@withone/cli 2.4.0 → 2.6.0

package/dist/index.js

@@ -7,12 +7,21 @@ import {
   TimeoutError,
   clearAll,
   clearEntry,
+  cliVersion,
+  collectInstallContext,
+  describeInstallContext,
+  drainQueue,
   flowRequiresBash,
+  flush,
+  flushUsageRollups,
   formatAge,
   generateFlowGuide,
   getAge,
+  getAgentStatuses,
   getNestedStepsKeys,
   getStepTypeDescriptor,
+  installContextToParams,
+  installMcpConfig,
   isActionAllowed,
   isFresh,
   isMethodAllowed,
@@ -21,17 +30,19 @@ import {
   listFlows,
   loadFlowWithMeta,
   makeCacheEntry,
+  maybeShowTelemetryNotice,
   readCache,
+  recordCommand,
   resolveActionDetails,
   resolveFlowPath,
   saveFlow,
   validateActionInput,
   walkSteps,
   writeCache
-} from "./chunk-6FA7KUNQ.js";
+} from "./chunk-4KX5ZERS.js";
 import {
   memSqlCommand
-} from "./chunk-7FPQOAQ4.js";
+} from "./chunk-O3HDWHHS.js";
 import {
   collectIdentityKeys,
   countRecords,
@@ -62,20 +73,12 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-XKUTG7JD.js";
+} from "./chunk-PUQKTRYC.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
 import {
-  cancel,
-  createSpinner,
-  error,
-  intro,
-  isAgentMode,
-  json,
-  note,
   okJson,
-  outro,
   parseCsv,
   parseJsonArg,
   parsePositiveInt,
@@ -83,10 +86,20 @@ import {
   printRecord,
   requireMemoryInit,
   semanticSearchUpgradeHint,
-  semanticSearchUpgradeLine,
+  semanticSearchUpgradeLine
+} from "./chunk-VMFWA43Q.js";
+import {
+  cancel,
+  createSpinner,
+  error,
+  intro,
+  isAgentMode,
+  json,
+  note,
+  outro,
   setAgentMode,
   silenceWarningsInAgentMode
-} from "./chunk-NOFJ4NYD.js";
+} from "./chunk-Q6PWTATS.js";
 import {
   SCHEMA_VERSION,
   addRecord,
@@ -108,16 +121,12 @@ import {
   updateMemoryConfig
 } from "./chunk-3HRC3IPE.js";
 import {
-  appendAnalyticsQueue,
-  appendUsageLog,
-  claimUsageLog,
   configExists,
   ensureWhoAmI,
   getAccessControl,
   getAccessControlFromAllSources,
   getApiBase,
   getApiKey,
-  getDeviceId,
   getEnvFromApiKey,
   getGlobalConfigPath,
   getOpenAiApiKey,
@@ -126,665 +135,32 @@ import {
   getWhoAmI,
   globalConfigExists,
   homeDir,
-  markTelemetryNoticeShown,
   projectConfigExists,
-  readAnalyticsQueue,
   readConfig,
   readGlobalConfig,
   readProjectConfig,
-  readUsageState,
   resolveConfig,
   saveCredentials,
-  telemetryNoticeShown,
   updateAccessControl,
   updateApiBase,
   updateWhoAmI,
-  writeAnalyticsQueue,
-  writeConfig,
-  writeUsageLog,
-  writeUsageState
+  writeConfig
 } from "./chunk-HTXZZQ6U.js";
 
 // src/cli.ts
-import { createRequire as createRequire3 } from "module";
-import path15 from "path";
+import { createRequire } from "module";
+import path12 from "path";
 import { Command } from "commander";
 
 // src/commands/init.ts
 import * as p3 from "@clack/prompts";
-import pc4 from "picocolors";
-import fs4 from "fs";
-import path5 from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
-
-// src/lib/agents.ts
-import fs from "fs";
-import path from "path";
-import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
-function expandPath(p9) {
-  if (p9.startsWith("~/")) {
-    return path.join(homeDir(), p9.slice(2));
-  }
-  return p9;
-}
-function getClaudeDesktopConfigPath() {
-  switch (process.platform) {
-    case "darwin":
-      return "~/Library/Application Support/Claude/claude_desktop_config.json";
-    case "win32":
-      return path.join(process.env.APPDATA || "", "Claude", "claude_desktop_config.json");
-    default:
-      return "~/.config/Claude/claude_desktop_config.json";
-  }
-}
-function getClaudeDesktopDetectDir() {
-  switch (process.platform) {
-    case "darwin":
-      return "~/Library/Application Support/Claude";
-    case "win32":
-      return path.join(process.env.APPDATA || "", "Claude");
-    default:
-      return "~/.config/Claude";
-  }
-}
-function getWindsurfConfigPath() {
-  if (process.platform === "win32") {
-    return path.join(homeDir(), ".codeium", "windsurf", "mcp_config.json");
-  }
-  return "~/.codeium/windsurf/mcp_config.json";
-}
-function getWindsurfDetectDir() {
-  if (process.platform === "win32") {
-    return path.join(homeDir(), ".codeium", "windsurf");
-  }
-  return "~/.codeium/windsurf";
-}
-function getCursorConfigPath() {
-  if (process.platform === "win32") {
-    return path.join(homeDir(), ".cursor", "mcp.json");
-  }
-  return "~/.cursor/mcp.json";
-}
-function getAgents() {
-  return [
-    {
-      id: "claude-code",
-      name: "Claude Code",
-      configPath: "~/.claude.json",
-      configKey: "mcpServers",
-      detectDir: "~/.claude",
-      projectConfigPath: ".mcp.json"
-    },
-    {
-      id: "claude-desktop",
-      name: "Claude Desktop",
-      configPath: getClaudeDesktopConfigPath(),
-      configKey: "mcpServers",
-      detectDir: getClaudeDesktopDetectDir()
-    },
-    {
-      id: "cursor",
-      name: "Cursor",
-      configPath: getCursorConfigPath(),
-      configKey: "mcpServers",
-      detectDir: "~/.cursor",
-      projectConfigPath: ".cursor/mcp.json"
-    },
-    {
-      id: "windsurf",
-      name: "Windsurf",
-      configPath: getWindsurfConfigPath(),
-      configKey: "mcpServers",
-      detectDir: getWindsurfDetectDir()
-    },
-    {
-      id: "codex",
-      name: "Codex",
-      configPath: "~/.codex/config.toml",
-      configKey: "mcp_servers",
-      detectDir: "~/.codex",
-      projectConfigPath: ".codex/config.toml",
-      configFormat: "toml"
-    },
-    {
-      id: "kiro",
-      name: "Kiro",
-      configPath: "~/.kiro/settings/mcp.json",
-      configKey: "mcpServers",
-      detectDir: "~/.kiro",
-      projectConfigPath: ".kiro/settings/mcp.json"
-    }
-  ];
-}
-function detectInstalledAgents() {
-  return getAgents().filter((agent) => {
-    const detectDir = expandPath(agent.detectDir);
-    return fs.existsSync(detectDir);
-  });
-}
-function getAgentConfigPath(agent, scope = "global") {
-  if (scope === "project" && agent.projectConfigPath) {
-    return path.join(process.cwd(), agent.projectConfigPath);
-  }
-  return expandPath(agent.configPath);
-}
-function readAgentConfig(agent, scope = "global") {
-  const configPath = getAgentConfigPath(agent, scope);
-  if (!fs.existsSync(configPath)) {
-    return {};
-  }
-  try {
-    const content = fs.readFileSync(configPath, "utf-8");
-    if (agent.configFormat === "toml") {
-      return parseToml(content);
-    }
-    return JSON.parse(content);
-  } catch {
-    return {};
-  }
-}
-function writeAgentConfig(agent, config2, scope = "global") {
-  const configPath = getAgentConfigPath(agent, scope);
-  const configDir = path.dirname(configPath);
-  if (!fs.existsSync(configDir)) {
-    fs.mkdirSync(configDir, { recursive: true });
-  }
-  if (agent.configFormat === "toml") {
-    fs.writeFileSync(configPath, stringifyToml(config2));
-  } else {
-    fs.writeFileSync(configPath, JSON.stringify(config2, null, 2));
-  }
-}
-function getMcpServerConfig(apiKey, accessControl) {
-  const env = {
-    ONE_SECRET: apiKey
-  };
-  if (accessControl) {
-    if (accessControl.permissions && accessControl.permissions !== "admin") {
-      env.ONE_PERMISSIONS = accessControl.permissions;
-    }
-    if (accessControl.connectionKeys && !(accessControl.connectionKeys.length === 1 && accessControl.connectionKeys[0] === "*")) {
-      env.ONE_CONNECTION_KEYS = accessControl.connectionKeys.join(",");
-    }
-    if (accessControl.actionIds && !(accessControl.actionIds.length === 1 && accessControl.actionIds[0] === "*")) {
-      env.ONE_ACTION_IDS = accessControl.actionIds.join(",");
-    }
-    if (accessControl.knowledgeAgent) {
-      env.ONE_KNOWLEDGE_AGENT = "true";
-    }
-  }
-  return {
-    command: "npx",
-    args: ["-y", "@withone/mcp"],
-    env
-  };
-}
-function installMcpConfig(agent, apiKey, scope = "global", accessControl) {
-  const config2 = readAgentConfig(agent, scope);
-  const configKey = agent.configKey;
-  const mcpServers = config2[configKey] || {};
-  mcpServers["one"] = getMcpServerConfig(apiKey, accessControl);
-  config2[configKey] = mcpServers;
-  writeAgentConfig(agent, config2, scope);
-}
-function isMcpInstalled(agent, scope = "global") {
-  const config2 = readAgentConfig(agent, scope);
-  const configKey = agent.configKey;
-  const mcpServers = config2[configKey];
-  return mcpServers?.["one"] !== void 0;
-}
-function getAgentStatuses() {
-  return getAgents().map((agent) => {
-    const detected = fs.existsSync(expandPath(agent.detectDir));
-    const globalMcp = detected && isMcpInstalled(agent, "global");
-    const projectMcp = agent.projectConfigPath ? isMcpInstalled(agent, "project") : null;
-    return { agent, detected, globalMcp, projectMcp };
-  });
-}
-
-// src/lib/browser.ts
-import open from "open";
-
-// src/lib/install-context.ts
+import pc3 from "picocolors";
 import fs2 from "fs";
-import os from "os";
-import path3 from "path";
-
-// src/lib/analytics.ts
-import { createRequire as createRequire2 } from "module";
-import { randomUUID, createHash } from "crypto";
-import pc from "picocolors";
-
-// src/lib/version.ts
-import { createRequire } from "module";
-import { existsSync } from "fs";
 import path2 from "path";
-import { fileURLToPath } from "url";
-var require2 = createRequire(import.meta.url);
-var cached = null;
-function cliVersion() {
-  if (cached !== null) return cached;
-  const dir = path2.dirname(fileURLToPath(import.meta.url));
-  for (let i = 1; i <= 4; i++) {
-    const candidate = path2.resolve(dir, ...Array(i).fill(".."), "package.json");
-    if (!existsSync(candidate)) continue;
-    try {
-      const version2 = require2(candidate).version;
-      if (version2) {
-        cached = version2;
-        return cached;
-      }
-    } catch {
-    }
-  }
-  cached = "unknown";
-  return cached;
-}
-
-// src/lib/analytics.ts
-var require3 = createRequire2(import.meta.url);
-var DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
-var DEFAULT_POSTHOG_KEY = "phc_a9ok4w0uxiZcVoSWOISIlin85lHMXQD3vWPaYnuRlRV";
-var SEND_MAX_ATTEMPTS = 3;
-var QUEUE_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
-var EXIT_GRACE_MS = 300;
-var inFlight = /* @__PURE__ */ new Set();
-var pending = /* @__PURE__ */ new Set();
-var dispatched = /* @__PURE__ */ new Set();
-var delivered = /* @__PURE__ */ new Set();
-var UUID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-function uuidFromInsertId(insertId) {
-  if (UUID_SHAPE.test(insertId)) return insertId.toLowerCase();
-  const h = createHash("sha1").update(`one-cli-event:${insertId}`).digest("hex");
-  const variant = (parseInt(h[16], 16) & 3 | 8).toString(16);
-  return `${h.slice(0, 8)}-${h.slice(8, 12)}-5${h.slice(13, 16)}-${variant}${h.slice(17, 20)}-${h.slice(20, 32)}`;
-}
-function posthogHost() {
-  return process.env.ONE_POSTHOG_HOST || DEFAULT_POSTHOG_HOST;
-}
-function posthogKey() {
-  return process.env.ONE_POSTHOG_KEY || DEFAULT_POSTHOG_KEY;
-}
-function envName() {
-  const key = getApiKey();
-  return key ? getEnvFromApiKey(key) : "live";
-}
-function isOn(value) {
-  return value === "1" || value === "true";
-}
-function debugLog(message) {
-  if (isOn(process.env.ONE_ANALYTICS_DEBUG)) {
-    process.stderr.write(`[analytics] ${message}
-`);
-  }
-}
-function isTelemetryDisabled() {
-  if (isOn(process.env.ONE_NO_TELEMETRY) || isOn(process.env.ONE_DISABLE_TELEMETRY)) return true;
-  if (isOn(process.env.DO_NOT_TRACK)) return true;
-  if (isOn(process.env.CI)) return true;
-  if (readConfig()?.telemetry === "off") return true;
-  return false;
-}
-function distinctId() {
-  return getWhoAmI()?.user?.id ?? getDeviceId();
-}
-function isAuthenticated() {
-  return !!getWhoAmI()?.user || !!getApiKey();
-}
-function baseProperties() {
-  return {
-    $lib: "one-cli",
-    cli_version: cliVersion(),
-    agent_mode: isAgentMode(),
-    env: envName(),
-    os: process.platform,
-    arch: process.arch,
-    node_version: process.versions.node,
-    authenticated: isAuthenticated()
-  };
-}
-function personSet() {
-  const whoami = getWhoAmI();
-  if (!whoami?.user) return void 0;
-  const set = {};
-  if (whoami.user.email) set.email = whoami.user.email;
-  if (whoami.user.name) set.name = whoami.user.name;
-  if (whoami.organization?.id) set.organization_id = whoami.organization.id;
-  return Object.keys(set).length ? set : void 0;
-}
-function send(item) {
-  const insertId = item.properties.$insert_id;
-  if (insertId) dispatched.add(insertId);
-  const controller = new AbortController();
-  inFlight.add(controller);
-  const run = (async () => {
-    try {
-      const res = await fetch(`${posthogHost()}/i/v0/e/`, {
-        method: "POST",
-        headers: { "Content-Type": "application/json" },
-        body: JSON.stringify({
-          api_key: posthogKey(),
-          event: item.event,
-          distinct_id: item.distinct_id,
-          // PostHog's dedupe key — a re-sent copy is dropped on ingest.
-          uuid: item.uuid ?? (insertId ? uuidFromInsertId(insertId) : void 0),
-          properties: item.properties,
-          timestamp: item.timestamp
-        }),
-        signal: controller.signal
-      });
-      if (res.ok && insertId) delivered.add(insertId);
-      debugLog(`"${item.event}" -> HTTP ${res.status}${res.ok ? "" : " (retry next run)"}`);
-    } catch (err) {
-      debugLog(`"${item.event}" not sent: ${err instanceof Error ? err.message : String(err)} (retry next run)`);
-    } finally {
-      inFlight.delete(controller);
-    }
-  })();
-  pending.add(run);
-  void run.finally(() => pending.delete(run));
-}
-function capture(event, properties = {}, opts = {}) {
-  if (isTelemetryDisabled()) {
-    debugLog(`disabled \u2014 skipping "${event}"`);
-    return;
-  }
-  const did = opts.distinctId ?? distinctId();
-  const props = { ...baseProperties(), ...properties };
-  if (props.$insert_id === void 0) props.$insert_id = randomUUID();
-  const insertId = props.$insert_id;
-  if (opts.personProfile === false) {
-    props.$process_person_profile = false;
-  } else if (did === distinctId()) {
-    const set = personSet();
-    if (set) props.$set = set;
-  }
-  const item = {
-    event,
-    distinct_id: did,
-    properties: props,
-    timestamp: opts.timestamp ?? (/* @__PURE__ */ new Date()).toISOString(),
-    uuid: uuidFromInsertId(insertId)
-  };
-  appendAnalyticsQueue(JSON.stringify(item));
-}
-var ROLLUP_WINDOW_MS = 5 * 60 * 1e3;
-var ROLLUP_MAX_BATCH = 500;
-function utcDay(ts) {
-  return new Date(ts).toISOString().slice(0, 10);
-}
-var PRE_AUTH_COMMANDS = /* @__PURE__ */ new Set([
-  "init",
-  "login",
-  "logout",
-  "guide",
-  "platforms",
-  "onboard",
-  "config",
-  "update",
-  "help"
-]);
-function shouldRecord(commandPath2) {
-  if (isAuthenticated()) return true;
-  return PRE_AUTH_COMMANDS.has(commandPath2.split(" ")[0]);
-}
-function recordCommand(command) {
-  if (isTelemetryDisabled()) {
-    writeUsageLog([]);
-    return;
-  }
-  const cmdPath = commandPath(command);
-  if (!shouldRecord(cmdPath)) return;
-  const did = distinctId();
-  const entry = { ts: Date.now(), command: cmdPath, agent: isAgentMode(), did };
-  appendUsageLog(JSON.stringify(entry));
-  const today = utcDay(entry.ts);
-  const state = readUsageState();
-  const firstTouch = state.lastDay !== today || state.distinctId !== did;
-  flushUsageRollups({ force: firstTouch });
-  if (firstTouch) writeUsageState({ lastDay: today, distinctId: did });
-}
-function flushUsageRollups(opts = {}) {
-  if (isTelemetryDisabled()) {
-    writeUsageLog([]);
-    return;
-  }
-  const lines = claimUsageLog();
-  if (!lines || lines.length === 0) return;
-  const entries = [];
-  for (const line of lines) {
-    try {
-      const e = JSON.parse(line);
-      if (e && typeof e.ts === "number" && typeof e.command === "string" && typeof e.did === "string") {
-        entries.push(e);
-      }
-    } catch {
-    }
-  }
-  if (entries.length === 0) return;
-  const currentDid = entries[entries.length - 1].did;
-  const now = Date.now();
-  const groups = /* @__PURE__ */ new Map();
-  for (const e of entries) {
-    const g = groups.get(e.did);
-    if (g) g.push(e);
-    else groups.set(e.did, [e]);
-  }
-  const kept = [];
-  for (const [did, group] of groups) {
-    const due = opts.force === true || did !== currentDid || // a superseded login's batch — flush it now
-    group.length >= ROLLUP_MAX_BATCH || now - group[0].ts >= ROLLUP_WINDOW_MS;
-    if (due) emitRollup(did, group);
-    else kept.push(...group);
-  }
-  for (const e of kept) appendUsageLog(JSON.stringify(e));
-}
-function emitRollup(did, group) {
-  const byCommand = {};
-  let agentCount = 0;
-  for (const e of group) {
-    byCommand[e.command] = (byCommand[e.command] ?? 0) + 1;
-    if (e.agent) agentCount += 1;
-  }
-  const insertId = createHash("sha1").update(`${did}|${group.map((e) => `${e.ts}:${e.command}:${e.agent ? 1 : 0}`).join("|")}`).digest("hex");
-  capture(
-    "CLI Usage Rollup",
-    {
-      command_count: group.length,
-      by_command: byCommand,
-      agent_count: agentCount,
-      human_count: group.length - agentCount,
-      window_start: new Date(group[0].ts).toISOString(),
-      window_end: new Date(group[group.length - 1].ts).toISOString(),
-      $insert_id: insertId
-    },
-    {
-      distinctId: did,
-      timestamp: new Date(group[group.length - 1].ts).toISOString(),
-      // Rollups bill at the anonymous rate; the person already exists.
-      personProfile: false
-    }
-  );
-  debugLog(`rollup \u2014 ${group.length} command(s) for ${did}`);
-}
-function commandPath(command) {
-  const parts = [];
-  let current = command;
-  while (current && current.name() && current.name() !== "one") {
-    parts.unshift(current.name());
-    current = current.parent;
-  }
-  return parts.join(" ") || command.name();
-}
-function drainQueue() {
-  if (isTelemetryDisabled()) {
-    writeAnalyticsQueue([]);
-    return;
-  }
-  const now = Date.now();
-  const kept = [];
-  let changed = false;
-  for (const line of readAnalyticsQueue()) {
-    let item;
-    try {
-      item = JSON.parse(line);
-    } catch {
-      changed = true;
-      continue;
-    }
-    const insertId = item?.properties?.$insert_id;
-    if (!insertId) {
-      changed = true;
-      continue;
-    }
-    const age = now - Date.parse(item.timestamp);
-    const attempts = item.attempts ?? 0;
-    if (!(age < QUEUE_MAX_AGE_MS) || attempts >= SEND_MAX_ATTEMPTS) {
-      debugLog(`"${item.event}" dropped (${attempts} attempts, ${Math.round(age / 6e4)} min old)`);
-      changed = true;
-      continue;
-    }
-    if (dispatched.has(insertId)) {
-      kept.push(line);
-      continue;
-    }
-    item.attempts = attempts + 1;
-    if (!item.uuid) item.uuid = uuidFromInsertId(insertId);
-    kept.push(JSON.stringify(item));
-    changed = true;
-    send(item);
-  }
-  if (changed) writeAnalyticsQueue(kept);
-}
-async function flush() {
-  if (pending.size > 0) {
-    await Promise.race([
-      Promise.allSettled([...pending]),
-      new Promise((resolve) => setTimeout(resolve, EXIT_GRACE_MS))
-    ]);
-  }
-  for (const controller of inFlight) controller.abort();
-  const remaining = readAnalyticsQueue().filter((line) => {
-    try {
-      const item = JSON.parse(line);
-      const id = item.properties?.$insert_id;
-      if (!id || delivered.has(id)) return false;
-      return (item.attempts ?? 0) < SEND_MAX_ATTEMPTS;
-    } catch {
-      return false;
-    }
-  });
-  writeAnalyticsQueue(remaining);
-  dispatched.clear();
-  delivered.clear();
-}
-function maybeShowTelemetryNotice() {
-  if (isTelemetryDisabled() || isAgentMode()) return;
-  if (telemetryNoticeShown()) return;
-  markTelemetryNoticeShown();
-  process.stderr.write(
-    pc.dim(
-      "One CLI collects usage analytics (which commands run, linked to your One account) to improve the product.\nNo arguments, inputs, or secrets are ever collected. Opt out anytime with ONE_NO_TELEMETRY=1.\n"
-    )
-  );
-}
-
-// src/lib/install-context.ts
-var EXTRA_HARNESS_DIRS = [
-  { id: "gemini-cli", dir: ".gemini" },
-  { id: "openclaw", dir: ".openclaw" },
-  { id: "hermes", dir: ".hermes" },
-  { id: "devin", dir: ".devin" }
-];
-var LAUNCHER_ENV = [
-  { id: "claude-code", vars: ["CLAUDECODE", "CLAUDE_CODE_ENTRYPOINT"] },
-  { id: "codex", vars: ["CODEX_SANDBOX", "CODEX_CI", "CODEX_THREAD_ID"] },
-  { id: "gemini-cli", vars: ["GEMINI_CLI"] },
-  // CURSOR_TRACE_ID is deliberately absent: Cursor exports it into every
-  // integrated-terminal shell, so it marks the editor, not an agent.
-  { id: "cursor", vars: ["CURSOR_AGENT"] },
-  { id: "windsurf", vars: ["WINDSURF_AGENT"] },
-  { id: "kiro", vars: ["KIRO_AGENT"] },
-  { id: "openclaw", vars: ["OPENCLAW_AGENT", "OPENCLAW_SESSION"] },
-  { id: "hermes", vars: ["HERMES_AGENT", "HERMES_SESSION"] },
-  { id: "devin", vars: ["DEVIN_SESSION_ID"] }
-];
-function detectLauncher(env = process.env) {
-  for (const entry of LAUNCHER_ENV) {
-    if (entry.vars.some((v) => env[v] !== void 0 && env[v] !== "")) return entry.id;
-  }
-  return void 0;
-}
-function detectInstalledHarnesses() {
-  const ids = new Set(detectInstalledAgents().map((a) => a.id));
-  for (const { id, dir } of EXTRA_HARNESS_DIRS) {
-    if (fs2.existsSync(path3.join(homeDir(), dir))) ids.add(id);
-  }
-  return [...ids].sort();
-}
-function tryRead(read) {
-  try {
-    const value = read();
-    return value === null || value === "" ? void 0 : value;
-  } catch {
-    return void 0;
-  }
-}
-function collectInstallContext(opts) {
-  const env = opts.env ?? process.env;
-  const ctx = {
-    scope: opts.scope,
-    harnesses: tryRead(() => detectInstalledHarnesses()) ?? []
-  };
-  if (opts.scope === "project") {
-    ctx.path = opts.projectRoot ?? tryRead(() => getProjectRoot());
-  }
-  ctx.host = tryRead(() => os.hostname());
-  ctx.os = process.platform;
-  ctx.osVersion = tryRead(() => os.release());
-  ctx.arch = process.arch;
-  ctx.user = tryRead(() => os.userInfo().username);
-  if (!isTelemetryDisabled()) ctx.device = tryRead(() => getDeviceId());
-  const cli = tryRead(() => cliVersion());
-  ctx.cli = cli === "unknown" ? void 0 : cli;
-  ctx.launcher = detectLauncher(env);
-  return ctx;
-}
-function installContextToParams(ctx) {
-  const params = new URLSearchParams();
-  const set = (key, value) => {
-    if (value !== void 0 && value !== "") params.set(key, value);
-  };
-  set("scope", ctx.scope);
-  set("path", ctx.path);
-  set("host", ctx.host);
-  set("os", ctx.os);
-  set("osv", ctx.osVersion);
-  set("arch", ctx.arch);
-  set("user", ctx.user);
-  set("device", ctx.device);
-  set("cli", ctx.cli);
-  if (ctx.harnesses.length > 0) params.set("harnesses", ctx.harnesses.join(","));
-  set("launcher", ctx.launcher);
-  return params;
-}
-function describeInstallContext(ctx) {
-  const lines = [`scope: ${ctx.scope}`];
-  if (ctx.path) lines.push(`path: ${ctx.path}`);
-  if (ctx.host || ctx.os) {
-    const osPart = [ctx.os, ctx.osVersion].filter(Boolean).join(" ");
-    const detail = [osPart, ctx.arch].filter(Boolean).join(", ");
-    lines.push(`machine: ${ctx.host ?? "unknown"}${detail ? ` (${detail})` : ""}`);
-  }
-  if (ctx.user) lines.push(`user: ${ctx.user}`);
-  if (ctx.device) lines.push(`device: ${ctx.device}`);
-  if (ctx.harnesses.length > 0) lines.push(`harnesses: ${ctx.harnesses.join(", ")}`);
-  if (ctx.launcher) lines.push(`launched by: ${ctx.launcher}`);
-  if (ctx.cli) lines.push(`cli: ${ctx.cli}`);
-  return lines.join("\n");
-}
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/lib/browser.ts
+import open from "open";
 var DEFAULT_APP_URL = "https://app.withone.ai";
 function oneAppUrl() {
   const override = process.env.ONE_APP_URL?.trim();
@@ -818,25 +194,25 @@ function getCliAuthUrl(port, state, context) {
 
