@cdot65/prisma-airs-sdk 0.11.0 → 0.13.0

package/dist/index.cjs

@@ -66,6 +66,12 @@ __export(index_exports, {
   CategoryModelSchema: () => CategoryModelSchema,
   CategoryReportSchema: () => CategoryReportSchema,
   CgReportSchema: () => CgReportSchema,
+  ChannelListPaginationSchema: () => ChannelListPaginationSchema,
+  ChannelListResponseSchema: () => ChannelListResponseSchema,
+  ChannelSchema: () => ChannelSchema,
+  ChannelStatsSchema: () => ChannelStatsSchema,
+  ChannelStatus: () => ChannelStatus,
+  ChannelStatusSchema: () => ChannelStatusSchema,
   ClientIdAndCustomerAppSchema: () => ClientIdAndCustomerAppSchema,
   CmdEntrySchema: () => CmdEntrySchema,
   CmdInjectReportSchema: () => CmdInjectReportSchema,
@@ -79,6 +85,7 @@ __export(index_exports, {
   ContentErrorType: () => ContentErrorType,
   CountByNameSchema: () => CountByNameSchema,
   CountedQuotaEnum: () => CountedQuotaEnum,
+  CreateChannelRequestSchema: () => CreateChannelRequestSchema,
   CreateCustomTopicRequestSchema: () => CreateCustomTopicRequestSchema,
   CreateSecurityProfileRequestSchema: () => CreateSecurityProfileRequestSchema,
   CustomAttackOutputSchema: () => CustomAttackOutputSchema,
@@ -113,6 +120,7 @@ __export(index_exports, {
   DEFAULT_MODEL_SEC_MGMT_ENDPOINT: () => DEFAULT_MODEL_SEC_MGMT_ENDPOINT,
   DEFAULT_RED_TEAM_DATA_ENDPOINT: () => DEFAULT_RED_TEAM_DATA_ENDPOINT,
   DEFAULT_RED_TEAM_MGMT_ENDPOINT: () => DEFAULT_RED_TEAM_MGMT_ENDPOINT,
+  DEFAULT_RED_TEAM_NETWORK_BROKER_ENDPOINT: () => DEFAULT_RED_TEAM_NETWORK_BROKER_ENDPOINT,
   DEFAULT_TOKEN_ENDPOINT: () => DEFAULT_TOKEN_ENDPOINT,
   DLP_DATA_FILTERING_PROFILES_PATH: () => DLP_DATA_FILTERING_PROFILES_PATH,
   DLP_DATA_PATTERNS_PATH: () => DLP_DATA_PATTERNS_PATH,
@@ -121,9 +129,13 @@ __export(index_exports, {
   DSDetailResultSchema: () => DSDetailResultSchema,
   DSResultMetadataSchema: () => DSResultMetadataSchema,
   DashboardApplicationSchema: () => DashboardApplicationSchema,
+  DashboardApplicationSessionsBucketSchema: () => DashboardApplicationSessionsBucketSchema,
   DashboardApplicationViolationBreakdownSchema: () => DashboardApplicationViolationBreakdownSchema,
+  DashboardApplicationsOverviewItemSchema: () => DashboardApplicationsOverviewItemSchema,
+  DashboardApplicationsOverviewSchema: () => DashboardApplicationsOverviewSchema,
   DashboardClient: () => DashboardClient,
   DashboardOverviewResponseSchema: () => DashboardOverviewResponseSchema,
+  DashboardPaginationSchema: () => DashboardPaginationSchema,
   DashboardSessionStatsSchema: () => DashboardSessionStatsSchema,
   DataFilteringDetailsSchema: () => DataFilteringDetailsSchema,
   DataFilteringProfileRequestSchema: () => DataFilteringProfileRequestSchema,
@@ -250,6 +262,7 @@ __export(index_exports, {
   LabelValueListSchema: () => LabelValueListSchema,
   LabelsCreateRequestSchema: () => LabelsCreateRequestSchema,
   LabelsResponseSchema: () => LabelsResponseSchema,
+  LanguageOptionSchema: () => LanguageOptionSchema,
   ListModelSecurityGroupsResponseSchema: () => ListModelSecurityGroupsResponseSchema,
   ListModelSecurityRuleInstancesResponseSchema: () => ListModelSecurityRuleInstancesResponseSchema,
   ListModelSecurityRulesResponseSchema: () => ListModelSecurityRulesResponseSchema,
@@ -274,6 +287,7 @@ __export(index_exports, {
   MGMT_CLIENT_SECRET: () => MGMT_CLIENT_SECRET,
   MGMT_CUSTOMER_APPS_TSG_PATH: () => MGMT_CUSTOMER_APPS_TSG_PATH,
   MGMT_CUSTOMER_APP_PATH: () => MGMT_CUSTOMER_APP_PATH,
+  MGMT_DASHBOARD_APPLICATIONS_OVERVIEW_PATH: () => MGMT_DASHBOARD_APPLICATIONS_OVERVIEW_PATH,
   MGMT_DASHBOARD_APPLICATION_PATH: () => MGMT_DASHBOARD_APPLICATION_PATH,
   MGMT_DASHBOARD_APPLICATION_VIOLATION_BREAKDOWN_PATH: () => MGMT_DASHBOARD_APPLICATION_VIOLATION_BREAKDOWN_PATH,
   MGMT_DEPLOYMENT_PROFILES_PATH: () => MGMT_DEPLOYMENT_PROFILES_PATH,
@@ -294,6 +308,8 @@ __export(index_exports, {
   MODEL_SEC_DATA_ENDPOINT: () => MODEL_SEC_DATA_ENDPOINT,
   MODEL_SEC_EVALUATIONS_PATH: () => MODEL_SEC_EVALUATIONS_PATH,
   MODEL_SEC_MGMT_ENDPOINT: () => MODEL_SEC_MGMT_ENDPOINT,
+  MODEL_SEC_MODELS_PATH: () => MODEL_SEC_MODELS_PATH,
+  MODEL_SEC_MODEL_VERSIONS_PATH: () => MODEL_SEC_MODEL_VERSIONS_PATH,
   MODEL_SEC_PYPI_AUTH_PATH: () => MODEL_SEC_PYPI_AUTH_PATH,
   MODEL_SEC_SCANS_PATH: () => MODEL_SEC_SCANS_PATH,
   MODEL_SEC_SECURITY_GROUPS_PATH: () => MODEL_SEC_SECURITY_GROUPS_PATH,
@@ -310,7 +326,9 @@ __export(index_exports, {
   MetadataCriterionSchema: () => MetadataCriterionSchema,
   MetadataSchema: () => MetadataSchema,
   ModelConfigurationSchema: () => ModelConfigurationSchema,
+  ModelListSchema: () => ModelListSchema,
   ModelProtectionItemSchema: () => ModelProtectionItemSchema,
+  ModelResponseSchema: () => ModelResponseSchema,
   ModelScanIssueSchema: () => ModelScanIssueSchema,
   ModelScanStatus: () => ModelScanStatus,
   ModelSecurityClient: () => ModelSecurityClient,
@@ -319,12 +337,15 @@ __export(index_exports, {
   ModelSecurityGroupState: () => ModelSecurityGroupState,
   ModelSecurityGroupUpdateRequestSchema: () => ModelSecurityGroupUpdateRequestSchema,
   ModelSecurityGroupsClient: () => ModelSecurityGroupsClient,
+  ModelSecurityModelsClient: () => ModelSecurityModelsClient,
   ModelSecurityPaginationSchema: () => ModelSecurityPaginationSchema,
   ModelSecurityRuleInstanceResponseSchema: () => ModelSecurityRuleInstanceResponseSchema,
   ModelSecurityRuleInstanceUpdateRequestSchema: () => ModelSecurityRuleInstanceUpdateRequestSchema,
   ModelSecurityRuleResponseSchema: () => ModelSecurityRuleResponseSchema,
   ModelSecurityRulesClient: () => ModelSecurityRulesClient,
   ModelSecurityScansClient: () => ModelSecurityScansClient,
+  ModelVersionListSchema: () => ModelVersionListSchema,
+  ModelVersionResponseSchema: () => ModelVersionResponseSchema,
   MultiProfileDataNodeSchema: () => MultiProfileDataNodeSchema,
   MultiProfileDetectionRuleSchema: () => MultiProfileDetectionRuleSchema,
   MultiTurnStatefulConfigSchema: () => MultiTurnStatefulConfigSchema,
@@ -369,6 +390,8 @@ __export(index_exports, {
   QuotaDetailsSchema: () => QuotaDetailsSchema,
   QuotaSummarySchema: () => QuotaSummarySchema,
   RED_TEAM_CATEGORIES_PATH: () => RED_TEAM_CATEGORIES_PATH,
