@highflame/policy 2.1.35 → 2.1.37

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (81) hide show
  1. package/_schemas/ai_gateway/context.json +431 -11
  2. package/_schemas/ai_gateway/schema.cedarschema +91 -11
  3. package/_schemas/ai_gateway/templates/defaults/agent_security.cedar +66 -43
  4. package/_schemas/ai_gateway/templates/defaults/baseline.cedar +9 -11
  5. package/_schemas/ai_gateway/templates/defaults/semantic.cedar +63 -40
  6. package/_schemas/ai_gateway/templates/defaults/tools.cedar +48 -36
  7. package/_schemas/ai_gateway/templates/llm_default_allow.cedar +9 -10
  8. package/_schemas/ai_gateway/templates/mcp_server_allowlist.cedar +22 -14
  9. package/_schemas/ai_gateway/templates/mcp_tool_permissions.cedar +29 -27
  10. package/_schemas/ai_gateway/templates/pii_redaction.cedar +38 -33
  11. package/_schemas/ai_gateway/templates/templates.json +52 -50
  12. package/_schemas/guardrails/context.json +12 -12
  13. package/_schemas/guardrails/schema.cedarschema +12 -12
  14. package/_schemas/guardrails/templates/defaults/agent_identity.cedar +60 -56
  15. package/_schemas/guardrails/templates/defaults/agentic_safety.cedar +83 -58
  16. package/_schemas/guardrails/templates/defaults/baseline.cedar +9 -12
  17. package/_schemas/guardrails/templates/defaults/injection.cedar +48 -36
  18. package/_schemas/guardrails/templates/defaults/pii.cedar +27 -20
  19. package/_schemas/guardrails/templates/defaults/secrets.cedar +39 -22
  20. package/_schemas/guardrails/templates/defaults/security_patterns.cedar +38 -25
  21. package/_schemas/guardrails/templates/defaults/semantic.cedar +47 -31
  22. package/_schemas/guardrails/templates/defaults/tool_risk.cedar +34 -26
  23. package/_schemas/guardrails/templates/defaults/toxicity.cedar +57 -47
  24. package/_schemas/guardrails/templates/mcp_tool_permissions.cedar +60 -43
  25. package/_schemas/guardrails/templates/profiles/a2a_security/cross_origin.cedar +29 -42
  26. package/_schemas/guardrails/templates/profiles/a2a_security/escalation_detection.cedar +43 -57
  27. package/_schemas/guardrails/templates/profiles/a2a_security/identity_enforcement.cedar +40 -57
  28. package/_schemas/guardrails/templates/profiles/a2a_security/inter_agent_injection.cedar +48 -62
  29. package/_schemas/guardrails/templates/profiles/a2a_security/supply_chain.cedar +40 -56
  30. package/_schemas/guardrails/templates/profiles/advanced_detection/pii.cedar +24 -34
  31. package/_schemas/guardrails/templates/profiles/advanced_detection/secrets.cedar +45 -37
  32. package/_schemas/guardrails/templates/profiles/advanced_detection/threat_severity.cedar +11 -16
  33. package/_schemas/guardrails/templates/profiles/chat_assistant/privacy.cedar +22 -9
  34. package/_schemas/guardrails/templates/profiles/chat_assistant/security.cedar +27 -15
  35. package/_schemas/guardrails/templates/profiles/chat_assistant/trust_safety.cedar +37 -22
  36. package/_schemas/guardrails/templates/profiles/code_agent/agentic_security.cedar +68 -47
  37. package/_schemas/guardrails/templates/profiles/code_agent/encoding.cedar +17 -21
  38. package/_schemas/guardrails/templates/profiles/code_agent/path_security.cedar +74 -73
  39. package/_schemas/guardrails/templates/profiles/code_agent/security.cedar +13 -9
  40. package/_schemas/guardrails/templates/profiles/code_agent/supply_chain.cedar +36 -58
  41. package/_schemas/guardrails/templates/profiles/data_pipeline/agentic_security.cedar +22 -15
  42. package/_schemas/guardrails/templates/profiles/data_pipeline/data_protection.cedar +52 -0
  43. package/_schemas/guardrails/templates/profiles/data_pipeline/privacy.cedar +41 -18
  44. package/_schemas/guardrails/templates/profiles/data_pipeline/security.cedar +18 -36
  45. package/_schemas/guardrails/templates/profiles/multi_agent/agent_safety.cedar +86 -79
  46. package/_schemas/guardrails/templates/profiles/multi_agent/agent_trust.cedar +73 -70
  47. package/_schemas/guardrails/templates/templates.json +198 -217
  48. package/_schemas/overwatch/context.json +14 -14
  49. package/_schemas/overwatch/schema.cedarschema +12 -12
  50. package/_schemas/sentry/context.json +11 -11
