@withone/cli 2.12.0 → 2.14.0

package/dist/{chunk-EWHFGWB3.js → chunk-XUAUDMQE.js}

@@ -78,6 +78,42 @@ function intersectAllowlists(a, b) {
   if (b.includes("*")) return a;
   return a.filter((x) => b.includes(x));
 }
+function checkManagementAccess(settings, op, what) {
+  const permissions = settings.permissions ?? "admin";
+  if (settings.knowledgeAgent) {
+    throw new AccessDeniedError(`${what} is disabled (knowledge-only mode).`);
+  }
+  const method = op === "delete" ? "DELETE" : "POST";
+  if (!isMethodAllowed(method, permissions)) {
+    throw new AccessDeniedError(`${what} needs ${op === "delete" ? 'the "admin"' : 'the "write" or "admin"'} permission level (current: "${permissions}").`);
+  }
+}
+function allowlistsUnrestricted(settings) {
+  return (settings.actionIds ?? ["*"]).includes("*") && (settings.connectionKeys ?? ["*"]).includes("*");
+}
+async function checkRelayActions(settings, actions, methodOf) {
+  if (actions === void 0 || actions === null) return;
+  if (!Array.isArray(actions)) throw new AccessDeniedError("--actions must be a JSON array.");
+  for (const [i, raw] of actions.entries()) {
+    const action = raw ?? {};
+    if (action.type === "passthrough") {
+      const actionId = String(action.actionId ?? "");
+      const connectionKey = String(action.connectionKey ?? "");
+      if (!actionId || !connectionKey) {
+        throw new AccessDeniedError(`Relay action [${i}] needs an actionId and a connectionKey.`);
+      }
+      checkPassthroughAccess({ ...settings, permissions: "admin", knowledgeAgent: false }, { actionId, connectionKey, method: "GET" });
+      const headers = action.headers && typeof action.headers === "object" ? action.headers : void 0;
+      checkPassthroughAccess(settings, { actionId, connectionKey, method: await methodOf(actionId), headers });
+      continue;
+    }
+    if (!allowlistsUnrestricted(settings)) {
+      throw new AccessDeniedError(
+        `Relay action [${i}] of type "${String(action.type)}" forwards events outside the connection and action allowlists, so it is allowed only when both are "*".`
+      );
+    }
+  }
+}
 
 // src/lib/config.ts
 function configDir() {
@@ -535,8 +571,11 @@ export {
   PERMISSION_METHODS,
   isMethodAllowed,
   isActionAllowed,
+  isConnectionAllowed,
   IDENTITY_HEADERS,
   checkPassthroughAccess,
+  checkManagementAccess,
+  checkRelayActions,
   getProjectRoot,
   getProjectConfigPath,
   getGlobalConfigPath,

package/dist/{embedding-7Q22D23K.js → embedding-YIXO45HW.js}

@@ -2,8 +2,8 @@ import {
   defaultSearchableText,
   embed,
   embedBatch
-} from "./chunk-EITBMRUB.js";
-import "./chunk-EWHFGWB3.js";
+} from "./chunk-2OIJGF77.js";
+import "./chunk-XUAUDMQE.js";
 export {
   defaultSearchableText,
   embed,

package/dist/{flow-runner-6QTY3U2C.js → flow-runner-SRO6YL62.js}

@@ -12,10 +12,10 @@ import {
   stripStepsAlias,
   summarizeFlowInputs,
   walkSteps
-} from "./chunk-7ZBRP3BJ.js";
+} from "./chunk-IM3OA7CU.js";
 import "./chunk-44CV5IMX.js";
 import "./chunk-Q6PWTATS.js";
-import "./chunk-EWHFGWB3.js";
+import "./chunk-XUAUDMQE.js";
 export {
   FlowRunner,
   collectStepTypes,

