@cdot65/prisma-airs-cli 5.4.1 → 5.5.0

package/dist/cli/index.js

@@ -13,11 +13,17 @@ import {
   collectRedTeamEnvironmentReport,
   collectRuntimeDailyReport,
   computeMetrics,
+  createTenant,
+  defaultTenantConfigPath,
+  deleteTenant,
+  expandConfigPath,
   getOrCreateManagementClient,
   inspectConfig,
   loadConfig,
   readBackupDir,
   readBackupFile,
+  readTenantConfig,
+  readTenantStore,
   renderEnvironmentReportHtml,
   renderEnvironmentReportMarkdown,
   renderRedTeamReportHtml,
@@ -27,10 +33,11 @@ import {
   resolveConfigFilePath,
   resolveOutputDir,
   sanitizeFilename,
+  switchTenant,
   validateTopic,
   writeBackupFile,
   writeReportFile
-} from "../chunk-36Z6IPH6.js";
+} from "../chunk-NKAVUBKI.js";
 
 // src/cli/index.ts
 import "dotenv/config";
@@ -49,7 +56,7 @@ function installProcessGuards() {
 }
 
 // src/cli/program.ts
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID10 } from "crypto";
 import { readFileSync as readFileSync4 } from "fs";
 import { dirname as dirname4, join as join4 } from "path";
 import { fileURLToPath } from "url";
@@ -132,8 +139,8 @@ function modelSecurityClientOptions(config) {
 
 // src/reports/agentguard.ts
 async function collectAgentGuardReport(client, options = {}) {
-  const maxPages = options.maxPages ?? 40;
-  if (!Number.isSafeInteger(maxPages) || maxPages < 1 || maxPages > 100)
+  const maxPages2 = options.maxPages ?? 40;
+  if (!Number.isSafeInteger(maxPages2) || maxPages2 < 1 || maxPages2 > 100)
     throw new Error("maxPages must be between 1 and 100");
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const end = now();
@@ -195,7 +202,7 @@ async function collectAgentGuardReport(client, options = {}) {
     const seen = /* @__PURE__ */ new Set();
     let total;
     try {
-      for (let page = 0; page < maxPages; page++) {
+      for (let page = 0; page < maxPages2; page++) {
         const r = await read(rows.length);
         s.pages++;
         if (!Number.isSafeInteger(r.total) || r.total < 0 || !Array.isArray(r.rows) || r.rows.length > 10)
@@ -212,7 +219,7 @@ async function collectAgentGuardReport(client, options = {}) {
         if (pageCount ? r.rows.length < 10 : rows.length === total) return rows;
         if (!r.rows.length) throw new Error();
       }
-      s.notes.push(`Reached the ${maxPages}-page budget.`);
+      s.notes.push(`Reached the ${maxPages2}-page budget.`);
       throw new Error();
     } catch (error) {
       if (!rows.length) throw error;
@@ -375,7 +382,7 @@ async function resolveOutput(command, opts, resolution = {}) {
   const globalOutput = globalIsExplicit ? rootCommand.opts().output : void 0;
   let configured;
   try {
-    configured = (await loadConfig()).defaultOutput;
+    configured = resolution.ignoreConfig ? process.env.PANW_CLI_OUTPUT : (await loadConfig()).defaultOutput;
   } catch (error) {
     if (process.env.PANW_CLI_OUTPUT !== void 0) configured = process.env.PANW_CLI_OUTPUT;
     else throw error;
@@ -2594,13 +2601,13 @@ function statusColor4(status) {
 function renderRuntimeConfigHeader() {
   ui.header("Prisma AIRS \u2014 Runtime Configuration", "Security profile and topic management");
 }
-function renderProfileList(profiles, format = "pretty") {
-  if (profiles.length === 0) {
+function renderProfileList(profiles2, format = "pretty") {
+  if (profiles2.length === 0) {
     ui.emptyList("profiles");
     return;
   }
   if (format !== "pretty") {
-    const rows = profiles.map((p) => ({
+    const rows = profiles2.map((p) => ({
       id: p.profileId,
       name: p.profileName,
       status: p.active ? "active" : "inactive",
@@ -2616,7 +2623,7 @@ function renderProfileList(profiles, format = "pretty") {
     return;
   }
   ui.section("Security Profiles:");
-  for (const p of profiles) {
+  for (const p of profiles2) {
     ui.dim(p.profileId);
     const status = p.active ? chalk9.green("active") : chalk9.yellow("inactive");
     const rev = p.revision != null ? chalk9.dim(` rev:${p.revision}`) : "";
@@ -2704,13 +2711,13 @@ function renderCleanupResult(results, format = "pretty") {
   }
   console.log();
 }
-function renderTopicList(topics, format = "pretty") {
-  if (topics.length === 0) {
+function renderTopicList(topics2, format = "pretty") {
+  if (topics2.length === 0) {
     ui.emptyList("topics");
     return;
   }
   if (format !== "pretty") {
-    const rows = topics.map((t) => ({
+    const rows = topics2.map((t) => ({
       id: t.topic_id ?? "",
       name: t.topic_name,
       revision: t.revision ?? "",
@@ -2731,7 +2738,7 @@ function renderTopicList(topics, format = "pretty") {
     return;
   }
   ui.section("Custom Topics:");
-  for (const t of topics) {
+  for (const t of topics2) {
     ui.dim(String(t.topic_id));
     const rev = t.revision != null ? chalk9.dim(` rev:${t.revision}`) : "";
     const desc = t.description ? chalk9.dim(` \u2014 ${t.description.slice(0, 80)}`) : "";
@@ -2933,13 +2940,13 @@ function renderCustomerAppConsumption(data, format = "pretty") {
   }
   console.log();
 }
-function renderDeploymentProfileList(profiles, format = "pretty") {
-  if (profiles.length === 0) {
+function renderDeploymentProfileList(profiles2, format = "pretty") {
+  if (profiles2.length === 0) {
     ui.emptyList("deployment profiles");
     return;
   }
   if (format !== "pretty") {
-    const rows = profiles.map((p) => ({
+    const rows = profiles2.map((p) => ({
       name: p.raw.dp_name ?? p.raw.profile_name ?? p.raw.name ?? "",
       status: p.raw.status ?? "",
       authCode: p.raw.auth_code ?? ""
@@ -2958,7 +2965,7 @@ function renderDeploymentProfileList(profiles, format = "pretty") {
     return;
   }
   ui.section("Deployment Profiles:");
-  for (const p of profiles) {
+  for (const p of profiles2) {
     const name = p.raw.dp_name ?? p.raw.profile_name ?? p.raw.name ?? "unknown";
     const status = p.raw.status;
     const authCode = p.raw.auth_code;
@@ -3480,7 +3487,7 @@ function registerAiGatewayInference(parent) {
       const outputError = (error) => controller.abort(error);
       let stream;
       let failed = false;
-      let failure;
+      let failure2;
       try {
         const format = await resolveOutput(command, opts, { allowed: ["pretty", "json", "yaml"] });
         const config = await loadConfig({ aiGwInferenceEndpoint: opts.endpoint });
@@ -3507,8 +3514,8 @@ function registerAiGatewayInference(parent) {
         process.once("SIGINT", interrupt);
         process.once("SIGTERM", interrupt);
         process.stdout.on("error", outputError);
-        const write = (text2) => new Promise((resolve7, reject) => {
-          process.stdout.write(text2, (error) => error ? reject(error) : resolve7());
+        const write = (text2) => new Promise((resolve8, reject) => {
+          process.stdout.write(text2, (error) => error ? reject(error) : resolve8());
         });
         const requestOptions = { signal: controller.signal };
         const result = kind === "chat" ? await client.createChatCompletion(
@@ -3543,7 +3550,7 @@ function registerAiGatewayInference(parent) {
         }
       } catch (error) {
         failed = true;
-        failure = error;
+        failure2 = error;
       } finally {
         await stream?.cancel();
         controller.abort();
@@ -3551,10 +3558,10 @@ function registerAiGatewayInference(parent) {
         process.removeListener("SIGTERM", interrupt);
         process.stdout.removeListener("error", outputError);
       }
-      if (failed && failure?.code !== "EPIPE") {
-        if (failure?.errorType === ErrorType.USER_REQUEST_PAYLOAD_ERROR)
-          usageError(failure instanceof Error ? failure.message : "Invalid inference options");
-        fail(failure);
+      if (failed && failure2?.code !== "EPIPE") {
+        if (failure2?.errorType === ErrorType.USER_REQUEST_PAYLOAD_ERROR)
+          usageError(failure2 instanceof Error ? failure2.message : "Invalid inference options");
+        fail(failure2);
       }
     });
   }
@@ -3882,20 +3889,20 @@ function renderGatewayDetail(value, format) {
   );
   if (rendered) console.log(rendered);
 }
-async function runList(command, opts, label, load2) {
