runline 0.11.6 → 0.12.0

package/dist/plugins/steel/src/sessions.js

@@ -2,6 +2,7 @@ import * as t from "typebox";
 import { LIST_INPUT_SCHEMA, SESSION_OPTIONS_SCHEMA, api, apiKey, compactRecord } from "./shared.js";
 export function registerSessionActions(rl) {
     rl.registerAction("session.create", {
+        access: "write",
         description: "Create a Steel browser session. Returns session id, websocketUrl/CDP URL, debug/viewer URLs, and profile metadata when present.",
         inputSchema: t.Object(SESSION_OPTIONS_SCHEMA),
         async execute(input, ctx) {
@@ -9,6 +10,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.list", {
+        access: "read",
         description: "List Steel sessions.",
         inputSchema: t.Object(LIST_INPUT_SCHEMA),
         async execute(input, ctx) {
@@ -16,6 +18,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.get", {
+        access: "read",
         description: "Get a Steel session by ID.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -23,6 +26,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.release", {
+        access: "write",
         description: "Release a Steel session when work is done.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -30,6 +34,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.releaseAll", {
+        access: "write",
         description: "Release all live Steel sessions for the organization by listing sessions and releasing each live session individually.",
         inputSchema: t.Object({}),
         async execute(_input, ctx) {
@@ -51,6 +56,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.context", {
+        access: "read",
         description: "Capture cookies/localStorage context from a live session. Treat output as sensitive auth material.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -58,6 +64,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.traces", {
+        access: "read",
         description: "Fetch the Agent Traces timeline for a Steel session. Supports optional ISO startTime/endTime filters.",
         inputSchema: t.Object({
             id: t.String({ description: "Session ID" }),
@@ -70,6 +77,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.computer", {
+        access: "write",
         description: "Execute a Steel computer-use action against a live session. Useful for model-native computer-use loops; pass actions such as take_screenshot, click_mouse, type_text, press_key, scroll, or drag_mouse.",
         inputSchema: t.Object({
             id: t.String({ description: "Session ID" }),
@@ -90,6 +98,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.events", {
+        access: "read",
         description: "Fetch legacy recorded session events for replay tooling.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -97,6 +106,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.hls", {
+        access: "read",
         description: "Fetch the HLS playlist for a recorded headful Steel session.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }) }),
         async execute(input, ctx) {
@@ -104,6 +114,7 @@ export function registerSessionActions(rl) {
         },
     });
     rl.registerAction("session.cdpUrl", {
+        access: "read",
         description: "Build a Playwright/Puppeteer CDP URL for a Steel session using the configured API key.",
         inputSchema: t.Object({ id: t.String({ description: "Session ID" }), websocketUrl: t.Optional(t.String({ description: "Optional websocketUrl returned by session.create. If omitted, uses wss://connect.steel.dev with sessionId." })) }),
         async execute(input, ctx) {

package/dist/plugins/storyblok/src/index.js

@@ -58,6 +58,7 @@ export default function storyblok(rl) {
     });
     // ── Content API ─────────────────────────────────────
     rl.registerAction("content.story.get", {
+        access: "read",
         description: "Get a published story by slug or ID (Content API)",
         inputSchema: {
             identifier: {
@@ -75,6 +76,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("content.story.list", {
+        access: "read",
         description: "List published stories (Content API)",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -100,6 +102,7 @@ export default function storyblok(rl) {
     });
     // ── Management API ──────────────────────────────────
     rl.registerAction("management.story.get", {
+        access: "read",
         description: "Get a story by ID (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },
@@ -115,6 +118,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("management.story.list", {
+        access: "read",
         description: "List stories in a space (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },
@@ -133,6 +137,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("management.story.delete", {
+        access: "write",
         description: "Delete a story (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },
@@ -148,6 +153,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("management.story.publish", {
+        access: "write",
         description: "Publish a story (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },
@@ -170,6 +176,7 @@ export default function storyblok(rl) {
         },
     });
     rl.registerAction("management.story.unpublish", {
+        access: "write",
         description: "Unpublish a story (Management API)",
         inputSchema: {
             spaceId: { type: "string", required: true },

