 0;
+        });
+        if (exists) throw new Error();
+      }
+      const data = await collectAgentGuardReport(await createClient(), {
+        title: opts.title,
+        maxPages: opts.maxPages
+      });
+      const output = format === "html" ? renderEnvironmentReportHtml(data) : renderEnvironmentReportMarkdown(data);
+      if (path3) {
+        await writeReportFile(path3, output);
+        ui.status(`Report \u2192 ${path3.replace(/[\p{Cc}\p{Cf}]/gu, "_")} (mode 0600)`);
+      } else
+        await new Promise(
+          (done, reject) => process.stdout.write(output, (error) => error ? reject(error) : done())
+        );
+      const incomplete = data.sources.filter((s) => s.status !== "complete").length;
+      if (incomplete)
+        ui.status(`${incomplete} source(s) incomplete; review the evidence section.`);
+      if (data.health === "unknown" || opts.strict && incomplete) process.exitCode = 1;
+    } catch {
+      ui.error(
+        "AgentGuard report failed. Check credentials and a writable, new output path. Existing files are never overwritten."
+      );
+      process.exitCode = 1;
+    }
+  });
+}
+
+// src/cli/commands/aigateway.ts
+import {
+  GatewayDefaultsInputSchema,
+  GatewayRateLimitInputSchema,
+  GatewayUsageLimitInputSchema
+} from "@cdot65/prisma-airs-sdk";
+
+// src/airs/aigateway.ts
+import {
+  AIGatewayChartFiltersSchema,
+  AIGatewayClient
+} from "@cdot65/prisma-airs-sdk";
+function toLimitArray(value) {
+  if (Array.isArray(value)) return value;
+  if (value !== null && typeof value === "object") return [value];
+  return [];
+}
+function normalizeWorkspace(raw) {
+  return {
+    id: raw.id,
+    slug: raw.slug,
+    name: raw.name,
+    icon: raw.icon,
+    description: raw.description,
+    createdAt: raw.created_at,
+    lastUpdatedAt: raw.last_updated_at,
+    isDefault: Boolean(raw.is_default),
+    status: raw.status,
+    scopeName: raw.scope_name
+  };
+}
+function normalizeWorkspaceDetail(raw) {
+  return {
+    ...normalizeWorkspace(raw),
+    defaults: raw.defaults,
+    usageLimits: toLimitArray(raw.usage_limits),
+    rateLimits: toLimitArray(raw.rate_limits),
+    securitySettings: raw.security_settings,
+    dataPlaneSecuritySettings: raw.data_plane_security_settings,
+    settings: raw.settings
+  };
+}
+function aiGatewayGrantHint(err) {
+  const status = err?.status ?? err?.statusCode;
+  if (status !== 403) return void 0;
+  const message = err instanceof Error ? err.message : String(err);
+  const grant = message.includes("AB03") ? "the service account is missing a workspace-scope grant (data plane, /ai_gw/v2)" : "the service account is missing a tenant-root admin grant (admin plane, /ai_gw/admin/v2)";
+  return `${grant}. SCM Access Management edits the existing role row by default \u2014 use "Add Role" so the account ends up with both role rows, not one row moved.`;
+}
+var SdkAiGatewayService = class {
+  client;
+  constructor(opts) {
+    this.client = new AIGatewayClient(opts);
+  }
+  async listWorkspaces(options) {
+    const response = await this.client.workspaces.list(options);
+    return response.data.map(normalizeWorkspace);
+  }
+  async listAllWorkspaces() {
+    const [active, archived] = await Promise.all([
+      this.client.workspaces.list({ plane: "admin" }),
+      this.client.workspaces.list({ plane: "admin", status: "archived" })
+    ]);
+    return [
+      ...active.data,
+      ...archived.data
+    ].map(normalizeWorkspace);
+  }
+  async getWorkspace(workspaceRef, options) {
+    try {
+      const raw = await this.client.workspaces.get(workspaceRef, options);
+      return normalizeWorkspaceDetail(raw);
+    } catch (err) {
+      const status = err.statusCode;
+      if (status !== 404) throw err;
+      const resolved = await this.resolveWorkspaceRef(workspaceRef, [
+        options?.plane ?? "data",
+        "admin"
+      ]);
+      if (resolved === workspaceRef) throw err;
+      const raw = await this.client.workspaces.get(resolved, options);
+      return normalizeWorkspaceDetail(raw);
+    }
+  }
+  async createWorkspace(request) {
+    const body = {
+      name: request.name,
+      scope_name: request.scopeName
+    };
+    if (request.description !== void 0) body.description = request.description;
+    if (request.icon !== void 0) body.icon = request.icon;
+    if (request.defaults !== void 0) body.defaults = request.defaults;
+    if (request.users !== void 0) body.users = request.users;
+    if (request.usageLimits !== void 0) body.usage_limits = request.usageLimits;
+    if (request.rateLimits !== void 0) body.rate_limits = request.rateLimits;
+    const created = await this.client.workspaces.create(body);
+    return this.refetchAfterWrite(created.id, created);
+  }
+  async updateWorkspace(workspaceRef, request) {
+    const ref = await this.resolveWorkspaceRef(workspaceRef, ["admin"]);
+    const body = {};
+    if (request.name !== void 0) body.name = request.name;
+    if (request.description !== void 0) body.description = request.description;
+    if (request.icon !== void 0) body.icon = request.icon;
+    if (request.defaults !== void 0) body.defaults = request.defaults;
+    if (request.usageLimits !== void 0) body.usage_limits = request.usageLimits;
+    if (request.rateLimits !== void 0) body.rate_limits = request.rateLimits;
+    await this.client.workspaces.update(ref, body);
+    return this.getWorkspace(ref, { plane: "admin" });
+  }
+  async deleteWorkspace(workspaceRef) {
+    const ref = await this.resolveWorkspaceRef(workspaceRef, ["admin"]);
+    await this.client.workspaces.delete(ref);
+  }
+  /**
+   * The API accepts only a UUID or slug as a workspace ref — a display name
+   * gets a misleading 400 AB01 ("No update fields provided") on writes.
+   * Match a user-supplied ref against the workspace list so name | slug |
+   * uuid all work. Unmatched refs pass through so the API's own error stands.
+   */
+  async resolveWorkspaceRef(ref, planes, requireSlug = false) {
+    for (const plane of planes) {
+      let rows;
+      try {
+        rows = await this.listWorkspaces({ plane });
+      } catch {
+        continue;
+      }
+      const byRef = rows.find((w) => w.id === ref || w.slug === ref);
+      if (byRef) return requireSlug ? byRef.slug : ref;
+      const byName = rows.filter((w) => w.name === ref);
+      if (byName.length > 1) {
+        throw new Error(
+          `workspace name '${ref}' is ambiguous (${byName.map((w) => w.slug).join(", ")}) \u2014 use a slug or UUID`
+        );
+      }
+      if (byName.length === 1) return byName[0].slug;
+    }
+    return ref;
+  }
+  async getTelemetryCost(opts) {
+    const { workspaceSlug: workspaceRef, days = 7, ...rawFilters } = opts;
+    const filters = AIGatewayChartFiltersSchema.parse(rawFilters);
+    if (!Number.isSafeInteger(days) || days <= 0)
+      throw new Error("Expected days to be a positive integer");
+    const workspaceSlug = await this.resolveWorkspaceRef(workspaceRef, ["data", "admin"], true);
+    const raw = await this.client.telemetry.cost({
+      workspaceSlug,
+      days,
+      ...filters
+    });
+    return {
+      workspaceSlug,
+      days,
+      totalCents: raw.data.total,
+      totalUsd: raw.data.total / 100,
+      avgCents: raw.data.avg,
+      avgUsd: raw.data.avg / 100,
+      quotaExceeded: raw.data.isQuotaExceeded,
+      records: raw.data.records.map((r) => ({
+        date: r.x,
+        costCents: r.y,
+        costUsd: r.y / 100
+      }))
+    };
+  }
+  /** Re-read after a write, falling back to the (partial) write response if the get fails. */
+  async refetchAfterWrite(workspaceRef, writeResponse) {
+    try {
+      return await this.getWorkspace(workspaceRef, { plane: "admin" });
+    } catch {
+      return normalizeWorkspaceDetail(writeResponse);
+    }
   }
-  console.log();
-}
+};
 
