@vettly/shared 0.1.15 → 0.1.16

package/README.md

@@ -1,17 +1,17 @@
 # @vettly/shared
 
-Type-safe contracts for App Store Guideline 1.2 compliance. Runtime-validated schemas that ensure consistency across all Vettly packages.
+Type-safe contracts for UGC moderation. Runtime-validated schemas that ensure consistency across all Vettly packages.
 
-## App Store Guideline 1.2
+## UGC Moderation Essentials
 
-Apple requires every iOS app with user-generated content to implement four things. This package provides the canonical types and schemas that enforce each requirement across all Vettly packages:
+Apps with user-generated content need four things to stay compliant and keep users safe. This package provides the canonical types and schemas that enforce each requirement across all Vettly packages:
 
-| Requirement | Guideline | Shared Types |
-|-------------|-----------|--------------|
-| **Content filtering** | 1.2.1 | `CheckRequest`, `CheckResponse`, `Action` |
-| **User reporting** | 1.2.2 | `WebhookEventType`, `Decision` |
-| **User blocking** | 1.2.3 | `ModerationContext`, `Action` |
-| **Audit trail** | — | `Decision`, `ContentType`, `Policy` |
+| Requirement | Shared Types |
+|-------------|--------------|
+| **Content filtering** | `CheckRequest`, `CheckResponse`, `Action` |
+| **User reporting** | `WebhookEventType`, `Decision` |
+| **User blocking** | `ModerationContext`, `Action` |
+| **Audit trail** | `Decision`, `ContentType`, `Policy` |
 
 All packages (`@vettly/sdk`, `@vettly/react`, `@vettly/express`, `@vettly/nextjs`) depend on these shared contracts. See [@vettly/sdk](https://www.npmjs.com/package/@vettly/sdk) for the full integration picture.
 

