runline 0.11.6 → 0.13.0

package/dist/plugins/sentry/src/index.js

@@ -28,6 +28,7 @@ async function apiRequest(conn, method, endpoint, body, qs) {
 }
 function registerCrud(rl, resource, basePath, idField, extraCreateFields) {
     rl.registerAction(`${resource}.get`, {
+        access: "read",
         description: `Get a ${resource} by ${idField}`,
         inputSchema: {
             [idField]: { type: "string", required: true },
@@ -39,6 +40,7 @@ function registerCrud(rl, resource, basePath, idField, extraCreateFields) {
         },
     });
     rl.registerAction(`${resource}.list`, {
+        access: "read",
         description: `List ${resource}s`,
         inputSchema: {
             org: { type: "string", required: true },
@@ -63,6 +65,7 @@ function registerCrud(rl, resource, basePath, idField, extraCreateFields) {
         },
     });
     rl.registerAction(`${resource}.delete`, {
+        access: "write",
         description: `Delete a ${resource}`,
         inputSchema: {
             [idField]: { type: "string", required: true },
@@ -94,6 +97,7 @@ export default function sentry(rl) {
     });
     // ── Event ───────────────────────────────────────────
     rl.registerAction("event.get", {
+        access: "read",
         description: "Get a project event by ID",
         inputSchema: {
             org: { type: "string", required: true },
@@ -106,6 +110,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("event.list", {
+        access: "read",
         description: "List project events",
         inputSchema: {
             org: { type: "string", required: true },
@@ -125,6 +130,7 @@ export default function sentry(rl) {
     });
     // ── Issue ───────────────────────────────────────────
     rl.registerAction("issue.get", {
+        access: "read",
         description: "Get an issue by ID",
         inputSchema: { issueId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -132,6 +138,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("issue.list", {
+        access: "read",
         description: "List issues for a project",
         inputSchema: {
             org: { type: "string", required: true },
@@ -150,6 +157,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("issue.update", {
+        access: "write",
         description: "Update an issue",
         inputSchema: {
             issueId: { type: "string", required: true },
@@ -164,6 +172,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("issue.delete", {
+        access: "write",
         description: "Delete an issue",
         inputSchema: { issueId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -173,6 +182,7 @@ export default function sentry(rl) {
     });
     // ── Organization ────────────────────────────────────
     rl.registerAction("organization.get", {
+        access: "read",
         description: "Get an organization",
         inputSchema: { org: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -180,6 +190,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("organization.list", {
+        access: "read",
         description: "List organizations",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -190,6 +201,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("organization.create", {
+        access: "write",
         description: "Create an organization",
         inputSchema: {
             name: { type: "string", required: true },
@@ -206,6 +218,7 @@ export default function sentry(rl) {
     });
     // ── Project ─────────────────────────────────────────
     rl.registerAction("project.get", {
+        access: "read",
         description: "Get a project",
         inputSchema: {
             org: { type: "string", required: true },
@@ -217,6 +230,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("project.list", {
+        access: "read",
         description: "List all projects",
         inputSchema: { limit: { type: "number", required: false } },
         async execute(input, ctx) {
@@ -226,6 +240,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("project.create", {
+        access: "write",
         description: "Create a project",
         inputSchema: {
             org: { type: "string", required: true },
@@ -245,6 +260,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("project.delete", {
+        access: "write",
         description: "Delete a project",
         inputSchema: {
             org: { type: "string", required: true },
@@ -258,6 +274,7 @@ export default function sentry(rl) {
     });
     // ── Release ─────────────────────────────────────────
     rl.registerAction("release.get", {
+        access: "read",
         description: "Get a release",
         inputSchema: {
             org: { type: "string", required: true },
@@ -269,6 +286,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("release.list", {
+        access: "read",
         description: "List releases",
         inputSchema: {
             org: { type: "string", required: true },
@@ -286,6 +304,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("release.create", {
+        access: "write",
         description: "Create a release",
         inputSchema: {
             org: { type: "string", required: true },
@@ -309,6 +328,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("release.delete", {
+        access: "write",
         description: "Delete a release",
         inputSchema: {
             org: { type: "string", required: true },
@@ -322,6 +342,7 @@ export default function sentry(rl) {
     });
     // ── Team ────────────────────────────────────────────
     rl.registerAction("team.get", {
+        access: "read",
         description: "Get a team",
         inputSchema: {
             org: { type: "string", required: true },
@@ -333,6 +354,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("team.list", {
+        access: "read",
         description: "List teams in an organization",
         inputSchema: {
             org: { type: "string", required: true },
@@ -344,6 +366,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("team.create", {
+        access: "write",
         description: "Create a team",
         inputSchema: {
             org: { type: "string", required: true },
@@ -359,6 +382,7 @@ export default function sentry(rl) {
         },
     });
     rl.registerAction("team.delete", {
+        access: "write",
         description: "Delete a team",
         inputSchema: {
             org: { type: "string", required: true },

