@withone/cli 1.43.8 → 1.44.0

package/README.md

@@ -24,7 +24,7 @@
   <a href="https://withone.ai/knowledge"><img src="https://img.shields.io/endpoint?url=https%3A%2F%2Fapi.withone.ai%2Fopen%2Fcount%2Ftools" alt="tools"></a>
 </p>
 
-One gives your AI agent authenticated access to 250+ platforms - Gmail, Slack, Shopify, HubSpot, Stripe, Notion, and everything else - through a single interface. No API keys to juggle, no OAuth flows to build, no request formats to memorize. Connect a platform once, and your agent can search for actions, read the docs, and execute API calls in seconds.
+One gives your AI agent authenticated access to 400+ platforms - Gmail, Slack, Shopify, HubSpot, Stripe, Notion, and everything else - through a single interface. No API keys to juggle, no OAuth flows to build, no request formats to memorize. Connect a platform once, and your agent can search for actions, read the docs, and execute API calls in seconds.
 
 ## Install
 
@@ -144,11 +144,21 @@ In a monorepo, the project root is the nearest ancestor with `.one/`, `.git`, or
 
 If you've already set up, `one init` shows your current status for the active scope and lets you update your key, install to more agents, or reconfigure.
 
+**Agent-driven setup (no prompts).** Pass `--auth` and `one init` runs end-to-end without any terminal interaction — handy when an AI agent is onboarding you. It saves the key, auto-installs the One skill, and skips the connect step (`one add` later).
+
+```bash
+one init --auth browser            # opens a login window; you authenticate, the window closes — done
+one init --auth manual --api-key sk_live_...   # headless / CI, no browser
+```
+
 | Flag | What it does |
 |------|-------------|
 | `-y` | Skip confirmations |
 | `-g` | Non-interactive: write the One config globally (`~/.one/config.json`) |
 | `-p` | Non-interactive: write the One config for this project (`~/.one/projects/<slug>/config.json`) |
+| `--auth <browser\|manual>` | Run setup with **no prompts**. `browser` opens a login window; `manual` uses `--api-key`. Scope from `-g`/`-p` (default global). |
+| `--api-key <key>` | API key for `--auth manual` (`sk_live_…` / `sk_test_…`) |
+| `--openai-key <key>` | Optional OpenAI key for `one mem` semantic search |
 
 ### `one add <platform>`
 

package/dist/index.js

@@ -1032,7 +1032,7 @@ async function loginCommand() {
   console.log(pc13.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log(pc13.cyan("  \u2502"));
   console.log(pc13.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc13.cyan("  \u2502  lets you interact with 250+ third-party platforms (Gmail,"));
+  console.log(pc13.cyan("  \u2502  lets you interact with 400+ third-party platforms (Gmail,"));
   console.log(pc13.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
   console.log(pc13.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
   console.log(pc13.cyan("  \u2502  third-party platform or external service, use the `one`"));
@@ -1046,8 +1046,12 @@ async function loginCommand() {
 
