@withone/cli 2.3.1 → 2.4.0

package/dist/index.js

@@ -31,7 +31,7 @@ import {
 } from "./chunk-6FA7KUNQ.js";
 import {
   memSqlCommand
-} from "./chunk-IPAVHPRZ.js";
+} from "./chunk-7FPQOAQ4.js";
 import {
   collectIdentityKeys,
   countRecords,
@@ -62,7 +62,7 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-SN6WYDOE.js";
+} from "./chunk-XKUTG7JD.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -86,7 +86,7 @@ import {
   semanticSearchUpgradeLine,
   setAgentMode,
   silenceWarningsInAgentMode
-} from "./chunk-FUCAK5RA.js";
+} from "./chunk-NOFJ4NYD.js";
 import {
   SCHEMA_VERSION,
   addRecord,
@@ -147,7 +147,7 @@ import {
 
 // src/cli.ts
 import { createRequire as createRequire3 } from "module";
-import path13 from "path";
+import path15 from "path";
 import { Command } from "commander";
 
 // src/commands/init.ts
@@ -962,24 +962,24 @@ async function configCommand() {
       p.outro("No changes made.");
       return;
     }
-    const spinner4 = p.spinner();
-    spinner4.start("Validating API key...");
+    const spinner = createSpinner();
+    spinner.start("Validating API key...");
     let isValid = false;
     try {
       const api = new OneApi(apiKey, `${normalized}/v1`);
       isValid = Boolean(await api.validateApiKey());
     } catch (err) {
-      spinner4.stop("Connection failed");
+      spinner.stop("Connection failed");
       const msg = err instanceof Error ? err.message : String(err);
       p.log.error(`Could not reach ${pc2.cyan(normalized)}: ${msg}`);
       return;
     }
     if (!isValid) {
-      spinner4.stop("Invalid API key");
+      spinner.stop("Invalid API key");
       p.log.error(`Invalid API key for ${pc2.cyan(normalized)}.`);
       return;
     }
-    spinner4.stop("API key validated");
+    spinner.stop("API key validated");
     updateApiBase(normalized);
     newApiKey = apiKey;
   } else if (isCustomBase) {
@@ -998,24 +998,24 @@ async function configCommand() {
       p.outro("No changes made.");
       return;
     }
-    const spinner4 = p.spinner();
-    spinner4.start("Validating API key...");
+    const spinner = createSpinner();
+    spinner.start("Validating API key...");
     let isValid = false;
     try {
       const api = new OneApi(apiKey, "https://api.withone.ai/v1");
       isValid = Boolean(await api.validateApiKey());
     } catch (err) {
-      spinner4.stop("Connection failed");
+      spinner.stop("Connection failed");
       const msg = err instanceof Error ? err.message : String(err);
       p.log.error(`Could not reach ${pc2.cyan("https://api.withone.ai")}: ${msg}`);
       return;
     }
     if (!isValid) {
-      spinner4.stop("Invalid API key");
+      spinner.stop("Invalid API key");
       p.log.error(`Invalid API key. Get a valid key at ${getApiKeyUrl()}`);
       return;
     }
-    spinner4.stop("API key validated");
+    spinner.stop("API key validated");
     updateApiBase(null);
     newApiKey = apiKey;
   }
@@ -1053,16 +1053,16 @@ async function configCommand() {
   p.outro("Configuration updated.");
 }
 async function selectConnections(apiKey) {
-  const spinner4 = p.spinner();
-  spinner4.start("Fetching connections...");
+  const spinner = createSpinner();
+  spinner.start("Fetching connections...");
   let connections;
   try {
     const api = new OneApi(apiKey, getApiBase());
     const rawConnections = await api.listConnections();
     connections = rawConnections.map((c) => ({ platform: c.platform, key: c.key }));
-    spinner4.stop(`Found ${connections.length} connection(s)`);
+    spinner.stop(`Found ${connections.length} connection(s)`);
   } catch {
-    spinner4.stop("Could not fetch connections");
+    spinner.stop("Could not fetch connections");
     const manual = await p.text({
       message: "Enter connection keys manually (comma-separated):",
       placeholder: "conn_key_1, conn_key_2",
@@ -1635,7 +1635,7 @@ ${describeInstallContext(context)}`
     await open2(authUrl);
   } catch {
   }
-  spin.start("Waiting for authentication... (timeout: 5 min)");
+  spin.start("Waiting for browser sign-in (5 min timeout)");
   const timeout = new Promise((_, reject) => {
     const timer = setTimeout(() => {
       reject(new Error("timeout"));
@@ -1686,25 +1686,25 @@ async function loginCommand() {
   let targetScope = "global";
   const existingKey = getApiKey();
   if (existingKey) {
-    const pc17 = (await import("picocolors")).default;
+    const pc18 = (await import("picocolors")).default;
     const resolved = resolveConfig();
     const whoami2 = resolved.config?.whoami;
     const env2 = getEnvFromApiKey(existingKey);
-    const envLabel2 = env2 === "test" ? pc17.yellow("test") : pc17.green("live");
-    const currentScope = resolved.scope === "project" ? pc17.cyan("local config") : pc17.magenta("global config");
+    const envLabel2 = env2 === "test" ? pc18.yellow("test") : pc18.green("live");
+    const currentScope = resolved.scope === "project" ? pc18.cyan("local config") : pc18.magenta("global config");
     const lines = ["You are already logged in.", ""];
     if (whoami2) {
       const contextParts2 = [];
       if (whoami2.organization) contextParts2.push(whoami2.organization.name);
       if (whoami2.project) contextParts2.push(whoami2.project.name);
       const scopeDisplay2 = contextParts2.length > 0 ? contextParts2.join(" / ") : "Personal";
-      lines.push(`${pc17.bold(scopeDisplay2)} ${pc17.dim("\xB7")} ${envLabel2}`);
-      lines.push(`${whoami2.user.name} ${pc17.dim(`(${whoami2.user.email})`)}`);
-      if (whoami2.organization) lines.push(`${pc17.dim("Org:")} ${whoami2.organization.name}`);
-      if (whoami2.project) lines.push(`${pc17.dim("Project:")} ${whoami2.project.name}`);
+      lines.push(`${pc18.bold(scopeDisplay2)} ${pc18.dim("\xB7")} ${envLabel2}`);
+      lines.push(`${whoami2.user.name} ${pc18.dim(`(${whoami2.user.email})`)}`);
+      if (whoami2.organization) lines.push(`${pc18.dim("Org:")} ${whoami2.organization.name}`);
+      if (whoami2.project) lines.push(`${pc18.dim("Project:")} ${whoami2.project.name}`);
     }
     lines.push("");
-    lines.push(`${pc17.dim("Stored in")} ${currentScope}`);
+    lines.push(`${pc18.dim("Stored in")} ${currentScope}`);
     p2.note(lines.join("\n"));
     const scopeChoice = await p2.select({
       message: "Where would you like to log in?",
@@ -1723,42 +1723,42 @@ async function loginCommand() {
   if (!result) return;
   const { apiKey, whoami, keyName, grant, knowledgeOnly } = result;
   saveCredentials(apiKey, targetScope, { keyName, whoami, knowledgeOnly });
-  const pc16 = (await import("picocolors")).default;
+  const pc17 = (await import("picocolors")).default;
   const env = getEnvFromApiKey(apiKey);
   const contextParts = [];
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
-  const configLabel = targetScope === "project" ? pc16.cyan("local config") : pc16.magenta("global config");
+  const envLabel = env === "test" ? pc17.yellow("test") : pc17.green("live");
+  const configLabel = targetScope === "project" ? pc17.cyan("local config") : pc17.magenta("global config");
   const infoLines = [
-    `${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`,
-    `${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`
+    `${pc17.bold(scopeDisplay)} ${pc17.dim("\xB7")} ${envLabel}`,
+    `${whoami.user.name} ${pc17.dim(`(${whoami.user.email})`)}`
   ];
-  if (keyName) infoLines.push(`${pc16.dim("Key:")} ${keyName}`);
-  infoLines.push(...grantNoteLines(grant, pc16.dim("Access:")));
-  if (whoami.organization) infoLines.push(`${pc16.dim("Org:")} ${whoami.organization.name}`);
-  if (whoami.project) infoLines.push(`${pc16.dim("Project:")} ${whoami.project.name}`);
+  if (keyName) infoLines.push(`${pc17.dim("Key:")} ${keyName}`);
+  infoLines.push(...grantNoteLines(grant, pc17.dim("Access:")));
+  if (whoami.organization) infoLines.push(`${pc17.dim("Org:")} ${whoami.organization.name}`);
+  if (whoami.project) infoLines.push(`${pc17.dim("Project:")} ${whoami.project.name}`);
   infoLines.push("");
-  infoLines.push(`${pc16.dim("Stored in")} ${configLabel}`);
+  infoLines.push(`${pc17.dim("Stored in")} ${configLabel}`);
   p2.note(infoLines.join("\n"), "Logged in");
   console.log();
-  console.log(`  ${pc16.dim("Next steps:")}`);
-  console.log(`  ${pc16.cyan("one add <platform>")}  ${pc16.dim("\u2014")} Connect a platform (e.g. gmail, slack, stripe)`);
+  console.log(`  ${pc17.dim("Next steps:")}`);
+  console.log(`  ${pc17.cyan("one add <platform>")}  ${pc17.dim("\u2014")} Connect a platform (e.g. gmail, slack, stripe)`);
   console.log();
-  console.log(pc16.bold("  Copy-paste this to your AI agent:"));
+  console.log(pc17.bold("  Copy-paste this to your AI agent:"));
   console.log();
-  console.log(pc16.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log(pc16.cyan("  \u2502"));
-  console.log(pc16.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc16.cyan("  \u2502  lets you interact with 750+ third-party platforms (Gmail,"));
-  console.log(pc16.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
-  console.log(pc16.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
-  console.log(pc16.cyan("  \u2502  third-party platform or external service, use the `one`"));
-  console.log(pc16.cyan("  \u2502  skill. Please save this to your project instructions or"));
-  console.log(pc16.cyan("  \u2502  memory so you remember it in future conversations."));
-  console.log(pc16.cyan("  \u2502"));
-  console.log(pc16.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc17.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc17.cyan("  \u2502"));
+  console.log(pc17.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
+  console.log(pc17.cyan("  \u2502  lets you interact with 750+ third-party platforms (Gmail,"));
+  console.log(pc17.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
+  console.log(pc17.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
+  console.log(pc17.cyan("  \u2502  third-party platform or external service, use the `one`"));
+  console.log(pc17.cyan("  \u2502  skill. Please save this to your project instructions or"));
+  console.log(pc17.cyan("  \u2502  memory so you remember it in future conversations."));
+  console.log(pc17.cyan("  \u2502"));
+  console.log(pc17.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log();
   p2.outro("Happy building!");
 }
@@ -2109,16 +2109,16 @@ ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
       process.exit(0);
     }
     newKey = inputKey;
-    const spinner4 = p3.spinner();
-    spinner4.start("Validating API key...");
+    const spinner = createSpinner();
+    spinner.start("Validating API key...");
     const api = new OneApi(newKey, getApiBase());
     const validated = await api.validateApiKey();
     if (!validated) {
-      spinner4.stop("Invalid API key");
+      spinner.stop("Invalid API key");
       p3.cancel(`Invalid API key. Get a valid key at ${getApiKeyUrl()}`);
       process.exit(1);
     }
-    spinner4.stop("API key validated");
+    spinner.stop("API key validated");
     whoamiResult = validated;
   }
   const env = getEnvFromApiKey(newKey);
@@ -2335,10 +2335,10 @@ async function promptSkillInstall() {
     p3.log.info("No agents selected.");
     return false;
   }
-  const spinner4 = p3.spinner();
-  spinner4.start("Installing skill...");
+  const spinner = createSpinner();
+  spinner.start("Installing skill...");
   const { installed, failed } = installSkillForAgents(selectedIds);
-  spinner4.stop(installed.length > 0 ? "Skill installed" : "Installation failed");
+  spinner.stop(installed.length > 0 ? "Skill installed" : "Installation failed");
   for (const name of installed) {
     p3.log.success(`${name}: ${pc4.green("\u2713")} skill installed`);
   }
@@ -2434,16 +2434,16 @@ ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
       process.exit(0);
     }
     apiKey = inputKey;
-    const spinner4 = p3.spinner();
-    spinner4.start("Validating API key...");
+    const spinner = createSpinner();
+    spinner.start("Validating API key...");
     const api = new OneApi(apiKey, getApiBase());
     const whoami = await api.validateApiKey();
     if (!whoami) {
-      spinner4.stop("Invalid API key");
+      spinner.stop("Invalid API key");
       p3.cancel(`Invalid API key. Get a valid key at ${getApiKeyUrl()}`);
       process.exit(1);
     }
-    spinner4.stop("API key validated");
+    spinner.stop("API key validated");
     const env2 = getEnvFromApiKey(apiKey);
     const contextParts = [];
     if (whoami.organization) contextParts.push(whoami.organization.name);
@@ -2558,16 +2558,16 @@ async function promptConnectIntegrations(apiKey, connParams) {
       p3.log.warn("Could not open browser automatically.");
       p3.note(url, "Open manually");
     }
-    const spinner4 = p3.spinner();
-    spinner4.start("Waiting for connection... (complete auth in browser)");
+    const spinner = createSpinner();
+    spinner.start("Waiting for connection... (complete auth in browser)");
     try {
       await api.waitForConnection(platform, 5 * 60 * 1e3, 5e3);
-      spinner4.stop(`${label} connected!`);
+      spinner.stop(`${label} connected!`);
       p3.log.success(`${pc4.green("\u2713")} ${label} is now available to your AI agents`);
       connected.push(platform);
       first = false;
     } catch (error2) {
-      spinner4.stop("Connection timed out");
+      spinner.stop("Connection timed out");
       if (error2 instanceof TimeoutError) {