 // src/cli/confirm.ts
 async function confirmOrAbort(message, force, options = {}) {
@@ -2958,8 +3414,8 @@ import {
   GatewayInferenceInputCreateEmbeddingRequestSchema,
   GatewayInferenceInputCreateResponseSchema
 } from "@cdot65/prisma-airs-sdk";
-import { dump as dump3 } from "js-yaml";
-function integer(raw, flag) {
+import { dump as dump4 } from "js-yaml";
+function integer2(raw, flag) {
   const value = Number(raw);
   if (!Number.isSafeInteger(value) || value < 1)
     throw new CliUsageError(`${flag} must be a positive integer`);
@@ -2992,11 +3448,11 @@ async function inferenceBody(kind, prompt, opts, defaultModel) {
   body.model = model;
   if (opts.stream !== void 0) body.stream = opts.stream;
   if (opts.maxTokens !== void 0)
-    body[kind === "responses" ? "max_output_tokens" : "max_completion_tokens"] = integer(
+    body[kind === "responses" ? "max_output_tokens" : "max_completion_tokens"] = integer2(
       opts.maxTokens,
       "--max-tokens"
     );
-  if (opts.dimensions !== void 0) body.dimensions = integer(opts.dimensions, "--dimensions");
+  if (opts.dimensions !== void 0) body.dimensions = integer2(opts.dimensions, "--dimensions");
   if (opts.encoding !== void 0) body.encoding_format = opts.encoding;
   if (kind === "responses" && body.store === void 0) body.store = false;
   return body;
@@ -3031,7 +3487,7 @@ function registerAiGatewayInference(parent) {
       const outputError = (error) => controller.abort(error);
       let stream;
       let failed = false;
-      let failure;
+      let failure2;
       try {
         const format = await resolveOutput(command, opts, { allowed: ["pretty", "json", "yaml"] });
         const config = await loadConfig({ aiGwInferenceEndpoint: opts.endpoint });
@@ -3052,14 +3508,14 @@ function registerAiGatewayInference(parent) {
         const client = new AIGatewayInferenceClient({
           endpoint: config.aiGwInferenceEndpoint,
           apiKey: config.aiGwInferenceApiKey,
-          timeoutMs: integer(opts.timeout ?? "60000", "--timeout"),
+          timeoutMs: integer2(opts.timeout ?? "60000", "--timeout"),
           numRetries: 0
         });
         process.once("SIGINT", interrupt);
         process.once("SIGTERM", interrupt);
         process.stdout.on("error", outputError);
-        const write = (text2) => new Promise((resolve6, reject) => {
-          process.stdout.write(text2, (error) => error ? reject(error) : resolve6());
+        const write = (text2) => new Promise((resolve8, reject) => {
+          process.stdout.write(text2, (error) => error ? reject(error) : resolve8());
         });
         const requestOptions = { signal: controller.signal };
         const result = kind === "chat" ? await client.createChatCompletion(
@@ -3086,7 +3542,7 @@ function registerAiGatewayInference(parent) {
           }
           if (format === "pretty") await write("\n");
         } else {
-          const text2 = format === "yaml" ? dump3(result, { noRefs: true }).trimEnd() : format === "pretty" && kind !== "embeddings" ? responseText(result) : JSON.stringify(result, null, 2);
+          const text2 = format === "yaml" ? dump4(result, { noRefs: true }).trimEnd() : format === "pretty" && kind !== "embeddings" ? responseText(result) : JSON.stringify(result, null, 2);
           await write(`${text2}
 `);
           if ("status" in result && (result.status === "failed" || result.status === "incomplete"))
@@ -3094,7 +3550,7 @@ function registerAiGatewayInference(parent) {
         }
       } catch (error) {
         failed = true;
-        failure = error;
+        failure2 = error;
       } finally {
         await stream?.cancel();
         controller.abort();
@@ -3102,10 +3558,10 @@ function registerAiGatewayInference(parent) {
         process.removeListener("SIGTERM", interrupt);
         process.stdout.removeListener("error", outputError);
       }
-      if (failed && failure?.code !== "EPIPE") {
-        if (failure?.errorType === ErrorType.USER_REQUEST_PAYLOAD_ERROR)
-          usageError(failure instanceof Error ? failure.message : "Invalid inference options");
-        fail(failure);
+      if (failed && failure2?.code !== "EPIPE") {
+        if (failure2?.errorType === ErrorType.USER_REQUEST_PAYLOAD_ERROR)
+          usageError(failure2 instanceof Error ? failure2.message : "Invalid inference options");
+        fail(failure2);
       }
     });
   }
@@ -3224,7 +3680,7 @@ function headersToRecord(headers) {
   }
   return headers;
 }
-function installDebugLogger(logPath) {
+function installDebugLogger(logPath, options = {}) {
   mkdirSync(dirname(logPath), { recursive: true, mode: 448 });
   writeFileSync(logPath, "", { encoding: "utf8", mode: 384, flag: "wx" });
   const originalFetch = globalThis.fetch;
@@ -3239,7 +3695,7 @@ function installDebugLogger(logPath) {
     if (!isAirsUrl(url) && !inference) {
       return originalFetch(input, init2);
     }
-    const dashboard = /\/v1\/mgmt\/(dashboard\/|reports\/scancontent(?:\?|$))/.test(url);
+    const dashboard = options.omitBodies || /\/v1\/mgmt\/(dashboard\/|reports\/scancontent(?:\?|$))/.test(url) || /\/aiag\//.test(new URL(url).pathname);
     const method = init2?.method ?? (input instanceof Request ? input.method : "GET");
     const reqHeaders = redactHeaders(rawHeaders);
     const loggedUrl = redactUrl(url);
@@ -3317,7 +3773,7 @@ function installDebugLogger(logPath) {
 // src/cli/commands/aigateway/shared.ts
 import { open, readFile as readFile2, unlink } from "fs/promises";
 import { AIGatewayClient as AIGatewayClient2 } from "@cdot65/prisma-airs-sdk";
-import { dump as dump4, load } from "js-yaml";
+import { dump as dump5, load } from "js-yaml";
 async function defaultClientFactory() {
   const config = await loadConfig();
   return new AIGatewayClient2(aiGatewayClientOptions(config));
@@ -3398,7 +3854,7 @@ function renderGatewayList(items, format, label) {
     return;
   }
   if (format === "yaml") {
-    console.log(dump4(items, { noRefs: true, lineWidth: -1 }).trimEnd());
+    console.log(dump5(items, { noRefs: true, lineWidth: -1 }).trimEnd());
     return;
   }
   if (items.length === 0) {
@@ -3416,7 +3872,7 @@ function renderGatewayDetail(value, format) {
     return;
   }
   if (format === "yaml") {
-    console.log(dump4(item, { noRefs: true, lineWidth: -1 }).trimEnd());
+    console.log(dump5(item, { noRefs: true, lineWidth: -1 }).trimEnd());
     return;
   }
   const rows = Object.entries(item).map(([key, raw]) => ({
@@ -3433,20 +3889,20 @@ function renderGatewayDetail(value, format) {
   );
   if (rendered) console.log(rendered);
 }
-async function runList(command, opts, label, load2) {
+async function runList(command, opts, label, load3) {
   try {
     const format = await resolveOutput(command, opts);
     const client = await createAiGatewayClient();
-    renderGatewayList(responseItems(await load2(client)), format, label);
+    renderGatewayList(responseItems(await load3(client)), format, label);
   } catch (error) {
     failAiGateway(error);
   }
 }
-async function runDetail(command, opts, load2) {
+async function runDetail(command, opts, load3) {
   try {
     const format = await resolveOutput(command, opts);
     const client = await createAiGatewayClient();
-    renderGatewayDetail(await load2(client), format);
+    renderGatewayDetail(await load3(client), format);
   } catch (error) {
     failAiGateway(error);
   }
@@ -4747,11 +5203,11 @@ function parseNonnegativePage(value) {
 }
 
 // src/cli/commands/aigateway-report.ts
-import { lstat } from "fs/promises";
-import { resolve } from "path";
+import { lstat as lstat2 } from "fs/promises";
+import { resolve as resolve2 } from "path";
 import { AIGatewayClient as AIGatewayClient3 } from "@cdot65/prisma-airs-sdk";
-import { z } from "zod";
-import { randomUUID } from "crypto";
+import { z as z2 } from "zod";
+import { randomUUID as randomUUID2 } from "crypto";
 function registerAiGatewayReportCommand(aigateway) {
   const command = aigateway.command("report").alias("dashboard").description("Generate an AI Gateway environment report (read-only)").requiredOption("--workspace <ref>", "Workspace slug, UUID, or unique display name").option("--days <n>", "Rolling window in days (default: 1)", "1").option("--start <iso>", "Explicit ISO-8601 start; requires --end").option("--end <iso>", "Explicit ISO-8601 end; requires --start").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
     "--output-file <path>",
@@ -4778,21 +5234,21 @@ function registerAiGatewayReportCommand(aigateway) {
       usageError("Use --days or --start/--end, not both");
     const end = opts.end ? new Date(opts.end) : /* @__PURE__ */ new Date();
     const start = opts.start ? new Date(opts.start) : new Date(end.getTime() - Number(opts.days) * 864e5);
-    const iso = z.string().datetime({ offset: true });
+    const iso = z2.string().datetime({ offset: true });
     if (opts.start && (!iso.safeParse(opts.start).success || !iso.safeParse(opts.end).success) || !Number.isFinite(start.getTime()) || !Number.isFinite(end.getTime()) || start >= end)
       usageError("Provide a valid increasing ISO-8601 window with timezone");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
     if (opts.outputFile !== void 0 && !opts.outputFile.trim())
       usageError("--output-file cannot be empty");
-    const defaultName = `airs-aigateway-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
-    const outputPath = opts.outputFile === "-" ? void 0 : resolve(opts.outputFile ?? defaultName);
+    const defaultName = `airs-aigateway-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID2().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
+    const outputPath = opts.outputFile === "-" ? void 0 : resolve2(opts.outputFile ?? defaultName);
     try {
       if (outputPath) {
-        const existing = await lstat(outputPath).catch((error) => {
+        const existing = await lstat2(outputPath).catch((error) => {
           if (error.code !== "ENOENT") throw error;
           return void 0;
         });
@@ -4806,7 +5262,7 @@ function registerAiGatewayReportCommand(aigateway) {
       ui.status("Collecting AI Gateway statistics and current configuration (read-only)...");
       const report = await collectGatewayEnvironmentReport(client, {
         title: opts.title,
-        maxPages,
+        maxPages: maxPages2,
         workspace: opts.workspace,
         tsgId: config.mgmtTsgId ?? process.env.PANW_AI_GW_TSG_ID ?? "",
         start,
@@ -5339,7 +5795,7 @@ function registerConfigCommand(program) {
 }
 
 // src/cli/commands/doctor.ts
-import { randomUUID as randomUUID2 } from "crypto";
+import { randomUUID as randomUUID3 } from "crypto";
 import { readFile as readFile4 } from "fs/promises";
 import { init, Scanner } from "@cdot65/prisma-airs-sdk";
 var DOCTOR_TIMEOUT_MS = 5e3;
@@ -5437,8 +5893,8 @@ async function withTimeout(promise, ms) {
   try {
     return await Promise.race([
       promise,
-      new Promise((resolve6) => {
-        timer = setTimeout(() => resolve6(TIMED_OUT), ms);
+      new Promise((resolve8) => {
+        timer = setTimeout(() => resolve8(TIMED_OUT), ms);
       })
     ]);
   } finally {
@@ -5593,7 +6049,7 @@ async function defaultScannerProbe() {
   const config = await loadConfig();
   init(runtimeInitOptions(config));
   const scanner = new Scanner();
-  return scanner.queryByScanIds([randomUUID2()]);
+  return scanner.queryByScanIds([randomUUID3()]);
 }
 async function defaultMgmtProbe() {
   const config = await loadConfig();
@@ -5603,8 +6059,8 @@ async function defaultMgmtProbe() {
     tsgId: config.mgmtTsgId,
     tokenEndpoint: config.mgmtTokenEndpoint
   });
-  const topics = await service.listTopics();
-  return topics.length;
+  const topics2 = await service.listTopics();
+  return topics2.length;
 }
 async function defaultAiGwProbe() {
   const config = await loadConfig();
@@ -5698,6 +6154,21 @@ function registerDoctorCommand(program) {
 // src/cli/commands/modelsecurity.ts
 import { execFileSync, spawn } from "child_process";
 import * as fs from "fs";
+import { z as z3 } from "zod";
+function supplyChainWindow(opts) {
+  const parsed = z3.object({
+    start: z3.string().datetime({ offset: true }).optional(),
+    end: z3.string().datetime({ offset: true }).optional(),
+    modelVersion: z3.string().uuid().optional()
+  }).refine((v) => !v.start || !v.end || Date.parse(v.start) <= Date.parse(v.end)).safeParse(opts);
+  if (!parsed.success)
+    usageError("Use valid ISO timestamps with start <= end and a valid model-version UUID.");
+  return {
+    startTime: parsed.data.start,
+    endTime: parsed.data.end,
+    modelVersionUuid: parsed.data.modelVersion
+  };
+}
 var VALID_EXTRAS = ["all", "aws", "gcp", "azure", "artifactory", "gitlab"];
 function hasBin(bin) {
   try {
@@ -5707,13 +6178,13 @@ function hasBin(bin) {
     return false;
   }
 }
-function run(bin, args, label) {
-  return new Promise((resolve6, reject) => {
+function run2(bin, args, label) {
+  return new Promise((resolve8, reject) => {
     const child = spawn(bin, args, { stdio: "inherit" });
     child.on("error", (err) => reject(new Error(`Failed to start ${bin}: ${err.message}`)));
     child.on("close", (code) => {
       if (code !== 0) reject(new Error(`${label} failed with exit code ${code}`));
-      else resolve6();
+      else resolve8();
     });
   });
 }
@@ -5847,7 +6318,7 @@ function registerModelSecurityCommand(program) {
       }
       for (const step of steps) {
         ui.status(`\u2192 ${step.label}`);
-        await run(step.bin, step.args, step.label);
+        await run2(step.bin, step.args, step.label);
       }
       ui.success("model-security-client installed successfully.");
       if (useUv) {
@@ -6003,7 +6474,7 @@ function registerModelSecurityCommand(program) {
     }
   });
   const scans = ms.command("scans").description("Model security scan operations");
-  const scansList = scans.command("list").description("List model security scans").option("--eval-outcome <outcome>", "Filter by eval outcome").option("--source-type <type>", "Filter by source type").option("--scan-origin <origin>", "Filter by scan origin").option("--search <query>", "Search scans").option("--limit <n>", "Max results", "20").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
+  const scansList = scans.command("list").description("List model security scans").option("--model-version <uuid>", "Filter scans by model version UUID").option("--start <iso>", "Creation time start (ISO timestamp)").option("--end <iso>", "Creation time end (ISO timestamp)").option("--eval-outcome <outcome>", "Filter by eval outcome").option("--source-type <type>", "Filter by source type").option("--scan-origin <origin>", "Filter by scan origin").option("--search <query>", "Search scans").option("--limit <n>", "Max results", "20").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
     "after",
     examples(
       "airs model-security scans list",
@@ -6017,6 +6488,7 @@ function registerModelSecurityCommand(program) {
       const service = await createService2();
       const listOptions = {
         evalOutcome: opts.evalOutcome,
+        ...supplyChainWindow(opts),
         sourceType: opts.sourceType,
         scanOrigin: opts.scanOrigin,
         search: opts.search,
@@ -6111,7 +6583,7 @@ function registerModelSecurityCommand(program) {
     }
   });
   const models = ms.command("models").description("Browse the scanned model catalog (read-only)");
-  const modelsList = models.command("list").description("List models in the catalog").option("--search <text>", "Filter by search text").option("--search-query <text>", "Filter by model UUID or name").option("--sort-field <field>", "Sort field: created_at, updated_at").option("--sort-order <order>", "Sort order: asc, desc").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText("after", examples("airs model-security models list")).action(async (opts) => {
+  const modelsList = models.command("list").description("List models in the catalog").option("--start <iso>", "Creation time start (ISO timestamp)").option("--end <iso>", "Creation time end (ISO timestamp)").option("--search <text>", "Filter by search text").option("--search-query <text>", "Filter by model UUID or name").option("--sort-field <field>", "Sort field: created_at, updated_at").option("--sort-order <order>", "Sort order: asc, desc").option("--limit <n>", "Max results").option("--offset <n>", "Starting offset").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText("after", examples("airs model-security models list")).action(async (opts) => {
     try {
       const fmt = await resolveOutput(modelsList, opts);
       if (fmt === "pretty") renderModelSecurityHeader();
@@ -6119,6 +6591,7 @@ function registerModelSecurityCommand(program) {
       const listOptions = {
         search: opts.search,
         searchQuery: opts.searchQuery,
+        ...supplyChainWindow(opts),
         sortField: opts.sortField,
         sortOrder: opts.sortOrder,
         limit: opts.limit ? Number.parseInt(opts.limit, 10) : void 0,
@@ -6292,10 +6765,10 @@ async function backupTargets(opts) {
 }
 