package/dist/index.cjs

@@ -41,13 +41,24 @@ __export(index_exports, {
   ModerationError: () => ModerationError,
   MultiModalCheckRequestSchema: () => MultiModalCheckRequestSchema,
   MultiModalCheckResponseSchema: () => MultiModalCheckResponseSchema,
+  OpenClawActionAuthorizeRequestSchema: () => OpenClawActionAuthorizeRequestSchema,
+  OpenClawActionAuthorizeResponseSchema: () => OpenClawActionAuthorizeResponseSchema,
+  OpenClawActionTypeSchema: () => OpenClawActionTypeSchema,
+  OpenClawGuardrailActionSchema: () => OpenClawGuardrailActionSchema,
+  OpenClawGuardrailPolicySchema: () => OpenClawGuardrailPolicySchema,
+  OpenClawPermissionSchema: () => OpenClawPermissionSchema,
+  OpenClawSkillSourceSchema: () => OpenClawSkillSourceSchema,
+  OpenClawSkillVettingRequestSchema: () => OpenClawSkillVettingRequestSchema,
+  OpenClawSkillVettingResponseSchema: () => OpenClawSkillVettingResponseSchema,
   OverrideSchema: () => OverrideSchema,
   PolicySchema: () => PolicySchema,
   PolicyValidationError: () => PolicyValidationError,
   ProviderError: () => ProviderError,
   ProviderNameSchema: () => ProviderNameSchema,
   ReplayRequestSchema: () => ReplayRequestSchema,
+  RollbackOpenClawGuardrailPolicyRequestSchema: () => RollbackOpenClawGuardrailPolicyRequestSchema,
   RuleSchema: () => RuleSchema,
+  UpdateOpenClawGuardrailPolicyRequestSchema: () => UpdateOpenClawGuardrailPolicyRequestSchema,
   UseCaseTypeSchema: () => UseCaseTypeSchema,
   WebhookEndpointSchema: () => WebhookEndpointSchema,
   WebhookEventTypeSchema: () => WebhookEventTypeSchema,
@@ -268,6 +279,83 @@ var ReplayRequestSchema = import_zod.z.object({
   decisionId: import_zod.z.string().uuid(),
   policyId: import_zod.z.string()
 });
+var OpenClawSkillSourceSchema = import_zod.z.enum(["local", "github", "clawhub", "remote_url"]);
+var OpenClawPermissionSchema = import_zod.z.enum([
+  "read_file",
+  "write_file",
+  "delete_file",
+  "run_shell",
+  "network_access",
+  "access_secrets"
+]);
+var OpenClawActionTypeSchema = import_zod.z.enum([
+  "exec",
+  "file_read",
+  "file_write",
+  "network",
+  "env_access",
+  "skill_install"
+]);
+var OpenClawGuardrailActionSchema = import_zod.z.enum(["allow", "warn", "flag", "block"]);
+var OpenClawSkillVettingRequestSchema = import_zod.z.object({
+  skillId: import_zod.z.string().min(1).max(200),
+  name: import_zod.z.string().min(1).max(200),
+  source: OpenClawSkillSourceSchema,
+  prompt: import_zod.z.string().min(1).max(5e4),
+  requestedPermissions: import_zod.z.array(OpenClawPermissionSchema).max(20).default([]),
+  hasChecksum: import_zod.z.boolean().default(false),
+  signedPublisher: import_zod.z.boolean().default(false),
+  maintainerReputation: import_zod.z.enum(["unknown", "trusted", "untrusted"]).default("unknown"),
+  metadata: import_zod.z.record(import_zod.z.unknown()).optional(),
+  requestId: import_zod.z.string().optional()
+});
+var OpenClawSkillVettingResponseSchema = import_zod.z.object({
+  decisionId: import_zod.z.string().uuid(),
+  action: OpenClawGuardrailActionSchema,
+  riskScore: import_zod.z.number().int().min(0).max(100),
+  reasons: import_zod.z.array(import_zod.z.string()),
+  categories: import_zod.z.array(import_zod.z.string()),
+  requiresApproval: import_zod.z.boolean(),
+  requestId: import_zod.z.string().optional()
+});
+var OpenClawActionAuthorizeRequestSchema = import_zod.z.object({
+  actionType: OpenClawActionTypeSchema,
+  command: import_zod.z.string().max(5e3).optional(),
+  targetPath: import_zod.z.string().max(2e3).optional(),
+  targetDomain: import_zod.z.string().max(500).optional(),
+  requestedPermissions: import_zod.z.array(OpenClawPermissionSchema).max(20).default([]),
+  policy: import_zod.z.object({
+    sensitivePathPrefixes: import_zod.z.array(import_zod.z.string().min(1).max(500)).max(200).default([]),
+    networkAllowlist: import_zod.z.array(import_zod.z.string().min(1).max(200)).max(500).default([]),
+    blockShellPatterns: import_zod.z.array(import_zod.z.string().min(1).max(200)).max(200).default([]),
+    requireApprovalScore: import_zod.z.number().int().min(0).max(100).default(40)
+  }).optional(),
+  metadata: import_zod.z.record(import_zod.z.unknown()).optional(),
+  requestId: import_zod.z.string().optional()
+});
+var OpenClawActionAuthorizeResponseSchema = import_zod.z.object({
+  decisionId: import_zod.z.string().uuid(),
+  action: OpenClawGuardrailActionSchema,
+  riskScore: import_zod.z.number().int().min(0).max(100),
+  reasons: import_zod.z.array(import_zod.z.string()),
+  categories: import_zod.z.array(import_zod.z.string()),
+  requiresApproval: import_zod.z.boolean(),
+  requestId: import_zod.z.string().optional()
+});
+var OpenClawGuardrailPolicySchema = import_zod.z.object({
+  sensitivePathPrefixes: import_zod.z.array(import_zod.z.string().min(1).max(500)).max(200).default([]),
+  networkAllowlist: import_zod.z.array(import_zod.z.string().min(1).max(200)).max(500).default([]),
+  blockShellPatterns: import_zod.z.array(import_zod.z.string().min(1).max(200)).max(200).default([]),
+  requireApprovalScore: import_zod.z.number().int().min(0).max(100).default(40)
+});
+var UpdateOpenClawGuardrailPolicyRequestSchema = import_zod.z.object({
+  projectId: import_zod.z.string().uuid(),
+  policy: OpenClawGuardrailPolicySchema
+});
+var RollbackOpenClawGuardrailPolicyRequestSchema = import_zod.z.object({
+  projectId: import_zod.z.string().uuid(),
+  version: import_zod.z.string().min(1).max(64)
+});
 var ModerationError = class extends Error {
   constructor(message, code, statusCode = 500, details) {
     super(message);
@@ -293,6 +381,8 @@ var WebhookEventTypeSchema = import_zod.z.enum([
   "decision.created",
   "decision.flagged",
   "decision.blocked",
+  "openclaw.guardrail.blocked",
+  "openclaw.guardrail.approval_required",
   "policy.created",
   "policy.updated"
 ]);
@@ -346,13 +436,24 @@ function formatLatency(ms) {
   ModerationError,
   MultiModalCheckRequestSchema,
   MultiModalCheckResponseSchema,
+  OpenClawActionAuthorizeRequestSchema,
+  OpenClawActionAuthorizeResponseSchema,
+  OpenClawActionTypeSchema,
+  OpenClawGuardrailActionSchema,
+  OpenClawGuardrailPolicySchema,
+  OpenClawPermissionSchema,
+  OpenClawSkillSourceSchema,
+  OpenClawSkillVettingRequestSchema,
+  OpenClawSkillVettingResponseSchema,
   OverrideSchema,
   PolicySchema,
   PolicyValidationError,
   ProviderError,
   ProviderNameSchema,
   ReplayRequestSchema,
+  RollbackOpenClawGuardrailPolicyRequestSchema,
   RuleSchema,
+  UpdateOpenClawGuardrailPolicyRequestSchema,
   UseCaseTypeSchema,
   WebhookEndpointSchema,
   WebhookEventTypeSchema,

