@highflame/policy 2.2.26 → 2.2.28

package/dist/agent_ops-context.gen.d.ts

@@ -34,12 +34,23 @@ export declare const AgentOpsContextKey: {
     readonly DetectedThreats: "detected_threats";
     readonly DetectorCount: "detector_count";
     readonly Direction: "direction";
+    readonly EgressHosts: "egress_hosts";
     readonly EncodedContentDetected: "encoded_content_detected";
     readonly EncodedCount: "encoded_count";
     readonly EncodedScore: "encoded_score";
     readonly EncodedTypes: "encoded_types";
     readonly Event: "event";
+    readonly ExecAllowlist: "exec_allowlist";
     readonly FactualityScore: "factuality_score";
+    readonly FlowCompartments: "flow_compartments";
+    readonly FlowConfidentiality: "flow_confidentiality";
+    readonly FlowDataTypes: "flow_data_types";
+    readonly FlowIntegrity: "flow_integrity";
+    readonly FlowOrigins: "flow_origins";
+    readonly FlowResolutionStatus: "flow_resolution_status";
+    readonly FlowSink: "flow_sink";
+    readonly FlowSinkEffects: "flow_sink_effects";
+    readonly FlowSinkIsExternal: "flow_sink_is_external";
     readonly HallucinationScore: "hallucination_score";
     readonly HateSpeechScore: "hate_speech_score";
     readonly HighestSeverity: "highest_severity";
@@ -54,6 +65,7 @@ export declare const AgentOpsContextKey: {
     readonly InvisibleCharsScore: "invisible_chars_score";
     readonly IsEnglish: "is_english";
     readonly IsLatinScript: "is_latin_script";
+    readonly IsolationTier: "isolation_tier";
     readonly JailbreakDeepContextScore: "jailbreak_deep_context_score";
     readonly JailbreakPulseScore: "jailbreak_pulse_score";
     readonly JailbreakScore: "jailbreak_score";
@@ -70,9 +82,11 @@ export declare const AgentOpsContextKey: {
     readonly McpServer: "mcp_server";
     readonly McpServerVerified: "mcp_server_verified";
     readonly McpTool: "mcp_tool";
+    readonly MechanismCapabilities: "mechanism_capabilities";
     readonly ModelName: "model_name";
     readonly ModelProvider: "model_provider";
     readonly MultiTurnDetection: "multi_turn_detection";
+    readonly NetworkEgress: "network_egress";
     readonly ParamTypeViolation: "param_type_violation";
     readonly ParamTypeViolations: "param_type_violations";
     readonly Path: "path";
@@ -86,6 +100,8 @@ export declare const AgentOpsContextKey: {
     readonly PiiScore: "pii_score";
     readonly PiiTypes: "pii_types";
     readonly Principal: "principal";
+    readonly PrincipalClearances: "principal_clearances";
+    readonly PrincipalCompartments: "principal_compartments";
     readonly PrivilegeScope: "privilege_scope";
     readonly ProfanityScore: "profanity_score";
     readonly RequestId: "request_id";
@@ -141,10 +157,11 @@ export declare const AgentOpsContextKey: {
     readonly ViolenceScore: "violence_score";
     readonly WeaponsScore: "weapons_score";
     readonly WorkspaceRoot: "workspace_root";
+    readonly WritablePaths: "writable_paths";
 };
 export type AgentOpsContextKey = (typeof AgentOpsContextKey)[keyof typeof AgentOpsContextKey];
 /**
  * The full set of authorable context attribute keys for AgentOps.
  * Iterate this to enumerate the authorable surface (cockpit, conformance).
