@cdot65/prisma-airs-cli 5.6.0 → 5.7.0

package/dist/cli/index.js

@@ -522,6 +522,10 @@ ${INDENT}${chalk3.bold(label)}
   warn(msg) {
     console.log(`${INDENT}${COLORS.warn(`${GLYPHS.warn} ${msg}`)}`);
   },
+  /** Safety warnings remain visible in quiet mode without corrupting structured stdout. */
+  warning(msg) {
+    console.error(`${INDENT}${COLORS.warn(`${GLYPHS.warn} ${msg}`)}`);
+  },
   /** Neutral informational callout. Quiet-suppressed. */
   info(msg) {
     if (quietMode) return;
@@ -9551,6 +9555,102 @@ import {
   SecurityProfileSchema
 } from "@cdot65/prisma-airs-sdk";
 import { z as z5 } from "zod";
+
+// src/backup/runtime-policy.ts
+function object(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function compareRuntimePolicies(expected, actual) {
+  const serverDefaults = [];
+  const differences = [];
+  const visit = (source, target, path3, insideToxicCategories = false, insideTopicGuardrails = false) => {
+    if (source === target) return;
+    if (Array.isArray(source) && Array.isArray(target)) {
+      if (source.length !== target.length) differences.push(`${path3}.length`);
+      source.forEach((item, index) => {
+        visit(
+          item,
+          target[index],
+          `${path3}[${index}]`,
+          insideToxicCategories,
+          insideTopicGuardrails
+        );
+      });
+      return;
+    }
+    if (object(source) && object(target)) {
+      for (const key of /* @__PURE__ */ new Set([...Object.keys(source), ...Object.keys(target)])) {
+        const field = `${path3}.${key}`;
+        if (!Object.hasOwn(source, key) && Object.hasOwn(target, key)) {
+          const model = /^policy\.ai-security-profiles\[\d+\]\.model-configuration/;
+          const relative = path3.replace(model, "model");
+          let allowed;
+          if (relative === "model.data-protection" && key === "database-security") allowed = null;
+          if (key === "severity") {
+            if (/^model\.data-protection\.database-security\[\d+\]$/.test(relative)) {
+              const values = {
+                "database-security-create": "medium",
+                "database-security-read": "low",
+                "database-security-update": "medium",
+                "database-security-delete": "high"
+              };
+              if (source.name === target.name && typeof source.name === "string")
+                allowed = Object.hasOwn(values, source.name) ? values[source.name] : void 0;
+            }
+            if (relative === "model.data-protection.source-code-detection") allowed = "high";
+            if (relative === "model.app-protection.malicious-code-protection" && source.name === "malicious-code" && target.name === source.name)
+              allowed = "high";
+            if (/^model\.model-protection\[\d+\]$/.test(relative) && (source.name === "prompt-injection" || source.name === "topic-guardrails" || source.name === "contextual-grounding" && source.action === "block") && target.name === source.name)
+              allowed = "medium";
+            if (insideTopicGuardrails && /^model\.model-protection\[\d+\]\.topic-list\[\d+\]\.topic\[\d+\]$/.test(relative) && typeof source.topic_id === "string" && source.topic_id.length > 0 && source.topic_id === target.topic_id && source.topic_name === target.topic_name && Number.isInteger(source.revision) && source.revision === target.revision)
+              allowed = "medium";
+            if (/^model\.agent-protection\[\d+\]$/.test(relative) && source.name === "agent-security" && target.name === source.name)
+              allowed = "medium";
+          }
+          if (relative === "model.app-protection" && key === "url-detected-severity")
+            allowed = "low";
+          if (relative === "model.app-protection" && key === "default-url-category" && object(target[key])) {
+            const value = target[key];