 // src/cli/commands/redteam-report.ts
-import { lstat as lstat2 } from "fs/promises";
-import { resolve as resolve2 } from "path";
+import { lstat as lstat3 } from "fs/promises";
+import { resolve as resolve3 } from "path";
 import { RedTeamClient } from "@cdot65/prisma-airs-sdk";
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 function registerRedTeamReportCommand(redteam, scanReport) {
   const command = redteam.command("report [jobId]").alias("dashboard").description("Generate an environment report, or view an individual scan report by job ID").option("--attacks", "Individual scan only: include attack list", false).option("--severity <level>", "Individual scan only: filter attacks by severity").option("--limit <n>", "Individual scan only: max attacks to show", "20").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
     "--output-file <path>",
@@ -6321,18 +6794,18 @@ function registerRedTeamReportCommand(redteam, scanReport) {
     const format = opts.output ?? command.parent?.parent?.opts().output ?? "html";
     if (format !== "html" && format !== "markdown")
       usageError("Report output must be html or markdown");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
     if (opts.outputFile !== void 0 && !opts.outputFile.trim())
       usageError("--output-file cannot be empty");
-    const defaultName = `airs-redteam-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID3().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
-    const outputPath = opts.outputFile === "-" ? void 0 : resolve2(opts.outputFile ?? defaultName);
+    const defaultName = `airs-redteam-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID4().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
+    const outputPath = opts.outputFile === "-" ? void 0 : resolve3(opts.outputFile ?? defaultName);
     try {
       if (outputPath) {
-        const existing = await lstat2(outputPath).catch((error) => {
+        const existing = await lstat3(outputPath).catch((error) => {
           if (error.code !== "ENOENT") throw error;
           return void 0;
         });
@@ -6346,7 +6819,7 @@ function registerRedTeamReportCommand(redteam, scanReport) {
       ui.status("Collecting Red Team statistics and current configuration (read-only)...");
       const report = await collectRedTeamEnvironmentReport(client, {
         title: opts.title,
-        maxPages
+        maxPages: maxPages2
       });
       const rendered = format === "html" ? renderRedTeamReportHtml(report) : renderRedTeamReportMarkdown(report);
       if (outputPath) {
@@ -7605,9 +8078,9 @@ function registerRedteamCommand(program) {
 }
 
 // src/cli/commands/runtime.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 import * as fs5 from "fs";
-import { readFile as readFile10 } from "fs/promises";
+import { readFile as readFile11 } from "fs/promises";
 import { basename as basename3, dirname as dirname3, join as join3, resolve as resolvePath } from "path";
 import chalk11 from "chalk";
 
@@ -7671,9 +8144,9 @@ function buildDataProtection(flags) {
   let hasAny = false;
   if (flags.dlpAction) {
     const dld = { action: flags.dlpAction };
-    const profiles = parseList(flags.dlpProfiles);
-    if (profiles) {
-      dld.member = profiles.map((text2) => ({ text: text2 }));
+    const profiles2 = parseList(flags.dlpProfiles);
+    if (profiles2) {
+      dld.member = profiles2.map((text2) => ({ text: text2 }));
     }
     if (flags.maskDataInline != null) {
       dld["mask-data-inline"] = flags.maskDataInline;
@@ -7853,7 +8326,7 @@ function mergeProfilePolicy(existing, overrides) {
 }
 
 // src/cli/bulk-scan-lock.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 import * as fs3 from "fs/promises";
 function errorCode(error) {
   return error?.code;
@@ -7884,7 +8357,7 @@ function processIsAlive(pid) {
   }
 }
 async function installLock(lockPath, record) {
-  const candidate = `${lockPath}.candidate-${process.pid}-${randomUUID4()}`;
+  const candidate = `${lockPath}.candidate-${process.pid}-${randomUUID5()}`;
   try {
     await fs3.writeFile(candidate, JSON.stringify(record), {
       encoding: "utf-8",
@@ -7902,7 +8375,7 @@ async function acquireBulkScanLock(statePath) {
     version: 1,
     pid: process.pid,
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-    token: randomUUID4()
+    token: randomUUID5()
   };
   for (let attempt = 0; attempt < 2; attempt++) {
     try {
@@ -7938,32 +8411,32 @@ async function acquireBulkScanLock(statePath) {
 }
 
 // src/cli/bulk-scan-state.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 import * as fs4 from "fs/promises";
 import * as path2 from "path";
-import { z as z2 } from "zod";
-var BulkScanResultSchema = z2.object({
-  index: z2.number().int().nonnegative(),
-  reqId: z2.number().int().nonnegative(),
-  prompt: z2.string(),
-  response: z2.string().optional(),
-  scanId: z2.string(),
-  reportId: z2.string(),
-  action: z2.enum(["allow", "block", "failed"]),
-  category: z2.string(),
-  triggered: z2.boolean(),
-  detections: z2.record(z2.boolean()),
-  error: z2.string().optional()
+import { z as z4 } from "zod";
+var BulkScanResultSchema = z4.object({
+  index: z4.number().int().nonnegative(),
+  reqId: z4.number().int().nonnegative(),
+  prompt: z4.string(),
+  response: z4.string().optional(),
+  scanId: z4.string(),
+  reportId: z4.string(),
+  action: z4.enum(["allow", "block", "failed"]),
+  category: z4.string(),
+  triggered: z4.boolean(),
+  detections: z4.record(z4.boolean()),
+  error: z4.string().optional()
 });
-var BulkScanItemSchema = z2.object({
-  index: z2.number().int().nonnegative(),
-  reqId: z2.number().int().nonnegative(),
-  prompt: z2.string(),
-  status: z2.enum(["pending", "submitting", "submitted", "complete", "failed", "ambiguous"]),
-  scanId: z2.string().min(1).optional(),
-  receiptReportId: z2.string().optional(),
+var BulkScanItemSchema = z4.object({
+  index: z4.number().int().nonnegative(),
+  reqId: z4.number().int().nonnegative(),
+  prompt: z4.string(),
+  status: z4.enum(["pending", "submitting", "submitted", "complete", "failed", "ambiguous"]),
+  scanId: z4.string().min(1).optional(),
+  receiptReportId: z4.string().optional(),
   result: BulkScanResultSchema.optional(),
-  error: z2.string().optional()
+  error: z4.string().optional()
 }).superRefine((item, ctx) => {
   if (item.reqId !== item.index) {
     ctx.addIssue({ code: "custom", message: "reqId must match the stable input index" });
@@ -8001,15 +8474,15 @@ var BulkScanItemSchema = z2.object({
     }
   }
 });
-var BulkScanStateSchema = z2.object({
-  version: z2.literal(2),
-  profile: z2.string().min(1),
-  sessionId: z2.string().optional(),
-  outputFile: z2.string().min(1),
-  batchSize: z2.number().int().positive().max(Number.MAX_SAFE_INTEGER),
-  createdAt: z2.string().datetime(),
-  updatedAt: z2.string().datetime(),
-  items: z2.array(BulkScanItemSchema).min(1)
+var BulkScanStateSchema = z4.object({
+  version: z4.literal(2),
+  profile: z4.string().min(1),
+  sessionId: z4.string().optional(),
+  outputFile: z4.string().min(1),
+  batchSize: z4.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+  createdAt: z4.string().datetime(),
+  updatedAt: z4.string().datetime(),
+  items: z4.array(BulkScanItemSchema).min(1)
 }).superRefine((state, ctx) => {
   const indices = /* @__PURE__ */ new Set();
   for (const [position, item] of state.items.entries()) {
@@ -8035,8 +8508,8 @@ async function saveBulkScanState(state, dir, filePath) {
   }
   await fs4.mkdir(dir, { recursive: true, mode: 448 });
   if (!filePath) await fs4.chmod(dir, 448);
-  const target = filePath ?? path2.join(dir, `${state.createdAt.replace(/[:.]/g, "-")}-${randomUUID5()}.bulk-scan.json`);
-  const temporary = `${target}.tmp-${process.pid}-${randomUUID5()}`;
+  const target = filePath ?? path2.join(dir, `${state.createdAt.replace(/[:.]/g, "-")}-${randomUUID6()}.bulk-scan.json`);
+  const temporary = `${target}.tmp-${process.pid}-${randomUUID6()}`;
   try {
     await fs4.writeFile(temporary, JSON.stringify(state, null, 2), {
       encoding: "utf-8",
@@ -9059,11 +9532,655 @@ function registerDlpCommands(runtime) {
   register3(dlp);
 }
 
