@guardbee/guard-core 0.4.0 → 0.6.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cjs/policy.d.ts +62 -0
- package/dist/cjs/policy.d.ts.map +1 -1
- package/dist/cjs/policy.js +27 -0
- package/dist/cjs/policy.js.map +1 -1
- package/dist/policy.d.ts +62 -0
- package/dist/policy.d.ts.map +1 -1
- package/dist/policy.js +27 -0
- package/dist/policy.js.map +1 -1
- package/package.json +1 -1
package/dist/cjs/policy.d.ts
CHANGED
|
@@ -44,6 +44,17 @@ export declare const policyShape: {
|
|
|
44
44
|
sensitive: "sensitive";
|
|
45
45
|
egress: "egress";
|
|
46
46
|
}>>>>;
|
|
47
|
+
/**
|
|
48
|
+
* Which tools the agent sees, by the name it sees (globs). `expose` is an
|
|
49
|
+
* allowlist (absent: every tool), `hide` removes tools after it. A hidden
|
|
50
|
+
* tool is left out of tools/list and its calls are refused. `descriptions`
|
|
51
|
+
* replaces a tool's description with one you wrote.
|
|
52
|
+
*/
|
|
53
|
+
tools: z.ZodDefault<z.ZodObject<{
|
|
54
|
+
expose: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
55
|
+
hide: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
56
|
+
descriptions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
|
57
|
+
}, z.core.$strict>>;
|
|
47
58
|
rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
|
48
59
|
id: z.ZodOptional<z.ZodString>;
|
|
49
60
|
match: z.ZodObject<{
|
|
@@ -135,6 +146,29 @@ export declare const policyShape: {
|
|
|
135
146
|
}>>;
|
|
136
147
|
detokenizeForEgress: z.ZodOptional<z.ZodBoolean>;
|
|
137
148
|
}, z.core.$strict>>;
|
|
149
|
+
anomaly: z.ZodOptional<z.ZodObject<{
|
|
150
|
+
enabled: z.ZodBoolean;
|
|
151
|
+
action: z.ZodEnum<{
|
|
152
|
+
block: "block";
|
|
153
|
+
warn: "warn";
|
|
154
|
+
}>;
|
|
155
|
+
callBurst: z.ZodOptional<z.ZodObject<{
|
|
156
|
+
count: z.ZodNumber;
|
|
157
|
+
windowSeconds: z.ZodNumber;
|
|
158
|
+
}, z.core.$strict>>;
|
|
159
|
+
sensitiveSweep: z.ZodOptional<z.ZodObject<{
|
|
160
|
+
count: z.ZodNumber;
|
|
161
|
+
windowSeconds: z.ZodNumber;
|
|
162
|
+
}, z.core.$strict>>;
|
|
163
|
+
destructiveBurst: z.ZodOptional<z.ZodObject<{
|
|
164
|
+
count: z.ZodNumber;
|
|
165
|
+
windowSeconds: z.ZodNumber;
|
|
166
|
+
}, z.core.$strict>>;
|
|
167
|
+
repeatedBlocks: z.ZodOptional<z.ZodObject<{
|
|
168
|
+
count: z.ZodNumber;
|
|
169
|
+
windowSeconds: z.ZodNumber;
|
|
170
|
+
}, z.core.$strict>>;
|
|
171
|
+
}, z.core.$strict>>;
|
|
138
172
|
}, z.core.$strict>>;
|
|
139
173
|
};
|
|
140
174
|
export declare const gatewayPolicySchema: z.ZodObject<{
|
|
@@ -144,6 +178,11 @@ export declare const gatewayPolicySchema: z.ZodObject<{
|
|
|
144
178
|
sensitive: "sensitive";
|
|
145
179
|
egress: "egress";
|
|
146
180
|
}>>>>;
|
|
181
|
+
tools: z.ZodDefault<z.ZodObject<{
|
|
182
|
+
expose: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
183
|
+
hide: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
184
|
+
descriptions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
|
185
|
+
}, z.core.$strict>>;
|
|
147
186
|
rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
|
148
187
|
id: z.ZodOptional<z.ZodString>;
|
|
149
188
|
match: z.ZodObject<{
|
|
@@ -235,6 +274,29 @@ export declare const gatewayPolicySchema: z.ZodObject<{