+            if (Object.keys(value).length === 1 && value.member === null) {
+              serverDefaults.push(field);
+              continue;
+            }
+          }
+          if ((/^model\.model-protection\[\d+\]$/.test(relative) && source.name === "toxic-content" && target.name === source.name || insideToxicCategories && /^model\.model-protection\[\d+\]\.toxic-category-list\[\d+\]$/.test(relative) && typeof source.category === "string" && source.category.length > 0 && source.category === target.category) && key === "severity-by-confidence" && object(target[key])) {
+            const value = target[key];
+            if (Object.keys(value).length === 2 && value.high === "medium" && value.moderate === "low") {
+              serverDefaults.push(field);
+              continue;
+            }
+          }
+          if (allowed !== void 0 && target[key] === allowed) {
+            serverDefaults.push(field);
+            continue;
+          }
+          differences.push(field);
+        } else if (!Object.hasOwn(target, key)) differences.push(field);
+        else
+          visit(
+            source[key],
+            target[key],
+            field,
+            key === "toxic-category-list" && source.name === "toxic-content" && target.name === source.name && /^policy\.ai-security-profiles\[\d+\]\.model-configuration\.model-protection\[\d+\]$/.test(
+              path3
+            ),
+            key === "topic-list" && source.name === "topic-guardrails" && target.name === source.name && /^policy\.ai-security-profiles\[\d+\]\.model-configuration\.model-protection\[\d+\]$/.test(
+              path3
+            ) || insideTopicGuardrails && key === "topic" && source.action === "block" && target.action === "block"
+          );
+      }
+      return;
+    }
+    differences.push(path3);
+  };
+  visit(expected, actual, "policy");
+  return { matches: differences.length === 0, serverDefaults, differences };
+}
+
+// src/backup/runtime-profiles.ts
 var RuntimeProfilesBackupSchema = z5.object({
   version: z5.literal(1),
   resourceType: z5.literal("runtime-security-profiles"),
@@ -9559,7 +9659,7 @@ var RuntimeProfilesBackupSchema = z5.object({
   profiles: z5.array(SecurityProfileSchema).min(1).max(1e4),
   topics: z5.array(CustomTopicSchema).max(1e4)
 }).strict();
-function object(value) {
+function object2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 function pagesLimit(value) {
@@ -9626,7 +9726,7 @@ function topicReferences(policy) {
       value.forEach(visit);
       return;
     }
-    if (!object(value)) return;
+    if (!object2(value)) return;
     if ("topic_id" in value) {
       if (typeof value.topic_id !== "string" || typeof value.topic_name !== "string" || !Number.isSafeInteger(value.revision) || Number(value.revision) < 0)
         throw new Error("Invalid topic identity in profile policy");
@@ -9679,26 +9779,48 @@ function sameTopic(a, b) {
   return a.description === b.description && JSON.stringify(a.examples) === JSON.stringify(b.examples) && (a.active ?? true) === (b.active ?? true);
 }
 function dlpReferences(policy) {
-  if (!object(policy)) return [];
+  if (!object2(policy)) return [];
   const refs = [];
   for (const entry of Array.isArray(policy["dlp-data-profiles"]) ? policy["dlp-data-profiles"] : []) {
-    if (!object(entry) || typeof entry.name !== "string")
+    if (!object2(entry) || typeof entry.name !== "string")
       throw new Error("Invalid embedded DLP reference");
     refs.push({ value: entry, name: entry.name, kind: "embedded" });
   }
   for (const entry of Array.isArray(policy["ai-security-profiles"]) ? policy["ai-security-profiles"] : []) {
-    if (!object(entry) || !object(entry["model-configuration"])) continue;
+    if (!object2(entry) || !object2(entry["model-configuration"])) continue;
     const protection = entry["model-configuration"]["data-protection"];
