@withone/cli 1.17.2 → 1.19.0

package/README.md

@@ -225,6 +225,30 @@ one actions execute stripe <actionId> <connectionKey> \
 | `--form-url-encoded` | Send as application/x-www-form-urlencoded |
 | `--dry-run` | Show the request without executing it |
 
+### `one cache`
+
+Manage the local cache for knowledge and search responses. The CLI automatically caches `actions knowledge` and `actions search` results so repeated calls serve instantly from disk.
+
+```bash
+one cache list                    # List all cached entries with age and status
+one cache list --expired          # Show only expired entries
+one cache clear                   # Clear all cached data
+one cache clear <actionId>        # Clear a specific entry
+one cache update-all              # Re-fetch fresh data for all cached entries
+```
+
+Knowledge and search commands also support cache flags:
+
+```bash
+one actions knowledge gmail <actionId> --no-cache       # Skip cache, fetch fresh
+one actions knowledge gmail <actionId> --cache-status   # Check cache status
+one actions search gmail "send email" --no-cache        # Skip cache for search
+```
+
+Default TTL is 1 hour. Configure via `ONE_CACHE_TTL` environment variable or `cacheTtl` in `~/.one/config.json`.
+
+Note: `actions execute` is never cached — it always hits the API fresh.
+
 ### `one guide [topic]`
 
 Get the full CLI usage guide, designed for AI agents that only have the binary (no MCP, no IDE skills).
@@ -239,7 +263,7 @@ one --agent guide         # full guide as structured JSON
 one --agent guide flows   # single topic as JSON
 ```
 
-Topics: `overview`, `actions`, `flows`, `all` (default).
+Topics: `overview`, `actions`, `flows`, `relay`, `cache`, `all` (default).
 
 In agent mode (`--agent`), the JSON response includes the guide content and an `availableTopics` array so agents can discover what sections exist.
 

package/dist/{chunk-QW4MBV4F.js → chunk-SIZK6EAM.js}

@@ -10,7 +10,6 @@ import { exec } from "child_process";
 import { promisify } from "util";
 
 // src/lib/api.ts
-var API_BASE = "https://api.withone.ai/v1";
 var ApiError = class extends Error {
   constructor(status, message) {
     super(message);
@@ -19,14 +18,16 @@ var ApiError = class extends Error {
   }
 };
 var OneApi = class {
-  constructor(apiKey) {
+  constructor(apiKey, apiBase) {
     this.apiKey = apiKey;
+    this.apiBase = apiBase ?? "https://api.withone.ai/v1";
   }
+  apiBase;
   async request(path3) {
     return this.requestFull({ path: path3 });
   }
   async requestFull(opts) {
-    let url = `${API_BASE}${opts.path}`;
+    let url = `${this.apiBase}${opts.path}`;
     if (opts.queryParams && Object.keys(opts.queryParams).length > 0) {
       const params = new URLSearchParams(opts.queryParams);
       url += `?${params.toString()}`;
@@ -128,6 +129,81 @@ var OneApi = class {
       method: action.method
     };
   }
+  async requestWithMeta(opts) {
+    let url = `${this.apiBase}${opts.path}`;
+    if (opts.queryParams && Object.keys(opts.queryParams).length > 0) {
+      const params = new URLSearchParams(opts.queryParams);
+      url += `?${params.toString()}`;
+    }
+    const headers = {
+      "x-one-secret": this.apiKey,
+      "Content-Type": "application/json",
+      ...opts.headers
+    };
+    if (opts.ifNoneMatch) {
+      headers["If-None-Match"] = opts.ifNoneMatch;
+    }
+    const fetchOpts = {
+      method: opts.method || "GET",
+      headers
+    };
+    if (opts.body !== void 0) {
+      fetchOpts.body = JSON.stringify(opts.body);
+    }
+    const response = await fetch(url, fetchOpts);
+    if (response.status === 304) {
+      return { data: null, etag: opts.ifNoneMatch ?? null, status: 304 };
+    }
+    if (!response.ok) {
+      const text2 = await response.text();
+      throw new ApiError(response.status, text2 || `HTTP ${response.status}`);
+    }
+    const etag = response.headers.get("etag") ?? null;
+    const text = await response.text();
+    const data = text ? JSON.parse(text) : {};
+    return { data, etag, status: response.status };
+  }
+  async getActionKnowledgeWithMeta(actionId, ifNoneMatch) {
+    const result = await this.requestWithMeta({
+      path: "/knowledge",
+      queryParams: { _id: actionId },
+      ifNoneMatch
+    });
+    if (result.status === 304) {
+      return { data: null, etag: result.etag, status: 304 };
+    }
+    const actions = result.data?.rows || [];
+    if (actions.length === 0) {
+      throw new ApiError(404, `Action with ID ${actionId} not found`);
+    }
+    const action = actions[0];
+    const knowledge = {
+      knowledge: action.knowledge || "No knowledge was found",
+      method: action.method || "No method was found"
+    };
+    return { data: knowledge, etag: result.etag, status: result.status };
+  }
+  async searchActionsWithMeta(platform, query, agentType, ifNoneMatch) {
+    const isKnowledgeAgent = !agentType || agentType === "knowledge";
+    const queryParams = {
+      query,
+      limit: "5"
+    };
+    if (isKnowledgeAgent) {
+      queryParams.knowledgeAgent = "true";
+    } else {
+      queryParams.executeAgent = "true";
+    }
+    const result = await this.requestWithMeta({
+      path: `/available-actions/search/${platform}`,
+      queryParams,
+      ifNoneMatch
+    });
+    if (result.status === 304) {
+      return { data: null, etag: result.etag, status: 304 };
+    }
+    return { data: result.data || [], etag: result.etag, status: result.status };
+  }
   async executePassthroughRequest(args, preloadedAction) {
     const action = preloadedAction ?? await this.getActionDetails(args.actionId);
     const method = action.method;
@@ -141,7 +217,7 @@ var OneApi = class {
     };
     const finalActionPath = args.pathVariables ? replacePathVariables(action.path, args.pathVariables) : action.path;
     const normalizedPath = finalActionPath.startsWith("/") ? finalActionPath : `/${finalActionPath}`;
-    const url = `${API_BASE.replace("/v1", "")}/v1/passthrough${normalizedPath}`;
+    const url = `${this.apiBase.replace("/v1", "")}/v1/passthrough${normalizedPath}`;
     const isCustomAction = action.tags?.includes("custom");
     let requestData = args.data;
     if (isCustomAction && method?.toLowerCase() !== "get") {
@@ -703,7 +779,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlow: loadFlow2 } = await import("./flow-runner-AJGIUT6E.js");