 // src/commands/config.ts
 import * as p from "@clack/prompts";
-import pc2 from "picocolors";
+import pc from "picocolors";
 async function configCommand() {
   if (isAgentMode()) {
     error("This command requires interactive input. Run without --agent.");
   }
   const config2 = readConfig();
   if (!config2) {
-    p.log.error(`No One config found. Run ${pc2.cyan("one init")} first.`);
+    p.log.error(`No One config found. Run ${pc.cyan("one init")} first.`);
     return;
   }
-  p.intro(pc2.bgCyan(pc2.black(" One Access Control ")));
+  p.intro(pc.bgCyan(pc.black(" One Access Control ")));
   const current = getAccessControl();
   console.log();
-  console.log(`  ${pc2.bold("Current Access Control")}`);
-  console.log(`  ${pc2.dim("\u2500".repeat(42))}`);
-  console.log(`  ${pc2.dim("Permissions:")}   ${current.permissions ?? "admin"}`);
-  console.log(`  ${pc2.dim("Connections:")}   ${formatList(current.connectionKeys)}`);
-  console.log(`  ${pc2.dim("Action IDs:")}    ${formatList(current.actionIds)}`);
-  console.log(`  ${pc2.dim("Knowledge only:")} ${current.knowledgeAgent ? "yes" : "no"}`);
+  console.log(`  ${pc.bold("Current Access Control")}`);
+  console.log(`  ${pc.dim("\u2500".repeat(42))}`);
+  console.log(`  ${pc.dim("Permissions:")}   ${current.permissions ?? "admin"}`);
+  console.log(`  ${pc.dim("Connections:")}   ${formatList(current.connectionKeys)}`);
+  console.log(`  ${pc.dim("Action IDs:")}    ${formatList(current.actionIds)}`);
+  console.log(`  ${pc.dim("Knowledge only:")} ${current.knowledgeAgent ? "yes" : "no"}`);
   console.log();
   const permissions = await p.select({
     message: "Permission level",
@@ -871,7 +247,7 @@ async function configCommand() {
       return;
     }
     if (connectionKeys.length === 0) {
-      p.log.info(`No connections found. Defaulting to all. Use ${pc2.cyan("one add")} to connect platforms.`);
+      p.log.info(`No connections found. Defaulting to all. Use ${pc.cyan("one add")} to connect platforms.`);
       connectionKeys = void 0;
     }
   }
@@ -948,7 +324,7 @@ async function configCommand() {
     }
     const normalized = customUrl.replace(/\/+$/, "").replace(/\/v1$/, "");
     const apiKey = await p.text({
-      message: `Enter your API key for ${pc2.cyan(normalized)}:`,
+      message: `Enter your API key for ${pc.cyan(normalized)}:`,
       placeholder: "sk_live_...",
       validate: (value) => {
         if (!value) return "API key is required";
@@ -971,12 +347,12 @@ async function configCommand() {
     } catch (err) {
       spinner.stop("Connection failed");
       const msg = err instanceof Error ? err.message : String(err);
-      p.log.error(`Could not reach ${pc2.cyan(normalized)}: ${msg}`);
+      p.log.error(`Could not reach ${pc.cyan(normalized)}: ${msg}`);
       return;
     }
     if (!isValid) {
       spinner.stop("Invalid API key");
-      p.log.error(`Invalid API key for ${pc2.cyan(normalized)}.`);
+      p.log.error(`Invalid API key for ${pc.cyan(normalized)}.`);
       return;
     }
     spinner.stop("API key validated");
@@ -984,7 +360,7 @@ async function configCommand() {
     newApiKey = apiKey;
   } else if (isCustomBase) {
     const apiKey = await p.text({
-      message: `Enter your API key for ${pc2.cyan("https://api.withone.ai")}:`,
+      message: `Enter your API key for ${pc.cyan("https://api.withone.ai")}:`,
       placeholder: "sk_live_...",
       validate: (value) => {
         if (!value) return "API key is required";
@@ -1007,7 +383,7 @@ async function configCommand() {
     } catch (err) {
       spinner.stop("Connection failed");
       const msg = err instanceof Error ? err.message : String(err);
-      p.log.error(`Could not reach ${pc2.cyan("https://api.withone.ai")}: ${msg}`);
+      p.log.error(`Could not reach ${pc.cyan("https://api.withone.ai")}: ${msg}`);
       return;
     }
     if (!isValid) {
@@ -1098,15 +474,15 @@ function formatList(list) {
 import open3 from "open";
 
 // src/lib/skill-sync.ts
-import fs3 from "fs";
-import path4 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import fs from "fs";
+import path from "path";
+import { fileURLToPath } from "url";
 
 // src/commands/update.ts
 import { spawn } from "child_process";
-import { existsSync as existsSync2, readFileSync, writeFileSync, mkdirSync, rmSync, openSync, closeSync } from "fs";
+import { existsSync, readFileSync, writeFileSync, mkdirSync, rmSync, openSync, closeSync } from "fs";
 import { delimiter, dirname, join } from "path";
-import pc3 from "picocolors";
+import pc2 from "picocolors";
 var currentVersion = cliVersion();
 var ONE_DIR = () => join(homeDir(), ".one");
 var CACHE_PATH = () => join(ONE_DIR(), "update-check.json");
@@ -1165,7 +541,7 @@ function resolveNpmBin(nodeExecPath = process.execPath) {
   const name = process.platform === "win32" ? "npm.cmd" : "npm";
   try {
     const sibling = join(dirname(nodeExecPath), name);
-    if (existsSync2(sibling)) return sibling;
+    if (existsSync(sibling)) return sibling;
   } catch {
   }
   return name;
@@ -1282,10 +658,10 @@ function maybeWarnAboutFailedUpdates(targetVersion) {
   if (!shouldWarnAboutFailedUpdates(state)) return;
   writeAutoUpdateState({ ...state, lastNoticeAt: Date.now() });
   process.stderr.write(
-    pc3.yellow(
+    pc2.yellow(
       `One CLI could not auto-update (v${currentVersion} \u2192 v${targetVersion}) after ${state.failures} attempts.
 `
-    ) + pc3.dim(
+    ) + pc2.dim(
       `Update manually with: npm install -g @withone/cli@latest
 Details: ${LOG_PATH()}. Silence this with ONE_NO_AUTO_UPDATE=1.
 `
@@ -1382,42 +758,42 @@ function autoUpdate(targetVersion, publishedAt) {
 var CANONICAL_SKILL_DIR = ".agents/skills";
 var VERSION_MARKER = ".one-cli-version";
 function getPackagedSkillDir() {
-  const here = path4.dirname(fileURLToPath2(import.meta.url));
-  return path4.resolve(here, "..", "skills", "one");
+  const here = path.dirname(fileURLToPath(import.meta.url));
+  return path.resolve(here, "..", "skills", "one");
 }
 function getCanonicalSkillPath() {
-  return path4.join(homeDir(), CANONICAL_SKILL_DIR, "one");
+  return path.join(homeDir(), CANONICAL_SKILL_DIR, "one");
 }
 function getVersionMarkerPath() {
-  return path4.join(getCanonicalSkillPath(), VERSION_MARKER);
+  return path.join(getCanonicalSkillPath(), VERSION_MARKER);
 }
 function isSkillInstalled() {
-  return fs3.existsSync(path4.join(getCanonicalSkillPath(), "SKILL.md"));
+  return fs.existsSync(path.join(getCanonicalSkillPath(), "SKILL.md"));
 }
 function readInstalledSkillVersion() {
   try {
-    return fs3.readFileSync(getVersionMarkerPath(), "utf-8").trim() || null;
+    return fs.readFileSync(getVersionMarkerPath(), "utf-8").trim() || null;
   } catch {
     return null;
   }
 }
 function writeInstalledSkillVersion(version2) {
   try {
-    fs3.mkdirSync(getCanonicalSkillPath(), { recursive: true });
-    fs3.writeFileSync(getVersionMarkerPath(), `${version2}
+    fs.mkdirSync(getCanonicalSkillPath(), { recursive: true });
+    fs.writeFileSync(getVersionMarkerPath(), `${version2}
 `);
   } catch {
   }
 }
 function copyDirSync(src, dest) {
-  fs3.mkdirSync(dest, { recursive: true });
-  for (const entry of fs3.readdirSync(src, { withFileTypes: true })) {
-    const srcPath = path4.join(src, entry.name);
-    const destPath = path4.join(dest, entry.name);
+  fs.mkdirSync(dest, { recursive: true });
+  for (const entry of fs.readdirSync(src, { withFileTypes: true })) {
+    const srcPath = path.join(src, entry.name);
+    const destPath = path.join(dest, entry.name);
     if (entry.isDirectory()) {
       copyDirSync(srcPath, destPath);
     } else {
-      fs3.copyFileSync(srcPath, destPath);
+      fs.copyFileSync(srcPath, destPath);
     }
   }
 }
@@ -1440,7 +816,7 @@ function forceSyncSkills() {
 }
 function performSync(current, reason) {
   const source = getPackagedSkillDir();
-  if (!fs3.existsSync(path4.join(source, "SKILL.md"))) {
+  if (!fs.existsSync(path.join(source, "SKILL.md"))) {
     return { synced: false, reason: "source-missing" };
   }
   const canonical = getCanonicalSkillPath();
@@ -1686,25 +1062,25 @@ async function loginCommand() {
   let targetScope = "global";
   const existingKey = getApiKey();
   if (existingKey) {
-    const pc18 = (await import("picocolors")).default;
+    const pc17 = (await import("picocolors")).default;
     const resolved = resolveConfig();
     const whoami2 = resolved.config?.whoami;
     const env2 = getEnvFromApiKey(existingKey);
-    const envLabel2 = env2 === "test" ? pc18.yellow("test") : pc18.green("live");
-    const currentScope = resolved.scope === "project" ? pc18.cyan("local config") : pc18.magenta("global config");
+    const envLabel2 = env2 === "test" ? pc17.yellow("test") : pc17.green("live");
+    const currentScope = resolved.scope === "project" ? pc17.cyan("local config") : pc17.magenta("global config");
     const lines = ["You are already logged in.", ""];
     if (whoami2) {
       const contextParts2 = [];
       if (whoami2.organization) contextParts2.push(whoami2.organization.name);
       if (whoami2.project) contextParts2.push(whoami2.project.name);
       const scopeDisplay2 = contextParts2.length > 0 ? contextParts2.join(" / ") : "Personal";
-      lines.push(`${pc18.bold(scopeDisplay2)} ${pc18.dim("\xB7")} ${envLabel2}`);
-      lines.push(`${whoami2.user.name} ${pc18.dim(`(${whoami2.user.email})`)}`);
-      if (whoami2.organization) lines.push(`${pc18.dim("Org:")} ${whoami2.organization.name}`);
-      if (whoami2.project) lines.push(`${pc18.dim("Project:")} ${whoami2.project.name}`);
+      lines.push(`${pc17.bold(scopeDisplay2)} ${pc17.dim("\xB7")} ${envLabel2}`);
+      lines.push(`${whoami2.user.name} ${pc17.dim(`(${whoami2.user.email})`)}`);
+      if (whoami2.organization) lines.push(`${pc17.dim("Org:")} ${whoami2.organization.name}`);
+      if (whoami2.project) lines.push(`${pc17.dim("Project:")} ${whoami2.project.name}`);
     }
     lines.push("");
-    lines.push(`${pc18.dim("Stored in")} ${currentScope}`);
+    lines.push(`${pc17.dim("Stored in")} ${currentScope}`);
     p2.note(lines.join("\n"));
     const scopeChoice = await p2.select({
       message: "Where would you like to log in?",
@@ -1723,42 +1099,42 @@ async function loginCommand() {
   if (!result) return;
   const { apiKey, whoami, keyName, grant, knowledgeOnly } = result;
   saveCredentials(apiKey, targetScope, { keyName, whoami, knowledgeOnly });
-  const pc17 = (await import("picocolors")).default;
+  const pc16 = (await import("picocolors")).default;
   const env = getEnvFromApiKey(apiKey);
   const contextParts = [];
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc17.yellow("test") : pc17.green("live");
-  const configLabel = targetScope === "project" ? pc17.cyan("local config") : pc17.magenta("global config");
+  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
+  const configLabel = targetScope === "project" ? pc16.cyan("local config") : pc16.magenta("global config");
   const infoLines = [
-    `${pc17.bold(scopeDisplay)} ${pc17.dim("\xB7")} ${envLabel}`,
-    `${whoami.user.name} ${pc17.dim(`(${whoami.user.email})`)}`
+    `${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`,
+    `${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`
   ];
-  if (keyName) infoLines.push(`${pc17.dim("Key:")} ${keyName}`);
-  infoLines.push(...grantNoteLines(grant, pc17.dim("Access:")));
-  if (whoami.organization) infoLines.push(`${pc17.dim("Org:")} ${whoami.organization.name}`);
-  if (whoami.project) infoLines.push(`${pc17.dim("Project:")} ${whoami.project.name}`);
+  if (keyName) infoLines.push(`${pc16.dim("Key:")} ${keyName}`);
+  infoLines.push(...grantNoteLines(grant, pc16.dim("Access:")));
+  if (whoami.organization) infoLines.push(`${pc16.dim("Org:")} ${whoami.organization.name}`);
+  if (whoami.project) infoLines.push(`${pc16.dim("Project:")} ${whoami.project.name}`);
   infoLines.push("");
-  infoLines.push(`${pc17.dim("Stored in")} ${configLabel}`);
+  infoLines.push(`${pc16.dim("Stored in")} ${configLabel}`);
   p2.note(infoLines.join("\n"), "Logged in");
   console.log();
-  console.log(`  ${pc17.dim("Next steps:")}`);
-  console.log(`  ${pc17.cyan("one add <platform>")}  ${pc17.dim("\u2014")} Connect a platform (e.g. gmail, slack, stripe)`);
+  console.log(`  ${pc16.dim("Next steps:")}`);
+  console.log(`  ${pc16.cyan("one add <platform>")}  ${pc16.dim("\u2014")} Connect a platform (e.g. gmail, slack, stripe)`);
   console.log();
-  console.log(pc17.bold("  Copy-paste this to your AI agent:"));
+  console.log(pc16.bold("  Copy-paste this to your AI agent:"));
   console.log();
-  console.log(pc17.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log(pc17.cyan("  \u2502"));
-  console.log(pc17.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc17.cyan("  \u2502  lets you interact with 750+ third-party platforms (Gmail,"));
-  console.log(pc17.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
-  console.log(pc17.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
-  console.log(pc17.cyan("  \u2502  third-party platform or external service, use the `one`"));
-  console.log(pc17.cyan("  \u2502  skill. Please save this to your project instructions or"));
-  console.log(pc17.cyan("  \u2502  memory so you remember it in future conversations."));
-  console.log(pc17.cyan("  \u2502"));
-  console.log(pc17.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc16.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc16.cyan("  \u2502"));
+  console.log(pc16.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
+  console.log(pc16.cyan("  \u2502  lets you interact with 750+ third-party platforms (Gmail,"));
+  console.log(pc16.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
+  console.log(pc16.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
+  console.log(pc16.cyan("  \u2502  third-party platform or external service, use the `one`"));
+  console.log(pc16.cyan("  \u2502  skill. Please save this to your project instructions or"));
+  console.log(pc16.cyan("  \u2502  memory so you remember it in future conversations."));
+  console.log(pc16.cyan("  \u2502"));
+  console.log(pc16.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log();
   p2.outro("Happy building!");
 }
@@ -1862,20 +1238,20 @@ async function nonInteractiveInit(options) {
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc4.yellow("test") : pc4.green("live");
+  const envLabel = env === "test" ? pc3.yellow("test") : pc3.green("live");
   console.log();
-  console.log(`  ${pc4.bold("Setup complete")} ${scopeLabel(scope)}`);
-  console.log(`  ${pc4.dim("\u2500".repeat(42))}`);
-  console.log(`  ${pc4.dim("Account:")} ${scopeDisplay} ${pc4.dim("\xB7")} ${envLabel}`);
-  console.log(`  ${pc4.dim("User:")}    ${whoami.user.name} ${pc4.dim(`(${whoami.user.email})`)}`);
-  if (keyName) console.log(`  ${pc4.dim("Key:")}     ${keyName}`);
-  if (grant) console.log(`  ${pc4.dim("Access:")}  ${grant}`);
-  console.log(`  ${pc4.dim("Config:")}  ${tildify(configPath)}`);
+  console.log(`  ${pc3.bold("Setup complete")} ${scopeLabel(scope)}`);
+  console.log(`  ${pc3.dim("\u2500".repeat(42))}`);
+  console.log(`  ${pc3.dim("Account:")} ${scopeDisplay} ${pc3.dim("\xB7")} ${envLabel}`);
+  console.log(`  ${pc3.dim("User:")}    ${whoami.user.name} ${pc3.dim(`(${whoami.user.email})`)}`);
+  if (keyName) console.log(`  ${pc3.dim("Key:")}     ${keyName}`);
+  if (grant) console.log(`  ${pc3.dim("Access:")}  ${grant}`);
+  console.log(`  ${pc3.dim("Config:")}  ${tildify(configPath)}`);
   if (installed.length > 0) {
-    console.log(`  ${pc4.dim("Skill:")}   ${pc4.green("installed")} ${pc4.dim("\xB7 " + installed.join(", "))}`);
+    console.log(`  ${pc3.dim("Skill:")}   ${pc3.green("installed")} ${pc3.dim("\xB7 " + installed.join(", "))}`);
   }
   console.log();
-  console.log(`  ${pc4.dim("Connect a platform later with")} ${pc4.cyan("one add <platform>")}`);
+  console.log(`  ${pc3.dim("Connect a platform later with")} ${pc3.cyan("one add <platform>")}`);
   printOnboardingPrompt();
 }
 async function chooseConfigScope(options) {
@@ -1885,13 +1261,13 @@ async function chooseConfigScope(options) {
   const hasGlobal = globalConfigExists();
   const hasProject = projectConfigExists();
   const projectRoot = resolved.projectRoot;
-  const projectName = path5.basename(projectRoot);
+  const projectName = path2.basename(projectRoot);
   const homeGlobal = tildify(getGlobalConfigPath());
   const homeProject = tildify(getProjectConfigPath(projectRoot));
   if (hasProject) {
     console.log();
-    console.log(`  ${pc4.dim("Project:")}  ${projectName}   ${pc4.dim(projectRoot)}`);
-    console.log(`  ${pc4.bold("Active config:")} ${pc4.cyan("project")} ${pc4.dim("\xB7 " + homeProject)}`);
+    console.log(`  ${pc3.dim("Project:")}  ${projectName}   ${pc3.dim(projectRoot)}`);
+    console.log(`  ${pc3.bold("Active config:")} ${pc3.cyan("project")} ${pc3.dim("\xB7 " + homeProject)}`);
     console.log();
     if (hasGlobal) {
       const which2 = await p3.select({
@@ -1908,11 +1284,11 @@ async function chooseConfigScope(options) {
     return "project";
   }
   console.log();
-  console.log(`  ${pc4.bold("Initializing One")}`);
-  console.log(`  ${pc4.dim("\u2500".repeat(42))}`);
-  console.log(`  ${pc4.dim("Project:")}  ${projectName}   ${pc4.dim(projectRoot)}`);
-  console.log(`  ${pc4.dim("Global:")}   ${hasGlobal ? pc4.green("\u2713 configured") : pc4.yellow("\u2014 not set up")}   ${pc4.dim(homeGlobal)}`);
-  console.log(`  ${pc4.dim("Project:")}  ${pc4.yellow("\u2014 not set up")}   ${pc4.dim(homeProject)}`);
+  console.log(`  ${pc3.bold("Initializing One")}`);
+  console.log(`  ${pc3.dim("\u2500".repeat(42))}`);
+  console.log(`  ${pc3.dim("Project:")}  ${projectName}   ${pc3.dim(projectRoot)}`);
+  console.log(`  ${pc3.dim("Global:")}   ${hasGlobal ? pc3.green("\u2713 configured") : pc3.yellow("\u2014 not set up")}   ${pc3.dim(homeGlobal)}`);
+  console.log(`  ${pc3.dim("Project:")}  ${pc3.yellow("\u2014 not set up")}   ${pc3.dim(homeProject)}`);
   console.log();
   const defaultScope = hasGlobal ? "project" : "global";
   const hint = hasGlobal ? "Your global config stays as-is. This folder gets its own setup." : "No global config yet \u2014 this becomes your default for every folder.";
@@ -1941,7 +1317,7 @@ function tildify(filePath) {
   return filePath.startsWith(home) ? "~" + filePath.slice(home.length) : filePath;
 }
 function scopeLabel(scope) {
-  return scope === "project" ? pc4.cyan("[project]") : pc4.magenta("[global]");
+  return scope === "project" ? pc3.cyan("[project]") : pc3.magenta("[global]");
 }
 function scopedMessage(scope, message) {
   return `${scopeLabel(scope)} ${message}`;
@@ -1952,20 +1328,20 @@ async function handleExistingConfig(apiKey, scope, options) {
   const skillInstalled = isSkillInstalled2();
   const activeConfigPath = scope === "project" ? getProjectConfigPath() : getGlobalConfigPath();
   console.log();
-  console.log(`  ${pc4.bold("Current Setup")} ${scopeLabel(scope)}`);
-  console.log(`  ${pc4.dim("\u2500".repeat(42))}`);
-  console.log(`  ${pc4.dim("API Key:")}  ${masked}`);
-  console.log(`  ${pc4.dim("Skill:")}    ${skillInstalled ? pc4.green("installed") : pc4.yellow("not installed")}`);
-  console.log(`  ${pc4.dim("Config:")}   ${tildify(activeConfigPath)}`);
+  console.log(`  ${pc3.bold("Current Setup")} ${scopeLabel(scope)}`);
+  console.log(`  ${pc3.dim("\u2500".repeat(42))}`);
+  console.log(`  ${pc3.dim("API Key:")}  ${masked}`);
+  console.log(`  ${pc3.dim("Skill:")}    ${skillInstalled ? pc3.green("installed") : pc3.yellow("not installed")}`);
+  console.log(`  ${pc3.dim("Config:")}   ${tildify(activeConfigPath)}`);
   const ac = getAccessControl();
   if (Object.keys(ac).length > 0) {
     console.log();
-    console.log(`  ${pc4.bold("Access Control")}`);
-    console.log(`  ${pc4.dim("\u2500".repeat(42))}`);
-    if (ac.permissions) console.log(`  ${pc4.dim("Permissions:")}   ${ac.permissions}`);
-    if (ac.connectionKeys) console.log(`  ${pc4.dim("Connections:")}   ${ac.connectionKeys.join(", ")}`);
-    if (ac.actionIds) console.log(`  ${pc4.dim("Action IDs:")}    ${ac.actionIds.join(", ")}`);
-    if (ac.knowledgeAgent) console.log(`  ${pc4.dim("Knowledge only:")} yes`);
+    console.log(`  ${pc3.bold("Access Control")}`);
+    console.log(`  ${pc3.dim("\u2500".repeat(42))}`);
+    if (ac.permissions) console.log(`  ${pc3.dim("Permissions:")}   ${ac.permissions}`);
+    if (ac.connectionKeys) console.log(`  ${pc3.dim("Connections:")}   ${ac.connectionKeys.join(", ")}`);
+    if (ac.actionIds) console.log(`  ${pc3.dim("Action IDs:")}    ${ac.actionIds.join(", ")}`);
+    if (ac.knowledgeAgent) console.log(`  ${pc3.dim("Knowledge only:")} yes`);
   }
   console.log();
   const actionOptions = [];
@@ -2081,7 +1457,7 @@ async function handleUpdateKey(statuses, scope) {
     whoamiResult = result.whoami;
   } else {
     p3.note(`Get your API key at:
-${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
+${pc3.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
     const openBrowser = await p3.confirm({
       message: scopedMessage(scope, "Open browser to get API key?"),
       initialValue: true
@@ -2126,13 +1502,13 @@ ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
   if (whoamiResult.organization) contextParts.push(whoamiResult.organization.name);
   if (whoamiResult.project) contextParts.push(whoamiResult.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc4.yellow("test") : pc4.green("live");
+  const envLabel = env === "test" ? pc3.yellow("test") : pc3.green("live");
   p3.note(
     [
-      `${scopeDisplay} ${pc4.dim("\xB7")} ${envLabel}`,
-      `${whoamiResult.user.name} ${pc4.dim(`(${whoamiResult.user.email})`)}`,
-      ...keyName ? [`${pc4.dim("Key:")} ${keyName}`] : [],
-      ...grantNoteLines(grant, pc4.dim("Access:"))
+      `${scopeDisplay} ${pc3.dim("\xB7")} ${envLabel}`,
+      `${whoamiResult.user.name} ${pc3.dim(`(${whoamiResult.user.email})`)}`,
+      ...keyName ? [`${pc3.dim("Key:")} ${keyName}`] : [],
+      ...grantNoteLines(grant, pc3.dim("Access:"))
     ].join("\n"),
     "Account"
   );
@@ -2168,30 +1544,30 @@ var SKILL_AGENTS = [
 ];
 var CANONICAL_SKILL_DIR2 = ".agents/skills";
 function getSkillSourceDir() {
-  const __dirname2 = path5.dirname(fileURLToPath3(import.meta.url));
-  return path5.resolve(__dirname2, "..", "skills", "one");
+  const __dirname2 = path2.dirname(fileURLToPath2(import.meta.url));
+  return path2.resolve(__dirname2, "..", "skills", "one");
 }
 function getCanonicalSkillPath2() {
-  return path5.join(homeDir(), CANONICAL_SKILL_DIR2, "one");
+  return path2.join(homeDir(), CANONICAL_SKILL_DIR2, "one");
 }
 function getAgentSkillPath(agent) {
-  return path5.join(homeDir(), agent.skillDir, "one");
+  return path2.join(homeDir(), agent.skillDir, "one");
 }
 function isSkillInstalled2() {
-  return fs4.existsSync(path5.join(getCanonicalSkillPath2(), "SKILL.md"));
+  return fs2.existsSync(path2.join(getCanonicalSkillPath2(), "SKILL.md"));
 }
 function isSkillInstalledForAgent(agent) {
-  return fs4.existsSync(path5.join(getAgentSkillPath(agent), "SKILL.md"));
+  return fs2.existsSync(path2.join(getAgentSkillPath(agent), "SKILL.md"));
 }
 function copyDirSync2(src, dest) {
-  fs4.mkdirSync(dest, { recursive: true });
-  for (const entry of fs4.readdirSync(src, { withFileTypes: true })) {
-    const srcPath = path5.join(src, entry.name);
-    const destPath = path5.join(dest, entry.name);
+  fs2.mkdirSync(dest, { recursive: true });
+  for (const entry of fs2.readdirSync(src, { withFileTypes: true })) {
+    const srcPath = path2.join(src, entry.name);
+    const destPath = path2.join(dest, entry.name);
     if (entry.isDirectory()) {
       copyDirSync2(srcPath, destPath);
     } else {
-      fs4.copyFileSync(srcPath, destPath);
+      fs2.copyFileSync(srcPath, destPath);
     }
   }
 }
@@ -2200,12 +1576,12 @@ function installSkillForAgents(agentIds) {
   const canonical = getCanonicalSkillPath2();
   const installed = [];
   const failed = [];
-  if (!fs4.existsSync(path5.join(source, "SKILL.md"))) {
+  if (!fs2.existsSync(path2.join(source, "SKILL.md"))) {
     return { installed: [], failed: ["skill source not found"] };
   }
   try {
-    if (fs4.existsSync(canonical)) {
-      fs4.rmSync(canonical, { recursive: true });
+    if (fs2.existsSync(canonical)) {
+      fs2.rmSync(canonical, { recursive: true });
     }
     copyDirSync2(source, canonical);
     writeInstalledSkillVersion(getCurrentVersion());
@@ -2222,15 +1598,15 @@ function installSkillForAgents(agentIds) {
       continue;
     }
     try {
-      const agentSkillsDir = path5.dirname(agentPath);
-      fs4.mkdirSync(agentSkillsDir, { recursive: true });
+      const agentSkillsDir = path2.dirname(agentPath);
+      fs2.mkdirSync(agentSkillsDir, { recursive: true });
       try {
-        fs4.lstatSync(agentPath);
-        fs4.rmSync(agentPath, { recursive: true });
+        fs2.lstatSync(agentPath);
+        fs2.rmSync(agentPath, { recursive: true });
       } catch {
       }
-      const relative = path5.relative(agentSkillsDir, canonical);
-      fs4.symlinkSync(relative, agentPath);
+      const relative = path2.relative(agentSkillsDir, canonical);
+      fs2.symlinkSync(relative, agentPath);
       installed.push(agent.name);
       seen.set(agentPath, true);
     } catch {
@@ -2245,7 +1621,7 @@ async function promptOpenAiKey(scope) {
   const entered = await p3.password({
     message: scopedMessage(
       scope,
-      `OpenAI API key ${pc4.dim("(optional \u2014 enables semantic search in `one mem`)")}`
+      `OpenAI API key ${pc3.dim("(optional \u2014 enables semantic search in `one mem`)")}`
     ),
     mask: "\u2022",
     // Validator accepts empty → treated as "skip".
@@ -2300,7 +1676,7 @@ async function promptSkillInstall() {
     ...primaryAgents.map((a) => ({
       value: a.id,
       label: a.name,
-      hint: isSkillInstalledForAgent(a) ? pc4.green("installed") : void 0
+      hint: isSkillInstalledForAgent(a) ? pc3.green("installed") : void 0
     })),
     {
       value: "_other",
@@ -2324,7 +1700,7 @@ async function promptSkillInstall() {
       options: otherAgents.map((a) => ({
         value: a.id,
         label: a.name,
-        hint: isSkillInstalledForAgent(a) ? pc4.green("installed") : void 0
+        hint: isSkillInstalledForAgent(a) ? pc3.green("installed") : void 0
       }))
     });
     if (!p3.isCancel(otherChoice)) {
@@ -2340,7 +1716,7 @@ async function promptSkillInstall() {
   const { installed, failed } = installSkillForAgents(selectedIds);
   spinner.stop(installed.length > 0 ? "Skill installed" : "Installation failed");
   for (const name of installed) {
-    p3.log.success(`${name}: ${pc4.green("\u2713")} skill installed`);
+    p3.log.success(`${name}: ${pc3.green("\u2713")} skill installed`);
   }
   for (const name of failed) {
     p3.log.warn(`${name}: failed to install`);
@@ -2349,19 +1725,19 @@ async function promptSkillInstall() {
 }
 function printOnboardingPrompt() {
   console.log();
-  console.log(pc4.bold("  Copy-paste this to your AI agent:"));
+  console.log(pc3.bold("  Copy-paste this to your AI agent:"));
   console.log();
-  console.log(pc4.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log(pc4.cyan("  \u2502"));
-  console.log(pc4.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc4.cyan("  \u2502  lets you interact with 750+ third-party platforms (Gmail,"));
-  console.log(pc4.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
-  console.log(pc4.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
-  console.log(pc4.cyan("  \u2502  third-party platform or external service, use the `one`"));
-  console.log(pc4.cyan("  \u2502  skill. Please save this to your project instructions or"));
-  console.log(pc4.cyan("  \u2502  memory so you remember it in future conversations."));
-  console.log(pc4.cyan("  \u2502"));
-  console.log(pc4.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc3.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc3.cyan("  \u2502"));
+  console.log(pc3.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
+  console.log(pc3.cyan("  \u2502  lets you interact with 750+ third-party platforms (Gmail,"));
+  console.log(pc3.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
+  console.log(pc3.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
+  console.log(pc3.cyan("  \u2502  third-party platform or external service, use the `one`"));
+  console.log(pc3.cyan("  \u2502  skill. Please save this to your project instructions or"));
+  console.log(pc3.cyan("  \u2502  memory so you remember it in future conversations."));
+  console.log(pc3.cyan("  \u2502"));
+  console.log(pc3.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log();
 }
 async function freshSetup(scope, options) {
@@ -2389,13 +1765,13 @@ async function freshSetup(scope, options) {
     if (result.whoami.organization) contextParts.push(result.whoami.organization.name);
     if (result.whoami.project) contextParts.push(result.whoami.project.name);
     const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-    const envLabel = env2 === "test" ? pc4.yellow("test") : pc4.green("live");
+    const envLabel = env2 === "test" ? pc3.yellow("test") : pc3.green("live");
     p3.note(
       [
-        `${scopeDisplay} ${pc4.dim("\xB7")} ${envLabel}`,
-        `${result.whoami.user.name} ${pc4.dim(`(${result.whoami.user.email})`)}`,
-        ...result.keyName ? [`${pc4.dim("Key:")} ${result.keyName}`] : [],
-        ...grantNoteLines(result.grant, pc4.dim("Access:"))
+        `${scopeDisplay} ${pc3.dim("\xB7")} ${envLabel}`,
+        `${result.whoami.user.name} ${pc3.dim(`(${result.whoami.user.email})`)}`,
+        ...result.keyName ? [`${pc3.dim("Key:")} ${result.keyName}`] : [],
+        ...grantNoteLines(result.grant, pc3.dim("Access:"))
       ].join("\n"),
       "Account"
     );
@@ -2406,7 +1782,7 @@ async function freshSetup(scope, options) {
     });
   } else {
     p3.note(`Get your API key at:
-${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
+${pc3.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
     const openBrowser = await p3.confirm({
       message: scopedMessage(scope, "Open browser to get API key?"),
       initialValue: true
@@ -2449,10 +1825,10 @@ ${pc4.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
     if (whoami.organization) contextParts.push(whoami.organization.name);
     if (whoami.project) contextParts.push(whoami.project.name);
     const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-    const envLabel = env2 === "test" ? pc4.yellow("test") : pc4.green("live");
+    const envLabel = env2 === "test" ? pc3.yellow("test") : pc3.green("live");
     p3.note(
-      `${scopeDisplay} ${pc4.dim("\xB7")} ${envLabel}
-${whoami.user.name} ${pc4.dim(`(${whoami.user.email})`)}`,
+      `${scopeDisplay} ${pc3.dim("\xB7")} ${envLabel}
+${whoami.user.name} ${pc3.dim(`(${whoami.user.email})`)}`,
       "Account"
     );
     saveCredentials(apiKey, scope, { whoami });
@@ -2468,11 +1844,11 @@ ${whoami.user.name} ${pc4.dim(`(${whoami.user.email})`)}`,
   };
   await promptConnectIntegrations(apiKey, connParams);
   const savedPath = scope === "project" ? getProjectConfigPath() : getGlobalConfigPath();
-  const resolutionHint = scope === "project" ? `When you run ${pc4.cyan("one")} from ${pc4.bold(path5.basename(getProjectRoot()))}, it uses this project config.
+  const resolutionHint = scope === "project" ? `When you run ${pc3.cyan("one")} from ${pc3.bold(path2.basename(getProjectRoot()))}, it uses this project config.
 From anywhere else, it falls back to your global config.` : `This config applies to every folder unless a project config is set.`;
   p3.note(
     `${scopeLabel(scope)} Config saved to:
-${pc4.dim(tildify(savedPath))}
+${pc3.dim(tildify(savedPath))}
 
