@cdot65/prisma-airs-sdk 0.5.2 → 0.6.1

package/dist/index.js

@@ -23,7 +23,7 @@ var MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 5;
 var MAX_CONNECTION_POOL_SIZE = 100;
 var MAX_NUMBER_OF_RETRIES = 5;
 var HTTP_FORCE_RETRY_STATUS_CODES = [500, 502, 503, 504];
-var SDK_VERSION = "0.5.2";
+var SDK_VERSION = "0.6.1";
 var USER_AGENT = `PAN-AIRS/${SDK_VERSION}-typescript-sdk`;
 var DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 var DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
@@ -1481,33 +1481,83 @@ var ValidationErrorSchema = z18.object({
 });
 var HTTPValidationErrorSchema = z18.object({ detail: z18.array(ValidationErrorSchema).optional() }).passthrough();
 var TargetBackgroundSchema = z18.object({
-  industry: z18.unknown().optional(),
-  use_case: z18.unknown().optional(),
-  competitors: z18.unknown().optional()
+  industry: z18.string().nullable().optional(),
+  use_case: z18.string().nullable().optional(),
+  competitors: z18.array(z18.string()).nullable().optional()
 }).passthrough();
 var TargetAdditionalContextSchema = z18.object({
-  base_model: z18.unknown().optional(),
-  core_architecture: z18.unknown().optional(),
-  system_prompt: z18.unknown().optional(),
-  languages_supported: z18.unknown().optional(),
-  banned_keywords: z18.unknown().optional(),
-  tools_accessible: z18.unknown().optional()
+  base_model: z18.string().nullable().optional(),
+  core_architecture: z18.string().nullable().optional(),
+  system_prompt: z18.string().nullable().optional(),
+  languages_supported: z18.array(z18.string()).nullable().optional(),
+  banned_keywords: z18.array(z18.string()).nullable().optional(),
+  tools_accessible: z18.array(z18.string()).nullable().optional()
 }).passthrough();
 var TargetMetadataSchema = z18.object({
   multi_turn: z18.boolean().optional(),
-  multi_turn_error_message: z18.unknown().optional(),
-  rate_limit: z18.unknown().optional(),
+  multi_turn_error_message: z18.string().nullable().optional(),
+  rate_limit: z18.number().int().nullable().optional(),
   rate_limit_enabled: z18.boolean().optional(),
-  rate_limit_error_code: z18.unknown().optional(),
-  rate_limit_error_json: z18.unknown().optional(),
-  rate_limit_error_message: z18.unknown().optional(),
+  rate_limit_error_code: z18.number().int().nullable().optional(),
+  rate_limit_error_json: z18.record(z18.unknown()).nullable().optional(),
+  rate_limit_error_message: z18.string().nullable().optional(),
   content_filter_enabled: z18.boolean().optional(),
-  content_filter_error_code: z18.unknown().optional(),
-  content_filter_error_json: z18.unknown().optional(),
-  content_filter_error_message: z18.unknown().optional(),
+  content_filter_error_code: z18.number().int().nullable().optional(),
+  content_filter_error_json: z18.record(z18.unknown()).nullable().optional(),
+  content_filter_error_message: z18.string().nullable().optional(),
   probe_message: z18.string().optional(),
   request_timeout: z18.number().optional()
 }).passthrough();
+var MultiTurnStatefulConfigSchema = z18.object({
+  type: z18.string().default("stateful"),
+  response_id_field: z18.string(),
+  request_id_field: z18.string()
+}).passthrough();
+var MultiTurnStatelessConfigSchema = z18.object({
+  type: z18.string().default("stateless"),
+  assistant_role: z18.string().nullable().optional()
+}).passthrough();
+var OpenAIConnectionParamsSchema = z18.object({
+  api_key: z18.string(),
+  model_name: z18.string()
+}).passthrough();
+var HuggingfaceConnectionParamsSchema = z18.object({
+  api_key: z18.string(),
+  model_name: z18.string()
+}).passthrough();
+var DatabricksConnectionParamsSchema = z18.object({
+  auth_type: z18.string(),
+  workspace_url: z18.string(),
+  model_name: z18.string(),
+  access_token: z18.string().nullable().optional(),
+  client_id: z18.string().nullable().optional(),
+  secret: z18.string().nullable().optional()
+}).passthrough();
+var BedrockAccessConnectionParamsSchema = z18.object({
+  access_id: z18.string(),
+  access_secret: z18.string(),
+  region: z18.string(),
+  model_id: z18.string(),
+  session_token: z18.string().nullable().optional()
+}).passthrough();
+var RestConnectionParamsSchema = z18.object({
+  api_endpoint: z18.string().nullable().optional(),
+  request_headers: z18.record(z18.unknown()).nullable().optional(),
+  request_json: z18.record(z18.unknown()).nullable().optional(),
+  response_json: z18.record(z18.unknown()).nullable().optional(),
+  response_key: z18.string().nullable().optional(),
+  target_connection_config: z18.unknown().nullable().optional(),
+  curl: z18.string().nullable().optional(),
+  multi_turn_config: z18.unknown().nullable().optional()
+}).passthrough();
+var StreamingConnectionParamsSchema = RestConnectionParamsSchema.extend({
+  response_stop_key: z18.string(),
+  response_stop_value: z18.string()
+}).passthrough();
+var ConnectionParamsSchema = z18.union([
+  StreamingConnectionParamsSchema,
+  RestConnectionParamsSchema
+]);
 var TargetJobRequestSchema = z18.object({
   uuid: z18.string(),
   version: z18.number().int().nullable().optional()
@@ -2233,9 +2283,9 @@ var CustomPromptSetVersionInfoSchema = z18.object({
   uuid: z18.string(),
   status: z18.string(),
   is_latest: z18.boolean(),
-  version: z18.unknown().optional(),
-  stats: z18.unknown().optional(),
-  snapshot_created_at: z18.unknown().optional()
+  version: z18.string().nullable().optional(),
+  stats: PromptSetStatsSchema.nullable().optional(),
+  snapshot_created_at: z18.string().nullable().optional()
 }).passthrough();
 var CustomPromptCreateRequestSchema = z18.object({
   prompt: z18.string(),
@@ -2440,7 +2490,13 @@ async function managementHttpRequest(opts) {
       const url = new URL(`${stripped}${path}`);
       if (params) {
         for (const [key, value] of Object.entries(params)) {
-          url.searchParams.set(key, value);
+          if (Array.isArray(value)) {
+            for (const v of value) {
+              url.searchParams.append(key, v);
+            }
+          } else {
+            url.searchParams.set(key, value);
+          }
         }
       }
       const headers = {
@@ -3028,13 +3084,23 @@ var ModelSecurityScansClient = class {
 };
 