package/dist/index.d.cts

@@ -735,6 +735,219 @@ declare const ReplayRequestSchema: z.ZodObject<{
     decisionId: string;
 }>;
 type ReplayRequest = z.infer<typeof ReplayRequestSchema>;
+declare const OpenClawSkillSourceSchema: z.ZodEnum<["local", "github", "clawhub", "remote_url"]>;
+type OpenClawSkillSource = z.infer<typeof OpenClawSkillSourceSchema>;
+declare const OpenClawPermissionSchema: z.ZodEnum<["read_file", "write_file", "delete_file", "run_shell", "network_access", "access_secrets"]>;
+type OpenClawPermission = z.infer<typeof OpenClawPermissionSchema>;
+declare const OpenClawActionTypeSchema: z.ZodEnum<["exec", "file_read", "file_write", "network", "env_access", "skill_install"]>;
+type OpenClawActionType = z.infer<typeof OpenClawActionTypeSchema>;
+declare const OpenClawGuardrailActionSchema: z.ZodEnum<["allow", "warn", "flag", "block"]>;
+type OpenClawGuardrailAction = z.infer<typeof OpenClawGuardrailActionSchema>;
+declare const OpenClawSkillVettingRequestSchema: z.ZodObject<{
+    skillId: z.ZodString;
+    name: z.ZodString;
+    source: z.ZodEnum<["local", "github", "clawhub", "remote_url"]>;
+    prompt: z.ZodString;
+    requestedPermissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["read_file", "write_file", "delete_file", "run_shell", "network_access", "access_secrets"]>, "many">>;
+    hasChecksum: z.ZodDefault<z.ZodBoolean>;
+    signedPublisher: z.ZodDefault<z.ZodBoolean>;
+    maintainerReputation: z.ZodDefault<z.ZodEnum<["unknown", "trusted", "untrusted"]>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    skillId: string;
+    source: "local" | "github" | "clawhub" | "remote_url";
+    prompt: string;
+    requestedPermissions: ("read_file" | "write_file" | "delete_file" | "run_shell" | "network_access" | "access_secrets")[];
+    hasChecksum: boolean;
+    signedPublisher: boolean;
+    maintainerReputation: "unknown" | "trusted" | "untrusted";
+    metadata?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+}, {
+    name: string;
+    skillId: string;
+    source: "local" | "github" | "clawhub" | "remote_url";
+    prompt: string;
+    metadata?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+    requestedPermissions?: ("read_file" | "write_file" | "delete_file" | "run_shell" | "network_access" | "access_secrets")[] | undefined;
+    hasChecksum?: boolean | undefined;
+    signedPublisher?: boolean | undefined;
+    maintainerReputation?: "unknown" | "trusted" | "untrusted" | undefined;
+}>;
+type OpenClawSkillVettingRequest = z.infer<typeof OpenClawSkillVettingRequestSchema>;
+declare const OpenClawSkillVettingResponseSchema: z.ZodObject<{
+    decisionId: z.ZodString;
+    action: z.ZodEnum<["allow", "warn", "flag", "block"]>;
+    riskScore: z.ZodNumber;
+    reasons: z.ZodArray<z.ZodString, "many">;
+    categories: z.ZodArray<z.ZodString, "many">;
+    requiresApproval: z.ZodBoolean;
+    requestId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    action: "block" | "warn" | "flag" | "allow";
+    categories: string[];
+    decisionId: string;
+    riskScore: number;
+    reasons: string[];
+    requiresApproval: boolean;
+    requestId?: string | undefined;
+}, {
+    action: "block" | "warn" | "flag" | "allow";
+    categories: string[];
+    decisionId: string;
+    riskScore: number;
+    reasons: string[];
+    requiresApproval: boolean;
+    requestId?: string | undefined;
+}>;
+type OpenClawSkillVettingResponse = z.infer<typeof OpenClawSkillVettingResponseSchema>;
+declare const OpenClawActionAuthorizeRequestSchema: z.ZodObject<{
+    actionType: z.ZodEnum<["exec", "file_read", "file_write", "network", "env_access", "skill_install"]>;
+    command: z.ZodOptional<z.ZodString>;
+    targetPath: z.ZodOptional<z.ZodString>;
+    targetDomain: z.ZodOptional<z.ZodString>;
+    requestedPermissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["read_file", "write_file", "delete_file", "run_shell", "network_access", "access_secrets"]>, "many">>;
+    policy: z.ZodOptional<z.ZodObject<{
+        sensitivePathPrefixes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        networkAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        blockShellPatterns: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        requireApprovalScore: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        sensitivePathPrefixes: string[];
+        networkAllowlist: string[];
+        blockShellPatterns: string[];
+        requireApprovalScore: number;
+    }, {
+        sensitivePathPrefixes?: string[] | undefined;
+        networkAllowlist?: string[] | undefined;
+        blockShellPatterns?: string[] | undefined;
+        requireApprovalScore?: number | undefined;
+    }>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    requestedPermissions: ("read_file" | "write_file" | "delete_file" | "run_shell" | "network_access" | "access_secrets")[];
+    actionType: "exec" | "file_read" | "file_write" | "network" | "env_access" | "skill_install";
+    policy?: {
+        sensitivePathPrefixes: string[];
+        networkAllowlist: string[];
+        blockShellPatterns: string[];
+        requireApprovalScore: number;
+    } | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+    command?: string | undefined;
+    targetPath?: string | undefined;
+    targetDomain?: string | undefined;
+}, {
+    actionType: "exec" | "file_read" | "file_write" | "network" | "env_access" | "skill_install";
+    policy?: {
+        sensitivePathPrefixes?: string[] | undefined;
+        networkAllowlist?: string[] | undefined;
+        blockShellPatterns?: string[] | undefined;
+        requireApprovalScore?: number | undefined;
+    } | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+    requestedPermissions?: ("read_file" | "write_file" | "delete_file" | "run_shell" | "network_access" | "access_secrets")[] | undefined;
+    command?: string | undefined;
+    targetPath?: string | undefined;
+    targetDomain?: string | undefined;
+}>;
+type OpenClawActionAuthorizeRequest = z.infer<typeof OpenClawActionAuthorizeRequestSchema>;
+declare const OpenClawActionAuthorizeResponseSchema: z.ZodObject<{
+    decisionId: z.ZodString;
+    action: z.ZodEnum<["allow", "warn", "flag", "block"]>;
+    riskScore: z.ZodNumber;
+    reasons: z.ZodArray<z.ZodString, "many">;
+    categories: z.ZodArray<z.ZodString, "many">;
+    requiresApproval: z.ZodBoolean;
+    requestId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    action: "block" | "warn" | "flag" | "allow";
+    categories: string[];
+    decisionId: string;
+    riskScore: number;
+    reasons: string[];
+    requiresApproval: boolean;
+    requestId?: string | undefined;
+}, {
+    action: "block" | "warn" | "flag" | "allow";
+    categories: string[];
+    decisionId: string;
+    riskScore: number;
+    reasons: string[];
+    requiresApproval: boolean;
+    requestId?: string | undefined;
+}>;
+type OpenClawActionAuthorizeResponse = z.infer<typeof OpenClawActionAuthorizeResponseSchema>;
+declare const OpenClawGuardrailPolicySchema: z.ZodObject<{
+    sensitivePathPrefixes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    networkAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    blockShellPatterns: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    requireApprovalScore: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    sensitivePathPrefixes: string[];
+    networkAllowlist: string[];
+    blockShellPatterns: string[];
+    requireApprovalScore: number;
+}, {
+    sensitivePathPrefixes?: string[] | undefined;
+    networkAllowlist?: string[] | undefined;
+    blockShellPatterns?: string[] | undefined;
+    requireApprovalScore?: number | undefined;
+}>;
+type OpenClawGuardrailPolicy = z.infer<typeof OpenClawGuardrailPolicySchema>;
+declare const UpdateOpenClawGuardrailPolicyRequestSchema: z.ZodObject<{
+    projectId: z.ZodString;
+    policy: z.ZodObject<{
+        sensitivePathPrefixes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        networkAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        blockShellPatterns: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        requireApprovalScore: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        sensitivePathPrefixes: string[];
+        networkAllowlist: string[];
+        blockShellPatterns: string[];
+        requireApprovalScore: number;
+    }, {
+        sensitivePathPrefixes?: string[] | undefined;
+        networkAllowlist?: string[] | undefined;
+        blockShellPatterns?: string[] | undefined;
+        requireApprovalScore?: number | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    policy: {
+        sensitivePathPrefixes: string[];
+        networkAllowlist: string[];
+        blockShellPatterns: string[];
+        requireApprovalScore: number;
+    };
+    projectId: string;
+}, {
+    policy: {
+        sensitivePathPrefixes?: string[] | undefined;
+        networkAllowlist?: string[] | undefined;
+        blockShellPatterns?: string[] | undefined;
+        requireApprovalScore?: number | undefined;
+    };
+    projectId: string;
+}>;
+type UpdateOpenClawGuardrailPolicyRequest = z.infer<typeof UpdateOpenClawGuardrailPolicyRequestSchema>;
+declare const RollbackOpenClawGuardrailPolicyRequestSchema: z.ZodObject<{
+    projectId: z.ZodString;
+    version: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    version: string;
+    projectId: string;
+}, {
+    version: string;
+    projectId: string;
+}>;
+type RollbackOpenClawGuardrailPolicyRequest = z.infer<typeof RollbackOpenClawGuardrailPolicyRequestSchema>;
 declare class ModerationError extends Error {
     code: string;
     statusCode: number;
@@ -747,19 +960,19 @@ declare class PolicyValidationError extends ModerationError {
 declare class ProviderError extends ModerationError {
     constructor(message: string, provider: ProviderName, details?: Record<string, unknown>);
 }
-declare const WebhookEventTypeSchema: z.ZodEnum<["decision.created", "decision.flagged", "decision.blocked", "policy.created", "policy.updated"]>;
+declare const WebhookEventTypeSchema: z.ZodEnum<["decision.created", "decision.flagged", "decision.blocked", "openclaw.guardrail.blocked", "openclaw.guardrail.approval_required", "policy.created", "policy.updated"]>;
 type WebhookEventType = z.infer<typeof WebhookEventTypeSchema>;
 declare const WebhookEndpointSchema: z.ZodObject<{
     url: z.ZodEffects<z.ZodString, string, string>;
-    events: z.ZodArray<z.ZodEnum<["decision.created", "decision.flagged", "decision.blocked", "policy.created", "policy.updated"]>, "many">;
+    events: z.ZodArray<z.ZodEnum<["decision.created", "decision.flagged", "decision.blocked", "openclaw.guardrail.blocked", "openclaw.guardrail.approval_required", "policy.created", "policy.updated"]>, "many">;
     description: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     url: string;
-    events: ("decision.created" | "decision.flagged" | "decision.blocked" | "policy.created" | "policy.updated")[];
+    events: ("decision.created" | "decision.flagged" | "decision.blocked" | "openclaw.guardrail.blocked" | "openclaw.guardrail.approval_required" | "policy.created" | "policy.updated")[];
     description?: string | undefined;
 }, {
     url: string;
-    events: ("decision.created" | "decision.flagged" | "decision.blocked" | "policy.created" | "policy.updated")[];
+    events: ("decision.created" | "decision.flagged" | "decision.blocked" | "openclaw.guardrail.blocked" | "openclaw.guardrail.approval_required" | "policy.created" | "policy.updated")[];
     description?: string | undefined;
 }>;
 type WebhookEndpoint = z.infer<typeof WebhookEndpointSchema>;
@@ -802,4 +1015,4 @@ declare function formatCost(cost: number): string;
  */
 declare function formatLatency(ms: number): string;
 
