@cdot65/prisma-airs-cli 5.4.1 → 5.6.0

package/dist/cli/index.js

@@ -13,11 +13,18 @@ import {
   collectRedTeamEnvironmentReport,
   collectRuntimeDailyReport,
   computeMetrics,
+  createTenant,
+  defaultTenantConfigPath,
+  deleteTenant,
+  expandConfigPath,
   getOrCreateManagementClient,
   inspectConfig,
   loadConfig,
   readBackupDir,
   readBackupFile,
+  readTenantConfig,
+  readTenantConfigFile,
+  readTenantStore,
   renderEnvironmentReportHtml,
   renderEnvironmentReportMarkdown,
   renderRedTeamReportHtml,
@@ -27,10 +34,13 @@ import {
   resolveConfigFilePath,
   resolveOutputDir,
   sanitizeFilename,
+  switchTenant,
+  tenantStorePath,
+  validateTenantName,
   validateTopic,
   writeBackupFile,
   writeReportFile
-} from "../chunk-36Z6IPH6.js";
+} from "../chunk-XQOICLSH.js";
 
 // src/cli/index.ts
 import "dotenv/config";
@@ -49,9 +59,9 @@ function installProcessGuards() {
 }
 
 // src/cli/program.ts
-import { randomUUID as randomUUID9 } from "crypto";
+import { randomUUID as randomUUID11 } from "crypto";
 import { readFileSync as readFileSync4 } from "fs";
-import { dirname as dirname4, join as join4 } from "path";
+import { dirname as dirname5, join as join5 } from "path";
 import { fileURLToPath } from "url";
 import { Command } from "commander";
 
@@ -132,8 +142,8 @@ function modelSecurityClientOptions(config) {
 
 // src/reports/agentguard.ts
 async function collectAgentGuardReport(client, options = {}) {
-  const maxPages = options.maxPages ?? 40;
-  if (!Number.isSafeInteger(maxPages) || maxPages < 1 || maxPages > 100)
+  const maxPages2 = options.maxPages ?? 40;
+  if (!Number.isSafeInteger(maxPages2) || maxPages2 < 1 || maxPages2 > 100)
     throw new Error("maxPages must be between 1 and 100");
   const now = options.now ?? (() => /* @__PURE__ */ new Date());
   const end = now();
@@ -195,7 +205,7 @@ async function collectAgentGuardReport(client, options = {}) {
     const seen = /* @__PURE__ */ new Set();
     let total;
     try {
-      for (let page = 0; page < maxPages; page++) {
+      for (let page = 0; page < maxPages2; page++) {
         const r = await read(rows.length);
         s.pages++;
         if (!Number.isSafeInteger(r.total) || r.total < 0 || !Array.isArray(r.rows) || r.rows.length > 10)
@@ -212,7 +222,7 @@ async function collectAgentGuardReport(client, options = {}) {
         if (pageCount ? r.rows.length < 10 : rows.length === total) return rows;
         if (!r.rows.length) throw new Error();
       }
-      s.notes.push(`Reached the ${maxPages}-page budget.`);
+      s.notes.push(`Reached the ${maxPages2}-page budget.`);
       throw new Error();
     } catch (error) {
       if (!rows.length) throw error;
@@ -375,7 +385,7 @@ async function resolveOutput(command, opts, resolution = {}) {
   const globalOutput = globalIsExplicit ? rootCommand.opts().output : void 0;
   let configured;
   try {
-    configured = (await loadConfig()).defaultOutput;
+    configured = resolution.ignoreConfig ? process.env.PANW_CLI_OUTPUT : (await loadConfig()).defaultOutput;
   } catch (error) {
     if (process.env.PANW_CLI_OUTPUT !== void 0) configured = process.env.PANW_CLI_OUTPUT;
     else throw error;
@@ -2594,13 +2604,13 @@ function statusColor4(status) {
 function renderRuntimeConfigHeader() {
   ui.header("Prisma AIRS \u2014 Runtime Configuration", "Security profile and topic management");
 }
-function renderProfileList(profiles, format = "pretty") {
-  if (profiles.length === 0) {
+function renderProfileList(profiles2, format = "pretty") {
+  if (profiles2.length === 0) {
     ui.emptyList("profiles");
     return;
   }
   if (format !== "pretty") {
-    const rows = profiles.map((p) => ({
+    const rows = profiles2.map((p) => ({
       id: p.profileId,
       name: p.profileName,
       status: p.active ? "active" : "inactive",
@@ -2616,7 +2626,7 @@ function renderProfileList(profiles, format = "pretty") {
     return;
   }
   ui.section("Security Profiles:");
-  for (const p of profiles) {
+  for (const p of profiles2) {
     ui.dim(p.profileId);
     const status = p.active ? chalk9.green("active") : chalk9.yellow("inactive");
     const rev = p.revision != null ? chalk9.dim(` rev:${p.revision}`) : "";
@@ -2704,13 +2714,13 @@ function renderCleanupResult(results, format = "pretty") {
   }
   console.log();
 }
-function renderTopicList(topics, format = "pretty") {
-  if (topics.length === 0) {
+function renderTopicList(topics2, format = "pretty") {
+  if (topics2.length === 0) {
     ui.emptyList("topics");
     return;
   }
   if (format !== "pretty") {
-    const rows = topics.map((t) => ({
+    const rows = topics2.map((t) => ({
       id: t.topic_id ?? "",
       name: t.topic_name,
       revision: t.revision ?? "",
@@ -2731,7 +2741,7 @@ function renderTopicList(topics, format = "pretty") {
     return;
   }
   ui.section("Custom Topics:");
-  for (const t of topics) {
+  for (const t of topics2) {
     ui.dim(String(t.topic_id));
     const rev = t.revision != null ? chalk9.dim(` rev:${t.revision}`) : "";
     const desc = t.description ? chalk9.dim(` \u2014 ${t.description.slice(0, 80)}`) : "";
@@ -2933,13 +2943,13 @@ function renderCustomerAppConsumption(data, format = "pretty") {
   }
   console.log();
 }
-function renderDeploymentProfileList(profiles, format = "pretty") {
-  if (profiles.length === 0) {
+function renderDeploymentProfileList(profiles2, format = "pretty") {
+  if (profiles2.length === 0) {
     ui.emptyList("deployment profiles");
     return;
   }
   if (format !== "pretty") {
-    const rows = profiles.map((p) => ({
+    const rows = profiles2.map((p) => ({
       name: p.raw.dp_name ?? p.raw.profile_name ?? p.raw.name ?? "",
       status: p.raw.status ?? "",
       authCode: p.raw.auth_code ?? ""
@@ -2958,7 +2968,7 @@ function renderDeploymentProfileList(profiles, format = "pretty") {
     return;
   }
   ui.section("Deployment Profiles:");
-  for (const p of profiles) {
+  for (const p of profiles2) {
     const name = p.raw.dp_name ?? p.raw.profile_name ?? p.raw.name ?? "unknown";
     const status = p.raw.status;
     const authCode = p.raw.auth_code;
@@ -3480,7 +3490,7 @@ function registerAiGatewayInference(parent) {
       const outputError = (error) => controller.abort(error);
       let stream;
       let failed = false;
-      let failure;
+      let failure2;
       try {
         const format = await resolveOutput(command, opts, { allowed: ["pretty", "json", "yaml"] });
         const config = await loadConfig({ aiGwInferenceEndpoint: opts.endpoint });
@@ -3507,8 +3517,8 @@ function registerAiGatewayInference(parent) {
         process.once("SIGINT", interrupt);
         process.once("SIGTERM", interrupt);
         process.stdout.on("error", outputError);
-        const write = (text2) => new Promise((resolve7, reject) => {
-          process.stdout.write(text2, (error) => error ? reject(error) : resolve7());
+        const write = (text2) => new Promise((resolve8, reject) => {
+          process.stdout.write(text2, (error) => error ? reject(error) : resolve8());
         });
         const requestOptions = { signal: controller.signal };
         const result = kind === "chat" ? await client.createChatCompletion(
@@ -3543,7 +3553,7 @@ function registerAiGatewayInference(parent) {
         }
       } catch (error) {
         failed = true;
-        failure = error;
+        failure2 = error;
       } finally {
         await stream?.cancel();
         controller.abort();
@@ -3551,10 +3561,10 @@ function registerAiGatewayInference(parent) {
         process.removeListener("SIGTERM", interrupt);
         process.stdout.removeListener("error", outputError);
       }
-      if (failed && failure?.code !== "EPIPE") {
-        if (failure?.errorType === ErrorType.USER_REQUEST_PAYLOAD_ERROR)
-          usageError(failure instanceof Error ? failure.message : "Invalid inference options");
-        fail(failure);
+      if (failed && failure2?.code !== "EPIPE") {
+        if (failure2?.errorType === ErrorType.USER_REQUEST_PAYLOAD_ERROR)
+          usageError(failure2 instanceof Error ? failure2.message : "Invalid inference options");
+        fail(failure2);
       }
     });
   }
@@ -3677,19 +3687,19 @@ function installDebugLogger(logPath, options = {}) {
   mkdirSync(dirname(logPath), { recursive: true, mode: 448 });
   writeFileSync(logPath, "", { encoding: "utf8", mode: 384, flag: "wx" });
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = async function debugFetch(input, init2) {
-    const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+  globalThis.fetch = async function debugFetch(input2, init2) {
+    const url = typeof input2 === "string" ? input2 : input2 instanceof URL ? input2.toString() : input2.url;
     const rawHeaders = headersToRecord(
-      init2?.headers ?? (input instanceof Request ? input.headers : void 0)
+      init2?.headers ?? (input2 instanceof Request ? input2.headers : void 0)
     );
     const inference = Object.keys(rawHeaders).some(
       (name) => name.toLowerCase() === "x-portkey-api-key"
     );
     if (!isAirsUrl(url) && !inference) {
-      return originalFetch(input, init2);
+      return originalFetch(input2, init2);
     }
     const dashboard = options.omitBodies || /\/v1\/mgmt\/(dashboard\/|reports\/scancontent(?:\?|$))/.test(url) || /\/aiag\//.test(new URL(url).pathname);
-    const method = init2?.method ?? (input instanceof Request ? input.method : "GET");
+    const method = init2?.method ?? (input2 instanceof Request ? input2.method : "GET");
     const reqHeaders = redactHeaders(rawHeaders);
     const loggedUrl = redactUrl(url);
     let reqBody;
@@ -3708,7 +3718,7 @@ function installDebugLogger(logPath, options = {}) {
     let resBody;
     let error;
     try {
-      response = await originalFetch(input, init2);
+      response = await originalFetch(input2, init2);
     } catch (err) {
       error = inference ? "Runtime request failed" : "Request failed";
       const entry2 = JSON.stringify({
@@ -3882,20 +3892,20 @@ function renderGatewayDetail(value, format) {
   );
   if (rendered) console.log(rendered);
 }
-async function runList(command, opts, label, load2) {
+async function runList(command, opts, label, load3) {
   try {
     const format = await resolveOutput(command, opts);
     const client = await createAiGatewayClient();
-    renderGatewayList(responseItems(await load2(client)), format, label);
+    renderGatewayList(responseItems(await load3(client)), format, label);
   } catch (error) {
     failAiGateway(error);
   }
 }
-async function runDetail(command, opts, load2) {
+async function runDetail(command, opts, load3) {
   try {
     const format = await resolveOutput(command, opts);
     const client = await createAiGatewayClient();
-    renderGatewayDetail(await load2(client), format);
+    renderGatewayDetail(await load3(client), format);
   } catch (error) {
     failAiGateway(error);
   }
@@ -5230,8 +5240,8 @@ function registerAiGatewayReportCommand(aigateway) {
     const iso = z2.string().datetime({ offset: true });
     if (opts.start && (!iso.safeParse(opts.start).success || !iso.safeParse(opts.end).success) || !Number.isFinite(start.getTime()) || !Number.isFinite(end.getTime()) || start >= end)
       usageError("Provide a valid increasing ISO-8601 window with timezone");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
@@ -5255,7 +5265,7 @@ function registerAiGatewayReportCommand(aigateway) {
       ui.status("Collecting AI Gateway statistics and current configuration (read-only)...");
       const report = await collectGatewayEnvironmentReport(client, {
         title: opts.title,
-        maxPages,
+        maxPages: maxPages2,
         workspace: opts.workspace,
         tsgId: config.mgmtTsgId ?? process.env.PANW_AI_GW_TSG_ID ?? "",
         start,
@@ -5886,8 +5896,8 @@ async function withTimeout(promise, ms) {
   try {
     return await Promise.race([
       promise,
-      new Promise((resolve7) => {
-        timer = setTimeout(() => resolve7(TIMED_OUT), ms);
+      new Promise((resolve8) => {
+        timer = setTimeout(() => resolve8(TIMED_OUT), ms);
       })
     ]);
   } finally {
@@ -6052,8 +6062,8 @@ async function defaultMgmtProbe() {
     tsgId: config.mgmtTsgId,
     tokenEndpoint: config.mgmtTokenEndpoint
   });
-  const topics = await service.listTopics();
-  return topics.length;
+  const topics2 = await service.listTopics();
+  return topics2.length;
 }
 async function defaultAiGwProbe() {
   const config = await loadConfig();
@@ -6172,12 +6182,12 @@ function hasBin(bin) {
   }
 }
 function run2(bin, args, label) {
-  return new Promise((resolve7, reject) => {
+  return new Promise((resolve8, reject) => {
     const child = spawn(bin, args, { stdio: "inherit" });
     child.on("error", (err) => reject(new Error(`Failed to start ${bin}: ${err.message}`)));
     child.on("close", (code) => {
       if (code !== 0) reject(new Error(`${label} failed with exit code ${code}`));
-      else resolve7();
+      else resolve8();
     });
   });
 }
@@ -6787,8 +6797,8 @@ function registerRedTeamReportCommand(redteam, scanReport) {
     const format = opts.output ?? command.parent?.parent?.opts().output ?? "html";
     if (format !== "html" && format !== "markdown")
       usageError("Report output must be html or markdown");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
@@ -6812,7 +6822,7 @@ function registerRedTeamReportCommand(redteam, scanReport) {
       ui.status("Collecting Red Team statistics and current configuration (read-only)...");
       const report = await collectRedTeamEnvironmentReport(client, {
         title: opts.title,
-        maxPages
+        maxPages: maxPages2
       });
       const rendered = format === "html" ? renderRedTeamReportHtml(report) : renderRedTeamReportMarkdown(report);
       if (outputPath) {
@@ -6948,8 +6958,8 @@ function buildDefaultCategories(categories) {
     ])
   );
 }
-function parseAttackGoals(input) {
-  const trimmed = input.trim();
+function parseAttackGoals(input2) {
+  const trimmed = input2.trim();
   const raw = trimmed.startsWith("[") ? trimmed : fs2.readFileSync(trimmed, "utf-8");
   let parsed;
   try {
@@ -6971,10 +6981,10 @@ function sliceClientSide(items, opts) {
   const limit = opts.limit !== void 0 ? Number.parseInt(String(opts.limit), 10) : void 0;
   return items.slice(offset, limit === void 0 ? void 0 : offset + limit);
 }
-function parsePositiveInt(input, flag) {
-  const n = Number.parseInt(input, 10);
+function parsePositiveInt(input2, flag) {
+  const n = Number.parseInt(input2, 10);
   if (!Number.isFinite(n) || n <= 0) {
-    throw new Error(`${flag}: expected a positive integer, got "${input}"`);
+    throw new Error(`${flag}: expected a positive integer, got "${input2}"`);
   }
   return n;
 }
@@ -7060,10 +7070,10 @@ function resolveScriptB64(opts) {
   }
   throw new Error("one of --script-file or --script-b64 is required");
 }
-function parseAdapterVariables(input) {
+function parseAdapterVariables(input2) {
   let parsed;
   try {
-    parsed = JSON.parse(input);
+    parsed = JSON.parse(input2);
   } catch (err) {
     throw new Error(`--variables: invalid JSON (${err instanceof Error ? err.message : err})`);
   }
@@ -8071,9 +8081,9 @@ function registerRedteamCommand(program) {
 }
 