package/dist/plugins/strapi/src/index.js

@@ -92,6 +92,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.create", {
+        access: "write",
         description: "Create an entry in a content type",
         inputSchema: {
             contentType: {
@@ -111,6 +112,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.get", {
+        access: "read",
         description: "Get an entry by ID",
         inputSchema: {
             contentType: { type: "string", required: true },
@@ -124,6 +126,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.list", {
+        access: "read",
         description: "List entries of a content type",
         inputSchema: {
             contentType: { type: "string", required: true },
@@ -172,6 +175,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.update", {
+        access: "write",
         description: "Update an entry by ID",
         inputSchema: {
             contentType: { type: "string", required: true },
@@ -189,6 +193,7 @@ export default function strapi(rl) {
         },
     });
     rl.registerAction("entry.delete", {
+        access: "write",
         description: "Delete an entry by ID",
         inputSchema: {
             contentType: { type: "string", required: true },

package/dist/plugins/strava/src/index.js

@@ -39,6 +39,7 @@ export default function strava(rl) {
     });
     const key = (ctx) => ctx.connection.config.accessToken;
     rl.registerAction("activity.create", {
+        access: "write",
         description: "Create an activity",
         inputSchema: {
             name: { type: "string", required: true },
@@ -86,6 +87,7 @@ export default function strava(rl) {
         },
     });
     rl.registerAction("activity.get", {
+        access: "read",
         description: "Get an activity by ID",
         inputSchema: { activityId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -93,6 +95,7 @@ export default function strava(rl) {
         },
     });
     rl.registerAction("activity.list", {
+        access: "read",
         description: "List the authenticated athlete's activities",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -103,6 +106,7 @@ export default function strava(rl) {
         },
     });
     rl.registerAction("activity.update", {
+        access: "write",
         description: "Update an activity",
         inputSchema: {
             activityId: { type: "string", required: true },
@@ -150,6 +154,7 @@ export default function strava(rl) {
         },
     ]) {
         rl.registerAction(`activity.${sub.name}`, {
+            access: "read",
             description: sub.description,
             inputSchema: {
                 activityId: { type: "string", required: true },
@@ -165,6 +170,7 @@ export default function strava(rl) {
         });
     }
     rl.registerAction("activity.getStreams", {
+        access: "read",
         description: "Get activity streams (time-series data)",
         inputSchema: {
             activityId: { type: "string", required: true },

package/dist/plugins/stripe/src/index.js

@@ -51,6 +51,7 @@ export default function stripe(rl) {
     const key = (ctx) => ctx.connection.config.secretKey;
     // ── Balance ─────────────────────────────────────────
     rl.registerAction("balance.get", {
+        access: "read",
         description: "Get current balance",
         inputSchema: {},
         async execute(_input, ctx) {
@@ -59,6 +60,7 @@ export default function stripe(rl) {
     });
     // ── Customer ────────────────────────────────────────
     rl.registerAction("customer.create", {
+        access: "write",
         description: "Create a customer",
         inputSchema: {
             name: { type: "string", required: true },
@@ -71,6 +73,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customer.get", {
+        access: "read",
         description: "Get a customer by ID",
         inputSchema: { customerId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -78,6 +81,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customer.list", {
+        access: "read",
         description: "List customers",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -95,6 +99,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customer.update", {
+        access: "write",
         description: "Update a customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -109,6 +114,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customer.delete", {
+        access: "write",
         description: "Delete a customer",
         inputSchema: { customerId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -117,6 +123,7 @@ export default function stripe(rl) {
     });
     // ── Charge ──────────────────────────────────────────
     rl.registerAction("charge.create", {
+        access: "write",
         description: "Create a charge",
         inputSchema: {
             amount: {
@@ -138,6 +145,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("charge.get", {
+        access: "read",
         description: "Get a charge by ID",
         inputSchema: { chargeId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -145,6 +153,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("charge.list", {
+        access: "read",
         description: "List charges",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -156,6 +165,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("charge.update", {
+        access: "write",
         description: "Update a charge",
         inputSchema: {
             chargeId: { type: "string", required: true },
@@ -168,6 +178,7 @@ export default function stripe(rl) {
     });
     // ── Coupon ──────────────────────────────────────────
     rl.registerAction("coupon.create", {
+        access: "write",
         description: "Create a coupon",
         inputSchema: {
             duration: {
@@ -196,6 +207,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("coupon.list", {
+        access: "read",
         description: "List coupons",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -208,6 +220,7 @@ export default function stripe(rl) {
     });
     // ── Customer Card ───────────────────────────────────
     rl.registerAction("customerCard.add", {
+        access: "write",
         description: "Add a card to a customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -223,6 +236,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customerCard.get", {
+        access: "read",
         description: "Get a customer's card/source",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -234,6 +248,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("customerCard.remove", {
+        access: "write",
         description: "Remove a card from a customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -246,6 +261,7 @@ export default function stripe(rl) {
     });
     // ── Source ──────────────────────────────────────────
     rl.registerAction("source.create", {
+        access: "write",
         description: "Create a source and attach to customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -267,6 +283,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("source.get", {
+        access: "read",
         description: "Get a source by ID",
         inputSchema: { sourceId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -274,6 +291,7 @@ export default function stripe(rl) {
         },
     });
     rl.registerAction("source.delete", {
+        access: "write",
         description: "Detach a source from a customer",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -286,6 +304,7 @@ export default function stripe(rl) {
     });
     // ── Token ───────────────────────────────────────────
     rl.registerAction("token.createCard", {
+        access: "write",
         description: "Create a card token",
         inputSchema: {
             number: { type: "string", required: true },
@@ -307,6 +326,7 @@ export default function stripe(rl) {
     });
     // ── Meter Event ─────────────────────────────────────
     rl.registerAction("meterEvent.create", {
+        access: "write",
         description: "Create a billing meter event",
         inputSchema: {
             eventName: { type: "string", required: true },