-    if (!object(protection) || !object(protection["data-leak-detection"])) continue;
+    if (!object2(protection) || !object2(protection["data-leak-detection"])) continue;
     const members = protection["data-leak-detection"].member;
     if (!Array.isArray(members)) continue;
     for (const member of members) {
-      if (!object(member) || typeof member.text !== "string") throw new Error("Invalid DLP member");
+      if (!object2(member) || typeof member.text !== "string") throw new Error("Invalid DLP member");
+      if (member.text.toLowerCase() === "sensitive content" && (member.id === "" || member.id === void 0) && (member.version === "2" || member.version === void 0) && !refs.some((ref) => ref.kind === "embedded" && ref.name === member.text))
+        continue;
       refs.push({ value: member, name: member.text, kind: "member" });
     }
   }
   return refs;
 }
+function basicFallback(policy) {
+  const result = structuredClone(policy);
+  const customNames = new Set(dlpReferences(result).map((ref) => ref.name));
+  let converted = false;
+  for (const entry of result?.["ai-security-profiles"] ?? []) {
+    const detection = entry["model-configuration"]?.["data-protection"]?.["data-leak-detection"];
+    if (!detection?.member?.some((member) => customNames.has(member.text))) continue;
+    if (!["block", "allow", ""].includes(detection.action))
+      throw new Error("Cannot safely fall back to Basic: unsupported DLP action");
+    if (detection["mask-data-inline"] && detection.action !== "block")
+      throw new Error("Cannot safely fall back to Basic: inline masking requires a block action");
+    detection.member = detection.action === "" ? null : [{ text: "sensitive content", id: "", version: "2" }];
+    converted = true;
+  }
+  if (!converted)
+    throw new Error("Cannot safely fall back to Basic: no matching DLP detection configuration");
+  if (result && "dlp-data-profiles" in result) result["dlp-data-profiles"] = [];
+  PolicySchema.parse(result);
+  return result;
+}
 function assertKnownPolicyReferences(policy) {
   const known = new Map([
     ...topicReferences(policy).map((ref) => [ref, ["topic_id"]]),
@@ -9714,7 +9836,7 @@ function assertKnownPolicyReferences(policy) {
       });
       return;
     }
-    if (!object(value)) return;
+    if (!object2(value)) return;
     for (const [key, child] of Object.entries(value)) {
       if (child !== null && child !== "" && /(?:^|[-_])(id|uuid)$|(?:Id|ID|Uuid|UUID)$/.test(key) && !known.get(value)?.includes(key))
         throw new Error(`Unsupported cross-tenant policy reference at ${path3}.${key}`);
@@ -9744,7 +9866,10 @@ async function planRuntimeProfilesRestore(api, input2, destinationTsgId, options
   if (prefix.length > 64 || [...prefix].some((char) => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127))
     throw new Error("Invalid --name-prefix");
   const conflict = options.onConflict ?? "error";
-  if (!["error", "skip", "update"].includes(conflict)) throw new Error("Invalid conflict policy");
+  if (!["error", "skip", "update", "verify"].includes(conflict))
+    throw new Error("Invalid conflict policy");
+  const missingDlp = options.onMissingDlp ?? "error";
+  if (!["error", "basic"].includes(missingDlp)) throw new Error("Invalid missing DLP policy");
   const selected = latestProfiles(backup.profiles);
   assertTenant(selected, backup.source.tsgId);
   if (selected.length !== backup.profiles.length)
@@ -9766,14 +9891,14 @@ async function planRuntimeProfilesRestore(api, input2, destinationTsgId, options
     const match = existing.find((p) => p.profile_name === name);
     if (match && conflict === "error")
       throw new Error(
-        `Destination profile already exists: ${name}; choose --on-conflict skip or update`
+        `Destination profile already exists: ${name}; choose --on-conflict verify, skip or update`
       );
