@soat/cli 0.14.8 → 0.14.10

package/dist/index.mjs

@@ -11,7 +11,7 @@ import { load } from "js-yaml";
 import * as os from "node:os";
 
 //#region package.json
-var version = "0.14.8";
+var version = "0.14.10";
 
 //#endregion
 //#region src/cli-wrappers/wrappers/formations.ts
@@ -4515,7 +4515,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "actions",
-      "description": "SOAT platform actions",
+      "description": "Allowlist of actions. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.",
       "required": false,
       "type": "array",
       "in": "body"
@@ -4611,7 +4611,7 @@ var routes = {
       "in": "body"
     }, {
       "name": "actions",
-      "description": "",
+      "description": "Allowlist of actions. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.",
       "required": false,
       "type": "array",
       "in": "body"
@@ -4659,7 +4659,7 @@ var routes = {
   "call-tool": {
     serviceClass: "Tools",
     operationId: "callTool",
-    description: "Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input. For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.",
+    description: "Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input. For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` (\"not available on this tool\") before any outbound request is made. `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.",
     moduleDocsUrl: "https://soat.ttoss.dev/docs/modules/tools",
     pathParams: ["tool_id"],
     queryParams: [],
@@ -4671,7 +4671,7 @@ var routes = {
       "in": "path"
     }, {
       "name": "action",
-      "description": "For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke. Ignored for `http` tools.\n",
+      "description": "For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set). Ignored for `http` tools.\n",
       "required": false,
       "type": "string",
       "in": "body"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/cli",
-  "version": "0.14.8",
+  "version": "0.14.10",
   "type": "module",
   "dependencies": {
     "@inquirer/input": "^5.1.2",
@@ -8,7 +8,7 @@
     "@ttoss/logger": "^0.8.19",
     "commander": "^15.0.0",
     "js-yaml": "^5.2.1",
-    "@soat/sdk": "0.14.8"
+    "@soat/sdk": "0.14.10"
   },
   "devDependencies": {
     "@ttoss/config": "^1.37.17",