@getmagical/cli 0.12.1 → 0.12.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +12 -1
- package/dist/index.js +1849 -1512
- package/dist/index.js.map +4 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -464,13 +464,24 @@ denied, including eval management, publishing and deletion, schedules, admin
|
|
|
464
464
|
operations, raw credential values, browser sessions, interactive sessions, and
|
|
465
465
|
key minting.
|
|
466
466
|
|
|
467
|
+
`draft-runs:execute-sandbox` allows draft starts only with an explicitly valid
|
|
468
|
+
network capture replay in `--config-json`, for example
|
|
469
|
+
`{"networkTrafficCapture":{"replay":{"recordingId":"<recording UUID>"}}}`.
|
|
470
|
+
Replay also requires `captures:read`; supplying `--initial-store-json` requires
|
|
471
|
+
`store:write`. `runs:execute` continues to authorize these replay starts and is
|
|
472
|
+
required for starts without replay, recording runs, and reruns. The sandbox
|
|
473
|
+
grant does not authorize published or live execution paths.
|
|
474
|
+
|
|
467
475
|
### Operator rollout and rollback
|
|
468
476
|
|
|
469
477
|
Deploy the backend before releasing the CLI flow. In WorkOS, create these
|
|
470
|
-
permissions and grant the appropriate subset to member roles
|
|
478
|
+
permissions and grant the appropriate subset to member roles. Also enable
|
|
479
|
+
`draft-runs:execute-sandbox` under Authorization > Configuration > API key
|
|
480
|
+
permissions > Users before user API keys can include it:
|
|
471
481
|
|
|
472
482
|
```text
|
|
473
483
|
automations:read automations:write runs:read runs:execute runs:control
|
|
484
|
+
draft-runs:execute-sandbox
|
|
474
485
|
store:read store:write skills:read skills:write credentials:read
|
|
475
486
|
captures:read captures:write regressions:read regressions:run
|
|
476
487
|
knowledge:read memory:read files:write
|