@oomol-lab/open-connector 1.6.1 → 1.6.3

package/src/providers/komari/operations.js

@@ -67,20 +67,20 @@ function listOutput(key, description, item = looseItem) {
 function dataOutput(description) {
     return s.object(description, { data: s.unknown(description) });
 }
-function operation(name, rpcMethod, description, inputSchema = emptyInput, outputSchema = dataOutput("Komari response."), options = {}) {
-    return { name, rpcMethod, description, inputSchema, outputSchema, ...options };
+function operation(name, operationType, rpcMethod, description, inputSchema = emptyInput, outputSchema = dataOutput("Komari response."), options = {}) {
+    return { name, operationType, rpcMethod, description, inputSchema, outputSchema, ...options };
 }
 export const komariOperations = [
     // Public monitoring API.
-    operation("get_current_user", "public:getMe", "Get the current Komari user or guest identity.", emptyInput, s.looseObject("Current user identity.")),
-    operation("list_nodes", "public:getNodesInformation", "List visible Komari nodes without client tokens or private address fields.", emptyInput, listOutput("nodes", "Visible Komari nodes.", nodeSchema), { resultMode: "safe_nodes" }),
-    operation("get_public_settings", "public:getPublicSettings", "Get settings that Komari exposes to its public frontend.", emptyInput, s.looseObject("Public Komari settings.")),
-    operation("get_version", "public:getVersion", "Get the Komari server version and build hash.", emptyInput, s.object("Komari version.", {
+    operation("get_current_user", "read", "public:getMe", "Get the current Komari user or guest identity.", emptyInput, s.looseObject("Current user identity.")),
+    operation("list_nodes", "read", "public:getNodesInformation", "List visible Komari nodes without client tokens or private address fields.", emptyInput, listOutput("nodes", "Visible Komari nodes.", nodeSchema), { resultMode: "safe_nodes" }),
+    operation("get_public_settings", "read", "public:getPublicSettings", "Get settings that Komari exposes to its public frontend.", emptyInput, s.looseObject("Public Komari settings.")),
+    operation("get_version", "read", "public:getVersion", "Get the Komari server version and build hash.", emptyInput, s.object("Komari version.", {
         version: s.string("Release version."),
         hash: s.nullableString("Build hash when available."),
     })),
-    operation("get_recent_metrics", "public:getClientRecentRecords", "Get the short in-memory window of recent reports for a node.", uuidInput, listOutput("records", "Recent node reports.", metricRecordSchema), { resultKey: "records" }),
-    operation("get_load_history", "public:getRecordsByUUID", "Get persisted resource metrics for a node.", s.object("Historical metric query.", {
+    operation("get_recent_metrics", "read", "public:getClientRecentRecords", "Get the short in-memory window of recent reports for a node.", uuidInput, listOutput("records", "Recent node reports.", metricRecordSchema), { resultKey: "records" }),
+    operation("get_load_history", "read", "public:getRecordsByUUID", "Get persisted resource metrics for a node.", s.object("Historical metric query.", {
         uuid: s.uuid("Client UUID."),
         load_type: s.stringEnum("Metric projection.", [
             "all",
@@ -102,7 +102,7 @@ export const komariOperations = [
         has_gpu_data: s.boolean("Whether GPU history is present."),
         gpu_devices: s.unknownObject("GPU histories keyed by device index."),
     }, { optional: ["load_type", "has_gpu_data", "gpu_devices"] }), { resultMode: "load_history", stringifyFields: ["hours"] }),
-    operation("get_ping_history", "public:getPingRecords", "Get ping records by node, task, or both.", {
+    operation("get_ping_history", "read", "public:getPingRecords", "Get ping records by node, task, or both.", {
         type: "object",
         description: "Select ping history by client UUID, task ID, or both, with an optional recent-hours window.",
         properties: {
@@ -118,11 +118,11 @@ export const komariOperations = [
         basic_info: s.array("Per-client summaries.", looseItem),
         tasks: s.array("Per-task summaries.", pingTaskSummarySchema),
     }), { resultMode: "ping_history", stringifyFields: ["task_id", "hours"] }),
-    operation("list_public_ping_tasks", "public:getPublicPingTasks", "List ping tasks using the public response shape.", emptyInput, listOutput("tasks", "Public ping tasks.", pingTaskSchema), { resultKey: "tasks" }),
-    operation("list_public_metric_definitions", "public:listMetricDefinitions", "List public metric definitions and retention policies.", emptyInput, listOutput("metrics", "Public metric definitions.", metricDefinitionSchema), { resultKey: "metrics" }),
-    operation("query_metrics", "public:queryMetrics", "Query metric time-series points with filters, aggregation, and downsampling.", s.looseRequiredObject("Komari metric query. Use metric_keys plus optional entity_ids, time bounds, tags, aggregation, and point limits.", { metric_keys: s.array("Metric keys to query.", s.string("A metric key."), { minItems: 1 }) }), s.looseObject("Metric query response.")),