+async function runList(command, opts, label, load3) {
   try {
     const format = await resolveOutput(command, opts);
     const client = await createAiGatewayClient();
-    renderGatewayList(responseItems(await load2(client)), format, label);
+    renderGatewayList(responseItems(await load3(client)), format, label);
   } catch (error) {
     failAiGateway(error);
   }
 }
-async function runDetail(command, opts, load2) {
+async function runDetail(command, opts, load3) {
   try {
     const format = await resolveOutput(command, opts);
     const client = await createAiGatewayClient();
-    renderGatewayDetail(await load2(client), format);
+    renderGatewayDetail(await load3(client), format);
   } catch (error) {
     failAiGateway(error);
   }
@@ -5230,8 +5237,8 @@ function registerAiGatewayReportCommand(aigateway) {
     const iso = z2.string().datetime({ offset: true });
     if (opts.start && (!iso.safeParse(opts.start).success || !iso.safeParse(opts.end).success) || !Number.isFinite(start.getTime()) || !Number.isFinite(end.getTime()) || start >= end)
       usageError("Provide a valid increasing ISO-8601 window with timezone");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
@@ -5255,7 +5262,7 @@ function registerAiGatewayReportCommand(aigateway) {
       ui.status("Collecting AI Gateway statistics and current configuration (read-only)...");
       const report = await collectGatewayEnvironmentReport(client, {
         title: opts.title,
-        maxPages,
+        maxPages: maxPages2,
         workspace: opts.workspace,
         tsgId: config.mgmtTsgId ?? process.env.PANW_AI_GW_TSG_ID ?? "",
         start,
@@ -5886,8 +5893,8 @@ async function withTimeout(promise, ms) {
   try {
     return await Promise.race([
       promise,
-      new Promise((resolve7) => {
-        timer = setTimeout(() => resolve7(TIMED_OUT), ms);
+      new Promise((resolve8) => {
+        timer = setTimeout(() => resolve8(TIMED_OUT), ms);
       })
     ]);
   } finally {
@@ -6052,8 +6059,8 @@ async function defaultMgmtProbe() {
     tsgId: config.mgmtTsgId,
     tokenEndpoint: config.mgmtTokenEndpoint
   });
-  const topics = await service.listTopics();
-  return topics.length;
+  const topics2 = await service.listTopics();
+  return topics2.length;
 }
 async function defaultAiGwProbe() {
   const config = await loadConfig();
@@ -6172,12 +6179,12 @@ function hasBin(bin) {
   }
 }
 function run2(bin, args, label) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const child = spawn(bin, args, { stdio: "inherit" });
     child.on("error", (err) => reject(new Error(`Failed to start ${bin}: ${err.message}`)));
     child.on("close", (code) => {
       if (code !== 0) reject(new Error(`${label} failed with exit code ${code}`));
-      else resolve7();
+      else resolve8();
     });
   });
 }
@@ -6787,8 +6794,8 @@ function registerRedTeamReportCommand(redteam, scanReport) {
     const format = opts.output ?? command.parent?.parent?.opts().output ?? "html";
     if (format !== "html" && format !== "markdown")
       usageError("Report output must be html or markdown");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
@@ -6812,7 +6819,7 @@ function registerRedTeamReportCommand(redteam, scanReport) {
       ui.status("Collecting Red Team statistics and current configuration (read-only)...");
       const report = await collectRedTeamEnvironmentReport(client, {
         title: opts.title,
-        maxPages
+        maxPages: maxPages2
       });
       const rendered = format === "html" ? renderRedTeamReportHtml(report) : renderRedTeamReportMarkdown(report);
       if (outputPath) {
@@ -8071,9 +8078,9 @@ function registerRedteamCommand(program) {
 }
 
 // src/cli/commands/runtime.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 import * as fs5 from "fs";
-import { readFile as readFile10 } from "fs/promises";
+import { readFile as readFile11 } from "fs/promises";
 import { basename as basename3, dirname as dirname3, join as join3, resolve as resolvePath } from "path";
 import chalk11 from "chalk";
 
@@ -8137,9 +8144,9 @@ function buildDataProtection(flags) {
   let hasAny = false;
   if (flags.dlpAction) {
     const dld = { action: flags.dlpAction };
-    const profiles = parseList(flags.dlpProfiles);
-    if (profiles) {
-      dld.member = profiles.map((text2) => ({ text: text2 }));
+    const profiles2 = parseList(flags.dlpProfiles);
+    if (profiles2) {
+      dld.member = profiles2.map((text2) => ({ text: text2 }));
     }
     if (flags.maskDataInline != null) {
       dld["mask-data-inline"] = flags.maskDataInline;
@@ -9525,11 +9532,655 @@ function registerDlpCommands(runtime) {
   register3(dlp);
 }
 
+// src/cli/commands/profile-transfer.ts
+import { randomUUID as randomUUID7 } from "crypto";
+import { readFile as readFile9, stat } from "fs/promises";
+import { extname, resolve as resolve5 } from "path";
+import { AISecSDKException as AISecSDKException2, ManagementClient } from "@cdot65/prisma-airs-sdk";
+import { dump as dump6, JSON_SCHEMA, load as load2 } from "js-yaml";
+import { ZodError } from "zod";
+
+// src/backup/runtime-profiles.ts
+import {
+  CreateSecurityProfileRequestSchema,
+  CustomTopicSchema,
+  PolicySchema,
+  SecurityProfileSchema
+} from "@cdot65/prisma-airs-sdk";
+import { z as z5 } from "zod";
+var RuntimeProfilesBackupSchema = z5.object({
+  version: z5.literal(1),
+  resourceType: z5.literal("runtime-security-profiles"),
+  exportedAt: z5.string().datetime({ offset: true }),
+  source: z5.object({ tsgId: z5.string().min(1) }).strict(),
+  profiles: z5.array(SecurityProfileSchema).min(1).max(1e4),
+  topics: z5.array(CustomTopicSchema).max(1e4)
+}).strict();
+function object(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function pagesLimit(value) {
+  if (!Number.isSafeInteger(value) || value < 1 || value > 1e3)
+    throw new Error("maxPages must be an integer from 1 to 1000");
+}
+async function offsetPages(fetch, maxPages2) {
+  pagesLimit(maxPages2);
+  const items = [];
+  let offset = 0;
+  for (let page = 0; page < maxPages2; page++) {
+    const result = await fetch(offset);
+    items.push(...result.items);
+    if (items.length > 1e4) throw new Error("Inventory exceeds the 10000-record safety limit");
+    if (result.next === void 0 || result.next === 0) return items;
+    if (!result.items.length || !Number.isSafeInteger(result.next) || result.next <= offset)
+      throw new Error("Inventory pagination did not advance");
+    offset = result.next;
+  }
+  throw new Error("Inventory is incomplete: increase --max-pages before exporting or restoring");
+}
+function latestProfiles(profiles2) {
+  const names = /* @__PURE__ */ new Map();
+  const revisions = /* @__PURE__ */ new Set();
+  for (const profile of profiles2) {
+    assertName(profile.profile_name);
+    const identity2 = JSON.stringify([profile.profile_name, profile.profile_id, profile.revision]);
+    if (revisions.has(identity2)) throw new Error("Inventory contains repeated profile records");
+    revisions.add(identity2);
+    const prior = names.get(profile.profile_name);
+    if (prior && prior.profile_id !== profile.profile_id)
+      throw new Error(`Ambiguous profile name: ${profile.profile_name}`);
+    if (!prior || (profile.revision ?? 0) > (prior.revision ?? 0))
+      names.set(profile.profile_name, profile);
+  }
+  return [...names.values()].sort((a, b) => a.profile_name.localeCompare(b.profile_name));
+}
+function assertName(name) {
+  if (!name.trim() || [...name].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+    throw new Error("Profile/topic names must be nonempty and contain no control characters");
+}
+function assertTenant(profiles2, tsgId) {
+  if (profiles2.some((profile) => profile.tsg_id != null && String(profile.tsg_id) !== tsgId))
+    throw new Error("Destination/source profile tenant identity does not match the selected TSG");
+}
+async function profiles(api, maxPages2) {
+  return latestProfiles(
+    await offsetPages(async (offset) => {
+      const page = await api.profiles.list({ offset, limit: 100, latest: true });
+      return { items: page.ai_profiles, next: page.next_offset };
