@highflame/policy 2.2.35 → 2.2.37
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/_schemas/agent_ops/context.json +822 -0
- package/_schemas/agent_ops/schema.cedarschema +134 -109
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_cross_origin.cedar +6 -4
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_escalation.cedar +5 -4
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_inter_agent_injection.cedar +9 -8
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_claude_block_injection.cedar +2 -2
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_defaults.cedar +3 -3
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_multi_agent_trust.cedar +6 -6
- package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_chat_assistant.cedar +5 -4
- package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_defaults.cedar +18 -12
- package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_semantic.cedar +6 -6
- package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_toxicity.cedar +4 -4
- package/_schemas/agent_ops/templates/ported/data-protection/data_protection_advanced_secrets.cedar +4 -2
- package/_schemas/agent_ops/templates/ported/data-protection/data_protection_data_pipeline.cedar +2 -1
- package/_schemas/agent_ops/templates/ported/data-protection/data_protection_defaults.cedar +4 -2
- package/_schemas/agent_ops/templates/ported/data-protection/privacy_advanced_pii.cedar +42 -21
- package/_schemas/agent_ops/templates/ported/data-protection/privacy_defaults.cedar +14 -7
- package/_schemas/agent_ops/templates/ported/data-protection/privacy_pii_model.cedar +10 -5
- package/_schemas/agent_ops/templates/ported/organization/organization_team_permissions.cedar +3 -2
- package/_schemas/agent_ops/templates/ported/threat-detection/security_advanced_block_critical_severity.cedar +3 -3
- package/_schemas/agent_ops/templates/ported/threat-detection/security_chat_assistant.cedar +5 -4
- package/_schemas/agent_ops/templates/ported/threat-detection/security_data_pipeline_block_injection.cedar +3 -2
- package/_schemas/agent_ops/templates/ported/threat-detection/security_injection.cedar +9 -8
- package/_schemas/agent_ops/templates/ported/threat-detection/security_patterns.cedar +5 -3
- package/_schemas/agent_ops/templates/ported/threat-detection/semantic_defaults.cedar +9 -7
- package/_schemas/ai_gateway/context.json +308 -0
- package/_schemas/ai_gateway/schema.cedarschema +44 -7
- package/_schemas/ai_gateway/templates/defaults/agent_security.cedar +5 -16
- package/_schemas/ai_gateway/templates/defaults/pii.cedar +14 -7
- package/_schemas/ai_gateway/templates/defaults/pii_advanced.cedar +42 -21
- package/_schemas/ai_gateway/templates/defaults/pii_model.cedar +10 -5
- package/_schemas/ai_gateway/templates/defaults/semantic.cedar +9 -74
- package/_schemas/ai_gateway/templates/defaults/tools.cedar +7 -38
- package/_schemas/ai_gateway/templates/secrets.cedar +3 -3
- package/_schemas/guardrails/context.json +701 -0
- package/_schemas/guardrails/schema.cedarschema +30 -2
- package/_schemas/guardrails/templates/defaults/agent_identity.cedar +3 -3
- package/_schemas/guardrails/templates/defaults/injection.cedar +9 -8
- package/_schemas/guardrails/templates/defaults/pii.cedar +14 -7
- package/_schemas/guardrails/templates/defaults/pii_model.cedar +10 -5
- package/_schemas/guardrails/templates/defaults/secrets.cedar +4 -2
- package/_schemas/guardrails/templates/defaults/security_patterns.cedar +5 -3
- package/_schemas/guardrails/templates/defaults/semantic.cedar +6 -6
- package/_schemas/guardrails/templates/defaults/toxicity.cedar +6 -6
- package/_schemas/guardrails/templates/profiles/a2a_security/cross_origin.cedar +6 -4
- package/_schemas/guardrails/templates/profiles/a2a_security/escalation_detection.cedar +5 -4
- package/_schemas/guardrails/templates/profiles/a2a_security/inter_agent_injection.cedar +9 -8
- package/_schemas/guardrails/templates/profiles/advanced_detection/pii.cedar +42 -21
- package/_schemas/guardrails/templates/profiles/advanced_detection/secrets.cedar +4 -2
- package/_schemas/guardrails/templates/profiles/chat_assistant/security.cedar +5 -4
