@highflame/policy 2.2.6 → 2.2.8

package/dist/agent_ops-defaults.gen.d.ts

@@ -0,0 +1,64 @@
+/**
+ * AgentOps policy category identifiers.
+ * Maps to UI tab names in Studio.
+ */
+export type AgentOpsCategory = 'threat-detection' | 'data-protection' | 'agent-security' | 'tool-permissioning' | 'code-security' | 'content-safety' | 'organization';
+/**
+ * Category metadata for UI display.
+ */
+export interface AgentOpsCategoryInfo {
+    id: AgentOpsCategory;
+    name: string;
+    description: string;
+}
+/**
+ * A default policy that is auto-created for new projects.
+ */
+export interface AgentOpsDefaultPolicy {
+    /** Template identifier */
+    id: string;
+    /** Human-readable name */
+    name: string;
+    /** Description for UI display */
+    description: string;
+    /** Policy category */
+    category: AgentOpsCategory;
+    /** Cedar policy text (source of truth) */
+    cedarText: string;
+    /** Severity level */
+    severity: string;
+    /** Tags for filtering */
+    tags: string[];
+    /** Whether this default should be activated immediately */
+    isActive: boolean;
+}
+/**
+ * A policy template available for users to create from.
+ */
+export interface AgentOpsTemplate {
+    /** Template identifier */
+    id: string;
+    /** Human-readable name */
+    name: string;
+    /** Description for UI display */
+    description: string;
+    /** Policy category */
+    category: AgentOpsCategory;
+    /** Cedar policy text */
+    cedarText: string;
+    /** Severity level */
+    severity: string;
+    /** Tags for filtering */
+    tags: string[];
+    /** True when ensure-defaults should auto-seed this template at
+     *  project creation. See schemas/*\/templates.json. Defaults to false. */
+    autoDeploy?: boolean;
+}
+export declare const AGENT_OPS_CATEGORIES: AgentOpsCategoryInfo[];
+export declare const AGENT_OPS_DEFAULTS: AgentOpsDefaultPolicy[];
+export declare const AGENT_OPS_TEMPLATES: AgentOpsTemplate[];
+/** Raw templates.json metadata for the AgentOps service. */
+export declare const AGENT_OPS_TEMPLATES_JSON: string;
+export declare function getAgentOpsDefaultsByCategory(category: AgentOpsCategory): AgentOpsDefaultPolicy[];
+export declare function getAgentOpsTemplatesByCategory(category: AgentOpsCategory): AgentOpsTemplate[];
+export declare function getAgentOpsTemplateById(id: string): AgentOpsTemplate | undefined;