+  RED_TEAM_CHANNELS_PATH: () => RED_TEAM_CHANNELS_PATH,
+  RED_TEAM_CHANNELS_STATS_PATH: () => RED_TEAM_CHANNELS_STATS_PATH,
   RED_TEAM_CLIENT_ID: () => RED_TEAM_CLIENT_ID,
   RED_TEAM_CLIENT_SECRET: () => RED_TEAM_CLIENT_SECRET,
   RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH: () => RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH,
@@ -376,10 +399,13 @@ __export(index_exports, {
   RED_TEAM_DASHBOARD_PATH: () => RED_TEAM_DASHBOARD_PATH,
   RED_TEAM_DATA_ENDPOINT: () => RED_TEAM_DATA_ENDPOINT,
   RED_TEAM_ERROR_LOG_PATH: () => RED_TEAM_ERROR_LOG_PATH,
+  RED_TEAM_ERROR_LOG_TARGET_PROFILE_PATH: () => RED_TEAM_ERROR_LOG_TARGET_PROFILE_PATH,
   RED_TEAM_EULA_PATH: () => RED_TEAM_EULA_PATH,
   RED_TEAM_INSTANCES_PATH: () => RED_TEAM_INSTANCES_PATH,
+  RED_TEAM_LANGUAGES_PATH: () => RED_TEAM_LANGUAGES_PATH,
   RED_TEAM_MGMT_DASHBOARD_PATH: () => RED_TEAM_MGMT_DASHBOARD_PATH,
   RED_TEAM_MGMT_ENDPOINT: () => RED_TEAM_MGMT_ENDPOINT,
+  RED_TEAM_NETWORK_BROKER_ENDPOINT: () => RED_TEAM_NETWORK_BROKER_ENDPOINT,
   RED_TEAM_QUOTA_PATH: () => RED_TEAM_QUOTA_PATH,
   RED_TEAM_REGISTRY_CREDENTIALS_PATH: () => RED_TEAM_REGISTRY_CREDENTIALS_PATH,
   RED_TEAM_REPORT_DYNAMIC_PATH: () => RED_TEAM_REPORT_DYNAMIC_PATH,
@@ -399,6 +425,7 @@ __export(index_exports, {
   RedTeamErrorType: () => RedTeamErrorType,
   RedTeamEulaClient: () => RedTeamEulaClient,
   RedTeamInstancesClient: () => RedTeamInstancesClient,
+  RedTeamNetworkBrokerClient: () => RedTeamNetworkBrokerClient,
   RedTeamPaginationSchema: () => RedTeamPaginationSchema,
   RedTeamReportsClient: () => RedTeamReportsClient,
   RedTeamScansClient: () => RedTeamScansClient,
@@ -501,6 +528,7 @@ __export(index_exports, {
   TargetType: () => TargetType,
   TargetUpdateRequestSchema: () => TargetUpdateRequestSchema,
   TcReportSchema: () => TcReportSchema,
+  TenantLanguagesResponseSchema: () => TenantLanguagesResponseSchema,
   TgReportSchema: () => TgReportSchema,
   ThreatCategory: () => ThreatCategory,
   ThreatScanReportSchema: () => ThreatScanReportSchema,
@@ -516,11 +544,13 @@ __export(index_exports, {
   TopicsClient: () => TopicsClient,
   URLExclusionSchema: () => URLExclusionSchema,
   USER_AGENT: () => USER_AGENT,
+  UpdateChannelRequestSchema: () => UpdateChannelRequestSchema,
   UrlCategorySchema: () => UrlCategorySchema,
   UrlfEntrySchema: () => UrlfEntrySchema,
   ValidationErrorSchema: () => ValidationErrorSchema,
   Verdict: () => Verdict,
   ViolationListSchema: () => ViolationListSchema,
+  ViolationRemediationSchema: () => ViolationRemediationSchema,
   ViolationResponseSchema: () => ViolationResponseSchema,
   ViolationSeverityCountsSchema: () => ViolationSeverityCountsSchema,
   WebSocketConnectionParamsSchema: () => WebSocketConnectionParamsSchema,
@@ -563,7 +593,7 @@ var MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 5;
 var MAX_CONNECTION_POOL_SIZE = 100;
 var MAX_NUMBER_OF_RETRIES = 5;
 var HTTP_FORCE_RETRY_STATUS_CODES = [500, 502, 503, 504];
-var SDK_VERSION = "0.11.0";
+var SDK_VERSION = "0.13.0";
 var USER_AGENT = `PAN-AIRS/${SDK_VERSION}-typescript-sdk`;
 var DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 var DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
@@ -592,6 +622,7 @@ var MGMT_OAUTH_INVALIDATE_PATH = "/v1/mgmt/oauth/invalidateToken";
 var MGMT_OAUTH_TOKEN_PATH = "/v1/mgmt/oauth/client_credential/accesstoken";
 var MGMT_DASHBOARD_APPLICATION_PATH = "/v1/mgmt/dashboard/v2/apps/application";
 var MGMT_DASHBOARD_APPLICATION_VIOLATION_BREAKDOWN_PATH = "/v1/mgmt/dashboard/v2/apps/applicationviolationbreakdown";
+var MGMT_DASHBOARD_APPLICATIONS_OVERVIEW_PATH = "/v1/mgmt/dashboard/v2/apps/applicationsoverview";
 var DEFAULT_DLP_ENDPOINT = "https://api.dlp.paloaltonetworks.com";
 var DLP_DATA_FILTERING_PROFILES_PATH = "/v2/api/data-filtering-profiles";
 var DLP_DATA_PATTERNS_PATH = "/v2/api/data-patterns";
@@ -608,17 +639,21 @@ var MODEL_SEC_TOKEN_ENDPOINT = "PANW_MODEL_SEC_TOKEN_ENDPOINT";
 var MODEL_SEC_SCANS_PATH = "/v1/scans";
 var MODEL_SEC_EVALUATIONS_PATH = "/v1/evaluations";
 var MODEL_SEC_VIOLATIONS_PATH = "/v1/violations";
+var MODEL_SEC_MODELS_PATH = "/v1/models";
+var MODEL_SEC_MODEL_VERSIONS_PATH = "/v1/model-versions";
 var MODEL_SEC_SECURITY_GROUPS_PATH = "/v1/security-groups";
 var MODEL_SEC_SECURITY_RULES_PATH = "/v1/security-rules";
 var MODEL_SEC_PYPI_AUTH_PATH = "/v1/pypi/authenticate";
 var DEFAULT_RED_TEAM_DATA_ENDPOINT = "https://api.sase.paloaltonetworks.com/ai-red-teaming/data-plane";
 var DEFAULT_RED_TEAM_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/ai-red-teaming/mgmt-plane";
+var DEFAULT_RED_TEAM_NETWORK_BROKER_ENDPOINT = "https://api.sase.paloaltonetworks.com/ai-red-teaming/data-plane/network-broker";
 var RED_TEAM_CLIENT_ID = "PANW_RED_TEAM_CLIENT_ID";
 var RED_TEAM_CLIENT_SECRET = "PANW_RED_TEAM_CLIENT_SECRET";
 var RED_TEAM_TSG_ID = "PANW_RED_TEAM_TSG_ID";
 var RED_TEAM_DATA_ENDPOINT = "PANW_RED_TEAM_DATA_ENDPOINT";
 var RED_TEAM_MGMT_ENDPOINT = "PANW_RED_TEAM_MGMT_ENDPOINT";
 var RED_TEAM_TOKEN_ENDPOINT = "PANW_RED_TEAM_TOKEN_ENDPOINT";
+var RED_TEAM_NETWORK_BROKER_ENDPOINT = "PANW_RED_TEAM_NETWORK_BROKER_ENDPOINT";
 var RED_TEAM_SCAN_PATH = "/v1/scan";
 var RED_TEAM_CATEGORIES_PATH = "/v1/categories";
 var RED_TEAM_REPORT_STATIC_PATH = "/v1/report/static";
@@ -629,6 +664,8 @@ var RED_TEAM_DASHBOARD_PATH = "/v1/dashboard";
 var RED_TEAM_QUOTA_PATH = "/v1/metering/quota";
 var RED_TEAM_ERROR_LOG_PATH = "/v1/error-log/job";
 var RED_TEAM_SENTIMENT_PATH = "/v1/sentiment";
+var RED_TEAM_LANGUAGES_PATH = "/v1/languages";
+var RED_TEAM_ERROR_LOG_TARGET_PROFILE_PATH = "/v1/error-log/target-profile";
 var RED_TEAM_TARGET_PATH = "/v1/target";
 var RED_TEAM_TARGET_VALIDATE_AUTH_PATH = "/v1/target/validate-auth";
 var RED_TEAM_TEMPLATE_PATH = "/v1/template";
@@ -637,6 +674,8 @@ var RED_TEAM_INSTANCES_PATH = "/v1/instances";
 var RED_TEAM_REGISTRY_CREDENTIALS_PATH = "/v1/registry-credentials";
 var RED_TEAM_CUSTOM_ATTACK_PATH = "/v1/custom-attack";
 var RED_TEAM_MGMT_DASHBOARD_PATH = "/v1/dashboard/overview";
+var RED_TEAM_CHANNELS_PATH = "/v1/channels";
+var RED_TEAM_CHANNELS_STATS_PATH = "/v1/channels/stats";
 