-export { type Action, ActionSchema, type Category, CategorySchema, type CheckRequest, CheckRequestSchema, type CheckResponse, CheckResponseSchema, type ContentItemResult, ContentItemResultSchema, type ContentType, ContentTypeSchema, type Decision, DecisionSchema, type FallbackConfig, FallbackConfigSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, type ModerationContext, ModerationError, type MultiModalCheckRequest, MultiModalCheckRequestSchema, type MultiModalCheckResponse, MultiModalCheckResponseSchema, type Override, OverrideSchema, type Policy, PolicySchema, PolicyValidationError, ProviderError, type ProviderName, ProviderNameSchema, type ProviderResult, type ReplayRequest, ReplayRequestSchema, type Rule, RuleSchema, type UseCaseType, UseCaseTypeSchema, type WebhookEndpoint, WebhookEndpointSchema, type WebhookEventType, WebhookEventTypeSchema, calculatePolicyVersion, formatCost, formatLatency, generateRequestId, generateUUID, hashContent };
+export { type Action, ActionSchema, type Category, CategorySchema, type CheckRequest, CheckRequestSchema, type CheckResponse, CheckResponseSchema, type ContentItemResult, ContentItemResultSchema, type ContentType, ContentTypeSchema, type Decision, DecisionSchema, type FallbackConfig, FallbackConfigSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, type ModerationContext, ModerationError, type MultiModalCheckRequest, MultiModalCheckRequestSchema, type MultiModalCheckResponse, MultiModalCheckResponseSchema, type OpenClawActionAuthorizeRequest, OpenClawActionAuthorizeRequestSchema, type OpenClawActionAuthorizeResponse, OpenClawActionAuthorizeResponseSchema, type OpenClawActionType, OpenClawActionTypeSchema, type OpenClawGuardrailAction, OpenClawGuardrailActionSchema, type OpenClawGuardrailPolicy, OpenClawGuardrailPolicySchema, type OpenClawPermission, OpenClawPermissionSchema, type OpenClawSkillSource, OpenClawSkillSourceSchema, type OpenClawSkillVettingRequest, OpenClawSkillVettingRequestSchema, type OpenClawSkillVettingResponse, OpenClawSkillVettingResponseSchema, type Override, OverrideSchema, type Policy, PolicySchema, PolicyValidationError, ProviderError, type ProviderName, ProviderNameSchema, type ProviderResult, type ReplayRequest, ReplayRequestSchema, type RollbackOpenClawGuardrailPolicyRequest, RollbackOpenClawGuardrailPolicyRequestSchema, type Rule, RuleSchema, type UpdateOpenClawGuardrailPolicyRequest, UpdateOpenClawGuardrailPolicyRequestSchema, type UseCaseType, UseCaseTypeSchema, type WebhookEndpoint, WebhookEndpointSchema, type WebhookEventType, WebhookEventTypeSchema, calculatePolicyVersion, formatCost, formatLatency, generateRequestId, generateUUID, hashContent };

