@withone/cli 2.2.0 → 2.3.1

package/dist/{chunk-YMUY55U2.js → chunk-3HRC3IPE.js}

@@ -3,7 +3,7 @@ import {
   readConfig,
   setOpenAiApiKey,
   writeConfig
-} from "./chunk-6UB623BG.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/lib/memory/config.ts
 var DEFAULT_MEMORY_CONFIG = {

package/dist/{chunk-6EQDEYVD.js → chunk-6FA7KUNQ.js}

@@ -5,7 +5,7 @@ import {
 import {
   getCacheTtl,
   homeDir
-} from "./chunk-6UB623BG.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/lib/flow-runner.ts
 import fs3 from "fs";
@@ -2285,7 +2285,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-L3JG2WCY.js");
+  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-SFECNAO2.js");
   const { flow: subFlow, rootDir: subRootDir } = loadFlowWithMeta2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,

package/dist/{chunk-OLQ55K6B.js → chunk-FUCAK5RA.js}

@@ -1,10 +1,10 @@
 import {
   getMemoryConfigOrDefault
-} from "./chunk-YMUY55U2.js";
+} from "./chunk-3HRC3IPE.js";
 import {
   getOpenAiApiKey,
   readConfig
-} from "./chunk-6UB623BG.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/lib/output.ts
 import * as p from "@clack/prompts";

package/dist/{chunk-6UB623BG.js → chunk-HTXZZQ6U.js}

@@ -205,6 +205,12 @@ function updateApiBase(url) {
   delete config.whoamiApiBase;
   writeConfig(config);
 }
+function withKnowledgeAgent(accessControl, on) {
+  const next = { ...accessControl };
+  if (on) next.knowledgeAgent = true;
+  else delete next.knowledgeAgent;
+  return Object.keys(next).length ? next : void 0;
+}
 function saveCredentials(apiKey, scope, opts) {
   const existing = scope === "project" ? readProjectConfig() : readGlobalConfig();
   const next = {
@@ -217,6 +223,14 @@ function saveCredentials(apiKey, scope, opts) {
   };
   if (opts.keyName) next.apiKeyName = opts.keyName;
   else delete next.apiKeyName;
+  const userSetKnowledge = !!existing?.accessControl?.knowledgeAgent && !existing.knowledgeAgentFromGrant;
+  if (opts.knowledgeOnly !== void 0 && !userSetKnowledge) {
+    const accessControl = withKnowledgeAgent(existing?.accessControl, opts.knowledgeOnly);
+    if (accessControl) next.accessControl = accessControl;
+    else delete next.accessControl;
+    if (opts.knowledgeOnly) next.knowledgeAgentFromGrant = true;
+    else delete next.knowledgeAgentFromGrant;
+  }
   writeConfig(next, scope);
 }
 function getCacheTtl() {
@@ -249,6 +263,7 @@ function updateAccessControl(settings) {
   } else {
     config.accessControl = cleaned;
   }
+  delete config.knowledgeAgentFromGrant;
   writeConfig(config);
 }
 function getWhoAmI() {

package/dist/{chunk-GKAIRI4Y.js → chunk-IPAVHPRZ.js}

@@ -3,10 +3,10 @@ import {
   isAgentMode,
   json,
   requireMemoryInit
-} from "./chunk-OLQ55K6B.js";
+} from "./chunk-FUCAK5RA.js";
 import {
   getBackend
-} from "./chunk-IMU2X3ZV.js";
+} from "./chunk-NOPTG4GC.js";
 
 // src/commands/mem/sql.ts
 async function memSqlCommand(sql) {

package/dist/{chunk-IMU2X3ZV.js → chunk-NOPTG4GC.js}

@@ -5,11 +5,11 @@ import {
   getMemoryConfig,
   getMemoryConfigOrDefault,
   updateMemoryConfig
-} from "./chunk-YMUY55U2.js";
+} from "./chunk-3HRC3IPE.js";
 import {
   getOpenAiApiKey,
   homeDir
-} from "./chunk-6UB623BG.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/lib/memory/schema.ts
 var SCHEMA_VERSION = "2.3.1";

package/dist/{chunk-YTM6HJKA.js → chunk-SN6WYDOE.js}

@@ -6,11 +6,11 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-OLQ55K6B.js";
+} from "./chunk-FUCAK5RA.js";
 import {
   getBackend,
   upsertRecord
-} from "./chunk-IMU2X3ZV.js";
+} from "./chunk-NOPTG4GC.js";
 
