@withone/cli 1.18.0 → 1.20.0

package/README.md

@@ -162,6 +162,21 @@ one list
 
 You need the connection key (rightmost column) when executing actions.
 
+### `one connection delete <connection-key>`
+
+Remove a connection by its key.
+
+```bash
+one connection delete live::gmail::default::abc123
+one connection rm live::gmail::default::abc123      # alias
+```
+
+Shows the connection details and asks for confirmation before deleting. Use `--force` to skip the confirmation prompt.
+
+| Option | What it does |
+|--------|-------------|
+| `-f, --force` | Skip confirmation prompt |
+
 ### `one platforms`
 
 Browse all 200+ available platforms.

package/dist/{chunk-CTL2YHUH.js → chunk-CJBJQPHS.js}

@@ -10,7 +10,6 @@ import { exec } from "child_process";
 import { promisify } from "util";
 
 // src/lib/api.ts
-var API_BASE = "https://api.withone.ai/v1";
 var ApiError = class extends Error {
   constructor(status, message) {
     super(message);
@@ -19,14 +18,16 @@ var ApiError = class extends Error {
   }
 };
 var OneApi = class {
-  constructor(apiKey) {
+  constructor(apiKey, apiBase) {
     this.apiKey = apiKey;
+    this.apiBase = apiBase ?? "https://api.withone.ai/v1";
   }
+  apiBase;
   async request(path3) {
     return this.requestFull({ path: path3 });
   }
   async requestFull(opts) {
-    let url = `${API_BASE}${opts.path}`;
+    let url = `${this.apiBase}${opts.path}`;
     if (opts.queryParams && Object.keys(opts.queryParams).length > 0) {
       const params = new URLSearchParams(opts.queryParams);
       url += `?${params.toString()}`;
@@ -75,6 +76,9 @@ var OneApi = class {
     } while (page <= totalPages);
     return allConnections;
   }
+  async deleteConnection(id) {
+    await this.requestFull({ path: `/vault/connections/${id}`, method: "DELETE" });
+  }
   async listPlatforms() {
     const allPlatforms = [];
     let page = 1;
@@ -129,7 +133,7 @@ var OneApi = class {
     };
   }
   async requestWithMeta(opts) {
-    let url = `${API_BASE}${opts.path}`;
+    let url = `${this.apiBase}${opts.path}`;
     if (opts.queryParams && Object.keys(opts.queryParams).length > 0) {
       const params = new URLSearchParams(opts.queryParams);
       url += `?${params.toString()}`;
@@ -216,7 +220,7 @@ var OneApi = class {
     };
     const finalActionPath = args.pathVariables ? replacePathVariables(action.path, args.pathVariables) : action.path;
     const normalizedPath = finalActionPath.startsWith("/") ? finalActionPath : `/${finalActionPath}`;
-    const url = `${API_BASE.replace("/v1", "")}/v1/passthrough${normalizedPath}`;
+    const url = `${this.apiBase.replace("/v1", "")}/v1/passthrough${normalizedPath}`;
     const isCustomAction = action.tags?.includes("custom");
     let requestData = args.data;
     if (isCustomAction && method?.toLowerCase() !== "get") {
@@ -778,7 +782,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlow: loadFlow2 } = await import("./flow-runner-SU4JHSZW.js");
+  const { loadFlow: loadFlow2 } = await import("./flow-runner-RFLXA3YY.js");
   const subFlow = loadFlow2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,

package/dist/{flow-runner-SU4JHSZW.js → flow-runner-RFLXA3YY.js}

@@ -4,7 +4,7 @@ import {
   loadFlow,
   resolveFlowPath,
   saveFlow
-} from "./chunk-CTL2YHUH.js";
+} from "./chunk-CJBJQPHS.js";
 export {
   FlowRunner,
   listFlows,

package/dist/index.js

@@ -11,7 +11,7 @@ import {
   loadFlow,
   resolveFlowPath,
   saveFlow
-} from "./chunk-CTL2YHUH.js";
+} from "./chunk-CJBJQPHS.js";
 
