runline 0.11.6 → 0.12.0

package/dist/plugins/googleDocs/src/structure.js

@@ -12,6 +12,7 @@ function point(value) {
 }
 export function registerStructureActions(rl) {
     rl.registerAction("document.insertPageBreak", {
+        access: "write",
         description: "Insert a page break at an index or at the end of a segment.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -30,6 +31,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.createNamedRange", {
+        access: "write",
         description: "Create a named range over a span of text (useful for later programmatic edits).",
         inputSchema: {
             document: { type: "string", required: true },
@@ -51,6 +53,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.deleteNamedRange", {
+        access: "write",
         description: "Delete named range(s). Pass one of `namedRangeId` or `name`; the latter deletes every range sharing that name.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -77,6 +80,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.createHeader", {
+        access: "write",
         description: "Create a DEFAULT header attached to a SectionBreak.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -106,6 +110,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.deleteHeader", {
+        access: "write",
         description: "Delete a header by ID.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -120,6 +125,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.createFooter", {
+        access: "write",
         description: "Create a DEFAULT footer attached to a SectionBreak.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -149,6 +155,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.deleteFooter", {
+        access: "write",
         description: "Delete a footer by ID.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -163,6 +170,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.deletePositionedObject", {
+        access: "write",
         description: "Delete a positioned object (inline image, floating image, etc.) by its objectId.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -181,6 +189,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.createFootnote", {
+        access: "write",
         description: "Create a footnote reference at a location or at the end of the document body.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -203,6 +212,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.replaceNamedRangeContent", {
+        access: "write",
         description: "Replace the content of a named range by ID or name with text.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -234,6 +244,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.updateSectionStyle", {
+        access: "write",
         description: "Update section style over a range, such as margins or column properties.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -303,6 +314,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.insertSectionBreak", {
+        access: "write",
         description: "Insert a section break at the given location.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -329,6 +341,7 @@ export function registerStructureActions(rl) {
         },
     });
     rl.registerAction("document.updateDocumentStyle", {
+        access: "write",
         description: "Update document-level style (page size, margins, page numbers, default direction).",
         inputSchema: {
             document: { type: "string", required: true },

package/dist/plugins/googleDocs/src/tables.js

@@ -14,6 +14,7 @@ function point(value) {
 }
 export function registerTablesActions(rl) {
     rl.registerAction("document.insertTable", {
+        access: "write",
         description: "Insert an empty table with the given dimensions.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -38,6 +39,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.insertTableRow", {
+        access: "write",
         description: "Insert a table row above or below a cell in an existing table.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -68,6 +70,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.deleteTableRow", {
+        access: "write",
         description: "Delete a specific row from a table.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -88,6 +91,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.insertTableColumn", {
+        access: "write",
         description: "Insert a column left or right of a cell.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -114,6 +118,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.deleteTableColumn", {
+        access: "write",
         description: "Delete a specific column from a table.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -134,6 +139,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.updateTableCellStyle", {
+        access: "write",
         description: "Apply table-cell styling (background color, borders, padding) to a contiguous span of cells. Pass either a single cell via `tableStartLocation+rowIndex+columnIndex`, or a range via `tableStartLocation+rowSpan+columnSpan`.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -214,6 +220,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.mergeTableCells", {
+        access: "write",
         description: "Merge a contiguous block of cells in a table.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -246,6 +253,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.unmergeTableCells", {
+        access: "write",
         description: "Unmerge a previously merged block of cells.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -278,6 +286,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.updateTableColumnProperties", {
+        access: "write",
         description: "Update table column properties such as width for selected columns or all columns.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -333,6 +342,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.updateTableRowStyle", {
+        access: "write",
         description: "Update table row style such as minimum row height for selected rows or all rows.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -374,6 +384,7 @@ export function registerTablesActions(rl) {
         },
     });
     rl.registerAction("document.pinTableHeaderRows", {
+        access: "write",
         description: "Pin or unpin header rows in a table.",
         inputSchema: {
             document: { type: "string", required: true },

package/dist/plugins/googleDocs/src/tabs.js

@@ -9,6 +9,7 @@ function tabProperties(p) {
 }
 export function registerTabActions(rl) {
     rl.registerAction("document.addDocumentTab", {
+        access: "write",
         description: "Add a Google Docs document tab, optionally at an index or under a parent tab.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -25,6 +26,7 @@ export function registerTabActions(rl) {
         },
     });
     rl.registerAction("document.deleteTab", {
+        access: "write",
         description: "Delete a Google Docs document tab by tab ID. Child tabs are deleted too.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -39,6 +41,7 @@ export function registerTabActions(rl) {
         },
     });
     rl.registerAction("document.updateDocumentTabProperties", {
+        access: "write",
         description: "Update Google Docs tab properties such as title, index, or parent tab.",
         inputSchema: {
             document: { type: "string", required: true },