+    }, maxPages2)
+  );
+}
+async function topics(api, maxPages2) {
+  return offsetPages(async (offset) => {
+    const page = await api.topics.list({ offset, limit: 100 });
+    return { items: page.custom_topics, next: page.next_offset };
+  }, maxPages2);
+}
+function topicReferences(policy) {
+  const refs = [];
+  const visit = (value) => {
+    if (Array.isArray(value)) {
+      value.forEach(visit);
+      return;
+    }
+    if (!object(value)) return;
+    if ("topic_id" in value) {
+      if (typeof value.topic_id !== "string" || typeof value.topic_name !== "string" || !Number.isSafeInteger(value.revision) || Number(value.revision) < 0)
+        throw new Error("Invalid topic identity in profile policy");
+      refs.push(value);
+    }
+    Object.values(value).forEach(visit);
+  };
+  visit(policy);
+  return refs;
+}
+function topicKey(ref) {
+  return JSON.stringify([ref.topic_id, ref.revision]);
+}
+async function backupRuntimeProfiles(api, tsgId, options = {}) {
+  if (!tsgId) throw new Error("Source TSG ID is required");
+  const maxPages2 = options.maxPages ?? 100;
+  let selected = await profiles(api, maxPages2);
+  assertTenant(selected, tsgId);
+  if (options.profile)
+    selected = selected.filter(
+      (p) => p.profile_id === options.profile || p.profile_name === options.profile
+    );
+  if (!selected.length) throw new Error("No matching profiles to back up");
+  if (options.profile && selected.length !== 1) throw new Error("Ambiguous profile selector");
+  for (const profile of selected) {
+    if (!profile.policy) throw new Error(`Profile has no policy: ${profile.profile_name}`);
+    PolicySchema.parse(profile.policy);
+  }
+  const refs = selected.flatMap((profile) => topicReferences(profile.policy));
+  const definitions = refs.length ? await topics(api, maxPages2) : [];
+  const needed = /* @__PURE__ */ new Map();
+  for (const ref of refs) {
+    const matches = definitions.filter((topic) => topicKey(topic) === topicKey(ref));
+    if (matches.length !== 1 || matches[0].topic_name !== ref.topic_name)
+      throw new Error(
+        `Cannot export the exact referenced topic revision: ${ref.topic_name} revision ${ref.revision}`
+      );
+    needed.set(topicKey(ref), matches[0]);
+  }
+  return RuntimeProfilesBackupSchema.parse({
+    version: 1,
+    resourceType: "runtime-security-profiles",
+    exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    source: { tsgId },
+    profiles: selected,
+    topics: [...needed.values()]
+  });
+}
+function sameTopic(a, b) {
+  return a.description === b.description && JSON.stringify(a.examples) === JSON.stringify(b.examples) && (a.active ?? true) === (b.active ?? true);
+}
+function dlpReferences(policy) {
+  if (!object(policy)) return [];
+  const refs = [];
+  for (const entry of Array.isArray(policy["dlp-data-profiles"]) ? policy["dlp-data-profiles"] : []) {
+    if (!object(entry) || typeof entry.name !== "string")
+      throw new Error("Invalid embedded DLP reference");
+    refs.push({ value: entry, name: entry.name, kind: "embedded" });
+  }
+  for (const entry of Array.isArray(policy["ai-security-profiles"]) ? policy["ai-security-profiles"] : []) {
+    if (!object(entry) || !object(entry["model-configuration"])) continue;
+    const protection = entry["model-configuration"]["data-protection"];
+    if (!object(protection) || !object(protection["data-leak-detection"])) continue;
+    const members = protection["data-leak-detection"].member;
+    if (!Array.isArray(members)) continue;
+    for (const member of members) {
+      if (!object(member) || typeof member.text !== "string") throw new Error("Invalid DLP member");
+      refs.push({ value: member, name: member.text, kind: "member" });
+    }
+  }
+  return refs;
+}
+function assertKnownPolicyReferences(policy) {
+  const known = new Map([
+    ...topicReferences(policy).map((ref) => [ref, ["topic_id"]]),
+    ...dlpReferences(policy).map((ref) => [
+      ref.value,
+      ref.kind === "embedded" ? ["id", "uuid"] : ["id"]
+    ])
+  ]);
+  const visit = (value, path3) => {
+    if (Array.isArray(value)) {
+      value.forEach((v, i) => {
+        visit(v, `${path3}[${i}]`);
+      });
+      return;
+    }
+    if (!object(value)) return;
+    for (const [key, child] of Object.entries(value)) {
+      if (child !== null && child !== "" && /(?:^|[-_])(id|uuid)$|(?:Id|ID|Uuid|UUID)$/.test(key) && !known.get(value)?.includes(key))
+        throw new Error(`Unsupported cross-tenant policy reference at ${path3}.${key}`);
+      visit(child, `${path3}.${key}`);
+    }
+  };
+  visit(policy, "policy");
+}
+async function dataProfiles(api, maxPages2) {
+  const items = [];
+  for (let page = 0; page < maxPages2; page++) {
+    const result = await api.dataProfiles.list({ page, size: 100 });
+    items.push(...result.content);
+    if (items.length > 1e4) throw new Error("DLP inventory exceeds the safety limit");
+    const last = result.last ?? (result.totalPages !== void 0 ? page + 1 >= result.totalPages : result.content.length < 100);
+    if (last) return items;
+    if (!result.content.length) throw new Error("DLP inventory pagination did not advance");
+  }
+  throw new Error("DLP inventory is incomplete; increase --max-pages");
+}
+async function planRuntimeProfilesRestore(api, input, destinationTsgId, options = {}) {
+  const backup = RuntimeProfilesBackupSchema.parse(input);
+  if (!destinationTsgId) throw new Error("Destination TSG ID is required");
+  const maxPages2 = options.maxPages ?? 100;
+  pagesLimit(maxPages2);
+  const prefix = options.namePrefix ?? "";
+  if (prefix.length > 64 || [...prefix].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+    throw new Error("Invalid --name-prefix");
+  const conflict = options.onConflict ?? "error";
+  if (!["error", "skip", "update"].includes(conflict)) throw new Error("Invalid conflict policy");
+  const selected = latestProfiles(backup.profiles);
+  assertTenant(selected, backup.source.tsgId);
+  if (selected.length !== backup.profiles.length)
+    throw new Error("Backup contains duplicate profile names/revisions");
+  const crossTenant = backup.source.tsgId !== destinationTsgId;
+  for (const profile of selected) {
+    if (!profile.policy) throw new Error("Backup profile has no policy");
+    CreateSecurityProfileRequestSchema.parse({
+      profile_name: `${prefix}${profile.profile_name}`,
+      active: profile.active,
+      policy: profile.policy
+    });
+    if (crossTenant) assertKnownPolicyReferences(profile.policy);
+  }
+  const existing = await profiles(api, maxPages2);
+  assertTenant(existing, destinationTsgId);
+  const profilePlans = selected.map((source) => {
+    const name = `${prefix}${source.profile_name}`;
+    const match = existing.find((p) => p.profile_name === name);
+    if (match && conflict === "error")
+      throw new Error(
+        `Destination profile already exists: ${name}; choose --on-conflict skip or update`
+      );
+    if (match && !match.profile_id) throw new Error("Destination profile has no identity");
+    return {
+      source: structuredClone(source),
+      name,
+      existing: match,
+      action: match ? conflict === "skip" ? "skip" : "update" : "create"
+    };
+  });
+  const changing = profilePlans.filter((p) => p.action !== "skip");
+  const refs = changing.flatMap((p) => topicReferences(p.source.policy));
+  const targetTopics = refs.length ? await topics(api, maxPages2) : [];
+  const topicPlans = /* @__PURE__ */ new Map();
+  const topicNames = /* @__PURE__ */ new Map();
+  for (const ref of refs) {
+    const key = topicKey(ref);
+    if (topicPlans.has(key)) continue;
+    const definitions = backup.topics.filter(
+      (topic) => topicKey(topic) === key && topic.topic_name === ref.topic_name
+    );
+    if (definitions.length !== 1)
+      throw new Error(`Backup lacks an unambiguous topic definition: ${ref.topic_name}`);
+    const source = definitions[0];
+    const name = `${prefix}${source.topic_name}`;
+    assertName(name);
+    if (topicNames.has(name) && topicNames.get(name) !== key)
+      throw new Error(