 // src/errors.ts
 var ErrorType = /* @__PURE__ */ ((ErrorType2) => {
@@ -841,9 +880,38 @@ async function executeWithRetry(opts) {
   );
 }
 
+// src/http/debug.ts
+var import_node_crypto2 = require("crypto");
+var TRUTHY = /* @__PURE__ */ new Set(["1", "true", "yes", "on"]);
+var SENSITIVE_HEADERS = /* @__PURE__ */ new Set([HEADER_AUTH_TOKEN.toLowerCase(), HEADER_API_KEY.toLowerCase()]);
+var PREFIX = "[airs-sdk]";
+function isDebugEnabled() {
+  const raw = process.env.PANW_AI_SEC_DEBUG;
+  return raw !== void 0 && TRUTHY.has(raw.trim().toLowerCase());
+}
+function hashToken(value) {
+  return "sha256:" + (0, import_node_crypto2.createHash)("sha256").update(value).digest("hex").slice(0, 12);
+}
+function sanitizeHeaders(headers) {
+  const out = {};
+  for (const [key, value] of Object.entries(headers)) {
+    out[key] = SENSITIVE_HEADERS.has(key.toLowerCase()) ? hashToken(value) : value;
+  }
+  return out;
+}
+function logRequest(method, url, headers, body) {
+  console.error(`${PREFIX} \u2192 ${method} ${url}`);
+  console.error(`${PREFIX}   headers ${JSON.stringify(sanitizeHeaders(headers))}`);
+  if (body !== void 0) console.error(`${PREFIX}   body ${body}`);
+}
+function logResponse(status, ms, body) {
+  console.error(`${PREFIX} \u2190 ${status} (${ms}ms)${body !== void 0 ? ` ${body}` : ""}`);
+}
+
 // src/http/request.ts
 async function request(spec) {
   let hasRetriedAuth = false;
+  const debug = isDebugEnabled();
   const response = await executeWithRetry({
     maxRetries: spec.numRetries,
     execute: async () => {
@@ -873,11 +941,25 @@ async function request(spec) {
       }
       const prepared = { method: spec.method, url, headers, bodyText };
       const final = await spec.auth.prepare(prepared);
-      return fetch(final.url.toString(), {
+      const startedAt = debug ? Date.now() : 0;
+      if (debug) {
+        const logBody = spec.formData !== void 0 ? "[multipart/form-data]" : final.bodyText;
+        logRequest(final.method, final.url.toString(), final.headers, logBody);
+      }
+      const res = await fetch(final.url.toString(), {
         method: final.method,
         headers: final.headers,
         body: spec.formData !== void 0 ? bodyForFetch : final.bodyText
       });
+      if (debug) {
+        let respBody;
+        try {
+          respBody = await res.clone().text();
+        } catch {
+        }
+        logResponse(res.status, Date.now() - startedAt, respBody);
+      }
+      return res;
     },
     onRetryableFailure: async (res) => {
       if (hasRetriedAuth) return false;
@@ -2044,6 +2126,31 @@ var DashboardApplicationViolationBreakdownSchema = import_zod21.z.object({
   detection_type_violation_breakdown: import_zod21.z.array(DetectorViolationBreakdownEntrySchema).optional(),
   total_violating: import_zod21.z.number().optional()
 }).passthrough();
+var DashboardApplicationSessionsBucketSchema = import_zod21.z.object({
+  bucket_number: import_zod21.z.number().optional(),
+  date: import_zod21.z.string().nullable().optional(),
+  total: import_zod21.z.number().optional(),
+  violated: import_zod21.z.number().optional()
+}).passthrough();
+var DashboardApplicationsOverviewItemSchema = import_zod21.z.object({
+  id: import_zod21.z.string().nullable().optional(),
+  name: import_zod21.z.string().nullable().optional(),
+  cloud: import_zod21.z.string().nullable().optional(),
+  source: import_zod21.z.string().nullable().optional(),
+  created_at: import_zod21.z.string().nullable().optional(),
+  sessions: import_zod21.z.array(DashboardApplicationSessionsBucketSchema).nullable().optional(),
+  sessions_total: import_zod21.z.number().nullable().optional(),
+  sessions_violated: import_zod21.z.number().nullable().optional()
+}).passthrough();
+var DashboardPaginationSchema = import_zod21.z.object({
+  limit: import_zod21.z.number().optional(),
+  skip: import_zod21.z.number().optional(),
+  total_items: import_zod21.z.number().optional()
+}).passthrough();
+var DashboardApplicationsOverviewSchema = import_zod21.z.object({
+  items: import_zod21.z.array(DashboardApplicationsOverviewItemSchema).optional(),
+  pagination: DashboardPaginationSchema.optional()
+}).passthrough();
 