package/dist/plugins/supabase/src/index.js

@@ -47,6 +47,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.create", {
+        access: "write",
         description: "Insert rows into a table",
         inputSchema: {
             table: { type: "string", required: true },
@@ -71,6 +72,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.get", {
+        access: "read",
         description: "Get rows by filter (PostgREST query params)",
         inputSchema: {
             table: { type: "string", required: true },
@@ -91,6 +93,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.list", {
+        access: "read",
         description: "List rows from a table",
         inputSchema: {
             table: { type: "string", required: true },
@@ -117,6 +120,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.update", {
+        access: "write",
         description: "Update rows matching a filter",
         inputSchema: {
             table: { type: "string", required: true },
@@ -138,6 +142,7 @@ export default function supabase(rl) {
         },
     });
     rl.registerAction("row.delete", {
+        access: "write",
         description: "Delete rows matching a filter",
         inputSchema: {
             table: { type: "string", required: true },

package/dist/plugins/syncromsp/src/index.js

@@ -56,6 +56,7 @@ export default function syncromsp(rl) {
     });
     // ── Customer ────────────────────────────────────────
     rl.registerAction("customer.create", {
+        access: "write",
         description: "Create a customer",
         inputSchema: {
             email: { type: "string", required: true },
@@ -96,6 +97,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("customer.get", {
+        access: "read",
         description: "Get a customer",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -105,6 +107,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("customer.list", {
+        access: "read",
         description: "List customers",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -128,6 +131,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("customer.update", {
+        access: "write",
         description: "Update a customer",
         inputSchema: {
             id: { type: "string", required: true },
@@ -159,6 +163,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("customer.delete", {
+        access: "write",
         description: "Delete a customer",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -169,6 +174,7 @@ export default function syncromsp(rl) {
     });
     // ── Contact ─────────────────────────────────────────
     rl.registerAction("contact.create", {
+        access: "write",
         description: "Create a contact",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -194,6 +200,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("contact.get", {
+        access: "read",
         description: "Get a contact",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -202,6 +209,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("contact.list", {
+        access: "read",
         description: "List contacts",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -215,6 +223,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("contact.update", {
+        access: "write",
         description: "Update a contact",
         inputSchema: {
             id: { type: "string", required: true },
@@ -242,6 +251,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("contact.delete", {
+        access: "write",
         description: "Delete a contact",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -252,6 +262,7 @@ export default function syncromsp(rl) {
     });
     // ── Ticket ──────────────────────────────────────────
     rl.registerAction("ticket.create", {
+        access: "write",
         description: "Create a ticket",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -281,6 +292,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("ticket.get", {
+        access: "read",
         description: "Get a ticket",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -290,6 +302,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("ticket.list", {
+        access: "read",
         description: "List tickets",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -310,6 +323,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("ticket.update", {
+        access: "write",
         description: "Update a ticket",
         inputSchema: {
             id: { type: "string", required: true },
@@ -344,6 +358,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("ticket.delete", {
+        access: "write",
         description: "Delete a ticket",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -354,6 +369,7 @@ export default function syncromsp(rl) {
     });
     // ── RMM Alerts ──────────────────────────────────────
     rl.registerAction("rmmAlert.create", {
+        access: "write",
         description: "Create an RMM alert",
         inputSchema: {
             customerId: { type: "string", required: true },
@@ -372,6 +388,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("rmmAlert.get", {
+        access: "read",
         description: "Get an RMM alert",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -381,6 +398,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("rmmAlert.list", {
+        access: "read",
         description: "List RMM alerts",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -403,6 +421,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("rmmAlert.delete", {
+        access: "write",
         description: "Delete an RMM alert",
         inputSchema: { id: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -412,6 +431,7 @@ export default function syncromsp(rl) {
         },
     });
     rl.registerAction("rmmAlert.mute", {
+        access: "write",
         description: "Mute an RMM alert",
         inputSchema: {
             id: { type: "string", required: true },