 ${resolutionHint}`,
     "Setup Complete"
@@ -2481,9 +1857,9 @@ ${resolutionHint}`,
   p3.outro("Done! Paste the prompt above to your AI agent.");
 }
 function lime(text5) {
-  if (!pc4.isColorSupported) return text5;
+  if (!pc3.isColorSupported) return text5;
   const truecolor = process.env.COLORTERM === "truecolor" || process.env.COLORTERM === "24bit";
-  return truecolor ? `\x1B[38;2;204;255;0m${text5}\x1B[39m` : pc4.green(text5);
+  return truecolor ? `\x1B[38;2;204;255;0m${text5}\x1B[39m` : pc3.green(text5);
 }
 function printBanner() {
   console.log();
@@ -2498,7 +1874,7 @@ function printBanner() {
   console.log(lime("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
   console.log(lime("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588      \u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
   console.log();
-  console.log(pc4.dim("  I N F R A S T R U C T U R E   F O R   A G E N T S"));
+  console.log(pc3.dim("  I N F R A S T R U C T U R E   F O R   A G E N T S"));
   console.log();
 }
 var TOP_INTEGRATIONS = [
@@ -2544,13 +1920,13 @@ async function promptConnectIntegrations(apiKey, connParams) {
       } catch {
         p3.note(connectionsUrl, "Open in browser");
       }
-      p3.log.info(`Connect from the dashboard, or use ${pc4.cyan("one add <platform>")}`);
+      p3.log.info(`Connect from the dashboard, or use ${pc3.cyan("one add <platform>")}`);
       break;
     }
     const platform = choice;
     const integration = TOP_INTEGRATIONS.find((i) => i.value === platform);
     const label = integration?.label ?? platform;
-    p3.log.info(`Opening browser to connect ${pc4.cyan(label)}...`);
+    p3.log.info(`Opening browser to connect ${pc3.cyan(label)}...`);
     try {
       await openConnectionPage(platform, connParams);
     } catch {
@@ -2563,13 +1939,13 @@ async function promptConnectIntegrations(apiKey, connParams) {
     try {
       await api.waitForConnection(platform, 5 * 60 * 1e3, 5e3);
       spinner.stop(`${label} connected!`);
-      p3.log.success(`${pc4.green("\u2713")} ${label} is now available to your AI agents`);
+      p3.log.success(`${pc3.green("\u2713")} ${label} is now available to your AI agents`);
       connected.push(platform);
       first = false;
     } catch (error2) {
       spinner.stop("Connection timed out");
       if (error2 instanceof TimeoutError) {
-        p3.log.warn(`No worries. Connect later with: ${pc4.cyan(`one add ${platform}`)}`);
+        p3.log.warn(`No worries. Connect later with: ${pc3.cyan(`one add ${platform}`)}`);
       }
       first = false;
     }
@@ -2586,7 +1962,7 @@ function maskApiKey(key) {
 
 // src/commands/connection.ts
 import * as p4 from "@clack/prompts";
-import pc6 from "picocolors";
+import pc5 from "picocolors";
 
 // src/lib/access.ts
 async function resolveAllowedActions(api, actionIds) {
@@ -2610,21 +1986,91 @@ async function resolveAllowedActions(api, actionIds) {
   );
   return resolved.filter((a) => a !== null);
 }
-function computeConnectionAccess(platform, permissions, allowedActionIds, grantedActions) {
-  if (!allowedActionIds.includes("*")) {
-    const actions2 = grantedActions.filter((a) => a.platform === platform).map(({ actionId, title, method }) => ({ actionId, title, method }));
-    return { policy: "actions", actions: actions2 };
+var UNRESTRICTED = { reachable: true, methods: null, actionIds: null };
+var UNREACHABLE = { reachable: false, methods: [], actionIds: [] };
+function serverEnvelope(doc, connectionKey) {
+  if (!doc) return UNRESTRICTED;
+  if (doc.rules === null) return { reachable: true, methods: doc.methods, actionIds: null };
+  const rule = doc.rules.find((r) => r.connectionKey === connectionKey);
+  if (!rule) return UNREACHABLE;
+  return {
+    reachable: true,
+    methods: rule.methods ?? doc.methods,
+    actionIds: rule.actionIds ?? null
+  };
+}
+function localEnvelope(permissions, actionIds, connectionKeys, connectionKey) {
+  if (!connectionKeys.includes("*") && !connectionKeys.includes(connectionKey)) return UNREACHABLE;
+  return {
+    reachable: true,
+    methods: PERMISSION_METHODS[permissions],
+    actionIds: actionIds.includes("*") ? null : actionIds
+  };
+}
+function intersectList(a, b) {
+  if (a === null) return b;
+  if (b === null) return a;
+  const upper = new Set(b.map((x) => x.toUpperCase()));
+  return a.filter((x) => upper.has(x.toUpperCase()));
+}
+function intersectEnvelopes(a, b) {
+  if (!a.reachable || !b.reachable) return UNREACHABLE;
+  return {
+    reachable: true,
+    methods: intersectList(a.methods, b.methods),
+    actionIds: a.actionIds === null ? b.actionIds : b.actionIds === null ? a.actionIds : a.actionIds.filter((id) => b.actionIds.includes(id))
+  };
+}
+function envelopeToAccess(envelope, resolved, localMethods = null) {
+  if (!envelope.reachable || envelope.methods !== null && envelope.methods.length === 0) {
+    return { access: { policy: "actions", actions: [] }, unresolved: [] };
   }
-  const methods = PERMISSION_METHODS[permissions];
-  if (methods !== null) {
-    return { policy: "methods", methods };
+  if (envelope.actionIds !== null) {
+    const actions2 = envelope.actionIds.flatMap((id) => {
+      const hit = resolved.find((a) => a.actionId === id);
+      if (!hit) return [];
+      if (localMethods && !localMethods.includes(hit.method.toUpperCase())) return [];
+      return [{ actionId: hit.actionId, title: hit.title, method: hit.method }];
+    });
+    return {
+      access: { policy: "actions", actions: actions2 },
+      unresolved: envelope.actionIds.filter((id) => !resolved.some((a) => a.actionId === id))
+    };
   }
-  return { policy: "full" };
+  if (envelope.methods !== null) {
+    return { access: { policy: "methods", methods: envelope.methods.map((m) => m.toUpperCase()) }, unresolved: [] };
+  }
+  return { access: { policy: "full" }, unresolved: [] };
 }
-function formatAccess(access, maxActions = 2) {
+var READ_WRITE = ["GET", "PATCH", "POST", "PUT"];
+function accessLevel(access) {
   switch (access.policy) {
     case "full":
       return "full";
+    case "methods": {
+      const set = [...new Set(access.methods.map((m) => m.toUpperCase()))].sort();
+      if (set.length === 0) return "none";
+      if (set.length === 1 && set[0] === "GET") return "read-only";
+      if (set.join(",") === READ_WRITE.join(",")) return "read-write";
+      return "custom";
+    }
+    case "actions":
+      return access.actions.length === 0 ? "none" : "custom";
+  }
+}
+var LEVEL_LABELS = {
+  full: "Full access",
+  "read-write": "Read & write",
+  "read-only": "Read only",
+  custom: "Custom",
+  none: "No access"
+};
+function formatAccess(access, maxActions = 2) {
+  const level = accessLevel(access);
+  if (level !== "custom") return LEVEL_LABELS[level];
+  switch (access.policy) {
+    case "full":
+      return LEVEL_LABELS.full;
     case "methods":
       return access.methods.join(", ");
     case "actions": {
@@ -2672,7 +2118,7 @@ function countMatchingChars(a, b) {
 }
 
 // src/lib/table.ts
-import pc5 from "picocolors";
+import pc4 from "picocolors";
 function printTable(columns, rows) {
   if (rows.length === 0) return;
   const gap = "  ";
@@ -2684,10 +2130,10 @@ function printTable(columns, rows) {
   });
   const header = columns.map((col, i) => {
     const padded = col.align === "right" ? col.label.padStart(widths[i]) : col.label.padEnd(widths[i]);
-    return pc5.dim(padded);
+    return pc4.dim(padded);
   }).join(gap);
   console.log(`${indent}${header}`);
-  const separator = columns.map((_, i) => pc5.dim("\u2500".repeat(widths[i]))).join(gap);
+  const separator = columns.map((_, i) => pc4.dim("\u2500".repeat(widths[i]))).join(gap);
   console.log(`${indent}${separator}`);
   for (const row of rows) {
     const line = columns.map((col, i) => {
@@ -2712,7 +2158,7 @@ async function connectionAddCommand(platformArg, options) {
   if (isAgentMode()) {
     error("This command requires interactive input. Run without --agent.");
   }
-  p4.intro(pc6.bgCyan(pc6.black(" One ")));
+  p4.intro(pc5.bgCyan(pc5.black(" One ")));
   const apiKey = getApiKey();
   if (!apiKey) {
     p4.cancel("Not configured. Run `one init` first.");
@@ -2747,7 +2193,7 @@ async function connectionAddCommand(platformArg, options) {
           ]
         });
         if (p4.isCancel(suggestion) || suggestion === "__other__") {
-          p4.note(`Run ${pc6.cyan("one platforms")} to see all available platforms.`);
+          p4.note(`Run ${pc5.cyan("one platforms")} to see all available platforms.`);
           p4.cancel("Connection cancelled.");
           process.exit(0);
         }
@@ -2755,7 +2201,7 @@ async function connectionAddCommand(platformArg, options) {
       } else {
         p4.cancel(`Unknown platform: ${platformArg}
 
-Run ${pc6.cyan("one platforms")} to see available platforms.`);
+Run ${pc5.cyan("one platforms")} to see available platforms.`);
         process.exit(1);
       }
     }
@@ -2778,7 +2224,7 @@ Run ${pc6.cyan("one platforms")} to see available platforms.`);
     } else {
       p4.cancel(`Unknown platform: ${platformInput}
 
-Run ${pc6.cyan("one platforms")} to see available platforms.`);
+Run ${pc5.cyan("one platforms")} to see available platforms.`);
       process.exit(1);
     }
   }
@@ -2789,8 +2235,8 @@ Run ${pc6.cyan("one platforms")} to see available platforms.`);
     ...whoami?.project && { projectId: whoami.project.id }
   };
   const url = getConnectionUrl(platform, connParams);
-  p4.log.info(`Opening browser to connect ${pc6.cyan(platform)}...`);
-  p4.note(pc6.dim(url), "URL");
+  p4.log.info(`Opening browser to connect ${pc5.cyan(platform)}...`);
+  p4.note(pc5.dim(url), "URL");
   try {
     await openConnectionPage(platform, connParams);
   } catch {
@@ -2818,7 +2264,7 @@ The connection is usable; set the tag later in the dashboard or retry.`
         );
       }
     }
-    p4.log.success(`${pc6.green("\u2713")} ${connection2.platform} is now available to your AI agents.${tag ? ` (tag: ${tag})` : ""}`);
+    p4.log.success(`${pc5.green("\u2713")} ${connection2.platform} is now available to your AI agents.${tag ? ` (tag: ${tag})` : ""}`);
     p4.outro("Connection complete!");
   } catch (error2) {
     pollSpinner.stop("Connection timed out");
@@ -2829,7 +2275,7 @@ The connection is usable; set the tag later in the dashboard or retry.`
   - Browser popup was blocked
   - Wrong account selected
 
-Try again with: ${pc6.cyan(`one connection add ${platform}`)}`,
+Try again with: ${pc5.cyan(`one connection add ${platform}`)}`,
         "Timed Out"
       );
     } else {
@@ -2847,18 +2293,30 @@ async function connectionListCommand(options) {
   const spinner = createSpinner();
   spinner.start("Loading connections...");
   try {
-    const allConnections = await api.listConnections();
+    const [allConnections, serverAccess] = await Promise.all([
+      api.listConnections(),
+      api.getOwnAccess().then(
+        (doc) => ({ ok: true, doc }),
+        () => ({ ok: false, doc: null })
+      )
+    ]);
     const ac = getAccessControlFromAllSources();
     const permissions = ac.permissions || "admin";
     const allowedKeys = ac.connectionKeys || ["*"];
     const actionIds = ac.actionIds || ["*"];
     const knowledgeOnly = ac.knowledgeAgent || false;
-    const accessFiltered = allowedKeys.includes("*") ? allConnections : allConnections.filter((conn) => allowedKeys.includes(conn.key));
-    const resolvedActions = await resolveAllowedActions(api, actionIds);
-    const unresolvedActionIds = actionIds.includes("*") ? [] : actionIds.filter((id) => !resolvedActions.some((a) => a.actionId === id));
-    const grantedActions = resolvedActions.filter((a) => isMethodAllowed(a.method, permissions));
-    const accessFor = (platform) => computeConnectionAccess(platform, permissions, actionIds, grantedActions);
-    const hintText = accessHint(permissions, actionIds, knowledgeOnly);
+    const envelopeFor = (key) => intersectEnvelopes(serverEnvelope(serverAccess.doc, key), localEnvelope(permissions, actionIds, allowedKeys, key));
+    const accessFiltered = allConnections.filter((conn) => envelopeFor(conn.key).reachable);
+    const namedActionIds = new Set(actionIds.includes("*") ? [] : actionIds);
+    for (const rule of serverAccess.doc?.rules ?? []) for (const id of rule.actionIds ?? []) namedActionIds.add(id);
+    const resolvedActions = await resolveAllowedActions(api, [...namedActionIds]);
+    const unresolved = /* @__PURE__ */ new Set();
+    const accessFor = (conn) => {
+      const { access, unresolved: missing } = envelopeToAccess(envelopeFor(conn.key), resolvedActions, PERMISSION_METHODS[permissions]);
+      missing.forEach((id) => unresolved.add(id));
+      return access;
+    };
+    const hintText = accessHint(permissions, actionIds, knowledgeOnly, serverAccess.ok ? serverAccess.doc : void 0);
     const searchQuery = options?.search?.toLowerCase();
     const filtered = searchQuery ? accessFiltered.filter((conn) => conn.platform.toLowerCase().includes(searchQuery)) : accessFiltered;
     const limitArg = options?.limit ? parseInt(options.limit, 10) : void 0;
@@ -2875,10 +2333,11 @@ async function connectionListCommand(options) {
           key: conn.key,
           ...conn.name && { name: conn.name },
           ...conn.tags?.length && { tags: conn.tags },
-          access: accessFor(conn.platform)
+          access: withLevel(accessFor(conn))
         })),
+        accessSource: serverAccess.ok ? "server" : "local",
         ...knowledgeOnly && { knowledgeOnly: true },
-        ...unresolvedActionIds.length > 0 && { unresolvedActionIds },
+        ...unresolved.size > 0 && { unresolvedActionIds: [...unresolved] },
         ...hintText && { accessHint: hintText },
         ...limited.length < filtered.length && {
           hint: `Showing ${limited.length} of ${filtered.length} connections. Use --search <query> to filter by platform or --limit <n> to see more.`
@@ -2893,14 +2352,21 @@ async function connectionListCommand(options) {
         p4.note(
           `No connections matching "${searchQuery}".
 