 // src/models/mgmt-deployment-profile.ts
 var import_zod22 = require("zod");
@@ -2814,7 +2921,8 @@ var ScanDetailsSchema = import_zod32.z.object({
 var ScanCreateRequestSchema = import_zod32.z.object({
   model_uri: import_zod32.z.string(),
   security_group_uuid: import_zod32.z.string(),
-  scan_origin: import_zod32.z.string(),
+  // Optional per the OpenAPI spec (server defaults it); the scans-client example still sets it.
+  scan_origin: import_zod32.z.string().optional(),
   allow_patterns: import_zod32.z.array(import_zod32.z.string()).nullable().optional(),
   ignore_patterns: import_zod32.z.array(import_zod32.z.string()).nullable().optional(),
   labels: import_zod32.z.array(LabelSchema).nullable().optional(),
@@ -2833,7 +2941,8 @@ var ScanBaseResponseSchema = import_zod32.z.object({
   scan_origin: import_zod32.z.string(),
   security_group_uuid: import_zod32.z.string(),
   security_group_name: import_zod32.z.string(),
-  model_version_uuid: import_zod32.z.string(),
+  // Optional per the OpenAPI spec — a scan may not have a resolved model version yet.
+  model_version_uuid: import_zod32.z.string().nullable().optional(),
   eval_outcome: import_zod32.z.string(),
   source_type: import_zod32.z.string(),
   created_by: import_zod32.z.string().nullable().optional(),
@@ -2870,6 +2979,50 @@ var FileListSchema = import_zod32.z.object({
   pagination: ModelSecurityPaginationSchema,
   files: import_zod32.z.array(FileResponseSchema)
 }).passthrough();
+var ModelResponseSchema = import_zod32.z.object({
+  uuid: import_zod32.z.string(),
+  tsg_id: import_zod32.z.string(),
+  created_at: import_zod32.z.string(),
+  updated_at: import_zod32.z.string(),
+  name: import_zod32.z.string(),
+  latest_version_uuid: import_zod32.z.string().nullable().optional(),
+  latest_version_fingerprint: import_zod32.z.string().nullable().optional(),
+  latest_version_revision: import_zod32.z.string().nullable().optional(),
+  latest_version_hf_commit_sha: import_zod32.z.string().nullable().optional(),
+  latest_version_outcome: import_zod32.z.string().nullable().optional(),
+  latest_version_formats: import_zod32.z.array(import_zod32.z.string()).nullable().optional(),
+  latest_version_source_types: import_zod32.z.array(import_zod32.z.string()).nullable().optional(),
+  latest_version_scan_time: import_zod32.z.string().nullable().optional()
+}).passthrough();
+var ModelListSchema = import_zod32.z.object({
+  pagination: ModelSecurityPaginationSchema,
+  models: import_zod32.z.array(ModelResponseSchema)
+}).passthrough();
+var ModelVersionResponseSchema = import_zod32.z.object({
+  uuid: import_zod32.z.string(),
+  tsg_id: import_zod32.z.string(),
+  created_at: import_zod32.z.string(),
+  updated_at: import_zod32.z.string(),
+  revision: import_zod32.z.string(),
+  model_uuid: import_zod32.z.string(),
+  fingerprint: import_zod32.z.string().nullable().optional(),
+  file_count: import_zod32.z.number().int().nullable().optional(),
+  license: import_zod32.z.string().nullable().optional(),
+  latest_scan_time: import_zod32.z.string().nullable().optional(),
+  hf_commit_sha: import_zod32.z.string().nullable().optional(),
+  hf_commit_title: import_zod32.z.string().nullable().optional(),
+  hf_commit_authors: import_zod32.z.array(import_zod32.z.string()).nullable().optional(),
+  hf_model_name: import_zod32.z.string().nullable().optional(),
+  hf_organization: import_zod32.z.string().nullable().optional(),
+  model_formats: import_zod32.z.array(import_zod32.z.string()).nullable().optional(),
+  source_types: import_zod32.z.array(import_zod32.z.string()).nullable().optional(),
+  last_eval_outcome: import_zod32.z.string().nullable().optional(),
+  last_eval_summary: EvalSummarySchema.nullable().optional()
+}).passthrough();
+var ModelVersionListSchema = import_zod32.z.object({
+  pagination: ModelSecurityPaginationSchema,
+  model_versions: import_zod32.z.array(ModelVersionResponseSchema)
+}).passthrough();
 var RuleEvaluationResponseSchema = import_zod32.z.object({
   uuid: import_zod32.z.string(),
   tsg_id: import_zod32.z.string(),
@@ -2887,6 +3040,10 @@ var RuleEvaluationListSchema = import_zod32.z.object({
   pagination: ModelSecurityPaginationSchema,
   evaluations: import_zod32.z.array(RuleEvaluationResponseSchema)
 }).passthrough();
+var ViolationRemediationSchema = import_zod32.z.object({
+  steps: import_zod32.z.array(import_zod32.z.string()),
+  url: import_zod32.z.string()
+}).passthrough();
 var ViolationResponseSchema = import_zod32.z.object({
   uuid: import_zod32.z.string(),
   tsg_id: import_zod32.z.string(),
@@ -2897,6 +3054,7 @@ var ViolationResponseSchema = import_zod32.z.object({
   rule_name: import_zod32.z.string(),
   rule_description: import_zod32.z.string(),
   rule_instance_state: import_zod32.z.string(),
+  remediation: ViolationRemediationSchema,
   file: import_zod32.z.string().nullable().optional(),
   hash: import_zod32.z.string().nullable().optional(),
   module: import_zod32.z.string().nullable().optional(),
@@ -3032,6 +3190,11 @@ var BrandSubCategory = {
   DISCRIMINATING_CLAIMS: "DISCRIMINATING_CLAIMS",
   POLITICAL_ENDORSEMENTS: "POLITICAL_ENDORSEMENTS"
 };
+var ChannelStatus = {
+  ONLINE: "ONLINE",
+  OFFLINE: "OFFLINE",
+  DRAFT: "DRAFT"
+};
 var ComplianceSubCategory = {
   OWASP: "OWASP",
   MITRE_ATLAS: "MITRE_ATLAS",
@@ -3855,6 +4018,12 @@ var ErrorLogSchema = import_zod33.z.object({
   version: import_zod33.z.number().int().optional()
 }).passthrough();
 var ErrorLogListResponseSchema = import_zod33.z.object({ pagination: RedTeamPaginationSchema, data: import_zod33.z.array(ErrorLogSchema) }).passthrough();
+var LanguageOptionSchema = import_zod33.z.object({ code: import_zod33.z.string(), name: import_zod33.z.string() }).passthrough();
+var TenantLanguagesResponseSchema = import_zod33.z.object({
+  multilingual_enabled: import_zod33.z.boolean(),
+  supported_job_types: import_zod33.z.array(import_zod33.z.string()),
+  languages: import_zod33.z.array(LanguageOptionSchema)
+}).passthrough();
 var TargetRequestBaseFields = {
   name: import_zod33.z.string(),
   description: import_zod33.z.string().nullable().optional(),
@@ -4209,6 +4378,48 @@ var RegistryCredentialsSchema = import_zod33.z.object({
   expiry: import_zod33.z.string()
 }).passthrough();
 
+// src/models/red-team-network-broker.ts
+var import_zod34 = require("zod");
+var ChannelStatusSchema = import_zod34.z.nativeEnum(ChannelStatus);
+var CreateChannelRequestSchema = import_zod34.z.object({
+  name: import_zod34.z.string(),
+  description: import_zod34.z.string().optional()
+}).passthrough();
+var UpdateChannelRequestSchema = import_zod34.z.object({
+  name: import_zod34.z.string().optional(),
+  description: import_zod34.z.string().optional()
+}).passthrough();
+var ChannelSchema = import_zod34.z.object({
+  uuid: import_zod34.z.string().optional(),
+  name: import_zod34.z.string().nullable().optional(),
+  description: import_zod34.z.string().nullable().optional(),
+  // Kept as a plain string (not the enum) so unknown upstream statuses never fail parsing.
+  status: import_zod34.z.string().nullable().optional(),
+  added_by: import_zod34.z.string().nullable().optional(),
+  created_at: import_zod34.z.string().nullable().optional(),
+  updated_at: import_zod34.z.string().nullable().optional(),
+  last_online_at: import_zod34.z.string().nullable().optional(),
+  // Present on live responses (not in the base OpenAPI Channel schema).
+  connected_clients_count: import_zod34.z.number().int().nullable().optional(),
+  outdated_clients_count: import_zod34.z.number().int().nullable().optional(),
+  features: import_zod34.z.record(import_zod34.z.boolean()).nullable().optional()
+}).passthrough();
+var ChannelListPaginationSchema = import_zod34.z.object({ total_items: import_zod34.z.number().int().nullable().optional() }).passthrough();
+var ChannelListResponseSchema = import_zod34.z.object({
+  pagination: ChannelListPaginationSchema.optional(),
+  data: import_zod34.z.array(ChannelSchema).default([])
+}).passthrough();
+var ChannelStatsSchema = import_zod34.z.object({
+  network_channels_server_domain: import_zod34.z.string().nullable().optional(),
+  docker_registry: import_zod34.z.string().nullable().optional(),
+  helm_chart: import_zod34.z.string().nullable().optional(),
+  docker_image: import_zod34.z.string().nullable().optional(),
+  online_channels: import_zod34.z.number().int().nullable().optional(),
+  total_channels: import_zod34.z.number().int().nullable().optional(),
+  // Present on live responses (not in the base OpenAPI ChannelStats schema).
+  client_version: import_zod34.z.string().nullable().optional()
+}).passthrough();
+
 // src/http/auth/oauth.ts
 var OAuthAuth = class {
   constructor(oauthClient) {
@@ -4231,12 +4442,12 @@ var OAuthAuth = class {
 };
 