+  const { loadFlow: loadFlow2 } = await import("./flow-runner-SHV6JPE6.js");
   const subFlow = loadFlow2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,

package/dist/{flow-runner-AJGIUT6E.js → flow-runner-SHV6JPE6.js}

@@ -4,7 +4,7 @@ import {
   loadFlow,
   resolveFlowPath,
   saveFlow
-} from "./chunk-QW4MBV4F.js";
+} from "./chunk-SIZK6EAM.js";
 export {
   FlowRunner,
   listFlows,

package/dist/index.js

@@ -11,7 +11,7 @@ import {
   loadFlow,
   resolveFlowPath,
   saveFlow
-} from "./chunk-QW4MBV4F.js";
+} from "./chunk-SIZK6EAM.js";
 
 // src/index.ts
 import { createRequire as createRequire2 } from "module";
@@ -101,6 +101,31 @@ function getAccessControlFromAllSources() {
 function getAccessControl() {
   return readConfig()?.accessControl ?? {};
 }
+var DEFAULT_API_BASE = "https://api.withone.ai/v1";
+function getApiBase() {
+  const config = readConfig();
+  if (config?.apiBase) return `${config.apiBase}/v1`;
+  return DEFAULT_API_BASE;
+}
+function updateApiBase(url) {
+  const config = readConfig();
+  if (!config) return;
+  if (url) {
+    config.apiBase = url;
+  } else {
+    delete config.apiBase;
+  }
+  writeConfig(config);
+}
+function getCacheTtl() {
+  if (process.env.ONE_CACHE_TTL) {
+    const val = parseInt(process.env.ONE_CACHE_TTL, 10);
+    if (!isNaN(val) && val > 0) return val;
+  }
+  const config = readConfig();
+  if (config?.cacheTtl && config.cacheTtl > 0) return config.cacheTtl;
+  return 3600;
+}
 function updateAccessControl(settings) {
   const config = readConfig();
   if (!config) return;
@@ -456,6 +481,113 @@ async function configCommand() {
     p2.outro("No changes made.");
     return;
   }
+  const currentBase = getApiBase();
+  const isCustomBase = !!readConfig()?.apiBase;
+  const baseUrlMode = await p2.select({
+    message: "API base URL",
+    options: [
+      { value: "default", label: "Default", hint: "https://api.withone.ai" },
+      { value: "custom", label: "Custom", hint: "Use a different API endpoint" }
+    ],
+    initialValue: isCustomBase ? "custom" : "default"
+  });
+  if (p2.isCancel(baseUrlMode)) {
+    p2.outro("No changes made.");
+    return;
+  }
+  let newApiKey = config.apiKey;
+  if (baseUrlMode === "custom") {
+    const customUrl = await p2.text({
+      message: "Enter API base URL:",
+      placeholder: "https://development-api.withone.ai",
+      initialValue: isCustomBase ? currentBase.replace(/\/v1$/, "") : "",
+      validate: (value) => {
+        if (!value) return "URL is required";
+        try {
+          new URL(value);
+        } catch {
+          return "Invalid URL";
+        }
+        return void 0;
+      }
+    });
+    if (p2.isCancel(customUrl)) {
+      p2.outro("No changes made.");
+      return;
+    }
+    const normalized = customUrl.replace(/\/+$/, "").replace(/\/v1$/, "");
+    const apiKey = await p2.text({
+      message: `Enter your API key for ${pc.cyan(normalized)}:`,
+      placeholder: "sk_live_...",
+      validate: (value) => {
+        if (!value) return "API key is required";
+        if (!value.startsWith("sk_live_") && !value.startsWith("sk_test_")) {
+          return "API key should start with sk_live_ or sk_test_";
+        }
+        return void 0;
+      }
+    });
+    if (p2.isCancel(apiKey)) {
+      p2.outro("No changes made.");
+      return;
+    }
+    const spinner5 = p2.spinner();
+    spinner5.start("Validating API key...");
+    let isValid = false;
+    try {
+      const api = new OneApi(apiKey, `${normalized}/v1`);
+      isValid = await api.validateApiKey();
+    } catch (err) {
+      spinner5.stop("Connection failed");
+      const msg = err instanceof Error ? err.message : String(err);
+      p2.log.error(`Could not reach ${pc.cyan(normalized)}: ${msg}`);
+      return;
+    }
+    if (!isValid) {
+      spinner5.stop("Invalid API key");
+      p2.log.error(`Invalid API key for ${pc.cyan(normalized)}.`);
+      return;
+    }
+    spinner5.stop("API key validated");
+    updateApiBase(normalized);
+    newApiKey = apiKey;
+  } else if (isCustomBase) {
+    const apiKey = await p2.text({
+      message: `Enter your API key for ${pc.cyan("https://api.withone.ai")}:`,
+      placeholder: "sk_live_...",
+      validate: (value) => {
+        if (!value) return "API key is required";
+        if (!value.startsWith("sk_live_") && !value.startsWith("sk_test_")) {
+          return "API key should start with sk_live_ or sk_test_";
+        }
+        return void 0;
+      }
+    });
+    if (p2.isCancel(apiKey)) {
+      p2.outro("No changes made.");
+      return;
+    }
+    const spinner5 = p2.spinner();
+    spinner5.start("Validating API key...");
+    let isValid = false;
+    try {
+      const api = new OneApi(apiKey, "https://api.withone.ai/v1");
+      isValid = await api.validateApiKey();
+    } catch (err) {
+      spinner5.stop("Connection failed");
+      const msg = err instanceof Error ? err.message : String(err);
+      p2.log.error(`Could not reach ${pc.cyan("https://api.withone.ai")}: ${msg}`);
+      return;
+    }
+    if (!isValid) {
+      spinner5.stop("Invalid API key");
+      p2.log.error(`Invalid API key. Get a valid key at ${getApiKeyUrl()}`);
+      return;
+    }
+    spinner5.stop("API key validated");
+    updateApiBase(null);
+    newApiKey = apiKey;
+  }
   const settings = {
     permissions,
     connectionKeys: connectionKeys ?? ["*"],
@@ -463,30 +595,35 @@ async function configCommand() {
     knowledgeAgent
   };
   updateAccessControl(settings);
+  const updatedConfig = readConfig();
+  if (updatedConfig && newApiKey !== config.apiKey) {
+    updatedConfig.apiKey = newApiKey;
+    writeConfig(updatedConfig);
+  }
   const ac = getAccessControl();
   const statuses = getAgentStatuses();
   const reinstalled = [];
   for (const s of statuses) {
     if (s.globalMcp) {
-      installMcpConfig(s.agent, config.apiKey, "global", ac);
+      installMcpConfig(s.agent, newApiKey, "global", ac);
       reinstalled.push(`${s.agent.name} (global)`);
     }
     if (s.projectMcp) {
-      installMcpConfig(s.agent, config.apiKey, "project", ac);
+      installMcpConfig(s.agent, newApiKey, "project", ac);
       reinstalled.push(`${s.agent.name} (project)`);
     }
   }
   if (reinstalled.length > 0) {
     p2.log.success(`Updated MCP configs: ${reinstalled.join(", ")}`);
   }