 // src/index.ts
 import { createRequire as createRequire2 } from "module";
@@ -101,6 +101,22 @@ function getAccessControlFromAllSources() {
 function getAccessControl() {
   return readConfig()?.accessControl ?? {};
 }
+var DEFAULT_API_BASE = "https://api.withone.ai/v1";
+function getApiBase() {
+  const config = readConfig();
+  if (config?.apiBase) return `${config.apiBase}/v1`;
+  return DEFAULT_API_BASE;
+}
+function updateApiBase(url) {
+  const config = readConfig();
+  if (!config) return;
+  if (url) {
+    config.apiBase = url;
+  } else {
+    delete config.apiBase;
+  }
+  writeConfig(config);
+}
 function getCacheTtl() {
   if (process.env.ONE_CACHE_TTL) {
     const val = parseInt(process.env.ONE_CACHE_TTL, 10);
@@ -465,6 +481,113 @@ async function configCommand() {
     p2.outro("No changes made.");
     return;
   }
+  const currentBase = getApiBase();
+  const isCustomBase = !!readConfig()?.apiBase;
+  const baseUrlMode = await p2.select({
+    message: "API base URL",
+    options: [
+      { value: "default", label: "Default", hint: "https://api.withone.ai" },
+      { value: "custom", label: "Custom", hint: "Use a different API endpoint" }
+    ],
+    initialValue: isCustomBase ? "custom" : "default"
+  });
+  if (p2.isCancel(baseUrlMode)) {
+    p2.outro("No changes made.");
+    return;
+  }
+  let newApiKey = config.apiKey;
+  if (baseUrlMode === "custom") {
+    const customUrl = await p2.text({
+      message: "Enter API base URL:",
+      placeholder: "https://development-api.withone.ai",
+      initialValue: isCustomBase ? currentBase.replace(/\/v1$/, "") : "",
+      validate: (value) => {
+        if (!value) return "URL is required";
+        try {
+          new URL(value);
+        } catch {
+          return "Invalid URL";
+        }
+        return void 0;
+      }
+    });
+    if (p2.isCancel(customUrl)) {
+      p2.outro("No changes made.");
+      return;
+    }
+    const normalized = customUrl.replace(/\/+$/, "").replace(/\/v1$/, "");
+    const apiKey = await p2.text({
+      message: `Enter your API key for ${pc.cyan(normalized)}:`,
+      placeholder: "sk_live_...",
+      validate: (value) => {
+        if (!value) return "API key is required";
+        if (!value.startsWith("sk_live_") && !value.startsWith("sk_test_")) {
+          return "API key should start with sk_live_ or sk_test_";
+        }
+        return void 0;
+      }
+    });
+    if (p2.isCancel(apiKey)) {
+      p2.outro("No changes made.");
+      return;
+    }
+    const spinner5 = p2.spinner();
+    spinner5.start("Validating API key...");
+    let isValid = false;
+    try {
+      const api = new OneApi(apiKey, `${normalized}/v1`);
+      isValid = await api.validateApiKey();
+    } catch (err) {
+      spinner5.stop("Connection failed");
+      const msg = err instanceof Error ? err.message : String(err);
+      p2.log.error(`Could not reach ${pc.cyan(normalized)}: ${msg}`);
+      return;
+    }
+    if (!isValid) {
+      spinner5.stop("Invalid API key");
+      p2.log.error(`Invalid API key for ${pc.cyan(normalized)}.`);
+      return;
+    }
+    spinner5.stop("API key validated");
+    updateApiBase(normalized);
+    newApiKey = apiKey;
+  } else if (isCustomBase) {
+    const apiKey = await p2.text({
+      message: `Enter your API key for ${pc.cyan("https://api.withone.ai")}:`,
+      placeholder: "sk_live_...",
+      validate: (value) => {
+        if (!value) return "API key is required";
+        if (!value.startsWith("sk_live_") && !value.startsWith("sk_test_")) {
+          return "API key should start with sk_live_ or sk_test_";
+        }
+        return void 0;
+      }
+    });
+    if (p2.isCancel(apiKey)) {
+      p2.outro("No changes made.");
+      return;
+    }
+    const spinner5 = p2.spinner();
+    spinner5.start("Validating API key...");
+    let isValid = false;
+    try {
+      const api = new OneApi(apiKey, "https://api.withone.ai/v1");
+      isValid = await api.validateApiKey();
+    } catch (err) {
+      spinner5.stop("Connection failed");
+      const msg = err instanceof Error ? err.message : String(err);
+      p2.log.error(`Could not reach ${pc.cyan("https://api.withone.ai")}: ${msg}`);
+      return;
+    }
+    if (!isValid) {
+      spinner5.stop("Invalid API key");
+      p2.log.error(`Invalid API key. Get a valid key at ${getApiKeyUrl()}`);
+      return;
+    }
+    spinner5.stop("API key validated");
+    updateApiBase(null);
+    newApiKey = apiKey;
+  }
   const settings = {
     permissions,
     connectionKeys: connectionKeys ?? ["*"],
@@ -472,30 +595,35 @@ async function configCommand() {
     knowledgeAgent
   };
   updateAccessControl(settings);
+  const updatedConfig = readConfig();
+  if (updatedConfig && newApiKey !== config.apiKey) {
+    updatedConfig.apiKey = newApiKey;
+    writeConfig(updatedConfig);
+  }
   const ac = getAccessControl();
   const statuses = getAgentStatuses();
   const reinstalled = [];