 // src/models/oauth-token.ts
-var import_zod34 = require("zod");
-var OAuthTokenResponseSchema = import_zod34.z.object({
-  access_token: import_zod34.z.string(),
-  token_type: import_zod34.z.string().optional(),
-  expires_in: import_zod34.z.number(),
-  scope: import_zod34.z.string().optional()
+var import_zod35 = require("zod");
+var OAuthTokenResponseSchema = import_zod35.z.object({
+  access_token: import_zod35.z.string(),
+  token_type: import_zod35.z.string().optional(),
+  expires_in: import_zod35.z.number(),
+  scope: import_zod35.z.string().optional()
 }).passthrough();
 
 // src/management/oauth-client.ts
@@ -5027,7 +5238,7 @@ var CustomerAppsClient = class {
     return request({
       method: "GET",
       baseUrl: this.baseUrl,
-      path: `${MGMT_CUSTOMER_APPS_TSG_PATH}/${this.tsgId}`,
+      path: `${MGMT_CUSTOMER_APPS_TSG_PATH}/${encodeURIComponent(this.tsgId)}`,
       params,
       responseSchema: CustomerAppListResponseSchema,
       auth: this.auth,
@@ -5221,7 +5432,7 @@ var ScanLogsClient = class {
 };
 
 // src/management/oauth-management.ts
-var import_zod35 = require("zod");
+var import_zod36 = require("zod");
 var OAuthManagementClient = class {
   baseUrl;
   auth;
@@ -5255,7 +5466,7 @@ var OAuthManagementClient = class {
       path: MGMT_OAUTH_INVALIDATE_PATH,
       params: { token },
       body,
-      responseSchema: import_zod35.z.string(),
+      responseSchema: import_zod36.z.string(),
       auth: this.auth,
       numRetries: this.numRetries
     });
@@ -5389,6 +5600,53 @@ var DashboardClient = class {
       numRetries: this.numRetries
     });
   }
+  /**
+   * Enumerate all dashboard application buckets the tenant has data for.
+   *
+   * This is the canonical apps-list source for the dashboard. The customer-apps endpoint
+   * (`mgmt.customerApps.list`) lists registered customer applications, but each registered
+   * customer-app can have **multiple dashboard buckets** when its API key is used to send scan
+   * requests carrying different `metadata.app_name` values - one bucket per distinct
+   * scan-payload name. This endpoint returns every bucket, so it is what you want for
+   * per-app token-consumption reporting and dashboard inventory.
+   *
+   * The `id` field on each item is the registered `customer_appId` UUID; the `name` field is
+   * the scan-payload value. Pass that `(id, name)` pair to {@link application} or
+   * {@link applicationViolationBreakdown} to retrieve drill-down data for a specific bucket.
+   *
+   * @param query - Time window and pagination.
+   * @returns Paginated bucket list plus pagination metadata.
+   * @example
+   * ```ts
+   * import { ManagementClient } from '@cdot65/prisma-airs-sdk';
+   * const mgmt = new ManagementClient();
+   *
+   * const { items } = await mgmt.dashboard.applicationsOverview();
+   * for (const item of items ?? []) {
+   *   const overview = await mgmt.dashboard.application({
+   *     appId: item.id ?? '',
+   *     appName: item.name ?? '',
+   *   });
+   *   console.log(item.name, overview.token_stats?.monthly_total_tokens);
+   * }
+   * ```
+   */
+  async applicationsOverview(query) {
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: MGMT_DASHBOARD_APPLICATIONS_OVERVIEW_PATH,
+      params: {
+        time_interval: String(query?.timeInterval ?? 30),
+        time_unit: query?.timeUnit ?? "days",
+        limit: String(query?.limit ?? 25),
+        offset: String(query?.offset ?? 0)
+      },
+      responseSchema: DashboardApplicationsOverviewSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
 };
 
 // src/management/dlp/data-filtering-profiles.ts
@@ -6836,6 +7094,170 @@ var ModelSecurityRulesClient = class {
   }
 };
 
