runline 0.11.5 → 0.12.0

package/dist/plugins/steel/src/browser.js

@@ -83,26 +83,31 @@ async function connectMiniCdp(cdpUrl) {
 }
 export function registerBrowserActions(rl) {
     rl.registerAction("scrape", {
+        access: "write",
         description: "One-shot Steel scrape. Loads a URL and returns requested formats such as markdown, html, cleaned_html, or readability.",
         inputSchema: t.Object(SCRAPE_SCHEMA),
         execute: scrape,
     });
     rl.registerAction("browser.scrape", {
+        access: "write",
         description: "Backward-compatible alias for scrape.",
         inputSchema: t.Object(SCRAPE_SCHEMA),
         execute: scrape,
     });
     rl.registerAction("screenshot", {
+        access: "write",
         description: "One-shot Steel screenshot. Returns a hosted PNG URL.",
         inputSchema: t.Object(SCREENSHOT_SCHEMA),
         execute: screenshot,
     });
     rl.registerAction("browser.screenshot", {
+        access: "write",
         description: "Backward-compatible alias for screenshot.",
         inputSchema: t.Object(SCREENSHOT_SCHEMA),
         execute: screenshot,
     });
     rl.registerAction("browser.extract", {
+        access: "write",
         description: "Fetch a page through Steel scrape and return selected content fields. Use selectors with browser.run for DOM-specific extraction.",
         inputSchema: t.Object({
             url: t.String({ description: "URL to scrape" }),
@@ -116,6 +121,7 @@ export function registerBrowserActions(rl) {
         },
     });
     rl.registerAction("pdf", {
+        access: "write",
         description: "One-shot Steel PDF capture. Returns a hosted PDF URL.",
         inputSchema: t.Object({
             url: t.String({ description: "URL to render as PDF" }),
@@ -127,6 +133,7 @@ export function registerBrowserActions(rl) {
         },
     });
     rl.registerAction("browser.run", {
+        access: "write",
         description: "Create a Steel session, connect with Playwright over CDP, run an async JavaScript script, then release by default. The script receives { page, browser, context, session }. Requires the host app to have playwright installed.",
         inputSchema: t.Object({
             script: t.String({ description: "Async JavaScript body. Example: await page.goto('https://example.com'); return { title: await page.title() };" }),

package/dist/plugins/steel/src/captchas.js

@@ -2,16 +2,19 @@ import * as t from "typebox";
 import { api, compactRecord } from "./shared.js";
 export function registerCaptchaActions(rl) {
     rl.registerAction("captcha.status", {
+        access: "read",
         description: "Get CAPTCHA detection/solving status for a Steel session.",
         inputSchema: t.Object({ sessionId: t.String() }),
         async execute(input, ctx) { return api(ctx, `/v1/sessions/${encodeURIComponent(input.sessionId)}/captchas/status`); },
     });
     rl.registerAction("captcha.solve", {
+        access: "write",
         description: "Trigger CAPTCHA solving for all detected CAPTCHAs or a specific task/url/page.",
         inputSchema: t.Object({ sessionId: t.String(), taskId: t.Optional(t.String()), url: t.Optional(t.String()), pageId: t.Optional(t.String()) }),
         async execute(input, ctx) { const { sessionId, ...body } = input; return api(ctx, `/v1/sessions/${encodeURIComponent(String(sessionId))}/captchas/solve`, { method: "POST", body: compactRecord(body) }); },
     });
     rl.registerAction("captcha.solveImage", {
+        access: "write",
         description: "Solve an image CAPTCHA by XPath selectors.",
         inputSchema: t.Object({ sessionId: t.String(), imageXPath: t.String(), inputXPath: t.String(), url: t.Optional(t.String()) }),
         async execute(input, ctx) { const { sessionId, ...body } = input; return api(ctx, `/v1/sessions/${encodeURIComponent(String(sessionId))}/captchas/solve-image`, { method: "POST", body: compactRecord(body) }); },

