Add generic policies list to AgentDefinition schema

agentschema-emitter/lib/model/agent.tsp

@@ -9,6 +9,24 @@ namespace AgentSchema;
 
 alias AgentKind = "prompt" | "hosted" | "workflow";
 
+/**
+ * A single safety or governance policy attached to an agent.
+ * The `type` field discriminates the policy kind; the remaining fields are
+ * interpreted based on `type`. For `rai_policy`, `raiPolicyName` associates the
+ * agent with a Responsible AI policy that governs content filtering and safety
+ * guardrails for prompts and completions.
+ */
+model Policy {
+  @doc("The policy type. 'rai_policy' attaches a Responsible AI (content safety) guardrail.")
+  type: "rai_policy";
+
+  @doc("For 'rai_policy', the full ARM resource ID of the Responsible AI policy on the Cognitive Services account (e.g., '/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<account>/raiPolicies/<policyName>').")
+  @sample(#{
+    raiPolicyName: "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/my-rg/providers/Microsoft.CognitiveServices/accounts/my-account/raiPolicies/Microsoft.DefaultV2",
+  })
+  raiPolicyName?: string;
+}
+
 /**
  * The following is a specification for defining AI agents with structured metadata, inputs, outputs, tools, and templates.
  * It provides a way to create reusable and composable AI agents that can be executed with specific configurations.
@@ -95,6 +113,18 @@ model AgentDefinition {
     },
   })
   outputSchema?: PropertySchema;
+
+  // Policies
+  @doc("Safety and governance policies for the agent, such as Responsible AI content-safety configuration.")
+  @sample(#{
+    policies: #[
+      #{
+        type: "rai_policy",
+        raiPolicyName: "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/my-rg/providers/Microsoft.CognitiveServices/accounts/my-account/raiPolicies/Microsoft.DefaultV2",
+      }
+    ],
+  })
+  policies?: Policy[];
 }
 
 /**

agentschema-emitter/src/template-engine.ts

@@ -82,6 +82,32 @@ export class TemplateEngine {
         .replace(/^_/, '');
     });
 
+    // rustFieldIdent: snake_case the name, then escape Rust reserved keywords
+    // so the generated identifier is valid (e.g. "type" -> "r#type"). The wire
+    // key (serde/JSON name) is rendered separately from the original property
+    // name, so escaping here only affects the Rust identifier.
+    this.env.addFilter('rustFieldIdent', (str: string): string => {
+      if (!str) return str;
+      const snake = str
+        .replace(/([A-Z])/g, '_$1')
+        .toLowerCase()
+        .replace(/^_/, '');
+      // Strict and reserved Rust keywords that are valid raw identifiers.
+      const rawKeywords = new Set([
+        'as', 'break', 'const', 'continue', 'dyn', 'else', 'enum', 'extern',
+        'false', 'fn', 'for', 'if', 'impl', 'in', 'let', 'loop', 'match', 'mod',
+        'move', 'mut', 'pub', 'ref', 'return', 'static', 'struct', 'trait',
+        'true', 'type', 'unsafe', 'use', 'where', 'while', 'async', 'await',
+        'abstract', 'become', 'box', 'do', 'final', 'macro', 'override', 'priv',
+        'typeof', 'unsized', 'virtual', 'yield', 'try', 'union',
+      ]);
+      // Keywords that cannot be raw identifiers; escape with a trailing underscore.
+      const nonRawKeywords = new Set(['crate', 'self', 'Self', 'super']);
+      if (nonRawKeywords.has(snake)) return `${snake}_`;
+      if (rawKeywords.has(snake)) return `r#${snake}`;
+      return snake;
+    });
+
     // kebab-case: "helloWorld" -> "hello-world"
     this.env.addFilter('kebabCase', (str: string): string => {
       if (!str) return str;

