@withone/cli 2.9.0 → 2.9.2

package/README.md

@@ -24,7 +24,7 @@
   <a href="https://withone.ai/knowledge"><img src="https://img.shields.io/endpoint?url=https%3A%2F%2Fapi.withone.ai%2Fopen%2Fcount%2Ftools" alt="tools"></a>
 </p>
 
-One gives your AI agent authenticated access to 750+ platforms - Gmail, Slack, Shopify, HubSpot, Stripe, Notion, and everything else - through a single interface. No API keys to juggle, no OAuth flows to build, no request formats to memorize. Connect a platform once, and your agent can search for actions, read the docs, and execute API calls in seconds.
+One gives your AI agent authenticated access to 1000+ platforms - Gmail, Slack, Shopify, HubSpot, Stripe, Notion, and everything else - through a single interface. No API keys to juggle, no OAuth flows to build, no request formats to memorize. Connect a platform once, and your agent can search for actions, read the docs, and execute API calls in seconds.
 
 ## Install
 
@@ -50,10 +50,14 @@ one logout             # Clear credentials (with scope picker and confirmation)
 
 The browser consent page names the key and tags it with where this CLI is installed (scope, project path, machine, OS user, CLI version, chosen harnesses, and the per-install device id unless telemetry is off) so you can find and revoke it from Settings → API keys. The terminal prints exactly what will be sent before the browser opens.
 
-Requires Node.js 18+. `one sync` additionally needs Node 20+, because its
-local SQLite engine (`better-sqlite3`, an optional dependency) ships prebuilt
-binaries only for Node 20 and above. On Node 18 every other command works
-normally; `one sync` reports that the engine isn't installed.
+Requires Node.js 22.23.4+, 24.22.1+ or 26.12.1+. Older Node versions trust the
+compromised eMudhra intermediate CA certificates (October 2026), so a network
+attacker could intercept the CLI's traffic and your API key. On them the CLI
+refuses to run and prints the command that updates Node for how you installed
+it. Node 18, 20, 23 and 25 are end-of-life and never got the fix.
+
+If you can't update Node yet, `ONE_ALLOW_UNPATCHED_NODE=1` runs the CLI anyway,
+with a security warning on every run. You remain exposed while it is set.
 
 ## Quick start
 
@@ -247,7 +251,7 @@ Shows the connection details and asks for confirmation before deleting. Use `--f
 
