@highflame/policy 2.2.35 → 2.2.37
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/_schemas/agent_ops/context.json +822 -0
- package/_schemas/agent_ops/schema.cedarschema +134 -109
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_cross_origin.cedar +6 -4
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_escalation.cedar +5 -4
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_a2a_inter_agent_injection.cedar +9 -8
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_claude_block_injection.cedar +2 -2
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_defaults.cedar +3 -3
- package/_schemas/agent_ops/templates/ported/agent-security/agent_identity_multi_agent_trust.cedar +6 -6
- package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_chat_assistant.cedar +5 -4
- package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_defaults.cedar +18 -12
- package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_semantic.cedar +6 -6
- package/_schemas/agent_ops/templates/ported/content-safety/trust_safety_toxicity.cedar +4 -4
- package/_schemas/agent_ops/templates/ported/data-protection/data_protection_advanced_secrets.cedar +4 -2
- package/_schemas/agent_ops/templates/ported/data-protection/data_protection_data_pipeline.cedar +2 -1
- package/_schemas/agent_ops/templates/ported/data-protection/data_protection_defaults.cedar +4 -2
- package/_schemas/agent_ops/templates/ported/data-protection/privacy_advanced_pii.cedar +42 -21
- package/_schemas/agent_ops/templates/ported/data-protection/privacy_defaults.cedar +14 -7
- package/_schemas/agent_ops/templates/ported/data-protection/privacy_pii_model.cedar +10 -5
- package/_schemas/agent_ops/templates/ported/organization/organization_team_permissions.cedar +3 -2
- package/_schemas/agent_ops/templates/ported/threat-detection/security_advanced_block_critical_severity.cedar +3 -3
- package/_schemas/agent_ops/templates/ported/threat-detection/security_chat_assistant.cedar +5 -4
- package/_schemas/agent_ops/templates/ported/threat-detection/security_data_pipeline_block_injection.cedar +3 -2
- package/_schemas/agent_ops/templates/ported/threat-detection/security_injection.cedar +9 -8
- package/_schemas/agent_ops/templates/ported/threat-detection/security_patterns.cedar +5 -3
- package/_schemas/agent_ops/templates/ported/threat-detection/semantic_defaults.cedar +9 -7
- package/_schemas/ai_gateway/context.json +308 -0
- package/_schemas/ai_gateway/schema.cedarschema +44 -7
- package/_schemas/ai_gateway/templates/defaults/agent_security.cedar +5 -16
- package/_schemas/ai_gateway/templates/defaults/pii.cedar +14 -7
- package/_schemas/ai_gateway/templates/defaults/pii_advanced.cedar +42 -21
- package/_schemas/ai_gateway/templates/defaults/pii_model.cedar +10 -5
- package/_schemas/ai_gateway/templates/defaults/semantic.cedar +9 -74
- package/_schemas/ai_gateway/templates/defaults/tools.cedar +7 -38
- package/_schemas/ai_gateway/templates/secrets.cedar +3 -3
- package/_schemas/guardrails/context.json +701 -0
- package/_schemas/guardrails/schema.cedarschema +30 -2
- package/_schemas/guardrails/templates/defaults/agent_identity.cedar +3 -3
- package/_schemas/guardrails/templates/defaults/injection.cedar +9 -8
- package/_schemas/guardrails/templates/defaults/pii.cedar +14 -7
- package/_schemas/guardrails/templates/defaults/pii_model.cedar +10 -5
- package/_schemas/guardrails/templates/defaults/secrets.cedar +4 -2
- package/_schemas/guardrails/templates/defaults/security_patterns.cedar +5 -3
- package/_schemas/guardrails/templates/defaults/semantic.cedar +6 -6
- package/_schemas/guardrails/templates/defaults/toxicity.cedar +6 -6
- package/_schemas/guardrails/templates/profiles/a2a_security/cross_origin.cedar +6 -4
- package/_schemas/guardrails/templates/profiles/a2a_security/escalation_detection.cedar +5 -4
- package/_schemas/guardrails/templates/profiles/a2a_security/inter_agent_injection.cedar +9 -8
- package/_schemas/guardrails/templates/profiles/advanced_detection/pii.cedar +42 -21
- package/_schemas/guardrails/templates/profiles/advanced_detection/secrets.cedar +4 -2
- package/_schemas/guardrails/templates/profiles/chat_assistant/security.cedar +5 -4
- package/_schemas/guardrails/templates/profiles/chat_assistant/trust_safety.cedar +5 -4
- package/_schemas/guardrails/templates/profiles/data_pipeline/data_protection.cedar +2 -1
- package/_schemas/guardrails/templates/profiles/data_pipeline/security.cedar +3 -2
- package/_schemas/guardrails/templates/profiles/multi_agent/agent_trust.cedar +6 -6
- package/_schemas/guardrails/templates/templates.json +0 -9
- package/_schemas/overwatch/context.json +30 -0
- package/_schemas/overwatch/schema.cedarschema +7 -0
- package/dist/agent_ops-context.gen.d.ts +6 -1
- package/dist/agent_ops-context.gen.js +10 -0
- package/dist/agent_ops-defaults.gen.js +177 -120
- package/dist/agent_ops-entities.gen.js +5 -1
- package/dist/ai_gateway-context.gen.d.ts +6 -1
- package/dist/ai_gateway-context.gen.js +10 -0
- package/dist/ai_gateway-defaults.gen.js +90 -164
- package/dist/ai_gateway-detectors.gen.js +6 -1
- package/dist/ai_gateway-entities.gen.js +6 -2
- package/dist/guardrails-context.gen.d.ts +6 -1
- package/dist/guardrails-context.gen.js +10 -0
- package/dist/guardrails-defaults.gen.js +144 -145
- package/dist/guardrails-detectors.gen.js +6 -1
- package/dist/guardrails-entities.gen.js +5 -1
- package/dist/overwatch-context.gen.d.ts +6 -1
- package/dist/overwatch-context.gen.js +10 -0
- package/dist/overwatch-detectors.gen.js +6 -1
- package/dist/service-schemas.gen.d.ts +4 -4
- package/dist/service-schemas.gen.js +528 -118
- package/package.json +1 -1
- package/_schemas/guardrails/templates/profiles/advanced_detection/threat_severity.cedar +0 -30
|
@@ -36,6 +36,7 @@ export declare const GuardrailsContextKey: {
|
|
|
36
36
|
readonly EncodedCount: "encoded_count";
|
|
37
37
|
readonly EncodedScore: "encoded_score";
|
|
38
38
|
readonly EncodedTypes: "encoded_types";
|
|
39
|
+
readonly ExecTargetPaths: "exec_target_paths";
|
|
39
40
|
readonly FactualityScore: "factuality_score";
|
|
40
41
|
readonly HallucinationScore: "hallucination_score";
|
|
41
42
|
readonly HateSpeechScore: "hate_speech_score";
|
|
@@ -97,7 +98,9 @@ export declare const GuardrailsContextKey: {
|
|
|
97
98
|
readonly Principal: "principal";
|
|
98
99
|
readonly PrivilegeScope: "privilege_scope";
|
|
99
100
|
readonly ProfanityScore: "profanity_score";
|
|
101
|
+
readonly ReadTargetPaths: "read_target_paths";
|
|
100
102
|
readonly RequestId: "request_id";
|
|
103
|
+
readonly ResolvedTargetPaths: "resolved_target_paths";
|
|
101
104
|
readonly Role: "role";
|
|
102
105
|
readonly RpmExceeded: "rpm_exceeded";
|
|
103
106
|
readonly RpmRemainingPct: "rpm_remaining_pct";
|
|
@@ -143,12 +146,14 @@ export declare const GuardrailsContextKey: {
|
|
|
143
146
|
readonly TopicConfidence: "topic_confidence";
|
|
144
147
|
readonly TpmExceeded: "tpm_exceeded";
|
|
145
148
|
readonly TpmRemainingPct: "tpm_remaining_pct";
|
|
149
|
+
readonly UnresolvedTarget: "unresolved_target";
|
|
146
150
|
readonly ViolenceScore: "violence_score";
|
|
147
151
|
readonly WeaponsScore: "weapons_score";
|
|
152
|
+
readonly WriteTargetPaths: "write_target_paths";
|
|
148
153
|
};
|
|
149
154
|
export type GuardrailsContextKey = (typeof GuardrailsContextKey)[keyof typeof GuardrailsContextKey];
|
|
150
155
|
/**
|
|
151
156
|
* The full set of authorable context attribute keys for Guardrails.
|
|
152
157
|
* Iterate this to enumerate the authorable surface (cockpit, conformance).
|
|
153
158
|
*/
|
|
154
|
-
export declare const GuardrailsContextKeys: readonly ["agent_framework", "agent_id", "agent_publisher", "agent_trust_level", "agent_type", "budget_exceeded", "budget_remaining_pct", "code_languages", "code_ratio", "command_injection_detected", "command_injection_score", "command_injection_type", "contains_code", "contains_non_ascii", "content_safety_blocked", "content_safety_score", "content_topics", "content_type", "conversation_turn", "crime_score", "cross_origin_detected", "cross_origin_score", "cross_origin_type", "detected_language", "detected_script", "detector_count", "direction", "encoded_content_detected", "encoded_count", "encoded_score", "encoded_types", "factuality_score", "hallucination_score", "hate_speech_score", "highest_severity", "identity_type", "indirect_injection_score", "indirect_injection_type", "injection_deep_context_score", "injection_pulse_score", "injection_score", "injection_type", "invisible_chars_detected", "invisible_chars_score", "is_english", "is_latin_script", "jailbreak_deep_context_score", "jailbreak_pulse_score", "jailbreak_score", "keyword_categories", "keyword_count", "keyword_matched", "language_confidence", "loop_count", "loop_detected", "loop_tool", "malicious_package_detected", "malicious_package_score", "malicious_packages", "mcp_config_risk", "mcp_input_request_detected", "mcp_input_request_methods", "mcp_input_request_score", "mcp_input_request_types", "mcp_risk_score", "mcp_risk_type", "mcp_server", "mcp_server_verified", "mcp_tool", "multi_turn_detection", "package_advisory_count", "package_check_status", "package_ecosystems", "package_install_detected", "package_names", "package_risk_score", "packages_checked", "param_type_violation", "param_type_violations", "path", "path_traversal_detected", "path_traversal_severity", "path_traversal_type", "pattern_type", "phishing_detected", "pii_count", "pii_detected", "pii_score", "pii_types", "principal", "privilege_scope", "profanity_score", "request_id", "role", "rpm_exceeded", "rpm_remaining_pct", "rug_pull_detected", "rug_pull_score", "rug_pull_type", "script_confidence", "secret_count", "secret_types", "secrets_detected", "sentiment_score", "sequence_risk", "session_command_injection", "session_cumulative_risk_score", "session_injection_detected", "session_max_command_injection_score", "session_max_injection_score", "session_max_jailbreak_score", "session_max_pii_score", "session_max_secret_score", "session_max_sensitivity", "session_original_request", "session_pii_detected", "session_pii_types", "session_secret_types", "session_secrets_detected", "session_threat_turns", "sexual_score", "sql_injection_detected", "sql_injection_score", "sql_injection_type", "suspicious_pattern", "timestamp", "tool_category", "tool_is_builtin", "tool_is_sensitive", "tool_name", "tool_operation_classes", "tool_poisoning_detected", "tool_poisoning_score", "tool_poisoning_type", "tool_risk_score", "topic_confidence", "tpm_exceeded", "tpm_remaining_pct", "violence_score", "weapons_score"];
|
|
159
|
+
export declare const GuardrailsContextKeys: readonly ["agent_framework", "agent_id", "agent_publisher", "agent_trust_level", "agent_type", "budget_exceeded", "budget_remaining_pct", "code_languages", "code_ratio", "command_injection_detected", "command_injection_score", "command_injection_type", "contains_code", "contains_non_ascii", "content_safety_blocked", "content_safety_score", "content_topics", "content_type", "conversation_turn", "crime_score", "cross_origin_detected", "cross_origin_score", "cross_origin_type", "detected_language", "detected_script", "detector_count", "direction", "encoded_content_detected", "encoded_count", "encoded_score", "encoded_types", "exec_target_paths", "factuality_score", "hallucination_score", "hate_speech_score", "highest_severity", "identity_type", "indirect_injection_score", "indirect_injection_type", "injection_deep_context_score", "injection_pulse_score", "injection_score", "injection_type", "invisible_chars_detected", "invisible_chars_score", "is_english", "is_latin_script", "jailbreak_deep_context_score", "jailbreak_pulse_score", "jailbreak_score", "keyword_categories", "keyword_count", "keyword_matched", "language_confidence", "loop_count", "loop_detected", "loop_tool", "malicious_package_detected", "malicious_package_score", "malicious_packages", "mcp_config_risk", "mcp_input_request_detected", "mcp_input_request_methods", "mcp_input_request_score", "mcp_input_request_types", "mcp_risk_score", "mcp_risk_type", "mcp_server", "mcp_server_verified", "mcp_tool", "multi_turn_detection", "package_advisory_count", "package_check_status", "package_ecosystems", "package_install_detected", "package_names", "package_risk_score", "packages_checked", "param_type_violation", "param_type_violations", "path", "path_traversal_detected", "path_traversal_severity", "path_traversal_type", "pattern_type", "phishing_detected", "pii_count", "pii_detected", "pii_score", "pii_types", "principal", "privilege_scope", "profanity_score", "read_target_paths", "request_id", "resolved_target_paths", "role", "rpm_exceeded", "rpm_remaining_pct", "rug_pull_detected", "rug_pull_score", "rug_pull_type", "script_confidence", "secret_count", "secret_types", "secrets_detected", "sentiment_score", "sequence_risk", "session_command_injection", "session_cumulative_risk_score", "session_injection_detected", "session_max_command_injection_score", "session_max_injection_score", "session_max_jailbreak_score", "session_max_pii_score", "session_max_secret_score", "session_max_sensitivity", "session_original_request", "session_pii_detected", "session_pii_types", "session_secret_types", "session_secrets_detected", "session_threat_turns", "sexual_score", "sql_injection_detected", "sql_injection_score", "sql_injection_type", "suspicious_pattern", "timestamp", "tool_category", "tool_is_builtin", "tool_is_sensitive", "tool_name", "tool_operation_classes", "tool_poisoning_detected", "tool_poisoning_score", "tool_poisoning_type", "tool_risk_score", "topic_confidence", "tpm_exceeded", "tpm_remaining_pct", "unresolved_target", "violence_score", "weapons_score", "write_target_paths"];
|
|
@@ -38,6 +38,7 @@ export const GuardrailsContextKey = {
|
|
|
38
38
|
EncodedCount: 'encoded_count',
|
|
39
39
|
EncodedScore: 'encoded_score',
|
|
40
40
|
EncodedTypes: 'encoded_types',
|
|
41
|
+
ExecTargetPaths: 'exec_target_paths',
|
|
41
42
|
FactualityScore: 'factuality_score',
|
|
42
43
|
HallucinationScore: 'hallucination_score',
|
|
43
44
|
HateSpeechScore: 'hate_speech_score',
|
|
@@ -99,7 +100,9 @@ export const GuardrailsContextKey = {
|
|
|
99
100
|
Principal: 'principal',
|
|
100
101
|
PrivilegeScope: 'privilege_scope',
|
|
101
102
|
ProfanityScore: 'profanity_score',
|
|
103
|
+
ReadTargetPaths: 'read_target_paths',
|
|
102
104
|
RequestId: 'request_id',
|
|
105
|
+
ResolvedTargetPaths: 'resolved_target_paths',
|
|
103
106
|
Role: 'role',
|
|
104
107
|
RpmExceeded: 'rpm_exceeded',
|
|
105
108
|
RpmRemainingPct: 'rpm_remaining_pct',
|
|
@@ -145,8 +148,10 @@ export const GuardrailsContextKey = {
|
|
|
145
148
|
TopicConfidence: 'topic_confidence',
|
|
146
149
|
TpmExceeded: 'tpm_exceeded',
|
|
147
150
|
TpmRemainingPct: 'tpm_remaining_pct',
|
|
151
|
+
UnresolvedTarget: 'unresolved_target',
|
|
148
152
|
ViolenceScore: 'violence_score',
|
|
149
153
|
WeaponsScore: 'weapons_score',
|
|
154
|
+
WriteTargetPaths: 'write_target_paths',
|
|
150
155
|
};
|
|
151
156
|
/**
|
|
152
157
|
* The full set of authorable context attribute keys for Guardrails.
|
|
@@ -184,6 +189,7 @@ export const GuardrailsContextKeys = [
|
|
|
184
189
|
GuardrailsContextKey.EncodedCount,
|
|
185
190
|
GuardrailsContextKey.EncodedScore,
|
|
186
191
|
GuardrailsContextKey.EncodedTypes,
|
|
192
|
+
GuardrailsContextKey.ExecTargetPaths,
|
|
187
193
|
GuardrailsContextKey.FactualityScore,
|
|
188
194
|
GuardrailsContextKey.HallucinationScore,
|
|
189
195
|
GuardrailsContextKey.HateSpeechScore,
|
|
@@ -245,7 +251,9 @@ export const GuardrailsContextKeys = [
|
|
|
245
251
|
GuardrailsContextKey.Principal,
|
|
246
252
|
GuardrailsContextKey.PrivilegeScope,
|
|
247
253
|
GuardrailsContextKey.ProfanityScore,
|
|
254
|
+
GuardrailsContextKey.ReadTargetPaths,
|
|
248
255
|
GuardrailsContextKey.RequestId,
|
|
256
|
+
GuardrailsContextKey.ResolvedTargetPaths,
|
|
249
257
|
GuardrailsContextKey.Role,
|
|
250
258
|
GuardrailsContextKey.RpmExceeded,
|
|
251
259
|
GuardrailsContextKey.RpmRemainingPct,
|
|
@@ -291,6 +299,8 @@ export const GuardrailsContextKeys = [
|
|
|
291
299
|
GuardrailsContextKey.TopicConfidence,
|
|
292
300
|
GuardrailsContextKey.TpmExceeded,
|
|
293
301
|
GuardrailsContextKey.TpmRemainingPct,
|
|
302
|
+
GuardrailsContextKey.UnresolvedTarget,
|
|
294
303
|
GuardrailsContextKey.ViolenceScore,
|
|
295
304
|
GuardrailsContextKey.WeaponsScore,
|
|
305
|
+
GuardrailsContextKey.WriteTargetPaths,
|
|
296
306
|
];
|