@cdot65/prisma-airs-cli 5.5.0 → 5.7.0

package/README.md

@@ -25,7 +25,7 @@
 - **Unified automation output** — resource reads support `pretty`, `table`, `markdown`, `csv`, `json`, and `yaml`, with pipe-safe stdout; environment deliverables use HTML or Markdown
 - **Complete pagination** — consistent `--limit`, `--offset`, and `--all` traversal with a configurable safety cap
 - **`airs doctor`** — one-command diagnostics for environment, credentials, and API connectivity
-- **Tenant selection** — `airs tenant create|switch|list|read|delete` selects existing config files without copying secrets or changing read-only mounts
+- **Tenant configuration** — `airs tenant create|set|switch|list|read|delete` supports guided setup with hidden secret prompts, individual setting updates, and existing-file registration without changing read-only mounts
 - **Profile migration** — `airs runtime profiles backup|restore` exports private JSON/YAML, previews cross-tenant restores, remaps topics and explicit DLP dependencies, and verifies restored policies ([guide](https://cdot65.github.io/prisma-airs-cli/runtime/profile-transfer/))
 - **`airs config`** — manage the selected config file from the CLI (`list`, `get`, `set`, `unset`, `path`)
 

package/dist/{chunk-NKAVUBKI.js → chunk-XQOICLSH.js}

@@ -2402,11 +2402,14 @@ async function changeStore(change) {
     await unlink(lockPath);
   }
 }
-async function createTenant(name, configPath) {
+function validateTenantName(name) {
   if (!NameSchema.safeParse(name).success)
     throw new Error(
       "Tenant name must be 1\u201364 letters, digits, hyphens or underscores, start with a letter/digit, and not be default"
     );
+}
+async function createTenant(name, configPath) {
+  validateTenantName(name);
   let path2;
   try {
     path2 = realpathSync(resolve(expandConfigPath(configPath)));
@@ -4186,10 +4189,13 @@ export {
   readBackupFile,
   readBackupDir,
   ConfigSchema,
+  tenantStorePath,
   expandConfigPath,
   defaultTenantConfigPath,
   readTenantStore,
   readTenantConfig,
+  readTenantConfigFile,
+  validateTenantName,
   createTenant,
   switchTenant,
   deleteTenant,

package/dist/cli/index.js

@@ -23,6 +23,7 @@ import {
   readBackupDir,
   readBackupFile,
   readTenantConfig,
+  readTenantConfigFile,
   readTenantStore,
   renderEnvironmentReportHtml,
   renderEnvironmentReportMarkdown,
@@ -34,10 +35,12 @@ import {
   resolveOutputDir,
   sanitizeFilename,
   switchTenant,
+  tenantStorePath,
+  validateTenantName,
   validateTopic,
   writeBackupFile,
   writeReportFile
-} from "../chunk-NKAVUBKI.js";
+} from "../chunk-XQOICLSH.js";
 
 // src/cli/index.ts
 import "dotenv/config";
@@ -56,9 +59,9 @@ function installProcessGuards() {
 }
 
 // src/cli/program.ts
-import { randomUUID as randomUUID10 } from "crypto";
+import { randomUUID as randomUUID11 } from "crypto";
 import { readFileSync as readFileSync4 } from "fs";
-import { dirname as dirname4, join as join4 } from "path";
+import { dirname as dirname5, join as join5 } from "path";
 import { fileURLToPath } from "url";
 import { Command } from "commander";
 