|
|
|
235
274
|
}>>;
|
|
236
275
|
detokenizeForEgress: z.ZodOptional<z.ZodBoolean>;
|
|
237
276
|
}, z.core.$strict>>;
|
|
277
|
+
anomaly: z.ZodOptional<z.ZodObject<{
|
|
278
|
+
enabled: z.ZodBoolean;
|
|
279
|
+
action: z.ZodEnum<{
|
|
280
|
+
block: "block";
|
|
281
|
+
warn: "warn";
|
|
282
|
+
}>;
|
|
283
|
+
callBurst: z.ZodOptional<z.ZodObject<{
|
|
284
|
+
count: z.ZodNumber;
|
|
285
|
+
windowSeconds: z.ZodNumber;
|
|
286
|
+
}, z.core.$strict>>;
|
|
287
|
+
sensitiveSweep: z.ZodOptional<z.ZodObject<{
|
|
288
|
+
count: z.ZodNumber;
|
|
289
|
+
windowSeconds: z.ZodNumber;
|
|
290
|
+
}, z.core.$strict>>;
|
|
291
|
+
destructiveBurst: z.ZodOptional<z.ZodObject<{
|
|
292
|
+
count: z.ZodNumber;
|
|
293
|
+
windowSeconds: z.ZodNumber;
|
|
294
|
+
}, z.core.$strict>>;
|
|
295
|
+
repeatedBlocks: z.ZodOptional<z.ZodObject<{
|
|
296
|
+
count: z.ZodNumber;
|
|
297
|
+
windowSeconds: z.ZodNumber;
|
|
298
|
+
}, z.core.$strict>>;
|
|
299
|
+
}, z.core.$strict>>;
|
|
238
300
|
}, z.core.$strict>>;
|
|
239
301
|
}, z.core.$strict>;
|
|
240
302
|
export type GatewayPolicy = z.infer<typeof gatewayPolicySchema>;
|
package/dist/cjs/policy.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,aAAa,8DAA+D,CAAC;AAC1F,eAAO,MAAM,cAAc,uDAAwD,CAAC;
|
|
1
|
+
{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,aAAa,8DAA+D,CAAC;AAC1F,eAAO,MAAM,cAAc,uDAAwD,CAAC;AAUpF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmBzB,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,WAAW;;;;;;;IAEtB;;;;;OAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDJ,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAiC,CAAC;AAElE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAErG,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAO/D"}
|
package/dist/cjs/policy.js
CHANGED
|
@@ -15,6 +15,10 @@ exports.POLICY_ACTIONS = ["allow", "deny", "mask", "warn", "approve"];
|
|
|
15
15
|
const labelSchema = zod_1.z.enum(exports.POLICY_LABELS);
|
|
16
16
|
const actionSchema = zod_1.z.enum(exports.POLICY_ACTIONS);
|
|
17
17
|
const interceptorSchema = zod_1.z.object({ enabled: zod_1.z.boolean(), action: zod_1.z.enum(["block", "warn"]) }).strict();
|
|
18
|
+
/** At most `count` events within `windowSeconds`; one more trips the anomaly check. */
|
|
19
|
+
const anomalyWindowSchema = zod_1.z
|
|
20
|
+
.object({ count: zod_1.z.number().int().positive(), windowSeconds: zod_1.z.number().int().positive().max(86_400) })
|
|
21
|
+
.strict();
|
|
18
22
|
exports.policyRuleSchema = zod_1.z
|
|
19
23
|
.object({
|
|
20
24
|
id: zod_1.z.string().optional(),
|
|
@@ -38,6 +42,20 @@ exports.policyRuleSchema = zod_1.z
|
|
|
38
42
|
/** Every field has a default, so `{}` is a valid (allow-all, strict-taint) policy. */
|
|
39
43
|
exports.policyShape = {
|
|
40
44
|
labels: zod_1.z.record(zod_1.z.string(), zod_1.z.array(labelSchema)).default({}),
|
|
45
|
+
/**
|
|
46
|
+
* Which tools the agent sees, by the name it sees (globs). `expose` is an
|
|
47
|
+
* allowlist (absent: every tool), `hide` removes tools after it. A hidden
|
|
48
|
+
* tool is left out of tools/list and its calls are refused. `descriptions`
|
|
49
|
+
* replaces a tool's description with one you wrote.
