runline 0.11.5 → 0.12.0

package/dist/plugins/googleSheets/src/index.js

@@ -408,6 +408,7 @@ export default function googleSheets(rl) {
     });
     // ── Spreadsheet ───────────────────────────────────────
     rl.registerAction("spreadsheet.create", {
+        access: "write",
         description: "Create a new spreadsheet",
         inputSchema: {
             title: { type: "string", required: true },
@@ -441,6 +442,7 @@ export default function googleSheets(rl) {
         },
     });
     rl.registerAction("spreadsheet.get", {
+        access: "read",
         description: "Get spreadsheet metadata (sheets, properties, optional grid data)",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -465,6 +467,7 @@ export default function googleSheets(rl) {
         },
     });
     rl.registerAction("spreadsheet.delete", {
+        access: "write",
         description: "Delete a spreadsheet (via Drive API — requires drive.file scope)",
         inputSchema: { spreadsheetId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -475,6 +478,7 @@ export default function googleSheets(rl) {
     });
     // ── Sheet tabs ────────────────────────────────────────
     rl.registerAction("sheet.listTabs", {
+        access: "read",
         description: "List sheet tabs in a spreadsheet",
         inputSchema: { spreadsheetId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -483,6 +487,7 @@ export default function googleSheets(rl) {
         },
     });
     rl.registerAction("sheet.addTab", {
+        access: "write",
         description: "Add a new sheet tab",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -514,6 +519,7 @@ export default function googleSheets(rl) {
         },
     });
     rl.registerAction("sheet.deleteTab", {
+        access: "write",
         description: "Delete a sheet tab",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -534,6 +540,7 @@ export default function googleSheets(rl) {
     });
     // ── Read ──────────────────────────────────────────────
     rl.registerAction("sheet.read", {
+        access: "read",
         description: "Read values from a range. Returns a 2D array by default; set `asObjects=true` to pair rows with a header row and return objects.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -590,6 +597,7 @@ export default function googleSheets(rl) {
     });
     // ── Append ────────────────────────────────────────────
     rl.registerAction("sheet.append", {
+        access: "write",
         description: "Append rows to the bottom. Pass `rows` as arrays (matching columns) or objects (keyed by header names; extra keys become new columns by default).",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -684,6 +692,7 @@ export default function googleSheets(rl) {
     });
     // ── Update ────────────────────────────────────────────
     rl.registerAction("sheet.update", {
+        access: "write",
         description: "Update rows matched by a key column (or by the synthetic 'row_number' field). Rows are objects; undefined/null values are skipped.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -705,6 +714,7 @@ export default function googleSheets(rl) {
         },
     });
     rl.registerAction("sheet.appendOrUpdate", {
+        access: "write",
         description: "Upsert rows. Rows whose match value is found are updated in place; rows with a missing or unknown match value are appended.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -724,6 +734,7 @@ export default function googleSheets(rl) {
     });
     // ── Clear ─────────────────────────────────────────────
     rl.registerAction("sheet.clear", {
+        access: "write",
         description: "Clear values from a sheet. Modes: wholeSheet (optional keepFirstRow) | rows | columns | range.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -786,6 +797,7 @@ export default function googleSheets(rl) {
     });
     // ── Delete rows/columns ───────────────────────────────
     rl.registerAction("sheet.deleteDimension", {
+        access: "write",
         description: "Delete a range of rows or columns",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -820,6 +832,7 @@ export default function googleSheets(rl) {
     });
     // ── Raw batchUpdate ───────────────────────────────────
     rl.registerAction("sheet.batchUpdate", {
+        access: "write",
         description: "Raw passthrough to spreadsheets:batchUpdate for anything this plugin doesn't expose directly (formatting, merges, conditional rules, …).",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -912,6 +925,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
     };
     // ─── Charts ─────────────────────────────────────────────────────
     rl.registerAction("chart.add", {
+        access: "write",
         description: "Embed a chart on a sheet. Minimal signature: type ('COLUMN'|'BAR'|'LINE'|'AREA'|'PIE'|'SCATTER'|'COMBO'), data source (sheet name + A1 range), and target anchor cell. For full control pass a raw `chartSpec` object instead.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -975,6 +989,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
         },
     });
     rl.registerAction("chart.update", {
+        access: "write",
         description: "Update an existing chart's spec by chartId.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -996,6 +1011,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
         },
     });
     rl.registerAction("chart.delete", {
+        access: "write",
         description: "Delete a chart by its embedded-object id.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -1010,6 +1026,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
     });
     // ─── Named ranges ───────────────────────────────────────────────
     rl.registerAction("namedRange.add", {
+        access: "write",
         description: "Create a named range on a sheet (so formulas can reference it by name).",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -1027,6 +1044,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
         },
     });
     rl.registerAction("namedRange.delete", {
+        access: "write",
         description: "Delete a named range by its id.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -1041,6 +1059,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
     });
     // ─── Protected ranges ───────────────────────────────────────────
     rl.registerAction("protectedRange.add", {
+        access: "write",
         description: "Protect a range from edits. Pass `editorEmails` to restrict who can still edit; without it, only the sheet owner can edit.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -1067,6 +1086,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
         },
     });
     rl.registerAction("protectedRange.delete", {
+        access: "write",
         description: "Delete a protected range by its id.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -1081,6 +1101,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
     });
     // ─── Conditional formatting ─────────────────────────────────────
     rl.registerAction("conditionalFormat.add", {
+        access: "write",
         description: "Add a single-condition conditional-format rule. For complex rules pass a raw `rule` object instead of the simple builder.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -1124,6 +1145,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
         },
     });
     rl.registerAction("conditionalFormat.delete", {
+        access: "write",
         description: "Delete a conditional-format rule by its index within the sheet's rule list.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },
@@ -1140,6 +1162,7 @@ async function runUpdateOrUpsert(ctx, p, upsert) {
     });
     // ─── Data validation ────────────────────────────────────────────
     rl.registerAction("dataValidation.set", {
+        access: "write",
         description: "Apply a data-validation rule to a range. Pass either `condition` (BooleanCondition) or `oneOfList` (array of values for ONE_OF_LIST). Use `clear: true` to remove validation.",
         inputSchema: {
             spreadsheetId: { type: "string", required: true },