 ### `one platforms`
 
-Browse all 750+ available platforms.
+Browse all 1000+ available platforms.
 
 ```bash
 one platforms              # all platforms

package/bin/cli.js

@@ -1,5 +1,11 @@
 #!/usr/bin/env node
 
-import { program } from '../dist/index.js';
+import { requirePatchedNode } from '../dist/node-check.js';
+
+// eMudhra CA compromise: refuse to run before any connection opens on a Node
+// that still trusts the leaked intermediates (see src/node-check.ts).
+requirePatchedNode();
+
+const { program } = await import('../dist/index.js');
 
 program.parse();

package/dist/chunk-FYTWXGPJ.js

@@ -0,0 +1,79 @@
+// src/node-check.ts
+var FIXED_IN = {
+  22: [23, 4],
+  24: [22, 1],
+  26: [12, 1]
+};
+var FIRST_LINE_WITH_FIX = 27;
+var RECOMMENDED_LINE = 24;
+var REQUIRED_NODE = "22.23.4+, 24.22.1+ or 26.12.1+";
+var REQUIRED_NODE_RANGE = "^22.23.4 || ^24.22.1 || >=26.12.1";
+var ALLOW_UNPATCHED_ENV = "ONE_ALLOW_UNPATCHED_NODE";
+function parseVersion(version) {
+  const [major, minor, patch] = version.split(".").map((part) => Number.parseInt(part, 10));
+  return [major, minor, patch ?? 0];
+}
+function nodeHasTlsFix(version = process.versions.node) {
+  const [major, minor, patch] = parseVersion(version);
+  if (!Number.isFinite(major)) return false;
+  if (major >= FIRST_LINE_WITH_FIX) return true;
+  const fixed = FIXED_IN[major];
+  if (!fixed) return false;
+  const [fixedMinor, fixedPatch] = fixed;
+  return minor > fixedMinor || minor === fixedMinor && patch >= fixedPatch;
+}
+function upgradeCommand(version = process.versions.node, execPath = process.execPath) {
+  const [major] = parseVersion(version);
+  const line = FIXED_IN[major] ? major : RECOMMENDED_LINE;
+  const path = execPath.replace(/\\/g, "/");
+  if (/\/\.nvm\/versions\/node\//.test(path)) return `nvm install ${line} && nvm alias default ${line}`;
+  if (/\/AppData\/(Roaming|Local)\/nvm\//i.test(path)) return `nvm install ${line} && nvm use ${line}`;
+  if (/\/\.?volta\//i.test(path)) return `volta install node@${line}`;
+  if (/fnm/i.test(path)) return `fnm install ${line} && fnm default ${line}`;
+  const brew = path.match(/\/Cellar\/(node(?:@\d+)?)\//);
+  if (brew) {
+    const formula = brew[1] === "node" || FIXED_IN[major] ? brew[1] : `node@${line}`;
+    return formula === brew[1] ? `brew upgrade ${formula}` : `brew install ${formula}`;
+  }
+  return `download Node.js ${line} from https://nodejs.org`;
+}
+function unpatchedNodeMessage(version = process.versions.node) {
+  return `Node.js v${version} trusts the compromised eMudhra certificates, so a network attacker could intercept One's traffic and your API key. The One CLI requires Node.js ${REQUIRED_NODE} (Node 18, 20, 23 and 25 never got the fix).`;
+}
+function requirePatchedNode() {
+  if (nodeHasTlsFix()) return;
+  const message = unpatchedNodeMessage();
+  const upgrade = upgradeCommand();
+  const agent = process.argv.includes("--agent") || process.env.ONE_AGENT === "1";
+  if (process.env[ALLOW_UNPATCHED_ENV] === "1") {
+    if (!agent) process.stderr.write(`Warning: ${message} Running anyway because ${ALLOW_UNPATCHED_ENV}=1.
+`);
+    return;
+  }
+  if (agent) {
+    const error = {
+      error: `${message} Ask the user to update Node.js: ${upgrade}`,
+      code: "NODE_UPGRADE_REQUIRED",
+      currentNode: process.versions.node,
+      requiredNode: REQUIRED_NODE_RANGE,
+      upgrade
+    };
+    process.stdout.write(`${JSON.stringify(error)}
+`);
+  } else {
+    process.stderr.write(`Error: ${message}
+To update: ${upgrade}
+`);
+  }
+  process.exit(1);
+}
+
+export {
+  REQUIRED_NODE,
+  REQUIRED_NODE_RANGE,
+  ALLOW_UNPATCHED_ENV,
+  nodeHasTlsFix,
+  upgradeCommand,
+  unpatchedNodeMessage,
+  requirePatchedNode
+};

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { Command } from 'commander';
+export { nodeHasTlsFix } from './node-check.js';
 
 declare const program: Command;
 

package/dist/index.js

@@ -1,3 +1,6 @@
+import {
+  nodeHasTlsFix
+} from "./chunk-FYTWXGPJ.js";
 import {
   ApiError,
   FLOW_SCHEMA,
@@ -1127,7 +1130,7 @@ async function loginCommand() {
   console.log(pc16.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log(pc16.cyan("  \u2502"));
   console.log(pc16.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc16.cyan("  \u2502  lets you interact with 750+ third-party platforms (Gmail,"));
+  console.log(pc16.cyan("  \u2502  lets you interact with 1000+ third-party platforms (Gmail,"));
   console.log(pc16.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
   console.log(pc16.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
   console.log(pc16.cyan("  \u2502  third-party platform or external service, use the `one`"));
@@ -1730,7 +1733,7 @@ function printOnboardingPrompt() {
   console.log(pc3.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log(pc3.cyan("  \u2502"));
   console.log(pc3.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc3.cyan("  \u2502  lets you interact with 750+ third-party platforms (Gmail,"));