package/dist/plugins/steel/src/credentials.js

@@ -6,6 +6,7 @@ const CREDENTIAL_KEY_SCHEMA = {
 };
 export function registerCredentialActions(rl) {
     rl.registerAction("credential.list", {
+        access: "read",
         description: "List Steel credentials. Filter by origin and/or namespace.",
         inputSchema: t.Object({ namespace: t.Optional(t.String()), origin: t.Optional(t.String()) }),
         async execute(input, ctx) {
@@ -13,6 +14,7 @@ export function registerCredentialActions(rl) {
         },
     });
     rl.registerAction("credential.create", {
+        access: "write",
         description: "Create a Steel credential for an origin/namespace. Value may include username, password, and totpSecret.",
         inputSchema: t.Object({ ...CREDENTIAL_KEY_SCHEMA, value: t.Any({ description: "Credential payload" }) }),
         async execute(input, ctx) {
@@ -20,6 +22,7 @@ export function registerCredentialActions(rl) {
         },
     });
     rl.registerAction("credential.get", {
+        access: "read",
         description: "Retrieve credential metadata by origin and optional namespace.",
         inputSchema: t.Object(CREDENTIAL_KEY_SCHEMA),
         async execute(input, ctx) {
@@ -29,6 +32,7 @@ export function registerCredentialActions(rl) {
         },
     });
     rl.registerAction("credential.delete", {
+        access: "write",
         description: "Delete a Steel credential by origin and optional namespace.",
         inputSchema: t.Object(CREDENTIAL_KEY_SCHEMA),
         async execute(input, ctx) {

package/dist/plugins/steel/src/extensions.js

@@ -8,6 +8,7 @@ function extensionForm(input) {
 }
 export function registerExtensionActions(rl) {
     rl.registerAction("extension.list", {
+        access: "read",
         description: "List Steel Chrome extensions installed for the organization.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
@@ -15,6 +16,7 @@ export function registerExtensionActions(rl) {
         },
     });
     rl.registerAction("extension.upload", {
+        access: "write",
         description: "Upload an extension from a Chrome Web Store URL. Raw zip/crx uploads should use the API directly.",
         inputSchema: t.Object({ url: t.String() }),
         async execute(input, ctx) {
@@ -22,6 +24,7 @@ export function registerExtensionActions(rl) {
         },
     });
     rl.registerAction("extension.update", {
+        access: "write",
         description: "Update an extension from a Chrome Web Store URL.",
         inputSchema: t.Object({ id: t.String(), url: t.String() }),
         async execute(input, ctx) {
@@ -30,6 +33,7 @@ export function registerExtensionActions(rl) {
         },
     });
     rl.registerAction("extension.delete", {
+        access: "write",
         description: "Delete an extension by ID.",
         inputSchema: t.Object({ id: t.String() }),
         async execute(input, ctx) {
@@ -37,6 +41,7 @@ export function registerExtensionActions(rl) {
         },
     });
     rl.registerAction("extension.deleteAll", {
+        access: "write",
         description: "Delete all organization extensions.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {

package/dist/plugins/steel/src/files.js

@@ -21,6 +21,7 @@ function encodeFilePath(path) {
 }
 export function registerFileActions(rl) {
     rl.registerAction("file.list", {
+        access: "read",
         description: "List global Steel files.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
@@ -28,6 +29,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("file.upload", {
+        access: "write",
         description: "Upload a global file from a URL or existing path reference.",
         inputSchema: t.Object(fileSchema()),
         async execute(input, ctx) {
@@ -35,6 +37,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("file.download", {
+        access: "read",
         description: "Download/read a global file by path. Binary files are returned as text by fetch when possible; use the URL/API directly for raw bytes.",
         inputSchema: t.Object({ path: t.String() }),
         async execute(input, ctx) {
@@ -42,6 +45,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("file.delete", {
+        access: "write",
         description: "Delete a global Steel file by path.",
         inputSchema: t.Object({ path: t.String() }),
         async execute(input, ctx) {
@@ -49,6 +53,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.list", {
+        access: "read",
         description: "List files in a Steel session filesystem.",
         inputSchema: t.Object({ sessionId: t.String() }),
         async execute(input, ctx) {
@@ -56,6 +61,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.upload", {
+        access: "write",
         description: "Upload/copy a URL or global file into a session filesystem.",
         inputSchema: t.Object({ sessionId: t.String(), ...fileSchema() }),
         async execute(input, ctx) {
@@ -64,6 +70,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.download", {
+        access: "read",
         description: "Download/read a session file by path.",
         inputSchema: t.Object({ sessionId: t.String(), path: t.String() }),
         async execute(input, ctx) {
@@ -72,6 +79,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.downloadArchive", {
+        access: "read",
         description: "Download/read the zip archive of all files in a session.",
         inputSchema: t.Object({ sessionId: t.String() }),
         async execute(input, ctx) {
@@ -79,6 +87,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.delete", {
+        access: "write",
         description: "Delete a file from a session filesystem.",
         inputSchema: t.Object({ sessionId: t.String(), path: t.String() }),
         async execute(input, ctx) {
@@ -87,6 +96,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.deleteAll", {
+        access: "write",
         description: "Delete all files in a session filesystem.",
         inputSchema: t.Object({ sessionId: t.String() }),
         async execute(input, ctx) {