     if (match && !match.profile_id) throw new Error("Destination profile has no identity");
     return {
       source: structuredClone(source),
       name,
       existing: match,
-      action: match ? conflict === "skip" ? "skip" : "update" : "create"
+      action: match ? conflict === "skip" ? "skip" : conflict === "verify" ? "verify" : "update" : "create"
     };
   });
   const changing = profilePlans.filter((p) => p.action !== "skip");
@@ -9807,46 +9932,102 @@ async function planRuntimeProfilesRestore(api, input2, destinationTsgId, options
       );
     topicPlans.set(key, { key, name, source, existing: match });
   }
-  const dlpRefs = crossTenant ? changing.flatMap((p) => dlpReferences(p.source.policy)) : [];
+  const dlpRefs = crossTenant || missingDlp === "basic" ? changing.flatMap((p) => dlpReferences(p.source.policy)) : [];
   const names = [...new Set(dlpRefs.map((ref) => ref.name))];
-  for (const name of names)
-    if (!options.dlpMap?.[name])
+  const targetFor = (name) => Object.hasOwn(options.dlpMap ?? {}, name) ? options.dlpMap?.[name] : crossTenant ? void 0 : name;
+  const unresolved = /* @__PURE__ */ new Set();
+  for (const name of names) {
+    if (!targetFor(name) && missingDlp === "error")
       throw new Error(
-        `Cross-tenant DLP reference requires explicit --dlp-map ${name}=<destination-name>; DLP resources are not cloned`
+        `Cross-tenant DLP reference requires explicit --dlp-map "${name}=<destination-name>"; DLP resources are not cloned. Inspect destination resources with airs runtime dlp profiles list --all --output json, or explicitly accept --on-missing-dlp basic.`
       );
-  const catalog = names.length ? await dataProfiles(api, maxPages2) : [];
-  const dlpMappings = names.map((name) => {
-    const target = options.dlpMap?.[name];
-    const matches = catalog.filter((p) => p.name === target && p.profile_status !== "deleted");
+    if (!targetFor(name)) unresolved.add(name);
+  }
+  const catalog = names.some((name) => targetFor(name)) ? await dataProfiles(api, maxPages2) : [];
+  const resolved = [];
+  for (const name of names) {
+    const target = targetFor(name);
+    if (!target) continue;
+    const matches = catalog.filter(
+      (p) => p.name === target && p.profile_status !== "deleted" && p.profile_status !== "disabled"
+    );
+    if (!matches.length && missingDlp === "basic") {
+      unresolved.add(name);
+      continue;
+    }
     if (matches.length !== 1 || !matches[0].id)
       throw new Error(`Missing or ambiguous destination DLP profile: ${target}`);
     if (dlpRefs.some((ref) => ref.name === name && "version" in ref.value) && matches[0].version == null)
       throw new Error(`Destination DLP version is unknown: ${target}`);
-    return {
+    resolved.push({
       source: name,
       destination: String(target),
       id: matches[0].id,
       version: matches[0].version ?? void 0
-    };
-  });
-  return {
+    });
+  }
+  const dlpFallbacks = [];
+  for (const item of changing) {
+    const replaced = [...new Set(dlpReferences(item.source.policy).map((ref) => ref.name))];
+    const missing = replaced.filter((name) => unresolved.has(name));
+    if (!missing.length) continue;
+    item.fallbackPolicy = basicFallback(item.source.policy);
+    dlpFallbacks.push({
+      profile: item.name,
+      unresolved: missing,
+      replaced,
+      reason: "unmapped-or-missing",
+      protection: "basic"
+    });
+  }
+  const remaining = new Set(
+    changing.flatMap(
+      (p) => dlpReferences(p.fallbackPolicy ?? p.source.policy).map((ref) => ref.name)
+    )
+  );
+  const dlpMappings = resolved.filter((mapping) => remaining.has(mapping.source));
+  const plan = {
     sourceTsgId: backup.source.tsgId,
     destinationTsgId,
     profiles: profilePlans,
     topics: [...topicPlans.values()],
     dlpMappings,
+    dlpFallbacks,
