runline 0.11.6 → 0.12.0

package/dist/plugins/splunk/src/index.js

@@ -71,6 +71,7 @@ export default function splunk(rl) {
     });
     // ── Search Jobs ─────────────────────────────────────
     rl.registerAction("search.create", {
+        access: "write",
         description: "Create a search job",
         inputSchema: {
             search: { type: "string", required: true, description: "SPL query" },
@@ -107,6 +108,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("search.get", {
+        access: "read",
         description: "Get a search job by ID",
         inputSchema: { searchJobId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -115,6 +117,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("search.list", {
+        access: "read",
         description: "List search jobs",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -137,6 +140,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("search.delete", {
+        access: "write",
         description: "Delete a search job",
         inputSchema: { searchJobId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -146,6 +150,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("search.getResults", {
+        access: "read",
         description: "Get results of a search job",
         inputSchema: {
             searchJobId: { type: "string", required: true },
@@ -176,6 +181,7 @@ export default function splunk(rl) {
     });
     // ── Alerts ──────────────────────────────────────────
     rl.registerAction("alert.getMetrics", {
+        access: "read",
         description: "Get metric alerts",
         inputSchema: {},
         async execute(_input, ctx) {
@@ -184,6 +190,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("alert.getFired", {
+        access: "read",
         description: "Get fired alerts report",
         inputSchema: {},
         async execute(_input, ctx) {
@@ -193,6 +200,7 @@ export default function splunk(rl) {
     });
     // ── Reports (Saved Searches) ────────────────────────
     rl.registerAction("report.create", {
+        access: "write",
         description: "Create a saved search / report from a search job",
         inputSchema: {
             name: { type: "string", required: true },
@@ -223,6 +231,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("report.get", {
+        access: "read",
         description: "Get a saved search / report",
         inputSchema: { reportId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -231,6 +240,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("report.list", {
+        access: "read",
         description: "List saved searches / reports",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -245,6 +255,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("report.delete", {
+        access: "write",
         description: "Delete a saved search / report",
         inputSchema: { reportId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -255,6 +266,7 @@ export default function splunk(rl) {
     });
     // ── Users ───────────────────────────────────────────
     rl.registerAction("user.create", {
+        access: "write",
         description: "Create a Splunk user",
         inputSchema: {
             name: { type: "string", required: true, description: "Login name" },
@@ -283,6 +295,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("user.get", {
+        access: "read",
         description: "Get a user",
         inputSchema: {
             userId: { type: "string", required: true, description: "Username" },
@@ -293,6 +306,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("user.list", {
+        access: "read",
         description: "List users",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -307,6 +321,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("user.update", {
+        access: "write",
         description: "Update a user",
         inputSchema: {
             userId: { type: "string", required: true, description: "Username" },
@@ -335,6 +350,7 @@ export default function splunk(rl) {
         },
     });
     rl.registerAction("user.delete", {
+        access: "write",
         description: "Delete a user",
         inputSchema: {
             userId: { type: "string", required: true, description: "Username" },

