@withone/cli 1.13.5 → 1.13.7

package/dist/{chunk-GNYFRZSZ.js → chunk-T54OTDAW.js}

@@ -301,26 +301,30 @@ function isActionAllowed(actionId, allowedActionIds) {
   return allowedActionIds.includes("*") || allowedActionIds.includes(actionId);
 }
 function buildActionKnowledgeWithGuidance(knowledge, method, platform, actionId) {
-  return `${knowledge}
+  return `CLI EXECUTION GUIDE (read this FIRST)
+========================================
+To execute this action, use the One CLI with SEPARATE flags for each parameter type.
+Do NOT pass path variables or query parameters in the -d body flag \u2014 this causes 403 errors.
 
-CLI PARAMETER MAPPING
-======================
-Use the One CLI to execute this action. Map parameters from the documentation above to CLI flags:
+PARAMETER \u2192 FLAG MAPPING:
+- Path variables (URL placeholders like {userId}, {id}) \u2192 --path-vars '{"userId": "me"}'
+- Query parameters (filtering, pagination, format) \u2192 --query-params '{"key": "value"}'
+  - For repeated params, use arrays: --query-params '{"metadataHeaders": ["From", "Subject"]}'
+- Request body (POST/PUT/PATCH payload) \u2192 -d '{"field": "value"}'
 
-- **Path variables** (URL placeholders like {userId}, {id}) \u2192 \`--path-vars '{"userId": "me", "id": "123"}'\`
-- **Query parameters** (filtering, pagination, format options) \u2192 \`--query-params '{"key": "value"}'\`
-  - For repeated params, use arrays: \`--query-params '{"metadataHeaders": ["From", "Subject"]}'\`
-- **Request body** (POST/PUT/PATCH data) \u2192 \`-d '{"field": "value"}'\`
-
-Do NOT pass path variables or query parameters in the -d body flag \u2014 they will be ignored.
-
-EXAMPLE COMMAND:
+EXAMPLE:
 one --agent actions execute ${platform} ${actionId} <connectionKey> \\
   --path-vars '{ ... }' \\
   --query-params '{ ... }' \\
   -d '{ ... }'
 
-Replace the JSON objects above with the actual parameters from the documentation. Omit any flag that has no parameters for this action (e.g., omit --path-vars if the URL has no placeholders, omit -d for GET requests).`;
+Omit any flag not needed (e.g., omit --path-vars if URL has no placeholders, omit -d for GET).
+
+Read the API documentation below to identify which parameters are path variables, query parameters, or body fields, then map them to the correct flags above.
+
+========================================
+
+${knowledge}`;
 }
 
 // src/lib/flow-engine.ts
@@ -658,7 +662,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlow: loadFlow2 } = await import("./flow-runner-ZTLAFPFP.js");
+  const { loadFlow: loadFlow2 } = await import("./flow-runner-5ZBACWKL.js");
   const subFlow = loadFlow2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,

package/dist/{flow-runner-ZTLAFPFP.js → flow-runner-5ZBACWKL.js}

@@ -4,7 +4,7 @@ import {
   loadFlow,
   resolveFlowPath,
   saveFlow
-} from "./chunk-GNYFRZSZ.js";
+} from "./chunk-T54OTDAW.js";
 export {
   FlowRunner,
   listFlows,

package/dist/index.js

@@ -11,7 +11,7 @@ import {
   loadFlow,
   resolveFlowPath,
   saveFlow
-} from "./chunk-GNYFRZSZ.js";
+} from "./chunk-T54OTDAW.js";
 
 // src/index.ts
 import { createRequire as createRequire2 } from "module";
@@ -1301,8 +1301,11 @@ async function connectionListCommand(options) {
   spinner5.start("Loading connections...");
   try {
     const allConnections = await api.listConnections();
+    const ac = getAccessControlFromAllSources();
+    const allowedKeys = ac.connectionKeys || ["*"];
+    const accessFiltered = allowedKeys.includes("*") ? allConnections : allConnections.filter((conn) => allowedKeys.includes(conn.key));
     const searchQuery = options?.search?.toLowerCase();
-    const filtered = searchQuery ? allConnections.filter((conn) => conn.platform.toLowerCase().includes(searchQuery)) : allConnections;
+    const filtered = searchQuery ? accessFiltered.filter((conn) => conn.platform.toLowerCase().includes(searchQuery)) : accessFiltered;
     if (isAgentMode()) {
       const limit = options?.limit ? parseInt(options.limit, 10) : 20;
       const limited = filtered.slice(0, limit);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.13.5",
+  "version": "1.13.7",
   "description": "CLI for managing One",
   "type": "module",
   "files": [