+    serverDefaults: [],
     maxPages: maxPages2
   };
+  const existingTopics = new Map(
+    plan.topics.filter((t) => t.existing).map((t) => [t.key, t.existing])
+  );
+  for (const item of profilePlans.filter((p) => p.action === "verify")) {
+    const expected = mappedPolicy(item, plan, existingTopics);
+    const comparison = compareRuntimePolicies(expected, item.existing?.policy);
+    if (!comparison.matches || item.source.active !== void 0 && item.existing?.active !== item.source.active)
+      throw new Error(
+        `Destination profile does not match restore plan: ${item.name}; verification made no changes`
+      );
+    if (comparison.serverDefaults.length)
+      plan.serverDefaults.push({ profile: item.name, fields: comparison.serverDefaults });
+  }
+  return plan;
 }
 function canonical(value) {
-  const order = (v) => Array.isArray(v) ? v.map(order) : object(v) ? Object.fromEntries(
+  const order = (v) => Array.isArray(v) ? v.map(order) : object2(v) ? Object.fromEntries(
     Object.entries(v).sort(([a], [b]) => a.localeCompare(b)).map(([k, child]) => [k, order(child)])
   ) : v;
   return JSON.stringify(order(value));
 }
+function canonicalPolicy(policy) {
+  const value = structuredClone(policy);
+  for (const entry of value?.["ai-security-profiles"] ?? []) {
+    const protection = entry["model-configuration"]?.["data-protection"];
+    if (protection && !("database-security" in protection)) protection["database-security"] = null;
+  }
+  return canonical(value);
+}
 function unchanged(current, prior) {
   return Boolean(
-    current && current.profile_id === prior.profile_id && current.revision === prior.revision && current.active === prior.active && canonical(current.policy) === canonical(prior.policy)
+    current && current.profile_id === prior.profile_id && current.revision === prior.revision && current.active === prior.active && canonicalPolicy(current.policy) === canonicalPolicy(prior.policy)
   );
 }
 async function restoreRuntimeProfiles(api, plan) {
@@ -9854,6 +10035,8 @@ async function restoreRuntimeProfiles(api, plan) {
     sourceTsgId: plan.sourceTsgId,
     destinationTsgId: plan.destinationTsgId,
     complete: false,
+    dlpFallbacks: structuredClone(plan.dlpFallbacks ?? []),
+    serverDefaults: [],
     topics: [],
     profiles: []
   };
@@ -9864,7 +10047,7 @@ async function restoreRuntimeProfiles(api, plan) {
       const catalog = await dataProfiles(api, plan.maxPages);
       for (const mapping of plan.dlpMappings) {
         const matches = catalog.filter(
-          (p) => p.name === mapping.destination && p.profile_status !== "deleted"
+          (p) => p.name === mapping.destination && p.profile_status !== "deleted" && p.profile_status !== "disabled"
         );
         if (matches.length !== 1 || matches[0].id !== mapping.id || (matches[0].version ?? void 0) !== mapping.version)
           throw new Error(`Destination DLP profile changed after planning: ${mapping.destination}`);
@@ -9910,27 +10093,7 @@ async function restoreRuntimeProfiles(api, plan) {
         result.profiles.push({ name: item.name, action: "skipped", id: item.existing?.profile_id });
         continue;
       }
-      const policy = structuredClone(item.source.policy);
-      for (const ref of topicReferences(policy)) {
-        const topic = mappedTopics.get(topicKey(ref));
-        if (!topic?.topic_id) throw new Error("Missing planned topic mapping");
-        ref.topic_id = topic.topic_id;
-        ref.topic_name = topic.topic_name;
-        ref.revision = topic.revision;
-      }
-      for (const ref of dlpReferences(policy)) {
-        const mapping = plan.dlpMappings.find((m) => m.source === ref.name);
-        if (!mapping) continue;
-        if (ref.kind === "embedded") {
-          ref.value.name = mapping.destination;
-          ref.value.uuid = mapping.id;
-        } else ref.value.text = mapping.destination;
