freshcrate
Home > AI Agents > veto-sdk

veto-sdk

A guardrail system that intercepts and validates AI agent tool calls

agentaianthropicguardrailllmnpmopenaisafetytool-calls

Description

A guardrail system that intercepts and validates AI agent tool calls

Release History

VersionChangesUrgencyDate
2.5.1Imported from npm (2.5.1)Low4/21/2026
sdk-py@0.14.0See [CHANGELOG](https://github.com/PlawIO/veto/blob/master/packages/sdk-python/CHANGELOG.md)Medium4/11/2026
veto-sdk@2.5.1### Patch Changes - [#190](https://github.com/PlawIO/veto/pull/190) [`c76d142`](https://github.com/PlawIO/veto/commit/c76d142d8273a0a3ea526847c8ed71ebe29c0717) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Fix MCP connect no-op rewrites and Python admin SSE streaming behavior. - [#189](https://github.com/PlawIO/veto/pull/189) [`95c6f1e`](https://github.com/PlawIO/veto/commit/95c6f1eab3e203343a51731ada996c1140cc1bb1) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add `veto init --cMedium4/11/2026
openclaw-veto@0.2.2### Patch Changes - Updated dependencies \[[`c76d142`](https://github.com/PlawIO/veto/commit/c76d142d8273a0a3ea526847c8ed71ebe29c0717), [`95c6f1e`](https://github.com/PlawIO/veto/commit/95c6f1eab3e203343a51731ada996c1140cc1bb1)]: - veto-sdk@2.5.1 Medium4/11/2026
veto-cli@1.16.11### Patch Changes - Updated dependencies \[[`c76d142`](https://github.com/PlawIO/veto/commit/c76d142d8273a0a3ea526847c8ed71ebe29c0717), [`95c6f1e`](https://github.com/PlawIO/veto/commit/95c6f1eab3e203343a51731ada996c1140cc1bb1)]: - veto-sdk@2.5.1 Medium4/11/2026
sdk-py@0.13.0See [CHANGELOG](https://github.com/PlawIO/veto/blob/master/packages/sdk-python/CHANGELOG.md)Medium4/10/2026
veto-cli@1.16.10### Patch Changes - Updated dependencies \[[`3d9c1ec`](https://github.com/PlawIO/veto/commit/3d9c1ec2381d7fb201d636a0715eeb5337d2a162), [`dfa6240`](https://github.com/PlawIO/veto/commit/dfa6240f8d932473bc9c5e4d2c748811c4f6881d), [`15843f1`](https://github.com/PlawIO/veto/commit/15843f13d29fab6eee27353637b369049632e497)]: - veto-sdk@2.5.0 Medium4/10/2026
openclaw-veto@0.2.1### Patch Changes - Updated dependencies \[[`3d9c1ec`](https://github.com/PlawIO/veto/commit/3d9c1ec2381d7fb201d636a0715eeb5337d2a162), [`dfa6240`](https://github.com/PlawIO/veto/commit/dfa6240f8d932473bc9c5e4d2c748811c4f6881d), [`15843f1`](https://github.com/PlawIO/veto/commit/15843f13d29fab6eee27353637b369049632e497)]: - veto-sdk@2.5.0 Medium4/10/2026
veto-sdk@2.5.0### Minor Changes - [#187](https://github.com/PlawIO/veto/pull/187) [`15843f1`](https://github.com/PlawIO/veto/commit/15843f13d29fab6eee27353637b369049632e497) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add `veto mcp connect` command for persisting MCP client configuration, supporting both local gateway and Veto Cloud endpoints. ### Patch Changes - [#186](https://github.com/PlawIO/veto/pull/186) [`3d9c1ec`](https://github.com/PlawIO/veto/commit/3d9c1ec2381d7fb201d636a0715eeb5337d2Medium4/10/2026
veto-bash@0.2.0### Minor Changes - [#178](https://github.com/PlawIO/veto/pull/178) [`00cfb5e`](https://github.com/PlawIO/veto/commit/00cfb5e76465b05c7627ea260ff0641497bd0d24) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Re-scope `veto-bash` to a Rust-first guarded bash runtime with native hot-path bash shadowing, local deterministic policy evaluation, SWR cloud policy cache refresh, approval polling, audit spooling, and MCP `serve` / `init` support. Medium4/10/2026
veto-cli@1.16.9### Patch Changes - Updated dependencies \[[`c38f704`](https://github.com/PlawIO/veto/commit/c38f70449c598efab837964b9a084a1993788c8c), [`82549f9`](https://github.com/PlawIO/veto/commit/82549f98f8765e9fb16ddbbc4fdf87ba9cb8d2f7)]: - veto-sdk@2.4.0 Medium4/10/2026
