@withone/cli 2.3.0 → 2.3.1

package/dist/{chunk-WMVVWO6N.js → chunk-3HRC3IPE.js}

@@ -3,7 +3,7 @@ import {
   readConfig,
   setOpenAiApiKey,
   writeConfig
-} from "./chunk-GGDXUXLM.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/lib/memory/config.ts
 var DEFAULT_MEMORY_CONFIG = {

package/dist/{chunk-BWTPQPII.js → chunk-6FA7KUNQ.js}

@@ -5,7 +5,7 @@ import {
 import {
   getCacheTtl,
   homeDir
-} from "./chunk-GGDXUXLM.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/lib/flow-runner.ts
 import fs3 from "fs";
@@ -2285,7 +2285,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-YGRRUARS.js");
+  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-SFECNAO2.js");
   const { flow: subFlow, rootDir: subRootDir } = loadFlowWithMeta2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,

package/dist/{chunk-5MDUKW5N.js → chunk-FUCAK5RA.js}

@@ -1,10 +1,10 @@
 import {
   getMemoryConfigOrDefault
-} from "./chunk-WMVVWO6N.js";
+} from "./chunk-3HRC3IPE.js";
 import {
   getOpenAiApiKey,
   readConfig
-} from "./chunk-GGDXUXLM.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/lib/output.ts
 import * as p from "@clack/prompts";

package/dist/{chunk-GGDXUXLM.js → chunk-HTXZZQ6U.js}

@@ -205,6 +205,12 @@ function updateApiBase(url) {
   delete config.whoamiApiBase;
   writeConfig(config);
 }
+function withKnowledgeAgent(accessControl, on) {
+  const next = { ...accessControl };
+  if (on) next.knowledgeAgent = true;
+  else delete next.knowledgeAgent;
+  return Object.keys(next).length ? next : void 0;
+}
 function saveCredentials(apiKey, scope, opts) {
   const existing = scope === "project" ? readProjectConfig() : readGlobalConfig();
   const next = {
@@ -217,7 +223,14 @@ function saveCredentials(apiKey, scope, opts) {
   };
   if (opts.keyName) next.apiKeyName = opts.keyName;
   else delete next.apiKeyName;
-  if (opts.knowledgeOnly) next.accessControl = { ...existing?.accessControl, knowledgeAgent: true };
+  const userSetKnowledge = !!existing?.accessControl?.knowledgeAgent && !existing.knowledgeAgentFromGrant;
+  if (opts.knowledgeOnly !== void 0 && !userSetKnowledge) {
+    const accessControl = withKnowledgeAgent(existing?.accessControl, opts.knowledgeOnly);
+    if (accessControl) next.accessControl = accessControl;
+    else delete next.accessControl;
+    if (opts.knowledgeOnly) next.knowledgeAgentFromGrant = true;
+    else delete next.knowledgeAgentFromGrant;
+  }
   writeConfig(next, scope);
 }
 function getCacheTtl() {
@@ -250,6 +263,7 @@ function updateAccessControl(settings) {
   } else {
     config.accessControl = cleaned;
   }
+  delete config.knowledgeAgentFromGrant;
   writeConfig(config);
 }
 function getWhoAmI() {

package/dist/{chunk-V4LY2G2F.js → chunk-IPAVHPRZ.js}

@@ -3,10 +3,10 @@ import {
   isAgentMode,
   json,
   requireMemoryInit
-} from "./chunk-5MDUKW5N.js";
+} from "./chunk-FUCAK5RA.js";
 import {
   getBackend
-} from "./chunk-Y5JEZWWM.js";
+} from "./chunk-NOPTG4GC.js";
 
 // src/commands/mem/sql.ts
 async function memSqlCommand(sql) {

package/dist/{chunk-Y5JEZWWM.js → chunk-NOPTG4GC.js}

@@ -5,11 +5,11 @@ import {
   getMemoryConfig,
   getMemoryConfigOrDefault,
   updateMemoryConfig
-} from "./chunk-WMVVWO6N.js";
+} from "./chunk-3HRC3IPE.js";
 import {
   getOpenAiApiKey,
   homeDir
-} from "./chunk-GGDXUXLM.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/lib/memory/schema.ts
 var SCHEMA_VERSION = "2.3.1";

package/dist/{chunk-C7GJ5GUQ.js → chunk-SN6WYDOE.js}

@@ -6,11 +6,11 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-5MDUKW5N.js";
+} from "./chunk-FUCAK5RA.js";
 import {
   getBackend,
   upsertRecord
-} from "./chunk-Y5JEZWWM.js";
+} from "./chunk-NOPTG4GC.js";
 