|
|
50
|
+
*/
|
|
51
|
+
tools: zod_1.z
|
|
52
|
+
.object({
|
|
53
|
+
expose: zod_1.z.array(zod_1.z.string().min(1)).optional(),
|
|
54
|
+
hide: zod_1.z.array(zod_1.z.string().min(1)).default([]),
|
|
55
|
+
descriptions: zod_1.z.record(zod_1.z.string(), zod_1.z.string().min(1).max(2000)).default({}),
|
|
56
|
+
})
|
|
57
|
+
.strict()
|
|
58
|
+
.default({ hide: [], descriptions: {} }),
|
|
41
59
|
rules: zod_1.z.array(exports.policyRuleSchema).default([]),
|
|
42
60
|
taint: zod_1.z
|
|
43
61
|
.object({
|
|
@@ -72,6 +90,15 @@ exports.policyShape = {
|
|
|
72
90
|
})
|
|
73
91
|
.strict()
|
|
74
92
|
.optional(),
|
|
93
|
+
/** Behaviour over a session: call bursts, sweeps of sensitive reads, bulk destructive calls, repeated blocks. */
|
|
94
|
+
anomaly: interceptorSchema
|
|
95
|
+
.extend({
|
|
96
|
+
callBurst: anomalyWindowSchema.optional(),
|
|
97
|
+
sensitiveSweep: anomalyWindowSchema.optional(),
|
|
98
|
+
destructiveBurst: anomalyWindowSchema.optional(),
|
|
99
|
+
repeatedBlocks: anomalyWindowSchema.optional(),
|
|
100
|
+
})
|
|
101
|
+
.optional(),
|
|
75
102
|
})
|
|
76
103
|
.strict()
|
|
77
104
|
.default({}),
|
package/dist/cjs/policy.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":";;;
|
|
1
|
+
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/policy.ts"],"names":[],"mappings":";;;AAkHA,wCAOC;AAzHD,6BAAwB;AAExB;;;;;;GAMG;AAEU,QAAA,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAU,CAAC;AAC7E,QAAA,cAAc,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAEpF,MAAM,WAAW,GAAG,OAAC,CAAC,IAAI,CAAC,qBAAa,CAAC,CAAC;AAC1C,MAAM,YAAY,GAAG,OAAC,CAAC,IAAI,CAAC,sBAAc,CAAC,CAAC;AAC5C,MAAM,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzG,uFAAuF;AACvF,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KACtG,MAAM,EAAE,CAAC;AAEC,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,KAAK,EAAE,OAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtF,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3E,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE;IACnE,OAAO,EAAE,0CAA0C;IACnD,IAAI,EAAE,CAAC,MAAM,CAAC;CACf,CAAC,CAAC;AAEL,sFAAsF;AACzE,QAAA,WAAW,GAAG;IACzB,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D;;;;;OAKG;IACH,KAAK,EAAE,OAAC;SACL,MAAM,CAAC;QACN,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,YAAY,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC5E,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC1C,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,wBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,KAAK,EAAE,OAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpE;;;WAGG;QACH,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;KAC5D,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACnD,QAAQ,EAAE,OAAC;SACR,MAAM,CAAC;QACN,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACxD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC;KACxF,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;IAC9D,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACnG,YAAY,EAAE,OAAC;SACZ,MAAM,CAAC;QACN,eAAe,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QAC7C,mBAAmB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QACjD,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;QACjH,UAAU,EAAE,OAAC;aACV,MAAM,CAAC;YACN,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE;YACpB,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC/C,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAC5C,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;QACb,iHAAiH;QACjH,OAAO,EAAE,iBAAiB;aACvB,MAAM,CAAC;YACN,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YACzC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YAC9C,gBAAgB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YAChD,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;SAC/C,CAAC;aACD,QAAQ,EAAE;KACd,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;CACf,CAAC;AAEW,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC,mBAAW,CAAC,CAAC,MAAM,EAAE,CAAC;AAMlE,+EAA+E;AAC/E,SAAgB,cAAc,CAAC,KAAc;IAC3C,MAAM,MAAM,GAAG,2BAAmB,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;KACpG,CAAC;AACJ,CAAC"}
|
package/dist/policy.d.ts
CHANGED
|
@@ -44,6 +44,17 @@ export declare const policyShape: {
|
|
|
44
44
|
sensitive: "sensitive";
|
|
45
45
|
egress: "egress";
|
|
46
46
|
}>>>>;
|
|
47
|
+
/**
|
|
48
|
+
* Which tools the agent sees, by the name it sees (globs). `expose` is an
|
|
49
|
+
* allowlist (absent: every tool), `hide` removes tools after it. A hidden
|
|
50
|
+
* tool is left out of tools/list and its calls are refused. `descriptions`
|
|
51
|
+
* replaces a tool's description with one you wrote.
