Static ReadonlyAuthorizesTrue when the action authorizes its caller itself, so a public entry point such as the
RunAction mutation may run it for an authenticated user without an MJ: Action Authorizations link. Set it only on an action that either checks an authorization the caller
must hold, or reads and writes only with the caller's own permissions. Leave it false for an
action that acts with more authority than its caller, or that reaches data or sends messages
the caller chooses but could not otherwise reach.
The engine reads the marker only from the class that runs, never from its parent classes. A subclass that overrides a marked action must declare the marker again.
ProtectedInternalInternal method that must be implemented by derived action classes. This is where the actual action logic should be implemented.
The action execution parameters including typed context
Promise resolving to the action result
Executes the action with the provided parameters.
The action execution parameters including context
Promise resolving to the action result
Persists a new Runtime action to the Actions catalog with
CodeApprovalStatus='Pending'. Used by the ActionSmith agent as the last step of the "generate, test, submit for approval" pipeline.Responsibilities:
RuntimeActionConfigurationagainst the Zod schema — invalid configs are rejected before anything hits the DB.RuntimeActionConfigurationObjectaccessor.The action record is NOT activated.
CodeApprovalStatusis 'Pending' until a human reviews the code + permissions through the approval UI.