@highflame/policy 2.0.7 → 2.0.8

package/_schemas/overwatch/context.json

@@ -1,6 +1,6 @@
 {
   "service": "overwatch",
-  "version": "1.0.0",
+  "version": "2.0.0",
   "description": "Overwatch (Guardian) IDE security & policy enforcement",
   "actions": [
     {
@@ -96,6 +96,66 @@
           "type": "string",
           "required": false,
           "description": "Response content from AI (if available)"
+        },
+        {
+          "key": "violence_score",
+          "type": "number",
+          "required": false,
+          "description": "Violence content detection score (0-100)"
+        },
+        {
+          "key": "weapons_score",
+          "type": "number",
+          "required": false,
+          "description": "Weapons content detection score (0-100)"
+        },
+        {
+          "key": "hate_speech_score",
+          "type": "number",
+          "required": false,
+          "description": "Hate speech detection score (0-100)"
+        },
+        {
+          "key": "crime_score",
+          "type": "number",
+          "required": false,
+          "description": "Criminal content detection score (0-100)"
+        },
+        {
+          "key": "sexual_score",
+          "type": "number",
+          "required": false,
+          "description": "Sexual content detection score (0-100)"
+        },
+        {
+          "key": "profanity_score",
+          "type": "number",
+          "required": false,
+          "description": "Profanity detection score (0-100)"
+        },
+        {
+          "key": "pii_confidence",
+          "type": "number",
+          "required": false,
+          "description": "PII detection classifier confidence (0-100)"
+        },
+        {
+          "key": "injection_confidence",
+          "type": "number",
+          "required": false,
+          "description": "Prompt injection classifier confidence (0-100)"
+        },
+        {
+          "key": "jailbreak_confidence",
+          "type": "number",
+          "required": false,
+          "description": "Jailbreak detection classifier confidence (0-100)"
+        },
+        {
+          "key": "indirect_injection_score",
+          "type": "number",
+          "required": false,
+          "description": "Indirect prompt injection risk score (0-100)"
         }
       ]
     },
@@ -210,6 +270,84 @@
           "type": "string",
           "required": false,
           "description": "Response content (if available)"
+        },
+        {
+          "key": "violence_score",
+          "type": "number",
+          "required": false,
+          "description": "Violence content detection score (0-100)"
+        },
+        {
+          "key": "weapons_score",
+          "type": "number",
+          "required": false,
+          "description": "Weapons content detection score (0-100)"
+        },
+        {
+          "key": "hate_speech_score",
+          "type": "number",
+          "required": false,
+          "description": "Hate speech detection score (0-100)"
+        },
+        {
+          "key": "crime_score",
+          "type": "number",
+          "required": false,
+          "description": "Criminal content detection score (0-100)"
+        },
+        {
+          "key": "sexual_score",
+          "type": "number",
+          "required": false,
+          "description": "Sexual content detection score (0-100)"
+        },
+        {
+          "key": "profanity_score",
+          "type": "number",
+          "required": false,
+          "description": "Profanity detection score (0-100)"
+        },
+        {
+          "key": "pii_confidence",
+          "type": "number",
+          "required": false,
+          "description": "PII detection classifier confidence (0-100)"
+        },
+        {
+          "key": "injection_confidence",
+          "type": "number",
+          "required": false,
+          "description": "Prompt injection classifier confidence (0-100)"
+        },
+        {
+          "key": "jailbreak_confidence",
+          "type": "number",
+          "required": false,
+          "description": "Jailbreak detection classifier confidence (0-100)"
+        },
+        {
+          "key": "tool_poisoning_score",
+          "type": "number",
+          "required": false,
+          "description": "Tool description manipulation risk score (0-100)"
+        },
+        {
+          "key": "rug_pull_score",
+          "type": "number",
+          "required": false,
+          "description": "Tool behavior mismatch risk score (0-100)"
+        },
+        {
+          "key": "indirect_injection_score",
+          "type": "number",
+          "required": false,
+          "description": "Indirect prompt injection risk score (0-100)"
+        },
+        {
+          "key": "mcp_server_verified",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether MCP server is from a verified registry"
         }
       ]
     },
@@ -270,6 +408,30 @@
           "type": "number",
           "required": true,
           "description": "Numeric severity (0-4)"
+        },
+        {
+          "key": "tool_poisoning_score",
+          "type": "number",
+          "required": false,
+          "description": "Tool description manipulation risk score (0-100)"
+        },
+        {
+          "key": "rug_pull_score",
+          "type": "number",
+          "required": false,
+          "description": "Tool behavior mismatch risk score (0-100)"
+        },
+        {
+          "key": "indirect_injection_score",
+          "type": "number",
+          "required": false,
+          "description": "Indirect prompt injection risk score (0-100)"
+        },
+        {
+          "key": "mcp_server_verified",
+          "type": "boolean",
+          "required": false,
+          "description": "Whether MCP server is from a verified registry"
         }
       ]
     },

