chore: add the SDS tags returned by the evaluator service to the ai_guard span (#7702)

obordeau · web-flow · commit 94c9de46dc77 · 2026-03-06T16:45:42.000Z
chore: add the SDS tags returned by the evaluator service to the ai_guard span

fix lint

Co-authored-by: oceane.bordeau &lt;oceane.bordeau@datadoghq.com&gt;
diff --git a/packages/dd-trace/src/aiguard/sdk.js b/packages/dd-trace/src/aiguard/sdk.js
@@ -175,7 +175,7 @@ class AIGuard extends NoopAIGuard {
           `AI Guard service call failed, status ${response.status}`,
           { errors: response.body?.errors })
       }
-      let action, reason, tags, blockingEnabled
+      let action, reason, tags, sdsFindings, blockingEnabled
       try {
         const attr = response.body.data.attributes
         if (!attr.action) {
@@ -184,6 +184,7 @@ class AIGuard extends NoopAIGuard {
         action = attr.action
         reason = attr.reason
         tags = attr.tags
+        sdsFindings = attr.sds_findings
         blockingEnabled = attr.is_blocking_enabled ?? false
       } catch (e) {
         appsecMetrics.count(AI_GUARD_TELEMETRY_REQUESTS, { error: true }).inc(1)
@@ -198,6 +199,9 @@ class AIGuard extends NoopAIGuard {
       if (tags?.length > 0) {
         metaStruct.attack_categories = tags
       }
+      if (sdsFindings?.length > 0) {
+        metaStruct.sds = sdsFindings
+      }
       if (shouldBlock) {
         span.setTag(AI_GUARD_BLOCKED_TAG_KEY, 'true')
         throw new AIGuardAbortError(reason, tags)
diff --git a/packages/dd-trace/test/aiguard/index.spec.js b/packages/dd-trace/test/aiguard/index.spec.js
@@ -189,6 +189,64 @@ describe('AIGuard SDK', () => {
     })
   }
 
+  it('test evaluate with sds_findings', async () => {
+    const sdsFindings = [
+      {
+        rule_display_name: 'Email Address',
+        rule_tag: 'email_address',
+        category: 'pii',
+        matched_text: 'john.smith@acmebank.com',
+        location: { start_index: 35, end_index_exclusive: 58, path: 'messages[0].content' },
+      },
+      {
+        rule_display_name: 'Social Security Number',
+        rule_tag: 'social_security_number',
+        category: 'pii',
+        matched_text: '456-78-9012',
+        location: { start_index: 73, end_index_exclusive: 84, path: 'messages[0].content' },
+      },
+    ]
+    const messages = [{ role: 'user', content: 'My SSN is 456-78-9012 and email john.smith@acmebank.com' }]
+    mockFetch({
+      body: {
+        data: {
+          attributes: {
+            action: 'ALLOW',
+            reason: 'No rule match.',
+            tags: [],
+            sds_findings: sdsFindings,
+            is_blocking_enabled: true,
+          },
+        },
+      },
+    })
+
+    await aiguard.evaluate(messages)
+
+    await assertAIGuardSpan(
+      { 'ai_guard.target': 'prompt', 'ai_guard.action': 'ALLOW' },
+      { messages, sds: sdsFindings }
+    )
+  })
+
+  it('test evaluate with empty sds_findings', async () => {
+    const messages = [{ role: 'user', content: 'Hello' }]
+    mockFetch({
+      body: {
+        data: {
+          attributes: { action: 'ALLOW', reason: 'OK', tags: [], sds_findings: [], is_blocking_enabled: false },
+        },
+      },
+    })
+
+    await aiguard.evaluate(messages)
+
+    await assertAIGuardSpan(
+      { 'ai_guard.target': 'prompt', 'ai_guard.action': 'ALLOW' },
+      { messages }
+    )
+  })
+
   it('test evaluate with API error', async () => {
     const errors = [{ status: 400, title: 'Internal server error' }]
     mockFetch({
