runline 0.11.6 → 0.13.0

package/dist/plugins/googleCalendar/src/index.js

@@ -28,7 +28,9 @@
  * call `event.listInstances`.
  */
 import rrulePkg from "rrule";
+import * as t from "typebox";
 import { googleAccessToken } from "../../_shared/googleAuth.js";
+import { Id, NonEmptyString, NonEmptyStringArray, PositiveInteger, StringOrStringArray, stringEnum, } from "../../_shared/googleSchemas.js";
 // `rrule` ships as CJS; named imports fail under Node ESM.
 const { RRule } = rrulePkg;
 // ─── Auth ────────────────────────────────────────────────────────
@@ -234,9 +236,9 @@ function applyEventFields(body, p) {
         body.guestsCanModify = p.guestsCanModify;
     if (typeof p.guestsCanSeeOtherGuests === "boolean")
         body.guestsCanSeeOtherGuests = p.guestsCanSeeOtherGuests;
-    const attendees = splitAttendees(p.attendees);
-    if (attendees)
-        body.attendees = attendees;
+    if (p.attendees !== undefined) {
+        body.attendees = splitAttendees(p.attendees) ?? [];
+    }
     if (p.reminders !== undefined || p.useDefaultReminders !== undefined) {
         const useDefault = p.useDefaultReminders !== false && !Array.isArray(p.reminders);
         body.reminders = { useDefault };
@@ -255,6 +257,286 @@ function applyEventFields(body, p) {
 }
 // ─── Plugin ──────────────────────────────────────────────────────
 const SCOPES = ["https://www.googleapis.com/auth/calendar"];
+const strictObject = (properties, options = {}) => t.Object(properties, { ...options, additionalProperties: false });
+const optionalString = (description) => t.Optional(t.String(description ? { description } : {}));
+const optionalBoolean = t.Optional(t.Boolean());
+const optionalPositiveInteger = t.Optional(PositiveInteger);
+const calendarId = NonEmptyString;
+const accessRole = stringEnum([
+    "freeBusyReader",
+    "reader",
+    "writer",
+    "owner",
+]);
+const sendUpdates = stringEnum(["all", "externalOnly", "none"]);
+const reminder = strictObject({
+    method: stringEnum(["email", "popup"]),
+    minutes: t.Integer({ minimum: 0 }),
+});
+const reminders = t.Array(reminder);
+const attendees = StringOrStringArray;
+const recurrenceFields = {
+    rrule: t.Optional(NonEmptyString),
+    repeatFrequency: t.Optional(stringEnum(["daily", "weekly", "monthly", "yearly"])),
+    repeatHowManyTimes: t.Optional(PositiveInteger),
+    repeatUntil: t.Optional(NonEmptyString),
+};
+const recurrenceConstraints = [
+    { not: { required: ["repeatHowManyTimes", "repeatUntil"] } },
+    { not: { required: ["rrule", "repeatFrequency"] } },
+    { not: { required: ["rrule", "repeatHowManyTimes"] } },
+    { not: { required: ["rrule", "repeatUntil"] } },
+    {
+        anyOf: [
+            {
+                not: {
+                    anyOf: [
+                        { required: ["repeatHowManyTimes"] },
+                        { required: ["repeatUntil"] },
+                    ],
+                },
+            },
+            { required: ["repeatFrequency"] },
+        ],
+    },
+];
+const eventMutableFields = {
+    summary: optionalString(),
+    description: optionalString(),
+    location: optionalString(),
+    colorId: optionalString(),
+    transparency: t.Optional(stringEnum(["opaque", "transparent"])),
+    visibility: t.Optional(stringEnum(["default", "public", "private", "confidential"])),
+    guestsCanInviteOthers: optionalBoolean,
+    guestsCanModify: optionalBoolean,
+    guestsCanSeeOtherGuests: optionalBoolean,
+    attendees: t.Optional(attendees),
+    reminders: t.Optional(reminders),
+    useDefaultReminders: optionalBoolean,
+};
+const eventListFields = {
+    q: optionalString(),
+    timeMin: optionalString("ISO datetime"),
+    timeMax: optionalString("ISO datetime"),
+    updatedMin: optionalString("ISO datetime"),
+    timeZone: optionalString(),
+    iCalUID: optionalString(),
+    orderBy: t.Optional(stringEnum(["startTime", "updated"])),
+    singleEvents: optionalBoolean,
+    showDeleted: optionalBoolean,
+    showHiddenInvitations: optionalBoolean,
+    maxAttendees: optionalPositiveInteger,
+    maxResults: optionalPositiveInteger,
+    pageToken: optionalString(),
+    returnAll: optionalBoolean,
+    fields: optionalString(),
+    nextOccurrence: optionalBoolean,
+};
+const calendarSchemas = {
+    list: strictObject({
+        returnAll: optionalBoolean,
+        maxResults: optionalPositiveInteger,
+        pageToken: optionalString(),
+        showHidden: optionalBoolean,
+        showDeleted: optionalBoolean,