-  p2.outro("Access control updated.");
+  p2.outro("Configuration updated.");
 }
 async function selectConnections(apiKey) {
   const spinner5 = p2.spinner();
   spinner5.start("Fetching connections...");
   let connections;
   try {
-    const api = new OneApi(apiKey);
+    const api = new OneApi(apiKey, getApiBase());
     const rawConnections = await api.listConnections();
     connections = rawConnections.map((c) => ({ platform: c.platform, key: c.key }));
     spinner5.stop(`Found ${connections.length} connection(s)`);
@@ -656,7 +793,7 @@ ${pc2.cyan(getApiKeyUrl())}`, "API Key");
   }
   const spinner5 = p3.spinner();
   spinner5.start("Validating API key...");
-  const api = new OneApi(newKey);
+  const api = new OneApi(newKey, getApiBase());
   const isValid = await api.validateApiKey();
   if (!isValid) {
     spinner5.stop("Invalid API key");
@@ -875,7 +1012,7 @@ ${pc2.cyan(getApiKeyUrl())}`, "API Key");
   }
   const spinner5 = p3.spinner();
   spinner5.start("Validating API key...");
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const isValid = await api.validateApiKey();
   if (!isValid) {
     spinner5.stop("Invalid API key");
@@ -919,7 +1056,7 @@ var TOP_INTEGRATIONS = [
   { value: "notion", label: "Notion", hint: "Access pages, databases, and docs" }
 ];
 async function promptConnectIntegrations(apiKey) {
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const connected = [];
   try {
     const existing = await api.listConnections();
@@ -1081,7 +1218,7 @@ async function connectionAddCommand(platformArg) {
     p4.cancel("Not configured. Run `one init` first.");
     process.exit(1);
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = p4.spinner();
   spinner5.start("Loading platforms...");
   let platforms;
@@ -1185,7 +1322,7 @@ async function connectionListCommand(options) {
   if (!apiKey) {
     error("Not configured. Run `one init` first.");
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading connections...");
   try {
@@ -1281,7 +1418,7 @@ async function platformsCommand(options) {
   if (isAgentMode()) {
     options.json = true;
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading platforms...");
   try {
@@ -1350,6 +1487,123 @@ async function platformsCommand(options) {
 // src/commands/actions.ts
 import * as p6 from "@clack/prompts";
 import pc6 from "picocolors";
+
+// src/lib/cache.ts
+import fs4 from "fs";
+import path4 from "path";
+import os4 from "os";
+var CACHE_BASE = path4.join(os4.homedir(), ".one", "cache");
+var KNOWLEDGE_DIR = path4.join(CACHE_BASE, "knowledge");
+var SEARCH_DIR = path4.join(CACHE_BASE, "search");
+function sanitizeFilename(input) {
+  return input.replace(/[^a-zA-Z0-9_\-\.]/g, "_");
+}
+function knowledgeCachePath(actionId) {
+  return path4.join(KNOWLEDGE_DIR, `${sanitizeFilename(actionId)}.json`);
+}
+function searchCachePath(platform, query, type) {
+  const key = `${platform}_${sanitizeFilename(query)}_${type || "knowledge"}`;
+  return path4.join(SEARCH_DIR, `${key}.json`);
+}
+function readCache(filePath) {
+  try {
+    const content = fs4.readFileSync(filePath, "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return null;
+  }
+}
+function writeCache(filePath, entry) {
+  try {
+    const dir = path4.dirname(filePath);
+    fs4.mkdirSync(dir, { recursive: true });
+    fs4.writeFileSync(filePath, JSON.stringify(entry, null, 2));
+  } catch {
+  }
+}
+function isFresh(entry) {
+  const cachedTime = new Date(entry.cachedAt).getTime();
+  const now = Date.now();
+  return now - cachedTime < entry.ttl * 1e3;
+}
+function getAge(entry) {
+  return Math.floor((Date.now() - new Date(entry.cachedAt).getTime()) / 1e3);
+}
+function buildCacheMeta(entry, hit) {
+  if (!entry) {
+    return { hit: false, age: 0, fresh: false };
+  }
+  return {
+    hit,
+    age: getAge(entry),
+    fresh: isFresh(entry)
+  };
+}
+function formatAge(seconds) {
+  if (seconds < 60) return `${seconds}s`;
+  if (seconds < 3600) return `${Math.floor(seconds / 60)}m`;
+  if (seconds < 86400) {
+    const h2 = Math.floor(seconds / 3600);
+    const m = Math.floor(seconds % 3600 / 60);
+    return m > 0 ? `${h2}h ${m}m` : `${h2}h`;
+  }
+  const d = Math.floor(seconds / 86400);
+  const h = Math.floor(seconds % 86400 / 3600);
+  return h > 0 ? `${d}d ${h}h` : `${d}d`;
+}
+function listCacheEntries() {
+  const entries = [];
+  for (const [dir, type] of [[KNOWLEDGE_DIR, "knowledge"], [SEARCH_DIR, "search"]]) {
+    try {
+      const files = fs4.readdirSync(dir);
+      for (const file of files) {
+        if (!file.endsWith(".json")) continue;
+        const filePath = path4.join(dir, file);
+        const entry = readCache(filePath);
+        if (entry) {
+          entries.push({ type, filePath, entry });
+        }
+      }
+    } catch {
+    }
+  }
+  return entries;
+}
+function clearAll() {
+  let count = 0;
+  for (const dir of [KNOWLEDGE_DIR, SEARCH_DIR]) {
+    try {
+      const files = fs4.readdirSync(dir);
+      for (const file of files) {
+        fs4.unlinkSync(path4.join(dir, file));
+        count++;
+      }
+      fs4.rmdirSync(dir);
+    } catch {
+    }
+  }
+  return count;
+}
+function clearEntry(actionId) {
+  const filePath = knowledgeCachePath(actionId);
+  try {
+    fs4.unlinkSync(filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function makeCacheEntry(key, data, etag) {
+  return {
+    key,
+    etag,
+    cachedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    ttl: getCacheTtl(),
+    data
+  };
+}
+
+// src/commands/actions.ts
 function getConfig() {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -1372,22 +1626,70 @@ function parseJsonArg(value, argName) {
 async function actionsSearchCommand(platform, query, options) {
   intro2(pc6.bgCyan(pc6.black(" One ")));
   const { apiKey, permissions, actionIds, knowledgeAgent } = getConfig();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start(`Searching actions on ${pc6.cyan(platform)} for "${query}"...`);
   try {
     const agentType = knowledgeAgent ? "knowledge" : options.type;
-    let actions2 = await api.searchActions(platform, query, agentType);
-    actions2 = filterByPermissions(actions2, permissions);
-    actions2 = actions2.filter((a) => isActionAllowed(a.systemId, actionIds));
-    const cleanedActions = actions2.map((action) => ({
-      actionId: action.systemId,
-      title: action.title,