 // src/commands/mem/migrate.ts
 import fs4 from "fs";

package/dist/{embedding-DRTGVWP3.js → embedding-C7FIKORV.js}

@@ -2,8 +2,8 @@ import {
   defaultSearchableText,
   embed,
   embedBatch
-} from "./chunk-WMVVWO6N.js";
-import "./chunk-GGDXUXLM.js";
+} from "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
 export {
   defaultSearchableText,
   embed,

package/dist/{flow-runner-YGRRUARS.js → flow-runner-SFECNAO2.js}

@@ -12,9 +12,9 @@ import {
   stripStepsAlias,
   summarizeFlowInputs,
   walkSteps
-} from "./chunk-BWTPQPII.js";
+} from "./chunk-6FA7KUNQ.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-GGDXUXLM.js";
+import "./chunk-HTXZZQ6U.js";
 export {
   FlowRunner,
   collectStepTypes,

package/dist/index.js

@@ -28,10 +28,10 @@ import {
   validateActionInput,
   walkSteps,
   writeCache
-} from "./chunk-BWTPQPII.js";
+} from "./chunk-6FA7KUNQ.js";
 import {
   memSqlCommand
-} from "./chunk-V4LY2G2F.js";
+} from "./chunk-IPAVHPRZ.js";
 import {
   collectIdentityKeys,
   countRecords,
@@ -62,7 +62,7 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-C7GJ5GUQ.js";
+} from "./chunk-SN6WYDOE.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -86,7 +86,7 @@ import {
   semanticSearchUpgradeLine,
   setAgentMode,
   silenceWarningsInAgentMode
-} from "./chunk-5MDUKW5N.js";
+} from "./chunk-FUCAK5RA.js";
 import {
   SCHEMA_VERSION,
   addRecord,
@@ -96,7 +96,7 @@ import {
   listBackendPlugins,
   loadBackendFromConfig,
   updateRecord
-} from "./chunk-Y5JEZWWM.js";
+} from "./chunk-NOPTG4GC.js";
 import {
   DEFAULT_MEMORY_CONFIG,
   defaultSearchableText,
@@ -106,7 +106,7 @@ import {
   memoryConfigExists,
   setOpenAiApiKey,
   updateMemoryConfig
-} from "./chunk-WMVVWO6N.js";
+} from "./chunk-3HRC3IPE.js";
 import {
   appendAnalyticsQueue,
   appendUsageLog,
@@ -143,7 +143,7 @@ import {
   writeConfig,
   writeUsageLog,
   writeUsageState
-} from "./chunk-GGDXUXLM.js";
+} from "./chunk-HTXZZQ6U.js";
 
 // src/cli.ts
 import { createRequire as createRequire3 } from "module";
@@ -1794,7 +1794,7 @@ async function nonInteractiveInit(options) {
   let apiKey;
   let keyName;
   let grant;
-  let knowledgeOnly = false;
+  let knowledgeOnly;
   let whoami;
   if (auth === "browser") {
     const result = await browserLogin({ scope });
@@ -2066,7 +2066,7 @@ async function handleUpdateKey(statuses, scope) {
   let newKey;
   let keyName;
   let grant;
-  let knowledgeOnly = false;
+  let knowledgeOnly;
   let whoamiResult;
   if (authMethod === "browser") {
     const result = await browserLogin({ scope });
@@ -2136,7 +2136,8 @@ ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
     ].join("\n"),
     "Account"
   );
-  const ac = getAccessControl();
+  saveCredentials(newKey, scope, { keyName, whoami: whoamiResult, knowledgeOnly });
+  const ac = (scope === "project" ? readProjectConfig() : readGlobalConfig())?.accessControl ?? {};
   const reinstalled = [];
   for (const s of statuses) {
     if (s.globalMcp) {
@@ -2148,7 +2149,6 @@ ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
       reinstalled.push(`${s.agent.name} (project)`);
     }
   }
-  saveCredentials(newKey, scope, { keyName, whoami: whoamiResult, knowledgeOnly });
   if (reinstalled.length > 0) {
     p3.log.success(`Updated MCP configs: ${reinstalled.join(", ")}`);
   }
@@ -7413,7 +7413,7 @@ async function syncModel(api, profile, options) {
         updateModelState(platform, model, { status: "failed", pagesProcessed, lastCursor }),
         (async () => {
           try {
-            const { getBackend: getBackend2 } = await import("./runtime-DTKLN6KX.js");
+            const { getBackend: getBackend2 } = await import("./runtime-HLW365HP.js");
             const backend = await getBackend2();
             await Promise.race([
               backend.close(),
@@ -7779,7 +7779,7 @@ async function syncModel(api, profile, options) {
         db.exec(`DROP TABLE IF EXISTS _seen_ids`);
       }
       if (options.toMemory !== false) {
-        const backend = await (await import("./runtime-DTKLN6KX.js")).getBackend();
+        const backend = await (await import("./runtime-HLW365HP.js")).getBackend();
         const type = `${platform}/${model}`;
         const existing = await backend.listKeysByType(type);
         const sourcePrefix = `${type}:`;
@@ -7880,7 +7880,7 @@ async function syncModel(api, profile, options) {
     let statusCounts;
     if (options.toMemory !== false) {
       try {
-        const backend = await (await import("./runtime-DTKLN6KX.js")).getBackend();
+        const backend = await (await import("./runtime-HLW365HP.js")).getBackend();
         const typeName = `${platform}/${model}`;
         const [active, archived] = await Promise.all([
           backend.count(typeName, { status: "active" }),
@@ -9602,7 +9602,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-5GNNGVNH.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-6I4LWPZF.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -9680,7 +9680,7 @@ async function syncDeleteCommand(platformModel, options) {
 async function maybeAutoMigrateLegacy(platform, models) {
   const dbSize = getDatabaseSize(platform);
   if (!dbSize || dbSize === "0 B") return;
-  const { getBackend: getBackend2 } = await import("./runtime-DTKLN6KX.js");
+  const { getBackend: getBackend2 } = await import("./runtime-HLW365HP.js");
   const backend = await getBackend2();
   let memoryHasData = false;
   for (const model of models) {
@@ -9696,7 +9696,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-DWRR6FWW.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-GN3I6EZM.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -9705,7 +9705,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p6.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-DWRR6FWW.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-GN3I6EZM.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -9766,7 +9766,7 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
   const state = await readSyncState();
-  const { getBackend: getBackend2 } = await import("./runtime-DTKLN6KX.js");
+  const { getBackend: getBackend2 } = await import("./runtime-HLW365HP.js");
   const backend = await getBackend2();
   const syncs = await Promise.all(profiles.map(async (p9) => {
     const modelState = state[p9.platform]?.[p9.model];
@@ -10042,7 +10042,7 @@ function registerSyncSubcommands(sync) {
     await syncSqlCommand(platformModel, sql);
   });
   sync.command("schema <platform/model>").description("Inspect the JSON structure of synced records (field paths, types, examples) \u2014 useful before writing `sync sql` queries").action(async (platformModel) => {
-    const { syncSchemaCommand } = await import("./schema-SQA46NFA.js");
+    const { syncSchemaCommand } = await import("./schema-G7XYVIZG.js");
     await syncSchemaCommand(platformModel);
   });
   sync.command("delete <platform/model>").description('Delete records from local sync data (e.g. one sync delete notion/pages --id "abc-123")').option("--id <value>", "Delete record by ID").option("--where <conditions>", 'Delete records matching conditions (e.g. "status=archived")').option("--where-sql <predicate>", `Delete using a raw SQL WHERE clause (e.g. "json_extract(data, '$.type') = 'promotion'")`).option("--yes", "Skip confirmation prompt").action(async (platformModel, options) => {
@@ -10819,7 +10819,7 @@ async function memDoctorCommand() {
   }
   if (cfg.embedding.provider === "openai") {
     try {
-      const { embed: embed2 } = await import("./embedding-DRTGVWP3.js");
+      const { embed: embed2 } = await import("./embedding-C7FIKORV.js");
       const result = await embed2("connectivity check");
       checks.push({
         name: "OpenAI embedding provider reachable",