package/dist/index.js

@@ -14,6 +14,7 @@ import {
   describeInstallContext,
   drainQueue,
   flowRequiresBash,
+  flowUsesCodeModules,
   flush,
   flushUsageRollups,
   formatAge,
@@ -39,10 +40,10 @@ import {
   validateActionInput,
   walkSteps,
   writeCache
-} from "./chunk-7ZBRP3BJ.js";
+} from "./chunk-IM3OA7CU.js";
 import {
   memSqlCommand
-} from "./chunk-DGQOAFXJ.js";
+} from "./chunk-TSMVFVQ3.js";
 import {
   collectIdentityKeys,
   countRecords,
@@ -73,7 +74,7 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-WZTPSXHP.js";
+} from "./chunk-LEJKEGB6.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -87,7 +88,7 @@ import {
   requireMemoryInit,
   semanticSearchUpgradeHint,
   semanticSearchUpgradeLine
-} from "./chunk-J7JWBH45.js";
+} from "./chunk-B5YDLVY5.js";
 import {
   cancel,
   createSpinner,
@@ -109,7 +110,7 @@ import {
   listBackendPlugins,
   loadBackendFromConfig,
   updateRecord
-} from "./chunk-6IRGRC3G.js";
+} from "./chunk-4H5L3SBY.js";
 import {
   DEFAULT_MEMORY_CONFIG,
   defaultSearchableText,
@@ -119,9 +120,11 @@ import {
   memoryConfigExists,
   setOpenAiApiKey,
   updateMemoryConfig
-} from "./chunk-EITBMRUB.js";
+} from "./chunk-2OIJGF77.js";
 import {
   PERMISSION_METHODS,
+  checkManagementAccess,
+  checkRelayActions,
   configExists,
   ensureWhoAmI,
   getAccessControl,
@@ -137,6 +140,7 @@ import {
   globalConfigExists,
   homeDir,
   isActionAllowed,
+  isConnectionAllowed,
   isMethodAllowed,
   projectConfigExists,
   readConfig,
@@ -148,7 +152,7 @@ import {
   updateApiBase,
   updateWhoAmI,
   writeConfig
-} from "./chunk-EWHFGWB3.js";
+} from "./chunk-XUAUDMQE.js";
 
