@cdot65/prisma-airs-sdk 0.6.11 → 0.7.1

package/dist/index.js

@@ -29,7 +29,7 @@ var MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 5;
 var MAX_CONNECTION_POOL_SIZE = 100;
 var MAX_NUMBER_OF_RETRIES = 5;
 var HTTP_FORCE_RETRY_STATUS_CODES = [500, 502, 503, 504];
-var SDK_VERSION = "0.6.11";
+var SDK_VERSION = "0.7.1";
 var USER_AGENT = `PAN-AIRS/${SDK_VERSION}-typescript-sdk`;
 var DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 var DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
@@ -89,6 +89,11 @@ var RED_TEAM_QUOTA_PATH = "/v1/metering/quota";
 var RED_TEAM_ERROR_LOG_PATH = "/v1/error-log/job";
 var RED_TEAM_SENTIMENT_PATH = "/v1/sentiment";
 var RED_TEAM_TARGET_PATH = "/v1/target";
+var RED_TEAM_TARGET_VALIDATE_AUTH_PATH = "/v1/target/validate-auth";
+var RED_TEAM_TEMPLATE_PATH = "/v1/template";
+var RED_TEAM_EULA_PATH = "/v1/eula";
+var RED_TEAM_INSTANCES_PATH = "/v1/instances";
+var RED_TEAM_REGISTRY_CREDENTIALS_PATH = "/v1/registry-credentials";
 var RED_TEAM_CUSTOM_ATTACK_PATH = "/v1/custom-attack";
 var RED_TEAM_MGMT_DASHBOARD_PATH = "/v1/dashboard/overview";
 
@@ -1716,6 +1721,15 @@ var AuthType = {
   OAUTH: "OAUTH",
   ACCESS_TOKEN: "ACCESS_TOKEN"
 };
+var TargetAuthType = {
+  HEADERS: "HEADERS",
+  BASIC_AUTH: "BASIC_AUTH",
+  OAUTH2: "OAUTH2"
+};
+var BasicAuthLocation = {
+  HEADER: "HEADER",
+  PAYLOAD: "PAYLOAD"
+};
 var BrandSubCategory = {
   COMPETITOR_ENDORSEMENTS: "COMPETITOR_ENDORSEMENTS",
   BRAND_TARNISHING_SELF_CRITICISM: "BRAND_TARNISHING_SELF_CRITICISM",
@@ -1871,7 +1885,8 @@ var TargetConnectionType = {
   HUGGING_FACE: "HUGGING_FACE",
   CUSTOM: "CUSTOM",
   REST: "REST",
-  STREAMING: "STREAMING"
+  STREAMING: "STREAMING",
+  WEBSOCKET: "WEBSOCKET"
 };
 var TargetStatus = {
   DRAFT: "DRAFT",
@@ -1935,6 +1950,24 @@ var MultiTurnStatelessConfigSchema = z25.object({
   type: z25.string().default("stateless"),
   assistant_role: z25.string().nullable().optional()
 }).passthrough();
+var HeadersAuthConfigSchema = z25.object({ auth_header: z25.record(z25.unknown()) }).passthrough();
+var BasicAuthAuthConfigSchema = z25.object({
+  basic_auth_location: z25.string().default("HEADER"),
+  basic_auth_header: z25.record(z25.unknown()).nullable().optional()
+}).passthrough();
+var OAuth2AuthConfigSchema = z25.object({
+  oauth2_token_url: z25.string(),
+  oauth2_expiry_minutes: z25.number().int().default(60),
+  oauth2_headers: z25.record(z25.unknown()).optional(),
+  oauth2_body_params: z25.record(z25.unknown()).optional(),
+  oauth2_token_response_key: z25.string().default("access_token"),
+  oauth2_inject_header: z25.record(z25.unknown())
+}).passthrough();
+var AuthConfigSchema = z25.union([
+  HeadersAuthConfigSchema,
+  BasicAuthAuthConfigSchema,
+  OAuth2AuthConfigSchema
+]);
 var OpenAIConnectionParamsSchema = z25.object({
   api_key: z25.string(),
   model_name: z25.string()
@@ -1972,7 +2005,11 @@ var StreamingConnectionParamsSchema = RestConnectionParamsSchema.extend({
   response_stop_key: z25.string(),
   response_stop_value: z25.string()
 }).passthrough();
+var WebSocketConnectionParamsSchema = RestConnectionParamsSchema.extend({
+  ws_response_timeout: z25.number().default(110)
+}).passthrough();
 var ConnectionParamsSchema = z25.union([
+  WebSocketConnectionParamsSchema,
   StreamingConnectionParamsSchema,
   RestConnectionParamsSchema
 ]);
@@ -2077,7 +2114,8 @@ var TargetReferenceSchema = z25.object({
   target_metadata: TargetMetadataSchema.optional(),
   target_background: TargetBackgroundSchema.nullable().optional(),
   profiling_status: z25.string().nullable().optional(),
-  additional_context: TargetAdditionalContextSchema.nullable().optional()
+  additional_context: TargetAdditionalContextSchema.nullable().optional(),
+  auth_type: z25.string().nullable().optional()
 }).passthrough();
 var JobResponseSchema = z25.object({
   uuid: z25.string(),