 // src/model-security/security-groups-client.ts
-function buildListParams2(opts) {
+function buildGroupListParams(opts) {
   const params = {};
   if (opts?.skip !== void 0) params.skip = String(opts.skip);
   if (opts?.limit !== void 0) params.limit = String(opts.limit);
-  if (opts?.sort_by !== void 0) params.sort_by = opts.sort_by;
-  if (opts?.sort_direction !== void 0) params.sort_direction = opts.sort_direction;
-  if (opts?.search !== void 0) params.search = opts.search;
+  if (opts?.sort_field !== void 0) params.sort_field = opts.sort_field;
+  if (opts?.sort_dir !== void 0) params.sort_dir = opts.sort_dir;
+  if (opts?.source_types !== void 0) params.source_types = opts.source_types;
+  if (opts?.search_query !== void 0) params.search_query = opts.search_query;
+  if (opts?.enabled_rules !== void 0) params.enabled_rules = opts.enabled_rules;
+  return params;
+}
+function buildRuleInstanceListParams(opts) {
+  const params = {};
+  if (opts?.skip !== void 0) params.skip = String(opts.skip);
+  if (opts?.limit !== void 0) params.limit = String(opts.limit);
+  if (opts?.security_rule_uuid !== void 0) params.security_rule_uuid = opts.security_rule_uuid;
+  if (opts?.state !== void 0) params.state = opts.state;
   return params;
 }
 var ModelSecurityGroupsClient = class {
@@ -3072,7 +3138,7 @@ var ModelSecurityGroupsClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: MODEL_SEC_SECURITY_GROUPS_PATH,
-      params: buildListParams2(opts),
+      params: buildGroupListParams(opts),
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -3158,7 +3224,7 @@ var ModelSecurityGroupsClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${MODEL_SEC_SECURITY_GROUPS_PATH}/${securityGroupUuid}/rule-instances`,
-      params: buildListParams2(opts),
+      params: buildRuleInstanceListParams(opts),
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -3225,13 +3291,12 @@ var ModelSecurityGroupsClient = class {
 };
 