  */
-export declare const AgentOpsContextKeys: readonly ["agent_framework", "agent_id", "agent_publisher", "agent_trust_level", "agent_type", "budget_exceeded", "budget_remaining_pct", "code_languages", "code_ratio", "command_injection_detected", "command_injection_score", "command_injection_type", "contains_code", "contains_non_ascii", "content_safety_blocked", "content_safety_score", "content_topics", "content_type", "conversation_turn", "crime_score", "cross_origin_detected", "cross_origin_score", "cross_origin_type", "cwd", "detected_language", "detected_script", "detected_threats", "detector_count", "direction", "encoded_content_detected", "encoded_count", "encoded_score", "encoded_types", "event", "factuality_score", "hallucination_score", "hate_speech_score", "highest_severity", "identity_type", "indirect_injection_score", "indirect_injection_type", "injection_deep_context_score", "injection_pulse_score", "injection_score", "injection_type", "invisible_chars_detected", "invisible_chars_score", "is_english", "is_latin_script", "jailbreak_deep_context_score", "jailbreak_pulse_score", "jailbreak_score", "keyword_categories", "keyword_count", "keyword_matched", "language_confidence", "loop_count", "loop_detected", "loop_tool", "mcp_config_risk", "mcp_risk_score", "mcp_risk_type", "mcp_server", "mcp_server_verified", "mcp_tool", "model_name", "model_provider", "multi_turn_detection", "param_type_violation", "param_type_violations", "path", "path_traversal_detected", "path_traversal_severity", "path_traversal_type", "pattern_type", "phishing_detected", "pii_count", "pii_detected", "pii_score", "pii_types", "principal", "privilege_scope", "profanity_score", "request_id", "role", "rpm_exceeded", "rpm_remaining_pct", "rug_pull_detected", "rug_pull_score", "rug_pull_type", "script_confidence", "secret_count", "secret_types", "secrets_detected", "sentiment_score", "sequence_risk", "session_command_injection", "session_cumulative_risk_score", "session_injection_detected", "session_max_command_injection_score", "session_max_injection_score", "session_max_jailbreak_score", "session_max_pii_score", "session_max_secret_score", "session_max_sensitivity", "session_original_request", "session_pii_detected", "session_pii_types", "session_secret_types", "session_secrets_detected", "session_threat_turns", "sexual_score", "source", "sql_injection_detected", "sql_injection_score", "sql_injection_type", "suspicious_pattern", "threat_categories", "threat_count", "timestamp", "tool_category", "tool_is_builtin", "tool_is_sensitive", "tool_name", "tool_operation_classes", "tool_poisoning_detected", "tool_poisoning_score", "tool_poisoning_type", "tool_risk_score", "topic_confidence", "tpm_exceeded", "tpm_remaining_pct", "user_email", "violence_score", "weapons_score", "workspace_root"];
+export declare const AgentOpsContextKeys: readonly ["agent_framework", "agent_id", "agent_publisher", "agent_trust_level", "agent_type", "budget_exceeded", "budget_remaining_pct", "code_languages", "code_ratio", "command_injection_detected", "command_injection_score", "command_injection_type", "contains_code", "contains_non_ascii", "content_safety_blocked", "content_safety_score", "content_topics", "content_type", "conversation_turn", "crime_score", "cross_origin_detected", "cross_origin_score", "cross_origin_type", "cwd", "detected_language", "detected_script", "detected_threats", "detector_count", "direction", "egress_hosts", "encoded_content_detected", "encoded_count", "encoded_score", "encoded_types", "event", "exec_allowlist", "factuality_score", "flow_compartments", "flow_confidentiality", "flow_data_types", "flow_integrity", "flow_origins", "flow_resolution_status", "flow_sink", "flow_sink_effects", "flow_sink_is_external", "hallucination_score", "hate_speech_score", "highest_severity", "identity_type", "indirect_injection_score", "indirect_injection_type", "injection_deep_context_score", "injection_pulse_score", "injection_score", "injection_type", "invisible_chars_detected", "invisible_chars_score", "is_english", "is_latin_script", "isolation_tier", "jailbreak_deep_context_score", "jailbreak_pulse_score", "jailbreak_score", "keyword_categories", "keyword_count", "keyword_matched", "language_