   for (const s of statuses) {
     if (s.globalMcp) {
-      installMcpConfig(s.agent, config.apiKey, "global", ac);
+      installMcpConfig(s.agent, newApiKey, "global", ac);
       reinstalled.push(`${s.agent.name} (global)`);
     }
     if (s.projectMcp) {
-      installMcpConfig(s.agent, config.apiKey, "project", ac);
+      installMcpConfig(s.agent, newApiKey, "project", ac);
       reinstalled.push(`${s.agent.name} (project)`);
     }
   }
   if (reinstalled.length > 0) {
     p2.log.success(`Updated MCP configs: ${reinstalled.join(", ")}`);
   }
-  p2.outro("Access control updated.");
+  p2.outro("Configuration updated.");
 }
 async function selectConnections(apiKey) {
   const spinner5 = p2.spinner();
   spinner5.start("Fetching connections...");
   let connections;
   try {
-    const api = new OneApi(apiKey);
+    const api = new OneApi(apiKey, getApiBase());
     const rawConnections = await api.listConnections();
     connections = rawConnections.map((c) => ({ platform: c.platform, key: c.key }));
     spinner5.stop(`Found ${connections.length} connection(s)`);
@@ -665,7 +793,7 @@ ${pc2.cyan(getApiKeyUrl())}`, "API Key");
   }
   const spinner5 = p3.spinner();
   spinner5.start("Validating API key...");
-  const api = new OneApi(newKey);
+  const api = new OneApi(newKey, getApiBase());
   const isValid = await api.validateApiKey();
   if (!isValid) {
     spinner5.stop("Invalid API key");
@@ -884,7 +1012,7 @@ ${pc2.cyan(getApiKeyUrl())}`, "API Key");
   }
   const spinner5 = p3.spinner();
   spinner5.start("Validating API key...");
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const isValid = await api.validateApiKey();
   if (!isValid) {
     spinner5.stop("Invalid API key");
@@ -928,7 +1056,7 @@ var TOP_INTEGRATIONS = [
   { value: "notion", label: "Notion", hint: "Access pages, databases, and docs" }
 ];
 async function promptConnectIntegrations(apiKey) {
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const connected = [];
   try {
     const existing = await api.listConnections();
@@ -1090,7 +1218,7 @@ async function connectionAddCommand(platformArg) {
     p4.cancel("Not configured. Run `one init` first.");
     process.exit(1);
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = p4.spinner();
   spinner5.start("Loading platforms...");
   let platforms;
@@ -1194,7 +1322,7 @@ async function connectionListCommand(options) {
   if (!apiKey) {
     error("Not configured. Run `one init` first.");
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading connections...");
   try {
@@ -1266,6 +1394,65 @@ Add one with: ${pc4.cyan("one connection add gmail")}`,
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
+async function connectionDeleteCommand(connectionKey, options) {
+  const apiKey = getApiKey();
+  if (!apiKey) {
+    error("Not configured. Run `one init` first.");
+  }
+  const api = new OneApi(apiKey, getApiBase());
+  const spinner5 = createSpinner();
+  spinner5.start("Finding connection...");
+  let allConnections;
+  try {
+    allConnections = await api.listConnections();
+  } catch (error2) {
+    spinner5.stop("Failed to load connections");
+    error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
+    return;
+  }
+  const ac = getAccessControlFromAllSources();
+  const allowedKeys = ac.connectionKeys || ["*"];
+  const connections = allowedKeys.includes("*") ? allConnections : allConnections.filter((conn) => allowedKeys.includes(conn.key));
+  const match = connections.find((conn) => conn.key === connectionKey);
+  if (!match) {
+    spinner5.stop("Connection not found");
+    error(`No connection found with key: ${connectionKey}`);
+    return;
+  }
+  const connection2 = match;
+  spinner5.stop(`Found ${connection2.platform} (${connection2.state})`);
+  if (!isAgentMode() && !options?.force) {
+    console.log();
+    console.log(`  ${getStatusIndicator(connection2.state)} ${connection2.platform}  ${pc4.dim(connection2.key)}`);
+    console.log();
+    const confirmed = await p4.confirm({
+      message: "Are you sure you want to delete this connection?",
+      initialValue: false
+    });
+    if (p4.isCancel(confirmed) || !confirmed) {
+      p4.cancel("Deletion cancelled.");
+      process.exit(0);
+    }
+  }
+  const deleteSpinner = createSpinner();
+  deleteSpinner.start("Deleting connection...");
+  try {
+    await api.deleteConnection(connection2.id);
+    deleteSpinner.stop("Connection deleted");
+    if (isAgentMode()) {
+      json({
+        deleted: true,
+        platform: connection2.platform,
+        key: connection2.key
+      });
+      return;
+    }
+    p4.log.success(`${pc4.green("\u2713")} ${connection2.platform} connection removed.`);
+  } catch (error2) {
+    deleteSpinner.stop("Failed to delete connection");
+    error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
+  }
+}
 function getStatusIndicator(state) {
   switch (state) {
     case "operational":
@@ -1290,7 +1477,7 @@ async function platformsCommand(options) {