package/dist/plugins/spotify/src/index.js

@@ -41,6 +41,7 @@ export default function spotify(rl) {
     const t = (ctx) => ctx.connection.config.accessToken;
     // ── Player ──────────────────────────────────────────
     rl.registerAction("player.pause", {
+        access: "write",
         description: "Pause playback",
         inputSchema: {},
         async execute(_i, ctx) {
@@ -48,6 +49,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("player.resume", {
+        access: "write",
         description: "Resume playback",
         inputSchema: {},
         async execute(_i, ctx) {
@@ -55,6 +57,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("player.next", {
+        access: "write",
         description: "Skip to next track",
         inputSchema: {},
         async execute(_i, ctx) {
@@ -62,6 +65,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("player.previous", {
+        access: "write",
         description: "Skip to previous track",
         inputSchema: {},
         async execute(_i, ctx) {
@@ -69,6 +73,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("player.currentlyPlaying", {
+        access: "read",
         description: "Get currently playing track",
         inputSchema: {},
         async execute(_i, ctx) {
@@ -76,6 +81,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("player.recentlyPlayed", {
+        access: "read",
         description: "Get recently played tracks",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -87,6 +93,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("player.addToQueue", {
+        access: "write",
         description: "Add a track to the queue",
         inputSchema: {
             uri: { type: "string", required: true, description: "Track URI or ID" },
@@ -98,6 +105,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("player.setVolume", {
+        access: "write",
         description: "Set playback volume",
         inputSchema: {
             volumePercent: { type: "number", required: true, description: "0-100" },
@@ -109,6 +117,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("player.startMusic", {
+        access: "write",
         description: "Start playing an album, artist, or playlist",
         inputSchema: {
             contextUri: {
@@ -125,6 +134,7 @@ export default function spotify(rl) {
     });
     // ── Album ───────────────────────────────────────────
     rl.registerAction("album.get", {
+        access: "read",
         description: "Get an album",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -132,6 +142,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("album.getTracks", {
+        access: "read",
         description: "Get an album's tracks",
         inputSchema: {
             id: { type: "string", required: true },
@@ -147,6 +158,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("album.getNewReleases", {
+        access: "read",
         description: "Get new album releases",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -164,6 +176,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("album.search", {
+        access: "read",
         description: "Search albums",
         inputSchema: {
             query: { type: "string", required: true },
@@ -182,6 +195,7 @@ export default function spotify(rl) {
     });
     // ── Artist ──────────────────────────────────────────
     rl.registerAction("artist.get", {
+        access: "read",
         description: "Get an artist",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -189,6 +203,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("artist.getAlbums", {
+        access: "read",
         description: "Get an artist's albums",
         inputSchema: {
             id: { type: "string", required: true },
@@ -204,6 +219,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("artist.getRelatedArtists", {
+        access: "read",
         description: "Get related artists",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -212,6 +228,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("artist.getTopTracks", {
+        access: "read",
         description: "Get an artist's top tracks",
         inputSchema: {
             id: { type: "string", required: true },
@@ -224,6 +241,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("artist.search", {
+        access: "read",
         description: "Search artists",
         inputSchema: {
             query: { type: "string", required: true },
@@ -242,6 +260,7 @@ export default function spotify(rl) {
     });
     // ── Playlist ────────────────────────────────────────
     rl.registerAction("playlist.get", {
+        access: "read",
         description: "Get a playlist",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -249,6 +268,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("playlist.getTracks", {
+        access: "read",
         description: "Get a playlist's tracks",
         inputSchema: {
             id: { type: "string", required: true },
@@ -264,6 +284,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("playlist.create", {
+        access: "write",
         description: "Create a playlist",
         inputSchema: {
             name: { type: "string", required: true },
@@ -275,6 +296,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("playlist.addTrack", {
+        access: "write",
         description: "Add a track to a playlist",
         inputSchema: {
             id: { type: "string", required: true },
@@ -290,6 +312,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("playlist.removeTrack", {
+        access: "write",
         description: "Remove a track from a playlist",
         inputSchema: {
             id: { type: "string", required: true },
@@ -301,6 +324,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("playlist.listMine", {
+        access: "read",
         description: "Get the current user's playlists",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -312,6 +336,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("playlist.search", {
+        access: "read",
         description: "Search playlists",
         inputSchema: {
             query: { type: "string", required: true },
@@ -330,6 +355,7 @@ export default function spotify(rl) {
     });
     // ── Track ───────────────────────────────────────────
     rl.registerAction("track.get", {
+        access: "read",
         description: "Get a track",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -337,6 +363,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("track.getAudioFeatures", {
+        access: "read",
         description: "Get audio features for a track",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -344,6 +371,7 @@ export default function spotify(rl) {
         },
     });
     rl.registerAction("track.search", {
+        access: "read",
         description: "Search tracks",
         inputSchema: {
             query: { type: "string", required: true },
@@ -362,6 +390,7 @@ export default function spotify(rl) {
     });
     // ── Library ─────────────────────────────────────────
     rl.registerAction("library.getLikedTracks", {
+        access: "read",
         description: "Get liked tracks",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -374,6 +403,7 @@ export default function spotify(rl) {
     });
     // ── My Data ─────────────────────────────────────────
     rl.registerAction("myData.getFollowingArtists", {
+        access: "read",
         description: "Get followed artists",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {

package/dist/plugins/stackby/src/index.js

@@ -31,6 +31,7 @@ export default function stackby(rl) {
     });
     const key = (ctx) => ctx.connection.config.apiKey;
     rl.registerAction("row.read", {
+        access: "read",
         description: "Read a row by ID",
         inputSchema: {
             stackId: { type: "string", required: true },
@@ -44,6 +45,7 @@ export default function stackby(rl) {
         },
     });
     rl.registerAction("row.list", {
+        access: "read",
         description: "List rows from a table",
         inputSchema: {
             stackId: { type: "string", required: true },
@@ -63,6 +65,7 @@ export default function stackby(rl) {
         },
     });
     rl.registerAction("row.append", {
+        access: "write",
         description: "Append rows to a table",
         inputSchema: {
             stackId: { type: "string", required: true },
@@ -80,6 +83,7 @@ export default function stackby(rl) {
         },
     });
     rl.registerAction("row.delete", {
+        access: "write",
         description: "Delete a row by ID",
         inputSchema: {
             stackId: { type: "string", required: true },

package/dist/plugins/steel/src/browser.js

@@ -83,26 +83,31 @@ async function connectMiniCdp(cdpUrl) {
 }
 export function registerBrowserActions(rl) {
     rl.registerAction("scrape", {
+        access: "write",
         description: "One-shot Steel scrape. Loads a URL and returns requested formats such as markdown, html, cleaned_html, or readability.",
         inputSchema: t.Object(SCRAPE_SCHEMA),
         execute: scrape,
     });
     rl.registerAction("browser.scrape", {
+        access: "write",
         description: "Backward-compatible alias for scrape.",
         inputSchema: t.Object(SCRAPE_SCHEMA),
         execute: scrape,
     });
     rl.registerAction("screenshot", {
+        access: "write",
         description: "One-shot Steel screenshot. Returns a hosted PNG URL.",
         inputSchema: t.Object(SCREENSHOT_SCHEMA),
         execute: screenshot,
     });
     rl.registerAction("browser.screenshot", {
+        access: "write",
         description: "Backward-compatible alias for screenshot.",
         inputSchema: t.Object(SCREENSHOT_SCHEMA),
         execute: screenshot,
     });
     rl.registerAction("browser.extract", {
+        access: "write",
         description: "Fetch a page through Steel scrape and return selected content fields. Use selectors with browser.run for DOM-specific extraction.",
         inputSchema: t.Object({
             url: t.String({ description: "URL to scrape" }),
@@ -116,6 +121,7 @@ export function registerBrowserActions(rl) {
         },
     });
     rl.registerAction("pdf", {
+        access: "write",
         description: "One-shot Steel PDF capture. Returns a hosted PDF URL.",
         inputSchema: t.Object({
             url: t.String({ description: "URL to render as PDF" }),
@@ -127,6 +133,7 @@ export function registerBrowserActions(rl) {
         },
     });
     rl.registerAction("browser.run", {
+        access: "write",
         description: "Create a Steel session, connect with Playwright over CDP, run an async JavaScript script, then release by default. The script receives { page, browser, context, session }. Requires the host app to have playwright installed.",
         inputSchema: t.Object({
             script: t.String({ description: "Async JavaScript body. Example: await page.goto('https://example.com'); return { title: await page.title() };" }),