@@ -2521,39 +2559,26 @@ var ErrorLogSchema = z25.object({
   version: z25.number().int().optional()
 }).passthrough();
 var ErrorLogListResponseSchema = z25.object({ pagination: RedTeamPaginationSchema, data: z25.array(ErrorLogSchema) }).passthrough();
-var TargetCreateRequestSchema = z25.object({
+var TargetRequestBaseFields = {
   name: z25.string(),
-  description: z25.unknown().optional(),
-  target_type: z25.unknown().optional(),
-  connection_type: z25.unknown().optional(),
-  api_endpoint_type: z25.unknown().optional(),
-  response_mode: z25.unknown().optional(),
-  connection_params: z25.unknown().optional(),
-  session_supported: z25.boolean().optional(),
-  target_metadata: z25.unknown().optional(),
-  target_background: z25.unknown().optional(),
-  additional_context: z25.unknown().optional(),
-  extra_info: z25.unknown().optional(),
-  network_broker_channel_uuid: z25.unknown().optional()
-}).passthrough();
-var TargetUpdateRequestSchema = z25.object({
-  name: z25.string(),
-  description: z25.unknown().optional(),
-  target_type: z25.unknown().optional(),
-  connection_type: z25.unknown().optional(),
-  api_endpoint_type: z25.unknown().optional(),
-  response_mode: z25.unknown().optional(),
-  connection_params: z25.unknown().optional(),
+  description: z25.string().nullable().optional(),
+  target_type: z25.string().nullable().optional(),
+  connection_type: z25.string().nullable().optional(),
+  api_endpoint_type: z25.string().nullable().optional(),
+  response_mode: z25.string().nullable().optional(),
+  connection_params: z25.union([RestConnectionParamsSchema, StreamingConnectionParamsSchema]).nullable().optional(),
   session_supported: z25.boolean().optional(),
-  target_metadata: z25.unknown().optional(),
-  target_background: z25.unknown().optional(),
-  additional_context: z25.unknown().optional(),
-  extra_info: z25.unknown().optional(),
-  network_broker_channel_uuid: z25.unknown().optional()
-}).passthrough();
+  target_metadata: TargetMetadataSchema.optional(),
+  target_background: TargetBackgroundSchema.nullable().optional(),
+  additional_context: TargetAdditionalContextSchema.nullable().optional(),
+  extra_info: z25.record(z25.unknown()).nullable().optional(),
+  network_broker_channel_uuid: z25.string().nullable().optional()
+};
+var TargetCreateRequestSchema = z25.object(TargetRequestBaseFields).strict();
+var TargetUpdateRequestSchema = z25.object(TargetRequestBaseFields).strict();
 var TargetContextUpdateSchema = z25.object({
-  target_background: z25.unknown().optional(),
-  additional_context: z25.unknown().optional()
+  target_background: TargetBackgroundSchema.nullable().optional(),
+  additional_context: TargetAdditionalContextSchema.nullable().optional()
 }).passthrough();
 var TargetResponseSchema = z25.object({
   uuid: z25.string(),
@@ -2578,7 +2603,8 @@ var TargetResponseSchema = z25.object({
   target_metadata: z25.unknown().optional(),
   target_background: z25.unknown().optional(),
   profiling_status: z25.unknown().optional(),
-  additional_context: z25.unknown().optional()
+  additional_context: z25.unknown().optional(),
+  auth_type: z25.string().nullable().optional()
 }).passthrough();
 var TargetListItemSchema = z25.object({
   uuid: z25.string(),
@@ -2599,25 +2625,25 @@ var TargetListItemSchema = z25.object({
   version: z25.unknown().optional(),
   secret_version: z25.unknown().optional(),
   created_by_user_id: z25.unknown().optional(),
-  updated_by_user_id: z25.unknown().optional()
+  updated_by_user_id: z25.unknown().optional(),
+  auth_type: z25.string().nullable().optional()
 }).passthrough();
 var TargetListSchema = z25.object({ pagination: RedTeamPaginationSchema, data: z25.array(TargetListItemSchema).optional() }).passthrough();
 var TargetProbeRequestSchema = z25.object({
-  name: z25.string(),
-  uuid: z25.unknown().optional(),
-  description: z25.unknown().optional(),