+        minAccessRole: t.Optional(accessRole),
+    }),
+    get: strictObject({ calendarId }),
+    availability: strictObject({
+        calendarId: t.Optional(calendarId),
+        calendarIds: t.Optional(NonEmptyStringArray),
+        timeMin: NonEmptyString,
+        timeMax: NonEmptyString,
+        timeZone: optionalString(),
+        outputFormat: t.Optional(stringEnum(["availability", "bookedSlots", "raw"])),
+    }, {
+        oneOf: [
+            {
+                required: ["calendarId"],
+                not: { required: ["calendarIds"] },
+            },
+            {
+                required: ["calendarIds"],
+                not: { required: ["calendarId"] },
+            },
+        ],
+    }),
+    listColors: strictObject({}),
+};
+const eventSchemas = {
+    create: strictObject({
+        calendarId,
+        ...eventMutableFields,
+        start: NonEmptyString,
+        end: NonEmptyString,
+        allDay: optionalBoolean,
+        timeZone: optionalString(),
+        id: optionalString("Custom event ID"),
+        ...recurrenceFields,
+        conferenceSolution: t.Optional(stringEnum([
+            "eventHangout",
+            "eventNamedHangout",
+            "hangoutsMeet",
+        ])),
+        sendUpdates: t.Optional(sendUpdates),
+        maxAttendees: optionalPositiveInteger,
+    }, { allOf: recurrenceConstraints }),
+    get: strictObject({
+        calendarId,
+        eventId: Id,
+        timeZone: optionalString(),
+        maxAttendees: optionalPositiveInteger,
+        nextOccurrence: optionalBoolean,
+    }),
+    list: strictObject({ calendarId, ...eventListFields }),
+    listInstances: strictObject({
+        calendarId,
+        eventId: Id,
+        timeMin: optionalString(),
+        timeMax: optionalString(),
+        timeZone: optionalString(),
+        showDeleted: optionalBoolean,
+        maxResults: optionalPositiveInteger,
+        pageToken: optionalString(),
+        returnAll: optionalBoolean,
+    }),
+    update: strictObject({
+        calendarId,
+        eventId: Id,
+        modifyTarget: t.Optional(stringEnum(["instance", "series"])),
+        ...eventMutableFields,
+        start: optionalString(),
+        end: optionalString(),
+        allDay: optionalBoolean,
+        timeZone: optionalString(),
+        ...recurrenceFields,
+        sendUpdates: t.Optional(sendUpdates),
+        maxAttendees: optionalPositiveInteger,
+        sendNotifications: optionalBoolean,
+    }, {
+        allOf: [
+            ...recurrenceConstraints,
+            {
+                anyOf: [
+                    {
+                        not: {
+                            anyOf: [{ required: ["start"] }, { required: ["end"] }],
+                        },
+                    },
+                    { required: ["start", "end"] },
+                ],
+            },
+            {
+                not: {
+                    required: ["allDay"],
+                    not: { required: ["start"] },
+                },
+            },
+            {
+                not: {
+                    required: ["timeZone"],
+                    not: { required: ["start"] },
+                },
+            },
+        ],
+        anyOf: [
+            ...Object.keys(eventMutableFields).map((key) => ({ required: [key] })),
+            { required: ["start"] },
+            { required: ["rrule"] },
+            { required: ["repeatFrequency"] },
+        ],
+    }),
+    delete: strictObject({
+        calendarId,
+        eventId: Id,
+        sendUpdates: t.Optional(sendUpdates),
+    }),
+    move: strictObject({
+        calendarId,
+        eventId: Id,
+        destinationCalendarId: calendarId,
+        sendUpdates: t.Optional(sendUpdates),
+    }),
+};
+const freeBusySchema = strictObject({
+    calendarIds: NonEmptyStringArray,
+    timeMin: NonEmptyString,
+    timeMax: NonEmptyString,
+    timeZone: optionalString(),
+    groupExpansionMax: optionalPositiveInteger,
+    calendarExpansionMax: optionalPositiveInteger,
+});
+const calendarListSchemas = {
+    list: strictObject({
+        minAccessRole: t.Optional(accessRole),
+        showDeleted: optionalBoolean,
+        showHidden: optionalBoolean,
+        returnAll: optionalBoolean,
+    }),
+    insert: strictObject({
+        calendarId,
+        colorRgbFormat: optionalBoolean,
+        defaultReminders: t.Optional(reminders),
+        summaryOverride: optionalString(),
+    }),
+    patch: strictObject({
+        calendarId,