package/dist/{migrate-DWRR6FWW.js → migrate-GN3I6EZM.js}

@@ -3,12 +3,12 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-C7GJ5GUQ.js";
+} from "./chunk-SN6WYDOE.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-5MDUKW5N.js";
-import "./chunk-Y5JEZWWM.js";
-import "./chunk-WMVVWO6N.js";
-import "./chunk-GGDXUXLM.js";
+import "./chunk-FUCAK5RA.js";
+import "./chunk-NOPTG4GC.js";
+import "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
 export {
   buildIdentityMap,
   dotPathToJsonbExpr,

package/dist/{runtime-DTKLN6KX.js → runtime-HLW365HP.js}

@@ -5,9 +5,9 @@ import {
   resetBackendSingleton,
   updateRecord,
   upsertRecord
-} from "./chunk-Y5JEZWWM.js";
-import "./chunk-WMVVWO6N.js";
-import "./chunk-GGDXUXLM.js";
+} from "./chunk-NOPTG4GC.js";
+import "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
 export {
   addRecord,
   closeBackendIfCached,

package/dist/{schema-SQA46NFA.js → schema-G7XYVIZG.js}

@@ -3,12 +3,12 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-5MDUKW5N.js";
+} from "./chunk-FUCAK5RA.js";
 import {
   getBackend
-} from "./chunk-Y5JEZWWM.js";
-import "./chunk-WMVVWO6N.js";
-import "./chunk-GGDXUXLM.js";
+} from "./chunk-NOPTG4GC.js";
+import "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
 
 // src/lib/memory/sync/schema.ts
 import pc from "picocolors";

package/dist/sql-6I4LWPZF.js

@@ -0,0 +1,12 @@
+import {
+  memSqlCommand,
+  syncSqlCommand
+} from "./chunk-IPAVHPRZ.js";
+import "./chunk-FUCAK5RA.js";
+import "./chunk-NOPTG4GC.js";
+import "./chunk-3HRC3IPE.js";
+import "./chunk-HTXZZQ6U.js";
+export {
+  memSqlCommand,
+  syncSqlCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "2.3.0",
+  "version": "2.3.1",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/dist/sql-5GNNGVNH.js

@@ -1,12 +0,0 @@
-import {
-  memSqlCommand,
-  syncSqlCommand
-} from "./chunk-V4LY2G2F.js";
-import "./chunk-5MDUKW5N.js";
-import "./chunk-Y5JEZWWM.js";
-import "./chunk-WMVVWO6N.js";
-import "./chunk-GGDXUXLM.js";
-export {
-  memSqlCommand,
-  syncSqlCommand
-};