agentschema-emitter/src/templates/rust/_macros.njk

@@ -83,7 +83,7 @@ Default::default()
   Optional non-polymorphic non-scalar fields are wrapped in Some().
 #}
 {% macro loadProperty(prop, varName, typeMapper, polymorphicTypeNames) -%}
-{%- set propNameRust = prop.name | snakeCase -%}
+{%- set propNameRust = prop.name | rustFieldIdent -%}
 {%- if prop.isCollection and not prop.isDict and not prop.isScalar %}
         if let Some(val) = {{ varName }}.get("{{ prop.name }}") {
             result.{{ propNameRust }} = val.clone();
@@ -212,7 +212,7 @@ Default::default()
   Render save code for a single property.
 #}
 {% macro saveProperty(prop, polymorphicTypeNames) -%}
-{%- set propNameRust = prop.name | snakeCase -%}
+{%- set propNameRust = prop.name | rustFieldIdent -%}
 {%- if prop.isCollection and not prop.isDict and not prop.isScalar %}
         if !self.{{ propNameRust }}.is_null() {
             result.insert("{{ prop.name }}".to_string(), self.{{ propNameRust }}.clone());
@@ -294,12 +294,13 @@ Default::default()
 #}
 {% macro typedAccessor(prop) -%}
 {%- set propNameRust = prop.name | snakeCase -%}
+{%- set propNameField = prop.name | rustFieldIdent -%}
 {%- if prop.isCollection and not prop.isScalar and not prop.isDict %}
     /// Returns typed `Vec<{{ prop.typeName.name }}>` by parsing the stored JSON value.
     /// Handles both array format `[{...}]` and dict format `{"name": {...}}`.
     /// Returns `None` if the field is null or cannot be parsed.
     pub fn as_{{ propNameRust }}(&self) -> Option<Vec<{{ prop.typeName.name }}>> {
-        match &self.{{ propNameRust }} {
+        match &self.{{ propNameField }} {
             serde_json::Value::Array(arr) => {
                 Some(arr.iter().map({{ prop.typeName.name }}::load_from_value).collect())
             }
@@ -327,7 +328,7 @@ Default::default()
     /// Returns typed reference to the map if the field is an object.
     /// Returns `None` if the field is null or not an object.
     pub fn as_{{ propNameRust }}_dict(&self) -> Option<&serde_json::Map<String, serde_json::Value>> {
-        self.{{ propNameRust }}.as_object()
+        self.{{ propNameField }}.as_object()
     }
 {%- endif -%}
 {%- endmacro %}
@@ -338,7 +339,7 @@ Default::default()
   Used for struct initialization syntax to avoid clippy::field_reassign_with_default.
 #}
 {% macro fieldInitializer(prop, varName, typeMapper, polymorphicTypeNames) -%}
-{%- set propNameRust = prop.name | snakeCase -%}
+{%- set propNameRust = prop.name | rustFieldIdent -%}
 {%- if prop.isCollection and not prop.isDict and not prop.isScalar %}
 {{ varName }}.get("{{ prop.name }}").cloned().unwrap_or(serde_json::Value::Null)
 {%- elif prop.isCollection and not prop.isDict and prop.isScalar %}

agentschema-emitter/src/templates/rust/file.rs.njk

@@ -29,7 +29,7 @@ pub struct {{ class.node.typeName.name }} {
 {%- if prop.description %}
     /// {{ prop.description | replace("\r\n", " ") | replace("\n", " ") | trim }}
 {%- endif %}
-    pub {{ prop.name | snakeCase }}: {{ rust.rustType(prop, typeMapper, polymorphicTypeNames) | trim }},
+    pub {{ prop.name | rustFieldIdent }}: {{ rust.rustType(prop, typeMapper, polymorphicTypeNames) | trim }},
 {%- endfor %}
 }
 
@@ -81,7 +81,7 @@ impl {{ class.node.typeName.name }} {
         {%- endif %}
         Self {
 {%- for prop in class.node.properties %}
-            {{ prop.name | snakeCase }}: {{ rust.fieldInitializer(prop, "value", typeMapper, polymorphicTypeNames) | trim }},
+            {{ prop.name | rustFieldIdent }}: {{ rust.fieldInitializer(prop, "value", typeMapper, polymorphicTypeNames) | trim }},
 {%- endfor %}
         }
     }

docs/src/content/docs/reference/AgentDefinition.md

@@ -30,6 +30,7 @@ classDiagram
         +dictionary metadata
         +PropertySchema inputSchema
         +PropertySchema outputSchema
+        +Policy[] policies
     }
     class PromptAgent {
         +string kind
@@ -55,6 +56,11 @@ classDiagram
         +CodeConfiguration codeConfiguration
     }
     AgentDefinition <|-- ContainerAgent
+    class Policy {
+        +string type
+        +string raiPolicyName
+    }
+    AgentDefinition *-- Policy
 ```
 
 ## Yaml Example
@@ -87,6 +93,9 @@ outputSchema:
     answer:
       kind: string
       description: The answer to the user's question.
+policies:
+  - type: rai_policy
+    raiPolicyName: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/my-rg/providers/Microsoft.CognitiveServices/accounts/my-account/raiPolicies/Microsoft.DefaultV2
 ```
 