-      method: action.method,
-      path: action.path
-    }));
+    const useCache = options.cache !== false;
+    const cachePath = searchCachePath(platform, query, agentType || "knowledge");
+    const cached = useCache ? readCache(cachePath) : null;
+    let cleanedActions;
+    let cacheHit = false;
+    if (cached && isFresh(cached)) {
+      cleanedActions = cached.data.actions;
+      cacheHit = true;
+    } else {
+      try {
+        const result = await api.searchActionsWithMeta(
+          platform,
+          query,
+          agentType,
+          cached?.etag ?? void 0
+        );
+        if (result.status === 304 && cached) {
+          cached.cachedAt = (/* @__PURE__ */ new Date()).toISOString();
+          writeCache(cachePath, cached);
+          cleanedActions = cached.data.actions;
+          cacheHit = true;
+        } else {
+          let actions2 = result.data;
+          actions2 = filterByPermissions(actions2, permissions);
+          actions2 = actions2.filter((a) => isActionAllowed(a.systemId, actionIds));
+          cleanedActions = actions2.map((action) => ({
+            actionId: action.systemId,
+            title: action.title,
+            method: action.method,
+            path: action.path
+          }));
+          writeCache(cachePath, makeCacheEntry(
+            `${platform}_${query}_${agentType || "knowledge"}`,
+            { actions: cleanedActions },
+            result.etag
+          ));
+        }
+      } catch (fetchError) {
+        if (cached) {
+          process.stderr.write(
+            `Warning: serving cached search results (network unavailable, cached ${formatAge(getAge(cached))} ago)
+`
+          );
+          cleanedActions = cached.data.actions;
+          cacheHit = true;
+        } else {
+          throw fetchError;
+        }
+      }
+    }
     if (isAgentMode()) {
-      json({ actions: cleanedActions });
+      const response = { actions: cleanedActions };
+      if (cacheHit && cached) {
+        response._cache = buildCacheMeta(cached, true);
+      } else {
+        const freshEntry = readCache(cachePath);
+        response._cache = buildCacheMeta(freshEntry, false);
+      }
+      json(response);
       return;
     }
     if (cleanedActions.length === 0) {
@@ -1441,10 +1743,32 @@ Execute:     ${pc6.cyan(`one actions execute ${platform} <actionId> <connectionK
     );
   }
 }
-async function actionsKnowledgeCommand(platform, actionId) {
+async function actionsKnowledgeCommand(platform, actionId, options) {
+  const cachePath = knowledgeCachePath(actionId);
+  if (options.cacheStatus) {
+    const entry = readCache(cachePath);
+    if (!entry) {
+      json({
+        cached: false,
+        path: cachePath
+      });
+    } else {
+      const age = getAge(entry);
+      json({
+        cached: true,
+        cachedAt: entry.cachedAt,
+        age: formatAge(age),
+        ttl: entry.ttl,
+        expired: !isFresh(entry),
+        etag: entry.etag,
+        path: cachePath
+      });
+    }
+    return;
+  }
   intro2(pc6.bgCyan(pc6.black(" One ")));
   const { apiKey, actionIds, connectionKeys } = getConfig();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   if (!isActionAllowed(actionId, actionIds)) {
     error(`Action "${actionId}" is not in the allowed action list.`);
   }
@@ -1469,15 +1793,57 @@ async function actionsKnowledgeCommand(platform, actionId) {
   const spinner5 = createSpinner();
   spinner5.start(`Loading knowledge for action ${pc6.dim(actionId)}...`);
   try {
-    const { knowledge, method } = await api.getActionKnowledge(actionId);
+    const useCache = options.cache !== false;
+    const cached = useCache ? readCache(cachePath) : null;
+    let knowledgeData;
+    let cacheHit = false;
+    let cacheEntry = cached;
+    if (cached && isFresh(cached) && useCache) {
+      knowledgeData = cached.data;
+      cacheHit = true;
+    } else {
+      try {
+        const result = await api.getActionKnowledgeWithMeta(
+          actionId,
+          cached?.etag ?? void 0
+        );
+        if (result.status === 304 && cached) {
+          cached.cachedAt = (/* @__PURE__ */ new Date()).toISOString();
+          writeCache(cachePath, cached);
+          knowledgeData = cached.data;
+          cacheHit = true;
+        } else {
+          knowledgeData = result.data;
+          const newEntry = makeCacheEntry(actionId, knowledgeData, result.etag);
+          writeCache(cachePath, newEntry);
+          cacheEntry = newEntry;
+        }
+      } catch (fetchError) {
+        if (cached) {
+          process.stderr.write(
+            `Warning: serving cached knowledge (network unavailable, cached ${formatAge(getAge(cached))} ago)
+`
+          );
+          knowledgeData = cached.data;
+          cacheHit = true;
+        } else {
+          throw fetchError;
+        }
+      }
+    }
     const knowledgeWithGuidance = buildActionKnowledgeWithGuidance(
-      knowledge,
-      method,
+      knowledgeData.knowledge,
+      knowledgeData.method,
       platform,
       actionId
     );
     if (isAgentMode()) {
-      json({ knowledge: knowledgeWithGuidance, method });
+      const response = {
+        knowledge: knowledgeWithGuidance,
+        method: knowledgeData.method,
+        _cache: buildCacheMeta(cacheEntry, cacheHit)
+      };
+      json(response);
       return;
     }
     spinner5.stop("Knowledge loaded");
@@ -1509,7 +1875,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
   if (!connectionKeys.includes("*") && !connectionKeys.includes(connectionKey)) {
     error(`Connection key "${connectionKey}" is not allowed.`);
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading action details...");
   try {
@@ -2197,26 +2563,26 @@ function validateStepsArray(steps, pathPrefix, errors) {
   const validTypes = FLOW_SCHEMA.stepTypes.map((st) => st.type);
   for (let i = 0; i < steps.length; i++) {
     const step = steps[i];
-    const path4 = `${pathPrefix}[${i}]`;
+    const path5 = `${pathPrefix}[${i}]`;
     if (!step || typeof step !== "object" || Array.isArray(step)) {
-      errors.push({ path: path4, message: "Step must be an object" });
+      errors.push({ path: path5, message: "Step must be an object" });
       continue;
     }
     const s = step;
     if (!s.id || typeof s.id !== "string") {