+        colorId: optionalString(),
+        backgroundColor: optionalString(),
+        foregroundColor: optionalString(),
+        summaryOverride: optionalString(),
+        selected: optionalBoolean,
+        hidden: optionalBoolean,
+        defaultReminders: t.Optional(reminders),
+    }, {
+        anyOf: [
+            { required: ["colorId"] },
+            { required: ["backgroundColor"] },
+            { required: ["foregroundColor"] },
+            { required: ["summaryOverride"] },
+            { required: ["selected"] },
+            { required: ["hidden"] },
+            { required: ["defaultReminders"] },
+        ],
+    }),
+    delete: strictObject({ calendarId }),
+};
+const aclRole = stringEnum([
+    "none",
+    "freeBusyReader",
+    "reader",
+    "writer",
+    "owner",
+]);
+const aclSchemas = {
+    list: strictObject({ calendarId, returnAll: optionalBoolean }),
+    insert: strictObject({
+        calendarId,
+        role: aclRole,
+        scopeType: stringEnum(["default", "user", "group", "domain"]),
+        scopeValue: optionalString(),
+        sendNotifications: optionalBoolean,
+    }, {
+        anyOf: [
+            {
+                properties: { scopeType: { const: "default" } },
+                not: { required: ["scopeValue"] },
+            },
+            {
+                properties: {
+                    scopeType: { enum: ["user", "group", "domain"] },
+                },
+                required: ["scopeValue"],
+            },
+        ],
+    }),
+    update: strictObject({ calendarId, ruleId: Id, role: aclRole }),
+    delete: strictObject({ calendarId, ruleId: Id }),
+};
+const settingsSchemas = {
+    list: strictObject({ returnAll: optionalBoolean }),
+    get: strictObject({ setting: NonEmptyString }),
+};
 export default function googleCalendar(rl) {
     rl.setName("googleCalendar");
     rl.setVersion("0.1.0");
@@ -345,19 +627,9 @@ export default function googleCalendar(rl) {
     });
     // ── Calendar ──────────────────────────────────────────
     rl.registerAction("calendar.list", {
+        access: "read",
         description: "List calendars the authenticated user has access to",
-        inputSchema: {
-            returnAll: { type: "boolean", required: false },
-            maxResults: { type: "number", required: false },
-            pageToken: { type: "string", required: false },
-            showHidden: { type: "boolean", required: false },
-            showDeleted: { type: "boolean", required: false },
-            minAccessRole: {
-                type: "string",
-                required: false,
-                description: "freeBusyReader | reader | writer | owner",
-            },
-        },
+        inputSchema: calendarSchemas.list,
         async execute(input, ctx) {
             const p = (input ?? {});
             const qs = {};
@@ -377,49 +649,18 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("calendar.get", {
+        access: "read",
         description: "Get a calendar's metadata (including conference solutions)",
-        inputSchema: {
-            calendarId: {
-                type: "string",
-                required: true,
-                description: 'Calendar ID (email) or "primary"',
-            },
-        },
+        inputSchema: calendarSchemas.get,
         async execute(input, ctx) {
             const { calendarId } = input;
             return calRequest(ctx, "GET", `/users/me/calendarList/${encodeCalendarId(calendarId)}`);
         },
     });
     rl.registerAction("calendar.availability", {
+        access: "read",
         description: "Check free/busy information for one or more calendars over a time range",
-        inputSchema: {
-            calendarId: {
-                type: "string",
-                required: false,
-                description: 'Single calendar ID (email) or "primary"',
-            },
-            calendarIds: {
-                type: "array",
-                required: false,
-                description: "Multiple calendar IDs (takes precedence over calendarId)",
-            },
-            timeMin: {
-                type: "string",
-                required: true,
-                description: "ISO datetime — start of the interval",
-            },
-            timeMax: {
-                type: "string",
-                required: true,
-                description: "ISO datetime — end of the interval",
-            },
-            timeZone: { type: "string", required: false },
