Create

BuiltInPattern references a ConductorOne-maintained DLP pattern. The specific pattern and its configuration are encoded as a oneof.

This message contains a oneof named config. Only a single field of the following list may be set at a time:

• piiRedaction
• creditCardBlocking
• queryScopeLimit
• writeAuthorization
• sensitiveFileGuard
• toolOutputSizeGuard
• secretsMasking
• linkFilter
• encodedContentGuard
• promptInjectionScan
• blockOutput
• blockToolCall
• preToolBlock

HookFilter determines which calls (or, for HOOK_EVENT_TYPE_PRE_OUTPUT, which outgoing response chunks) a hook applies to.

HookFunctionRef identifies a customer-authored function to invoke.

JSONPatchConfig adds, overwrites, or removes fields on a tool call's JSON input, with no function invocation. Only valid on HOOK_EVENT_TYPE_PRE_TOOL_USE. cel_expression is evaluated against ctx/input/caller and must produce a map; static_overlay is a fixed map. Either result is shallow-merged onto the input under RFC 7396 merge patch semantics: a key overwrites or adds that key, a null value removes it, and a nested object replaces rather than merging into the existing one.

This message contains a oneof named source. Only a single field of the following list may be set at a time:

• celExpression
• staticOverlay

Hook represents a customer-configured interception point for tool calls.

This message contains a oneof named hook_type. Only a single field of the following list may be set at a time:

• function
• builtinPattern
• jsonPatch