package/dist/plugins/googleDocs/src/text.js

@@ -9,6 +9,7 @@ function range(p) {
 }
 export function registerTextActions(rl) {
     rl.registerAction("document.insertText", {
+        access: "write",
         description: "Insert text at a specific index, or at the end of a segment (body/header/footer/footnote).",
         inputSchema: {
             document: { type: "string", required: true },
@@ -41,6 +42,7 @@ export function registerTextActions(rl) {
         },
     });
     rl.registerAction("document.replaceAllText", {
+        access: "write",
         description: "Replace every occurrence of a text string throughout the document.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -73,6 +75,7 @@ export function registerTextActions(rl) {
         },
     });
     rl.registerAction("document.deleteContentRange", {
+        access: "write",
         description: "Delete text between two indices in a segment.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -90,6 +93,7 @@ export function registerTextActions(rl) {
         },
     });
     rl.registerAction("document.createParagraphBullets", {
+        access: "write",
         description: "Apply a bullet preset to paragraphs spanning a range. Presets: BULLET_DISC_CIRCLE_SQUARE, BULLET_DIAMONDX_ARROW3D_SQUARE, BULLET_CHECKBOX, NUMBERED_DECIMAL_ALPHA_ROMAN, NUMBERED_DECIMAL_NESTED, etc.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -111,6 +115,7 @@ export function registerTextActions(rl) {
         },
     });
     rl.registerAction("document.deleteParagraphBullets", {
+        access: "write",
         description: "Remove bullets from paragraphs in a range.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -128,6 +133,7 @@ export function registerTextActions(rl) {
         },
     });
     rl.registerAction("document.insertPerson", {
+        access: "write",
         description: "Insert a smart chip person mention at a location or at the end of a segment.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -158,6 +164,7 @@ export function registerTextActions(rl) {
         },
     });
     rl.registerAction("document.insertRichLink", {
+        access: "write",
         description: "Insert a rich link smart chip at a location or at the end of a segment.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -188,6 +195,7 @@ export function registerTextActions(rl) {
         },
     });
     rl.registerAction("document.insertDate", {
+        access: "write",
         description: "Insert a date smart chip at a location or at the end of a segment.",
         inputSchema: {
             document: { type: "string", required: true },
@@ -220,6 +228,7 @@ export function registerTextActions(rl) {
         },
     });
     rl.registerAction("document.updateTextStyle", {
+        access: "write",
         description: "Apply text styling (bold, italic, underline, color, fontSize, fontFamily, link) to a range. Pass `fields` listing which TextStyle properties were set.",
         inputSchema: {
             document: { type: "string", required: true },