         p3.log.warn(`No worries. Connect later with: ${pc4.cyan(`one add ${platform}`)}`);
       }
@@ -2719,14 +2719,14 @@ async function connectionAddCommand(platformArg, options) {
     process.exit(1);
   }
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = p4.spinner();
-  spinner4.start("Loading platforms...");
+  const spinner = createSpinner();
+  spinner.start("Loading platforms...");
   let platforms;
   try {
     platforms = await api.listPlatforms();
-    spinner4.stop(`${platforms.length} platforms available`);
+    spinner.stop(`${platforms.length} platforms available`);
   } catch (error2) {
-    spinner4.stop("Failed to load platforms");
+    spinner.stop("Failed to load platforms");
     p4.cancel(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
     process.exit(1);
   }
@@ -2798,14 +2798,14 @@ Run ${pc6.cyan("one platforms")} to see available platforms.`);
     p4.note(`Open this URL manually:
 ${url}`);
   }
-  const pollSpinner = p4.spinner();
+  const pollSpinner = createSpinner();
   pollSpinner.start("Waiting for connection... (complete auth in browser)");
   try {
     const connection2 = await api.waitForConnection(platform, 5 * 60 * 1e3, 5e3);
     pollSpinner.stop(`${platform} connected!`);
     const tag = options?.tag?.trim();
     if (tag) {
-      const tagSpinner = p4.spinner();
+      const tagSpinner = createSpinner();
       tagSpinner.start(`Tagging connection "${tag}"...`);
       try {
         await api.updateConnectionTags(connection2.id, [tag]);
@@ -2844,8 +2844,8 @@ async function connectionListCommand(options) {
     error("Not configured. Run `one init` first.");
   }
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Loading connections...");
+  const spinner = createSpinner();
+  spinner.start("Loading connections...");
   try {
     const allConnections = await api.listConnections();
     const ac = getAccessControlFromAllSources();
@@ -2887,7 +2887,7 @@ async function connectionListCommand(options) {
       return;
     }
     const displayed = limitArg !== void 0 ? filtered.slice(0, limitArg) : filtered;
-    spinner4.stop(`${filtered.length} connection${filtered.length === 1 ? "" : "s"} found`);
+    spinner.stop(`${filtered.length} connection${filtered.length === 1 ? "" : "s"} found`);
     if (filtered.length === 0) {
       if (searchQuery) {
         p4.note(
@@ -2949,7 +2949,7 @@ Change it with: ${pc6.cyan("one config")}`, "Access");
       p4.note(`Add more with: ${pc6.cyan("one connection add <platform>")}`, "Tip");
     }
   } catch (error2) {
-    spinner4.stop("Failed to load connections");
+    spinner.stop("Failed to load connections");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
@@ -2959,13 +2959,13 @@ async function connectionDeleteCommand(connectionKey, options) {
     error("Not configured. Run `one init` first.");
   }
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Finding connection...");
+  const spinner = createSpinner();
+  spinner.start("Finding connection...");
   let allConnections;
   try {
     allConnections = await api.listConnections();
   } catch (error2) {
-    spinner4.stop("Failed to load connections");
+    spinner.stop("Failed to load connections");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
     return;
   }
@@ -2974,12 +2974,12 @@ async function connectionDeleteCommand(connectionKey, options) {
   const connections = allowedKeys.includes("*") ? allConnections : allConnections.filter((conn) => allowedKeys.includes(conn.key));
   const match = connections.find((conn) => conn.key === connectionKey);
   if (!match) {
-    spinner4.stop("Connection not found");
+    spinner.stop("Connection not found");
     error(`No connection found with key: ${connectionKey}`);
     return;
   }
   const connection2 = match;
-  spinner4.stop(`Found ${connection2.platform} (${connection2.state})`);
+  spinner.stop(`Found ${connection2.platform} (${connection2.state})`);
   if (!isAgentMode() && !options?.force) {
     console.log();
     console.log(`  ${getStatusIndicator(connection2.state)} ${connection2.platform}  ${pc6.dim(connection2.key)}`);
@@ -3068,11 +3068,11 @@ async function platformsCommand(options) {
     options.json = true;
   }
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Loading platforms...");
+  const spinner = createSpinner();
+  spinner.start("Loading platforms...");
   try {
     const platforms = await api.listPlatforms();
-    spinner4.stop(`${platforms.length} platforms available`);
+    spinner.stop(`${platforms.length} platforms available`);
     let filtered = platforms;
     if (options.category) {
       filtered = platforms.filter((plat) => (plat.category || "Other") === options.category);
@@ -3126,7 +3126,7 @@ async function platformsCommand(options) {
     console.log();
     p5.note(`Connect with: ${pc7.cyan("one connection add <platform>")}`, "Tip");
   } catch (error2) {
-    spinner4.stop("Failed to load platforms");
+    spinner.stop("Failed to load platforms");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
@@ -3789,7 +3789,7 @@ var CUSTOM_ACTION_NOTE = '\n\nThis is a custom action: ALSO include "connectionK
 function codeGuideAction(action, knowledge, platform, tags, apiBase) {
   const base = apiBase.replace(/\/$/, "");
   const method = action.method.toUpperCase();
-  const path14 = action.path.startsWith("/") ? action.path : `/${action.path}`;
+  const path16 = action.path.startsWith("/") ? action.path : `/${action.path}`;
   const connEnv = `ONE_${platformEnvSegment(platform)}_CONNECTION_KEY`;
   const customNote = tags.includes("custom") ? CUSTOM_ACTION_NOTE : "";
   return `### ${actionHeading(action)}
@@ -3798,7 +3798,7 @@ function codeGuideAction(action, knowledge, platform, tags, apiBase) {
 ${knowledge ?? NO_KNOWLEDGE}
 
 ## Calling this action from code
-URL:    ${base}/passthrough${path14}
+URL:    ${base}/passthrough${path16}
 Method: ${method}
 Headers:
 - x-one-secret: the value of the ONE_SECRET env var
@@ -3809,7 +3809,7 @@ Headers:
 Environment variables: ONE_SECRET (their One API key) and ${connEnv} (the key of their ${platform} connection), both from the One dashboard.
 
 \`\`\`typescript
-const response = await fetch("${base}/passthrough${path14}", {
+const response = await fetch("${base}/passthrough${path16}", {
 method: "${method}",
 headers: {
 "x-one-secret": process.env.ONE_SECRET,
@@ -3954,8 +3954,8 @@ async function actionsFindCommand(pairs, options) {
   const { apiKey, permissions, connectionKeys, actionIds, knowledgeAgent } = getConfig();
   const api = new OneApi(apiKey, getApiBase());
   const settings = { knowledgeAgent, permissions, actionIds, connectionKeys, apiBase: getApiBase() };
-  const spinner4 = createSpinner();
-  spinner4.start(`Finding actions for ${requests.length} intent${requests.length === 1 ? "" : "s"}...`);
+  const spinner = createSpinner();
+  spinner.start(`Finding actions for ${requests.length} intent${requests.length === 1 ? "" : "s"}...`);
   try {
     const result = await find(
       requests,
@@ -3968,12 +3968,12 @@ async function actionsFindCommand(pairs, options) {
       json(result);
       return;
     }
-    spinner4.stop("Found");
+    spinner.stop("Found");
     console.log();
     console.log(renderFind(result));
     console.log();
   } catch (error2) {
-    spinner4.stop("Find failed");
+    spinner.stop("Find failed");
     error(`Error: ${failure(error2)}`);
   }
 }
@@ -4002,20 +4002,20 @@ async function actionsLoadCommand(actionIds, options) {
   const { apiKey, permissions, connectionKeys, actionIds: allowed, knowledgeAgent } = getConfig();
   const api = new OneApi(apiKey, getApiBase());
   const settings = { knowledgeAgent, permissions, actionIds: allowed, connectionKeys, apiBase: getApiBase() };
-  const spinner4 = createSpinner();
-  spinner4.start(`Loading ${actionIds.length === 1 ? "the action" : `${actionIds.length} actions`}...`);
+  const spinner = createSpinner();
+  spinner.start(`Loading ${actionIds.length === 1 ? "the action" : `${actionIds.length} actions`}...`);
   try {
     const result = await load(actionIds, options, findDeps(api, connectionKeys, options.cache !== false), settings);
     if (isAgentMode()) {
       json(result);
       return;
     }
-    spinner4.stop("Loaded");
+    spinner.stop("Loaded");
     console.log();
     console.log(renderLoad(result));
     console.log();
   } catch (error2) {
-    spinner4.stop("Load failed");
+    spinner.stop("Load failed");
     error(`Error: ${failure(error2)}`);
   }
 }
@@ -4034,17 +4034,17 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
     error(`Connection key "${connectionKey}" is not allowed.`);
   }
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Resolving action details...");
+  const spinner = createSpinner();
+  spinner.start("Resolving action details...");
   try {
     const { details: actionDetails, cacheHit: preflightCacheHit } = await resolveActionDetails(api, actionId, { useCache: options.cache !== false });
     if (!isMethodAllowed(actionDetails.method, permissions)) {
-      spinner4.stop("Permission denied");
+      spinner.stop("Permission denied");
       error(
         `Method "${actionDetails.method}" is not allowed under "${permissions}" permission level.`
       );
     }
-    spinner4.stop(
+    spinner.stop(
       `Action: ${actionDetails.title} [${actionDetails.method}]` + (preflightCacheHit ? pc8.dim(" (cached)") : "")
     );
     const data = options.data ? parseJsonArg2(options.data, "--data") : void 0;
@@ -4054,7 +4054,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
     if (!options.skipValidation) {
       const validation = validateActionInput(actionDetails, { data, pathVariables, queryParams });
       if (!validation.valid) {
-        spinner4.stop("Validation failed");
+        spinner.stop("Validation failed");
         if (isAgentMode()) {
           json({
             error: "Validation failed: missing required parameters",
@@ -4075,7 +4075,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
       }
     }
     if (options.mock) {
-      spinner4.stop("Mock \u2014 returning example response");
+      spinner.stop("Mock \u2014 returning example response");
       const mockResponse = actionDetails.ioSchema?.ioExample?.output ?? null;
       if (isAgentMode()) {
         json({
@@ -4159,7 +4159,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
       }
     }
   } catch (error2) {
-    spinner4.stop("Execution failed");
+    spinner.stop("Execution failed");
     error(
       `Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`
     );
@@ -4554,32 +4554,32 @@ function validateStepsArray(steps, pathPrefix, errors) {
   const validTypes = FLOW_SCHEMA.stepTypes.map((st) => st.type);
   for (let i = 0; i < steps.length; i++) {
     const step = steps[i];
-    const path14 = `${pathPrefix}[${i}]`;
+    const path16 = `${pathPrefix}[${i}]`;
     if (!step || typeof step !== "object" || Array.isArray(step)) {
-      errors.push({ path: path14, message: "Step must be an object" });
+      errors.push({ path: path16, message: "Step must be an object" });
       continue;
     }
     const s = step;
     if (!s.id || typeof s.id !== "string") {
-      errors.push({ path: `${path14}.id`, message: 'Step must have a string "id"' });
+      errors.push({ path: `${path16}.id`, message: 'Step must have a string "id"' });
     }
     if (!s.name || typeof s.name !== "string") {
-      errors.push({ path: `${path14}.name`, message: 'Step must have a string "name"' });
+      errors.push({ path: `${path16}.name`, message: 'Step must have a string "name"' });
     }
     if (!s.type || !validTypes.includes(s.type)) {
-      errors.push({ path: `${path14}.type`, message: `Step type must be one of: ${validTypes.join(", ")}` });
+      errors.push({ path: `${path16}.type`, message: `Step type must be one of: ${validTypes.join(", ")}` });
       continue;
     }
     if (s.requires !== void 0) {
       if (!Array.isArray(s.requires)) {
-        errors.push({ path: `${path14}.requires`, message: '"requires" must be an array of selector strings (e.g. ["$.steps.foo.output.bar"])' });
+        errors.push({ path: `${path16}.requires`, message: '"requires" must be an array of selector strings (e.g. ["$.steps.foo.output.bar"])' });
       } else {
         for (let r = 0; r < s.requires.length; r++) {
           const sel = s.requires[r];
           if (typeof sel !== "string") {
-            errors.push({ path: `${path14}.requires[${r}]`, message: '"requires" entry must be a selector string' });
+            errors.push({ path: `${path16}.requires[${r}]`, message: '"requires" entry must be a selector string' });
           } else if (!sel.startsWith("$.")) {
-            errors.push({ path: `${path14}.requires[${r}]`, message: `"requires" entry "${sel}" must be a selector starting with "$." (e.g. "$.steps.foo.output.bar")` });
+            errors.push({ path: `${path16}.requires[${r}]`, message: `"requires" entry "${sel}" must be a selector starting with "$." (e.g. "$.steps.foo.output.bar")` });
           }
         }
       }
@@ -4587,7 +4587,7 @@ function validateStepsArray(steps, pathPrefix, errors) {
     if (s.onError && typeof s.onError === "object") {
       const oe = s.onError;
       if (!FLOW_SCHEMA.errorStrategies.includes(oe.strategy)) {
-        errors.push({ path: `${path14}.onError.strategy`, message: `Error strategy must be one of: ${FLOW_SCHEMA.errorStrategies.join(", ")}` });