 // src/model-security/security-rules-client.ts
-function buildListParams3(opts) {
+function buildRuleListParams(opts) {
   const params = {};
   if (opts?.skip !== void 0) params.skip = String(opts.skip);
   if (opts?.limit !== void 0) params.limit = String(opts.limit);
-  if (opts?.sort_by !== void 0) params.sort_by = opts.sort_by;
-  if (opts?.sort_direction !== void 0) params.sort_direction = opts.sort_direction;
-  if (opts?.search !== void 0) params.search = opts.search;
+  if (opts?.source_type !== void 0) params.source_type = opts.source_type;
+  if (opts?.search_query !== void 0) params.search_query = opts.search_query;
   return params;
 }
 var ModelSecurityRulesClient = class {
@@ -3253,7 +3318,7 @@ var ModelSecurityRulesClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: MODEL_SEC_SECURITY_RULES_PATH,
-      params: buildListParams3(opts),
+      params: buildRuleListParams(opts),
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -3363,7 +3428,7 @@ var ModelSecurityClient = class {
 };
 
 // src/red-team/scans-client.ts
-function buildListParams4(opts) {
+function buildListParams2(opts) {
   const params = {};
   if (opts?.skip !== void 0) params.skip = String(opts.skip);
   if (opts?.limit !== void 0) params.limit = String(opts.limit);
@@ -3395,7 +3460,7 @@ var RedTeamScansClient = class {
   }
   /** List red team scan jobs with optional filters. */
   async list(opts) {
-    const params = buildListParams4(opts);
+    const params = buildListParams2(opts);
     if (opts?.status !== void 0) params.status = opts.status;
     if (opts?.job_type !== void 0) params.job_type = opts.job_type;
     if (opts?.target_id !== void 0) params.target_id = opts.target_id;
@@ -3451,7 +3516,7 @@ var RedTeamScansClient = class {
 };
 
 // src/red-team/reports-client.ts
-function buildListParams5(opts) {
+function buildListParams3(opts) {
   const params = {};
   if (opts?.skip !== void 0) params.skip = String(opts.skip);
   if (opts?.limit !== void 0) params.limit = String(opts.limit);
@@ -3480,7 +3545,7 @@ var RedTeamReportsClient = class {
   /** List attacks for a static scan. */
   async listAttacks(jobId, opts) {
     validateJobId(jobId);
-    const params = buildListParams5(opts);
+    const params = buildListParams3(opts);
     if (opts?.status !== void 0) params.status = opts.status;
     if (opts?.severity !== void 0) params.severity = opts.severity;
     if (opts?.category !== void 0) params.category = opts.category;
@@ -3609,7 +3674,7 @@ var RedTeamReportsClient = class {
   /** List goals for a dynamic scan. */
   async listGoals(jobId, opts) {
     validateJobId(jobId);
-    const params = buildListParams5(opts);
+    const params = buildListParams3(opts);
     if (opts?.goal_type !== void 0) params.goal_type = opts.goal_type;
     const res = await managementHttpRequest({
       method: "GET",
@@ -3634,7 +3699,7 @@ var RedTeamReportsClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_REPORT_DYNAMIC_PATH}/${jobId}/goal/${goalId}/list-streams`,
-      params: buildListParams5(opts),
+      params: buildListParams3(opts),
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -3690,7 +3755,7 @@ var RedTeamReportsClient = class {
 };
 
