@cdot65/prisma-airs-sdk 0.4.0 → 0.5.0

package/dist/index.d.cts

@@ -32816,8 +32816,8 @@ declare const MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 5;
 declare const MAX_CONNECTION_POOL_SIZE = 100;
 declare const MAX_NUMBER_OF_RETRIES = 5;
 declare const HTTP_FORCE_RETRY_STATUS_CODES: number[];
-declare const SDK_VERSION = "0.4.0";
-declare const USER_AGENT = "PAN-AIRS/0.4.0-typescript-sdk";
+declare const SDK_VERSION = "0.5.0";
+declare const USER_AGENT = "PAN-AIRS/0.5.0-typescript-sdk";
 declare const DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 declare const DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
 declare const MGMT_CLIENT_ID = "PANW_MGMT_CLIENT_ID";
@@ -32870,6 +32870,21 @@ declare const RED_TEAM_TARGET_PATH = "/v1/target";
 declare const RED_TEAM_CUSTOM_ATTACK_PATH = "/v1/custom-attack";
 declare const RED_TEAM_MGMT_DASHBOARD_PATH = "/v1/dashboard/overview";
 
+/** Snapshot of the current token state (never exposes the actual token). */
+interface TokenInfo {
+    /** Whether a token has been fetched. */
+    hasToken: boolean;
+    /** Whether the token is valid (not expired and outside the pre-expiry buffer). */
+    isValid: boolean;
+    /** Whether the token has passed its expiry time. */
+    isExpired: boolean;
+    /** Whether the token is within the pre-expiry buffer window. */
+    isExpiringSoon: boolean;
+    /** Milliseconds until the token expires (0 if expired or no token). */
+    expiresInMs: number;
+    /** Unix timestamp (ms) when the token expires (0 if no token). */
+    expiresAt: number;
+}
 /** Options for constructing an {@link OAuthClient}. */
 interface OAuthClientOptions {
     /** OAuth2 client ID. */
@@ -32880,6 +32895,10 @@ interface OAuthClientOptions {
     tsgId: string;
     /** OAuth2 token endpoint URL. Defaults to Palo Alto Networks auth endpoint. */
     tokenEndpoint?: string;
+    /** Pre-expiry buffer in ms. Token refreshes this many ms before expiry. Defaults to 30000 (30s). */
+    tokenBufferMs?: number;
+    /** Callback invoked after each successful token refresh with current {@link TokenInfo}. */
+    onTokenRefresh?: (info: TokenInfo) => void;
 }
 /**
  * OAuth2 client_credentials token manager.
@@ -32890,6 +32909,8 @@ declare class OAuthClient {
     private readonly clientId;
     private readonly clientSecret;
     private readonly tsgId;
+    private readonly tokenBufferMs;
+    private readonly onTokenRefresh?;
     private accessToken;
     private expiresAt;
     private pendingFetch;
@@ -32901,6 +32922,19 @@ declare class OAuthClient {
     getToken(): Promise<string>;
     /** Clear the cached token, forcing a fresh fetch on next call. */
     clearToken(): void;
+    /** Check if the current token has passed its expiry time. Returns true if no token exists. */
+    isTokenExpired(): boolean;
+    /**
+     * Check if the token is within the pre-expiry buffer window.
+     * Returns true if no token exists.
+     * @param bufferMs - Custom buffer in ms. Defaults to the configured `tokenBufferMs`.
+     */
+    isTokenExpiringSoon(bufferMs?: number): boolean;
+    /**
+     * Get a snapshot of the current token state without exposing the actual token value.
+     * @returns Current {@link TokenInfo}.
+     */
+    getTokenInfo(): TokenInfo;
     private fetchToken;
 }
 
@@ -33555,4 +33589,4 @@ declare class RedTeamClient {
     getDashboardOverview(): Promise<DashboardOverviewResponse>;
 }
 
-export { AISecSDKException, AI_SEC_API_ENDPOINT, AI_SEC_API_KEY, AI_SEC_API_TOKEN, ASYNC_SCAN_PATH, Action, Action as ActionType, type AgentMeta, AgentMetaSchema, type AiProfile, AiProfileSchema, ApiEndpointType, type AsyncScanObject, AsyncScanObjectSchema, type AsyncScanResponse, AsyncScanResponseSchema, type AttackDetailResponse, AttackDetailResponseSchema, type AttackListItem, AttackListItemSchema, type AttackListOptions, type AttackListResponse, AttackListResponseSchema, type AttackMultiTurnDetailResponse, AttackMultiTurnDetailResponseSchema, type AttackMultiTurnOutput, AttackMultiTurnOutputSchema, type AttackOutput, AttackOutputSchema, AttackStatus, AttackType, AuthType, BEARER, type BaseResponse, BaseResponseSchema, BrandSubCategory, Category, type CategoryModel, CategoryModelSchema, type CategoryReport, CategoryReportSchema, Category as CategoryType, type ComplianceReport, ComplianceReportSchema, ComplianceSubCategory, type ComplianceTechnique, ComplianceTechniqueSchema, Content, type ContentOptions, type CountByName, CountByNameSchema, CountedQuotaEnum, type CreateCustomTopicRequest, CreateCustomTopicRequestSchema, type CreateSecurityProfileRequest, CreateSecurityProfileRequestSchema, type CustomAttackOutput, CustomAttackOutputSchema, type CustomAttackReportResponse, CustomAttackReportResponseSchema, type CustomAttacksListResponse, CustomAttacksListResponseSchema, type CustomJobMetadata, CustomJobMetadataSchema, type CustomPromptCreateRequest, CustomPromptCreateRequestSchema, type CustomPromptList, type CustomPromptListItem, CustomPromptListItemSchema, CustomPromptListSchema, type CustomPromptResponse, CustomPromptResponseSchema, type CustomPromptSetArchiveRequest, CustomPromptSetArchiveRequestSchema, type CustomPromptSetCreateRequest, CustomPromptSetCreateRequestSchema, type CustomPromptSetList, type CustomPromptSetListActive, CustomPromptSetListActiveSchema, type CustomPromptSetListItem, CustomPromptSetListItemSchema, CustomPromptSetListSchema, type CustomPromptSetReference, CustomPromptSetReferenceSchema, type CustomPromptSetResponse, CustomPromptSetResponseSchema, type CustomPromptSetUpdateRequest, CustomPromptSetUpdateRequestSchema, type CustomPromptSetVersionInfo, CustomPromptSetVersionInfoSchema, type CustomPromptUpdateRequest, CustomPromptUpdateRequestSchema, type CustomTopic, type CustomTopicListResponse, CustomTopicListResponseSchema, CustomTopicSchema, DEFAULT_ENDPOINT, DEFAULT_MGMT_ENDPOINT, DEFAULT_MODEL_SEC_DATA_ENDPOINT, DEFAULT_MODEL_SEC_MGMT_ENDPOINT, DEFAULT_RED_TEAM_DATA_ENDPOINT, DEFAULT_RED_TEAM_MGMT_ENDPOINT, DEFAULT_TOKEN_ENDPOINT, type DSDetailResult, DSDetailResultSchema, type DSResultMetadata, DSResultMetadataSchema, type DashboardOverviewResponse, DashboardOverviewResponseSchema, DateRangeFilter, type DeleteProfileConflict, DeleteProfileConflictSchema, type DeleteProfileResponse, DeleteProfileResponseSchema, type DeleteTopicConflict, DeleteTopicConflictSchema, type DeleteTopicResponse, DeleteTopicResponseSchema, type DetectionServiceResult, DetectionServiceResultSchema, type DlpReport, DlpReportSchema, type DynamicJobMetadata, DynamicJobMetadataSchema, type DynamicJobReport, DynamicJobReportSchema, type DynamicJobReportStats, DynamicJobReportStatsSchema, ErrorCodes, type ErrorLog, type ErrorLogListResponse, ErrorLogListResponseSchema, ErrorLogSchema, type ErrorResponse, ErrorResponseSchema, ErrorSource, ErrorType, EvalOutcome, type EvalSummary, EvalSummarySchema, FileFormat, type FileList, FileListSchema, type FileResponse, FileResponseSchema, type FileScanData, FileScanDataSchema, FileScanResult, FileType, type Goal, type GoalListOptions, type GoalListResponse, GoalListResponseSchema, GoalSchema, GoalType, GoalTypeQueryParam, GuardrailAction, HEADER_API_KEY, HEADER_AUTH_TOKEN, type HTTPValidationError, HTTPValidationErrorSchema, HTTP_FORCE_RETRY_STATUS_CODES, type IODetected, IODetectedSchema, type InitOptions, type JobAbortResponse, JobAbortResponseSchema, type