 // src/cli/commands/runtime.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 import * as fs5 from "fs";
-import { readFile as readFile10 } from "fs/promises";
+import { readFile as readFile11 } from "fs/promises";
 import { basename as basename3, dirname as dirname3, join as join3, resolve as resolvePath } from "path";
 import chalk11 from "chalk";
 
@@ -8137,9 +8147,9 @@ function buildDataProtection(flags) {
   let hasAny = false;
   if (flags.dlpAction) {
     const dld = { action: flags.dlpAction };
-    const profiles = parseList(flags.dlpProfiles);
-    if (profiles) {
-      dld.member = profiles.map((text2) => ({ text: text2 }));
+    const profiles2 = parseList(flags.dlpProfiles);
+    if (profiles2) {
+      dld.member = profiles2.map((text2) => ({ text: text2 }));
     }
     if (flags.maskDataInline != null) {
       dld["mask-data-inline"] = flags.maskDataInline;
@@ -9525,11 +9535,655 @@ function registerDlpCommands(runtime) {
   register3(dlp);
 }
 
+// src/cli/commands/profile-transfer.ts
+import { randomUUID as randomUUID7 } from "crypto";
+import { readFile as readFile9, stat } from "fs/promises";
+import { extname, resolve as resolve5 } from "path";
+import { AISecSDKException as AISecSDKException2, ManagementClient } from "@cdot65/prisma-airs-sdk";
+import { dump as dump6, JSON_SCHEMA, load as load2 } from "js-yaml";
+import { ZodError } from "zod";
+
+// src/backup/runtime-profiles.ts
+import {
+  CreateSecurityProfileRequestSchema,
+  CustomTopicSchema,
+  PolicySchema,
+  SecurityProfileSchema
+} from "@cdot65/prisma-airs-sdk";
+import { z as z5 } from "zod";
+var RuntimeProfilesBackupSchema = z5.object({
+  version: z5.literal(1),
+  resourceType: z5.literal("runtime-security-profiles"),
+  exportedAt: z5.string().datetime({ offset: true }),
+  source: z5.object({ tsgId: z5.string().min(1) }).strict(),
+  profiles: z5.array(SecurityProfileSchema).min(1).max(1e4),
+  topics: z5.array(CustomTopicSchema).max(1e4)
+}).strict();
+function object(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function pagesLimit(value) {
+  if (!Number.isSafeInteger(value) || value < 1 || value > 1e3)
+    throw new Error("maxPages must be an integer from 1 to 1000");
+}
+async function offsetPages(fetch, maxPages2) {
+  pagesLimit(maxPages2);
+  const items = [];
+  let offset = 0;
+  for (let page = 0; page < maxPages2; page++) {
+    const result = await fetch(offset);
+    items.push(...result.items);
+    if (items.length > 1e4) throw new Error("Inventory exceeds the 10000-record safety limit");
+    if (result.next === void 0 || result.next === 0) return items;
+    if (!result.items.length || !Number.isSafeInteger(result.next) || result.next <= offset)
+      throw new Error("Inventory pagination did not advance");
+    offset = result.next;
+  }
+  throw new Error("Inventory is incomplete: increase --max-pages before exporting or restoring");
+}
+function latestProfiles(profiles2) {
+  const names = /* @__PURE__ */ new Map();
+  const revisions = /* @__PURE__ */ new Set();
+  for (const profile of profiles2) {
+    assertName(profile.profile_name);
+    const identity2 = JSON.stringify([profile.profile_name, profile.profile_id, profile.revision]);
+    if (revisions.has(identity2)) throw new Error("Inventory contains repeated profile records");
+    revisions.add(identity2);
+    const prior = names.get(profile.profile_name);
+    if (prior && prior.profile_id !== profile.profile_id)
+      throw new Error(`Ambiguous profile name: ${profile.profile_name}`);
+    if (!prior || (profile.revision ?? 0) > (prior.revision ?? 0))
+      names.set(profile.profile_name, profile);
+  }
+  return [...names.values()].sort((a, b) => a.profile_name.localeCompare(b.profile_name));
+}
+function assertName(name) {
+  if (!name.trim() || [...name].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+    throw new Error("Profile/topic names must be nonempty and contain no control characters");
+}
+function assertTenant(profiles2, tsgId) {
+  if (profiles2.some((profile) => profile.tsg_id != null && String(profile.tsg_id) !== tsgId))
+    throw new Error("Destination/source profile tenant identity does not match the selected TSG");
+}
+async function profiles(api, maxPages2) {
+  return latestProfiles(
+    await offsetPages(async (offset) => {
+      const page = await api.profiles.list({ offset, limit: 100, latest: true });
+      return { items: page.ai_profiles, next: page.next_offset };
+    }, maxPages2)
+  );
+}
+async function topics(api, maxPages2) {
+  return offsetPages(async (offset) => {
+    const page = await api.topics.list({ offset, limit: 100 });
+    return { items: page.custom_topics, next: page.next_offset };
+  }, maxPages2);
+}
+function topicReferences(policy) {
+  const refs = [];
+  const visit = (value) => {
+    if (Array.isArray(value)) {
+      value.forEach(visit);
+      return;
+    }
+    if (!object(value)) return;
+    if ("topic_id" in value) {
+      if (typeof value.topic_id !== "string" || typeof value.topic_name !== "string" || !Number.isSafeInteger(value.revision) || Number(value.revision) < 0)
+        throw new Error("Invalid topic identity in profile policy");
+      refs.push(value);
+    }
+    Object.values(value).forEach(visit);
+  };
+  visit(policy);
+  return refs;
+}
+function topicKey(ref) {
+  return JSON.stringify([ref.topic_id, ref.revision]);
+}
+async function backupRuntimeProfiles(api, tsgId, options = {}) {
+  if (!tsgId) throw new Error("Source TSG ID is required");
+  const maxPages2 = options.maxPages ?? 100;
+  let selected = await profiles(api, maxPages2);
+  assertTenant(selected, tsgId);
+  if (options.profile)
+    selected = selected.filter(
+      (p) => p.profile_id === options.profile || p.profile_name === options.profile
+    );
+  if (!selected.length) throw new Error("No matching profiles to back up");
+  if (options.profile && selected.length !== 1) throw new Error("Ambiguous profile selector");
+  for (const profile of selected) {
+    if (!profile.policy) throw new Error(`Profile has no policy: ${profile.profile_name}`);
+    PolicySchema.parse(profile.policy);
+  }
+  const refs = selected.flatMap((profile) => topicReferences(profile.policy));
+  const definitions = refs.length ? await topics(api, maxPages2) : [];
+  const needed = /* @__PURE__ */ new Map();
+  for (const ref of refs) {
+    const matches = definitions.filter((topic) => topicKey(topic) === topicKey(ref));
+    if (matches.length !== 1 || matches[0].topic_name !== ref.topic_name)
+      throw new Error(
+        `Cannot export the exact referenced topic revision: ${ref.topic_name} revision ${ref.revision}`
+      );
+    needed.set(topicKey(ref), matches[0]);
+  }
+  return RuntimeProfilesBackupSchema.parse({
+    version: 1,
+    resourceType: "runtime-security-profiles",
+    exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    source: { tsgId },
+    profiles: selected,
+    topics: [...needed.values()]
+  });
+}
+function sameTopic(a, b) {
+  return a.description === b.description && JSON.stringify(a.examples) === JSON.stringify(b.examples) && (a.active ?? true) === (b.active ?? true);
+}
+function dlpReferences(policy) {
+  if (!object(policy)) return [];
+  const refs = [];
+  for (const entry of Array.isArray(policy["dlp-data-profiles"]) ? policy["dlp-data-profiles"] : []) {
+    if (!object(entry) || typeof entry.name !== "string")
+      throw new Error("Invalid embedded DLP reference");
+    refs.push({ value: entry, name: entry.name, kind: "embedded" });
+  }
+  for (const entry of Array.isArray(policy["ai-security-profiles"]) ? policy["ai-security-profiles"] : []) {
+    if (!object(entry) || !object(entry["model-configuration"])) continue;
+    const protection = entry["model-configuration"]["data-protection"];
+    if (!object(protection) || !object(protection["data-leak-detection"])) continue;
+    const members = protection["data-leak-detection"].member;
+    if (!Array.isArray(members)) continue;
+    for (const member of members) {
+      if (!object(member) || typeof member.text !== "string") throw new Error("Invalid DLP member");
+      refs.push({ value: member, name: member.text, kind: "member" });
+    }
+  }
+  return refs;
+}
+function assertKnownPolicyReferences(policy) {
+  const known = new Map([
+    ...topicReferences(policy).map((ref) => [ref, ["topic_id"]]),
+    ...dlpReferences(policy).map((ref) => [
+      ref.value,
+      ref.kind === "embedded" ? ["id", "uuid"] : ["id"]
+    ])
+  ]);
+  const visit = (value, path3) => {
+    if (Array.isArray(value)) {
+      value.forEach((v, i) => {
+        visit(v, `${path3}[${i}]`);
+      });
+      return;
+    }
+    if (!object(value)) return;
+    for (const [key, child] of Object.entries(value)) {
+      if (child !== null && child !== "" && /(?:^|[-_])(id|uuid)$|(?:Id|ID|Uuid|UUID)$/.test(key) && !known.get(value)?.includes(key))
+        throw new Error(`Unsupported cross-tenant policy reference at ${path3}.${key}`);
+      visit(child, `${path3}.${key}`);
+    }
+  };
+  visit(policy, "policy");
+}
+async function dataProfiles(api, maxPages2) {
+  const items = [];
+  for (let page = 0; page < maxPages2; page++) {
+    const result = await api.dataProfiles.list({ page, size: 100 });
+    items.push(...result.content);
+    if (items.length > 1e4) throw new Error("DLP inventory exceeds the safety limit");
+    const last = result.last ?? (result.totalPages !== void 0 ? page + 1 >= result.totalPages : result.content.length < 100);
+    if (last) return items;
+    if (!result.content.length) throw new Error("DLP inventory pagination did not advance");
+  }
+  throw new Error("DLP inventory is incomplete; increase --max-pages");
+}
+async function planRuntimeProfilesRestore(api, input2, destinationTsgId, options = {}) {
+  const backup = RuntimeProfilesBackupSchema.parse(input2);
+  if (!destinationTsgId) throw new Error("Destination TSG ID is required");
+  const maxPages2 = options.maxPages ?? 100;
+  pagesLimit(maxPages2);
+  const prefix = options.namePrefix ?? "";
+  if (prefix.length > 64 || [...prefix].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
+    throw new Error("Invalid --name-prefix");
+  const conflict = options.onConflict ?? "error";
+  if (!["error", "skip", "update"].includes(conflict)) throw new Error("Invalid conflict policy");