+        errors.push({ path: `${path16}.onError.strategy`, message: `Error strategy must be one of: ${FLOW_SCHEMA.errorStrategies.join(", ")}` });
       }
     }
     const descriptor = getStepTypeDescriptor(s.type);
@@ -4597,14 +4597,14 @@ function validateStepsArray(steps, pathPrefix, errors) {
     if (!configObj || typeof configObj !== "object") {
       const hint = detectFlatConfigHint(s, descriptor);
       errors.push({
-        path: `${path14}.${configKey}`,
+        path: `${path16}.${configKey}`,
         message: `${capitalize(descriptor.type)} step must have a "${configKey}" config object${hint}`
       });
       continue;
     }
     const config2 = configObj;
     for (const [fieldName, fd] of Object.entries(descriptor.fields)) {
-      const fieldPath = `${path14}.${configKey}.${fieldName}`;
+      const fieldPath = `${path16}.${configKey}.${fieldName}`;
       const value = config2[fieldName];
       if (fd.required && (value === void 0 || value === null || value === "")) {
         errors.push({ path: fieldPath, message: `${capitalize(descriptor.type)} must have ${fd.type === "string" ? "a string" : fd.type === "array" ? "a" : "a"} "${fieldName}"` });
@@ -4637,30 +4637,30 @@ function validateStepsArray(steps, pathPrefix, errors) {
       }
     }
     if (descriptor.type === "action") {
-      validateConnectionForm(config2, `${path14}.${configKey}`, errors);
+      validateConnectionForm(config2, `${path16}.${configKey}`, errors);
     }
     if (descriptor.type === "code") {
       const hasSource = typeof config2.source === "string" && config2.source.length > 0;
       const hasModule = typeof config2.module === "string" && config2.module.length > 0;
       if (!hasSource && !hasModule) {
-        errors.push({ path: `${path14}.${configKey}`, message: 'Code step must define either "source" (inline JS) or "module" (path to .mjs file)' });
+        errors.push({ path: `${path16}.${configKey}`, message: 'Code step must define either "source" (inline JS) or "module" (path to .mjs file)' });
       } else if (hasSource && hasModule) {
-        errors.push({ path: `${path14}.${configKey}`, message: 'Code step cannot define both "source" and "module" \u2014 pick one' });
+        errors.push({ path: `${path16}.${configKey}`, message: 'Code step cannot define both "source" and "module" \u2014 pick one' });
       }
       if (hasModule) {
         const m = config2.module;
         if (m.startsWith("/") || /^[a-zA-Z]:[\\/]/.test(m)) {
-          errors.push({ path: `${path14}.${configKey}.module`, message: "Code module path must be relative to the flow folder (no absolute paths)" });
+          errors.push({ path: `${path16}.${configKey}.module`, message: "Code module path must be relative to the flow folder (no absolute paths)" });
         } else if (m.split(/[\\/]/).includes("..")) {
-          errors.push({ path: `${path14}.${configKey}.module`, message: 'Code module path must not escape the flow folder ("..")' });
+          errors.push({ path: `${path16}.${configKey}.module`, message: 'Code module path must not escape the flow folder ("..")' });
         } else if (!m.endsWith(".mjs")) {
-          errors.push({ path: `${path14}.${configKey}.module`, message: "Code module must be a .mjs file" });
+          errors.push({ path: `${path16}.${configKey}.module`, message: "Code module must be a .mjs file" });
         }
       }
       if (hasSource) {
         const syntaxError = checkCodeSourceSyntax(config2.source);
         if (syntaxError) {
-          errors.push({ path: `${path14}.${configKey}.source`, message: `Syntax error in code step: ${syntaxError}` });
+          errors.push({ path: `${path16}.${configKey}.source`, message: `Syntax error in code step: ${syntaxError}` });
         }
       }
     }
@@ -4732,16 +4732,16 @@ function validateStepIds(flow2) {
   function collectIds(steps, pathPrefix) {
     for (let i = 0; i < steps.length; i++) {
       const step = steps[i];
-      const path14 = `${pathPrefix}[${i}]`;
+      const path16 = `${pathPrefix}[${i}]`;
       if (seen.has(step.id)) {
-        errors.push({ path: `${path14}.id`, message: `Duplicate step ID: "${step.id}"` });
+        errors.push({ path: `${path16}.id`, message: `Duplicate step ID: "${step.id}"` });
       } else {
         seen.add(step.id);
       }
       for (const { configKey, fieldName } of nestedKeys) {
         const config2 = step[configKey];
         if (config2 && Array.isArray(config2[fieldName])) {
-          collectIds(config2[fieldName], `${path14}.${configKey}.${fieldName}`);
+          collectIds(config2[fieldName], `${path16}.${configKey}.${fieldName}`);
         }
       }
     }
@@ -4789,7 +4789,7 @@ function validateSelectorReferences(flow2, rootDir) {
     }
     return selectors;
   }
-  function checkSelectors(selectors, path14, precedingStepIds) {
+  function checkSelectors(selectors, path16, precedingStepIds) {
     for (const selector of selectors) {
       const parts = selector.split(".");
       if (parts.length < 3) continue;
@@ -4797,15 +4797,15 @@ function validateSelectorReferences(flow2, rootDir) {
       if (root === "input") {
         const inputName = parts[2];
         if (!inputNames.has(inputName)) {
-          errors.push({ path: path14, message: `Selector "${selector}" references undefined input "${inputName}"` });
+          errors.push({ path: path16, message: `Selector "${selector}" references undefined input "${inputName}"` });
         }
       } else if (root === "steps") {
         const stepId = parts[2].replace(/[\[\]]/g, "").split(/[\[\]]/)[0];
         if (!allStepIds.has(stepId)) {
-          errors.push({ path: path14, message: `Selector "${selector}" references undefined step "${stepId}"` });
+          errors.push({ path: path16, message: `Selector "${selector}" references undefined step "${stepId}"` });
         } else if (precedingStepIds && !precedingStepIds.has(stepId)) {
           errors.push({
-            path: path14,
+            path: path16,
             message: `Selector "${selector}" references step "${stepId}" which is declared after the current step. Steps execute in declaration order, so this will always resolve to undefined at runtime \u2014 move the dependency earlier in the steps array.`
           });
         }
@@ -4813,20 +4813,20 @@ function validateSelectorReferences(flow2, rootDir) {
     }
   }
   const EXPRESSION_FIELDS = /* @__PURE__ */ new Set(["condition.expression", "while.condition"]);
-  function checkOperatorsInSelectorField(value, path14) {
+  function checkOperatorsInSelectorField(value, path16) {
     if (typeof value === "string" && value.startsWith("$.")) {
       if (value.includes("||")) {
-        errors.push({ path: path14, message: `Selector "${value}" contains unsupported operator "||". Selectors in data fields use dot-path resolution, not JS evaluation. Use the "default" field on the input definition instead, or use a "code" step for complex expressions.` });
+        errors.push({ path: path16, message: `Selector "${value}" contains unsupported operator "||". Selectors in data fields use dot-path resolution, not JS evaluation. Use the "default" field on the input definition instead, or use a "code" step for complex expressions.` });
       } else if (value.includes("&&")) {
-        errors.push({ path: path14, message: `Selector "${value}" contains unsupported operator "&&". Selectors in data fields use dot-path resolution, not JS evaluation. Use a "condition" step or "code" step for complex expressions.` });
+        errors.push({ path: path16, message: `Selector "${value}" contains unsupported operator "&&". Selectors in data fields use dot-path resolution, not JS evaluation. Use a "condition" step or "code" step for complex expressions.` });
       }
     } else if (value && typeof value === "object" && !Array.isArray(value)) {
       for (const [k, v] of Object.entries(value)) {
-        checkOperatorsInSelectorField(v, `${path14}.${k}`);
+        checkOperatorsInSelectorField(v, `${path16}.${k}`);
       }
     } else if (Array.isArray(value)) {
       for (let i = 0; i < value.length; i++) {
-        checkOperatorsInSelectorField(value[i], `${path14}[${i}]`);
+        checkOperatorsInSelectorField(value[i], `${path16}[${i}]`);
       }
     }
   }
@@ -4911,10 +4911,10 @@ var VALID_OUTPUT_SCHEMA_TYPES = /* @__PURE__ */ new Set(["string", "number", "bo
 function isOutputSchemaObject(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
 }
-function walkOutputSchema(schema, path14) {
+function walkOutputSchema(schema, path16) {
   let current = schema;
-  for (let i = 0; i < path14.length; i++) {
-    const seg = path14[i];
+  for (let i = 0; i < path16.length; i++) {
+    const seg = path16[i];
     if (typeof current === "string") {
       return current === "unknown" || current === "object" || current === "array" ? "opaque" : "opaque";
     }
@@ -5376,8 +5376,8 @@ async function flowExecuteCommand(keyOrPath, options) {
   intro(pc9.bgCyan(pc9.black(" One Workflow ")));
   const { apiKey, permissions, actionIds } = getConfig2();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start(`Loading workflow "${keyOrPath}"...`);
+  const spinner = createSpinner();
+  spinner.start(`Loading workflow "${keyOrPath}"...`);
   let flow2;
   let rootDir;
   let flowFilePath;
@@ -5387,11 +5387,11 @@ async function flowExecuteCommand(keyOrPath, options) {
     rootDir = loaded.rootDir;
     flowFilePath = loaded.filePath;
   } catch (err) {
-    spinner4.stop("Workflow not found");
+    spinner.stop("Workflow not found");
     error(err instanceof Error ? err.message : String(err));
     return;
   }
-  spinner4.stop(`Workflow: ${flow2.name} (${flow2.steps.length} steps)`);
+  spinner.stop(`Workflow: ${flow2.name} (${flow2.steps.length} steps)`);
   const preflightErrors = validateFlow(flow2, rootDir);
   if (preflightErrors.length > 0) {
     if (isAgentMode()) {
@@ -5596,8 +5596,8 @@ async function flowListCommand() {
 }
 async function flowValidateCommand(keyOrPath) {
   intro(pc9.bgCyan(pc9.black(" One Workflow ")));
-  const spinner4 = createSpinner();
-  spinner4.start(`Validating "${keyOrPath}"...`);
+  const spinner = createSpinner();
+  spinner.start(`Validating "${keyOrPath}"...`);
   let flowData;
   let rootDir;
   try {
@@ -5612,12 +5612,12 @@ async function flowValidateCommand(keyOrPath) {
       rootDir = path7.dirname(flowPath);
     }
   } catch (err) {
-    spinner4.stop("Validation failed");
+    spinner.stop("Validation failed");
     error(`Could not read workflow: ${err instanceof Error ? err.message : String(err)}`);
   }
   const errors = validateFlow(flowData, rootDir);
   if (errors.length > 0) {
-    spinner4.stop("Validation failed");
+    spinner.stop("Validation failed");
     if (isAgentMode()) {
       json({ valid: false, errors });
       process.exit(1);
@@ -5629,7 +5629,7 @@ async function flowValidateCommand(keyOrPath) {
     console.log();
     error(`${errors.length} validation error(s) found`);
   }
-  spinner4.stop("Workflow is valid");
+  spinner.stop("Workflow is valid");
   if (isAgentMode()) {
     json({ valid: true, key: flowData.key });
     return;
@@ -5671,15 +5671,15 @@ async function flowResumeCommand(runId, options = {}) {
       json(event);
     }
   };
-  const spinner4 = createSpinner();
-  spinner4.start(`Resuming run ${runId} (${state.completedSteps.length} steps already completed)...`);
+  const spinner = createSpinner();
+  spinner.start(`Resuming run ${runId} (${state.completedSteps.length} steps already completed)...`);
   try {
     const context = await runner.resume(flow2, api, permissions, actionIds, {
       onEvent,
       rootDir,
       allowBash: options.allowBash
     });
-    spinner4.stop("Workflow completed");
+    spinner.stop("Workflow completed");
     if (isAgentMode()) {
       json({
         event: "workflow:result",
@@ -5693,7 +5693,7 @@ async function flowResumeCommand(runId, options = {}) {
     console.log(`  ${pc9.green("\u2713")} Resumed and completed successfully`);
     console.log(`  ${pc9.dim(`Log: ${runner.getLogPath()}`)}`);
   } catch (error2) {
-    spinner4.stop("Resume failed");
+    spinner.stop("Resume failed");
     const errorMsg = error2 instanceof Error ? error2.message : String(error2);
     if (isAgentMode()) {
       json({ event: "workflow:result", runId, status: "failed", error: errorMsg });
@@ -6010,8 +6010,8 @@ async function relayCreateCommand(options) {
     error(`Connection key "${options.connectionKey}" is not allowed.`);
   }
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Creating relay endpoint...");
+  const spinner = createSpinner();
+  spinner.start("Creating relay endpoint...");
   try {
     const body = {
       connectionKey: options.connectionKey
@@ -6026,7 +6026,7 @@ async function relayCreateCommand(options) {
       json(result);
       return;
     }
-    spinner4.stop("Relay endpoint created");
+    spinner.stop("Relay endpoint created");
     console.log();
     console.log(`  ${pc10.dim("ID:")}          ${result.id}`);
     console.log(`  ${pc10.dim("URL:")}         ${result.url}`);
@@ -6040,15 +6040,15 @@ async function relayCreateCommand(options) {
     }
     console.log();
   } catch (error2) {
-    spinner4.stop("Failed to create relay endpoint");
+    spinner.stop("Failed to create relay endpoint");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayListCommand(options) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Loading relay endpoints...");
