@withone/cli 1.36.0 → 1.37.0

package/dist/index.js

@@ -4334,6 +4334,7 @@ async function relayCreateCommand(options) {
     if (options.description) body.description = options.description;
     if (options.eventFilters) body.eventFilters = parseJsonArg2(options.eventFilters, "--event-filters");
     if (options.tags) body.tags = parseJsonArg2(options.tags, "--tags");
+    if (options.metadata) body.metadata = parseJsonArg2(options.metadata, "--metadata");
     if (options.createWebhook) body.createWebhook = true;
     const result = await api.createRelayEndpoint(body);
     if (isAgentMode()) {
@@ -4348,6 +4349,10 @@ async function relayCreateCommand(options) {
     if (result.description) console.log(`  ${pc8.dim("Description:")} ${result.description}`);
     if (result.eventFilters?.length) console.log(`  ${pc8.dim("Events:")}      ${result.eventFilters.join(", ")}`);
     if (result.webhookPayload?.id) console.log(`  ${pc8.dim("Webhook ID:")}  ${result.webhookPayload.id}`);
+    if (result.warning) {
+      console.log();
+      console.log(`  ${pc8.yellow("\u26A0 Warning:")} ${result.warning}`);
+    }
     console.log();
   } catch (error2) {
     spinner6.stop("Failed to create relay endpoint");
@@ -8201,8 +8206,32 @@ one --agent relay deliveries --endpoint-id <id>    # Check delivery status
 2. **Get event types** \u2014 \`one --agent relay event-types <platform>\`
 3. **Get source knowledge** \u2014 understand the incoming webhook payload shape (\`{{payload.*}}\` paths)
 4. **Get destination knowledge** \u2014 understand the outgoing API body shape
-5. **Create endpoint** \u2014 with \`--create-webhook\` and \`--event-filters\`
-6. **Activate** \u2014 with passthrough action mapping source fields to destination fields
+5. **Create endpoint** \u2014 with \`--create-webhook\`, \`--event-filters\`, and \`--metadata\` if the source platform requires it
+6. **Activate** \u2014 with passthrough action mapping source fields to destination fields. **Do NOT pass \`--webhook-secret\`** when the endpoint was created with \`--create-webhook\` \u2014 the correct secret is auto-stored, and supplying a wrong one silently drops every delivery (events arrive, 0 deliveries).
+
+## Platform-Specific Metadata (\`--metadata\`)
+
+Some source platforms need extra identifiers to register a webhook. Pass these via \`--metadata '<json>'\` on \`relay create\`. Without them, \`--create-webhook\` silently fails:
+
+| Platform | Required metadata keys |
+|---|---|
+| \`github\` | \`GITHUB_OWNER\`, \`GITHUB_REPOSITORY\` |
+| \`typeform\` | \`TYPEFORM_FORM_ID\` |
+| \`stripe\` | (none) |
+| \`airtable\` | (none) |
+| \`attio\` | (none) |
+| \`google-calendar\` | (none) |
+
+Example (GitHub):
+
+\`\`\`bash
+one --agent relay create \\
+  --connection-key "live::github::default::<key>" \\
+  --event-filters '["issues","pull_request"]' \\
+  --metadata '{"GITHUB_OWNER":"my-org","GITHUB_REPOSITORY":"my-repo"}' \\
+  --description "GitHub relay" \\
+  --create-webhook
+\`\`\`
 
 ## Template Context
 
@@ -8253,6 +8282,8 @@ Any connected platform can be a destination via passthrough actions.
 2. \`relay events --platform <p>\` \u2014 check events are arriving
 3. \`relay deliveries --event-id <id>\` \u2014 check delivery status and errors
 4. \`relay event <id>\` \u2014 inspect full payload to verify template paths
+
+**If events arrive but 0 deliveries succeed**: you likely passed a wrong \`--webhook-secret\` on \`relay activate\`. When you created the endpoint with \`--create-webhook\`, the secret was registered with the source platform and stored automatically \u2014 do not pass it again on activate. Signature verification will fail silently and every event will be dropped.
 `;
 var GUIDE_CACHE = `# One Cache \u2014 Reference
 