@@ -519,6 +522,10 @@ ${INDENT}${chalk3.bold(label)}
   warn(msg) {
     console.log(`${INDENT}${COLORS.warn(`${GLYPHS.warn} ${msg}`)}`);
   },
+  /** Safety warnings remain visible in quiet mode without corrupting structured stdout. */
+  warning(msg) {
+    console.error(`${INDENT}${COLORS.warn(`${GLYPHS.warn} ${msg}`)}`);
+  },
   /** Neutral informational callout. Quiet-suppressed. */
   info(msg) {
     if (quietMode) return;
@@ -3684,19 +3691,19 @@ function installDebugLogger(logPath, options = {}) {
   mkdirSync(dirname(logPath), { recursive: true, mode: 448 });
   writeFileSync(logPath, "", { encoding: "utf8", mode: 384, flag: "wx" });
   const originalFetch = globalThis.fetch;
-  globalThis.fetch = async function debugFetch(input, init2) {
-    const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url;
+  globalThis.fetch = async function debugFetch(input2, init2) {
+    const url = typeof input2 === "string" ? input2 : input2 instanceof URL ? input2.toString() : input2.url;
     const rawHeaders = headersToRecord(
-      init2?.headers ?? (input instanceof Request ? input.headers : void 0)
+      init2?.headers ?? (input2 instanceof Request ? input2.headers : void 0)
     );
     const inference = Object.keys(rawHeaders).some(
       (name) => name.toLowerCase() === "x-portkey-api-key"
     );
     if (!isAirsUrl(url) && !inference) {
-      return originalFetch(input, init2);
+      return originalFetch(input2, init2);
     }
     const dashboard = options.omitBodies || /\/v1\/mgmt\/(dashboard\/|reports\/scancontent(?:\?|$))/.test(url) || /\/aiag\//.test(new URL(url).pathname);
-    const method = init2?.method ?? (input instanceof Request ? input.method : "GET");
+    const method = init2?.method ?? (input2 instanceof Request ? input2.method : "GET");
     const reqHeaders = redactHeaders(rawHeaders);
     const loggedUrl = redactUrl(url);
     let reqBody;
@@ -3715,7 +3722,7 @@ function installDebugLogger(logPath, options = {}) {
     let resBody;
     let error;
     try {
-      response = await originalFetch(input, init2);
+      response = await originalFetch(input2, init2);
     } catch (err) {
       error = inference ? "Runtime request failed" : "Request failed";
       const entry2 = JSON.stringify({
@@ -6955,8 +6962,8 @@ function buildDefaultCategories(categories) {
     ])
   );
 }
-function parseAttackGoals(input) {
-  const trimmed = input.trim();
+function parseAttackGoals(input2) {
+  const trimmed = input2.trim();
   const raw = trimmed.startsWith("[") ? trimmed : fs2.readFileSync(trimmed, "utf-8");
   let parsed;
   try {
@@ -6978,10 +6985,10 @@ function sliceClientSide(items, opts) {
   const limit = opts.limit !== void 0 ? Number.parseInt(String(opts.limit), 10) : void 0;
   return items.slice(offset, limit === void 0 ? void 0 : offset + limit);
 }
-function parsePositiveInt(input, flag) {
-  const n = Number.parseInt(input, 10);
+function parsePositiveInt(input2, flag) {
+  const n = Number.parseInt(input2, 10);
   if (!Number.isFinite(n) || n <= 0) {
-    throw new Error(`${flag}: expected a positive integer, got "${input}"`);
+    throw new Error(`${flag}: expected a positive integer, got "${input2}"`);
   }
   return n;
 }
@@ -7067,10 +7074,10 @@ function resolveScriptB64(opts) {
   }
   throw new Error("one of --script-file or --script-b64 is required");
 }
-function parseAdapterVariables(input) {
+function parseAdapterVariables(input2) {
   let parsed;
   try {
-    parsed = JSON.parse(input);
+    parsed = JSON.parse(input2);
   } catch (err) {
     throw new Error(`--variables: invalid JSON (${err instanceof Error ? err.message : err})`);
   }
@@ -9548,6 +9555,102 @@ import {
   SecurityProfileSchema
 } from "@cdot65/prisma-airs-sdk";
 import { z as z5 } from "zod";
+
+// src/backup/runtime-policy.ts
+function object(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function compareRuntimePolicies(expected, actual) {
+  const serverDefaults = [];
+  const differences = [];
+  const visit = (source, target, path3, insideToxicCategories = false, insideTopicGuardrails = false) => {
+    if (source === target) return;
+    if (Array.isArray(source) && Array.isArray(target)) {
+      if (source.length !== target.length) differences.push(`${path3}.length`);
+      source.forEach((item, index) => {
+        visit(
+          item,
+          target[index],
+          `${path3}[${index}]`,
+          insideToxicCategories,
+          insideTopicGuardrails
+        );
+      });
+      return;
+    }
+    if (object(source) && object(target)) {
+      for (const key of /* @__PURE__ */ new Set([...Object.keys(source), ...Object.keys(target)])) {
+        const field = `${path3}.${key}`;
+        if (!Object.hasOwn(source, key) && Object.hasOwn(target, key)) {
+          const model = /^policy\.ai-security-profiles\[\d+\]\.model-configuration/;
+          const relative = path3.replace(model, "model");
+          let allowed;
+          if (relative === "model.data-protection" && key === "database-security") allowed = null;
+          if (key === "severity") {
+            if (/^model\.data-protection\.database-security\[\d+\]$/.test(relative)) {
+              const values = {
+                "database-security-create": "medium",
+                "database-security-read": "low",
+                "database-security-update": "medium",
+                "database-security-delete": "high"
+              };
+              if (source.name === target.name && typeof source.name === "string")
+                allowed = Object.hasOwn(values, source.name) ? values[source.name] : void 0;
+            }
+            if (relative === "model.data-protection.source-code-detection") allowed = "high";
+            if (relative === "model.app-protection.malicious-code-protection" && source.name === "malicious-code" && target.name === source.name)
+              allowed = "high";
+            if (/^model\.model-protection\[\d+\]$/.test(relative) && (source.name === "prompt-injection" || source.name === "topic-guardrails" || source.name === "contextual-grounding" && source.action === "block") && target.name === source.name)
+              allowed = "medium";
+            if (insideTopicGuardrails && /^model\.model-protection\[\d+\]\.topic-list\[\d+\]\.topic\[\d+\]$/.test(relative) && typeof source.topic_id === "string" && source.topic_id.length > 0 && source.topic_id === target.topic_id && source.topic_name === target.topic_name && Number.isInteger(source.revision) && source.revision === target.revision)
+              allowed = "medium";
+            if (/^model\.agent-protection\[\d+\]$/.test(relative) && source.name === "agent-security" && target.name === source.name)
+              allowed = "medium";
+          }
+          if (relative === "model.app-protection" && key === "url-detected-severity")
+            allowed = "low";
+          if (relative === "model.app-protection" && key === "default-url-category" && object(target[key])) {
+            const value = target[key];
+            if (Object.keys(value).length === 1 && value.member === null) {
+              serverDefaults.push(field);
+              continue;
+            }
+          }
+          if ((/^model\.model-protection\[\d+\]$/.test(relative) && source.name === "toxic-content" && target.name === source.name || insideToxicCategories && /^model\.model-protection\[\d+\]\.toxic-category-list\[\d+\]$/.test(relative) && typeof source.category === "string" && source.category.length > 0 && source.category === target.category) && key === "severity-by-confidence" && object(target[key])) {
+            const value = target[key];
+            if (Object.keys(value).length === 2 && value.high === "medium" && value.moderate === "low") {
+              serverDefaults.push(field);
+              continue;
+            }
+          }
+          if (allowed !== void 0 && target[key] === allowed) {
+            serverDefaults.push(field);
+            continue;
+          }
+          differences.push(field);
+        } else if (!Object.hasOwn(target, key)) differences.push(field);
+        else
+          visit(
+            source[key],
+            target[key],
+            field,
+            key === "toxic-category-list" && source.name === "toxic-content" && target.name === source.name && /^policy\.ai-security-profiles\[\d+\]\.model-configuration\.model-protection\[\d+\]$/.test(
+              path3
+            ),
+            key === "topic-list" && source.name === "topic-guardrails" && target.name === source.name && /^policy\.ai-security-profiles\[\d+\]\.model-configuration\.model-protection\[\d+\]$/.test(
+              path3
+            ) || insideTopicGuardrails && key === "topic" && source.action === "block" && target.action === "block"
+          );
+      }
+      return;
+    }
+    differences.push(path3);
+  };
+  visit(expected, actual, "policy");
+  return { matches: differences.length === 0, serverDefaults, differences };