+// src/model-security/models-client.ts
+function buildModelListParams(opts) {
+  const params = serializeListing(opts);
+  if (opts?.search_query !== void 0) params.search_query = opts.search_query;
+  if (opts?.sort_field !== void 0) params.sort_field = opts.sort_field;
+  if (opts?.sort_order !== void 0) params.sort_order = opts.sort_order;
+  if (opts?.latest_version_outcomes !== void 0)
+    params.latest_version_outcomes = opts.latest_version_outcomes;
+  if (opts?.latest_version_formats !== void 0)
+    params.latest_version_formats = opts.latest_version_formats;
+  if (opts?.latest_version_source_types !== void 0)
+    params.latest_version_source_types = opts.latest_version_source_types;
+  if (opts?.latest_version_scan_time_before !== void 0)
+    params.latest_version_scan_time_before = opts.latest_version_scan_time_before;
+  if (opts?.start_time !== void 0) params.start_time = opts.start_time;
+  if (opts?.end_time !== void 0) params.end_time = opts.end_time;
+  return params;
+}
+var ModelSecurityModelsClient = class {
+  baseUrl;
+  auth;
+  numRetries;
+  constructor(opts) {
+    this.baseUrl = opts.baseUrl;
+    this.auth = opts.auth;
+    this.numRetries = opts.numRetries;
+  }
+  /**
+   * List models with optional search, sort, and latest-version filters.
+   * @param opts - Pagination and filter options.
+   * @returns Paginated list of models.
+   * @example
+   * ```ts
+   * import { ModelSecurityClient } from '@cdot65/prisma-airs-sdk';
+   * const ms = new ModelSecurityClient();
+   *
+   * const models = await ms.models.listModels({ limit: 10, search_query: 'llama' });
+   * // models =>
+   * // { pagination: { total_items: 3 }, models: [{ uuid: '550e8400-...', name: 'org/llama', latest_version_outcome: 'PASSED' }] }
+   * ```
+   */
+  async listModels(opts) {
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: MODEL_SEC_MODELS_PATH,
+      params: buildModelListParams(opts),
+      responseSchema: ModelListSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * Get a single model by UUID.
+   * @param uuid - Model UUID.
+   * @returns The model.
+   * @example
+   * ```ts
+   * import { ModelSecurityClient } from '@cdot65/prisma-airs-sdk';
+   * const ms = new ModelSecurityClient();
+   *
+   * const model = await ms.models.getModel('550e8400-e29b-41d4-a716-446655440000');
+   * // model =>
+   * // { uuid: '550e8400-...', name: 'org/model', latest_version_uuid: '660e8400-...', latest_version_outcome: 'PASSED' }
+   * ```
+   */
+  async getModel(uuid) {
+    assertUuid(uuid, "model uuid");
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${MODEL_SEC_MODELS_PATH}/${uuid}`,
+      responseSchema: ModelResponseSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * List the versions of a model.
+   * @param modelUuid - Model UUID.
+   * @param opts - Pagination and sort options.
+   * @returns Paginated list of model versions.
+   * @example
+   * ```ts
+   * import { ModelSecurityClient } from '@cdot65/prisma-airs-sdk';
+   * const ms = new ModelSecurityClient();
+   *
+   * const versions = await ms.models.listModelVersions('550e8400-e29b-41d4-a716-446655440000', {
+   *   sort_order: 'desc',
+   * });
+   * // versions =>
+   * // { pagination: { total_items: 2 }, model_versions: [{ uuid: '660e8400-...', revision: 'main', file_count: 12 }] }
+   * ```
+   */
+  async listModelVersions(modelUuid, opts) {
+    assertUuid(modelUuid, "model uuid");
+    const params = serializeListing(opts);
+    if (opts?.sort_order !== void 0) params.sort_order = opts.sort_order;
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${MODEL_SEC_MODELS_PATH}/${modelUuid}/model-versions`,
+      params,
+      responseSchema: ModelVersionListSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * Get a single model version by UUID.
+   * @param uuid - Model version UUID.
+   * @returns The model version.
+   * @example
+   * ```ts
+   * import { ModelSecurityClient } from '@cdot65/prisma-airs-sdk';
+   * const ms = new ModelSecurityClient();
+   *
+   * const version = await ms.models.getModelVersion('660e8400-e29b-41d4-a716-446655440000');
+   * // version =>
+   * // { uuid: '660e8400-...', revision: 'main', model_uuid: '550e8400-...', last_eval_outcome: 'PASSED' }
+   * ```
+   */
+  async getModelVersion(uuid) {
+    assertUuid(uuid, "model version uuid");
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${MODEL_SEC_MODEL_VERSIONS_PATH}/${uuid}`,
+      responseSchema: ModelVersionResponseSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * List the files of a model version.
+   * @param modelVersionUuid - Model version UUID.
+   * @param opts - Pagination options.
+   * @returns Paginated list of files (same shape as scan files).
+   * @example
+   * ```ts
+   * import { ModelSecurityClient } from '@cdot65/prisma-airs-sdk';
+   * const ms = new ModelSecurityClient();
+   *
+   * const files = await ms.models.listModelVersionFiles('660e8400-e29b-41d4-a716-446655440000', {
+   *   limit: 50,
+   * });
+   * // files =>
+   * // { pagination: { total_items: 12 }, files: [{ uuid: '770e8400-...', path: '/model.safetensors', type: 'FILE', result: 'SUCCESS' }] }
+   * ```
+   */
+  async listModelVersionFiles(modelVersionUuid, opts) {
+    assertUuid(modelVersionUuid, "model version uuid");
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${MODEL_SEC_MODEL_VERSIONS_PATH}/${modelVersionUuid}/files`,
+      params: serializeListing(opts),
+      responseSchema: FileListSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+};
+
 // src/model-security/client.ts
 var ModelSecurityClient = class {
   /** Data plane scan operations. */
@@ -6844,6 +7266,8 @@ var ModelSecurityClient = class {
   securityGroups;
   /** Management plane security rule operations (read-only). */
   securityRules;
+  /** Data plane model and model-version operations (read-only). */
+  models;
   mgmtEndpoint;
   auth;
   numRetries;
@@ -6865,6 +7289,7 @@ var ModelSecurityClient = class {
     this.mgmtEndpoint = mgmtEndpoint;
     this.numRetries = numRetries;
     this.scans = new ModelSecurityScansClient({ baseUrl: dataEndpoint, auth, numRetries });
+    this.models = new ModelSecurityModelsClient({ baseUrl: dataEndpoint, auth, numRetries });
     this.securityGroups = new ModelSecurityGroupsClient({
       baseUrl: mgmtEndpoint,
       auth,
@@ -6902,7 +7327,7 @@ var ModelSecurityClient = class {
 };
 
 // src/red-team/scans-client.ts
-var import_zod36 = require("zod");
+var import_zod37 = require("zod");
 var RedTeamScansClient = class {
   baseUrl;
   auth;
@@ -7039,7 +7464,7 @@ var RedTeamScansClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: RED_TEAM_CATEGORIES_PATH,
-      responseSchema: import_zod36.z.array(CategoryModelSchema),
+      responseSchema: import_zod37.z.array(CategoryModelSchema),
       auth: this.auth,
       numRetries: this.numRetries
     });
@@ -7047,7 +7472,7 @@ var RedTeamScansClient = class {
 };
 
 // src/red-team/reports-client.ts
-var import_zod37 = require("zod");
+var import_zod38 = require("zod");
 var RedTeamReportsClient = class {
   baseUrl;
   auth;
@@ -7422,7 +7847,7 @@ var RedTeamReportsClient = class {
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_REPORT_PATH}/${jobId}/download`,
       params: { file_format: format },
-      responseSchema: import_zod37.z.unknown(),
+      responseSchema: import_zod38.z.unknown(),
       auth: this.auth,
       numRetries: this.numRetries
     });
@@ -7446,7 +7871,7 @@ var RedTeamReportsClient = class {
       method: "POST",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_REPORT_PATH}/${jobId}/generate-partial-report`,
-      responseSchema: import_zod37.z.unknown(),
+      responseSchema: import_zod38.z.unknown(),
       auth: this.auth,
       numRetries: this.numRetries
     });
@@ -7454,7 +7879,7 @@ var RedTeamReportsClient = class {
 };
 
 // src/red-team/custom-attack-reports-client.ts
-var import_zod38 = require("zod");
+var import_zod39 = require("zod");
 var RedTeamCustomAttackReportsClient = class {
   baseUrl;
   auth;
@@ -7544,7 +7969,7 @@ var RedTeamCustomAttackReportsClient = class {
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH}/report/${jobId}/prompt-set/${promptSetId}/prompts`,
       params,
-      responseSchema: import_zod38.z.array(PromptDetailResponseSchema),
+      responseSchema: import_zod39.z.array(PromptDetailResponseSchema),
       auth: this.auth,
       numRetries: this.numRetries
     });
@@ -7638,7 +8063,7 @@ var RedTeamCustomAttackReportsClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH}/job/${jobId}/attack/${attackId}/list-outputs`,
-      responseSchema: import_zod38.z.array(CustomAttackOutputSchema),
+      responseSchema: import_zod39.z.array(CustomAttackOutputSchema),
       auth: this.auth,
       numRetries: this.numRetries
     });
@@ -7663,7 +8088,7 @@ var RedTeamCustomAttackReportsClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH}/job/${jobId}/property-stats`,
-      responseSchema: import_zod38.z.array(PropertyStatisticSchema),
+      responseSchema: import_zod39.z.array(PropertyStatisticSchema),
       auth: this.auth,
       numRetries: this.numRetries
     });
@@ -7671,7 +8096,7 @@ var RedTeamCustomAttackReportsClient = class {
 };
 
 // src/red-team/targets-client.ts
-var import_zod39 = require("zod");
+var import_zod40 = require("zod");
 var RedTeamTargetsClient = class {
   baseUrl;
   auth;
@@ -7964,7 +8389,7 @@ var RedTeamTargetsClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_TEMPLATE_PATH}/target-metadata`,
-      responseSchema: import_zod39.z.record(import_zod39.z.unknown()),
+      responseSchema: import_zod40.z.record(import_zod40.z.unknown()),
       auth: this.auth,
       numRetries: this.numRetries
     });
@@ -8913,6 +9338,155 @@ var RedTeamInstancesClient = class {
   }
 };
 