JobCreateRequest, JobCreateRequestSchema, type JobListResponse, JobListResponseSchema, type JobResponse, JobResponseSchema, JobStatus, JobStatusFilter, type JobTimeRecord, JobTimeRecordSchema, JobType, type Label, type LabelKeyList, LabelKeyListSchema, LabelSchema, type LabelValueList, LabelValueListSchema, type LabelsCreateRequest, LabelsCreateRequestSchema, type LabelsResponse, LabelsResponseSchema, type ListModelSecurityGroupsResponse, ListModelSecurityGroupsResponseSchema, type ListModelSecurityRuleInstancesResponse, ListModelSecurityRuleInstancesResponseSchema, type ListModelSecurityRulesResponse, ListModelSecurityRulesResponseSchema, MAX_AI_PROFILE_NAME_LENGTH, MAX_API_KEY_LENGTH, MAX_CONNECTION_POOL_SIZE, MAX_CONTENT_CONTEXT_LENGTH, MAX_CONTENT_PROMPT_LENGTH, MAX_CONTENT_RESPONSE_LENGTH, MAX_NUMBER_OF_BATCH_SCAN_OBJECTS, MAX_NUMBER_OF_REPORT_IDS, MAX_NUMBER_OF_RETRIES, MAX_NUMBER_OF_SCAN_IDS, MAX_REPORT_ID_STR_LENGTH, MAX_SCAN_ID_STR_LENGTH, MAX_SESSION_ID_STR_LENGTH, MAX_TOKEN_LENGTH, MAX_TRANSACTION_ID_STR_LENGTH, MGMT_CLIENT_ID, MGMT_CLIENT_SECRET, MGMT_ENDPOINT, MGMT_PROFILES_TSG_PATH, MGMT_PROFILE_PATH, MGMT_TOKEN_ENDPOINT, MGMT_TOPICS_TSG_PATH, MGMT_TOPIC_FORCE_PATH, MGMT_TOPIC_PATH, MGMT_TSG_ID, MODEL_SEC_CLIENT_ID, MODEL_SEC_CLIENT_SECRET, MODEL_SEC_DATA_ENDPOINT, MODEL_SEC_EVALUATIONS_PATH, MODEL_SEC_MGMT_ENDPOINT, MODEL_SEC_PYPI_AUTH_PATH, MODEL_SEC_SCANS_PATH, MODEL_SEC_SECURITY_GROUPS_PATH, MODEL_SEC_SECURITY_RULES_PATH, MODEL_SEC_TOKEN_ENDPOINT, MODEL_SEC_TSG_ID, MODEL_SEC_VIOLATIONS_PATH, ManagementClient, type ManagementClientOptions, type MaskedData, MaskedDataSchema, type Metadata, MetadataSchema, type ModelScanIssue, ModelScanIssueSchema, ModelScanStatus, ModelSecurityClient, type ModelSecurityClientOptions, type ModelSecurityFileListOptions, type ModelSecurityGroupCreateRequest, ModelSecurityGroupCreateRequestSchema, type ModelSecurityGroupResponse, ModelSecurityGroupResponseSchema, ModelSecurityGroupState, type ModelSecurityGroupUpdateRequest, ModelSecurityGroupUpdateRequestSchema, ModelSecurityGroupsClient, type ModelSecurityListOptions, type ModelSecurityPagination, ModelSecurityPaginationSchema, type ModelSecurityRuleInstanceResponse, ModelSecurityRuleInstanceResponseSchema, type ModelSecurityRuleInstanceUpdateRequest, ModelSecurityRuleInstanceUpdateRequestSchema, type ModelSecurityRuleResponse, ModelSecurityRuleResponseSchema, ModelSecurityRulesClient, type ModelSecurityScanListOptions, ModelSecurityScansClient, PAYLOAD_HASH, type PaginationOptions, type Policy, PolicySchema, PolicyType, type PrerequisiteModel, PrerequisiteModelSchema, ProfilesClient, ProfilingStatus, type PromptDetailResponse, PromptDetailResponseSchema, type PromptDetected, PromptDetectedSchema, type PromptDetectionDetails, PromptDetectionDetailsSchema, type PromptListOptions, type PromptSetListOptions, type PromptSetStats, PromptSetStatsSchema, type PromptSetSummary, PromptSetSummarySchema, type PromptSetsReportResponse, PromptSetsReportResponseSchema, type PropertyAssignment, PropertyAssignmentSchema, type PropertyDefinition, PropertyDefinitionSchema, type PropertyNameCreateRequest, PropertyNameCreateRequestSchema, type PropertyNamesListResponse, PropertyNamesListResponseSchema, type PropertyStatistic, PropertyStatisticSchema, type PropertyValueCreateRequest, PropertyValueCreateRequestSchema, type PropertyValueStatistic, PropertyValueStatisticSchema, type PropertyValuesMultipleResponse, PropertyValuesMultipleResponseSchema, type PropertyValuesResponse, PropertyValuesResponseSchema, type PyPIAuthResponse, PyPIAuthResponseSchema, type QuotaDetails, QuotaDetailsSchema, type QuotaSummary, QuotaSummarySchema, RED_TEAM_CATEGORIES_PATH, RED_TEAM_CLIENT_ID, RED_TEAM_CLIENT_SECRET, RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH, RED_TEAM_CUSTOM_ATTACK_PATH, RED_TEAM_DASHBOARD_PATH, RED_TEAM_DATA_ENDPOINT, RED_TEAM_ERROR_LOG_PATH, RED_TEAM_MGMT_DASHBOARD_PATH, RED_TEAM_MGMT_ENDPOINT, RED_TEAM_QUOTA_PATH, RED_TEAM_REPORT_DYNAMIC_PATH, RED_TEAM_REPORT_PATH, RED_TEAM_REPORT_STATIC_PATH, RED_TEAM_SCAN_PATH, RED_TEAM_SENTIMENT_PATH, RED_TEAM_TARGET_PATH, RED_TEAM_TOKEN_ENDPOINT, RED_TEAM_TSG_ID, RedTeamCategory, RedTeamClient, type RedTeamClientOptions, RedTeamCustomAttackReportsClient, RedTeamCustomAttacksClient, RedTeamErrorType, type RedTeamListOptions, type RedTeamPagination, RedTeamPaginationSchema, RedTeamReportsClient, type RedTeamScanListOptions, RedTeamScansClient, RedTeamTargetsClient, type RemediationDetail, RemediationDetailSchema, type RemediationResponse, RemediationResponseSchema, type ResponseDetected, ResponseDetectedSchema, type ResponseDetectionDetails, ResponseDetectionDetailsSchema, ResponseMode, type RiskLevel, RiskLevelSchema, RiskRating, type RuleConfiguration, RuleConfigurationSchema, type RuleEditableField, type RuleEditableFieldDropdown, RuleEditableFieldDropdownSchema, RuleEditableFieldSchema, RuleEditableFieldType, type RuleEvaluationList, RuleEvaluationListSchema, type RuleEvaluationResponse, RuleEvaluationResponseSchema, RuleEvaluationResult, RuleFieldValueKey, type RuleRemediation, RuleRemediationSchema, RuleState, RuleType, type RuntimeSecurityPolicy, RuntimeSecurityPolicySchema, type RuntimeSecurityProfileResponse, RuntimeSecurityProfileResponseSchema, SCAN_REPORTS_PATH, SCAN_RESULTS_PATH, SDK_VERSION, SYNC_SCAN_PATH, SafetySubCategory, type ScanBaseResponse, ScanBaseResponseSchema, type ScanCreateRequest, ScanCreateRequestSchema, type ScanDetails, ScanDetailsSchema, type ScanIdResult, ScanIdResultSchema, type ScanList, ScanListSchema, ScanOrigin, type ScanRequest, type ScanRequestContentsInner, ScanRequestContentsInnerSchema, ScanRequestSchema, type ScanResponse, ScanResponseSchema, type ScanStatisticsResponse, ScanStatisticsResponseSchema, type ScanSummary, ScanSummarySchema, Scanner, type ScoreTrendResponse, ScoreTrendResponseSchema, type ScoreTrendSeries, ScoreTrendSeriesSchema, type SecurityProfile, type SecurityProfileListResponse, SecurityProfileListResponseSchema, SecurityProfileSchema, SecuritySubCategory, type SentimentRequest, SentimentRequestSchema, type SentimentResponse, SentimentResponseSchema, SeverityFilter, type SeverityReport, SeverityReportSchema, type SeverityStats, SeverityStatsSchema, SortByDateField, SortByFileField, SortDirection, SourceType, type StaticJobMetadata, StaticJobMetadataSchema, type StaticJobRemediation, type StaticJobRemediationRecommendation, StaticJobRemediationRecommendationSchema, StaticJobRemediationSchema, type StaticJobReport, StaticJobReportSchema, type StaticJobReportStats, StaticJobReportStatsSchema, StatusQueryParam, type StreamDetailResponse, StreamDetailResponseSchema, type StreamIterationData, StreamIterationDataSchema, type StreamListResponse, StreamListResponseSchema, StreamType, type SubCategoryModel, SubCategoryModelSchema, type SubCategoryStats, SubCategoryStatsSchema, type SyncScanOptions, type TargetAdditionalContext, TargetAdditionalContextSchema, type TargetBackground, TargetBackgroundSchema, TargetConnectionType, type TargetContextUpdate, TargetContextUpdateSchema, type TargetCreateRequest, TargetCreateRequestSchema, type TargetJobRequest, TargetJobRequestSchema, type TargetList, type TargetListItem, TargetListItemSchema, type TargetListOptions, TargetListSchema, type TargetMetadata, TargetMetadataSchema, type TargetProbeRequest, TargetProbeRequestSchema, type TargetProfileResponse, TargetProfileResponseSchema, type TargetReference, TargetReferenceSchema, type TargetResponse, TargetResponseSchema, TargetStatus, TargetType, type TargetUpdateRequest, TargetUpdateRequestSchema, ThreatCategory, type ThreatScanReport, ThreatScanReportSchema, type ToolDetected, ToolDetectedSchema, type ToolEvent, type ToolEventMetadata, ToolEventMetadataSchema, ToolEventSchema, TopicsClient, USER_AGENT, type UrlfEntry, UrlfEntrySchema, type ValidationError, ValidationErrorSchema, Verdict, Verdict as VerdictType, type ViolationList, ViolationListSchema, type ViolationResponse, ViolationResponseSchema, globalConfiguration, init };