@@ -9416,7 +9447,7 @@ flow.command("scaffold [template]").description("Generate a workflow scaffold (t
   await flowScaffoldCommand(template);
 });
 var relay = program.command("relay").alias("r").description("Receive webhooks from platforms and relay them via passthrough actions");
-relay.command("create").description("Create a new relay endpoint for a connection").requiredOption("--connection-key <key>", "Connection key for the source platform").option("--description <desc>", "Description of the relay endpoint").option("--event-filters <json>", `JSON array of event types to filter (e.g. '["customer.created"]')`).option("--tags <json>", "JSON array of tags").option("--create-webhook", "Automatically register the webhook with the source platform").action(async (options) => {
+relay.command("create").description("Create a new relay endpoint for a connection").requiredOption("--connection-key <key>", "Connection key for the source platform").option("--description <desc>", "Description of the relay endpoint").option("--event-filters <json>", `JSON array of event types to filter (e.g. '["customer.created"]')`).option("--tags <json>", "JSON array of tags").option("--metadata <json>", `JSON object of platform-specific metadata required to register the webhook (e.g. GitHub: '{"GITHUB_OWNER":"org","GITHUB_REPOSITORY":"repo"}', Typeform: '{"TYPEFORM_FORM_ID":"abc"}')`).option("--create-webhook", "Automatically register the webhook with the source platform").action(async (options) => {
   await relayCreateCommand(options);
 });
 relay.command("list").alias("ls").description("List all relay endpoints").option("--limit <n>", "Max results per page").option("--page <n>", "Page number").action(async (options) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.36.0",
+  "version": "1.37.0",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/skills/one/references/relay.md

@@ -52,6 +52,25 @@ one --agent relay create \
 
 Always use `--create-webhook` — it registers the webhook URL with the source platform automatically.
 
+**Some source platforms require extra identifiers via `--metadata`:**
+
+| Platform | Required metadata keys |
+|---|---|
+| `github` | `GITHUB_OWNER`, `GITHUB_REPOSITORY` |
+| `typeform` | `TYPEFORM_FORM_ID` |
+| `stripe`, `airtable`, `attio`, `google-calendar` | (none) |
+
+Without metadata, `--create-webhook` silently fails for these platforms. Example for GitHub:
+
+```bash
+one --agent relay create \
+  --connection-key "live::github::default::<key>" \
+  --event-filters '["issues","pull_request"]' \
+  --metadata '{"GITHUB_OWNER":"my-org","GITHUB_REPOSITORY":"my-repo"}' \
+  --description "GitHub relay" \
+  --create-webhook
+```
+
 ### Step 6: Activate with a passthrough action
 
 ```bash
@@ -66,6 +85,8 @@ one --agent relay activate <relay-id> --actions '[{
 }]'
 ```
 
+**Do NOT pass `--webhook-secret` on activate** when you created the endpoint with `--create-webhook`. The correct secret is registered with the source platform and stored automatically. Supplying a wrong one does not error — events arrive but every delivery is dropped during signature verification (0 deliveries). If you don't have a reason to override the secret, omit the flag.
+
 ## Template Context
 
 | Variable | Description |
@@ -177,3 +198,5 @@ one --agent relay deliveries --event-id <id>
 - Event filters on both the endpoint and individual actions must match
 - Multiple actions can be attached to a single relay endpoint
 - Missing template variables resolve to empty strings — verify `{{payload.*}}` paths against the actual payload
+- GitHub and Typeform relays require `--metadata` on create; without it `--create-webhook` silently fails
+- Never pass `--webhook-secret` on activate when the endpoint was created with `--create-webhook` — the auto-stored secret is correct, and a wrong one causes signature verification to drop every event silently