@driftgard/node 1.9.0 → 1.11.0

package/README.md

@@ -1,6 +1,6 @@
 # @driftgard/node
 
-Official Node.js SDK for [Driftgard](https://driftgard.com) — evaluate LLM interactions against your compliance policy.
+Official Node.js SDK for [DriftGard](https://driftgard.com) — evaluate LLM interactions against your compliance policy.
 
 ## Install
 
@@ -51,7 +51,54 @@ const result = await dg.evaluate({
 });
 ```
 
-This enables chain depth protection (prevents infinite agent loops) and lets you trace evaluation lineage in the dashboard. When `sequence_no` is provided, Driftgard enforces ordering — if an eval arrives out of order, the response includes a `sequence_warning`.
+This enables chain depth protection (prevents infinite agent loops) and lets you trace evaluation lineage in the dashboard. When `sequence_no` is provided, DriftGard enforces ordering — if an eval arrives out of order, the response includes a `sequence_warning`.
+
+## Agent identity
+
+Identify which agent made a decision using `agent_id` and `agent_role`:
+
+```typescript
+const result = await dg.evaluate({
+  project_id: "your-project-id",
+  prompt: "Transfer $500",
+  response: "Transfer initiated.",
+  model_id: "gpt-4o",
+  agent_id: "agent_payments_prod",        // which agent instance
+  agent_role: "payments_agent",           // agent's role for policy scoping
+  on_behalf_of: "user_12345",            // which end-user triggered this
+  // parent_agent_id: "agent_orchestrator", // optional — which parent agent delegated
+  session_id: "sess_abc123",
+});
+```
+
+Agent identity fields are stored on the evaluation record and visible in the Live Activity detail dialog. The `on_behalf_of` field tracks which end-user triggered the agent action. The `parent_agent_id` field identifies which orchestrator agent delegated to this one in multi-agent systems.
+
+### Per-tool identity rules
+
+Control packs support `identity_rules` on each tool — restricting which agents, roles, users, or parent agents can call it. Rules use OR logic across entries and AND logic within each entry:
+
+```json
+{
+  "tool_rules": {
+    "tool_policy": "deny_unlisted",
+    "rules": {
+      "transfer_money": {
+        "parameters": { ... },
+        "identity_rules": [
+          { "allowed_roles": ["payments_agent"], "allowed_users": ["user_alice", "user_bob"] },
+          { "allowed_roles": ["admin_agent"] }
+        ]
+      }
+    }
+  }
+}
+```
+
+In this example, `transfer_money` is allowed when:
+- The caller has `agent_role=payments_agent` AND `on_behalf_of` is `user_alice` or `user_bob`, OR
+- The caller has `agent_role=admin_agent` (any user)
+
+If no `identity_rules` are defined on a tool, any caller can use it (subject to parameter validation). All four fields are optional within each rule — only specified fields are checked.
 
 ## A/B experiments
 
@@ -67,7 +114,7 @@ const result = await dg.evaluate({
 });
 ```
 
-View experiment results on the Experiments page in the Driftgard dashboard.
+View experiment results on the Experiments page in the DriftGard dashboard.
 
 ## Cost attribution
 
@@ -117,6 +164,10 @@ const result = await dg.evaluateToolCall({
   tool_name: "transfer_money",
   parameters: { amount: 500, to_account: "account_123" },
   session_id: "sess_abc123",
+  agent_id: "agent_payments_prod",
+  agent_role: "payments_agent",
+  on_behalf_of: "user_12345",
+  // parent_agent_id: "agent_orchestrator",
 });
 
