@highflame/policy 2.2.7 → 2.2.9

package/dist/service-schemas.gen.js

@@ -265,6 +265,12 @@ namespace AgentOps {
         "budget_exceeded_daily"?: Boolean,
         "budget_exceeded_monthly"?: Boolean,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Boolean,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Boolean,
+
         // Agent Identity — authenticated agent principal metadata (optional)
         "agent_id"?: String,
         "agent_type"?: String,           // "orchestrator" | "autonomous" | "tool_agent" | "human_proxy"
@@ -423,6 +429,12 @@ namespace AgentOps {
         "budget_exceeded_daily"?: Boolean,
         "budget_exceeded_monthly"?: Boolean,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Boolean,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Boolean,
+
         // Aggregated threat summary (optional)
         "highest_severity"?: String,
         "threat_count"?: Long,
@@ -509,6 +521,12 @@ namespace AgentOps {
         "budget_exceeded_daily"?: Boolean,
         "budget_exceeded_monthly"?: Boolean,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Boolean,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Boolean,
+
         // Agent Identity (optional)
         "agent_id"?: String,
         "agent_type"?: String,
@@ -591,6 +609,12 @@ namespace AgentOps {
         "budget_exceeded_daily"?: Boolean,
         "budget_exceeded_monthly"?: Boolean,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Boolean,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Boolean,
+
         // Agent Identity (optional)
         "agent_id"?: String,
         "agent_type"?: String,
@@ -673,6 +697,12 @@ namespace AgentOps {
         "budget_exceeded_daily"?: Boolean,
         "budget_exceeded_monthly"?: Boolean,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Boolean,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Boolean,
+
         // Agent Identity (optional)
         "agent_id"?: String,
         "agent_type"?: String,
@@ -863,6 +893,12 @@ action call_tool appliesTo {
     budget_exceeded_session?: Bool,
     budget_exceeded_daily?: Bool,
     budget_exceeded_monthly?: Bool,
+
+    // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+    rpm_remaining_pct?: Long,
+    rpm_exceeded?: Bool,
+    tpm_remaining_pct?: Long,
+    tpm_exceeded?: Bool,
   },
 };
 
@@ -935,6 +971,12 @@ action connect_server appliesTo {
     budget_exceeded_session?: Bool,
     budget_exceeded_daily?: Bool,
     budget_exceeded_monthly?: Bool,
+
+    // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+    rpm_remaining_pct?: Long,
+    rpm_exceeded?: Bool,
+    tpm_remaining_pct?: Long,
+    tpm_exceeded?: Bool,
   },
 };
 
@@ -1016,6 +1058,12 @@ action process_prompt appliesTo {
     budget_exceeded_session?: Bool,
     budget_exceeded_daily?: Bool,
     budget_exceeded_monthly?: Bool,
+
+    // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+    rpm_remaining_pct?: Long,
+    rpm_exceeded?: Bool,
+    tpm_remaining_pct?: Long,
+    tpm_exceeded?: Bool,
   },
 };
 
@@ -1077,6 +1125,12 @@ action read_file appliesTo {
     budget_exceeded_session?: Bool,
     budget_exceeded_daily?: Bool,
     budget_exceeded_monthly?: Bool,
+
+    // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+    rpm_remaining_pct?: Long,
+    rpm_exceeded?: Bool,
+    tpm_remaining_pct?: Long,
+    tpm_exceeded?: Bool,
   },
 };
 
@@ -1138,6 +1192,12 @@ action write_file appliesTo {
     budget_exceeded_session?: Bool,
     budget_exceeded_daily?: Bool,
     budget_exceeded_monthly?: Bool,
+
+    // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+    rpm_remaining_pct?: Long,
+    rpm_exceeded?: Bool,
+    tpm_remaining_pct?: Long,
+    tpm_exceeded?: Bool,
   },
 };
 