package/dist/plugins/googleSlides/src/index.js

@@ -121,6 +121,7 @@ export default function googleSlides(rl) {
     });
     // ── Presentation ──────────────────────────────────────
     rl.registerAction("presentation.create", {
+        access: "write",
         description: "Create a new empty presentation",
         inputSchema: { title: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -129,6 +130,7 @@ export default function googleSlides(rl) {
         },
     });
     rl.registerAction("presentation.get", {
+        access: "read",
         description: "Get a presentation. Accepts a bare ID or a docs.google.com/presentation URL.",
         inputSchema: {
             presentation: { type: "string", required: true },
@@ -148,6 +150,7 @@ export default function googleSlides(rl) {
         },
     });
     rl.registerAction("presentation.listSlides", {
+        access: "read",
         description: "List slides in a presentation",
         inputSchema: {
             presentation: { type: "string", required: true },
@@ -164,6 +167,7 @@ export default function googleSlides(rl) {
         },
     });
     rl.registerAction("presentation.replaceText", {
+        access: "write",
         description: "Replace text in a presentation. Pass one or more {text, replaceText, matchCase?, pageObjectIds?} entries; each becomes a replaceAllText request in a single batchUpdate.",
         inputSchema: {
             presentation: { type: "string", required: true },
@@ -203,6 +207,7 @@ export default function googleSlides(rl) {
         },
     });
     rl.registerAction("presentation.batchUpdate", {
+        access: "write",
         description: "Raw passthrough to presentations.batchUpdate — pass a full `requests` array for layout edits, shape inserts, transform updates, etc.",
         inputSchema: {
             presentation: { type: "string", required: true },
@@ -224,6 +229,7 @@ export default function googleSlides(rl) {
     });
     // ── Page (slide) ──────────────────────────────────────
     rl.registerAction("page.get", {
+        access: "read",
         description: "Get a single slide (page) by objectId",
         inputSchema: {
             presentation: { type: "string", required: true },
@@ -236,6 +242,7 @@ export default function googleSlides(rl) {
         },
     });
     rl.registerAction("page.getThumbnail", {
+        access: "write",
         description: "Get a thumbnail for a slide. Returns Slides' response { contentUrl, width, height } by default; set `savePath` to also download the PNG to disk, or `download=true` to return base64.",
         inputSchema: {
             presentation: { type: "string", required: true },