   if (isAgentMode()) {
     options.json = true;
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading platforms...");
   try {
@@ -1498,7 +1685,7 @@ function parseJsonArg(value, argName) {
 async function actionsSearchCommand(platform, query, options) {
   intro2(pc6.bgCyan(pc6.black(" One ")));
   const { apiKey, permissions, actionIds, knowledgeAgent } = getConfig();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start(`Searching actions on ${pc6.cyan(platform)} for "${query}"...`);
   try {
@@ -1640,7 +1827,7 @@ async function actionsKnowledgeCommand(platform, actionId, options) {
   }
   intro2(pc6.bgCyan(pc6.black(" One ")));
   const { apiKey, actionIds, connectionKeys } = getConfig();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   if (!isActionAllowed(actionId, actionIds)) {
     error(`Action "${actionId}" is not in the allowed action list.`);
   }
@@ -1747,7 +1934,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
   if (!connectionKeys.includes("*") && !connectionKeys.includes(connectionKey)) {
     error(`Connection key "${connectionKey}" is not allowed.`);
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading action details...");
   try {
@@ -2746,7 +2933,7 @@ Execute:  ${pc7.cyan(`one flow execute ${flow2.key}`)}`);
 async function flowExecuteCommand(keyOrPath, options) {
   intro2(pc7.bgCyan(pc7.black(" One Workflow ")));
   const { apiKey, permissions, actionIds } = getConfig2();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start(`Loading workflow "${keyOrPath}"...`);
   let flow2;
@@ -2918,7 +3105,7 @@ async function flowResumeCommand(runId) {
     error(`Run "${runId}" is ${state.status} \u2014 can only resume paused or failed runs`);
   }
   const { apiKey, permissions, actionIds } = getConfig2();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   let flow2;
   try {
     flow2 = loadFlow(state.flowKey);
@@ -3236,7 +3423,7 @@ async function relayCreateCommand(options) {
   if (!connectionKeys.includes("*") && !connectionKeys.includes(options.connectionKey)) {
     error(`Connection key "${options.connectionKey}" is not allowed.`);
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Creating relay endpoint...");
   try {
@@ -3268,7 +3455,7 @@ async function relayCreateCommand(options) {
 }
 async function relayListCommand(options) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading relay endpoints...");
   try {
@@ -3315,7 +3502,7 @@ async function relayListCommand(options) {
 }
 async function relayGetCommand(id) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading relay endpoint...");
   try {
@@ -3346,7 +3533,7 @@ async function relayGetCommand(id) {
 }
 async function relayUpdateCommand(id, options) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Updating relay endpoint...");
   try {
@@ -3373,7 +3560,7 @@ async function relayUpdateCommand(id, options) {
 }
 async function relayDeleteCommand(id) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Deleting relay endpoint...");
   try {
@@ -3392,7 +3579,7 @@ async function relayDeleteCommand(id) {
 }
 async function relayActivateCommand(id, options) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Activating relay endpoint...");
   try {
@@ -3416,7 +3603,7 @@ async function relayActivateCommand(id, options) {
 }
 async function relayEventsCommand(options) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading relay events...");
   try {
@@ -3463,7 +3650,7 @@ async function relayEventsCommand(options) {
 }
 async function relayEventGetCommand(id) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading relay event...");
   try {
@@ -3491,7 +3678,7 @@ async function relayDeliveriesCommand(options) {
     error("Provide either --endpoint-id or --event-id");
   }
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading deliveries...");
   try {
@@ -3523,7 +3710,7 @@ async function relayDeliveriesCommand(options) {
 }
 async function relayEventTypesCommand(platform) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start(`Loading event types for ${pc8.cyan(platform)}...`);
   try {
@@ -3616,7 +3803,7 @@ async function cacheUpdateAllCommand() {
   if (!apiKey) {
     error("Not configured. Run `one init` first.");
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const entries = listCacheEntries();
   if (entries.length === 0) {
     if (isAgentMode()) {
@@ -3698,6 +3885,7 @@ Search for actions, read their docs, and execute them. This is the core workflow
 **Quick start:**
 \`\`\`bash
 one --agent connection list                                    # See connected platforms
+one --agent connection delete <connection-key>                 # Remove a connection
 one --agent actions search <platform> "<query>" -t execute     # Find an action
 one --agent actions knowledge <platform> <actionId>            # Read docs (REQUIRED)
 one --agent actions execute <platform> <actionId> <key> -d '{}'  # Execute it
@@ -3781,6 +3969,14 @@ one --agent connection list
 
