@cdot65/prisma-airs-cli 6.1.0 → 6.1.1

package/dist/cli/index.js

@@ -4733,7 +4733,7 @@ function registerIntegrations(root) {
   );
   create.action(
     (opts) => runWrite(create, opts, async (client) => {
-      const prepared = await prepareIntegrationOptions(opts, client);
+      const prepared = await prepareIntegrationOptions(opts, client, { promptWhenMissing: true });
       const body = await buildStructuredRequest(
         prepared,
         GatewayIntegrationCreateRequestSchema,
@@ -4741,7 +4741,7 @@ function registerIntegrations(root) {
       );
       if (!body.key && !(Array.isArray(body.secret_mappings) && body.secret_mappings.length)) {
         throw new CliUsageError(
-          "A provider credential is required: pass --key-stdin, --key-file, --secret-mappings, or --key (the gateway rejects a credential-less integration with a generic AB01)"
+          "A provider credential is required: run in a terminal to be prompted, or pass --key-file, --key-stdin (piped), --secret-mappings, or --key (the gateway rejects a credential-less integration with a generic AB01)"
         );
       }
       return client.integrations.create(body);
@@ -5093,7 +5093,7 @@ function registerPlugins(root) {
     )
   );
 }
-async function prepareIntegrationOptions(opts, client) {
+async function prepareIntegrationOptions(opts, client, settings = {}) {
   const sources = [opts.key !== void 0, Boolean(opts.keyStdin), opts.keyFile !== void 0];
   if (sources.filter(Boolean).length > 1) {
     throw new CliUsageError("Use only one of --key, --key-stdin, or --key-file");
@@ -5104,11 +5104,18 @@ async function prepareIntegrationOptions(opts, client) {
   delete prepared.baseUrl;
   delete prepared.header;
   delete prepared.aiProvider;
+  const interactive = Boolean(process.stdin.isTTY && process.stderr.isTTY);
   if (opts.keyStdin) {
-    try {
-      prepared.key = await readTenantStdin();
-    } catch {
-      throw new CliUsageError("--key-stdin requires one nonempty credential on piped stdin");
+    if (interactive) {
+      prepared.key = await promptTenantValue("Provider API key:", true);
+    } else {
+      try {
+        prepared.key = await readTenantStdin();
+      } catch {
+        throw new CliUsageError(
+          "--key-stdin reads one credential from piped stdin, e.g. `airs aigateway integrations create ... --key-stdin < provider.key`; in a terminal, omit every key flag to be prompted"
+        );
+      }
     }
   } else if (opts.keyFile !== void 0) {
     let raw;
@@ -5126,6 +5133,8 @@ async function prepareIntegrationOptions(opts, client) {
     ui.warning(
       "Inline --key is visible in shell history and process listings; prefer --key-stdin, --key-file, or --secret-mappings"
     );
+  } else if (settings.promptWhenMissing && interactive && opts.secretMappings === void 0 && opts.file === void 0) {
+    prepared.key = await promptTenantValue("Provider API key:", true);
   }
   if (opts.aiProvider !== void 0 && opts.aiProviderId !== void 0) {
     throw new CliUsageError("Use --ai-provider or --ai-provider-id, not both");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cdot65/prisma-airs-cli",
   "packageManager": "pnpm@10.6.5",
-  "version": "6.1.0",
+  "version": "6.1.1",
   "description": "CLI and library for Palo Alto Prisma AIRS — guardrail refinement, AI red teaming, model security scanning, profile audits",
   "type": "module",
   "main": "dist/index.js",