package/dist/index.d.ts

@@ -735,6 +735,219 @@ declare const ReplayRequestSchema: z.ZodObject<{
     decisionId: string;
 }>;
 type ReplayRequest = z.infer<typeof ReplayRequestSchema>;
+declare const OpenClawSkillSourceSchema: z.ZodEnum<["local", "github", "clawhub", "remote_url"]>;
+type OpenClawSkillSource = z.infer<typeof OpenClawSkillSourceSchema>;
+declare const OpenClawPermissionSchema: z.ZodEnum<["read_file", "write_file", "delete_file", "run_shell", "network_access", "access_secrets"]>;
+type OpenClawPermission = z.infer<typeof OpenClawPermissionSchema>;
+declare const OpenClawActionTypeSchema: z.ZodEnum<["exec", "file_read", "file_write", "network", "env_access", "skill_install"]>;
+type OpenClawActionType = z.infer<typeof OpenClawActionTypeSchema>;
+declare const OpenClawGuardrailActionSchema: z.ZodEnum<["allow", "warn", "flag", "block"]>;
+type OpenClawGuardrailAction = z.infer<typeof OpenClawGuardrailActionSchema>;
+declare const OpenClawSkillVettingRequestSchema: z.ZodObject<{
+    skillId: z.ZodString;
+    name: z.ZodString;
+    source: z.ZodEnum<["local", "github", "clawhub", "remote_url"]>;
+    prompt: z.ZodString;
+    requestedPermissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["read_file", "write_file", "delete_file", "run_shell", "network_access", "access_secrets"]>, "many">>;
+    hasChecksum: z.ZodDefault<z.ZodBoolean>;
+    signedPublisher: z.ZodDefault<z.ZodBoolean>;
+    maintainerReputation: z.ZodDefault<z.ZodEnum<["unknown", "trusted", "untrusted"]>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    skillId: string;
+    source: "local" | "github" | "clawhub" | "remote_url";
+    prompt: string;
+    requestedPermissions: ("read_file" | "write_file" | "delete_file" | "run_shell" | "network_access" | "access_secrets")[];
+    hasChecksum: boolean;
+    signedPublisher: boolean;
+    maintainerReputation: "unknown" | "trusted" | "untrusted";
+    metadata?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+}, {
+    name: string;
+    skillId: string;
+    source: "local" | "github" | "clawhub" | "remote_url";
+    prompt: string;
+    metadata?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+    requestedPermissions?: ("read_file" | "write_file" | "delete_file" | "run_shell" | "network_access" | "access_secrets")[] | undefined;
+    hasChecksum?: boolean | undefined;
+    signedPublisher?: boolean | undefined;
+    maintainerReputation?: "unknown" | "trusted" | "untrusted" | undefined;
+}>;
+type OpenClawSkillVettingRequest = z.infer<typeof OpenClawSkillVettingRequestSchema>;
+declare const OpenClawSkillVettingResponseSchema: z.ZodObject<{
+    decisionId: z.ZodString;
+    action: z.ZodEnum<["allow", "warn", "flag", "block"]>;
+    riskScore: z.ZodNumber;
+    reasons: z.ZodArray<z.ZodString, "many">;
+    categories: z.ZodArray<z.ZodString, "many">;
+    requiresApproval: z.ZodBoolean;
+    requestId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    action: "block" | "warn" | "flag" | "allow";
+    categories: string[];
+    decisionId: string;
+    riskScore: number;
+    reasons: string[];
+    requiresApproval: boolean;
+    requestId?: string | undefined;
+}, {
+    action: "block" | "warn" | "flag" | "allow";
+    categories: string[];
+    decisionId: string;
+    riskScore: number;
+    reasons: string[];
+    requiresApproval: boolean;
+    requestId?: string | undefined;
+}>;
+type OpenClawSkillVettingResponse = z.infer<typeof OpenClawSkillVettingResponseSchema>;
+declare const OpenClawActionAuthorizeRequestSchema: z.ZodObject<{
+    actionType: z.ZodEnum<["exec", "file_read", "file_write", "network", "env_access", "skill_install"]>;
+    command: z.ZodOptional<z.ZodString>;
+    targetPath: z.ZodOptional<z.ZodString>;
+    targetDomain: z.ZodOptional<z.ZodString>;
+    requestedPermissions: z.ZodDefault<z.ZodArray<z.ZodEnum<["read_file", "write_file", "delete_file", "run_shell", "network_access", "access_secrets"]>, "many">>;
+    policy: z.ZodOptional<z.ZodObject<{
+        sensitivePathPrefixes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        networkAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        blockShellPatterns: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        requireApprovalScore: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        sensitivePathPrefixes: string[];
+        networkAllowlist: string[];
+        blockShellPatterns: string[];
+        requireApprovalScore: number;
+    }, {
+        sensitivePathPrefixes?: string[] | undefined;
+        networkAllowlist?: string[] | undefined;
+        blockShellPatterns?: string[] | undefined;
+        requireApprovalScore?: number | undefined;
+    }>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    requestId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    requestedPermissions: ("read_file" | "write_file" | "delete_file" | "run_shell" | "network_access" | "access_secrets")[];
+    actionType: "exec" | "file_read" | "file_write" | "network" | "env_access" | "skill_install";
+    policy?: {
+        sensitivePathPrefixes: string[];
+        networkAllowlist: string[];
+        blockShellPatterns: string[];
+        requireApprovalScore: number;
+    } | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+    command?: string | undefined;
+    targetPath?: string | undefined;
+    targetDomain?: string | undefined;
+}, {
+    actionType: "exec" | "file_read" | "file_write" | "network" | "env_access" | "skill_install";
+    policy?: {
+        sensitivePathPrefixes?: string[] | undefined;
+        networkAllowlist?: string[] | undefined;
+        blockShellPatterns?: string[] | undefined;
+        requireApprovalScore?: number | undefined;
+    } | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    requestId?: string | undefined;
+    requestedPermissions?: ("read_file" | "write_file" | "delete_file" | "run_shell" | "network_access" | "access_secrets")[] | undefined;