-  target_type: z25.unknown().optional(),
-  connection_type: z25.unknown().optional(),
-  api_endpoint_type: z25.unknown().optional(),
-  response_mode: z25.unknown().optional(),
-  connection_params: z25.unknown().optional(),
-  session_supported: z25.boolean().optional(),
-  target_metadata: z25.unknown().optional(),
-  target_background: z25.unknown().optional(),
-  additional_context: z25.unknown().optional(),
-  extra_info: z25.unknown().optional(),
-  network_broker_channel_uuid: z25.unknown().optional(),
-  probe_fields: z25.unknown().optional()
+  ...TargetRequestBaseFields,
+  uuid: z25.string().nullable().optional(),
+  probe_fields: z25.array(z25.string()).nullable().optional()
+}).strict();
+var TargetAuthValidationRequestSchema = z25.object({
+  auth_type: z25.string(),
+  auth_config: z25.unknown(),
+  target_id: z25.string().nullable().optional(),
+  network_broker_channel_uuid: z25.string().nullable().optional()
+}).passthrough();
+var TargetAuthValidationResponseSchema = z25.object({
+  validated: z25.boolean(),
+  token_preview: z25.string().nullable().optional(),
+  expires_in: z25.number().int().nullable().optional()
 }).passthrough();
 var TargetProfileResponseSchema = z25.object({
   target_id: z25.string(),
@@ -2629,6 +2655,15 @@ var TargetProfileResponseSchema = z25.object({
   ai_generated_fields: z25.unknown().optional(),
   other_details: z25.unknown().optional()
 }).passthrough();
+var TargetTemplateCollectionSchema = z25.object({
+  OPENAI: z25.record(z25.unknown()),
+  HUGGING_FACE: z25.record(z25.unknown()),
+  DATABRICKS: z25.record(z25.unknown()),
+  BEDROCK: z25.record(z25.unknown()),
+  REST: z25.record(z25.unknown()),
+  STREAMING: z25.record(z25.unknown()),
+  WEBSOCKET: z25.record(z25.unknown())
+}).passthrough();
 var BaseResponseSchema = z25.object({
   message: z25.string(),
   status: z25.number().int()
@@ -2686,7 +2721,6 @@ var CustomPromptSetListSchema = z25.object({
   pagination: RedTeamPaginationSchema,
   data: z25.array(CustomPromptSetListItemSchema).optional()
 }).passthrough();
-var CustomPromptSetListActiveSchema = z25.object({ data: z25.array(CustomPromptSetListItemSchema).optional() }).passthrough();
 var CustomPromptSetReferenceSchema = z25.object({
   uuid: z25.string(),
   name: z25.string(),
@@ -2697,6 +2731,7 @@ var CustomPromptSetReferenceSchema = z25.object({
   updated_at: z25.string(),
   version: z25.unknown().optional()
 }).passthrough();
+var CustomPromptSetListActiveSchema = z25.object({ data: z25.array(CustomPromptSetReferenceSchema).optional() }).passthrough();
 var CustomPromptSetVersionInfoSchema = z25.object({
   uuid: z25.string(),
   status: z25.string(),
@@ -2756,7 +2791,7 @@ var PropertyDefinitionSchema = z25.object({
   property_name: z25.string(),
   created_at: z25.string()
 }).passthrough();
-var PropertyNamesListResponseSchema = z25.object({ data: z25.array(PropertyDefinitionSchema).optional() }).passthrough();
+var PropertyNamesListResponseSchema = z25.object({ data: z25.array(z25.string()).optional() }).passthrough();
 var PropertyValuesResponseSchema = z25.object({
   name: z25.string(),
   values: z25.array(z25.string()).optional()
@@ -2766,6 +2801,117 @@ var DashboardOverviewResponseSchema = z25.object({
   total_targets: z25.number().int(),
   targets_by_type: z25.array(CountByNameSchema).optional()
 }).passthrough();
+var EulaAcceptRequestSchema = z25.object({
+  eula_content: z25.string(),
+  accepted_at: z25.string().nullable().optional()
+}).passthrough();
+var EulaContentResponseSchema = z25.object({
+  content: z25.string()
+}).passthrough();
+var EulaResponseSchema = z25.object({
+  uuid: z25.string().nullable().optional(),
+  is_accepted: z25.boolean(),
+  accepted_at: z25.string().nullable().optional(),
+  accepted_by_user_id: z25.string().nullable().optional()
+}).passthrough();
+var DeviceInstanceSchema = z25.object({