 // src/cli.ts
 import { createRequire } from "module";
@@ -2448,6 +2452,11 @@ async function connectionDeleteCommand(connectionKey, options) {
   if (!apiKey) {
     error("Not configured. Run `one init` first.");
   }
+  try {
+    checkManagementAccess(getAccessControlFromAllSources(), "delete", "Deleting a connection");
+  } catch (error2) {
+    error(error2 instanceof Error ? error2.message : String(error2));
+  }
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Finding connection...");
@@ -4949,6 +4958,14 @@ ${preflightErrors.map((e) => `  ${e.path}: ${e.message}`).join("\n")}`);
     }
     error(msg);
   }
+  if (!options.allowCode && flowUsesCodeModules(flow2)) {
+    const msg = `Workflow "${flow2.key}" contains code.module steps, which run with full Node access. Re-run with --allow-code to permit them.`;
+    if (isAgentMode()) {
+      json({ error: msg, requiresCode: true, flowKey: flow2.key });
+      process.exit(1);
+    }
+    error(msg);
+  }
   if (options.stopAfter) {
     const ids = /* @__PURE__ */ new Set();
     walkSteps(flow2.steps, (s) => {
@@ -5011,6 +5028,7 @@ ${pc8.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
       mock: options.mock,
       verbose: options.verbose,
       allowBash: options.allowBash,
+      allowCode: options.allowCode,
       skipValidation: options.skipValidation,
       stopAfter: options.stopAfter,
       rootDir,
@@ -5121,7 +5139,7 @@ async function flowListCommand() {
       layout: f.layout,
       inputCount: String(f.inputCount),
       stepCount: String(f.stepCount),
-      flags: f.requiresBash ? "--allow-bash" : ""
+      flags: [f.requiresBash ? "--allow-bash" : "", f.usesCodeModules ? "--allow-code" : ""].filter(Boolean).join(" ")
     }))
   );
   console.log();
@@ -5197,6 +5215,14 @@ async function flowResumeCommand(runId, options = {}) {
     }
     error(msg);
   }
+  if (!options.allowCode && flowUsesCodeModules(flow2)) {
+    const msg = `Workflow "${flow2.key}" contains code.module steps, which run with full Node access. Re-run with --allow-code to permit them.`;
+    if (isAgentMode()) {
+      json({ error: msg, requiresCode: true, flowKey: flow2.key, runId });
+      process.exit(1);
+    }
+    error(msg);
+  }
   const runner = FlowRunner.fromRunState(state);
   const onEvent = (event) => {
     if (isAgentMode()) {
@@ -5209,7 +5235,8 @@ async function flowResumeCommand(runId, options = {}) {
     const context = await runner.resume(flow2, api, permissions, actionIds, {
       onEvent,
       rootDir,
-      allowBash: options.allowBash
+      allowBash: options.allowBash,
+      allowCode: options.allowCode
     });
     spinner.stop("Workflow completed");
     if (isAgentMode()) {
@@ -5525,9 +5552,45 @@ function getConfig3() {
   if (!apiKey) {
     error("Not configured. Run `one init` first.");
   }
-  const ac = getAccessControlFromAllSources();
-  const connectionKeys = ac.connectionKeys || ["*"];
-  return { apiKey, connectionKeys };
+  const settings = getAccessControlFromAllSources();
+  const connectionKeys = settings.connectionKeys || ["*"];
+  return { apiKey, connectionKeys, settings };
+}
+async function connectionIdFilter(api, settings) {
+  const keys = settings.connectionKeys ?? ["*"];
+  if (keys.includes("*")) return () => true;
+  const connections = await api.listConnections();
+  const ids = new Set(connections.filter((c) => isConnectionAllowed(c.key, keys)).map((c) => c.id));
+  return (id) => ids.has(id);
+}
+function restricted(settings) {
+  return !(settings.connectionKeys ?? ["*"]).includes("*");
+}
+async function allowedEndpoint(api, settings, id) {
+  const allowed = await connectionIdFilter(api, settings);
+  const endpoint = await api.getRelayEndpoint(id);
+  if (!allowed(endpoint.connectionId)) {
+    throw new Error(`Relay endpoint "${id}" is on a connection that is not allowed.`);
+  }
+  return endpoint;
+}
+async function allowedEvent(api, settings, id) {
+  const allowed = await connectionIdFilter(api, settings);
+  const event = await api.getRelayEvent(id);
+  if (!allowed(event.connectionId)) {
+    throw new Error(`Relay event "${id}" is on a connection that is not allowed.`);
+  }
+  return event;
+}
+function actionMethod(api) {
+  return async (actionId) => (await resolveActionDetails(api, actionId)).details.method;
+}
+function guard(check) {
+  try {
+    check();
+  } catch (error2) {
+    error(error2 instanceof Error ? error2.message : String(error2));
+  }
 }
 function parseJsonArg3(value, argName) {
   try {
@@ -5537,7 +5600,8 @@ function parseJsonArg3(value, argName) {
   }
 }
 async function relayCreateCommand(options) {
-  const { apiKey, connectionKeys } = getConfig3();
+  const { apiKey, connectionKeys, settings } = getConfig3();
+  guard(() => checkManagementAccess(settings, "write", "Creating a relay endpoint"));
   if (!connectionKeys.includes("*") && !connectionKeys.includes(options.connectionKey)) {
     error(`Connection key "${options.connectionKey}" is not allowed.`);
   }
@@ -5577,7 +5641,7 @@ async function relayCreateCommand(options) {
   }
 }
 async function relayListCommand(options) {
-  const { apiKey } = getConfig3();
+  const { apiKey, settings } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Loading relay endpoints...");
