@highflame/policy 2.2.27 → 2.2.29
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/_schemas/agent_ops/context.json +305 -5
- package/_schemas/agent_ops/schema.cedarschema +212 -0
- package/_schemas/agent_ops/templates/profiles/data_processing.cedar +114 -0
- package/_schemas/agent_ops/templates/profiles/gpu_training.cedar +117 -0
- package/_schemas/agent_ops/templates/profiles/locked_down.cedar +118 -0
- package/_schemas/agent_ops/templates/profiles/network_dev.cedar +117 -0
- package/_schemas/agent_ops/templates/templates.json +41 -0
- package/dist/actions.gen.d.ts +1 -0
- package/dist/actions.gen.js +1 -0
- package/dist/agent_ops-context.gen.d.ts +19 -1
- package/dist/agent_ops-context.gen.js +36 -0
- package/dist/agent_ops-defaults.gen.d.ts +1 -1
- package/dist/agent_ops-defaults.gen.js +548 -0
- package/dist/agent_ops-entities.gen.js +5 -1
- package/dist/privilege-catalog.gen.d.ts +30 -1
- package/dist/privilege-catalog.gen.js +54 -1
- package/dist/schema.gen.d.ts +1 -1
- package/dist/schema.gen.js +1 -0
- package/dist/service-schemas.gen.d.ts +1 -1
- package/dist/service-schemas.gen.js +266 -5
- package/package.json +1 -1
|
@@ -36,12 +36,23 @@ export const AgentOpsContextKey = {
|
|
|
36
36
|
DetectedThreats: 'detected_threats',
|
|
37
37
|
DetectorCount: 'detector_count',
|
|
38
38
|
Direction: 'direction',
|
|
39
|
+
EgressHosts: 'egress_hosts',
|
|
39
40
|
EncodedContentDetected: 'encoded_content_detected',
|
|
40
41
|
EncodedCount: 'encoded_count',
|
|
41
42
|
EncodedScore: 'encoded_score',
|
|
42
43
|
EncodedTypes: 'encoded_types',
|
|
43
44
|
Event: 'event',
|
|
45
|
+
ExecAllowlist: 'exec_allowlist',
|
|
44
46
|
FactualityScore: 'factuality_score',
|
|
47
|
+
FlowCompartments: 'flow_compartments',
|
|
48
|
+
FlowConfidentiality: 'flow_confidentiality',
|
|
49
|
+
FlowDataTypes: 'flow_data_types',
|
|
50
|
+
FlowIntegrity: 'flow_integrity',
|
|
51
|
+
FlowOrigins: 'flow_origins',
|
|
52
|
+
FlowResolutionStatus: 'flow_resolution_status',
|
|
53
|
+
FlowSink: 'flow_sink',
|
|
54
|
+
FlowSinkEffects: 'flow_sink_effects',
|
|
55
|
+
FlowSinkIsExternal: 'flow_sink_is_external',
|
|
45
56
|
HallucinationScore: 'hallucination_score',
|
|
46
57
|
HateSpeechScore: 'hate_speech_score',
|
|
47
58
|
HighestSeverity: 'highest_severity',
|
|
@@ -56,6 +67,7 @@ export const AgentOpsContextKey = {
|
|
|
56
67
|
InvisibleCharsScore: 'invisible_chars_score',
|
|
57
68
|
IsEnglish: 'is_english',
|
|
58
69
|
IsLatinScript: 'is_latin_script',
|
|
70
|
+
IsolationTier: 'isolation_tier',
|
|
59
71
|
JailbreakDeepContextScore: 'jailbreak_deep_context_score',
|
|
60
72
|
JailbreakPulseScore: 'jailbreak_pulse_score',
|
|
61
73
|
JailbreakScore: 'jailbreak_score',
|
|
@@ -72,9 +84,11 @@ export const AgentOpsContextKey = {
|
|
|
72
84
|