 // src/commands/mem/migrate.ts
 import fs4 from "fs";

package/dist/{embedding-OXX4OF65.js → embedding-C7FIKORV.js}

@@ -2,8 +2,8 @@ import {
   defaultSearchableText,
   embed,
   embedBatch
-} from "./chunk-YMUY55U2.js";
-import "./chunk-6UB623BG.js";
+} from "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
 export {
   defaultSearchableText,
   embed,

package/dist/{flow-runner-L3JG2WCY.js → flow-runner-SFECNAO2.js}

@@ -12,9 +12,9 @@ import {
   stripStepsAlias,
   summarizeFlowInputs,
   walkSteps
-} from "./chunk-6EQDEYVD.js";
+} from "./chunk-6FA7KUNQ.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-6UB623BG.js";
+import "./chunk-HTXZZQ6U.js";
 export {
   FlowRunner,
   collectStepTypes,

package/dist/index.js

@@ -28,10 +28,10 @@ import {
   validateActionInput,
   walkSteps,
   writeCache
-} from "./chunk-6EQDEYVD.js";
+} from "./chunk-6FA7KUNQ.js";
 import {
   memSqlCommand
-} from "./chunk-GKAIRI4Y.js";
+} from "./chunk-IPAVHPRZ.js";
 import {
   collectIdentityKeys,
   countRecords,
@@ -62,7 +62,7 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-YTM6HJKA.js";
+} from "./chunk-SN6WYDOE.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -86,7 +86,7 @@ import {
   semanticSearchUpgradeLine,
   setAgentMode,
   silenceWarningsInAgentMode
-} from "./chunk-OLQ55K6B.js";
+} from "./chunk-FUCAK5RA.js";
 import {
   SCHEMA_VERSION,
   addRecord,
@@ -96,7 +96,7 @@ import {
   listBackendPlugins,
   loadBackendFromConfig,
   updateRecord
-} from "./chunk-IMU2X3ZV.js";
+} from "./chunk-NOPTG4GC.js";
 import {
   DEFAULT_MEMORY_CONFIG,
   defaultSearchableText,
@@ -106,7 +106,7 @@ import {
   memoryConfigExists,
   setOpenAiApiKey,
   updateMemoryConfig
-} from "./chunk-YMUY55U2.js";
+} from "./chunk-3HRC3IPE.js";
 import {
   appendAnalyticsQueue,
   appendUsageLog,
@@ -143,7 +143,7 @@ import {
   writeConfig,
   writeUsageLog,
   writeUsageState
-} from "./chunk-6UB623BG.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/cli.ts
 import { createRequire as createRequire3 } from "module";
@@ -1543,7 +1543,8 @@ function startCallbackServer(expectedState) {
           const grant = cleanParam(url.searchParams.get("grant"), MAX_GRANT_LENGTH);
           res.writeHead(200, { "Content-Type": "text/html" });
           res.end(SUCCESS_HTML);
-          resolveResult({ kind: "key", apiKey, keyName, grant });
+          const knowledgeOnly = url.searchParams.get("knowledge") === "1";
+          resolveResult({ kind: "key", apiKey, keyName, grant, knowledgeOnly });
           return;
         }
         const error2 = cleanParam(url.searchParams.get("error"), MAX_ERROR_LENGTH);
@@ -1655,7 +1656,13 @@ ${describeInstallContext(context)}`
     const apiBase = getApiBase();
     const api = new OneApi(outcome.apiKey, apiBase);
     const whoami = await api.whoami();
-    return { apiKey: outcome.apiKey, whoami, keyName: outcome.keyName, grant: outcome.grant };
+    return {
+      apiKey: outcome.apiKey,
+      whoami,
+      keyName: outcome.keyName,
+      grant: outcome.grant,
+      knowledgeOnly: outcome.knowledgeOnly
+    };
   } catch (err) {
     spin.stop("Authentication failed.");
     if (err instanceof Error && err.message === "timeout") {
@@ -1714,8 +1721,8 @@ async function loginCommand() {
   }
   const result = await browserLogin({ scope: targetScope });
   if (!result) return;
-  const { apiKey, whoami, keyName, grant } = result;
-  saveCredentials(apiKey, targetScope, { keyName, whoami });
+  const { apiKey, whoami, keyName, grant, knowledgeOnly } = result;
+  saveCredentials(apiKey, targetScope, { keyName, whoami, knowledgeOnly });
   const pc16 = (await import("picocolors")).default;
   const env = getEnvFromApiKey(apiKey);
   const contextParts = [];
@@ -1787,6 +1794,7 @@ async function nonInteractiveInit(options) {
   let apiKey;
   let keyName;
   let grant;
+  let knowledgeOnly;
   let whoami;
   if (auth === "browser") {
     const result = await browserLogin({ scope });
@@ -1796,6 +1804,7 @@ async function nonInteractiveInit(options) {
     apiKey = result.apiKey;
     keyName = result.keyName;
     grant = result.grant;
+    knowledgeOnly = result.knowledgeOnly;
     whoami = result.whoami;
   } else {
     const key = options.apiKey?.trim();
@@ -1819,7 +1828,7 @@ async function nonInteractiveInit(options) {
     apiKey = key;
     whoami = validated;
   }
-  saveCredentials(apiKey, scope, { keyName, whoami });
+  saveCredentials(apiKey, scope, { keyName, whoami, knowledgeOnly });
   if (options.openaiKey?.trim()) {
     try {
       setOpenAiApiKey(options.openaiKey.trim());
@@ -2057,6 +2066,7 @@ async function handleUpdateKey(statuses, scope) {
   let newKey;
   let keyName;
   let grant;
+  let knowledgeOnly;
   let whoamiResult;
   if (authMethod === "browser") {
     const result = await browserLogin({ scope });
@@ -2067,6 +2077,7 @@ async function handleUpdateKey(statuses, scope) {
     newKey = result.apiKey;
     keyName = result.keyName;
     grant = result.grant;
+    knowledgeOnly = result.knowledgeOnly;
     whoamiResult = result.whoami;
   } else {
     p3.note(`Get your API key at:
@@ -2125,7 +2136,8 @@ ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
     ].join("\n"),
     "Account"
   );
-  const ac = getAccessControl();
+  saveCredentials(newKey, scope, { keyName, whoami: whoamiResult, knowledgeOnly });