- package/_schemas/guardrails/templates/profiles/chat_assistant/trust_safety.cedar +5 -4
- package/_schemas/guardrails/templates/profiles/data_pipeline/data_protection.cedar +2 -1
- package/_schemas/guardrails/templates/profiles/data_pipeline/security.cedar +3 -2
- package/_schemas/guardrails/templates/profiles/multi_agent/agent_trust.cedar +6 -6
- package/_schemas/guardrails/templates/templates.json +0 -9
- package/_schemas/overwatch/context.json +30 -0
- package/_schemas/overwatch/schema.cedarschema +7 -0
- package/dist/agent_ops-context.gen.d.ts +6 -1
- package/dist/agent_ops-context.gen.js +10 -0
- package/dist/agent_ops-defaults.gen.js +177 -120
- package/dist/agent_ops-entities.gen.js +5 -1
- package/dist/ai_gateway-context.gen.d.ts +6 -1
- package/dist/ai_gateway-context.gen.js +10 -0
- package/dist/ai_gateway-defaults.gen.js +90 -164
- package/dist/ai_gateway-detectors.gen.js +6 -1
- package/dist/ai_gateway-entities.gen.js +6 -2
- package/dist/guardrails-context.gen.d.ts +6 -1
- package/dist/guardrails-context.gen.js +10 -0
- package/dist/guardrails-defaults.gen.js +144 -145
- package/dist/guardrails-detectors.gen.js +6 -1
- package/dist/guardrails-entities.gen.js +5 -1
- package/dist/overwatch-context.gen.d.ts +6 -1
- package/dist/overwatch-context.gen.js +10 -0
- package/dist/overwatch-detectors.gen.js +6 -1
- package/dist/service-schemas.gen.d.ts +4 -4
- package/dist/service-schemas.gen.js +528 -118
- package/package.json +1 -1
- package/_schemas/guardrails/templates/profiles/advanced_detection/threat_severity.cedar +0 -30
|
@@ -7,7 +7,7 @@
|
|
|
7
7
|
export const AGENT_OPS_ENTITIES = {
|
|
8
8
|
principals: ['Agent', 'User'],
|
|
9
9
|
resources: ['Agent', 'App', 'Session'],
|
|
10
|
-
actions: ['call_tool', 'connect_server', 'process_prompt', 'provision_sandbox', 'read_file', 'write_file'],
|
|
10
|
+
actions: ['call_tool', 'connect_server', 'process_prompt', 'process_response', 'provision_sandbox', 'read_file', 'write_file'],
|
|
11
11
|
};
|
|
12
12
|
/**
|
|
13
13
|
* Per-action entity mapping for AgentOps.
|
|
@@ -26,6 +26,10 @@ export const AGENT_OPS_ACTION_ENTITIES = {
|
|
|
26
26
|
principals: ['Agent', 'User'],
|
|
27
27
|
resources: ['Agent', 'App', 'Session'],
|
|
28
28
|
},
|
|
29
|
+
'process_response': {
|
|
30
|
+
principals: ['Agent', 'User'],
|
|
31
|
+
resources: ['Agent', 'App', 'Session'],
|
|
32
|
+
},
|
|
29
33
|
'provision_sandbox': {
|
|
30
34
|
principals: ['Agent', 'User'],
|
|
31
35
|
resources: ['Agent', 'Session'],
|
|
@@ -8,6 +8,7 @@ export declare const AiGatewayContextKey: {
|
|
|
8
8
|
readonly Content: "content";
|
|
9
9
|
readonly CrimeScore: "crime_score";
|
|
10
10
|
readonly DetectedThreats: "detected_threats";
|
|
11
|
+
readonly ExecTargetPaths: "exec_target_paths";
|
|
11
12
|
readonly HateSpeechScore: "hate_speech_score";
|
|
12
13
|
readonly HighestSeverity: "highest_severity";
|
|
13
14
|
readonly IndirectInjectionScore: "indirect_injection_score";
|
|
@@ -42,6 +43,8 @@ export declare const AiGatewayContextKey: {
|
|
|
42
43
|
readonly PiiTypes: "pii_types";
|
|
43
44
|
readonly PrivilegeScope: "privilege_scope";
|
|
44
45
|
readonly ProfanityScore: "profanity_score";
|
|
46
|
+
readonly ReadTargetPaths: "read_target_paths";
|
|
47
|
+
readonly ResolvedTargetPaths: "resolved_target_paths";
|
|
45
48
|
readonly Role: "role";
|
|
46
49
|
readonly RpmExceeded: "rpm_exceeded";
|
|
47
50
|
readonly RpmRemainingPct: "rpm_remaining_pct";
|
|
@@ -78,12 +81,14 @@ export declare const AiGatewayContextKey: {
|
|
|
78
81
|
readonly ToolRiskScore: "tool_risk_score";
|
|
79
82
|
readonly TpmExceeded: "tpm_exceeded";
|
|
80
83
|
readonly TpmRemainingPct: "tpm_remaining_pct";
|
|
84
|
+
readonly UnresolvedTarget: "unresolved_target";
|
|
81
85
|
readonly ViolenceScore: "violence_score";
|
|
82
86
|
readonly WeaponsScore: "weapons_score";
|
|
87
|
+
readonly WriteTargetPaths: "write_target_paths";
|
|
83
88
|
};
|
|
84
89
|
export type AiGatewayContextKey = (typeof AiGatewayContextKey)[keyof typeof AiGatewayContextKey];
|
|
85
90
|
/**
|
|
86
91
|
* The full set of authorable context attribute keys for AiGateway.