package/dist/plugins/steel/src/captchas.js

@@ -2,16 +2,19 @@ import * as t from "typebox";
 import { api, compactRecord } from "./shared.js";
 export function registerCaptchaActions(rl) {
     rl.registerAction("captcha.status", {
+        access: "read",
         description: "Get CAPTCHA detection/solving status for a Steel session.",
         inputSchema: t.Object({ sessionId: t.String() }),
         async execute(input, ctx) { return api(ctx, `/v1/sessions/${encodeURIComponent(input.sessionId)}/captchas/status`); },
     });
     rl.registerAction("captcha.solve", {
+        access: "write",
         description: "Trigger CAPTCHA solving for all detected CAPTCHAs or a specific task/url/page.",
         inputSchema: t.Object({ sessionId: t.String(), taskId: t.Optional(t.String()), url: t.Optional(t.String()), pageId: t.Optional(t.String()) }),
         async execute(input, ctx) { const { sessionId, ...body } = input; return api(ctx, `/v1/sessions/${encodeURIComponent(String(sessionId))}/captchas/solve`, { method: "POST", body: compactRecord(body) }); },
     });
     rl.registerAction("captcha.solveImage", {
+        access: "write",
         description: "Solve an image CAPTCHA by XPath selectors.",
         inputSchema: t.Object({ sessionId: t.String(), imageXPath: t.String(), inputXPath: t.String(), url: t.Optional(t.String()) }),
         async execute(input, ctx) { const { sessionId, ...body } = input; return api(ctx, `/v1/sessions/${encodeURIComponent(String(sessionId))}/captchas/solve-image`, { method: "POST", body: compactRecord(body) }); },

package/dist/plugins/steel/src/credentials.js

@@ -6,6 +6,7 @@ const CREDENTIAL_KEY_SCHEMA = {
 };
 export function registerCredentialActions(rl) {
     rl.registerAction("credential.list", {
+        access: "read",
         description: "List Steel credentials. Filter by origin and/or namespace.",
         inputSchema: t.Object({ namespace: t.Optional(t.String()), origin: t.Optional(t.String()) }),
         async execute(input, ctx) {
@@ -13,6 +14,7 @@ export function registerCredentialActions(rl) {
         },
     });
     rl.registerAction("credential.create", {
+        access: "write",
         description: "Create a Steel credential for an origin/namespace. Value may include username, password, and totpSecret.",
         inputSchema: t.Object({ ...CREDENTIAL_KEY_SCHEMA, value: t.Any({ description: "Credential payload" }) }),
         async execute(input, ctx) {
@@ -20,6 +22,7 @@ export function registerCredentialActions(rl) {
         },
     });
     rl.registerAction("credential.get", {
+        access: "read",
         description: "Retrieve credential metadata by origin and optional namespace.",
         inputSchema: t.Object(CREDENTIAL_KEY_SCHEMA),
         async execute(input, ctx) {
@@ -29,6 +32,7 @@ export function registerCredentialActions(rl) {
         },
     });
     rl.registerAction("credential.delete", {
+        access: "write",
         description: "Delete a Steel credential by origin and optional namespace.",
         inputSchema: t.Object(CREDENTIAL_KEY_SCHEMA),
         async execute(input, ctx) {

package/dist/plugins/steel/src/extensions.js

@@ -8,6 +8,7 @@ function extensionForm(input) {
 }
 export function registerExtensionActions(rl) {
     rl.registerAction("extension.list", {
+        access: "read",
         description: "List Steel Chrome extensions installed for the organization.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
@@ -15,6 +16,7 @@ export function registerExtensionActions(rl) {
         },
     });
     rl.registerAction("extension.upload", {
+        access: "write",
         description: "Upload an extension from a Chrome Web Store URL. Raw zip/crx uploads should use the API directly.",
         inputSchema: t.Object({ url: t.String() }),
         async execute(input, ctx) {
@@ -22,6 +24,7 @@ export function registerExtensionActions(rl) {
         },
     });
     rl.registerAction("extension.update", {
+        access: "write",
         description: "Update an extension from a Chrome Web Store URL.",
         inputSchema: t.Object({ id: t.String(), url: t.String() }),
         async execute(input, ctx) {
@@ -30,6 +33,7 @@ export function registerExtensionActions(rl) {
         },
     });
     rl.registerAction("extension.delete", {
+        access: "write",
         description: "Delete an extension by ID.",
         inputSchema: t.Object({ id: t.String() }),
         async execute(input, ctx) {
@@ -37,6 +41,7 @@ export function registerExtensionActions(rl) {
         },
     });
     rl.registerAction("extension.deleteAll", {
+        access: "write",
         description: "Delete all organization extensions.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {

package/dist/plugins/steel/src/files.js

@@ -21,6 +21,7 @@ function encodeFilePath(path) {
 }
 export function registerFileActions(rl) {
     rl.registerAction("file.list", {
+        access: "read",
         description: "List global Steel files.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
@@ -28,6 +29,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("file.upload", {
+        access: "write",
         description: "Upload a global file from a URL or existing path reference.",
         inputSchema: t.Object(fileSchema()),
         async execute(input, ctx) {
@@ -35,6 +37,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("file.download", {
+        access: "read",
         description: "Download/read a global file by path. Binary files are returned as text by fetch when possible; use the URL/API directly for raw bytes.",
         inputSchema: t.Object({ path: t.String() }),
         async execute(input, ctx) {
@@ -42,6 +45,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("file.delete", {
+        access: "write",
         description: "Delete a global Steel file by path.",
         inputSchema: t.Object({ path: t.String() }),
         async execute(input, ctx) {
@@ -49,6 +53,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.list", {
+        access: "read",
         description: "List files in a Steel session filesystem.",
         inputSchema: t.Object({ sessionId: t.String() }),
         async execute(input, ctx) {
@@ -56,6 +61,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.upload", {
+        access: "write",
         description: "Upload/copy a URL or global file into a session filesystem.",
         inputSchema: t.Object({ sessionId: t.String(), ...fileSchema() }),
         async execute(input, ctx) {
@@ -64,6 +70,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.download", {
+        access: "read",
         description: "Download/read a session file by path.",
         inputSchema: t.Object({ sessionId: t.String(), path: t.String() }),
         async execute(input, ctx) {
@@ -72,6 +79,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.downloadArchive", {
+        access: "read",
         description: "Download/read the zip archive of all files in a session.",
         inputSchema: t.Object({ sessionId: t.String() }),
         async execute(input, ctx) {
@@ -79,6 +87,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.delete", {
+        access: "write",
         description: "Delete a file from a session filesystem.",
         inputSchema: t.Object({ sessionId: t.String(), path: t.String() }),
         async execute(input, ctx) {
@@ -87,6 +96,7 @@ export function registerFileActions(rl) {
         },
     });
     rl.registerAction("sessionFile.deleteAll", {
+        access: "write",
         description: "Delete all files in a session filesystem.",
         inputSchema: t.Object({ sessionId: t.String() }),
         async execute(input, ctx) {

package/dist/plugins/steel/src/profiles.js

@@ -11,6 +11,7 @@ function profileForm(input) {
 }
 export function registerProfileActions(rl) {
     rl.registerAction("profile.list", {
+        access: "read",
         description: "List Steel browser profiles.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
@@ -18,6 +19,7 @@ export function registerProfileActions(rl) {
         },
     });
     rl.registerAction("profile.get", {
+        access: "read",
         description: "Get a Steel profile by ID.",
         inputSchema: t.Object({ id: t.String() }),
         async execute(input, ctx) {
@@ -25,6 +27,7 @@ export function registerProfileActions(rl) {
         },
     });
     rl.registerAction("profile.create", {
+        access: "write",
         description: "Create an empty persisted Steel profile by opening and releasing a short-lived session with persistProfile=true. For userDataDir archive imports, use the Steel API directly.",
         inputSchema: t.Object({
             timeout: t.Optional(t.Number({ description: "Temporary session timeout in milliseconds" })),
@@ -45,6 +48,7 @@ export function registerProfileActions(rl) {
         },
     });
     rl.registerAction("profile.update", {
+        access: "write",
         description: "Update profile metadata/settings used by later sessions.",
         inputSchema: t.Object({ id: t.String(), userAgent: t.Optional(t.String()), proxy: t.Optional(t.Any()), metadata: t.Optional(t.Any()) }),
         async execute(input, ctx) {