@cdot65/prisma-airs-sdk 0.6.7 → 0.6.9

package/dist/index.js

@@ -29,7 +29,7 @@ var MAX_NUMBER_OF_BATCH_SCAN_OBJECTS = 5;
 var MAX_CONNECTION_POOL_SIZE = 100;
 var MAX_NUMBER_OF_RETRIES = 5;
 var HTTP_FORCE_RETRY_STATUS_CODES = [500, 502, 503, 504];
-var SDK_VERSION = "0.6.7";
+var SDK_VERSION = "0.6.9";
 var USER_AGENT = `PAN-AIRS/${SDK_VERSION}-typescript-sdk`;
 var DEFAULT_MGMT_ENDPOINT = "https://api.sase.paloaltonetworks.com/aisec";
 var DEFAULT_TOKEN_ENDPOINT = "https://auth.apps.paloaltonetworks.com/oauth2/access_token";
@@ -930,41 +930,90 @@ var ErrorResponseSchema = z15.object({
 
 // src/models/mgmt-security-profile.ts
 import { z as z16 } from "zod";
-var DlpDataProfileSchema = z16.object({
-  profile_name: z16.string(),
-  active: z16.boolean().optional()
-}).passthrough();
-var DlpSchema = z16.object({
-  dlp_status: z16.string().optional(),
-  data_profiles: z16.array(DlpDataProfileSchema).optional()
-}).passthrough();
-var DataLeakDetectionSchema = z16.object({
-  "data-leak-detection-status": z16.string().optional(),
-  dlp: DlpSchema.optional()
-}).passthrough();
-var AppProtectionSchema = z16.object({
-  "prompt-injection": z16.string().optional(),
-  "jailbreak-detection": z16.string().optional()
-}).passthrough();
-var ModelProtectionSchema = z16.object({
-  "model-denial-of-service": z16.string().optional()
-}).passthrough();
-var AgentProtectionSchema = z16.object({
-  "malicious-agent-activity": z16.string().optional()
-}).passthrough();
-var LatencySchema = z16.object({
-  status: z16.string().optional(),
-  max_latency_ms: z16.number().optional()
+var PolicyLatencySchema = z16.object({
+  "inline-timeout-action": z16.string().optional(),
+  "max-inline-latency": z16.number().optional()
+}).passthrough();
+var DataLeakDetectionMemberSchema = z16.object({
+  text: z16.string(),
+  id: z16.string().optional(),
+  version: z16.string().optional()
+}).passthrough();
+var DatabaseSecurityItemSchema = z16.object({
+  name: z16.string(),
+  action: z16.string()
+}).passthrough();
+var DataProtectionSchema = z16.object({
+  "data-leak-detection": z16.object({
+    member: z16.array(DataLeakDetectionMemberSchema).nullable().optional(),
+    action: z16.string(),
+    "mask-data-inline": z16.boolean().optional()
+  }).passthrough().optional(),
+  "database-security": z16.array(DatabaseSecurityItemSchema).nullable().optional()
+}).passthrough();
+var UrlCategorySchema = z16.object({
+  member: z16.array(z16.string()).nullable().optional()
+}).passthrough();
+var MaliciousCodeProtectionSchema = z16.object({
+  name: z16.string(),
+  action: z16.string()
+}).passthrough();
+var PolicyAppProtectionSchema = z16.object({
+  "alert-url-category": UrlCategorySchema.optional(),
+  "block-url-category": UrlCategorySchema.optional(),
+  "allow-url-category": UrlCategorySchema.optional(),
+  "default-url-category": UrlCategorySchema.optional(),
+  "url-detected-action": z16.string().optional(),
+  "malicious-code-protection": MaliciousCodeProtectionSchema.optional()
+}).passthrough();
+var TopicObjectSchema = z16.object({
+  topic_name: z16.string(),
+  topic_id: z16.string(),
+  revision: z16.number()
+}).passthrough();
+var TopicArraySchema = z16.object({
+  action: z16.string(),
+  topic: z16.array(TopicObjectSchema)
+}).passthrough();
+var ModelProtectionItemSchema = z16.object({
+  name: z16.string(),
+  action: z16.string(),
+  "topic-list": z16.array(TopicArraySchema).optional()
+}).passthrough();
+var AgentProtectionItemSchema = z16.object({
+  name: z16.string(),
+  action: z16.string()
+}).passthrough();
+var DlpRuleSchema = z16.object({
+  action: z16.string().optional()
+}).passthrough();
+var DlpDataProfilePolicySchema = z16.object({
+  name: z16.string(),
+  uuid: z16.string(),
+  id: z16.string().optional(),
+  version: z16.string().optional(),
+  rule1: DlpRuleSchema.optional(),
+  rule2: DlpRuleSchema.optional(),
+  "log-severity": z16.string().optional(),
+  "non-file-based": z16.string().optional(),
+  "file-based": z16.string().optional()
 }).passthrough();
 var ModelConfigurationSchema = z16.object({
-  latency: LatencySchema.optional()
+  "mask-data-in-storage": z16.boolean().optional(),
+  latency: PolicyLatencySchema.optional(),
+  "data-protection": DataProtectionSchema.optional(),
+  "app-protection": PolicyAppProtectionSchema.optional(),
+  "model-protection": z16.array(ModelProtectionItemSchema).optional(),
+  "agent-protection": z16.array(AgentProtectionItemSchema).optional()
+}).passthrough();
+var AiSecurityProfileSchema = z16.object({
+  "model-type": z16.string().optional(),
+  "content-type": z16.string().optional(),
+  "model-configuration": ModelConfigurationSchema.optional()
 }).passthrough();
 var PolicySchema = z16.object({
-  "data-leak-detection": DataLeakDetectionSchema.optional(),
-  "app-protection": AppProtectionSchema.optional(),
-  "model-protection": ModelProtectionSchema.optional(),
-  "agent-protection": AgentProtectionSchema.optional(),
-  "model-configuration": ModelConfigurationSchema.optional()
+  "ai-security-profiles": z16.array(AiSecurityProfileSchema).optional(),
+  "dlp-data-profiles": z16.array(DlpDataProfilePolicySchema).optional()
 }).passthrough();
 var SecurityProfileSchema = z16.object({
   profile_id: z16.string().optional(),
@@ -1154,7 +1203,7 @@ var DeploymentProfilesResponseSchema = z20.object({
 
