@highflame/policy 2.2.45 → 2.3.0

package/dist/service-schemas.gen.js

@@ -136,6 +136,18 @@ namespace AgentOps {
         context: ProvisionSandboxContext
     };
 
+    /// The acting agent's lifecycle and IdP provenance, projected as
+    /// \`context.actor\`. Same four attributes, names and types as the legacy
+    /// members on PrincipalContext (which keeps them). Every member is optional
+    /// and the record is absent when none is supplied; absence means unknown,
+    /// not "active".
+    type ActorContext = {
+        "status"?: String,             // Agent lifecycle: "discovered" | "pending" | "active"
+        "origin"?: String,             // "native" | "entra" | "okta" | ...
+        "idp_iss"?: String,            // Upstream IdP issuer for IdP-registered agents
+        "idp_parent"?: String,         // Upstream parent object (e.g. Entra blueprint app id)
+    };
+
     // =========================================================================
     // Context Types (Action-Specific)
     // =========================================================================
@@ -176,6 +188,10 @@ namespace AgentOps {
         "act_iss"?: String,            // Issuer of the actor claim
         "mission_id"?: String,         // Correlates one delegation tree
         "grant_type"?: String,         // How the token was obtained (e.g. "api_key")
+        "status"?: String,             // Agent lifecycle: "discovered" | "pending" | "active"; absent = unknown, not active
+        "origin"?: String,             // Where the identity came from: "native" | "entra" | "okta" | ...
+        "idp_iss"?: String,            // Upstream IdP issuer for IdP-registered agents
+        "idp_parent"?: String,         // Upstream parent object (e.g. Entra blueprint app id)
     };
 
     /// Context for the process_response action.
@@ -193,6 +209,7 @@ namespace AgentOps {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service" | "mcp_server"
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -388,6 +405,7 @@ namespace AgentOps {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -599,6 +617,7 @@ namespace AgentOps {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -707,6 +726,7 @@ namespace AgentOps {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -819,6 +839,7 @@ namespace AgentOps {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -952,6 +973,7 @@ namespace AgentOps {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service" | "mcp_server"
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         "agent_trust_level"?: String,    // "untrusted" | "low" | "verified" | "trusted"
 
         // Core metadata (required)
@@ -1072,6 +1094,8 @@ action call_tool appliesTo {
     // Identity (AARM R6 / CAP-IDN-011) — projected from the principal's token; optional.
     role?: String,
     privilege_scope?: Set<String>,
+    "principal"?: PrincipalContext,   // ZeroID NHI identity block; absent when the token carries no NHI claims
+    "actor"?: ActorContext,           // Acting agent status/origin/IdP provenance; absent when none supplied
     // --- Content ---
     content: String,                  // Raw content being scanned
 
@@ -1194,6 +1218,8 @@ action connect_server appliesTo {
     // Identity (AARM R6 / CAP-IDN-011) — projected from the principal's token; optional.
     role?: String,
     privilege_scope?: Set<String>,
+    "principal"?: PrincipalContext,   // ZeroID NHI identity block; absent when the token carries no NHI claims
+    "actor"?: ActorContext,           // Acting agent status/origin/IdP provenance; absent when none supplied
     content?: String,                 // Server config content (if available)
     mcp_server?: String,
 
@@ -1291,6 +1317,8 @@ action list appliesTo {
     // Identity (AARM R6 / CAP-IDN-011) — projected from the principal's token; optional.
     role?: String,
     privilege_scope?: Set<String>,
+    "principal"?: PrincipalContext,   // ZeroID NHI identity block; absent when the token carries no NHI claims
+    "actor"?: ActorContext,           // Acting agent status/origin/IdP provenance; absent when none supplied
 
     // --- Content ---
     // The enumerated item's description. Optional: a tool may declare none,
@@ -1365,6 +1393,43 @@ action list appliesTo {
   },
 };
 