+  const spinner = createSpinner();
+  spinner.start("Loading relay endpoints...");
   try {
     const query = {};
     if (options.limit) query.limit = options.limit;
@@ -6071,7 +6071,7 @@ async function relayListCommand(options) {
       });
       return;
     }
-    spinner4.stop(`${endpoints.length} relay endpoint${endpoints.length === 1 ? "" : "s"} found`);
+    spinner.stop(`${endpoints.length} relay endpoint${endpoints.length === 1 ? "" : "s"} found`);
     if (endpoints.length === 0) {
       console.log("\n  No relay endpoints yet.\n");
       return;
@@ -6093,22 +6093,22 @@ async function relayListCommand(options) {
       }))
     );
   } catch (error2) {
-    spinner4.stop("Failed to list relay endpoints");
+    spinner.stop("Failed to list relay endpoints");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayGetCommand(id) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Loading relay endpoint...");
+  const spinner = createSpinner();
+  spinner.start("Loading relay endpoint...");
   try {
     const result = await api.getRelayEndpoint(id);
     if (isAgentMode()) {
       json(result);
       return;
     }
-    spinner4.stop("Relay endpoint loaded");
+    spinner.stop("Relay endpoint loaded");
     console.log();
     console.log(`  ${pc10.dim("ID:")}          ${result.id}`);
     console.log(`  ${pc10.dim("URL:")}         ${result.url}`);
@@ -6124,15 +6124,15 @@ async function relayGetCommand(id) {
     console.log(`  ${pc10.dim("Created:")}     ${result.createdAt}`);
     console.log();
   } catch (error2) {
-    spinner4.stop("Failed to load relay endpoint");
+    spinner.stop("Failed to load relay endpoint");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayUpdateCommand(id, options) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Updating relay endpoint...");
+  const spinner = createSpinner();
+  spinner.start("Updating relay endpoint...");
   try {
     const body = {};
     if (options.description !== void 0) body.description = options.description;
@@ -6145,40 +6145,40 @@ async function relayUpdateCommand(id, options) {
       json(result);
       return;
     }
-    spinner4.stop("Relay endpoint updated");
+    spinner.stop("Relay endpoint updated");
     console.log(`  ${pc10.dim("ID:")} ${result.id}`);
     console.log(`  ${pc10.dim("Active:")} ${result.active}`);
     console.log(`  ${pc10.dim("Actions:")} ${result.actions?.length || 0}`);
     console.log();
   } catch (error2) {
-    spinner4.stop("Failed to update relay endpoint");
+    spinner.stop("Failed to update relay endpoint");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayDeleteCommand(id) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Deleting relay endpoint...");
+  const spinner = createSpinner();
+  spinner.start("Deleting relay endpoint...");
   try {
     const result = await api.deleteRelayEndpoint(id);
     if (isAgentMode()) {
       json({ deleted: true, id: result.id });
       return;
     }
-    spinner4.stop("Relay endpoint deleted");
+    spinner.stop("Relay endpoint deleted");
     console.log(`  Deleted: ${result.id}`);
     console.log();
   } catch (error2) {
-    spinner4.stop("Failed to delete relay endpoint");
+    spinner.stop("Failed to delete relay endpoint");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayActivateCommand(id, options) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Activating relay endpoint...");
+  const spinner = createSpinner();
+  spinner.start("Activating relay endpoint...");
   try {
     const actions2 = parseJsonArg3(options.actions, "--actions");
     const body = { actions: actions2 };
@@ -6188,21 +6188,21 @@ async function relayActivateCommand(id, options) {
       json(result);
       return;
     }
-    spinner4.stop("Relay endpoint activated");
+    spinner.stop("Relay endpoint activated");
     console.log(`  ${pc10.dim("ID:")} ${result.id}`);
     console.log(`  ${pc10.dim("Active:")} ${result.active}`);
     console.log(`  ${pc10.dim("Actions:")} ${result.actions?.length || 0}`);
     console.log();
   } catch (error2) {
-    spinner4.stop("Failed to activate relay endpoint");
+    spinner.stop("Failed to activate relay endpoint");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayEventsCommand(options) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Loading relay events...");
+  const spinner = createSpinner();
+  spinner.start("Loading relay events...");
   try {
     const query = {};
     if (options.limit) query.limit = options.limit;
@@ -6226,7 +6226,7 @@ async function relayEventsCommand(options) {
       });
       return;
     }
-    spinner4.stop(`${events.length} event${events.length === 1 ? "" : "s"} found`);
+    spinner.stop(`${events.length} event${events.length === 1 ? "" : "s"} found`);
     if (events.length === 0) {
       console.log("\n  No events found.\n");
       return;
@@ -6246,22 +6246,22 @@ async function relayEventsCommand(options) {
       }))
     );
   } catch (error2) {
-    spinner4.stop("Failed to list relay events");
+    spinner.stop("Failed to list relay events");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayEventGetCommand(id) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Loading relay event...");
+  const spinner = createSpinner();
+  spinner.start("Loading relay event...");
   try {
     const result = await api.getRelayEvent(id);
     if (isAgentMode()) {
       json(result);
       return;
     }
-    spinner4.stop("Relay event loaded");
+    spinner.stop("Relay event loaded");
     console.log();
     console.log(`  ${pc10.dim("ID:")}        ${result.id}`);
     console.log(`  ${pc10.dim("Platform:")}  ${result.platform}`);
@@ -6271,7 +6271,7 @@ async function relayEventGetCommand(id) {
     console.log(JSON.stringify(result.payload, null, 2));
     console.log();
   } catch (error2) {
-    spinner4.stop("Failed to load relay event");
+    spinner.stop("Failed to load relay event");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
@@ -6281,8 +6281,8 @@ async function relayDeliveriesCommand(options) {
   }
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Loading deliveries...");
+  const spinner = createSpinner();
+  spinner.start("Loading deliveries...");
   try {
     const deliveries = options.endpointId ? await api.listRelayEndpointDeliveries(options.endpointId) : await api.listRelayEventDeliveries(options.eventId);
     const items = Array.isArray(deliveries) ? deliveries : deliveries.rows || [];
@@ -6290,7 +6290,7 @@ async function relayDeliveriesCommand(options) {
       json({ deliveries: items });
       return;
     }
-    spinner4.stop(`${items.length} deliver${items.length === 1 ? "y" : "ies"} found`);
+    spinner.stop(`${items.length} deliver${items.length === 1 ? "y" : "ies"} found`);
     if (items.length === 0) {
       console.log("\n  No deliveries found.\n");
       return;
@@ -6312,22 +6312,22 @@ async function relayDeliveriesCommand(options) {
       }))
     );
   } catch (error2) {
-    spinner4.stop("Failed to load deliveries");
+    spinner.stop("Failed to load deliveries");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayPlatformsCommand() {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start("Loading relay-capable platforms...");
+  const spinner = createSpinner();
+  spinner.start("Loading relay-capable platforms...");
   try {
     const platforms = await api.listRelayPlatforms();
     if (isAgentMode()) {
       json({ platforms });
       return;
     }
-    spinner4.stop(`${platforms.length} relay-capable platform${platforms.length === 1 ? "" : "s"} found`);
+    spinner.stop(`${platforms.length} relay-capable platform${platforms.length === 1 ? "" : "s"} found`);
     if (platforms.length === 0) {
       console.log("\n  No relay-capable platforms available.\n");
       return;
@@ -6348,22 +6348,22 @@ async function relayPlatformsCommand() {
       )
     );
   } catch (error2) {
-    spinner4.stop("Failed to load relay platforms");
+    spinner.stop("Failed to load relay platforms");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
 async function relayEventTypesCommand(platform) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
-  const spinner4 = createSpinner();
-  spinner4.start(`Loading event types for ${pc10.cyan(platform)}...`);
+  const spinner = createSpinner();
+  spinner.start(`Loading event types for ${pc10.cyan(platform)}...`);
   try {
     const eventTypes = await api.listRelayEventTypes(platform);
     if (isAgentMode()) {
       json({ platform, eventTypes });
       return;
     }
-    spinner4.stop(`${eventTypes.length} event type${eventTypes.length === 1 ? "" : "s"} found`);
+    spinner.stop(`${eventTypes.length} event type${eventTypes.length === 1 ? "" : "s"} found`);
     if (eventTypes.length === 0) {
       console.log(`
   No event types found for ${platform}.
@@ -6376,7 +6376,7 @@ async function relayEventTypesCommand(platform) {
     }
     console.log();
   } catch (error2) {
-    spinner4.stop("Failed to load event types");
+    spinner.stop("Failed to load event types");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
@@ -6861,8 +6861,8 @@ function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function interpolate(template, record) {
-  return template.replace(/\{?\{(\w+(?:\.\w+)*)\}\}?/g, (_, path14) => {
-    const parts = path14.split(".");
+  return template.replace(/\{?\{(\w+(?:\.\w+)*)\}\}?/g, (_, path16) => {
+    const parts = path16.split(".");
     let value = record;
     for (const part2 of parts) {
       if (typeof value !== "object" || value === null) return "";
@@ -6890,8 +6890,8 @@ function deepMerge(target, source) {
   }
   return result;
 }
-function getByDotPath2(obj, path14) {
-  const parts = path14.split(".");
+function getByDotPath2(obj, path16) {
+  const parts = path16.split(".");
   let current = obj;
   for (const part2 of parts) {
     if (current === null || current === void 0 || typeof current !== "object") return void 0;
@@ -6900,8 +6900,8 @@ function getByDotPath2(obj, path14) {
   return current;
 }
 function stripExcludedFields(obj, paths) {
-  for (const path14 of paths) {
-    stripOnePath(obj, path14.replace(/\[\]/g, ".*").split("."));
+  for (const path16 of paths) {
+    stripOnePath(obj, path16.replace(/\[\]/g, ".*").split("."));
   }
 }
 function stripOnePath(obj, parts) {
@@ -7322,8 +7322,8 @@ function sleep2(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function stripFields(record, paths) {
-  for (const path14 of paths) {
-    stripOnePath2(record, path14.split("."));
+  for (const path16 of paths) {
+    stripOnePath2(record, path16.split("."));
   }
 }
 function stripOnePath2(obj, parts) {
@@ -7657,7 +7657,7 @@ async function syncModel(api, profile, options) {
             records,
             tableCreated
           ) : void 0;
-          const report = await writePageToMemory(
+          const report2 = await writePageToMemory(
             profile,
             records,
             {
@@ -7669,12 +7669,12 @@ async function syncModel(api, profile, options) {
               alreadyEnrichedIds
             }
           );
-          pageReport = report;
-          memPreserved += report.preserved;
-          for (const key of report.sourceKeysSeen) seenSourceKeys.add(key);
+          pageReport = report2;
+          memPreserved += report2.preserved;
+          for (const key of report2.sourceKeysSeen) seenSourceKeys.add(key);
           if (hasHooks && !db) {
-            inserts = report.inserts;
-            updates = report.updates;
+            inserts = report2.inserts;
+            updates = report2.updates;
           }
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
@@ -7993,7 +7993,7 @@ function detectColumnType2(value) {
 }
 async function testSyncProfile(api, profile) {
   const checks = [];
-  const report = {
+  const report2 = {
     platform: profile.platform,
     model: profile.model,
     ok: false,
@@ -8025,7 +8025,7 @@ async function testSyncProfile(api, profile) {
       ok: false,
       detail: err instanceof Error ? err.message : String(err)
     });
-    return report;
+    return report2;
   }
   let actionDetails;
   try {
@@ -8037,7 +8037,7 @@ async function testSyncProfile(api, profile) {
       ok: false,
       detail: err instanceof Error ? err.message : String(err)
     });
-    return report;
+    return report2;
   }
   if (actionDetails.tags?.includes("custom")) {
     checks.push({
@@ -8045,7 +8045,7 @@ async function testSyncProfile(api, profile) {
       ok: false,
       detail: `Action ${profile.actionId} is tagged "custom". Sync only supports passthrough actions. Run 'one actions find ${profile.platform} "list ${profile.model}" -t knowledge' to find one.`
     });
-    return report;
+    return report2;
   }
   let responseData;
   try {
@@ -8062,7 +8062,7 @@ async function testSyncProfile(api, profile) {
   } catch (err) {
     const detail = err instanceof ApiError ? `HTTP ${err.status}: ${err.message}` : err instanceof Error ? err.message : String(err);
     checks.push({ name: "single-page fetch", ok: false, detail });
-    return report;
+    return report2;
   }
   let resolvedResultsPath = profile.resultsPath;
   const rawCandidate = isRootPath(resolvedResultsPath) ? responseData : getByDotPath(responseData, resolvedResultsPath);
@@ -8071,8 +8071,8 @@ async function testSyncProfile(api, profile) {
     if (Array.isArray(responseData)) {