-    operation("get_ping_metric_stats", "public:getPingMetricStats", "Get aggregate latency, loss, percentile, and standard-deviation statistics.", s.looseObject("Ping statistics query with optional entity, task, time, and point filters."), s.looseObject("Ping metric statistics.")),
-    operation("record_visitor_event", "public:recordVisitorEvent", "Record a bounded visitor audit event in Komari.", s.object("Visitor event.", {
+    operation("list_public_ping_tasks", "read", "public:getPublicPingTasks", "List ping tasks using the public response shape.", emptyInput, listOutput("tasks", "Public ping tasks.", pingTaskSchema), { resultKey: "tasks" }),
+    operation("list_public_metric_definitions", "read", "public:listMetricDefinitions", "List public metric definitions and retention policies.", emptyInput, listOutput("metrics", "Public metric definitions.", metricDefinitionSchema), { resultKey: "metrics" }),
+    operation("query_metrics", "read", "public:queryMetrics", "Query metric time-series points with filters, aggregation, and downsampling.", s.looseRequiredObject("Komari metric query. Use metric_keys plus optional entity_ids, time bounds, tags, aggregation, and point limits.", { metric_keys: s.array("Metric keys to query.", s.string("A metric key."), { minItems: 1 }) }), s.looseObject("Metric query response.")),
+    operation("get_ping_metric_stats", "read", "public:getPingMetricStats", "Get aggregate latency, loss, percentile, and standard-deviation statistics.", s.looseObject("Ping statistics query with optional entity, task, time, and point filters."), s.looseObject("Ping metric statistics.")),
+    operation("record_visitor_event", "write", "public:recordVisitorEvent", "Record a bounded visitor audit event in Komari.", s.object("Visitor event.", {
         event: s.string("Short event name.", { maxLength: 64 }),
         path: s.string("Frontend path.", { maxLength: 512 }),
         route: s.string("Frontend route.", { maxLength: 128 }),
@@ -130,59 +130,59 @@ export const komariOperations = [
         detail: s.looseObject("Bounded event metadata."),
     }, { optional: ["path", "route", "target", "detail"] }), s.looseObject("Visitor audit status.")),
     // Client administration.
-    operation("add_client", "admin:addClient", "Create a Komari client. The response contains its enrollment token.", s.object("New client.", { name: s.string("Optional client name.") }, { optional: ["name"] }), s.looseObject("Created client identity and token.")),
-    operation("edit_client", "admin:editClient", "Update client fields. This changes Komari configuration.", s.looseRequiredObject("Partial client fields to update.", { uuid: s.uuid("The client UUID.") }), successOutput, { resultMode: "success" }),
-    operation("remove_client", "admin:removeClient", "Permanently delete a client and its runtime state.", uuidInput, successOutput, { resultMode: "success" }),
-    operation("get_client", "admin:getClient", "Get one client without returning its enrollment token.", uuidInput, s.object("Client details.", { client: nodeSchema }), { resultMode: "safe_admin_node", resultKey: "client" }),
-    operation("list_clients", "admin:listClients", "List all clients without returning enrollment tokens.", emptyInput, listOutput("clients", "Komari clients.", nodeSchema), { resultMode: "safe_admin_nodes", resultKey: "clients" }),
-    operation("get_client_token", "admin:getClientToken", "Get a client enrollment token. Treat the response as a secret.", uuidInput, s.looseObject("Client enrollment token.")),
-    operation("clear_records", "admin:clearRecords", "Permanently delete all load records.", emptyInput, successOutput, {
+    operation("add_client", "write", "admin:addClient", "Create a Komari client. The response contains its enrollment token.", s.object("New client.", { name: s.string("Optional client name.") }, { optional: ["name"] }), s.looseObject("Created client identity and token.")),
+    operation("edit_client", "write", "admin:editClient", "Update client fields. This changes Komari configuration.", s.looseRequiredObject("Partial client fields to update.", { uuid: s.uuid("The client UUID.") }), successOutput, { resultMode: "success" }),
+    operation("remove_client", "destructive", "admin:removeClient", "Permanently delete a client and its runtime state.", uuidInput, successOutput, { resultMode: "success" }),
+    operation("get_client", "read", "admin:getClient", "Get one client without returning its enrollment token.", uuidInput, s.object("Client details.", { client: nodeSchema }), { resultMode: "safe_admin_node", resultKey: "client" }),
+    operation("list_clients", "read", "admin:listClients", "List all clients without returning enrollment tokens.", emptyInput, listOutput("clients", "Komari clients.", nodeSchema), { resultMode: "safe_admin_nodes", resultKey: "clients" }),
+    operation("get_client_token", "read", "admin:getClientToken", "Get a client enrollment token. Treat the response as a secret.", uuidInput, s.looseObject("Client enrollment token.")),
+    operation("clear_records", "destructive", "admin:clearRecords", "Permanently delete all load records.", emptyInput, successOutput, {
         resultMode: "success",
     }),
     // Clipboard.