package/dist/plugins/tapfiliate/src/index.js

@@ -33,6 +33,7 @@ export default function tapfiliate(rl) {
     const key = (ctx) => ctx.connection.config.apiKey;
     // ── Affiliate ───────────────────────────────────────
     rl.registerAction("affiliate.create", {
+        access: "write",
         description: "Create an affiliate",
         inputSchema: {
             firstname: { type: "string", required: true },
@@ -53,6 +54,7 @@ export default function tapfiliate(rl) {
         },
     });
     rl.registerAction("affiliate.get", {
+        access: "read",
         description: "Get an affiliate by ID",
         inputSchema: { affiliateId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -60,6 +62,7 @@ export default function tapfiliate(rl) {
         },
     });
     rl.registerAction("affiliate.list", {
+        access: "read",
         description: "List affiliates",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -75,6 +78,7 @@ export default function tapfiliate(rl) {
         },
     });
     rl.registerAction("affiliate.delete", {
+        access: "write",
         description: "Delete an affiliate",
         inputSchema: { affiliateId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -84,6 +88,7 @@ export default function tapfiliate(rl) {
     });
     // ── Affiliate Metadata ──────────────────────────────
     rl.registerAction("affiliateMetadata.set", {
+        access: "write",
         description: "Set metadata key-value on an affiliate",
         inputSchema: {
             affiliateId: { type: "string", required: true },
@@ -96,6 +101,7 @@ export default function tapfiliate(rl) {
         },
     });
     rl.registerAction("affiliateMetadata.delete", {
+        access: "write",
         description: "Delete a metadata key from an affiliate",
         inputSchema: {
             affiliateId: { type: "string", required: true },
@@ -109,6 +115,7 @@ export default function tapfiliate(rl) {
     });
     // ── Program Affiliate ───────────────────────────────
     rl.registerAction("programAffiliate.add", {
+        access: "write",
         description: "Add an affiliate to a program",
         inputSchema: {
             programId: { type: "string", required: true },
@@ -120,6 +127,7 @@ export default function tapfiliate(rl) {
         },
     });
     rl.registerAction("programAffiliate.approve", {
+        access: "write",
         description: "Approve an affiliate for a program",
         inputSchema: {
             programId: { type: "string", required: true },
@@ -131,6 +139,7 @@ export default function tapfiliate(rl) {
         },
     });
     rl.registerAction("programAffiliate.disapprove", {
+        access: "write",
         description: "Disapprove an affiliate for a program",
         inputSchema: {
             programId: { type: "string", required: true },
@@ -143,6 +152,7 @@ export default function tapfiliate(rl) {
         },
     });
     rl.registerAction("programAffiliate.get", {
+        access: "read",
         description: "Get an affiliate in a program",
         inputSchema: {
             programId: { type: "string", required: true },
@@ -154,6 +164,7 @@ export default function tapfiliate(rl) {
         },
     });
     rl.registerAction("programAffiliate.list", {
+        access: "read",
         description: "List affiliates in a program",
         inputSchema: {
             programId: { type: "string", required: true },