+}
+
+// src/backup/runtime-profiles.ts
 var RuntimeProfilesBackupSchema = z5.object({
   version: z5.literal(1),
   resourceType: z5.literal("runtime-security-profiles"),
@@ -9556,7 +9659,7 @@ var RuntimeProfilesBackupSchema = z5.object({
   profiles: z5.array(SecurityProfileSchema).min(1).max(1e4),
   topics: z5.array(CustomTopicSchema).max(1e4)
 }).strict();
-function object(value) {
+function object2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function pagesLimit(value) {
@@ -9623,7 +9726,7 @@ function topicReferences(policy) {
       value.forEach(visit);
       return;
     }
-    if (!object(value)) return;
+    if (!object2(value)) return;
     if ("topic_id" in value) {
       if (typeof value.topic_id !== "string" || typeof value.topic_name !== "string" || !Number.isSafeInteger(value.revision) || Number(value.revision) < 0)
         throw new Error("Invalid topic identity in profile policy");
@@ -9676,26 +9779,48 @@ function sameTopic(a, b) {
   return a.description === b.description && JSON.stringify(a.examples) === JSON.stringify(b.examples) && (a.active ?? true) === (b.active ?? true);
 }
 function dlpReferences(policy) {
-  if (!object(policy)) return [];
+  if (!object2(policy)) return [];
   const refs = [];
   for (const entry of Array.isArray(policy["dlp-data-profiles"]) ? policy["dlp-data-profiles"] : []) {
-    if (!object(entry) || typeof entry.name !== "string")
+    if (!object2(entry) || typeof entry.name !== "string")
       throw new Error("Invalid embedded DLP reference");
     refs.push({ value: entry, name: entry.name, kind: "embedded" });
   }
   for (const entry of Array.isArray(policy["ai-security-profiles"]) ? policy["ai-security-profiles"] : []) {
-    if (!object(entry) || !object(entry["model-configuration"])) continue;
+    if (!object2(entry) || !object2(entry["model-configuration"])) continue;
     const protection = entry["model-configuration"]["data-protection"];
-    if (!object(protection) || !object(protection["data-leak-detection"])) continue;
+    if (!object2(protection) || !object2(protection["data-leak-detection"])) continue;
     const members = protection["data-leak-detection"].member;
     if (!Array.isArray(members)) continue;
     for (const member of members) {
-      if (!object(member) || typeof member.text !== "string") throw new Error("Invalid DLP member");
+      if (!object2(member) || typeof member.text !== "string") throw new Error("Invalid DLP member");
+      if (member.text.toLowerCase() === "sensitive content" && (member.id === "" || member.id === void 0) && (member.version === "2" || member.version === void 0) && !refs.some((ref) => ref.kind === "embedded" && ref.name === member.text))
+        continue;
       refs.push({ value: member, name: member.text, kind: "member" });
     }
   }
   return refs;
 }
+function basicFallback(policy) {
+  const result = structuredClone(policy);
+  const customNames = new Set(dlpReferences(result).map((ref) => ref.name));
+  let converted = false;
+  for (const entry of result?.["ai-security-profiles"] ?? []) {
+    const detection = entry["model-configuration"]?.["data-protection"]?.["data-leak-detection"];
+    if (!detection?.member?.some((member) => customNames.has(member.text))) continue;
+    if (!["block", "allow", ""].includes(detection.action))
+      throw new Error("Cannot safely fall back to Basic: unsupported DLP action");
+    if (detection["mask-data-inline"] && detection.action !== "block")
+      throw new Error("Cannot safely fall back to Basic: inline masking requires a block action");
+    detection.member = detection.action === "" ? null : [{ text: "sensitive content", id: "", version: "2" }];
+    converted = true;
+  }
+  if (!converted)
+    throw new Error("Cannot safely fall back to Basic: no matching DLP detection configuration");
+  if (result && "dlp-data-profiles" in result) result["dlp-data-profiles"] = [];
+  PolicySchema.parse(result);
+  return result;
+}
 function assertKnownPolicyReferences(policy) {
   const known = new Map([
     ...topicReferences(policy).map((ref) => [ref, ["topic_id"]]),
@@ -9711,7 +9836,7 @@ function assertKnownPolicyReferences(policy) {
       });
       return;
     }
-    if (!object(value)) return;
+    if (!object2(value)) return;
     for (const [key, child] of Object.entries(value)) {
       if (child !== null && child !== "" && /(?:^|[-_])(id|uuid)$|(?:Id|ID|Uuid|UUID)$/.test(key) && !known.get(value)?.includes(key))
         throw new Error(`Unsupported cross-tenant policy reference at ${path3}.${key}`);
@@ -9732,8 +9857,8 @@ async function dataProfiles(api, maxPages2) {
   }
   throw new Error("DLP inventory is incomplete; increase --max-pages");
 }
-async function planRuntimeProfilesRestore(api, input, destinationTsgId, options = {}) {
-  const backup = RuntimeProfilesBackupSchema.parse(input);
+async function planRuntimeProfilesRestore(api, input2, destinationTsgId, options = {}) {
+  const backup = RuntimeProfilesBackupSchema.parse(input2);
   if (!destinationTsgId) throw new Error("Destination TSG ID is required");
   const maxPages2 = options.maxPages ?? 100;
   pagesLimit(maxPages2);
@@ -9741,7 +9866,10 @@ async function planRuntimeProfilesRestore(api, input, destinationTsgId, options
   if (prefix.length > 64 || [...prefix].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
     throw new Error("Invalid --name-prefix");
   const conflict = options.onConflict ?? "error";
-  if (!["error", "skip", "update"].includes(conflict)) throw new Error("Invalid conflict policy");
+  if (!["error", "skip", "update", "verify"].includes(conflict))
+    throw new Error("Invalid conflict policy");
+  const missingDlp = options.onMissingDlp ?? "error";
+  if (!["error", "basic"].includes(missingDlp)) throw new Error("Invalid missing DLP policy");
   const selected = latestProfiles(backup.profiles);
   assertTenant(selected, backup.source.tsgId);
   if (selected.length !== backup.profiles.length)
@@ -9763,14 +9891,14 @@ async function planRuntimeProfilesRestore(api, input, destinationTsgId, options
     const match = existing.find((p) => p.profile_name === name);
     if (match && conflict === "error")
       throw new Error(
-        `Destination profile already exists: ${name}; choose --on-conflict skip or update`
+        `Destination profile already exists: ${name}; choose --on-conflict verify, skip or update`
       );
     if (match && !match.profile_id) throw new Error("Destination profile has no identity");
     return {
       source: structuredClone(source),
       name,
       existing: match,
-      action: match ? conflict === "skip" ? "skip" : "update" : "create"
+      action: match ? conflict === "skip" ? "skip" : conflict === "verify" ? "verify" : "update" : "create"
     };
   });
   const changing = profilePlans.filter((p) => p.action !== "skip");
@@ -9804,46 +9932,102 @@ async function planRuntimeProfilesRestore(api, input, destinationTsgId, options
       );
     topicPlans.set(key, { key, name, source, existing: match });
   }
-  const dlpRefs = crossTenant ? changing.flatMap((p) => dlpReferences(p.source.policy)) : [];
+  const dlpRefs = crossTenant || missingDlp === "basic" ? changing.flatMap((p) => dlpReferences(p.source.policy)) : [];
   const names = [...new Set(dlpRefs.map((ref) => ref.name))];
-  for (const name of names)
-    if (!options.dlpMap?.[name])
+  const targetFor = (name) => Object.hasOwn(options.dlpMap ?? {}, name) ? options.dlpMap?.[name] : crossTenant ? void 0 : name;
+  const unresolved = /* @__PURE__ */ new Set();
+  for (const name of names) {
+    if (!targetFor(name) && missingDlp === "error")
       throw new Error(
-        `Cross-tenant DLP reference requires explicit --dlp-map ${name}=<destination-name>; DLP resources are not cloned`
+        `Cross-tenant DLP reference requires explicit --dlp-map "${name}=<destination-name>"; DLP resources are not cloned. Inspect destination resources with airs runtime dlp profiles list --all --output json, or explicitly accept --on-missing-dlp basic.`
       );
-  const catalog = names.length ? await dataProfiles(api, maxPages2) : [];
-  const dlpMappings = names.map((name) => {
-    const target = options.dlpMap?.[name];
-    const matches = catalog.filter((p) => p.name === target && p.profile_status !== "deleted");
+    if (!targetFor(name)) unresolved.add(name);
+  }
+  const catalog = names.some((name) => targetFor(name)) ? await dataProfiles(api, maxPages2) : [];
+  const resolved = [];
+  for (const name of names) {
+    const target = targetFor(name);
+    if (!target) continue;
+    const matches = catalog.filter(
+      (p) => p.name === target && p.profile_status !== "deleted" && p.profile_status !== "disabled"
+    );
+    if (!matches.length && missingDlp === "basic") {
+      unresolved.add(name);
+      continue;
+    }
     if (matches.length !== 1 || !matches[0].id)
       throw new Error(`Missing or ambiguous destination DLP profile: ${target}`);