-            outputFormat: {
-                type: "string",
-                required: false,
-                description: "availability | bookedSlots | raw (default: raw)",
-            },
-        },
+        inputSchema: calendarSchemas.availability,
         async execute(input, ctx) {
             const p = (input ?? {});
             const ids = Array.isArray(p.calendarIds)
@@ -466,69 +707,18 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("calendar.listColors", {
+        access: "read",
         description: "List event and calendar color palettes available in Google Calendar",
+        inputSchema: calendarSchemas.listColors,
         async execute(_input, ctx) {
             return calRequest(ctx, "GET", "/colors");
         },
     });
     // ── Event ─────────────────────────────────────────────
     rl.registerAction("event.create", {
+        access: "write",
         description: "Create a calendar event",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            summary: { type: "string", required: false },
-            description: { type: "string", required: false },
-            location: { type: "string", required: false },
-            start: {
-                type: "string",
-                required: true,
-                description: "ISO datetime (or YYYY-MM-DD when allDay)",
-            },
-            end: { type: "string", required: true },
-            allDay: { type: "boolean", required: false },
-            timeZone: { type: "string", required: false },
-            attendees: {
-                type: "array",
-                required: false,
-                description: "Array of email addresses, or a comma-separated string",
-            },
-            colorId: { type: "string", required: false },
-            id: { type: "string", required: false, description: "Custom event ID" },
-            transparency: {
-                type: "string",
-                required: false,
-                description: 'Show me as: "opaque" (busy) | "transparent" (free)',
-            },
-            visibility: { type: "string", required: false },
-            guestsCanInviteOthers: { type: "boolean", required: false },
-            guestsCanModify: { type: "boolean", required: false },
-            guestsCanSeeOtherGuests: { type: "boolean", required: false },
-            reminders: {
-                type: "array",
-                required: false,
-                description: '[{method: "email"|"popup", minutes: number}]',
-            },
-            useDefaultReminders: { type: "boolean", required: false },
-            rrule: { type: "string", required: false, description: "e.g. FREQ=WEEKLY;COUNT=5" },
-            repeatFrequency: {
-                type: "string",
-                required: false,
-                description: "daily | weekly | monthly | yearly",
-            },
-            repeatHowManyTimes: { type: "number", required: false },
-            repeatUntil: { type: "string", required: false, description: "ISO datetime" },
-            conferenceSolution: {
-                type: "string",
-                required: false,
-                description: "eventHangout | eventNamedHangout | hangoutsMeet",
-            },
-            sendUpdates: {
-                type: "string",
-                required: false,
-                description: "all | externalOnly | none",
-            },
-            maxAttendees: { type: "number", required: false },
-        },
+        inputSchema: eventSchemas.create,
         async execute(input, ctx) {
             const p = (input ?? {});
             const body = {};
@@ -550,18 +740,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("event.get", {
+        access: "read",
         description: "Get a single event",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            eventId: { type: "string", required: true },
-            timeZone: { type: "string", required: false },
-            maxAttendees: { type: "number", required: false },
-            nextOccurrence: {
-                type: "boolean",
-                required: false,
-                description: "Attach nextOccurrence for recurring events (default: true)",
-            },
-        },
+        inputSchema: eventSchemas.get,
         async execute(input, ctx) {
             const p = (input ?? {});
             const qs = {};
@@ -576,34 +757,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("event.list", {
+        access: "read",