+// src/cli/commands/profile-transfer.ts
+import { randomUUID as randomUUID7 } from "crypto";
+import { readFile as readFile9, stat } from "fs/promises";
+import { extname, resolve as resolve5 } from "path";
+import { AISecSDKException as AISecSDKException2, ManagementClient } from "@cdot65/prisma-airs-sdk";
+import { dump as dump6, JSON_SCHEMA, load as load2 } from "js-yaml";
+import { ZodError } from "zod";
+
+// src/backup/runtime-profiles.ts
+import {
+  CreateSecurityProfileRequestSchema,
+  CustomTopicSchema,
+  PolicySchema,
+  SecurityProfileSchema
+} from "@cdot65/prisma-airs-sdk";
+import { z as z5 } from "zod";
+var RuntimeProfilesBackupSchema = z5.object({
+  version: z5.literal(1),
+  resourceType: z5.literal("runtime-security-profiles"),
+  exportedAt: z5.string().datetime({ offset: true }),
+  source: z5.object({ tsgId: z5.string().min(1) }).strict(),
+  profiles: z5.array(SecurityProfileSchema).min(1).max(1e4),
+  topics: z5.array(CustomTopicSchema).max(1e4)
+}).strict();
+function object(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function pagesLimit(value) {
+  if (!Number.isSafeInteger(value) || value < 1 || value > 1e3)
+    throw new Error("maxPages must be an integer from 1 to 1000");
+}
+async function offsetPages(fetch, maxPages2) {
+  pagesLimit(maxPages2);
+  const items = [];
+  let offset = 0;
+  for (let page = 0; page < maxPages2; page++) {
+    const result = await fetch(offset);
+    items.push(...result.items);
+    if (items.length > 1e4) throw new Error("Inventory exceeds the 10000-record safety limit");
+    if (result.next === void 0 || result.next === 0) return items;
+    if (!result.items.length || !Number.isSafeInteger(result.next) || result.next <= offset)
+      throw new Error("Inventory pagination did not advance");
+    offset = result.next;
+  }
+  throw new Error("Inventory is incomplete: increase --max-pages before exporting or restoring");
+}
+function latestProfiles(profiles2) {
+  const names = /* @__PURE__ */ new Map();
+  const revisions = /* @__PURE__ */ new Set();
+  for (const profile of profiles2) {
+    assertName(profile.profile_name);
+    const identity2 = JSON.stringify([profile.profile_name, profile.profile_id, profile.revision]);
+    if (revisions.has(identity2)) throw new Error("Inventory contains repeated profile records");
+    revisions.add(identity2);
+    const prior = names.get(profile.profile_name);
+    if (prior && prior.profile_id !== profile.profile_id)
+      throw new Error(`Ambiguous profile name: ${profile.profile_name}`);
+    if (!prior || (profile.revision ?? 0) > (prior.revision ?? 0))
+      names.set(profile.profile_name, profile);
+  }
+  return [...names.values()].sort((a, b) => a.profile_name.localeCompare(b.profile_name));
+}
+function assertName(name) {
+  if (!name.trim() || [...name].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+    throw new Error("Profile/topic names must be nonempty and contain no control characters");
+}
+function assertTenant(profiles2, tsgId) {
+  if (profiles2.some((profile) => profile.tsg_id != null && String(profile.tsg_id) !== tsgId))
+    throw new Error("Destination/source profile tenant identity does not match the selected TSG");
+}
+async function profiles(api, maxPages2) {
+  return latestProfiles(
+    await offsetPages(async (offset) => {
+      const page = await api.profiles.list({ offset, limit: 100, latest: true });
+      return { items: page.ai_profiles, next: page.next_offset };
+    }, maxPages2)
+  );
+}
+async function topics(api, maxPages2) {
+  return offsetPages(async (offset) => {
+    const page = await api.topics.list({ offset, limit: 100 });
+    return { items: page.custom_topics, next: page.next_offset };
+  }, maxPages2);
+}
+function topicReferences(policy) {
+  const refs = [];
+  const visit = (value) => {
+    if (Array.isArray(value)) {
+      value.forEach(visit);
+      return;
+    }
+    if (!object(value)) return;
+    if ("topic_id" in value) {
+      if (typeof value.topic_id !== "string" || typeof value.topic_name !== "string" || !Number.isSafeInteger(value.revision) || Number(value.revision) < 0)
+        throw new Error("Invalid topic identity in profile policy");
+      refs.push(value);
+    }
+    Object.values(value).forEach(visit);
+  };
+  visit(policy);
+  return refs;
+}
+function topicKey(ref) {
+  return JSON.stringify([ref.topic_id, ref.revision]);
+}
+async function backupRuntimeProfiles(api, tsgId, options = {}) {
+  if (!tsgId) throw new Error("Source TSG ID is required");
+  const maxPages2 = options.maxPages ?? 100;
+  let selected = await profiles(api, maxPages2);
+  assertTenant(selected, tsgId);
+  if (options.profile)
+    selected = selected.filter(
+      (p) => p.profile_id === options.profile || p.profile_name === options.profile
+    );
+  if (!selected.length) throw new Error("No matching profiles to back up");
+  if (options.profile && selected.length !== 1) throw new Error("Ambiguous profile selector");
+  for (const profile of selected) {
+    if (!profile.policy) throw new Error(`Profile has no policy: ${profile.profile_name}`);
+    PolicySchema.parse(profile.policy);
+  }
+  const refs = selected.flatMap((profile) => topicReferences(profile.policy));
+  const definitions = refs.length ? await topics(api, maxPages2) : [];
+  const needed = /* @__PURE__ */ new Map();
+  for (const ref of refs) {
+    const matches = definitions.filter((topic) => topicKey(topic) === topicKey(ref));
+    if (matches.length !== 1 || matches[0].topic_name !== ref.topic_name)
+      throw new Error(
+        `Cannot export the exact referenced topic revision: ${ref.topic_name} revision ${ref.revision}`
+      );
+    needed.set(topicKey(ref), matches[0]);
+  }
+  return RuntimeProfilesBackupSchema.parse({
+    version: 1,
+    resourceType: "runtime-security-profiles",
+    exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    source: { tsgId },
+    profiles: selected,
+    topics: [...needed.values()]
+  });
+}
+function sameTopic(a, b) {
+  return a.description === b.description && JSON.stringify(a.examples) === JSON.stringify(b.examples) && (a.active ?? true) === (b.active ?? true);
+}
+function dlpReferences(policy) {
+  if (!object(policy)) return [];
+  const refs = [];
+  for (const entry of Array.isArray(policy["dlp-data-profiles"]) ? policy["dlp-data-profiles"] : []) {
+    if (!object(entry) || typeof entry.name !== "string")
+      throw new Error("Invalid embedded DLP reference");
+    refs.push({ value: entry, name: entry.name, kind: "embedded" });
+  }
+  for (const entry of Array.isArray(policy["ai-security-profiles"]) ? policy["ai-security-profiles"] : []) {
+    if (!object(entry) || !object(entry["model-configuration"])) continue;
+    const protection = entry["model-configuration"]["data-protection"];
+    if (!object(protection) || !object(protection["data-leak-detection"])) continue;
+    const members = protection["data-leak-detection"].member;
+    if (!Array.isArray(members)) continue;
+    for (const member of members) {
+      if (!object(member) || typeof member.text !== "string") throw new Error("Invalid DLP member");
+      refs.push({ value: member, name: member.text, kind: "member" });
+    }
+  }
+  return refs;
+}
+function assertKnownPolicyReferences(policy) {
+  const known = new Map([
+    ...topicReferences(policy).map((ref) => [ref, ["topic_id"]]),
+    ...dlpReferences(policy).map((ref) => [
+      ref.value,
+      ref.kind === "embedded" ? ["id", "uuid"] : ["id"]
+    ])
+  ]);
+  const visit = (value, path3) => {
+    if (Array.isArray(value)) {
+      value.forEach((v, i) => {
+        visit(v, `${path3}[${i}]`);
+      });
+      return;
+    }
+    if (!object(value)) return;
+    for (const [key, child] of Object.entries(value)) {
+      if (child !== null && child !== "" && /(?:^|[-_])(id|uuid)$|(?:Id|ID|Uuid|UUID)$/.test(key) && !known.get(value)?.includes(key))
+        throw new Error(`Unsupported cross-tenant policy reference at ${path3}.${key}`);
+      visit(child, `${path3}.${key}`);
+    }
+  };
+  visit(policy, "policy");
+}
+async function dataProfiles(api, maxPages2) {
+  const items = [];
+  for (let page = 0; page < maxPages2; page++) {
+    const result = await api.dataProfiles.list({ page, size: 100 });
+    items.push(...result.content);
+    if (items.length > 1e4) throw new Error("DLP inventory exceeds the safety limit");
+    const last = result.last ?? (result.totalPages !== void 0 ? page + 1 >= result.totalPages : result.content.length < 100);
+    if (last) return items;
+    if (!result.content.length) throw new Error("DLP inventory pagination did not advance");
+  }
+  throw new Error("DLP inventory is incomplete; increase --max-pages");
+}
+async function planRuntimeProfilesRestore(api, input, destinationTsgId, options = {}) {
+  const backup = RuntimeProfilesBackupSchema.parse(input);
+  if (!destinationTsgId) throw new Error("Destination TSG ID is required");
+  const maxPages2 = options.maxPages ?? 100;
+  pagesLimit(maxPages2);
+  const prefix = options.namePrefix ?? "";
+  if (prefix.length > 64 || [...prefix].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+    throw new Error("Invalid --name-prefix");
+  const conflict = options.onConflict ?? "error";
+  if (!["error", "skip", "update"].includes(conflict)) throw new Error("Invalid conflict policy");
+  const selected = latestProfiles(backup.profiles);
+  assertTenant(selected, backup.source.tsgId);
+  if (selected.length !== backup.profiles.length)
+    throw new Error("Backup contains duplicate profile names/revisions");
+  const crossTenant = backup.source.tsgId !== destinationTsgId;
+  for (const profile of selected) {
+    if (!profile.policy) throw new Error("Backup profile has no policy");
+    CreateSecurityProfileRequestSchema.parse({
+      profile_name: `${prefix}${profile.profile_name}`,
+      active: profile.active,
+      policy: profile.policy
+    });
+    if (crossTenant) assertKnownPolicyReferences(profile.policy);
+  }
+  const existing = await profiles(api, maxPages2);
+  assertTenant(existing, destinationTsgId);
+  const profilePlans = selected.map((source) => {
+    const name = `${prefix}${source.profile_name}`;
+    const match = existing.find((p) => p.profile_name === name);
+    if (match && conflict === "error")
+      throw new Error(
+        `Destination profile already exists: ${name}; choose --on-conflict skip or update`
+      );
+    if (match && !match.profile_id) throw new Error("Destination profile has no identity");
+    return {
+      source: structuredClone(source),
+      name,
+      existing: match,
+      action: match ? conflict === "skip" ? "skip" : "update" : "create"
+    };
+  });
+  const changing = profilePlans.filter((p) => p.action !== "skip");
+  const refs = changing.flatMap((p) => topicReferences(p.source.policy));
+  const targetTopics = refs.length ? await topics(api, maxPages2) : [];
+  const topicPlans = /* @__PURE__ */ new Map();
+  const topicNames = /* @__PURE__ */ new Map();
+  for (const ref of refs) {
+    const key = topicKey(ref);
+    if (topicPlans.has(key)) continue;
+    const definitions = backup.topics.filter(
+      (topic) => topicKey(topic) === key && topic.topic_name === ref.topic_name
+    );
+    if (definitions.length !== 1)
+      throw new Error(`Backup lacks an unambiguous topic definition: ${ref.topic_name}`);
+    const source = definitions[0];
+    const name = `${prefix}${source.topic_name}`;
+    assertName(name);
+    if (topicNames.has(name) && topicNames.get(name) !== key)
+      throw new Error(
+        `Multiple source revisions use topic name ${name}; split the backup by profile/revision before restoring`
+      );
+    topicNames.set(name, key);
+    const matches = targetTopics.filter((t) => t.topic_name === name).sort((a, b) => b.revision - a.revision);
+    const match = matches[0];
+    if (new Set(matches.map((t) => t.topic_id)).size > 1)
+      throw new Error(`Ambiguous destination topic name: ${name}`);
+    if (match && (!match.topic_id || !sameTopic(source, match)))
+      throw new Error(
+        `Destination topic differs: ${name}; use --name-prefix to avoid changing a shared topic`
+      );
+    topicPlans.set(key, { key, name, source, existing: match });
+  }
+  const dlpRefs = crossTenant ? changing.flatMap((p) => dlpReferences(p.source.policy)) : [];
+  const names = [...new Set(dlpRefs.map((ref) => ref.name))];
+  for (const name of names)
+    if (!options.dlpMap?.[name])
+      throw new Error(
+        `Cross-tenant DLP reference requires explicit --dlp-map ${name}=<destination-name>; DLP resources are not cloned`
+      );
+  const catalog = names.length ? await dataProfiles(api, maxPages2) : [];
+  const dlpMappings = names.map((name) => {
+    const target = options.dlpMap?.[name];
+    const matches = catalog.filter((p) => p.name === target && p.profile_status !== "deleted");
+    if (matches.length !== 1 || !matches[0].id)
+      throw new Error(`Missing or ambiguous destination DLP profile: ${target}`);
+    if (dlpRefs.some((ref) => ref.name === name && "version" in ref.value) && matches[0].version == null)
+      throw new Error(`Destination DLP version is unknown: ${target}`);
+    return {
+      source: name,
+      destination: String(target),
+      id: matches[0].id,
+      version: matches[0].version ?? void 0
+    };
+  });
+  return {
+    sourceTsgId: backup.source.tsgId,
+    destinationTsgId,
+    profiles: profilePlans,
+    topics: [...topicPlans.values()],
+    dlpMappings,
+    maxPages: maxPages2
+  };
+}
+function canonical(value) {
+  const order = (v) => Array.isArray(v) ? v.map(order) : object(v) ? Object.fromEntries(
+    Object.entries(v).sort(([a], [b]) => a.localeCompare(b)).map(([k, child]) => [k, order(child)])
+  ) : v;
+  return JSON.stringify(order(value));
+}
+function unchanged(current, prior) {
+  return Boolean(
+    current && current.profile_id === prior.profile_id && current.revision === prior.revision && current.active === prior.active && canonical(current.policy) === canonical(prior.policy)
+  );
+}
+async function restoreRuntimeProfiles(api, plan) {
+  const result = {
+    sourceTsgId: plan.sourceTsgId,
+    destinationTsgId: plan.destinationTsgId,
+    complete: false,
+    topics: [],
+    profiles: []
+  };
+  try {
+    const latest = await profiles(api, plan.maxPages);
+    assertTenant(latest, plan.destinationTsgId);
+    if (plan.dlpMappings.length) {
+      const catalog = await dataProfiles(api, plan.maxPages);
+      for (const mapping of plan.dlpMappings) {
+        const matches = catalog.filter(
+          (p) => p.name === mapping.destination && p.profile_status !== "deleted"
+        );
+        if (matches.length !== 1 || matches[0].id !== mapping.id || (matches[0].version ?? void 0) !== mapping.version)
+          throw new Error(`Destination DLP profile changed after planning: ${mapping.destination}`);
+      }
+    }
+    for (const item of plan.profiles) {
+      if (item.action === "skip") continue;
+      const current = latest.find((p) => p.profile_name === item.name);
+      if (item.existing ? !unchanged(current, item.existing) : Boolean(current))
+        throw new Error(`Destination profile changed after planning: ${item.name}`);
+    }
+    const mappedTopics = /* @__PURE__ */ new Map();
+    for (const item of plan.topics) {
+      let topic = item.existing;
+      const inventory2 = await topics(api, plan.maxPages);
+      if (topic) {
+        const current = inventory2.find(
+          (t) => t.topic_id === topic?.topic_id && t.revision === topic?.revision
+        );
+        if (!current || !sameTopic(current, item.source))
+          throw new Error(`Destination topic changed after planning: ${item.name}`);
+      } else {
+        if (inventory2.some((t) => t.topic_name === item.name))
+          throw new Error(`Destination topic changed after planning: ${item.name}`);
+        topic = await api.topics.create({
+          topic_name: item.name,
+          description: item.source.description,
+          examples: item.source.examples,
+          active: item.source.active
+        });
+      }
+      if (!topic.topic_id || topic.topic_name !== item.name || !Number.isSafeInteger(topic.revision) || !sameTopic(topic, item.source))
+        throw new Error(`Topic response did not verify: ${item.name}`);
+      mappedTopics.set(item.key, topic);
+      result.topics.push({
+        name: item.name,
+        id: topic.topic_id,
+        action: item.existing ? "reused" : "created"
+      });
+    }
+    for (const item of plan.profiles) {
+      if (item.action === "skip") {
+        result.profiles.push({ name: item.name, action: "skipped", id: item.existing?.profile_id });
+        continue;
+      }
+      const policy = structuredClone(item.source.policy);
+      for (const ref of topicReferences(policy)) {
+        const topic = mappedTopics.get(topicKey(ref));
+        if (!topic?.topic_id) throw new Error("Missing planned topic mapping");
+        ref.topic_id = topic.topic_id;
+        ref.topic_name = topic.topic_name;
+        ref.revision = topic.revision;
+      }
+      for (const ref of dlpReferences(policy)) {
+        const mapping = plan.dlpMappings.find((m) => m.source === ref.name);
+        if (!mapping) continue;
+        if (ref.kind === "embedded") {
+          ref.value.name = mapping.destination;
+          ref.value.uuid = mapping.id;
+        } else ref.value.text = mapping.destination;
+        if ("id" in ref.value) ref.value.id = mapping.id;
+        if ("version" in ref.value) {
+          if (mapping.version === void 0) throw new Error("Destination DLP version is unknown");
+          ref.value.version = String(mapping.version);
+        }
+      }
+      const body = CreateSecurityProfileRequestSchema.parse({
+        profile_name: item.name,
+        active: item.source.active,
+        policy
+      });
+      const inventory2 = await profiles(api, plan.maxPages);
+      assertTenant(inventory2, plan.destinationTsgId);
+      const current = inventory2.find((p) => p.profile_name === item.name);
+      if (item.existing ? !unchanged(current, item.existing) : Boolean(current))
+        throw new Error(`Destination profile changed after planning: ${item.name}`);
+      const response = item.action === "update" && item.existing?.profile_id ? await api.profiles.update(item.existing.profile_id, body) : await api.profiles.create(body);
+      result.profiles.push({
+        name: item.name,
+        action: item.action === "create" ? "created" : "updated",
+        id: response.profile_id
+      });
+      const verified = (await profiles(api, plan.maxPages)).find(
+        (p) => p.profile_name === item.name
+      );
+      if (verified) assertTenant([verified], plan.destinationTsgId);
+      if (!verified?.profile_id || response.profile_id && response.profile_id !== verified.profile_id || item.source.active !== void 0 && verified.active !== item.source.active || canonical(verified.policy) !== canonical(policy))
+        throw new Error(`Restored profile did not verify: ${item.name}`);
+    }
+    result.complete = true;
+  } catch (error) {
+    const status = error?.statusCode;
+    result.error = Number.isInteger(status) ? `API request failed (HTTP ${status}); verify destination state before retrying` : error instanceof Error && /^(Destination|Topic response|Missing planned|Restored profile|Inventory|DLP inventory)/.test(
+      error.message
+    ) ? error.message : "Restore stopped; verify destination state before retrying";
+  }
+  return result;
+}
+
+// src/cli/commands/profile-transfer.ts
+var MAX_BACKUP_BYTES = 20 * 1024 * 1024;
+var FORMATS = "Output format: pretty, table, markdown, csv, json, yaml";
+function maxPages(value) {
+  if (!/^\d+$/.test(value) || Number(value) < 1 || Number(value) > 1e3)
+    usageError("--max-pages must be an integer from 1 to 1000");
+  return Number(value);
+}
+function dlpMap(values) {
+  const entries = values.map((value) => {
+    const at = value.indexOf("=");
+    if (at < 1 || at === value.length - 1)
+      throw new CliUsageError("--dlp-map requires source-name=destination-name");
+    return [value.slice(0, at), value.slice(at + 1)];
+  });
+  if (new Set(entries.map(([key]) => key)).size !== entries.length)
+    throw new CliUsageError("Duplicate source names in --dlp-map");
+  return Object.fromEntries(entries);
+}
+async function context() {
+  const config = await loadConfig();
+  if (!config.mgmtTsgId || !config.mgmtClientId || !config.mgmtClientSecret)
+    throw new CliUsageError(
+      "Profile transfer requires configured Management client ID, secret and TSG ID"
+    );
+  const client = new ManagementClient({ ...managementClientOptions(config), numRetries: 0 });
+  return {
+    api: {
+      profiles: client.profiles,
+      topics: client.topics,
+      dataProfiles: client.dlp.dataProfiles
+    },
+    tsgId: config.mgmtTsgId
+  };
+}
+function failure(error) {
+  if (error instanceof CliUsageError) usageError(error.message);
+  if (error instanceof ZodError) {
+    ui.error("Invalid profile backup/request schema; content is not logged.");
+  } else if (error instanceof AISecSDKException2) {
+    ui.error(
+      `Profile transfer API request failed${error.statusCode ? ` (HTTP ${error.statusCode})` : ""}; no automatic retry was made.`
+    );
+  } else if (error?.code) {
+    ui.error(
+      `Profile transfer file operation failed (${error.code}); existing files are not overwritten.`
+    );
+  } else {
+    ui.error(error instanceof Error ? error.message : "Profile transfer failed");
+  }
+  process.exitCode = 1;
+}
+function registerProfileTransferCommands(profiles2) {
+  const backup = profiles2.command("backup [profile]").description(
+    "Back up latest Runtime profile policies and referenced topic definitions; no argument means all profiles"
+  ).option("--all", "Back up all latest profiles (cannot be combined with a profile selector)").option("--file-format <format>", "Backup file format: json or yaml", "json").option("--output-file <path>", "New private backup file; defaults to the current directory").option(
+    "--max-pages <n>",
+    "Maximum pages per inventory; incomplete exports fail",
+    maxPages,
+    100
+  ).option("--output <format>", FORMATS).addHelpText(
+    "after",
+    examples(
+      "airs runtime profiles backup --all --output-file ./profiles.json",
+      'airs runtime profiles backup "Production" --file-format yaml --output-file ./production.yaml'
+    )
+  ).action(async (profile, opts) => {
+    try {
+      if (opts.all && profile)
+        throw new CliUsageError("Choose either a profile selector or --all");
+      if (!["json", "yaml"].includes(opts.fileFormat))
+        throw new CliUsageError("--file-format must be json or yaml");
+      const format = await resolveOutput(backup, opts);
+      const extension = opts.fileFormat === "yaml" ? ".yaml" : ".json";
+      if (opts.outputFile === "-")
+        throw new CliUsageError("Backups require a private file destination, not stdout");
+      const path3 = resolve5(
+        opts.outputFile ?? `airs-runtime-profiles-backup-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}-${randomUUID7().slice(0, 8)}${extension}`
+      );
+      if (!(opts.fileFormat === "json" ? [".json"] : [".yaml", ".yml"]).includes(
+        extname(path3).toLowerCase()
+      ))
+        throw new CliUsageError("Backup filename extension must match --file-format");
+      const { api, tsgId } = await context();
+      const data = await backupRuntimeProfiles(api, tsgId, { profile, maxPages: opts.maxPages });
+      const content = opts.fileFormat === "yaml" ? dump6(data, { schema: JSON_SCHEMA, noRefs: true, lineWidth: -1 }) : `${JSON.stringify(data, null, 2)}
+`;
+      if (Buffer.byteLength(content) > MAX_BACKUP_BYTES)
+        throw new Error("Backup exceeds the 20 MiB size limit; select individual profiles");
+      await writeReportFile(path3, content);
+      console.log(
+        formatOutput(
+          [
+            {
+              file: path3,
+              sourceTsgId: tsgId,
+              profiles: data.profiles.length,
+              topics: data.topics.length
+            }
+          ],
+          [
+            { key: "file", label: "Backup file" },
+            { key: "sourceTsgId", label: "Source TSG" },
+            { key: "profiles", label: "Profiles" },
+            { key: "topics", label: "Topics" }
+          ],
+          format === "pretty" ? "table" : format
+        )
+      );
+    } catch (error) {
+      failure(error);
+    }
+  });
+  const restore = profiles2.command("restore <file>").description(
+    "Restore profile policies into the selected tenant; validate all dependencies before changes"
+  ).option("--dry-run", "Read and validate a restore plan without changing destination resources").option("--name-prefix <prefix>", "Prefix restored profile and topic names to avoid collisions").option("--on-conflict <policy>", "Existing profile names: error, skip or update", "error").option(
+    "--dlp-map <source=destination>",
+    "Explicit cross-tenant binding to an existing DLP data profile (repeatable)",
+    (value, prior) => [...prior, value],
+    []
+  ).option(
+    "--max-pages <n>",
+    "Maximum pages per inventory; incomplete inventories fail",
+    maxPages,
+    100
+  ).option("--expect-tsg <id>", "Assert destination tenant ID; required with --force").option(
+    "--force",
+    "Execute without a prompt; requires --expect-tsg and does not override conflicts"
+  ).option("--output <format>", FORMATS).addHelpText(
+    "after",
+    examples(
+      "airs runtime profiles restore ./profiles.json --dry-run --output json",
+      "airs runtime profiles restore ./profiles.json --name-prefix migrated- --expect-tsg <destination-tsg> --force"
+    )
+  ).action(async (file, opts) => {
+    try {
+      if (!["error", "skip", "update"].includes(opts.onConflict))
+        throw new CliUsageError("--on-conflict must be error, skip or update");
+      if (opts.force && !opts.expectTsg)
+        throw new CliUsageError("--force requires --expect-tsg <destination-tsg>");
+      const mappings = dlpMap(opts.dlpMap);
+      const path3 = resolve5(file);
+      const extension = extname(path3).toLowerCase();
+      if (![".json", ".yaml", ".yml"].includes(extension))
+        throw new CliUsageError("Backup file must use .json, .yaml or .yml");
+      const info = await stat(path3);
+      if (!info.isFile() || info.size > MAX_BACKUP_BYTES)
+        throw new CliUsageError("Backup must be a regular file no larger than 20 MiB");
+      let input;
+      try {
+        const text2 = await readFile9(path3, "utf8");
+        if (Buffer.byteLength(text2) > MAX_BACKUP_BYTES) throw new Error("Backup too large");
+        input = extension === ".json" ? JSON.parse(text2) : load2(text2, { schema: JSON_SCHEMA });
+      } catch {
+        throw new CliUsageError("Backup is not valid JSON/YAML; contents are not logged");
+      }
+      const data = RuntimeProfilesBackupSchema.parse(input);
+      const format = await resolveOutput(restore, opts);
+      const { api, tsgId } = await context();
+      if (opts.expectTsg && opts.expectTsg !== tsgId)
+        throw new CliUsageError(
+          "--expect-tsg does not match the selected destination tenant; no API request was made"
+        );
+      const plan = await planRuntimeProfilesRestore(api, data, tsgId, {
+        namePrefix: opts.namePrefix,
+        onConflict: opts.onConflict,
+        maxPages: opts.maxPages,
+        dlpMap: mappings
+      });
+      const summary = {
+        sourceTsgId: plan.sourceTsgId,
+        destinationTsgId: plan.destinationTsgId,
+        dryRun: Boolean(opts.dryRun),
+        profiles: plan.profiles.map((p) => ({ name: p.name, action: p.action })),
+        topics: plan.topics.map((t) => ({
+          name: t.name,
+          action: t.existing ? "reuse" : "create"
+        })),
+        dlpMappings: plan.dlpMappings.map((m) => ({
+          source: m.source,
+          destination: m.destination
+        }))
+      };
+      const columns = [
+        { key: "sourceTsgId", label: "Source TSG" },
+        { key: "destinationTsgId", label: "Destination TSG" },
+        { key: "profiles", label: "Profiles" },
+        { key: "topics", label: "Topics" },
+        { key: "dlpMappings", label: "DLP mappings" },
+        { key: "dryRun", label: "Dry run" },
+        { key: "complete", label: "Complete" }
+      ];
+      if (opts.dryRun) {
+        console.log(formatOutput([summary], columns, format === "pretty" ? "table" : format));
+        return;
+      }
+      const changing = plan.profiles.filter((p) => p.action !== "skip");
+      if (changing.length)
+        await confirmOrAbort(
+          `Restore ${changing.length} profiles from TSG ${plan.sourceTsgId} to TSG ${tsgId} (${changing.filter((p) => p.action === "update").length} updates)?`,
+          Boolean(opts.force),
+          { action: `restore profiles into TSG ${tsgId}` }
+        );
+      const result = await restoreRuntimeProfiles(api, plan);
+      console.log(formatOutput([{ ...result }], columns, format === "pretty" ? "table" : format));
+      if (!result.complete) {
+        ui.error(result.error ?? "Restore incomplete");
+        process.exitCode = 1;
+      }
+    } catch (error) {
+      failure(error);
+    }
+  });
+}
+
 // src/cli/commands/profiles-cleanup.ts
 import { execSync } from "child_process";
-function findDuplicateProfiles(profiles) {
+function findDuplicateProfiles(profiles2) {
   const groups = /* @__PURE__ */ new Map();
-  for (const p of profiles) {
+  for (const p of profiles2) {
     const rev = p.revision ?? 0;
     const entry = { id: p.profileId, revision: rev };
     const existing = groups.get(p.profileName);
@@ -9161,11 +10278,11 @@ function registerCleanupCommand(parent) {
 }
 