McpServer: 'mcp_server',
|
|
73
85
|
McpServerVerified: 'mcp_server_verified',
|
|
74
86
|
McpTool: 'mcp_tool',
|
|
87
|
+
MechanismCapabilities: 'mechanism_capabilities',
|
|
75
88
|
ModelName: 'model_name',
|
|
76
89
|
ModelProvider: 'model_provider',
|
|
77
90
|
MultiTurnDetection: 'multi_turn_detection',
|
|
91
|
+
NetworkEgress: 'network_egress',
|
|
78
92
|
ParamTypeViolation: 'param_type_violation',
|
|
79
93
|
ParamTypeViolations: 'param_type_violations',
|
|
80
94
|
Path: 'path',
|
|
@@ -88,6 +102,8 @@ export const AgentOpsContextKey = {
|
|
|
88
102
|
PiiScore: 'pii_score',
|
|
89
103
|
PiiTypes: 'pii_types',
|
|
90
104
|
Principal: 'principal',
|
|
105
|
+
PrincipalClearances: 'principal_clearances',
|
|
106
|
+
PrincipalCompartments: 'principal_compartments',
|
|
91
107
|
PrivilegeScope: 'privilege_scope',
|
|
92
108
|
ProfanityScore: 'profanity_score',
|
|
93
109
|
RequestId: 'request_id',
|
|
@@ -123,6 +139,7 @@ export const AgentOpsContextKey = {
|
|
|
123
139
|
SqlInjectionDetected: 'sql_injection_detected',
|
|
124
140
|
SqlInjectionScore: 'sql_injection_score',
|
|
125
141
|
SqlInjectionType: 'sql_injection_type',
|
|
142
|
+
Surface: 'surface',
|
|
126
143
|
SuspiciousPattern: 'suspicious_pattern',
|
|
127
144
|
ThreatCategories: 'threat_categories',
|
|
128
145
|
ThreatCount: 'threat_count',
|
|
@@ -143,6 +160,7 @@ export const AgentOpsContextKey = {
|
|
|
143
160
|
ViolenceScore: 'violence_score',
|
|
144
161
|
WeaponsScore: 'weapons_score',
|
|
145
162
|
WorkspaceRoot: 'workspace_root',
|
|
163
|
+
WritablePaths: 'writable_paths',
|
|
146
164
|
};
|
|
147
165
|
/**
|
|
148
166
|
* The full set of authorable context attribute keys for AgentOps.
|
|
@@ -178,12 +196,23 @@ export const AgentOpsContextKeys = [
|
|
|
178
196
|
AgentOpsContextKey.DetectedThreats,
|
|
179
197
|
AgentOpsContextKey.DetectorCount,
|
|
180
198
|
AgentOpsContextKey.Direction,
|
|
199
|
+
AgentOpsContextKey.EgressHosts,
|
|
181
200
|
AgentOpsContextKey.EncodedContentDetected,
|
|
182
201
|
AgentOpsContextKey.EncodedCount,
|
|
183
202
|
AgentOpsContextKey.EncodedScore,
|
|
184
203
|
AgentOpsContextKey.EncodedTypes,
|
|
185
204
|
AgentOpsContextKey.Event,
|
|
205
|
+
AgentOpsContextKey.ExecAllowlist,
|
|
186
206
|
AgentOpsContextKey.FactualityScore,
|
|
207
|
+
AgentOpsContextKey.FlowCompartments,
|
|
208
|
+
AgentOpsContextKey.FlowConfidentiality,
|
|
209
|
+
AgentOpsContextKey.FlowDataTypes,
|
|
210
|
+
AgentOpsContextKey.FlowIntegrity,
|
|
211
|
+
AgentOpsContextKey.FlowOrigins,
|
|
212
|
+
AgentOpsContextKey.FlowResolutionStatus,
|
|
213
|
+
AgentOpsContextKey.FlowSink,
|
|
214
|
+
AgentOpsContextKey.FlowSinkEffects,
|
|
215
|
+
AgentOpsContextKey.FlowSinkIsExternal,
|
|
187
216
|
AgentOpsContextKey.HallucinationScore,
|
|
188
217
|
AgentOpsContextKey.HateSpeechScore,