@@ -1379,6 +1439,12 @@ namespace Guardrails {
         "budget_exceeded_daily"?: Bool,         // Any daily-scoped budget exceeded
         "budget_exceeded_monthly"?: Bool,       // Any monthly-scoped budget exceeded
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Bool,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Bool,
+
         // Agent Identity — authenticated agent principal metadata (optional)
         // Present when the request is made by an AI agent (API key or JWT with agent claims).
         // Empty strings for human user requests. Use these to write agent-specific policies.
@@ -1465,6 +1531,12 @@ namespace Guardrails {
         "budget_exceeded_daily"?: Bool,
         "budget_exceeded_monthly"?: Bool,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Bool,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Bool,
+
         // Semantic - Topic Classification (optional)
         "content_topics"?: Set<String>,      // ["controlled_substances", "weapons_manufacturing", ...]
         "topic_confidence"?: Long,           // 0-100
@@ -1618,6 +1690,12 @@ namespace Guardrails {
         "budget_exceeded_daily"?: Bool,
         "budget_exceeded_monthly"?: Bool,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Bool,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Bool,
+
         // Agent Identity — authenticated agent principal metadata (optional)
         "agent_id"?: String,
         "agent_type"?: String,
@@ -1689,6 +1767,12 @@ namespace Guardrails {
         "budget_exceeded_daily"?: Bool,
         "budget_exceeded_monthly"?: Bool,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Bool,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Bool,
+
         // Agent Identity — authenticated agent principal metadata (optional)
         "agent_id"?: String,
         "agent_type"?: String,
@@ -1760,6 +1844,12 @@ namespace Guardrails {
         "budget_exceeded_daily"?: Bool,
         "budget_exceeded_monthly"?: Bool,
 