-    operation("get_clipboard", "admin:getClipboard", "Get one clipboard entry.", s.requiredObject("Clipboard selector.", { id: s.positiveInteger("Clipboard ID.") }), s.looseObject("Clipboard entry."), { stringifyFields: ["id"] }),
-    operation("list_clipboard", "admin:listClipboard", "List clipboard entries.", emptyInput, listOutput("entries", "Clipboard entries."), { resultKey: "entries" }),
-    operation("create_clipboard", "admin:createClipboard", "Create a clipboard entry.", s.looseObject("Clipboard fields such as name, text, weight, and remark."), s.looseObject("Created clipboard entry.")),
-    operation("update_clipboard", "admin:updateClipboard", "Update a clipboard entry.", s.looseRequiredObject("Clipboard ID and fields to update.", { id: s.positiveInteger("Clipboard ID.") }), successOutput, { resultMode: "success", stringifyFields: ["id"] }),
-    operation("delete_clipboard", "admin:deleteClipboard", "Delete a clipboard entry.", s.requiredObject("Clipboard selector.", { id: s.positiveInteger("Clipboard ID.") }), successOutput, { resultMode: "success", stringifyFields: ["id"] }),
-    operation("batch_delete_clipboard", "admin:batchDeleteClipboard", "Delete multiple clipboard entries.", s.requiredObject("Clipboard selectors.", {
+    operation("get_clipboard", "read", "admin:getClipboard", "Get one clipboard entry.", s.requiredObject("Clipboard selector.", { id: s.positiveInteger("Clipboard ID.") }), s.looseObject("Clipboard entry."), { stringifyFields: ["id"] }),
+    operation("list_clipboard", "read", "admin:listClipboard", "List clipboard entries.", emptyInput, listOutput("entries", "Clipboard entries."), { resultKey: "entries" }),
+    operation("create_clipboard", "write", "admin:createClipboard", "Create a clipboard entry.", s.looseObject("Clipboard fields such as name, text, weight, and remark."), s.looseObject("Created clipboard entry.")),
+    operation("update_clipboard", "write", "admin:updateClipboard", "Update a clipboard entry.", s.looseRequiredObject("Clipboard ID and fields to update.", { id: s.positiveInteger("Clipboard ID.") }), successOutput, { resultMode: "success", stringifyFields: ["id"] }),
+    operation("delete_clipboard", "destructive", "admin:deleteClipboard", "Delete a clipboard entry.", s.requiredObject("Clipboard selector.", { id: s.positiveInteger("Clipboard ID.") }), successOutput, { resultMode: "success", stringifyFields: ["id"] }),
+    operation("batch_delete_clipboard", "destructive", "admin:batchDeleteClipboard", "Delete multiple clipboard entries.", s.requiredObject("Clipboard selectors.", {
         ids: s.array("Clipboard IDs.", s.positiveInteger("Clipboard ID."), { minItems: 1 }),
     }), successOutput, { resultMode: "success" }),
     // Database and metrics administration.
-    operation("get_database_size", "admin:getDatabaseSize", "Inspect main and monitoring database storage.", emptyInput, s.looseObject("Database storage status.")),
-    operation("vacuum_database", "admin:vacuumDatabase", "Run database maintenance and reclaim storage space.", emptyInput, s.looseObject("Database maintenance result.")),
-    operation("list_metric_definitions", "admin:listMetricDefinitions", "List all metric definitions and retention policies.", emptyInput, listOutput("metrics", "Metric definitions.", metricDefinitionSchema), { resultKey: "metrics" }),
-    operation("update_metric_definition", "admin:updateMetricDefinition", "Change a metric retention policy; zero deletes stored data for that metric.", s.requiredObject("Metric retention update.", {
+    operation("get_database_size", "read", "admin:getDatabaseSize", "Inspect main and monitoring database storage.", emptyInput, s.looseObject("Database storage status.")),
+    operation("vacuum_database", "write", "admin:vacuumDatabase", "Run database maintenance and reclaim storage space.", emptyInput, s.looseObject("Database maintenance result.")),
+    operation("list_metric_definitions", "read", "admin:listMetricDefinitions", "List all metric definitions and retention policies.", emptyInput, listOutput("metrics", "Metric definitions.", metricDefinitionSchema), { resultKey: "metrics" }),
+    operation("update_metric_definition", "write", "admin:updateMetricDefinition", "Change a metric retention policy; zero deletes stored data for that metric.", s.requiredObject("Metric retention update.", {
         name: s.string("Metric name."),
         retention_days: s.nonNegativeInteger("Retention in days; zero disables storage."),
     }), s.looseObject("Updated metric definition.")),
-    operation("get_metric_migration_status", "admin:getMetricMigrationStatus", "Get metric-store migration progress.", emptyInput, s.looseObject("Migration status.")),
-    operation("start_metric_migration", "admin:startMetricMigration", "Start migrating metrics from a source store into the current store.", s.object("Migration source.", {
+    operation("get_metric_migration_status", "read", "admin:getMetricMigrationStatus", "Get metric-store migration progress.", emptyInput, s.looseObject("Migration status.")),
+    operation("start_metric_migration", "write", "admin:startMetricMigration", "Start migrating metrics from a source store into the current store.", s.object("Migration source.", {
         source_driver: s.string("Optional source driver."),
         source_dsn: s.string("Optional source DSN; treat as sensitive."),
     }, { optional: ["source_driver", "source_dsn"] }), s.looseObject("Migration start status.")),
-    operation("cancel_metric_migration", "admin:cancelMetricMigration", "Cancel the active metric-store migration.", emptyInput, s.looseObject("Migration cancel status.")),
+    operation("cancel_metric_migration", "destructive", "admin:cancelMetricMigration", "Cancel the active metric-store migration.", emptyInput, s.looseObject("Migration cancel status.")),
     // Sessions and global settings.