+  const selected = latestProfiles(backup.profiles);
+  assertTenant(selected, backup.source.tsgId);
+  if (selected.length !== backup.profiles.length)
+    throw new Error("Backup contains duplicate profile names/revisions");
+  const crossTenant = backup.source.tsgId !== destinationTsgId;
+  for (const profile of selected) {
+    if (!profile.policy) throw new Error("Backup profile has no policy");
+    CreateSecurityProfileRequestSchema.parse({
+      profile_name: `${prefix}${profile.profile_name}`,
+      active: profile.active,
+      policy: profile.policy
+    });
+    if (crossTenant) assertKnownPolicyReferences(profile.policy);
+  }
+  const existing = await profiles(api, maxPages2);
+  assertTenant(existing, destinationTsgId);
+  const profilePlans = selected.map((source) => {
+    const name = `${prefix}${source.profile_name}`;
+    const match = existing.find((p) => p.profile_name === name);
+    if (match && conflict === "error")
+      throw new Error(
+        `Destination profile already exists: ${name}; choose --on-conflict skip or update`
+      );
+    if (match && !match.profile_id) throw new Error("Destination profile has no identity");
+    return {
+      source: structuredClone(source),
+      name,
+      existing: match,
+      action: match ? conflict === "skip" ? "skip" : "update" : "create"
+    };
+  });
+  const changing = profilePlans.filter((p) => p.action !== "skip");
+  const refs = changing.flatMap((p) => topicReferences(p.source.policy));
+  const targetTopics = refs.length ? await topics(api, maxPages2) : [];
+  const topicPlans = /* @__PURE__ */ new Map();
+  const topicNames = /* @__PURE__ */ new Map();
+  for (const ref of refs) {
+    const key = topicKey(ref);
+    if (topicPlans.has(key)) continue;
+    const definitions = backup.topics.filter(
+      (topic) => topicKey(topic) === key && topic.topic_name === ref.topic_name
+    );
+    if (definitions.length !== 1)
+      throw new Error(`Backup lacks an unambiguous topic definition: ${ref.topic_name}`);
+    const source = definitions[0];
+    const name = `${prefix}${source.topic_name}`;
+    assertName(name);
+    if (topicNames.has(name) && topicNames.get(name) !== key)
+      throw new Error(
+        `Multiple source revisions use topic name ${name}; split the backup by profile/revision before restoring`
+      );
+    topicNames.set(name, key);
+    const matches = targetTopics.filter((t) => t.topic_name === name).sort((a, b) => b.revision - a.revision);
+    const match = matches[0];
+    if (new Set(matches.map((t) => t.topic_id)).size > 1)
+      throw new Error(`Ambiguous destination topic name: ${name}`);
+    if (match && (!match.topic_id || !sameTopic(source, match)))
+      throw new Error(
+        `Destination topic differs: ${name}; use --name-prefix to avoid changing a shared topic`
+      );
+    topicPlans.set(key, { key, name, source, existing: match });
+  }
+  const dlpRefs = crossTenant ? changing.flatMap((p) => dlpReferences(p.source.policy)) : [];
+  const names = [...new Set(dlpRefs.map((ref) => ref.name))];
+  for (const name of names)
+    if (!options.dlpMap?.[name])
+      throw new Error(
+        `Cross-tenant DLP reference requires explicit --dlp-map ${name}=<destination-name>; DLP resources are not cloned`
+      );
+  const catalog = names.length ? await dataProfiles(api, maxPages2) : [];
+  const dlpMappings = names.map((name) => {
+    const target = options.dlpMap?.[name];
+    const matches = catalog.filter((p) => p.name === target && p.profile_status !== "deleted");
+    if (matches.length !== 1 || !matches[0].id)
+      throw new Error(`Missing or ambiguous destination DLP profile: ${target}`);
+    if (dlpRefs.some((ref) => ref.name === name && "version" in ref.value) && matches[0].version == null)
+      throw new Error(`Destination DLP version is unknown: ${target}`);
+    return {
+      source: name,
+      destination: String(target),
+      id: matches[0].id,
+      version: matches[0].version ?? void 0
+    };
+  });
+  return {
+    sourceTsgId: backup.source.tsgId,
+    destinationTsgId,
+    profiles: profilePlans,
+    topics: [...topicPlans.values()],
+    dlpMappings,
+    maxPages: maxPages2
+  };
+}
+function canonical(value) {
+  const order = (v) => Array.isArray(v) ? v.map(order) : object(v) ? Object.fromEntries(
+    Object.entries(v).sort(([a], [b]) => a.localeCompare(b)).map(([k, child]) => [k, order(child)])
+  ) : v;
+  return JSON.stringify(order(value));
+}
+function unchanged(current, prior) {
+  return Boolean(
+    current && current.profile_id === prior.profile_id && current.revision === prior.revision && current.active === prior.active && canonical(current.policy) === canonical(prior.policy)
+  );
+}
+async function restoreRuntimeProfiles(api, plan) {
+  const result = {
+    sourceTsgId: plan.sourceTsgId,
+    destinationTsgId: plan.destinationTsgId,
+    complete: false,
+    topics: [],
+    profiles: []
+  };
+  try {
+    const latest = await profiles(api, plan.maxPages);
+    assertTenant(latest, plan.destinationTsgId);
+    if (plan.dlpMappings.length) {
+      const catalog = await dataProfiles(api, plan.maxPages);
+      for (const mapping of plan.dlpMappings) {
+        const matches = catalog.filter(
+          (p) => p.name === mapping.destination && p.profile_status !== "deleted"
+        );
+        if (matches.length !== 1 || matches[0].id !== mapping.id || (matches[0].version ?? void 0) !== mapping.version)
+          throw new Error(`Destination DLP profile changed after planning: ${mapping.destination}`);
+      }
+    }
+    for (const item of plan.profiles) {
+      if (item.action === "skip") continue;
+      const current = latest.find((p) => p.profile_name === item.name);
+      if (item.existing ? !unchanged(current, item.existing) : Boolean(current))
+        throw new Error(`Destination profile changed after planning: ${item.name}`);
+    }
+    const mappedTopics = /* @__PURE__ */ new Map();
+    for (const item of plan.topics) {
+      let topic = item.existing;
+      const inventory2 = await topics(api, plan.maxPages);
+      if (topic) {
+        const current = inventory2.find(
+          (t) => t.topic_id === topic?.topic_id && t.revision === topic?.revision
+        );
+        if (!current || !sameTopic(current, item.source))
+          throw new Error(`Destination topic changed after planning: ${item.name}`);
+      } else {
+        if (inventory2.some((t) => t.topic_name === item.name))
+          throw new Error(`Destination topic changed after planning: ${item.name}`);
+        topic = await api.topics.create({
+          topic_name: item.name,
+          description: item.source.description,
+          examples: item.source.examples,
+          active: item.source.active
+        });
+      }
+      if (!topic.topic_id || topic.topic_name !== item.name || !Number.isSafeInteger(topic.revision) || !sameTopic(topic, item.source))
+        throw new Error(`Topic response did not verify: ${item.name}`);
+      mappedTopics.set(item.key, topic);
+      result.topics.push({
+        name: item.name,
+        id: topic.topic_id,
+        action: item.existing ? "reused" : "created"
+      });
+    }
+    for (const item of plan.profiles) {
+      if (item.action === "skip") {
+        result.profiles.push({ name: item.name, action: "skipped", id: item.existing?.profile_id });
+        continue;
+      }
+      const policy = structuredClone(item.source.policy);
+      for (const ref of topicReferences(policy)) {
+        const topic = mappedTopics.get(topicKey(ref));
+        if (!topic?.topic_id) throw new Error("Missing planned topic mapping");
+        ref.topic_id = topic.topic_id;
+        ref.topic_name = topic.topic_name;
+        ref.revision = topic.revision;
+      }
+      for (const ref of dlpReferences(policy)) {
+        const mapping = plan.dlpMappings.find((m) => m.source === ref.name);
+        if (!mapping) continue;
+        if (ref.kind === "embedded") {
+          ref.value.name = mapping.destination;
+          ref.value.uuid = mapping.id;
+        } else ref.value.text = mapping.destination;
+        if ("id" in ref.value) ref.value.id = mapping.id;
+        if ("version" in ref.value) {
+          if (mapping.version === void 0) throw new Error("Destination DLP version is unknown");
+          ref.value.version = String(mapping.version);
+        }
+      }
+      const body = CreateSecurityProfileRequestSchema.parse({
+        profile_name: item.name,
+        active: item.source.active,
+        policy
+      });
+      const inventory2 = await profiles(api, plan.maxPages);
+      assertTenant(inventory2, plan.destinationTsgId);
+      const current = inventory2.find((p) => p.profile_name === item.name);
+      if (item.existing ? !unchanged(current, item.existing) : Boolean(current))
+        throw new Error(`Destination profile changed after planning: ${item.name}`);
+      const response = item.action === "update" && item.existing?.profile_id ? await api.profiles.update(item.existing.profile_id, body) : await api.profiles.create(body);
+      result.profiles.push({
+        name: item.name,
+        action: item.action === "create" ? "created" : "updated",
+        id: response.profile_id
+      });
+      const verified = (await profiles(api, plan.maxPages)).find(
+        (p) => p.profile_name === item.name
+      );
+      if (verified) assertTenant([verified], plan.destinationTsgId);
+      if (!verified?.profile_id || response.profile_id && response.profile_id !== verified.profile_id || item.source.active !== void 0 && verified.active !== item.source.active || canonical(verified.policy) !== canonical(policy))
+        throw new Error(`Restored profile did not verify: ${item.name}`);
+    }
+    result.complete = true;
+  } catch (error) {
+    const status = error?.statusCode;
+    result.error = Number.isInteger(status) ? `API request failed (HTTP ${status}); verify destination state before retrying` : error instanceof Error && /^(Destination|Topic response|Missing planned|Restored profile|Inventory|DLP inventory)/.test(
+      error.message
+    ) ? error.message : "Restore stopped; verify destination state before retrying";
+  }
+  return result;
+}
+