+export { AISecSDKException, AI_SEC_API_ENDPOINT, AI_SEC_API_KEY, AI_SEC_API_TOKEN, ASYNC_SCAN_PATH, Action, Action as ActionType, type AgentMeta, AgentMetaSchema, type AiProfile, AiProfileSchema, ApiEndpointType, type AsyncScanObject, AsyncScanObjectSchema, type AsyncScanResponse, AsyncScanResponseSchema, type AttackDetailResponse, AttackDetailResponseSchema, type AttackListItem, AttackListItemSchema, type AttackListOptions, type AttackListResponse, AttackListResponseSchema, type AttackMultiTurnDetailResponse, AttackMultiTurnDetailResponseSchema, type AttackMultiTurnOutput, AttackMultiTurnOutputSchema, type AttackOutput, AttackOutputSchema, AttackStatus, AttackType, AuthType, BEARER, type BaseResponse, BaseResponseSchema, BrandSubCategory, Category, type CategoryModel, CategoryModelSchema, type CategoryReport, CategoryReportSchema, Category as CategoryType, type ComplianceReport, ComplianceReportSchema, ComplianceSubCategory, type ComplianceTechnique, ComplianceTechniqueSchema, Content, type ContentOptions, type CountByName, CountByNameSchema, CountedQuotaEnum, type CreateCustomTopicRequest, CreateCustomTopicRequestSchema, type CreateSecurityProfileRequest, CreateSecurityProfileRequestSchema, type CustomAttackOutput, CustomAttackOutputSchema, type CustomAttackReportResponse, CustomAttackReportResponseSchema, type CustomAttacksListResponse, CustomAttacksListResponseSchema, type CustomJobMetadata, CustomJobMetadataSchema, type CustomPromptCreateRequest, CustomPromptCreateRequestSchema, type CustomPromptList, type CustomPromptListItem, CustomPromptListItemSchema, CustomPromptListSchema, type CustomPromptResponse, CustomPromptResponseSchema, type CustomPromptSetArchiveRequest, CustomPromptSetArchiveRequestSchema, type CustomPromptSetCreateRequest, CustomPromptSetCreateRequestSchema, type CustomPromptSetList, type CustomPromptSetListActive, CustomPromptSetListActiveSchema, type CustomPromptSetListItem, CustomPromptSetListItemSchema, CustomPromptSetListSchema, type CustomPromptSetReference, CustomPromptSetReferenceSchema, type CustomPromptSetResponse, CustomPromptSetResponseSchema, type CustomPromptSetUpdateRequest, CustomPromptSetUpdateRequestSchema, type CustomPromptSetVersionInfo, CustomPromptSetVersionInfoSchema, type CustomPromptUpdateRequest, CustomPromptUpdateRequestSchema, type CustomTopic, type CustomTopicListResponse, CustomTopicListResponseSchema, CustomTopicSchema, DEFAULT_ENDPOINT, DEFAULT_MGMT_ENDPOINT, DEFAULT_MODEL_SEC_DATA_ENDPOINT, DEFAULT_MODEL_SEC_MGMT_ENDPOINT, DEFAULT_RED_TEAM_DATA_ENDPOINT, DEFAULT_RED_TEAM_MGMT_ENDPOINT, DEFAULT_TOKEN_ENDPOINT, type DSDetailResult, DSDetailResultSchema, type DSResultMetadata, DSResultMetadataSchema, type DashboardOverviewResponse, DashboardOverviewResponseSchema, DateRangeFilter, type DeleteProfileConflict, DeleteProfileConflictSchema, type DeleteProfileResponse, DeleteProfileResponseSchema, type DeleteTopicConflict, DeleteTopicConflictSchema, type DeleteTopicResponse, DeleteTopicResponseSchema, type DetectionServiceResult, DetectionServiceResultSchema, type DlpReport, DlpReportSchema, type DynamicJobMetadata, DynamicJobMetadataSchema, type DynamicJobReport, DynamicJobReportSchema, type DynamicJobReportStats, DynamicJobReportStatsSchema, ErrorCodes, type ErrorLog, type ErrorLogListResponse, ErrorLogListResponseSchema, ErrorLogSchema, type ErrorResponse, ErrorResponseSchema, ErrorSource, ErrorType, EvalOutcome, type EvalSummary, EvalSummarySchema, FileFormat, type FileList, FileListSchema, type FileResponse, FileResponseSchema, type FileScanData, FileScanDataSchema, FileScanResult, FileType, type Goal, type GoalListOptions, type GoalListResponse, GoalListResponseSchema, GoalSchema, GoalType, GoalTypeQueryParam, GuardrailAction, HEADER_API_KEY, HEADER_AUTH_TOKEN, type HTTPValidationError, HTTPValidationErrorSchema, HTTP_FORCE_RETRY_STATUS_CODES, type IODetected, IODetectedSchema, type InitOptions, type JobAbortResponse, JobAbortResponseSchema, type JobCreateRequest, JobCreateRequestSchema, type JobListResponse, JobListResponseSchema, type JobResponse, JobResponseSchema, JobStatus, JobStatusFilter, type JobTimeRecord, JobTimeRecordSchema, JobType, type Label, type LabelKeyList, LabelKeyListSchema, LabelSchema, type LabelValueList, LabelValueListSchema, type LabelsCreateRequest, LabelsCreateRequestSchema, type LabelsResponse, LabelsResponseSchema, type ListModelSecurityGroupsResponse, ListModelSecurityGroupsResponseSchema, type ListModelSecurityRuleInstancesResponse, ListModelSecurityRuleInstancesResponseSchema, type ListModelSecurityRulesResponse, ListModelSecurityRulesResponseSchema, MAX_AI_PROFILE_NAME_LENGTH, MAX_API_KEY_LENGTH, MAX_CONNECTION_POOL_SIZE, MAX_CONTENT_CONTEXT_LENGTH, MAX_CONTENT_PROMPT_LENGTH, MAX_CONTENT_RESPONSE_LENGTH, MAX_NUMBER_OF_BATCH_SCAN_OBJECTS, MAX_NUMBER_OF_REPORT_IDS, MAX_NUMBER_OF_RETRIES, MAX_NUMBER_OF_SCAN_IDS, MAX_REPORT_ID_STR_LENGTH, MAX_SCAN_ID_STR_LENGTH, MAX_SESSION_ID_STR_LENGTH, MAX_TOKEN_LENGTH, MAX_TRANSACTION_ID_STR_LENGTH, MGMT_CLIENT_ID, MGMT_CLIENT_SECRET, MGMT_ENDPOINT, MGMT_PROFILES_TSG_PATH, MGMT_PROFILE_PATH, MGMT_TOKEN_ENDPOINT, MGMT_TOPICS_TSG_PATH, MGMT_TOPIC_FORCE_PATH, MGMT_TOPIC_PATH, MGMT_TSG_ID, MODEL_SEC_CLIENT_ID, MODEL_SEC_CLIENT_SECRET, MODEL_SEC_DATA_ENDPOINT, MODEL_SEC_EVALUATIONS_PATH, MODEL_SEC_MGMT_ENDPOINT, MODEL_SEC_PYPI_AUTH_PATH, MODEL_SEC_SCANS_PATH, MODEL_SEC_SECURITY_GROUPS_PATH, MODEL_SEC_SECURITY_RULES_PATH, MODEL_SEC_TOKEN_ENDPOINT, MODEL_SEC_TSG_ID, MODEL_SEC_VIOLATIONS_PATH, ManagementClient, type ManagementClientOptions, type MaskedData, MaskedDataSchema, type Metadata, MetadataSchema, type ModelScanIssue, ModelScanIssueSchema, ModelScanStatus, ModelSecurityClient, type ModelSecurityClientOptions, type ModelSecurityFileListOptions, type ModelSecurityGroupCreateRequest, ModelSecurityGroupCreateRequestSchema, type ModelSecurityGroupResponse, ModelSecurityGroupResponseSchema, ModelSecurityGroupState, type ModelSecurityGroupUpdateRequest, ModelSecurityGroupUpdateRequestSchema, ModelSecurityGroupsClient, type ModelSecurityListOptions, type ModelSecurityPagination, ModelSecurityPaginationSchema, type ModelSecurityRuleInstanceResponse, ModelSecurityRuleInstanceResponseSchema, type ModelSecurityRuleInstanceUpdateRequest, ModelSecurityRuleInstanceUpdateRequestSchema, type ModelSecurityRuleResponse, ModelSecurityRuleResponseSchema, ModelSecurityRulesClient, type ModelSecurityScanListOptions, ModelSecurityScansClient, OAuthClient, type OAuthClientOptions, PAYLOAD_HASH, type PaginationOptions, type Policy, PolicySchema, PolicyType, type PrerequisiteModel, PrerequisiteModelSchema, ProfilesClient, ProfilingStatus, type PromptDetailResponse, PromptDetailResponseSchema, type PromptDetected, PromptDetectedSchema, type PromptDetectionDetails, PromptDetectionDetailsSchema, type