 // src/cli/commands/runtime-dashboard.ts
-import { lstat as lstat3 } from "fs/promises";
-import { resolve as resolve4 } from "path";
-import { dump as dump5 } from "js-yaml";
+import { lstat as lstat4 } from "fs/promises";
+import { resolve as resolve6 } from "path";
+import { dump as dump7 } from "js-yaml";
 var TIME_UNITS = ["hour", "hours", "day", "days"];
-function integer2(value, name, minimum = 0) {
+function integer3(value, name, minimum = 0) {
   const n = Number(value);
   if (!/^\d+$/.test(String(value)) || !Number.isSafeInteger(n) || n < minimum)
     throw new CliUsageError(`${name} must be a safe integer >= ${minimum}`);
@@ -9177,7 +10294,7 @@ function text(value, name) {
 }
 function window(opts) {
   return {
-    timeInterval: integer2(opts.interval, "--interval", 1),
+    timeInterval: integer3(opts.interval, "--interval", 1),
     timeUnit: text(opts.unit, "--unit")
   };
 }
@@ -9192,7 +10309,7 @@ function identity(opts) {
 function scan(opts) {
   return {
     scanId: text(opts.scanId, "--scan-id"),
-    scanSubReqId: integer2(opts.scanSubReqId, "--scan-sub-req-id")
+    scanSubReqId: integer3(opts.scanSubReqId, "--scan-sub-req-id")
   };
 }
 function timeOptions(command, interval = "1", unit = "day", allowedUnits = TIME_UNITS) {
@@ -9209,7 +10326,7 @@ function timeOptions(command, interval = "1", unit = "day", allowedUnits = TIME_
     unit
   );
 }
-function pageOptions(command) {
+function pageOptions2(command) {
   return command.option("--limit <n>", "Items per page", "25").option("--offset <n>", "Item offset", "0");
 }
 function sessionOptions(command) {
@@ -9238,8 +10355,8 @@ function registerRuntimeDashboardCommands(runtime) {
               "Scan content requires exactly one of --show-content or --output-file <new-path>"
             );
           if (opts.outputFile) {
-            const path3 = resolve4(text(opts.outputFile, "--output-file"));
-            const existing = await lstat3(path3).catch((error) => {
+            const path3 = resolve6(text(opts.outputFile, "--output-file"));
+            const existing = await lstat4(path3).catch((error) => {
               if (error.code !== "ENOENT") throw error;
               return void 0;
             });
@@ -9252,9 +10369,9 @@ function registerRuntimeDashboardCommands(runtime) {
           numRetries: 0
         });
         const result = await read(client.dashboard);
-        const output = format === "yaml" ? dump5(result, { noRefs: true, lineWidth: -1 }).trimEnd() : JSON.stringify(result, null, 2);
+        const output = format === "yaml" ? dump7(result, { noRefs: true, lineWidth: -1 }).trimEnd() : JSON.stringify(result, null, 2);
         if (command.name() === "scan-content" && opts.outputFile) {
-          await writeReportFile(resolve4(String(opts.outputFile)), `${output}
+          await writeReportFile(resolve6(String(opts.outputFile)), `${output}
 `);
           ui.status("Scan content exported to the requested private file (0600).");
         } else console.log(output);
@@ -9269,7 +10386,7 @@ function registerRuntimeDashboardCommands(runtime) {
     });
   }
   register6(
-    pageOptions(
+    pageOptions2(
       timeOptions(
         dashboard.command("applications").description("One page of application activity"),
         "1",
@@ -9278,19 +10395,19 @@ function registerRuntimeDashboardCommands(runtime) {
       )
     ),
     (opts) => {
-      const interval = integer2(opts.interval, "--interval", 1);
+      const interval = integer3(opts.interval, "--interval", 1);
       const unit = text(opts.unit, "--unit");
       if (![1, 7, 30, 60].includes(interval) || !["day", "days", "hour"].includes(unit))
         throw new CliUsageError(
           "Application overview supports interval 1/7/30/60 and unit day/days/hour"
         );
-      const query = {
+      const query2 = {
         timeInterval: interval,
         timeUnit: unit,
-        limit: integer2(opts.limit, "--limit", 1),
-        offset: integer2(opts.offset, "--offset")
+        limit: integer3(opts.limit, "--limit", 1),
+        offset: integer3(opts.offset, "--offset")
       };
-      return (client) => client.applicationsOverview(query);
+      return (client) => client.applicationsOverview(query2);
     }
   );
   for (const [name, method] of [
@@ -9305,16 +10422,16 @@ function registerRuntimeDashboardCommands(runtime) {
         ["days"]
       ),
       (opts) => {
-        const interval = integer2(opts.interval, "--interval", 1);
+        const interval = integer3(opts.interval, "--interval", 1);
         if (![7, 30, 60].includes(interval) || opts.unit !== "days")
           throw new CliUsageError("Application detail requires 7, 30, or 60 days");
-        const query = {
+        const query2 = {
           appId: text(opts.appId, "--app-id"),
           appName: text(opts.appName, "--app-name"),
           timeInterval: interval,
           timeUnit: "days"
         };
-        return (client) => client[method](query);
+        return (client) => client[method](query2);
       }
     );
   }
@@ -9326,35 +10443,35 @@ function registerRuntimeDashboardCommands(runtime) {
     register6(
       timeOptions(dashboard.command(name), days ? "30" : "1", days ? "days" : "day"),
       (opts) => {
-        const query = window(opts);
-        return (client) => client[method](query);
+        const query2 = window(opts);
+        return (client) => client[method](query2);
       }
     );
   }
   register6(timeOptions(sessions.command("chart")), (opts) => {
-    const query = window(opts);
-    return (client) => client.sessionsChart(query);
+    const query2 = window(opts);
+    return (client) => client.sessionsChart(query2);
   });
   register6(
-    pageOptions(
+    pageOptions2(
       timeOptions(
         sessions.command("list").description("Session entries; --all walks pages with completeness checks")
       )
     ).option("--all", "Walk all pages (up to 100 pages)").option("--max <n>", "Item cap with --all; 0 removes item cap", "10000"),
     (opts) => {
-      const query = {
+      const query2 = {
         ...window(opts),
-        limit: integer2(opts.limit, "--limit", 1),
-        offset: integer2(opts.offset, "--offset")
+        limit: integer3(opts.limit, "--limit", 1),
+        offset: integer3(opts.offset, "--offset")
       };
-      const maximum = integer2(opts.max, "--max");
+      const maximum = integer3(opts.max, "--max");
       return async (client) => {
         const items = [];
         const seen = /* @__PURE__ */ new Set();
         let expectedTotal;
-        let offset = query.offset;
+        let offset = query2.offset;
         for (let pageIndex = 0; pageIndex < 100; pageIndex++) {
-          const page = await client.sessionsOverview({ ...query, offset });
+          const page = await client.sessionsOverview({ ...query2, offset });
           if (!opts.all) {
             ui.status(
               `Returned ${page.items.length} of ${page.pagination.total_items ?? "unknown"} sessions; this is one page.`
@@ -9362,7 +10479,7 @@ function registerRuntimeDashboardCommands(runtime) {
             return page.items;
           }
           const total = page.pagination.total_items;
-          if (!Number.isSafeInteger(total) || total < 0 || page.pagination.skip !== offset || page.pagination.limit !== query.limit || page.items.length > query.limit || expectedTotal !== void 0 && total !== expectedTotal)
+          if (!Number.isSafeInteger(total) || total < 0 || page.pagination.skip !== offset || page.pagination.limit !== query2.limit || page.items.length > query2.limit || expectedTotal !== void 0 && total !== expectedTotal)
             throw new Error("Unstable pagination");
           expectedTotal = total;
           for (const item of page.items) {
@@ -9385,7 +10502,7 @@ function registerRuntimeDashboardCommands(runtime) {
           }
           if (offset === total) {
             ui.status(
-              `Retrieved ${items.length} sessions from offset ${query.offset}; pagination complete.`
+              `Retrieved ${items.length} sessions from offset ${query2.offset}; pagination complete.`
             );
             return items;
           }
@@ -9401,33 +10518,33 @@ function registerRuntimeDashboardCommands(runtime) {
       };
     }
   );
-  register6(pageOptions(sessionOptions(sessions.command("get"))), (opts) => {
-    const query = {
+  register6(pageOptions2(sessionOptions(sessions.command("get"))), (opts) => {
+    const query2 = {
       ...identity(opts),
-      limit: integer2(opts.limit, "--limit", 1),
-      offset: integer2(opts.offset, "--offset")
+      limit: integer3(opts.limit, "--limit", 1),
+      offset: integer3(opts.offset, "--offset")
     };
-    return (client) => client.session(query);
+    return (client) => client.session(query2);
   });
   register6(scanOptions(sessionOptions(sessions.command("transaction"))), (opts) => {
-    const query = { ...identity(opts), ...scan(opts) };
-    return (client) => client.sessionTransaction(query);
+    const query2 = { ...identity(opts), ...scan(opts) };
+    return (client) => client.sessionTransaction(query2);
   });
   register6(
     scanOptions(
       sessions.command("scan-content").description("Explicit sensitive scan-content read; never automatically fetched")
     ).option("--show-content", "Explicitly display stored content on stdout").option("--output-file <path>", "Private new file for stored content (no overwrite)"),
     (opts) => {
-      const query = scan(opts);
-      return (client) => client.scanContent(query);
+      const query2 = scan(opts);
+      return (client) => client.scanContent(query2);
     }
   );
 }
 
