Local Setup¶

Prerequisites¶

Requirement	Version
Node.js	>= 20.0.0 (ES2022 target)
pnpm	Latest (recommended)

git clone git@github.com:cdot65/prisma-airs-cli.git
cd prisma-airs-cli
pnpm install

cp .env.example .env

Edit .env with your credentials:

Variable	Required	What it's for
`ANTHROPIC_API_KEY`	Yes*	LLM provider API key
`PANW_AI_SEC_API_KEY`	Yes	Prisma AIRS Scan API key
`PANW_MGMT_CLIENT_ID`	Yes	AIRS Management OAuth2 client ID
`PANW_MGMT_CLIENT_SECRET`	Yes	AIRS Management OAuth2 client secret
`PANW_MGMT_TSG_ID`	Yes	Tenant Service Group ID

*Or the equivalent for your chosen provider.

Tests run without credentials

Unit and integration tests use MSW mocks — you only need real credentials for E2E tests and actual AIRS operations.

To make the airs binary available globally from your source checkout:

pnpm run build
pnpm link --global
airs --version   # 1.0.6

After making code changes, re-run pnpm run build for the linked airs command to reflect them. pnpm run dev doesn't require a build step.

Command	What it does
`pnpm run dev`	Run CLI via tsx — no build needed (e.g. `pnpm run dev runtime scan ...`)
`pnpm run build`	Compile TypeScript to `dist/`
`pnpm test`	Run all tests
`pnpm run test:watch`	Watch mode
`pnpm run test:coverage`	Coverage report
`pnpm run lint`	Biome lint check
`pnpm run lint:fix`	Auto-fix lint issues
`pnpm run format`	Format with Biome
`pnpm run format:check`	Check formatting (no write)
`pnpm tsc --noEmit`	Type-check

Runtime data lives under ~/.prisma-airs/:

Config priority

CLI flags > environment variables > config file > Zod schema defaults

Run all three checks to confirm everything works:

pnpm test           # All tests pass (no AIRS creds needed)
pnpm run lint       # No lint errors
pnpm tsc --noEmit   # No type errors

All three should pass on a fresh clone

If any fail, make sure you're on Node >= 20 and have run pnpm install.