@@ -5586,10 +5650,13 @@ async function relayListCommand(options) {
     if (options.limit) query.limit = options.limit;
     if (options.page) query.page = options.page;
     const result = await api.listRelayEndpoints(query);
-    const endpoints = result.rows || [];
+    const allowed = await connectionIdFilter(api, settings);
+    const endpoints = (result.rows || []).filter((e) => allowed(e.connectionId));
     if (isAgentMode()) {
       json({
-        total: result.total,
+        // With a connection allowlist the server's total also counts rows
+        // the allowlist hides, so report only what is shown.
+        total: restricted(settings) ? endpoints.length : result.total,
         showing: endpoints.length,
         endpoints: endpoints.map((e) => ({
           id: e.id,
@@ -5630,12 +5697,12 @@ async function relayListCommand(options) {
   }
 }
 async function relayGetCommand(id) {
-  const { apiKey } = getConfig3();
+  const { apiKey, settings } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Loading relay endpoint...");
   try {
-    const result = await api.getRelayEndpoint(id);
+    const result = await allowedEndpoint(api, settings, id);
     if (isAgentMode()) {
       json(result);
       return;
@@ -5661,7 +5728,8 @@ async function relayGetCommand(id) {
   }
 }
 async function relayUpdateCommand(id, options) {
-  const { apiKey } = getConfig3();
+  const { apiKey, settings } = getConfig3();
+  guard(() => checkManagementAccess(settings, "write", "Updating a relay endpoint"));
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Updating relay endpoint...");
@@ -5672,6 +5740,9 @@ async function relayUpdateCommand(id, options) {
     if (options.eventFilters) body.eventFilters = parseJsonArg3(options.eventFilters, "--event-filters");
     if (options.tags) body.tags = parseJsonArg3(options.tags, "--tags");
     if (options.actions) body.actions = parseJsonArg3(options.actions, "--actions");
+    const existing = await allowedEndpoint(api, settings, id);
+    const effective = body.actions ?? (options.active === true ? existing.actions : void 0);
+    await checkRelayActions(settings, effective, actionMethod(api));
     const result = await api.updateRelayEndpoint(id, body);
     if (isAgentMode()) {
       json(result);
@@ -5688,11 +5759,13 @@ async function relayUpdateCommand(id, options) {
   }
 }
 async function relayDeleteCommand(id) {
-  const { apiKey } = getConfig3();
+  const { apiKey, settings } = getConfig3();
+  guard(() => checkManagementAccess(settings, "delete", "Deleting a relay endpoint"));
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Deleting relay endpoint...");
   try {
+    await allowedEndpoint(api, settings, id);
     const result = await api.deleteRelayEndpoint(id);
     if (isAgentMode()) {
       json({ deleted: true, id: result.id });
@@ -5707,12 +5780,15 @@ async function relayDeleteCommand(id) {
   }
 }
 async function relayActivateCommand(id, options) {
-  const { apiKey } = getConfig3();
+  const { apiKey, settings } = getConfig3();
+  guard(() => checkManagementAccess(settings, "write", "Activating a relay endpoint"));
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Activating relay endpoint...");
   try {
     const actions2 = parseJsonArg3(options.actions, "--actions");
+    await allowedEndpoint(api, settings, id);
+    await checkRelayActions(settings, actions2, actionMethod(api));
     const body = { actions: actions2 };
     if (options.webhookSecret) body.webhookSecret = options.webhookSecret;
     const result = await api.activateRelayEndpoint(id, body);
@@ -5731,7 +5807,7 @@ async function relayActivateCommand(id, options) {
   }
 }
 async function relayEventsCommand(options) {
-  const { apiKey } = getConfig3();
+  const { apiKey, settings } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Loading relay events...");
@@ -5744,10 +5820,13 @@ async function relayEventsCommand(options) {
     if (options.after) query.after = options.after;
     if (options.before) query.before = options.before;
     const result = await api.listRelayEvents(query);
-    const events = result.rows || [];
+    const allowed = await connectionIdFilter(api, settings);
+    const events = (result.rows || []).filter((e) => allowed(e.connectionId));
     if (isAgentMode()) {
       json({
-        total: result.total,
+        // With a connection allowlist the server's total also counts rows
+        // the allowlist hides, so report only what is shown.
+        total: restricted(settings) ? events.length : result.total,
         showing: events.length,
         events: events.map((e) => ({
           id: e.id,
@@ -5783,12 +5862,12 @@ async function relayEventsCommand(options) {
   }
 }
 async function relayEventGetCommand(id) {
-  const { apiKey } = getConfig3();
+  const { apiKey, settings } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Loading relay event...");
   try {
-    const result = await api.getRelayEvent(id);
+    const result = await allowedEvent(api, settings, id);
     if (isAgentMode()) {
       json(result);
       return;
@@ -5811,11 +5890,13 @@ async function relayDeliveriesCommand(options) {