package/_schemas/overwatch/schema.cedarschema

@@ -96,6 +96,22 @@ action process_prompt appliesTo {
     contains_secrets: Bool,         // Whether secrets detected
     prompt_text: String,           // Same as content (legacy)
     response_content: String,      // Response content (if available)
+
+    // Trust/Safety Scores (0-100, from Javelin/Lakera/LlamaGuard classifiers)
+    violence_score: Long,          // Violence content detection score
+    weapons_score: Long,           // Weapons content detection score
+    hate_speech_score: Long,       // Hate speech detection score
+    crime_score: Long,             // Criminal content detection score
+    sexual_score: Long,            // Sexual content detection score
+    profanity_score: Long,         // Profanity detection score
+
+    // Detector Confidence Scores (0-100, ML classifier confidence)
+    pii_confidence: Long,          // PII detection confidence
+    injection_confidence: Long,    // Prompt injection confidence
+    jailbreak_confidence: Long,    // Jailbreak detection confidence
+
+    // Agent Security (0-100)
+    indirect_injection_score: Long, // Indirect prompt injection risk
   },
 };
 
@@ -130,6 +146,27 @@ action call_tool appliesTo {
     max_threat_severity: Long,
     contains_secrets: Bool,
     response_content: String,
+
+    // Trust/Safety Scores (0-100, from Javelin/Lakera/LlamaGuard classifiers)
+    violence_score: Long,          // Violence content detection score
+    weapons_score: Long,           // Weapons content detection score
+    hate_speech_score: Long,       // Hate speech detection score
+    crime_score: Long,             // Criminal content detection score
+    sexual_score: Long,            // Sexual content detection score
+    profanity_score: Long,         // Profanity detection score
+
+    // Detector Confidence Scores (0-100, ML classifier confidence)
+    pii_confidence: Long,          // PII detection confidence
+    injection_confidence: Long,    // Prompt injection confidence
+    jailbreak_confidence: Long,    // Jailbreak detection confidence
+
+    // Agent Security (0-100)
+    tool_poisoning_score: Long,    // Tool description manipulation risk
+    rug_pull_score: Long,          // Tool behavior mismatch risk
+    indirect_injection_score: Long, // Indirect prompt injection risk
+
+    // MCP Trust
+    mcp_server_verified: Bool,     // Whether server is from verified registry
   },
 };
 
@@ -147,6 +184,14 @@ action connect_server appliesTo {
     highest_severity: String,
     threat_categories: Set<String>,
     max_threat_severity: Long,
+
+    // Agent Security (0-100)
+    tool_poisoning_score: Long,    // Tool description manipulation risk
+    rug_pull_score: Long,          // Tool behavior mismatch risk
+    indirect_injection_score: Long, // Indirect prompt injection risk
+
+    // MCP Trust
+    mcp_server_verified: Bool,     // Whether server is from verified registry
   },
 };
 