+        `Multiple source revisions use topic name ${name}; split the backup by profile/revision before restoring`
+      );
+    topicNames.set(name, key);
+    const matches = targetTopics.filter((t) => t.topic_name === name).sort((a, b) => b.revision - a.revision);
+    const match = matches[0];
+    if (new Set(matches.map((t) => t.topic_id)).size > 1)
+      throw new Error(`Ambiguous destination topic name: ${name}`);
+    if (match && (!match.topic_id || !sameTopic(source, match)))
+      throw new Error(
+        `Destination topic differs: ${name}; use --name-prefix to avoid changing a shared topic`
+      );
+    topicPlans.set(key, { key, name, source, existing: match });
+  }
+  const dlpRefs = crossTenant ? changing.flatMap((p) => dlpReferences(p.source.policy)) : [];
+  const names = [...new Set(dlpRefs.map((ref) => ref.name))];
+  for (const name of names)
+    if (!options.dlpMap?.[name])
+      throw new Error(
+        `Cross-tenant DLP reference requires explicit --dlp-map ${name}=<destination-name>; DLP resources are not cloned`
+      );
+  const catalog = names.length ? await dataProfiles(api, maxPages2) : [];
+  const dlpMappings = names.map((name) => {
+    const target = options.dlpMap?.[name];
+    const matches = catalog.filter((p) => p.name === target && p.profile_status !== "deleted");
+    if (matches.length !== 1 || !matches[0].id)
+      throw new Error(`Missing or ambiguous destination DLP profile: ${target}`);
+    if (dlpRefs.some((ref) => ref.name === name && "version" in ref.value) && matches[0].version == null)
+      throw new Error(`Destination DLP version is unknown: ${target}`);
+    return {
+      source: name,
+      destination: String(target),
+      id: matches[0].id,
+      version: matches[0].version ?? void 0
+    };
+  });
+  return {
+    sourceTsgId: backup.source.tsgId,
+    destinationTsgId,
+    profiles: profilePlans,
+    topics: [...topicPlans.values()],
+    dlpMappings,
+    maxPages: maxPages2
+  };
+}
+function canonical(value) {
+  const order = (v) => Array.isArray(v) ? v.map(order) : object(v) ? Object.fromEntries(
+    Object.entries(v).sort(([a], [b]) => a.localeCompare(b)).map(([k, child]) => [k, order(child)])
+  ) : v;
+  return JSON.stringify(order(value));
+}
+function unchanged(current, prior) {
+  return Boolean(
+    current && current.profile_id === prior.profile_id && current.revision === prior.revision && current.active === prior.active && canonical(current.policy) === canonical(prior.policy)
+  );
+}
+async function restoreRuntimeProfiles(api, plan) {
+  const result = {
+    sourceTsgId: plan.sourceTsgId,
+    destinationTsgId: plan.destinationTsgId,
+    complete: false,
+    topics: [],
+    profiles: []
+  };
+  try {
+    const latest = await profiles(api, plan.maxPages);
+    assertTenant(latest, plan.destinationTsgId);
+    if (plan.dlpMappings.length) {
+      const catalog = await dataProfiles(api, plan.maxPages);
+      for (const mapping of plan.dlpMappings) {
+        const matches = catalog.filter(
+          (p) => p.name === mapping.destination && p.profile_status !== "deleted"
+        );
+        if (matches.length !== 1 || matches[0].id !== mapping.id || (matches[0].version ?? void 0) !== mapping.version)
+          throw new Error(`Destination DLP profile changed after planning: ${mapping.destination}`);
+      }
+    }
+    for (const item of plan.profiles) {
+      if (item.action === "skip") continue;
+      const current = latest.find((p) => p.profile_name === item.name);
+      if (item.existing ? !unchanged(current, item.existing) : Boolean(current))
+        throw new Error(`Destination profile changed after planning: ${item.name}`);
+    }
+    const mappedTopics = /* @__PURE__ */ new Map();
+    for (const item of plan.topics) {
+      let topic = item.existing;
+      const inventory2 = await topics(api, plan.maxPages);
+      if (topic) {
+        const current = inventory2.find(
+          (t) => t.topic_id === topic?.topic_id && t.revision === topic?.revision
+        );
+        if (!current || !sameTopic(current, item.source))
+          throw new Error(`Destination topic changed after planning: ${item.name}`);
+      } else {
+        if (inventory2.some((t) => t.topic_name === item.name))
+          throw new Error(`Destination topic changed after planning: ${item.name}`);
+        topic = await api.topics.create({
+          topic_name: item.name,
+          description: item.source.description,
+          examples: item.source.examples,
+          active: item.source.active
+        });
+      }
+      if (!topic.topic_id || topic.topic_name !== item.name || !Number.isSafeInteger(topic.revision) || !sameTopic(topic, item.source))
+        throw new Error(`Topic response did not verify: ${item.name}`);
+      mappedTopics.set(item.key, topic);
+      result.topics.push({
+        name: item.name,
+        id: topic.topic_id,
+        action: item.existing ? "reused" : "created"
+      });
+    }
+    for (const item of plan.profiles) {
+      if (item.action === "skip") {
+        result.profiles.push({ name: item.name, action: "skipped", id: item.existing?.profile_id });
+        continue;
+      }
+      const policy = structuredClone(item.source.policy);
+      for (const ref of topicReferences(policy)) {
+        const topic = mappedTopics.get(topicKey(ref));
+        if (!topic?.topic_id) throw new Error("Missing planned topic mapping");
+        ref.topic_id = topic.topic_id;
+        ref.topic_name = topic.topic_name;
+        ref.revision = topic.revision;
+      }
+      for (const ref of dlpReferences(policy)) {
+        const mapping = plan.dlpMappings.find((m) => m.source === ref.name);
+        if (!mapping) continue;
+        if (ref.kind === "embedded") {
+          ref.value.name = mapping.destination;
+          ref.value.uuid = mapping.id;
+        } else ref.value.text = mapping.destination;
+        if ("id" in ref.value) ref.value.id = mapping.id;
+        if ("version" in ref.value) {
+          if (mapping.version === void 0) throw new Error("Destination DLP version is unknown");
+          ref.value.version = String(mapping.version);
+        }
+      }
+      const body = CreateSecurityProfileRequestSchema.parse({
+        profile_name: item.name,
+        active: item.source.active,
+        policy
+      });
+      const inventory2 = await profiles(api, plan.maxPages);
+      assertTenant(inventory2, plan.destinationTsgId);
+      const current = inventory2.find((p) => p.profile_name === item.name);
+      if (item.existing ? !unchanged(current, item.existing) : Boolean(current))
+        throw new Error(`Destination profile changed after planning: ${item.name}`);
+      const response = item.action === "update" && item.existing?.profile_id ? await api.profiles.update(item.existing.profile_id, body) : await api.profiles.create(body);
+      result.profiles.push({
+        name: item.name,
+        action: item.action === "create" ? "created" : "updated",
+        id: response.profile_id
+      });
+      const verified = (await profiles(api, plan.maxPages)).find(
+        (p) => p.profile_name === item.name
+      );
+      if (verified) assertTenant([verified], plan.destinationTsgId);
+      if (!verified?.profile_id || response.profile_id && response.profile_id !== verified.profile_id || item.source.active !== void 0 && verified.active !== item.source.active || canonical(verified.policy) !== canonical(policy))
+        throw new Error(`Restored profile did not verify: ${item.name}`);
+    }
+    result.complete = true;
+  } catch (error) {
+    const status = error?.statusCode;
+    result.error = Number.isInteger(status) ? `API request failed (HTTP ${status}); verify destination state before retrying` : error instanceof Error && /^(Destination|Topic response|Missing planned|Restored profile|Inventory|DLP inventory)/.test(
+      error.message
+    ) ? error.message : "Restore stopped; verify destination state before retrying";
+  }
+  return result;
+}
+
+// src/cli/commands/profile-transfer.ts
+var MAX_BACKUP_BYTES = 20 * 1024 * 1024;
+var FORMATS = "Output format: pretty, table, markdown, csv, json, yaml";