   if (!options.endpointId && !options.eventId) {
     error("Provide either --endpoint-id or --event-id");
   }
-  const { apiKey } = getConfig3();
+  const { apiKey, settings } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
   spinner.start("Loading deliveries...");
   try {
+    if (options.endpointId) await allowedEndpoint(api, settings, options.endpointId);
+    else await allowedEvent(api, settings, options.eventId);
     const deliveries = options.endpointId ? await api.listRelayEndpointDeliveries(options.endpointId) : await api.listRelayEventDeliveries(options.eventId);
     const items = Array.isArray(deliveries) ? deliveries : deliveries.rows || [];
     if (isAgentMode()) {
@@ -7427,7 +7508,7 @@ async function syncModel(api, profile, options) {
         updateModelState(platform, model, { status: "failed", pagesProcessed, lastCursor }),
         (async () => {
           try {
-            const { getBackend: getBackend2 } = await import("./runtime-WB4J6RQK.js");
+            const { getBackend: getBackend2 } = await import("./runtime-2OVXKNJS.js");
             const backend = await getBackend2();
             await Promise.race([
               backend.close(),
@@ -7793,7 +7874,7 @@ async function syncModel(api, profile, options) {
         db.exec(`DROP TABLE IF EXISTS _seen_ids`);
       }
       if (options.toMemory !== false) {
-        const backend = await (await import("./runtime-WB4J6RQK.js")).getBackend();
+        const backend = await (await import("./runtime-2OVXKNJS.js")).getBackend();
         const type = `${platform}/${model}`;
         const existing = await backend.listKeysByType(type);
         const sourcePrefix = `${type}:`;
@@ -7894,7 +7975,7 @@ async function syncModel(api, profile, options) {
     let statusCounts;
     if (options.toMemory !== false) {
       try {
-        const backend = await (await import("./runtime-WB4J6RQK.js")).getBackend();
+        const backend = await (await import("./runtime-2OVXKNJS.js")).getBackend();
         const typeName = `${platform}/${model}`;
         const [active, archived] = await Promise.all([
           backend.count(typeName, { status: "active" }),
@@ -9616,7 +9697,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-BNSA2GZM.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-KRQUWOPT.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -9694,7 +9775,7 @@ async function syncDeleteCommand(platformModel, options) {
 async function maybeAutoMigrateLegacy(platform, models) {
   const dbSize = getDatabaseSize(platform);
   if (!dbSize || dbSize === "0 B") return;
-  const { getBackend: getBackend2 } = await import("./runtime-WB4J6RQK.js");
+  const { getBackend: getBackend2 } = await import("./runtime-2OVXKNJS.js");
   const backend = await getBackend2();
   let memoryHasData = false;
   for (const model of models) {
@@ -9710,7 +9791,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-KKNH3745.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-RJ7F2LPT.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -9719,7 +9800,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p6.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-KKNH3745.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-RJ7F2LPT.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -9780,7 +9861,7 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
   const state = await readSyncState();
-  const { getBackend: getBackend2 } = await import("./runtime-WB4J6RQK.js");
+  const { getBackend: getBackend2 } = await import("./runtime-2OVXKNJS.js");
   const backend = await getBackend2();
   const syncs = await Promise.all(profiles.map(async (p9) => {
     const modelState = state[p9.platform]?.[p9.model];
@@ -10056,7 +10137,7 @@ function registerSyncSubcommands(sync) {
     await syncSqlCommand(platformModel, sql);
   });
   sync.command("schema <platform/model>").description("Inspect the JSON structure of synced records (field paths, types, examples) \u2014 useful before writing `sync sql` queries").action(async (platformModel) => {
-    const { syncSchemaCommand } = await import("./schema-SDZZ7XZT.js");
+    const { syncSchemaCommand } = await import("./schema-FIIT33OD.js");
     await syncSchemaCommand(platformModel);
   });
   sync.command("delete <platform/model>").description('Delete records from local sync data (e.g. one sync delete notion/pages --id "abc-123")').option("--id <value>", "Delete record by ID").option("--where <conditions>", 'Delete records matching conditions (e.g. "status=archived")').option("--where-sql <predicate>", `Delete using a raw SQL WHERE clause (e.g. "json_extract(data, '$.type') = 'promotion'")`).option("--yes", "Skip confirmation prompt").action(async (platformModel, options) => {
@@ -10833,7 +10914,7 @@ async function memDoctorCommand() {
   }
   if (cfg.embedding.provider === "openai") {
     try {
-      const { embed: embed2 } = await import("./embedding-7Q22D23K.js");
+      const { embed: embed2 } = await import("./embedding-YIXO45HW.js");
       const result = await embed2("connectivity check");
       checks.push({
         name: "OpenAI embedding provider reachable",
@@ -11374,15 +11455,16 @@ one --agent flow list                                 # List all workflows
 