package/dist/agent_ops-defaults.gen.js

@@ -0,0 +1,156 @@
+// Code generated by highflame-policy-codegen. DO NOT EDIT.
+// Source: schemas/agent_ops/templates/templates.json
+//
+// AgentOps default policies and templates.
+// Cedar text is embedded at build time. PolicyRule[] can be parsed at runtime
+// using parseCedarToRules().
+// =============================================================================
+// EMBEDDED CEDAR POLICY TEXT
+// =============================================================================
+const AGENT_OPS_ORGANIZATION_PERMIT_BASELINE_CEDAR = `// =============================================================================
+// Baseline Permit (Default)
+// =============================================================================
+// Permits all AgentOps actions by default. Threat-specific forbid policies
+// override this when detectors fire. Cedar is default-deny: without at least
+// one permit rule, every request is denied regardless of forbid rules.
+//
+// Category:  organization
+// Namespace: AgentOps
+// =============================================================================
+
+@id("organization.permit-baseline")
+@name("Permit baseline")
+@description("Permits all AgentOps actions.")
+@severity("low")
+@tags("category:organization,posture:permit-default")
+permit (
+    principal,
+    action,
+    resource
+);
+`;
+// =============================================================================
+// CATEGORIES
+// =============================================================================
+export const AGENT_OPS_CATEGORIES = [
+    { id: 'threat-detection', name: 'Threat Detection', description: 'Detect and block injection, jailbreak, and adversarial attacks across all agent traffic.' },
+    { id: 'data-protection', name: 'Data Protection', description: 'Prevent secrets, PII, and sensitive data from leaking in prompts, responses, or tool calls.' },
+    { id: 'agent-security', name: 'Agent Security', description: 'Guard against tool poisoning, rug-pull attacks, and multi-agent delegation abuse.' },
+    { id: 'tool-permissioning', name: 'Tool Permissioning', description: 'Allow-list or block-list specific tools, MCP servers, and shell operations by risk tier.' },
+    { id: 'code-security', name: 'Code Security', description: 'Enforce safe coding patterns: no exfiltration commands, no destructive write operations.' },
+    { id: 'content-safety', name: 'Content Safety', description: 'Block harmful, toxic, or policy-violating content in agent inputs and outputs.' },
+    { id: 'organization', name: 'Organization', description: 'Organization-wide baselines and default permit/deny policies.' },
+];
+// =============================================================================
+// DEFAULT POLICIES
+// =============================================================================
+export const AGENT_OPS_DEFAULTS = [
+    {
+        id: 'organization.permit-baseline',
+        name: 'Baseline Permit',
+        description: 'Permits all AgentOps actions by default; threat-specific forbid policies override this when detectors fire.',
+        category: 'organization',
+        cedarText: AGENT_OPS_ORGANIZATION_PERMIT_BASELINE_CEDAR,
+        severity: 'low',
+        tags: ['category:organization', 'posture:permit-default'],
+        isActive: true,
+    },
+];
+// =============================================================================
+// ALL TEMPLATES
+// =============================================================================
+export const AGENT_OPS_TEMPLATES = [
+    {
+        id: 'organization.permit-baseline',
+        name: 'Baseline Permit',
+        description: 'Permits all AgentOps actions by default; threat-specific forbid policies override this when detectors fire.',
+        category: 'organization',
+        cedarText: AGENT_OPS_ORGANIZATION_PERMIT_BASELINE_CEDAR,
+        severity: 'low',
+        tags: ['category:organization', 'posture:permit-default'],
+        autoDeploy: true,
+    },
+];
+// =============================================================================
+// TEMPLATES METADATA
+// =============================================================================
+/** Raw templates.json metadata for the AgentOps service. */
+export const AGENT_OPS_TEMPLATES_JSON = `{
+  "service": "agent_ops",
+  "version": "1.0.0",
+  "description": "AgentOps policy templates — unified agent guardrails for code agents, MCP tools, and AI Gateway traffic",
+  "categories": [
+    {
+      "id": "threat-detection",
+      "name": "Threat Detection",
+      "description": "Detect and block injection, jailbreak, and adversarial attacks across all agent traffic."
+    },
+    {
+      "id": "data-protection",
+      "name": "Data Protection",
+      "description": "Prevent secrets, PII, and sensitive data from leaking in prompts, responses, or tool calls."
+    },
+    {
+      "id": "agent-security",
+      "name": "Agent Security",
+      "description": "Guard against tool poisoning, rug-pull attacks, and multi-agent delegation abuse."
+    },
+    {
+      "id": "tool-permissioning",
+      "name": "Tool Permissioning",
+      "description": "Allow-list or block-list specific tools, MCP servers, and shell operations by risk tier."
+    },
+    {
+      "id": "code-security",
+      "name": "Code Security",
+      "description": "Enforce safe coding patterns: no exfiltration commands, no destructive write operations."
+    },
+    {
+      "id": "content-safety",
+      "name": "Content Safety",
+      "description": "Block harmful, toxic, or policy-violating content in agent inputs and outputs."
+    },
+    {
+      "id": "organization",
+      "name": "Organization",
+      "description": "Organization-wide baselines and default permit/deny policies."
+    }
+  ],
+  "defaults": [
+    {
+      "id": "organization.permit-baseline",
+      "name": "Baseline Permit",
+      "description": "Permits all AgentOps actions by default; threat-specific forbid policies override this when detectors fire.",
+      "category": "organization",
+      "file": "defaults/baseline.cedar",
+      "severity": "low",
+      "tags": ["category:organization", "posture:permit-default"],
+      "is_active": true
+    }
+  ],
+  "templates": [
+    {
+      "id": "organization.permit-baseline",
+      "name": "Baseline Permit",
+      "description": "Permits all AgentOps actions by default; threat-specific forbid policies override this when detectors fire.",
+      "category": "organization",
+      "file": "defaults/baseline.cedar",
+      "severity": "low",
+      "tags": ["category:organization", "posture:permit-default"],
+      "auto_deploy": true
+    }
+  ]
+}
+`;
+// =============================================================================
+// HELPER FUNCTIONS
+// =============================================================================
+export function getAgentOpsDefaultsByCategory(category) {
+    return AGENT_OPS_DEFAULTS.filter(d => d.category === category);
+}
+export function getAgentOpsTemplatesByCategory(category) {
+    return AGENT_OPS_TEMPLATES.filter(t => t.category === category);
+}
+export function getAgentOpsTemplateById(id) {
+    return AGENT_OPS_TEMPLATES.find(t => t.id === id);
+}