+  app_id: z25.string(),
+  region: z25.string(),
+  tenant_id: z25.string(),
+  tsg_id: z25.string()
+}).passthrough();
+var DeviceLicenseSchema = z25.object({
+  authorizationCode: z25.string().optional(),
+  expirationDate: z25.string().optional(),
+  licensePanDbIdentification: z25.string().optional(),
+  partNumber: z25.string().optional(),
+  serialNumber: z25.string().optional(),
+  subtypeName: z25.string().optional(),
+  registrationDate: z25.string().optional()
+}).passthrough();
+var DeviceSchema = z25.object({
+  serial_number: z25.string(),
+  model: z25.string().optional(),
+  sku: z25.string().optional(),
+  device_type: z25.string().optional(),
+  device_name: z25.string().optional(),
+  tsg_id: z25.string().optional(),
+  support_account_id: z25.string().optional(),
+  asset_type: z25.string().optional(),
+  licenses: z25.array(DeviceLicenseSchema).optional()
+}).passthrough();
+var DeviceStatusSchema = z25.object({
+  status: z25.string(),
+  error: z25.string().optional(),
+  serial_number: z25.string().optional()
+}).passthrough();
+var DeviceRequestSchema = z25.object({
+  instance: DeviceInstanceSchema,
+  created_by: z25.string().optional(),
+  devices: z25.array(DeviceSchema).optional()
+}).passthrough();
+var DeviceResponseSchema = z25.object({
+  devices: z25.array(DeviceStatusSchema).optional(),
+  status: z25.string().optional()
+}).passthrough();
+var DeploymentProfileAttributeSchema = z25.object({
+  quantity: z25.number().optional(),
+  unit_of_measure: z25.string().optional()
+}).passthrough();
+var DeploymentProfileRequestSchema = z25.object({
+  dAuthCode: z25.string().optional(),
+  deploymentProfileId: z25.string().optional(),
+  license_expiration: z25.string().optional(),
+  profileName: z25.string().optional(),
+  subType: z25.string().optional(),
+  subscriptions: z25.string().optional(),
+  type: z25.string().optional(),
+  aveTextRecord: z25.number().default(0),
+  attributes: z25.array(DeploymentProfileAttributeSchema).optional()
+}).passthrough();
+var InstanceExtraDetailsSchema = z25.object({
+  deployment_profiles: z25.array(DeploymentProfileRequestSchema).optional(),
+  airs_shared_by_tsg: z25.string().optional(),
+  airs_unshared_dps: z25.string().optional()
+}).passthrough();
+var InstanceRequestSchema = z25.object({
+  tsg_id: z25.string(),
+  tenant_id: z25.string(),
+  app_id: z25.string(),
+  region: z25.string(),
+  support_account_id: z25.string().optional(),
+  support_account_name: z25.string().optional(),
+  created_by: z25.string().optional(),
+  internal: z25.boolean().optional(),
+  tenant_instance_name: z25.string().optional(),
+  extra: InstanceExtraDetailsSchema.optional(),
+  iam_controlled: z25.boolean().optional(),
+  platform_region: z25.string().optional(),
+  csp_tenant_id: z25.string().optional(),
+  tsg_instances: z25.unknown().optional()
+}).passthrough();
+var InstanceResponseSchema = z25.object({
+  tsg_id: z25.string(),
+  tenant_id: z25.string().optional(),
+  app_id: z25.string().optional(),
+  is_success: z25.boolean().optional()
+}).passthrough();
+var InstanceGetResponseSchema = z25.object({
+  tsg_id: z25.string(),
+  tenant_id: z25.string(),
+  app_id: z25.string(),
+  region: z25.string(),
+  support_account_id: z25.string().optional(),
+  support_account_name: z25.string().optional(),
+  created_by: z25.string().optional(),
+  internal: z25.boolean().optional(),
+  tenant_instance_name: z25.string().optional(),
+  deployment_profiles: z25.array(DeploymentProfileRequestSchema).optional()
+}).passthrough();
+var RegistryCredentialsSchema = z25.object({
+  token: z25.string(),
+  expiry: z25.string()
+}).passthrough();
 
 // src/models/oauth-token.ts
 import { z as z26 } from "zod";
@@ -5028,6 +5174,50 @@ var RedTeamTargetsClient = class {
     });
     return res.data;
   }
+  /**
+   * Validate target authentication credentials.
