Generic actions
Normalize explicit actor/action/resource/context authorization requests.
Packages · 0.10.2
One monorepo, several guarded integration paths
All three public npm packages are versioned together. Pick the lowest-level boundary that matches your application, then verify every high-impact path actually routes through it.
| Package | License | Use it for |
|---|---|---|
@ruleoak/protocol | MIT | Contracts, schemas, validators, fixtures, and TypeScript types without taking the runtime. |
@ruleoak/core | Apache-2.0 | createRuleOak(), authorization, Policy v2, adapters, approvals, receipts/grants, guarded functions/tools, and evidence. |
@ruleoak/cli | Apache-2.0 | Quickstart, protect, MCP gateways, REST service, policy authoring/testing, learning, approvals, replay, and evidence bundles. |
Supported first-party adapter families
OpenAI-style tool calls
Normalize and authorize function tool-call payloads. This is not an OpenAI network client.
MCP
Normalize tools/call and use stdio or Streamable HTTP guarded transports.
Shell, filesystem, HTTP/webhook
Normalize common application-layer actions into the same policy and evidence path.
Adoption tooling
v0.10.2 also includes built-in policy packs, guided policy authoring, Policy v2 migration, linting, policy testing, learning-mode suggestions, approval workflows, replay, signed checkpoints, verifiable evidence bundles, benchmarks, and release-readiness checks.
Framework and SaaS pages on this site are patterns unless stated otherwise
A page describing GitHub, Jira, LangGraph, Python, or another application pattern does not mean v0.10.2 ships a dedicated network connector or official SDK for that product. Use the documented Node.js SDK, MCP boundaries, or local REST authorization API to build those integrations.