-Try: ${pc6.cyan("one connection list")} to see all connections.`,
+Try: ${pc5.cyan("one connection list")} to see all connections.`,
           "No Results"
         );
+      } else if (serverAccess.doc?.rules && allConnections.length === 0) {
+        p4.note(
+          `This key reaches no connections: it can search actions and read their docs, but runs none.
+
+Change it in the dashboard under API keys.`,
+          "No Connections"
+        );
       } else {
         p4.note(
           `No connections yet.
 
-Add one with: ${pc6.cyan("one connection add gmail")}`,
+Add one with: ${pc5.cyan("one connection add gmail")}`,
           "No Connections"
         );
       }
@@ -2913,32 +2379,32 @@ Add one with: ${pc6.cyan("one connection add gmail")}`,
       state: conn.state,
       key: conn.key,
       tags: conn.tags?.length ? conn.tags.join(", ") : "",
-      access: formatAccess(accessFor(conn.platform))
+      access: formatAccess(accessFor(conn))
     }));
     const hasTags = rows.some((r) => r.tags);
-    const hasScopedAccess = rows.some((r) => r.access !== "full");
     printTable(
       [
         { key: "status", label: "" },
         { key: "platform", label: "Platform" },
         { key: "state", label: "Status" },
-        { key: "key", label: "Connection Key", color: pc6.dim },
-        ...hasTags ? [{ key: "tags", label: "Tags", color: pc6.dim }] : [],
-        ...hasScopedAccess ? [{ key: "access", label: "Access", color: pc6.yellow }] : []
+        { key: "key", label: "Connection Key", color: pc5.dim },
+        ...hasTags ? [{ key: "tags", label: "Tags", color: pc5.dim }] : [],
+        { key: "access", label: serverAccess.ok ? "Access" : "Access (CLI settings only)", color: pc5.yellow }
       ],
       rows
     );
     console.log();
-    if (hintText) {
-      const lines = [hintText];
-      if (unresolvedActionIds.length > 0) {
-        lines.push(
-          `Could not resolve ${unresolvedActionIds.length} allowlisted action id(s): ${unresolvedActionIds.join(", ")}`
-        );
+    if (hintText || unresolved.size > 0) {
+      const lines = hintText ? [hintText] : [];
+      if (unresolved.size > 0) {
+        lines.push(`Could not resolve ${unresolved.size} allowed action id(s): ${[...unresolved].join(", ")}`);
       }
-      p4.note(`${wrapText(lines.join("\n"))}
+      p4.note(
+        `${wrapText(lines.join("\n"))}
 
-Change it with: ${pc6.cyan("one config")}`, "Access");
+This key's access: dashboard \u2192 API keys. This CLI's own limits: ${pc5.cyan("one config")}`,
+        "Access"
+      );
     }
     if (displayed.length < filtered.length) {
       p4.note(
@@ -2946,7 +2412,7 @@ Change it with: ${pc6.cyan("one config")}`, "Access");
         "Limited"
       );
     } else {
-      p4.note(`Add more with: ${pc6.cyan("one connection add <platform>")}`, "Tip");
+      p4.note(`Add more with: ${pc5.cyan("one connection add <platform>")}`, "Tip");
     }
   } catch (error2) {
     spinner.stop("Failed to load connections");
@@ -2982,7 +2448,7 @@ async function connectionDeleteCommand(connectionKey, options) {
   spinner.stop(`Found ${connection2.platform} (${connection2.state})`);
   if (!isAgentMode() && !options?.force) {
     console.log();
-    console.log(`  ${getStatusIndicator(connection2.state)} ${connection2.platform}  ${pc6.dim(connection2.key)}`);
+    console.log(`  ${getStatusIndicator(connection2.state)} ${connection2.platform}  ${pc5.dim(connection2.key)}`);
     console.log();
     const confirmed = await p4.confirm({
       message: "Are you sure you want to delete this connection?",
@@ -3006,27 +2472,41 @@ async function connectionDeleteCommand(connectionKey, options) {
       });
       return;
     }
-    p4.log.success(`${pc6.green("\u2713")} ${connection2.platform} connection removed.`);
+    p4.log.success(`${pc5.green("\u2713")} ${connection2.platform} connection removed.`);
   } catch (error2) {
     deleteSpinner.stop("Failed to delete connection");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
   }
 }
-function accessHint(permissions, actionIds, knowledgeOnly) {
+function accessHint(permissions, actionIds, knowledgeOnly, server) {
   const parts = [];
+  if (server === void 0) {
+    parts.push(
+      "One did not report this key's access, so each `access` shows only this CLI's own settings; One may allow less. Check the key in the dashboard under API keys."
+    );
+  } else if (server?.rules && server.rules.length === 0) {
+    parts.push("This key reaches no connections: it can read docs and search actions, but no action will execute.");
+  } else if (server?.rules?.some((r) => r.actionIds)) {
+    parts.push(
+      "Some connections are action-scoped: their `access.actions` are the only actions you may run there \u2014 use them directly: `actions load <actionId>` reads their docs, no find needed."
+    );
+  }
   if (!actionIds.includes("*")) {
     parts.push(
-      "Action-scoped: each connection's `access.actions` are the only actions you may run \u2014 use them directly: `actions load <actionId>` reads their docs, no find needed."
+      "Action-scoped (local settings): each connection's `access.actions` are the only actions you may run \u2014 use them directly: `actions load <actionId>` reads their docs, no find needed."
     );
   } else if (permissions !== "admin") {
     const methods = PERMISSION_METHODS[permissions]?.join(", ") ?? "";
-    parts.push(`Permission level "${permissions}": only ${methods} actions will execute.`);
+    parts.push(`Permission level "${permissions}" (local settings): only ${methods} actions will execute.`);
   }
   if (knowledgeOnly) {
     parts.push("Knowledge-only mode: `actions execute` is disabled \u2014 read knowledge and write code instead.");
   }
   return parts.length > 0 ? parts.join(" ") : null;
 }
+function withLevel(access) {
+  return { ...access, level: accessLevel(access) };
+}
 function wrapText(text5, width = 72) {
   return text5.split("\n").map((paragraph) => {
     const lines = [];
@@ -3046,19 +2526,19 @@ function wrapText(text5, width = 72) {
 function getStatusIndicator(state) {
   switch (state) {
     case "operational":
-      return pc6.green("\u25CF");
+      return pc5.green("\u25CF");
     case "degraded":
-      return pc6.yellow("\u25CF");
+      return pc5.yellow("\u25CF");
     case "failed":
-      return pc6.red("\u25CF");
+      return pc5.red("\u25CF");
     default:
-      return pc6.dim("\u25CB");
+      return pc5.dim("\u25CB");
   }
 }
 
 // src/commands/platforms.ts
 import * as p5 from "@clack/prompts";
-import pc7 from "picocolors";
+import pc6 from "picocolors";
 async function platformsCommand(options) {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -3124,7 +2604,7 @@ async function platformsCommand(options) {
       );
     }
     console.log();
-    p5.note(`Connect with: ${pc7.cyan("one connection add <platform>")}`, "Tip");
+    p5.note(`Connect with: ${pc6.cyan("one connection add <platform>")}`, "Tip");
   } catch (error2) {
     spinner.stop("Failed to load platforms");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
@@ -3132,7 +2612,7 @@ async function platformsCommand(options) {
 }
 
 // src/commands/actions.ts
-import pc8 from "picocolors";
+import pc7 from "picocolors";
 
 // src/lib/knowledge-sections.ts
 var DEFAULT_WHOLE_DOC_THRESHOLD = 8e3;
@@ -3789,7 +3269,7 @@ var CUSTOM_ACTION_NOTE = '\n\nThis is a custom action: ALSO include "connectionK
 function codeGuideAction(action, knowledge, platform, tags, apiBase) {
   const base = apiBase.replace(/\/$/, "");
   const method = action.method.toUpperCase();
-  const path16 = action.path.startsWith("/") ? action.path : `/${action.path}`;
+  const path13 = action.path.startsWith("/") ? action.path : `/${action.path}`;
   const connEnv = `ONE_${platformEnvSegment(platform)}_CONNECTION_KEY`;
   const customNote = tags.includes("custom") ? CUSTOM_ACTION_NOTE : "";
   return `### ${actionHeading(action)}
@@ -3798,7 +3278,7 @@ function codeGuideAction(action, knowledge, platform, tags, apiBase) {
 ${knowledge ?? NO_KNOWLEDGE}
 
 ## Calling this action from code
-URL:    ${base}/passthrough${path16}
+URL:    ${base}/passthrough${path13}
 Method: ${method}
 Headers:
 - x-one-secret: the value of the ONE_SECRET env var
@@ -3809,7 +3289,7 @@ Headers:
 Environment variables: ONE_SECRET (their One API key) and ${connEnv} (the key of their ${platform} connection), both from the One dashboard.
 
 \`\`\`typescript
-const response = await fetch("${base}/passthrough${path16}", {
+const response = await fetch("${base}/passthrough${path13}", {
 method: "${method}",
 headers: {
 "x-one-secret": process.env.ONE_SECRET,
@@ -3940,7 +3420,7 @@ function failure(error2) {
   return error2 instanceof Error ? error2.message : "Unknown error";
 }
 async function actionsFindCommand(pairs, options) {
-  intro(pc8.bgCyan(pc8.black(" One ")));
+  intro(pc7.bgCyan(pc7.black(" One ")));
   if (options.type !== void 0 && options.type !== "execute" && options.type !== "knowledge") {
     error("--type must be execute or knowledge.");
   }
@@ -3998,7 +3478,7 @@ async function actionsLoadCommand(actionIds, options) {
     );
     return;
   }
-  intro(pc8.bgCyan(pc8.black(" One ")));
+  intro(pc7.bgCyan(pc7.black(" One ")));
   const { apiKey, permissions, connectionKeys, actionIds: allowed, knowledgeAgent } = getConfig();
   const api = new OneApi(apiKey, getApiBase());
   const settings = { knowledgeAgent, permissions, actionIds: allowed, connectionKeys, apiBase: getApiBase() };
@@ -4020,7 +3500,7 @@ async function actionsLoadCommand(actionIds, options) {
   }
 }
 async function actionsExecuteCommand(platform, actionId, connectionKey, options) {
-  intro(pc8.bgCyan(pc8.black(" One ")));
+  intro(pc7.bgCyan(pc7.black(" One ")));
   const { apiKey, permissions, actionIds, connectionKeys, knowledgeAgent } = getConfig();
   if (knowledgeAgent) {
     error(
@@ -4045,7 +3525,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
       );
     }
     spinner.stop(
-      `Action: ${actionDetails.title} [${actionDetails.method}]` + (preflightCacheHit ? pc8.dim(" (cached)") : "")
+      `Action: ${actionDetails.title} [${actionDetails.method}]` + (preflightCacheHit ? pc7.dim(" (cached)") : "")
     );
     const data = options.data ? parseJsonArg2(options.data, "--data") : void 0;
     const pathVariables = options.pathVars ? parseJsonArg2(options.pathVars, "--path-vars") : void 0;
@@ -4065,9 +3545,9 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
         }
         console.log();
         for (const m of validation.missing) {
-          console.log(pc8.red(`  ${m.flag} is missing "${m.param}"`));
+          console.log(pc7.red(`  ${m.flag} is missing "${m.param}"`));
           if (m.description) {
-            console.log(pc8.dim(`    ${m.description}`));
+            console.log(pc7.dim(`    ${m.description}`));
           }
         }
         console.log();
@@ -4092,7 +3572,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
       }
       console.log();
       if (mockResponse) {
-        console.log(pc8.bold("Mock Response:"));
+        console.log(pc7.bold("Mock Response:"));
         console.log(JSON.stringify(mockResponse, null, 2));
       } else {
         note("No example output available for this action", "Mock");
@@ -4133,26 +3613,26 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
       return;
     }
     console.log();
-    console.log(pc8.dim("Request:"));
+    console.log(pc7.dim("Request:"));
     console.log(
-      pc8.dim(
+      pc7.dim(
         `  ${result.requestConfig.method} ${result.requestConfig.url}`
       )
     );
     if (options.dryRun) {
       if (result.requestConfig.data) {
         console.log();
-        console.log(pc8.dim("Body:"));
-        console.log(pc8.dim(JSON.stringify(result.requestConfig.data, null, 2)));
+        console.log(pc7.dim("Body:"));
+        console.log(pc7.dim(JSON.stringify(result.requestConfig.data, null, 2)));
       }
       console.log();
       note("Dry run \u2014 request was not sent", "Dry Run");
     } else {
       console.log();
-      console.log(pc8.bold("Response:"));
+      console.log(pc7.bold("Response:"));
       const rd = result.responseData;
       if (rd && typeof rd === "object" && typeof rd.text === "string" && "contentType" in rd) {
-        if (rd.contentType) console.log(pc8.dim(`(${rd.contentType})`));
+        if (rd.contentType) console.log(pc7.dim(`(${rd.contentType})`));
         console.log(rd.text);
       } else {
         console.log(JSON.stringify(result.responseData, null, 2));
@@ -4356,7 +3836,7 @@ async function actionsExecuteParallelCommand() {
     }
     console.log();
     for (const e of errors) {
-      console.log(`  ${pc8.red("\u2717")} Segment ${e.segment} (${e.label}):`);
+      console.log(`  ${pc7.red("\u2717")} Segment ${e.segment} (${e.label}):`);
       for (const msg of e.messages) {
         console.log(`    ${msg}`);
       }
@@ -4451,17 +3931,17 @@ async function actionsExecuteParallelCommand() {
   console.log();
   for (const r of results) {
     const label = `${r.platform}/${r.actionId}`;
-    const time = pc8.dim(`(${(r.durationMs / 1e3).toFixed(2)}s)`);
+    const time = pc7.dim(`(${(r.durationMs / 1e3).toFixed(2)}s)`);
     if (r.mock) {
-      console.log(`  [${r.segment}/${total}] ${label} ${pc8.cyan("\u25C7 mock")} ${time}`);
-      if (r.response) console.log(`  ${pc8.dim(JSON.stringify(r.response, null, 2).split("\n").join("\n  "))}`);
+      console.log(`  [${r.segment}/${total}] ${label} ${pc7.cyan("\u25C7 mock")} ${time}`);
+      if (r.response) console.log(`  ${pc7.dim(JSON.stringify(r.response, null, 2).split("\n").join("\n  "))}`);
     } else if (r.dryRun) {
-      console.log(`  [${r.segment}/${total}] ${label} ${pc8.yellow("\u2298 dry-run")} ${time}`);
+      console.log(`  [${r.segment}/${total}] ${label} ${pc7.yellow("\u2298 dry-run")} ${time}`);
     } else if (r.status === "success") {
-      console.log(`  [${r.segment}/${total}] ${label} ${pc8.green("\u2713")} ${time}`);
-      if (r.response) console.log(`  ${pc8.dim(JSON.stringify(r.response, null, 2).split("\n").join("\n  "))}`);
+      console.log(`  [${r.segment}/${total}] ${label} ${pc7.green("\u2713")} ${time}`);
+      if (r.response) console.log(`  ${pc7.dim(JSON.stringify(r.response, null, 2).split("\n").join("\n  "))}`);
     } else {
-      console.log(`  [${r.segment}/${total}] ${label} ${pc8.red("\u2717")} ${time} \u2014 ${r.error}`);
+      console.log(`  [${r.segment}/${total}] ${label} ${pc7.red("\u2717")} ${time} \u2014 ${r.error}`);
     }
   }
   console.log();
@@ -4475,11 +3955,11 @@ async function actionsExecuteParallelCommand() {
 }
 
 // src/commands/flow.ts
-import pc9 from "picocolors";
+import pc8 from "picocolors";
 
 // src/lib/flow-validator.ts
-import fs5 from "fs";
-import path6 from "path";
+import fs3 from "fs";
+import path3 from "path";
 import { spawnSync } from "child_process";
 function validateFlowSchema(flow2) {
   const errors = [];
@@ -4554,32 +4034,32 @@ function validateStepsArray(steps, pathPrefix, errors) {
   const validTypes = FLOW_SCHEMA.stepTypes.map((st) => st.type);
   for (let i = 0; i < steps.length; i++) {
     const step = steps[i];
-    const path16 = `${pathPrefix}[${i}]`;
+    const path13 = `${pathPrefix}[${i}]`;
     if (!step || typeof step !== "object" || Array.isArray(step)) {
-      errors.push({ path: path16, message: "Step must be an object" });
+      errors.push({ path: path13, message: "Step must be an object" });
       continue;
     }
     const s = step;
     if (!s.id || typeof s.id !== "string") {
-      errors.push({ path: `${path16}.id`, message: 'Step must have a string "id"' });
+      errors.push({ path: `${path13}.id`, message: 'Step must have a string "id"' });
     }
     if (!s.name || typeof s.name !== "string") {
-      errors.push({ path: `${path16}.name`, message: 'Step must have a string "name"' });
+      errors.push({ path: `${path13}.name`, message: 'Step must have a string "name"' });
     }
     if (!s.type || !validTypes.includes(s.type)) {
-      errors.push({ path: `${path16}.type`, message: `Step type must be one of: ${validTypes.join(", ")}` });
+      errors.push({ path: `${path13}.type`, message: `Step type must be one of: ${validTypes.join(", ")}` });
       continue;
     }
     if (s.requires !== void 0) {
       if (!Array.isArray(s.requires)) {
-        errors.push({ path: `${path16}.requires`, message: '"requires" must be an array of selector strings (e.g. ["$.steps.foo.output.bar"])' });
+        errors.push({ path: `${path13}.requires`, message: '"requires" must be an array of selector strings (e.g. ["$.steps.foo.output.bar"])' });
       } else {
         for (let r = 0; r < s.requires.length; r++) {
           const sel = s.requires[r];
           if (typeof sel !== "string") {
-            errors.push({ path: `${path16}.requires[${r}]`, message: '"requires" entry must be a selector string' });
+            errors.push({ path: `${path13}.requires[${r}]`, message: '"requires" entry must be a selector string' });
           } else if (!sel.startsWith("$.")) {
-            errors.push({ path: `${path16}.requires[${r}]`, message: `"requires" entry "${sel}" must be a selector starting with "$." (e.g. "$.steps.foo.output.bar")` });
+            errors.push({ path: `${path13}.requires[${r}]`, message: `"requires" entry "${sel}" must be a selector starting with "$." (e.g. "$.steps.foo.output.bar")` });
           }
         }
       }
@@ -4587,7 +4067,7 @@ function validateStepsArray(steps, pathPrefix, errors) {
     if (s.onError && typeof s.onError === "object") {
       const oe = s.onError;
       if (!FLOW_SCHEMA.errorStrategies.includes(oe.strategy)) {
-        errors.push({ path: `${path16}.onError.strategy`, message: `Error strategy must be one of: ${FLOW_SCHEMA.errorStrategies.join(", ")}` });
+        errors.push({ path: `${path13}.onError.strategy`, message: `Error strategy must be one of: ${FLOW_SCHEMA.errorStrategies.join(", ")}` });
       }
     }
     const descriptor = getStepTypeDescriptor(s.type);
@@ -4597,14 +4077,14 @@ function validateStepsArray(steps, pathPrefix, errors) {
     if (!configObj || typeof configObj !== "object") {
       const hint = detectFlatConfigHint(s, descriptor);
       errors.push({
-        path: `${path16}.${configKey}`,
+        path: `${path13}.${configKey}`,
         message: `${capitalize(descriptor.type)} step must have a "${configKey}" config object${hint}`
       });
       continue;
     }
     const config2 = configObj;
     for (const [fieldName, fd] of Object.entries(descriptor.fields)) {
-      const fieldPath = `${path16}.${configKey}.${fieldName}`;
+      const fieldPath = `${path13}.${configKey}.${fieldName}`;
       const value = config2[fieldName];
       if (fd.required && (value === void 0 || value === null || value === "")) {
         errors.push({ path: fieldPath, message: `${capitalize(descriptor.type)} must have ${fd.type === "string" ? "a string" : fd.type === "array" ? "a" : "a"} "${fieldName}"` });
@@ -4637,30 +4117,30 @@ function validateStepsArray(steps, pathPrefix, errors) {
       }
     }
     if (descriptor.type === "action") {
-      validateConnectionForm(config2, `${path16}.${configKey}`, errors);
+      validateConnectionForm(config2, `${path13}.${configKey}`, errors);
     }
     if (descriptor.type === "code") {
       const hasSource = typeof config2.source === "string" && config2.source.length > 0;
       const hasModule = typeof config2.module === "string" && config2.module.length > 0;
       if (!hasSource && !hasModule) {
-        errors.push({ path: `${path16}.${configKey}`, message: 'Code step must define either "source" (inline JS) or "module" (path to .mjs file)' });
+        errors.push({ path: `${path13}.${configKey}`, message: 'Code step must define either "source" (inline JS) or "module" (path to .mjs file)' });
       } else if (hasSource && hasModule) {
-        errors.push({ path: `${path16}.${configKey}`, message: 'Code step cannot define both "source" and "module" \u2014 pick one' });
+        errors.push({ path: `${path13}.${configKey}`, message: 'Code step cannot define both "source" and "module" \u2014 pick one' });
       }
       if (hasModule) {
         const m = config2.module;
         if (m.startsWith("/") || /^[a-zA-Z]:[\\/]/.test(m)) {
-          errors.push({ path: `${path16}.${configKey}.module`, message: "Code module path must be relative to the flow folder (no absolute paths)" });
+          errors.push({ path: `${path13}.${configKey}.module`, message: "Code module path must be relative to the flow folder (no absolute paths)" });
         } else if (m.split(/[\\/]/).includes("..")) {
-          errors.push({ path: `${path16}.${configKey}.module`, message: 'Code module path must not escape the flow folder ("..")' });
+          errors.push({ path: `${path13}.${configKey}.module`, message: 'Code module path must not escape the flow folder ("..")' });
         } else if (!m.endsWith(".mjs")) {
-          errors.push({ path: `${path16}.${configKey}.module`, message: "Code module must be a .mjs file" });
+          errors.push({ path: `${path13}.${configKey}.module`, message: "Code module must be a .mjs file" });
         }
       }
       if (hasSource) {
         const syntaxError = checkCodeSourceSyntax(config2.source);
         if (syntaxError) {
-          errors.push({ path: `${path16}.${configKey}.source`, message: `Syntax error in code step: ${syntaxError}` });
+          errors.push({ path: `${path13}.${configKey}.source`, message: `Syntax error in code step: ${syntaxError}` });
         }
       }
     }
@@ -4732,16 +4212,16 @@ function validateStepIds(flow2) {
   function collectIds(steps, pathPrefix) {
     for (let i = 0; i < steps.length; i++) {
       const step = steps[i];
-      const path16 = `${pathPrefix}[${i}]`;
+      const path13 = `${pathPrefix}[${i}]`;
       if (seen.has(step.id)) {
-        errors.push({ path: `${path16}.id`, message: `Duplicate step ID: "${step.id}"` });
+        errors.push({ path: `${path13}.id`, message: `Duplicate step ID: "${step.id}"` });
       } else {
         seen.add(step.id);
       }
       for (const { configKey, fieldName } of nestedKeys) {
         const config2 = step[configKey];
         if (config2 && Array.isArray(config2[fieldName])) {
-          collectIds(config2[fieldName], `${path16}.${configKey}.${fieldName}`);
+          collectIds(config2[fieldName], `${path13}.${configKey}.${fieldName}`);
         }
       }
     }
@@ -4789,7 +4269,7 @@ function validateSelectorReferences(flow2, rootDir) {
     }
     return selectors;
   }
-  function checkSelectors(selectors, path16, precedingStepIds) {
+  function checkSelectors(selectors, path13, precedingStepIds) {
     for (const selector of selectors) {
       const parts = selector.split(".");
       if (parts.length < 3) continue;
@@ -4797,15 +4277,15 @@ function validateSelectorReferences(flow2, rootDir) {
       if (root === "input") {
         const inputName = parts[2];
         if (!inputNames.has(inputName)) {
-          errors.push({ path: path16, message: `Selector "${selector}" references undefined input "${inputName}"` });
+          errors.push({ path: path13, message: `Selector "${selector}" references undefined input "${inputName}"` });
         }
       } else if (root === "steps") {
         const stepId = parts[2].replace(/[\[\]]/g, "").split(/[\[\]]/)[0];
         if (!allStepIds.has(stepId)) {
-          errors.push({ path: path16, message: `Selector "${selector}" references undefined step "${stepId}"` });
+          errors.push({ path: path13, message: `Selector "${selector}" references undefined step "${stepId}"` });
         } else if (precedingStepIds && !precedingStepIds.has(stepId)) {
           errors.push({
-            path: path16,
+            path: path13,
             message: `Selector "${selector}" references step "${stepId}" which is declared after the current step. Steps execute in declaration order, so this will always resolve to undefined at runtime \u2014 move the dependency earlier in the steps array.`
           });
         }
@@ -4813,20 +4293,20 @@ function validateSelectorReferences(flow2, rootDir) {
     }
   }
   const EXPRESSION_FIELDS = /* @__PURE__ */ new Set(["condition.expression", "while.condition"]);
-  function checkOperatorsInSelectorField(value, path16) {
+  function checkOperatorsInSelectorField(value, path13) {
     if (typeof value === "string" && value.startsWith("$.")) {
       if (value.includes("||")) {
-        errors.push({ path: path16, message: `Selector "${value}" contains unsupported operator "||". Selectors in data fields use dot-path resolution, not JS evaluation. Use the "default" field on the input definition instead, or use a "code" step for complex expressions.` });
+        errors.push({ path: path13, message: `Selector "${value}" contains unsupported operator "||". Selectors in data fields use dot-path resolution, not JS evaluation. Use the "default" field on the input definition instead, or use a "code" step for complex expressions.` });
       } else if (value.includes("&&")) {
-        errors.push({ path: path16, message: `Selector "${value}" contains unsupported operator "&&". Selectors in data fields use dot-path resolution, not JS evaluation. Use a "condition" step or "code" step for complex expressions.` });
+        errors.push({ path: path13, message: `Selector "${value}" contains unsupported operator "&&". Selectors in data fields use dot-path resolution, not JS evaluation. Use a "condition" step or "code" step for complex expressions.` });
       }
     } else if (value && typeof value === "object" && !Array.isArray(value)) {
       for (const [k, v] of Object.entries(value)) {
-        checkOperatorsInSelectorField(v, `${path16}.${k}`);
+        checkOperatorsInSelectorField(v, `${path13}.${k}`);
       }
     } else if (Array.isArray(value)) {
       for (let i = 0; i < value.length; i++) {
-        checkOperatorsInSelectorField(value[i], `${path16}[${i}]`);
+        checkOperatorsInSelectorField(value[i], `${path13}[${i}]`);
       }
     }
   }
@@ -4870,10 +4350,10 @@ function validateSelectorReferences(flow2, rootDir) {
           }
           const modulePath = step.type === "code" ? c.module : void 0;
           if (rootDir && typeof modulePath === "string" && modulePath.length > 0) {
-            const abs = path6.resolve(rootDir, modulePath);
-            if (fs5.existsSync(abs)) {
+            const abs = path3.resolve(rootDir, modulePath);
+            if (fs3.existsSync(abs)) {
               try {
-                const moduleText = fs5.readFileSync(abs, "utf-8");
+                const moduleText = fs3.readFileSync(abs, "utf-8");
                 checkSelectors(extractSelectors(moduleText), `${pathPrefix}.${descriptor.configKey}.module`, preceding2);
               } catch {
               }
@@ -4911,10 +4391,10 @@ var VALID_OUTPUT_SCHEMA_TYPES = /* @__PURE__ */ new Set(["string", "number", "bo
 function isOutputSchemaObject(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
 }
-function walkOutputSchema(schema, path16) {
+function walkOutputSchema(schema, path13) {
   let current = schema;
-  for (let i = 0; i < path16.length; i++) {
-    const seg = path16[i];
+  for (let i = 0; i < path13.length; i++) {
+    const seg = path13[i];
     if (typeof current === "string") {
       return current === "unknown" || current === "object" || current === "array" ? "opaque" : "opaque";
     }
@@ -5066,8 +4546,8 @@ function validateCodeModules(flow2, rootDir) {
       const stepPath = `${pathPrefix}[${i}]`;
       if (step.type === "code" && step.code?.module) {
         const m = step.code.module;
-        const abs = path6.resolve(rootDir, m);
-        if (!fs5.existsSync(abs)) {
+        const abs = path3.resolve(rootDir, m);
+        if (!fs3.existsSync(abs)) {
           errors.push({
             path: `${stepPath}.code.module`,
             message: `Code module "${m}" not found at ${abs}`
@@ -5198,11 +4678,11 @@ function validateFileReadSchemas(flow2) {
 }
 