openclaw-veto@0.2.0### Minor Changes - [#180](https://github.com/PlawIO/veto/pull/180) [`82549f9`](https://github.com/PlawIO/veto/commit/82549f98f8765e9fb16ddbbc4fdf87ba9cb8d2f7) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add OpenClaw integration hooks to Veto SDK and publishable openclaw-veto plugin ### Patch Changes - Updated dependencies \[[`c38f704`](https://github.com/PlawIO/veto/commit/c38f70449c598efab837964b9a084a1993788c8c), [`82549f9`](https://github.com/PlawIO/veto/commit/82549f98f8765e9fMedium4/10/2026
veto-sdk@2.4.0### Minor Changes - [#179](https://github.com/PlawIO/veto/pull/179) [`c38f704`](https://github.com/PlawIO/veto/commit/c38f70449c598efab837964b9a084a1993788c8c) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add @veto/crypto-trading policy pack with consumer-grade trading guardrails - [#180](https://github.com/PlawIO/veto/pull/180) [`82549f9`](https://github.com/PlawIO/veto/commit/82549f98f8765e9fb16ddbbc4fdf87ba9cb8d2f7) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add OpenClaw iMedium4/10/2026
veto-cli@1.16.8### Patch Changes - Updated dependencies \[[`8c5e643`](https://github.com/PlawIO/veto/commit/8c5e643f7090edeb387ac1d50156d9cac044f20e), [`0e102a8`](https://github.com/PlawIO/veto/commit/0e102a8e1deae477aed8ba78476f486a806959e6)]: - veto-sdk@2.3.0 Medium4/6/2026
veto-sdk@2.3.0### Minor Changes - [#173](https://github.com/PlawIO/veto/pull/173) [`0e102a8`](https://github.com/PlawIO/veto/commit/0e102a8e1deae477aed8ba78476f486a806959e6) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add rate limiting (in-memory + Redis), audit chain, OTEL tracing, SSE proxy for OpenAI/Anthropic, VetoAdmin client, and YAML test runner. Port rate limiting, audit, OTEL, and test runner to Python SDK. Align cross-SDK behavior for case-insensitive conditions and fail-closed malformed cMedium4/6/2026
sdk-py@0.12.1See [CHANGELOG](https://github.com/PlawIO/veto/blob/master/packages/sdk-python/CHANGELOG.md)Medium4/4/2026
veto-sdk@2.2.1### Patch Changes - [#169](https://github.com/PlawIO/veto/pull/169) [`daa2464`](https://github.com/PlawIO/veto/commit/daa2464ca26481ffc2d7bd98864385f75d428286) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Harden SDK security: fix ReDoS in regex evaluator, fail-closed malformed conditions, prototype chain traversal guards, bounded caches, evaluator consistency alignment, and eliminate all npm audit vulnerabilities Medium4/4/2026
veto-cli@1.16.7### Patch Changes - Updated dependencies \[[`daa2464`](https://github.com/PlawIO/veto/commit/daa2464ca26481ffc2d7bd98864385f75d428286)]: - veto-sdk@2.2.1 Medium4/4/2026
veto-cli@1.16.3## Highlights - update the CLI to consume `veto-sdk@2.0.0` - ship the local runtime policy release through the CLI package lineLow3/14/2026
veto-sdk@2.0.0## Highlights - add local runtime policy reload support for SDK consumers - add richer local guard evaluation context with reserved `arguments`, `budget`, `portfolio`, and `market` namespaces - apply most-restrictive local rule precedence and support `percent_of` budget conditions in generated trading policiesLow3/14/2026
veto-sdk@1.17.0### Minor Changes - [#146](https://github.com/VulnZap/veto/pull/146) [`69af93e`](https://github.com/VulnZap/veto/commit/69af93e47886394a92f6000a1ab4585b00d0fd94) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add MCP gateway CLI commands (`veto mcp serve`, `veto mcp doctor`, `veto mcp init`) and harden transport, URL, and API key validation for safer defaults. Low2/26/2026
veto-cli@1.16.2### Patch Changes - [#146](https://github.com/VulnZap/veto/pull/146) [`69af93e`](https://github.com/VulnZap/veto/commit/69af93e47886394a92f6000a1ab4585b00d0fd94) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add MCP gateway CLI commands (`veto mcp serve`, `veto mcp doctor`, `veto mcp init`) and harden transport, URL, and API key validation for safer defaults. - Updated dependencies \[[`69af93e`](https://github.com/VulnZap/veto/commit/69af93e47886394a92f6000a1ab4585b00d0fd94)]: - Low2/26/2026