 ## Properties
@@ -100,6 +109,7 @@ outputSchema:
 | metadata | dictionary | Additional metadata including authors, tags, and other arbitrary properties |
 | inputSchema | [PropertySchema](../propertyschema/) | Input parameters that participate in template rendering |
 | outputSchema | [PropertySchema](../propertyschema/) | Expected output format and structure from the agent |
+| policies | [Policy[]](../policy/) | Safety and governance policies for the agent, such as Responsible AI content-safety configuration. |
 
 ## Child Types
 
@@ -108,3 +118,9 @@ The following types extend `AgentDefinition`:
 - [PromptAgent](../promptagent/)
 - [Workflow](../workflow/)
 - [ContainerAgent](../containeragent/)
+
+## Composed Types
+
+The following types are composed within `AgentDefinition`:
+
+- [Policy](../policy/)

docs/src/content/docs/reference/AgentManifest.md

@@ -47,6 +47,7 @@ classDiagram
         +dictionary metadata
         +PropertySchema inputSchema
         +PropertySchema outputSchema
+        +Policy[] policies
     }
     AgentManifest *-- AgentDefinition
     class Resource {

docs/src/content/docs/reference/ContainerAgent.md

@@ -28,6 +28,7 @@ classDiagram
         +dictionary metadata
         +PropertySchema inputSchema
         +PropertySchema outputSchema
+        +Policy[] policies
     }
     AgentDefinition <|-- ContainerAgent
     class ContainerAgent {

docs/src/content/docs/reference/Policy.md

@@ -0,0 +1,43 @@
+---
+title: "Policy"
+description: "Documentation for the Policy type."
+slug: "reference/policy"
+---
+
+A single safety or governance policy attached to an agent.
+The `type` field discriminates the policy kind; the remaining fields are
+interpreted based on `type`. For `rai_policy`, `raiPolicyName` associates the
+agent with a Responsible AI policy that governs content filtering and safety
+guardrails for prompts and completions.
+
+## Class Diagram
+
+```mermaid
+---
+title: Policy
+config:
+  look: handDrawn
+  theme: colorful
+  class:
+    hideEmptyMembersBox: true
+---
+classDiagram
+    class Policy {
+
+        +string type
+        +string raiPolicyName
+    }
+```
+
+## Yaml Example
+
+```yaml
+raiPolicyName: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/my-rg/providers/Microsoft.CognitiveServices/accounts/my-account/raiPolicies/Microsoft.DefaultV2
+```
+
+## Properties
+
+| Name | Type | Description |
+| ---- | ---- | ----------- |
+| type | string | The policy type. 'rai_policy' attaches a Responsible AI (content safety) guardrail. |
+| raiPolicyName | string | For 'rai_policy', the full ARM resource ID of the Responsible AI policy on the Cognitive Services account (e.g., '/subscriptions/<sub>/resourceGroups/<rg>/providers/Microsoft.CognitiveServices/accounts/<account>/raiPolicies/<policyName>'). |

docs/src/content/docs/reference/PromptAgent.md

@@ -28,6 +28,7 @@ classDiagram
         +dictionary metadata
         +PropertySchema inputSchema
         +PropertySchema outputSchema
+        +Policy[] policies
     }
     AgentDefinition <|-- PromptAgent
     class PromptAgent {

docs/src/content/docs/reference/README.md

@@ -19,6 +19,11 @@ config:
     hideEmptyMembersBox: true
 ---
 classDiagram
+    class Policy {
+
+        +string type
+        +string raiPolicyName
+    }
     class AgentDefinition {
       <<abstract>>
         +string kind
@@ -28,6 +33,7 @@ classDiagram
         +dictionary metadata
         +PropertySchema inputSchema
         +PropertySchema outputSchema
+        +Policy[] policies
     }
     class Connection {
       <<abstract>>
@@ -311,6 +317,7 @@ classDiagram
     Resource <|-- ToolResource
     AgentDefinition *-- PropertySchema
     AgentDefinition *-- PropertySchema
+    AgentDefinition *-- Policy
     Model *-- Connection
     Model *-- ModelOptions
     Tool *-- Binding

docs/src/content/docs/reference/Workflow.md

@@ -36,6 +36,7 @@ classDiagram
         +dictionary metadata
         +PropertySchema inputSchema
         +PropertySchema outputSchema
+        +Policy[] policies
     }
     AgentDefinition <|-- Workflow
     class Workflow {