         description: "List events in a calendar. Set `singleEvents=true` to expand recurring events into instances.",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            q: { type: "string", required: false, description: "Free-text query" },
-            timeMin: { type: "string", required: false, description: "ISO datetime" },
-            timeMax: { type: "string", required: false },
-            updatedMin: { type: "string", required: false },
-            timeZone: { type: "string", required: false },
-            iCalUID: { type: "string", required: false },
-            orderBy: {
-                type: "string",
-                required: false,
-                description: "startTime (requires singleEvents=true) | updated",
-            },
-            singleEvents: { type: "boolean", required: false },
-            showDeleted: { type: "boolean", required: false },
-            showHiddenInvitations: { type: "boolean", required: false },
-            maxAttendees: { type: "number", required: false },
-            maxResults: { type: "number", required: false },
-            pageToken: { type: "string", required: false },
-            returnAll: { type: "boolean", required: false },
-            fields: { type: "string", required: false },
-            nextOccurrence: {
-                type: "boolean",
-                required: false,
-                description: "Attach nextOccurrence to recurring events (default: true; ignored when singleEvents=true)",
-            },
-        },
+        inputSchema: eventSchemas.list,
         async execute(input, ctx) {
             const p = (input ?? {});
             const qs = {};
@@ -645,18 +801,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("event.listInstances", {
+        access: "read",
         description: "List instances of a recurring event",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            eventId: { type: "string", required: true },
-            timeMin: { type: "string", required: false },
-            timeMax: { type: "string", required: false },
-            timeZone: { type: "string", required: false },
-            showDeleted: { type: "boolean", required: false },
-            maxResults: { type: "number", required: false },
-            pageToken: { type: "string", required: false },
-            returnAll: { type: "boolean", required: false },
-        },
+        inputSchema: eventSchemas.listInstances,
         async execute(input, ctx) {
             const p = (input ?? {});
             const qs = {};
@@ -679,39 +826,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("event.update", {
+        access: "write",
         description: "Patch an event (only supplied fields are changed). Set modifyTarget='series' to edit the entire recurrence instead of a single instance.",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            eventId: { type: "string", required: true },
-            modifyTarget: {
-                type: "string",
-                required: false,
-                description: "instance (default) | series",
-            },
-            summary: { type: "string", required: false },
-            description: { type: "string", required: false },
-            location: { type: "string", required: false },
-            start: { type: "string", required: false },
-            end: { type: "string", required: false },
-            allDay: { type: "boolean", required: false },
-            timeZone: { type: "string", required: false },
-            attendees: { type: "array", required: false },
-            colorId: { type: "string", required: false },
-            transparency: { type: "string", required: false },
-            visibility: { type: "string", required: false },
-            guestsCanInviteOthers: { type: "boolean", required: false },
-            guestsCanModify: { type: "boolean", required: false },
-            guestsCanSeeOtherGuests: { type: "boolean", required: false },
-            reminders: { type: "array", required: false },
-            useDefaultReminders: { type: "boolean", required: false },
-            rrule: { type: "string", required: false },
-            repeatFrequency: { type: "string", required: false },
-            repeatHowManyTimes: { type: "number", required: false },
-            repeatUntil: { type: "string", required: false },
-            sendUpdates: { type: "string", required: false },
-            maxAttendees: { type: "number", required: false },