confidence", "loop_count", "loop_detected", "loop_tool", "mcp_config_risk", "mcp_risk_score", "mcp_risk_type", "mcp_server", "mcp_server_verified", "mcp_tool", "mechanism_capabilities", "model_name", "model_provider", "multi_turn_detection", "network_egress", "param_type_violation", "param_type_violations", "path", "path_traversal_detected", "path_traversal_severity", "path_traversal_type", "pattern_type", "phishing_detected", "pii_count", "pii_detected", "pii_score", "pii_types", "principal", "principal_clearances", "principal_compartments", "privilege_scope", "profanity_score", "request_id", "role", "rpm_exceeded", "rpm_remaining_pct", "rug_pull_detected", "rug_pull_score", "rug_pull_type", "script_confidence", "secret_count", "secret_types", "secrets_detected", "sentiment_score", "sequence_risk", "session_command_injection", "session_cumulative_risk_score", "session_injection_detected", "session_max_command_injection_score", "session_max_injection_score", "session_max_jailbreak_score", "session_max_pii_score", "session_max_secret_score", "session_max_sensitivity", "session_original_request", "session_pii_detected", "session_pii_types", "session_secret_types", "session_secrets_detected", "session_threat_turns", "sexual_score", "source", "sql_injection_detected", "sql_injection_score", "sql_injection_type", "suspicious_pattern", "threat_categories", "threat_count", "timestamp", "tool_category", "tool_is_builtin", "tool_is_sensitive", "tool_name", "tool_operation_classes", "tool_poisoning_detected", "tool_poisoning_score", "tool_poisoning_type", "tool_risk_score", "topic_confidence", "tpm_exceeded", "tpm_remaining_pct", "user_email", "violence_score", "weapons_score", "workspace_root", "writable_paths"];

package/dist/agent_ops-context.gen.js

@@ -36,12 +36,23 @@ export const AgentOpsContextKey = {
     DetectedThreats: 'detected_threats',
     DetectorCount: 'detector_count',
     Direction: 'direction',
+    EgressHosts: 'egress_hosts',
     EncodedContentDetected: 'encoded_content_detected',
     EncodedCount: 'encoded_count',
     EncodedScore: 'encoded_score',
     EncodedTypes: 'encoded_types',
     Event: 'event',
+    ExecAllowlist: 'exec_allowlist',
     FactualityScore: 'factuality_score',
+    FlowCompartments: 'flow_compartments',
+    FlowConfidentiality: 'flow_confidentiality',
+    FlowDataTypes: 'flow_data_types',
+    FlowIntegrity: 'flow_integrity',
+    FlowOrigins: 'flow_origins',
+    FlowResolutionStatus: 'flow_resolution_status',
+    FlowSink: 'flow_sink',
+    FlowSinkEffects: 'flow_sink_effects',
+    FlowSinkIsExternal: 'flow_sink_is_external',
     HallucinationScore: 'hallucination_score',
     HateSpeechScore: 'hate_speech_score',
     HighestSeverity: 'highest_severity',
@@ -56,6 +67,7 @@ export const AgentOpsContextKey = {
     InvisibleCharsScore: 'invisible_chars_score',
     IsEnglish: 'is_english',
     IsLatinScript: 'is_latin_script',
+    IsolationTier: 'isolation_tier',
     JailbreakDeepContextScore: 'jailbreak_deep_context_score',
     JailbreakPulseScore: 'jailbreak_pulse_score',
     JailbreakScore: 'jailbreak_score',
@@ -72,9 +84,11 @@ export const AgentOpsContextKey = {
     McpServer: 'mcp_server',
     McpServerVerified: 'mcp_server_verified',
     McpTool: 'mcp_tool',
+    MechanismCapabilities: 'mechanism_capabilities',
     ModelName: 'model_name',
     ModelProvider: 'model_provider',
     MultiTurnDetection: 'multi_turn_detection',
+    NetworkEgress: 'network_egress',
     ParamTypeViolation: 'param_type_violation',
     ParamTypeViolations: 'param_type_violations',
     Path: 'path',
@@ -88,6 +102,8 @@ export const AgentOpsContextKey = {
     PiiScore: 'pii_score',
     PiiTypes: 'pii_types',
     Principal: 'principal',
+    PrincipalClearances: 'principal_clearances',
+    PrincipalCompartments: 'principal_compartments',
     PrivilegeScope: 'privilege_scope',
     ProfanityScore: 'profanity_score',
     RequestId: 'request_id',
@@ -143,6 +159,7 @@ export const AgentOpsContextKey = {
     ViolenceScore: 'violence_score',
     WeaponsScore: 'weapons_score',
     WorkspaceRoot: 'workspace_root',
+    WritablePaths: 'writable_paths',
 };
 /**
  * The full set of authorable context attribute keys for AgentOps.