package/dist/plugins/servicenow/src/index.js

@@ -40,6 +40,7 @@ const TABLES = {
 };
 function registerTableResource(rl, resource, table, conn) {
     rl.registerAction(`${resource}.create`, {
+        access: "write",
         description: `Create a ${resource}`,
         inputSchema: { data: { type: "object", required: true } },
         async execute(input, ctx) {
@@ -48,6 +49,7 @@ function registerTableResource(rl, resource, table, conn) {
         },
     });
     rl.registerAction(`${resource}.get`, {
+        access: "read",
         description: `Get a ${resource} by sys_id`,
         inputSchema: { sysId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -56,6 +58,7 @@ function registerTableResource(rl, resource, table, conn) {
         },
     });
     rl.registerAction(`${resource}.list`, {
+        access: "read",
         description: `List ${resource}s`,
         inputSchema: {
             limit: { type: "number", required: false },
@@ -84,6 +87,7 @@ function registerTableResource(rl, resource, table, conn) {
         },
     });
     rl.registerAction(`${resource}.update`, {
+        access: "write",
         description: `Update a ${resource}`,
         inputSchema: {
             sysId: { type: "string", required: true },
@@ -96,6 +100,7 @@ function registerTableResource(rl, resource, table, conn) {
         },
     });
     rl.registerAction(`${resource}.delete`, {
+        access: "write",
         description: `Delete a ${resource}`,
         inputSchema: { sysId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -132,6 +137,7 @@ export default function servicenow(rl) {
     }
     // ── Generic Table Record ────────────────────────────
     rl.registerAction("tableRecord.create", {
+        access: "write",
         description: "Create a record in any table",
         inputSchema: {
             tableName: { type: "string", required: true },
@@ -144,6 +150,7 @@ export default function servicenow(rl) {
         },
     });
     rl.registerAction("tableRecord.get", {
+        access: "read",
         description: "Get a record from any table",
         inputSchema: {
             tableName: { type: "string", required: true },
@@ -156,6 +163,7 @@ export default function servicenow(rl) {
         },
     });
     rl.registerAction("tableRecord.list", {
+        access: "read",
         description: "List records from any table",
         inputSchema: {
             tableName: { type: "string", required: true },
@@ -174,6 +182,7 @@ export default function servicenow(rl) {
         },
     });
     rl.registerAction("tableRecord.update", {
+        access: "write",
         description: "Update a record in any table",
         inputSchema: {
             tableName: { type: "string", required: true },
@@ -187,6 +196,7 @@ export default function servicenow(rl) {
         },
     });
     rl.registerAction("tableRecord.delete", {
+        access: "write",
         description: "Delete a record from any table",
         inputSchema: {
             tableName: { type: "string", required: true },

package/dist/plugins/shiftLabs/src/index.js

@@ -1,6 +1,7 @@
 import * as t from "typebox";
 import { registerIssueActions } from "./issues.js";
 import { registerPageActions } from "./pages.js";
+import { registerTranscriptionActions } from "./transcription.js";
 export default function shiftLabs(rl) {
     rl.setName("shiftLabs");
     rl.setVersion("0.1.0");
@@ -9,7 +10,12 @@ export default function shiftLabs(rl) {
             description: "Shift Labs API key",
             env: "SHIFT_LABS_API_KEY",
         }),
+        organizationId: t.Optional(t.String({
+            description: "Shift Labs organization ID (required for transcription actions)",
+            env: "SHIFT_LABS_ORG_ID",
+        })),
     }));
     registerIssueActions(rl);
     registerPageActions(rl);
+    registerTranscriptionActions(rl);
 }