     if (dlpRefs.some((ref) => ref.name === name && "version" in ref.value) && matches[0].version == null)
       throw new Error(`Destination DLP version is unknown: ${target}`);
-    return {
+    resolved.push({
       source: name,
       destination: String(target),
       id: matches[0].id,
       version: matches[0].version ?? void 0
-    };
-  });
-  return {
+    });
+  }
+  const dlpFallbacks = [];
+  for (const item of changing) {
+    const replaced = [...new Set(dlpReferences(item.source.policy).map((ref) => ref.name))];
+    const missing = replaced.filter((name) => unresolved.has(name));
+    if (!missing.length) continue;
+    item.fallbackPolicy = basicFallback(item.source.policy);
+    dlpFallbacks.push({
+      profile: item.name,
+      unresolved: missing,
+      replaced,
+      reason: "unmapped-or-missing",
+      protection: "basic"
+    });
+  }
+  const remaining = new Set(
+    changing.flatMap(
+      (p) => dlpReferences(p.fallbackPolicy ?? p.source.policy).map((ref) => ref.name)
+    )
+  );
+  const dlpMappings = resolved.filter((mapping) => remaining.has(mapping.source));
+  const plan = {
     sourceTsgId: backup.source.tsgId,
     destinationTsgId,
     profiles: profilePlans,
     topics: [...topicPlans.values()],
     dlpMappings,
+    dlpFallbacks,
+    serverDefaults: [],
     maxPages: maxPages2
   };
+  const existingTopics = new Map(
+    plan.topics.filter((t) => t.existing).map((t) => [t.key, t.existing])
+  );
+  for (const item of profilePlans.filter((p) => p.action === "verify")) {
+    const expected = mappedPolicy(item, plan, existingTopics);
+    const comparison = compareRuntimePolicies(expected, item.existing?.policy);
+    if (!comparison.matches || item.source.active !== void 0 && item.existing?.active !== item.source.active)
+      throw new Error(
+        `Destination profile does not match restore plan: ${item.name}; verification made no changes`
+      );
+    if (comparison.serverDefaults.length)
+      plan.serverDefaults.push({ profile: item.name, fields: comparison.serverDefaults });
+  }
+  return plan;
 }
 function canonical(value) {
-  const order = (v) => Array.isArray(v) ? v.map(order) : object(v) ? Object.fromEntries(
+  const order = (v) => Array.isArray(v) ? v.map(order) : object2(v) ? Object.fromEntries(
     Object.entries(v).sort(([a], [b]) => a.localeCompare(b)).map(([k, child]) => [k, order(child)])
   ) : v;
   return JSON.stringify(order(value));
 }
+function canonicalPolicy(policy) {
+  const value = structuredClone(policy);
+  for (const entry of value?.["ai-security-profiles"] ?? []) {
+    const protection = entry["model-configuration"]?.["data-protection"];
+    if (protection && !("database-security" in protection)) protection["database-security"] = null;
+  }
+  return canonical(value);
+}
 function unchanged(current, prior) {
   return Boolean(
-    current && current.profile_id === prior.profile_id && current.revision === prior.revision && current.active === prior.active && canonical(current.policy) === canonical(prior.policy)
+    current && current.profile_id === prior.profile_id && current.revision === prior.revision && current.active === prior.active && canonicalPolicy(current.policy) === canonicalPolicy(prior.policy)
   );
 }
 async function restoreRuntimeProfiles(api, plan) {
@@ -9851,6 +10035,8 @@ async function restoreRuntimeProfiles(api, plan) {
     sourceTsgId: plan.sourceTsgId,
     destinationTsgId: plan.destinationTsgId,
     complete: false,
+    dlpFallbacks: structuredClone(plan.dlpFallbacks ?? []),
+    serverDefaults: [],
     topics: [],
     profiles: []
   };
@@ -9861,7 +10047,7 @@ async function restoreRuntimeProfiles(api, plan) {
       const catalog = await dataProfiles(api, plan.maxPages);
       for (const mapping of plan.dlpMappings) {
         const matches = catalog.filter(
-          (p) => p.name === mapping.destination && p.profile_status !== "deleted"
+          (p) => p.name === mapping.destination && p.profile_status !== "deleted" && p.profile_status !== "disabled"
         );
         if (matches.length !== 1 || matches[0].id !== mapping.id || (matches[0].version ?? void 0) !== mapping.version)
           throw new Error(`Destination DLP profile changed after planning: ${mapping.destination}`);
@@ -9907,27 +10093,7 @@ async function restoreRuntimeProfiles(api, plan) {
         result.profiles.push({ name: item.name, action: "skipped", id: item.existing?.profile_id });
         continue;
       }
-      const policy = structuredClone(item.source.policy);
-      for (const ref of topicReferences(policy)) {
-        const topic = mappedTopics.get(topicKey(ref));
-        if (!topic?.topic_id) throw new Error("Missing planned topic mapping");
-        ref.topic_id = topic.topic_id;
-        ref.topic_name = topic.topic_name;
-        ref.revision = topic.revision;
-      }
-      for (const ref of dlpReferences(policy)) {
-        const mapping = plan.dlpMappings.find((m) => m.source === ref.name);
-        if (!mapping) continue;
-        if (ref.kind === "embedded") {
-          ref.value.name = mapping.destination;
-          ref.value.uuid = mapping.id;
-        } else ref.value.text = mapping.destination;
-        if ("id" in ref.value) ref.value.id = mapping.id;
-        if ("version" in ref.value) {
-          if (mapping.version === void 0) throw new Error("Destination DLP version is unknown");
-          ref.value.version = String(mapping.version);
-        }
-      }
+      const policy = mappedPolicy(item, plan, mappedTopics);
       const body = CreateSecurityProfileRequestSchema.parse({
         profile_name: item.name,
         active: item.source.active,
@@ -9938,6 +10104,14 @@ async function restoreRuntimeProfiles(api, plan) {
       const current = inventory2.find((p) => p.profile_name === item.name);
       if (item.existing ? !unchanged(current, item.existing) : Boolean(current))
         throw new Error(`Destination profile changed after planning: ${item.name}`);
+      if (item.action === "verify") {
+        const comparison2 = compareRuntimePolicies(policy, current?.policy);
+        if (!comparison2.matches) throw new Error(`Restored profile did not verify: ${item.name}`);
+        result.profiles.push({ name: item.name, action: "verified", id: current?.profile_id });
+        if (comparison2.serverDefaults.length)
+          result.serverDefaults.push({ profile: item.name, fields: comparison2.serverDefaults });
+        continue;
+      }
       const response = item.action === "update" && item.existing?.profile_id ? await api.profiles.update(item.existing.profile_id, body) : await api.profiles.create(body);
       result.profiles.push({
         name: item.name,
@@ -9948,8 +10122,11 @@ async function restoreRuntimeProfiles(api, plan) {
         (p) => p.profile_name === item.name
       );
       if (verified) assertTenant([verified], plan.destinationTsgId);
-      if (!verified?.profile_id || response.profile_id && response.profile_id !== verified.profile_id || item.source.active !== void 0 && verified.active !== item.source.active || canonical(verified.policy) !== canonical(policy))
+      const comparison = compareRuntimePolicies(policy, verified?.policy);
+      if (!verified?.profile_id || response.profile_id && response.profile_id !== verified.profile_id || item.source.active !== void 0 && verified.active !== item.source.active || !comparison.matches)
         throw new Error(`Restored profile did not verify: ${item.name}`);
+      if (comparison.serverDefaults.length)
+        result.serverDefaults.push({ profile: item.name, fields: comparison.serverDefaults });
     }
     result.complete = true;
   } catch (error) {
@@ -9960,10 +10137,97 @@ async function restoreRuntimeProfiles(api, plan) {
   }
   return result;
 }
+function mappedPolicy(item, plan, mappedTopics) {
+  const policy = structuredClone(item.fallbackPolicy ?? item.source.policy);
+  for (const ref of topicReferences(policy)) {
+    const topic = mappedTopics.get(topicKey(ref));
+    if (!topic?.topic_id)
+      throw new Error(
+        "Missing planned topic mapping; an existing profile cannot be verified without its destination dependencies"
+      );
+    ref.topic_id = topic.topic_id;
+    ref.topic_name = topic.topic_name;
+    ref.revision = topic.revision;
+  }
+  for (const ref of dlpReferences(policy)) {
+    const mapping = plan.dlpMappings.find((m) => m.source === ref.name);
+    if (!mapping) continue;
+    if (ref.kind === "embedded") {
+      ref.value.name = mapping.destination;
+      ref.value.uuid = mapping.id;
+    } else ref.value.text = mapping.destination;
+    if ("id" in ref.value) ref.value.id = mapping.id;
+    if ("version" in ref.value) {
+      if (mapping.version === void 0) throw new Error("Destination DLP version is unknown");
+      ref.value.version = String(mapping.version);
+    }
+  }
+  return policy;
+}
 