+    command?: string | undefined;
+    targetPath?: string | undefined;
+    targetDomain?: string | undefined;
+}>;
+type OpenClawActionAuthorizeRequest = z.infer<typeof OpenClawActionAuthorizeRequestSchema>;
+declare const OpenClawActionAuthorizeResponseSchema: z.ZodObject<{
+    decisionId: z.ZodString;
+    action: z.ZodEnum<["allow", "warn", "flag", "block"]>;
+    riskScore: z.ZodNumber;
+    reasons: z.ZodArray<z.ZodString, "many">;
+    categories: z.ZodArray<z.ZodString, "many">;
+    requiresApproval: z.ZodBoolean;
+    requestId: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    action: "block" | "warn" | "flag" | "allow";
+    categories: string[];
+    decisionId: string;
+    riskScore: number;
+    reasons: string[];
+    requiresApproval: boolean;
+    requestId?: string | undefined;
+}, {
+    action: "block" | "warn" | "flag" | "allow";
+    categories: string[];
+    decisionId: string;
+    riskScore: number;
+    reasons: string[];
+    requiresApproval: boolean;
+    requestId?: string | undefined;
+}>;
+type OpenClawActionAuthorizeResponse = z.infer<typeof OpenClawActionAuthorizeResponseSchema>;
+declare const OpenClawGuardrailPolicySchema: z.ZodObject<{
+    sensitivePathPrefixes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    networkAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    blockShellPatterns: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    requireApprovalScore: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    sensitivePathPrefixes: string[];
+    networkAllowlist: string[];
+    blockShellPatterns: string[];
+    requireApprovalScore: number;
+}, {
+    sensitivePathPrefixes?: string[] | undefined;
+    networkAllowlist?: string[] | undefined;
+    blockShellPatterns?: string[] | undefined;
+    requireApprovalScore?: number | undefined;
+}>;
+type OpenClawGuardrailPolicy = z.infer<typeof OpenClawGuardrailPolicySchema>;
+declare const UpdateOpenClawGuardrailPolicyRequestSchema: z.ZodObject<{
+    projectId: z.ZodString;
+    policy: z.ZodObject<{
+        sensitivePathPrefixes: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        networkAllowlist: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        blockShellPatterns: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        requireApprovalScore: z.ZodDefault<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        sensitivePathPrefixes: string[];
+        networkAllowlist: string[];
+        blockShellPatterns: string[];
+        requireApprovalScore: number;
+    }, {
+        sensitivePathPrefixes?: string[] | undefined;
+        networkAllowlist?: string[] | undefined;
+        blockShellPatterns?: string[] | undefined;
+        requireApprovalScore?: number | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    policy: {
+        sensitivePathPrefixes: string[];
+        networkAllowlist: string[];
+        blockShellPatterns: string[];
+        requireApprovalScore: number;
+    };
+    projectId: string;
+}, {
+    policy: {
+        sensitivePathPrefixes?: string[] | undefined;
+        networkAllowlist?: string[] | undefined;
+        blockShellPatterns?: string[] | undefined;
+        requireApprovalScore?: number | undefined;
+    };
+    projectId: string;
+}>;
+type UpdateOpenClawGuardrailPolicyRequest = z.infer<typeof UpdateOpenClawGuardrailPolicyRequestSchema>;
+declare const RollbackOpenClawGuardrailPolicyRequestSchema: z.ZodObject<{
+    projectId: z.ZodString;
+    version: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    version: string;
+    projectId: string;
+}, {
+    version: string;
+    projectId: string;
+}>;
+type RollbackOpenClawGuardrailPolicyRequest = z.infer<typeof RollbackOpenClawGuardrailPolicyRequestSchema>;
 declare class ModerationError extends Error {
     code: string;
     statusCode: number;
@@ -747,19 +960,19 @@ declare class PolicyValidationError extends ModerationError {
 declare class ProviderError extends ModerationError {
     constructor(message: string, provider: ProviderName, details?: Record<string, unknown>);
 }
-declare const WebhookEventTypeSchema: z.ZodEnum<["decision.created", "decision.flagged", "decision.blocked", "policy.created", "policy.updated"]>;
+declare const WebhookEventTypeSchema: z.ZodEnum<["decision.created", "decision.flagged", "decision.blocked", "openclaw.guardrail.blocked", "openclaw.guardrail.approval_required", "policy.created", "policy.updated"]>;
 type WebhookEventType = z.infer<typeof WebhookEventTypeSchema>;
 declare const WebhookEndpointSchema: z.ZodObject<{
     url: z.ZodEffects<z.ZodString, string, string>;
-    events: z.ZodArray<z.ZodEnum<["decision.created", "decision.flagged", "decision.blocked", "policy.created", "policy.updated"]>, "many">;
+    events: z.ZodArray<z.ZodEnum<["decision.created", "decision.flagged", "decision.blocked", "openclaw.guardrail.blocked", "openclaw.guardrail.approval_required", "policy.created", "policy.updated"]>, "many">;
     description: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     url: string;
-    events: ("decision.created" | "decision.flagged" | "decision.blocked" | "policy.created" | "policy.updated")[];
+    events: ("decision.created" | "decision.flagged" | "decision.blocked" | "openclaw.guardrail.blocked" | "openclaw.guardrail.approval_required" | "policy.created" | "policy.updated")[];
     description?: string | undefined;
 }, {
     url: string;
-    events: ("decision.created" | "decision.flagged" | "decision.blocked" | "policy.created" | "policy.updated")[];
+    events: ("decision.created" | "decision.flagged" | "decision.blocked" | "openclaw.guardrail.blocked" | "openclaw.guardrail.approval_required" | "policy.created" | "policy.updated")[];
     description?: string | undefined;
 }>;
 type WebhookEndpoint = z.infer<typeof WebhookEndpointSchema>;
@@ -802,4 +1015,4 @@ declare function formatCost(cost: number): string;
  */
 declare function formatLatency(ms: number): string;
 