PromptListOptions, type PromptSetListOptions, type PromptSetStats, PromptSetStatsSchema, type PromptSetSummary, PromptSetSummarySchema, type PromptSetsReportResponse, PromptSetsReportResponseSchema, type PropertyAssignment, PropertyAssignmentSchema, type PropertyDefinition, PropertyDefinitionSchema, type PropertyNameCreateRequest, PropertyNameCreateRequestSchema, type PropertyNamesListResponse, PropertyNamesListResponseSchema, type PropertyStatistic, PropertyStatisticSchema, type PropertyValueCreateRequest, PropertyValueCreateRequestSchema, type PropertyValueStatistic, PropertyValueStatisticSchema, type PropertyValuesMultipleResponse, PropertyValuesMultipleResponseSchema, type PropertyValuesResponse, PropertyValuesResponseSchema, type PyPIAuthResponse, PyPIAuthResponseSchema, type QuotaDetails, QuotaDetailsSchema, type QuotaSummary, QuotaSummarySchema, RED_TEAM_CATEGORIES_PATH, RED_TEAM_CLIENT_ID, RED_TEAM_CLIENT_SECRET, RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH, RED_TEAM_CUSTOM_ATTACK_PATH, RED_TEAM_DASHBOARD_PATH, RED_TEAM_DATA_ENDPOINT, RED_TEAM_ERROR_LOG_PATH, RED_TEAM_MGMT_DASHBOARD_PATH, RED_TEAM_MGMT_ENDPOINT, RED_TEAM_QUOTA_PATH, RED_TEAM_REPORT_DYNAMIC_PATH, RED_TEAM_REPORT_PATH, RED_TEAM_REPORT_STATIC_PATH, RED_TEAM_SCAN_PATH, RED_TEAM_SENTIMENT_PATH, RED_TEAM_TARGET_PATH, RED_TEAM_TOKEN_ENDPOINT, RED_TEAM_TSG_ID, RedTeamCategory, RedTeamClient, type RedTeamClientOptions, RedTeamCustomAttackReportsClient, RedTeamCustomAttacksClient, RedTeamErrorType, type RedTeamListOptions, type RedTeamPagination, RedTeamPaginationSchema, RedTeamReportsClient, type RedTeamScanListOptions, RedTeamScansClient, RedTeamTargetsClient, type RemediationDetail, RemediationDetailSchema, type RemediationResponse, RemediationResponseSchema, type ResponseDetected, ResponseDetectedSchema, type ResponseDetectionDetails, ResponseDetectionDetailsSchema, ResponseMode, type RiskLevel, RiskLevelSchema, RiskRating, type RuleConfiguration, RuleConfigurationSchema, type RuleEditableField, type RuleEditableFieldDropdown, RuleEditableFieldDropdownSchema, RuleEditableFieldSchema, RuleEditableFieldType, type RuleEvaluationList, RuleEvaluationListSchema, type RuleEvaluationResponse, RuleEvaluationResponseSchema, RuleEvaluationResult, RuleFieldValueKey, type RuleRemediation, RuleRemediationSchema, RuleState, RuleType, type RuntimeSecurityPolicy, RuntimeSecurityPolicySchema, type RuntimeSecurityProfileResponse, RuntimeSecurityProfileResponseSchema, SCAN_REPORTS_PATH, SCAN_RESULTS_PATH, SDK_VERSION, SYNC_SCAN_PATH, SafetySubCategory, type ScanBaseResponse, ScanBaseResponseSchema, type ScanCreateRequest, ScanCreateRequestSchema, type ScanDetails, ScanDetailsSchema, type ScanIdResult, ScanIdResultSchema, type ScanList, ScanListSchema, ScanOrigin, type ScanRequest, type ScanRequestContentsInner, ScanRequestContentsInnerSchema, ScanRequestSchema, type ScanResponse, ScanResponseSchema, type ScanStatisticsResponse, ScanStatisticsResponseSchema, type ScanSummary, ScanSummarySchema, Scanner, type ScoreTrendResponse, ScoreTrendResponseSchema, type ScoreTrendSeries, ScoreTrendSeriesSchema, type SecurityProfile, type SecurityProfileListResponse, SecurityProfileListResponseSchema, SecurityProfileSchema, SecuritySubCategory, type SentimentRequest, SentimentRequestSchema, type SentimentResponse, SentimentResponseSchema, SeverityFilter, type SeverityReport, SeverityReportSchema, type SeverityStats, SeverityStatsSchema, SortByDateField, SortByFileField, SortDirection, SourceType, type StaticJobMetadata, StaticJobMetadataSchema, type StaticJobRemediation, type StaticJobRemediationRecommendation, StaticJobRemediationRecommendationSchema, StaticJobRemediationSchema, type StaticJobReport, StaticJobReportSchema, type StaticJobReportStats, StaticJobReportStatsSchema, StatusQueryParam, type StreamDetailResponse, StreamDetailResponseSchema, type StreamIterationData, StreamIterationDataSchema, type StreamListResponse, StreamListResponseSchema, StreamType, type SubCategoryModel, SubCategoryModelSchema, type SubCategoryStats, SubCategoryStatsSchema, type SyncScanOptions, type TargetAdditionalContext, TargetAdditionalContextSchema, type TargetBackground, TargetBackgroundSchema, TargetConnectionType, type TargetContextUpdate, TargetContextUpdateSchema, type TargetCreateRequest, TargetCreateRequestSchema, type TargetJobRequest, TargetJobRequestSchema, type TargetList, type TargetListItem, TargetListItemSchema, type TargetListOptions, TargetListSchema, type TargetMetadata, TargetMetadataSchema, type TargetProbeRequest, TargetProbeRequestSchema, type TargetProfileResponse, TargetProfileResponseSchema, type TargetReference, TargetReferenceSchema, type TargetResponse, TargetResponseSchema, TargetStatus, TargetType, type TargetUpdateRequest, TargetUpdateRequestSchema, ThreatCategory, type ThreatScanReport, ThreatScanReportSchema, type TokenInfo, type ToolDetected, ToolDetectedSchema, type ToolEvent, type ToolEventMetadata, ToolEventMetadataSchema, ToolEventSchema, TopicsClient, USER_AGENT, type UrlfEntry, UrlfEntrySchema, type ValidationError, ValidationErrorSchema, Verdict, Verdict as VerdictType, type ViolationList, ViolationListSchema, type ViolationResponse, ViolationResponseSchema, globalConfiguration, init };

package/dist/index.d.ts

@@ -32816,8 +32816,8 @@ declare const MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 5;
 declare const MAX_CONNECTION_POOL_SIZE = 100;
 declare const MAX_NUMBER_OF_RETRIES = 5;
 declare const HTTP_FORCE_RETRY_STATUS_CODES: number[];
-declare const SDK_VERSION = "0.4.0";
-declare const USER_AGENT = "PAN-AIRS/0.4.0-typescript-sdk";
+declare const SDK_VERSION = "0.5.0";
+declare const USER_AGENT = "PAN-AIRS/0.5.0-typescript-sdk";
 declare const DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 declare const DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
 declare const MGMT_CLIENT_ID = "PANW_MGMT_CLIENT_ID";
@@ -32870,6 +32870,21 @@ declare const RED_TEAM_TARGET_PATH = "/v1/target";
 declare const RED_TEAM_CUSTOM_ATTACK_PATH = "/v1/custom-attack";
 declare const RED_TEAM_MGMT_DASHBOARD_PATH = "/v1/dashboard/overview";
 
+/** Snapshot of the current token state (never exposes the actual token). */
+interface TokenInfo {
+    /** Whether a token has been fetched. */
+    hasToken: boolean;
+    /** Whether the token is valid (not expired and outside the pre-expiry buffer). */
+    isValid: boolean;
+    /** Whether the token has passed its expiry time. */
+    isExpired: boolean;
+    /** Whether the token is within the pre-expiry buffer window. */
+    isExpiringSoon: boolean;
+    /** Milliseconds until the token expires (0 if expired or no token). */
+    expiresInMs: number;
+    /** Unix timestamp (ms) when the token expires (0 if no token). */
+    expiresAt: number;
+}
 /** Options for constructing an {@link OAuthClient}. */
 interface OAuthClientOptions {
     /** OAuth2 client ID. */
@@ -32880,6 +32895,10 @@ interface OAuthClientOptions {
     tsgId: string;
     /** OAuth2 token endpoint URL. Defaults to Palo Alto Networks auth endpoint. */
     tokenEndpoint?: string;
+    /** Pre-expiry buffer in ms. Token refreshes this many ms before expiry. Defaults to 30000 (30s). */
+    tokenBufferMs?: number;
+    /** Callback invoked after each successful token refresh with current {@link TokenInfo}. */
+    onTokenRefresh?: (info: TokenInfo) => void;
 }
 /**
  * OAuth2 client_credentials token manager.