 // src/cli/commands/runtime-report.ts
-import { lstat as lstat4 } from "fs/promises";
-import { resolve as resolve5 } from "path";
-import { randomUUID as randomUUID6 } from "crypto";
+import { lstat as lstat5 } from "fs/promises";
+import { resolve as resolve7 } from "path";
+import { randomUUID as randomUUID8 } from "crypto";
 function registerRuntimeReportCommand(runtime) {
   const command = runtime.command("report").description("Generate a daily AI Runtime Security environment report (read-only)").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
     "--output-file <path>",
@@ -9444,18 +10561,18 @@ function registerRuntimeReportCommand(runtime) {
     const format = opts.output ?? command.parent?.parent?.opts().output ?? "html";
     if (format !== "html" && format !== "markdown")
       usageError("Report output must be html or markdown");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
     if (opts.outputFile !== void 0 && !opts.outputFile.trim())
       usageError("--output-file cannot be empty");
-    const defaultName = `airs-runtime-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID6().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
-    const outputPath = opts.outputFile === "-" ? void 0 : resolve5(opts.outputFile ?? defaultName);
+    const defaultName = `airs-runtime-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID8().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
+    const outputPath = opts.outputFile === "-" ? void 0 : resolve7(opts.outputFile ?? defaultName);
     try {
       if (outputPath) {
-        const existing = await lstat4(outputPath).catch((error) => {
+        const existing = await lstat5(outputPath).catch((error) => {
           if (error.code !== "ENOENT") throw error;
           return void 0;
         });
@@ -9467,7 +10584,7 @@ function registerRuntimeReportCommand(runtime) {
         numRetries: 0
       });
       ui.status("Collecting daily runtime activity and current configuration (read-only)...");
-      const report = await collectRuntimeDailyReport(client, { title: opts.title, maxPages });
+      const report = await collectRuntimeDailyReport(client, { title: opts.title, maxPages: maxPages2 });
       const rendered = format === "html" ? renderRuntimeReportHtml(report) : renderRuntimeReportMarkdown(report);
       if (outputPath) {
         await writeReportFile(outputPath, rendered);
@@ -9627,7 +10744,7 @@ function registerCreateCommand(parent) {
 }
 