-            sendNotifications: { type: "boolean", required: false },
-        },
+        inputSchema: eventSchemas.update,
         async execute(input, ctx) {
             const p = (input ?? {});
             let eventId = p.eventId;
@@ -748,12 +865,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("event.delete", {
+        access: "write",
         description: "Delete an event",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            eventId: { type: "string", required: true },
-            sendUpdates: { type: "string", required: false },
-        },
+        inputSchema: eventSchemas.delete,
         async execute(input, ctx) {
             const p = (input ?? {});
             const qs = {};
@@ -763,13 +877,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("event.move", {
+        access: "write",
         description: "Move an event from one calendar to another",
-        inputSchema: {
-            calendarId: { type: "string", required: true, description: "Source calendar" },
-            eventId: { type: "string", required: true },
-            destinationCalendarId: { type: "string", required: true },
-            sendUpdates: { type: "string", required: false },
-        },
+        inputSchema: eventSchemas.move,
         async execute(input, ctx) {
             const p = (input ?? {});
             const qs = {
@@ -782,15 +892,9 @@ export default function googleCalendar(rl) {
     });
     // ─── FreeBusy ────────────────────────────────────────────────────
     rl.registerAction("freeBusy.query", {
+        access: "read",
         description: "Query free/busy windows across one or more calendars in a time range. Returns an array of busy intervals per calendar id, plus any errors.",
-        inputSchema: {
-            calendarIds: { type: "array", required: true, description: "Calendar ids to query (use 'primary' for the user's own)." },
-            timeMin: { type: "string", required: true, description: "RFC 3339 lower bound." },
-            timeMax: { type: "string", required: true, description: "RFC 3339 upper bound." },
-            timeZone: { type: "string", required: false },
-            groupExpansionMax: { type: "number", required: false },
-            calendarExpansionMax: { type: "number", required: false },
-        },
+        inputSchema: freeBusySchema,
         async execute(input, ctx) {
             const p = (input ?? {});
             const body = {
@@ -806,13 +910,9 @@ export default function googleCalendar(rl) {
     });
     // ─── Calendar list management ───────────────────────────────────
     rl.registerAction("calendarList.list", {
+        access: "read",
         description: "List calendars on the user's calendar list (the user's left sidebar).",
-        inputSchema: {
-            minAccessRole: { type: "string", required: false, description: "freeBusyReader | reader | writer | owner" },
-            showDeleted: { type: "boolean", required: false },
-            showHidden: { type: "boolean", required: false },
-            returnAll: { type: "boolean", required: false, default: true },
-        },
+        inputSchema: calendarListSchemas.list,
         async execute(input, ctx) {
             const p = (input ?? {});
             const qs = {
@@ -828,13 +928,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("calendarList.insert", {
+        access: "write",
         description: "Add a calendar (by id) to the user's calendar list.",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            colorRgbFormat: { type: "boolean", required: false },
-            defaultReminders: { type: "array", required: false },
-            summaryOverride: { type: "string", required: false },
-        },
+        inputSchema: calendarListSchemas.insert,
         async execute(input, ctx) {
             const p = (input ?? {});
             const body = { id: p.calendarId };
@@ -846,17 +942,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("calendarList.patch", {
+        access: "write",
         description: "Patch a calendar entry on the user's calendar list (colors, summary override, reminders, selected).",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            colorId: { type: "string", required: false },
-            backgroundColor: { type: "string", required: false },
-            foregroundColor: { type: "string", required: false },
-            summaryOverride: { type: "string", required: false },
-            selected: { type: "boolean", required: false },
