@soat/sdk 0.14.8 → 0.14.10

package/dist/index.cjs

@@ -2709,7 +2709,7 @@ var Tools = class {
 	* Call a tool
 	*
 	* Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
-	* For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored.
+	* For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
 	* `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.
 	*
 	*/

package/dist/index.d.cts

@@ -1702,7 +1702,7 @@ type ToolResourceProperties = {
     } | null;
   } | null;
   /**
-   * IAM action strings the tool is permitted to call
+   * Allowlist of actions the tool exposes. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool).
    */
   actions?: Array<string> | null;
   /**
@@ -3238,7 +3238,7 @@ type Tool = {
     [key: string]: unknown;
   } | null;
   /**
-   * SOAT platform actions to expose
+   * Allowlist of actions to expose. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names — when set, only those tools are exposed to the model and callable via `/call`; when `null`, the entire MCP server surface is exposed. Ignored for other tool types.
    */
   actions?: Array<string> | null;
   /**
@@ -3303,7 +3303,7 @@ type CreateToolRequest = {
     [key: string]: unknown;
   };
   /**
-   * SOAT platform actions
+   * Allowlist of actions. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.
    */
   actions?: Array<string>;
   /**
@@ -3346,6 +3346,9 @@ type UpdateToolRequest = {
   mcp?: {
     [key: string]: unknown;
   } | null;
+  /**
+   * Allowlist of actions. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.
+   */
   actions?: Array<string> | null;
   /**
    * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
@@ -3372,7 +3375,7 @@ type UpdateToolRequest = {
 };
 type CallToolRequest = {
   /**
-   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke. Ignored for `http` tools.
+   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set). Ignored for `http` tools.
    *
    */
   action?: string;
@@ -11834,7 +11837,7 @@ declare class Tools {
    * Call a tool
    *
    * Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
-   * For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored.
+   * For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
    * `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.
    *
    */

package/dist/index.d.mts

@@ -1702,7 +1702,7 @@ type ToolResourceProperties = {
     } | null;
   } | null;
   /**
-   * IAM action strings the tool is permitted to call
+   * Allowlist of actions the tool exposes. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool).
    */
   actions?: Array<string> | null;
   /**
@@ -3238,7 +3238,7 @@ type Tool = {
     [key: string]: unknown;
   } | null;
   /**
-   * SOAT platform actions to expose
+   * Allowlist of actions to expose. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names — when set, only those tools are exposed to the model and callable via `/call`; when `null`, the entire MCP server surface is exposed. Ignored for other tool types.
    */
   actions?: Array<string> | null;
   /**
@@ -3303,7 +3303,7 @@ type CreateToolRequest = {
     [key: string]: unknown;
   };
   /**
-   * SOAT platform actions
+   * Allowlist of actions. For `soat` tools: SOAT platform action names (required). For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface — omit or set `null` to expose every tool the MCP server offers. Ignored for other tool types.
    */
   actions?: Array<string>;
   /**
@@ -3346,6 +3346,9 @@ type UpdateToolRequest = {
   mcp?: {
     [key: string]: unknown;
   } | null;
+  /**
+   * Allowlist of actions. For `soat` tools: SOAT platform action names. For `mcp` tools: an optional allowlist of MCP tool names to scope the server surface (`null` exposes every tool). Ignored for other tool types.
+   */
   actions?: Array<string> | null;
   /**
    * Fixed parameters merged into every soat tool call. Keys matching fields in the action's input schema are removed from the schema shown to the model and injected automatically at execution time.
@@ -3372,7 +3375,7 @@ type UpdateToolRequest = {
 };
 type CallToolRequest = {
   /**
-   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke. Ignored for `http` tools.
+   * For `soat` tools: the action name (must be in the tool's `actions` list). For `mcp` tools: the MCP tool name to invoke (must be in the tool's `actions` allowlist when one is set). Ignored for `http` tools.
    *
    */
   action?: string;
@@ -11834,7 +11837,7 @@ declare class Tools {
    * Call a tool
    *
    * Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
-   * For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored.
+   * For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
    * `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.
    *
    */

package/dist/index.mjs

@@ -2708,7 +2708,7 @@ var Tools = class {
 	* Call a tool
 	*
 	* Directly invokes a tool and returns its output. Supported for `http`, `soat`, `mcp`, and `pipeline` tools. `client` tools cannot be invoked server-side and will return 422. A `pipeline` tool runs its declared steps in order and returns the mapped `output` (or the last step's output); `action` is ignored and `input` is the pipeline input.
-	* For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored.
+	* For `soat` and `mcp` tools the `action` field is required and identifies which action (SOAT) or tool name (MCP) to invoke. For `http` tools `action` is ignored. When a `soat` or `mcp` tool declares an `actions` allowlist, an action outside it is rejected with `400 VALIDATION_FAILED` ("not available on this tool") before any outbound request is made.
 	* `preset_parameters` stored on the tool are merged with the caller-supplied `input` before execution; preset keys take lower precedence.
 	*
 	*/

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@soat/sdk",
-  "version": "0.14.8",
+  "version": "0.14.10",
   "description": "TypeScript SDK for the SOAT API",
   "type": "module",
   "main": "dist/index.mjs",