package/dist/agent_ops-entities.gen.d.ts

@@ -0,0 +1,11 @@
+import type { ServiceEntityMetadata, ActionEntityMetadata } from './entity-metadata-types.gen.js';
+/**
+ * AgentOps entity metadata for UI components.
+ * Extracted from Cedar schema appliesTo blocks.
+ */
+export declare const AGENT_OPS_ENTITIES: ServiceEntityMetadata;
+/**
+ * Per-action entity mapping for AgentOps.
+ * Maps action names to their valid principals and resources.
+ */
+export declare const AGENT_OPS_ACTION_ENTITIES: Record<string, ActionEntityMetadata>;

package/dist/agent_ops-entities.gen.js

@@ -0,0 +1,37 @@
+// Code generated by highflame-policy-codegen. DO NOT EDIT.
+// Source: schemas/agent_ops/schema.cedarschema
+/**
+ * AgentOps entity metadata for UI components.
+ * Extracted from Cedar schema appliesTo blocks.
+ */
+export const AGENT_OPS_ENTITIES = {
+    principals: ['Agent', 'User'],
+    resources: ['Agent', 'App', 'Session'],
+    actions: ['call_tool', 'connect_server', 'process_prompt', 'read_file', 'write_file'],
+};
+/**
+ * Per-action entity mapping for AgentOps.
+ * Maps action names to their valid principals and resources.
+ */
+export const AGENT_OPS_ACTION_ENTITIES = {
+    'call_tool': {
+        principals: ['Agent', 'User'],
+        resources: ['Agent', 'Session'],
+    },
+    'connect_server': {
+        principals: ['Agent', 'User'],
+        resources: ['Agent', 'Session'],
+    },
+    'process_prompt': {
+        principals: ['Agent', 'User'],
+        resources: ['Agent', 'App', 'Session'],
+    },
+    'read_file': {
+        principals: ['Agent', 'User'],
+        resources: ['Agent', 'Session'],
+    },
+    'write_file': {
+        principals: ['Agent', 'User'],
+        resources: ['Agent', 'Session'],
+    },
+};

package/dist/guardrails-detectors.gen.js

@@ -149,7 +149,7 @@ export const GUARDRAILS_DETECTORS = [
         inhouse: false,
         model: null,
         latencyP50Ms: null,
-        emits: [{ name: "budget_remaining_pct", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Remaining token-budget percentage (0-100)." }, { name: "budget_exceeded", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff token budget for the session has been exceeded." }],
+        emits: [{ name: "budget_remaining_pct", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Remaining token-budget percentage (0-100)." }, { name: "budget_exceeded", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff token budget for the session has been exceeded." }, { name: "rpm_remaining_pct", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Remaining RPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." }, { name: "rpm_exceeded", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff RPM limit has been exceeded." }, { name: "tpm_remaining_pct", type: "Long", modifiable: false, semantic: "severity_0_100", description: "Remaining TPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." }, { name: "tpm_exceeded", type: "Bool", modifiable: false, semantic: "boolean_flag", description: "True iff TPM limit has been exceeded." }],
         supportedModes: ["enforce", "monitor", "alert"],
         defendsAgainst: ["unbounded_consumption"],
         exampleAttacks: [],
@@ -523,6 +523,8 @@ export const GUARDRAILS_FIELD_TO_DETECTORS = {
     "pii_types": ["pii", "dlp"],
     "profanity_score": ["toxicity"],
     "prompt_injection_score": ["deepcontext"],
+    "rpm_exceeded": ["budget_checker"],
+    "rpm_remaining_pct": ["budget_checker"],
     "rug_pull_detected": ["rug_pull"],
     "rug_pull_score": ["rug_pull"],
     "rug_pull_type": ["rug_pull"],
@@ -560,6 +562,8 @@ export const GUARDRAILS_FIELD_TO_DETECTORS = {
     "tool_poisoning_type": ["tool_poisoning"],
     "tool_risk_score": ["tool_risk"],
     "topic_confidence": ["topic"],
+    "tpm_exceeded": ["budget_checker"],
+    "tpm_remaining_pct": ["budget_checker"],
     "violence_score": ["toxicity"],
     "weapons_score": ["toxicity"],
 };