 **Key concepts:**
 - Workflows live at \`.one/flows/<key>/flow.json\` (folder layout \u2014 REQUIRED for new flows). Flows can be organized into subdirectory groups: \`.one/flows/<group>/<key>/flow.json\`. Reference them as \`group/key\` or just the bare key. The legacy \`.one/flows/<key>.flow.json\` single-file layout is DEPRECATED but still loads for backward compatibility
-- Code steps can reference an external \`.mjs\` module under the flow's \`lib/\` folder (stdin JSON in, stdout JSON out) \u2014 keeps JS out of JSON strings and makes flows shareable
+- Code steps can reference an external \`.mjs\` module under the flow's \`lib/\` folder (stdin JSON in, stdout JSON out). Modules have full Node access, so flows that use them need \`--allow-code\`
+- Inline JavaScript (transforms, conditions, \`if\`/\`unless\`, \`code.source\`) runs in a sandbox: no files, programs, network, timers or environment of its own, and no flag needed
 - 12 step types: action, transform, code, condition, loop, parallel, file-read, file-write, while, flow, paginate, bash
 - Data wiring via selectors: \`$.input.param\`, \`$.steps.stepId.response\`, \`$.loop.item\`
 - AI analysis via bash steps: \`claude --print --output-format json\` with \`parseEnvelope: true\` (unwraps the CLI envelope + fences + preamble into clean parsed JSON; use instead of \`parseJson\` for claude steps)
-- Use \`--allow-bash\` to enable bash steps, \`--mock\` for dry-run with realistic mock responses (uses example data from action schemas)
+- Use \`--allow-bash\` to enable bash steps, \`--allow-code\` to enable \`code.module\` steps, \`--mock\` for dry-run with realistic mock responses (uses example data from action schemas)
 - Use \`--skip-validation\` to bypass input validation on action steps
 - Use \`--output-file <path>\` to stream the full result to a file instead of stdout \u2014 for large results that would otherwise be truncated or hit the JSON string-size limit; stdout (and \`--agent\` output) then carries an \`outputFile\` pointer instead of inline \`steps\`
 - Step-level \`if\`/\`unless\` (and \`while\`/\`condition\` steps) are null-safe: a condition referencing a skipped or not-yet-run step's output (e.g. \`$.steps.maybeSkipped.output.x\`) evaluates to \`false\` instead of crashing the flow
-- Debugging: \`--dry-run\` resolves each step's interpolations and shows what they evaluate to without executing (\`$.steps.*\` refs are reported as deferred); \`--stop-after <stepId>\` runs up to a step then stops; \`--dry-run --stop-after <stepId>\` runs earlier steps for real then dry-resolves the target against their output; \`flow inspect <runId>\` shows a past run's per-step outputs (post-mortem, no re-run; \`--full\` for untruncated)
+- Debugging: \`--dry-run\` resolves each step's interpolations and shows what they evaluate to without executing actions, code, bash or file steps (transform and condition expressions are evaluated, in the sandbox; \`$.steps.*\` refs are reported as deferred); \`--stop-after <stepId>\` runs up to a step then stops; \`--dry-run --stop-after <stepId>\` runs earlier steps for real then dry-resolves the target against their output; \`flow inspect <runId>\` shows a past run's per-step outputs (post-mortem, no re-run; \`--full\` for untruncated)
 