-      errors.push({ path: `${path4}.id`, message: 'Step must have a string "id"' });
+      errors.push({ path: `${path5}.id`, message: 'Step must have a string "id"' });
     }
     if (!s.name || typeof s.name !== "string") {
-      errors.push({ path: `${path4}.name`, message: 'Step must have a string "name"' });
+      errors.push({ path: `${path5}.name`, message: 'Step must have a string "name"' });
     }
     if (!s.type || !validTypes.includes(s.type)) {
-      errors.push({ path: `${path4}.type`, message: `Step type must be one of: ${validTypes.join(", ")}` });
+      errors.push({ path: `${path5}.type`, message: `Step type must be one of: ${validTypes.join(", ")}` });
       continue;
     }
     if (s.onError && typeof s.onError === "object") {
       const oe = s.onError;
       if (!FLOW_SCHEMA.errorStrategies.includes(oe.strategy)) {
-        errors.push({ path: `${path4}.onError.strategy`, message: `Error strategy must be one of: ${FLOW_SCHEMA.errorStrategies.join(", ")}` });
+        errors.push({ path: `${path5}.onError.strategy`, message: `Error strategy must be one of: ${FLOW_SCHEMA.errorStrategies.join(", ")}` });
       }
     }
     const descriptor = getStepTypeDescriptor(s.type);
@@ -2226,14 +2592,14 @@ function validateStepsArray(steps, pathPrefix, errors) {
     if (!configObj || typeof configObj !== "object") {
       const hint = detectFlatConfigHint(s, descriptor);
       errors.push({
-        path: `${path4}.${configKey}`,
+        path: `${path5}.${configKey}`,
         message: `${capitalize(descriptor.type)} step must have a "${configKey}" config object${hint}`
       });
       continue;
     }
     const config = configObj;
     for (const [fieldName, fd] of Object.entries(descriptor.fields)) {
-      const fieldPath = `${path4}.${configKey}.${fieldName}`;
+      const fieldPath = `${path5}.${configKey}.${fieldName}`;
       const value = config[fieldName];
       if (fd.required && (value === void 0 || value === null || value === "")) {
         errors.push({ path: fieldPath, message: `${capitalize(descriptor.type)} must have ${fd.type === "string" ? "a string" : fd.type === "array" ? "a" : "a"} "${fieldName}"` });
@@ -2285,16 +2651,16 @@ function validateStepIds(flow2) {
   function collectIds(steps, pathPrefix) {
     for (let i = 0; i < steps.length; i++) {
       const step = steps[i];
-      const path4 = `${pathPrefix}[${i}]`;
+      const path5 = `${pathPrefix}[${i}]`;
       if (seen.has(step.id)) {
-        errors.push({ path: `${path4}.id`, message: `Duplicate step ID: "${step.id}"` });
+        errors.push({ path: `${path5}.id`, message: `Duplicate step ID: "${step.id}"` });
       } else {
         seen.add(step.id);
       }
       for (const { configKey, fieldName } of nestedKeys) {
         const config = step[configKey];
         if (config && Array.isArray(config[fieldName])) {
-          collectIds(config[fieldName], `${path4}.${configKey}.${fieldName}`);
+          collectIds(config[fieldName], `${path5}.${configKey}.${fieldName}`);
         }
       }
     }
@@ -2341,7 +2707,7 @@ function validateSelectorReferences(flow2) {
     }
     return selectors;
   }
-  function checkSelectors(selectors, path4) {
+  function checkSelectors(selectors, path5) {
     for (const selector of selectors) {
       const parts = selector.split(".");
       if (parts.length < 3) continue;
@@ -2349,12 +2715,12 @@ function validateSelectorReferences(flow2) {
       if (root === "input") {
         const inputName = parts[2];
         if (!inputNames.has(inputName)) {
-          errors.push({ path: path4, message: `Selector "${selector}" references undefined input "${inputName}"` });
+          errors.push({ path: path5, message: `Selector "${selector}" references undefined input "${inputName}"` });
         }
       } else if (root === "steps") {
         const stepId = parts[2];
         if (!allStepIds.has(stepId)) {
-          errors.push({ path: path4, message: `Selector "${selector}" references undefined step "${stepId}"` });
+          errors.push({ path: path5, message: `Selector "${selector}" references undefined step "${stepId}"` });
         }
       }
     }
@@ -2402,7 +2768,7 @@ function validateFlow(flow2) {
 }
 
 // src/commands/flow.ts
-import fs4 from "fs";
+import fs5 from "fs";
 function getConfig2() {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -2460,7 +2826,7 @@ async function flowCreateCommand(key, options) {
     if (raw.startsWith("@")) {
       const filePath = raw.slice(1);
       try {
-        raw = fs4.readFileSync(filePath, "utf-8");
+        raw = fs5.readFileSync(filePath, "utf-8");
       } catch (err) {
         error(`Cannot read file "${filePath}": ${err.message}`);
       }
@@ -2508,7 +2874,7 @@ Execute:  ${pc7.cyan(`one flow execute ${flow2.key}`)}`);
 async function flowExecuteCommand(keyOrPath, options) {
   intro2(pc7.bgCyan(pc7.black(" One Workflow ")));
   const { apiKey, permissions, actionIds } = getConfig2();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start(`Loading workflow "${keyOrPath}"...`);
   let flow2;
@@ -2643,7 +3009,7 @@ async function flowValidateCommand(keyOrPath) {
   let flowData;
   try {
     const flowPath = resolveFlowPath(keyOrPath);
-    const content = fs4.readFileSync(flowPath, "utf-8");
+    const content = fs5.readFileSync(flowPath, "utf-8");
     flowData = JSON.parse(content);
   } catch (err) {
     spinner5.stop("Validation failed");
@@ -2680,7 +3046,7 @@ async function flowResumeCommand(runId) {
     error(`Run "${runId}" is ${state.status} \u2014 can only resume paused or failed runs`);
   }
   const { apiKey, permissions, actionIds } = getConfig2();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   let flow2;
   try {
     flow2 = loadFlow(state.flowKey);
@@ -2998,7 +3364,7 @@ async function relayCreateCommand(options) {
   if (!connectionKeys.includes("*") && !connectionKeys.includes(options.connectionKey)) {
     error(`Connection key "${options.connectionKey}" is not allowed.`);
   }
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Creating relay endpoint...");
   try {
@@ -3030,7 +3396,7 @@ async function relayCreateCommand(options) {
 }
 async function relayListCommand(options) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading relay endpoints...");
   try {
@@ -3077,7 +3443,7 @@ async function relayListCommand(options) {
 }