-    operation("list_sessions", "admin:getSessions", "List login sessions using stable identifiers while redacting session tokens and IP addresses.", emptyInput, s.object("Redacted login sessions.", {
+    operation("list_sessions", "read", "admin:getSessions", "List login sessions using stable identifiers while redacting session tokens and IP addresses.", emptyInput, s.object("Redacted login sessions.", {
         current_session_id: s.nullableString("Stable identifier for the current session, when available."),
         sessions: s.array("Redacted login sessions.", sessionSummarySchema),
     }), { resultMode: "safe_sessions" }),
-    operation("delete_session", "admin:deleteSession", "Revoke one login session using the stable identifier returned by list_sessions.", s.requiredObject("Session selector.", {
+    operation("delete_session", "destructive", "admin:deleteSession", "Revoke one login session using the stable identifier returned by list_sessions.", s.requiredObject("Session selector.", {
         session_id: s.string("Stable session identifier returned by list_sessions.", {
             minLength: 64,
             maxLength: 64,
             pattern: "^[0-9a-f]{64}$",
         }),
     }), successOutput, { resultMode: "success" }),
-    operation("delete_all_sessions", "admin:deleteAllSessions", "Revoke all login sessions.", emptyInput, successOutput, {
+    operation("delete_all_sessions", "destructive", "admin:deleteAllSessions", "Revoke all login sessions.", emptyInput, successOutput, {
         resultMode: "success",
     }),
-    operation("get_settings", "admin:getSettings", "Get all Komari settings. The result can contain secrets and database DSNs.", emptyInput, s.looseObject("Komari settings.")),
-    operation("edit_settings", "admin:editSettings", "Update arbitrary Komari settings; invalid database settings can disrupt service.", s.looseObject("Setting keys and replacement values."), successOutput, { resultMode: "success" }),
-    operation("clear_all_records", "admin:clearAllRecords", "Permanently delete all load and ping records.", emptyInput, successOutput, { resultMode: "success" }),
-    operation("order_clients", "admin:orderClients", "Set client display weights using a UUID-to-weight map.", s.record("Client UUIDs mapped to integer weights.", s.integer("Display weight.")), successOutput, { resultMode: "success" }),
+    operation("get_settings", "read", "admin:getSettings", "Get all Komari settings. The result can contain secrets and database DSNs.", emptyInput, s.looseObject("Komari settings.")),
+    operation("edit_settings", "destructive", "admin:editSettings", "Update arbitrary Komari settings; invalid database settings can disrupt service.", s.looseObject("Setting keys and replacement values."), successOutput, { resultMode: "success" }),
+    operation("clear_all_records", "destructive", "admin:clearAllRecords", "Permanently delete all load and ping records.", emptyInput, successOutput, { resultMode: "success" }),
+    operation("order_clients", "write", "admin:orderClients", "Set client display weights using a UUID-to-weight map.", s.record("Client UUIDs mapped to integer weights.", s.integer("Display weight.")), successOutput, { resultMode: "success" }),
     // Notifications.
-    operation("add_load_notification", "admin:addLoadNotification", "Create a load notification rule.", s.object("Load notification.", {
+    operation("add_load_notification", "write", "admin:addLoadNotification", "Create a load notification rule.", s.object("Load notification.", {
         clients: s.array("Client UUIDs.", s.uuid("Client UUID."), { minItems: 1 }),
         name: s.string("Rule name."),
         metric: s.string("Metric name."),
@@ -190,25 +190,25 @@ export const komariOperations = [
         ratio: s.number("Required time ratio from zero to one.", { exclusiveMinimum: 0, maximum: 1 }),
         interval: s.integer("Evaluation interval in minutes.", { minimum: 1, maximum: 240 }),
     }, { optional: ["name"] }), s.looseObject("Created load notification ID.")),
-    operation("delete_load_notification", "admin:deleteLoadNotification", "Delete load notification rules.", idsInput, successOutput, { resultMode: "success" }),
-    operation("edit_load_notification", "admin:editLoadNotification", "Replace load notification rule fields.", s.requiredObject("Load notification updates.", {
+    operation("delete_load_notification", "destructive", "admin:deleteLoadNotification", "Delete load notification rules.", idsInput, successOutput, { resultMode: "success" }),
+    operation("edit_load_notification", "write", "admin:editLoadNotification", "Replace load notification rule fields.", s.requiredObject("Load notification updates.", {
         notifications: s.array("Rules to update.", looseItem, { minItems: 1 }),
     }), successOutput, { resultMode: "success" }),
-    operation("list_load_notifications", "admin:getAllLoadNotifications", "List load notification rules.", emptyInput, listOutput("notifications", "Load notification rules."), { resultKey: "notifications" }),
-    operation("list_offline_notifications", "admin:listOfflineNotifications", "List offline notification rules.", emptyInput, listOutput("notifications", "Offline notification rules."), { resultKey: "notifications" }),
-    operation("edit_offline_notifications", "admin:editOfflineNotification", "Replace offline notification rule fields.", s.requiredObject("Offline notification updates.", {
+    operation("list_load_notifications", "read", "admin:getAllLoadNotifications", "List load notification rules.", emptyInput, listOutput("notifications", "Load notification rules."), { resultKey: "notifications" }),