package/dist/plugins/googleTasks/src/index.js

@@ -139,6 +139,7 @@ export default function googleTasks(rl) {
     });
     // ── Task lists ────────────────────────────────────────
     rl.registerAction("taskList.list", {
+        access: "read",
         description: "List the authenticated user's task lists",
         inputSchema: {
             returnAll: { type: "boolean", required: false },
@@ -159,6 +160,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("taskList.get", {
+        access: "read",
         description: "Get a task list by ID",
         inputSchema: { taskListId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -167,6 +169,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("taskList.create", {
+        access: "write",
         description: "Create a new task list",
         inputSchema: { title: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -175,6 +178,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("taskList.update", {
+        access: "write",
         description: "Update a task list (currently only `title` is writable).",
         inputSchema: {
             taskListId: { type: "string", required: true },
@@ -188,6 +192,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("taskList.delete", {
+        access: "write",
         description: "Delete a task list and all its tasks",
         inputSchema: { taskListId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -198,6 +203,7 @@ export default function googleTasks(rl) {
     });
     // ── Tasks ─────────────────────────────────────────────
     rl.registerAction("task.create", {
+        access: "write",
         description: "Create a task in a list",
         inputSchema: {
             taskListId: { type: "string", required: true },
@@ -254,6 +260,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("task.get", {
+        access: "read",
         description: "Get a single task",
         inputSchema: {
             taskListId: { type: "string", required: true },
@@ -265,6 +272,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("task.list", {
+        access: "read",
         description: "List tasks in a list. Filters: dueMin/dueMax, completedMin/completedMax, updatedMin, showCompleted/showDeleted/showHidden.",
         inputSchema: {
             taskListId: { type: "string", required: true },
@@ -304,6 +312,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("task.update", {
+        access: "write",
         description: "Patch a task. Only supplied fields are sent. Set status=completed (and optionally `completed` timestamp) to mark done.",
         inputSchema: {
             taskListId: { type: "string", required: true },
@@ -347,6 +356,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("task.delete", {
+        access: "write",
         description: "Delete a task",
         inputSchema: {
             taskListId: { type: "string", required: true },
@@ -359,6 +369,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("task.move", {
+        access: "write",
         description: "Move a task within its list (reorder or reparent). `parent` nests under another task; `previous` places it after a sibling.",
         inputSchema: {
             taskListId: { type: "string", required: true },
@@ -377,6 +388,7 @@ export default function googleTasks(rl) {
         },
     });
     rl.registerAction("task.clear", {
+        access: "write",
         description: "Hide all completed tasks in a list from the default view. They remain accessible via task.list with showHidden=true.",
         inputSchema: { taskListId: { type: "string", required: true } },
         async execute(input, ctx) {

package/dist/plugins/gotify/src/index.js

@@ -51,6 +51,7 @@ export default function gotify(rl) {
         },
     });
     rl.registerAction("message.create", {
+        access: "write",
         description: "Send a push message",
         inputSchema: {
             message: { type: "string", required: true, description: "Message text" },
@@ -81,6 +82,7 @@ export default function gotify(rl) {
         },
     });
     rl.registerAction("message.delete", {
+        access: "write",
         description: "Delete a message",
         inputSchema: {
             messageId: { type: "string", required: true, description: "Message ID" },
@@ -93,6 +95,7 @@ export default function gotify(rl) {
         },
     });
     rl.registerAction("message.list", {
+        access: "read",
         description: "List messages",
         inputSchema: {
             limit: { type: "number", required: false, description: "Max results" },