package/dist/plugins/googleDrive/src/index.js

@@ -435,6 +435,7 @@ export default function googleDrive(rl) {
     });
     // ── File ──────────────────────────────────────────────
     rl.registerAction("file.upload", {
+        access: "write",
         description: "Upload a file to Drive. Supply one of contentBase64 / contentPath / content. Uses multipart for small files, resumable (2 MiB chunks) for large streamed paths.",
         inputSchema: {
             name: { type: "string", required: false, description: "File name in Drive" },
@@ -496,6 +497,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.createFromText", {
+        access: "write",
         description: "Create a text file from inline content. Set convertToGoogleDocument=true to convert to a Google Doc.",
         inputSchema: {
             name: { type: "string", required: false, description: 'Default: "Untitled"' },
@@ -569,6 +571,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.download", {
+        access: "write",
         description: "Download a file. Google-native docs are exported to the chosen format; regular files are downloaded as-is. Returns base64 by default, or writes to disk when savePath is set.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -633,6 +636,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.copy", {
+        access: "write",
         description: "Copy a file",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -663,6 +667,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.move", {
+        access: "write",
         description: "Move a file to another folder. Resolves current parents and swaps them in a single PATCH.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -682,6 +687,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.update", {
+        access: "write",
         description: "Patch file metadata and/or replace its bytes. Supply content{Base64,Path} to update bytes.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -801,6 +807,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.delete", {
+        access: "write",
         description: "Delete a file. Moves to trash by default; pass deletePermanently=true to erase.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -820,6 +827,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.get", {
+        access: "read",
         description: "Get file metadata",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -831,6 +839,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.share", {
+        access: "write",
         description: "Add a permission to a file. Create one permission per call; list the existing permissions via file.listPermissions.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -880,6 +889,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.listPermissions", {
+        access: "read",
         description: "List permissions on a file",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -895,6 +905,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("file.deletePermission", {
+        access: "write",
         description: "Revoke a permission on a file",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -908,6 +919,7 @@ export default function googleDrive(rl) {
     });
     // ── Folder ────────────────────────────────────────────
     rl.registerAction("folder.create", {
+        access: "write",
         description: "Create a folder",
         inputSchema: {
             name: { type: "string", required: false, description: 'Default: "Untitled"' },
@@ -933,6 +945,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("folder.delete", {
+        access: "write",
         description: "Delete a folder. Moves to trash by default; pass deletePermanently=true to erase.",
         inputSchema: {
             folderId: { type: "string", required: true },
@@ -952,6 +965,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("folder.share", {
+        access: "write",
         description: "Add a permission to a folder (same shape as file.share)",
         inputSchema: {
             folderId: { type: "string", required: true },
@@ -991,6 +1005,7 @@ export default function googleDrive(rl) {
     });
     // ── File / folder search ──────────────────────────────
     rl.registerAction("fileFolder.search", {
+        access: "read",
         description: "Search files and folders. `query` is passed directly; `name` wraps it as `name contains '…'`. Combine with folderId/driveId/whatToSearch/fileTypes filters.",
         inputSchema: {
             name: {
@@ -1079,6 +1094,7 @@ export default function googleDrive(rl) {
     });
     // ── Shared drive ──────────────────────────────────────
     rl.registerAction("drive.create", {
+        access: "write",
         description: "Create a shared drive. requestId is generated automatically.",
         inputSchema: {
             name: { type: "string", required: true },
@@ -1098,6 +1114,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("drive.get", {
+        access: "read",
         description: "Get a shared drive",
         inputSchema: {
             driveId: { type: "string", required: true },
@@ -1112,6 +1129,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("drive.list", {
+        access: "read",
         description: "List shared drives",
         inputSchema: {
             q: { type: "string", required: false, description: "Shared-drive search syntax" },
@@ -1138,6 +1156,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("drive.update", {
+        access: "write",
         description: "Patch a shared drive",
         inputSchema: {
             driveId: { type: "string", required: true },
@@ -1156,6 +1175,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("drive.delete", {
+        access: "write",
         description: "Delete a shared drive",
         inputSchema: { driveId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -1180,6 +1200,7 @@ export default function googleDrive(rl) {
         "author(displayName,emailAddress),action,content,htmlContent";
     const REPLY_LIST_FIELDS = `kind,nextPageToken,replies(${REPLY_FIELDS})`;
     rl.registerAction("comment.list", {
+        access: "read",
         description: "List all comments on a Drive file, including each comment's replies. Returns an array sorted by Drive's default (most recent first).",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1222,6 +1243,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("comment.get", {
+        access: "read",
         description: "Fetch a single comment (with its replies) by ID.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1234,6 +1256,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("comment.create", {
+        access: "write",
         description: "Create a new top-level comment on a file. Pass quotedFileContent.value (and optionally mimeType) to anchor the comment to a specific snippet.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1253,6 +1276,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("comment.update", {
+        access: "write",
         description: "Edit the content of an existing comment. Caller must be the author or have edit rights.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1265,6 +1289,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("comment.delete", {
+        access: "write",
         description: "Soft-delete a comment.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1277,6 +1302,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("comment.resolve", {
+        access: "write",
         description: "Resolve a comment thread by posting a resolution reply. `resolved` on a Comment is computed from replies; this is the canonical way to mark a thread done.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1293,6 +1319,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("comment.reopen", {
+        access: "write",
         description: "Re-open a previously resolved comment by posting a reopen reply.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1305,6 +1332,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("reply.list", {
+        access: "read",