+// src/cli/commands/profile-transfer.ts
+var MAX_BACKUP_BYTES = 20 * 1024 * 1024;
+var FORMATS = "Output format: pretty, table, markdown, csv, json, yaml";
+function maxPages(value) {
+  if (!/^\d+$/.test(value) || Number(value) < 1 || Number(value) > 1e3)
+    usageError("--max-pages must be an integer from 1 to 1000");
+  return Number(value);
+}
+function dlpMap(values) {
+  const entries = values.map((value) => {
+    const at = value.indexOf("=");
+    if (at < 1 || at === value.length - 1)
+      throw new CliUsageError("--dlp-map requires source-name=destination-name");
+    return [value.slice(0, at), value.slice(at + 1)];
+  });
+  if (new Set(entries.map(([key]) => key)).size !== entries.length)
+    throw new CliUsageError("Duplicate source names in --dlp-map");
+  return Object.fromEntries(entries);
+}
+async function context() {
+  const config = await loadConfig();
+  if (!config.mgmtTsgId || !config.mgmtClientId || !config.mgmtClientSecret)
+    throw new CliUsageError(
+      "Profile transfer requires configured Management client ID, secret and TSG ID"
+    );
+  const client = new ManagementClient({ ...managementClientOptions(config), numRetries: 0 });
+  return {
+    api: {
+      profiles: client.profiles,
+      topics: client.topics,
+      dataProfiles: client.dlp.dataProfiles
+    },
+    tsgId: config.mgmtTsgId
+  };
+}
+function failure(error) {
+  if (error instanceof CliUsageError) usageError(error.message);
+  if (error instanceof ZodError) {
+    ui.error("Invalid profile backup/request schema; content is not logged.");
+  } else if (error instanceof AISecSDKException2) {
+    ui.error(
+      `Profile transfer API request failed${error.statusCode ? ` (HTTP ${error.statusCode})` : ""}; no automatic retry was made.`
+    );
+  } else if (error?.code) {
+    ui.error(
+      `Profile transfer file operation failed (${error.code}); existing files are not overwritten.`
+    );
+  } else {
+    ui.error(error instanceof Error ? error.message : "Profile transfer failed");
+  }
+  process.exitCode = 1;
+}
+function registerProfileTransferCommands(profiles2) {
+  const backup = profiles2.command("backup [profile]").description(
+    "Back up latest Runtime profile policies and referenced topic definitions; no argument means all profiles"
+  ).option("--all", "Back up all latest profiles (cannot be combined with a profile selector)").option("--file-format <format>", "Backup file format: json or yaml", "json").option("--output-file <path>", "New private backup file; defaults to the current directory").option(
+    "--max-pages <n>",
+    "Maximum pages per inventory; incomplete exports fail",
+    maxPages,
+    100
+  ).option("--output <format>", FORMATS).addHelpText(
+    "after",
+    examples(
+      "airs runtime profiles backup --all --output-file ./profiles.json",
+      'airs runtime profiles backup "Production" --file-format yaml --output-file ./production.yaml'
+    )
+  ).action(async (profile, opts) => {
+    try {
+      if (opts.all && profile)
+        throw new CliUsageError("Choose either a profile selector or --all");
+      if (!["json", "yaml"].includes(opts.fileFormat))
+        throw new CliUsageError("--file-format must be json or yaml");
+      const format = await resolveOutput(backup, opts);
+      const extension = opts.fileFormat === "yaml" ? ".yaml" : ".json";
+      if (opts.outputFile === "-")
+        throw new CliUsageError("Backups require a private file destination, not stdout");
+      const path3 = resolve5(
+        opts.outputFile ?? `airs-runtime-profiles-backup-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}-${randomUUID7().slice(0, 8)}${extension}`
+      );
+      if (!(opts.fileFormat === "json" ? [".json"] : [".yaml", ".yml"]).includes(
+        extname(path3).toLowerCase()
+      ))
+        throw new CliUsageError("Backup filename extension must match --file-format");
+      const { api, tsgId } = await context();
+      const data = await backupRuntimeProfiles(api, tsgId, { profile, maxPages: opts.maxPages });
+      const content = opts.fileFormat === "yaml" ? dump6(data, { schema: JSON_SCHEMA, noRefs: true, lineWidth: -1 }) : `${JSON.stringify(data, null, 2)}
+`;
+      if (Buffer.byteLength(content) > MAX_BACKUP_BYTES)
+        throw new Error("Backup exceeds the 20 MiB size limit; select individual profiles");
+      await writeReportFile(path3, content);
+      console.log(
+        formatOutput(
+          [
+            {
+              file: path3,
+              sourceTsgId: tsgId,
+              profiles: data.profiles.length,
+              topics: data.topics.length
+            }
+          ],
+          [
+            { key: "file", label: "Backup file" },
+            { key: "sourceTsgId", label: "Source TSG" },
+            { key: "profiles", label: "Profiles" },
+            { key: "topics", label: "Topics" }
+          ],
+          format === "pretty" ? "table" : format
+        )
+      );
+    } catch (error) {
+      failure(error);
+    }
+  });
+  const restore = profiles2.command("restore <file>").description(
+    "Restore profile policies into the selected tenant; validate all dependencies before changes"
+  ).option("--dry-run", "Read and validate a restore plan without changing destination resources").option("--name-prefix <prefix>", "Prefix restored profile and topic names to avoid collisions").option("--on-conflict <policy>", "Existing profile names: error, skip or update", "error").option(
+    "--dlp-map <source=destination>",
+    "Explicit cross-tenant binding to an existing DLP data profile (repeatable)",
+    (value, prior) => [...prior, value],
+    []
+  ).option(
+    "--max-pages <n>",
+    "Maximum pages per inventory; incomplete inventories fail",
+    maxPages,
+    100
+  ).option("--expect-tsg <id>", "Assert destination tenant ID; required with --force").option(
+    "--force",
+    "Execute without a prompt; requires --expect-tsg and does not override conflicts"
+  ).option("--output <format>", FORMATS).addHelpText(
+    "after",
+    examples(
+      "airs runtime profiles restore ./profiles.json --dry-run --output json",
+      "airs runtime profiles restore ./profiles.json --name-prefix migrated- --expect-tsg <destination-tsg> --force"
+    )
+  ).action(async (file, opts) => {
+    try {
+      if (!["error", "skip", "update"].includes(opts.onConflict))
+        throw new CliUsageError("--on-conflict must be error, skip or update");
+      if (opts.force && !opts.expectTsg)
+        throw new CliUsageError("--force requires --expect-tsg <destination-tsg>");
+      const mappings = dlpMap(opts.dlpMap);
+      const path3 = resolve5(file);
+      const extension = extname(path3).toLowerCase();
+      if (![".json", ".yaml", ".yml"].includes(extension))
+        throw new CliUsageError("Backup file must use .json, .yaml or .yml");
+      const info = await stat(path3);
+      if (!info.isFile() || info.size > MAX_BACKUP_BYTES)
+        throw new CliUsageError("Backup must be a regular file no larger than 20 MiB");
+      let input2;
+      try {
+        const text2 = await readFile9(path3, "utf8");
+        if (Buffer.byteLength(text2) > MAX_BACKUP_BYTES) throw new Error("Backup too large");
+        input2 = extension === ".json" ? JSON.parse(text2) : load2(text2, { schema: JSON_SCHEMA });
+      } catch {
+        throw new CliUsageError("Backup is not valid JSON/YAML; contents are not logged");
+      }
+      const data = RuntimeProfilesBackupSchema.parse(input2);
+      const format = await resolveOutput(restore, opts);
+      const { api, tsgId } = await context();
+      if (opts.expectTsg && opts.expectTsg !== tsgId)
+        throw new CliUsageError(
+          "--expect-tsg does not match the selected destination tenant; no API request was made"
+        );
+      const plan = await planRuntimeProfilesRestore(api, data, tsgId, {
+        namePrefix: opts.namePrefix,
+        onConflict: opts.onConflict,
+        maxPages: opts.maxPages,
+        dlpMap: mappings
+      });
+      const summary = {
+        sourceTsgId: plan.sourceTsgId,
+        destinationTsgId: plan.destinationTsgId,
+        dryRun: Boolean(opts.dryRun),
+        profiles: plan.profiles.map((p) => ({ name: p.name, action: p.action })),
+        topics: plan.topics.map((t) => ({
+          name: t.name,
+          action: t.existing ? "reuse" : "create"
+        })),
+        dlpMappings: plan.dlpMappings.map((m) => ({
+          source: m.source,
+          destination: m.destination
+        }))
+      };
+      const columns = [
+        { key: "sourceTsgId", label: "Source TSG" },
+        { key: "destinationTsgId", label: "Destination TSG" },
+        { key: "profiles", label: "Profiles" },
+        { key: "topics", label: "Topics" },
+        { key: "dlpMappings", label: "DLP mappings" },
+        { key: "dryRun", label: "Dry run" },
+        { key: "complete", label: "Complete" }
+      ];
+      if (opts.dryRun) {
+        console.log(formatOutput([summary], columns, format === "pretty" ? "table" : format));
+        return;
+      }
+      const changing = plan.profiles.filter((p) => p.action !== "skip");
+      if (changing.length)
+        await confirmOrAbort(
+          `Restore ${changing.length} profiles from TSG ${plan.sourceTsgId} to TSG ${tsgId} (${changing.filter((p) => p.action === "update").length} updates)?`,
+          Boolean(opts.force),
+          { action: `restore profiles into TSG ${tsgId}` }
+        );
+      const result = await restoreRuntimeProfiles(api, plan);
+      console.log(formatOutput([{ ...result }], columns, format === "pretty" ? "table" : format));
+      if (!result.complete) {
+        ui.error(result.error ?? "Restore incomplete");
+        process.exitCode = 1;
+      }
+    } catch (error) {
+      failure(error);
+    }
+  });
+}
+
 // src/cli/commands/profiles-cleanup.ts
 import { execSync } from "child_process";
-function findDuplicateProfiles(profiles) {
+function findDuplicateProfiles(profiles2) {
   const groups = /* @__PURE__ */ new Map();
-  for (const p of profiles) {
+  for (const p of profiles2) {
     const rev = p.revision ?? 0;
     const entry = { id: p.profileId, revision: rev };
     const existing = groups.get(p.profileName);
@@ -9628,8 +10282,8 @@ function registerCleanupCommand(parent) {
 