+   * @param request - The auth validation request body.
+   * @returns The auth validation response.
+   */
+  async validateAuth(request) {
+    const res = await managementHttpRequest({
+      method: "POST",
+      baseUrl: this.baseUrl,
+      path: RED_TEAM_TARGET_VALIDATE_AUTH_PATH,
+      body: request,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Get target metadata (field definitions for target configuration).
+   * @returns The target metadata object.
+   */
+  async getTargetMetadata() {
+    const res = await managementHttpRequest({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_TEMPLATE_PATH}/target-metadata`,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Get target templates for all supported provider types.
+   * @returns The collection of target templates keyed by provider.
+   */
+  async getTargetTemplates() {
+    const res = await managementHttpRequest({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_TEMPLATE_PATH}/target-templates`,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
 };
 
 // src/red-team/custom-attacks-client.ts
@@ -5155,14 +5345,18 @@ var RedTeamCustomAttacksClient = class {
   /**
    * Get version information for a prompt set.
    * @param uuid - The prompt set UUID.
+   * @param opts - Optional query params (e.g. specific version ID).
    * @returns The prompt set version info.
    */
-  async getPromptSetVersionInfo(uuid) {
+  async getPromptSetVersionInfo(uuid, opts) {
     validateUuid(uuid, "prompt set uuid");
+    const params = {};
+    if (opts?.version !== void 0) params.version = opts.version;
     const res = await managementHttpRequest({
       method: "GET",
       baseUrl: this.baseUrl,
       path: `${RED_TEAM_CUSTOM_ATTACK_PATH}/custom-prompt-set/${uuid}/version-info`,
+      params: Object.keys(params).length > 0 ? params : void 0,
       oauthClient: this.oauthClient,
       numRetries: this.numRetries
     });
@@ -5258,6 +5452,7 @@ var RedTeamCustomAttacksClient = class {
   async listPrompts(promptSetUuid, opts) {
     validateUuid(promptSetUuid, "prompt set uuid");
     const params = buildRedTeamListParams(opts);
+    if (opts?.status !== void 0) params.status = opts.status;
     if (opts?.active !== void 0) params.active = String(opts.active);
     const res = await managementHttpRequest({
       method: "GET",
@@ -5412,6 +5607,202 @@ var RedTeamCustomAttacksClient = class {
   }
 };
 
+// src/red-team/eula-client.ts
+var RedTeamEulaClient = class {
+  baseUrl;
+  oauthClient;
+  numRetries;
+  constructor(opts) {
+    this.baseUrl = opts.baseUrl;
+    this.oauthClient = opts.oauthClient;
+    this.numRetries = opts.numRetries;
+  }
+  /**
+   * Get the current EULA content.
+   * @returns The EULA content response.
+   */
+  async getContent() {
+    const res = await managementHttpRequest({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_EULA_PATH}/content`,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Get the current EULA acceptance status.
+   * @returns The EULA status response.
+   */
+  async getStatus() {
+    const res = await managementHttpRequest({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_EULA_PATH}/status`,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Accept the EULA.
+   * @param request - The acceptance request body.
+   * @returns The EULA response with acceptance status.
+   */
+  async accept(request) {
+    const res = await managementHttpRequest({
+      method: "POST",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_EULA_PATH}/accept`,
+      body: request,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+};
+
+// src/red-team/instances-client.ts
+var RedTeamInstancesClient = class {
+  baseUrl;
+  oauthClient;
+  numRetries;
+  constructor(opts) {
+    this.baseUrl = opts.baseUrl;
+    this.oauthClient = opts.oauthClient;
+    this.numRetries = opts.numRetries;
+  }
+  /**
+   * Create a new tenant instance.