 // src/commands/init.ts
 async function initCommand(options) {
+  if (options.auth) {
+    await nonInteractiveInit(options);
+    return;
+  }
   if (isAgentMode()) {
-    error("This command requires interactive input. Run without --agent.");
+    error("This command is interactive. Run without --agent, or pass --auth <browser|manual> for a non-interactive setup.");
   }
   printBanner();
   const scope = await chooseConfigScope(options);
@@ -1062,6 +1066,101 @@ async function initCommand(options) {
   }
   await freshSetup(scope, options);
 }
+async function nonInteractiveInit(options) {
+  const auth = options.auth;
+  if (auth !== "browser" && auth !== "manual") {
+    error(`Invalid --auth value '${auth}'. Use 'browser' or 'manual'.`);
+  }
+  const scope = options.global ? "global" : options.project ? "project" : "global";
+  let apiKey;
+  let whoami;
+  if (auth === "browser") {
+    const result = await browserLogin();
+    if (!result) {
+      error("Browser login did not complete. Try again: one init --auth browser");
+    }
+    apiKey = result.apiKey;
+    whoami = result.whoami;
+  } else {
+    const key = options.apiKey?.trim();
+    if (!key) {
+      error("--auth manual requires --api-key <sk_live_\u2026 | sk_test_\u2026>.");
+    }
+    if (!key.startsWith("sk_live_") && !key.startsWith("sk_test_")) {
+      error("API key should start with sk_live_ or sk_test_.");
+    }
+    const api = new OneApi(key, getApiBase());
+    let validated;
+    try {
+      validated = await api.validateApiKey();
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      error(`Could not validate API key: ${msg}`);
+    }
+    if (!validated) {
+      error(`Invalid API key. Get a valid key at ${getApiKeyUrl()}`);
+    }
+    apiKey = key;
+    whoami = validated;
+  }
+  const existing = scope === "project" ? readProjectConfig() : readGlobalConfig();
+  writeConfig(
+    {
+      apiKey,
+      installedAgents: existing?.installedAgents ?? [],
+      createdAt: existing?.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+      accessControl: existing?.accessControl,
+      apiBase: existing?.apiBase,
+      cacheTtl: existing?.cacheTtl,
+      whoami
+    },
+    scope
+  );
+  if (options.openaiKey?.trim()) {
+    try {
+      setOpenAiApiKey(options.openaiKey.trim());
+    } catch {
+    }
+  }
+  const primaryIds = SKILL_AGENTS.filter((a) => a.primary).map((a) => a.id);
+  const { installed, failed } = installSkillForAgents(primaryIds);
+  const configPath = scope === "project" ? getProjectConfigPath() : getGlobalConfigPath();
+  if (isAgentMode()) {
+    json({
+      success: true,
+      scope,
+      configPath,
+      auth,
+      account: {
+        user: whoami.user,
+        organization: whoami.organization,
+        project: whoami.project,
+        env: getEnvFromApiKey(apiKey)
+      },
+      skillInstalled: installed,
+      skillFailed: failed
+    });
+    return;
+  }
+  const env = getEnvFromApiKey(apiKey);
+  const contextParts = [];
+  if (whoami.organization) contextParts.push(whoami.organization.name);
+  if (whoami.project) contextParts.push(whoami.project.name);
+  const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
+  const envLabel = env === "test" ? pc2.yellow("test") : pc2.green("live");
+  console.log();
+  console.log(`  ${pc2.bold("Setup complete")} ${scopeLabel(scope)}`);
+  console.log(`  ${pc2.dim("\u2500".repeat(42))}`);
+  console.log(`  ${pc2.dim("Account:")} ${scopeDisplay} ${pc2.dim("\xB7")} ${envLabel}`);
+  console.log(`  ${pc2.dim("User:")}    ${whoami.user.name} ${pc2.dim(`(${whoami.user.email})`)}`);
+  console.log(`  ${pc2.dim("Config:")}  ${tildify(configPath)}`);
+  if (installed.length > 0) {
+    console.log(`  ${pc2.dim("Skill:")}   ${pc2.green("installed")} ${pc2.dim("\xB7 " + installed.join(", "))}`);
+  }
+  console.log();
+  console.log(`  ${pc2.dim("Connect a platform later with")} ${pc2.cyan("one add <platform>")}`);
+  printOnboardingPrompt();
+}
 async function chooseConfigScope(options) {
   if (options.global) return "global";
   if (options.project) return "project";
@@ -1540,7 +1639,7 @@ function printOnboardingPrompt() {
   console.log(pc2.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log(pc2.cyan("  \u2502"));
   console.log(pc2.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc2.cyan("  \u2502  lets you interact with 250+ third-party platforms (Gmail,"));
+  console.log(pc2.cyan("  \u2502  lets you interact with 400+ third-party platforms (Gmail,"));
   console.log(pc2.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
   console.log(pc2.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
   console.log(pc2.cyan("  \u2502  third-party platform or external service, use the `one`"));
@@ -9236,6 +9335,17 @@ var GUIDE_OVERVIEW = `# One CLI \u2014 Agent Guide
 
 You can also use \`one login\` / \`one logout\` to manage authentication separately (global or per-directory).
 