 // src/commands/flow.ts
-import fs6 from "fs";
-import path7 from "path";
+import fs4 from "fs";
+import path4 from "path";
 async function writeFlowResultFile(filePath, meta, steps) {
-  const abs = path7.resolve(filePath);
-  const ws = fs6.createWriteStream(abs);
+  const abs = path4.resolve(filePath);
+  const ws = fs4.createWriteStream(abs);
   const done = new Promise((resolve, reject) => {
     ws.on("finish", () => resolve());
     ws.on("error", reject);
@@ -5233,25 +4713,25 @@ function previewValue(value, max = 120) {
 }
 function renderDryRef(ref2) {
   if (ref2.status === "resolved") {
-    return `${pc9.green("\u2713")} ${ref2.selector} ${pc9.dim("\u2192")} ${previewValue(ref2.value)}`;
+    return `${pc8.green("\u2713")} ${ref2.selector} ${pc8.dim("\u2192")} ${previewValue(ref2.value)}`;
   }
   if (ref2.status === "deferred") {
-    return `${pc9.dim("\u25CB")} ${ref2.selector} ${pc9.dim("\u2192 pending (produced by a later step)")}`;
+    return `${pc8.dim("\u25CB")} ${ref2.selector} ${pc8.dim("\u2192 pending (produced by a later step)")}`;
   }
-  return `${pc9.yellow("!")} ${ref2.selector} ${pc9.yellow("\u2192 unresolved \u2014 check the input/env name")}`;
+  return `${pc8.yellow("!")} ${ref2.selector} ${pc8.yellow("\u2192 unresolved \u2014 check the input/env name")}`;
 }
 function renderDryResolution(steps) {
   const isExpr = (t) => t === "transform" || t === "condition" || t === "while";
   for (const s of steps) {
-    const label = s.name ? `${s.stepId} ${pc9.dim(`"${s.name}"`)}` : s.stepId;
-    console.log(`  ${pc9.cyan("\u25B8")} ${label} ${pc9.dim(`(${s.type})`)}`);
+    const label = s.name ? `${s.stepId} ${pc8.dim(`"${s.name}"`)}` : s.stepId;
+    console.log(`  ${pc8.cyan("\u25B8")} ${label} ${pc8.dim(`(${s.type})`)}`);
     if (s.error !== void 0) {
-      console.log(`      ${pc9.red("error")} ${s.error}`);
+      console.log(`      ${pc8.red("error")} ${s.error}`);
     } else if (isExpr(s.type) && s.deferred) {
       const deps = s.references.map((r) => r.selector).join(", ");
-      console.log(`      ${pc9.dim("\u25CB pending \u2014 depends on")} ${deps} ${pc9.dim("(produced by a later step)")}`);
+      console.log(`      ${pc8.dim("\u25CB pending \u2014 depends on")} ${deps} ${pc8.dim("(produced by a later step)")}`);
     } else if (isExpr(s.type)) {
-      console.log(`      ${pc9.dim("=")} ${previewValue(s.resolved)}`);
+      console.log(`      ${pc8.dim("=")} ${previewValue(s.resolved)}`);
     }
     if (!(isExpr(s.type) && s.deferred)) {
       for (const ref2 of s.references) {
@@ -5259,7 +4739,7 @@ function renderDryResolution(steps) {
       }
     }
     if (!isExpr(s.type) && s.references.length === 0 && s.error === void 0) {
-      console.log(`      ${pc9.dim("(no interpolations)")}`);
+      console.log(`      ${pc8.dim("(no interpolations)")}`);
     }
   }
 }
@@ -5313,14 +4793,14 @@ async function autoResolveConnectionInputs(flow2, inputs, api) {
   return resolved;
 }
 async function flowCreateCommand(key, options) {
-  intro(pc9.bgCyan(pc9.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   let flow2;
   if (options.definition) {
     let raw = options.definition;
     if (raw.startsWith("@")) {
       const filePath = raw.slice(1);
       try {
-        raw = fs6.readFileSync(filePath, "utf-8");
+        raw = fs4.readFileSync(filePath, "utf-8");
       } catch (err) {
         error(`Cannot read file "${filePath}": ${err.message}`);
       }
@@ -5369,11 +4849,11 @@ ${errors.map((e) => `  ${e.path}: ${e.message}`).join("\n")}`);
     return;
   }
   note(`Workflow "${flow2.name}" saved to ${flowPath}`, "Created");
-  outro(`Validate: ${pc9.cyan(`one flow validate ${flow2.key}`)}
-Execute:  ${pc9.cyan(`one flow execute ${flow2.key}`)}`);
+  outro(`Validate: ${pc8.cyan(`one flow validate ${flow2.key}`)}
+Execute:  ${pc8.cyan(`one flow execute ${flow2.key}`)}`);
 }
 async function flowExecuteCommand(keyOrPath, options) {
-  intro(pc9.bgCyan(pc9.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const { apiKey, permissions, actionIds } = getConfig2();
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
@@ -5406,7 +4886,7 @@ ${preflightErrors.map((e) => `  ${e.path}: ${e.message}`).join("\n")}`);
     if (isAgentMode()) {
       json({ event: "flow:deprecation", flowKey: flow2.key, warning: msg });
     } else {
-      console.error(pc9.yellow(`\u26A0 ${msg}`));
+      console.error(pc8.yellow(`\u26A0 ${msg}`));
     }
   }
   if (!options.allowBash && flowRequiresBash(flow2)) {
@@ -5440,7 +4920,7 @@ ${preflightErrors.map((e) => `  ${e.path}: ${e.message}`).join("\n")}`);
     runner.requestPause();
     if (!isAgentMode()) {
       console.log(`
-${pc9.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
+${pc8.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
     }
   };
   process.on("SIGINT", sigintHandler);
@@ -5460,12 +4940,12 @@ ${pc9.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
     } else if (options.verbose) {
       const ts = (/* @__PURE__ */ new Date()).toISOString().split("T")[1].slice(0, 8);
       if (event.event === "step:start") {
-        console.log(`  ${pc9.dim(ts)} ${pc9.cyan("\u25B6")} ${event.stepName} ${pc9.dim(`(${event.type})`)}`);
+        console.log(`  ${pc8.dim(ts)} ${pc8.cyan("\u25B6")} ${event.stepName} ${pc8.dim(`(${event.type})`)}`);
       } else if (event.event === "step:complete") {
-        const status2 = event.status === "success" ? pc9.green("\u2713") : event.status === "skipped" ? pc9.dim("\u25CB") : pc9.red("\u2717");
-        console.log(`  ${pc9.dim(ts)} ${status2} ${event.stepId} ${pc9.dim(`${event.durationMs}ms`)}`);
+        const status2 = event.status === "success" ? pc8.green("\u2713") : event.status === "skipped" ? pc8.dim("\u25CB") : pc8.red("\u2717");
+        console.log(`  ${pc8.dim(ts)} ${status2} ${event.stepId} ${pc8.dim(`${event.durationMs}ms`)}`);
       } else if (event.event === "step:error") {
-        console.log(`  ${pc9.dim(ts)} ${pc9.red("\u2717")} ${event.stepId}: ${event.error}`);
+        console.log(`  ${pc8.dim(ts)} ${pc8.red("\u2717")} ${event.stepId}: ${event.error}`);
       }
     }
   };
@@ -5514,8 +4994,8 @@ ${pc9.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
       console.log();
       const missing = dryRunSteps.reduce((n, s) => n + s.references.filter((r) => r.status === "missing").length, 0);
       note(
-        `Dry run \u2014 no steps executed. Resolved ${dryRunSteps.length} step(s)` + (missing > 0 ? `; ${pc9.yellow(`${missing} unresolved input/env reference(s)`)}` : "") + `.
-${pc9.dim("$.steps.* refs resolve at runtime \u2014 re-run with --stop-after=<stepId> to resolve them against real output.")}`,
+        `Dry run \u2014 no steps executed. Resolved ${dryRunSteps.length} step(s)` + (missing > 0 ? `; ${pc8.yellow(`${missing} unresolved input/env reference(s)`)}` : "") + `.
+${pc8.dim("$.steps.* refs resolve at runtime \u2014 re-run with --stop-after=<stepId> to resolve them against real output.")}`,
         "Dry Run"
       );
       return;
@@ -5525,17 +5005,17 @@ ${pc9.dim("$.steps.* refs resolve at runtime \u2014 re-run with --stop-after=<st
     const failed = stepEntries.filter(([, r]) => r.status === "failed").length;
     const skipped = stepEntries.filter(([, r]) => r.status === "skipped").length;
     console.log();
-    console.log(`  ${pc9.green("\u2713")} ${succeeded} succeeded  ${failed > 0 ? pc9.red(`\u2717 ${failed} failed`) : ""}  ${skipped > 0 ? pc9.dim(`\u25CB ${skipped} skipped`) : ""}`);
-    console.log(`  ${pc9.dim(`Run ID: ${runId}`)}`);
-    console.log(`  ${pc9.dim(`Log: ${logPath}`)}`);
+    console.log(`  ${pc8.green("\u2713")} ${succeeded} succeeded  ${failed > 0 ? pc8.red(`\u2717 ${failed} failed`) : ""}  ${skipped > 0 ? pc8.dim(`\u25CB ${skipped} skipped`) : ""}`);
+    console.log(`  ${pc8.dim(`Run ID: ${runId}`)}`);
+    console.log(`  ${pc8.dim(`Log: ${logPath}`)}`);
     if (dryResolveTarget) {
       console.log();
-      console.log(`  ${pc9.dim(`Resolved (not executed) "${dryResolveTarget.stepId}":`)}`);
+      console.log(`  ${pc8.dim(`Resolved (not executed) "${dryResolveTarget.stepId}":`)}`);
       renderDryResolution([dryResolveTarget]);
     }
     if (stoppedAfter) {
       note(
-        `Stopped after step "${stoppedAfter}". Inspect step outputs with: ${pc9.cyan(`one flow inspect ${runId}`)}`,
+        `Stopped after step "${stoppedAfter}". Inspect step outputs with: ${pc8.cyan(`one flow inspect ${runId}`)}`,
         "Stopped"
       );
     } else if (options.dryRun) {
@@ -5557,13 +5037,13 @@ ${pc9.dim("$.steps.* refs resolve at runtime \u2014 re-run with --stop-after=<st
       });
       process.exit(1);
     }
-    console.log(`  ${pc9.dim(`Run ID: ${runId}`)}`);
-    console.log(`  ${pc9.dim(`Log: ${logPath}`)}`);
+    console.log(`  ${pc8.dim(`Run ID: ${runId}`)}`);
+    console.log(`  ${pc8.dim(`Log: ${logPath}`)}`);
     error(`Workflow failed: ${errorMsg}`);
   }
 }
 async function flowListCommand() {
-  intro(pc9.bgCyan(pc9.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const flows = listFlows();
   if (isAgentMode()) {
     json({ workflows: flows });
@@ -5595,7 +5075,7 @@ async function flowListCommand() {
   console.log();
 }
 async function flowValidateCommand(keyOrPath) {
-  intro(pc9.bgCyan(pc9.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const spinner = createSpinner();
   spinner.start(`Validating "${keyOrPath}"...`);
   let flowData;
@@ -5607,9 +5087,9 @@ async function flowValidateCommand(keyOrPath) {
       rootDir = loaded.rootDir;
     } catch {
       const flowPath = resolveFlowPath(keyOrPath);
-      const content = fs6.readFileSync(flowPath, "utf-8");
+      const content = fs4.readFileSync(flowPath, "utf-8");
       flowData = JSON.parse(content);
-      rootDir = path7.dirname(flowPath);
+      rootDir = path4.dirname(flowPath);
     }
   } catch (err) {
     spinner.stop("Validation failed");
@@ -5624,7 +5104,7 @@ async function flowValidateCommand(keyOrPath) {
     }
     console.log();
     for (const e of errors) {
-      console.log(`  ${pc9.red("\u2717")} ${pc9.dim(e.path)}: ${e.message}`);
+      console.log(`  ${pc8.red("\u2717")} ${pc8.dim(e.path)}: ${e.message}`);
     }
     console.log();
     error(`${errors.length} validation error(s) found`);
@@ -5637,7 +5117,7 @@ async function flowValidateCommand(keyOrPath) {
   note(`Workflow "${flowData.key}" passed all validation checks`, "Valid");
 }
 async function flowResumeCommand(runId, options = {}) {
-  intro(pc9.bgCyan(pc9.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const state = FlowRunner.loadRunState(runId);
   if (!state) {
     error(`Run "${runId}" not found`);
@@ -5690,8 +5170,8 @@ async function flowResumeCommand(runId, options = {}) {
       });
       return;
     }
-    console.log(`  ${pc9.green("\u2713")} Resumed and completed successfully`);
-    console.log(`  ${pc9.dim(`Log: ${runner.getLogPath()}`)}`);
+    console.log(`  ${pc8.green("\u2713")} Resumed and completed successfully`);
+    console.log(`  ${pc8.dim(`Log: ${runner.getLogPath()}`)}`);
   } catch (error2) {
     spinner.stop("Resume failed");
     const errorMsg = error2 instanceof Error ? error2.message : String(error2);
@@ -5703,7 +5183,7 @@ async function flowResumeCommand(runId, options = {}) {
   }
 }
 async function flowRunsCommand(flowKey) {
-  intro(pc9.bgCyan(pc9.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const runs = FlowRunner.listRuns(flowKey);
   if (isAgentMode()) {
     json({
@@ -5743,7 +5223,7 @@ async function flowRunsCommand(flowKey) {
   console.log();
 }
 async function flowInspectCommand(runId, options = {}) {
-  intro(pc9.bgCyan(pc9.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const state = FlowRunner.loadRunState(runId);
   if (!state) {
     const msg = `No run found for id "${runId}". List runs with: one flow runs`;
@@ -5772,44 +5252,44 @@ async function flowInspectCommand(runId, options = {}) {
     return;
   }
   console.log();
-  console.log(`  ${pc9.bold(state.flowKey)} ${pc9.dim(`run ${state.runId}`)}  ${colorStatus(state.status)}`);
-  console.log(`  ${pc9.dim(`Started: ${state.startedAt}${state.completedAt ? `  \xB7  Ended: ${state.completedAt}` : ""}`)}`);
-  if (state.currentStepId) console.log(`  ${pc9.dim(`Current step: ${state.currentStepId}`)}`);
+  console.log(`  ${pc8.bold(state.flowKey)} ${pc8.dim(`run ${state.runId}`)}  ${colorStatus(state.status)}`);
+  console.log(`  ${pc8.dim(`Started: ${state.startedAt}${state.completedAt ? `  \xB7  Ended: ${state.completedAt}` : ""}`)}`);
+  if (state.currentStepId) console.log(`  ${pc8.dim(`Current step: ${state.currentStepId}`)}`);
   console.log();
   if (stepEntries.length === 0) {
     note("No step outputs recorded yet for this run.", "Steps");
   } else {
     for (const [id, result] of stepEntries) {
-      const icon = result.status === "success" ? pc9.green("\u2713") : result.status === "skipped" ? pc9.dim("\u25CB") : result.status === "timeout" ? pc9.yellow("\u29D6") : pc9.red("\u2717");
-      const dur = result.durationMs !== void 0 ? pc9.dim(` ${result.durationMs}ms`) : "";
-      const retries = result.retries ? pc9.dim(` (${result.retries} retr${result.retries === 1 ? "y" : "ies"})`) : "";
-      console.log(`  ${icon} ${id} ${pc9.dim(`[${result.status}]`)}${dur}${retries}`);
+      const icon = result.status === "success" ? pc8.green("\u2713") : result.status === "skipped" ? pc8.dim("\u25CB") : result.status === "timeout" ? pc8.yellow("\u29D6") : pc8.red("\u2717");
+      const dur = result.durationMs !== void 0 ? pc8.dim(` ${result.durationMs}ms`) : "";
+      const retries = result.retries ? pc8.dim(` (${result.retries} retr${result.retries === 1 ? "y" : "ies"})`) : "";
+      console.log(`  ${icon} ${id} ${pc8.dim(`[${result.status}]`)}${dur}${retries}`);
       if (result.error) {
-        console.log(`      ${pc9.red("error")} ${result.error}${result.errorCode ? pc9.dim(` (${result.errorCode})`) : ""}`);
+        console.log(`      ${pc8.red("error")} ${result.error}${result.errorCode ? pc8.dim(` (${result.errorCode})`) : ""}`);
       }
       if (result.output !== void 0) {
         const json2 = JSON.stringify(result.output, null, options.full ? 2 : 0) ?? String(result.output);
-        const shown = options.full || json2.length <= 240 ? json2 : `${json2.slice(0, 239)}\u2026  ${pc9.dim("(--full for all)")}`;
-        const indented = options.full ? shown.split("\n").map((l) => `        ${l}`).join("\n") : `      ${pc9.dim("output")} ${shown}`;
+        const shown = options.full || json2.length <= 240 ? json2 : `${json2.slice(0, 239)}\u2026  ${pc8.dim("(--full for all)")}`;
+        const indented = options.full ? shown.split("\n").map((l) => `        ${l}`).join("\n") : `      ${pc8.dim("output")} ${shown}`;
         console.log(indented);
       }
     }
   }
   console.log();
-  console.log(`  ${pc9.dim(`State: ${statePath}`)}`);
-  console.log(`  ${pc9.dim(`Log:   ${path7.join(".one/flows/.logs", `${state.flowKey}-${state.runId}.log`)}`)}`);
+  console.log(`  ${pc8.dim(`State: ${statePath}`)}`);
+  console.log(`  ${pc8.dim(`Log:   ${path4.join(".one/flows/.logs", `${state.flowKey}-${state.runId}.log`)}`)}`);
   console.log();
 }
 function colorStatus(status2) {
   switch (status2) {
     case "completed":
-      return pc9.green(status2);
+      return pc8.green(status2);
     case "running":
-      return pc9.cyan(status2);
+      return pc8.cyan(status2);
     case "paused":
-      return pc9.yellow(status2);
+      return pc8.yellow(status2);
     case "failed":
-      return pc9.red(status2);
+      return pc8.red(status2);
     default:
       return status2;
   }
@@ -5987,7 +5467,7 @@ async function flowScaffoldCommand(template) {
 }
 