 // src/cli/commands/profile-transfer.ts
 var MAX_BACKUP_BYTES = 20 * 1024 * 1024;
 var FORMATS = "Output format: pretty, table, markdown, csv, json, yaml";
+function renderRestore(value, columns, format) {
+  if (format !== "pretty" && format !== "table" && format !== "markdown")
+    return formatOutput([value], columns, format);
+  const markdown = format === "markdown";
+  const rows = (key) => Array.isArray(value[key]) ? value[key] : [];
+  const heading = (text2) => markdown ? `### ${text2}
+` : text2;
+  const blocks = [
+    heading(
+      value.dryRun ? "Restore preview \u2014 no changes made" : value.complete ? "Restore complete" : "Restore incomplete \u2014 completed writes remain"
+    ),
+    `Source TSG: ${value.sourceTsgId}
+${markdown ? "\n" : ""}Destination TSG: ${value.destinationTsgId}`
+  ];
+  for (const [key, title] of [
+    ["profiles", "Profiles"],
+    ["topics", "Topics"]
+  ]) {
+    blocks.push(heading(`${title} (${rows(key).length})`));
+    blocks.push(
+      formatOutput(
+        rows(key),
+        [
+          { key: "action", label: "Action" },
+          { key: "name", label: "Name" }
+        ],
+        markdown ? "markdown" : "table"
+      ) || "(none)"
+    );
+  }
+  if (rows("dlpMappings").length) {
+    blocks.push(heading("DLP mappings"));
+    blocks.push(
+      formatOutput(
+        rows("dlpMappings"),
+        [
+          { key: "source", label: "Source" },
+          { key: "destination", label: "Destination" }
+        ],
+        markdown ? "markdown" : "table"
+      )
+    );
+  }
+  if (rows("dlpFallbacks").length) {
+    blocks.push(heading("Basic DLP fallbacks \u2014 custom protection lost"));
+    for (const fallback of rows("dlpFallbacks"))
+      blocks.push(
+        `${fallback.profile}: ${Array.isArray(fallback.replaced) ? fallback.replaced.join(", ") : ""}`
+      );
+  }
+  if (rows("serverDefaults").length) {
+    blocks.push(heading("Verified server-added defaults (source omitted these fields)"));
+    for (const item of rows("serverDefaults"))
+      blocks.push(
+        `${item.profile}: ${Array.isArray(item.fields) ? item.fields.length : 0} fields; use --output json for paths`
+      );
+  }
+  if (value.error) blocks.push(`Error: ${value.error}`);
+  return blocks.join("\n\n");
+}
 function maxPages(value) {
   if (!/^\d+$/.test(value) || Number(value) < 1 || Number(value) > 1e3)
     usageError("--max-pages must be an integer from 1 to 1000");
@@ -10076,7 +10340,15 @@ function registerProfileTransferCommands(profiles2) {
   });
   const restore = profiles2.command("restore <file>").description(
     "Restore profile policies into the selected tenant; validate all dependencies before changes"
-  ).option("--dry-run", "Read and validate a restore plan without changing destination resources").option("--name-prefix <prefix>", "Prefix restored profile and topic names to avoid collisions").option("--on-conflict <policy>", "Existing profile names: error, skip or update", "error").option(
+  ).option("--dry-run", "Read and validate a restore plan without changing destination resources").option("--name-prefix <prefix>", "Prefix restored profile and topic names to avoid collisions").option(
+    "--on-conflict <policy>",
+    "Existing profile names: error, verify (resume without writes), skip or update",
+    "error"
+  ).option(
+    "--on-missing-dlp <policy>",
+    "Unresolved custom DLP: error or basic (explicitly accepts loss of custom detection)",
+    "error"
+  ).option(
     "--dlp-map <source=destination>",
     "Explicit cross-tenant binding to an existing DLP data profile (repeatable)",
     (value, prior) => [...prior, value],
@@ -10093,12 +10365,15 @@ function registerProfileTransferCommands(profiles2) {
     "after",
     examples(
       "airs runtime profiles restore ./profiles.json --dry-run --output json",
+      "airs runtime profiles restore ./profiles.json --on-missing-dlp basic --dry-run --output json",
       "airs runtime profiles restore ./profiles.json --name-prefix migrated- --expect-tsg <destination-tsg> --force"
     )
   ).action(async (file, opts) => {
     try {
-      if (!["error", "skip", "update"].includes(opts.onConflict))
-        throw new CliUsageError("--on-conflict must be error, skip or update");
+      if (!["error", "skip", "update", "verify"].includes(opts.onConflict))
+        throw new CliUsageError("--on-conflict must be error, verify, skip or update");
+      if (!["error", "basic"].includes(opts.onMissingDlp))
+        throw new CliUsageError("--on-missing-dlp must be error or basic");
       if (opts.force && !opts.expectTsg)
         throw new CliUsageError("--force requires --expect-tsg <destination-tsg>");
       const mappings = dlpMap(opts.dlpMap);
@@ -10109,15 +10384,15 @@ function registerProfileTransferCommands(profiles2) {
       const info = await stat(path3);
       if (!info.isFile() || info.size > MAX_BACKUP_BYTES)
         throw new CliUsageError("Backup must be a regular file no larger than 20 MiB");
-      let input;
+      let input2;
       try {
         const text2 = await readFile9(path3, "utf8");
         if (Buffer.byteLength(text2) > MAX_BACKUP_BYTES) throw new Error("Backup too large");
-        input = extension === ".json" ? JSON.parse(text2) : load2(text2, { schema: JSON_SCHEMA });
+        input2 = extension === ".json" ? JSON.parse(text2) : load2(text2, { schema: JSON_SCHEMA });
       } catch {
         throw new CliUsageError("Backup is not valid JSON/YAML; contents are not logged");
       }
-      const data = RuntimeProfilesBackupSchema.parse(input);
+      const data = RuntimeProfilesBackupSchema.parse(input2);
       const format = await resolveOutput(restore, opts);
       const { api, tsgId } = await context();
       if (opts.expectTsg && opts.expectTsg !== tsgId)
@@ -10128,7 +10403,8 @@ function registerProfileTransferCommands(profiles2) {
         namePrefix: opts.namePrefix,
         onConflict: opts.onConflict,
         maxPages: opts.maxPages,
-        dlpMap: mappings
+        dlpMap: mappings,
+        onMissingDlp: opts.onMissingDlp
       });
       const summary = {
         sourceTsgId: plan.sourceTsgId,
@@ -10142,7 +10418,9 @@ function registerProfileTransferCommands(profiles2) {
         dlpMappings: plan.dlpMappings.map((m) => ({
           source: m.source,
           destination: m.destination
-        }))
+        })),
+        dlpFallbacks: plan.dlpFallbacks,
+        serverDefaults: plan.serverDefaults
       };
       const columns = [
         { key: "sourceTsgId", label: "Source TSG" },
@@ -10150,22 +10428,30 @@ function registerProfileTransferCommands(profiles2) {
         { key: "profiles", label: "Profiles" },
         { key: "topics", label: "Topics" },
         { key: "dlpMappings", label: "DLP mappings" },
+        { key: "dlpFallbacks", label: "Basic DLP fallbacks (custom protection lost)" },
+        { key: "serverDefaults", label: "Verified server-added defaults" },
         { key: "dryRun", label: "Dry run" },
         { key: "complete", label: "Complete" }
       ];
+      for (const fallback of plan.dlpFallbacks)
+        ui.warning(
+          `DLP protection change: ${fallback.profile} will use Basic detection instead of ${fallback.replaced.join(", ")}. Custom rules are not preserved.`
+        );
       if (opts.dryRun) {
-        console.log(formatOutput([summary], columns, format === "pretty" ? "table" : format));
+        console.log(renderRestore(summary, columns, format));
         return;
       }
-      const changing = plan.profiles.filter((p) => p.action !== "skip");
+      const changing = plan.profiles.filter(
+        (p) => p.action === "create" || p.action === "update"
+      );
       if (changing.length)
         await confirmOrAbort(
-          `Restore ${changing.length} profiles from TSG ${plan.sourceTsgId} to TSG ${tsgId} (${changing.filter((p) => p.action === "update").length} updates)?`,
+          `Restore ${changing.length} profiles from TSG ${plan.sourceTsgId} to TSG ${tsgId} (${changing.filter((p) => p.action === "update").length} updates, ${plan.dlpFallbacks.length} Basic DLP fallbacks losing custom detection)?`,
           Boolean(opts.force),
           { action: `restore profiles into TSG ${tsgId}` }
         );
       const result = await restoreRuntimeProfiles(api, plan);
-      console.log(formatOutput([{ ...result }], columns, format === "pretty" ? "table" : format));
+      console.log(renderRestore({ ...result }, columns, format));
       if (!result.complete) {
         ui.error(result.error ?? "Restore incomplete");
         process.exitCode = 1;
@@ -10608,26 +10894,26 @@ function registerRuntimeReportCommand(runtime) {
 }
 