+    operation("list_offline_notifications", "read", "admin:listOfflineNotifications", "List offline notification rules.", emptyInput, listOutput("notifications", "Offline notification rules."), { resultKey: "notifications" }),
+    operation("edit_offline_notifications", "write", "admin:editOfflineNotification", "Replace offline notification rule fields.", s.requiredObject("Offline notification updates.", {
         notifications: s.array("Rules to update.", looseItem, { minItems: 1 }),
     }), successOutput, { resultMode: "success", paramsArrayField: "notifications" }),
-    operation("enable_offline_notifications", "admin:enableOfflineNotification", "Enable offline notifications for clients.", clientsInput, successOutput, { resultMode: "success", paramsArrayField: "clients" }),
-    operation("disable_offline_notifications", "admin:disableOfflineNotification", "Disable offline notifications for clients.", clientsInput, successOutput, { resultMode: "success", paramsArrayField: "clients" }),
-    operation("list_traffic_report_notifications", "admin:listTrafficReportNotifications", "List traffic-report rules.", emptyInput, listOutput("notifications", "Traffic report rules."), { resultKey: "notifications" }),
-    operation("edit_traffic_report_notifications", "admin:editTrafficReportNotifications", "Replace traffic-report rule fields.", s.requiredObject("Traffic report updates.", {
+    operation("enable_offline_notifications", "write", "admin:enableOfflineNotification", "Enable offline notifications for clients.", clientsInput, successOutput, { resultMode: "success", paramsArrayField: "clients" }),
+    operation("disable_offline_notifications", "destructive", "admin:disableOfflineNotification", "Disable offline notifications for clients.", clientsInput, successOutput, { resultMode: "success", paramsArrayField: "clients" }),
+    operation("list_traffic_report_notifications", "read", "admin:listTrafficReportNotifications", "List traffic-report rules.", emptyInput, listOutput("notifications", "Traffic report rules."), { resultKey: "notifications" }),
+    operation("edit_traffic_report_notifications", "write", "admin:editTrafficReportNotifications", "Replace traffic-report rule fields.", s.requiredObject("Traffic report updates.", {
         notifications: s.array("Rules to update.", looseItem, { minItems: 1 }),
     }), successOutput, { resultMode: "success", paramsArrayField: "notifications" }),
-    operation("enable_traffic_report_notifications", "admin:enableTrafficReportNotifications", "Enable traffic reports for clients.", clientsInput, successOutput, { resultMode: "success", paramsArrayField: "clients" }),
-    operation("disable_traffic_report_notifications", "admin:disableTrafficReportNotifications", "Disable traffic reports for clients.", clientsInput, successOutput, { resultMode: "success", paramsArrayField: "clients" }),
+    operation("enable_traffic_report_notifications", "write", "admin:enableTrafficReportNotifications", "Enable traffic reports for clients.", clientsInput, successOutput, { resultMode: "success", paramsArrayField: "clients" }),
+    operation("disable_traffic_report_notifications", "destructive", "admin:disableTrafficReportNotifications", "Disable traffic reports for clients.", clientsInput, successOutput, { resultMode: "success", paramsArrayField: "clients" }),
     // Ping task administration.
-    operation("add_ping_task", "admin:addPingTask", "Create a ping task.", s.object("New ping task.", {
+    operation("add_ping_task", "write", "admin:addPingTask", "Create a ping task.", s.object("New ping task.", {
         clients: s.array("Client UUIDs.", s.uuid("Client UUID.")),
         default_on: s.boolean("Apply to new clients by default."),
         name: s.string("Task name."),
@@ -216,44 +216,44 @@ export const komariOperations = [
         type: s.stringEnum("Ping protocol.", ["icmp", "tcp", "http"]),
         interval: s.positiveInteger("Interval in seconds."),
     }, { optional: ["clients", "default_on"] }), s.looseObject("Created ping task ID.")),
-    operation("delete_ping_tasks", "admin:deletePingTask", "Delete ping tasks and their records.", idsInput, successOutput, { resultMode: "success" }),
-    operation("edit_ping_tasks", "admin:editPingTask", "Replace ping task fields.", s.requiredObject("Ping task updates.", {
+    operation("delete_ping_tasks", "destructive", "admin:deletePingTask", "Delete ping tasks and their records.", idsInput, successOutput, { resultMode: "success" }),
+    operation("edit_ping_tasks", "write", "admin:editPingTask", "Replace ping task fields.", s.requiredObject("Ping task updates.", {
         tasks: s.array("Tasks to update.", pingTaskSchema, { minItems: 1 }),
     }), successOutput, { resultMode: "success" }),
-    operation("list_ping_tasks", "admin:getAllPingTasks", "List all ping tasks including targets.", emptyInput, listOutput("tasks", "Ping tasks.", pingTaskSchema), { resultKey: "tasks" }),
-    operation("order_ping_tasks", "admin:orderPingTask", "Set ping-task weights using an ID-to-weight map.", s.record("Ping task IDs mapped to weights.", s.integer("Display weight.")), successOutput, { resultMode: "success" }),
+    operation("list_ping_tasks", "read", "admin:getAllPingTasks", "List all ping tasks including targets.", emptyInput, listOutput("tasks", "Ping tasks.", pingTaskSchema), { resultKey: "tasks" }),
+    operation("order_ping_tasks", "write", "admin:orderPingTask", "Set ping-task weights using an ID-to-weight map.", s.record("Ping task IDs mapped to weights.", s.integer("Display weight.")), successOutput, { resultMode: "success" }),
     // Provider configuration.