veto-sdk@1.16.1### Patch Changes - [#144](https://github.com/VulnZap/veto/pull/144) [`1f4eca1`](https://github.com/VulnZap/veto/commit/1f4eca107a62d7fe1a2490e149d45c1ab8a95513) Thanks [@yazcaleb](https://github.com/yazcaleb)! - fix(cli): lazy-load Studio renderers so Ink import failures fall back to ANSI instead of crashing on startup (for example on Node 22.12). Low2/25/2026
veto-cli@1.16.1### Patch Changes - [#144](https://github.com/VulnZap/veto/pull/144) [`1f4eca1`](https://github.com/VulnZap/veto/commit/1f4eca107a62d7fe1a2490e149d45c1ab8a95513) Thanks [@yazcaleb](https://github.com/yazcaleb)! - fix(cli): lazy-load Studio renderers so Ink import failures fall back to ANSI instead of crashing on startup (for example on Node 22.12). - Updated dependencies \[[`1f4eca1`](https://github.com/VulnZap/veto/commit/1f4eca107a62d7fe1a2490e149d45c1ab8a95513)]: - veto-sdk@1.16.1Low2/25/2026
veto-cli@1.16.0### Minor Changes - [#142](https://github.com/VulnZap/veto/pull/142) [`e0b1fdc`](https://github.com/VulnZap/veto/commit/e0b1fdc1a26c627cf8736b79ca8d83a60dfdead0) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Launch unified CLI foundations with a new canonical `veto-cli` package, Ink-first Studio runtime on Node, and first-class headless commands. Highlights: - add shared CLI runner used by both `veto-cli` and `veto-sdk` compatibility path - make Studio default for `vetoLow2/25/2026
veto-sdk@1.16.0### Minor Changes - [#142](https://github.com/VulnZap/veto/pull/142) [`e0b1fdc`](https://github.com/VulnZap/veto/commit/e0b1fdc1a26c627cf8736b79ca8d83a60dfdead0) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Launch unified CLI foundations with a new canonical `veto-cli` package, Ink-first Studio runtime on Node, and first-class headless commands. Highlights: - add shared CLI runner used by both `veto-cli` and `veto-sdk` compatibility path - make Studio default for `vetoLow2/25/2026
veto-sdk@1.15.1### Patch Changes - [#140](https://github.com/VulnZap/veto/pull/140) [`d9e05b5`](https://github.com/VulnZap/veto/commit/d9e05b516eaedb902c6d20c9071bc41a874e4ed5) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Fix Studio runtime behavior by shipping `@opentui/core` as a runtime dependency and correcting CLI version detection under `npx`. Low2/25/2026
veto-sdk@1.15.0### Minor Changes - [#138](https://github.com/VulnZap/veto/pull/138) [`489c4e8`](https://github.com/VulnZap/veto/commit/489c4e8bd07b1e9ee1aeb5033e7c085042183cb5) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Launch Veto Studio as the default interactive experience for `veto repl` and `veto --repl`, while preserving legacy line REPL compatibility behind `--legacy`. ### Added - New full-screen Studio workflow with keyboard-first navigation, command palette, policy wizard, simulLow2/25/2026
veto-sdk@1.14.0### Minor Changes - [#135](https://github.com/VulnZap/veto/pull/135) [`d48c9dd`](https://github.com/VulnZap/veto/commit/d48c9dd2fb156192fa794dfc4fa4cc7a42a34e65) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Fix the CLI agent init typings and add the missing `picocolors` dependency for the new CLI color utilities. Low2/25/2026
veto-sdk@1.13.0### Minor Changes - [#131](https://github.com/VulnZap/veto/pull/131) [`40b7552`](https://github.com/VulnZap/veto/commit/40b7552935d1a72894114b098a1630181b016257) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add a new `npx veto scan` CLI command to audit discovered tool coverage against loaded rules, with optional CI fail gating (`--fail-uncovered`), inline YAML suggestions (`--suggest`), and `text|json` output formats. - [#134](https://github.com/VulnZap/veto/pull/134) [`b499d76`](htLow2/25/2026