package/dist/plugins/steel/src/profiles.js

@@ -11,6 +11,7 @@ function profileForm(input) {
 }
 export function registerProfileActions(rl) {
     rl.registerAction("profile.list", {
+        access: "read",
         description: "List Steel browser profiles.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
@@ -18,6 +19,7 @@ export function registerProfileActions(rl) {
         },
     });
     rl.registerAction("profile.get", {
+        access: "read",
         description: "Get a Steel profile by ID.",
         inputSchema: t.Object({ id: t.String() }),
         async execute(input, ctx) {
@@ -25,6 +27,7 @@ export function registerProfileActions(rl) {
         },
     });
     rl.registerAction("profile.create", {
+        access: "write",
         description: "Create an empty persisted Steel profile by opening and releasing a short-lived session with persistProfile=true. For userDataDir archive imports, use the Steel API directly.",
         inputSchema: t.Object({
             timeout: t.Optional(t.Number({ description: "Temporary session timeout in milliseconds" })),
@@ -45,6 +48,7 @@ export function registerProfileActions(rl) {
         },
     });
     rl.registerAction("profile.update", {
+        access: "write",
         description: "Update profile metadata/settings used by later sessions.",
         inputSchema: t.Object({ id: t.String(), userAgent: t.Optional(t.String()), proxy: t.Optional(t.Any()), metadata: t.Optional(t.Any()) }),
         async execute(input, ctx) {

package/dist/plugins/steel/src/sessions.js

@@ -2,6 +2,7 @@ import * as t from "typebox";
 import { LIST_INPUT_SCHEMA, SESSION_OPTIONS_SCHEMA, api, apiKey, compactRecord } from "./shared.js";
 export function registerSessionActions(rl) {
     rl.registerAction("session.create", {
+        access: "write",
         description: "Create a Steel browser session. Returns session id, websocketUrl/CDP URL, debug/viewer URLs, and profile metadata when present.",
         inputSchema: t.Object(SESSION_OPTIONS_SCHEMA),
         async execute(input, ctx) {
@@ -9,6 +10,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.list", {
+        access: "read",
         description: "List Steel sessions.",
         inputSchema: t.Object(LIST_INPUT_SCHEMA),
         async execute(input, ctx) {
@@ -16,6 +18,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.get", {
+        access: "read",
         description: "Get a Steel session by ID.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -23,6 +26,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.release", {
+        access: "write",
         description: "Release a Steel session when work is done.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -30,6 +34,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.releaseAll", {
+        access: "write",
         description: "Release all live Steel sessions for the organization by listing sessions and releasing each live session individually.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
@@ -51,6 +56,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.context", {
+        access: "read",
         description: "Capture cookies/localStorage context from a live session. Treat output as sensitive auth material.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -58,6 +64,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.traces", {
+        access: "read",
         description: "Fetch the Agent Traces timeline for a Steel session. Supports optional ISO startTime/endTime filters.",
         inputSchema: t.Object({
             id: t.String({ description: "Session ID" }),
@@ -70,6 +77,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.computer", {
+        access: "write",
         description: "Execute a Steel computer-use action against a live session. Useful for model-native computer-use loops; pass actions such as take_screenshot, click_mouse, type_text, press_key, scroll, or drag_mouse.",
         inputSchema: t.Object({
             id: t.String({ description: "Session ID" }),
@@ -90,6 +98,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.events", {
+        access: "read",
         description: "Fetch legacy recorded session events for replay tooling.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -97,6 +106,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.hls", {
+        access: "read",
         description: "Fetch the HLS playlist for a recorded headful Steel session.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -104,6 +114,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.cdpUrl", {
+        access: "read",
         description: "Build a Playwright/Puppeteer CDP URL for a Steel session using the configured API key.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }), websocketUrl: t.Optional(t.String({ description: "Optional websocketUrl returned by session.create. If omitted, uses wss://connect.steel.dev with sessionId." })) }),
         async execute(input, ctx) {

