@highflame/policy 2.2.35 → 2.2.37

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (78) hide show
  1. package/_schemas/agent_ops/context.json +822 -0
  2. package/_schemas/agent_ops/schema.cedarschema +134 -109
  3. package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_cross_origin.cedar +6 -4
  4. package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_escalation.cedar +5 -4
  5. package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_inter_agent_injection.cedar +9 -8
  6. package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_claude_block_injection.cedar +2 -2
  7. package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_defaults.cedar +3 -3
  8. package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_multi_agent_trust.cedar +6 -6
  9. package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_chat_assistant.cedar +5 -4
  10. package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_defaults.cedar +18 -12
  11. package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_semantic.cedar +6 -6
  12. package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_toxicity.cedar +4 -4
  13. package/_schemas/agent_ops/templates/ported/data-protection/data_protection_advanced_secrets.cedar +4 -2
  14. package/_schemas/agent_ops/templates/ported/data-protection/data_protection_data_pipeline.cedar +2 -1
  15. package/_schemas/agent_ops/templates/ported/data-protection/data_protection_defaults.cedar +4 -2
  16. package/_schemas/agent_ops/templates/ported/data-protection/privacy_advanced_pii.cedar +42 -21
  17. package/_schemas/agent_ops/templates/ported/data-protection/privacy_defaults.cedar +14 -7
  18. package/_schemas/agent_ops/templates/ported/data-protection/privacy_pii_model.cedar +10 -5
  19. package/_schemas/agent_ops/templates/ported/organization/organization_team_permissions.cedar +3 -2
  20. package/_schemas/agent_ops/templates/ported/threat-detection/security_advanced_block_critical_severity.cedar +3 -3
  21. package/_schemas/agent_ops/templates/ported/threat-detection/security_chat_assistant.cedar +5 -4
  22. package/_schemas/agent_ops/templates/ported/threat-detection/security_data_pipeline_block_injection.cedar +3 -2
  23. package/_schemas/agent_ops/templates/ported/threat-detection/security_injection.cedar +9 -8
  24. package/_schemas/agent_ops/templates/ported/threat-detection/security_patterns.cedar +5 -3
  25. package/_schemas/agent_ops/templates/ported/threat-detection/semantic_defaults.cedar +9 -7
  26. package/_schemas/ai_gateway/context.json +308 -0
  27. package/_schemas/ai_gateway/schema.cedarschema +44 -7
  28. package/_schemas/ai_gateway/templates/defaults/agent_security.cedar +5 -16
  29. package/_schemas/ai_gateway/templates/defaults/pii.cedar +14 -7
  30. package/_schemas/ai_gateway/templates/defaults/pii_advanced.cedar +42 -21
  31. package/_schemas/ai_gateway/templates/defaults/pii_model.cedar +10 -5
  32. package/_schemas/ai_gateway/templates/defaults/semantic.cedar +9 -74
  33. package/_schemas/ai_gateway/templates/defaults/tools.cedar +7 -38
  34. package/_schemas/ai_gateway/templates/secrets.cedar +3 -3
  35. package/_schemas/guardrails/context.json +701 -0
  36. package/_schemas/guardrails/schema.cedarschema +30 -2