-    operation("get_message_sender_provider", "admin:getMessageSenderProvider", "Get one message-sender configuration or list available templates. The result may contain secrets.", s.object("Provider selector.", { provider: s.string("Optional provider name.") }, { optional: ["provider"] }), dataOutput("Message-sender configuration or templates."), { resultKey: "data" }),
-    operation("set_message_sender_provider", "admin:setMessageSenderProvider", "Save and possibly reload a message-sender provider configuration.", s.object("Message-sender provider.", {
+    operation("get_message_sender_provider", "read", "admin:getMessageSenderProvider", "Get one message-sender configuration or list available templates. The result may contain secrets.", s.object("Provider selector.", { provider: s.string("Optional provider name.") }, { optional: ["provider"] }), dataOutput("Message-sender configuration or templates."), { resultKey: "data" }),
+    operation("set_message_sender_provider", "write", "admin:setMessageSenderProvider", "Save and possibly reload a message-sender provider configuration.", s.object("Message-sender provider.", {
         name: s.string("Provider name."),
         addition: s.string("Provider-specific JSON configuration; may contain secrets."),
     }, { optional: ["addition"] }), s.looseObject("Configuration status.")),
-    operation("get_oidc_provider", "admin:getOidcProvider", "Get one OIDC configuration or list templates. The result may contain client secrets.", s.object("Provider selector.", { provider: s.string("Optional provider name.") }, { optional: ["provider"] }), dataOutput("OIDC configuration or templates."), { resultKey: "data" }),
-    operation("set_oidc_provider", "admin:setOidcProvider", "Save and possibly reload an OIDC provider configuration.", s.object("OIDC provider.", {
+    operation("get_oidc_provider", "read", "admin:getOidcProvider", "Get one OIDC configuration or list templates. The result may contain client secrets.", s.object("Provider selector.", { provider: s.string("Optional provider name.") }, { optional: ["provider"] }), dataOutput("OIDC configuration or templates."), { resultKey: "data" }),
+    operation("set_oidc_provider", "write", "admin:setOidcProvider", "Save and possibly reload an OIDC provider configuration.", s.object("OIDC provider.", {
         name: s.string("Provider name."),
         addition: s.string("Provider-specific JSON configuration; may contain secrets."),
     }, { optional: ["addition"] }), s.looseObject("Configuration status.")),
     // System, remote execution, and task results.
-    operation("list_audit_logs", "admin:getLogs", "List paged audit logs.", s.object("Audit log page.", {
+    operation("list_audit_logs", "read", "admin:getLogs", "List paged audit logs.", s.object("Audit log page.", {
         limit: s.positiveInteger("Page size.", { maximum: 500 }),
         page: s.positiveInteger("One-based page number."),
         msg_type: s.string("Optional exact message type."),
     }, { optional: ["limit", "page", "msg_type"] }), s.looseObject("Audit log page."), { stringifyFields: ["limit", "page"] }),
-    operation("execute_command", "admin:exec", "DANGEROUS: execute a shell command on selected clients. Komari API keys bypass interactive 2FA for this sensitive RPC.", s.requiredObject("Remote command.", {
+    operation("execute_command", "destructive", "admin:exec", "DANGEROUS: execute a shell command on selected clients. Komari API keys bypass interactive 2FA for this sensitive RPC.", s.requiredObject("Remote command.", {
         command: s.string("Shell command to execute."),
         clients: s.array("Target client UUIDs.", s.uuid("Client UUID."), { minItems: 1 }),
     }), s.looseObject("Execution task and connected clients.")),
-    operation("test_message_sender", "admin:testSendMessage", "Send a test notification through the active message sender.", emptyInput, successOutput, { resultMode: "success" }),
-    operation("test_geoip", "admin:testGeoip", "Test Komari GeoIP lookup.", s.object("GeoIP query.", { ip: s.string("IP address; defaults to the caller address.") }, { optional: ["ip"] }), s.looseObject("GeoIP lookup result.")),
-    operation("list_execution_tasks", "admin:getTasks", "List remote execution tasks and their results, which may contain command output.", emptyInput, listOutput("tasks", "Execution tasks."), { resultKey: "tasks" }),
-    operation("get_execution_task", "admin:getTaskById", "Get one remote execution task and its results.", taskIdInput, s.looseObject("Execution task.")),
-    operation("list_client_execution_tasks", "admin:getTasksByClientId", "List execution tasks assigned to a client.", uuidInput, listOutput("tasks", "Client execution tasks."), { resultKey: "tasks" }),
-    operation("get_client_task_result", "admin:getSpecificTaskResult", "Get one client's result for an execution task.", s.requiredObject("Task result selector.", {
+    operation("test_message_sender", "write", "admin:testSendMessage", "Send a test notification through the active message sender.", emptyInput, successOutput, { resultMode: "success" }),
+    operation("test_geoip", "read", "admin:testGeoip", "Test Komari GeoIP lookup.", s.object("GeoIP query.", { ip: s.string("IP address; defaults to the caller address.") }, { optional: ["ip"] }), s.looseObject("GeoIP lookup result.")),
+    operation("list_execution_tasks", "read", "admin:getTasks", "List remote execution tasks and their results, which may contain command output.", emptyInput, listOutput("tasks", "Execution tasks."), { resultKey: "tasks" }),
+    operation("get_execution_task", "read", "admin:getTaskById", "Get one remote execution task and its results.", taskIdInput, s.looseObject("Execution task.")),
+    operation("list_client_execution_tasks", "read", "admin:getTasksByClientId", "List execution tasks assigned to a client.", uuidInput, listOutput("tasks", "Client execution tasks."), { resultKey: "tasks" }),
+    operation("get_client_task_result", "read", "admin:getSpecificTaskResult", "Get one client's result for an execution task.", s.requiredObject("Task result selector.", {
         task_id: s.string("Execution task ID."),
         uuid: s.uuid("Client UUID."),
     }), s.looseObject("Execution result.")),
-    operation("list_task_results", "admin:getTaskResultsByTaskId", "List all client results for an execution task.", taskIdInput, listOutput("results", "Execution results."), { resultKey: "results" }),
+    operation("list_task_results", "read", "admin:getTaskResultsByTaskId", "List all client results for an execution task.", taskIdInput, listOutput("results", "Execution results."), { resultKey: "results" }),
     // Terminal appearance.