 // src/cli/commands/runtime-dashboard.ts
 import { lstat as lstat4 } from "fs/promises";
-import { resolve as resolve5 } from "path";
-import { dump as dump6 } from "js-yaml";
+import { resolve as resolve6 } from "path";
+import { dump as dump7 } from "js-yaml";
 var TIME_UNITS = ["hour", "hours", "day", "days"];
 function integer3(value, name, minimum = 0) {
   const n = Number(value);
@@ -9704,7 +10358,7 @@ function registerRuntimeDashboardCommands(runtime) {
               "Scan content requires exactly one of --show-content or --output-file <new-path>"
             );
           if (opts.outputFile) {
-            const path3 = resolve5(text(opts.outputFile, "--output-file"));
+            const path3 = resolve6(text(opts.outputFile, "--output-file"));
             const existing = await lstat4(path3).catch((error) => {
               if (error.code !== "ENOENT") throw error;
               return void 0;
@@ -9718,9 +10372,9 @@ function registerRuntimeDashboardCommands(runtime) {
           numRetries: 0
         });
         const result = await read(client.dashboard);
-        const output = format === "yaml" ? dump6(result, { noRefs: true, lineWidth: -1 }).trimEnd() : JSON.stringify(result, null, 2);
+        const output = format === "yaml" ? dump7(result, { noRefs: true, lineWidth: -1 }).trimEnd() : JSON.stringify(result, null, 2);
         if (command.name() === "scan-content" && opts.outputFile) {
-          await writeReportFile(resolve5(String(opts.outputFile)), `${output}
+          await writeReportFile(resolve6(String(opts.outputFile)), `${output}
 `);
           ui.status("Scan content exported to the requested private file (0600).");
         } else console.log(output);
@@ -9892,8 +10546,8 @@ function registerRuntimeDashboardCommands(runtime) {
 