+// src/red-team/network-broker-client.ts
+var RedTeamNetworkBrokerClient = class {
+  baseUrl;
+  auth;
+  numRetries;
+  constructor(opts) {
+    this.baseUrl = opts.baseUrl;
+    this.auth = opts.auth;
+    this.numRetries = opts.numRetries;
+  }
+  /**
+   * List network broker channels with optional filters.
+   * @param opts - Optional pagination, search, and status filter options.
+   * @returns The paginated list of channels.
+   * @example
+   * ```ts
+   * import { RedTeamClient } from '@cdot65/prisma-airs-sdk';
+   * const rt = new RedTeamClient();
+   *
+   * const channels = await rt.networkBroker.listChannels({ status: ['ONLINE', 'DRAFT'], limit: 10 });
+   * // channels =>
+   * // { pagination: { total_items: 2 }, data: [{ uuid: '550e8400-...', name: 'prod-broker', status: 'ONLINE' }] }
+   * ```
+   */
+  async listChannels(opts) {
+    const params = serializeListing(opts);
+    if (opts?.status !== void 0) {
+      params.status = Array.isArray(opts.status) ? opts.status : [opts.status];
+    }
+    if (opts?.include_all_if_empty !== void 0) {
+      params.include_all_if_empty = String(opts.include_all_if_empty);
+    }
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: RED_TEAM_CHANNELS_PATH,
+      params,
+      responseSchema: ChannelListResponseSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * Create a network broker channel.
+   * @param body - Channel creation request body (requires `name`).
+   * @returns The created channel.
+   * @example
+   * ```ts
+   * import { RedTeamClient } from '@cdot65/prisma-airs-sdk';
+   * const rt = new RedTeamClient();
+   *
+   * const channel = await rt.networkBroker.createChannel({
+   *   name: 'prod-broker',
+   *   description: 'Production network broker channel',
+   * });
+   * // channel =>
+   * // { uuid: '550e8400-...', name: 'prod-broker', status: 'DRAFT' }
+   * ```
+   */
+  async createChannel(body) {
+    return request({
+      method: "POST",
+      baseUrl: this.baseUrl,
+      path: RED_TEAM_CHANNELS_PATH,
+      body,
+      responseSchema: ChannelSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * Get network broker channel stats.
+   * @returns The channel stats (broker server, registry, chart, image, channel counts).
+   * @example
+   * ```ts
+   * import { RedTeamClient } from '@cdot65/prisma-airs-sdk';
+   * const rt = new RedTeamClient();
+   *
+   * const stats = await rt.networkBroker.getChannelStats();
+   * // stats =>
+   * // { network_channels_server_domain: 'broker.example.com', online_channels: 3, total_channels: 5, client_version: '1.4.0' }
+   * ```
+   */
+  async getChannelStats() {
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: RED_TEAM_CHANNELS_STATS_PATH,
+      responseSchema: ChannelStatsSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * Get a network broker channel by UUID.
+   * @param channelId - The channel UUID.
+   * @returns The channel.
+   * @example
+   * ```ts
+   * import { RedTeamClient } from '@cdot65/prisma-airs-sdk';
+   * const rt = new RedTeamClient();
+   *
+   * const channel = await rt.networkBroker.getChannel('550e8400-e29b-41d4-a716-446655440000');
+   * // channel =>
+   * // { uuid: '550e8400-...', name: 'prod-broker', status: 'ONLINE' }
+   * ```
+   */
+  async getChannel(channelId) {
+    assertUuid(channelId, "channel id");
+    return request({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_CHANNELS_PATH}/${channelId}`,
+      responseSchema: ChannelSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * Update a network broker channel's name or description.
+   * @param channelId - The channel UUID.
+   * @param body - Channel update request body.
+   * @returns The updated channel.
+   * @example
+   * ```ts
+   * import { RedTeamClient } from '@cdot65/prisma-airs-sdk';
+   * const rt = new RedTeamClient();
+   *
+   * const channel = await rt.networkBroker.updateChannel('550e8400-e29b-41d4-a716-446655440000', {
+   *   description: 'Updated description',
+   * });
+   * // channel =>
+   * // { uuid: '550e8400-...', name: 'prod-broker', description: 'Updated description', status: 'ONLINE' }
+   * ```
+   */
+  async updateChannel(channelId, body) {
+    assertUuid(channelId, "channel id");
+    return request({
+      method: "PATCH",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_CHANNELS_PATH}/${channelId}`,
+      body,
+      responseSchema: ChannelSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+};
+
 // src/red-team/client.ts
 var RedTeamClient = class {
   /** Data plane scan operations. */
@@ -8929,6 +9503,8 @@ var RedTeamClient = class {
   eula;
   /** Management plane instance/licensing operations. */
   instances;
+  /** Network broker channel operations (distinct network broker base URL). */
+  networkBroker;
   dataEndpoint;
   mgmtEndpoint;
   auth;
@@ -8936,6 +9512,7 @@ var RedTeamClient = class {
   constructor(opts = {}) {
     const dataEndpoint = opts.dataEndpoint ?? process.env[RED_TEAM_DATA_ENDPOINT] ?? DEFAULT_RED_TEAM_DATA_ENDPOINT;
     const mgmtEndpoint = opts.mgmtEndpoint ?? process.env[RED_TEAM_MGMT_ENDPOINT] ?? DEFAULT_RED_TEAM_MGMT_ENDPOINT;
+    const networkBrokerEndpoint = opts.networkBrokerEndpoint ?? process.env[RED_TEAM_NETWORK_BROKER_ENDPOINT] ?? DEFAULT_RED_TEAM_NETWORK_BROKER_ENDPOINT;
     const { oauthClient, numRetries } = resolveOAuthConfig({
       clientId: opts.clientId,
       clientSecret: opts.clientSecret,
@@ -8966,6 +9543,11 @@ var RedTeamClient = class {
     });
     this.eula = new RedTeamEulaClient({ baseUrl: mgmtEndpoint, auth, numRetries });
     this.instances = new RedTeamInstancesClient({ baseUrl: mgmtEndpoint, auth, numRetries });
+    this.networkBroker = new RedTeamNetworkBrokerClient({
+      baseUrl: networkBrokerEndpoint,
+      auth,
+      numRetries
+    });
   }
   // -----------------------------------------------------------------------
   // Data plane convenience methods
@@ -9074,6 +9656,82 @@ var RedTeamClient = class {
       numRetries: this.numRetries
     });
   }
+  /**
+   * List profiling error logs for a target (data plane).
+   * @param targetId - The target UUID.
+   * @param opts - Optional pagination/search options (the endpoint honors `limit`).
+   * @returns The paginated list of target-profile error logs.
+   * @example
+   * ```ts
+   * import { RedTeamClient } from '@cdot65/prisma-airs-sdk';
+   * const rt = new RedTeamClient();
+   *
+   * const logs = await rt.getTargetProfileErrorLogs('550e8400-e29b-41d4-a716-446655440000', { limit: 10 });
+   * // logs =>
+   * // { pagination: { total_items: 1 }, data: [{ target_id: '550e8400-...', error_type: 'PROBE', error_message: '...', created_at: '2025-01-01T00:00:00Z' }] }
+   * ```
+   */