-export { type Action, ActionSchema, type Category, CategorySchema, type CheckRequest, CheckRequestSchema, type CheckResponse, CheckResponseSchema, type ContentItemResult, ContentItemResultSchema, type ContentType, ContentTypeSchema, type Decision, DecisionSchema, type FallbackConfig, FallbackConfigSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, type ModerationContext, ModerationError, type MultiModalCheckRequest, MultiModalCheckRequestSchema, type MultiModalCheckResponse, MultiModalCheckResponseSchema, type Override, OverrideSchema, type Policy, PolicySchema, PolicyValidationError, ProviderError, type ProviderName, ProviderNameSchema, type ProviderResult, type ReplayRequest, ReplayRequestSchema, type Rule, RuleSchema, type UseCaseType, UseCaseTypeSchema, type WebhookEndpoint, WebhookEndpointSchema, type WebhookEventType, WebhookEventTypeSchema, calculatePolicyVersion, formatCost, formatLatency, generateRequestId, generateUUID, hashContent };
+export { type Action, ActionSchema, type Category, CategorySchema, type CheckRequest, CheckRequestSchema, type CheckResponse, CheckResponseSchema, type ContentItemResult, ContentItemResultSchema, type ContentType, ContentTypeSchema, type Decision, DecisionSchema, type FallbackConfig, FallbackConfigSchema, type JsonArray, type JsonObject, type JsonPrimitive, type JsonValue, type ModerationContext, ModerationError, type MultiModalCheckRequest, MultiModalCheckRequestSchema, type MultiModalCheckResponse, MultiModalCheckResponseSchema, type OpenClawActionAuthorizeRequest, OpenClawActionAuthorizeRequestSchema, type OpenClawActionAuthorizeResponse, OpenClawActionAuthorizeResponseSchema, type OpenClawActionType, OpenClawActionTypeSchema, type OpenClawGuardrailAction, OpenClawGuardrailActionSchema, type OpenClawGuardrailPolicy, OpenClawGuardrailPolicySchema, type OpenClawPermission, OpenClawPermissionSchema, type OpenClawSkillSource, OpenClawSkillSourceSchema, type OpenClawSkillVettingRequest, OpenClawSkillVettingRequestSchema, type OpenClawSkillVettingResponse, OpenClawSkillVettingResponseSchema, type Override, OverrideSchema, type Policy, PolicySchema, PolicyValidationError, ProviderError, type ProviderName, ProviderNameSchema, type ProviderResult, type ReplayRequest, ReplayRequestSchema, type RollbackOpenClawGuardrailPolicyRequest, RollbackOpenClawGuardrailPolicyRequestSchema, type Rule, RuleSchema, type UpdateOpenClawGuardrailPolicyRequest, UpdateOpenClawGuardrailPolicyRequestSchema, type UseCaseType, UseCaseTypeSchema, type WebhookEndpoint, WebhookEndpointSchema, type WebhookEventType, WebhookEventTypeSchema, calculatePolicyVersion, formatCost, formatLatency, generateRequestId, generateUUID, hashContent };