package/dist/index.d.ts

@@ -13,19 +13,23 @@ export * from './errors.js';
 export * from './annotations.js';
 export * from './explain.js';
 export * from './condition-groups.js';
-export { AI_GATEWAY_SCHEMA, AI_GATEWAY_CONTEXT, GUARDRAILS_SCHEMA, GUARDRAILS_CONTEXT, OVERWATCH_SCHEMA, OVERWATCH_CONTEXT, PALISADE_SCHEMA, PALISADE_CONTEXT, SENTRY_SCHEMA, SENTRY_CONTEXT, } from './service-schemas.gen.js';
+export { AGENT_OPS_SCHEMA, AGENT_OPS_CONTEXT, AI_GATEWAY_SCHEMA, AI_GATEWAY_CONTEXT, GUARDRAILS_SCHEMA, GUARDRAILS_CONTEXT, OVERWATCH_SCHEMA, OVERWATCH_CONTEXT, PALISADE_SCHEMA, PALISADE_CONTEXT, SENTRY_SCHEMA, SENTRY_CONTEXT, } from './service-schemas.gen.js';
 export type { ContextAttribute, ActionContext, ServiceContext, } from './service-schemas.gen.js';
+export { AgentOpsContextKey, AgentOpsContextKeys } from './agent_ops-context.gen.js';
 export { AiGatewayContextKey, AiGatewayContextKeys } from './ai_gateway-context.gen.js';
 export { GuardrailsContextKey, GuardrailsContextKeys } from './guardrails-context.gen.js';
 export { OverwatchContextKey, OverwatchContextKeys } from './overwatch-context.gen.js';
 export { PalisadeContextKey, PalisadeContextKeys } from './palisade-context.gen.js';
 export { SentryContextKey, SentryContextKeys } from './sentry-context.gen.js';
+export { AGENT_OPS_ENTITIES, AGENT_OPS_ACTION_ENTITIES, } from './agent_ops-entities.gen.js';
 export { AI_GATEWAY_ENTITIES, AI_GATEWAY_ACTION_ENTITIES, } from './ai_gateway-entities.gen.js';
 export { GUARDRAILS_ENTITIES, GUARDRAILS_ACTION_ENTITIES, } from './guardrails-entities.gen.js';
 export { OVERWATCH_ENTITIES, OVERWATCH_ACTION_ENTITIES, } from './overwatch-entities.gen.js';
 export { PALISADE_ENTITIES, PALISADE_ACTION_ENTITIES, } from './palisade-entities.gen.js';
 export { SENTRY_ENTITIES, SENTRY_ACTION_ENTITIES, } from './sentry-entities.gen.js';
 export type { ServiceEntityMetadata, ActionEntityMetadata } from './entity-metadata-types.gen.js';
+export { AGENT_OPS_DEFAULTS, AGENT_OPS_TEMPLATES, AGENT_OPS_CATEGORIES, AGENT_OPS_TEMPLATES_JSON, getAgentOpsDefaultsByCategory, getAgentOpsTemplatesByCategory, getAgentOpsTemplateById, } from './agent_ops-defaults.gen.js';
+export type { AgentOpsCategory, AgentOpsCategoryInfo, AgentOpsDefaultPolicy, AgentOpsTemplate, } from './agent_ops-defaults.gen.js';
 export { AI_GATEWAY_DEFAULTS, AI_GATEWAY_TEMPLATES, AI_GATEWAY_CATEGORIES, AI_GATEWAY_TEMPLATES_JSON, getAiGatewayDefaultsByCategory, getAiGatewayTemplatesByCategory, getAiGatewayTemplateById, } from './ai_gateway-defaults.gen.js';
 export type { AiGatewayCategory, AiGatewayCategoryInfo, AiGatewayDefaultPolicy, AiGatewayTemplate, } from './ai_gateway-defaults.gen.js';
 export { GUARDRAILS_DEFAULTS, GUARDRAILS_TEMPLATES, GUARDRAILS_CATEGORIES, GUARDRAILS_TEMPLATES_JSON, getGuardrailsDefaultsByCategory, getGuardrailsTemplatesByCategory, getGuardrailsTemplateById, } from './guardrails-defaults.gen.js';