+  async getTargetProfileErrorLogs(targetId, opts) {
+    assertUuid(targetId, "target id");
+    return request({
+      method: "GET",
+      baseUrl: this.dataEndpoint,
+      path: `${RED_TEAM_ERROR_LOG_TARGET_PROFILE_PATH}/${targetId}`,
+      params: serializeListing(opts),
+      responseSchema: ErrorLogListResponseSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * Get the tenant's allowed languages for Red Team scans (data plane).
+   * @returns The supported-languages response.
+   * @example
+   * ```ts
+   * import { RedTeamClient } from '@cdot65/prisma-airs-sdk';
+   * const rt = new RedTeamClient();
+   *
+   * const langs = await rt.getLanguages();
+   * // langs =>
+   * // { multilingual_enabled: true, supported_job_types: ['STATIC', 'DYNAMIC'],
+   * //   languages: [{ code: 'en', name: 'English' }, { code: 'es', name: 'Spanish' }] }
+   * ```
+   */
+  async getLanguages() {
+    return request({
+      method: "GET",
+      baseUrl: this.dataEndpoint,
+      path: RED_TEAM_LANGUAGES_PATH,
+      responseSchema: TenantLanguagesResponseSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
+  /**
+   * Get the tenant's allowed languages from the management plane.
+   * Same response shape as {@link RedTeamClient.getLanguages}, served from the management endpoint.
+   * @returns The supported-languages response.
+   * @example
+   * ```ts
+   * import { RedTeamClient } from '@cdot65/prisma-airs-sdk';
+   * const rt = new RedTeamClient();
+   *
+   * const langs = await rt.getManagementLanguages();
+   * // langs =>
+   * // { multilingual_enabled: true, supported_job_types: ['STATIC', 'DYNAMIC'],
+   * //   languages: [{ code: 'en', name: 'English' }] }
+   * ```
+   */
+  async getManagementLanguages() {
+    return request({
+      method: "GET",
+      baseUrl: this.mgmtEndpoint,
+      path: RED_TEAM_LANGUAGES_PATH,
+      responseSchema: TenantLanguagesResponseSchema,
+      auth: this.auth,
+      numRetries: this.numRetries
+    });
+  }
   /**
    * Update sentiment for a scan report.
    * @param body - The sentiment request body.
@@ -9202,6 +9860,12 @@ var RedTeamClient = class {
   CategoryModelSchema,
   CategoryReportSchema,
   CgReportSchema,
+  ChannelListPaginationSchema,
+  ChannelListResponseSchema,
+  ChannelSchema,
+  ChannelStatsSchema,
+  ChannelStatus,
+  ChannelStatusSchema,
   ClientIdAndCustomerAppSchema,
   CmdEntrySchema,
   CmdInjectReportSchema,
@@ -9215,6 +9879,7 @@ var RedTeamClient = class {
   ContentErrorType,
   CountByNameSchema,
   CountedQuotaEnum,
+  CreateChannelRequestSchema,
   CreateCustomTopicRequestSchema,
   CreateSecurityProfileRequestSchema,
   CustomAttackOutputSchema,
@@ -9249,6 +9914,7 @@ var RedTeamClient = class {
   DEFAULT_MODEL_SEC_MGMT_ENDPOINT,
   DEFAULT_RED_TEAM_DATA_ENDPOINT,
   DEFAULT_RED_TEAM_MGMT_ENDPOINT,
+  DEFAULT_RED_TEAM_NETWORK_BROKER_ENDPOINT,
   DEFAULT_TOKEN_ENDPOINT,
   DLP_DATA_FILTERING_PROFILES_PATH,
   DLP_DATA_PATTERNS_PATH,
@@ -9257,9 +9923,13 @@ var RedTeamClient = class {
   DSDetailResultSchema,
   DSResultMetadataSchema,
   DashboardApplicationSchema,
+  DashboardApplicationSessionsBucketSchema,
   DashboardApplicationViolationBreakdownSchema,
+  DashboardApplicationsOverviewItemSchema,
+  DashboardApplicationsOverviewSchema,
   DashboardClient,
   DashboardOverviewResponseSchema,
+  DashboardPaginationSchema,
   DashboardSessionStatsSchema,
   DataFilteringDetailsSchema,
   DataFilteringProfileRequestSchema,
@@ -9386,6 +10056,7 @@ var RedTeamClient = class {
   LabelValueListSchema,
   LabelsCreateRequestSchema,
   LabelsResponseSchema,
+  LanguageOptionSchema,
   ListModelSecurityGroupsResponseSchema,
   ListModelSecurityRuleInstancesResponseSchema,
   ListModelSecurityRulesResponseSchema,
@@ -9410,6 +10081,7 @@ var RedTeamClient = class {
   MGMT_CLIENT_SECRET,
   MGMT_CUSTOMER_APPS_TSG_PATH,
   MGMT_CUSTOMER_APP_PATH,
+  MGMT_DASHBOARD_APPLICATIONS_OVERVIEW_PATH,
   MGMT_DASHBOARD_APPLICATION_PATH,
   MGMT_DASHBOARD_APPLICATION_VIOLATION_BREAKDOWN_PATH,
   MGMT_DEPLOYMENT_PROFILES_PATH,
@@ -9430,6 +10102,8 @@ var RedTeamClient = class {
   MODEL_SEC_DATA_ENDPOINT,
   MODEL_SEC_EVALUATIONS_PATH,
   MODEL_SEC_MGMT_ENDPOINT,
+  MODEL_SEC_MODELS_PATH,
+  MODEL_SEC_MODEL_VERSIONS_PATH,
   MODEL_SEC_PYPI_AUTH_PATH,
   MODEL_SEC_SCANS_PATH,
   MODEL_SEC_SECURITY_GROUPS_PATH,
@@ -9446,7 +10120,9 @@ var RedTeamClient = class {
   MetadataCriterionSchema,
   MetadataSchema,
   ModelConfigurationSchema,
+  ModelListSchema,
   ModelProtectionItemSchema,
+  ModelResponseSchema,
   ModelScanIssueSchema,
   ModelScanStatus,
   ModelSecurityClient,
@@ -9455,12 +10131,15 @@ var RedTeamClient = class {
   ModelSecurityGroupState,
   ModelSecurityGroupUpdateRequestSchema,
   ModelSecurityGroupsClient,
+  ModelSecurityModelsClient,
   ModelSecurityPaginationSchema,
   ModelSecurityRuleInstanceResponseSchema,
   ModelSecurityRuleInstanceUpdateRequestSchema,
   ModelSecurityRuleResponseSchema,
   ModelSecurityRulesClient,
   ModelSecurityScansClient,
+  ModelVersionListSchema,
+  ModelVersionResponseSchema,
   MultiProfileDataNodeSchema,
   MultiProfileDetectionRuleSchema,
   MultiTurnStatefulConfigSchema,
@@ -9505,6 +10184,8 @@ var RedTeamClient = class {
   QuotaDetailsSchema,
   QuotaSummarySchema,
   RED_TEAM_CATEGORIES_PATH,
+  RED_TEAM_CHANNELS_PATH,
+  RED_TEAM_CHANNELS_STATS_PATH,
   RED_TEAM_CLIENT_ID,
   RED_TEAM_CLIENT_SECRET,
   RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH,
@@ -9512,10 +10193,13 @@ var RedTeamClient = class {
   RED_TEAM_DASHBOARD_PATH,
   RED_TEAM_DATA_ENDPOINT,
   RED_TEAM_ERROR_LOG_PATH,
+  RED_TEAM_ERROR_LOG_TARGET_PROFILE_PATH,
   RED_TEAM_EULA_PATH,
   RED_TEAM_INSTANCES_PATH,
+  RED_TEAM_LANGUAGES_PATH,
   RED_TEAM_MGMT_DASHBOARD_PATH,
   RED_TEAM_MGMT_ENDPOINT,
+  RED_TEAM_NETWORK_BROKER_ENDPOINT,
   RED_TEAM_QUOTA_PATH,
   RED_TEAM_REGISTRY_CREDENTIALS_PATH,
   RED_TEAM_REPORT_DYNAMIC_PATH,
@@ -9535,6 +10219,7 @@ var RedTeamClient = class {
   RedTeamErrorType,
   RedTeamEulaClient,
   RedTeamInstancesClient,
+  RedTeamNetworkBrokerClient,
   RedTeamPaginationSchema,
   RedTeamReportsClient,
   RedTeamScansClient,
@@ -9637,6 +10322,7 @@ var RedTeamClient = class {
   TargetType,
   TargetUpdateRequestSchema,
   TcReportSchema,
+  TenantLanguagesResponseSchema,
   TgReportSchema,
   ThreatCategory,
   ThreatScanReportSchema,
@@ -9652,11 +10338,13 @@ var RedTeamClient = class {
   TopicsClient,
   URLExclusionSchema,
   USER_AGENT,
+  UpdateChannelRequestSchema,
   UrlCategorySchema,
   UrlfEntrySchema,
   ValidationErrorSchema,
   Verdict,
   ViolationListSchema,
+  ViolationRemediationSchema,
   ViolationResponseSchema,
   ViolationSeverityCountsSchema,
   WebSocketConnectionParamsSchema,