+function maxPages(value) {
+  if (!/^\d+$/.test(value) || Number(value) < 1 || Number(value) > 1e3)
+    usageError("--max-pages must be an integer from 1 to 1000");
+  return Number(value);
+}
+function dlpMap(values) {
+  const entries = values.map((value) => {
+    const at = value.indexOf("=");
+    if (at < 1 || at === value.length - 1)
+      throw new CliUsageError("--dlp-map requires source-name=destination-name");
+    return [value.slice(0, at), value.slice(at + 1)];
+  });
+  if (new Set(entries.map(([key]) => key)).size !== entries.length)
+    throw new CliUsageError("Duplicate source names in --dlp-map");
+  return Object.fromEntries(entries);
+}
+async function context() {
+  const config = await loadConfig();
+  if (!config.mgmtTsgId || !config.mgmtClientId || !config.mgmtClientSecret)
+    throw new CliUsageError(
+      "Profile transfer requires configured Management client ID, secret and TSG ID"
+    );
+  const client = new ManagementClient({ ...managementClientOptions(config), numRetries: 0 });
+  return {
+    api: {
+      profiles: client.profiles,
+      topics: client.topics,
+      dataProfiles: client.dlp.dataProfiles
+    },
+    tsgId: config.mgmtTsgId
+  };
+}
+function failure(error) {
+  if (error instanceof CliUsageError) usageError(error.message);
+  if (error instanceof ZodError) {
+    ui.error("Invalid profile backup/request schema; content is not logged.");
+  } else if (error instanceof AISecSDKException2) {
+    ui.error(
+      `Profile transfer API request failed${error.statusCode ? ` (HTTP ${error.statusCode})` : ""}; no automatic retry was made.`
+    );
+  } else if (error?.code) {
+    ui.error(
+      `Profile transfer file operation failed (${error.code}); existing files are not overwritten.`
+    );
+  } else {
+    ui.error(error instanceof Error ? error.message : "Profile transfer failed");
+  }
+  process.exitCode = 1;
+}
+function registerProfileTransferCommands(profiles2) {
+  const backup = profiles2.command("backup [profile]").description(
+    "Back up latest Runtime profile policies and referenced topic definitions; no argument means all profiles"
+  ).option("--all", "Back up all latest profiles (cannot be combined with a profile selector)").option("--file-format <format>", "Backup file format: json or yaml", "json").option("--output-file <path>", "New private backup file; defaults to the current directory").option(
+    "--max-pages <n>",
+    "Maximum pages per inventory; incomplete exports fail",
+    maxPages,
+    100
+  ).option("--output <format>", FORMATS).addHelpText(
+    "after",
+    examples(
+      "airs runtime profiles backup --all --output-file ./profiles.json",
+      'airs runtime profiles backup "Production" --file-format yaml --output-file ./production.yaml'
+    )
+  ).action(async (profile, opts) => {
+    try {
+      if (opts.all && profile)
+        throw new CliUsageError("Choose either a profile selector or --all");
+      if (!["json", "yaml"].includes(opts.fileFormat))
+        throw new CliUsageError("--file-format must be json or yaml");
+      const format = await resolveOutput(backup, opts);
+      const extension = opts.fileFormat === "yaml" ? ".yaml" : ".json";
+      if (opts.outputFile === "-")
+        throw new CliUsageError("Backups require a private file destination, not stdout");
+      const path3 = resolve5(
+        opts.outputFile ?? `airs-runtime-profiles-backup-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}-${randomUUID7().slice(0, 8)}${extension}`
+      );
+      if (!(opts.fileFormat === "json" ? [".json"] : [".yaml", ".yml"]).includes(
+        extname(path3).toLowerCase()
+      ))
+        throw new CliUsageError("Backup filename extension must match --file-format");
+      const { api, tsgId } = await context();
+      const data = await backupRuntimeProfiles(api, tsgId, { profile, maxPages: opts.maxPages });
+      const content = opts.fileFormat === "yaml" ? dump6(data, { schema: JSON_SCHEMA, noRefs: true, lineWidth: -1 }) : `${JSON.stringify(data, null, 2)}
+`;
+      if (Buffer.byteLength(content) > MAX_BACKUP_BYTES)
+        throw new Error("Backup exceeds the 20 MiB size limit; select individual profiles");
+      await writeReportFile(path3, content);
+      console.log(
+        formatOutput(
+          [
+            {
+              file: path3,
+              sourceTsgId: tsgId,
+              profiles: data.profiles.length,
+              topics: data.topics.length
+            }
+          ],
+          [
+            { key: "file", label: "Backup file" },
+            { key: "sourceTsgId", label: "Source TSG" },
+            { key: "profiles", label: "Profiles" },
+            { key: "topics", label: "Topics" }
+          ],
+          format === "pretty" ? "table" : format
+        )
+      );
+    } catch (error) {
+      failure(error);
+    }
+  });
+  const restore = profiles2.command("restore <file>").description(
+    "Restore profile policies into the selected tenant; validate all dependencies before changes"
+  ).option("--dry-run", "Read and validate a restore plan without changing destination resources").option("--name-prefix <prefix>", "Prefix restored profile and topic names to avoid collisions").option("--on-conflict <policy>", "Existing profile names: error, skip or update", "error").option(
+    "--dlp-map <source=destination>",
+    "Explicit cross-tenant binding to an existing DLP data profile (repeatable)",
+    (value, prior) => [...prior, value],
+    []
+  ).option(
+    "--max-pages <n>",
+    "Maximum pages per inventory; incomplete inventories fail",
+    maxPages,
+    100
+  ).option("--expect-tsg <id>", "Assert destination tenant ID; required with --force").option(
+    "--force",
+    "Execute without a prompt; requires --expect-tsg and does not override conflicts"
+  ).option("--output <format>", FORMATS).addHelpText(
+    "after",
+    examples(
+      "airs runtime profiles restore ./profiles.json --dry-run --output json",
+      "airs runtime profiles restore ./profiles.json --name-prefix migrated- --expect-tsg <destination-tsg> --force"
+    )
+  ).action(async (file, opts) => {
+    try {
+      if (!["error", "skip", "update"].includes(opts.onConflict))
+        throw new CliUsageError("--on-conflict must be error, skip or update");
+      if (opts.force && !opts.expectTsg)
+        throw new CliUsageError("--force requires --expect-tsg <destination-tsg>");
+      const mappings = dlpMap(opts.dlpMap);
+      const path3 = resolve5(file);
+      const extension = extname(path3).toLowerCase();
+      if (![".json", ".yaml", ".yml"].includes(extension))
+        throw new CliUsageError("Backup file must use .json, .yaml or .yml");
+      const info = await stat(path3);
+      if (!info.isFile() || info.size > MAX_BACKUP_BYTES)
+        throw new CliUsageError("Backup must be a regular file no larger than 20 MiB");
+      let input;
+      try {
+        const text2 = await readFile9(path3, "utf8");
+        if (Buffer.byteLength(text2) > MAX_BACKUP_BYTES) throw new Error("Backup too large");
+        input = extension === ".json" ? JSON.parse(text2) : load2(text2, { schema: JSON_SCHEMA });
+      } catch {
+        throw new CliUsageError("Backup is not valid JSON/YAML; contents are not logged");
+      }
+      const data = RuntimeProfilesBackupSchema.parse(input);
+      const format = await resolveOutput(restore, opts);
+      const { api, tsgId } = await context();
+      if (opts.expectTsg && opts.expectTsg !== tsgId)
+        throw new CliUsageError(
+          "--expect-tsg does not match the selected destination tenant; no API request was made"
+        );
+      const plan = await planRuntimeProfilesRestore(api, data, tsgId, {
+        namePrefix: opts.namePrefix,
+        onConflict: opts.onConflict,
+        maxPages: opts.maxPages,
+        dlpMap: mappings
+      });
+      const summary = {
+        sourceTsgId: plan.sourceTsgId,
+        destinationTsgId: plan.destinationTsgId,
+        dryRun: Boolean(opts.dryRun),
+        profiles: plan.profiles.map((p) => ({ name: p.name, action: p.action })),
+        topics: plan.topics.map((t) => ({