+  console.log(pc3.cyan("  \u2502  lets you interact with 1000+ third-party platforms (Gmail,"));
   console.log(pc3.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
   console.log(pc3.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
   console.log(pc3.cyan("  \u2502  third-party platform or external service, use the `one`"));
@@ -1904,7 +1907,7 @@ async function promptConnectIntegrations(apiKey, connParams) {
         label: i.label,
         hint: i.hint
       })),
-      { value: "more", label: "Browse all 750+ platforms" },
+      { value: "more", label: "Browse all 1000+ platforms" },
       { value: "skip", label: "Skip for now", hint: "you can always run one add later" }
     ];
     const message = first ? "Connect your first integration?" : "Connect another?";
@@ -10825,7 +10828,7 @@ Before using any feature, read its guide section first: \`one guide actions\`, \
 
 ## Features
 
-### 1. Actions \u2014 Execute API calls on 750+ platforms
+### 1. Actions \u2014 Execute API calls on 1000+ platforms
 Find the actions a task needs with their docs, in one call, then execute them. This is the core workflow.
 
 **Quick start:**
@@ -10917,6 +10920,7 @@ Request specific sections:
 - **Always use \`--agent\` flag** for structured JSON output
 - Platform names are **lowercase**; multi-word names use dashes (e.g., \`hubspot\`, \`google-calendar\`)
 - Always use the **exact action ID** from a find answer \u2014 don't guess
+- Requires Node.js 22.23.4+, 24.22.1+ or 26.12.1+. Older Node trusts the compromised eMudhra CA certificates, so every command exits 1 there with \`"code": "NODE_UPGRADE_REQUIRED"\` and an \`upgrade\` field holding the command for the user's setup. Don't retry: show the user that command and ask them to update Node.js
 - Always read **knowledge** before executing any action
 - Connection keys come from \`one connection list\` \u2014 don't hardcode them
 - \`connection list\` also reports an \`access\` field per connection (\`full\` / \`methods\` / \`actions\`, plus a \`level\`: full, read-write, read-only, custom, none) \u2014 what One enforces for this key, narrowed by \`one config\`. Read it before planning so you don't propose an action that will be refused. \`accessSource: "local"\` means One did not report it, so it is unverified
@@ -12092,7 +12096,7 @@ function buildStep1() {
     nextCommand: "one onboard --step 2",
     message: `# One CLI \u2014 Agent Onboarding
 
-You now have access to the One CLI. It connects you to 750+ platforms
+You now have access to the One CLI. It connects you to 1000+ platforms
 (Gmail, Slack, Stripe, Notion, etc.) \u2014 you'll learn the details shortly.
 
 IMPORTANT: Your only task right now is to send the message below to the
@@ -12102,7 +12106,7 @@ Do not offer demos yet. Just send this message and wait for their reply:
 ---
 
 I just got access to the One CLI \u2014 it connects me to your platforms like
-Gmail, Slack, Stripe, and 750+ others so I can work with them directly.
+Gmail, Slack, Stripe, and 1000+ others so I can work with them directly.
 I'll show you what I can do in a moment.
 
 First, one quick setup step: right now only this conversation knows about
@@ -12131,7 +12135,7 @@ If they declined, skip this section.
 ## One CLI \u2014 Platform Integrations
 
 The One CLI (\`one\`) is installed and configured on this machine. It is a
-command-line tool that gives AI agents the ability to interact with 750+
+command-line tool that gives AI agents the ability to interact with 1000+
 third-party platforms (Gmail, Slack, Shopify, HubSpot, Stripe, GitHub,
 Notion, Salesforce, etc.) through a single, unified interface.
 
@@ -12225,7 +12229,7 @@ function buildStep3(connections) {
 The user can connect any of these popular platforms:
 Gmail, Google Calendar, Slack, Notion, Shopify, Stripe, HubSpot, GitHub,
 Salesforce, QuickBooks, Asana, Jira, Linear, Intercom, Zendesk, Twilio,
-and 750+ more. Run \`one platforms\` for the full list.`);
+and 1000+ more. Run \`one platforms\` for the full list.`);
   sections.push("## Onboarding complete!\n\nYou're all set. Use `one --agent guide` any time you need the full reference.");
   return {
     step: 3,
@@ -12256,7 +12260,7 @@ platform before you can start using actions. Suggest they run:
   one add slack
   one add <any-platform>
 
-Run \`one platforms\` to see all 750+ available platforms.`;
+Run \`one platforms\` to see all 1000+ available platforms.`;
   }
   const header = `## Current State
 
@@ -12972,7 +12976,7 @@ silenceWarningsInAgentMode();
 var require2 = createRequire(import.meta.url);
 var { version } = require2("../package.json");
 var program = new Command();
-program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 750+ platforms through one interface.
+program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 1000+ platforms through one interface.
 
   Setup:
     one login                             Authenticate via browser; the consent page records where this CLI is installed
@@ -13048,7 +13052,7 @@ program.name("one").option("--agent", "Machine-readable JSON output (no colors,