+### Agent-driven setup (no prompts)
+To onboard a user without any terminal interaction, pass \`--auth\` to \`one init\`. This disables every prompt, auto-installs the One skill, and skips the connect-a-platform step (run \`one add <platform>\` afterwards).
+
+\`\`\`bash
+one init --auth browser              # opens a login window; the user authenticates, the CLI saves the key
+one init --auth browser --project    # same, but scoped to this folder (default scope is global)
+one init --auth manual --api-key sk_live_...   # headless / CI \u2014 no browser
+\`\`\`
+
+With \`--auth browser\` the user sees a browser window, picks how to authenticate, and the window closes when done \u2014 the agent never blocks on stdin. Add \`--openai-key sk-...\` to enable semantic search in \`one mem\` during setup.
+
 ## The --agent Flag
 
 Always use \`--agent\` for machine-readable JSON output. It disables colors, spinners, and interactive prompts.
@@ -9252,7 +9362,7 @@ Before using any feature, read its guide section first: \`one guide actions\`, \
 
 ## Features
 
-### 1. Actions \u2014 Execute API calls on 250+ platforms
+### 1. Actions \u2014 Execute API calls on 400+ platforms
 Search for actions, read their docs, and execute them. This is the core workflow.
 
 **Quick start:**
@@ -10289,7 +10399,7 @@ function buildStep1() {
     nextCommand: "one onboard --step 2",
     message: `# One CLI \u2014 Agent Onboarding
 
-You now have access to the One CLI. It connects you to 250+ platforms
+You now have access to the One CLI. It connects you to 400+ platforms
 (Gmail, Slack, Stripe, Notion, etc.) \u2014 you'll learn the details shortly.
 
 IMPORTANT: Your only task right now is to send the message below to the
@@ -10299,7 +10409,7 @@ Do not offer demos yet. Just send this message and wait for their reply:
 ---
 
 I just got access to the One CLI \u2014 it connects me to your platforms like
-Gmail, Slack, Stripe, and 250+ others so I can work with them directly.
+Gmail, Slack, Stripe, and 400+ others so I can work with them directly.
 I'll show you what I can do in a moment.
 
 First, one quick setup step: right now only this conversation knows about
@@ -10328,7 +10438,7 @@ If they declined, skip this section.
 ## One CLI \u2014 Platform Integrations
 
 The One CLI (\`one\`) is installed and configured on this machine. It is a
-command-line tool that gives AI agents the ability to interact with 250+
+command-line tool that gives AI agents the ability to interact with 400+
 third-party platforms (Gmail, Slack, Shopify, HubSpot, Stripe, GitHub,
 Notion, Salesforce, etc.) through a single, unified interface.
 
@@ -10423,7 +10533,7 @@ function buildStep3(connections) {
 The user can connect any of these popular platforms:
 Gmail, Google Calendar, Slack, Notion, Shopify, Stripe, HubSpot, GitHub,
 Salesforce, QuickBooks, Asana, Jira, Linear, Intercom, Zendesk, Twilio,
-and 250+ more. Run \`one platforms\` for the full list.`);
+and 400+ more. Run \`one platforms\` for the full list.`);
   sections.push("## Onboarding complete!\n\nYou're all set. Use `one --agent guide` any time you need the full reference.");
   return {
     step: 3,
@@ -10454,7 +10564,7 @@ platform before you can start using actions. Suggest they run:
   one add slack
   one add <any-platform>
 
-Run \`one platforms\` to see all 250+ available platforms.`;
+Run \`one platforms\` to see all 400+ available platforms.`;
   }
   const header = `## Current State
 
@@ -10635,12 +10745,12 @@ async function logoutCommand() {
 var require3 = createRequire2(import.meta.url);
 var { version } = require3("../package.json");
 var program = new Command();
-program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 250+ platforms through one interface.
+program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 400+ platforms through one interface.
 