+          name: t.name,
+          action: t.existing ? "reuse" : "create"
+        })),
+        dlpMappings: plan.dlpMappings.map((m) => ({
+          source: m.source,
+          destination: m.destination
+        }))
+      };
+      const columns = [
+        { key: "sourceTsgId", label: "Source TSG" },
+        { key: "destinationTsgId", label: "Destination TSG" },
+        { key: "profiles", label: "Profiles" },
+        { key: "topics", label: "Topics" },
+        { key: "dlpMappings", label: "DLP mappings" },
+        { key: "dryRun", label: "Dry run" },
+        { key: "complete", label: "Complete" }
+      ];
+      if (opts.dryRun) {
+        console.log(formatOutput([summary], columns, format === "pretty" ? "table" : format));
+        return;
+      }
+      const changing = plan.profiles.filter((p) => p.action !== "skip");
+      if (changing.length)
+        await confirmOrAbort(
+          `Restore ${changing.length} profiles from TSG ${plan.sourceTsgId} to TSG ${tsgId} (${changing.filter((p) => p.action === "update").length} updates)?`,
+          Boolean(opts.force),
+          { action: `restore profiles into TSG ${tsgId}` }
+        );
+      const result = await restoreRuntimeProfiles(api, plan);
+      console.log(formatOutput([{ ...result }], columns, format === "pretty" ? "table" : format));
+      if (!result.complete) {
+        ui.error(result.error ?? "Restore incomplete");
+        process.exitCode = 1;
+      }
+    } catch (error) {
+      failure(error);
+    }
+  });
+}
+
 // src/cli/commands/profiles-cleanup.ts
 import { execSync } from "child_process";
-function findDuplicateProfiles(profiles) {
+function findDuplicateProfiles(profiles2) {
   const groups = /* @__PURE__ */ new Map();
-  for (const p of profiles) {
+  for (const p of profiles2) {
     const rev = p.revision ?? 0;
     const entry = { id: p.profileId, revision: rev };
     const existing = groups.get(p.profileName);
@@ -9628,8 +10279,8 @@ function registerCleanupCommand(parent) {
 
 // src/cli/commands/runtime-dashboard.ts
 import { lstat as lstat4 } from "fs/promises";
-import { resolve as resolve5 } from "path";
-import { dump as dump6 } from "js-yaml";
+import { resolve as resolve6 } from "path";
+import { dump as dump7 } from "js-yaml";
 var TIME_UNITS = ["hour", "hours", "day", "days"];
 function integer3(value, name, minimum = 0) {
   const n = Number(value);
@@ -9704,7 +10355,7 @@ function registerRuntimeDashboardCommands(runtime) {
               "Scan content requires exactly one of --show-content or --output-file <new-path>"
             );
           if (opts.outputFile) {
-            const path3 = resolve5(text(opts.outputFile, "--output-file"));
+            const path3 = resolve6(text(opts.outputFile, "--output-file"));
             const existing = await lstat4(path3).catch((error) => {
               if (error.code !== "ENOENT") throw error;
               return void 0;
@@ -9718,9 +10369,9 @@ function registerRuntimeDashboardCommands(runtime) {
           numRetries: 0
         });
         const result = await read(client.dashboard);
-        const output = format === "yaml" ? dump6(result, { noRefs: true, lineWidth: -1 }).trimEnd() : JSON.stringify(result, null, 2);
+        const output = format === "yaml" ? dump7(result, { noRefs: true, lineWidth: -1 }).trimEnd() : JSON.stringify(result, null, 2);
         if (command.name() === "scan-content" && opts.outputFile) {
-          await writeReportFile(resolve5(String(opts.outputFile)), `${output}
+          await writeReportFile(resolve6(String(opts.outputFile)), `${output}
 `);
           ui.status("Scan content exported to the requested private file (0600).");
         } else console.log(output);
@@ -9892,8 +10543,8 @@ function registerRuntimeDashboardCommands(runtime) {
 
 // src/cli/commands/runtime-report.ts
 import { lstat as lstat5 } from "fs/promises";
-import { resolve as resolve6 } from "path";
-import { randomUUID as randomUUID7 } from "crypto";
+import { resolve as resolve7 } from "path";
+import { randomUUID as randomUUID8 } from "crypto";
 function registerRuntimeReportCommand(runtime) {
   const command = runtime.command("report").description("Generate a daily AI Runtime Security environment report (read-only)").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
     "--output-file <path>",
@@ -9910,15 +10561,15 @@ function registerRuntimeReportCommand(runtime) {
     const format = opts.output ?? command.parent?.parent?.opts().output ?? "html";
     if (format !== "html" && format !== "markdown")
       usageError("Report output must be html or markdown");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
     if (opts.outputFile !== void 0 && !opts.outputFile.trim())
       usageError("--output-file cannot be empty");
-    const defaultName = `airs-runtime-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID7().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
-    const outputPath = opts.outputFile === "-" ? void 0 : resolve6(opts.outputFile ?? defaultName);
+    const defaultName = `airs-runtime-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID8().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
+    const outputPath = opts.outputFile === "-" ? void 0 : resolve7(opts.outputFile ?? defaultName);
     try {
       if (outputPath) {
         const existing = await lstat5(outputPath).catch((error) => {
@@ -9933,7 +10584,7 @@ function registerRuntimeReportCommand(runtime) {
         numRetries: 0
       });
       ui.status("Collecting daily runtime activity and current configuration (read-only)...");
-      const report = await collectRuntimeDailyReport(client, { title: opts.title, maxPages });
+      const report = await collectRuntimeDailyReport(client, { title: opts.title, maxPages: maxPages2 });
       const rendered = format === "html" ? renderRuntimeReportHtml(report) : renderRuntimeReportMarkdown(report);
       if (outputPath) {
         await writeReportFile(outputPath, rendered);
@@ -10093,7 +10744,7 @@ function registerCreateCommand(parent) {
 }
 
 // src/cli/commands/topics-eval.ts
-import { readFile as readFile9 } from "fs/promises";
+import { readFile as readFile10 } from "fs/promises";
 
 // src/core/prompt-loader.ts
 function parseCsvLine(line) {
@@ -10236,7 +10887,7 @@ function registerEvalCommand(parent) {
     resolveDeprecatedAliases(cmd, opts);
     try {
       const config = await loadConfig();
-      const csvContent = await readFile9(opts.prompts, "utf-8");
+      const csvContent = await readFile10(opts.prompts, "utf-8");
       const { cases, intent } = loadPrompts(csvContent, (msg) => ui.status(`Warning: ${msg}`));
       if (!config.airsApiKey && !config.airsApiToken) {
         fail(new Error("PANW_AI_SEC_API_KEY or PANW_AI_SEC_API_TOKEN is required"));
@@ -10260,8 +10911,8 @@ function registerEvalCommand(parent) {
 
 // src/cli/commands/topics-revert.ts
 async function revertTopic(mgmt, profileName, topicName) {
-  const topics = await mgmt.listTopics();
-  const match = topics.find((t) => t.topic_name === topicName);
+  const topics2 = await mgmt.listTopics();
+  const match = topics2.find((t) => t.topic_name === topicName);
   if (!match || !match.topic_id) {
     throw new Error(`Topic "${topicName}" not found`);
   }
@@ -10408,7 +11059,7 @@ function completedBulkResults(state) {
 }
 async function writeBulkResults(outputPath, results) {
   await fs5.promises.mkdir(dirname3(outputPath), { recursive: true });
-  const temporary = `${outputPath}.tmp-${process.pid}-${randomUUID8()}`;
+  const temporary = `${outputPath}.tmp-${process.pid}-${randomUUID9()}`;
   try {
     await fs5.promises.writeFile(temporary, SdkRuntimeService.formatResultsCsv(results), {
       encoding: "utf-8",
@@ -10535,7 +11186,7 @@ function registerRuntimeCommand(program) {
       if (!config.airsApiKey && !config.airsApiToken) {
         fail(new Error("PANW_AI_SEC_API_KEY or PANW_AI_SEC_API_TOKEN is required"));
       }
-      const raw = await readFile10(opts.file, "utf-8");
+      const raw = await readFile11(opts.file, "utf-8");
       const prompts = parseInputFile(raw, opts.file);