  37. package/_schemas/guardrails/templates/defaults/agent_identity.cedar +3 -3
  38. package/_schemas/guardrails/templates/defaults/injection.cedar +9 -8
  39. package/_schemas/guardrails/templates/defaults/pii.cedar +14 -7
  40. package/_schemas/guardrails/templates/defaults/pii_model.cedar +10 -5
  41. package/_schemas/guardrails/templates/defaults/secrets.cedar +4 -2
  42. package/_schemas/guardrails/templates/defaults/security_patterns.cedar +5 -3
  43. package/_schemas/guardrails/templates/defaults/semantic.cedar +6 -6
  44. package/_schemas/guardrails/templates/defaults/toxicity.cedar +6 -6
  45. package/_schemas/guardrails/templates/profiles/a2a_security/cross_origin.cedar +6 -4
  46. package/_schemas/guardrails/templates/profiles/a2a_security/escalation_detection.cedar +5 -4
  47. package/_schemas/guardrails/templates/profiles/a2a_security/inter_agent_injection.cedar +9 -8
  48. package/_schemas/guardrails/templates/profiles/advanced_detection/pii.cedar +42 -21
  49. package/_schemas/guardrails/templates/profiles/advanced_detection/secrets.cedar +4 -2
  50. package/_schemas/guardrails/templates/profiles/chat_assistant/security.cedar +5 -4
  51. package/_schemas/guardrails/templates/profiles/chat_assistant/trust_safety.cedar +5 -4
  52. package/_schemas/guardrails/templates/profiles/data_pipeline/data_protection.cedar +2 -1
  53. package/_schemas/guardrails/templates/profiles/data_pipeline/security.cedar +3 -2
  54. package/_schemas/guardrails/templates/profiles/multi_agent/agent_trust.cedar +6 -6
  55. package/_schemas/guardrails/templates/templates.json +0 -9
  56. package/_schemas/overwatch/context.json +30 -0
  57. package/_schemas/overwatch/schema.cedarschema +7 -0
  58. package/dist/agent_ops-context.gen.d.ts +6 -1
  59. package/dist/agent_ops-context.gen.js +10 -0
  60. package/dist/agent_ops-defaults.gen.js +177 -120
  61. package/dist/agent_ops-entities.gen.js +5 -1
  62. package/dist/ai_gateway-context.gen.d.ts +6 -1
  63. package/dist/ai_gateway-context.gen.js +10 -0
  64. package/dist/ai_gateway-defaults.gen.js +90 -164
  65. package/dist/ai_gateway-detectors.gen.js +6 -1
  66. package/dist/ai_gateway-entities.gen.js +6 -2
  67. package/dist/guardrails-context.gen.d.ts +6 -1
  68. package/dist/guardrails-context.gen.js +10 -0
  69. package/dist/guardrails-defaults.gen.js +144 -145
  70. package/dist/guardrails-detectors.gen.js +6 -1
  71. package/dist/guardrails-entities.gen.js +5 -1
  72. package/dist/overwatch-context.gen.d.ts +6 -1
  73. package/dist/overwatch-context.gen.js +10 -0
  74. package/dist/overwatch-detectors.gen.js +6 -1
  75. package/dist/service-schemas.gen.d.ts +4 -4
  76. package/dist/service-schemas.gen.js +528 -118
  77. package/package.json +1 -1
  78. package/_schemas/guardrails/templates/profiles/advanced_detection/threat_severity.cedar +0 -30
@@ -7,7 +7,7 @@
7
7
  export const AGENT_OPS_ENTITIES = {
8
8
  principals: ['Agent', 'User'],
9
9
  resources: ['Agent', 'App', 'Session'],
10
- actions: ['call_tool', 'connect_server', 'process_prompt', 'provision_sandbox', 'read_file', 'write_file'],
10
+ actions: ['call_tool', 'connect_server', 'process_prompt', 'process_response', 'provision_sandbox', 'read_file', 'write_file'],
11
11
  };
12
12
  /**
13
13
  * Per-action entity mapping for AgentOps.