+// ZeroID NHI principal block, projected by Shield as \`context.principal\` when
+// the caller's token carries NHI claims. Same shape as the Guardrails and
+// AgentOps PrincipalContext, so one policy text reads the same keys on every
+// product. Every member is optional except \`delegation_depth\` (always emitted;
+// 0 for a direct token). The record is absent, not empty, when the request
+// carries no NHI claims, so \`context has principal\` is false.
+type PrincipalContext = {
+  "identity_type"?: String,      // "human" | "agent" | "service" | "mcp_server"
+  "sub_type"?: String,           // Identity subtype (e.g. "coding_agent")
+  "trust_level"?: String,        // "first_party" | "verified" | "unverified"
+  "framework"?: String,          // Agent framework (e.g. "langchain")
+  "publisher"?: String,          // Agent publisher
+  "capabilities"?: Set<String>,  // Capabilities granted to the identity
+  "scopes"?: Set<String>,        // OAuth scopes carried by the token
+  "delegation_depth": Long,      // Delegation hops; 0 for a direct token
+  "act_sub"?: String,            // RFC 8693 actor: the accountable human
+  "act_iss"?: String,            // Issuer of the actor claim
+  "mission_id"?: String,         // Correlates one delegation tree
+  "grant_type"?: String,         // How the token was obtained (e.g. "api_key")
+  "status"?: String,             // Agent lifecycle: "discovered" | "pending" | "active"; absent = unknown, not active
+  "origin"?: String,             // Where the identity came from: "native" | "entra" | "okta" | ...
+  "idp_iss"?: String,            // Upstream IdP issuer for IdP-registered agents
+  "idp_parent"?: String,         // Upstream parent object (e.g. Entra blueprint app id)
+};
+
+// The acting agent's lifecycle and IdP provenance, projected as
+// \`context.actor\`. Firehog traffic is evaluated in this namespace, which is
+// where agents registered in Okta or Entra reach Shield (ADR 0041 D5,
+// ADR 0042). Every member is optional and the record is absent when none is
+// supplied; absence means unknown, not "active".
+type ActorContext = {
+  "status"?: String,             // Agent lifecycle: "discovered" | "pending" | "active"
+  "origin"?: String,             // "native" | "entra" | "okta" | ...
+  "idp_iss"?: String,            // Upstream IdP issuer for IdP-registered agents
+  "idp_parent"?: String,         // Upstream parent object (e.g. Entra blueprint app id)
+};
+
 // Shared content-inspection context.
 //
 // Prompts and responses are inspected by the same detector pipeline and so
@@ -1375,6 +1440,8 @@ type ContentInspectionContext = {
     // Identity (AARM R6 / CAP-IDN-011) — projected from the principal's token; optional.
     role?: String,
     privilege_scope?: Set<String>,
+    "principal"?: PrincipalContext,   // ZeroID NHI identity block; absent when the token carries no NHI claims
+    "actor"?: ActorContext,           // Acting agent status/origin/IdP provenance; absent when none supplied
     content: String,
     mcp_server?: String,
 
@@ -1486,6 +1553,8 @@ action read_file appliesTo {
     // Identity (AARM R6 / CAP-IDN-011) — projected from the principal's token; optional.
     role?: String,
     privilege_scope?: Set<String>,
+    "principal"?: PrincipalContext,   // ZeroID NHI identity block; absent when the token carries no NHI claims
+    "actor"?: ActorContext,           // Acting agent status/origin/IdP provenance; absent when none supplied
     content: String,
     mcp_server?: String,
 
@@ -1553,6 +1622,8 @@ action write_file appliesTo {
     // Identity (AARM R6 / CAP-IDN-011) — projected from the principal's token; optional.
     role?: String,
     privilege_scope?: Set<String>,
+    "principal"?: PrincipalContext,   // ZeroID NHI identity block; absent when the token carries no NHI claims
+    "actor"?: ActorContext,           // Acting agent status/origin/IdP provenance; absent when none supplied
     content: String,
     mcp_server?: String,
 
@@ -1761,6 +1832,22 @@ namespace Guardrails {
         "act_iss"?: String,            // Issuer of the actor claim
         "mission_id"?: String,         // Correlates one delegation tree
         "grant_type"?: String,         // How the token was obtained (e.g. "api_key")
+        "status"?: String,             // Agent lifecycle: "discovered" | "pending" | "active"; absent = unknown, not active
+        "origin"?: String,             // Where the identity came from: "native" | "entra" | "okta" | ...
+        "idp_iss"?: String,            // Upstream IdP issuer for IdP-registered agents
+        "idp_parent"?: String,         // Upstream parent object (e.g. Entra blueprint app id)
+    };
+
+    /// The acting agent's lifecycle and IdP provenance, projected as
+    /// \`context.actor\`. Same four attributes, names and types as the legacy
+    /// members on PrincipalContext (which keeps them). Every member is optional
+    /// and the record is absent when none is supplied; absence means unknown,
+    /// not "active".
+    type ActorContext = {
+        "status"?: String,             // Agent lifecycle: "discovered" | "pending" | "active"
+        "origin"?: String,             // "native" | "entra" | "okta" | ...
+        "idp_iss"?: String,            // Upstream IdP issuer for IdP-registered agents
+        "idp_parent"?: String,         // Upstream parent object (e.g. Entra blueprint app id)
     };
 
     /// Context for the process_response action.
@@ -1780,6 +1867,7 @@ namespace Guardrails {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -1932,6 +2020,7 @@ namespace Guardrails {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -2128,6 +2217,7 @@ namespace Guardrails {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -2201,6 +2291,7 @@ namespace Guardrails {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,
@@ -2278,6 +2369,7 @@ namespace Guardrails {
         "privilege_scope"?: Set<String>,
         "identity_type"?: String,        // Principal identity class: "human" | "agent" | "service"
         "principal"?: PrincipalContext, // ZeroID NHI identity block; absent when the token carries no NHI claims
+        "actor"?: ActorContext,         // Acting agent attributes (status/origin/IdP provenance); absent when none supplied
         // Core metadata (required)
         "request_id": String,
         "timestamp": Long,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highflame/policy",
-  "version": "2.2.45",
+  "version": "2.3.0",
   "engines": {
     "node": ">=18"
   },