@withone/cli 1.51.0 → 1.52.0

package/dist/{chunk-D6W756DN.js → chunk-K56Z5BTM.js}

@@ -1039,6 +1039,7 @@ var FLOW_SCHEMA = {
         command: { type: "string", required: true, description: "Shell command to execute (supports selectors)" },
         timeout: { type: "number", required: false, description: "Timeout in ms (default: 30000)" },
         parseJson: { type: "boolean", required: false, description: "Parse stdout as JSON (default: false). When true, $.steps.<id>.output is the parsed object/array; when false, it is the trimmed stdout string." },
+        parseEnvelope: { type: "boolean", required: false, description: "Unwrap a `claude --print --output-format json` envelope: extract .result, strip code fences + preamble, parse the inner JSON as $.steps.<id>.output. Use this (instead of parseJson) for claude --print steps. Fails the step if the unwrapped payload isn't valid JSON." },
         cwd: { type: "string", required: false, description: "Working directory (supports selectors)" },
         env: { type: "object", required: false, description: "Additional environment variables" }
       },
@@ -1049,7 +1050,7 @@ var FLOW_SCHEMA = {
         bash: {
           command: "cat /tmp/data.json | claude --print 'Analyze this data' --output-format json",
           timeout: 18e4,
-          parseJson: true
+          parseEnvelope: true
         }
       }
     }
@@ -1986,6 +1987,40 @@ function stripCodeFences(text) {
   const match = trimmed.match(/^```(?:\w*)\s*\n([\s\S]*?)\n\s*```\s*$/);
   return match ? match[1].trim() : trimmed;
 }
+function stripToJson(text) {
+  const s = stripCodeFences(text);
+  const candidates = [s.indexOf("{"), s.indexOf("[")].filter((i) => i >= 0);
+  if (candidates.length === 0) return s;
+  const start = Math.min(...candidates);
+  const end = Math.max(s.lastIndexOf("}"), s.lastIndexOf("]"));
+  return end > start ? s.slice(start, end + 1) : s;
+}
+function unwrapClaudeEnvelope(stdout, stepId) {
+  const trimmed = stdout.trim();
+  let envelope;
+  try {
+    envelope = JSON.parse(trimmed);
+  } catch {
+    envelope = trimmed;
+  }
+  let resultText;
+  if (envelope && typeof envelope === "object" && !Array.isArray(envelope) && envelope.type === "result" && typeof envelope.result === "string") {
+    resultText = envelope.result;
+  } else if (typeof envelope === "string") {
+    resultText = envelope;
+  } else {
+    return envelope;
+  }
+  const payload = stripToJson(resultText);
+  try {
+    return JSON.parse(payload);
+  } catch (err) {
+    const snippet = payload.length > 200 ? `${payload.slice(0, 200)}\u2026` : payload;
+    throw new Error(
+      `Bash step "${stepId}" parseEnvelope: claude output was not valid JSON after unwrapping (${err instanceof Error ? err.message : String(err)}). Got: ${snippet}`
+    );
+  }
+}
 async function executeActionStep(step, context, api, permissions, allowedActionIds, options) {
   const action = step.action;
   const platform = resolveValue(action.platform, context);
@@ -2319,7 +2354,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-YDKAYGZW.js");
+  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-WZIYXW47.js");
   const { flow: subFlow, rootDir: subRootDir } = loadFlowWithMeta2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,
@@ -2464,7 +2499,7 @@ async function executeBashStep(step, context, options) {
       env,
       maxBuffer: 10 * 1024 * 1024
     });
-    const output = config.parseJson ? JSON.parse(stripCodeFences(stdout)) : stdout.trim();
+    const output = config.parseEnvelope ? unwrapClaudeEnvelope(stdout, step.id) : config.parseJson ? JSON.parse(stripCodeFences(stdout)) : stdout.trim();
     return {
       status: "success",
       output,