       if (prompts.length === 0) {
         usageError("No prompts found in input file");
@@ -10750,16 +11401,17 @@ function registerRuntimeCommand(program) {
       const fmt = await resolveOutput(deploymentProfilesList, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
       const service = await createMgmtService();
-      const profiles2 = await service.listDeploymentProfiles({
+      const profiles3 = await service.listDeploymentProfiles({
         unactivated: opts.unactivated
       });
-      renderDeploymentProfileList(profiles2, fmt);
+      renderDeploymentProfileList(profiles3, fmt);
     } catch (err) {
       fail(err);
     }
   });
-  const profiles = runtime.command("profiles").description("Manage AIRS security profiles");
-  const profilesList = registerListFlags(profiles.command("list"), { dialect: "offset" }).description("List security profiles").option("--all-versions", "Include every profile revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
+  const profiles2 = runtime.command("profiles").description("Manage AIRS security profiles");
+  registerProfileTransferCommands(profiles2);
+  const profilesList = registerListFlags(profiles2.command("list"), { dialect: "offset" }).description("List security profiles").option("--all-versions", "Include every profile revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
     "after",
     examples(
       "airs runtime profiles list",
@@ -10798,7 +11450,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  const profilesGet = profiles.command("get <nameOrId>").description("Get a security profile by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
+  const profilesGet = profiles2.command("get <nameOrId>").description("Get a security profile by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
     try {
       const fmt = await resolveOutput(profilesGet, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
@@ -10807,10 +11459,10 @@ function registerRuntimeCommand(program) {
         nameOrId
       );
       if (opts.revision !== void 0 || opts.allVersions) {
-        const profiles2 = (await service.listAllProfiles({ latest: false })).filter(
+        const profiles3 = (await service.listAllProfiles({ latest: false })).filter(
           (profile) => isUuid ? profile.profileId === nameOrId : profile.profileName === nameOrId
         );
-        const selected = opts.revision === void 0 ? profiles2 : profiles2.filter((profile) => profile.revision === opts.revision);
+        const selected = opts.revision === void 0 ? profiles3 : profiles3.filter((profile) => profile.revision === opts.revision);
         if (selected.length === 0) throw new Error(`Profile ${nameOrId} not found`);
         if (opts.allVersions) emitList(profilesView, selected, fmt);
         else emitDetail(profilesView, selected[0], fmt);
@@ -10822,7 +11474,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("create").description("Create a new security profile").requiredOption("--name <name>", "Profile name").option("--no-active", "Create profile as inactive").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile configuration (legacy)").action(async (opts) => {
+  profiles2.command("create").description("Create a new security profile").requiredOption("--name <name>", "Profile name").option("--no-active", "Create profile as inactive").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile configuration (legacy)").action(async (opts) => {
     const service = await createMgmtService();
     try {
       renderRuntimeConfigHeader();
@@ -10877,7 +11529,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("update <nameOrId>").description("Update a security profile by name or UUID").option("--name <name>", "Update profile name").option("--no-active", "Set profile as inactive").option("--active", "Set profile as active").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile updates (legacy)").action(async (nameOrId, opts) => {
+  profiles2.command("update <nameOrId>").description("Update a security profile by name or UUID").option("--name <name>", "Update profile name").option("--no-active", "Set profile as inactive").option("--active", "Set profile as active").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile updates (legacy)").action(async (nameOrId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -10926,7 +11578,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("delete <nameOrId>").description("Delete a security profile by name or UUID").option("--force", "Skip confirmation and force delete (removes from referencing policies)").option("--updated-by <email>", "Email of user performing force deletion").action(async (nameOrId, opts) => {
+  profiles2.command("delete <nameOrId>").description("Delete a security profile by name or UUID").option("--force", "Skip confirmation and force delete (removes from referencing policies)").option("--updated-by <email>", "Email of user performing force deletion").action(async (nameOrId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -10959,7 +11611,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerCleanupCommand(profiles);
+  registerCleanupCommand(profiles2);
   const resumePoll = runtime.command("resume-poll <stateFile>").description("Resume polling for a previously submitted bulk scan").option("--output-file <file>", "Output CSV file path");
   registerDeprecatedAlias(resumePoll, {
     oldFlag: "--output <file>",
@@ -11107,10 +11759,10 @@ function registerRuntimeCommand(program) {
     );
     process.exitCode = 1;
   });
-  const topics = runtime.command("topics").description("Manage AIRS custom topics and guardrail generation");
-  registerApplyCommand(topics);
-  registerCreateCommand(topics);
-  topics.command("delete <topicId>").description("Delete a custom topic").option("--force", "Skip confirmation and force delete (removes from all referencing profiles)").option("--updated-by <email>", "Email of user performing force deletion").action(async (topicId, opts) => {
+  const topics2 = runtime.command("topics").description("Manage AIRS custom topics and guardrail generation");
+  registerApplyCommand(topics2);
+  registerCreateCommand(topics2);
+  topics2.command("delete <topicId>").description("Delete a custom topic").option("--force", "Skip confirmation and force delete (removes from all referencing profiles)").option("--updated-by <email>", "Email of user performing force deletion").action(async (topicId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -11128,8 +11780,8 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerEvalCommand(topics);
-  const topicsGet = topics.command("get <nameOrId>").description("Get a custom topic by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
+  registerEvalCommand(topics2);
+  const topicsGet = topics2.command("get <nameOrId>").description("Get a custom topic by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
     try {
       const fmt = await resolveOutput(topicsGet, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
@@ -11138,10 +11790,10 @@ function registerRuntimeCommand(program) {
         nameOrId
       );
       if (opts.revision !== void 0 || opts.allVersions) {
-        const topics2 = (await service.listTopics()).filter(
+        const topics3 = (await service.listTopics()).filter(
           (topic) => isUuid ? topic.topic_id === nameOrId : topic.topic_name === nameOrId
         );
-        const selected = opts.revision === void 0 ? topics2 : topics2.filter((topic) => topic.revision === opts.revision);
+        const selected = opts.revision === void 0 ? topics3 : topics3.filter((topic) => topic.revision === opts.revision);
         if (selected.length === 0) throw new Error(`Topic ${nameOrId} not found`);
         if (opts.allVersions) emitList(topicsView, selected, fmt);
         else emitDetail(topicsView, selected[0], fmt);
@@ -11153,7 +11805,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  const topicsList = registerListFlags(topics.command("list"), { dialect: "offset" }).description("List custom topics").option("--all-versions", "Include every topic revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