+  const ac = (scope === "project" ? readProjectConfig() : readGlobalConfig())?.accessControl ?? {};
   const reinstalled = [];
   for (const s of statuses) {
     if (s.globalMcp) {
@@ -2137,7 +2149,6 @@ ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
       reinstalled.push(`${s.agent.name} (project)`);
     }
   }
-  saveCredentials(newKey, scope, { keyName, whoami: whoamiResult });
   if (reinstalled.length > 0) {
     p3.log.success(`Updated MCP configs: ${reinstalled.join(", ")}`);
   }
@@ -2388,7 +2399,11 @@ async function freshSetup(scope, options) {
       ].join("\n"),
       "Account"
     );
-    saveCredentials(apiKey, scope, { keyName: result.keyName, whoami: result.whoami });
+    saveCredentials(apiKey, scope, {
+      keyName: result.keyName,
+      whoami: result.whoami,
+      knowledgeOnly: result.knowledgeOnly
+    });
   } else {
     p3.note(`Get your API key at:
 ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
@@ -7398,7 +7413,7 @@ async function syncModel(api, profile, options) {
         updateModelState(platform, model, { status: "failed", pagesProcessed, lastCursor }),
         (async () => {
           try {
-            const { getBackend: getBackend2 } = await import("./runtime-SX36HGBA.js");
+            const { getBackend: getBackend2 } = await import("./runtime-HLW365HP.js");
             const backend = await getBackend2();
             await Promise.race([
               backend.close(),
@@ -7764,7 +7779,7 @@ async function syncModel(api, profile, options) {
         db.exec(`DROP TABLE IF EXISTS _seen_ids`);
       }
       if (options.toMemory !== false) {
-        const backend = await (await import("./runtime-SX36HGBA.js")).getBackend();
+        const backend = await (await import("./runtime-HLW365HP.js")).getBackend();
         const type = `${platform}/${model}`;
         const existing = await backend.listKeysByType(type);
         const sourcePrefix = `${type}:`;
@@ -7865,7 +7880,7 @@ async function syncModel(api, profile, options) {
     let statusCounts;
     if (options.toMemory !== false) {
       try {
-        const backend = await (await import("./runtime-SX36HGBA.js")).getBackend();
+        const backend = await (await import("./runtime-HLW365HP.js")).getBackend();
         const typeName = `${platform}/${model}`;
         const [active, archived] = await Promise.all([
           backend.count(typeName, { status: "active" }),
@@ -9587,7 +9602,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-SYCWUPNP.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-6I4LWPZF.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -9665,7 +9680,7 @@ async function syncDeleteCommand(platformModel, options) {
 async function maybeAutoMigrateLegacy(platform, models) {
   const dbSize = getDatabaseSize(platform);
   if (!dbSize || dbSize === "0 B") return;
-  const { getBackend: getBackend2 } = await import("./runtime-SX36HGBA.js");
+  const { getBackend: getBackend2 } = await import("./runtime-HLW365HP.js");
   const backend = await getBackend2();
   let memoryHasData = false;
   for (const model of models) {
@@ -9681,7 +9696,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-TACDLGPD.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-GN3I6EZM.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -9690,7 +9705,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p6.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-TACDLGPD.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-GN3I6EZM.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -9751,7 +9766,7 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
   const state = await readSyncState();
-  const { getBackend: getBackend2 } = await import("./runtime-SX36HGBA.js");
+  const { getBackend: getBackend2 } = await import("./runtime-HLW365HP.js");
   const backend = await getBackend2();
   const syncs = await Promise.all(profiles.map(async (p9) => {
     const modelState = state[p9.platform]?.[p9.model];
@@ -10027,7 +10042,7 @@ function registerSyncSubcommands(sync) {
     await syncSqlCommand(platformModel, sql);
   });
   sync.command("schema <platform/model>").description("Inspect the JSON structure of synced records (field paths, types, examples) \u2014 useful before writing `sync sql` queries").action(async (platformModel) => {
-    const { syncSchemaCommand } = await import("./schema-RJC2WQQ6.js");
+    const { syncSchemaCommand } = await import("./schema-G7XYVIZG.js");
     await syncSchemaCommand(platformModel);
   });
   sync.command("delete <platform/model>").description('Delete records from local sync data (e.g. one sync delete notion/pages --id "abc-123")').option("--id <value>", "Delete record by ID").option("--where <conditions>", 'Delete records matching conditions (e.g. "status=archived")').option("--where-sql <predicate>", `Delete using a raw SQL WHERE clause (e.g. "json_extract(data, '$.type') = 'promotion'")`).option("--yes", "Skip confirmation prompt").action(async (platformModel, options) => {
@@ -10804,7 +10819,7 @@ async function memDoctorCommand() {
   }
   if (cfg.embedding.provider === "openai") {
     try {
-      const { embed: embed2 } = await import("./embedding-OXX4OF65.js");
+      const { embed: embed2 } = await import("./embedding-C7FIKORV.js");
       const result = await embed2("connectivity check");
       checks.push({
         name: "OpenAI embedding provider reachable",