package/dist/{flow-runner-YDKAYGZW.js → flow-runner-WZIYXW47.js}

@@ -12,7 +12,7 @@ import {
   stripStepsAlias,
   summarizeFlowInputs,
   walkSteps
-} from "./chunk-D6W756DN.js";
+} from "./chunk-K56Z5BTM.js";
 import "./chunk-44CV5IMX.js";
 import "./chunk-SO323PZP.js";
 export {

package/dist/index.js

@@ -32,7 +32,7 @@ import {
   validateActionInput,
   walkSteps,
   writeCache
-} from "./chunk-D6W756DN.js";
+} from "./chunk-K56Z5BTM.js";
 import {
   memSqlCommand
 } from "./chunk-UV4YYDF3.js";
@@ -9990,7 +9990,7 @@ one --agent flow list                                 # List all workflows
 - Code steps can reference an external \`.mjs\` module under the flow's \`lib/\` folder (stdin JSON in, stdout JSON out) \u2014 keeps JS out of JSON strings and makes flows shareable
 - 12 step types: action, transform, code, condition, loop, parallel, file-read, file-write, while, flow, paginate, bash
 - Data wiring via selectors: \`$.input.param\`, \`$.steps.stepId.response\`, \`$.loop.item\`
-- AI analysis via bash steps: \`claude --print\` with \`parseJson: true\`
+- AI analysis via bash steps: \`claude --print --output-format json\` with \`parseEnvelope: true\` (unwraps the CLI envelope + fences + preamble into clean parsed JSON; use instead of \`parseJson\` for claude steps)
 - Use \`--allow-bash\` to enable bash steps, \`--mock\` for dry-run with realistic mock responses (uses example data from action schemas)
 - Use \`--skip-validation\` to bypass input validation on action steps
 - Use \`--output-file <path>\` to stream the full result to a file instead of stdout \u2014 for large results that would otherwise be truncated or hit the JSON string-size limit; stdout (and \`--agent\` output) then carries an \`outputFile\` pointer instead of inline \`steps\`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.51.0",
+  "version": "1.52.0",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/skills/one/references/flows.md

@@ -478,10 +478,12 @@ e.g. if sub-flow `enrich-customer` has a step `load` that returns `{ TEAM: "acme
 {
   "id": "analyze",
   "type": "bash",
-  "bash": { "command": "cat /tmp/data.json | claude --print 'Analyze this' --output-format json", "timeout": 180000, "parseJson": true }
+  "bash": { "command": "cat /tmp/data.json | claude --print 'Analyze this' --output-format json", "timeout": 180000, "parseEnvelope": true }
 }
 ```
 
+**Parsing output.** `parseJson: true` parses stdout as JSON (and strips outer code fences). For **`claude --print --output-format json`** steps use **`parseEnvelope: true`** instead — `claude` wraps the model's answer in a CLI envelope `{ "type": "result", "result": "```json\n{...}\n```" }`, and `parseEnvelope` unwraps `.result`, strips the inner code fences, drops any preamble/trailer text, and parses the inner JSON as `$.steps.<id>.output`. If the unwrapped payload isn't valid JSON the step fails (no silently-broken data). No more hand-rolled `unwrap()` helpers in code steps.
+
 **Safe interpolation.** Plain `{{$.input.x}}` does string substitution and is **unsafe** for bash — values containing quotes, `$`, backticks, `&`, etc. will break the command (or worse). Use the `q` helper to POSIX-shell-quote the value:
 
 ```json
@@ -665,8 +667,8 @@ Each substep inside `parallel.steps` must have the full step schema: `id`, `name
 
 When raw data needs analysis, use this pattern:
 1. `file-write` — save data to temp file (API responses are too large to inline)
-2. `bash` — call `claude --print` to analyze (set timeout to 180000+, use `--output-format json`)
-3. `code` — parse and structure the AI output for downstream steps
+2. `bash` — call `claude --print` to analyze (set timeout to 180000+, use `--output-format json` and `"parseEnvelope": true` so `$.steps.<id>.output` is the clean parsed JSON)
+3. `code` — structure the AI output for downstream steps (no manual envelope unwrap needed — `parseEnvelope` already did it)
 
 ## CLI Commands