-        if ("id" in ref.value) ref.value.id = mapping.id;
-        if ("version" in ref.value) {
-          if (mapping.version === void 0) throw new Error("Destination DLP version is unknown");
-          ref.value.version = String(mapping.version);
-        }
-      }
+      const policy = mappedPolicy(item, plan, mappedTopics);
       const body = CreateSecurityProfileRequestSchema.parse({
         profile_name: item.name,
         active: item.source.active,
@@ -9941,6 +10104,14 @@ async function restoreRuntimeProfiles(api, plan) {
       const current = inventory2.find((p) => p.profile_name === item.name);
       if (item.existing ? !unchanged(current, item.existing) : Boolean(current))
         throw new Error(`Destination profile changed after planning: ${item.name}`);
+      if (item.action === "verify") {
+        const comparison2 = compareRuntimePolicies(policy, current?.policy);
+        if (!comparison2.matches) throw new Error(`Restored profile did not verify: ${item.name}`);
+        result.profiles.push({ name: item.name, action: "verified", id: current?.profile_id });
+        if (comparison2.serverDefaults.length)
+          result.serverDefaults.push({ profile: item.name, fields: comparison2.serverDefaults });
+        continue;
+      }
       const response = item.action === "update" && item.existing?.profile_id ? await api.profiles.update(item.existing.profile_id, body) : await api.profiles.create(body);
       result.profiles.push({
         name: item.name,
@@ -9951,8 +10122,11 @@ async function restoreRuntimeProfiles(api, plan) {
         (p) => p.profile_name === item.name
       );
       if (verified) assertTenant([verified], plan.destinationTsgId);
-      if (!verified?.profile_id || response.profile_id && response.profile_id !== verified.profile_id || item.source.active !== void 0 && verified.active !== item.source.active || canonical(verified.policy) !== canonical(policy))
+      const comparison = compareRuntimePolicies(policy, verified?.policy);
+      if (!verified?.profile_id || response.profile_id && response.profile_id !== verified.profile_id || item.source.active !== void 0 && verified.active !== item.source.active || !comparison.matches)
         throw new Error(`Restored profile did not verify: ${item.name}`);
+      if (comparison.serverDefaults.length)
+        result.serverDefaults.push({ profile: item.name, fields: comparison.serverDefaults });
     }
     result.complete = true;
   } catch (error) {
@@ -9963,10 +10137,97 @@ async function restoreRuntimeProfiles(api, plan) {
   }
   return result;
 }
+function mappedPolicy(item, plan, mappedTopics) {
+  const policy = structuredClone(item.fallbackPolicy ?? item.source.policy);
+  for (const ref of topicReferences(policy)) {
+    const topic = mappedTopics.get(topicKey(ref));
+    if (!topic?.topic_id)
+      throw new Error(
+        "Missing planned topic mapping; an existing profile cannot be verified without its destination dependencies"
+      );
+    ref.topic_id = topic.topic_id;
+    ref.topic_name = topic.topic_name;
+    ref.revision = topic.revision;
+  }
+  for (const ref of dlpReferences(policy)) {
+    const mapping = plan.dlpMappings.find((m) => m.source === ref.name);
+    if (!mapping) continue;
+    if (ref.kind === "embedded") {
+      ref.value.name = mapping.destination;
+      ref.value.uuid = mapping.id;
+    } else ref.value.text = mapping.destination;
+    if ("id" in ref.value) ref.value.id = mapping.id;
+    if ("version" in ref.value) {
+      if (mapping.version === void 0) throw new Error("Destination DLP version is unknown");
+      ref.value.version = String(mapping.version);
+    }
+  }
+  return policy;
+}
 
 // src/cli/commands/profile-transfer.ts
 var MAX_BACKUP_BYTES = 20 * 1024 * 1024;
 var FORMATS = "Output format: pretty, table, markdown, csv, json, yaml";