@@ -32890,6 +32909,8 @@ declare class OAuthClient {
     private readonly clientId;
     private readonly clientSecret;
     private readonly tsgId;
+    private readonly tokenBufferMs;
+    private readonly onTokenRefresh?;
     private accessToken;
     private expiresAt;
     private pendingFetch;
@@ -32901,6 +32922,19 @@ declare class OAuthClient {
     getToken(): Promise<string>;
     /** Clear the cached token, forcing a fresh fetch on next call. */
     clearToken(): void;
+    /** Check if the current token has passed its expiry time. Returns true if no token exists. */
+    isTokenExpired(): boolean;
+    /**
+     * Check if the token is within the pre-expiry buffer window.
+     * Returns true if no token exists.
+     * @param bufferMs - Custom buffer in ms. Defaults to the configured `tokenBufferMs`.
+     */
+    isTokenExpiringSoon(bufferMs?: number): boolean;
+    /**
+     * Get a snapshot of the current token state without exposing the actual token value.
+     * @returns Current {@link TokenInfo}.
+     */
+    getTokenInfo(): TokenInfo;
     private fetchToken;
 }
 
@@ -33555,4 +33589,4 @@ declare class RedTeamClient {
     getDashboardOverview(): Promise<DashboardOverviewResponse>;
 }
 
-export { AISecSDKException, AI_SEC_API_ENDPOINT, AI_SEC_API_KEY, AI_SEC_API_TOKEN, ASYNC_SCAN_PATH, Action, Action as ActionType, type AgentMeta, AgentMetaSchema, type AiProfile, AiProfileSchema, ApiEndpointType, type AsyncScanObject, AsyncScanObjectSchema, type AsyncScanResponse, AsyncScanResponseSchema, type AttackDetailResponse, AttackDetailResponseSchema, type AttackListItem, AttackListItemSchema, type AttackListOptions, type AttackListResponse, AttackListResponseSchema, type AttackMultiTurnDetailResponse, AttackMultiTurnDetailResponseSchema, type AttackMultiTurnOutput, AttackMultiTurnOutputSchema, type AttackOutput, AttackOutputSchema, AttackStatus, AttackType, AuthType, BEARER, type BaseResponse, BaseResponseSchema, BrandSubCategory, Category, type CategoryModel, CategoryModelSchema, type CategoryReport, CategoryReportSchema, Category as CategoryType, type ComplianceReport, ComplianceReportSchema, ComplianceSubCategory, type ComplianceTechnique, ComplianceTechniqueSchema, Content, type ContentOptions, type CountByName, CountByNameSchema, CountedQuotaEnum, type CreateCustomTopicRequest, CreateCustomTopicRequestSchema, type CreateSecurityProfileRequest, CreateSecurityProfileRequestSchema, type CustomAttackOutput, CustomAttackOutputSchema, type CustomAttackReportResponse, CustomAttackReportResponseSchema, type CustomAttacksListResponse, CustomAttacksListResponseSchema, type CustomJobMetadata, CustomJobMetadataSchema, type CustomPromptCreateRequest, CustomPromptCreateRequestSchema, type CustomPromptList, type CustomPromptListItem, CustomPromptListItemSchema, CustomPromptListSchema, type CustomPromptResponse, CustomPromptResponseSchema, type CustomPromptSetArchiveRequest, CustomPromptSetArchiveRequestSchema, type CustomPromptSetCreateRequest, CustomPromptSetCreateRequestSchema, type CustomPromptSetList, type CustomPromptSetListActive, CustomPromptSetListActiveSchema, type CustomPromptSetListItem, CustomPromptSetListItemSchema, CustomPromptSetListSchema, type CustomPromptSetReference, CustomPromptSetReferenceSchema, type CustomPromptSetResponse, CustomPromptSetResponseSchema, type CustomPromptSetUpdateRequest, CustomPromptSetUpdateRequestSchema, type CustomPromptSetVersionInfo, CustomPromptSetVersionInfoSchema, type CustomPromptUpdateRequest, CustomPromptUpdateRequestSchema, type CustomTopic, type CustomTopicListResponse, CustomTopicListResponseSchema, CustomTopicSchema, DEFAULT_ENDPOINT, DEFAULT_MGMT_ENDPOINT, DEFAULT_MODEL_SEC_DATA_ENDPOINT, DEFAULT_MODEL_SEC_MGMT_ENDPOINT, DEFAULT_RED_TEAM_DATA_ENDPOINT, DEFAULT_RED_TEAM_MGMT_ENDPOINT, DEFAULT_TOKEN_ENDPOINT, type DSDetailResult, DSDetailResultSchema, type DSResultMetadata, DSResultMetadataSchema, type DashboardOverviewResponse, DashboardOverviewResponseSchema, DateRangeFilter, type DeleteProfileConflict, DeleteProfileConflictSchema, type DeleteProfileResponse, DeleteProfileResponseSchema, type DeleteTopicConflict, DeleteTopicConflictSchema, type DeleteTopicResponse, DeleteTopicResponseSchema, type DetectionServiceResult, DetectionServiceResultSchema, type DlpReport, DlpReportSchema, type DynamicJobMetadata, DynamicJobMetadataSchema, type DynamicJobReport, DynamicJobReportSchema, type DynamicJobReportStats, DynamicJobReportStatsSchema, ErrorCodes, type ErrorLog, type ErrorLogListResponse, ErrorLogListResponseSchema, ErrorLogSchema, type ErrorResponse, ErrorResponseSchema, ErrorSource, ErrorType, EvalOutcome, type EvalSummary, EvalSummarySchema, FileFormat, type FileList, FileListSchema, type FileResponse, FileResponseSchema, type FileScanData, FileScanDataSchema, FileScanResult, FileType, type Goal, type GoalListOptions, type GoalListResponse, GoalListResponseSchema, GoalSchema, GoalType, GoalTypeQueryParam, GuardrailAction, HEADER_API_KEY, HEADER_AUTH_TOKEN, type HTTPValidationError, HTTPValidationErrorSchema, HTTP_FORCE_RETRY_STATUS_CODES, type IODetected, IODetectedSchema, type InitOptions, type JobAbortResponse, JobAbortResponseSchema, type JobCreateRequest, JobCreateRequestSchema, type JobListResponse, JobListResponseSchema, type JobResponse, JobResponseSchema, JobStatus, JobStatusFilter, type JobTimeRecord, JobTimeRecordSchema, JobType, type Label, type LabelKeyList, LabelKeyListSchema, LabelSchema, type LabelValueList, LabelValueListSchema, type LabelsCreateRequest, LabelsCreateRequestSchema, type LabelsResponse, LabelsResponseSchema, type ListModelSecurityGroupsResponse, ListModelSecurityGroupsResponseSchema, type ListModelSecurityRuleInstancesResponse, ListModelSecurityRuleInstancesResponseSchema, type ListModelSecurityRulesResponse, ListModelSecurityRulesResponseSchema, MAX_AI_PROFILE_NAME_LENGTH, MAX_API_KEY_LENGTH, MAX_CONNECTION_POOL_SIZE, MAX_CONTENT_CONTEXT_LENGTH, MAX_CONTENT_PROMPT_LENGTH, MAX_CONTENT_RESPONSE_LENGTH, MAX_NUMBER_OF_BATCH_SCAN_OBJECTS, MAX_NUMBER_OF_REPORT_IDS, MAX_NUMBER_OF_RETRIES, MAX_NUMBER_OF_SCAN_IDS, MAX_REPORT_ID_STR_LENGTH, MAX_SCAN_ID_STR_LENGTH, MAX_SESSION_ID_STR_LENGTH, MAX_TOKEN_LENGTH, MAX_TRANSACTION_ID_STR_LENGTH, MGMT_CLIENT_ID, MGMT_CLIENT_SECRET, MGMT_ENDPOINT, MGMT_PROFILES_TSG_PATH, MGMT_PROFILE_PATH, MGMT_TOKEN_ENDPOINT, MGMT_TOPICS_TSG_PATH, MGMT_TOPIC_FORCE_PATH, MGMT_TOPIC_PATH, MGMT_TSG_ID, MODEL_SEC_CLIENT_ID, MODEL_SEC_CLIENT_SECRET, MODEL_SEC_DATA_ENDPOINT, MODEL_SEC_EVALUATIONS_PATH, MODEL_SEC_MGMT_ENDPOINT, MODEL_SEC_PYPI_AUTH_PATH, MODEL_SEC_SCANS_PATH, MODEL_SEC_SECURITY_GROUPS_PATH, MODEL_SEC_SECURITY_RULES_PATH, MODEL_SEC_TOKEN_ENDPOINT, MODEL_SEC_TSG_ID, MODEL_SEC_VIOLATIONS_PATH, ManagementClient, type ManagementClientOptions, type MaskedData, MaskedDataSchema, type Metadata, MetadataSchema, type ModelScanIssue, ModelScanIssueSchema, ModelScanStatus, ModelSecurityClient, type ModelSecurityClientOptions, type ModelSecurityFileListOptions, type ModelSecurityGroupCreateRequest, ModelSecurityGroupCreateRequestSchema, type ModelSecurityGroupResponse, ModelSecurityGroupResponseSchema, ModelSecurityGroupState, type ModelSecurityGroupUpdateRequest, ModelSecurityGroupUpdateRequestSchema, ModelSecurityGroupsClient, type ModelSecurityListOptions, type ModelSecurityPagination, ModelSecurityPaginationSchema, type