+   * @param request - The instance creation request.
+   * @returns The instance response.
+   */
+  async createInstance(request) {
+    const res = await managementHttpRequest({
+      method: "POST",
+      baseUrl: this.baseUrl,
+      path: RED_TEAM_INSTANCES_PATH,
+      body: request,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Get an existing tenant instance.
+   * @param tenantId - The tenant ID.
+   * @returns The instance details.
+   */
+  async getInstance(tenantId) {
+    const res = await managementHttpRequest({
+      method: "GET",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_INSTANCES_PATH}/${tenantId}`,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Update an existing tenant instance.
+   * @param tenantId - The tenant ID.
+   * @param request - The instance update request.
+   * @returns The instance response.
+   */
+  async updateInstance(tenantId, request) {
+    const res = await managementHttpRequest({
+      method: "PUT",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_INSTANCES_PATH}/${tenantId}`,
+      body: request,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Delete a tenant instance.
+   * @param tenantId - The tenant ID.
+   * @returns The instance response.
+   */
+  async deleteInstance(tenantId) {
+    const res = await managementHttpRequest({
+      method: "DELETE",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_INSTANCES_PATH}/${tenantId}`,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Create devices for a tenant instance.
+   * @param tenantId - The tenant ID.
+   * @param request - The device creation request.
+   * @returns The device response with statuses.
+   */
+  async createDevices(tenantId, request) {
+    const res = await managementHttpRequest({
+      method: "POST",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_INSTANCES_PATH}/${tenantId}/devices`,
+      body: request,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Update devices for a tenant instance.
+   * @param tenantId - The tenant ID.
+   * @param request - The device update request.
+   * @returns The device response with statuses.
+   */
+  async updateDevices(tenantId, request) {
+    const res = await managementHttpRequest({
+      method: "PATCH",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_INSTANCES_PATH}/${tenantId}/devices`,
+      body: request,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Delete devices from a tenant instance.
+   * @param tenantId - The tenant ID.
+   * @param serialNumbers - Comma-separated serial numbers to delete.
+   * @returns The device response with statuses.
+   */
+  async deleteDevices(tenantId, serialNumbers) {
+    const res = await managementHttpRequest({
+      method: "DELETE",
+      baseUrl: this.baseUrl,
+      path: `${RED_TEAM_INSTANCES_PATH}/${tenantId}/devices`,
+      params: { serial_numbers: serialNumbers },
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+  /**
+   * Get or create registry credentials.
+   * @returns The registry credentials with token and expiry.
+   */
+  async getRegistryCredentials() {
+    const res = await managementHttpRequest({
+      method: "POST",
+      baseUrl: this.baseUrl,
+      path: RED_TEAM_REGISTRY_CREDENTIALS_PATH,
+      oauthClient: this.oauthClient,
+      numRetries: this.numRetries
+    });
+    return res.data;
+  }
+};
+
 // src/red-team/client.ts
 var RedTeamClient = class {
   /** Data plane scan operations. */
@@ -5424,6 +5815,10 @@ var RedTeamClient = class {
   targets;
   /** Management plane custom attack/prompt set operations. */
   customAttacks;
+  /** Management plane EULA operations. */
+  eula;
+  /** Management plane instance/licensing operations. */
+  instances;
   dataEndpoint;
   mgmtEndpoint;
   oauthClient;