package/dist/index.js

@@ -30,20 +30,23 @@ export * from './explain.js';
 // Condition groups (AST ↔ flat UI groups)
 export * from './condition-groups.js';
 // Service-specific schemas and context (inlined)
-export { AI_GATEWAY_SCHEMA, AI_GATEWAY_CONTEXT, GUARDRAILS_SCHEMA, GUARDRAILS_CONTEXT, OVERWATCH_SCHEMA, OVERWATCH_CONTEXT, PALISADE_SCHEMA, PALISADE_CONTEXT, SENTRY_SCHEMA, SENTRY_CONTEXT, } from './service-schemas.gen.js';
+export { AGENT_OPS_SCHEMA, AGENT_OPS_CONTEXT, AI_GATEWAY_SCHEMA, AI_GATEWAY_CONTEXT, GUARDRAILS_SCHEMA, GUARDRAILS_CONTEXT, OVERWATCH_SCHEMA, OVERWATCH_CONTEXT, PALISADE_SCHEMA, PALISADE_CONTEXT, SENTRY_SCHEMA, SENTRY_CONTEXT, } from './service-schemas.gen.js';
 // Service-specific context key enums
+export { AgentOpsContextKey, AgentOpsContextKeys } from './agent_ops-context.gen.js';
 export { AiGatewayContextKey, AiGatewayContextKeys } from './ai_gateway-context.gen.js';
 export { GuardrailsContextKey, GuardrailsContextKeys } from './guardrails-context.gen.js';
 export { OverwatchContextKey, OverwatchContextKeys } from './overwatch-context.gen.js';
 export { PalisadeContextKey, PalisadeContextKeys } from './palisade-context.gen.js';
 export { SentryContextKey, SentryContextKeys } from './sentry-context.gen.js';
 // Service-specific entity metadata (for UI - principals, resources, actions)
+export { AGENT_OPS_ENTITIES, AGENT_OPS_ACTION_ENTITIES, } from './agent_ops-entities.gen.js';
 export { AI_GATEWAY_ENTITIES, AI_GATEWAY_ACTION_ENTITIES, } from './ai_gateway-entities.gen.js';
 export { GUARDRAILS_ENTITIES, GUARDRAILS_ACTION_ENTITIES, } from './guardrails-entities.gen.js';
 export { OVERWATCH_ENTITIES, OVERWATCH_ACTION_ENTITIES, } from './overwatch-entities.gen.js';
 export { PALISADE_ENTITIES, PALISADE_ACTION_ENTITIES, } from './palisade-entities.gen.js';
 export { SENTRY_ENTITIES, SENTRY_ACTION_ENTITIES, } from './sentry-entities.gen.js';
 // Service-specific default policies, templates, and categories
+export { AGENT_OPS_DEFAULTS, AGENT_OPS_TEMPLATES, AGENT_OPS_CATEGORIES, AGENT_OPS_TEMPLATES_JSON, getAgentOpsDefaultsByCategory, getAgentOpsTemplatesByCategory, getAgentOpsTemplateById, } from './agent_ops-defaults.gen.js';
 export { AI_GATEWAY_DEFAULTS, AI_GATEWAY_TEMPLATES, AI_GATEWAY_CATEGORIES, AI_GATEWAY_TEMPLATES_JSON, getAiGatewayDefaultsByCategory, getAiGatewayTemplatesByCategory, getAiGatewayTemplateById, } from './ai_gateway-defaults.gen.js';
 export { GUARDRAILS_DEFAULTS, GUARDRAILS_TEMPLATES, GUARDRAILS_CATEGORIES, GUARDRAILS_TEMPLATES_JSON, getGuardrailsDefaultsByCategory, getGuardrailsTemplatesByCategory, getGuardrailsTemplateById, } from './guardrails-defaults.gen.js';
 export { OVERWATCH_DEFAULTS, OVERWATCH_TEMPLATES, OVERWATCH_CATEGORIES, OVERWATCH_TEMPLATES_JSON, getOverwatchDefaultsByCategory, getOverwatchTemplatesByCategory, getOverwatchTemplateById, } from './overwatch-defaults.gen.js';