  51. package/_schemas/sentry/schema.cedarschema +11 -11
  52. package/_schemas/sentry/templates/defaults/baseline.cedar +8 -12
  53. package/_schemas/sentry/templates/defaults/clipboard.cedar +43 -42
  54. package/_schemas/sentry/templates/defaults/content_safety.cedar +38 -68
  55. package/_schemas/sentry/templates/defaults/file_safety.cedar +18 -26
  56. package/_schemas/sentry/templates/defaults/organization.cedar +10 -17
  57. package/_schemas/sentry/templates/defaults/pii.cedar +52 -73
  58. package/_schemas/sentry/templates/defaults/secrets.cedar +65 -58
  59. package/_schemas/sentry/templates/defaults/semantic.cedar +40 -59
  60. package/_schemas/sentry/templates/templates.json +53 -43
  61. package/dist/ai_gateway-context.gen.d.ts +18 -4
  62. package/dist/ai_gateway-context.gen.js +18 -4
  63. package/dist/ai_gateway-defaults.gen.d.ts +4 -1
  64. package/dist/ai_gateway-defaults.gen.js +398 -320
  65. package/dist/builder.d.ts +2 -1
  66. package/dist/builder.js +5 -2
  67. package/dist/guardrails-context.gen.d.ts +5 -5
  68. package/dist/guardrails-context.gen.js +5 -5
  69. package/dist/guardrails-defaults.gen.d.ts +4 -1
  70. package/dist/guardrails-defaults.gen.js +2130 -1903
  71. package/dist/overwatch-context.gen.d.ts +5 -5
  72. package/dist/overwatch-context.gen.js +5 -5
  73. package/dist/overwatch-defaults.gen.d.ts +4 -1
  74. package/dist/overwatch-defaults.gen.js +560 -566
  75. package/dist/sentry-context.gen.d.ts +3 -3
  76. package/dist/sentry-context.gen.js +3 -3
  77. package/dist/sentry-defaults.gen.d.ts +4 -1
  78. package/dist/sentry-defaults.gen.js +392 -453
  79. package/dist/service-schemas.gen.d.ts +4 -4
  80. package/dist/service-schemas.gen.js +249 -99
  81. package/package.json +1 -1
@@ -5,8 +5,6 @@
5
5
  * Overwatch Cedar schema and are used at policy evaluation time.
6
6
  */
7
7
  export declare const OverwatchContextKey: {
8
- readonly ContainsInvisibleChars: "contains_invisible_chars";
9
- readonly ContainsSecrets: "contains_secrets";
10
8
  readonly Content: "content";
11
9
  readonly CrimeScore: "crime_score";
12
10
  readonly Cwd: "cwd";
@@ -15,13 +13,14 @@ export declare const OverwatchContextKey: {
15
13
  readonly HateSpeechScore: "hate_speech_score";
16
14
  readonly HighestSeverity: "highest_severity";
17
15
  readonly IndirectInjectionScore: "indirect_injection_score";
18
- readonly InjectionConfidence: "injection_confidence";
19
16
  readonly InjectionDeepContextScore: "injection_deep_context_score";
20
17
  readonly InjectionPulseScore: "injection_pulse_score";
18
+ readonly InjectionScore: "injection_score";
19
+ readonly InvisibleCharsDetected: "invisible_chars_detected";
21
20
  readonly InvisibleCharsScore: "invisible_chars_score";
22
- readonly JailbreakConfidence: "jailbreak_confidence";
23
21
  readonly JailbreakDeepContextScore: "jailbreak_deep_context_score";
24
22
  readonly JailbreakPulseScore: "jailbreak_pulse_score";
23
+ readonly JailbreakScore: "jailbreak_score";
25
24
  readonly LoopCount: "loop_count";
26
25
  readonly LoopDetected: "loop_detected";
27
26
  readonly LoopTool: "loop_tool";
@@ -33,9 +32,9 @@ export declare const OverwatchContextKey: {
33
32
  readonly McpTool: "mcp_tool";
34
33
  readonly Path: "path";
35
34
  readonly PatternType: "pattern_type";
36
- readonly PiiConfidence: "pii_confidence";
37
35
  readonly PiiCount: "pii_count";
38
36
  readonly PiiDetected: "pii_detected";
37
+ readonly PiiScore: "pii_score";
39
38
  readonly PiiTypes: "pii_types";
40
39
  readonly ProfanityScore: "profanity_score";
41
40
  readonly PromptText: "prompt_text";
@@ -44,6 +43,7 @@ export declare const OverwatchContextKey: {
44
43
  readonly RugPullScore: "rug_pull_score";
45
44
  readonly SecretCount: "secret_count";
46
45
  readonly SecretTypes: "secret_types";
46
+ readonly SecretsDetected: "secrets_detected";
47
47
  readonly SequenceRisk: "sequence_risk";
48
48
  readonly SessionCommandInjection: "session_command_injection";
49
49
  readonly SessionCumulativeRiskScore: "session_cumulative_risk_score";
@@ -7,8 +7,6 @@
7
7
  * Overwatch Cedar schema and are used at policy evaluation time.