@@ -26,6 +26,10 @@ export const AGENT_OPS_ACTION_ENTITIES = {
26
26
  principals: ['Agent', 'User'],
27
27
  resources: ['Agent', 'App', 'Session'],
28
28
  },
29
+ 'process_response': {
30
+ principals: ['Agent', 'User'],
31
+ resources: ['Agent', 'App', 'Session'],
32
+ },
29
33
  'provision_sandbox': {
30
34
  principals: ['Agent', 'User'],
31
35
  resources: ['Agent', 'Session'],
@@ -8,6 +8,7 @@ export declare const AiGatewayContextKey: {
8
8
  readonly Content: "content";
9
9
  readonly CrimeScore: "crime_score";
10
10
  readonly DetectedThreats: "detected_threats";
11
+ readonly ExecTargetPaths: "exec_target_paths";
11
12
  readonly HateSpeechScore: "hate_speech_score";
12
13
  readonly HighestSeverity: "highest_severity";
13
14
  readonly IndirectInjectionScore: "indirect_injection_score";
@@ -42,6 +43,8 @@ export declare const AiGatewayContextKey: {
42
43
  readonly PiiTypes: "pii_types";
43
44
  readonly PrivilegeScope: "privilege_scope";
44
45
  readonly ProfanityScore: "profanity_score";
46
+ readonly ReadTargetPaths: "read_target_paths";
47
+ readonly ResolvedTargetPaths: "resolved_target_paths";
45
48
  readonly Role: "role";
46
49
  readonly RpmExceeded: "rpm_exceeded";
47
50
  readonly RpmRemainingPct: "rpm_remaining_pct";
@@ -78,12 +81,14 @@ export declare const AiGatewayContextKey: {
78
81
  readonly ToolRiskScore: "tool_risk_score";
79
82
  readonly TpmExceeded: "tpm_exceeded";
80
83
  readonly TpmRemainingPct: "tpm_remaining_pct";
84
+ readonly UnresolvedTarget: "unresolved_target";
81
85
  readonly ViolenceScore: "violence_score";
82
86
  readonly WeaponsScore: "weapons_score";
87
+ readonly WriteTargetPaths: "write_target_paths";
83
88
  };
84
89
  export type AiGatewayContextKey = (typeof AiGatewayContextKey)[keyof typeof AiGatewayContextKey];
85
90
  /**
86
91
  * The full set of authorable context attribute keys for AiGateway.
87
92
  * Iterate this to enumerate the authorable surface (cockpit, conformance).
88
93
  */
89
- export declare const AiGatewayContextKeys: readonly ["content", "crime_score", "detected_threats", "hate_speech_score", "highest_severity", "indirect_injection_score", "injection_score", "invisible_chars_detected", "invisible_chars_score", "jailbreak_score", "loop_count", "loop_detected", "malicious_package_detected", "malicious_package_score", "malicious_packages", "max_threat_severity", "mcp_config_risk", "mcp_risk_score", "mcp_server", "mcp_server_verified", "mcp_tool", "model_name", "model_provider", "package_advisory_count", "package_check_status", "package_ecosystems", "package_install_detected", "package_names", "package_risk_score", "packages_checked", "pattern_type", "pii_count", "pii_detected", "pii_score", "pii_types", "privilege_scope", "profanity_score", "role", "rpm_exceeded", "rpm_remaining_pct", "rug_pull_detected", "rug_pull_score", "secret_count", "secret_types", "secrets_detected", "sequence_risk", "session_command_injection", "session_cumulative_risk_score", "session_injection_detected", "session_max_command_injection_score", "session_max_injection_score", "session_max_jailbreak_score", "session_max_pii_score", "session_max_secret_score", "session_pii_detected", "session_pii_types", "session_secret_types", "session_secrets_detected", "session_threat_turns", "sexual_score", "suspicious_pattern", "threat_categories", "threat_count", "tool_category", "tool_is_builtin", "tool_is_sensitive", "tool_name", "tool_operation_classes", "tool_poisoning_detected", "tool_poisoning_score", "tool_risk_score", "tpm_exceeded", "tpm_remaining_pct", "violence_score", "weapons_score"];
94