package/dist/index.js

@@ -206,6 +206,83 @@ var ReplayRequestSchema = z.object({
   decisionId: z.string().uuid(),
   policyId: z.string()
 });
+var OpenClawSkillSourceSchema = z.enum(["local", "github", "clawhub", "remote_url"]);
+var OpenClawPermissionSchema = z.enum([
+  "read_file",
+  "write_file",
+  "delete_file",
+  "run_shell",
+  "network_access",
+  "access_secrets"
+]);
+var OpenClawActionTypeSchema = z.enum([
+  "exec",
+  "file_read",
+  "file_write",
+  "network",
+  "env_access",
+  "skill_install"
+]);
+var OpenClawGuardrailActionSchema = z.enum(["allow", "warn", "flag", "block"]);
+var OpenClawSkillVettingRequestSchema = z.object({
+  skillId: z.string().min(1).max(200),
+  name: z.string().min(1).max(200),
+  source: OpenClawSkillSourceSchema,
+  prompt: z.string().min(1).max(5e4),
+  requestedPermissions: z.array(OpenClawPermissionSchema).max(20).default([]),
+  hasChecksum: z.boolean().default(false),
+  signedPublisher: z.boolean().default(false),
+  maintainerReputation: z.enum(["unknown", "trusted", "untrusted"]).default("unknown"),
+  metadata: z.record(z.unknown()).optional(),
+  requestId: z.string().optional()
+});
+var OpenClawSkillVettingResponseSchema = z.object({
+  decisionId: z.string().uuid(),
+  action: OpenClawGuardrailActionSchema,
+  riskScore: z.number().int().min(0).max(100),
+  reasons: z.array(z.string()),
+  categories: z.array(z.string()),
+  requiresApproval: z.boolean(),
+  requestId: z.string().optional()
+});
+var OpenClawActionAuthorizeRequestSchema = z.object({
+  actionType: OpenClawActionTypeSchema,
+  command: z.string().max(5e3).optional(),
+  targetPath: z.string().max(2e3).optional(),
+  targetDomain: z.string().max(500).optional(),
+  requestedPermissions: z.array(OpenClawPermissionSchema).max(20).default([]),
+  policy: z.object({
+    sensitivePathPrefixes: z.array(z.string().min(1).max(500)).max(200).default([]),
+    networkAllowlist: z.array(z.string().min(1).max(200)).max(500).default([]),
+    blockShellPatterns: z.array(z.string().min(1).max(200)).max(200).default([]),
+    requireApprovalScore: z.number().int().min(0).max(100).default(40)
+  }).optional(),
+  metadata: z.record(z.unknown()).optional(),
+  requestId: z.string().optional()
+});
+var OpenClawActionAuthorizeResponseSchema = z.object({
+  decisionId: z.string().uuid(),
+  action: OpenClawGuardrailActionSchema,
+  riskScore: z.number().int().min(0).max(100),
+  reasons: z.array(z.string()),
+  categories: z.array(z.string()),
+  requiresApproval: z.boolean(),
+  requestId: z.string().optional()
+});
+var OpenClawGuardrailPolicySchema = z.object({
+  sensitivePathPrefixes: z.array(z.string().min(1).max(500)).max(200).default([]),
+  networkAllowlist: z.array(z.string().min(1).max(200)).max(500).default([]),
+  blockShellPatterns: z.array(z.string().min(1).max(200)).max(200).default([]),
+  requireApprovalScore: z.number().int().min(0).max(100).default(40)
+});
+var UpdateOpenClawGuardrailPolicyRequestSchema = z.object({
+  projectId: z.string().uuid(),
+  policy: OpenClawGuardrailPolicySchema
+});
+var RollbackOpenClawGuardrailPolicyRequestSchema = z.object({
+  projectId: z.string().uuid(),
+  version: z.string().min(1).max(64)
+});
 var ModerationError = class extends Error {
   constructor(message, code, statusCode = 500, details) {
     super(message);
@@ -231,6 +308,8 @@ var WebhookEventTypeSchema = z.enum([
   "decision.created",
   "decision.flagged",
   "decision.blocked",
+  "openclaw.guardrail.blocked",
+  "openclaw.guardrail.approval_required",
   "policy.created",
   "policy.updated"
 ]);
@@ -283,13 +362,24 @@ export {
   ModerationError,
   MultiModalCheckRequestSchema,
   MultiModalCheckResponseSchema,
+  OpenClawActionAuthorizeRequestSchema,
+  OpenClawActionAuthorizeResponseSchema,
+  OpenClawActionTypeSchema,
+  OpenClawGuardrailActionSchema,
+  OpenClawGuardrailPolicySchema,
+  OpenClawPermissionSchema,
+  OpenClawSkillSourceSchema,
+  OpenClawSkillVettingRequestSchema,
+  OpenClawSkillVettingResponseSchema,
   OverrideSchema,
   PolicySchema,
   PolicyValidationError,
   ProviderError,
   ProviderNameSchema,
   ReplayRequestSchema,
+  RollbackOpenClawGuardrailPolicyRequestSchema,
   RuleSchema,
+  UpdateOpenClawGuardrailPolicyRequestSchema,
   UseCaseTypeSchema,
   WebhookEndpointSchema,
   WebhookEventTypeSchema,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vettly/shared",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "description": "Shared TypeScript types for Vettly decision infrastructure",
   "type": "module",
   "main": "./dist/index.js",
@@ -33,7 +33,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://github.com/nextauralabs/vettly-docs.git",
+    "url": "https://github.com/nextauralabs/vettly.git",
     "directory": "packages/shared"
   },
   "homepage": "https://vettly.dev",
@@ -41,7 +41,7 @@
     "access": "public"
   },
   "bugs": {
-    "url": "https://github.com/nextauralabs/vettly-docs/issues"
+    "url": "https://github.com/nextauralabs/vettly/issues"
   },
   "dependencies": {
     "zod": "^3.22.4"