8
8
  */
9
9
  export const OverwatchContextKey = {
10
- ContainsInvisibleChars: 'contains_invisible_chars',
11
- ContainsSecrets: 'contains_secrets',
12
10
  Content: 'content',
13
11
  CrimeScore: 'crime_score',
14
12
  Cwd: 'cwd',
@@ -17,13 +15,14 @@ export const OverwatchContextKey = {
17
15
  HateSpeechScore: 'hate_speech_score',
18
16
  HighestSeverity: 'highest_severity',
19
17
  IndirectInjectionScore: 'indirect_injection_score',
20
- InjectionConfidence: 'injection_confidence',
21
18
  InjectionDeepContextScore: 'injection_deep_context_score',
22
19
  InjectionPulseScore: 'injection_pulse_score',
20
+ InjectionScore: 'injection_score',
21
+ InvisibleCharsDetected: 'invisible_chars_detected',
23
22
  InvisibleCharsScore: 'invisible_chars_score',
24
- JailbreakConfidence: 'jailbreak_confidence',
25
23
  JailbreakDeepContextScore: 'jailbreak_deep_context_score',
26
24
  JailbreakPulseScore: 'jailbreak_pulse_score',
25
+ JailbreakScore: 'jailbreak_score',
27
26
  LoopCount: 'loop_count',
28
27
  LoopDetected: 'loop_detected',
29
28
  LoopTool: 'loop_tool',
@@ -35,9 +34,9 @@ export const OverwatchContextKey = {
35
34
  McpTool: 'mcp_tool',
36
35
  Path: 'path',
37
36
  PatternType: 'pattern_type',
38
- PiiConfidence: 'pii_confidence',
39
37
  PiiCount: 'pii_count',
40
38
  PiiDetected: 'pii_detected',
39
+ PiiScore: 'pii_score',
41
40
  PiiTypes: 'pii_types',
42
41
  ProfanityScore: 'profanity_score',
43
42
  PromptText: 'prompt_text',
@@ -46,6 +45,7 @@ export const OverwatchContextKey = {
46
45
  RugPullScore: 'rug_pull_score',
47
46
  SecretCount: 'secret_count',
48
47
  SecretTypes: 'secret_types',
48
+ SecretsDetected: 'secrets_detected',
49
49
  SequenceRisk: 'sequence_risk',
50
50
  SessionCommandInjection: 'session_command_injection',
51
51
  SessionCumulativeRiskScore: 'session_cumulative_risk_score',
@@ -2,7 +2,7 @@
2
2
  * Overwatch policy category identifiers.
3
3
  * Maps to UI tab names in Studio.
4
4
  */
5
- export type OverwatchCategory = 'secrets' | 'pii' | 'semantic' | 'tools' | 'organization';
5
+ export type OverwatchCategory = 'data-protection' | 'privacy' | 'semantic' | 'trust-safety' | 'tools' | 'agent-identity' | 'organization';
6
6
  /**
7
7
  * Category metadata for UI display.
8
8
  */
@@ -50,6 +50,9 @@ export interface OverwatchTemplate {
50
50
  severity: string;
51
51
  /** Tags for filtering */
52
52
  tags: string[];
53
+ /** True when ensure-defaults should auto-seed this template at
54
+ * project creation. See schemas/*\/templates.json. Defaults to false. */
55
+ autoDeploy?: boolean;
53
56
  }
54
57
  export declare const OVERWATCH_CATEGORIES: OverwatchCategoryInfo[];
55
58
  export declare const OVERWATCH_DEFAULTS: OverwatchDefaultPolicy[];