|
|
52
|
+
*/
|
|
53
|
+
tools: z.ZodDefault<z.ZodObject<{
|
|
54
|
+
expose: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
55
|
+
hide: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
56
|
+
descriptions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
|
57
|
+
}, z.core.$strict>>;
|
|
47
58
|
rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
|
48
59
|
id: z.ZodOptional<z.ZodString>;
|
|
49
60
|
match: z.ZodObject<{
|
|
@@ -135,6 +146,29 @@ export declare const policyShape: {
|
|
|
135
146
|
}>>;
|
|
136
147
|
detokenizeForEgress: z.ZodOptional<z.ZodBoolean>;
|
|
137
148
|
}, z.core.$strict>>;
|
|
149
|
+
anomaly: z.ZodOptional<z.ZodObject<{
|
|
150
|
+
enabled: z.ZodBoolean;
|
|
151
|
+
action: z.ZodEnum<{
|
|
152
|
+
block: "block";
|
|
153
|
+
warn: "warn";
|
|
154
|
+
}>;
|
|
155
|
+
callBurst: z.ZodOptional<z.ZodObject<{
|
|
156
|
+
count: z.ZodNumber;
|
|
157
|
+
windowSeconds: z.ZodNumber;
|
|
158
|
+
}, z.core.$strict>>;
|
|
159
|
+
sensitiveSweep: z.ZodOptional<z.ZodObject<{
|
|
160
|
+
count: z.ZodNumber;
|
|
161
|
+
windowSeconds: z.ZodNumber;
|
|
162
|
+
}, z.core.$strict>>;
|
|
163
|
+
destructiveBurst: z.ZodOptional<z.ZodObject<{
|
|
164
|
+
count: z.ZodNumber;
|
|
165
|
+
windowSeconds: z.ZodNumber;
|
|
166
|
+
}, z.core.$strict>>;
|
|
167
|
+
repeatedBlocks: z.ZodOptional<z.ZodObject<{
|
|
168
|
+
count: z.ZodNumber;
|
|
169
|
+
windowSeconds: z.ZodNumber;
|
|
170
|
+
}, z.core.$strict>>;
|
|
171
|
+
}, z.core.$strict>>;
|
|
138
172
|
}, z.core.$strict>>;
|
|
139
173
|
};
|
|
140
174
|
export declare const gatewayPolicySchema: z.ZodObject<{
|
|
@@ -144,6 +178,11 @@ export declare const gatewayPolicySchema: z.ZodObject<{
|
|
|
144
178
|
sensitive: "sensitive";
|
|
145
179
|
egress: "egress";
|
|
146
180
|
}>>>>;
|
|
181
|
+
tools: z.ZodDefault<z.ZodObject<{
|
|
182
|
+
expose: z.ZodOptional<z.ZodArray<z.ZodString>>;
|
|
183
|
+
hide: z.ZodDefault<z.ZodArray<z.ZodString>>;
|
|
184
|
+
descriptions: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
|
|
185
|
+
}, z.core.$strict>>;
|
|
147
186
|
rules: z.ZodDefault<z.ZodArray<z.ZodObject<{
|
|
148
187
|
id: z.ZodOptional<z.ZodString>;
|
|
149
188
|
match: z.ZodObject<{
|
|
@@ -235,6 +274,29 @@ export declare const gatewayPolicySchema: z.ZodObject<{
|
|
|
235
274
|
}>>;
|
|
236
275
|
detokenizeForEgress: z.ZodOptional<z.ZodBoolean>;
|
|
237
276
|
}, z.core.$strict>>;
|
|
277
|
+
anomaly: z.ZodOptional<z.ZodObject<{
|
|
278
|
+
enabled: z.ZodBoolean;
|
|
279
|
+
action: z.ZodEnum<{
|
|
280
|
+
block: "block";
|
|
281
|
+
warn: "warn";
|
|
282
|
+
}>;
|
|
283
|
+
callBurst: z.ZodOptional<z.ZodObject<{
|
|
284
|
+
count: z.ZodNumber;
|
|
285
|
+