       resolvedResultsPath = "";
       records = responseData;
-      report.autoFixed = report.autoFixed ?? {};
-      report.autoFixed.resultsPath = "";
+      report2.autoFixed = report2.autoFixed ?? {};
+      report2.autoFixed.resultsPath = "";
       checks.push({
         name: `resultsPath auto-discovered \u2192 <root>`,
         ok: true,
@@ -8084,8 +8084,8 @@ async function testSyncProfile(api, profile) {
       if (arrayKey) {
         resolvedResultsPath = arrayKey;
         records = topObj[arrayKey];
-        report.autoFixed = report.autoFixed ?? {};
-        report.autoFixed.resultsPath = arrayKey;
+        report2.autoFixed = report2.autoFixed ?? {};
+        report2.autoFixed.resultsPath = arrayKey;
         checks.push({
           name: `resultsPath auto-discovered \u2192 "${arrayKey}"`,
           ok: true,
@@ -8101,7 +8101,7 @@ async function testSyncProfile(api, profile) {
       ok: false,
       detail: `Not an array. Response keys: [${topKeys.join(", ")}]`
     });
-    return report;
+    return report2;
   }
   let wrappedPrimitives = false;
   if (records.length > 0 && typeof records[0] !== "object") {
@@ -8122,8 +8122,8 @@ async function testSyncProfile(api, profile) {
   });
   if (records.length === 0) {
     checks.push({ name: "sample record available", ok: false, detail: "empty result set" });
-    report.ok = checks.every((c) => c.ok === true || c.name === "sample record available");
-    return report;
+    report2.ok = checks.every((c) => c.ok === true || c.name === "sample record available");
+    return report2;
   }
   const first = records[0];
   let resolvedIdField = profile.idField;
@@ -8137,8 +8137,8 @@ async function testSyncProfile(api, profile) {
     if (found) {
       resolvedIdField = found;
       idValue = getByDotPath(first, found);
-      report.autoFixed = report.autoFixed ?? {};
-      report.autoFixed.idField = found;
+      report2.autoFixed = report2.autoFixed ?? {};
+      report2.autoFixed.idField = found;
       checks.push({
         name: `idField auto-discovered \u2192 "${found}"`,
         ok: true,
@@ -8175,7 +8175,7 @@ async function testSyncProfile(api, profile) {
       ok: true,
       detail: JSON.stringify(nextParams).slice(0, 120)
     });
-    report.paginationPreview = nextParams;
+    report2.paginationPreview = nextParams;
   } else {
     checks.push({
       name: `pagination "${profile.pagination.type}"`,
@@ -8183,22 +8183,22 @@ async function testSyncProfile(api, profile) {
       detail: "no next page (single-page result or end-of-data)"
     });
   }
-  report.detectedColumns = Object.entries(first).map(([name, value]) => ({
+  report2.detectedColumns = Object.entries(first).map(([name, value]) => ({
     name,
     type: detectColumnType2(value)
   }));
-  report.sample = first;
-  report.samples = records.slice(0, SEARCHABLE_SAMPLE_SIZE);
-  if (profile.enrich && (profile.identityKeys?.length ?? 0) > 0 && report.samples.length > 0) {
-    const merged = await enrichOneForPreview(api, profile, report.samples[0], connectionKey);
+  report2.sample = first;
+  report2.samples = records.slice(0, SEARCHABLE_SAMPLE_SIZE);
+  if (profile.enrich && (profile.identityKeys?.length ?? 0) > 0 && report2.samples.length > 0) {
+    const merged = await enrichOneForPreview(api, profile, report2.samples[0], connectionKey);
     if (merged) {
       const preview = buildIdentityKeysPreview([merged], profile);
-      if (preview) report.identityKeysPreview = { ...preview, previewedAfterEnrich: true };
+      if (preview) report2.identityKeysPreview = { ...preview, previewedAfterEnrich: true };
     }
   }
-  report.identityKeysPreview ??= buildIdentityKeysPreview(report.samples, profile);
-  report.ok = checks.every((c) => c.ok);
-  return report;
+  report2.identityKeysPreview ??= buildIdentityKeysPreview(report2.samples, profile);
+  report2.ok = checks.every((c) => c.ok);
+  return report2;
 }
 
 // src/lib/memory/sync/infer.ts
@@ -8974,11 +8974,11 @@ function isNoise(s) {
   if (/^-?\d+(\.\d+)?([eE][-+]?\d+)?$/.test(s)) return true;
   return false;
 }
-function recordSample(stats, path14, value, jsType, recordIndex, totalSamples) {
-  let s = stats.get(path14);
+function recordSample(stats, path16, value, jsType, recordIndex, totalSamples) {
+  let s = stats.get(path16);
   if (!s) {
     s = {
-      path: path14,
+      path: path16,
       total: totalSamples,
       recordIndices: /* @__PURE__ */ new Set(),
       lenSum: 0,
@@ -8987,7 +8987,7 @@ function recordSample(stats, path14, value, jsType, recordIndex, totalSamples) {
       primaryType: jsType,
       examples: []
     };
-    stats.set(path14, s);
+    stats.set(path16, s);
   }
   s.recordIndices.add(recordIndex);
   s.lenSum += value.length;
@@ -8996,28 +8996,28 @@ function recordSample(stats, path14, value, jsType, recordIndex, totalSamples) {
   if (s.primaryType !== jsType) s.primaryType = "mixed";
   if (s.examples.length < 3 && value.length < 200) s.examples.push(value);
 }
-function walkRecord(record, path14, stats, recordIndex, totalSamples) {
+function walkRecord(record, path16, stats, recordIndex, totalSamples) {
   if (record === null || record === void 0) return;
   if (typeof record === "string") {
     const trimmed = record.trim();
-    if (trimmed) recordSample(stats, path14, trimmed, "string", recordIndex, totalSamples);
+    if (trimmed) recordSample(stats, path16, trimmed, "string", recordIndex, totalSamples);
     return;
   }
   if (typeof record === "number" || typeof record === "boolean") {
     const str = String(record);
     const kind = typeof record === "number" ? "number" : "boolean";
-    if (str) recordSample(stats, path14, str, kind, recordIndex, totalSamples);
+    if (str) recordSample(stats, path16, str, kind, recordIndex, totalSamples);
     return;
   }
   if (Array.isArray(record)) {
-    const childPath = path14 ? `${path14}[]` : "[]";
+    const childPath = path16 ? `${path16}[]` : "[]";
     for (const item of record) walkRecord(item, childPath, stats, recordIndex, totalSamples);
     return;
   }
   if (typeof record === "object") {
     for (const [key, value] of Object.entries(record)) {
       if (key.startsWith("_")) continue;
-      const childPath = path14 ? `${path14}.${key}` : key;
+      const childPath = path16 ? `${path16}.${key}` : key;
       walkRecord(value, childPath, stats, recordIndex, totalSamples);
     }
   }
@@ -9179,11 +9179,11 @@ ${profiles.length} built-in profile(s). Run ${pc11.bold("one sync init <platform
 }
 async function syncModelsCommand(platform) {
   const api = getApi();
-  const spinner4 = createSpinner();
-  spinner4.start(`Discovering models for ${platform}...`);
+  const spinner = createSpinner();
+  spinner.start(`Discovering models for ${platform}...`);
   try {
     const models = await discoverModels(api, platform);
-    spinner4.stop(`Found ${models.length} models`);
+    spinner.stop(`Found ${models.length} models`);
     if (isAgentMode()) {
       json({ platform, models, total: models.length });
       return;
@@ -9197,15 +9197,15 @@ async function syncModelsCommand(platform) {
     );
     note(lines.join("\n"), `${platform} \u2014 ${models.length} models`);
   } catch (err) {
-    spinner4.stop("Failed");
+    spinner.stop("Failed");
     error(`Error discovering models: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
 async function syncInitCommand(platform, model, options) {
   if (!options.config) {
     const api = getApi();
-    const spinner4 = createSpinner();
-    spinner4.start(`Looking up ${platform}/${model}...`);
+    const spinner = createSpinner();
+    spinner.start(`Looking up ${platform}/${model}...`);
     try {
       const models = await discoverModels(api, platform);
       const match = models.find((m) => m.name === model || m.name.toLowerCase() === model.toLowerCase());
@@ -9215,9 +9215,9 @@ async function syncInitCommand(platform, model, options) {
         if (actionId && !actionId.startsWith("conn_mod_def::")) {
           actionId = void 0;
         }
-        spinner4.stop(actionId ? "Found model + action ID" : "Found model (action ID not resolved)");
+        spinner.stop(actionId ? "Found model + action ID" : "Found model (action ID not resolved)");
       } else {
-        spinner4.stop("Model not found in available actions");
+        spinner.stop("Model not found in available actions");
       }
       const builtin = loadBuiltinProfile(platform, model);
       let template;
@@ -9317,7 +9317,7 @@ Run with --config to save:
         }
       }
     } catch (err) {
-      spinner4.stop("Failed");
+      spinner.stop("Failed");
       error(`Error: ${err instanceof Error ? err.message : String(err)}`);
     }
     return;
@@ -9371,38 +9371,38 @@ async function syncTestCommand(platformModel, options = {}) {
     );
   }
   const api = getApi();
-  const report = await testSyncProfile(api, profile);
-  if (report.autoFixed && Object.keys(report.autoFixed).length > 0) {
+  const report2 = await testSyncProfile(api, profile);
+  if (report2.autoFixed && Object.keys(report2.autoFixed).length > 0) {
     try {
       const existing = readProfile(platform, model);
       if (existing) {
-        const patched = { ...existing, ...report.autoFixed };
+        const patched = { ...existing, ...report2.autoFixed };
         writeProfile(patched);
       }
     } catch {
     }
   }
-  const searchablePreview = options.showSearchable ? buildSearchablePreview(profile, report.samples) : null;
+  const searchablePreview = options.showSearchable ? buildSearchablePreview(profile, report2.samples) : null;
   if (isAgentMode()) {
-    json({ ...report, ...searchablePreview ? { searchable: searchablePreview } : {} });
+    json({ ...report2, ...searchablePreview ? { searchable: searchablePreview } : {} });
     return;
   }
-  for (const c of report.checks) {
+  for (const c of report2.checks) {
     const mark = c.ok ? pc11.green("\u2713") : pc11.red("\u2717");
     console.log(`  ${mark} ${c.name}${c.detail ? pc11.dim(` \u2014 ${c.detail}`) : ""}`);
   }
-  if (report.detectedColumns && report.detectedColumns.length > 0) {
+  if (report2.detectedColumns && report2.detectedColumns.length > 0) {
     console.log(`
   ${pc11.bold("Detected columns:")}`);
-    for (const col of report.detectedColumns.slice(0, 20)) {
+    for (const col of report2.detectedColumns.slice(0, 20)) {
       console.log(`    ${col.name.padEnd(30)} ${pc11.dim(col.type)}`);
     }
-    if (report.detectedColumns.length > 20) {
-      console.log(pc11.dim(`    ... and ${report.detectedColumns.length - 20} more`));
+    if (report2.detectedColumns.length > 20) {
+      console.log(pc11.dim(`    ... and ${report2.detectedColumns.length - 20} more`));
     }
   }
-  if (report.identityKeysPreview) {
-    const { perRecord, sampleKeys, entityFanOut, resolvesAfterEnrich } = report.identityKeysPreview;
+  if (report2.identityKeysPreview) {
+    const { perRecord, sampleKeys, entityFanOut, resolvesAfterEnrich } = report2.identityKeysPreview;
     const total = perRecord.reduce((a, b) => a + b, 0);
     const min = perRecord.length ? Math.min(...perRecord) : 0;
     const max = perRecord.length ? Math.max(...perRecord) : 0;
@@ -9444,7 +9444,7 @@ async function syncTestCommand(platformModel, options = {}) {
   }
   console.log(
     `
-${report.ok ? pc11.green("Profile looks good.") : pc11.red("Profile has issues.")} ` + (report.ok ? `Run: ${pc11.bold(`one sync run ${platform} --models ${model}`)}` : "Fix the issues above and test again.")
+${report2.ok ? pc11.green("Profile looks good.") : pc11.red("Profile has issues.")} ` + (report2.ok ? `Run: ${pc11.bold(`one sync run ${platform} --models ${model}`)}` : "Fix the issues above and test again.")
   );
 }
 function buildSearchablePreview(profile, samples) {
@@ -9452,7 +9452,7 @@ function buildSearchablePreview(profile, samples) {
   const first = samples[0];
   const paths = getSearchablePaths(profile);
   if (paths) {
-    const perPathAgg = paths.map((path14) => ({ path: path14, hits: 0, total: samples.length, sample: "" }));
+    const perPathAgg = paths.map((path16) => ({ path: path16, hits: 0, total: samples.length, sample: "" }));
     for (const record of samples) {
       const { paths: perPath } = extractSearchableFromPaths(record, paths);
       perPath.forEach((p9, i) => {
@@ -9602,7 +9602,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-6I4LWPZF.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-AKQSXRV2.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -9696,7 +9696,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-GN3I6EZM.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-3LSEIPRF.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -9705,7 +9705,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p6.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-GN3I6EZM.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-3LSEIPRF.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -9720,8 +9720,8 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
     );
   }
   const api = getApi();
-  const report = await testSyncProfile(api, profile);
-  const samples = report.samples ?? [];
+  const report2 = await testSyncProfile(api, profile);
+  const samples = report2.samples ?? [];
   if (samples.length === 0) {
     error(
       "No sample records available to rank against. Fix the failures in `sync test` first, then re-run suggest-searchable."
