@cdot65/prisma-airs-cli 5.8.1 → 5.8.3

package/dist/cli/index.js

@@ -9879,6 +9879,20 @@ function patternRequest(source, name) {
 function portablePattern(record) {
   return PORTABLE_TECHNIQUES.has(record.detection_config?.technique ?? "") && record.detection_config?.technique !== void 0;
 }
+function normalizedName(value) {
+  return value.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
+}
+function predefinedCandidates(source, records) {
+  const wanted = normalizedName(source.name ?? "");
+  const wantedTokens = new Set(wanted.split(" "));
+  return records.filter(
+    (record) => record.type === "predefined" && record.name != null && !RETIRED_PATTERN.has(record.status ?? "active") && record.detection_config?.technique === source.detection_config?.technique
+  ).map((record) => {
+    const name = normalizedName(record.name);
+    const score = name === wanted ? 3 : name.includes(wanted) || wanted.includes(name) ? 2 : name.split(" ").some((token) => wantedTokens.has(token)) ? 1 : 0;
+    return { name: record.name, score };
+  }).filter((item) => item.score > 0).sort((a, b) => b.score - a.score || a.name.localeCompare(b.name)).slice(0, 3).map((item) => item.name);
+}
 function matchByName(records, name, retired, label) {
   const matches = records.filter((record) => record.name === name && !retired(record));
   if (matches.length > 1) throw new Error(`Ambiguous destination ${label} name: ${name}`);
@@ -9957,16 +9971,25 @@ async function planDlpResourcesRestore(api, input2, destinationTsgId, options =
     });
   }
   const patternPlans = [];
+  const missingPredefined = [];
   for (const source of backup.patterns) {
     if (!source.id || !source.name) throw new Error("Backup data pattern lacks identity");
     const retired = (record) => RETIRED_PATTERN.has(record.status ?? "active");
-    if (source.type === "predefined") {
-      const match2 = matchByName(destination.patterns, source.name, retired, "data pattern");
-      if (!match2?.id || match2.type !== "predefined")
-        throw new Error(`Missing predefined destination data pattern: ${source.name}`);
+    if (source.type === "predefined" && !Object.hasOwn(patternMap2, source.name)) {
+      const byId = destination.patterns.find(
+        (record) => record.id === source.id && record.type === "predefined" && !retired(record) && record.detection_config?.technique === source.detection_config?.technique
+      );
+      const match2 = byId ?? matchByName(destination.patterns, source.name, retired, "data pattern");
+      if (!match2?.id || !match2.name || match2.type !== "predefined") {
+        missingPredefined.push({
+          name: source.name,
+          candidates: predefinedCandidates(source, destination.patterns)
+        });
+        continue;
+      }
       patternPlans.push({
         sourceId: source.id,
-        name: source.name,
+        name: match2.name,
         action: "resolve",
         existing: structuredClone(match2)
       });
@@ -10010,6 +10033,12 @@ async function planDlpResourcesRestore(api, input2, destinationTsgId, options =
       existing: structuredClone(match)
     });
   }
+  if (missingPredefined.length)
+    throw new Error(
+      `Missing predefined destination data patterns: ${missingPredefined.map(
+        (item) => `${item.name}${item.candidates.length ? ` (candidates: ${item.candidates.map((name) => `"${name}"`).join(", ")})` : " (no candidates)"}`
+      ).join("; ")}; bind each with --pattern-map "<source-name>=<destination-name>"`
+    );
   const profilePlans = [];
   for (const source of backup.profiles) {
     if (!source.name) throw new Error("Backup data profile lacks identity");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "5.8.1",
+  "version": "5.8.3",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",