 ### 3. Relay \u2014 Webhook event forwarding between platforms
 Receive webhooks from platforms (Stripe, GitHub, Airtable, Attio, Google Calendar) and forward event data to any connected platform using passthrough actions with Handlebars templates. No middleware, no code.
@@ -13822,7 +13904,7 @@ var flow = program.command("flow").alias("f").description("Create, execute, and
 flow.command("create [key]").description("Create a new workflow from JSON definition").option("--definition <json>", "Workflow definition as JSON string").option("-o, --output <path>", "Custom output path (default .one/flows/<key>/flow.json)").action(async (key, options) => {
   await flowCreateCommand(key, options);
 });
-flow.command("execute <keyOrPath>").alias("x").description("Execute a workflow by key or file path").option("-i, --input <name=value>", "Input parameter (repeatable)", collect, []).option("--dry-run", "Resolve each step's interpolations and show what they evaluate to, without executing any step ($.steps.* refs resolve at runtime)").option("--mock", "With --dry-run: execute transforms/code with realistic mock API responses").option("--stop-after <stepId>", "Execute steps up to and including <stepId>, then stop (later steps are not run). With --dry-run, runs earlier steps for real and dry-resolves <stepId> against their output without executing it. See: one flow inspect").option("--skip-validation", "Skip input validation against action schemas").option("--allow-bash", "Allow bash step execution (disabled by default for security)").option("-v, --verbose", "Show full request/response for each step").option("--output-file <path>", "Write the full result to a file (streamed) instead of stdout \u2014 avoids truncation/string-limit errors for large results; stdout/agent output then carries an outputFile pointer").action(async (keyOrPath, options) => {
+flow.command("execute <keyOrPath>").alias("x").description("Execute a workflow by key or file path").option("-i, --input <name=value>", "Input parameter (repeatable)", collect, []).option("--dry-run", "Resolve each step's interpolations and show what they evaluate to, without running actions, code, bash or file steps. Transform and condition expressions are evaluated in the sandbox ($.steps.* refs resolve at runtime)").option("--mock", "With --dry-run: execute transforms/code with realistic mock API responses").option("--stop-after <stepId>", "Execute steps up to and including <stepId>, then stop (later steps are not run). With --dry-run, runs earlier steps for real and dry-resolves <stepId> against their output without executing it. See: one flow inspect").option("--skip-validation", "Skip input validation against action schemas").option("--allow-bash", "Allow bash step execution (disabled by default for security)").option("--allow-code", "Allow code.module steps, which run a .mjs file with full Node access (disabled by default for security). Inline transforms, conditions and code.source run sandboxed and need no flag").option("-v, --verbose", "Show full request/response for each step").option("--output-file <path>", "Write the full result to a file (streamed) instead of stdout \u2014 avoids truncation/string-limit errors for large results; stdout/agent output then carries an outputFile pointer").action(async (keyOrPath, options) => {
   await flowExecuteCommand(keyOrPath, options);
 });
 flow.command("list").alias("ls").description("List all workflows in .one/flows/").action(async () => {
@@ -13831,7 +13913,7 @@ flow.command("list").alias("ls").description("List all workflows in .one/flows/"
 flow.command("validate <keyOrPath>").description("Validate a workflow JSON file").action(async (keyOrPath) => {
   await flowValidateCommand(keyOrPath);
 });
-flow.command("resume <runId>").description("Resume a paused or failed workflow run").option("--allow-bash", "Allow bash step execution (disabled by default for security) \u2014 required to resume any flow containing bash steps").action(async (runId, options) => {
+flow.command("resume <runId>").description("Resume a paused or failed workflow run").option("--allow-bash", "Allow bash step execution (disabled by default for security) \u2014 required to resume any flow containing bash steps").option("--allow-code", "Allow code.module steps (full Node access) \u2014 required to resume any flow containing them").action(async (runId, options) => {
   await flowResumeCommand(runId, options);
 });
 flow.command("runs [flowKey]").description("List workflow runs (optionally filtered by flow key)").action(async (flowKey) => {