@@ -10042,7 +10042,7 @@ function registerSyncSubcommands(sync) {
     await syncSqlCommand(platformModel, sql);
   });
   sync.command("schema <platform/model>").description("Inspect the JSON structure of synced records (field paths, types, examples) \u2014 useful before writing `sync sql` queries").action(async (platformModel) => {
-    const { syncSchemaCommand } = await import("./schema-G7XYVIZG.js");
+    const { syncSchemaCommand } = await import("./schema-FICQRMZ7.js");
     await syncSchemaCommand(platformModel);
   });
   sync.command("delete <platform/model>").description('Delete records from local sync data (e.g. one sync delete notion/pages --id "abc-123")').option("--id <value>", "Delete record by ID").option("--where <conditions>", 'Delete records matching conditions (e.g. "status=archived")').option("--where-sql <predicate>", `Delete using a raw SQL WHERE clause (e.g. "json_extract(data, '$.type') = 'promotion'")`).option("--yes", "Skip confirmation prompt").action(async (platformModel, options) => {
@@ -10409,16 +10409,16 @@ function projectEmbeddingApiKey(cfg) {
 }
 function redactSecrets(cfg) {
   const copy = JSON.parse(JSON.stringify(cfg));
-  for (const path14 of SECRET_PATHS) {
-    const val = getPath(copy, path14);
+  for (const path16 of SECRET_PATHS) {
+    const val = getPath(copy, path16);
     if (typeof val === "string" && val.length > 0) {
-      setPath(copy, path14, `${val.slice(0, 6)}\u2026(redacted, use --show-secrets)`);
+      setPath(copy, path16, `${val.slice(0, 6)}\u2026(redacted, use --show-secrets)`);
     }
   }
   return copy;
 }
-function getPath(obj, path14) {
-  const parts = path14.split(".");
+function getPath(obj, path16) {
+  const parts = path16.split(".");
   let cur = obj;
   for (const part2 of parts) {
     if (cur == null || typeof cur !== "object") return void 0;
@@ -10426,8 +10426,8 @@ function getPath(obj, path14) {
   }
   return cur;
 }
-function setPath(obj, path14, value) {
-  const parts = path14.split(".");
+function setPath(obj, path16, value) {
+  const parts = path16.split(".");
   let cur = obj;
   for (let i = 0; i < parts.length - 1; i++) {
     const part2 = parts[i];
@@ -10437,8 +10437,8 @@ function setPath(obj, path14, value) {
   cur[parts[parts.length - 1]] = value;
   return obj;
 }
-function unsetPath(obj, path14) {
-  const parts = path14.split(".");
+function unsetPath(obj, path16) {
+  const parts = path16.split(".");
   let cur = obj;
   for (let i = 0; i < parts.length - 1; i++) {
     const part2 = parts[i];
@@ -11243,8 +11243,8 @@ async function cacheUpdateAllCommand() {
     console.log("No cached entries to update");
     return;
   }
-  const spinner4 = createSpinner();
-  spinner4.start(`Updating ${entries.length} cached ${entries.length === 1 ? "entry" : "entries"}...`);
+  const spinner = createSpinner();
+  spinner.start(`Updating ${entries.length} cached ${entries.length === 1 ? "entry" : "entries"}...`);
   let updated = 0;
   let failed = 0;
   const errors = [];
@@ -11261,7 +11261,7 @@ async function cacheUpdateAllCommand() {
       });
     }
   }
-  spinner4.stop(`Updated ${updated} ${updated === 1 ? "entry" : "entries"}${failed > 0 ? `, ${failed} failed` : ""}`);
+  spinner.stop(`Updated ${updated} ${updated === 1 ? "entry" : "entries"}${failed > 0 ? `, ${failed} failed` : ""}`);
   if (isAgentMode()) {
     json({ updated, failed, errors: errors.length > 0 ? errors : void 0 });
     return;
@@ -11413,6 +11413,7 @@ Request specific sections:
 - Connection keys come from \`one connection list\` \u2014 don't hardcode them
 - \`connection list\` also reports an \`access\` field per connection (\`full\` / \`methods\` / \`actions\`) \u2014 read it before planning so you don't propose an action the access config will reject
 - Skills stay in lockstep with the CLI version automatically \u2014 every command checks a \`.one-cli-version\` marker in the canonical skill dir and refreshes the files if the CLI has been upgraded. Check manually with \`one config skills status\`; force a resync with \`one config skills sync\`
+- Building an app whose users connect their own tools? \`one skills add connect\` (run inside the app) installs the One Connect skill from the \`@withone/connect\` version the app uses, into \`.agents/skills/one-connect\` and \`.claude/skills/one-connect\`. \`one --agent skills list\` shows what is installed; any \`one\` command in the project refreshes it after an SDK upgrade
 `;
 var GUIDE_ACTIONS = `# One Actions \u2014 Reference
 
@@ -12806,22 +12807,22 @@ function buildWorkflowIdeas(connections) {
 // src/commands/logout.ts
 import fs13 from "fs";
 import * as p8 from "@clack/prompts";
-function formatWhoami(config2, apiKey, pc16) {
+function formatWhoami(config2, apiKey, pc17) {
   const whoami = config2.whoami;
   const env = getEnvFromApiKey(apiKey);
-  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
+  const envLabel = env === "test" ? pc17.yellow("test") : pc17.green("live");
   const lines = [];
   if (whoami) {
     const contextParts = [];
     if (whoami.organization) contextParts.push(whoami.organization.name);
     if (whoami.project) contextParts.push(whoami.project.name);
     const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-    lines.push(`${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`);
-    lines.push(`${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`);
-    if (config2.apiKeyName) lines.push(`${pc16.dim("Key:")} ${config2.apiKeyName}`);
+    lines.push(`${pc17.bold(scopeDisplay)} ${pc17.dim("\xB7")} ${envLabel}`);
+    lines.push(`${whoami.user.name} ${pc17.dim(`(${whoami.user.email})`)}`);
+    if (config2.apiKeyName) lines.push(`${pc17.dim("Key:")} ${config2.apiKeyName}`);
   } else {
     const keyLabel = config2.apiKeyName ?? `${apiKey.slice(0, 8)}...`;
-    lines.push(`${pc16.dim("Key:")} ${keyLabel} ${pc16.dim("\xB7")} ${envLabel}`);
+    lines.push(`${pc17.dim("Key:")} ${keyLabel} ${pc17.dim("\xB7")} ${envLabel}`);
   }
   return lines;
 }
@@ -12850,7 +12851,7 @@ async function logoutCommand() {
     json({ status: cleared ? "logged_out" : "not_logged_in", message: cleared ? "Credentials cleared." : "No config found." });
     return;
   }
-  const pc16 = (await import("picocolors")).default;
+  const pc17 = (await import("picocolors")).default;
   const globalConfig = readGlobalConfig();
   const projectConfig = readProjectConfig();
   const hasGlobal = globalConfig?.apiKey != null;
@@ -12859,13 +12860,13 @@ async function logoutCommand() {
   if (hasGlobal && hasProject) {
     const infoLines = ["You are logged in with multiple configs.", ""];
     if (projectConfig) {
-      infoLines.push(`${pc16.cyan("Local config:")}`);
-      infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc16));
+      infoLines.push(`${pc17.cyan("Local config:")}`);
+      infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc17));
       infoLines.push("");
     }
     if (globalConfig) {
-      infoLines.push(`${pc16.magenta("Global config:")}`);
-      infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc16));
+      infoLines.push(`${pc17.magenta("Global config:")}`);
+      infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc17));
     }
     p8.note(infoLines.join("\n"));
     const choice = await p8.select({
@@ -12883,14 +12884,14 @@ async function logoutCommand() {
     targetScope = choice;
   } else if (hasProject) {
     const infoLines = ["You are logged in.", ""];
-    infoLines.push(`${pc16.dim("Stored in")} ${pc16.cyan("local config")}`);
-    infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc16));
+    infoLines.push(`${pc17.dim("Stored in")} ${pc17.cyan("local config")}`);
+    infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc17));
     p8.note(infoLines.join("\n"));
     targetScope = "project";
   } else if (hasGlobal) {
     const infoLines = ["You are logged in.", ""];
-    infoLines.push(`${pc16.dim("Stored in")} ${pc16.magenta("global config")}`);
-    infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc16));
+    infoLines.push(`${pc17.dim("Stored in")} ${pc17.magenta("global config")}`);
+    infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc17));
     p8.note(infoLines.join("\n"));
     targetScope = "global";
   } else {
@@ -12924,6 +12925,538 @@ async function logoutCommand() {
   p8.outro("Logged out.");
 }
 
+// src/lib/project-skills.ts
+import crypto2 from "crypto";
+import fs14 from "fs";
+import os3 from "os";
+import path13 from "path";
+import zlib from "zlib";
+var OPTIONAL_SKILLS = [
+  {
+    name: "connect",
+    dirName: "one-connect",
+    title: "One Connect",
+    description: "Add One Connect to an app: your users grant it scoped, revocable access to their own tools.",
+    packageName: "@withone/connect",
+    packagePath: "skills/one-connect"
+  }
+];
+function findOptionalSkill(name) {
+  const wanted = name.trim().toLowerCase();
+  return OPTIONAL_SKILLS.find((s) => s.name === wanted || s.dirName === wanted);
+}
+var UNIVERSAL_PROJECT_DIR = ".agents/skills";
+var SKILL_AGENT_TARGETS = [
+  { id: "claude-code", name: "Claude Code", projectDir: ".claude/skills", projectMarker: null, homeDir: ".claude/skills" },
+  { id: "codex", name: "Codex", projectDir: UNIVERSAL_PROJECT_DIR, projectMarker: null, homeDir: ".codex/skills" },
+  { id: "cursor", name: "Cursor", projectDir: UNIVERSAL_PROJECT_DIR, projectMarker: null, homeDir: ".cursor/skills" },
+  { id: "amp", name: "Amp", projectDir: UNIVERSAL_PROJECT_DIR, projectMarker: null, homeDir: ".amp/skills" },
+  { id: "opencode", name: "OpenCode", projectDir: UNIVERSAL_PROJECT_DIR, projectMarker: null, homeDir: ".opencode/skills" },
+  { id: "windsurf", name: "Windsurf", projectDir: ".windsurf/skills", projectMarker: ".windsurf", homeDir: ".codeium/windsurf/skills" },
+  { id: "kiro", name: "Kiro", projectDir: ".kiro/skills", projectMarker: ".kiro", homeDir: ".kiro/skills" },
+  { id: "goose", name: "Goose", projectDir: ".goose/skills", projectMarker: ".goose", homeDir: ".config/goose/skills" },
+  { id: "roo", name: "Roo", projectDir: ".roo/skills", projectMarker: ".roo", homeDir: ".roo/skills" }
+];
+function findAgentTarget(id) {
+  return SKILL_AGENT_TARGETS.find((a) => a.id === id.trim().toLowerCase());
+}
+function findProjectRoot(start) {
+  let dir = path13.resolve(start);
+  for (; ; ) {
+    if (fs14.existsSync(path13.join(dir, "package.json")) || fs14.existsSync(path13.join(dir, ".git"))) return dir;
+    const parent = path13.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+function findInstalledPackage(start, packageName) {
+  let dir = path13.resolve(start);
+  for (; ; ) {
+    const pkgDir = path13.join(dir, "node_modules", ...packageName.split("/"));
+    const manifest = path13.join(pkgDir, "package.json");
+    if (fs14.existsSync(manifest)) {
+      try {
+        const { version: version2 } = JSON.parse(fs14.readFileSync(manifest, "utf-8"));
+        if (version2) return { dir: pkgDir, version: version2 };
+      } catch {
+      }
+    }
+    const parent = path13.dirname(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+var SkillSourceError = class extends Error {
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+  }
+};
+function projectSkillSource(skill, projectDir) {
+  const installed = findInstalledPackage(projectDir, skill.packageName);
+  if (!installed) return null;
+  const dir = path13.join(installed.dir, ...skill.packagePath.split("/"));
+  if (!fs14.existsSync(path13.join(dir, "SKILL.md"))) {
+    throw new SkillSourceError(
+      `${skill.packageName} ${installed.version} does not include the ${skill.title} skill. Upgrade it: npm install ${skill.packageName}@latest`,
+      "skill-missing"
+    );
+  }
+  return { kind: "project", version: installed.version, dir, origin: installed.dir, cleanup: () => {
+  } };
+}
+function registryBase() {
+  return (process.env.ONE_SKILLS_REGISTRY || "https://registry.npmjs.org").replace(/\/+$/, "");
+}
+async function registrySkillSource(skill, fetchImpl = fetch) {
+  const metaUrl = `${registryBase()}/${skill.packageName.replace("/", "%2f")}/latest`;
+  let meta;
+  try {
+    const res = await fetchImpl(metaUrl, { headers: { accept: "application/json" } });
+    if (!res.ok) throw new Error(`HTTP ${res.status}`);
+    meta = await res.json();
+  } catch (err) {
+    throw new SkillSourceError(`Could not reach the npm registry for ${skill.packageName} (${err.message}).`, "registry-failed");
+  }
+  const version2 = meta.version;
+  const tarball = meta.dist?.tarball;
+  const integrity = meta.dist?.integrity;
+  if (!version2 || !tarball || !integrity) {
+    throw new SkillSourceError(`The npm registry returned no tarball for ${skill.packageName}.`, "registry-failed");
