@withone/cli 2.12.0 → 2.14.0

package/README.md

@@ -610,14 +610,17 @@ Press Ctrl+C during execution to pause - the run can be resumed later with `one
 | Option | What it does |
 |--------|-------------|
 | `-i, --input <name=value>` | Input parameter (repeatable) |
-| `--dry-run` | Resolve each step's interpolations and show what they evaluate to, without executing any step. `$.input.*`/`$.env.*` resolve up front; `$.steps.*` refs are reported as deferred (they're produced at runtime). |
+| `--dry-run` | Resolve each step's interpolations and show what they evaluate to, without running actions, code, bash or file steps. Transform and condition expressions are evaluated, in the sandbox. `$.input.*`/`$.env.*` resolve up front; `$.steps.*` refs are reported as deferred (they're produced at runtime). |
 | `--mock` | With `--dry-run`: execute transforms/code with realistic mock API responses |
 | `--stop-after <stepId>` | Execute steps up to and including `<stepId>`, then stop (later steps are not run). Combined with `--dry-run`, runs earlier steps for real and dry-resolves `<stepId>` against their output without executing it. Inspect what ran with `one flow inspect <runId>`. |
 | `--skip-validation` | Skip input validation against action schemas |
 | `--allow-bash` | Allow bash step execution (disabled by default for security) |
+| `--allow-code` | Allow `code.module` steps, which run a `.mjs` file with full Node access (disabled by default for security) |
 | `-v, --verbose` | Show full request/response for each step |
 | `--output-file <path>` | Stream the full result to a file instead of stdout — for large results that would otherwise be truncated or exceed the JSON string-size limit. stdout (and `--agent` output) then carries an `outputFile` pointer instead of inline `steps`. |
 
+Inline JavaScript in a flow (transforms, conditions, `if`/`unless`, `code.source`) runs in a sandbox: a separate Node process with no file, child-process or network access and no environment of its own. It needs no flag. `code.module` steps are full Node programs and need `--allow-code`.
+
 Step-level `if`/`unless` conditions (and `while`/`condition` steps) are null-safe: a condition that references a skipped or not-yet-run step's output (e.g. `$.steps.maybeSkipped.output.x`) evaluates to `false` rather than crashing the run.
 
 ### `one flow list`
@@ -643,9 +646,10 @@ Resume a paused or failed workflow run from where it left off.
 ```bash
 one flow resume abc123
 one flow resume abc123 --allow-bash    # required if the flow has bash steps
+one flow resume abc123 --allow-code    # required if the flow has code.module steps
 ```
 
-`--allow-bash` is gated the same way as on `flow execute` — resuming doesn't
+`--allow-bash` and `--allow-code` are gated the same way as on `flow execute` — resuming doesn't
 inherit the permission from the original run, so pass it again. `one flow list`
 shows which flows need it.
 
@@ -748,6 +752,8 @@ Precedence: env var > `.onerc` > `~/.one/config.json`. The access keys are the e
 
 The access settings are enforced on every call to a connected app, whatever the command: `actions execute`, flows, sync and its validation runs. Headers named `x-one-secret`, `x-one-connection-key` or `x-one-action-id` cannot be passed with `--headers`, method-override headers are judged against the permission level, and a path variable cannot be `.` or `..`.
 
+They also apply to commands that change One's own resources. Creating, updating or activating a relay needs the `write` level and deleting one needs `admin`; `connection delete` needs `admin`; knowledge-only refuses all of them. A relay's `passthrough` actions are checked like `actions execute` when they are set, because they run later on One's servers. `url` and `agent` relay actions are allowed only when the connection and action allowlists are both `*`. With a connection allowlist, relay endpoints, events and deliveries on other connections are hidden or refused.
+
 ```bash
 # .onerc
 ONE_SECRET=sk_live_xxx

package/dist/{chunk-EITBMRUB.js → chunk-2OIJGF77.js}

@@ -3,7 +3,7 @@ import {
   readConfig,
   setOpenAiApiKey,
   writeConfig
-} from "./chunk-EWHFGWB3.js";
+} from "./chunk-XUAUDMQE.js";
 
 // src/lib/memory/config.ts
 var DEFAULT_MEMORY_CONFIG = {

package/dist/{chunk-6IRGRC3G.js → chunk-4H5L3SBY.js}

@@ -5,11 +5,11 @@ import {
   getMemoryConfig,
   getMemoryConfigOrDefault,
   updateMemoryConfig
-} from "./chunk-EITBMRUB.js";
+} from "./chunk-2OIJGF77.js";
 import {
   getOpenAiApiKey,
   homeDir
-} from "./chunk-EWHFGWB3.js";
+} from "./chunk-XUAUDMQE.js";
 
 // src/lib/memory/schema.ts
 var SCHEMA_VERSION = "2.3.1";

package/dist/{chunk-J7JWBH45.js → chunk-B5YDLVY5.js}

@@ -5,11 +5,11 @@ import {
 } from "./chunk-Q6PWTATS.js";
 import {
   getMemoryConfigOrDefault
-} from "./chunk-EITBMRUB.js";
+} from "./chunk-2OIJGF77.js";
 import {
   getOpenAiApiKey,
   readConfig
-} from "./chunk-EWHFGWB3.js";
+} from "./chunk-XUAUDMQE.js";
 
 // src/commands/mem/util.ts
 function requireMemoryInit() {