ModelSecurityRuleInstanceResponse, ModelSecurityRuleInstanceResponseSchema, type ModelSecurityRuleInstanceUpdateRequest, ModelSecurityRuleInstanceUpdateRequestSchema, type ModelSecurityRuleResponse, ModelSecurityRuleResponseSchema, ModelSecurityRulesClient, type ModelSecurityScanListOptions, ModelSecurityScansClient, PAYLOAD_HASH, type PaginationOptions, type Policy, PolicySchema, PolicyType, type PrerequisiteModel, PrerequisiteModelSchema, ProfilesClient, ProfilingStatus, type PromptDetailResponse, PromptDetailResponseSchema, type PromptDetected, PromptDetectedSchema, type PromptDetectionDetails, PromptDetectionDetailsSchema, type PromptListOptions, type PromptSetListOptions, type PromptSetStats, PromptSetStatsSchema, type PromptSetSummary, PromptSetSummarySchema, type PromptSetsReportResponse, PromptSetsReportResponseSchema, type PropertyAssignment, PropertyAssignmentSchema, type PropertyDefinition, PropertyDefinitionSchema, type PropertyNameCreateRequest, PropertyNameCreateRequestSchema, type PropertyNamesListResponse, PropertyNamesListResponseSchema, type PropertyStatistic, PropertyStatisticSchema, type PropertyValueCreateRequest, PropertyValueCreateRequestSchema, type PropertyValueStatistic, PropertyValueStatisticSchema, type PropertyValuesMultipleResponse, PropertyValuesMultipleResponseSchema, type PropertyValuesResponse, PropertyValuesResponseSchema, type PyPIAuthResponse, PyPIAuthResponseSchema, type QuotaDetails, QuotaDetailsSchema, type QuotaSummary, QuotaSummarySchema, RED_TEAM_CATEGORIES_PATH, RED_TEAM_CLIENT_ID, RED_TEAM_CLIENT_SECRET, RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH, RED_TEAM_CUSTOM_ATTACK_PATH, RED_TEAM_DASHBOARD_PATH, RED_TEAM_DATA_ENDPOINT, RED_TEAM_ERROR_LOG_PATH, RED_TEAM_MGMT_DASHBOARD_PATH, RED_TEAM_MGMT_ENDPOINT, RED_TEAM_QUOTA_PATH, RED_TEAM_REPORT_DYNAMIC_PATH, RED_TEAM_REPORT_PATH, RED_TEAM_REPORT_STATIC_PATH, RED_TEAM_SCAN_PATH, RED_TEAM_SENTIMENT_PATH, RED_TEAM_TARGET_PATH, RED_TEAM_TOKEN_ENDPOINT, RED_TEAM_TSG_ID, RedTeamCategory, RedTeamClient, type RedTeamClientOptions, RedTeamCustomAttackReportsClient, RedTeamCustomAttacksClient, RedTeamErrorType, type RedTeamListOptions, type RedTeamPagination, RedTeamPaginationSchema, RedTeamReportsClient, type RedTeamScanListOptions, RedTeamScansClient, RedTeamTargetsClient, type RemediationDetail, RemediationDetailSchema, type RemediationResponse, RemediationResponseSchema, type ResponseDetected, ResponseDetectedSchema, type ResponseDetectionDetails, ResponseDetectionDetailsSchema, ResponseMode, type RiskLevel, RiskLevelSchema, RiskRating, type RuleConfiguration, RuleConfigurationSchema, type RuleEditableField, type RuleEditableFieldDropdown, RuleEditableFieldDropdownSchema, RuleEditableFieldSchema, RuleEditableFieldType, type RuleEvaluationList, RuleEvaluationListSchema, type RuleEvaluationResponse, RuleEvaluationResponseSchema, RuleEvaluationResult, RuleFieldValueKey, type RuleRemediation, RuleRemediationSchema, RuleState, RuleType, type RuntimeSecurityPolicy, RuntimeSecurityPolicySchema, type RuntimeSecurityProfileResponse, RuntimeSecurityProfileResponseSchema, SCAN_REPORTS_PATH, SCAN_RESULTS_PATH, SDK_VERSION, SYNC_SCAN_PATH, SafetySubCategory, type ScanBaseResponse, ScanBaseResponseSchema, type ScanCreateRequest, ScanCreateRequestSchema, type ScanDetails, ScanDetailsSchema, type ScanIdResult, ScanIdResultSchema, type ScanList, ScanListSchema, ScanOrigin, type ScanRequest, type ScanRequestContentsInner, ScanRequestContentsInnerSchema, ScanRequestSchema, type ScanResponse, ScanResponseSchema, type ScanStatisticsResponse, ScanStatisticsResponseSchema, type ScanSummary, ScanSummarySchema, Scanner, type ScoreTrendResponse, ScoreTrendResponseSchema, type ScoreTrendSeries, ScoreTrendSeriesSchema, type SecurityProfile, type SecurityProfileListResponse, SecurityProfileListResponseSchema, SecurityProfileSchema, SecuritySubCategory, type SentimentRequest, SentimentRequestSchema, type SentimentResponse, SentimentResponseSchema, SeverityFilter, type SeverityReport, SeverityReportSchema, type SeverityStats, SeverityStatsSchema, SortByDateField, SortByFileField, SortDirection, SourceType, type StaticJobMetadata, StaticJobMetadataSchema, type StaticJobRemediation, type StaticJobRemediationRecommendation, StaticJobRemediationRecommendationSchema, StaticJobRemediationSchema, type StaticJobReport, StaticJobReportSchema, type StaticJobReportStats, StaticJobReportStatsSchema, StatusQueryParam, type StreamDetailResponse, StreamDetailResponseSchema, type StreamIterationData, StreamIterationDataSchema, type StreamListResponse, StreamListResponseSchema, StreamType, type SubCategoryModel, SubCategoryModelSchema, type SubCategoryStats, SubCategoryStatsSchema, type SyncScanOptions, type TargetAdditionalContext, TargetAdditionalContextSchema, type TargetBackground, TargetBackgroundSchema, TargetConnectionType, type TargetContextUpdate, TargetContextUpdateSchema, type TargetCreateRequest, TargetCreateRequestSchema, type TargetJobRequest, TargetJobRequestSchema, type TargetList, type TargetListItem, TargetListItemSchema, type TargetListOptions, TargetListSchema, type TargetMetadata, TargetMetadataSchema, type TargetProbeRequest, TargetProbeRequestSchema, type TargetProfileResponse, TargetProfileResponseSchema, type TargetReference, TargetReferenceSchema, type TargetResponse, TargetResponseSchema, TargetStatus, TargetType, type TargetUpdateRequest, TargetUpdateRequestSchema, ThreatCategory, type ThreatScanReport, ThreatScanReportSchema, type ToolDetected, ToolDetectedSchema, type ToolEvent, type ToolEventMetadata, ToolEventMetadataSchema, ToolEventSchema, TopicsClient, USER_AGENT, type UrlfEntry, UrlfEntrySchema, type ValidationError, ValidationErrorSchema, Verdict, Verdict as VerdictType, type ViolationList, ViolationListSchema, type ViolationResponse, ViolationResponseSchema, globalConfiguration, init };
+export { AISecSDKException, AI_SEC_API_ENDPOINT, AI_SEC_API_KEY, AI_SEC_API_TOKEN, ASYNC_SCAN_PATH, Action, Action as ActionType, type AgentMeta, AgentMetaSchema, type AiProfile, AiProfileSchema, ApiEndpointType, type AsyncScanObject, AsyncScanObjectSchema, type AsyncScanResponse, AsyncScanResponseSchema, type AttackDetailResponse, AttackDetailResponseSchema, type AttackListItem, AttackListItemSchema, type AttackListOptions, type AttackListResponse, AttackListResponseSchema, type AttackMultiTurnDetailResponse, AttackMultiTurnDetailResponseSchema, type AttackMultiTurnOutput, AttackMultiTurnOutputSchema, type AttackOutput, AttackOutputSchema, AttackStatus, AttackType, AuthType, BEARER, type BaseResponse, BaseResponseSchema, BrandSubCategory, Category, type CategoryModel, CategoryModelSchema, type CategoryReport, CategoryReportSchema, Category as CategoryType, type ComplianceReport, ComplianceReportSchema, ComplianceSubCategory, type ComplianceTechnique, ComplianceTechniqueSchema, Content, type ContentOptions, type CountByName, CountByNameSchema, CountedQuotaEnum, type CreateCustomTopicRequest, CreateCustomTopicRequestSchema, type CreateSecurityProfileRequest, CreateSecurityProfileRequestSchema, type CustomAttackOutput, CustomAttackOutputSchema, type CustomAttackReportResponse, CustomAttackReportResponseSchema, type CustomAttacksListResponse, CustomAttacksListResponseSchema, type CustomJobMetadata, CustomJobMetadataSchema, type