+  }
+  let bytes;
+  try {
+    const res = await fetchImpl(tarball);
+    if (!res.ok) throw new Error(`HTTP ${res.status}`);
+    bytes = Buffer.from(await res.arrayBuffer());
+  } catch (err) {
+    throw new SkillSourceError(`Could not download ${skill.packageName}@${version2} (${err.message}).`, "registry-failed");
+  }
+  if (!matchesIntegrity(bytes, integrity)) {
+    throw new SkillSourceError(`${skill.packageName}@${version2} failed its integrity check; nothing was installed.`, "integrity");
+  }
+  const files = readTarEntries(zlib.gunzipSync(bytes), `package/${skill.packagePath}/`);
+  if (!files.some((f) => f.path === "SKILL.md")) {
+    throw new SkillSourceError(`${skill.packageName}@${version2} does not include the ${skill.title} skill.`, "not-in-package");
+  }
+  const tmp = fs14.mkdtempSync(path13.join(os3.tmpdir(), "one-skill-"));
+  for (const file of files) {
+    const dest = path13.join(tmp, ...file.path.split("/"));
+    fs14.mkdirSync(path13.dirname(dest), { recursive: true });
+    fs14.writeFileSync(dest, file.data);
+  }
+  return {
+    kind: "registry",
+    version: version2,
+    dir: tmp,
+    origin: tarball,
+    cleanup: () => {
+      try {
+        fs14.rmSync(tmp, { recursive: true, force: true });
+      } catch {
+      }
+    }
+  };
+}
+function matchesIntegrity(bytes, integrity) {
+  return integrity.split(/\s+/).some((entry) => {
+    const dash = entry.indexOf("-");
+    if (dash < 0) return false;
+    const algorithm = entry.slice(0, dash);
+    if (!["sha512", "sha384", "sha256"].includes(algorithm)) return false;
+    return crypto2.createHash(algorithm).update(bytes).digest("base64") === entry.slice(dash + 1);
+  });
+}
+function readTarEntries(tar, prefix) {
+  const out = [];
+  let offset = 0;
+  let paxPath = null;
+  const text5 = (start, length) => {
+    const raw = tar.subarray(start, start + length);
+    const end = raw.indexOf(0);
+    return raw.subarray(0, end < 0 ? raw.length : end).toString("utf-8");
+  };
+  while (offset + 512 <= tar.length) {
+    const header = tar.subarray(offset, offset + 512);
+    if (header.every((b) => b === 0)) break;
+    const size = parseInt(text5(offset + 124, 12).trim() || "0", 8);
+    const type = String.fromCharCode(header[156] || 48);
+    let name = text5(offset, 100);
+    if (text5(offset + 257, 5) === "ustar") {
+      const pre = text5(offset + 345, 155);
+      if (pre) name = `${pre}/${name}`;
+    }
+    const body = tar.subarray(offset + 512, offset + 512 + size);
+    if (type === "x") {
+      const match = /\d+ path=([^\n]*)\n/.exec(body.toString("utf-8"));
+      paxPath = match ? match[1] : null;
+    } else {
+      const full = paxPath ?? name;
+      paxPath = null;
+      if ((type === "0" || type === "\0") && full.startsWith(prefix)) {
+        const rel = full.slice(prefix.length);
+        const parts = rel.split("/");
+        if (rel && !path13.isAbsolute(rel) && !parts.includes("..") && !parts.includes("")) {
+          out.push({ path: rel, data: Buffer.from(body) });
+        }
+      }
+    }
+    offset += 512 + Math.ceil(size / 512) * 512;
+  }
+  return out;
+}
+var SKILL_STAMP = ".one-skill.json";
+function canonicalSkillDir(skill, plan) {
+  return path13.join(plan.root, ...UNIVERSAL_PROJECT_DIR.split("/"), skill.dirName);
+}
+function readStamp(dir) {
+  try {
+    return JSON.parse(fs14.readFileSync(path13.join(dir, SKILL_STAMP), "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function resolveAgentFolders(plan) {
+  const explicit = plan.agents.length > 0;
+  const chosen = SKILL_AGENT_TARGETS.filter((agent) => {
+    if (explicit) return plan.agents.includes(agent.id);
+    if (plan.scope === "global") {
+      return fs14.existsSync(path13.join(plan.root, path13.dirname(agent.homeDir)));
+    }
+    return agent.projectMarker === null || fs14.existsSync(path13.join(plan.root, agent.projectMarker));
+  });
+  const readers = [];
+  const byDir = /* @__PURE__ */ new Map();
+  for (const agent of chosen) {
+    const dir = plan.scope === "project" ? agent.projectDir : agent.homeDir;
+    if (dir === UNIVERSAL_PROJECT_DIR) {
+      readers.push(agent.name);
+      continue;
+    }
+    byDir.set(dir, [...byDir.get(dir) ?? [], agent.name]);
+  }
+  return { readers, folders: [...byDir].map(([dir, agents]) => ({ dir, agents })) };
+}
+function copyDir(src, dest) {
+  fs14.mkdirSync(dest, { recursive: true });
+  for (const entry of fs14.readdirSync(src, { withFileTypes: true })) {
+    if (entry.name === SKILL_STAMP) continue;
+    const from = path13.join(src, entry.name);
+    const to = path13.join(dest, entry.name);
+    if (entry.isDirectory()) copyDir(from, to);
+    else fs14.copyFileSync(from, to);
+  }
+}
+function removePath(target) {
+  try {
+    const stat = fs14.lstatSync(target);
+    if (stat.isSymbolicLink()) fs14.unlinkSync(target);
+    else fs14.rmSync(target, { recursive: true, force: true });
+  } catch {
+  }
+}
+function linkDir(target, linkPath) {
+  removePath(linkPath);
+  fs14.mkdirSync(path13.dirname(linkPath), { recursive: true });
+  try {
+    fs14.symlinkSync(path13.relative(path13.dirname(linkPath), target), linkPath, "dir");
+    return "symlink";
+  } catch {
+  }
+  try {
+    fs14.symlinkSync(target, linkPath, "junction");
+    return "junction";
+  } catch {
+  }
+  copyDir(target, linkPath);
+  return "copy";
+}
+function installSkill(skill, source, plan, cliVersion2) {
+  const canonical = canonicalSkillDir(skill, plan);
+  const previous = readStamp(canonical);
+  const { readers, folders } = resolveAgentFolders(plan);
+  const nextPaths = new Set(folders.map((f) => `${f.dir}/${skill.dirName}`));
+  for (const link of previous?.links ?? []) {
+    if (!nextPaths.has(toPosix(link.path))) removePath(fromStamp(plan.root, link.path));
+  }
+  removePath(canonical);
+  copyDir(source.dir, canonical);
+  const links = folders.map((folder) => {
+    const rel = `${folder.dir}/${skill.dirName}`;
+    return { path: rel, kind: linkDir(canonical, fromStamp(plan.root, rel)), agents: folder.agents };
+  });
+  const stamp = {
+    skill: skill.name,
+    package: skill.packageName,
+    version: source.version,
+    source: source.kind,
+    scope: plan.scope,
+    links,
+    installedBy: `@withone/cli@${cliVersion2}`,
+    installedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  fs14.writeFileSync(path13.join(canonical, SKILL_STAMP), JSON.stringify(stamp, null, 2) + "\n");
+  return { skill, version: source.version, source: source.kind, origin: source.origin, scope: plan.scope, root: plan.root, canonical, readers, links };
+}
+function removeSkill(skill, plan) {
+  const canonical = canonicalSkillDir(skill, plan);
+  const stamp = readStamp(canonical);
+  if (!stamp && !fs14.existsSync(path13.join(canonical, "SKILL.md"))) return { removed: false, paths: [] };
+  const paths = [];
+  for (const link of stamp?.links ?? []) {
+    const full = fromStamp(plan.root, link.path);
+    if (fs14.existsSync(full) || isDanglingLink(full)) {
+      removePath(full);
+      paths.push(full);
+    }
+  }
+  removePath(canonical);
+  paths.push(canonical);
+  return { removed: true, paths };
+}
+function toPosix(p9) {
+  return p9.split("\\").join("/");
+}
+function fromStamp(root, rel) {
+  return path13.join(root, ...toPosix(rel).split("/"));
+}
+function isDanglingLink(p9) {
+  try {
+    return fs14.lstatSync(p9).isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function installedSkill(skill, plan) {
+  const canonical = canonicalSkillDir(skill, plan);
+  if (!fs14.existsSync(path13.join(canonical, "SKILL.md"))) return null;
+  const stamp = readStamp(canonical);
+  return { scope: plan.scope, root: plan.root, canonical, version: stamp?.version ?? null, source: stamp?.source ?? null, links: stamp?.links ?? [] };
+}
+function globalRoot() {
+  return homeDir();
+}
+function refreshProjectSkills(cwd, cliVersion2) {
+  const root = findProjectRoot(cwd);
+  if (!root || path13.resolve(root) === path13.resolve(homeDir())) return [];
+  const results = [];
+  for (const skill of OPTIONAL_SKILLS) {
+    const canonical = canonicalSkillDir(skill, { scope: "project", root });
+    const stamp = readStamp(canonical);
+    if (!stamp || stamp.scope !== "project" || stamp.source !== "project") continue;
+    const installed = findInstalledPackage(root, skill.packageName);
+    if (!installed || installed.version === stamp.version) continue;
+    let source;
+    try {
+      source = projectSkillSource(skill, root);
+    } catch {
+      continue;
+    }
+    if (!source) continue;
+    const agents = SKILL_AGENT_TARGETS.filter((a) => stamp.links.some((l) => l.agents.includes(a.name)) || a.projectDir === UNIVERSAL_PROJECT_DIR).map((a) => a.id);
+    installSkill(skill, source, { scope: "project", root, agents }, cliVersion2);
+    results.push({ skill: skill.name, from: stamp.version, to: source.version, root });
+  }
+  return results;
+}
+
+// src/commands/skills.ts
+import path14 from "path";
+import pc16 from "picocolors";
+function requireSkill(name) {
+  const skill = findOptionalSkill(name);
+  if (!skill) {
+    const known = OPTIONAL_SKILLS.map((s) => s.name).join(", ");
+    error(`Unknown skill "${name}". Available: ${known}. The One skill itself is installed by \`one init\`.`);
+  }
+  return skill;
+}
+function parseAgents(raw) {
+  if (!raw) return [];
+  const ids = raw.split(",").map((s) => s.trim().toLowerCase()).filter(Boolean);
+  for (const id of ids) {
+    if (!findAgentTarget(id)) {
+      error(`Unknown agent "${id}". Use: ${SKILL_AGENT_TARGETS.map((a) => a.id).join(", ")}.`);
+    }
+  }
+  return ids;
+}
+function resolvePlan(options) {
+  const agents = parseAgents(options.agents);
+  if (options.global) return { scope: "global", root: globalRoot(), agents };
+  const root = findProjectRoot(process.cwd());
+  if (!root || path14.resolve(root) === path14.resolve(homeDir())) {
+    error("No project here: run this inside your app (a folder with package.json or .git), or pass --global.");
+  }
+  return { scope: "project", root, agents };
+}
+async function resolveSource(skill, plan) {
+  try {
+    const local = projectSkillSource(skill, plan.scope === "project" ? plan.root : process.cwd());
+    if (local) return local;
+    return await registrySkillSource(skill);
+  } catch (err) {
+    if (err instanceof SkillSourceError) error(err.message);
+    throw err;
+  }
+}
+function display(p9, root) {
+  const rel = path14.relative(root, p9);
+  return rel && !rel.startsWith("..") ? rel : p9;
+}
+function report(command, result, packageInProject) {
+  const where = (p9) => display(p9, result.root);
+  if (isAgentMode()) {
+    json({
+      command,
+      skill: result.skill.name,
+      name: result.skill.dirName,
+      version: result.version,
+      source: { kind: result.source, from: result.origin },
+      scope: result.scope,
+      root: result.root,
+      installedTo: [
+        { path: result.canonical, kind: "folder", agents: result.readers },
+        ...result.links.map((l) => ({ path: path14.join(result.root, ...l.path.split("/")), kind: l.kind, agents: l.agents }))
+      ],
+      next: nextSteps(result, packageInProject)
+    });
+    return;
+  }
+  const scopeLabel2 = result.scope === "project" ? "this project" : "every project on this machine";
+  console.log();
+  console.log(`  ${pc16.green("\u2713")} ${pc16.bold(`${result.skill.title} skill ${result.version}`)} installed for ${scopeLabel2}`);
+  console.log();
+  const from = result.source === "project" ? `${where(result.origin)} ${pc16.dim("(the version your code uses)")}` : `npm ${pc16.dim(result.scope === "project" ? `(latest ${result.skill.packageName}; not installed in this project yet)` : `(latest ${result.skill.packageName})`)}`;
+  console.log(`  ${pc16.dim("From")}  ${from}`);
+  const rows = [
+    { path: where(result.canonical), agents: result.readers },
+    ...result.links.map((l) => ({ path: `${l.path}${l.kind === "copy" ? pc16.dim(" (copy)") : ""}`, agents: l.agents }))
+  ];
+  rows.forEach((row, i) => {
+    const agents = row.agents.length ? pc16.dim(row.agents.join(", ")) : pc16.dim("shared copy the links point to");
+    console.log(`  ${pc16.dim(i === 0 ? "To  " : "    ")}  ${row.path}  ${agents}`);
+  });
+  console.log();
+  console.log(`  ${pc16.bold("Next")}`);
+  nextSteps(result, packageInProject).forEach((step, i) => console.log(`  ${i + 1}. ${step}`));
+  console.log();
+}
+function nextSteps(result, packageInProject) {
+  const steps = [];
+  if (result.scope === "project" && !packageInProject) steps.push(`Install the SDK: npm install ${result.skill.packageName}`);