package/dist/plugins/shiftLabs/src/issues.js

@@ -2,6 +2,7 @@ import * as t from "typebox";
 import { enumSchema, ISSUE_KIND, ISSUE_PRIORITY, ISSUE_SEVERITY, ISSUE_SOURCE, ISSUE_STATUS, request, } from "./shared.js";
 export function registerIssueActions(rl) {
     rl.registerAction("issue.list", {
+        access: "read",
         description: "List Shift Labs issues for the API key's organization.",
         inputSchema: t.Object({
             status: t.Optional(enumSchema("Issue status", ISSUE_STATUS)),
@@ -22,6 +23,7 @@ export function registerIssueActions(rl) {
         },
     });
     rl.registerAction("issue.get", {
+        access: "read",
         description: "Get a Shift Labs issue by ID.",
         inputSchema: t.Object({ id: t.String({ description: "Issue ID" }) }),
         async execute(input, ctx) {
@@ -31,6 +33,7 @@ export function registerIssueActions(rl) {
         },
     });
     rl.registerAction("issue.create", {
+        access: "write",
         description: "Create a Shift Labs issue. The issue starts in triage.",
         inputSchema: t.Object({
             title: t.String({ description: "Issue title" }),
@@ -56,6 +59,7 @@ export function registerIssueActions(rl) {
         },
     });
     rl.registerAction("issue.comment", {
+        access: "write",
         description: "Add a comment to a Shift Labs issue.",
         inputSchema: t.Object({
             id: t.String({ description: "Issue ID" }),

package/dist/plugins/shiftLabs/src/pages.js

@@ -2,6 +2,7 @@ import * as t from "typebox";
 import { enumSchema, PAGE_STATUS, PAGE_VISIBILITY, pageRenderUrl, request, } from "./shared.js";
 export function registerPageActions(rl) {
     rl.registerAction("page.list", {
+        access: "read",
         description: "List Shift Labs pages for the API key's organization.",
         inputSchema: t.Object({
             status: t.Optional(enumSchema("Page status", PAGE_STATUS)),
@@ -19,6 +20,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.get", {
+        access: "read",
         description: "Get a Shift Labs page by ID.",
         inputSchema: t.Object({ id: t.String({ description: "Page ID" }) }),
         async execute(input, ctx) {
@@ -28,6 +30,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.create", {
+        access: "write",
         description: "Create a draft hosted HTML page. Agents can publish it with page.publish.",
         inputSchema: t.Object({
             slug: t.String({ description: "Lowercase kebab-case page slug" }),
@@ -49,6 +52,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.update", {
+        access: "write",
         description: "Update a hosted HTML page's slug, title, visibility, or HTML.",
         inputSchema: t.Object({
             id: t.String({ description: "Page ID" }),
@@ -67,6 +71,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.publish", {
+        access: "write",
         description: "Publish a Shift Labs hosted HTML page.",
         inputSchema: t.Object({ id: t.String({ description: "Page ID" }) }),
         async execute(input, ctx) {
@@ -76,6 +81,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.archive", {
+        access: "write",
         description: "Archive a Shift Labs page.",
         inputSchema: t.Object({ id: t.String({ description: "Page ID" }) }),
         async execute(input, ctx) {
@@ -85,6 +91,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.shares", {
+        access: "read",
         description: "List shares for a Shift Labs page.",
         inputSchema: t.Object({ pageId: t.String({ description: "Page ID" }) }),
         async execute(input, ctx) {
@@ -94,6 +101,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.share", {
+        access: "write",
         description: "Create a viewer share for a Shift Labs page.",
         inputSchema: t.Object({
             pageId: t.String({ description: "Page ID" }),
@@ -110,6 +118,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.revokeShare", {
+        access: "write",
         description: "Revoke a Shift Labs page share.",
         inputSchema: t.Object({
             shareId: t.String({ description: "Page share ID" }),
@@ -123,6 +132,7 @@ export function registerPageActions(rl) {
         },
     });
     rl.registerAction("page.renderUrl", {
+        access: "read",
         description: "Return the authenticated render URL for a page.",
         inputSchema: t.Object({
             pageId: t.String({ description: "Page ID" }),