 // src/commands/relay.ts
-import pc10 from "picocolors";
+import pc9 from "picocolors";
 function getConfig3() {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -6028,15 +5508,15 @@ async function relayCreateCommand(options) {
     }
     spinner.stop("Relay endpoint created");
     console.log();
-    console.log(`  ${pc10.dim("ID:")}          ${result.id}`);
-    console.log(`  ${pc10.dim("URL:")}         ${result.url}`);
-    console.log(`  ${pc10.dim("Active:")}      ${result.active}`);
-    if (result.description) console.log(`  ${pc10.dim("Description:")} ${result.description}`);
-    if (result.eventFilters?.length) console.log(`  ${pc10.dim("Events:")}      ${result.eventFilters.join(", ")}`);
-    if (result.webhookPayload?.id) console.log(`  ${pc10.dim("Webhook ID:")}  ${result.webhookPayload.id}`);
+    console.log(`  ${pc9.dim("ID:")}          ${result.id}`);
+    console.log(`  ${pc9.dim("URL:")}         ${result.url}`);
+    console.log(`  ${pc9.dim("Active:")}      ${result.active}`);
+    if (result.description) console.log(`  ${pc9.dim("Description:")} ${result.description}`);
+    if (result.eventFilters?.length) console.log(`  ${pc9.dim("Events:")}      ${result.eventFilters.join(", ")}`);
+    if (result.webhookPayload?.id) console.log(`  ${pc9.dim("Webhook ID:")}  ${result.webhookPayload.id}`);
     if (result.warning) {
       console.log();
-      console.log(`  ${pc10.yellow("\u26A0 Warning:")} ${result.warning}`);
+      console.log(`  ${pc9.yellow("\u26A0 Warning:")} ${result.warning}`);
     }
     console.log();
   } catch (error2) {
@@ -6082,12 +5562,12 @@ async function relayListCommand(options) {
         { key: "description", label: "Description" },
         { key: "events", label: "Events" },
         { key: "actions", label: "Actions" },
-        { key: "id", label: "ID", color: pc10.dim }
+        { key: "id", label: "ID", color: pc9.dim }
       ],
       endpoints.map((e) => ({
-        status: e.active ? pc10.green("\u25CF") : pc10.dim("\u25CB"),
-        description: e.description || pc10.dim("(none)"),
-        events: e.eventFilters?.join(", ") || pc10.dim("all"),
+        status: e.active ? pc9.green("\u25CF") : pc9.dim("\u25CB"),
+        description: e.description || pc9.dim("(none)"),
+        events: e.eventFilters?.join(", ") || pc9.dim("all"),
         actions: String(e.actions?.length || 0),
         id: e.id.slice(0, 8)
       }))
@@ -6110,18 +5590,18 @@ async function relayGetCommand(id) {
     }
     spinner.stop("Relay endpoint loaded");
     console.log();
-    console.log(`  ${pc10.dim("ID:")}          ${result.id}`);
-    console.log(`  ${pc10.dim("URL:")}         ${result.url}`);
-    console.log(`  ${pc10.dim("Active:")}      ${result.active}`);
-    if (result.description) console.log(`  ${pc10.dim("Description:")} ${result.description}`);
-    if (result.eventFilters?.length) console.log(`  ${pc10.dim("Events:")}      ${result.eventFilters.join(", ")}`);
-    console.log(`  ${pc10.dim("Actions:")}     ${result.actions?.length || 0}`);
+    console.log(`  ${pc9.dim("ID:")}          ${result.id}`);
+    console.log(`  ${pc9.dim("URL:")}         ${result.url}`);
+    console.log(`  ${pc9.dim("Active:")}      ${result.active}`);
+    if (result.description) console.log(`  ${pc9.dim("Description:")} ${result.description}`);
+    if (result.eventFilters?.length) console.log(`  ${pc9.dim("Events:")}      ${result.eventFilters.join(", ")}`);
+    console.log(`  ${pc9.dim("Actions:")}     ${result.actions?.length || 0}`);
     if (result.actions?.length) {
       for (const [i, action] of result.actions.entries()) {
-        console.log(`    ${pc10.dim(`[${i}]`)} type=${action.type}${action.actionId ? ` actionId=${action.actionId}` : ""}${action.url ? ` url=${action.url}` : ""}`);
+        console.log(`    ${pc9.dim(`[${i}]`)} type=${action.type}${action.actionId ? ` actionId=${action.actionId}` : ""}${action.url ? ` url=${action.url}` : ""}`);
       }
     }
-    console.log(`  ${pc10.dim("Created:")}     ${result.createdAt}`);
+    console.log(`  ${pc9.dim("Created:")}     ${result.createdAt}`);
     console.log();
   } catch (error2) {
     spinner.stop("Failed to load relay endpoint");
@@ -6146,9 +5626,9 @@ async function relayUpdateCommand(id, options) {
       return;
     }
     spinner.stop("Relay endpoint updated");
-    console.log(`  ${pc10.dim("ID:")} ${result.id}`);
-    console.log(`  ${pc10.dim("Active:")} ${result.active}`);
-    console.log(`  ${pc10.dim("Actions:")} ${result.actions?.length || 0}`);
+    console.log(`  ${pc9.dim("ID:")} ${result.id}`);
+    console.log(`  ${pc9.dim("Active:")} ${result.active}`);
+    console.log(`  ${pc9.dim("Actions:")} ${result.actions?.length || 0}`);
     console.log();
   } catch (error2) {
     spinner.stop("Failed to update relay endpoint");
@@ -6189,9 +5669,9 @@ async function relayActivateCommand(id, options) {
       return;
     }
     spinner.stop("Relay endpoint activated");
-    console.log(`  ${pc10.dim("ID:")} ${result.id}`);
-    console.log(`  ${pc10.dim("Active:")} ${result.active}`);
-    console.log(`  ${pc10.dim("Actions:")} ${result.actions?.length || 0}`);
+    console.log(`  ${pc9.dim("ID:")} ${result.id}`);
+    console.log(`  ${pc9.dim("Active:")} ${result.active}`);
+    console.log(`  ${pc9.dim("Actions:")} ${result.actions?.length || 0}`);
     console.log();
   } catch (error2) {
     spinner.stop("Failed to activate relay endpoint");
@@ -6236,11 +5716,11 @@ async function relayEventsCommand(options) {
         { key: "platform", label: "Platform" },
         { key: "eventType", label: "Event Type" },
         { key: "timestamp", label: "Timestamp" },
-        { key: "id", label: "ID", color: pc10.dim }
+        { key: "id", label: "ID", color: pc9.dim }
       ],
       events.map((e) => ({
         platform: e.platform,
-        eventType: e.eventType || pc10.dim("unknown"),
+        eventType: e.eventType || pc9.dim("unknown"),
         timestamp: e.timestamp || e.createdAt,
         id: e.id.slice(0, 8)
       }))
@@ -6263,11 +5743,11 @@ async function relayEventGetCommand(id) {
     }
     spinner.stop("Relay event loaded");
     console.log();
-    console.log(`  ${pc10.dim("ID:")}        ${result.id}`);
-    console.log(`  ${pc10.dim("Platform:")}  ${result.platform}`);
-    console.log(`  ${pc10.dim("Event:")}     ${result.eventType}`);
-    console.log(`  ${pc10.dim("Timestamp:")} ${result.timestamp || result.createdAt}`);
-    console.log(`  ${pc10.dim("Payload:")}`);
+    console.log(`  ${pc9.dim("ID:")}        ${result.id}`);
+    console.log(`  ${pc9.dim("Platform:")}  ${result.platform}`);
+    console.log(`  ${pc9.dim("Event:")}     ${result.eventType}`);
+    console.log(`  ${pc9.dim("Timestamp:")} ${result.timestamp || result.createdAt}`);
+    console.log(`  ${pc9.dim("Payload:")}`);
     console.log(JSON.stringify(result.payload, null, 2));
     console.log();
   } catch (error2) {
@@ -6304,11 +5784,11 @@ async function relayDeliveriesCommand(options) {
         { key: "error", label: "Error" }
       ],
       items.map((d) => ({
-        status: d.status === "success" ? pc10.green(d.status) : pc10.red(d.status),
-        code: d.statusCode != null ? String(d.statusCode) : pc10.dim("-"),
+        status: d.status === "success" ? pc9.green(d.status) : pc9.red(d.status),
+        code: d.statusCode != null ? String(d.statusCode) : pc9.dim("-"),
         attempt: String(d.attempt),
-        deliveredAt: d.deliveredAt || pc10.dim("-"),
-        error: d.error ? pc10.red(d.error.slice(0, 50)) : pc10.dim("-")
+        deliveredAt: d.deliveredAt || pc9.dim("-"),
+        error: d.error ? pc9.red(d.error.slice(0, 50)) : pc9.dim("-")
       }))
     );
   } catch (error2) {
@@ -6336,14 +5816,14 @@ async function relayPlatformsCommand() {
     printTable(
       [
         { key: "platform", label: "Platform" },
-        { key: "eventTypeCount", label: "Event types", color: pc10.dim }
+        { key: "eventTypeCount", label: "Event types", color: pc9.dim }
       ],
       platforms.map((p9) => ({ platform: p9.platform, eventTypeCount: String(p9.eventTypeCount) }))
     );
     console.log();
     console.log(
-      pc10.dim(
-        `  Run ${pc10.cyan("one relay event-types <platform>")} to see the full event list for a platform.
+      pc9.dim(
+        `  Run ${pc9.cyan("one relay event-types <platform>")} to see the full event list for a platform.
 `
       )
     );
@@ -6356,7 +5836,7 @@ async function relayEventTypesCommand(platform) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
   const spinner = createSpinner();
-  spinner.start(`Loading event types for ${pc10.cyan(platform)}...`);
+  spinner.start(`Loading event types for ${pc9.cyan(platform)}...`);
   try {
     const eventTypes = await api.listRelayEventTypes(platform);
     if (isAgentMode()) {
@@ -6502,11 +5982,11 @@ function handleId(response, config2, records) {
 }
 
 // src/lib/memory/sync/state.ts
-import fs7 from "fs";
-import path8 from "path";
-var SYNC_DIR = path8.join(".one", "sync");
-var STATE_DIR = path8.join(SYNC_DIR, "state");
-var LEGACY_SINGLE_FILE = path8.join(SYNC_DIR, "sync_state.json");
+import fs5 from "fs";
+import path5 from "path";
+var SYNC_DIR = path5.join(".one", "sync");
+var STATE_DIR = path5.join(SYNC_DIR, "state");
+var LEGACY_SINGLE_FILE = path5.join(SYNC_DIR, "sync_state.json");
 var legacyMigrationDone = false;
 function rowToState(row) {
   return {
@@ -6534,9 +6014,9 @@ function stateToRow(platform, model, state, lastError) {
 async function migrateLegacyOnce() {
   if (legacyMigrationDone) return;
   legacyMigrationDone = true;
-  if (fs7.existsSync(LEGACY_SINGLE_FILE)) {
+  if (fs5.existsSync(LEGACY_SINGLE_FILE)) {
     try {
-      const raw = fs7.readFileSync(LEGACY_SINGLE_FILE, "utf-8");
+      const raw = fs5.readFileSync(LEGACY_SINGLE_FILE, "utf-8");
       const legacy = JSON.parse(raw);
       const backend = await getBackend();
       for (const [platform, models] of Object.entries(legacy)) {
@@ -6546,32 +6026,32 @@ async function migrateLegacyOnce() {
           await backend.setSyncState(stateToRow(platform, model, modelState));
         }
       }
-      fs7.unlinkSync(LEGACY_SINGLE_FILE);
+      fs5.unlinkSync(LEGACY_SINGLE_FILE);
     } catch {
       try {
-        fs7.unlinkSync(LEGACY_SINGLE_FILE);
+        fs5.unlinkSync(LEGACY_SINGLE_FILE);
       } catch {
       }
     }
   }
-  if (fs7.existsSync(STATE_DIR)) {
+  if (fs5.existsSync(STATE_DIR)) {
     try {
       const backend = await getBackend();
-      const platforms = fs7.readdirSync(STATE_DIR);
+      const platforms = fs5.readdirSync(STATE_DIR);
       for (const platform of platforms) {
-        const platformDir = path8.join(STATE_DIR, platform);
+        const platformDir = path5.join(STATE_DIR, platform);
         let entries;
         try {
-          entries = fs7.readdirSync(platformDir);
+          entries = fs5.readdirSync(platformDir);
         } catch {
           continue;
         }
         for (const entry of entries) {
           if (!entry.endsWith(".json")) continue;
           const model = entry.slice(0, -".json".length);
-          const filePath = path8.join(platformDir, entry);
+          const filePath = path5.join(platformDir, entry);
           try {
-            const raw = fs7.readFileSync(filePath, "utf-8");
+            const raw = fs5.readFileSync(filePath, "utf-8");
             const modelState = JSON.parse(raw);
             const existing = await backend.getSyncState(platform, model);
             if (!existing) {
@@ -6581,7 +6061,7 @@ async function migrateLegacyOnce() {
           }
         }
       }
-      fs7.rmSync(STATE_DIR, { recursive: true, force: true });
+      fs5.rmSync(STATE_DIR, { recursive: true, force: true });
     } catch {
     }
   }
@@ -6625,12 +6105,12 @@ async function removeModelState(platform, model) {
 }
 
 // src/lib/memory/sync/lock.ts
-import fs8 from "fs";
-import path9 from "path";
-var LOCK_DIR_REL = path9.join(".one", "sync", "locks");
+import fs6 from "fs";
+import path6 from "path";
+var LOCK_DIR_REL = path6.join(".one", "sync", "locks");
 var STALE_MS = 30 * 60 * 1e3;
 function lockPath(platform, model) {
-  return path9.join(LOCK_DIR_REL, `${platform}_${model}`);
+  return path6.join(LOCK_DIR_REL, `${platform}_${model}`);
 }
 function isProcessAlive(pid) {
   try {
@@ -6647,15 +6127,15 @@ var SyncLockError = class extends Error {
   }
 };
 function acquireSyncLock(platform, model) {
-  fs8.mkdirSync(LOCK_DIR_REL, { recursive: true });
+  fs6.mkdirSync(LOCK_DIR_REL, { recursive: true });
   const dir = lockPath(platform, model);
-  const pidFile = path9.join(dir, "pid");
+  const pidFile = path6.join(dir, "pid");
   try {
-    fs8.mkdirSync(dir);
+    fs6.mkdirSync(dir);
   } catch (err) {
     const stat = (() => {
       try {
-        return fs8.statSync(dir);
+        return fs6.statSync(dir);
       } catch {
         return null;
       }
@@ -6664,7 +6144,7 @@ function acquireSyncLock(platform, model) {
       const age = Date.now() - stat.mtimeMs;
       let ownerPid = null;
       try {
-        const raw = fs8.readFileSync(pidFile, "utf-8");
+        const raw = fs6.readFileSync(pidFile, "utf-8");
         const parsed = parseInt(raw.trim(), 10);
         if (!isNaN(parsed)) ownerPid = parsed;
       } catch {
@@ -6673,8 +6153,8 @@ function acquireSyncLock(platform, model) {
       const veryOld = age > STALE_MS;
       if (ownerDead || veryOld) {
         try {
-          fs8.rmSync(dir, { recursive: true, force: true });
-          fs8.mkdirSync(dir);
+          fs6.rmSync(dir, { recursive: true, force: true });
+          fs6.mkdirSync(dir);
         } catch {
           throw new SyncLockError(
             `Could not take over stale lock at ${dir}. Remove it manually if no sync is running.`
@@ -6691,13 +6171,13 @@ function acquireSyncLock(platform, model) {
     }
   }
   try {
-    fs8.writeFileSync(pidFile, String(process.pid));
+    fs6.writeFileSync(pidFile, String(process.pid));
   } catch {
   }
   return {
     release() {
       try {
-        fs8.rmSync(dir, { recursive: true, force: true });
+        fs6.rmSync(dir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -6706,9 +6186,9 @@ function acquireSyncLock(platform, model) {
 
 // src/lib/memory/sync/hooks.ts
 import { spawn as spawn2 } from "child_process";
-import fs9 from "fs";
-import path10 from "path";
-var EVENTS_DIR = path10.join(".one", "sync", "events");
+import fs7 from "fs";
+import path7 from "path";
+var EVENTS_DIR = path7.join(".one", "sync", "events");
 function classifyRecords(db, model, records, idField, tableExists2) {
   if (!tableExists2 || records.length === 0) {
     return { inserts: records, updates: [] };
@@ -6754,10 +6234,10 @@ async function fireHooks(hookCommand, events) {
 function appendEventLog(events) {
   if (events.length === 0) return;
   const { platform, model } = events[0];
-  fs9.mkdirSync(EVENTS_DIR, { recursive: true });
-  const logPath = path10.join(EVENTS_DIR, `${platform}_${model}.jsonl`);
+  fs7.mkdirSync(EVENTS_DIR, { recursive: true });
+  const logPath = path7.join(EVENTS_DIR, `${platform}_${model}.jsonl`);
   const lines = events.map((e) => JSON.stringify(e)).join("\n") + "\n";
-  fs9.appendFileSync(logPath, lines);
+  fs7.appendFileSync(logPath, lines);
 }
 function runShellHook(command, events) {
   return new Promise((resolve) => {
@@ -6861,8 +6341,8 @@ function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function interpolate(template, record) {
-  return template.replace(/\{?\{(\w+(?:\.\w+)*)\}\}?/g, (_, path16) => {
-    const parts = path16.split(".");
+  return template.replace(/\{?\{(\w+(?:\.\w+)*)\}\}?/g, (_, path13) => {
+    const parts = path13.split(".");
     let value = record;
     for (const part2 of parts) {
       if (typeof value !== "object" || value === null) return "";
@@ -6890,8 +6370,8 @@ function deepMerge(target, source) {
   }
   return result;
 }
-function getByDotPath2(obj, path16) {
-  const parts = path16.split(".");
+function getByDotPath2(obj, path13) {
+  const parts = path13.split(".");
   let current = obj;
   for (const part2 of parts) {
     if (current === null || current === void 0 || typeof current !== "object") return void 0;
@@ -6900,8 +6380,8 @@ function getByDotPath2(obj, path16) {
   return current;
 }
 function stripExcludedFields(obj, paths) {
-  for (const path16 of paths) {
-    stripOnePath(obj, path16.replace(/\[\]/g, ".*").split("."));
+  for (const path13 of paths) {
+    stripOnePath(obj, path13.replace(/\[\]/g, ".*").split("."));
   }
 }
 function stripOnePath(obj, parts) {
@@ -7067,7 +6547,7 @@ async function enrichPhase(api, db, config2, model, idField, connectionKey, plat
     );
     let batchHitRateLimit = false;
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const pending2 = [];
+    const pending = [];
     for (let j = 0; j < results.length; j++) {
       const result = results[j];
       const row = batch[j];
@@ -7086,7 +6566,7 @@ async function enrichPhase(api, db, config2, model, idField, connectionKey, plat
           const fp = merged[config2.invalidateOn] ?? row[config2.invalidateOn];
           merged[ENRICH_FINGERPRINT_COLUMN] = fp == null ? null : String(fp);
         }
-        pending2.push({ merged, id });
+        pending.push({ merged, id });
       } else if (result.status === "fulfilled" && result.value === null) {
         rateLimited++;
         skipped++;
@@ -7095,14 +6575,14 @@ async function enrichPhase(api, db, config2, model, idField, connectionKey, plat
         skipped++;
       }
     }
-    let writes = pending2;
-    if (ctx.transform && pending2.length > 0) {
-      const transformed = await transformRecords(ctx.transform, pending2.map((p9) => p9.merged));
+    let writes = pending;
+    if (ctx.transform && pending.length > 0) {
+      const transformed = await transformRecords(ctx.transform, pending.map((p9) => p9.merged));
       if (transformed) {
         const byId = /* @__PURE__ */ new Map();
         for (const r of transformed) byId.set(r[idField], r);
         writes = [];
-        for (const p9 of pending2) {
+        for (const p9 of pending) {
           const t = byId.get(p9.id);
           if (!t) continue;
           if (!t[tsField]) t[tsField] = now;
@@ -7322,8 +6802,8 @@ function sleep2(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 function stripFields(record, paths) {
-  for (const path16 of paths) {
-    stripOnePath2(record, path16.split("."));
+  for (const path13 of paths) {
+    stripOnePath2(record, path13.split("."));
   }
 }
 function stripOnePath2(obj, parts) {
@@ -8416,19 +7896,19 @@ function inferProfileFromKnowledge(knowledge, modelName, platform) {
 
 // src/lib/memory/sync/schedule.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import fs11 from "fs";
-import os2 from "os";
-import path12 from "path";
+import fs9 from "fs";
+import os from "os";
+import path9 from "path";
 
 // src/lib/memory/sync/schedule-registry.ts
-import fs10 from "fs";
-import path11 from "path";
-var REGISTRY_DIR = () => path11.join(homeDir(), ".one", "sync");
-var REGISTRY_FILE = () => path11.join(REGISTRY_DIR(), "schedules.json");
+import fs8 from "fs";
+import path8 from "path";
+var REGISTRY_DIR = () => path8.join(homeDir(), ".one", "sync");
+var REGISTRY_FILE = () => path8.join(REGISTRY_DIR(), "schedules.json");
 function readRaw() {
   try {
-    if (!fs10.existsSync(REGISTRY_FILE())) return { schedules: [] };
-    const raw = fs10.readFileSync(REGISTRY_FILE(), "utf-8");
+    if (!fs8.existsSync(REGISTRY_FILE())) return { schedules: [] };
+    const raw = fs8.readFileSync(REGISTRY_FILE(), "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || !Array.isArray(parsed.schedules)) return { schedules: [] };
     return parsed;
@@ -8437,13 +7917,13 @@ function readRaw() {
   }
 }
 function writeRaw(file) {
-  fs10.mkdirSync(REGISTRY_DIR(), { recursive: true });
+  fs8.mkdirSync(REGISTRY_DIR(), { recursive: true });
   const tmp = REGISTRY_FILE() + ".tmp";
-  fs10.writeFileSync(tmp, JSON.stringify(file, null, 2));
-  fs10.renameSync(tmp, REGISTRY_FILE());
+  fs8.writeFileSync(tmp, JSON.stringify(file, null, 2));
+  fs8.renameSync(tmp, REGISTRY_FILE());
 }
 function makeScheduleId(platform, cwd) {
-  const slug = path11.basename(cwd).replace(/[^a-zA-Z0-9_-]/g, "-").toLowerCase();
+  const slug = path8.basename(cwd).replace(/[^a-zA-Z0-9_-]/g, "-").toLowerCase();
   return `${platform}-${slug}`;
 }
 function listRegistered() {
@@ -8477,7 +7957,7 @@ function removeRegistered(id) {
 