package/dist/plugins/gotowebinar/src/index.js

@@ -53,6 +53,7 @@ export default function gotowebinar(rl) {
     });
     // ── Webinar ─────────────────────────────────────────
     rl.registerAction("webinar.create", {
+        access: "write",
         description: "Create a webinar",
         inputSchema: {
             subject: {
@@ -98,6 +99,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("webinar.get", {
+        access: "read",
         description: "Get a webinar",
         inputSchema: {
             webinarKey: {
@@ -112,6 +114,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("webinar.list", {
+        access: "read",
         description: "List webinars",
         inputSchema: {
             limit: { type: "number", required: false, description: "Max results" },
@@ -126,6 +129,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("webinar.update", {
+        access: "write",
         description: "Update a webinar",
         inputSchema: {
             webinarKey: {
@@ -162,6 +166,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("webinar.delete", {
+        access: "write",
         description: "Delete a webinar",
         inputSchema: {
             webinarKey: {
@@ -187,6 +192,7 @@ export default function gotowebinar(rl) {
     });
     // ── Registrant ──────────────────────────────────────
     rl.registerAction("registrant.create", {
+        access: "write",
         description: "Register a person for a webinar",
         inputSchema: {
             webinarKey: {
@@ -205,6 +211,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("registrant.get", {
+        access: "read",
         description: "Get a registrant",
         inputSchema: {
             webinarKey: {
@@ -225,6 +232,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("registrant.list", {
+        access: "read",
         description: "List registrants for a webinar",
         inputSchema: {
             webinarKey: {
@@ -239,6 +247,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("registrant.delete", {
+        access: "write",
         description: "Delete a registrant",
         inputSchema: {
             webinarKey: {
@@ -261,6 +270,7 @@ export default function gotowebinar(rl) {
     });
     // ── Session ─────────────────────────────────────────
     rl.registerAction("session.get", {
+        access: "read",
         description: "Get a session",
         inputSchema: {
             webinarKey: {
@@ -281,6 +291,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("session.list", {
+        access: "read",
         description: "List sessions for a webinar",
         inputSchema: {
             webinarKey: {
@@ -295,6 +306,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("session.getPerformance", {
+        access: "read",
         description: "Get session performance details",
         inputSchema: {
             webinarKey: {
@@ -316,6 +328,7 @@ export default function gotowebinar(rl) {
     });
     // ── Attendee ────────────────────────────────────────
     rl.registerAction("attendee.get", {
+        access: "read",
         description: "Get an attendee",
         inputSchema: {
             webinarKey: {
@@ -341,6 +354,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("attendee.list", {
+        access: "read",
         description: "List attendees for a session",
         inputSchema: {
             webinarKey: {
@@ -362,6 +376,7 @@ export default function gotowebinar(rl) {
     });
     // ── Coorganizer ─────────────────────────────────────
     rl.registerAction("coorganizer.create", {
+        access: "write",
         description: "Add a co-organizer to a webinar",
         inputSchema: {
             webinarKey: {
@@ -404,6 +419,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("coorganizer.list", {
+        access: "read",
         description: "List co-organizers",
         inputSchema: {
             webinarKey: {
@@ -418,6 +434,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("coorganizer.delete", {
+        access: "write",
         description: "Remove a co-organizer",
         inputSchema: {
             webinarKey: {
@@ -448,6 +465,7 @@ export default function gotowebinar(rl) {
     });
     // ── Panelist ────────────────────────────────────────
     rl.registerAction("panelist.create", {
+        access: "write",
         description: "Add a panelist to a webinar",
         inputSchema: {
             webinarKey: {
@@ -465,6 +483,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("panelist.list", {
+        access: "read",
         description: "List panelists",
         inputSchema: {
             webinarKey: {
@@ -479,6 +498,7 @@ export default function gotowebinar(rl) {
         },
     });
     rl.registerAction("panelist.delete", {
+        access: "write",
         description: "Remove a panelist",
         inputSchema: {
             webinarKey: {