-    operation("get_terminal_settings", "admin:getXtermjsSettings", "Get xterm.js terminal appearance settings.", emptyInput, s.looseObject("Terminal settings.")),
-    operation("set_terminal_settings", "admin:setXtermjsSettings", "Update xterm.js terminal appearance settings, including optional custom CSS.", s.looseObject("xterm.js terminalOptions, terminalPadding, transparentBackground, and customCss."), s.looseObject("Normalized terminal settings.")),
+    operation("get_terminal_settings", "read", "admin:getXtermjsSettings", "Get xterm.js terminal appearance settings.", emptyInput, s.looseObject("Terminal settings.")),
+    operation("set_terminal_settings", "write", "admin:setXtermjsSettings", "Update xterm.js terminal appearance settings, including optional custom CSS.", s.looseObject("xterm.js terminalOptions, terminalPadding, transparentBackground, and customCss."), s.looseObject("Normalized terminal settings.")),
 ];

package/src/providers/line/actions.js

@@ -18,6 +18,7 @@ const sentMessageSchema = s.object("A message accepted by LINE.", {
 export const lineActions = [
     defineProviderAction(service, {
         name: "get_bot_info",
+        operationType: "read",
         description: "Get profile and chat settings for the connected LINE Official Account.",
         inputSchema: s.requiredObject("The empty input for reading LINE bot information.", {}),
         outputSchema: s.object("The connected LINE Official Account information.", {
@@ -32,6 +33,7 @@ export const lineActions = [
     }),
     defineProviderAction(service, {
         name: "get_profile",
+        operationType: "read",
         description: "Get the LINE profile of a user who can interact with the connected bot.",
         inputSchema: s.requiredObject("The LINE user profile lookup.", {
             userId: nonEmptyString("The LINE user ID obtained from a Messaging API webhook."),
@@ -46,6 +48,7 @@ export const lineActions = [
     }),
     defineProviderAction(service, {
         name: "send_push_text",
+        operationType: "write",
         description: "Send up to five text messages to one LINE user, group, or multi-person chat.",
         inputSchema: s.object("The LINE push text request.", {
             to: nonEmptyString("The target LINE user, group, or room ID."),
@@ -57,6 +60,7 @@ export const lineActions = [
     }),
     defineProviderAction(service, {
         name: "send_multicast_text",
+        operationType: "write",
         description: "Send up to five text messages to as many as 500 LINE users.",
         inputSchema: s.object("The LINE multicast text request.", {
             to: s.array("The target LINE user IDs.", nonEmptyString("A LINE user ID obtained from the Messaging API."), {
@@ -69,6 +73,7 @@ export const lineActions = [
     }),
     defineProviderAction(service, {
         name: "send_broadcast_text",
+        operationType: "write",
         description: "Send up to five text messages to all friends of the LINE Official Account.",
         inputSchema: s.object("The LINE broadcast text request.", sendOptions, {
             optional: ["notificationDisabled", "retryKey"],

package/src/providers/linkedin/actions.js

@@ -45,6 +45,7 @@ function action(input) {
 export const linkedinActions = [
     action({
         name: "get_current_member",
+        operationType: "read",
         description: "Retrieve the authenticated LinkedIn member's OpenID Connect profile.",
         requiredScopes: memberReadScopes,
         inputSchema: s.object({}, { description: "No input is required to retrieve the current LinkedIn member." }),
@@ -52,6 +53,7 @@ export const linkedinActions = [
     }),
     action({
         name: "create_text_post",
+        operationType: "write",
         description: "Create a text-only organic LinkedIn post for a member author.",
         requiredScopes: postWriteScopes,
         inputSchema: s.object("Request parameters for creating a text-only LinkedIn post.", {
@@ -67,6 +69,7 @@ export const linkedinActions = [
     }),
     action({
         name: "delete_post",
+        operationType: "destructive",
         description: "Delete a LinkedIn post by raw post URN using the Posts API.",
         requiredScopes: postWriteScopes,
         inputSchema: s.object("Request parameters for deleting a LinkedIn post.", { postUrn }, { required: ["postUrn"] }),
@@ -78,6 +81,7 @@ export const linkedinActions = [
     }),
     action({
         name: "create_article_post",
+        operationType: "write",