 // src/red-team/custom-attack-reports-client.ts
-function buildListParams6(opts) {
+function buildListParams4(opts) {
   const params = {};
   if (opts?.skip !== void 0) params.skip = String(opts.skip);
   if (opts?.limit !== void 0) params.limit = String(opts.limit);
@@ -3750,7 +3815,7 @@ var RedTeamCustomAttackReportsClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH}/report/${jobId}/prompt-set/${promptSetId}/prompts`,
-      params: buildListParams6(opts),
+      params: buildListParams4(opts),
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -3781,7 +3846,7 @@ var RedTeamCustomAttackReportsClient = class {
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_CUSTOM_ATTACKS_REPORT_PATH}/job/${jobId}/list-custom-attacks`,
-      params: buildListParams6(opts),
+      params: buildListParams4(opts),
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -3820,7 +3885,7 @@ var RedTeamCustomAttackReportsClient = class {
 };
 
 // src/red-team/targets-client.ts
-function buildListParams7(opts) {
+function buildListParams5(opts) {
   const params = {};
   if (opts?.skip !== void 0) params.skip = String(opts.skip);
   if (opts?.limit !== void 0) params.limit = String(opts.limit);
@@ -3839,12 +3904,15 @@ var RedTeamTargetsClient = class {
     this.numRetries = opts.numRetries;
   }
   /** Create a new target. */
-  async create(request) {
+  async create(request, opts) {
+    const params = {};
+    if (opts?.validate !== void 0) params.validate = String(opts.validate);
     const res = await managementHttpRequest({
       method: "POST",
       baseUrl: this.baseUrl,
       path: RED_TEAM_TARGET_PATH,
       body: request,
+      params: Object.keys(params).length > 0 ? params : void 0,
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -3852,7 +3920,7 @@ var RedTeamTargetsClient = class {
   }
   /** List targets with optional filters. */
   async list(opts) {
-    const params = buildListParams7(opts);
+    const params = buildListParams5(opts);
     if (opts?.target_type !== void 0) params.target_type = opts.target_type;
     if (opts?.status !== void 0) params.status = opts.status;
     if (opts?.active !== void 0) params.active = String(opts.active);
@@ -3884,18 +3952,21 @@ var RedTeamTargetsClient = class {
     return res.data;
   }
   /** Update a target. */
-  async update(uuid, request) {
+  async update(uuid, request, opts) {
     if (!isValidUuid(uuid)) {
       throw new AISecSDKException(
         `Invalid target uuid: ${uuid}`,
         "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
       );
     }
+    const params = {};
+    if (opts?.validate !== void 0) params.validate = String(opts.validate);
     const res = await managementHttpRequest({
       method: "PUT",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_TARGET_PATH}/${uuid}`,
       body: request,
+      params: Object.keys(params).length > 0 ? params : void 0,
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -3968,7 +4039,7 @@ var RedTeamTargetsClient = class {
 };
 