 // src/lib/memory/sync/schedule.ts
 var MARKER = "# one-sync";
-var LOG_DIR_REL = path12.join(".one", "sync", "logs");
+var LOG_DIR_REL = path9.join(".one", "sync", "logs");
 function durationToCron(every) {
   const match = every.match(/^(\d+)([mhd])$/);
   if (!match) return null;
@@ -8510,13 +7990,13 @@ function cronExprToDuration(expr) {
   return null;
 }
 function isWindows() {
-  return os2.platform() === "win32";
+  return os.platform() === "win32";
 }
 function resolveOneBinary() {
   try {
     const entry = process.argv[1];
-    if (entry && fs11.existsSync(entry)) {
-      return fs11.realpathSync(entry);
+    if (entry && fs9.existsSync(entry)) {
+      return fs9.realpathSync(entry);
     }
   } catch {
   }
@@ -8594,7 +8074,7 @@ function migrateLegacyCronEntries() {
     const modelsMatch = command.match(/--models\s+(\S+)/);
     const models = modelsMatch ? modelsMatch[1].split(",") : void 0;
     const logMatch = command.match(/>>\s+"([^"]+)"/);
-    const logFile = logMatch ? logMatch[1] : path12.resolve(cwd, LOG_DIR_REL, `${platform}.log`);
+    const logFile = logMatch ? logMatch[1] : path9.resolve(cwd, LOG_DIR_REL, `${platform}.log`);
     const id = makeScheduleId(platform, cwd);
     if (registeredIds.has(id)) continue;
     upsertRegistered({
@@ -8628,9 +8108,9 @@ function addSchedule(opts) {
   const cwd = process.cwd();
   const id = makeScheduleId(opts.platform, cwd);
   const replaced = getRegistered(id) !== void 0;
-  const logDir = path12.join(cwd, LOG_DIR_REL);
-  fs11.mkdirSync(logDir, { recursive: true });
-  const logFile = path12.join(logDir, `${opts.platform}.log`);
+  const logDir = path9.join(cwd, LOG_DIR_REL);
+  fs9.mkdirSync(logDir, { recursive: true });
+  const logFile = path9.join(logDir, `${opts.platform}.log`);
   const entry = {
     id,
     platform: opts.platform,
@@ -8684,15 +8164,15 @@ function removeSchedule(idOrPlatform, options) {
 function scheduleStatus() {
   const entries = listSchedules();
   return entries.map((entry) => {
-    const logExists = fs11.existsSync(entry.logFile);
-    const logSize = logExists ? fs11.statSync(entry.logFile).size : 0;
+    const logExists = fs9.existsSync(entry.logFile);
+    const logSize = logExists ? fs9.statSync(entry.logFile).size : 0;
     let logTail = [];
     let lastRunAt = null;
     if (logExists) {
       try {
-        lastRunAt = fs11.statSync(entry.logFile).mtime.toISOString();
+        lastRunAt = fs9.statSync(entry.logFile).mtime.toISOString();
         if (logSize > 0) {
-          const content = fs11.readFileSync(entry.logFile, "utf-8");
+          const content = fs9.readFileSync(entry.logFile, "utf-8");
           logTail = content.trim().split("\n").slice(-10);
         }
       } catch {
@@ -8700,8 +8180,8 @@ function scheduleStatus() {
     }
     let drift = "ok";
     if (!entry.cronInstalled) drift = "missing-cron";
-    else if (!fs11.existsSync(entry.nodeBin)) drift = "stale-node-bin";
-    else if (!fs11.existsSync(entry.cliBin)) drift = "stale-cli-bin";
+    else if (!fs9.existsSync(entry.nodeBin)) drift = "stale-node-bin";
+    else if (!fs9.existsSync(entry.cliBin)) drift = "stale-cli-bin";
     return { entry, logExists, logSize, logTail, lastRunAt, drift };
   });
 }
@@ -8974,11 +8454,11 @@ function isNoise(s) {
   if (/^-?\d+(\.\d+)?([eE][-+]?\d+)?$/.test(s)) return true;
   return false;
 }
-function recordSample(stats, path16, value, jsType, recordIndex, totalSamples) {
-  let s = stats.get(path16);
+function recordSample(stats, path13, value, jsType, recordIndex, totalSamples) {
+  let s = stats.get(path13);
   if (!s) {
     s = {
-      path: path16,
+      path: path13,
       total: totalSamples,
       recordIndices: /* @__PURE__ */ new Set(),
       lenSum: 0,
@@ -8987,7 +8467,7 @@ function recordSample(stats, path16, value, jsType, recordIndex, totalSamples) {
       primaryType: jsType,
       examples: []
     };
-    stats.set(path16, s);
+    stats.set(path13, s);
   }
   s.recordIndices.add(recordIndex);
   s.lenSum += value.length;
@@ -8996,28 +8476,28 @@ function recordSample(stats, path16, value, jsType, recordIndex, totalSamples) {
   if (s.primaryType !== jsType) s.primaryType = "mixed";
   if (s.examples.length < 3 && value.length < 200) s.examples.push(value);
 }
-function walkRecord(record, path16, stats, recordIndex, totalSamples) {
+function walkRecord(record, path13, stats, recordIndex, totalSamples) {
   if (record === null || record === void 0) return;
   if (typeof record === "string") {
     const trimmed = record.trim();
-    if (trimmed) recordSample(stats, path16, trimmed, "string", recordIndex, totalSamples);
+    if (trimmed) recordSample(stats, path13, trimmed, "string", recordIndex, totalSamples);
     return;
   }
   if (typeof record === "number" || typeof record === "boolean") {
     const str = String(record);
     const kind = typeof record === "number" ? "number" : "boolean";
-    if (str) recordSample(stats, path16, str, kind, recordIndex, totalSamples);
+    if (str) recordSample(stats, path13, str, kind, recordIndex, totalSamples);
     return;
   }
   if (Array.isArray(record)) {
-    const childPath = path16 ? `${path16}[]` : "[]";
+    const childPath = path13 ? `${path13}[]` : "[]";
     for (const item of record) walkRecord(item, childPath, stats, recordIndex, totalSamples);
     return;
   }
   if (typeof record === "object") {
     for (const [key, value] of Object.entries(record)) {
       if (key.startsWith("_")) continue;
-      const childPath = path16 ? `${path16}.${key}` : key;
+      const childPath = path13 ? `${path13}.${key}` : key;
       walkRecord(value, childPath, stats, recordIndex, totalSamples);
     }
   }
@@ -9055,7 +8535,7 @@ function suggestSearchablePaths(records, limit = 15) {
 // src/lib/memory/sync/index.ts
 import { spawn as spawn4 } from "child_process";
 import * as p6 from "@clack/prompts";
-import pc11 from "picocolors";
+import pc10 from "picocolors";
 async function syncInstallCommand() {
   if (await isSqliteAvailable()) {
     if (isAgentMode()) {
@@ -9120,15 +8600,15 @@ async function syncDoctorCommand() {
     return;
   }
   for (const c of checks) {
-    const mark = c.ok ? pc11.green("\u2713") : pc11.red("\u2717");
-    console.log(`  ${mark} ${c.name}${c.detail ? pc11.dim(` \u2014 ${c.detail}`) : ""}`);
+    const mark = c.ok ? pc10.green("\u2713") : pc10.red("\u2717");
+    console.log(`  ${mark} ${c.name}${c.detail ? pc10.dim(` \u2014 ${c.detail}`) : ""}`);
   }
   if (!allOk) {
     console.log(`
-${pc11.yellow("Sync is not ready.")} Try: ${pc11.bold("one sync install")}`);
+${pc10.yellow("Sync is not ready.")} Try: ${pc10.bold("one sync install")}`);
   } else {
     console.log(`
-${pc11.green("Sync is ready.")}`);
+${pc10.green("Sync is ready.")}`);
   }
 }
 function getApi() {
@@ -9171,11 +8651,11 @@ async function syncProfilesCommand(platform) {
     if (p9.enrich) extras.push("enrich");
     if (p9.identityKey || p9.identityKeys) extras.push("identity");
     if (p9.dateFilter) extras.push("incremental");
-    const tags = extras.length > 0 ? ` ${pc11.dim(`[${extras.join(", ")}]`)}` : "";
-    console.log(`  ${pc11.bold(`${p9.platform}/${p9.model}`.padEnd(35))} ${p9.description}${tags}`);
+    const tags = extras.length > 0 ? ` ${pc10.dim(`[${extras.join(", ")}]`)}` : "";
+    console.log(`  ${pc10.bold(`${p9.platform}/${p9.model}`.padEnd(35))} ${p9.description}${tags}`);
   }
   console.log(`
-${profiles.length} built-in profile(s). Run ${pc11.bold("one sync init <platform> <model>")} to use one.`);
+${profiles.length} built-in profile(s). Run ${pc10.bold("one sync init <platform> <model>")} to use one.`);
 }
 async function syncModelsCommand(platform) {
   const api = getApi();
@@ -9193,7 +8673,7 @@ async function syncModelsCommand(platform) {
       return;
     }
     const lines = models.map(
-      (m) => `  ${pc11.bold(m.name.padEnd(30))} ${pc11.dim(m.listAction.method)} ${pc11.dim(m.listAction.path)}`
+      (m) => `  ${pc10.bold(m.name.padEnd(30))} ${pc10.dim(m.listAction.method)} ${pc10.dim(m.listAction.path)}`
     );
     note(lines.join("\n"), `${platform} \u2014 ${models.length} models`);
   } catch (err) {
@@ -9297,15 +8777,15 @@ async function syncInitCommand(platform, model, options) {
         note(JSON.stringify(template, null, 2), "Sync profile template");
         if (inferred && inferred.reasoning.length > 0) {
           console.log(`
-${pc11.bold("Inferred from knowledge:")}`);
-          for (const r of inferred.reasoning) console.log(`  ${pc11.dim("\u2022")} ${r}`);
+${pc10.bold("Inferred from knowledge:")}`);
+          for (const r of inferred.reasoning) console.log(`  ${pc10.dim("\u2022")} ${r}`);
         }
         if (testReport) {
           console.log(`
-${pc11.bold("Test results:")}`);
+${pc10.bold("Test results:")}`);
           for (const c of testReport.checks) {
-            const mark = c.ok ? pc11.green("\u2713") : pc11.red("\u2717");
-            console.log(`  ${mark} ${c.name}${c.detail ? pc11.dim(` \u2014 ${c.detail}`) : ""}`);
+            const mark = c.ok ? pc10.green("\u2713") : pc10.red("\u2717");
+            console.log(`  ${mark} ${c.name}${c.detail ? pc10.dim(` \u2014 ${c.detail}`) : ""}`);
           }
         }
         console.log(`
@@ -9388,17 +8868,17 @@ async function syncTestCommand(platformModel, options = {}) {
     return;
   }
   for (const c of report2.checks) {
-    const mark = c.ok ? pc11.green("\u2713") : pc11.red("\u2717");
-    console.log(`  ${mark} ${c.name}${c.detail ? pc11.dim(` \u2014 ${c.detail}`) : ""}`);
+    const mark = c.ok ? pc10.green("\u2713") : pc10.red("\u2717");
+    console.log(`  ${mark} ${c.name}${c.detail ? pc10.dim(` \u2014 ${c.detail}`) : ""}`);
   }
   if (report2.detectedColumns && report2.detectedColumns.length > 0) {
     console.log(`
-  ${pc11.bold("Detected columns:")}`);
+  ${pc10.bold("Detected columns:")}`);
     for (const col of report2.detectedColumns.slice(0, 20)) {
-      console.log(`    ${col.name.padEnd(30)} ${pc11.dim(col.type)}`);
+      console.log(`    ${col.name.padEnd(30)} ${pc10.dim(col.type)}`);
     }
     if (report2.detectedColumns.length > 20) {
-      console.log(pc11.dim(`    ... and ${report2.detectedColumns.length - 20} more`));
+      console.log(pc10.dim(`    ... and ${report2.detectedColumns.length - 20} more`));
     }
   }
   if (report2.identityKeysPreview) {
@@ -9406,45 +8886,45 @@ async function syncTestCommand(platformModel, options = {}) {
     const total = perRecord.reduce((a, b) => a + b, 0);
     const min = perRecord.length ? Math.min(...perRecord) : 0;
     const max = perRecord.length ? Math.max(...perRecord) : 0;
-    const mark = total === 0 ? pc11.yellow("~") : pc11.green("\u2713");
+    const mark = total === 0 ? pc10.yellow("~") : pc10.green("\u2713");
     console.log(`
-  ${pc11.bold("Merge + identity keys")} ${pc11.dim(`(cross-platform \u2014 #128)`)}`);
+  ${pc10.bold("Merge + identity keys")} ${pc10.dim(`(cross-platform \u2014 #128)`)}`);
     console.log(`    ${mark} ${perRecord.length} sample${perRecord.length === 1 ? "" : "s"}, ${min}\u2013${max} key${max === 1 ? "" : "s"} per record`);
     if (sampleKeys.length > 0) {
-      console.log(`    ${pc11.dim("e.g.")} ${sampleKeys.slice(0, 8).map((k) => pc11.cyan(k)).join(", ")}`);
+      console.log(`    ${pc10.dim("e.g.")} ${sampleKeys.slice(0, 8).map((k) => pc10.cyan(k)).join(", ")}`);
     } else if (resolvesAfterEnrich) {
-      console.log(`    ${pc11.dim("note:")} 0 on these list-shape samples \u2014 this profile enriches, and its identityKeys paths resolve in the enrich phase.`);
+      console.log(`    ${pc10.dim("note:")} 0 on these list-shape samples \u2014 this profile enriches, and its identityKeys paths resolve in the enrich phase.`);
     } else {
-      console.log(`    ${pc11.yellow("note:")} no identity keys resolved on these samples \u2014 check the identityKey/identityKeys paths.`);
+      console.log(`    ${pc10.yellow("note:")} no identity keys resolved on these samples \u2014 check the identityKey/identityKeys paths.`);
     }
     if (entityFanOut) {
-      console.log(`    ${pc11.yellow("warn:")} identityKey resolved to MULTIPLE values on ${entityFanOut.count} of ${perRecord.length} samples \u2014 those records get NO merge key.`);
-      console.log(`          ${pc11.dim("saw:")} ${entityFanOut.sampleValues.map((v) => pc11.cyan(v)).join(", ")}`);
-      console.log(`          ${pc11.dim('A singular identityKey means "this record IS this entity", so a fan-out has no safe answer.')}`);
-      console.log(`          ${pc11.dim("Point it at a single-valued path, or move it to identityKeys[] for participant associations.")}`);
+      console.log(`    ${pc10.yellow("warn:")} identityKey resolved to MULTIPLE values on ${entityFanOut.count} of ${perRecord.length} samples \u2014 those records get NO merge key.`);
+      console.log(`          ${pc10.dim("saw:")} ${entityFanOut.sampleValues.map((v) => pc10.cyan(v)).join(", ")}`);
+      console.log(`          ${pc10.dim('A singular identityKey means "this record IS this entity", so a fan-out has no safe answer.')}`);
+      console.log(`          ${pc10.dim("Point it at a single-valued path, or move it to identityKeys[] for participant associations.")}`);
     }
   }
   if (searchablePreview) {
     console.log(`
-  ${pc11.bold("Searchable preview")} ${pc11.dim(`(${searchablePreview.mode}, ${searchablePreview.sampledRecords} sample${searchablePreview.sampledRecords === 1 ? "" : "s"})`)}`);
-    console.log(`    ${pc11.dim("length:")}  ${searchablePreview.length} chars (first sample)`);
-    console.log(`    ${pc11.dim("text:")}    ${searchablePreview.text.slice(0, 300)}${searchablePreview.length > 300 ? pc11.dim(" \u2026") : ""}`);
+  ${pc10.bold("Searchable preview")} ${pc10.dim(`(${searchablePreview.mode}, ${searchablePreview.sampledRecords} sample${searchablePreview.sampledRecords === 1 ? "" : "s"})`)}`);
+    console.log(`    ${pc10.dim("length:")}  ${searchablePreview.length} chars (first sample)`);
+    console.log(`    ${pc10.dim("text:")}    ${searchablePreview.text.slice(0, 300)}${searchablePreview.length > 300 ? pc10.dim(" \u2026") : ""}`);
     if (searchablePreview.paths) {
-      console.log(`    ${pc11.dim("paths:")}  ${pc11.dim('(hit rate across all samples \u2014 differentiates "wrong path" from "field sometimes missing")')}`);
+      console.log(`    ${pc10.dim("paths:")}  ${pc10.dim('(hit rate across all samples \u2014 differentiates "wrong path" from "field sometimes missing")')}`);
       for (const p9 of searchablePreview.paths) {
         const rate = `${p9.hits}/${p9.total}`;
-        const mark = p9.hits === p9.total ? pc11.green("\u2713") : p9.hits === 0 ? pc11.red("\u2717") : pc11.yellow("~");
-        const trailer = p9.sample ? pc11.dim(` \u2192 "${p9.sample}"`) : p9.hits === 0 ? pc11.dim(" (no sample matched \u2014 typo, or field never populated in this page)") : "";
+        const mark = p9.hits === p9.total ? pc10.green("\u2713") : p9.hits === 0 ? pc10.red("\u2717") : pc10.yellow("~");
+        const trailer = p9.sample ? pc10.dim(` \u2192 "${p9.sample}"`) : p9.hits === 0 ? pc10.dim(" (no sample matched \u2014 typo, or field never populated in this page)") : "";
         console.log(`      ${mark} ${rate.padStart(5)} ${p9.path}${trailer}`);
       }
     } else {
-      console.log(`    ${pc11.yellow("note:")} no memory.searchable declared \u2014 using the default walker (walks every field, often noisy).`);
-      console.log(`    ${pc11.dim("tip:")}  run \`one sync suggest-searchable ${platform}/${model}\` for an auto-ranked starter list, or pick paths by hand and add them to profile.memory.searchable.`);
+      console.log(`    ${pc10.yellow("note:")} no memory.searchable declared \u2014 using the default walker (walks every field, often noisy).`);
+      console.log(`    ${pc10.dim("tip:")}  run \`one sync suggest-searchable ${platform}/${model}\` for an auto-ranked starter list, or pick paths by hand and add them to profile.memory.searchable.`);
     }
   }
   console.log(
     `
-${report2.ok ? pc11.green("Profile looks good.") : pc11.red("Profile has issues.")} ` + (report2.ok ? `Run: ${pc11.bold(`one sync run ${platform} --models ${model}`)}` : "Fix the issues above and test again.")
+${report2.ok ? pc10.green("Profile looks good.") : pc10.red("Profile has issues.")} ` + (report2.ok ? `Run: ${pc10.bold(`one sync run ${platform} --models ${model}`)}` : "Fix the issues above and test again.")
   );
 }
 function buildSearchablePreview(profile, samples) {
@@ -9452,7 +8932,7 @@ function buildSearchablePreview(profile, samples) {
   const first = samples[0];
   const paths = getSearchablePaths(profile);
   if (paths) {
-    const perPathAgg = paths.map((path16) => ({ path: path16, hits: 0, total: samples.length, sample: "" }));
+    const perPathAgg = paths.map((path13) => ({ path: path13, hits: 0, total: samples.length, sample: "" }));
     for (const record of samples) {
       const { paths: perPath } = extractSearchableFromPaths(record, paths);
       perPath.forEach((p9, i) => {
@@ -9485,8 +8965,8 @@ async function syncRunCommand(platform, options) {
   if (profileDrift.length > 0 && !isAgentMode()) {
     for (const d of profileDrift) {
       console.log(
-        `  ${pc11.yellow("!")} ${platform}/${d.model} is missing ${d.missing.map((f) => pc11.bold(f)).join(", ")} from the current built-in profile.
-    Run ${pc11.bold(`one sync init ${platform} ${d.model}`)} to pick ${d.missing.length > 1 ? "them" : "it"} up.`
+        `  ${pc10.yellow("!")} ${platform}/${d.model} is missing ${d.missing.map((f) => pc10.bold(f)).join(", ")} from the current built-in profile.
+    Run ${pc10.bold(`one sync init ${platform} ${d.model}`)} to pick ${d.missing.length > 1 ? "them" : "it"} up.`
       );
     }
   }
@@ -9529,21 +9009,21 @@ async function syncRunCommand(platform, options) {
     return;
   }
   for (const r of results) {
-    const status2 = r.status === "complete" ? pc11.green("complete") : r.status === "dry-run" ? pc11.yellow("dry-run") : pc11.red("failed");
-    console.log(`  ${pc11.bold(r.model)} \u2014 ${r.recordsSynced} records, ${r.pagesProcessed} pages, ${r.duration} [${status2}]`);
+    const status2 = r.status === "complete" ? pc10.green("complete") : r.status === "dry-run" ? pc10.yellow("dry-run") : pc10.red("failed");
+    console.log(`  ${pc10.bold(r.model)} \u2014 ${r.recordsSynced} records, ${r.pagesProcessed} pages, ${r.duration} [${status2}]`);
     if (r.reconcileSkipped) {
-      console.log(`    ${pc11.yellow("--full-refresh reconcile skipped \u2014 pagination truncated (e.g. --max-pages). Re-run without the cap to prune stale rows.")}`);
+      console.log(`    ${pc10.yellow("--full-refresh reconcile skipped \u2014 pagination truncated (e.g. --max-pages). Re-run without the cap to prune stale rows.")}`);
     }
     const sc = r.statusCounts;
     if (sc && (sc.archived > 0 || sc.active > 0)) {
-      const archivedColor = sc.archived > sc.active ? pc11.red : pc11.dim;
-      console.log(`    memory: ${pc11.green(String(sc.active))} active, ${archivedColor(String(sc.archived))} archived`);
+      const archivedColor = sc.archived > sc.active ? pc10.red : pc10.dim;
+      console.log(`    memory: ${pc10.green(String(sc.active))} active, ${archivedColor(String(sc.archived))} archived`);
     }
     if (r.error) {
       const errParts = [r.error.message];
       if (r.error.httpStatus) errParts.push(`HTTP ${r.error.httpStatus}`);
       if (r.error.retryAfter) errParts.push(`retry after ${r.error.retryAfter}s`);
-      console.log(`    ${pc11.red(errParts.join(" \u2014 "))}`);
+      console.log(`    ${pc10.red(errParts.join(" \u2014 "))}`);
     }
   }
 }
@@ -9569,8 +9049,8 @@ async function syncQueryCommand(platformModel, options) {
       json(result);
       return;
     }
-    console.log(pc11.dim(`Query: ${result.query}`));
-    console.log(pc11.dim(`Source: local | Last sync: ${result.lastSync ?? "never"} | Age: ${result.syncAge ?? "n/a"}`));
+    console.log(pc10.dim(`Query: ${result.query}`));
+    console.log(pc10.dim(`Source: local | Last sync: ${result.lastSync ?? "never"} | Age: ${result.syncAge ?? "n/a"}`));
     console.log(JSON.stringify(result.results, null, 2));
     console.log(`
 ${result.total} results`);
@@ -9592,7 +9072,7 @@ async function syncSearchCommand(query, options) {
       return;
     }
     for (const r of result.results) {
-      console.log(`  ${pc11.bold(`${r.platform}/${r.model}`)} ${pc11.dim(`(rank: ${r.rank.toFixed(2)})`)}`);
+      console.log(`  ${pc10.bold(`${r.platform}/${r.model}`)} ${pc10.dim(`(rank: ${r.rank.toFixed(2)})`)}`);
       console.log(`    ${JSON.stringify(r.record)}`);
     }
     console.log(`
@@ -9602,7 +9082,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-AKQSXRV2.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-NDMMFQP6.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -9696,7 +9176,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-3LSEIPRF.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-KWEEEQ3E.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -9705,7 +9185,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p6.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-3LSEIPRF.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-KWEEEQ3E.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -9743,25 +9223,25 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
     return;
   }
   console.log(`
-  ${pc11.bold("memory.searchable \u2014 ranked suggestions")} ${pc11.dim(`(${samples.length} samples)`)}`);
+  ${pc10.bold("memory.searchable \u2014 ranked suggestions")} ${pc10.dim(`(${samples.length} samples)`)}`);
   if (suggestions.length === 0) {
-    console.log(`    ${pc11.yellow("no high-signal leaves found")} \u2014 page may be all UUIDs / timestamps / enum markers. Inspect the sample with \`sync test\` and pick paths manually.`);
+    console.log(`    ${pc10.yellow("no high-signal leaves found")} \u2014 page may be all UUIDs / timestamps / enum markers. Inspect the sample with \`sync test\` and pick paths manually.`);
     return;
   }
   for (const s of suggestions) {
     const hitPct = Math.round(s.hitRate * 100);
     const noisePct = Math.round(s.noiseFraction * 100);
-    const noiseBadge = noisePct > 0 ? pc11.dim(` noise=${noisePct}%`) : "";
+    const noiseBadge = noisePct > 0 ? pc10.dim(` noise=${noisePct}%`) : "";
     console.log(
-      `    ${pc11.green(String(s.score).padStart(5))}  ${pc11.cyan(s.path.padEnd(52))}` + pc11.dim(` ${hitPct}% hit`) + pc11.dim(` avg=${s.avgLength}ch`) + noiseBadge + (s.sampleValue ? pc11.dim(`
+      `    ${pc10.green(String(s.score).padStart(5))}  ${pc10.cyan(s.path.padEnd(52))}` + pc10.dim(` ${hitPct}% hit`) + pc10.dim(` avg=${s.avgLength}ch`) + noiseBadge + (s.sampleValue ? pc10.dim(`
           \u2192 "${s.sampleValue.slice(0, 140)}"`) : "")
     );
   }
   console.log(`
-  ${pc11.bold("Paste-ready:")}`);
-  console.log("    " + pc11.cyan(`one sync init ${platform} ${model} --config '${JSON.stringify(configPatch)}'`));
+  ${pc10.bold("Paste-ready:")}`);
+  console.log("    " + pc10.cyan(`one sync init ${platform} ${model} --config '${JSON.stringify(configPatch)}'`));
   console.log(`
-  ${pc11.dim("then preview: ")}${pc11.cyan(`one sync test ${platform}/${model} --show-searchable`)}`);
+  ${pc10.dim("then preview: ")}${pc10.cyan(`one sync test ${platform}/${model} --show-searchable`)}`);
 }
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
@@ -9795,10 +9275,10 @@ async function syncListCommand(platform) {
     return;
   }
   for (const s of syncs) {
-    const status2 = s.status === "idle" ? pc11.green("idle") : s.status === "syncing" ? pc11.yellow(`syncing \u2014 page ${s.pagesProcessed}`) : pc11.red("failed");
-    const legacy = s.legacyDbSize && s.legacyDbSize !== "0 B" ? pc11.yellow(`  legacy .db ${s.legacyDbSize}`) : "";
+    const status2 = s.status === "idle" ? pc10.green("idle") : s.status === "syncing" ? pc10.yellow(`syncing \u2014 page ${s.pagesProcessed}`) : pc10.red("failed");
+    const legacy = s.legacyDbSize && s.legacyDbSize !== "0 B" ? pc10.yellow(`  legacy .db ${s.legacyDbSize}`) : "";
     console.log(
-      `  ${pc11.bold(`${s.platform}/${s.model}`.padEnd(35))} ${String(s.totalRecords).padStart(8)} records  ${status2}  ${pc11.dim(s.lastSync ? `last: ${s.lastSync}` : "never synced")}` + legacy
+      `  ${pc10.bold(`${s.platform}/${s.model}`.padEnd(35))} ${String(s.totalRecords).padStart(8)} records  ${status2}  ${pc10.dim(s.lastSync ? `last: ${s.lastSync}` : "never synced")}` + legacy
     );
   }
 }
@@ -9877,8 +9357,8 @@ async function syncScheduleAddCommand(platform, options) {
     }
     const verb = replaced ? "Replaced existing schedule" : "Scheduled sync";
     outro(
-      `${verb} ${pc11.bold(entry.id)} \u2014 every ${pc11.bold(entry.every)} (cron: ${pc11.dim(entry.cronExpr)})
-Logs: ${pc11.dim(entry.logFile)}`
+      `${verb} ${pc10.bold(entry.id)} \u2014 every ${pc10.bold(entry.every)} (cron: ${pc10.dim(entry.cronExpr)})
+Logs: ${pc10.dim(entry.logFile)}`
     );
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
@@ -9897,14 +9377,14 @@ async function syncScheduleListCommand() {
     }
     for (const e of entries) {
       const modelsStr = e.models ? ` [${e.models.join(",")}]` : "";
-      const installed = e.cronInstalled ? pc11.green("\u25CF") : pc11.red("\u2717");
+      const installed = e.cronInstalled ? pc10.green("\u25CF") : pc10.red("\u2717");
       console.log(
-        `  ${installed} ${pc11.bold(e.id.padEnd(32))} every ${pc11.bold(e.every.padEnd(5))} ${pc11.dim(e.cronExpr.padEnd(13))}${modelsStr}`
+        `  ${installed} ${pc10.bold(e.id.padEnd(32))} every ${pc10.bold(e.every.padEnd(5))} ${pc10.dim(e.cronExpr.padEnd(13))}${modelsStr}`
       );
-      console.log(`      ${pc11.dim("cwd:")} ${e.cwd}`);
+      console.log(`      ${pc10.dim("cwd:")} ${e.cwd}`);
     }
     console.log(`
-${pc11.dim("\u25CF = cron line installed  \u2717 = registry drift, run `sync schedule repair <id>`")}`);
+${pc10.dim("\u25CF = cron line installed  \u2717 = registry drift, run `sync schedule repair <id>`")}`);
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
   }
@@ -9928,7 +9408,7 @@ async function syncScheduleRemoveCommand(idOrPlatform, options) {
       return;
     }
     for (const r of result.removed) {
-      console.log(`  ${pc11.green("\u2713")} removed ${pc11.bold(r.id)} ${pc11.dim(`(${r.cwd})`)}`);
+      console.log(`  ${pc10.green("\u2713")} removed ${pc10.bold(r.id)} ${pc10.dim(`(${r.cwd})`)}`);
     }
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
@@ -9946,21 +9426,21 @@ async function syncScheduleStatusCommand() {
       return;
     }
     for (const s of statuses) {
-      const driftMarker = s.drift === "ok" ? pc11.green("\u25CF") : s.drift === "missing-cron" ? pc11.red("\u2717 missing cron line") : pc11.yellow(`\u26A0 ${s.drift}`);
-      console.log(`  ${driftMarker} ${pc11.bold(s.entry.id)} \u2014 every ${s.entry.every} (${pc11.dim(s.entry.cronExpr)})`);
-      console.log(`      ${pc11.dim("cwd:")} ${s.entry.cwd}`);
-      console.log(`      ${pc11.dim("last run:")} ${s.lastRunAt ?? pc11.yellow("never")}`);
-      console.log(`      ${pc11.dim("log:")} ${s.entry.logFile} ${s.logExists ? pc11.dim(`(${s.logSize} bytes)`) : pc11.yellow("(empty)")}`);
+      const driftMarker = s.drift === "ok" ? pc10.green("\u25CF") : s.drift === "missing-cron" ? pc10.red("\u2717 missing cron line") : pc10.yellow(`\u26A0 ${s.drift}`);
+      console.log(`  ${driftMarker} ${pc10.bold(s.entry.id)} \u2014 every ${s.entry.every} (${pc10.dim(s.entry.cronExpr)})`);
+      console.log(`      ${pc10.dim("cwd:")} ${s.entry.cwd}`);
+      console.log(`      ${pc10.dim("last run:")} ${s.lastRunAt ?? pc10.yellow("never")}`);
+      console.log(`      ${pc10.dim("log:")} ${s.entry.logFile} ${s.logExists ? pc10.dim(`(${s.logSize} bytes)`) : pc10.yellow("(empty)")}`);
       if (s.logTail.length > 0) {
-        console.log(pc11.dim("      last lines:"));
+        console.log(pc10.dim("      last lines:"));
         for (const line of s.logTail.slice(-3)) {
-          console.log(pc11.dim(`        ${line}`));
+          console.log(pc10.dim(`        ${line}`));
         }
       }
     }
     if (statuses.some((s) => s.drift !== "ok")) {
       console.log(`
-${pc11.yellow("Drift detected.")} Run ${pc11.bold("one sync schedule repair <id>")} to heal.`);
+${pc10.yellow("Drift detected.")} Run ${pc10.bold("one sync schedule repair <id>")} to heal.`);
     }
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
@@ -9973,7 +9453,7 @@ async function syncScheduleRepairCommand(id) {
       json({ status: "repaired", ...healed });
       return;
     }
-    outro(`Repaired ${pc11.bold(healed.id)}: re-installed cron line with current node/cli paths.`);
+    outro(`Repaired ${pc10.bold(healed.id)}: re-installed cron line with current node/cli paths.`);
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
   }
@@ -10042,7 +9522,7 @@ function registerSyncSubcommands(sync) {
     await syncSqlCommand(platformModel, sql);
   });
   sync.command("schema <platform/model>").description("Inspect the JSON structure of synced records (field paths, types, examples) \u2014 useful before writing `sync sql` queries").action(async (platformModel) => {
-    const { syncSchemaCommand } = await import("./schema-FICQRMZ7.js");
+    const { syncSchemaCommand } = await import("./schema-YJ7JTGFL.js");
     await syncSchemaCommand(platformModel);
   });
   sync.command("delete <platform/model>").description('Delete records from local sync data (e.g. one sync delete notion/pages --id "abc-123")').option("--id <value>", "Delete record by ID").option("--where <conditions>", 'Delete records matching conditions (e.g. "status=archived")').option("--where-sql <predicate>", `Delete using a raw SQL WHERE clause (e.g. "json_extract(data, '$.type') = 'promotion'")`).option("--yes", "Skip confirmation prompt").action(async (platformModel, options) => {
@@ -10409,16 +9889,16 @@ function projectEmbeddingApiKey(cfg) {
 }
 function redactSecrets(cfg) {
   const copy = JSON.parse(JSON.stringify(cfg));
-  for (const path16 of SECRET_PATHS) {
-    const val = getPath(copy, path16);
+  for (const path13 of SECRET_PATHS) {
+    const val = getPath(copy, path13);
     if (typeof val === "string" && val.length > 0) {
-      setPath(copy, path16, `${val.slice(0, 6)}\u2026(redacted, use --show-secrets)`);
+      setPath(copy, path13, `${val.slice(0, 6)}\u2026(redacted, use --show-secrets)`);
     }
   }
   return copy;
 }
-function getPath(obj, path16) {
-  const parts = path16.split(".");
+function getPath(obj, path13) {
+  const parts = path13.split(".");
   let cur = obj;
   for (const part2 of parts) {
     if (cur == null || typeof cur !== "object") return void 0;
@@ -10426,8 +9906,8 @@ function getPath(obj, path16) {
   }
   return cur;
 }
-function setPath(obj, path16, value) {
-  const parts = path16.split(".");
+function setPath(obj, path13, value) {
+  const parts = path13.split(".");
   let cur = obj;
   for (let i = 0; i < parts.length - 1; i++) {
     const part2 = parts[i];
@@ -10437,8 +9917,8 @@ function setPath(obj, path16, value) {
   cur[parts[parts.length - 1]] = value;
   return obj;
 }
-function unsetPath(obj, path16) {
-  const parts = path16.split(".");
+function unsetPath(obj, path13) {
+  const parts = path13.split(".");
   let cur = obj;
   for (let i = 0; i < parts.length - 1; i++) {
     const part2 = parts[i];
@@ -10464,7 +9944,7 @@ function parseValue(raw) {
 }
 