         description: "Create a LinkedIn article or link post with explicit source URL metadata using the Posts API.",
         requiredScopes: postWriteScopes,
         inputSchema: s.object("Request parameters for creating a LinkedIn article post.", {
@@ -100,6 +104,7 @@ export const linkedinActions = [
     }),
     action({
         name: "create_reshare",
+        operationType: "write",
         description: "Create a LinkedIn reshare of an existing post using the Posts API.",
         requiredScopes: postWriteScopes,
         inputSchema: s.object("Request parameters for resharing a LinkedIn post.", {

package/src/providers/linkfox/actions.js

@@ -6,6 +6,7 @@ import { chuhaijiangActions } from "./chuhaijiang-actions.js";
 import { maidalvAction } from "./maidalv-actions.js";
 import { mercadoActions } from "./mercado-actions.js";
 import { seerfarActions } from "./seerfar-actions.js";
+import { sifActions } from "./sif-actions.js";
 import { zhihuiyaActions } from "./zhihuiya-actions.js";
 const service = "linkfox";
 const amazonDomains = [
@@ -96,8 +97,8 @@ const integerEnum = (description, values) => s.anyOf(description, values.map((va
 const dateOrDateTime = (description) => s.anyOf(description, [s.date("A calendar date in YYYY-MM-DD format."), s.dateTime("An ISO 8601 date-time.")]);
 const linkfoxDateTime = (description) => s.string(description, { pattern: "^[0-9]{4}-[0-9]{2}-[0-9]{2} [0-9]{2}:[0-9]{2}:[0-9]{2}$" });
 const pageSizeMultipleOfTen = (schema) => schema;
-function action(name, _operationType, description, inputSchema, outputSchema) {
-    return defineProviderAction(service, { name, description, inputSchema, outputSchema });
+function action(name, operationType, description, inputSchema, outputSchema) {
+    return defineProviderAction(service, { name, operationType, description, inputSchema, outputSchema });
 }
 const emptyInput = s.object("No input is required for this LinkFox action.", {});
 const accountOutput = s.object("The normalized current LinkFox account.", {
@@ -974,6 +975,7 @@ const tiktokShopProductInput = s.object("TikTok Shop product detail parameters."
     region: s.optional(s.stringEnum("The TikTok Shop region.", ["US", "GB", "ID", "MY", "TH", "VN", "PH", "SG", "DE", "FR", "IT", "ES"])),
 });
 export const linkfoxActions = [
+    ...sifActions,
     ...mercadoActions,
     ...zhihuiyaActions,
     ...chuhaijiangActions,
@@ -1014,12 +1016,12 @@ export const linkfoxActions = [
     action("get_amazon_store_authorization_url", "read", "Create an Amazon Selling Partner authorization URL through LinkFox.", storeAuthorizationInput, authorizationUrlOutput),
     action("list_authorized_amazon_stores", "read", "List Amazon stores authorized through LinkFox.", emptyInput, storesOutput),
     action("search_amazon_store_orders", "read", "Search orders for an authorized Amazon store through LinkFox.", orderSearchInput, orderSearchOutput),
-    action("get_amazon_store_report", "read", "Create or resume an Amazon Selling Partner report and wait for a download URL.", storeReportInput, reportOutput),
+    action("get_amazon_store_report", "write", "Create or resume an Amazon Selling Partner report and wait for a download URL.", storeReportInput, reportOutput),
     action("get_amazon_ads_authorization_url", "read", "Create an Amazon Ads authorization URL through LinkFox.", adsAuthorizationInput, authorizationUrlOutput),
     action("list_authorized_amazon_ads_accounts", "read", "List Amazon Ads accounts authorized through LinkFox.", emptyInput, storesOutput),
     action("list_amazon_ads_profiles", "read", "List or refresh Amazon Ads profiles through LinkFox.", adsProfilesInput, adsProfilesOutput),
     action("list_sp_campaigns", "read", "List Sponsored Products campaigns through the LinkFox Amazon Ads gateway.", spCampaignInput, spCampaignOutput),
-    action("get_amazon_ads_report", "read", "Create or resume an Amazon Ads report and wait for a download URL.", adsReportInput, reportOutput),
+    action("get_amazon_ads_report", "write", "Create or resume an Amazon Ads report and wait for a download URL.", adsReportInput, reportOutput),
     action("check_text_trademark_risk", "read", "Check product text for trademark risk through LinkFox and Ruiguan.", trademarkInput, textTrademarkOutput),
     action("check_copyright_risk", "read", "Check a product image for copyright risk through LinkFox and Ruiguan.", copyrightInput, complianceOutput),
     action("check_design_patent_risk", "read", "Check a product image for design-patent risk through LinkFox and Ruiguan.", designPatentInput, complianceOutput),