|
|
189
218
|
AgentOpsContextKey.HighestSeverity,
|
|
@@ -198,6 +227,7 @@ export const AgentOpsContextKeys = [
|
|
|
198
227
|
AgentOpsContextKey.InvisibleCharsScore,
|
|
199
228
|
AgentOpsContextKey.IsEnglish,
|
|
200
229
|
AgentOpsContextKey.IsLatinScript,
|
|
230
|
+
AgentOpsContextKey.IsolationTier,
|
|
201
231
|
AgentOpsContextKey.JailbreakDeepContextScore,
|
|
202
232
|
AgentOpsContextKey.JailbreakPulseScore,
|
|
203
233
|
AgentOpsContextKey.JailbreakScore,
|
|
@@ -214,9 +244,11 @@ export const AgentOpsContextKeys = [
|
|
|
214
244
|
AgentOpsContextKey.McpServer,
|
|
215
245
|
AgentOpsContextKey.McpServerVerified,
|
|
216
246
|
AgentOpsContextKey.McpTool,
|
|
247
|
+
AgentOpsContextKey.MechanismCapabilities,
|
|
217
248
|
AgentOpsContextKey.ModelName,
|
|
218
249
|
AgentOpsContextKey.ModelProvider,
|
|
219
250
|
AgentOpsContextKey.MultiTurnDetection,
|
|
251
|
+
AgentOpsContextKey.NetworkEgress,
|
|
220
252
|
AgentOpsContextKey.ParamTypeViolation,
|
|
221
253
|
AgentOpsContextKey.ParamTypeViolations,
|
|
222
254
|
AgentOpsContextKey.Path,
|
|
@@ -230,6 +262,8 @@ export const AgentOpsContextKeys = [
|
|
|
230
262
|
AgentOpsContextKey.PiiScore,
|
|
231
263
|
AgentOpsContextKey.PiiTypes,
|
|
232
264
|
AgentOpsContextKey.Principal,
|
|
265
|
+
AgentOpsContextKey.PrincipalClearances,
|
|
266
|
+
AgentOpsContextKey.PrincipalCompartments,
|
|
233
267
|
AgentOpsContextKey.PrivilegeScope,
|
|
234
268
|
AgentOpsContextKey.ProfanityScore,
|
|
235
269
|
AgentOpsContextKey.RequestId,
|
|
@@ -265,6 +299,7 @@ export const AgentOpsContextKeys = [
|
|
|
265
299
|
AgentOpsContextKey.SqlInjectionDetected,
|
|
266
300
|
AgentOpsContextKey.SqlInjectionScore,
|
|
267
301
|
AgentOpsContextKey.SqlInjectionType,
|
|
302
|
+
AgentOpsContextKey.Surface,
|
|
268
303
|
AgentOpsContextKey.SuspiciousPattern,
|
|
269
304
|
AgentOpsContextKey.ThreatCategories,
|
|
270
305
|
AgentOpsContextKey.ThreatCount,
|
|
@@ -285,4 +320,5 @@ export const AgentOpsContextKeys = [
|
|
|
285
320
|
AgentOpsContextKey.ViolenceScore,
|
|
286
321
|
AgentOpsContextKey.WeaponsScore,
|
|
287
322
|
AgentOpsContextKey.WorkspaceRoot,
|
|
323
|
+
AgentOpsContextKey.WritablePaths,
|
|
288
324
|
];
|
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
* AgentOps policy category identifiers.
|
|
3
3
|
* Maps to UI tab names in Studio.
|
|
4
4
|
*/
|
|
5
|
-
export type AgentOpsCategory = 'threat-detection' | 'data-protection' | 'agent-security' | 'tool-permissioning' | 'code-security' | 'content-safety' | 'organization';
|
|
5
|
+
export type AgentOpsCategory = 'threat-detection' | 'data-protection' | 'agent-security' | 'tool-permissioning' | 'code-security' | 'content-safety' | 'organization' | 'sandbox';
|
|
6
6
|
/**
|
|
7
7
|
* Category metadata for UI display.
|
|
8
8
|
*/
|