CustomPromptCreateRequest, CustomPromptCreateRequestSchema, type CustomPromptList, type CustomPromptListItem, CustomPromptListItemSchema, CustomPromptListSchema, type CustomPromptResponse, CustomPromptResponseSchema, type CustomPromptSetArchiveRequest, CustomPromptSetArchiveRequestSchema, type CustomPromptSetCreateRequest, CustomPromptSetCreateRequestSchema, type CustomPromptSetList, type CustomPromptSetListActive, CustomPromptSetListActiveSchema, type CustomPromptSetListItem, CustomPromptSetListItemSchema, CustomPromptSetListSchema, type CustomPromptSetReference, CustomPromptSetReferenceSchema, type CustomPromptSetResponse, CustomPromptSetResponseSchema, type CustomPromptSetUpdateRequest, CustomPromptSetUpdateRequestSchema, type CustomPromptSetVersionInfo, CustomPromptSetVersionInfoSchema, type CustomPromptUpdateRequest, CustomPromptUpdateRequestSchema, type CustomTopic, type CustomTopicListResponse, CustomTopicListResponseSchema, CustomTopicSchema, DEFAULT_ENDPOINT, DEFAULT_MGMT_ENDPOINT, DEFAULT_MODEL_SEC_DATA_ENDPOINT, DEFAULT_MODEL_SEC_MGMT_ENDPOINT, DEFAULT_RED_TEAM_DATA_ENDPOINT, DEFAULT_RED_TEAM_MGMT_ENDPOINT, DEFAULT_TOKEN_ENDPOINT, type DSDetailResult, DSDetailResultSchema, type DSResultMetadata, DSResultMetadataSchema, type DashboardOverviewResponse, DashboardOverviewResponseSchema, DateRangeFilter, type DeleteProfileConflict, DeleteProfileConflictSchema, type DeleteProfileResponse, DeleteProfileResponseSchema, type DeleteTopicConflict, DeleteTopicConflictSchema, type DeleteTopicResponse, DeleteTopicResponseSchema, type DetectionServiceResult, DetectionServiceResultSchema, type DlpReport, DlpReportSchema, type DynamicJobMetadata, DynamicJobMetadataSchema, type DynamicJobReport, DynamicJobReportSchema, type DynamicJobReportStats, DynamicJobReportStatsSchema, ErrorCodes, type ErrorLog, type ErrorLogListResponse, ErrorLogListResponseSchema, ErrorLogSchema, type ErrorResponse, ErrorResponseSchema, ErrorSource, ErrorType, EvalOutcome, type EvalSummary, EvalSummarySchema, FileFormat, type FileList, FileListSchema, type FileResponse, FileResponseSchema, type FileScanData, FileScanDataSchema, FileScanResult, FileType, type Goal, type GoalListOptions, type GoalListResponse, GoalListResponseSchema, GoalSchema, GoalType, GoalTypeQueryParam, GuardrailAction, HEADER_API_KEY, HEADER_AUTH_TOKEN, type HTTPValidationError, HTTPValidationErrorSchema, HTTP_FORCE_RETRY_STATUS_CODES, type IODetected, IODetectedSchema, type InitOptions, type JobAbortResponse, JobAbortResponseSchema, type JobCreateRequest, JobCreateRequestSchema, type JobListResponse, JobListResponseSchema, type JobResponse, JobResponseSchema, JobStatus, JobStatusFilter, type JobTimeRecord, JobTimeRecordSchema, JobType, type Label, type LabelKeyList, LabelKeyListSchema, LabelSchema, type LabelValueList, LabelValueListSchema, type LabelsCreateRequest, LabelsCreateRequestSchema, type LabelsResponse, LabelsResponseSchema, type ListModelSecurityGroupsResponse, ListModelSecurityGroupsResponseSchema, type ListModelSecurityRuleInstancesResponse, ListModelSecurityRuleInstancesResponseSchema, type ListModelSecurityRulesResponse, ListModelSecurityRulesResponseSchema, MAX_AI_PROFILE_NAME_LENGTH, MAX_API_KEY_LENGTH, MAX_CONNECTION_POOL_SIZE, MAX_CONTENT_CONTEXT_LENGTH, MAX_CONTENT_PROMPT_LENGTH, MAX_CONTENT_RESPONSE_LENGTH, MAX_NUMBER_OF_BATCH_SCAN_OBJECTS, MAX_NUMBER_OF_REPORT_IDS, MAX_NUMBER_OF_RETRIES, MAX_NUMBER_OF_SCAN_IDS, MAX_REPORT_ID_STR_LENGTH, MAX_SCAN_ID_STR_LENGTH, MAX_SESSION_ID_STR_LENGTH, MAX_TOKEN_LENGTH, MAX_TRANSACTION_ID_STR_LENGTH, MGMT_CLIENT_ID, MGMT_CLIENT_SECRET, MGMT_ENDPOINT, MGMT_PROFILES_TSG_PATH, MGMT_PROFILE_PATH, MGMT_TOKEN_ENDPOINT, MGMT_TOPICS_TSG_PATH, MGMT_TOPIC_FORCE_PATH, MGMT_TOPIC_PATH, MGMT_TSG_ID, MODEL_SEC_CLIENT_ID, MODEL_SEC_CLIENT_SECRET, MODEL_SEC_DATA_ENDPOINT, MODEL_SEC_EVALUATIONS_PATH, MODEL_SEC_MGMT_ENDPOINT, MODEL_SEC_PYPI_AUTH_PATH, MODEL_SEC_SCANS_PATH, MODEL_SEC_SECURITY_GROUPS_PATH, MODEL_SEC_SECURITY_RULES_PATH, MODEL_SEC_TOKEN_ENDPOINT, MODEL_SEC_TSG_ID, MODEL_SEC_VIOLATIONS_PATH, ManagementClient, type ManagementClientOptions, type MaskedData, MaskedDataSchema, type Metadata, MetadataSchema, type ModelScanIssue, ModelScanIssueSchema, ModelScanStatus, ModelSecurityClient, type ModelSecurityClientOptions, type ModelSecurityFileListOptions, type ModelSecurityGroupCreateRequest, ModelSecurityGroupCreateRequestSchema, type ModelSecurityGroupResponse, ModelSecurityGroupResponseSchema, ModelSecurityGroupState, type ModelSecurityGroupUpdateRequest, ModelSecurityGroupUpdateRequestSchema, ModelSecurityGroupsClient, type ModelSecurityListOptions, type ModelSecurityPagination, ModelSecurityPaginationSchema, type ModelSecurityRuleInstanceResponse, ModelSecurityRuleInstanceResponseSchema, type ModelSecurityRuleInstanceUpdateRequest, ModelSecurityRuleInstanceUpdateRequestSchema, type ModelSecurityRuleResponse, ModelSecurityRuleResponseSchema, ModelSecurityRulesClient, type ModelSecurityScanListOptions, ModelSecurityScansClient, OAuthClient, type OAuthClientOptions, PAYLOAD_HASH, type PaginationOptions, type Policy, PolicySchema, PolicyType, type PrerequisiteModel, PrerequisiteModelSchema, ProfilesClient, ProfilingStatus, type PromptDetailResponse, PromptDetailResponseSchema, type PromptDetected, PromptDetectedSchema, type PromptDetectionDetails, PromptDetectionDetailsSchema, type PromptListOptions, type PromptSetListOptions, type PromptSetStats, PromptSetStatsSchema, type PromptSetSummary, PromptSetSummarySchema, type PromptSetsReportResponse, PromptSetsReportResponseSchema, type PropertyAssignment, PropertyAssignmentSchema, type PropertyDefinition, PropertyDefinitionSchema, type PropertyNameCreateRequest, PropertyNameCreateRequestSchema, type PropertyNamesListResponse, PropertyNamesListResponseSchema, type PropertyStatistic, PropertyStatisticSchema, type PropertyValueCreateRequest, PropertyValueCreateRequestSchema, type PropertyValueStatistic, PropertyValueStatisticSchema, type PropertyValuesMultipleResponse, PropertyValuesMultipleResponseSchema, type PropertyValuesResponse, PropertyValuesResponseSchema, type PyPIAuthResponse, PyPIAuthResponseSchema, type QuotaDetails, QuotaDetailsSchema, type QuotaSummary, QuotaSummarySchema, RED_TEAM_CATEGORIES_PATH, RED_TEAM_CLIENT_ID, RED_TEAM_CLIENT_SECRET, RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH, RED_TEAM_CUSTOM_ATTACK_PATH, RED_TEAM_DASHBOARD_PATH, RED_TEAM_DATA_ENDPOINT, RED_TEAM_ERROR_LOG_PATH, RED_TEAM_MGMT_DASHBOARD_PATH, RED_TEAM_MGMT_ENDPOINT, RED_TEAM_QUOTA_PATH, RED_TEAM_REPORT_DYNAMIC_PATH, RED_TEAM_REPORT_PATH, RED_TEAM_REPORT_STATIC_PATH, RED_TEAM_SCAN_PATH, RED_TEAM_SENTIMENT_PATH, RED_TEAM_TARGET_PATH, RED_TEAM_TOKEN_ENDPOINT, RED_TEAM_TSG_ID, RedTeamCategory, RedTeamClient, type RedTeamClientOptions, RedTeamCustomAttackReportsClient, RedTeamCustomAttacksClient, RedTeamErrorType, type RedTeamListOptions, type RedTeamPagination, RedTeamPaginationSchema, RedTeamReportsClient, type RedTeamScanListOptions, RedTeamScansClient, RedTeamTargetsClient, type RemediationDetail, RemediationDetailSchema, type RemediationResponse, RemediationResponseSchema, type ResponseDetected, ResponseDetectedSchema, type ResponseDetectionDetails, ResponseDetectionDetailsSchema, ResponseMode, type RiskLevel, RiskLevelSchema, RiskRating, type