package/dist/overwatch-context.gen.d.ts

@@ -7,21 +7,34 @@
 export declare const OverwatchContextKey: {
     readonly ContainsSecrets: "contains_secrets";
     readonly Content: "content";
+    readonly CrimeScore: "crime_score";
     readonly Cwd: "cwd";
     readonly Event: "event";
+    readonly HateSpeechScore: "hate_speech_score";
     readonly HighestSeverity: "highest_severity";
+    readonly IndirectInjectionScore: "indirect_injection_score";
+    readonly InjectionConfidence: "injection_confidence";
+    readonly JailbreakConfidence: "jailbreak_confidence";
     readonly MaxThreatSeverity: "max_threat_severity";
     readonly McpServer: "mcp_server";
+    readonly McpServerVerified: "mcp_server_verified";
     readonly McpTool: "mcp_tool";
     readonly Path: "path";
+    readonly PiiConfidence: "pii_confidence";
+    readonly ProfanityScore: "profanity_score";
     readonly PromptText: "prompt_text";
     readonly ResponseContent: "response_content";
+    readonly RugPullScore: "rug_pull_score";
+    readonly SexualScore: "sexual_score";
     readonly Source: "source";
     readonly ThreatCategories: "threat_categories";
     readonly ThreatCount: "threat_count";
     readonly ThreatTypes: "threat_types";
     readonly ToolName: "tool_name";
+    readonly ToolPoisoningScore: "tool_poisoning_score";
     readonly UserEmail: "user_email";
+    readonly ViolenceScore: "violence_score";
+    readonly WeaponsScore: "weapons_score";
     readonly WorkspaceRoot: "workspace_root";
     readonly YaraThreats: "yara_threats";
 };

package/dist/overwatch-context.gen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"overwatch-context.gen.d.ts","sourceRoot":"","sources":["../src/overwatch-context.gen.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;CAoBtB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC"}
+{"version":3,"file":"overwatch-context.gen.d.ts","sourceRoot":"","sources":["../src/overwatch-context.gen.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCtB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/overwatch-context.gen.js

@@ -9,21 +9,34 @@
 export const OverwatchContextKey = {
     ContainsSecrets: 'contains_secrets',
     Content: 'content',
+    CrimeScore: 'crime_score',
     Cwd: 'cwd',
     Event: 'event',
+    HateSpeechScore: 'hate_speech_score',
     HighestSeverity: 'highest_severity',
+    IndirectInjectionScore: 'indirect_injection_score',
+    InjectionConfidence: 'injection_confidence',
+    JailbreakConfidence: 'jailbreak_confidence',
     MaxThreatSeverity: 'max_threat_severity',
     McpServer: 'mcp_server',
+    McpServerVerified: 'mcp_server_verified',
     McpTool: 'mcp_tool',
     Path: 'path',
+    PiiConfidence: 'pii_confidence',
+    ProfanityScore: 'profanity_score',
     PromptText: 'prompt_text',
     ResponseContent: 'response_content',
+    RugPullScore: 'rug_pull_score',
+    SexualScore: 'sexual_score',
     Source: 'source',
     ThreatCategories: 'threat_categories',
     ThreatCount: 'threat_count',
     ThreatTypes: 'threat_types',
     ToolName: 'tool_name',
+    ToolPoisoningScore: 'tool_poisoning_score',
     UserEmail: 'user_email',
+    ViolenceScore: 'violence_score',
+    WeaponsScore: 'weapons_score',
     WorkspaceRoot: 'workspace_root',
     YaraThreats: 'yara_threats',
 };