 // src/cli/commands/runtime-report.ts
 import { lstat as lstat5 } from "fs/promises";
-import { resolve as resolve6 } from "path";
-import { randomUUID as randomUUID7 } from "crypto";
+import { resolve as resolve7 } from "path";
+import { randomUUID as randomUUID8 } from "crypto";
 function registerRuntimeReportCommand(runtime) {
   const command = runtime.command("report").description("Generate a daily AI Runtime Security environment report (read-only)").option("--output <format>", "Deliverable format: html or markdown (default: html)").option(
     "--output-file <path>",
@@ -9910,15 +10564,15 @@ function registerRuntimeReportCommand(runtime) {
     const format = opts.output ?? command.parent?.parent?.opts().output ?? "html";
     if (format !== "html" && format !== "markdown")
       usageError("Report output must be html or markdown");
-    const maxPages = Number(opts.maxPages);
-    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages) || maxPages > 100)
+    const maxPages2 = Number(opts.maxPages);
+    if (!/^[1-9]\d*$/.test(opts.maxPages) || !Number.isSafeInteger(maxPages2) || maxPages2 > 100)
       usageError("--max-pages must be an integer from 1 to 100");
     if (typeof opts.title !== "string" || !opts.title.trim() || opts.title.length > 240)
       usageError("--title must contain 1\u2013240 characters");
     if (opts.outputFile !== void 0 && !opts.outputFile.trim())
       usageError("--output-file cannot be empty");
-    const defaultName = `airs-runtime-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID7().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
-    const outputPath = opts.outputFile === "-" ? void 0 : resolve6(opts.outputFile ?? defaultName);
+    const defaultName = `airs-runtime-report-${(/* @__PURE__ */ new Date()).toISOString().replaceAll(":", "-")}-${randomUUID8().slice(0, 8)}.${format === "html" ? "html" : "md"}`;
+    const outputPath = opts.outputFile === "-" ? void 0 : resolve7(opts.outputFile ?? defaultName);
     try {
       if (outputPath) {
         const existing = await lstat5(outputPath).catch((error) => {
@@ -9933,7 +10587,7 @@ function registerRuntimeReportCommand(runtime) {
         numRetries: 0
       });
       ui.status("Collecting daily runtime activity and current configuration (read-only)...");
-      const report = await collectRuntimeDailyReport(client, { title: opts.title, maxPages });
+      const report = await collectRuntimeDailyReport(client, { title: opts.title, maxPages: maxPages2 });
       const rendered = format === "html" ? renderRuntimeReportHtml(report) : renderRuntimeReportMarkdown(report);
       if (outputPath) {
         await writeReportFile(outputPath, rendered);
@@ -9957,26 +10611,26 @@ function registerRuntimeReportCommand(runtime) {
 }
 