package/dist/plugins/storyblok/src/index.js

@@ -58,6 +58,7 @@ export default function storyblok(rl) {
     });
     // ── Content API ─────────────────────────────────────
     rl.registerAction("content.story.get", {
+        access: "read",
         description: "Get a published story by slug or ID (Content API)",
         inputSchema: {
             identifier: {
@@ -75,6 +76,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("content.story.list", {
+        access: "read",
         description: "List published stories (Content API)",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -100,6 +102,7 @@ export default function storyblok(rl) {
     });
     // ── Management API ──────────────────────────────────
     rl.registerAction("management.story.get", {
+        access: "read",
         description: "Get a story by ID (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },
@@ -115,6 +118,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("management.story.list", {
+        access: "read",
         description: "List stories in a space (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },
@@ -133,6 +137,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("management.story.delete", {
+        access: "write",
         description: "Delete a story (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },
@@ -148,6 +153,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("management.story.publish", {
+        access: "write",
         description: "Publish a story (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },
@@ -170,6 +176,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("management.story.unpublish", {
+        access: "write",
         description: "Unpublish a story (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },

package/dist/plugins/strapi/src/index.js

@@ -92,6 +92,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.create", {
+        access: "write",
         description: "Create an entry in a content type",
         inputSchema: {
             contentType: {
@@ -111,6 +112,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.get", {
+        access: "read",
         description: "Get an entry by ID",
         inputSchema: {
             contentType: { type: "string", required: true },
@@ -124,6 +126,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.list", {
+        access: "read",
         description: "List entries of a content type",
         inputSchema: {
             contentType: { type: "string", required: true },
@@ -172,6 +175,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.update", {
+        access: "write",
         description: "Update an entry by ID",
         inputSchema: {
             contentType: { type: "string", required: true },
@@ -189,6 +193,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.delete", {
+        access: "write",
         description: "Delete an entry by ID",
         inputSchema: {
             contentType: { type: "string", required: true },

package/dist/plugins/strava/src/index.js

@@ -39,6 +39,7 @@ export default function strava(rl) {
     });
     const key = (ctx) => ctx.connection.config.accessToken;
     rl.registerAction("activity.create", {
+        access: "write",
         description: "Create an activity",
         inputSchema: {
             name: { type: "string", required: true },
@@ -86,6 +87,7 @@ export default function strava(rl) {
         },
     });
     rl.registerAction("activity.get", {
+        access: "read",
         description: "Get an activity by ID",
         inputSchema: { activityId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -93,6 +95,7 @@ export default function strava(rl) {
         },
     });
     rl.registerAction("activity.list", {
+        access: "read",
         description: "List the authenticated athlete's activities",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -103,6 +106,7 @@ export default function strava(rl) {
         },
     });
     rl.registerAction("activity.update", {
+        access: "write",
         description: "Update an activity",
         inputSchema: {
             activityId: { type: "string", required: true },
@@ -150,6 +154,7 @@ export default function strava(rl) {
         },
     ]) {
         rl.registerAction(`activity.${sub.name}`, {
+            access: "read",
             description: sub.description,
             inputSchema: {
                 activityId: { type: "string", required: true },
@@ -165,6 +170,7 @@ export default function strava(rl) {
         });
     }
     rl.registerAction("activity.getStreams", {
+        access: "read",
         description: "Get activity streams (time-series data)",
         inputSchema: {
             activityId: { type: "string", required: true },