package/dist/overwatch-context.gen.js.map

@@ -1 +1 @@
-{"version":3,"file":"overwatch-context.gen.js","sourceRoot":"","sources":["../src/overwatch-context.gen.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,yCAAyC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,eAAe,EAAE,kBAAkB;IACnC,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,eAAe,EAAE,kBAAkB;IACnC,iBAAiB,EAAE,qBAAqB;IACxC,SAAS,EAAE,YAAY;IACvB,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,aAAa;IACzB,eAAe,EAAE,kBAAkB;IACnC,MAAM,EAAE,QAAQ;IAChB,gBAAgB,EAAE,mBAAmB;IACrC,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,cAAc;IAC3B,QAAQ,EAAE,WAAW;IACrB,SAAS,EAAE,YAAY;IACvB,aAAa,EAAE,gBAAgB;IAC/B,WAAW,EAAE,cAAc;CACnB,CAAC"}
+{"version":3,"file":"overwatch-context.gen.js","sourceRoot":"","sources":["../src/overwatch-context.gen.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,yCAAyC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,eAAe,EAAE,kBAAkB;IACnC,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,aAAa;IACzB,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,eAAe,EAAE,mBAAmB;IACpC,eAAe,EAAE,kBAAkB;IACnC,sBAAsB,EAAE,0BAA0B;IAClD,mBAAmB,EAAE,sBAAsB;IAC3C,mBAAmB,EAAE,sBAAsB;IAC3C,iBAAiB,EAAE,qBAAqB;IACxC,SAAS,EAAE,YAAY;IACvB,iBAAiB,EAAE,qBAAqB;IACxC,OAAO,EAAE,UAAU;IACnB,IAAI,EAAE,MAAM;IACZ,aAAa,EAAE,gBAAgB;IAC/B,cAAc,EAAE,iBAAiB;IACjC,UAAU,EAAE,aAAa;IACzB,eAAe,EAAE,kBAAkB;IACnC,YAAY,EAAE,gBAAgB;IAC9B,WAAW,EAAE,cAAc;IAC3B,MAAM,EAAE,QAAQ;IAChB,gBAAgB,EAAE,mBAAmB;IACrC,WAAW,EAAE,cAAc;IAC3B,WAAW,EAAE,cAAc;IAC3B,QAAQ,EAAE,WAAW;IACrB,kBAAkB,EAAE,sBAAsB;IAC1C,SAAS,EAAE,YAAY;IACvB,aAAa,EAAE,gBAAgB;IAC/B,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,gBAAgB;IAC/B,WAAW,EAAE,cAAc;CACnB,CAAC"}

package/dist/overwatch-defaults.gen.d.ts

@@ -2,7 +2,7 @@
  * Overwatch policy category identifiers.
  * Maps to UI tab names in Studio.
  */
-export type OverwatchCategory = 'secrets' | 'pii' | 'semantic' | 'tools' | 'organization';
+export type OverwatchCategory = 'secrets' | 'pii' | 'semantic' | 'tools' | 'organization' | 'trust_safety' | 'agent_security';
 /**
  * Category metadata for UI display.
  */

package/dist/overwatch-defaults.gen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"overwatch-defaults.gen.d.ts","sourceRoot":"","sources":["../src/overwatch-defaults.gen.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,cAAc,CAAC;AAE1F;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,iBAAiB,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,2DAA2D;IAC3D,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAmlBD,eAAO,MAAM,oBAAoB,EAAE,qBAAqB,EAMvD,CAAC;AAMF,eAAO,MAAM,kBAAkB,EAAE,sBAAsB,EAyCtD,CAAC;AAMF,eAAO,MAAM,mBAAmB,EAAE,iBAAiB,EA8ClD,CAAC;AAMF,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,EAAE,MAyHtC,CAAC;AAMF,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,sBAAsB,EAAE,CAEpG;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,iBAAiB,EAAE,CAEhG;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAElF"}
+{"version":3,"file":"overwatch-defaults.gen.d.ts","sourceRoot":"","sources":["../src/overwatch-defaults.gen.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAE9H;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,iBAAiB,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,2DAA2D;IAC3D,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0BAA0B;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,sBAAsB;IACtB,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,wBAAwB;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAu2BD,eAAO,MAAM,oBAAoB,EAAE,qBAAqB,EAQvD,CAAC;AAMF,eAAO,MAAM,kBAAkB,EAAE,sBAAsB,EAuEtD,CAAC;AAMF,eAAO,MAAM,mBAAmB,EAAE,iBAAiB,EA8ClD,CAAC;AAMF,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,EAAE,MAiKtC,CAAC;AAMF,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,sBAAsB,EAAE,CAEpG;AAED,wBAAgB,+BAA+B,CAAC,QAAQ,EAAE,iBAAiB,GAAG,iBAAiB,EAAE,CAEhG;AAED,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAElF"}