 // src/cli/commands/topics-apply.ts
-async function applyTopicToProfile(mgmt, input) {
+async function applyTopicToProfile(mgmt, input2) {
   const allTopics = await mgmt.listTopics();
-  const match = allTopics.find((t) => t.topic_name === input.topicName);
+  const match = allTopics.find((t) => t.topic_name === input2.topicName);
   if (!match || !match.topic_id) {
-    throw new Error(`Topic "${input.topicName}" not found. Create it first with "topics create".`);
+    throw new Error(`Topic "${input2.topicName}" not found. Create it first with "topics create".`);
   }
-  const existing = await mgmt.getProfileTopics(input.profileName);
-  const merged = existing.filter((t) => t.topicName !== input.topicName).map((t) => ({ topicId: t.topicId, topicName: t.topicName, action: t.action }));
+  const existing = await mgmt.getProfileTopics(input2.profileName);
+  const merged = existing.filter((t) => t.topicName !== input2.topicName).map((t) => ({ topicId: t.topicId, topicName: t.topicName, action: t.action }));
   merged.push({
     topicId: match.topic_id,
     topicName: match.topic_name,
-    action: input.intent
+    action: input2.intent
   });
-  const guardrailAction = input.intent === "block" ? "allow" : "block";
-  await mgmt.assignTopicsToProfile(input.profileName, merged, guardrailAction);
+  const guardrailAction = input2.intent === "block" ? "allow" : "block";
+  await mgmt.assignTopicsToProfile(input2.profileName, merged, guardrailAction);
   return {
     topicId: match.topic_id,
     topicName: match.topic_name,
-    profileName: input.profileName,
-    intent: input.intent
+    profileName: input2.profileName,
+    intent: input2.intent
   };
 }
 function registerApplyCommand(parent) {
@@ -10672,21 +10958,21 @@ function registerApplyCommand(parent) {
 }
 
