@soat/cli 0.14.11 → 0.15.0

package/dist/index.mjs

@@ -11,7 +11,7 @@ import { load } from "js-yaml";
 import * as os from "node:os";
 
 //#region package.json
-var version = "0.14.11";
+var version = "0.15.0";
 
 //#endregion
 //#region src/cli-wrappers/wrappers/formations.ts
@@ -1374,6 +1374,96 @@ var routes = {
       "in": "path"
     }]
   },
+  "list-approvals": {
+    serviceClass: "Approvals",
+    operationId: "listApprovals",
+    description: "Returns approval items for a project, filterable by status, origin, and expiry.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/approvals",
+    pathParams: [],
+    queryParams: ["project_id", "status", "origin", "expires_before"],
+    flags: [{
+      "name": "project_id",
+      "description": "Project ID (required if not using project key auth)",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "status",
+      "description": "Filter by lifecycle status",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "origin",
+      "description": "Filter by producer origin",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }, {
+      "name": "expires_before",
+      "description": "Return only items expiring at or before this timestamp",
+      "required": false,
+      "type": "string",
+      "in": "query"
+    }]
+  },
+  "get-approval": {
+    serviceClass: "Approvals",
+    operationId: "getApproval",
+    description: "Returns a single approval item with its full evidence.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/approvals",
+    pathParams: ["approval_id"],
+    queryParams: [],
+    flags: [{
+      "name": "approval_id",
+      "description": "Approval item ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }]
+  },
+  "approve-approval": {
+    serviceClass: "Approvals",
+    operationId: "approveApproval",
+    description: "Approves the item. Optionally supply edited `arguments` to replace the proposed arguments (edit-then-approve); the original is preserved on the item. Expiry is re-checked at decision time — an expired item can never be approved.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/approvals",
+    pathParams: ["approval_id"],
+    queryParams: [],
+    flags: [{
+      "name": "approval_id",
+      "description": "Approval item ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "arguments",
+      "description": "Edited arguments to execute instead of the proposed ones",
+      "required": false,
+      "type": "object",
+      "in": "body"
+    }]
+  },
+  "reject-approval": {
+    serviceClass: "Approvals",
+    operationId: "rejectApproval",
+    description: "Rejects the item. A reason is required and preserved on the item.",
+    moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/approvals",
+    pathParams: ["approval_id"],
+    queryParams: [],
+    flags: [{
+      "name": "approval_id",
+      "description": "Approval item ID",
+      "required": true,
+      "type": "string",
+      "in": "path"
+    }, {
+      "name": "reason",
+      "description": "Why the item is being rejected (required)",
+      "required": true,
+      "type": "string",
+      "in": "body"
+    }]
+  },
   "list-chats": {
     serviceClass: "Chats",
     operationId: "listChats",
@@ -4525,6 +4615,12 @@ var routes = {
       "required": false,
       "type": "array",
       "in": "body"
+    }, {
+      "name": "denied_actions",
+      "description": "For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it. Use it to scope a read+write MCP server read-only by denying just the write tools. Omit or set `null` to deny nothing. Ignored for other tool types.",
+      "required": false,
+      "type": "array",
+      "in": "body"
     }, {
       "name": "preset_parameters",
       "description": "Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.",
@@ -4621,6 +4717,12 @@ var routes = {
       "required": false,
       "type": "array",
       "in": "body"
+    }, {
+      "name": "denied_actions",
+      "description": "For `mcp` tools: an optional denylist of MCP tool names to hide. Applied after `actions` and taking precedence over it. Use it to scope a read+write MCP server read-only by denying just the write tools. `null` denies nothing. Ignored for other tool types.",
+      "required": false,
+      "type": "array",
+      "in": "body"
     }, {
       "name": "preset_parameters",
       "description": "Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.",
@@ -4677,7 +4779,7 @@ var routes = {
       "in": "path"
     }, {
       "name": "action",
-      "description": "For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set). Ignored for `http` tools.\n",
+      "description": "For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set, and must not be in its `denied_actions` denylist). Ignored for `http` tools.\n",
       "required": false,
       "type": "string",
       "in": "body"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/cli",
-  "version": "0.14.11",
+  "version": "0.15.0",
   "type": "module",
   "dependencies": {
     "@inquirer/input": "^5.1.2",
@@ -8,7 +8,7 @@
     "@ttoss/logger": "^0.8.19",
     "commander": "^15.0.0",
     "js-yaml": "^5.2.1",
-    "@soat/sdk": "0.14.11"
+    "@soat/sdk": "0.15.0"
   },
   "devDependencies": {
     "@ttoss/config": "^1.37.17",