 // src/models/mgmt-dlp-profile.ts
 import { z as z21 } from "zod";
-var DlpDataProfileSchema2 = z21.object({
+var DlpDataProfileSchema = z21.object({
   name: z21.string(),
   uuid: z21.string(),
   id: z21.string().optional(),
@@ -1166,7 +1215,7 @@ var DlpDataProfileSchema2 = z21.object({
   "file-based": z21.string().optional()
 }).passthrough();
 var DlpProfileListResponseSchema = z21.object({
-  dlp_profiles: z21.array(DlpDataProfileSchema2).optional()
+  dlp_profiles: z21.array(DlpDataProfileSchema).optional()
 }).passthrough();
 
 // src/models/mgmt-scan-log.ts
@@ -2984,6 +3033,40 @@ var ProfilesClient = class {
     });
     return res.data;
   }
+  /**
+   * Get a security profile by UUID.
+   * Fetches all profiles and filters — no dedicated API endpoint exists.
+   * @param profileId - UUID of the profile to retrieve.
+   * @returns The matching security profile.
+   */
+  async get(profileId) {
+    const { ai_profiles } = await this.list();
+    const profile = ai_profiles.find((p) => p.profile_id === profileId);
+    if (!profile) {
+      throw new AISecSDKException(
+        `Profile not found: ${profileId}`,
+        "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
+      );
+    }
+    return profile;
+  }
+  /**
+   * Get a security profile by name.
+   * Returns the highest-revision match (latest version).
+   * @param profileName - Name of the profile to retrieve.
+   * @returns The matching security profile with the highest revision.
+   */
+  async getByName(profileName) {
+    const { ai_profiles } = await this.list();
+    const matches = ai_profiles.filter((p) => p.profile_name === profileName);
+    if (matches.length === 0) {
+      throw new AISecSDKException(
+        `Profile not found: ${profileName}`,
+        "AISEC_USER_REQUEST_PAYLOAD_ERROR" /* USER_REQUEST_PAYLOAD_ERROR */
+      );
+    }
+    return matches.reduce((best, p) => (p.revision ?? 0) > (best.revision ?? 0) ? p : best);
+  }
   /**
    * Update an existing security profile.
    * @param profileId - UUID of the profile to update.
@@ -5522,8 +5605,10 @@ export {
   Action,
   AgentEntrySchema,
   AgentMetaSchema,
+  AgentProtectionItemSchema,
   AgentReportSchema,
   AiProfileSchema,
+  AiSecurityProfileSchema,
   ApiEndpointType,
   ApiKeyCreateRequestSchema,
   ApiKeyDPInfoSchema,
@@ -5599,6 +5684,9 @@ export {
   DSDetailResultSchema,
   DSResultMetadataSchema,
   DashboardOverviewResponseSchema,
+  DataLeakDetectionMemberSchema,
+  DataProtectionSchema,
+  DatabaseSecurityItemSchema,
   DatabricksConnectionParamsSchema,
   DateRangeFilter,
   DbsEntrySchema,
@@ -5612,11 +5700,13 @@ export {
   DeploymentProfilesResponseSchema,
   DetectionServiceName,
   DetectionServiceResultSchema,
-  DlpDataProfileSchema2 as DlpDataProfileSchema,
+  DlpDataProfilePolicySchema,
+  DlpDataProfileSchema,
   DlpPatternDetectionSchema,
   DlpProfileListResponseSchema,
   DlpProfilesClient,
   DlpReportSchema,
+  DlpRuleSchema,
   DynamicJobMetadataSchema,
   DynamicJobReportSchema,
   DynamicJobReportStatsSchema,
@@ -5708,12 +5798,15 @@ export {
   MODEL_SEC_TOKEN_ENDPOINT,
   MODEL_SEC_TSG_ID,
   MODEL_SEC_VIOLATIONS_PATH,
+  MaliciousCodeProtectionSchema,
   MalwareReportSchema,
   ManagementClient,
   MaskedDataSchema,
   McEntrySchema,
   McReportSchema,
   MetadataSchema,
+  ModelConfigurationSchema,
+  ModelProtectionItemSchema,
   ModelScanIssueSchema,
   ModelScanStatus,
   ModelSecurityClient,
@@ -5738,6 +5831,8 @@ export {
   PAYLOAD_HASH,
   PaginatedScanResultsSchema,
   PatternDetectionSchema,
+  PolicyAppProtectionSchema,
+  PolicyLatencySchema,
   PolicySchema,
   PolicyType,
   PrerequisiteModelSchema,
@@ -5880,8 +5975,11 @@ export {
   ToolDetectedSchema,
   ToolEventMetadataSchema,
   ToolEventSchema,
+  TopicArraySchema,
+  TopicObjectSchema,
   TopicsClient,
   USER_AGENT,
+  UrlCategorySchema,
   UrlfEntrySchema,
   ValidationErrorSchema,
   Verdict,