         -d '{"to":"j@example.com","subject":"Hello","body":"Hi!","connectionKey":"live::gmail::default::abc123"}'
 
   Platform names are lowercase; multi-word names use dashes (e.g. hubspot, ship-station, google-calendar).
-  Run 'one platforms' to browse all 750+ available platforms.`).version(version);
+  Run 'one platforms' to browse all 1000+ available platforms.`).version(version);
 var updateCheckPromise;
 program.hook("preAction", (thisCommand, actionCommand) => {
   const opts = program.opts();
@@ -13441,5 +13445,6 @@ program.command("list").alias("ls").description("Shortcut for: connection list")
   await connectionListCommand(options);
 });
 export {
+  nodeHasTlsFix,
   program
 };

package/dist/node-check.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Refuses to run on a Node.js that still trusts the compromised eMudhra
+ * intermediate CAs (October 2026, RUSTSEC-2026-0381).
+ *
+ * Eight eMudhra/emSign intermediates were created with 8-bit private keys, so
+ * anyone can compute them and sign a certificate for any domain, including
+ * api.withone.ai. Node.js blocks them inside the TLS handshake from 22.23.4,
+ * 24.22.1 and 26.12.1 (nodejs/node#66871). On any older Node, a network
+ * attacker can intercept the CLI's traffic and the user's API key, and nothing
+ * in userland can block the intermediates the way Node's fix does.
+ *
+ * Built as its own entry so bin/cli.js can run it before loading the rest of
+ * the CLI, and before any connection opens.
+ */
+declare const REQUIRED_NODE = "22.23.4+, 24.22.1+ or 26.12.1+";
+declare const REQUIRED_NODE_RANGE = "^22.23.4 || ^24.22.1 || >=26.12.1";
+/** Set to 1 to run on an unpatched Node anyway, with a warning on every run. */
+declare const ALLOW_UNPATCHED_ENV = "ONE_ALLOW_UNPATCHED_NODE";
+/** True when this Node version rejects chains through the compromised eMudhra intermediates. */
+declare function nodeHasTlsFix(version?: string): boolean;
+/**
+ * The command that updates Node for however it was installed, judged from the
+ * path of the running binary. A line that got the fix stays on its line; any
+ * other moves to the recommended one.
+ */
+declare function upgradeCommand(version?: string, execPath?: string): string;
+declare function unpatchedNodeMessage(version?: string): string;
+/**
+ * Exits with an error on an unpatched Node; returns on a patched one. In agent
+ * mode the error is JSON on stdout with a code agents can act on. With
+ * ONE_ALLOW_UNPATCHED_NODE=1 it warns and returns instead (silently in agent
+ * mode, where stderr would corrupt the JSON for harnesses that merge streams).
+ */
+declare function requirePatchedNode(): void;
+
+export { ALLOW_UNPATCHED_ENV, REQUIRED_NODE, REQUIRED_NODE_RANGE, nodeHasTlsFix, requirePatchedNode, unpatchedNodeMessage, upgradeCommand };

package/dist/node-check.js

@@ -0,0 +1,18 @@
+import {
+  ALLOW_UNPATCHED_ENV,
+  REQUIRED_NODE,
+  REQUIRED_NODE_RANGE,
+  nodeHasTlsFix,
+  requirePatchedNode,
+  unpatchedNodeMessage,
+  upgradeCommand
+} from "./chunk-FYTWXGPJ.js";
+export {
+  ALLOW_UNPATCHED_ENV,
+  REQUIRED_NODE,
+  REQUIRED_NODE_RANGE,
+  nodeHasTlsFix,
+  requirePatchedNode,
+  unpatchedNodeMessage,
+  upgradeCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "2.9.0",
+  "version": "2.9.2",
   "description": "CLI for managing One",
   "type": "module",
   "files": [
@@ -52,6 +52,6 @@
     "url": "https://github.com/withoneai/cli"
   },
   "engines": {
-    "node": ">=18"
+    "node": "^22.23.4 || ^24.22.1 || >=26.12.1"
   }
 }

package/skills/one/SKILL.md

@@ -20,7 +20,7 @@ description: |
 
 # One CLI
 
-You have access to the One CLI which lets you interact with 750+ third-party platforms through their APIs. Always include the `--agent` flag right after `one` for structured JSON output.
+You have access to the One CLI which lets you interact with 1000+ third-party platforms through their APIs. Always include the `--agent` flag right after `one` for structured JSON output.
 
 If the user wants a separate API key / connections for a specific project (vs. their default), walk them through running `one init` from that project folder and picking the "project" scope — see `references/scoping.md`. For monorepo subprojects (where a parent already has `.git`/`package.json`), have them `mkdir .one` in the subproject first so the config is keyed to that dir, not the monorepo root.
 
@@ -171,6 +171,8 @@ All segments are validated before any execution. Failed actions don't block othe
 
 All errors return JSON: `{"error": "message"}`. Parse output as JSON and check for the `error` key.
 
+The CLI requires Node.js 22.23.4+, 24.22.1+ or 26.12.1+ (older Node trusts the compromised eMudhra CA certificates). On an older Node every command exits 1 with `"code": "NODE_UPGRADE_REQUIRED"` and an `upgrade` field holding the command for the user's setup. Don't retry: show the user that command and ask them to update Node.js.
+
 ## Important Rules
 
 - Always use `--agent` flag for structured JSON output