package/dist/{migrate-TACDLGPD.js → migrate-GN3I6EZM.js}

@@ -3,12 +3,12 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-YTM6HJKA.js";
+} from "./chunk-SN6WYDOE.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-OLQ55K6B.js";
-import "./chunk-IMU2X3ZV.js";
-import "./chunk-YMUY55U2.js";
-import "./chunk-6UB623BG.js";
+import "./chunk-FUCAK5RA.js";
+import "./chunk-NOPTG4GC.js";
+import "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
 export {
   buildIdentityMap,
   dotPathToJsonbExpr,

package/dist/{runtime-SX36HGBA.js → runtime-HLW365HP.js}

@@ -5,9 +5,9 @@ import {
   resetBackendSingleton,
   updateRecord,
   upsertRecord
-} from "./chunk-IMU2X3ZV.js";
-import "./chunk-YMUY55U2.js";
-import "./chunk-6UB623BG.js";
+} from "./chunk-NOPTG4GC.js";
+import "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
 export {
   addRecord,
   closeBackendIfCached,

package/dist/{schema-RJC2WQQ6.js → schema-G7XYVIZG.js}

@@ -3,12 +3,12 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-OLQ55K6B.js";
+} from "./chunk-FUCAK5RA.js";
 import {
   getBackend
-} from "./chunk-IMU2X3ZV.js";
-import "./chunk-YMUY55U2.js";
-import "./chunk-6UB623BG.js";
+} from "./chunk-NOPTG4GC.js";
+import "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
 
 // src/lib/memory/sync/schema.ts
 import pc from "picocolors";

package/dist/sql-6I4LWPZF.js

@@ -0,0 +1,12 @@
+import {
+  memSqlCommand,
+  syncSqlCommand
+} from "./chunk-IPAVHPRZ.js";
+import "./chunk-FUCAK5RA.js";
+import "./chunk-NOPTG4GC.js";
+import "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
+export {
+  memSqlCommand,
+  syncSqlCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "2.2.0",
+  "version": "2.3.1",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/dist/sql-SYCWUPNP.js

@@ -1,12 +0,0 @@
-import {
-  memSqlCommand,
-  syncSqlCommand
-} from "./chunk-GKAIRI4Y.js";
-import "./chunk-OLQ55K6B.js";
-import "./chunk-IMU2X3ZV.js";
-import "./chunk-YMUY55U2.js";
-import "./chunk-6UB623BG.js";
-export {
-  memSqlCommand,
-  syncSqlCommand
-};