 Returns platforms, status, connection keys, and tags.
 
+### 1b. Delete a Connection
+
+\`\`\`bash
+one --agent connection delete <connection-key>
+\`\`\`
+
+Removes a connection by its key. In agent mode, returns \`{"deleted": true, "platform": "...", "key": "..."}\`. The connection key comes from \`one connection list\`.
+
 ### 2. Search Actions
 
 \`\`\`bash
@@ -4119,7 +4315,7 @@ async function onboardCommand(step) {
   let connections = [];
   if (currentStep >= 2) {
     try {
-      const api = new OneApi(apiKey);
+      const api = new OneApi(apiKey, getApiBase());
       connections = await api.listConnections();
     } catch {
     }
@@ -4452,6 +4648,14 @@ async function updateCommand() {
     error("Update failed \u2014 try running: npm install -g @withone/cli@latest");
   }
 }
+function isNewerVersion(latest, current) {
+  const parse = (v) => v.split(".").map(Number);
+  const [lMaj, lMin, lPat] = parse(latest);
+  const [cMaj, cMin, cPat] = parse(current);
+  if (lMaj !== cMaj) return lMaj > cMaj;
+  if (lMin !== cMin) return lMin > cMin;
+  return lPat > cPat;
+}
 function autoUpdate(targetVersion, publishedAt) {
   if (publishedAt) {
     const age = Date.now() - new Date(publishedAt).getTime();
@@ -4474,6 +4678,7 @@ program.name("one").option("--agent", "Machine-readable JSON output (no colors,
   Setup:
     one init                              Set up API key and install MCP server
     one add <platform>                    Connect a platform via OAuth (e.g. gmail, slack, shopify)
+    one connection delete <key>           Remove a connection (alias: one connection rm)
     one config                            Configure access control (permissions, scoping)
 
