@driftgard/node 1.7.0 → 1.9.0

package/README.md

@@ -47,10 +47,11 @@ const result = await dg.evaluate({
   model_id: "gpt-4o",
   session_id: "sess_abc123",              // groups evals in a conversation
   parent_evaluation_id: "eval_prev_id",   // chains to the previous eval
+  sequence_no: 1,                          // optional — enforces ordering within session
 });
 ```
 
-This enables chain depth protection (prevents infinite agent loops) and lets you trace evaluation lineage in the dashboard.
+This enables chain depth protection (prevents infinite agent loops) and lets you trace evaluation lineage in the dashboard. When `sequence_no` is provided, Driftgard enforces ordering — if an eval arrives out of order, the response includes a `sequence_warning`.
 
 ## A/B experiments
 
@@ -135,6 +136,20 @@ await dg.reportOutcome(result.evaluation_id, "your-project-id", {
 
 For Strands agents, use the `BeforeToolCallEvent` hook — see the integration guide.
 
+### Custom expressions
+
+Parameter rules support `custom_fn` for advanced validation. The expression is evaluated safely (no `eval`) with access to `value` (current param) and `params` (all params):
+
+```json
+{
+  "amount": { "type": "number", "custom_fn": "value > 0 && value <= 10000" },
+  "to_account": { "type": "string", "custom_fn": "value !== params.from_account" },
+  "message": { "type": "string", "custom_fn": "value.length <= 500" }
+}
+```
+
+Supported: comparisons (`< > <= >= === !==`), logical (`&& || !`), arithmetic (`+ - * /`), string methods (`.length`, `.includes()`, `.startsWith()`, `.endsWith()`), and cross-parameter access via `params.field_name`.
+
 ## Features
 
 - Single `evaluate()` method — send prompt/response, get verdict

package/dist/index.js

@@ -60,6 +60,7 @@ class Driftgard {
                 ...(req.dry_run ? { dry_run: req.dry_run } : {}),
                 ...(req.eval_mode ? { eval_mode: req.eval_mode } : {}),
                 ...(req.tool_call ? { tool_call: req.tool_call } : {}),
+                ...(req.sequence_no != null ? { sequence_no: req.sequence_no } : {}),
                 ...(req.usage ? { usage: req.usage } : {}),
             }, idempotencyKey);
             // Success — reset circuit breaker
@@ -133,6 +134,7 @@ class Driftgard {
             session_id: req.session_id,
             parent_evaluation_id: req.parent_evaluation_id,
             idempotency_key: req.idempotency_key,
+            sequence_no: req.sequence_no,
         });
     }
     /**

package/dist/types.d.ts

@@ -33,6 +33,8 @@ export interface EvaluateRequest {
     };
     /** Caller-provided idempotency key. If omitted, the SDK generates one. */
     idempotency_key?: string;
+    /** Sequence number within a session for ordering. Optional — if sent, ordering is enforced. */
+    sequence_no?: number;
     usage?: {
         prompt_tokens?: number;
         completion_tokens?: number;
@@ -122,6 +124,13 @@ export interface EvaluateResponse {
         tool_name: string;
         parameters?: Record<string, any>;
     };
+    sequence_no?: number;
+    sequence_warning?: {
+        message: string;
+        expected_next: number;
+        received: number;
+        max_seen: number;
+    };
 }
 export interface ToolCallRequest {
     project_id: string;
@@ -131,6 +140,7 @@ export interface ToolCallRequest {
     session_id?: string;
     parent_evaluation_id?: string;
     idempotency_key?: string;
+    sequence_no?: number;
 }
 export interface OutcomeRequest {
     execution_status: "success" | "failed" | "rolled_back";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@driftgard/node",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "Official Driftgard Node.js SDK — evaluate LLM interactions against your compliance policy",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",