 // src/cli/commands/topics-eval.ts
-import { readFile as readFile9 } from "fs/promises";
+import { readFile as readFile10 } from "fs/promises";
 
 // src/core/prompt-loader.ts
 function parseCsvLine(line) {
@@ -9770,7 +10887,7 @@ function registerEvalCommand(parent) {
     resolveDeprecatedAliases(cmd, opts);
     try {
       const config = await loadConfig();
-      const csvContent = await readFile9(opts.prompts, "utf-8");
+      const csvContent = await readFile10(opts.prompts, "utf-8");
       const { cases, intent } = loadPrompts(csvContent, (msg) => ui.status(`Warning: ${msg}`));
       if (!config.airsApiKey && !config.airsApiToken) {
         fail(new Error("PANW_AI_SEC_API_KEY or PANW_AI_SEC_API_TOKEN is required"));
@@ -9794,8 +10911,8 @@ function registerEvalCommand(parent) {
 
 // src/cli/commands/topics-revert.ts
 async function revertTopic(mgmt, profileName, topicName) {
-  const topics = await mgmt.listTopics();
-  const match = topics.find((t) => t.topic_name === topicName);
+  const topics2 = await mgmt.listTopics();
+  const match = topics2.find((t) => t.topic_name === topicName);
   if (!match || !match.topic_id) {
     throw new Error(`Topic "${topicName}" not found`);
   }
@@ -9942,7 +11059,7 @@ function completedBulkResults(state) {
 }
 async function writeBulkResults(outputPath, results) {
   await fs5.promises.mkdir(dirname3(outputPath), { recursive: true });
-  const temporary = `${outputPath}.tmp-${process.pid}-${randomUUID7()}`;
+  const temporary = `${outputPath}.tmp-${process.pid}-${randomUUID9()}`;
   try {
     await fs5.promises.writeFile(temporary, SdkRuntimeService.formatResultsCsv(results), {
       encoding: "utf-8",
@@ -10069,7 +11186,7 @@ function registerRuntimeCommand(program) {
       if (!config.airsApiKey && !config.airsApiToken) {
         fail(new Error("PANW_AI_SEC_API_KEY or PANW_AI_SEC_API_TOKEN is required"));
       }
-      const raw = await readFile10(opts.file, "utf-8");
+      const raw = await readFile11(opts.file, "utf-8");
       const prompts = parseInputFile(raw, opts.file);
       if (prompts.length === 0) {
         usageError("No prompts found in input file");
@@ -10284,16 +11401,17 @@ function registerRuntimeCommand(program) {
       const fmt = await resolveOutput(deploymentProfilesList, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
       const service = await createMgmtService();
-      const profiles2 = await service.listDeploymentProfiles({
+      const profiles3 = await service.listDeploymentProfiles({
         unactivated: opts.unactivated
       });
-      renderDeploymentProfileList(profiles2, fmt);
+      renderDeploymentProfileList(profiles3, fmt);
     } catch (err) {
       fail(err);
     }
   });
-  const profiles = runtime.command("profiles").description("Manage AIRS security profiles");
-  const profilesList = registerListFlags(profiles.command("list"), { dialect: "offset" }).description("List security profiles").option("--all-versions", "Include every profile revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
+  const profiles2 = runtime.command("profiles").description("Manage AIRS security profiles");
+  registerProfileTransferCommands(profiles2);
+  const profilesList = registerListFlags(profiles2.command("list"), { dialect: "offset" }).description("List security profiles").option("--all-versions", "Include every profile revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
     "after",
     examples(
       "airs runtime profiles list",
@@ -10332,7 +11450,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  const profilesGet = profiles.command("get <nameOrId>").description("Get a security profile by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
+  const profilesGet = profiles2.command("get <nameOrId>").description("Get a security profile by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
     try {
       const fmt = await resolveOutput(profilesGet, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
@@ -10341,10 +11459,10 @@ function registerRuntimeCommand(program) {
         nameOrId
       );
       if (opts.revision !== void 0 || opts.allVersions) {
-        const profiles2 = (await service.listAllProfiles({ latest: false })).filter(
+        const profiles3 = (await service.listAllProfiles({ latest: false })).filter(
           (profile) => isUuid ? profile.profileId === nameOrId : profile.profileName === nameOrId
         );
-        const selected = opts.revision === void 0 ? profiles2 : profiles2.filter((profile) => profile.revision === opts.revision);
+        const selected = opts.revision === void 0 ? profiles3 : profiles3.filter((profile) => profile.revision === opts.revision);
         if (selected.length === 0) throw new Error(`Profile ${nameOrId} not found`);
         if (opts.allVersions) emitList(profilesView, selected, fmt);
         else emitDetail(profilesView, selected[0], fmt);
@@ -10356,7 +11474,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("create").description("Create a new security profile").requiredOption("--name <name>", "Profile name").option("--no-active", "Create profile as inactive").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile configuration (legacy)").action(async (opts) => {
+  profiles2.command("create").description("Create a new security profile").requiredOption("--name <name>", "Profile name").option("--no-active", "Create profile as inactive").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile configuration (legacy)").action(async (opts) => {
     const service = await createMgmtService();
     try {
       renderRuntimeConfigHeader();
@@ -10411,7 +11529,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("update <nameOrId>").description("Update a security profile by name or UUID").option("--name <name>", "Update profile name").option("--no-active", "Set profile as inactive").option("--active", "Set profile as active").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile updates (legacy)").action(async (nameOrId, opts) => {
+  profiles2.command("update <nameOrId>").description("Update a security profile by name or UUID").option("--name <name>", "Update profile name").option("--no-active", "Set profile as inactive").option("--active", "Set profile as active").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile updates (legacy)").action(async (nameOrId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -10460,7 +11578,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("delete <nameOrId>").description("Delete a security profile by name or UUID").option("--force", "Skip confirmation and force delete (removes from referencing policies)").option("--updated-by <email>", "Email of user performing force deletion").action(async (nameOrId, opts) => {
+  profiles2.command("delete <nameOrId>").description("Delete a security profile by name or UUID").option("--force", "Skip confirmation and force delete (removes from referencing policies)").option("--updated-by <email>", "Email of user performing force deletion").action(async (nameOrId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -10493,7 +11611,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerCleanupCommand(profiles);
+  registerCleanupCommand(profiles2);
   const resumePoll = runtime.command("resume-poll <stateFile>").description("Resume polling for a previously submitted bulk scan").option("--output-file <file>", "Output CSV file path");
   registerDeprecatedAlias(resumePoll, {
     oldFlag: "--output <file>",
@@ -10641,10 +11759,10 @@ function registerRuntimeCommand(program) {
     );
     process.exitCode = 1;
   });
-  const topics = runtime.command("topics").description("Manage AIRS custom topics and guardrail generation");
-  registerApplyCommand(topics);
-  registerCreateCommand(topics);
-  topics.command("delete <topicId>").description("Delete a custom topic").option("--force", "Skip confirmation and force delete (removes from all referencing profiles)").option("--updated-by <email>", "Email of user performing force deletion").action(async (topicId, opts) => {
+  const topics2 = runtime.command("topics").description("Manage AIRS custom topics and guardrail generation");
+  registerApplyCommand(topics2);
+  registerCreateCommand(topics2);
+  topics2.command("delete <topicId>").description("Delete a custom topic").option("--force", "Skip confirmation and force delete (removes from all referencing profiles)").option("--updated-by <email>", "Email of user performing force deletion").action(async (topicId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -10662,8 +11780,8 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerEvalCommand(topics);
-  const topicsGet = topics.command("get <nameOrId>").description("Get a custom topic by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
+  registerEvalCommand(topics2);
+  const topicsGet = topics2.command("get <nameOrId>").description("Get a custom topic by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
     try {
       const fmt = await resolveOutput(topicsGet, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
@@ -10672,10 +11790,10 @@ function registerRuntimeCommand(program) {
         nameOrId
       );
       if (opts.revision !== void 0 || opts.allVersions) {
-        const topics2 = (await service.listTopics()).filter(
+        const topics3 = (await service.listTopics()).filter(
           (topic) => isUuid ? topic.topic_id === nameOrId : topic.topic_name === nameOrId
         );
-        const selected = opts.revision === void 0 ? topics2 : topics2.filter((topic) => topic.revision === opts.revision);
+        const selected = opts.revision === void 0 ? topics3 : topics3.filter((topic) => topic.revision === opts.revision);
         if (selected.length === 0) throw new Error(`Topic ${nameOrId} not found`);
         if (opts.allVersions) emitList(topicsView, selected, fmt);
         else emitDetail(topicsView, selected[0], fmt);
@@ -10687,7 +11805,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  const topicsList = registerListFlags(topics.command("list"), { dialect: "offset" }).description("List custom topics").option("--all-versions", "Include every topic revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
+  const topicsList = registerListFlags(topics2.command("list"), { dialect: "offset" }).description("List custom topics").option("--all-versions", "Include every topic revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
     try {
       const fmt = await resolveOutput(topicsList, opts);
       const params = resolveListParams(topicsList, opts, { dialect: "offset" });
@@ -10708,9 +11826,9 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerRevertCommand(topics);
-  registerSampleCommand(topics);
-  topics.command("update <topicId>").description("Update a custom topic").requiredOption("--config <path>", "JSON file with topic updates").action(async (topicId, opts) => {
+  registerRevertCommand(topics2);
+  registerSampleCommand(topics2);
+  topics2.command("update <topicId>").description("Update a custom topic").requiredOption("--config <path>", "JSON file with topic updates").action(async (topicId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -10725,6 +11843,114 @@ function registerRuntimeCommand(program) {
   registerDlpCommands(runtime);
 }
 