|
|
87
92
|
* Iterate this to enumerate the authorable surface (cockpit, conformance).
|
|
88
93
|
*/
|
|
89
|
-
export declare const AiGatewayContextKeys: readonly ["content", "crime_score", "detected_threats", "hate_speech_score", "highest_severity", "indirect_injection_score", "injection_score", "invisible_chars_detected", "invisible_chars_score", "jailbreak_score", "loop_count", "loop_detected", "malicious_package_detected", "malicious_package_score", "malicious_packages", "max_threat_severity", "mcp_config_risk", "mcp_risk_score", "mcp_server", "mcp_server_verified", "mcp_tool", "model_name", "model_provider", "package_advisory_count", "package_check_status", "package_ecosystems", "package_install_detected", "package_names", "package_risk_score", "packages_checked", "pattern_type", "pii_count", "pii_detected", "pii_score", "pii_types", "privilege_scope", "profanity_score", "role", "rpm_exceeded", "rpm_remaining_pct", "rug_pull_detected", "rug_pull_score", "secret_count", "secret_types", "secrets_detected", "sequence_risk", "session_command_injection", "session_cumulative_risk_score", "session_injection_detected", "session_max_command_injection_score", "session_max_injection_score", "session_max_jailbreak_score", "session_max_pii_score", "session_max_secret_score", "session_pii_detected", "session_pii_types", "session_secret_types", "session_secrets_detected", "session_threat_turns", "sexual_score", "suspicious_pattern", "threat_categories", "threat_count", "tool_category", "tool_is_builtin", "tool_is_sensitive", "tool_name", "tool_operation_classes", "tool_poisoning_detected", "tool_poisoning_score", "tool_risk_score", "tpm_exceeded", "tpm_remaining_pct", "violence_score", "weapons_score"];
|
|
94
|
+
export declare const AiGatewayContextKeys: readonly ["content", "crime_score", "detected_threats", "exec_target_paths", "hate_speech_score", "highest_severity", "indirect_injection_score", "injection_score", "invisible_chars_detected", "invisible_chars_score", "jailbreak_score", "loop_count", "loop_detected", "malicious_package_detected", "malicious_package_score", "malicious_packages", "max_threat_severity", "mcp_config_risk", "mcp_risk_score", "mcp_server", "mcp_server_verified", "mcp_tool", "model_name", "model_provider", "package_advisory_count", "package_check_status", "package_ecosystems", "package_install_detected", "package_names", "package_risk_score", "packages_checked", "pattern_type", "pii_count", "pii_detected", "pii_score", "pii_types", "privilege_scope", "profanity_score", "read_target_paths", "resolved_target_paths", "role", "rpm_exceeded", "rpm_remaining_pct", "rug_pull_detected", "rug_pull_score", "secret_count", "secret_types", "secrets_detected", "sequence_risk", "session_command_injection", "session_cumulative_risk_score", "session_injection_detected", "session_max_command_injection_score", "session_max_injection_score", "session_max_jailbreak_score", "session_max_pii_score", "session_max_secret_score", "session_pii_detected", "session_pii_types", "session_secret_types", "session_secrets_detected", "session_threat_turns", "sexual_score", "suspicious_pattern", "threat_categories", "threat_count", "tool_category", "tool_is_builtin", "tool_is_sensitive", "tool_name", "tool_operation_classes", "tool_poisoning_detected", "tool_poisoning_score", "tool_risk_score", "tpm_exceeded", "tpm_remaining_pct", "unresolved_target", "violence_score", "weapons_score", "write_target_paths"];