package/dist/{migrate-KKNH3745.js → migrate-RJ7F2LPT.js}

@@ -3,13 +3,13 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-WZTPSXHP.js";
+} from "./chunk-LEJKEGB6.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-J7JWBH45.js";
+import "./chunk-B5YDLVY5.js";
 import "./chunk-Q6PWTATS.js";
-import "./chunk-6IRGRC3G.js";
-import "./chunk-EITBMRUB.js";
-import "./chunk-EWHFGWB3.js";
+import "./chunk-4H5L3SBY.js";
+import "./chunk-2OIJGF77.js";
+import "./chunk-XUAUDMQE.js";
 export {
   buildIdentityMap,
   dotPathToJsonbExpr,

package/dist/{runtime-WB4J6RQK.js → runtime-2OVXKNJS.js}

@@ -5,9 +5,9 @@ import {
   resetBackendSingleton,
   updateRecord,
   upsertRecord
-} from "./chunk-6IRGRC3G.js";
-import "./chunk-EITBMRUB.js";
-import "./chunk-EWHFGWB3.js";
+} from "./chunk-4H5L3SBY.js";
+import "./chunk-2OIJGF77.js";
+import "./chunk-XUAUDMQE.js";
 export {
   addRecord,
   closeBackendIfCached,

package/dist/{schema-SDZZ7XZT.js → schema-FIIT33OD.js}

@@ -1,16 +1,16 @@
 import {
   okJson,
   requireMemoryInit
-} from "./chunk-J7JWBH45.js";
+} from "./chunk-B5YDLVY5.js";
 import {
   isAgentMode,
   note
 } from "./chunk-Q6PWTATS.js";
 import {
   getBackend
-} from "./chunk-6IRGRC3G.js";
-import "./chunk-EITBMRUB.js";
-import "./chunk-EWHFGWB3.js";
+} from "./chunk-4H5L3SBY.js";
+import "./chunk-2OIJGF77.js";
+import "./chunk-XUAUDMQE.js";
 
 // src/lib/memory/sync/schema.ts
 import pc from "picocolors";

package/dist/sql-KRQUWOPT.js

@@ -0,0 +1,13 @@
+import {
+  memSqlCommand,
+  syncSqlCommand
+} from "./chunk-TSMVFVQ3.js";
+import "./chunk-B5YDLVY5.js";
+import "./chunk-Q6PWTATS.js";
+import "./chunk-4H5L3SBY.js";
+import "./chunk-2OIJGF77.js";
+import "./chunk-XUAUDMQE.js";
+export {
+  memSqlCommand,
+  syncSqlCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "2.12.0",
+  "version": "2.14.0",
   "description": "CLI for managing One",
   "type": "module",
   "files": [