-            hidden: { type: "boolean", required: false },
-            defaultReminders: { type: "array", required: false },
-        },
+        inputSchema: calendarListSchemas.patch,
         async execute(input, ctx) {
             const p = (input ?? {});
             const body = {};
@@ -868,8 +956,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("calendarList.delete", {
+        access: "write",
         description: "Remove a calendar from the user's calendar list (does not delete the underlying calendar).",
-        inputSchema: { calendarId: { type: "string", required: true } },
+        inputSchema: calendarListSchemas.delete,
         async execute(input, ctx) {
             const p = (input ?? {});
             await calRequest(ctx, "DELETE", `/users/me/calendarList/${encodeCalendarId(p.calendarId)}`);
@@ -878,11 +967,9 @@ export default function googleCalendar(rl) {
     });
     // ─── ACL (calendar sharing) ──────────────────────────────────────
     rl.registerAction("acl.list", {
+        access: "read",
         description: "List ACL rules on a calendar.",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            returnAll: { type: "boolean", required: false, default: true },
-        },
+        inputSchema: aclSchemas.list,
         async execute(input, ctx) {
             const p = (input ?? {});
             const path = `/calendars/${encodeCalendarId(p.calendarId)}/acl`;
@@ -893,14 +980,9 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("acl.insert", {
+        access: "write",
         description: "Add an ACL rule to a calendar. Roles: 'none' | 'freeBusyReader' | 'reader' | 'writer' | 'owner'.",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            role: { type: "string", required: true },
-            scopeType: { type: "string", required: true, description: "'default' | 'user' | 'group' | 'domain'" },
-            scopeValue: { type: "string", required: false, description: "Email / domain depending on scopeType." },
-            sendNotifications: { type: "boolean", required: false },
-        },
+        inputSchema: aclSchemas.insert,
         async execute(input, ctx) {
             const p = (input ?? {});
             const body = { role: p.role, scope: { type: p.scopeType, value: p.scopeValue } };
@@ -908,23 +990,18 @@ export default function googleCalendar(rl) {
         },
     });
     rl.registerAction("acl.update", {
+        access: "write",
         description: "Patch an ACL rule's role.",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            ruleId: { type: "string", required: true },
-            role: { type: "string", required: true },
-        },
+        inputSchema: aclSchemas.update,
         async execute(input, ctx) {
             const p = (input ?? {});
             return calRequest(ctx, "PATCH", `/calendars/${encodeCalendarId(p.calendarId)}/acl/${encodeURIComponent(p.ruleId)}`, { role: p.role });
         },
     });
     rl.registerAction("acl.delete", {
+        access: "write",
         description: "Remove an ACL rule.",
-        inputSchema: {
-            calendarId: { type: "string", required: true },
-            ruleId: { type: "string", required: true },
-        },
+        inputSchema: aclSchemas.delete,
         async execute(input, ctx) {
             const p = (input ?? {});
             await calRequest(ctx, "DELETE", `/calendars/${encodeCalendarId(p.calendarId)}/acl/${encodeURIComponent(p.ruleId)}`);
@@ -933,15 +1010,17 @@ export default function googleCalendar(rl) {
     });
     // ─── Settings ────────────────────────────────────────────────────
     rl.registerAction("settings.list", {
+        access: "read",
         description: "List the user's calendar settings (timezone, week start, working location, etc.).",
-        inputSchema: { returnAll: { type: "boolean", required: false, default: true } },
+        inputSchema: settingsSchemas.list,
         async execute(_input, ctx) {
             return paginateAll(ctx, "/users/me/settings", "items", { maxResults: 100 });
         },
     });
     rl.registerAction("settings.get", {
+        access: "read",
         description: "Get a single setting by key (e.g. 'timezone', 'weekStart', 'locale').",
-        inputSchema: { setting: { type: "string", required: true } },
+        inputSchema: settingsSchemas.get,
         async execute(input, ctx) {
             const p = (input ?? {});
             return calRequest(ctx, "GET", `/users/me/settings/${encodeURIComponent(p.setting)}`);