windowSeconds: z.ZodNumber;
|
|
286
|
+
}, z.core.$strict>>;
|
|
287
|
+
sensitiveSweep: z.ZodOptional<z.ZodObject<{
|
|
288
|
+
count: z.ZodNumber;
|
|
289
|
+
windowSeconds: z.ZodNumber;
|
|
290
|
+
}, z.core.$strict>>;
|
|
291
|
+
destructiveBurst: z.ZodOptional<z.ZodObject<{
|
|
292
|
+
count: z.ZodNumber;
|
|
293
|
+
windowSeconds: z.ZodNumber;
|
|
294
|
+
}, z.core.$strict>>;
|
|
295
|
+
repeatedBlocks: z.ZodOptional<z.ZodObject<{
|
|
296
|
+
count: z.ZodNumber;
|
|
297
|
+
windowSeconds: z.ZodNumber;
|
|
298
|
+
}, z.core.$strict>>;
|
|
299
|
+
}, z.core.$strict>>;
|
|
238
300
|
}, z.core.$strict>>;
|
|
239
301
|
}, z.core.$strict>;
|
|
240
302
|
export type GatewayPolicy = z.infer<typeof gatewayPolicySchema>;
|
package/dist/policy.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,aAAa,8DAA+D,CAAC;AAC1F,eAAO,MAAM,cAAc,uDAAwD,CAAC;
|
|
1
|
+
{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,aAAa,8DAA+D,CAAC;AAC1F,eAAO,MAAM,cAAc,uDAAwD,CAAC;AAUpF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmBzB,CAAC;AAEL,sFAAsF;AACtF,eAAO,MAAM,WAAW;;;;;;;IAEtB;;;;;OAKG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDJ,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAAiC,CAAC;AAElE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAErG,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAO/D"}
|
package/dist/policy.js
CHANGED
|
@@ -11,6 +11,10 @@ export const POLICY_ACTIONS = ["allow", "deny", "mask", "warn", "approve"];
|
|
|
11
11
|
const labelSchema = z.enum(POLICY_LABELS);
|
|
12
12
|
const actionSchema = z.enum(POLICY_ACTIONS);
|
|
13
13
|
const interceptorSchema = z.object({ enabled: z.boolean(), action: z.enum(["block", "warn"]) }).strict();
|
|
14
|
+
/** At most `count` events within `windowSeconds`; one more trips the anomaly check. */
|
|
15
|
+
const anomalyWindowSchema = z
|
|
16
|
+
.object({ count: z.number().int().positive(), windowSeconds: z.number().int().positive().max(86_400) })
|
|
17
|
+
.strict();
|
|
14
18
|
export const policyRuleSchema = z
|
|
15
19
|
.object({
|
|
16
20
|
id: z.string().optional(),
|
|
@@ -34,6 +38,20 @@ export const policyRuleSchema = z
|
|
|
34
38
|
/** Every field has a default, so `{}` is a valid (allow-all, strict-taint) policy. */
|
|
35
39
|
export const policyShape = {
|
|
36
40
|
labels: z.record(z.string(), z.array(labelSchema)).default({}),
|
|
41
|
+
/**
|
|
42
|
+
* Which tools the agent sees, by the name it sees (globs). `expose` is an
|
|
43
|
+
* allowlist (absent: every tool), `hide` removes tools after it. A hidden
|
|
44
|
+
* tool is left out of tools/list and its calls are refused. `descriptions`
|
|
45
|
+
* replaces a tool's description with one you wrote.