 // src/cli/commands/topics-apply.ts
-async function applyTopicToProfile(mgmt, input) {
+async function applyTopicToProfile(mgmt, input2) {
   const allTopics = await mgmt.listTopics();
-  const match = allTopics.find((t) => t.topic_name === input.topicName);
+  const match = allTopics.find((t) => t.topic_name === input2.topicName);
   if (!match || !match.topic_id) {
-    throw new Error(`Topic "${input.topicName}" not found. Create it first with "topics create".`);
+    throw new Error(`Topic "${input2.topicName}" not found. Create it first with "topics create".`);
   }
-  const existing = await mgmt.getProfileTopics(input.profileName);
-  const merged = existing.filter((t) => t.topicName !== input.topicName).map((t) => ({ topicId: t.topicId, topicName: t.topicName, action: t.action }));
+  const existing = await mgmt.getProfileTopics(input2.profileName);
+  const merged = existing.filter((t) => t.topicName !== input2.topicName).map((t) => ({ topicId: t.topicId, topicName: t.topicName, action: t.action }));
   merged.push({
     topicId: match.topic_id,
     topicName: match.topic_name,
-    action: input.intent
+    action: input2.intent
   });
-  const guardrailAction = input.intent === "block" ? "allow" : "block";
-  await mgmt.assignTopicsToProfile(input.profileName, merged, guardrailAction);
+  const guardrailAction = input2.intent === "block" ? "allow" : "block";
+  await mgmt.assignTopicsToProfile(input2.profileName, merged, guardrailAction);
   return {
     topicId: match.topic_id,
     topicName: match.topic_name,
-    profileName: input.profileName,
-    intent: input.intent
+    profileName: input2.profileName,
+    intent: input2.intent
   };
 }
 function registerApplyCommand(parent) {
@@ -10021,21 +10675,21 @@ function registerApplyCommand(parent) {
 }
 
 // src/cli/commands/topics-create.ts
-async function createOrUpdateTopic(mgmt, input) {
-  const topic = { name: input.name, description: input.description, examples: input.examples };
+async function createOrUpdateTopic(mgmt, input2) {
+  const topic = { name: input2.name, description: input2.description, examples: input2.examples };
   const errors = validateTopic(topic);
   if (errors.length > 0) {
     throw new Error(errors.map((e) => `${e.field}: ${e.message}`).join("; "));
   }
   const existing = await mgmt.listTopics();
-  const match = existing.find((t) => t.topic_name === input.name);
+  const match = existing.find((t) => t.topic_name === input2.name);
   const request = {
-    topic_name: input.name,
-    description: input.description,
-    examples: input.examples
+    topic_name: input2.name,
+    description: input2.description,
+    examples: input2.examples
   };
   if (match && !match.topic_id) {
-    throw new Error(`Existing topic '${input.name}' has no topic_id`);
+    throw new Error(`Existing topic '${input2.name}' has no topic_id`);
   }
   const result = match ? await mgmt.updateTopic(match.topic_id, request) : await mgmt.createTopic(request);
   if (!result.topic_id) {
@@ -10093,7 +10747,7 @@ function registerCreateCommand(parent) {
 }
 
 // src/cli/commands/topics-eval.ts
-import { readFile as readFile9 } from "fs/promises";
+import { readFile as readFile10 } from "fs/promises";
 
 // src/core/prompt-loader.ts
 function parseCsvLine(line) {
@@ -10236,7 +10890,7 @@ function registerEvalCommand(parent) {
     resolveDeprecatedAliases(cmd, opts);
     try {
       const config = await loadConfig();
-      const csvContent = await readFile9(opts.prompts, "utf-8");
+      const csvContent = await readFile10(opts.prompts, "utf-8");
       const { cases, intent } = loadPrompts(csvContent, (msg) => ui.status(`Warning: ${msg}`));
       if (!config.airsApiKey && !config.airsApiToken) {
         fail(new Error("PANW_AI_SEC_API_KEY or PANW_AI_SEC_API_TOKEN is required"));
@@ -10260,8 +10914,8 @@ function registerEvalCommand(parent) {
 
 // src/cli/commands/topics-revert.ts
 async function revertTopic(mgmt, profileName, topicName) {
-  const topics = await mgmt.listTopics();
-  const match = topics.find((t) => t.topic_name === topicName);
+  const topics2 = await mgmt.listTopics();
+  const match = topics2.find((t) => t.topic_name === topicName);
   if (!match || !match.topic_id) {
     throw new Error(`Topic "${topicName}" not found`);
   }
@@ -10408,7 +11062,7 @@ function completedBulkResults(state) {
 }
 async function writeBulkResults(outputPath, results) {
   await fs5.promises.mkdir(dirname3(outputPath), { recursive: true });
-  const temporary = `${outputPath}.tmp-${process.pid}-${randomUUID8()}`;
+  const temporary = `${outputPath}.tmp-${process.pid}-${randomUUID9()}`;
   try {
     await fs5.promises.writeFile(temporary, SdkRuntimeService.formatResultsCsv(results), {
       encoding: "utf-8",
@@ -10535,7 +11189,7 @@ function registerRuntimeCommand(program) {
       if (!config.airsApiKey && !config.airsApiToken) {
         fail(new Error("PANW_AI_SEC_API_KEY or PANW_AI_SEC_API_TOKEN is required"));
       }
-      const raw = await readFile10(opts.file, "utf-8");
+      const raw = await readFile11(opts.file, "utf-8");
       const prompts = parseInputFile(raw, opts.file);
       if (prompts.length === 0) {
         usageError("No prompts found in input file");
@@ -10750,16 +11404,17 @@ function registerRuntimeCommand(program) {
       const fmt = await resolveOutput(deploymentProfilesList, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
       const service = await createMgmtService();
-      const profiles2 = await service.listDeploymentProfiles({
+      const profiles3 = await service.listDeploymentProfiles({
         unactivated: opts.unactivated
       });
-      renderDeploymentProfileList(profiles2, fmt);
+      renderDeploymentProfileList(profiles3, fmt);
     } catch (err) {
       fail(err);
     }
   });
-  const profiles = runtime.command("profiles").description("Manage AIRS security profiles");
-  const profilesList = registerListFlags(profiles.command("list"), { dialect: "offset" }).description("List security profiles").option("--all-versions", "Include every profile revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
+  const profiles2 = runtime.command("profiles").description("Manage AIRS security profiles");
+  registerProfileTransferCommands(profiles2);
+  const profilesList = registerListFlags(profiles2.command("list"), { dialect: "offset" }).description("List security profiles").option("--all-versions", "Include every profile revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").addHelpText(
     "after",
     examples(
       "airs runtime profiles list",
@@ -10798,7 +11453,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  const profilesGet = profiles.command("get <nameOrId>").description("Get a security profile by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
+  const profilesGet = profiles2.command("get <nameOrId>").description("Get a security profile by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
     try {
       const fmt = await resolveOutput(profilesGet, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
@@ -10807,10 +11462,10 @@ function registerRuntimeCommand(program) {
         nameOrId
       );
       if (opts.revision !== void 0 || opts.allVersions) {
-        const profiles2 = (await service.listAllProfiles({ latest: false })).filter(
+        const profiles3 = (await service.listAllProfiles({ latest: false })).filter(
           (profile) => isUuid ? profile.profileId === nameOrId : profile.profileName === nameOrId
         );
-        const selected = opts.revision === void 0 ? profiles2 : profiles2.filter((profile) => profile.revision === opts.revision);
+        const selected = opts.revision === void 0 ? profiles3 : profiles3.filter((profile) => profile.revision === opts.revision);
         if (selected.length === 0) throw new Error(`Profile ${nameOrId} not found`);
         if (opts.allVersions) emitList(profilesView, selected, fmt);
         else emitDetail(profilesView, selected[0], fmt);
@@ -10822,7 +11477,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("create").description("Create a new security profile").requiredOption("--name <name>", "Profile name").option("--no-active", "Create profile as inactive").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile configuration (legacy)").action(async (opts) => {
+  profiles2.command("create").description("Create a new security profile").requiredOption("--name <name>", "Profile name").option("--no-active", "Create profile as inactive").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile configuration (legacy)").action(async (opts) => {
     const service = await createMgmtService();
     try {
       renderRuntimeConfigHeader();
@@ -10877,7 +11532,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("update <nameOrId>").description("Update a security profile by name or UUID").option("--name <name>", "Update profile name").option("--no-active", "Set profile as inactive").option("--active", "Set profile as active").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile updates (legacy)").action(async (nameOrId, opts) => {
+  profiles2.command("update <nameOrId>").description("Update a security profile by name or UUID").option("--name <name>", "Update profile name").option("--no-active", "Set profile as inactive").option("--active", "Set profile as active").option("--prompt-injection <action>", "Prompt injection action (block/allow/alert)").option("--toxic-content <action>", 'Toxic content action (e.g. "high:block, moderate:block")').option("--contextual-grounding <action>", "Contextual grounding action (block/allow/alert)").option("--malicious-code <action>", "Malicious code protection action (block/allow/alert)").option("--url-action <action>", "URL detected action (block/allow/alert)").option("--allow-url-categories <list>", "Comma-separated URL categories to allow").option("--block-url-categories <list>", "Comma-separated URL categories to block").option("--alert-url-categories <list>", "Comma-separated URL categories to alert").option("--agent-security <action>", "Agent security action (block/allow/alert)").option("--dlp-action <action>", "Data leak detection action (block/allow/alert)").option("--dlp-profiles <list>", "Comma-separated DLP profile names").option("--mask-data-inline", "Mask detected data inline").option("--db-security-create <action>", "Database create action (block/allow/alert)").option("--db-security-read <action>", "Database read action (block/allow/alert)").option("--db-security-update <action>", "Database update action (block/allow/alert)").option("--db-security-delete <action>", "Database delete action (block/allow/alert)").option("--inline-timeout-action <action>", "Inline timeout action (block/allow)").option("--max-inline-latency <n>", "Max inline latency in seconds", Number.parseFloat).option("--mask-data-in-storage", "Mask data in storage").option("--config <path>", "JSON file with profile updates (legacy)").action(async (nameOrId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -10926,7 +11581,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  profiles.command("delete <nameOrId>").description("Delete a security profile by name or UUID").option("--force", "Skip confirmation and force delete (removes from referencing policies)").option("--updated-by <email>", "Email of user performing force deletion").action(async (nameOrId, opts) => {
+  profiles2.command("delete <nameOrId>").description("Delete a security profile by name or UUID").option("--force", "Skip confirmation and force delete (removes from referencing policies)").option("--updated-by <email>", "Email of user performing force deletion").action(async (nameOrId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -10959,7 +11614,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerCleanupCommand(profiles);
+  registerCleanupCommand(profiles2);
   const resumePoll = runtime.command("resume-poll <stateFile>").description("Resume polling for a previously submitted bulk scan").option("--output-file <file>", "Output CSV file path");
   registerDeprecatedAlias(resumePoll, {
     oldFlag: "--output <file>",
@@ -11107,10 +11762,10 @@ function registerRuntimeCommand(program) {
     );
     process.exitCode = 1;
   });
-  const topics = runtime.command("topics").description("Manage AIRS custom topics and guardrail generation");
-  registerApplyCommand(topics);
-  registerCreateCommand(topics);
-  topics.command("delete <topicId>").description("Delete a custom topic").option("--force", "Skip confirmation and force delete (removes from all referencing profiles)").option("--updated-by <email>", "Email of user performing force deletion").action(async (topicId, opts) => {
+  const topics2 = runtime.command("topics").description("Manage AIRS custom topics and guardrail generation");
+  registerApplyCommand(topics2);
+  registerCreateCommand(topics2);
+  topics2.command("delete <topicId>").description("Delete a custom topic").option("--force", "Skip confirmation and force delete (removes from all referencing profiles)").option("--updated-by <email>", "Email of user performing force deletion").action(async (topicId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -11128,8 +11783,8 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerEvalCommand(topics);
-  const topicsGet = topics.command("get <nameOrId>").description("Get a custom topic by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
+  registerEvalCommand(topics2);
+  const topicsGet = topics2.command("get <nameOrId>").description("Get a custom topic by name or UUID").option("--revision <n>", "Select an exact revision", Number).option("--all-versions", "Return every matching revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (nameOrId, opts) => {
     try {
       const fmt = await resolveOutput(topicsGet, opts);
       if (fmt === "pretty") renderRuntimeConfigHeader();
@@ -11138,10 +11793,10 @@ function registerRuntimeCommand(program) {
         nameOrId
       );
       if (opts.revision !== void 0 || opts.allVersions) {
-        const topics2 = (await service.listTopics()).filter(
+        const topics3 = (await service.listTopics()).filter(
           (topic) => isUuid ? topic.topic_id === nameOrId : topic.topic_name === nameOrId
         );
-        const selected = opts.revision === void 0 ? topics2 : topics2.filter((topic) => topic.revision === opts.revision);
+        const selected = opts.revision === void 0 ? topics3 : topics3.filter((topic) => topic.revision === opts.revision);
         if (selected.length === 0) throw new Error(`Topic ${nameOrId} not found`);
         if (opts.allVersions) emitList(topicsView, selected, fmt);
         else emitDetail(topicsView, selected[0], fmt);
@@ -11153,7 +11808,7 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  const topicsList = registerListFlags(topics.command("list"), { dialect: "offset" }).description("List custom topics").option("--all-versions", "Include every topic revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
+  const topicsList = registerListFlags(topics2.command("list"), { dialect: "offset" }).description("List custom topics").option("--all-versions", "Include every topic revision").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
     try {
       const fmt = await resolveOutput(topicsList, opts);
       const params = resolveListParams(topicsList, opts, { dialect: "offset" });
@@ -11174,9 +11829,9 @@ function registerRuntimeCommand(program) {
       fail(err);
     }
   });
-  registerRevertCommand(topics);
-  registerSampleCommand(topics);
-  topics.command("update <topicId>").description("Update a custom topic").requiredOption("--config <path>", "JSON file with topic updates").action(async (topicId, opts) => {
+  registerRevertCommand(topics2);
+  registerSampleCommand(topics2);
+  topics2.command("update <topicId>").description("Update a custom topic").requiredOption("--config <path>", "JSON file with topic updates").action(async (topicId, opts) => {
     try {
       renderRuntimeConfigHeader();
       const service = await createMgmtService();
@@ -11191,6 +11846,281 @@ function registerRuntimeCommand(program) {
   registerDlpCommands(runtime);
 }
 