+  steps.push(`Ask your agent: "Add ${result.skill.title} to this app." The skill tells it every step.`);
+  steps.push("Set the secrets it names in your server environment yourself; never paste them into a chat.");
+  if (result.scope === "project") {
+    const folders = [`${UNIVERSAL_DIR}/${result.skill.dirName}`, ...result.links.map((l) => l.path)];
+    steps.push(`Commit ${folders.join(" and ")} so your team's agents share it. Any \`one\` command here refreshes it when ${result.skill.packageName} is upgraded.`);
+  } else {
+    steps.push(`Refresh it after a new ${result.skill.packageName} release: one skills update ${result.skill.name} --global`);
+  }
+  return steps;
+}
+var UNIVERSAL_DIR = ".agents/skills";
+async function skillsAddCommand(name, options) {
+  const skill = requireSkill(name);
+  const plan = resolvePlan(options);
+  const source = await resolveSource(skill, plan);
+  try {
+    const result = installSkill(skill, source, plan, getCurrentVersion());
+    const packageInProject = plan.scope === "project" && findInstalledPackage(plan.root, skill.packageName) !== null;
+    report("skills add", result, packageInProject);
+  } finally {
+    source.cleanup();
+  }
+}
+async function skillsUpdateCommand(name, options) {
+  const skills2 = name ? [requireSkill(name)] : OPTIONAL_SKILLS;
+  const plan = resolvePlan(options);
+  const updated = [];
+  const skipped = [];
+  for (const skill of skills2) {
+    const current = installedSkill(skill, plan);
+    if (!current) {
+      skipped.push(skill.name);
+      continue;
+    }
+    const agents = plan.agents.length ? plan.agents : SKILL_AGENT_TARGETS.filter((a) => current.links.some((l) => l.agents.includes(a.name)) || plan.scope === "project" && a.projectDir === UNIVERSAL_DIR).map((a) => a.id);
+    const source = await resolveSource(skill, plan);
+    try {
+      updated.push(installSkill(skill, source, { ...plan, agents }, getCurrentVersion()));
+    } finally {
+      source.cleanup();
+    }
+  }
+  if (name && updated.length === 0) error(`${skills2[0].title} skill is not installed here. Add it: one skills add ${skills2[0].name}${plan.scope === "global" ? " --global" : ""}`);
+  if (isAgentMode()) {
+    json({
+      command: "skills update",
+      scope: plan.scope,
+      updated: updated.map((r) => ({ skill: r.skill.name, version: r.version, source: r.source, path: r.canonical })),
+      notInstalled: skipped
+    });
+    return;
+  }
+  if (updated.length === 0) {
+    console.log("No optional skills are installed here. See: one skills list");
+    return;
+  }
+  for (const r of updated) console.log(`  ${pc16.green("\u2713")} ${r.skill.title} skill ${r.version} ${pc16.dim(display(r.canonical, r.root))}`);
+}
+async function skillsRemoveCommand(name, options) {
+  const skill = requireSkill(name);
+  const plan = resolvePlan(options);
+  const result = removeSkill(skill, plan);
+  if (isAgentMode()) {
+    json({ command: "skills remove", skill: skill.name, scope: plan.scope, removed: result.removed, paths: result.paths });
+    return;
+  }
+  if (!result.removed) {
+    console.log(`${skill.title} skill is not installed ${plan.scope === "global" ? "globally" : "in this project"}.`);
+    return;
+  }
+  console.log(`  ${pc16.green("\u2713")} Removed the ${skill.title} skill`);
+  for (const p9 of result.paths) console.log(`    ${pc16.dim(display(p9, plan.root))}`);
+}
+async function skillsListCommand() {
+  const projectRoot = findProjectRoot(process.cwd());
+  const inProject = projectRoot && path14.resolve(projectRoot) !== path14.resolve(homeDir()) ? projectRoot : null;
+  const optional = OPTIONAL_SKILLS.map((skill) => {
+    const project = inProject ? installedSkill(skill, { scope: "project", root: inProject }) : null;
+    const global = installedSkill(skill, { scope: "global", root: globalRoot() });
+    const pkg = inProject ? findInstalledPackage(inProject, skill.packageName) : null;
+    return {
+      skill: skill.name,
+      name: skill.dirName,
+      title: skill.title,
+      description: skill.description,
+      package: skill.packageName,
+      packageInProject: pkg?.version ?? null,
+      project: project ? { version: project.version, path: project.canonical, upToDate: !pkg || project.version === pkg.version } : null,
+      global: global ? { version: global.version, path: global.canonical } : null
+    };
+  });
+  const oneSkill = {
+    skill: "one",
+    title: "One CLI",
+    managedBy: "one init",
+    installed: isSkillInstalled(),
+    version: readInstalledSkillVersion()
+  };
+  if (isAgentMode()) {
+    json({ command: "skills list", project: inProject, skills: [oneSkill, ...optional] });
+    return;
+  }
+  console.log();
+  console.log(`  ${pc16.bold("one")}      ${oneSkill.installed ? pc16.green(`installed ${oneSkill.version ?? ""}`.trim()) : pc16.yellow("not installed")}  ${pc16.dim("managed by one init")}`);
+  for (const s of optional) {
+    const state = s.project ? pc16.green(`project ${s.project.version ?? ""}`.trim()) + (s.project.upToDate ? "" : pc16.yellow(` (package is ${s.packageInProject}: run one skills update ${s.skill})`)) : s.global ? pc16.green(`global ${s.global.version ?? ""}`.trim()) : pc16.dim(`not installed \u2014 one skills add ${s.skill}`);
+    console.log(`  ${pc16.bold(s.skill.padEnd(8))} ${state}`);
+    console.log(`  ${" ".repeat(8)} ${pc16.dim(s.description)}`);
+  }
+  console.log();
+}
+
 // src/cli.ts
 silenceWarningsInAgentMode();
 var require4 = createRequire3(import.meta.url);
@@ -12946,6 +13479,12 @@ program.name("one").option("--agent", "Machine-readable JSON output (no colors,
     3. one actions execute <p> <id> <key> Execute the action
        one actions load <id> --section <s> More of an action's docs: a section a digest left out, --full, or --toc
 
+  Skills for your coding agent:
+    one skills list                       The One skill and the optional ones (installed or not)
+    one skills add connect                Add the One Connect skill to this project (--global for every project)
+    one skills update [connect]           Re-copy from the installed @withone/connect after an upgrade
+    one skills remove connect             Remove it
+
   Guide:
     one guide [topic]                     Full CLI guide (topics: overview, actions, workflows, memory, sync, all)
 
@@ -13019,6 +13558,12 @@ program.hook("preAction", (thisCommand, actionCommand) => {
     } catch {
     }
   }
+  if (commandName !== "skills") {
+    try {
+      refreshProjectSkills(process.cwd(), getCurrentVersion());
+    } catch {
+    }
+  }
 });
 program.hook("postAction", async () => {
   await closeBackendIfCached();
@@ -13041,6 +13586,19 @@ program.command("login").description("Authenticate with One via browser").action
 program.command("logout").description("Clear local credentials").action(async () => {
   await logoutCommand();
 });
+var skills = program.command("skills").description("Optional skills for your coding agent, such as One Connect (the One skill itself comes from one init)");
+skills.command("list").description("Show the One skill and each optional skill, with where it is installed").action(async () => {
+  await skillsListCommand();
+});
+skills.command("add <name>").description("Install an optional skill (connect) into this project, from the SDK version it uses").option("-g, --global", "Install for every project on this machine instead").option("--agents <ids>", "Comma-separated agents to link: claude-code, codex, cursor, amp, opencode, windsurf, kiro, goose, roo").action(async (name, options) => {
+  await skillsAddCommand(name, options);
+});
+skills.command("update [name]").description("Re-copy installed optional skills from their source (all when no name is given)").option("-g, --global", "Update the global install").option("--agents <ids>", "Change which agents are linked").action(async (name, options) => {
+  await skillsUpdateCommand(name, options);
+});
+skills.command("remove <name>").alias("rm").description("Remove an optional skill and the agent folders that point at it").option("-g, --global", "Remove the global install").action(async (name, options) => {
+  await skillsRemoveCommand(name, options);
+});
 var config = program.command("config").description("Configure the CLI (access control, skills, ...)").action(async () => {
   await configCommand();
 });
@@ -13140,8 +13698,8 @@ config.command("reset").description("Remove the project config for the current d
         return;
       }
     }
-    const fs15 = await import("fs");
-    fs15.unlinkSync(globalPath);
+    const fs16 = await import("fs");
+    fs16.unlinkSync(globalPath);
     if (isAgentMode()) {
       json({ deleted: true, scope: "global" });
     } else {
@@ -13158,15 +13716,15 @@ config.command("reset").description("Remove the project config for the current d
     }
     return;
   }
-  const fs14 = await import("fs");
-  const configContent = fs14.readFileSync(resolved.path, "utf-8");
-  fs14.unlinkSync(resolved.path);
+  const fs15 = await import("fs");
+  const configContent = fs15.readFileSync(resolved.path, "utf-8");
+  fs15.unlinkSync(resolved.path);
   const next = resolveConfig();
-  fs14.mkdirSync(path13.dirname(resolved.path), { recursive: true });
-  fs14.writeFileSync(resolved.path, configContent);
+  fs15.mkdirSync(path15.dirname(resolved.path), { recursive: true });
+  fs15.writeFileSync(resolved.path, configContent);
   let fallbackLabel;
   if (next.scope === "project") {
-    fallbackLabel = `parent project config (${path13.basename(next.projectRoot)})`;
+    fallbackLabel = `parent project config (${path15.basename(next.projectRoot)})`;
   } else if (next.scope === "global") {
     fallbackLabel = "global config";
   } else {
@@ -13175,7 +13733,7 @@ config.command("reset").description("Remove the project config for the current d
   if (!isAgentMode()) {
     const p9 = await import("@clack/prompts");
     const confirmed = await p9.confirm({
-      message: `Delete project config for ${path13.basename(resolved.projectRoot)}? Will fall back to ${fallbackLabel}.`,
+      message: `Delete project config for ${path15.basename(resolved.projectRoot)}? Will fall back to ${fallbackLabel}.`,
       initialValue: false
     });
     if (p9.isCancel(confirmed) || !confirmed) {
@@ -13183,9 +13741,9 @@ config.command("reset").description("Remove the project config for the current d
       return;
     }
   }
-  fs14.unlinkSync(resolved.path);
+  fs15.unlinkSync(resolved.path);
   try {
-    fs14.rmdirSync(path13.dirname(resolved.path));
+    fs15.rmdirSync(path15.dirname(resolved.path));
   } catch {
   }
   if (isAgentMode()) {
@@ -13348,22 +13906,22 @@ program.command("whoami").description("Show the user, organization, and project
     });
     return;
   }
-  const pc16 = (await import("picocolors")).default;
+  const pc17 = (await import("picocolors")).default;
   const contextParts = [];
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
-  const configLabel = configScope === "project" ? pc16.cyan("project config") : pc16.magenta("global config");
+  const envLabel = env === "test" ? pc17.yellow("test") : pc17.green("live");
+  const configLabel = configScope === "project" ? pc17.cyan("project config") : pc17.magenta("global config");
   console.log();
-  console.log(`  ${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`);
-  console.log(`  ${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`);
-  if (keyName) console.log(`  ${pc16.dim("Key:")} ${keyName}`);
-  if (whoami.organization) console.log(`  ${pc16.dim("Org:")} ${whoami.organization.name} ${pc16.dim(`(${whoami.organization.id})`)}`);
-  if (whoami.project) console.log(`  ${pc16.dim("Project:")} ${whoami.project.name} ${pc16.dim(`(${whoami.project.id})`)}`);
+  console.log(`  ${pc17.bold(scopeDisplay)} ${pc17.dim("\xB7")} ${envLabel}`);
+  console.log(`  ${whoami.user.name} ${pc17.dim(`(${whoami.user.email})`)}`);
+  if (keyName) console.log(`  ${pc17.dim("Key:")} ${keyName}`);
+  if (whoami.organization) console.log(`  ${pc17.dim("Org:")} ${whoami.organization.name} ${pc17.dim(`(${whoami.organization.id})`)}`);
+  if (whoami.project) console.log(`  ${pc17.dim("Project:")} ${whoami.project.name} ${pc17.dim(`(${whoami.project.id})`)}`);
   console.log();
-  console.log(`  ${pc16.dim("Using")} ${configLabel}`);
-  console.log(`  ${pc16.dim("API:")} ${apiBase}`);
+  console.log(`  ${pc17.dim("Using")} ${configLabel}`);
+  console.log(`  ${pc17.dim("API:")} ${apiBase}`);
   console.log();
 });
 program.command("add [platform]").description("Shortcut for: connection add").option("--tag <name>", "Tag the new connection (disambiguates multiple connections per platform in sync/flow profiles)").action(async (platform, options) => {