package/dist/plugins/shiftLabs/src/shared.js

@@ -61,6 +61,8 @@ export const ISSUE_SOURCE = [
 ];
 export const PAGE_STATUS = ["draft", "published", "archived"];
 export const PAGE_VISIBILITY = ["org", "invited"];
+export const TRANSCRIPTION_LANGUAGE = ["auto", "en", "he"];
+export const TRANSCRIPT_FORMAT = ["txt", "srt", "vtt", "json"];
 export function enumDescription(name, values) {
     return `${name}: ${values.join(" | ")}`;
 }

package/dist/plugins/shiftLabs/src/transcription.js

@@ -0,0 +1,203 @@
+import { openAsBlob } from "node:fs";
+import { readFile, stat } from "node:fs/promises";
+import { extname } from "node:path";
+import * as t from "typebox";
+import { enumSchema, pathSegment, request, TRANSCRIPT_FORMAT, TRANSCRIPTION_LANGUAGE, } from "./shared.js";
+const MEDIA_TYPES = {
+    aac: "audio/aac",
+    flac: "audio/flac",
+    m4a: "audio/m4a",
+    mov: "video/quicktime",
+    mp3: "audio/mpeg",
+    mp4: "video/mp4",
+    mpeg: "video/mpeg",
+    mpg: "video/mpeg",
+    oga: "audio/ogg",
+    ogg: "audio/ogg",
+    opus: "audio/ogg",
+    wav: "audio/wav",
+    wave: "audio/wav",
+    webm: "video/webm",
+};
+/** Mirrors the public service contract's 5 GiB source-object ceiling. */
+const MAX_MEDIA_BYTES = 5 * 1024 * 1024 * 1024;
+/** Transcript previews returned into the sandbox are capped, not truncated silently. */
+const MAX_TRANSCRIPT_BYTES = 2 * 1024 * 1024;
+const STRICT_OBJECT = { additionalProperties: false };
+const Id = t.String({ minLength: 1, pattern: "\\S" });
+function organizationId(ctx) {
+    const value = ctx.connection.config.organizationId;
+    if (typeof value !== "string" || !value) {
+        throw new Error("SHIFT_LABS_ORG_ID is not set. Transcription actions need the organization ID that owns the API key.");
+    }
+    return value;
+}
+function mediaTypeFor(path) {
+    const mediaType = MEDIA_TYPES[extname(path).slice(1).toLowerCase()];
+    if (!mediaType) {
+        throw new Error(`Unsupported media extension for ${path}. Supported: ${Object.keys(MEDIA_TYPES).join(", ")}`);
+    }
+    return mediaType;
+}
+async function fileBody(path, sizeBytes) {
+    try {
+        return await openAsBlob(path);
+    }
+    catch {
+        // Runtimes without fs.openAsBlob fall back to buffering; refuse to
+        // buffer files that would strain the host process.
+        if (sizeBytes > 512 * 1024 * 1024) {
+            throw new Error("This runtime cannot stream uploads and the file is too large to buffer.");
+        }
+        return await readFile(path);
+    }
+}
+export function registerTranscriptionActions(rl) {
+    rl.registerAction("transcription.transcribe", {
+        access: "write",
+        description: "Upload a local audio or video file and start a transcription job. " +
+            "Returns the job; poll transcription.job.get, then read the result " +
+            "with transcription.transcript. Diarization labels speakers but is " +
+            "much slower.",
+        inputSchema: t.Object({
+            path: t.String({
+                minLength: 1,
+                pattern: "\\S",
+                description: "Host path of the media file",
+            }),
+            language: t.Optional(enumSchema("Language (auto handles mixed media)", [
+                ...TRANSCRIPTION_LANGUAGE,
+            ])),
+            diarize: t.Optional(t.Boolean({ description: "Label speakers (slower). Default false" })),
+            name: t.Optional(t.String({
+                minLength: 1,
+                maxLength: 200,
+                pattern: "\\S",
+                description: "Label shown in Shift Cloud",
+            })),
+            waitSeconds: t.Optional(t.Number({
+                minimum: 0,
+                maximum: 120,
+                description: "Block up to this many seconds for completion. Longer media should be polled instead.",
+            })),
+        }, STRICT_OBJECT),
+        async execute(input, ctx) {
+            const fields = input;
+            const org = organizationId(ctx);
+            const contentType = mediaTypeFor(fields.path);
+            const file = await stat(fields.path);
+            if (!file.isFile())
+                throw new Error(`${fields.path} is not a file`);
+            if (file.size === 0)
+                throw new Error("Media file is empty");
+            if (file.size > MAX_MEDIA_BYTES) {
+                throw new Error(`Media file is larger than the ${MAX_MEDIA_BYTES}-byte service limit`);
+            }
+            const created = await request(ctx, "/v1/services/transcription/assets", {
+                method: "POST",
+                body: JSON.stringify({
+                    organizationId: org,
+                    contentType,
+                    sizeBytes: file.size,
+                }),
+            });