   Setup:
     one login                             Authenticate via browser (opens app.withone.ai)
     one logout                            Clear local credentials
-    one init                              Set up API key and install MCP server
+    one init                              Set up API key + skill (add --auth browser for no-prompt agent setup)
     one add <platform>                    Connect a platform via OAuth (e.g. gmail, slack, shopify)
     one connection delete <key>           Remove a connection (alias: one connection rm)
     one config                            Configure access control (permissions, scoping)
@@ -10707,7 +10817,7 @@ program.name("one").option("--agent", "Machine-readable JSON output (no colors,
         -d '{"to":"j@example.com","subject":"Hello","body":"Hi!","connectionKey":"live::gmail::default::abc123"}'
 
   Platform names are lowercase; multi-word names use dashes (e.g. hubspot, ship-station, google-calendar).
-  Run 'one platforms' to browse all 250+ available platforms.`).version(version);
+  Run 'one platforms' to browse all 400+ available platforms.`).version(version);
 var updateCheckPromise;
 program.hook("preAction", (thisCommand) => {
   const opts = program.opts();
@@ -10734,7 +10844,7 @@ program.hook("postAction", async () => {
   if (!isNewerVersion(info.version, current)) return;
   autoUpdate(info.version, info.publishedAt);
 });
-program.command("init").description("Set up One and install MCP to your AI agents (interactive: picks global or project scope)").option("-y, --yes", "Skip confirmations").option("-g, --global", "Write the One config globally (~/.one/config.json) \u2014 skips the scope picker").option("-p, --project", "Write the One config for this project only (~/.one/projects/<slug>/) \u2014 skips the scope picker").action(async (options) => {
+program.command("init").description("Set up One and install the skill to your AI agents (interactive; pass --auth for a no-prompt setup)").option("-y, --yes", "Skip confirmations").option("-g, --global", "Write the One config globally (~/.one/config.json) \u2014 skips the scope picker").option("-p, --project", "Write the One config for this project only (~/.one/projects/<slug>/) \u2014 skips the scope picker").option("--auth <method>", 'Non-interactive setup (no prompts): "browser" opens a login window, "manual" uses --api-key').option("--api-key <key>", "API key for --auth manual (sk_live_\u2026 or sk_test_\u2026)").option("--openai-key <key>", "Optional OpenAI key for `one mem` semantic search (non-interactive setup)").action(async (options) => {
   await initCommand(options);
 });
 program.command("login").description("Authenticate with One via browser").action(async () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.43.8",
+  "version": "1.44.0",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/skills/one/SKILL.md

@@ -20,7 +20,7 @@ description: |
 
 # One CLI
 
-You have access to the One CLI which lets you interact with 250+ third-party platforms through their APIs. Always include the `--agent` flag right after `one` for structured JSON output.
+You have access to the One CLI which lets you interact with 400+ third-party platforms through their APIs. Always include the `--agent` flag right after `one` for structured JSON output.
 
 If the user wants a separate API key / connections for a specific project (vs. their default), walk them through running `one init` from that project folder and picking the "project" scope — see `references/scoping.md`. For monorepo subprojects (where a parent already has `.git`/`package.json`), have them `mkdir .one` in the subproject first so the config is keyed to that dir, not the monorepo root.
 
@@ -31,7 +31,9 @@ one login                    # Browser-based login (opens app.withone.ai)
 one logout                   # Clear local credentials
 ```
 
-`one login` opens the browser for OAuth authentication and automatically creates and stores an API key. If already logged in, the user can choose to log in globally or for the current directory. `one logout` shows current session info and confirms before clearing credentials. For CI/CD or headless environments, use `one init` to paste a key manually.
+`one login` opens the browser for OAuth authentication and automatically creates and stores an API key. If already logged in, the user can choose to log in globally or for the current directory. `one logout` shows current session info and confirms before clearing credentials.
+
+**Onboarding a user with no prompts:** run `one init --auth browser` — it opens a login window (the user authenticates there), saves the key, and auto-installs this skill, all without blocking on stdin. Add `-g`/`-p` for scope (default global). For CI/CD or headless environments, use `one init --auth manual --api-key sk_live_...`.
 
 ## Core Workflow: search -> knowledge -> execute