@@ -5470,6 +5865,16 @@ var RedTeamClient = class {
       oauthClient,
       numRetries
     });
+    this.eula = new RedTeamEulaClient({
+      baseUrl: mgmtEndpoint,
+      oauthClient,
+      numRetries
+    });
+    this.instances = new RedTeamInstancesClient({
+      baseUrl: mgmtEndpoint,
+      oauthClient,
+      numRetries
+    });
   }
   // -----------------------------------------------------------------------
   // Data plane convenience methods
@@ -5633,9 +6038,12 @@ export {
   AttackOutputSchema,
   AttackStatus,
   AttackType,
+  AuthConfigSchema,
   AuthType,
   BEARER,
   BaseResponseSchema,
+  BasicAuthAuthConfigSchema,
+  BasicAuthLocation,
   BedrockAccessConnectionParamsSchema,
   BrandSubCategory,
   Category,
@@ -5701,11 +6109,19 @@ export {
   DeleteProfileResponseSchema,
   DeleteTopicConflictSchema,
   DeleteTopicResponseSchema,
+  DeploymentProfileAttributeSchema,
   DeploymentProfileEntrySchema,
+  DeploymentProfileRequestSchema,
   DeploymentProfilesClient,
   DeploymentProfilesResponseSchema,
   DetectionServiceName,
   DetectionServiceResultSchema,
+  DeviceInstanceSchema,
+  DeviceLicenseSchema,
+  DeviceRequestSchema,
+  DeviceResponseSchema,
+  DeviceSchema,
+  DeviceStatusSchema,
   DlpDataProfilePolicySchema,
   DlpDataProfileSchema,
   DlpPatternDetectionSchema,
@@ -5723,6 +6139,9 @@ export {
   ErrorSource,
   ErrorStatus,
   ErrorType,
+  EulaAcceptRequestSchema,
+  EulaContentResponseSchema,
+  EulaResponseSchema,
   EvalOutcome,
   EvalSummarySchema,
   FileFormat,
@@ -5740,8 +6159,13 @@ export {
   HEADER_AUTH_TOKEN,
   HTTPValidationErrorSchema,
   HTTP_FORCE_RETRY_STATUS_CODES,
+  HeadersAuthConfigSchema,
   HuggingfaceConnectionParamsSchema,
   IODetectedSchema,
+  InstanceExtraDetailsSchema,
+  InstanceGetResponseSchema,
+  InstanceRequestSchema,
+  InstanceResponseSchema,
   JobAbortResponseSchema,
   JobCreateRequestSchema,
   JobListResponseSchema,
@@ -5829,6 +6253,7 @@ export {
   ModelSecurityScansClient,
   MultiTurnStatefulConfigSchema,
   MultiTurnStatelessConfigSchema,
+  OAuth2AuthConfigSchema,
   OAuthClient,
   OAuthManagementClient,
   Oauth2TokenSchema,
@@ -5870,15 +6295,20 @@ export {
   RED_TEAM_DASHBOARD_PATH,
   RED_TEAM_DATA_ENDPOINT,
   RED_TEAM_ERROR_LOG_PATH,
+  RED_TEAM_EULA_PATH,
+  RED_TEAM_INSTANCES_PATH,
   RED_TEAM_MGMT_DASHBOARD_PATH,
   RED_TEAM_MGMT_ENDPOINT,
   RED_TEAM_QUOTA_PATH,
+  RED_TEAM_REGISTRY_CREDENTIALS_PATH,
   RED_TEAM_REPORT_DYNAMIC_PATH,
   RED_TEAM_REPORT_PATH,
   RED_TEAM_REPORT_STATIC_PATH,
   RED_TEAM_SCAN_PATH,
   RED_TEAM_SENTIMENT_PATH,
   RED_TEAM_TARGET_PATH,
+  RED_TEAM_TARGET_VALIDATE_AUTH_PATH,
+  RED_TEAM_TEMPLATE_PATH,
   RED_TEAM_TOKEN_ENDPOINT,
   RED_TEAM_TSG_ID,
   RedTeamCategory,
@@ -5886,10 +6316,13 @@ export {
   RedTeamCustomAttackReportsClient,
   RedTeamCustomAttacksClient,
   RedTeamErrorType,
+  RedTeamEulaClient,
+  RedTeamInstancesClient,
   RedTeamPaginationSchema,
   RedTeamReportsClient,
   RedTeamScansClient,
   RedTeamTargetsClient,
+  RegistryCredentialsSchema,
   RemediationDetailSchema,
   RemediationResponseSchema,
   ResponseDetectedSchema,
@@ -5959,6 +6392,9 @@ export {
   SubCategoryModelSchema,
   SubCategoryStatsSchema,
   TargetAdditionalContextSchema,
+  TargetAuthType,
+  TargetAuthValidationRequestSchema,
+  TargetAuthValidationResponseSchema,
   TargetBackgroundSchema,
   TargetConnectionType,
   TargetContextUpdateSchema,
@@ -5972,6 +6408,7 @@ export {
   TargetReferenceSchema,
   TargetResponseSchema,
   TargetStatus,
+  TargetTemplateCollectionSchema,
   TargetType,
   TargetUpdateRequestSchema,
   TcReportSchema,
@@ -5991,6 +6428,7 @@ export {
   Verdict,
   ViolationListSchema,
   ViolationResponseSchema,
+  WebSocketConnectionParamsSchema,
   globalConfiguration,
   init
 };