sdk-py@0.12.0See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/24/2026
veto-sdk@1.12.0### Minor Changes - [#129](https://github.com/VulnZap/veto/pull/129) [`4ccb94c`](https://github.com/VulnZap/veto/commit/4ccb94cd5bcb3a873ae9656eb1a9c029eb008b82) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add true `shadow` mode to TypeScript and Python SDKs so wrapped calls never block while preserving real decisions and emitting shadow telemetry. Low2/24/2026
sdk-py@0.11.0See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/24/2026
veto-sdk@1.11.0### Minor Changes - [#127](https://github.com/VulnZap/veto/pull/127) [`d5e7aeb`](https://github.com/VulnZap/veto/commit/d5e7aebb192ce73ec9cc333272dd33cae976f356) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add default policy auto-apply enhancements in `protect()` with new `communication` and `deployment` policy packs, expanded tool-name heuristics, auto-apply stderr transparency, and `length_greater_than` condition support across TypeScript and Python SDKs. Low2/24/2026
sdk-py@0.10.0See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/23/2026
veto-sdk@1.10.0### Minor Changes - [#126](https://github.com/VulnZap/veto/pull/126) [`521d540`](https://github.com/VulnZap/veto/commit/521d540bfbc80995c94438db7ad3e83be3882f04) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add a top-level async `protect()` one-liner API to TypeScript and Python SDKs. Highlights: - Introduce `protect()` as the primary onboarding entrypoint (`protect(tools)` and `protect(tool)`). - Add source auto-detection (rules/api key/endpoint/config/local), heuristLow2/23/2026
sdk-py@0.9.0See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/23/2026
veto-sdk@1.9.0### Minor Changes - [#121](https://github.com/VulnZap/veto/pull/121) [`574e741`](https://github.com/VulnZap/veto/commit/574e74141d4fe48de50c09e900c29784adb3e158) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Coordinated cross-SDK release train alignment while publishing Python SDK v0.9.0 integrations for CrewAI and PydanticAI. JavaScript APIs remain backward-compatible. Low2/23/2026
veto-sdk@1.8.1### Patch Changes - [#119](https://github.com/VulnZap/veto/pull/119) [`1639043`](https://github.com/VulnZap/veto/commit/163904315749abf9e1c6788b05af27711138add1) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Replace hardcoded api.veto.dev with api.runveto.com in SDK defaults and test fixtures Low2/23/2026
sdk-py@0.8.0See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/22/2026
veto-sdk@1.8.0### Minor Changes - [#117](https://github.com/VulnZap/veto/pull/117) [`220e7f1`](https://github.com/VulnZap/veto/commit/220e7f102bee5e57f073584dba38076849277877) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add a new standalone `guard()` API to TypeScript and Python SDKs that runs the existing validation pipeline without wrapping or executing tools. Highlights: - return typed `GuardResult` with `allow`, `deny`, or `require_approval` - preserve real deny/require_approvaLow2/22/2026
sdk-py@0.7.0See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/16/2026
veto-sdk@1.7.0### Minor Changes - [#98](https://github.com/VulnZap/veto/pull/98) [`0a45454`](https://github.com/VulnZap/veto/commit/0a45454a2e778a53809ebce00a6c4781f94e4ab2) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add deep Vercel AI SDK and LangChain integrations with middleware-level tool call interception, streaming support, and LangGraph ToolNode wrapping for both TypeScript and Python SDKs. Low2/16/2026
sdk-py@0.6.0See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/16/2026