         description: "List replies on a specific comment.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1333,6 +1361,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("reply.create", {
+        access: "write",
         description: "Post a reply to a comment. Pass action: 'resolve' | 'reopen' to also flip the comment state.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1353,6 +1382,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("reply.update", {
+        access: "write",
         description: "Edit the content of a reply.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1366,6 +1396,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("reply.delete", {
+        access: "write",
         description: "Soft-delete a reply.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1397,6 +1428,7 @@ export default function googleDrive(rl) {
         "published,publishAuto,publishedOutsideDomain,publishedLink";
     const REVISION_LIST_FIELDS = `kind,nextPageToken,revisions(${REVISION_FIELDS})`;
     rl.registerAction("revision.list", {
+        access: "read",
         description: "List every revision Drive retains for a file, oldest first. For Office files the per-revision bytes are what `revision.download` returns.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1423,6 +1455,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("revision.get", {
+        access: "read",
         description: "Fetch metadata for a single revision.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1434,6 +1467,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("revision.download", {
+        access: "write",
         description: "Download the bytes of a specific revision. Pass savePath to write to disk and get back the path; otherwise returns { contentBase64, mimeType, size }. This is the recovery path when an in-place file.update has overwritten in-document comments on an Office file.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1473,6 +1507,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("revision.update", {
+        access: "write",
         description: "Patch revision metadata. The most useful flag is keepForever — without it Drive can garbage-collect revisions after 30 days / 100 versions on Office files. Set keepForever=true on the head revision before any risky file.update so prior bytes are guaranteed recoverable.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1501,6 +1536,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("revision.delete", {
+        access: "write",
         description: "Permanently delete a revision (head revision cannot be deleted).",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1513,6 +1549,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("revision.restore", {
+        access: "write",
         description: "Restore an older revision as the head of the file. Downloads the revision bytes and re-uploads them via multipart so the head moves to that content. Drive's REST API has no native restore endpoint for binary files; this performs the equivalent in two calls. Returns the new head file resource.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1565,6 +1602,7 @@ export default function googleDrive(rl) {
     // per file. With them, a sensor can wake on any file change in the user's
     // corpus or in a specific shared drive.
     rl.registerAction("changes.getStartPageToken", {
+        access: "read",
         description: "Get the current Drive change-feed start page token. Use as the seed `pageToken` for the first `changes.list` call.",
         inputSchema: {
             driveId: { type: "string", required: false, description: "Shared-drive id; omit for the user's My Drive corpus." },
@@ -1579,6 +1617,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("changes.list", {
+        access: "read",
         description: "List changes to files and Shared Drives since the given `pageToken`. Returns `{ changes, newStartPageToken, nextPageToken? }`. Drive does not surface comment-level changes here — use this for file metadata/content changes; pair with comments.list for review activity.",
         inputSchema: {
             pageToken: { type: "string", required: true, description: "Token from `changes.getStartPageToken` or a prior `nextPageToken`." },
@@ -1608,6 +1647,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("changes.watch", {
+        access: "write",
         description: "Subscribe to push notifications on the change feed. Drive will POST to `address` whenever a change in this corpus is recorded. Returns a channel resource; pair with `channels.stop` (`changes.stop`) when done.",
         inputSchema: {
             pageToken: { type: "string", required: true },
@@ -1639,6 +1679,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("changes.stop", {
+        access: "write",
         description: "Stop a previously-subscribed change channel. Pass the same `channelId` and `resourceId` returned by `changes.watch`.",
         inputSchema: {
             channelId: { type: "string", required: true },
@@ -1657,6 +1698,7 @@ export default function googleDrive(rl) {
     // commenter to writer (or expire a permission) without re-sharing, you
     // need the PATCH endpoint.
     rl.registerAction("permission.update", {
+        access: "write",
         description: "Patch an existing file/folder permission. Use to change the role on an existing share, set an expiration time, or transfer ownership.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1695,6 +1737,7 @@ export default function googleDrive(rl) {
     // owner can resolve (accept and grant, or deny). These actions let the
     // agent triage and resolve those requests programmatically.
     rl.registerAction("accessProposal.list", {
+        access: "read",
         description: "List access proposals (Request-access entries) on a file.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1714,6 +1757,7 @@ export default function googleDrive(rl) {
         },
     });
     rl.registerAction("accessProposal.resolve", {
+        access: "write",
         description: "Resolve an access proposal. `action` is one of 'ACCEPT' or 'DENY'. When accepting, pass `role` (default 'reader') to grant.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1738,6 +1782,7 @@ export default function googleDrive(rl) {
     });
     // ─── About ───────────────────────────────────────────────────────
     rl.registerAction("about.get", {
+        access: "read",
         description: "Current user info: storage quota, export formats, max upload size, importable mime types. Useful for healthchecks and conversion planning.",
         inputSchema: {
             fields: { type: "string", required: false },
@@ -1752,6 +1797,7 @@ export default function googleDrive(rl) {
     });
     // ─── File export (ergonomic wrapper) ────────────────────────────
     rl.registerAction("file.export", {
+        access: "write",
         description: "Export a Google-native file (Doc/Sheet/Slide/Drawing/Form) to a non-native mimeType. Wrapper around the export endpoint; pass `savePath` to write to disk and get the path back, otherwise returns base64.",
         inputSchema: {
             fileId: { type: "string", required: true },
@@ -1782,6 +1828,7 @@ export default function googleDrive(rl) {
     });
     // ─── Raw file.list ──────────────────────────────────────────────
     rl.registerAction("file.list", {
+        access: "read",
         description: "Raw Drive `files.list`. Pass Drive search-syntax `q` and any combination of corpora / driveId / spaces / orderBy. `fileFolder.search` is the friendlier wrapper; reach for `file.list` only when you need the unwrapped surface.",
         inputSchema: {
             q: { type: "string", required: false },

package/dist/plugins/googleImage/src/index.js

@@ -33,6 +33,7 @@ export default function googleImage(rl) {
         },
     });
     rl.registerAction("image.create", {
+        access: "write",
         description: "Generate an image with Google's Gemini image models (Nano Banana / Imagen). Writes the image(s) to disk and returns their file `path`s — not base64. Deliver each image to the user with send_file using its `path`.",
         inputSchema: {
             prompt: {