+ export declare const AiGatewayContextKeys: readonly ["content", "crime_score", "detected_threats", "exec_target_paths", "hate_speech_score", "highest_severity", "indirect_injection_score", "injection_score", "invisible_chars_detected", "invisible_chars_score", "jailbreak_score", "loop_count", "loop_detected", "malicious_package_detected", "malicious_package_score", "malicious_packages", "max_threat_severity", "mcp_config_risk", "mcp_risk_score", "mcp_server", "mcp_server_verified", "mcp_tool", "model_name", "model_provider", "package_advisory_count", "package_check_status", "package_ecosystems", "package_install_detected", "package_names", "package_risk_score", "packages_checked", "pattern_type", "pii_count", "pii_detected", "pii_score", "pii_types", "privilege_scope", "profanity_score", "read_target_paths", "resolved_target_paths", "role", "rpm_exceeded", "rpm_remaining_pct", "rug_pull_detected", "rug_pull_score", "secret_count", "secret_types", "secrets_detected", "sequence_risk", "session_command_injection", "session_cumulative_risk_score", "session_injection_detected", "session_max_command_injection_score", "session_max_injection_score", "session_max_jailbreak_score", "session_max_pii_score", "session_max_secret_score", "session_pii_detected", "session_pii_types", "session_secret_types", "session_secrets_detected", "session_threat_turns", "sexual_score", "suspicious_pattern", "threat_categories", "threat_count", "tool_category", "tool_is_builtin", "tool_is_sensitive", "tool_name", "tool_operation_classes", "tool_poisoning_detected", "tool_poisoning_score", "tool_risk_score", "tpm_exceeded", "tpm_remaining_pct", "unresolved_target", "violence_score", "weapons_score", "write_target_paths"];
@@ -10,6 +10,7 @@ export const AiGatewayContextKey = {
10
10
  Content: 'content',
11
11
  CrimeScore: 'crime_score',
12
12
  DetectedThreats: 'detected_threats',
13
+ ExecTargetPaths: 'exec_target_paths',
13
14
  HateSpeechScore: 'hate_speech_score',
14
15
  HighestSeverity: 'highest_severity',
15
16
  IndirectInjectionScore: 'indirect_injection_score',
@@ -44,6 +45,8 @@ export const AiGatewayContextKey = {
44
45
  PiiTypes: 'pii_types',
45
46
  PrivilegeScope: 'privilege_scope',
46
47
  ProfanityScore: 'profanity_score',
48
+ ReadTargetPaths: 'read_target_paths',
49
+ ResolvedTargetPaths: 'resolved_target_paths',
47
50
  Role: 'role',
48
51
  RpmExceeded: 'rpm_exceeded',
49
52
  RpmRemainingPct: 'rpm_remaining_pct',
@@ -80,8 +83,10 @@ export const AiGatewayContextKey = {
80
83
  ToolRiskScore: 'tool_risk_score',
81
84
  TpmExceeded: 'tpm_exceeded',
82
85
  TpmRemainingPct: 'tpm_remaining_pct',
86
+ UnresolvedTarget: 'unresolved_target',
83
87
  ViolenceScore: 'violence_score',
84
88
  WeaponsScore: 'weapons_score',
89
+ WriteTargetPaths: 'write_target_paths',
85
90
  };
86
91
  /**
87
92
  * The full set of authorable context attribute keys for AiGateway.
@@ -91,6 +96,7 @@ export const AiGatewayContextKeys = [
91
96
  AiGatewayContextKey.Content,
92
97
  AiGatewayContextKey.CrimeScore,
93
98
  AiGatewayContextKey.DetectedThreats,
99
+ AiGatewayContextKey.ExecTargetPaths,
94
100
  AiGatewayContextKey.HateSpeechScore,
95
101
  AiGatewayContextKey.HighestSeverity,
96
102
  AiGatewayContextKey.IndirectInjectionScore,
@@ -125,6 +131,8 @@ export const AiGatewayContextKeys = [
125
131
  AiGatewayContextKey.PiiTypes,
126
132
  AiGatewayContextKey.PrivilegeScope,
127
133
  AiGatewayContextKey.ProfanityScore,
134
+ AiGatewayContextKey.ReadTargetPaths,
135
+ AiGatewayContextKey.ResolvedTargetPaths,
128
136
  AiGatewayContextKey.Role,
129
137
  AiGatewayContextKey.RpmExceeded,
130
138
  AiGatewayContextKey.RpmRemainingPct,
@@ -161,6 +169,8 @@ export const AiGatewayContextKeys = [
161
169
  AiGatewayContextKey.ToolRiskScore,
162
170
  AiGatewayContextKey.TpmExceeded,
163
171
  AiGatewayContextKey.TpmRemainingPct,
172
+ AiGatewayContextKey.UnresolvedTarget,
164
173
  AiGatewayContextKey.ViolenceScore,
165
174
  AiGatewayContextKey.WeaponsScore,
175
+ AiGatewayContextKey.WriteTargetPaths,
166
176
  ];