+// src/config/tenant-settings.ts
+import { randomUUID as randomUUID10 } from "crypto";
+import { constants } from "fs";
+import { access, lstat as lstat6, mkdir as mkdir3, open as open2, rename as rename2, unlink as unlink2 } from "fs/promises";
+import { dirname as dirname4, join as join4 } from "path";
+var TENANT_CONFIG_KEYS = Object.keys(ConfigSchema.shape);
+function validateTenantSettingKey(key) {
+  if (!Object.hasOwn(ConfigSchema.shape, key))
+    throw new Error(`Unknown configuration key. Supported keys: ${TENANT_CONFIG_KEYS.join(", ")}`);
+}
+function isTenantSecret(key) {
+  return /(?:key|secret|token|password)$/i.test(key);
+}
+function validateCredentials(config) {
+  for (const key of ["mgmtTsgId", "mgmtClientId", "mgmtClientSecret"]) {
+    if (typeof config[key] !== "string" || !config[key].trim())
+      throw new Error(
+        "Tenant config requires nonempty mgmtTsgId, mgmtClientId and mgmtClientSecret"
+      );
+  }
+}
+async function createManagedTenant(name, config) {
+  validateTenantName(name);
+  for (const key of Object.keys(config)) validateTenantSettingKey(key);
+  const parsed = ConfigSchema.safeParse(config);
+  if (!parsed.success) throw new Error("Invalid tenant configuration");
+  validateCredentials(config);
+  if (readTenantStore().tenants.some((entry) => entry.name === name))
+    throw new Error("Tenant name already exists");
+  const directory = join4(dirname4(tenantStorePath()), "configs");
+  await mkdir3(directory, { recursive: true, mode: 448 });
+  const path3 = join4(directory, `${name}-${randomUUID10()}.json`);
+  const file = await open2(path3, "wx", 384);
+  try {
+    const data = Object.fromEntries(
+      Object.keys(config).map((key) => [key, Reflect.get(parsed.data, key)])
+    );
+    await file.writeFile(`${JSON.stringify(data, null, 2)}
+`);
+    await file.sync();
+    await file.close();
+    return await createTenant(name, path3);
+  } catch {
+    await file.close();
+    await unlink2(path3);
+    throw new Error("Could not create tenant configuration; registration was not completed");
+  }
+}
+async function setTenantSetting(name, key, value) {
+  validateTenantSettingKey(key);
+  const entry = readTenantStore().tenants.find((tenant) => tenant.name === name);
+  if (!entry) throw new Error("Tenant not found; register a named tenant first");
+  if (key === "mgmtTsgId" && value !== entry.tsgId)
+    throw new Error("TSG identity is pinned; create another tenant instead of changing mgmtTsgId");
+  const path3 = entry.configPath;
+  const lockPath = `${path3}.lock`;
+  const lock = await open2(lockPath, "wx", 384).catch(() => {
+    throw new Error(
+      "Cannot lock tenant config; it may be read-only or another edit is in progress"
+    );
+  });
+  const temporary = join4(dirname4(path3), `.airs-config-${randomUUID10()}.tmp`);
+  let created = false;
+  try {
+    const stat2 = await lstat6(path3);
+    if (!stat2.isFile() || (stat2.mode & 146) === 0)
+      throw new Error("Tenant config is not a writable regular file");
+    await access(path3, constants.W_OK);
+    const current = readTenantConfigFile(path3, entry.tsgId);
+    const result = ConfigSchema.safeParse({ ...current, [key]: value });
+    if (!result.success) throw new Error("Invalid value for configuration setting");
+    const next = { ...current, [key]: Reflect.get(result.data, key) };
+    validateCredentials(next);
+    const file = await open2(temporary, "wx", 384);
+    created = true;
+    try {
+      await file.writeFile(`${JSON.stringify(next, null, 2)}
+`);
+      await file.sync();
+    } finally {
+      await file.close();
+    }
+    await rename2(temporary, path3);
+    created = false;
+  } finally {
+    if (created) await unlink2(temporary).catch(() => {
+    });
+    await lock.close();
+    await unlink2(lockPath);
+  }
+}
+
+// src/cli/tenant-input.ts
+import { input, password } from "@inquirer/prompts";
+async function promptTenantValue(message, secret = false) {
+  if (!process.stdin.isTTY || !process.stderr.isTTY)
+    throw new Error(
+      "Interactive setup requires a terminal. Use --config, or --tsg-id and --client-id with --client-secret-stdin. For tenant set, pass a value or use --stdin."
+    );
+  const prompt = secret ? password : input;
+  return prompt(
+    {
+      message,
+      validate: (value) => Boolean(value.trim()) || "A nonempty value is required"
+    },
+    { input: process.stdin, output: process.stderr }
+  );
+}
+async function readTenantStdin() {
+  if (process.stdin.isTTY) throw new Error("--stdin requires piped input");
+  const chunks = [];
+  let size = 0;
+  for await (const chunk of process.stdin) {
+    const buffer = Buffer.from(chunk);
+    size += buffer.length;
+    if (size > 65536) throw new Error("Configuration input exceeds 64 KiB");
+    chunks.push(buffer);
+  }
+  const value = Buffer.concat(chunks).toString("utf8").replace(/\r?\n$/, "");
+  if (!value.trim() || /[\r\n\0]/.test(value))
+    throw new Error("Provide one nonempty configuration value on stdin");
+  return value;
+}
+
+// src/cli/commands/tenant.ts
+function tenantInputFailure(error) {
+  if (error instanceof Error && error.name === "ExitPromptError") {
+    ui.status("Cancelled; no configuration saved.");
+    process.exitCode = 130;
+    return;
+  }
+  fail(error);
+}
+var COLUMNS2 = [
+  { key: "name", label: "Tenant" },
+  { key: "active", label: "Selected" },
+  { key: "tsgId", label: "TSG ID" },
+  { key: "configPath", label: "Config file" }
+];
+function registerTenantCommand(program) {
+  const tenant = program.command("tenant").description("Create, configure and select named tenants").addHelpText(
+    "after",
+    examples(
+      "airs tenant create development",
+      "airs tenant set development defaultOutput yaml",
+      "airs tenant create production --config /secure/production.json",
+      "airs tenant switch production",
+      "airs tenant read",
+      "airs tenant switch default"
+    )
+  );
+  tenant.command("create <name>").description(
+    "Create a config with guided prompts, or register an existing JSON file; does not activate it"
+  ).option("--config <path>", "Existing Prisma AIRS JSON config file (no copying or editing)").option("--tsg-id <id>", "Tenant service group ID for a new config").option("--client-id <id>", "OAuth client ID for a new config").option("--client-secret-stdin", "Read the new config OAuth secret from piped stdin").action(
+    async (name, opts) => {
+      try {
+        validateTenantName(name);
+        if (opts.config && (opts.tsgId !== void 0 || opts.clientId !== void 0 || opts.clientSecretStdin))
+          throw new Error("--config cannot be combined with new-config options");
+        if (!opts.config && readTenantStore().tenants.some((entry2) => entry2.name === name))
+          throw new Error("Tenant name already exists");
+        const entry = opts.config ? await createTenant(name, opts.config) : await createManagedTenant(name, {
+          mgmtTsgId: opts.tsgId ?? await promptTenantValue("Tenant service group ID (mgmtTsgId):"),
+          mgmtClientId: opts.clientId ?? await promptTenantValue("OAuth client ID (mgmtClientId):"),
+          mgmtClientSecret: opts.clientSecretStdin ? await readTenantStdin() : await promptTenantValue("OAuth client secret (mgmtClientSecret):", true)
+        });
+        ui.success(
+          `Registered ${entry.name} (TSG ${entry.tsgId}); ${opts.config ? "config file unchanged" : "private config created"}. Use airs tenant switch ${entry.name}.`
+        );
+      } catch (error) {
+        tenantInputFailure(error);
+      }
+    }
+  );
+  tenant.command("set <name> <key> [value]").description("Update one named tenant setting; prompt when omitted, hide secrets").option("--stdin", "Read one value from piped stdin (recommended for automated secret updates)").action(
+    async (name, key, value, opts) => {
+      try {
+        validateTenantSettingKey(key);
+        if (!readTenantStore().tenants.some((entry) => entry.name === name))
+          throw new Error("Tenant not found; register a named tenant first");
+        if (opts.stdin && value !== void 0)
+          throw new Error("Use a value or --stdin, not both");
+        if (isTenantSecret(key) && value !== void 0)
+          throw new Error(
+            "Do not pass credentials as arguments. Omit the value for a hidden prompt, or use --stdin."
+          );
+        const setting = opts.stdin ? await readTenantStdin() : value ?? await promptTenantValue(`${key}:`, isTenantSecret(key));
+        await setTenantSetting(name, key, setting);
+        ui.success(`Updated ${key} for tenant ${name}; selection unchanged.`);
+      } catch (error) {
+        tenantInputFailure(error);
+      }
+    }
+  );
+  tenant.command("switch <name>").description(
+    "Persist the selected tenant; default restores legacy config/environment resolution"
+  ).action(async (name) => {
+    try {
+      const entry = await switchTenant(name);
+      ui.success(
+        entry ? `Selected ${entry.name} (TSG ${entry.tsgId})` : "Selected default; explicit config/environment overrides still apply"
+      );
+    } catch (error) {
+      fail(error);
+    }
+  });
+  const list = tenant.command("list").description("List registrations without reading credentials").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (opts) => {
+    try {
+      const format = await resolveOutput(list, opts, { ignoreConfig: true });
+      const store = readTenantStore();
+      const explicit = process.env.PRISMA_AIRS_CONFIG_PATH;
+      const rows = [
+        {
+          name: "default",
+          active: store.active === null,
+          tsgId: "",
+          configPath: defaultTenantConfigPath()
+        },
+        ...store.tenants.map((entry) => ({ ...entry, active: entry.name === store.active }))
+      ];
+      if (explicit)
+        ui.status("PRISMA_AIRS_CONFIG_PATH overrides the selected tenant for API commands.");
+      console.log(formatOutput(rows, COLUMNS2, format === "pretty" ? "table" : format));
+    } catch (error) {
+      fail(error);
+    }
+  });
+  const read = tenant.command("read [name]").description("Read a tenant config with all credential values redacted").option("--output <format>", "Output format: pretty, table, markdown, csv, json, yaml").action(async (name, opts) => {
+    try {
+      const format = await resolveOutput(read, opts, { ignoreConfig: true });
+      const store = readTenantStore();
+      const selected = name ?? store.active ?? "default";
+      const entry = store.tenants.find((value) => value.name === selected);
+      if (selected !== "default" && !entry) throw new Error("Tenant not found");
+      const path3 = entry?.configPath ?? expandConfigPath(process.env.PRISMA_AIRS_CONFIG_PATH || defaultTenantConfigPath());
+      const config = readTenantConfig(path3, entry?.tsgId);
+      const rows = Object.entries(config).map(([key, value]) => ({
+        key,
+        value: /key|secret|token|password/i.test(key) && value ? "[REDACTED]" : value ?? ""
+      }));
+      ui.status(`Tenant ${selected}${entry ? ` (TSG ${entry.tsgId})` : ""}: ${path3}`);
+      console.log(
+        formatOutput(
+          rows,
+          [
+            { key: "key", label: "Key" },
+            { key: "value", label: "Value" }
+          ],
+          format === "pretty" ? "table" : format
+        )
+      );
+    } catch (error) {
+      fail(error);
+    }
+  });
+  tenant.command("delete <name>").description("Unregister an inactive tenant; retain its source config file").option("--force", "Skip interactive confirmation; active tenant deletion remains refused").action(async (name, opts) => {
+    try {
+      const store = readTenantStore();
+      if (name === "default" || name === store.active)
+        throw new Error("Switch away first; default and active tenants cannot be deleted");
+      if (!store.tenants.some((entry) => entry.name === name))
+        throw new Error("Tenant not found");
+      await confirmOrAbort(
+        `Unregister tenant ${name}? Its config file will be retained.`,
+        Boolean(opts.force),
+        { action: `unregister tenant ${name}` }
+      );
+      await deleteTenant(name);
+      ui.success(`Unregistered ${name}; source config file retained`);
+    } catch (error) {
+      fail(error);
+    }
+  });
+}
+
 // src/cli/program.ts
 var READ_COMMAND_NAMES = /* @__PURE__ */ new Set([
   "categories",
@@ -11245,8 +12175,8 @@ function applySortedHelp(cmd) {
   for (const sub of cmd.commands) applySortedHelp(sub);
 }
 function buildProgram() {
-  const here = dirname4(fileURLToPath(import.meta.url));
-  const pkg = JSON.parse(readFileSync4(join4(here, "../../package.json"), "utf-8"));
+  const here = dirname5(fileURLToPath(import.meta.url));
+  const pkg = JSON.parse(readFileSync4(join5(here, "../../package.json"), "utf-8"));
   const program = new Command();
   program.name("airs").description(
     "CLI and library for Palo Alto Prisma AIRS \u2014 guardrail refinement, AI red teaming, model security scanning, profile audits"
@@ -11254,6 +12184,11 @@ function buildProgram() {
   program.hook("preAction", async (_thisCommand, actionCommand) => {
     const root = actionCommand.optsWithGlobals?.() ?? _thisCommand.opts();
     setQuiet(Boolean(root.quiet));
+    const profileTransfer = actionCommand.parent?.name() === "profiles" && actionCommand.parent.parent?.name() === "runtime" && ["backup", "restore"].includes(actionCommand.name());
+    if (profileTransfer && (root.debug || /^(1|true|yes|on)$/i.test(process.env.PANW_AI_SEC_DEBUG?.trim() ?? "")))
+      usageError(
+        "Disable --debug and PANW_AI_SEC_DEBUG for profile transfer; backups can contain sensitive policy configuration"
+      );
     const isEnvironmentReport = actionCommand.name() === "report" && ["runtime", "redteam", "aigateway", "agentguard"].includes(
       actionCommand.parent?.name() ?? ""
     ) && !(actionCommand.parent?.name() === "redteam" && actionCommand.args.length > 0);
@@ -11261,7 +12196,7 @@ function buildProgram() {
       usageError(
         "Disable --debug and PANW_AI_SEC_DEBUG for environment reports to avoid persisting sensitive traffic content"
       );
-    if (!isEnvironmentReport && !(actionCommand.name() === "report" && actionCommand.parent?.name() === "redteam") && READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
+    if (!isEnvironmentReport && actionCommand.parent?.name() !== "tenant" && !(actionCommand.name() === "report" && actionCommand.parent?.name() === "redteam") && READ_COMMAND_NAMES.has(actionCommand.name()) && actionCommand.options.some((option) => option.long === "--output")) {
       try {
         const format = await resolveOutput(actionCommand, actionCommand.opts());
         actionCommand.setOptionValueWithSource("output", format, "implied");
@@ -11270,9 +12205,9 @@ function buildProgram() {
       }
     }
     if (root.debug) {
-      const logPath = join4(
+      const logPath = join5(
         process.cwd(),
-        `debug-api-${Date.now()}-${randomUUID9().slice(0, 8)}.jsonl`
+        `debug-api-${Date.now()}-${randomUUID11().slice(0, 8)}.jsonl`
       );
       try {
         let ancestor = actionCommand;
@@ -11297,6 +12232,7 @@ function buildProgram() {
   registerAgentGuardCommand(program);
   registerAiGatewayCommand(program);
   registerConfigCommand(program);
+  registerTenantCommand(program);
   registerDoctorCommand(program);
   registerCompletionCommand(program);
   applyListDeleteAliases(program);