 // src/red-team/custom-attacks-client.ts
-function buildListParams8(opts) {
+function buildListParams6(opts) {
   const params = {};
   if (opts?.skip !== void 0) params.skip = String(opts.skip);
   if (opts?.limit !== void 0) params.limit = String(opts.limit);
@@ -4008,7 +4079,7 @@ var RedTeamCustomAttacksClient = class {
   }
   /** List custom prompt sets. */
   async listPromptSets(opts) {
-    const params = buildListParams8(opts);
+    const params = buildListParams6(opts);
     if (opts?.active !== void 0) params.active = String(opts.active);
     if (opts?.archive !== void 0) params.archive = String(opts.archive);
     const res = await managementHttpRequest({
@@ -4106,6 +4177,33 @@ var RedTeamCustomAttacksClient = class {
     });
     return res.data;
   }
+  /** Upload a CSV file of custom prompts for a prompt set. */
+  async uploadPromptsCsv(promptSetUuid, file) {
+    validateUuid(promptSetUuid, "prompt set uuid");
+    const token = await this.oauthClient.getToken();
+    const url = new URL(
+      `${this.baseUrl.replace(/\/+$/, "")}${RED_TEAM_CUSTOM_ATTACK_PATH}/upload-custom-prompts-csv`
+    );
+    url.searchParams.set("prompt_set_uuid", promptSetUuid);
+    const formData = new FormData();
+    formData.append("file", file);
+    const response = await fetch(url.toString(), {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${token}`,
+        "User-Agent": USER_AGENT
+      },
+      body: formData
+    });
+    const text = await response.text();
+    if (!response.ok) {
+      throw new AISecSDKException(
+        `Upload failed (${response.status}): ${text}`,
+        "AISEC_SERVER_SIDE_ERROR" /* SERVER_SIDE_ERROR */
+      );
+    }
+    return text ? JSON.parse(text) : { message: "ok", status: 201 };
+  }
   // -----------------------------------------------------------------------
   // Prompt operations
   // -----------------------------------------------------------------------
@@ -4124,7 +4222,7 @@ var RedTeamCustomAttacksClient = class {
   /** List prompts in a prompt set. */
   async listPrompts(promptSetUuid, opts) {
     validateUuid(promptSetUuid, "prompt set uuid");
-    const params = buildListParams8(opts);
+    const params = buildListParams6(opts);
     if (opts?.active !== void 0) params.active = String(opts.active);
     const res = await managementHttpRequest({
       method: "GET",
@@ -4245,7 +4343,7 @@ var RedTeamCustomAttacksClient = class {
 };
 
 // src/red-team/client.ts
-function buildListParams9(opts) {
+function buildListParams7(opts) {
   const params = {};
   if (opts?.skip !== void 0) params.skip = String(opts.skip);
   if (opts?.limit !== void 0) params.limit = String(opts.limit);
@@ -4384,7 +4482,7 @@ var RedTeamClient = class {
       method: "GET",
       baseUrl: this.dataEndpoint,
       path: `${RED_TEAM_ERROR_LOG_PATH}/${jobId}`,
-      params: buildListParams9(opts),
+      params: buildListParams7(opts),
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -4454,6 +4552,7 @@ export {
   AuthType,
   BEARER,
   BaseResponseSchema,
+  BedrockAccessConnectionParamsSchema,
   BrandSubCategory,
   Category,
   CategoryModelSchema,
@@ -4461,6 +4560,7 @@ export {
   ComplianceReportSchema,
   ComplianceSubCategory,
   ComplianceTechniqueSchema,
+  ConnectionParamsSchema,
   Content,
   CountByNameSchema,
   CountedQuotaEnum,
@@ -4496,6 +4596,7 @@ export {
   DSDetailResultSchema,
   DSResultMetadataSchema,
   DashboardOverviewResponseSchema,
+  DatabricksConnectionParamsSchema,
   DateRangeFilter,
   DeleteProfileConflictSchema,
   DeleteProfileResponseSchema,
@@ -4529,6 +4630,7 @@ export {
   HEADER_AUTH_TOKEN,
   HTTPValidationErrorSchema,
   HTTP_FORCE_RETRY_STATUS_CODES,
+  HuggingfaceConnectionParamsSchema,
   IODetectedSchema,
   JobAbortResponseSchema,
   JobCreateRequestSchema,
@@ -4600,7 +4702,10 @@ export {
   ModelSecurityRuleResponseSchema,
   ModelSecurityRulesClient,
   ModelSecurityScansClient,
+  MultiTurnStatefulConfigSchema,
+  MultiTurnStatelessConfigSchema,
   OAuthClient,
+  OpenAIConnectionParamsSchema,
   PAYLOAD_HASH,
   PolicySchema,
   PolicyType,
@@ -4658,6 +4763,7 @@ export {
   ResponseDetectedSchema,
   ResponseDetectionDetailsSchema,
   ResponseMode,
+  RestConnectionParamsSchema,
   RiskLevelSchema,
   RiskRating,
   RuleConfigurationSchema,
@@ -4714,6 +4820,7 @@ export {
   StreamIterationDataSchema,
   StreamListResponseSchema,
   StreamType,
+  StreamingConnectionParamsSchema,
   SubCategoryModelSchema,
   SubCategoryStatsSchema,
   TargetAdditionalContextSchema,