 async function relayGetCommand(id) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading relay endpoint...");
   try {
@@ -3108,7 +3474,7 @@ async function relayGetCommand(id) {
 }
 async function relayUpdateCommand(id, options) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Updating relay endpoint...");
   try {
@@ -3135,7 +3501,7 @@ async function relayUpdateCommand(id, options) {
 }
 async function relayDeleteCommand(id) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Deleting relay endpoint...");
   try {
@@ -3154,7 +3520,7 @@ async function relayDeleteCommand(id) {
 }
 async function relayActivateCommand(id, options) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Activating relay endpoint...");
   try {
@@ -3178,7 +3544,7 @@ async function relayActivateCommand(id, options) {
 }
 async function relayEventsCommand(options) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading relay events...");
   try {
@@ -3225,7 +3591,7 @@ async function relayEventsCommand(options) {
 }
 async function relayEventGetCommand(id) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading relay event...");
   try {
@@ -3253,7 +3619,7 @@ async function relayDeliveriesCommand(options) {
     error("Provide either --endpoint-id or --event-id");
   }
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start("Loading deliveries...");
   try {
@@ -3285,7 +3651,7 @@ async function relayDeliveriesCommand(options) {
 }
 async function relayEventTypesCommand(platform) {
   const { apiKey } = getConfig3();
-  const api = new OneApi(apiKey);
+  const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
   spinner5.start(`Loading event types for ${pc8.cyan(platform)}...`);
   try {
@@ -3312,8 +3678,122 @@ async function relayEventTypesCommand(platform) {
   }
 }
 
-// src/commands/guide.ts
+// src/commands/cache.ts
 import pc9 from "picocolors";
+async function cacheClearCommand(actionId) {
+  if (actionId) {
+    const deleted = clearEntry(actionId);
+    if (isAgentMode()) {
+      json({ cleared: deleted, actionId });
+      return;
+    }
+    if (deleted) {
+      console.log(`Cleared cache for ${pc9.cyan(actionId)}`);
+    } else {
+      console.log(`No cache entry found for ${pc9.dim(actionId)}`);
+    }
+  } else {
+    const count = clearAll();
+    if (isAgentMode()) {
+      json({ cleared: true, count });
+      return;
+    }
+    console.log(`Cleared ${count} cached ${count === 1 ? "entry" : "entries"}`);
+  }
+}
+async function cacheListCommand(options) {
+  const entries = listCacheEntries();
+  const filtered = options.expired ? entries.filter((e) => !isFresh(e.entry)) : entries;
+  if (isAgentMode()) {
+    json({
+      entries: filtered.map((e) => ({
+        type: e.type,
+        key: e.entry.key,
+        cachedAt: e.entry.cachedAt,
+        age: formatAge(getAge(e.entry)),
+        ttl: e.entry.ttl,
+        fresh: isFresh(e.entry),
+        etag: e.entry.etag,
+        path: e.filePath
+      }))
+    });
+    return;
+  }
+  if (filtered.length === 0) {
+    console.log(options.expired ? "No expired cache entries" : "No cached entries");
+    return;
+  }
+  const rows = filtered.map((e) => ({
+    type: e.type,
+    key: e.entry.key,
+    age: formatAge(getAge(e.entry)),
+    status: isFresh(e.entry) ? pc9.green("fresh") : pc9.yellow("expired")
+  }));
+  printTable(
+    [
+      { key: "type", label: "Type" },
+      { key: "key", label: "Key" },
+      { key: "age", label: "Age" },
+      { key: "status", label: "Status" }
+    ],
+    rows
+  );
+}
+async function cacheUpdateAllCommand() {
+  const apiKey = getApiKey();
+  if (!apiKey) {
+    error("Not configured. Run `one init` first.");
+  }
+  const api = new OneApi(apiKey, getApiBase());
+  const entries = listCacheEntries();
+  if (entries.length === 0) {
+    if (isAgentMode()) {
+      json({ updated: 0, failed: 0, entries: [] });
+      return;
+    }
+    console.log("No cached entries to update");
+    return;
+  }
+  const spinner5 = createSpinner();
+  spinner5.start(`Updating ${entries.length} cached ${entries.length === 1 ? "entry" : "entries"}...`);
+  let updated = 0;
+  let failed = 0;
+  const errors = [];
+  for (const e of entries) {
+    try {
+      if (e.type === "knowledge") {
+        const result = await api.getActionKnowledgeWithMeta(e.entry.key);
+        const newEntry = makeCacheEntry(e.entry.key, result.data, result.etag);
+        writeCache(e.filePath, newEntry);
+        updated++;
+      } else {
+        const refreshed = { ...e.entry, cachedAt: (/* @__PURE__ */ new Date()).toISOString() };
+        writeCache(e.filePath, refreshed);
+        updated++;
+      }
+    } catch (err) {
+      failed++;
+      errors.push({
+        key: e.entry.key,
+        error: err instanceof Error ? err.message : "Unknown error"
+      });
+    }
+  }
+  spinner5.stop(`Updated ${updated} ${updated === 1 ? "entry" : "entries"}${failed > 0 ? `, ${failed} failed` : ""}`);
+  if (isAgentMode()) {
+    json({ updated, failed, errors: errors.length > 0 ? errors : void 0 });
+    return;
+  }
+  if (errors.length > 0) {
+    console.log();
+    for (const e of errors) {
+      console.log(`  ${pc9.red("\u2717")} ${e.key}: ${pc9.dim(e.error)}`);
+    }
+  }
+}
+
+// src/commands/guide.ts
+import pc10 from "picocolors";
 
 // src/lib/guide-content.ts
 var GUIDE_OVERVIEW = `# One CLI \u2014 Agent Guide
@@ -3404,6 +3884,7 @@ Request specific sections:
 - \`one guide actions\` \u2014 Actions reference (search, knowledge, execute)
 - \`one guide flows\` \u2014 Workflow engine reference (step types, selectors, examples)
 - \`one guide relay\` \u2014 Webhook relay reference (templates, passthrough actions)
+- \`one guide cache\` \u2014 Cache management (TTL, flags, commands)
 - \`one guide all\` \u2014 Everything
 
 ## Important Notes
@@ -3555,11 +4036,93 @@ Any connected platform can be a destination via passthrough actions.
 3. \`relay deliveries --event-id <id>\` \u2014 check delivery status and errors
 4. \`relay event <id>\` \u2014 inspect full payload to verify template paths
 `;
+var GUIDE_CACHE = `# One Cache \u2014 Reference
+
+## Overview
+
+The One CLI caches \`actions knowledge\` and \`actions search\` responses locally so repeated calls serve instantly from disk instead of hitting the API. This is the single biggest latency win for agents who call knowledge for the same actions repeatedly.