 // src/cli/commands/topics-create.ts
-async function createOrUpdateTopic(mgmt, input) {
-  const topic = { name: input.name, description: input.description, examples: input.examples };
+async function createOrUpdateTopic(mgmt, input2) {
+  const topic = { name: input2.name, description: input2.description, examples: input2.examples };
   const errors = validateTopic(topic);
   if (errors.length > 0) {
     throw new Error(errors.map((e) => `${e.field}: ${e.message}`).join("; "));
   }
   const existing = await mgmt.listTopics();
-  const match = existing.find((t) => t.topic_name === input.name);
+  const match = existing.find((t) => t.topic_name === input2.name);
   const request = {
-    topic_name: input.name,
-    description: input.description,
-    examples: input.examples
+    topic_name: input2.name,
+    description: input2.description,
+    examples: input2.examples
   };
   if (match && !match.topic_id) {
-    throw new Error(`Existing topic '${input.name}' has no topic_id`);
+    throw new Error(`Existing topic '${input2.name}' has no topic_id`);
   }
   const result = match ? await mgmt.updateTopic(match.topic_id, request) : await mgmt.createTopic(request);
   if (!result.topic_id) {
@@ -11843,7 +12129,139 @@ function registerRuntimeCommand(program) {
   registerDlpCommands(runtime);
 }
 
