@avallon-labs/mcp 37.4.0 → 37.5.0

package/dist/index.js

@@ -54,5 +54,5 @@ function setupFetch() {
 
 // src/index.ts
 setupFetch();
-await import("./server-WAY4EMQV.js");
+await import("./server-TSFRRRNZ.js");
 //# sourceMappingURL=index.js.map

package/dist/{server-WAY4EMQV.js → server-TSFRRRNZ.js}

@@ -7045,6 +7045,19 @@ var CreateWorkerResponse = zod.object({
   secret_ids: zod.array(zod.string()).describe(
     "Secrets attached to the worker. A worker with attached secrets sources its environment exclusively from the secret store."
   ),
+  permissions: zod.array(
+    zod.enum([
+      "workers:execute",
+      "workers:run",
+      "inboxes:send",
+      "artifacts:write",
+      "outbound-jobs:schedule",
+      "cases:write",
+      "schedules:write"
+    ])
+  ).describe(
+    "Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."
+  ),
   model: zod.string(),
   fast_mode: zod.boolean()
 });
@@ -7116,6 +7129,19 @@ var GetWorkerResponse = zod.object({
   secret_ids: zod.array(zod.string()).describe(
     "Secrets attached to the worker. A worker with attached secrets sources its environment exclusively from the secret store."
   ),
+  permissions: zod.array(
+    zod.enum([
+      "workers:execute",
+      "workers:run",
+      "inboxes:send",
+      "artifacts:write",
+      "outbound-jobs:schedule",
+      "cases:write",
+      "schedules:write"
+    ])
+  ).describe(
+    "Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."
+  ),
   model: zod.string(),
   fast_mode: zod.boolean()
 });
@@ -7141,7 +7167,18 @@ var UpdateWorkerBody = zod.object({
   ),
   case_determination_context: zod.union([zod.string().min(1), zod.null()]).optional().describe(
     "Customer-specific context appended to the case-ID determination prompt. Omit to leave unchanged; pass null to clear."
-  )
+  ),
+  permissions: zod.array(
+    zod.enum([
+      "workers:execute",
+      "workers:run",
+      "inboxes:send",
+      "artifacts:write",
+      "outbound-jobs:schedule",
+      "cases:write",
+      "schedules:write"
+    ])
+  ).optional().describe("Permissions granted to the worker on each run")
 });
 var updateWorkerResponseVersionMin = 0;
 var UpdateWorkerResponse = zod.object({
@@ -7171,6 +7208,19 @@ var UpdateWorkerResponse = zod.object({
   secret_ids: zod.array(zod.string()).describe(
     "Secrets attached to the worker. A worker with attached secrets sources its environment exclusively from the secret store."
   ),
+  permissions: zod.array(
+    zod.enum([
+      "workers:execute",
+      "workers:run",
+      "inboxes:send",
+      "artifacts:write",
+      "outbound-jobs:schedule",
+      "cases:write",
+      "schedules:write"
+    ])
+  ).describe(
+    "Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."
+  ),
   model: zod.string(),
   fast_mode: zod.boolean()
 });
@@ -7242,6 +7292,19 @@ var UpdateWorkerMcpsResponse = zod.object({
   secret_ids: zod.array(zod.string()).describe(
     "Secrets attached to the worker. A worker with attached secrets sources its environment exclusively from the secret store."
   ),
+  permissions: zod.array(
+    zod.enum([
+      "workers:execute",
+      "workers:run",
+      "inboxes:send",
+      "artifacts:write",
+      "outbound-jobs:schedule",
+      "cases:write",
+      "schedules:write"
+    ])
+  ).describe(
+    "Core Plane operations the worker's runs are authorized to perform. Executing a tool attached to the worker is governed by the attachment, not by this list."
+  ),
   model: zod.string(),
   fast_mode: zod.boolean()
 });
@@ -9862,4 +9925,4 @@ var transport = new StdioServerTransport();
 server.connect(transport).then(() => {
   console.error("MCP server running on stdio");
 }).catch(console.error);
-//# sourceMappingURL=server-WAY4EMQV.js.map
+//# sourceMappingURL=server-TSFRRRNZ.js.map