+            const uploadHeaders = new Headers(created.upload.headers);
+            if (!uploadHeaders.has("content-type")) {
+                uploadHeaders.set("content-type", contentType);
+            }
+            const upload = await fetch(created.upload.url, {
+                method: created.upload.method,
+                headers: uploadHeaders,
+                body: await fileBody(fields.path, file.size),
+            });
+            if (!upload.ok) {
+                throw new Error(`Media upload failed: HTTP ${upload.status}`);
+            }
+            await request(ctx, `/v1/services/transcription/assets/${pathSegment(created.asset.id)}/complete`, { method: "POST" });
+            const job = await request(ctx, "/v1/services/transcription/jobs", {
+                method: "POST",
+                body: JSON.stringify({
+                    organizationId: org,
+                    assetId: created.asset.id,
+                    language: fields.language,
+                    diarize: fields.diarize,
+                    name: fields.name,
+                }),
+            });
+            if (!fields.waitSeconds)
+                return job;
+            const timeoutMs = Math.min(Math.max(fields.waitSeconds, 1), 120) * 1000;
+            return request(ctx, `/v1/services/transcription/jobs/${pathSegment(job.id)}/await?timeoutMs=${timeoutMs}`, { method: "POST" });
+        },
+    });
+    rl.registerAction("transcription.job.list", {
+        access: "read",
+        description: "List transcription jobs for the API key's organization, newest first.",
+        inputSchema: t.Object({}, STRICT_OBJECT),
+        async execute(_input, ctx) {
+            const body = await request(ctx, `/v1/services/transcription/jobs?organizationId=${pathSegment(organizationId(ctx))}`);
+            return body.jobs;
+        },
+    });
+    rl.registerAction("transcription.job.get", {
+        access: "read",
+        description: "Get a transcription job: status, progress, duration, speaker count.",
+        inputSchema: t.Object({ id: Id }, STRICT_OBJECT),
+        async execute(input, ctx) {
+            const { id } = input;
+            return request(ctx, `/v1/services/transcription/jobs/${pathSegment(id)}`);
+        },
+    });
+    rl.registerAction("transcription.job.cancel", {
+        access: "write",
+        description: "Cancel a queued or running transcription job.",
+        inputSchema: t.Object({ id: Id }, STRICT_OBJECT),
+        async execute(input, ctx) {
+            const { id } = input;
+            return request(ctx, `/v1/services/transcription/jobs/${pathSegment(id)}/cancel`, { method: "POST" });
+        },
+    });
+    rl.registerAction("transcription.artifact.list", {
+        access: "read",
+        description: "List the available transcript artifacts for a job.",
+        inputSchema: t.Object({ jobId: Id }, STRICT_OBJECT),
+        async execute(input, ctx) {
+            const { jobId } = input;
+            const body = await request(ctx, `/v1/services/transcription/jobs/${pathSegment(jobId)}/artifacts`);
+            return body.artifacts;
+        },
+    });
+    rl.registerAction("transcription.transcript", {
+        access: "read",
+        description: "Fetch a finished job's transcript. txt returns plain text; srt/vtt " +
+            "return subtitles; json returns the full timestamped document. Set " +
+            "downloadOnly=true to return the short-lived signed download grant.",
+        inputSchema: t.Object({
+            jobId: Id,
+            format: t.Optional(enumSchema("Transcript format", [...TRANSCRIPT_FORMAT])),
+            downloadOnly: t.Optional(t.Boolean({ description: "Return a signed download grant only" })),
+        }, STRICT_OBJECT),
+        async execute(input, ctx) {
+            const fields = input;
+            const format = fields.format ?? "txt";
+            const grant = await request(ctx, `/v1/services/transcription/jobs/${pathSegment(fields.jobId)}/artifacts/${pathSegment(format)}/download`, { method: "POST" });
+            if (fields.downloadOnly ||
+                grant.artifact.sizeBytes > MAX_TRANSCRIPT_BYTES) {
+                return { format, ...grant };
+            }
+            const response = await fetch(grant.download.url, {
+                method: grant.download.method,
+            });
+            if (!response.ok) {
+                throw new Error(`Transcript download failed: HTTP ${response.status}`);
+            }
+            const content = await response.text();
+            if (Buffer.byteLength(content, "utf8") > MAX_TRANSCRIPT_BYTES) {
+                return { format, ...grant };
+            }
+            return format === "json"
+                ? { format, document: JSON.parse(content) }
+                : { format, content };
+        },
+    });
+}