+// src/cli/commands/tenant.ts
+var COLUMNS2 = [
+  { key: "name", label: "Tenant" },
+  { key: "active", label: "Selected" },
+  { key: "tsgId", label: "TSG ID" },
+  { key: "configPath", label: "Config file" }
+];
+function registerTenantCommand(program) {
+  const tenant = program.command("tenant").description("Select named tenant config files without changing their contents").addHelpText(
+    "after",
+    examples(
+      "airs tenant create production --config /secure/production.json",
+      "airs tenant switch production",
+      "airs tenant read",
+      "airs tenant switch default"
+    )
+  );
+  tenant.command("create <name>").description("Register an existing JSON config file by reference; does not activate it").requiredOption("--config <path>", "Existing Prisma AIRS JSON config file").action(async (name, opts) => {
+    try {
+      const entry = await createTenant(name, opts.config);
+      ui.success(
+        `Registered ${entry.name} (TSG ${entry.tsgId}); config file unchanged. Use airs tenant switch ${entry.name}.`
+      );
+    } catch (error) {
+      fail(error);
+    }
+  });
+  tenant.command("switch <name>").description(
+    "Persist the selected tenant; default restores legacy config/environment resolution"
+  ).action(async (name) => {
+    try {
+      const entry = await switchTenant(name);
+      ui.success(
+        entry ? `Selected ${entry.name} (TSG ${entry.tsgId})` : "Selected default; explicit config/environment overrides still apply"
+      );
+    } catch (error) {
+      fail(error);
+    }
+  });
+  const list = tenant.command("list").description("List registrations without reading credentials").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
+    try {
+      const format = await resolveOutput(list, opts, { ignoreConfig: true });
+      const store = readTenantStore();
+      const explicit = process.env.PRISMA_AIRS_CONFIG_PATH;
+      const rows = [
+        {
+          name: "default",
+          active: store.active === null,
+          tsgId: "",
+          configPath: defaultTenantConfigPath()
+        },
+        ...store.tenants.map((entry) => ({ ...entry, active: entry.name === store.active }))
+      ];
+      if (explicit)
+        ui.status("PRISMA_AIRS_CONFIG_PATH overrides the selected tenant for API commands.");
+      console.log(formatOutput(rows, COLUMNS2, format === "pretty" ? "table" : format));
+    } catch (error) {
+      fail(error);
+    }
+  });
+  const read = tenant.command("read [name]").description("Read a tenant config with all credential values redacted").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (name, opts) => {
+    try {
+      const format = await resolveOutput(read, opts, { ignoreConfig: true });
+      const store = readTenantStore();
+      const selected = name ?? store.active ?? "default";
+      const entry = store.tenants.find((value) => value.name === selected);
+      if (selected !== "default" && !entry) throw new Error("Tenant not found");
+      const path3 = entry?.configPath ?? expandConfigPath(process.env.PRISMA_AIRS_CONFIG_PATH || defaultTenantConfigPath());
+      const config = readTenantConfig(path3, entry?.tsgId);
+      const rows = Object.entries(config).map(([key, value]) => ({
+        key,
+        value: /key|secret|token|password/i.test(key) && value ? "[REDACTED]" : value ?? ""
+      }));
+      ui.status(`Tenant ${selected}${entry ? ` (TSG ${entry.tsgId})` : ""}: ${path3}`);
+      console.log(
+        formatOutput(
+          rows,
+          [
+            { key: "key", label: "Key" },
+            { key: "value", label: "Value" }
+          ],
+          format === "pretty" ? "table" : format
+        )
+      );
+    } catch (error) {
+      fail(error);
+    }
+  });
+  tenant.command("delete <name>").description("Unregister an inactive tenant; retain its source config file").option("--force", "Skip interactive confirmation; active tenant deletion remains refused").action(async (name, opts) => {
+    try {
+      const store = readTenantStore();
+      if (name === "default" || name === store.active)
+        throw new Error("Switch away first; default and active tenants cannot be deleted");
+      if (!store.tenants.some((entry) => entry.name === name))
+        throw new Error("Tenant not found");
+      await confirmOrAbort(
+        `Unregister tenant ${name}? Its config file will be retained.`,
+        Boolean(opts.force),
+        { action: `unregister tenant ${name}` }
+      );
+      await deleteTenant(name);
+      ui.success(`Unregistered ${name}; source config file retained`);
+    } catch (error) {
+      fail(error);
+    }
+  });
+}
+
 // src/cli/program.ts
 var READ_COMMAND_NAMES = /* @__PURE__ */ new Set([
   "categories",
@@ -10745,7 +11971,8 @@ var READ_COMMAND_NAMES = /* @__PURE__ */ new Set([
   "version",
   "versions",
   "violation",
-  "violations"
+  "violations",
+  "vulnerabilities"
 ]);
 function applyListDeleteAliases(cmd) {
   for (const sub of cmd.commands) {
@@ -10787,12 +12014,19 @@ function buildProgram() {
   program.hook("preAction", async (_thisCommand, actionCommand) => {
     const root = actionCommand.optsWithGlobals?.() ?? _thisCommand.opts();
     setQuiet(Boolean(root.quiet));
-    const isEnvironmentReport = actionCommand.name() === "report" && ["runtime", "redteam", "aigateway"].includes(actionCommand.parent?.name() ?? "") && !(actionCommand.parent?.name() === "redteam" && actionCommand.args.length > 0);
+    const profileTransfer = actionCommand.parent?.name() === "profiles" && actionCommand.parent.parent?.name() === "runtime" && ["backup", "restore"].includes(actionCommand.name());
+    if (profileTransfer && (root.debug || /^(1|true|yes|on)$/i.test(process.env.PANW_AI_SEC_DEBUG?.trim() ?? "")))
+      usageError(
+        "Disable --debug and PANW_AI_SEC_DEBUG for profile transfer; backups can contain sensitive policy configuration"
+      );
+    const isEnvironmentReport = actionCommand.name() === "report" && ["runtime", "redteam", "aigateway", "agentguard"].includes(
+      actionCommand.parent?.name() ?? ""
+    ) && !(actionCommand.parent?.name() === "redteam" && actionCommand.args.length > 0);
     if (isEnvironmentReport && (root.debug || /^(1|true|yes|on)$/i.test(process.env.PANW_AI_SEC_DEBUG?.trim() ?? "")))
       usageError(
         "Disable --debug and PANW_AI_SEC_DEBUG for environment reports to avoid persisting sensitive traffic content"
       );
-    if (!isEnvironmentReport && !(actionCommand.name() === "report" && actionCommand.parent?.name() === "redteam") && READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
+    if (!isEnvironmentReport && actionCommand.parent?.name() !== "tenant" && !(actionCommand.name() === "report" && actionCommand.parent?.name() === "redteam") && READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
       try {
         const format = await resolveOutput(actionCommand, actionCommand.opts());
         actionCommand.setOptionValueWithSource("output", format, "implied");
@@ -10803,10 +12037,16 @@ function buildProgram() {
     if (root.debug) {
       const logPath = join4(
         process.cwd(),
-        `debug-api-${Date.now()}-${randomUUID8().slice(0, 8)}.jsonl`
+        `debug-api-${Date.now()}-${randomUUID10().slice(0, 8)}.jsonl`
       );
       try {
-        installDebugLogger(logPath);
+        let ancestor = actionCommand;
+        let agentGuard = false;
+        while (ancestor) {
+          if (ancestor.name() === "agentguard") agentGuard = true;
+          ancestor = ancestor.parent;
+        }
+        installDebugLogger(logPath, { omitBodies: agentGuard });
       } catch {
         ui.error(
           "Cannot create the debug log in the current working directory. Run from a writable directory or omit --debug."
@@ -10819,8 +12059,10 @@ function buildProgram() {
   registerRuntimeCommand(program);
   registerRedteamCommand(program);
   registerModelSecurityCommand(program);
+  registerAgentGuardCommand(program);
   registerAiGatewayCommand(program);
   registerConfigCommand(program);
+  registerTenantCommand(program);
   registerDoctorCommand(program);
   registerCompletionCommand(program);
   applyListDeleteAliases(program);