   Workflow (use these in order):
@@ -4535,7 +4740,7 @@ program.hook("postAction", async () => {
   const info = await updateCheckPromise;
   if (!info) return;
   const current = getCurrentVersion();
-  if (current === info.version) return;
+  if (!isNewerVersion(info.version, current)) return;
   autoUpdate(info.version, info.publishedAt);
 });
 program.command("init").description("Set up One and install MCP to your AI agents").option("-y, --yes", "Skip confirmations").option("-g, --global", "Install MCP globally (available in all projects)").option("-p, --project", "Install MCP for this project only (creates .mcp.json)").action(async (options) => {
@@ -4551,6 +4756,9 @@ connection.command("add [platform]").alias("a").description("Add a new connectio
 connection.command("list").alias("ls").description("List your connections").option("-s, --search <query>", "Filter connections by platform name").option("-l, --limit <n>", "Max connections to return (agent mode default: 20)").action(async (options) => {
   await connectionListCommand(options);
 });
+connection.command("delete <connection-key>").alias("rm").description("Delete a connection").option("-f, --force", "Skip confirmation prompt").action(async (connectionKey, options) => {
+  await connectionDeleteCommand(connectionKey, options);
+});
 program.command("platforms").alias("p").description("List available platforms").option("-c, --category <category>", "Filter by category").option("--json", "Output as JSON").action(async (options) => {
   await platformsCommand(options);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.18.0",
+  "version": "1.20.0",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/skills/one/SKILL.md

@@ -34,6 +34,14 @@ one --agent connection list
 
 Returns connected platforms with their connection keys (needed for execution) and platform names in kebab-case (needed for searching).
 
+### 1b. Delete a connection
+
+```bash
+one --agent connection delete <connection-key>
+```
+
+Removes a connection. Returns `{"deleted": true, "platform": "...", "key": "..."}` on success. Use the connection key from `one --agent connection list`.
+
 ### 2. Search for the right action
 
 ```bash
@@ -126,3 +134,11 @@ If the user needs a platform that isn't connected yet, tell them to run:
 one add <platform>
 ```
 This is interactive and opens the browser for OAuth. After connecting, the platform will appear in `one --agent connection list`.
+
+## Removing Connections
+
+To delete a connection that is no longer needed:
+```bash
+one --agent connection delete <connection-key>
+```
+The connection key comes from `one --agent connection list`. Returns `{"deleted": true, "platform": "...", "key": "..."}` on success.