RuleConfiguration, RuleConfigurationSchema, type RuleEditableField, type RuleEditableFieldDropdown, RuleEditableFieldDropdownSchema, RuleEditableFieldSchema, RuleEditableFieldType, type RuleEvaluationList, RuleEvaluationListSchema, type RuleEvaluationResponse, RuleEvaluationResponseSchema, RuleEvaluationResult, RuleFieldValueKey, type RuleRemediation, RuleRemediationSchema, RuleState, RuleType, type RuntimeSecurityPolicy, RuntimeSecurityPolicySchema, type RuntimeSecurityProfileResponse, RuntimeSecurityProfileResponseSchema, SCAN_REPORTS_PATH, SCAN_RESULTS_PATH, SDK_VERSION, SYNC_SCAN_PATH, SafetySubCategory, type ScanBaseResponse, ScanBaseResponseSchema, type ScanCreateRequest, ScanCreateRequestSchema, type ScanDetails, ScanDetailsSchema, type ScanIdResult, ScanIdResultSchema, type ScanList, ScanListSchema, ScanOrigin, type ScanRequest, type ScanRequestContentsInner, ScanRequestContentsInnerSchema, ScanRequestSchema, type ScanResponse, ScanResponseSchema, type ScanStatisticsResponse, ScanStatisticsResponseSchema, type ScanSummary, ScanSummarySchema, Scanner, type ScoreTrendResponse, ScoreTrendResponseSchema, type ScoreTrendSeries, ScoreTrendSeriesSchema, type SecurityProfile, type SecurityProfileListResponse, SecurityProfileListResponseSchema, SecurityProfileSchema, SecuritySubCategory, type SentimentRequest, SentimentRequestSchema, type SentimentResponse, SentimentResponseSchema, SeverityFilter, type SeverityReport, SeverityReportSchema, type SeverityStats, SeverityStatsSchema, SortByDateField, SortByFileField, SortDirection, SourceType, type StaticJobMetadata, StaticJobMetadataSchema, type StaticJobRemediation, type StaticJobRemediationRecommendation, StaticJobRemediationRecommendationSchema, StaticJobRemediationSchema, type StaticJobReport, StaticJobReportSchema, type StaticJobReportStats, StaticJobReportStatsSchema, StatusQueryParam, type StreamDetailResponse, StreamDetailResponseSchema, type StreamIterationData, StreamIterationDataSchema, type StreamListResponse, StreamListResponseSchema, StreamType, type SubCategoryModel, SubCategoryModelSchema, type SubCategoryStats, SubCategoryStatsSchema, type SyncScanOptions, type TargetAdditionalContext, TargetAdditionalContextSchema, type TargetBackground, TargetBackgroundSchema, TargetConnectionType, type TargetContextUpdate, TargetContextUpdateSchema, type TargetCreateRequest, TargetCreateRequestSchema, type TargetJobRequest, TargetJobRequestSchema, type TargetList, type TargetListItem, TargetListItemSchema, type TargetListOptions, TargetListSchema, type TargetMetadata, TargetMetadataSchema, type TargetProbeRequest, TargetProbeRequestSchema, type TargetProfileResponse, TargetProfileResponseSchema, type TargetReference, TargetReferenceSchema, type TargetResponse, TargetResponseSchema, TargetStatus, TargetType, type TargetUpdateRequest, TargetUpdateRequestSchema, ThreatCategory, type ThreatScanReport, ThreatScanReportSchema, type TokenInfo, type ToolDetected, ToolDetectedSchema, type ToolEvent, type ToolEventMetadata, ToolEventMetadataSchema, ToolEventSchema, TopicsClient, USER_AGENT, type UrlfEntry, UrlfEntrySchema, type ValidationError, ValidationErrorSchema, Verdict, Verdict as VerdictType, type ViolationList, ViolationListSchema, type ViolationResponse, ViolationResponseSchema, globalConfiguration, init };

package/dist/index.js

@@ -23,7 +23,7 @@ var MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 5;
 var MAX_CONNECTION_POOL_SIZE = 100;
 var MAX_NUMBER_OF_RETRIES = 5;
 var HTTP_FORCE_RETRY_STATUS_CODES = [500, 502, 503, 504];
-var SDK_VERSION = "0.4.0";
+var SDK_VERSION = "0.5.0";
 var USER_AGENT = `PAN-AIRS/${SDK_VERSION}-typescript-sdk`;
 var DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 var DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
@@ -2309,12 +2309,14 @@ var OAuthTokenResponseSchema = z19.object({
 });
 
 // src/management/oauth-client.ts
-var TOKEN_BUFFER_MS = 3e4;
+var DEFAULT_TOKEN_BUFFER_MS = 3e4;
 var OAuthClient = class {
   tokenEndpoint;
   clientId;
   clientSecret;
   tsgId;
+  tokenBufferMs;
+  onTokenRefresh;
   accessToken = null;
   expiresAt = 0;
   pendingFetch = null;
@@ -2323,13 +2325,15 @@ var OAuthClient = class {
     this.clientSecret = opts.clientSecret;
     this.tsgId = opts.tsgId;
     this.tokenEndpoint = opts.tokenEndpoint ?? DEFAULT_TOKEN_ENDPOINT;
+    this.tokenBufferMs = opts.tokenBufferMs ?? DEFAULT_TOKEN_BUFFER_MS;
+    this.onTokenRefresh = opts.onTokenRefresh;
   }
   /**
    * Get a valid access token, refreshing if needed.
    * @returns Bearer access token string.
    */
   async getToken() {
-    if (this.accessToken && Date.now() < this.expiresAt - TOKEN_BUFFER_MS) {
+    if (this.accessToken && Date.now() < this.expiresAt - this.tokenBufferMs) {
       return this.accessToken;
     }
     if (this.pendingFetch) {
@@ -2345,6 +2349,40 @@ var OAuthClient = class {
     this.accessToken = null;
     this.expiresAt = 0;
   }
+  /** Check if the current token has passed its expiry time. Returns true if no token exists. */
+  isTokenExpired() {
+    if (!this.accessToken) return true;
+    return Date.now() >= this.expiresAt;
+  }
+  /**
+   * Check if the token is within the pre-expiry buffer window.
+   * Returns true if no token exists.
+   * @param bufferMs - Custom buffer in ms. Defaults to the configured `tokenBufferMs`.
+   */
+  isTokenExpiringSoon(bufferMs) {
+    if (!this.accessToken) return true;
+    const buffer = bufferMs ?? this.tokenBufferMs;
+    return Date.now() >= this.expiresAt - buffer;
+  }
+  /**
+   * Get a snapshot of the current token state without exposing the actual token value.
+   * @returns Current {@link TokenInfo}.
+   */
+  getTokenInfo() {
+    const now = Date.now();
+    const hasToken = this.accessToken !== null;
+    const isExpired = !hasToken || now >= this.expiresAt;
+    const isExpiringSoon = !hasToken || now >= this.expiresAt - this.tokenBufferMs;
+    const expiresInMs = hasToken ? Math.max(0, this.expiresAt - now) : 0;
+    return {
+      hasToken,
+      isValid: hasToken && !isExpiringSoon,
+      isExpired,
+      isExpiringSoon,
+      expiresInMs,
+      expiresAt: hasToken ? this.expiresAt : 0
+    };
+  }
   async fetchToken() {
     const credentials = btoa(`${this.clientId}:${this.clientSecret}`);
     const body = new URLSearchParams({
@@ -2380,6 +2418,12 @@ var OAuthClient = class {
     const data = OAuthTokenResponseSchema.parse(await response.json());
     this.accessToken = data.access_token;
     this.expiresAt = Date.now() + data.expires_in * 1e3;
+    if (this.onTokenRefresh) {
+      try {
+        this.onTokenRefresh(this.getTokenInfo());
+      } catch {
+      }
+    }
     return this.accessToken;
   }
 };
@@ -2411,7 +2455,7 @@ async function managementHttpRequest(opts) {
       return fetch(url.toString(), { method, headers, body: bodyStr });
     },
     onRetryableFailure: async (response2) => {
-      if (response2.status === 401 && !hadTokenRefresh) {
+      if ((response2.status === 401 || response2.status === 403) && !hadTokenRefresh) {
         hadTokenRefresh = true;
         oauthClient.clearToken();
         return true;
@@ -4556,6 +4600,7 @@ export {
   ModelSecurityRuleResponseSchema,
   ModelSecurityRulesClient,
   ModelSecurityScansClient,
+  OAuthClient,
   PAYLOAD_HASH,
   PolicySchema,
   PolicyType,