veto-sdk@1.6.0### Minor Changes - [#89](https://github.com/VulnZap/veto/pull/89) [`b13f6a9`](https://github.com/VulnZap/veto/commit/b13f6a9cfb7677f73ee69ec888d0da456f16c4d0) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add local human-in-the-loop approval support with `action: require_approval`, including webhook callback routing, configurable timeout behavior, and approval response mapping. Add decision history export in JSON and CSV (`exportDecisions` / `export_decisions`) with normalized audiLow2/16/2026
v1.5.0## Highlights - Three-mode SDK runtime auto-detection: **local (default)**, cloud, and self-hosted. - Fresh installs now default to local deterministic YAML validation with zero network calls. - New CLI commands: `veto compile`, `veto learn`, `veto test`. - New budget constraints and MCP tool definition support. - Expanded YAML condition operators for deterministic rule evaluation. ## Included Changes ### New - Three-mode SDK (`local` / `cloud` / `self-hosted`) with precedence-based init deteLow2/15/2026
sdk-py@0.5.0See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/15/2026
veto-sdk@1.5.0### Minor Changes - **Three-mode SDK** β€” Local (default), Cloud, and Self-Hosted runtime modes with auto-detection at init. Fresh installs now default to local mode with zero network calls. Set `VETO_API_KEY` or `options.apiKey` for cloud mode, `options.endpoint` for self-hosted. ([#86](https://github.com/VulnZap/veto/pull/86)) - **`veto compile`** β€” Compile natural language policy descriptions into deterministic YAML rules using an LLM at build time. Supports `--input`, `--file`, `--outpuLow2/15/2026
sdk-py@0.4.0### Minor Changes - Add client-side deterministic validation with cloud policy sync - Policy cache with stale-while-revalidate for zero-latency validation - Client-side decision logging via fire-and-forget POST to `/v1/decisions` - Fix `asyncio.create_task()` usage in `log_decision` and `PolicyCache` - Fix mypy `no-any-return` in `fetch_policy` See [CHANGELOG](https://github.com/VulnZap/veto/blob/master/packages/sdk-python/CHANGELOG.md)Low2/13/2026
veto-sdk@1.4.0### Minor Changes - [#62](https://github.com/VulnZap/veto/pull/62) [`188a543`](https://github.com/VulnZap/veto/commit/188a5431e293a6beada02d6dbcd029e87e0f5f12) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add client-side deterministic validation with cloud policy sync **Local deterministic validation** -- SDK now evaluates deterministic constraints locally before falling back to the server, eliminating network round-trips for simple checks (number ranges, string enums, regex patterLow2/13/2026
veto-sdk@1.3.0### Minor Changes - [#53](https://github.com/VulnZap/veto/pull/53) [`7dc81c5`](https://github.com/VulnZap/veto/commit/7dc81c54aa544582ced4add8d651c2ffea3a16d3) Thanks [@yazcaleb](https://github.com/yazcaleb)! - Add require_approval flow with human-in-the-loop approval for tool calls **Cloud validation mode** -- New `cloud` validation mode routes tool calls through the Veto Cloud API for policy-managed validation. Supports `allow`, `deny`, and `require_approval` decisions. **ApprovalLow2/12/2026

Dependencies & License Audit

Loading dependencies...

Similar Packages

fn-aiAI agent toolkit with pluggable provider, tool, and session store layers. ESM, TypeScript-first.0.6.0
@stevederico/dotbotAI agent CLI and library for Node.js β€” streaming, multi-provider, tool execution, autonomous tasks0.38.0
@robota-sdk/agent-coreComplete AI agent implementation with unified core and tools functionality - conversation management, plugin system, and advanced agent features3.0.0-beta.54
@mediconsol/agent-coreλ©”λ””μ½˜μ†” AI Agent μ½”μ–΄ λͺ¨λ“ˆ β€” λͺ¨λ“  λ©”λ””μ½˜μ†” ν”„λ‘œμ νŠΈμ— νƒ‘μž¬ κ°€λŠ₯ν•œ μ—μ΄μ „νŠΈ 인프라0.1.6
@moleculer/agentsAI agent capabilities for the Moleculer microservices framework1.0.1