package/dist/plugins/shopify/src/index.js

@@ -75,6 +75,7 @@ export default function shopify(rl) {
     });
     // ── Order ───────────────────────────────────────────
     rl.registerAction("order.create", {
+        access: "write",
         description: "Create an order",
         inputSchema: {
             lineItems: {
@@ -110,6 +111,7 @@ export default function shopify(rl) {
         },
     });
     rl.registerAction("order.get", {
+        access: "read",
         description: "Get an order by ID",
         inputSchema: {
             orderId: { type: "string", required: true },
@@ -125,6 +127,7 @@ export default function shopify(rl) {
         },
     });
     rl.registerAction("order.list", {
+        access: "read",
         description: "List orders",
         inputSchema: {
             status: {
@@ -155,6 +158,7 @@ export default function shopify(rl) {
         },
     });
     rl.registerAction("order.update", {
+        access: "write",
         description: "Update an order",
         inputSchema: {
             orderId: { type: "string", required: true },
@@ -176,6 +180,7 @@ export default function shopify(rl) {
         },
     });
     rl.registerAction("order.delete", {
+        access: "write",
         description: "Delete an order",
         inputSchema: { orderId: { type: "string", required: true } },
         async execute(input, ctx) {
@@ -185,6 +190,7 @@ export default function shopify(rl) {
     });
     // ── Product ─────────────────────────────────────────
     rl.registerAction("product.create", {
+        access: "write",
         description: "Create a product",
         inputSchema: {
             title: { type: "string", required: true },
@@ -202,6 +208,7 @@ export default function shopify(rl) {
         },
     });
     rl.registerAction("product.get", {
+        access: "read",
         description: "Get a product by ID",
         inputSchema: {
             productId: { type: "string", required: true },
@@ -217,6 +224,7 @@ export default function shopify(rl) {
         },
     });
     rl.registerAction("product.list", {
+        access: "read",
         description: "List products",
         inputSchema: {
             limit: { type: "number", required: false },
@@ -237,6 +245,7 @@ export default function shopify(rl) {
         },
     });
     rl.registerAction("product.update", {
+        access: "write",
         description: "Update a product",
         inputSchema: {
             productId: { type: "string", required: true },
@@ -253,6 +262,7 @@ export default function shopify(rl) {
         },
     });
     rl.registerAction("product.delete", {
+        access: "write",
         description: "Delete a product",
         inputSchema: { productId: { type: "string", required: true } },
         async execute(input, ctx) {