package/dist/plugins/grafana/src/index.js

@@ -55,6 +55,7 @@ export default function grafana(rl) {
     });
     // ── Dashboard ───────────────────────────────────────
     rl.registerAction("dashboard.create", {
+        access: "write",
         description: "Create or save a dashboard",
         inputSchema: {
             dashboard: {
@@ -83,6 +84,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("dashboard.get", {
+        access: "read",
         description: "Get a dashboard by UID",
         inputSchema: {
             uid: { type: "string", required: true, description: "Dashboard UID" },
@@ -92,6 +94,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("dashboard.list", {
+        access: "read",
         description: "Search dashboards",
         inputSchema: {
             query: { type: "string", required: false, description: "Search query" },
@@ -125,6 +128,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("dashboard.delete", {
+        access: "write",
         description: "Delete a dashboard by UID",
         inputSchema: {
             uid: { type: "string", required: true, description: "Dashboard UID" },
@@ -134,6 +138,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("dashboard.update", {
+        access: "write",
         description: "Update an existing dashboard",
         inputSchema: {
             uid: {
@@ -164,6 +169,7 @@ export default function grafana(rl) {
     });
     // ── Team ────────────────────────────────────────────
     rl.registerAction("team.create", {
+        access: "write",
         description: "Create a team",
         inputSchema: {
             name: { type: "string", required: true, description: "Team name" },
@@ -178,6 +184,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("team.get", {
+        access: "read",
         description: "Get a team by ID",
         inputSchema: {
             teamId: { type: "number", required: true, description: "Team ID" },
@@ -187,6 +194,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("team.list", {
+        access: "read",
         description: "Search teams",
         inputSchema: {
             query: { type: "string", required: false, description: "Search by name" },
@@ -207,6 +215,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("team.update", {
+        access: "write",
         description: "Update a team",
         inputSchema: {
             teamId: { type: "number", required: true, description: "Team ID" },
@@ -224,6 +233,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("team.delete", {
+        access: "write",
         description: "Delete a team",
         inputSchema: {
             teamId: { type: "number", required: true, description: "Team ID" },
@@ -234,6 +244,7 @@ export default function grafana(rl) {
     });
     // ── Team Member ─────────────────────────────────────
     rl.registerAction("teamMember.add", {
+        access: "write",
         description: "Add a user to a team",
         inputSchema: {
             teamId: { type: "number", required: true, description: "Team ID" },
@@ -245,6 +256,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("teamMember.remove", {
+        access: "write",
         description: "Remove a user from a team",
         inputSchema: {
             teamId: { type: "number", required: true, description: "Team ID" },
@@ -260,6 +272,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("teamMember.list", {
+        access: "read",
         description: "List members of a team",
         inputSchema: {
             teamId: { type: "number", required: true, description: "Team ID" },
@@ -270,6 +283,7 @@ export default function grafana(rl) {
     });
     // ── User (Org) ──────────────────────────────────────
     rl.registerAction("user.create", {
+        access: "write",
         description: "Add a user to the current organization",
         inputSchema: {
             loginOrEmail: {
@@ -289,12 +303,14 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("user.list", {
+        access: "read",
         description: "List users in the current organization",
         async execute(_input, ctx) {
             return gf(ctx, "GET", "/org/users");
         },
     });
     rl.registerAction("user.update", {
+        access: "write",
         description: "Update a user's role in the organization",
         inputSchema: {
             userId: { type: "number", required: true, description: "User ID" },
@@ -310,6 +326,7 @@ export default function grafana(rl) {
         },
     });
     rl.registerAction("user.delete", {
+        access: "write",
         description: "Remove a user from the organization",
         inputSchema: {
             userId: { type: "number", required: true, description: "User ID" },

package/dist/plugins/graphql/src/index.js

@@ -21,6 +21,7 @@ export default function graphql(rl) {
         },
     });
     rl.registerAction("query", {
+        access: "write",
         description: "Execute a GraphQL query",
         inputSchema: {
             query: {
@@ -72,6 +73,7 @@ export default function graphql(rl) {
         },
     });
     rl.registerAction("introspect", {
+        access: "read",
         description: "Run an introspection query to get the schema",
         async execute(_input, ctx) {
             const cfg = ctx.connection.config;

package/dist/plugins/grist/src/index.js

@@ -64,6 +64,7 @@ export default function grist(rl) {
         },
     });
     rl.registerAction("record.create", {
+        access: "write",
         description: "Create records in a table",
         inputSchema: {
             docId: { type: "string", required: true, description: "Document ID" },
@@ -81,6 +82,7 @@ export default function grist(rl) {
         },
     });
     rl.registerAction("record.list", {
+        access: "read",
         description: "List records from a table",
         inputSchema: {
             docId: { type: "string", required: true, description: "Document ID" },
@@ -112,6 +114,7 @@ export default function grist(rl) {
         },
     });
     rl.registerAction("record.update", {
+        access: "write",
         description: "Update records in a table",
         inputSchema: {
             docId: { type: "string", required: true, description: "Document ID" },
@@ -129,6 +132,7 @@ export default function grist(rl) {
         },
     });
     rl.registerAction("record.delete", {
+        access: "write",
         description: "Delete records from a table",
         inputSchema: {
             docId: { type: "string", required: true, description: "Document ID" },