+function renderRestore(value, columns, format) {
+  if (format !== "pretty" && format !== "table" && format !== "markdown")
+    return formatOutput([value], columns, format);
+  const markdown = format === "markdown";
+  const rows = (key) => Array.isArray(value[key]) ? value[key] : [];
+  const heading = (text2) => markdown ? `### ${text2}
+` : text2;
+  const blocks = [
+    heading(
+      value.dryRun ? "Restore preview \u2014 no changes made" : value.complete ? "Restore complete" : "Restore incomplete \u2014 completed writes remain"
+    ),
+    `Source TSG: ${value.sourceTsgId}
+${markdown ? "\n" : ""}Destination TSG: ${value.destinationTsgId}`
+  ];
+  for (const [key, title] of [
+    ["profiles", "Profiles"],
+    ["topics", "Topics"]
+  ]) {
+    blocks.push(heading(`${title} (${rows(key).length})`));
+    blocks.push(
+      formatOutput(
+        rows(key),
+        [
+          { key: "action", label: "Action" },
+          { key: "name", label: "Name" }
+        ],
+        markdown ? "markdown" : "table"
+      ) || "(none)"
+    );
+  }
+  if (rows("dlpMappings").length) {
+    blocks.push(heading("DLP mappings"));
+    blocks.push(
+      formatOutput(
+        rows("dlpMappings"),
+        [
+          { key: "source", label: "Source" },
+          { key: "destination", label: "Destination" }
+        ],
+        markdown ? "markdown" : "table"
+      )
+    );
+  }
+  if (rows("dlpFallbacks").length) {
+    blocks.push(heading("Basic DLP fallbacks \u2014 custom protection lost"));
+    for (const fallback of rows("dlpFallbacks"))
+      blocks.push(
+        `${fallback.profile}: ${Array.isArray(fallback.replaced) ? fallback.replaced.join(", ") : ""}`
+      );
+  }
+  if (rows("serverDefaults").length) {
+    blocks.push(heading("Verified server-added defaults (source omitted these fields)"));
+    for (const item of rows("serverDefaults"))
+      blocks.push(
+        `${item.profile}: ${Array.isArray(item.fields) ? item.fields.length : 0} fields; use --output json for paths`
+      );
+  }
+  if (value.error) blocks.push(`Error: ${value.error}`);
+  return blocks.join("\n\n");
+}
 function maxPages(value) {
   if (!/^\d+$/.test(value) || Number(value) < 1 || Number(value) > 1e3)
     usageError("--max-pages must be an integer from 1 to 1000");
@@ -10079,7 +10340,15 @@ function registerProfileTransferCommands(profiles2) {
   });
   const restore = profiles2.command("restore <file>").description(
     "Restore profile policies into the selected tenant; validate all dependencies before changes"
-  ).option("--dry-run", "Read and validate a restore plan without changing destination resources").option("--name-prefix <prefix>", "Prefix restored profile and topic names to avoid collisions").option("--on-conflict <policy>", "Existing profile names: error, skip or update", "error").option(
+  ).option("--dry-run", "Read and validate a restore plan without changing destination resources").option("--name-prefix <prefix>", "Prefix restored profile and topic names to avoid collisions").option(
+    "--on-conflict <policy>",
+    "Existing profile names: error, verify (resume without writes), skip or update",
+    "error"
+  ).option(
+    "--on-missing-dlp <policy>",
+    "Unresolved custom DLP: error or basic (explicitly accepts loss of custom detection)",
+    "error"
+  ).option(
     "--dlp-map <source=destination>",
     "Explicit cross-tenant binding to an existing DLP data profile (repeatable)",
     (value, prior) => [...prior, value],
@@ -10096,12 +10365,15 @@ function registerProfileTransferCommands(profiles2) {
     "after",
     examples(
       "airs runtime profiles restore ./profiles.json --dry-run --output json",
+      "airs runtime profiles restore ./profiles.json --on-missing-dlp basic --dry-run --output json",
       "airs runtime profiles restore ./profiles.json --name-prefix migrated- --expect-tsg <destination-tsg> --force"
