@driftgard/node 1.10.0 → 1.11.0

package/README.md

@@ -53,6 +53,53 @@ const result = await dg.evaluate({
 
 This enables chain depth protection (prevents infinite agent loops) and lets you trace evaluation lineage in the dashboard. When `sequence_no` is provided, DriftGard enforces ordering — if an eval arrives out of order, the response includes a `sequence_warning`.
 
+## Agent identity
+
+Identify which agent made a decision using `agent_id` and `agent_role`:
+
+```typescript
+const result = await dg.evaluate({
+  project_id: "your-project-id",
+  prompt: "Transfer $500",
+  response: "Transfer initiated.",
+  model_id: "gpt-4o",
+  agent_id: "agent_payments_prod",        // which agent instance
+  agent_role: "payments_agent",           // agent's role for policy scoping
+  on_behalf_of: "user_12345",            // which end-user triggered this
+  // parent_agent_id: "agent_orchestrator", // optional — which parent agent delegated
+  session_id: "sess_abc123",
+});
+```
+
+Agent identity fields are stored on the evaluation record and visible in the Live Activity detail dialog. The `on_behalf_of` field tracks which end-user triggered the agent action. The `parent_agent_id` field identifies which orchestrator agent delegated to this one in multi-agent systems.
+
+### Per-tool identity rules
+
+Control packs support `identity_rules` on each tool — restricting which agents, roles, users, or parent agents can call it. Rules use OR logic across entries and AND logic within each entry:
+
+```json
+{
+  "tool_rules": {
+    "tool_policy": "deny_unlisted",
+    "rules": {
+      "transfer_money": {
+        "parameters": { ... },
+        "identity_rules": [
+          { "allowed_roles": ["payments_agent"], "allowed_users": ["user_alice", "user_bob"] },
+          { "allowed_roles": ["admin_agent"] }
+        ]
+      }
+    }
+  }
+}
+```
+
+In this example, `transfer_money` is allowed when:
+- The caller has `agent_role=payments_agent` AND `on_behalf_of` is `user_alice` or `user_bob`, OR
+- The caller has `agent_role=admin_agent` (any user)
+
+If no `identity_rules` are defined on a tool, any caller can use it (subject to parameter validation). All four fields are optional within each rule — only specified fields are checked.
+
 ## A/B experiments
 
 Tag evaluations with an `experiment_id` to compare governance metrics across models:
@@ -117,6 +164,10 @@ const result = await dg.evaluateToolCall({
   tool_name: "transfer_money",
   parameters: { amount: 500, to_account: "account_123" },
   session_id: "sess_abc123",
+  agent_id: "agent_payments_prod",
+  agent_role: "payments_agent",
+  on_behalf_of: "user_12345",
+  // parent_agent_id: "agent_orchestrator",
 });
 
 if (!result.evaluation.allowed) {

package/dist/index.js

@@ -61,6 +61,10 @@ class Driftgard {
                 ...(req.eval_mode ? { eval_mode: req.eval_mode } : {}),
                 ...(req.tool_call ? { tool_call: req.tool_call } : {}),
                 ...(req.sequence_no != null ? { sequence_no: req.sequence_no } : {}),
+                ...(req.agent_id ? { agent_id: req.agent_id } : {}),
+                ...(req.agent_role ? { agent_role: req.agent_role } : {}),
+                ...(req.on_behalf_of ? { on_behalf_of: req.on_behalf_of } : {}),
+                ...(req.parent_agent_id ? { parent_agent_id: req.parent_agent_id } : {}),
                 ...(req.usage ? { usage: req.usage } : {}),
             }, idempotencyKey);
             // Success — reset circuit breaker
@@ -135,6 +139,10 @@ class Driftgard {
             parent_evaluation_id: req.parent_evaluation_id,
             idempotency_key: req.idempotency_key,
             sequence_no: req.sequence_no,
+            agent_id: req.agent_id,
+            agent_role: req.agent_role,
+            on_behalf_of: req.on_behalf_of,
+            parent_agent_id: req.parent_agent_id,
         });
     }
     /**

package/dist/types.d.ts

@@ -35,6 +35,14 @@ export interface EvaluateRequest {
     idempotency_key?: string;
     /** Sequence number within a session for ordering. Optional — if sent, ordering is enforced. */
     sequence_no?: number;
+    /** Agent identity — who or what is making this decision. */
+    agent_id?: string;
+    /** Agent role — scopes what the agent is allowed to do. */
+    agent_role?: string;
+    /** End-user ID — which human triggered this agent action. */
+    on_behalf_of?: string;
+    /** Parent agent ID — which orchestrator agent delegated to this one. */
+    parent_agent_id?: string;
     usage?: {
         prompt_tokens?: number;
         completion_tokens?: number;
@@ -141,6 +149,10 @@ export interface ToolCallRequest {
     parent_evaluation_id?: string;
     idempotency_key?: string;
     sequence_no?: number;
+    agent_id?: string;
+    agent_role?: string;
+    on_behalf_of?: string;
+    parent_agent_id?: string;
 }
 export interface OutcomeRequest {
     execution_status: "success" | "failed" | "rolled_back";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@driftgard/node",
-  "version": "1.10.0",
+  "version": "1.11.0",
   "description": "Official DriftGard Node.js SDK — evaluate LLM interactions against your compliance policy",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",