+  const topicsList = registerListFlags(topics2.command("list"), { dialect: "offset" }).description("List custom topics").option("--all-versions", "Include every topic revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
     try {
       const fmt = await resolveOutput(topicsList, opts);
       const params = resolveListParams(topicsList, opts, { dialect: "offset" });
@@ -11174,9 +11826,9 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerRevertCommand(topics);
-  registerSampleCommand(topics);
-  topics.command("update <topicId>").description("Update a custom topic").requiredOption("--config <path>", "JSON file with topic updates").action(async (topicId, opts) => {
+  registerRevertCommand(topics2);
+  registerSampleCommand(topics2);
+  topics2.command("update <topicId>").description("Update a custom topic").requiredOption("--config <path>", "JSON file with topic updates").action(async (topicId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -11191,6 +11843,114 @@ function registerRuntimeCommand(program) {
   registerDlpCommands(runtime);
 }
 
+// src/cli/commands/tenant.ts
+var COLUMNS2 = [
+  { key: "name", label: "Tenant" },
+  { key: "active", label: "Selected" },
+  { key: "tsgId", label: "TSG ID" },
+  { key: "configPath", label: "Config file" }
+];
+function registerTenantCommand(program) {
+  const tenant = program.command("tenant").description("Select named tenant config files without changing their contents").addHelpText(
+    "after",
+    examples(
+      "airs tenant create production --config /secure/production.json",
+      "airs tenant switch production",
+      "airs tenant read",
+      "airs tenant switch default"
+    )
+  );
+  tenant.command("create <name>").description("Register an existing JSON config file by reference; does not activate it").requiredOption("--config <path>", "Existing Prisma AIRS JSON config file").action(async (name, opts) => {
+    try {
+      const entry = await createTenant(name, opts.config);
+      ui.success(
+        `Registered ${entry.name} (TSG ${entry.tsgId}); config file unchanged. Use airs tenant switch ${entry.name}.`
+      );
+    } catch (error) {
+      fail(error);
+    }
+  });
+  tenant.command("switch <name>").description(
+    "Persist the selected tenant; default restores legacy config/environment resolution"
+  ).action(async (name) => {
+    try {
+      const entry = await switchTenant(name);
+      ui.success(
+        entry ? `Selected ${entry.name} (TSG ${entry.tsgId})` : "Selected default; explicit config/environment overrides still apply"
+      );
+    } catch (error) {
+      fail(error);
+    }
+  });
+  const list = tenant.command("list").description("List registrations without reading credentials").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
+    try {
+      const format = await resolveOutput(list, opts, { ignoreConfig: true });
+      const store = readTenantStore();
+      const explicit = process.env.PRISMA_AIRS_CONFIG_PATH;
+      const rows = [
+        {
+          name: "default",
+          active: store.active === null,
+          tsgId: "",
+          configPath: defaultTenantConfigPath()
+        },
+        ...store.tenants.map((entry) => ({ ...entry, active: entry.name === store.active }))
+      ];
+      if (explicit)
+        ui.status("PRISMA_AIRS_CONFIG_PATH overrides the selected tenant for API commands.");
+      console.log(formatOutput(rows, COLUMNS2, format === "pretty" ? "table" : format));
+    } catch (error) {
+      fail(error);
+    }
+  });
+  const read = tenant.command("read [name]").description("Read a tenant config with all credential values redacted").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (name, opts) => {
+    try {
+      const format = await resolveOutput(read, opts, { ignoreConfig: true });
+      const store = readTenantStore();
+      const selected = name ?? store.active ?? "default";
+      const entry = store.tenants.find((value) => value.name === selected);
+      if (selected !== "default" && !entry) throw new Error("Tenant not found");
+      const path3 = entry?.configPath ?? expandConfigPath(process.env.PRISMA_AIRS_CONFIG_PATH || defaultTenantConfigPath());
+      const config = readTenantConfig(path3, entry?.tsgId);
+      const rows = Object.entries(config).map(([key, value]) => ({
+        key,
+        value: /key|secret|token|password/i.test(key) && value ? "[REDACTED]" : value ?? ""
+      }));
+      ui.status(`Tenant ${selected}${entry ? ` (TSG ${entry.tsgId})` : ""}: ${path3}`);
+      console.log(
+        formatOutput(
+          rows,
+          [
+            { key: "key", label: "Key" },
+            { key: "value", label: "Value" }
+          ],
+          format === "pretty" ? "table" : format
+        )
+      );
+    } catch (error) {
+      fail(error);
+    }
+  });
+  tenant.command("delete <name>").description("Unregister an inactive tenant; retain its source config file").option("--force", "Skip interactive confirmation; active tenant deletion remains refused").action(async (name, opts) => {
+    try {
+      const store = readTenantStore();
+      if (name === "default" || name === store.active)
+        throw new Error("Switch away first; default and active tenants cannot be deleted");
+      if (!store.tenants.some((entry) => entry.name === name))
+        throw new Error("Tenant not found");
+      await confirmOrAbort(
+        `Unregister tenant ${name}? Its config file will be retained.`,
+        Boolean(opts.force),
+        { action: `unregister tenant ${name}` }
+      );
+      await deleteTenant(name);
+      ui.success(`Unregistered ${name}; source config file retained`);
+    } catch (error) {
+      fail(error);
+    }
+  });
+}
+
 // src/cli/program.ts
 var READ_COMMAND_NAMES = /* @__PURE__ */ new Set([
   "categories",
@@ -11254,6 +12014,11 @@ function buildProgram() {
   program.hook("preAction", async (_thisCommand, actionCommand) => {
     const root = actionCommand.optsWithGlobals?.() ?? _thisCommand.opts();
     setQuiet(Boolean(root.quiet));
+    const profileTransfer = actionCommand.parent?.name() === "profiles" && actionCommand.parent.parent?.name() === "runtime" && ["backup", "restore"].includes(actionCommand.name());
+    if (profileTransfer && (root.debug || /^(1|true|yes|on)$/i.test(process.env.PANW_AI_SEC_DEBUG?.trim() ?? "")))
+      usageError(
+        "Disable --debug and PANW_AI_SEC_DEBUG for profile transfer; backups can contain sensitive policy configuration"
+      );
     const isEnvironmentReport = actionCommand.name() === "report" && ["runtime", "redteam", "aigateway", "agentguard"].includes(
       actionCommand.parent?.name() ?? ""
     ) && !(actionCommand.parent?.name() === "redteam" && actionCommand.args.length > 0);
@@ -11261,7 +12026,7 @@ function buildProgram() {
       usageError(
         "Disable --debug and PANW_AI_SEC_DEBUG for environment reports to avoid persisting sensitive traffic content"
       );
-    if (!isEnvironmentReport && !(actionCommand.name() === "report" && actionCommand.parent?.name() === "redteam") && READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
+    if (!isEnvironmentReport && actionCommand.parent?.name() !== "tenant" && !(actionCommand.name() === "report" && actionCommand.parent?.name() === "redteam") && READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
       try {
         const format = await resolveOutput(actionCommand, actionCommand.opts());
         actionCommand.setOptionValueWithSource("output", format, "implied");
@@ -11272,7 +12037,7 @@ function buildProgram() {
     if (root.debug) {
       const logPath = join4(
         process.cwd(),
-        `debug-api-${Date.now()}-${randomUUID9().slice(0, 8)}.jsonl`
+        `debug-api-${Date.now()}-${randomUUID10().slice(0, 8)}.jsonl`
       );
       try {
         let ancestor = actionCommand;
@@ -11297,6 +12062,7 @@ function buildProgram() {
   registerAgentGuardCommand(program);
   registerAiGatewayCommand(program);
   registerConfigCommand(program);
+  registerTenantCommand(program);
   registerDoctorCommand(program);
   registerCompletionCommand(program);
   applyListDeleteAliases(program);