package/dist/plugins/stripe/src/index.js

@@ -51,6 +51,7 @@ export default function stripe(rl) {
     const key = (ctx) => ctx.connection.config.secretKey;
     // ── Balance ─────────────────────────────────────────
     rl.registerAction("balance.get", {
+        access: "read",
         description: "Get current balance",
         inputSchema: {},
         async execute(_input, ctx) {
@@ -59,6 +60,7 @@ export default function stripe(rl) {
     });
     // ── Customer ────────────────────────────────────────
     rl.registerAction("customer.create", {
+        access: "write",
         description: "Create a customer",
         inputSchema: {
             name: { type: "string", required: true },
@@ -71,6 +73,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customer.get", {
+        access: "read",
         description: "Get a customer by ID",
         inputSchema: { customerId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -78,6 +81,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customer.list", {
+        access: "read",
         description: "List customers",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -95,6 +99,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customer.update", {
+        access: "write",
         description: "Update a customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -109,6 +114,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customer.delete", {
+        access: "write",
         description: "Delete a customer",
         inputSchema: { customerId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -117,6 +123,7 @@ export default function stripe(rl) {
     });
     // ── Charge ──────────────────────────────────────────
     rl.registerAction("charge.create", {
+        access: "write",
         description: "Create a charge",
         inputSchema: {
             amount: {
@@ -138,6 +145,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("charge.get", {
+        access: "read",
         description: "Get a charge by ID",
         inputSchema: { chargeId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -145,6 +153,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("charge.list", {
+        access: "read",
         description: "List charges",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -156,6 +165,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("charge.update", {
+        access: "write",
         description: "Update a charge",
         inputSchema: {
             chargeId: { type: "string", required: true },
@@ -168,6 +178,7 @@ export default function stripe(rl) {
     });
     // ── Coupon ──────────────────────────────────────────
     rl.registerAction("coupon.create", {
+        access: "write",
         description: "Create a coupon",
         inputSchema: {
             duration: {
@@ -196,6 +207,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("coupon.list", {
+        access: "read",
         description: "List coupons",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -208,6 +220,7 @@ export default function stripe(rl) {
     });
     // ── Customer Card ───────────────────────────────────
     rl.registerAction("customerCard.add", {
+        access: "write",
         description: "Add a card to a customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -223,6 +236,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customerCard.get", {
+        access: "read",
         description: "Get a customer's card/source",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -234,6 +248,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customerCard.remove", {
+        access: "write",
         description: "Remove a card from a customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -246,6 +261,7 @@ export default function stripe(rl) {
     });
     // ── Source ──────────────────────────────────────────
     rl.registerAction("source.create", {
+        access: "write",
         description: "Create a source and attach to customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -267,6 +283,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("source.get", {
+        access: "read",
         description: "Get a source by ID",
         inputSchema: { sourceId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -274,6 +291,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("source.delete", {
+        access: "write",
         description: "Detach a source from a customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -286,6 +304,7 @@ export default function stripe(rl) {
     });
     // ── Token ───────────────────────────────────────────
     rl.registerAction("token.createCard", {
+        access: "write",
         description: "Create a card token",
         inputSchema: {
             number: { type: "string", required: true },
@@ -307,6 +326,7 @@ export default function stripe(rl) {
     });
     // ── Meter Event ─────────────────────────────────────
     rl.registerAction("meterEvent.create", {
+        access: "write",
         description: "Create a billing meter event",
         inputSchema: {
             eventName: { type: "string", required: true },

package/dist/plugins/supabase/src/index.js

@@ -47,6 +47,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.create", {
+        access: "write",
         description: "Insert rows into a table",
         inputSchema: {
             table: { type: "string", required: true },
@@ -71,6 +72,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.get", {
+        access: "read",
         description: "Get rows by filter (PostgREST query params)",
         inputSchema: {
             table: { type: "string", required: true },
@@ -91,6 +93,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.list", {
+        access: "read",
         description: "List rows from a table",
         inputSchema: {
             table: { type: "string", required: true },
@@ -117,6 +120,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.update", {
+        access: "write",
         description: "Update rows matching a filter",
         inputSchema: {
             table: { type: "string", required: true },
@@ -138,6 +142,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.delete", {
+        access: "write",
         description: "Delete rows matching a filter",
         inputSchema: {
             table: { type: "string", required: true },