 if (!result.evaluation.allowed) {
@@ -196,7 +247,7 @@ console.log(dg.circuitBreakerState);
 // { state: "closed", failures: 0, openedAt: 0 }
 ```
 
-With `failureMode: "open"` (default), the SDK allows requests through when Driftgard is unavailable. With `failureMode: "closed"`, it blocks them with a fallback message.
+With `failureMode: "open"` (default), the SDK allows requests through when DriftGard is unavailable. With `failureMode: "closed"`, it blocks them with a fallback message.
 
 ## Error handling
 
@@ -222,7 +273,7 @@ try {
 ## Requirements
 
 - Node.js 18+ (uses native `fetch`)
-- API key from Driftgard (Settings → API Keys)
+- API key from DriftGard (Settings → API Keys)
 - Compliance or Enterprise tier for API evaluation
 
 ## License

package/dist/index.d.ts

@@ -31,7 +31,7 @@ export declare class Driftgard {
      */
     reportOutcome(evaluationId: string, projectId: string, outcome: OutcomeRequest): Promise<any>;
     /**
-     * Wrap a tool function with Driftgard policy check.
+     * Wrap a tool function with DriftGard policy check.
      * Returns a guarded version that evaluates before executing.
      */
     guard<T extends (...args: any[]) => any>(toolFn: T, toolName: string, projectId: string, opts?: {

package/dist/index.js

@@ -61,6 +61,10 @@ class Driftgard {
                 ...(req.eval_mode ? { eval_mode: req.eval_mode } : {}),
                 ...(req.tool_call ? { tool_call: req.tool_call } : {}),
                 ...(req.sequence_no != null ? { sequence_no: req.sequence_no } : {}),
+                ...(req.agent_id ? { agent_id: req.agent_id } : {}),
+                ...(req.agent_role ? { agent_role: req.agent_role } : {}),
+                ...(req.on_behalf_of ? { on_behalf_of: req.on_behalf_of } : {}),
+                ...(req.parent_agent_id ? { parent_agent_id: req.parent_agent_id } : {}),
                 ...(req.usage ? { usage: req.usage } : {}),
             }, idempotencyKey);
             // Success — reset circuit breaker
@@ -105,7 +109,7 @@ class Driftgard {
                         clause_id: "DRIFTGARD_UNAVAILABLE",
                         severity: "critical",
                         category: "system",
-                        reason: `Driftgard API unavailable — fail-closed policy applied (${source})`,
+                        reason: `DriftGard API unavailable — fail-closed policy applied (${source})`,
                     }],
             },
             ...(allowed ? {} : {
@@ -135,6 +139,10 @@ class Driftgard {
             parent_evaluation_id: req.parent_evaluation_id,
             idempotency_key: req.idempotency_key,
             sequence_no: req.sequence_no,
+            agent_id: req.agent_id,
+            agent_role: req.agent_role,
+            on_behalf_of: req.on_behalf_of,
+            parent_agent_id: req.parent_agent_id,
         });
     }
     /**
@@ -147,7 +155,7 @@ class Driftgard {
         });
     }
     /**
-     * Wrap a tool function with Driftgard policy check.
+     * Wrap a tool function with DriftGard policy check.
      * Returns a guarded version that evaluates before executing.
      */
     guard(toolFn, toolName, projectId, opts) {

package/dist/types.d.ts

@@ -9,7 +9,7 @@ export interface DriftgardConfig {
     baseUrl?: string;
     timeout?: number;
     maxRetries?: number;
-    /** What to do when Driftgard API is unreachable. "open" = allow, "closed" = block. Default "open". */
+    /** What to do when DriftGard API is unreachable. "open" = allow, "closed" = block. Default "open". */
     failureMode?: "open" | "closed";
     /** Circuit breaker config. Skips API calls after consecutive failures. */
     circuitBreaker?: CircuitBreakerConfig;
@@ -35,6 +35,14 @@ export interface EvaluateRequest {
     idempotency_key?: string;
     /** Sequence number within a session for ordering. Optional — if sent, ordering is enforced. */
     sequence_no?: number;
+    /** Agent identity — who or what is making this decision. */
+    agent_id?: string;
+    /** Agent role — scopes what the agent is allowed to do. */
+    agent_role?: string;
+    /** End-user ID — which human triggered this agent action. */
+    on_behalf_of?: string;
+    /** Parent agent ID — which orchestrator agent delegated to this one. */
+    parent_agent_id?: string;
     usage?: {
         prompt_tokens?: number;
         completion_tokens?: number;
@@ -141,6 +149,10 @@ export interface ToolCallRequest {
     parent_evaluation_id?: string;
     idempotency_key?: string;
     sequence_no?: number;
+    agent_id?: string;
+    agent_role?: string;
+    on_behalf_of?: string;
+    parent_agent_id?: string;
 }
 export interface OutcomeRequest {
     execution_status: "success" | "failed" | "rolled_back";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@driftgard/node",
-  "version": "1.9.0",
-  "description": "Official Driftgard Node.js SDK — evaluate LLM interactions against your compliance policy",
+  "version": "1.11.0",
+  "description": "Official DriftGard Node.js SDK — evaluate LLM interactions against your compliance policy",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": ["dist", "README.md"],