@@ -178,12 +195,23 @@ export const AgentOpsContextKeys = [
     AgentOpsContextKey.DetectedThreats,
     AgentOpsContextKey.DetectorCount,
     AgentOpsContextKey.Direction,
+    AgentOpsContextKey.EgressHosts,
     AgentOpsContextKey.EncodedContentDetected,
     AgentOpsContextKey.EncodedCount,
     AgentOpsContextKey.EncodedScore,
     AgentOpsContextKey.EncodedTypes,
     AgentOpsContextKey.Event,
+    AgentOpsContextKey.ExecAllowlist,
     AgentOpsContextKey.FactualityScore,
+    AgentOpsContextKey.FlowCompartments,
+    AgentOpsContextKey.FlowConfidentiality,
+    AgentOpsContextKey.FlowDataTypes,
+    AgentOpsContextKey.FlowIntegrity,
+    AgentOpsContextKey.FlowOrigins,
+    AgentOpsContextKey.FlowResolutionStatus,
+    AgentOpsContextKey.FlowSink,
+    AgentOpsContextKey.FlowSinkEffects,
+    AgentOpsContextKey.FlowSinkIsExternal,
     AgentOpsContextKey.HallucinationScore,
     AgentOpsContextKey.HateSpeechScore,
     AgentOpsContextKey.HighestSeverity,
@@ -198,6 +226,7 @@ export const AgentOpsContextKeys = [
     AgentOpsContextKey.InvisibleCharsScore,
     AgentOpsContextKey.IsEnglish,
     AgentOpsContextKey.IsLatinScript,
+    AgentOpsContextKey.IsolationTier,
     AgentOpsContextKey.JailbreakDeepContextScore,
     AgentOpsContextKey.JailbreakPulseScore,
     AgentOpsContextKey.JailbreakScore,
@@ -214,9 +243,11 @@ export const AgentOpsContextKeys = [
     AgentOpsContextKey.McpServer,
     AgentOpsContextKey.McpServerVerified,
     AgentOpsContextKey.McpTool,
+    AgentOpsContextKey.MechanismCapabilities,
     AgentOpsContextKey.ModelName,
     AgentOpsContextKey.ModelProvider,
     AgentOpsContextKey.MultiTurnDetection,
+    AgentOpsContextKey.NetworkEgress,
     AgentOpsContextKey.ParamTypeViolation,
     AgentOpsContextKey.ParamTypeViolations,
     AgentOpsContextKey.Path,
@@ -230,6 +261,8 @@ export const AgentOpsContextKeys = [
     AgentOpsContextKey.PiiScore,
     AgentOpsContextKey.PiiTypes,
     AgentOpsContextKey.Principal,
+    AgentOpsContextKey.PrincipalClearances,
+    AgentOpsContextKey.PrincipalCompartments,
     AgentOpsContextKey.PrivilegeScope,
     AgentOpsContextKey.ProfanityScore,
     AgentOpsContextKey.RequestId,
@@ -285,4 +318,5 @@ export const AgentOpsContextKeys = [
     AgentOpsContextKey.ViolenceScore,
     AgentOpsContextKey.WeaponsScore,
     AgentOpsContextKey.WorkspaceRoot,
+    AgentOpsContextKey.WritablePaths,
 ];

package/dist/agent_ops-defaults.gen.d.ts

@@ -2,7 +2,7 @@
  * AgentOps policy category identifiers.
  * Maps to UI tab names in Studio.
  */
-export type AgentOpsCategory = 'threat-detection' | 'data-protection' | 'agent-security' | 'tool-permissioning' | 'code-security' | 'content-safety' | 'organization';
+export type AgentOpsCategory = 'threat-detection' | 'data-protection' | 'agent-security' | 'tool-permissioning' | 'code-security' | 'content-safety' | 'organization' | 'sandbox';
 /**
  * Category metadata for UI display.
  */