+        // Rate Limiting — gateway-metered, Shield-decided (ADR 0014)
+        "rpm_remaining_pct"?: Long,
+        "rpm_exceeded"?: Bool,
+        "tpm_remaining_pct"?: Long,
+        "tpm_exceeded"?: Bool,
+
         // Agent Identity — authenticated agent principal metadata (optional)
         "agent_id"?: String,
         "agent_type"?: String,
@@ -2880,6 +2970,10 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "multi_turn_detection", "type": "boolean", "required": false, "description": "Whether multi-turn injection patterns were detected" },
                 { "key": "budget_remaining_pct", "type": "number", "required": false, "description": "Remaining token budget as percentage (0-100)." },
                 { "key": "budget_exceeded", "type": "boolean", "required": false, "description": "Whether the token budget has been exceeded" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -2980,6 +3074,10 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "multi_turn_detection", "type": "boolean", "required": false, "description": "Whether multi-turn injection patterns were detected across tool calls" },
                 { "key": "budget_remaining_pct", "type": "number", "required": false, "description": "Remaining token budget as percentage (0-100)." },
                 { "key": "budget_exceeded", "type": "boolean", "required": false, "description": "Whether the token budget has been exceeded" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded" },
                 { "key": "highest_severity", "type": "string", "required": false, "description": "Highest severity level across all detection engines" },
                 { "key": "threat_count", "type": "number", "required": false, "description": "Total number of threats detected" },
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Array of specific threat names detected" },
@@ -3034,6 +3132,10 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Array of specific threat names detected" },
                 { "key": "budget_remaining_pct", "type": "number", "required": false, "description": "Remaining token budget as percentage (0-100)." },
                 { "key": "budget_exceeded", "type": "boolean", "required": false, "description": "Whether the token budget has been exceeded" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -3087,6 +3189,10 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Array of specific threat names detected" },
                 { "key": "budget_remaining_pct", "type": "number", "required": false, "description": "Remaining token budget as percentage (0-100)." },
                 { "key": "budget_exceeded", "type": "boolean", "required": false, "description": "Whether the token budget has been exceeded" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -3140,6 +3246,10 @@ export const AGENT_OPS_CONTEXT = {
                 { "key": "detected_threats", "type": "array", "required": false, "description": "Array of specific threat names detected" },
                 { "key": "budget_remaining_pct", "type": "number", "required": false, "description": "Remaining token budget as percentage (0-100)." },
                 { "key": "budget_exceeded", "type": "boolean", "required": false, "description": "Whether the token budget has been exceeded" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)." },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -3232,7 +3342,11 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
                 { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
                 { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
-                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" }
             ]
         },
         {
@@ -3274,7 +3388,11 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
                 { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
                 { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
-                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" }
             ]
         },
         {
@@ -3321,7 +3439,11 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
                 { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
                 { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
-                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" }
             ]
         },
         {
@@ -3356,7 +3478,11 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
                 { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
                 { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
-                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" }
             ]
         },
         {
@@ -3391,7 +3517,11 @@ export const AI_GATEWAY_CONTEXT = {
                 { "key": "session_max_jailbreak_score", "type": "number", "required": false, "description": "Max jailbreak score across session turns" },
                 { "key": "session_max_command_injection_score", "type": "number", "required": false, "description": "Max command-injection score across session turns" },
                 { "key": "session_max_pii_score", "type": "number", "required": false, "description": "Max pii score across session turns" },
-                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" }
+                { "key": "session_max_secret_score", "type": "number", "required": false, "description": "Max secret score across session turns" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" }
             ]
         }
     ]
@@ -3479,6 +3609,10 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "content_safety_blocked", "type": "boolean", "required": false, "description": "Whether content was flagged for blocking by the content safety system" },
                 { "key": "conversation_turn", "type": "number", "required": false, "description": "Current conversation turn number. Use for policies that escalate strictness over long conversations" },
                 { "key": "multi_turn_detection", "type": "boolean", "required": false, "description": "Whether multi-turn injection patterns were detected (attack spread across multiple conversation turns)" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -3529,6 +3663,10 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "loop_tool", "type": "string", "required": false, "description": "Name of the tool involved in the loop" },
                 { "key": "budget_remaining_pct", "type": "number", "required": false, "description": "Remaining token budget as percentage (0-100). Use this to warn or block when budget is low. Requires session with token budget configuration" },
                 { "key": "budget_exceeded", "type": "boolean", "required": false, "description": "Whether the token budget has been exceeded. Use this to enforce cost controls on agentic sessions" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" },
                 { "key": "content_topics", "type": "array", "required": false, "description": "Semantic topics detected in tool arguments or content (e.g., [\'controlled_substances\']). Use .contains() to restrict tool calls involving specific topics" },
                 { "key": "topic_confidence", "type": "number", "required": false, "description": "Confidence score from topic classifier for tool content (0-100)" },
                 { "key": "secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in tool arguments or content" },
@@ -3574,6 +3712,10 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "rug_pull_type", "type": "string", "required": false, "description": "Type of rug pull detected: \'risk_spike\' (sudden risk increase), \'pattern_change\' (behavioral shift), \'combined\', or \'none\'" },
                 { "key": "conversation_turn", "type": "number", "required": false, "description": "Current conversation turn number for the agentic session" },
                 { "key": "multi_turn_detection", "type": "boolean", "required": false, "description": "Whether multi-turn injection patterns were detected across tool calls in the session" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -3615,6 +3757,10 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "path_traversal_detected", "type": "boolean", "required": false, "description": "Whether path traversal patterns were detected in the file path being read" },
                 { "key": "path_traversal_severity", "type": "string", "required": false, "description": "Severity of path traversal in the file read path" },
                 { "key": "path_traversal_type", "type": "string", "required": false, "description": "Type of path traversal detected in the file read path" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -3658,6 +3804,10 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "path_traversal_detected", "type": "boolean", "required": false, "description": "Whether path traversal patterns were detected in the file path being written" },
                 { "key": "path_traversal_severity", "type": "string", "required": false, "description": "Severity of path traversal in the file write path" },
                 { "key": "path_traversal_type", "type": "string", "required": false, "description": "Type of path traversal detected in the file write path" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },
@@ -3701,6 +3851,10 @@ export const GUARDRAILS_CONTEXT = {
                 { "key": "cross_origin_detected", "type": "boolean", "required": false, "description": "Whether cross-origin escalation patterns were detected in the MCP server connection" },
                 { "key": "cross_origin_type", "type": "string", "required": false, "description": "Type of cross-origin escalation detected in server connection" },
                 { "key": "cross_origin_score", "type": "number", "required": false, "description": "Risk score for cross-origin escalation in server connection (0-100)" },
+                { "key": "rpm_remaining_pct", "type": "number", "required": false, "description": "Remaining RPM (requests per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "rpm_exceeded", "type": "boolean", "required": false, "description": "Whether the RPM limit has been exceeded. Use this to enforce rate limits via Cedar policy" },
+                { "key": "tpm_remaining_pct", "type": "number", "required": false, "description": "Remaining TPM (tokens per minute) as percentage (0-100). Gateway-metered, Shield-decided (ADR 0014)" },
+                { "key": "tpm_exceeded", "type": "boolean", "required": false, "description": "Whether the TPM limit has been exceeded. Use this to enforce token rate limits via Cedar policy" },
                 { "key": "session_pii_detected", "type": "boolean", "required": false, "description": "Whether PII was detected in any previous turn of the session" },
                 { "key": "session_pii_types", "type": "array", "required": false, "description": "PII types detected across the session (accumulated)" },
                 { "key": "session_secrets_detected", "type": "boolean", "required": false, "description": "Whether secrets were detected in any previous turn of the session" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@highflame/policy",
-  "version": "2.2.7",
+  "version": "2.2.9",
   "engines": {
     "node": ">=18"
   },