     )
   ).action(async (file, opts) => {
     try {
-      if (!["error", "skip", "update"].includes(opts.onConflict))
-        throw new CliUsageError("--on-conflict must be error, skip or update");
+      if (!["error", "skip", "update", "verify"].includes(opts.onConflict))
+        throw new CliUsageError("--on-conflict must be error, verify, skip or update");
+      if (!["error", "basic"].includes(opts.onMissingDlp))
+        throw new CliUsageError("--on-missing-dlp must be error or basic");
       if (opts.force && !opts.expectTsg)
         throw new CliUsageError("--force requires --expect-tsg <destination-tsg>");
       const mappings = dlpMap(opts.dlpMap);
@@ -10131,7 +10403,8 @@ function registerProfileTransferCommands(profiles2) {
         namePrefix: opts.namePrefix,
         onConflict: opts.onConflict,
         maxPages: opts.maxPages,
-        dlpMap: mappings
+        dlpMap: mappings,
+        onMissingDlp: opts.onMissingDlp
       });
       const summary = {
         sourceTsgId: plan.sourceTsgId,
@@ -10145,7 +10418,9 @@ function registerProfileTransferCommands(profiles2) {
         dlpMappings: plan.dlpMappings.map((m) => ({
           source: m.source,
           destination: m.destination
-        }))
+        })),
+        dlpFallbacks: plan.dlpFallbacks,
+        serverDefaults: plan.serverDefaults
       };
       const columns = [
         { key: "sourceTsgId", label: "Source TSG" },
@@ -10153,22 +10428,30 @@ function registerProfileTransferCommands(profiles2) {
         { key: "profiles", label: "Profiles" },
         { key: "topics", label: "Topics" },
         { key: "dlpMappings", label: "DLP mappings" },
+        { key: "dlpFallbacks", label: "Basic DLP fallbacks (custom protection lost)" },
+        { key: "serverDefaults", label: "Verified server-added defaults" },
         { key: "dryRun", label: "Dry run" },
         { key: "complete", label: "Complete" }
       ];
+      for (const fallback of plan.dlpFallbacks)
+        ui.warning(
+          `DLP protection change: ${fallback.profile} will use Basic detection instead of ${fallback.replaced.join(", ")}. Custom rules are not preserved.`
+        );
       if (opts.dryRun) {
-        console.log(formatOutput([summary], columns, format === "pretty" ? "table" : format));
+        console.log(renderRestore(summary, columns, format));
         return;
       }
-      const changing = plan.profiles.filter((p) => p.action !== "skip");
+      const changing = plan.profiles.filter(
+        (p) => p.action === "create" || p.action === "update"
+      );
       if (changing.length)
         await confirmOrAbort(
-          `Restore ${changing.length} profiles from TSG ${plan.sourceTsgId} to TSG ${tsgId} (${changing.filter((p) => p.action === "update").length} updates)?`,
+          `Restore ${changing.length} profiles from TSG ${plan.sourceTsgId} to TSG ${tsgId} (${changing.filter((p) => p.action === "update").length} updates, ${plan.dlpFallbacks.length} Basic DLP fallbacks losing custom detection)?`,
           Boolean(opts.force),
           { action: `restore profiles into TSG ${tsgId}` }
         );
       const result = await restoreRuntimeProfiles(api, plan);
-      console.log(formatOutput([{ ...result }], columns, format === "pretty" ? "table" : format));
+      console.log(renderRestore({ ...result }, columns, format));
       if (!result.complete) {
         ui.error(result.error ?? "Restore incomplete");
         process.exitCode = 1;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "5.6.0",
+  "version": "5.7.0",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",
@@ -59,7 +59,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@cdot65/prisma-airs-sdk": "0.29.0",
+    "@cdot65/prisma-airs-sdk": "0.30.0",
     "@inquirer/prompts": "^8.3.0",
     "chalk": "^5.6.2",
     "commander": "^14.0.3",