+
+Cache location: \`~/.one/cache/knowledge/\` and \`~/.one/cache/search/\`
+
+## How It Works
+
+- **First call**: fetches from the API, writes to cache, serves the response
+- **Subsequent calls (within TTL)**: serves from cache instantly, no API call
+- **After TTL expires**: makes a conditional request (ETag). If content unchanged, refreshes the cache timestamp. If changed, writes fresh data.
+- **Network failure with stale cache**: serves the stale cache with a warning \u2014 never fails hard when a cache exists
+
+Default TTL: 3600 seconds (1 hour). Configure via \`ONE_CACHE_TTL\` env var or \`cacheTtl\` in \`~/.one/config.json\`.
+
+## What Gets Cached
+
+| Cached | Not Cached |
+|--------|-----------|
+| \`actions knowledge\` (API docs, change infrequently) | \`actions execute\` (live data, always fresh) |
+| \`actions search\` results | \`connection list\` (changes with add/remove) |
+
+## Agent Mode \`_cache\` Metadata
+
+In \`--agent\` mode, knowledge and search responses include a \`_cache\` field:
+
+\`\`\`json
+{
+  "knowledge": "...",
+  "method": "POST",
+  "_cache": {
+    "hit": true,
+    "age": 1423,
+    "fresh": true
+  }
+}
+\`\`\`
+
+Use this to programmatically decide whether to force-refresh.
+
+## Cache Flags
+
+\`\`\`bash
+# Skip cache, fetch fresh (result still gets cached for next time)
+one --agent actions knowledge <platform> <actionId> --no-cache
+
+# Check cache status without fetching
+one --agent actions knowledge <platform> <actionId> --cache-status
+
+# Same for search
+one --agent actions search <platform> "<query>" --no-cache
+\`\`\`
+
+## Cache Management Commands
+
+\`\`\`bash
+one cache list                    # List all cached entries with age and status
+one cache list --expired          # List only expired entries
+one cache clear                   # Delete all cached knowledge and search data
+one cache clear <actionId>        # Delete one specific entry
+one cache update-all              # Re-fetch fresh data for all cached entries
+\`\`\`
+
+All cache commands respect \`--agent\` for JSON output.
+
+## When to Force-Refresh
+
+- After a platform updates its API docs (rare)
+- If you suspect stale data is causing issues
+- Use \`one cache update-all\` to proactively warm the entire cache
+
+## Configuration
+
+| Setting | Source | Example |
+|---------|--------|---------|
+| TTL (seconds) | \`ONE_CACHE_TTL\` env var | \`ONE_CACHE_TTL=7200\` |
+| TTL (seconds) | \`cacheTtl\` in \`~/.one/config.json\` | \`"cacheTtl": 7200\` |
+| Default | \u2014 | 3600 (1 hour) |
+`;
 var TOPICS = [
   { topic: "overview", description: "Setup, features, and quick start for each" },
   { topic: "actions", description: "Search, read docs, and execute platform actions" },
   { topic: "flows", description: "Build and execute multi-step workflows" },
   { topic: "relay", description: "Receive webhooks and forward to other platforms" },
+  { topic: "cache", description: "Local caching for knowledge and search responses" },
   { topic: "all", description: "Complete guide (all topics combined)" }
 ];
 function getGuideContent(topic) {
@@ -3572,10 +4135,12 @@ function getGuideContent(topic) {
       return { title: "One CLI \u2014 Agent Guide: Workflows", content: GUIDE_FLOWS };
     case "relay":
       return { title: "One CLI \u2014 Agent Guide: Relay", content: GUIDE_RELAY };
+    case "cache":
+      return { title: "One CLI \u2014 Agent Guide: Cache", content: GUIDE_CACHE };
     case "all":
       return {
         title: "One CLI \u2014 Agent Guide: Complete",
-        content: [GUIDE_OVERVIEW, GUIDE_ACTIONS, GUIDE_FLOWS, GUIDE_RELAY].join("\n---\n\n")
+        content: [GUIDE_OVERVIEW, GUIDE_ACTIONS, GUIDE_FLOWS, GUIDE_RELAY, GUIDE_CACHE].join("\n---\n\n")
       };
   }
 }
@@ -3584,7 +4149,7 @@ function getAvailableTopics() {
 }
 
 // src/commands/guide.ts
-var VALID_TOPICS = ["overview", "actions", "flows", "relay", "all"];
+var VALID_TOPICS = ["overview", "actions", "flows", "relay", "cache", "all"];
 async function guideCommand(topic = "all") {
   if (!VALID_TOPICS.includes(topic)) {
     error(
@@ -3597,14 +4162,14 @@ async function guideCommand(topic = "all") {
     json({ topic, title, content, availableTopics });
     return;
   }
-  intro2(pc9.bgCyan(pc9.black(" One Guide ")));
+  intro2(pc10.bgCyan(pc10.black(" One Guide ")));
   console.log();
   console.log(content);
-  console.log(pc9.dim("\u2500".repeat(60)));
+  console.log(pc10.dim("\u2500".repeat(60)));
   console.log(
-    pc9.dim("Available topics: ") + availableTopics.map((t) => pc9.cyan(t.topic)).join(", ")
+    pc10.dim("Available topics: ") + availableTopics.map((t) => pc10.cyan(t.topic)).join(", ")
   );
-  console.log(pc9.dim(`Run ${pc9.cyan("one guide <topic>")} for a specific section.`));
+  console.log(pc10.dim(`Run ${pc10.cyan("one guide <topic>")} for a specific section.`));
 }
 
 // src/lib/platform-meta.ts
@@ -3682,7 +4247,7 @@ async function onboardCommand(step) {
   let connections = [];
   if (currentStep >= 2) {
     try {
-      const api = new OneApi(apiKey);
+      const api = new OneApi(apiKey, getApiBase());
       connections = await api.listConnections();
     } catch {
     }
@@ -3947,14 +4512,14 @@ async function fetchLatestVersionInfo() {
     return null;
   }
 }
-function readCache() {
+function readCache3() {
   try {
     return JSON.parse(readFileSync(CACHE_PATH, "utf8"));
   } catch {
     return null;
   }
 }
-function writeCache(latestVersion, publishedAt) {
+function writeCache2(latestVersion, publishedAt) {
   try {
     mkdirSync(join(homedir(), ".one"), { recursive: true });
     writeFileSync(CACHE_PATH, JSON.stringify({ lastCheck: Date.now(), latestVersion, publishedAt }));
@@ -3963,16 +4528,16 @@ function writeCache(latestVersion, publishedAt) {
 }
 async function checkLatestVersion() {
   const info = await fetchLatestVersionInfo();
-  if (info) writeCache(info.version, info.publishedAt);
+  if (info) writeCache2(info.version, info.publishedAt);
   return info?.version ?? null;
 }
 async function checkLatestVersionCached() {
-  const cache = readCache();
-  if (cache && Date.now() - cache.lastCheck < CHECK_INTERVAL_MS) {
-    return { version: cache.latestVersion, publishedAt: cache.publishedAt ?? null };
+  const cache2 = readCache3();
+  if (cache2 && Date.now() - cache2.lastCheck < CHECK_INTERVAL_MS) {
+    return { version: cache2.latestVersion, publishedAt: cache2.publishedAt ?? null };
   }
   const info = await fetchLatestVersionInfo();
-  if (info) writeCache(info.version, info.publishedAt);
+  if (info) writeCache2(info.version, info.publishedAt);
   return info;
 }