|
|
@@ -10,6 +10,7 @@ export const AiGatewayContextKey = {
|
|
|
10
10
|
Content: 'content',
|
|
11
11
|
CrimeScore: 'crime_score',
|
|
12
12
|
DetectedThreats: 'detected_threats',
|
|
13
|
+
ExecTargetPaths: 'exec_target_paths',
|
|
13
14
|
HateSpeechScore: 'hate_speech_score',
|
|
14
15
|
HighestSeverity: 'highest_severity',
|
|
15
16
|
IndirectInjectionScore: 'indirect_injection_score',
|
|
@@ -44,6 +45,8 @@ export const AiGatewayContextKey = {
|
|
|
44
45
|
PiiTypes: 'pii_types',
|
|
45
46
|
PrivilegeScope: 'privilege_scope',
|
|
46
47
|
ProfanityScore: 'profanity_score',
|
|
48
|
+
ReadTargetPaths: 'read_target_paths',
|
|
49
|
+
ResolvedTargetPaths: 'resolved_target_paths',
|
|
47
50
|
Role: 'role',
|
|
48
51
|
RpmExceeded: 'rpm_exceeded',
|
|
49
52
|
RpmRemainingPct: 'rpm_remaining_pct',
|
|
@@ -80,8 +83,10 @@ export const AiGatewayContextKey = {
|
|
|
80
83
|
ToolRiskScore: 'tool_risk_score',
|
|
81
84
|
TpmExceeded: 'tpm_exceeded',
|
|
82
85
|
TpmRemainingPct: 'tpm_remaining_pct',
|
|
86
|
+
UnresolvedTarget: 'unresolved_target',
|
|
83
87
|
ViolenceScore: 'violence_score',
|
|
84
88
|
WeaponsScore: 'weapons_score',
|
|
89
|
+
WriteTargetPaths: 'write_target_paths',
|
|
85
90
|
};
|
|
86
91
|
/**
|
|
87
92
|
* The full set of authorable context attribute keys for AiGateway.
|
|
@@ -91,6 +96,7 @@ export const AiGatewayContextKeys = [
|
|
|
91
96
|
AiGatewayContextKey.Content,
|
|
92
97
|
AiGatewayContextKey.CrimeScore,
|
|
93
98
|
AiGatewayContextKey.DetectedThreats,
|
|
99
|
+
AiGatewayContextKey.ExecTargetPaths,
|
|
94
100
|
AiGatewayContextKey.HateSpeechScore,
|
|
95
101
|
AiGatewayContextKey.HighestSeverity,
|
|
96
102
|
AiGatewayContextKey.IndirectInjectionScore,
|
|
@@ -125,6 +131,8 @@ export const AiGatewayContextKeys = [
|
|
|
125
131
|
AiGatewayContextKey.PiiTypes,
|
|
126
132
|
AiGatewayContextKey.PrivilegeScope,
|
|
127
133
|
AiGatewayContextKey.ProfanityScore,
|
|
134
|
+
AiGatewayContextKey.ReadTargetPaths,
|
|
135
|
+
AiGatewayContextKey.ResolvedTargetPaths,
|
|
128
136
|
AiGatewayContextKey.Role,
|
|
129
137
|
AiGatewayContextKey.RpmExceeded,
|
|
130
138
|
AiGatewayContextKey.RpmRemainingPct,
|
|
@@ -161,6 +169,8 @@ export const AiGatewayContextKeys = [
|
|
|
161
169
|
AiGatewayContextKey.ToolRiskScore,
|
|
162
170
|
AiGatewayContextKey.TpmExceeded,
|
|
163
171
|
AiGatewayContextKey.TpmRemainingPct,
|
|
172
|
+
AiGatewayContextKey.UnresolvedTarget,
|
|
164
173
|
AiGatewayContextKey.ViolenceScore,
|
|
165
174
|
AiGatewayContextKey.WeaponsScore,
|
|
175
|
+
AiGatewayContextKey.WriteTargetPaths,
|
|
166
176
|
];
|