+// src/config/tenant-settings.ts
+import { randomUUID as randomUUID10 } from "crypto";
+import { constants } from "fs";
+import { access, lstat as lstat6, mkdir as mkdir3, open as open2, rename as rename2, unlink as unlink2 } from "fs/promises";
+import { dirname as dirname4, join as join4 } from "path";
+var TENANT_CONFIG_KEYS = Object.keys(ConfigSchema.shape);
+function validateTenantSettingKey(key) {
+  if (!Object.hasOwn(ConfigSchema.shape, key))
+    throw new Error(`Unknown configuration key. Supported keys: ${TENANT_CONFIG_KEYS.join(", ")}`);
+}
+function isTenantSecret(key) {
+  return /(?:key|secret|token|password)$/i.test(key);
+}
+function validateCredentials(config) {
+  for (const key of ["mgmtTsgId", "mgmtClientId", "mgmtClientSecret"]) {
+    if (typeof config[key] !== "string" || !config[key].trim())
+      throw new Error(
+        "Tenant config requires nonempty mgmtTsgId, mgmtClientId and mgmtClientSecret"
+      );
+  }
+}
+async function createManagedTenant(name, config) {
+  validateTenantName(name);
+  for (const key of Object.keys(config)) validateTenantSettingKey(key);
+  const parsed = ConfigSchema.safeParse(config);
+  if (!parsed.success) throw new Error("Invalid tenant configuration");
+  validateCredentials(config);
+  if (readTenantStore().tenants.some((entry) => entry.name === name))
+    throw new Error("Tenant name already exists");
+  const directory = join4(dirname4(tenantStorePath()), "configs");
+  await mkdir3(directory, { recursive: true, mode: 448 });
+  const path3 = join4(directory, `${name}-${randomUUID10()}.json`);
+  const file = await open2(path3, "wx", 384);
+  try {
+    const data = Object.fromEntries(
+      Object.keys(config).map((key) => [key, Reflect.get(parsed.data, key)])
+    );
+    await file.writeFile(`${JSON.stringify(data, null, 2)}
+`);
+    await file.sync();
+    await file.close();
+    return await createTenant(name, path3);
+  } catch {
+    await file.close();
+    await unlink2(path3);
+    throw new Error("Could not create tenant configuration; registration was not completed");
+  }
+}
+async function setTenantSetting(name, key, value) {
+  validateTenantSettingKey(key);
+  const entry = readTenantStore().tenants.find((tenant) => tenant.name === name);
+  if (!entry) throw new Error("Tenant not found; register a named tenant first");
+  if (key === "mgmtTsgId" && value !== entry.tsgId)
+    throw new Error("TSG identity is pinned; create another tenant instead of changing mgmtTsgId");
+  const path3 = entry.configPath;
+  const lockPath = `${path3}.lock`;
+  const lock = await open2(lockPath, "wx", 384).catch(() => {
+    throw new Error(
+      "Cannot lock tenant config; it may be read-only or another edit is in progress"
+    );
+  });
+  const temporary = join4(dirname4(path3), `.airs-config-${randomUUID10()}.tmp`);
+  let created = false;
+  try {
+    const stat2 = await lstat6(path3);
+    if (!stat2.isFile() || (stat2.mode & 146) === 0)
+      throw new Error("Tenant config is not a writable regular file");
+    await access(path3, constants.W_OK);
+    const current = readTenantConfigFile(path3, entry.tsgId);
+    const result = ConfigSchema.safeParse({ ...current, [key]: value });
+    if (!result.success) throw new Error("Invalid value for configuration setting");
+    const next = { ...current, [key]: Reflect.get(result.data, key) };
+    validateCredentials(next);
+    const file = await open2(temporary, "wx", 384);
+    created = true;
+    try {
+      await file.writeFile(`${JSON.stringify(next, null, 2)}
+`);
+      await file.sync();
+    } finally {
+      await file.close();
+    }
+    await rename2(temporary, path3);
+    created = false;
+  } finally {
+    if (created) await unlink2(temporary).catch(() => {
+    });
+    await lock.close();
+    await unlink2(lockPath);
+  }
+}
+
+// src/cli/tenant-input.ts
+import { input, password } from "@inquirer/prompts";
+async function promptTenantValue(message, secret = false) {
+  if (!process.stdin.isTTY || !process.stderr.isTTY)
+    throw new Error(
+      "Interactive setup requires a terminal. Use --config, or --tsg-id and --client-id with --client-secret-stdin. For tenant set, pass a value or use --stdin."
+    );
+  const prompt = secret ? password : input;
+  return prompt(
+    {
+      message,
+      validate: (value) => Boolean(value.trim()) || "A nonempty value is required"
+    },
+    { input: process.stdin, output: process.stderr }
+  );
+}
+async function readTenantStdin() {
+  if (process.stdin.isTTY) throw new Error("--stdin requires piped input");
+  const chunks = [];
+  let size = 0;
+  for await (const chunk of process.stdin) {
+    const buffer = Buffer.from(chunk);
+    size += buffer.length;
+    if (size > 65536) throw new Error("Configuration input exceeds 64 KiB");
+    chunks.push(buffer);
+  }
+  const value = Buffer.concat(chunks).toString("utf8").replace(/\r?\n$/, "");
+  if (!value.trim() || /[\r\n\0]/.test(value))
+    throw new Error("Provide one nonempty configuration value on stdin");
+  return value;
+}
+
 // src/cli/commands/tenant.ts
+function tenantInputFailure(error) {
+  if (error instanceof Error && error.name === "ExitPromptError") {
+    ui.status("Cancelled; no configuration saved.");
+    process.exitCode = 130;
+    return;
+  }
+  fail(error);
+}
 var COLUMNS2 = [
   { key: "name", label: "Tenant" },
   { key: "active", label: "Selected" },
@@ -11851,25 +12269,60 @@ var COLUMNS2 = [
   { key: "configPath", label: "Config file" }
 ];
 function registerTenantCommand(program) {
-  const tenant = program.command("tenant").description("Select named tenant config files without changing their contents").addHelpText(
+  const tenant = program.command("tenant").description("Create, configure and select named tenants").addHelpText(
     "after",
     examples(
+      "airs tenant create development",
+      "airs tenant set development defaultOutput yaml",
       "airs tenant create production --config /secure/production.json",
       "airs tenant switch production",
       "airs tenant read",
       "airs tenant switch default"
     )
   );
-  tenant.command("create <name>").description("Register an existing JSON config file by reference; does not activate it").requiredOption("--config <path>", "Existing Prisma AIRS JSON config file").action(async (name, opts) => {
-    try {
-      const entry = await createTenant(name, opts.config);
-      ui.success(
-        `Registered ${entry.name} (TSG ${entry.tsgId}); config file unchanged. Use airs tenant switch ${entry.name}.`
-      );
-    } catch (error) {
-      fail(error);
+  tenant.command("create <name>").description(
+    "Create a config with guided prompts, or register an existing JSON file; does not activate it"
+  ).option("--config <path>", "Existing Prisma AIRS JSON config file (no copying or editing)").option("--tsg-id <id>", "Tenant service group ID for a new config").option("--client-id <id>", "OAuth client ID for a new config").option("--client-secret-stdin", "Read the new config OAuth secret from piped stdin").action(
+    async (name, opts) => {
+      try {
+        validateTenantName(name);
+        if (opts.config && (opts.tsgId !== void 0 || opts.clientId !== void 0 || opts.clientSecretStdin))
+          throw new Error("--config cannot be combined with new-config options");
+        if (!opts.config && readTenantStore().tenants.some((entry2) => entry2.name === name))
+          throw new Error("Tenant name already exists");
+        const entry = opts.config ? await createTenant(name, opts.config) : await createManagedTenant(name, {
+          mgmtTsgId: opts.tsgId ?? await promptTenantValue("Tenant service group ID (mgmtTsgId):"),
+          mgmtClientId: opts.clientId ?? await promptTenantValue("OAuth client ID (mgmtClientId):"),
+          mgmtClientSecret: opts.clientSecretStdin ? await readTenantStdin() : await promptTenantValue("OAuth client secret (mgmtClientSecret):", true)
+        });
+        ui.success(
+          `Registered ${entry.name} (TSG ${entry.tsgId}); ${opts.config ? "config file unchanged" : "private config created"}. Use airs tenant switch ${entry.name}.`
+        );
+      } catch (error) {
+        tenantInputFailure(error);
+      }
     }
-  });
+  );
+  tenant.command("set <name> <key> [value]").description("Update one named tenant setting; prompt when omitted, hide secrets").option("--stdin", "Read one value from piped stdin (recommended for automated secret updates)").action(
+    async (name, key, value, opts) => {
+      try {
+        validateTenantSettingKey(key);
+        if (!readTenantStore().tenants.some((entry) => entry.name === name))
+          throw new Error("Tenant not found; register a named tenant first");
+        if (opts.stdin && value !== void 0)
+          throw new Error("Use a value or --stdin, not both");
+        if (isTenantSecret(key) && value !== void 0)
+          throw new Error(
+            "Do not pass credentials as arguments. Omit the value for a hidden prompt, or use --stdin."
+          );
+        const setting = opts.stdin ? await readTenantStdin() : value ?? await promptTenantValue(`${key}:`, isTenantSecret(key));
+        await setTenantSetting(name, key, setting);
+        ui.success(`Updated ${key} for tenant ${name}; selection unchanged.`);
+      } catch (error) {
+        tenantInputFailure(error);
+      }
+    }
+  );
   tenant.command("switch <name>").description(
     "Persist the selected tenant; default restores legacy config/environment resolution"
   ).action(async (name) => {
@@ -12005,8 +12458,8 @@ function applySortedHelp(cmd) {
   for (const sub of cmd.commands) applySortedHelp(sub);
 }
 function buildProgram() {
-  const here = dirname4(fileURLToPath(import.meta.url));
-  const pkg = JSON.parse(readFileSync4(join4(here, "../../package.json"), "utf-8"));
+  const here = dirname5(fileURLToPath(import.meta.url));
+  const pkg = JSON.parse(readFileSync4(join5(here, "../../package.json"), "utf-8"));
   const program = new Command();
   program.name("airs").description(
     "CLI and library for Palo Alto Prisma AIRS \u2014 guardrail refinement, AI red teaming, model security scanning, profile audits"
@@ -12035,9 +12488,9 @@ function buildProgram() {
       }
     }
     if (root.debug) {
-      const logPath = join4(
+      const logPath = join5(
         process.cwd(),
-        `debug-api-${Date.now()}-${randomUUID10().slice(0, 8)}.jsonl`
+        `debug-api-${Date.now()}-${randomUUID11().slice(0, 8)}.jsonl`
       );
       try {
         let ancestor = actionCommand;

package/dist/index.js

@@ -28,7 +28,7 @@ import {
   validateTopic,
   writeBackupFile,
   writeReportFile
-} from "./chunk-NKAVUBKI.js";
+} from "./chunk-XQOICLSH.js";
 export {
   AirsScanService,
   SDK_ASYNC_BATCH_SIZE,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "5.5.0",
+  "version": "5.7.0",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",
@@ -59,7 +59,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@cdot65/prisma-airs-sdk": "0.29.0",
+    "@cdot65/prisma-airs-sdk": "0.30.0",
     "@inquirer/prompts": "^8.3.0",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",