|
|
46
|
+
*/
|
|
47
|
+
tools: z
|
|
48
|
+
.object({
|
|
49
|
+
expose: z.array(z.string().min(1)).optional(),
|
|
50
|
+
hide: z.array(z.string().min(1)).default([]),
|
|
51
|
+
descriptions: z.record(z.string(), z.string().min(1).max(2000)).default({}),
|
|
52
|
+
})
|
|
53
|
+
.strict()
|
|
54
|
+
.default({ hide: [], descriptions: {} }),
|
|
37
55
|
rules: z.array(policyRuleSchema).default([]),
|
|
38
56
|
taint: z
|
|
39
57
|
.object({
|
|
@@ -68,6 +86,15 @@ export const policyShape = {
|
|
|
68
86
|
})
|
|
69
87
|
.strict()
|
|
70
88
|
.optional(),
|
|
89
|
+
/** Behaviour over a session: call bursts, sweeps of sensitive reads, bulk destructive calls, repeated blocks. */
|
|
90
|
+
anomaly: interceptorSchema
|
|
91
|
+
.extend({
|
|
92
|
+
callBurst: anomalyWindowSchema.optional(),
|
|
93
|
+
sensitiveSweep: anomalyWindowSchema.optional(),
|
|
94
|
+
destructiveBurst: anomalyWindowSchema.optional(),
|
|
95
|
+
repeatedBlocks: anomalyWindowSchema.optional(),
|
|
96
|
+
})
|
|
97
|
+
.optional(),
|
|
71
98
|
})
|
|
72
99
|
.strict()
|
|
73
100
|
.default({}),
|
package/dist/policy.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAU,CAAC;AAC1F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAEpF,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAC1C,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC5C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;
|
|
1
|
+
{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAU,CAAC;AAC1F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAEpF,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AAC1C,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AAC5C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AACzG,uFAAuF;AACvF,MAAM,mBAAmB,GAAG,CAAC;KAC1B,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KACtG,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;QAC7B,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QAChD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACtF,CAAC;SACD,MAAM,EAAE;IACX,MAAM,EAAE,YAAY;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3E,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE;IACnE,OAAO,EAAE,0CAA0C;IACnD,IAAI,EAAE,CAAC,MAAM,CAAC;CACf,CAAC,CAAC;AAEL,sFAAsF;AACtF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9D;;;;;OAKG;IACH,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QAC7C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5C,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC5E,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpE;;;WAGG;QACH,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;KAC5D,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACnD,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;QACxD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC;KACxF,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACnG,YAAY,EAAE,CAAC;SACZ,MAAM,CAAC;QACN,eAAe,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QAC7C,mBAAmB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QACjD,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;QACjH,UAAU,EAAE,CAAC;aACV,MAAM,CAAC;YACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;YACpB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACxC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;YAC/C,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;SAC5C,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;QACb,iHAAiH;QACjH,OAAO,EAAE,iBAAiB;aACvB,MAAM,CAAC;YACN,SAAS,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YACzC,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YAC9C,gBAAgB,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YAChD,cAAc,EAAE,mBAAmB,CAAC,QAAQ,EAAE;SAC/C,CAAC;aACD,QAAQ,EAAE;KACd,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;AAMlE,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;KACpG,CAAC;AACJ,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@guardbee/guard-core",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.6.0",
|
|
4
4
|
"description": "Shared detectors for GuardBee MCP packages — checksum-validated PII masking, prompt injection patterns, and lethal-trifecta tool classification",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "./dist/index.js",
|