 function getCurrentVersion() {
@@ -4015,6 +4580,14 @@ async function updateCommand() {
     error("Update failed \u2014 try running: npm install -g @withone/cli@latest");
   }
 }
+function isNewerVersion(latest, current) {
+  const parse = (v) => v.split(".").map(Number);
+  const [lMaj, lMin, lPat] = parse(latest);
+  const [cMaj, cMin, cPat] = parse(current);
+  if (lMaj !== cMaj) return lMaj > cMaj;
+  if (lMin !== cMin) return lMin > cMin;
+  return lPat > cPat;
+}
 function autoUpdate(targetVersion, publishedAt) {
   if (publishedAt) {
     const age = Date.now() - new Date(publishedAt).getTime();
@@ -4054,6 +4627,11 @@ program.name("one").option("--agent", "Machine-readable JSON output (no colors,
     one flow execute <key>                Execute a workflow
     one flow validate <key>               Validate a flow
 
+  Cache:
+    one cache list                        List cached entries with age and status
+    one cache clear                       Clear all cached knowledge and search data
+    one cache update-all                  Re-fetch fresh data for all cached entries
+
   Webhook Relay:
     one relay create                      Create a relay endpoint for a connection
     one relay list                        List relay endpoints
@@ -4093,7 +4671,7 @@ program.hook("postAction", async () => {
   const info = await updateCheckPromise;
   if (!info) return;
   const current = getCurrentVersion();
-  if (current === info.version) return;
+  if (!isNewerVersion(info.version, current)) return;
   autoUpdate(info.version, info.publishedAt);
 });
 program.command("init").description("Set up One and install MCP to your AI agents").option("-y, --yes", "Skip confirmations").option("-g, --global", "Install MCP globally (available in all projects)").option("-p, --project", "Install MCP for this project only (creates .mcp.json)").action(async (options) => {
@@ -4113,11 +4691,11 @@ program.command("platforms").alias("p").description("List available platforms").
   await platformsCommand(options);
 });
 var actions = program.command("actions").alias("a").description("Search, explore, and execute platform actions (workflow: search \u2192 knowledge \u2192 execute)");
-actions.command("search <platform> <query>").description('Search for actions on a platform (e.g. one actions search gmail "send email")').option("-t, --type <type>", "execute (to run it) or knowledge (to learn about it). Default: knowledge").action(async (platform, query, options) => {
+actions.command("search <platform> <query>").description('Search for actions on a platform (e.g. one actions search gmail "send email")').option("-t, --type <type>", "execute (to run it) or knowledge (to learn about it). Default: knowledge").option("--no-cache", "Skip cache, fetch fresh from API").action(async (platform, query, options) => {
   await actionsSearchCommand(platform, query, options);
 });
-actions.command("knowledge <platform> <actionId>").alias("k").description("Get full docs for an action \u2014 MUST call before execute to know required params").action(async (platform, actionId) => {
-  await actionsKnowledgeCommand(platform, actionId);
+actions.command("knowledge <platform> <actionId>").alias("k").description("Get full docs for an action \u2014 MUST call before execute to know required params").option("--no-cache", "Skip cache, fetch fresh from API").option("--cache-status", "Print cache metadata without fetching").action(async (platform, actionId, options) => {
+  await actionsKnowledgeCommand(platform, actionId, options);
 });
 actions.command("execute <platform> <actionId> <connectionKey>").alias("x").description('Execute an action \u2014 pass connectionKey from "one list", actionId from "actions search"').option("-d, --data <json>", "Request body as JSON").option("--path-vars <json>", "Path variables as JSON").option("--query-params <json>", "Query parameters as JSON").option("--headers <json>", "Additional headers as JSON").option("--form-data", "Send as multipart/form-data").option("--form-url-encoded", "Send as application/x-www-form-urlencoded").option("--dry-run", "Show request that would be sent without executing").action(async (platform, actionId, connectionKey, options) => {
   await actionsExecuteCommand(platform, actionId, connectionKey, {
@@ -4183,6 +4761,16 @@ relay.command("deliveries").description("List delivery attempts for an endpoint
 relay.command("event-types <platform>").description("List supported webhook event types for a platform").action(async (platform) => {
   await relayEventTypesCommand(platform);
 });
+var cache = program.command("cache").description("Manage the local knowledge and search cache");
+cache.command("clear [actionId]").description("Clear all cached data, or a specific action by ID").action(async (actionId) => {
+  await cacheClearCommand(actionId);
+});
+cache.command("list").alias("ls").description("List all cached entries with age and status").option("--expired", "Show only expired entries").action(async (options) => {
+  await cacheListCommand(options);
+});
+cache.command("update-all").description("Re-fetch fresh data for all cached entries").action(async () => {
+  await cacheUpdateAllCommand();
+});
 program.command("guide [topic]").description("Full CLI usage guide for agents (topics: overview, actions, flows, relay, all)").action(async (topic) => {
   await guideCommand(topic);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.17.2",
+  "version": "1.19.0",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/skills/one/SKILL.md

@@ -100,6 +100,18 @@ All errors return JSON: `{"error": "message"}`. Parse output as JSON and check f
 - JSON values passed to `-d`, `--path-vars`, `--query-params` must be valid JSON (use single quotes around JSON to avoid shell escaping)
 - Do NOT pass path or query parameters inside the `-d` body flag
 
+## Caching
+
+Knowledge and search responses are cached locally (`~/.one/cache/`). Subsequent calls for the same action serve instantly from disk.
+
+- Cache is automatic — no setup required
+- Default TTL: 1 hour (configurable via `ONE_CACHE_TTL` env var)
+- In `--agent` mode, responses include a `_cache` field: `{"hit": true, "age": 1423, "fresh": true}`
+- Use `--no-cache` to force a fresh fetch: `one --agent actions knowledge <platform> <actionId> --no-cache`
+- Use `--cache-status` to check cache state without fetching
+- Manage cache: `one cache list`, `one cache clear`, `one cache update-all`
+- `actions execute` is NEVER cached — always fresh
+
 ## Beyond Single Actions
 
 One also supports more advanced patterns. Read the relevant reference file before using these: