@highflame/policy 2.2.37 → 2.2.39

package/dist/index.js

@@ -9,6 +9,7 @@ export * from './context.gen.js';
 export * from './schema.gen.js';
 // Canonical decision-effect vocabulary (AARM R4 Wave A). Always emitted —
 // source is ALLOWED_DECISION_EFFECTS in codegen/src/lib.rs, not annotations.json.
+export * from './category-layers.gen.js';
 export * from './decision-effects.gen.js';
 // AARM-aware annotation registry (typed Cedar annotation vocabulary
 // Shield interprets at decision time; Studio/Admin use for lint).

package/dist/overwatch-defaults.gen.d.ts

@@ -10,6 +10,9 @@ export interface OverwatchCategoryInfo {
     id: OverwatchCategory;
     name: string;
     description: string;
+    /** Control layer: 'access' governs whether an action is permitted at
+     *  all; 'guardrail' governs whether a given request should pass. */
+    layer: 'access' | 'guardrail';
 }
 /**
  * A default policy that is auto-created for new projects.

package/dist/overwatch-defaults.gen.js

@@ -1823,14 +1823,14 @@ when {
 // CATEGORIES
 // =============================================================================
 export const OVERWATCH_CATEGORIES = [
-    { id: 'data-protection', name: 'Secrets & Data Protection', description: 'Block credential leakage and protect sensitive file paths.' },
-    { id: 'privacy', name: 'PII Detection', description: 'Block personally identifiable information across prompts, tool calls, and file operations.' },
-    { id: 'semantic', name: 'Semantic Threat Detection', description: 'Block injection attacks (SQL, path traversal, encoded), prompt injection, and jailbreak attempts.' },
-    { id: 'trust-safety', name: 'Content Safety', description: 'Block violent, hateful, sexual, criminal, or excessively profane content.' },
-    { id: 'tools', name: 'Tool Permissioning', description: 'Control shell execution, file operations, MCP servers, and sensitive system paths.' },
-    { id: 'agent-identity', name: 'Agent-Specific Guardrails', description: 'Per-agent security policies applied based on agent identity.' },
-    { id: 'agent-security', name: 'Agent Security', description: 'Block supply-chain attacks, malicious package installs, and code-agent-specific threats.' },
-    { id: 'organization', name: 'Organization', description: 'Organization-wide baselines, audit, and project-scoped permissions.' },
+    { id: 'data-protection', name: 'Secrets & Data Protection', description: 'Block credential leakage and protect sensitive file paths.', layer: 'guardrail' },
+    { id: 'privacy', name: 'PII Detection', description: 'Block personally identifiable information across prompts, tool calls, and file operations.', layer: 'guardrail' },
+    { id: 'semantic', name: 'Semantic Threat Detection', description: 'Block injection attacks (SQL, path traversal, encoded), prompt injection, and jailbreak attempts.', layer: 'guardrail' },
+    { id: 'trust-safety', name: 'Content Safety', description: 'Block violent, hateful, sexual, criminal, or excessively profane content.', layer: 'guardrail' },
+    { id: 'tools', name: 'Tool Permissioning', description: 'Control shell execution, file operations, MCP servers, and sensitive system paths.', layer: 'access' },
+    { id: 'agent-identity', name: 'Agent-Specific Guardrails', description: 'Per-agent security policies applied based on agent identity.', layer: 'guardrail' },
+    { id: 'agent-security', name: 'Agent Security', description: 'Block supply-chain attacks, malicious package installs, and code-agent-specific threats.', layer: 'guardrail' },
+    { id: 'organization', name: 'Organization', description: 'Organization-wide baselines, audit, and project-scoped permissions.', layer: 'access' },
 ];
 // =============================================================================
 // DEFAULT POLICIES
@@ -2036,42 +2036,50 @@ export const OVERWATCH_TEMPLATES_JSON = `{
     {
       "id": "data-protection",
       "name": "Secrets & Data Protection",
-      "description": "Block credential leakage and protect sensitive file paths."
+      "description": "Block credential leakage and protect sensitive file paths.",
+      "layer": "guardrail"
     },
     {
       "id": "privacy",
       "name": "PII Detection",
-      "description": "Block personally identifiable information across prompts, tool calls, and file operations."
+      "description": "Block personally identifiable information across prompts, tool calls, and file operations.",
+      "layer": "guardrail"
     },
     {
       "id": "semantic",
       "name": "Semantic Threat Detection",
-      "description": "Block injection attacks (SQL, path traversal, encoded), prompt injection, and jailbreak attempts."
+      "description": "Block injection attacks (SQL, path traversal, encoded), prompt injection, and jailbreak attempts.",
+      "layer": "guardrail"
     },
     {
       "id": "trust-safety",
       "name": "Content Safety",
-      "description": "Block violent, hateful, sexual, criminal, or excessively profane content."
+      "description": "Block violent, hateful, sexual, criminal, or excessively profane content.",
+      "layer": "guardrail"
     },
     {
       "id": "tools",
       "name": "Tool Permissioning",
-      "description": "Control shell execution, file operations, MCP servers, and sensitive system paths."
+      "description": "Control shell execution, file operations, MCP servers, and sensitive system paths.",
+      "layer": "access"
     },
     {
       "id": "agent-identity",
       "name": "Agent-Specific Guardrails",
-      "description": "Per-agent security policies applied based on agent identity."
+      "description": "Per-agent security policies applied based on agent identity.",
+      "layer": "guardrail"
     },
     {
       "id": "agent-security",
       "name": "Agent Security",
-      "description": "Block supply-chain attacks, malicious package installs, and code-agent-specific threats."
+      "description": "Block supply-chain attacks, malicious package installs, and code-agent-specific threats.",
+      "layer": "guardrail"
     },
     {
       "id": "organization",
       "name": "Organization",
-      "description": "Organization-wide baselines, audit, and project-scoped permissions."
+      "description": "Organization-wide baselines, audit, and project-scoped permissions.",
+      "layer": "access"
     }
   ],
   "defaults": [

package/dist/sentry-defaults.gen.d.ts

@@ -10,6 +10,9 @@ export interface SentryCategoryInfo {
     id: SentryCategory;
     name: string;
     description: string;
+    /** Control layer: 'access' governs whether an action is permitted at
+     *  all; 'guardrail' governs whether a given request should pass. */
+    layer: 'access' | 'guardrail';
 }
 /**
  * A default policy that is auto-created for new projects.

package/dist/sentry-defaults.gen.js

@@ -1227,12 +1227,12 @@ when {
 // CATEGORIES
 // =============================================================================
 export const SENTRY_CATEGORIES = [
-    { id: 'data-protection', name: 'Secrets & Data Protection', description: 'Block secrets, API keys, tokens, and credentials in messages and uploads.' },
-    { id: 'privacy', name: 'PII Detection', description: 'Block personally identifiable information across messages and uploads.' },
-    { id: 'semantic', name: 'Semantic Threat Detection', description: 'Block prompt injection, jailbreak attempts, and high-severity threats.' },
-    { id: 'trust-safety', name: 'Content Safety', description: 'Block violent, harmful, hateful, sexual, or profane content.' },
-    { id: 'clipboard', name: 'Clipboard Policy', description: 'Control paste operations into AI chat services.' },
-    { id: 'organization', name: 'Organization Rules', description: 'Organization-wide baselines and session-aware threat escalation.' },
+    { id: 'data-protection', name: 'Secrets & Data Protection', description: 'Block secrets, API keys, tokens, and credentials in messages and uploads.', layer: 'guardrail' },
+    { id: 'privacy', name: 'PII Detection', description: 'Block personally identifiable information across messages and uploads.', layer: 'guardrail' },
+    { id: 'semantic', name: 'Semantic Threat Detection', description: 'Block prompt injection, jailbreak attempts, and high-severity threats.', layer: 'guardrail' },
+    { id: 'trust-safety', name: 'Content Safety', description: 'Block violent, harmful, hateful, sexual, or profane content.', layer: 'guardrail' },
+    { id: 'clipboard', name: 'Clipboard Policy', description: 'Control paste operations into AI chat services.', layer: 'guardrail' },
+    { id: 'organization', name: 'Organization Rules', description: 'Organization-wide baselines and session-aware threat escalation.', layer: 'access' },
 ];
 // =============================================================================
 // DEFAULT POLICIES
@@ -1348,32 +1348,38 @@ export const SENTRY_TEMPLATES_JSON = `{
     {
       "id": "data-protection",
       "name": "Secrets & Data Protection",
-      "description": "Block secrets, API keys, tokens, and credentials in messages and uploads."
+      "description": "Block secrets, API keys, tokens, and credentials in messages and uploads.",
+      "layer": "guardrail"
     },
     {
       "id": "privacy",
       "name": "PII Detection",
-      "description": "Block personally identifiable information across messages and uploads."
+      "description": "Block personally identifiable information across messages and uploads.",
+      "layer": "guardrail"
     },
     {
       "id": "semantic",
       "name": "Semantic Threat Detection",
-      "description": "Block prompt injection, jailbreak attempts, and high-severity threats."
+      "description": "Block prompt injection, jailbreak attempts, and high-severity threats.",
+      "layer": "guardrail"
     },
     {
       "id": "trust-safety",
       "name": "Content Safety",
-      "description": "Block violent, harmful, hateful, sexual, or profane content."
+      "description": "Block violent, harmful, hateful, sexual, or profane content.",
+      "layer": "guardrail"
     },
     {
       "id": "clipboard",
       "name": "Clipboard Policy",
-      "description": "Control paste operations into AI chat services."
+      "description": "Control paste operations into AI chat services.",
+      "layer": "guardrail"
     },
     {
       "id": "organization",
       "name": "Organization Rules",
-      "description": "Organization-wide baselines and session-aware threat escalation."
+      "description": "Organization-wide baselines and session-aware threat escalation.",
+      "layer": "access"
     }
   ],
   "defaults": [

package/dist/types.d.ts

@@ -2,6 +2,7 @@ export * from './entities.gen.js';
 export * from './actions.gen.js';
 export * from './context.gen.js';
 export * from './schema.gen.js';
+export * from './category-layers.gen.js';
 export * from './decision-effects.gen.js';
 export * from './aarm-annotations.gen.js';
 export * from './aarm-annotation.js';

package/dist/types.js

@@ -11,6 +11,7 @@ export * from './context.gen.js';
 export * from './schema.gen.js';
 // Canonical decision-effect vocabulary (browser-safe). Studio's Monaco
 // policy editor imports these typed symbols rather than string literals.
+export * from './category-layers.gen.js';
 export * from './decision-effects.gen.js';
 // AARM-aware annotation registry (browser-safe — Studio uses this
 // for Monaco autocomplete + lint of @step_up_required / @defer_* keys).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highflame/policy",
-  "version": "2.2.37",
+  "version": "2.2.39",
   "engines": {
     "node": ">=18"
   },