 // src/commands/mem/records.ts
-import pc12 from "picocolors";
+import pc11 from "picocolors";
 async function memAddCommand(type, dataRaw, flags) {
   requireMemoryInit();
   const data = parseJsonArg(dataRaw, "data");
@@ -10663,7 +10143,7 @@ function summarizeRecord(r) {
     const v = d[field];
     if (typeof v === "string" && v.trim()) return v.trim().slice(0, 80);
   }
-  return pc12.dim("(untitled)");
+  return pc11.dim("(untitled)");
 }
 function relativeTime(iso) {
   if (!iso) return "";
@@ -10726,7 +10206,7 @@ async function memFindByKeyCommand(key, secondKey, flags) {
     });
     return;
   }
-  const label = matchedKeys.map((k) => pc12.cyan(k)).join(pc12.dim(" + "));
+  const label = matchedKeys.map((k) => pc11.cyan(k)).join(pc11.dim(" + "));
   if (records.length === 0) {
     console.log(`
   No records linked to ${label}.
@@ -10734,27 +10214,27 @@ async function memFindByKeyCommand(key, secondKey, flags) {
     return;
   }
   console.log();
-  console.log(`  ${label} ${pc12.dim("\u2014")} ${records.length}${truncated ? "+" : ""} record${records.length === 1 ? "" : "s"} across ${byType.size} type${byType.size === 1 ? "" : "s"}`);
+  console.log(`  ${label} ${pc11.dim("\u2014")} ${records.length}${truncated ? "+" : ""} record${records.length === 1 ? "" : "s"} across ${byType.size} type${byType.size === 1 ? "" : "s"}`);
   console.log();
   const typeWidth = Math.min(30, Math.max(...[...byType.keys()].map((t) => t.length)));
   for (const [type, list] of byType) {
-    console.log(`  ${pc12.bold(type.padEnd(typeWidth))}  ${pc12.dim(`${list.length} record${list.length === 1 ? "" : "s"}`)}`);
+    console.log(`  ${pc11.bold(type.padEnd(typeWidth))}  ${pc11.dim(`${list.length} record${list.length === 1 ? "" : "s"}`)}`);
     for (const r of list.slice(0, perType)) {
-      console.log(`    ${pc12.dim("\xB7")} ${summarizeRecord(r)}  ${pc12.dim(relativeTime(r.updated_at))}  ${pc12.dim(r.id)}`);
+      console.log(`    ${pc11.dim("\xB7")} ${summarizeRecord(r)}  ${pc11.dim(relativeTime(r.updated_at))}  ${pc11.dim(r.id)}`);
     }
     if (list.length > perType) {
-      console.log(`    ${pc12.dim(`\u2026 and ${list.length - perType} more (raise --limit)`)}`);
+      console.log(`    ${pc11.dim(`\u2026 and ${list.length - perType} more (raise --limit)`)}`);
     }
   }
   if (truncated) {
     console.log();
-    console.log(`  ${pc12.yellow("\u26A0")} Stopped at ${FIND_BY_KEY_FETCH_CAP} matches \u2014 there are more, and types sorting after the last one shown are missing entirely. Re-run with --type <type> to see them.`);
+    console.log(`  ${pc11.yellow("\u26A0")} Stopped at ${FIND_BY_KEY_FETCH_CAP} matches \u2014 there are more, and types sorting after the last one shown are missing entirely. Re-run with --type <type> to see them.`);
   }
   console.log();
 }
 
 // src/commands/mem/doctor.ts
-import pc13 from "picocolors";
+import pc12 from "picocolors";
 async function memDoctorCommand() {
   const checks = [];
   const cfg = getMemoryConfig();
@@ -10861,23 +10341,23 @@ function emit(checks, capInfo) {
     return;
   }
   for (const c of checks) {
-    const mark = c.ok ? pc13.green("\u2713") : pc13.red("\u2717");
-    const detail = c.detail ? pc13.dim(` \u2014 ${c.detail}`) : "";
+    const mark = c.ok ? pc12.green("\u2713") : pc12.red("\u2717");
+    const detail = c.detail ? pc12.dim(` \u2014 ${c.detail}`) : "";
     console.log(`  ${mark} ${c.name}${detail}`);
   }
   if (!allOk) {
-    console.log("\n" + pc13.yellow("Memory is not fully healthy."));
+    console.log("\n" + pc12.yellow("Memory is not fully healthy."));
     process.exitCode = 1;
   } else {
-    console.log("\n" + pc13.green("Memory is healthy."));
+    console.log("\n" + pc12.green("Memory is healthy."));
   }
   const line = semanticSearchUpgradeLine({ vectorSearchAvailable: capInfo.vectorSearchAvailable });
   if (line) console.log(`
-${pc13.dim(line)}`);
+${pc12.dim(line)}`);
 }
 
 // src/commands/mem/export.ts
-import fs12 from "fs";
+import fs10 from "fs";
 import { once } from "events";
 async function writeLine(stream, line) {
   if (!stream.write(line)) {
@@ -10889,7 +10369,7 @@ async function memExportCommand(outfile) {
   const backend = await getBackend();
   const stats = await backend.stats();
   const toFile = !!outfile && outfile !== "-";
-  const stream = toFile ? fs12.createWriteStream(outfile, "utf-8") : process.stdout;
+  const stream = toFile ? fs10.createWriteStream(outfile, "utf-8") : process.stdout;
   const all = await listAllTypes(backend);
   const pageSize = 500;
   let written = 0;
@@ -10920,9 +10400,9 @@ async function memExportCommand(outfile) {
 }
 async function memImportCommand(file) {
   requireMemoryInit();
-  if (!fs12.existsSync(file)) error(`File not found: ${file}`);
+  if (!fs10.existsSync(file)) error(`File not found: ${file}`);
   const backend = await getBackend();
-  const raw = fs12.readFileSync(file, "utf-8");
+  const raw = fs10.readFileSync(file, "utf-8");
   const lines = raw.split("\n").filter((l) => l.trim().length > 0);
   let inserted = 0;
   let updated = 0;
@@ -11168,7 +10648,7 @@ function registerMemoryCommands(program2) {
 }
 
 // src/commands/cache.ts
-import pc14 from "picocolors";
+import pc13 from "picocolors";
 async function cacheClearCommand(actionId) {
   if (actionId) {
     const deleted = clearEntry(actionId);
@@ -11177,9 +10657,9 @@ async function cacheClearCommand(actionId) {
       return;
     }
     if (deleted) {
-      console.log(`Cleared cache for ${pc14.cyan(actionId)}`);
+      console.log(`Cleared cache for ${pc13.cyan(actionId)}`);
     } else {
-      console.log(`No cache entry found for ${pc14.dim(actionId)}`);
+      console.log(`No cache entry found for ${pc13.dim(actionId)}`);
     }
   } else {
     const count = clearAll();
@@ -11216,7 +10696,7 @@ async function cacheListCommand(options) {
     type: e.type,
     key: e.entry.key,
     age: formatAge(getAge(e.entry)),
-    status: isFresh(e.entry) ? pc14.green("fresh") : pc14.yellow("expired")
+    status: isFresh(e.entry) ? pc13.green("fresh") : pc13.yellow("expired")
   }));
   printTable(
     [
@@ -11269,13 +10749,13 @@ async function cacheUpdateAllCommand() {
   if (errors.length > 0) {
     console.log();
     for (const e of errors) {
-      console.log(`  ${pc14.red("\u2717")} ${e.key}: ${pc14.dim(e.error)}`);
+      console.log(`  ${pc13.red("\u2717")} ${e.key}: ${pc13.dim(e.error)}`);
     }
   }
 }
 
 // src/commands/guide.ts
-import pc15 from "picocolors";
+import pc14 from "picocolors";
 
 // src/lib/guide-content.ts
 var GUIDE_OVERVIEW = `# One CLI \u2014 Agent Guide
@@ -11411,7 +10891,7 @@ Request specific sections:
 - Always use the **exact action ID** from a find answer \u2014 don't guess
 - Always read **knowledge** before executing any action
 - Connection keys come from \`one connection list\` \u2014 don't hardcode them
-- \`connection list\` also reports an \`access\` field per connection (\`full\` / \`methods\` / \`actions\`) \u2014 read it before planning so you don't propose an action the access config will reject
+- \`connection list\` also reports an \`access\` field per connection (\`full\` / \`methods\` / \`actions\`, plus a \`level\`: full, read-write, read-only, custom, none) \u2014 what One enforces for this key, narrowed by \`one config\`. Read it before planning so you don't propose an action that will be refused. \`accessSource: "local"\` means One did not report it, so it is unverified
 - Skills stay in lockstep with the CLI version automatically \u2014 every command checks a \`.one-cli-version\` marker in the canonical skill dir and refreshes the files if the CLI has been upgraded. Check manually with \`one config skills status\`; force a resync with \`one config skills sync\`
 - Building an app whose users connect their own tools? \`one skills add connect\` (run inside the app) installs the One Connect skill from the \`@withone/connect\` version the app uses, into \`.agents/skills/one-connect\` and \`.claude/skills/one-connect\`. \`one --agent skills list\` shows what is installed; any \`one\` command in the project refreshes it after an SDK upgrade
 `;
@@ -11427,7 +10907,7 @@ Always follow this sequence. Never execute without reading the action's document
 one --agent connection list
 \`\`\`
 
-Returns platforms, status, connection keys, tags, and an \`access\` field per connection describing what the current access config lets you run there:
+Returns platforms, status, connection keys, tags, and an \`access\` field per connection: what One enforces for this key (the consent page's choices, or the dashboard's), narrowed by \`one config\`. \`access.level\` names it as the consent page does (full, read-write, read-only, custom, none):
 
 | \`access\` | Meaning |
 |----------|---------|
@@ -11435,9 +10915,9 @@ Returns platforms, status, connection keys, tags, and an \`access\` field per co
 | \`{"policy": "methods", "methods": ["GET"]}\` | Only actions with these HTTP methods will execute |
 | \`{"policy": "actions", "actions": [{"actionId", "title", "method"}]}\` | Only these exact actions \u2014 use them directly: \`actions load <actionId>\` reads their docs, no find needed |
 
-Also present when relevant: \`knowledgeOnly: true\` (execution disabled \u2014 read the docs and write code instead), \`unresolvedActionIds\` (allowlisted ids that could not be looked up), and \`accessHint\` (a one-line summary of the restriction).
+\`accessSource\` is \`server\` when One reported it, \`local\` when it could not (then it is unverified). Also present when relevant: \`knowledgeOnly: true\` (execution disabled \u2014 read the docs and write code instead), \`unresolvedActionIds\` (allowlisted ids that could not be looked up), and \`accessHint\` (a one-line summary of the restriction).
 
-Read \`access\` before planning \u2014 it prevents proposing an action the config will reject. Change it with \`one config\`.
+Read \`access\` before planning \u2014 it prevents proposing an action that will be refused. The key's access changes in the dashboard (API keys); this CLI's own limits with \`one config\`.
 
 ### 1b. Delete a Connection
 
@@ -12478,14 +11958,14 @@ async function guideCommand(topic = "all") {
     json({ topic, title, content, availableTopics });
     return;
   }
-  intro(pc15.bgCyan(pc15.black(" One Guide ")));
+  intro(pc14.bgCyan(pc14.black(" One Guide ")));
   console.log();
   console.log(content);
-  console.log(pc15.dim("\u2500".repeat(60)));
+  console.log(pc14.dim("\u2500".repeat(60)));
   console.log(
-    pc15.dim("Available topics: ") + availableTopics.map((t) => pc15.cyan(t.topic)).join(", ")
+    pc14.dim("Available topics: ") + availableTopics.map((t) => pc14.cyan(t.topic)).join(", ")
   );
-  console.log(pc15.dim(`Run ${pc15.cyan("one guide <topic>")} for a specific section.`));
+  console.log(pc14.dim(`Run ${pc14.cyan("one guide <topic>")} for a specific section.`));
 }
 
 // src/lib/platform-meta.ts
@@ -12805,24 +12285,24 @@ function buildWorkflowIdeas(connections) {
 }
 
 // src/commands/logout.ts
-import fs13 from "fs";
+import fs11 from "fs";
 import * as p8 from "@clack/prompts";
-function formatWhoami(config2, apiKey, pc17) {
+function formatWhoami(config2, apiKey, pc16) {
   const whoami = config2.whoami;
   const env = getEnvFromApiKey(apiKey);
-  const envLabel = env === "test" ? pc17.yellow("test") : pc17.green("live");
+  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
   const lines = [];
   if (whoami) {
     const contextParts = [];
     if (whoami.organization) contextParts.push(whoami.organization.name);
     if (whoami.project) contextParts.push(whoami.project.name);
     const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-    lines.push(`${pc17.bold(scopeDisplay)} ${pc17.dim("\xB7")} ${envLabel}`);
-    lines.push(`${whoami.user.name} ${pc17.dim(`(${whoami.user.email})`)}`);
-    if (config2.apiKeyName) lines.push(`${pc17.dim("Key:")} ${config2.apiKeyName}`);
+    lines.push(`${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`);
+    lines.push(`${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`);
+    if (config2.apiKeyName) lines.push(`${pc16.dim("Key:")} ${config2.apiKeyName}`);
   } else {
     const keyLabel = config2.apiKeyName ?? `${apiKey.slice(0, 8)}...`;
-    lines.push(`${pc17.dim("Key:")} ${keyLabel} ${pc17.dim("\xB7")} ${envLabel}`);
+    lines.push(`${pc16.dim("Key:")} ${keyLabel} ${pc16.dim("\xB7")} ${envLabel}`);
   }
   return lines;
 }
@@ -12840,18 +12320,18 @@ async function logoutCommand() {
     const globalPath = getGlobalConfigPath();
     const projectPath = getProjectConfigPath();
     let cleared = false;
-    if (fs13.existsSync(projectPath)) {
-      fs13.unlinkSync(projectPath);
+    if (fs11.existsSync(projectPath)) {
+      fs11.unlinkSync(projectPath);
       cleared = true;
     }
-    if (fs13.existsSync(globalPath)) {
-      fs13.unlinkSync(globalPath);
+    if (fs11.existsSync(globalPath)) {
+      fs11.unlinkSync(globalPath);
       cleared = true;
     }
     json({ status: cleared ? "logged_out" : "not_logged_in", message: cleared ? "Credentials cleared." : "No config found." });
     return;
   }
-  const pc17 = (await import("picocolors")).default;
+  const pc16 = (await import("picocolors")).default;
   const globalConfig = readGlobalConfig();
   const projectConfig = readProjectConfig();
   const hasGlobal = globalConfig?.apiKey != null;
@@ -12860,13 +12340,13 @@ async function logoutCommand() {
   if (hasGlobal && hasProject) {
     const infoLines = ["You are logged in with multiple configs.", ""];
     if (projectConfig) {
-      infoLines.push(`${pc17.cyan("Local config:")}`);
-      infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc17));
+      infoLines.push(`${pc16.cyan("Local config:")}`);
+      infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc16));
       infoLines.push("");
     }
     if (globalConfig) {
-      infoLines.push(`${pc17.magenta("Global config:")}`);
-      infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc17));
+      infoLines.push(`${pc16.magenta("Global config:")}`);
+      infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc16));
     }
     p8.note(infoLines.join("\n"));
     const choice = await p8.select({
@@ -12884,14 +12364,14 @@ async function logoutCommand() {
     targetScope = choice;
   } else if (hasProject) {
     const infoLines = ["You are logged in.", ""];
-    infoLines.push(`${pc17.dim("Stored in")} ${pc17.cyan("local config")}`);
-    infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc17));
+    infoLines.push(`${pc16.dim("Stored in")} ${pc16.cyan("local config")}`);
+    infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc16));
     p8.note(infoLines.join("\n"));
     targetScope = "project";
   } else if (hasGlobal) {
     const infoLines = ["You are logged in.", ""];
-    infoLines.push(`${pc17.dim("Stored in")} ${pc17.magenta("global config")}`);
-    infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc17));
+    infoLines.push(`${pc16.dim("Stored in")} ${pc16.magenta("global config")}`);
+    infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc16));
     p8.note(infoLines.join("\n"));
     targetScope = "global";
   } else {
@@ -12914,11 +12394,11 @@ async function logoutCommand() {
   }
   if (targetScope === "project" || targetScope === "both") {
     const projectPath = getProjectConfigPath();
-    if (fs13.existsSync(projectPath)) fs13.unlinkSync(projectPath);
+    if (fs11.existsSync(projectPath)) fs11.unlinkSync(projectPath);
   }
   if (targetScope === "global" || targetScope === "both") {
     const globalPath = getGlobalConfigPath();
-    if (fs13.existsSync(globalPath)) fs13.unlinkSync(globalPath);
+    if (fs11.existsSync(globalPath)) fs11.unlinkSync(globalPath);
   }
   p8.log.success("Credentials cleared.");
   p8.log.info("Your API key is still active. Manage keys at app.withone.ai/settings");
@@ -12927,9 +12407,9 @@ async function logoutCommand() {
 
 // src/lib/project-skills.ts
 import crypto2 from "crypto";
-import fs14 from "fs";
-import os3 from "os";
-import path13 from "path";
+import fs12 from "fs";
+import os2 from "os";
+import path10 from "path";
 import zlib from "zlib";
 var OPTIONAL_SKILLS = [
   {
@@ -12961,27 +12441,27 @@ function findAgentTarget(id) {
   return SKILL_AGENT_TARGETS.find((a) => a.id === id.trim().toLowerCase());
 }
 function findProjectRoot(start) {
-  let dir = path13.resolve(start);
+  let dir = path10.resolve(start);
   for (; ; ) {
-    if (fs14.existsSync(path13.join(dir, "package.json")) || fs14.existsSync(path13.join(dir, ".git"))) return dir;
-    const parent = path13.dirname(dir);
+    if (fs12.existsSync(path10.join(dir, "package.json")) || fs12.existsSync(path10.join(dir, ".git"))) return dir;
+    const parent = path10.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
 }
 function findInstalledPackage(start, packageName) {
-  let dir = path13.resolve(start);
+  let dir = path10.resolve(start);
   for (; ; ) {
-    const pkgDir = path13.join(dir, "node_modules", ...packageName.split("/"));
-    const manifest = path13.join(pkgDir, "package.json");
-    if (fs14.existsSync(manifest)) {
+    const pkgDir = path10.join(dir, "node_modules", ...packageName.split("/"));
+    const manifest = path10.join(pkgDir, "package.json");
+    if (fs12.existsSync(manifest)) {
       try {
-        const { version: version2 } = JSON.parse(fs14.readFileSync(manifest, "utf-8"));
+        const { version: version2 } = JSON.parse(fs12.readFileSync(manifest, "utf-8"));
         if (version2) return { dir: pkgDir, version: version2 };
       } catch {
       }
     }
-    const parent = path13.dirname(dir);
+    const parent = path10.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -12995,8 +12475,8 @@ var SkillSourceError = class extends Error {
 function projectSkillSource(skill, projectDir) {
   const installed = findInstalledPackage(projectDir, skill.packageName);
   if (!installed) return null;
-  const dir = path13.join(installed.dir, ...skill.packagePath.split("/"));
-  if (!fs14.existsSync(path13.join(dir, "SKILL.md"))) {
+  const dir = path10.join(installed.dir, ...skill.packagePath.split("/"));
+  if (!fs12.existsSync(path10.join(dir, "SKILL.md"))) {
     throw new SkillSourceError(
       `${skill.packageName} ${installed.version} does not include the ${skill.title} skill. Upgrade it: npm install ${skill.packageName}@latest`,
       "skill-missing"
@@ -13039,11 +12519,11 @@ async function registrySkillSource(skill, fetchImpl = fetch) {
   if (!files.some((f) => f.path === "SKILL.md")) {
     throw new SkillSourceError(`${skill.packageName}@${version2} does not include the ${skill.title} skill.`, "not-in-package");
   }
-  const tmp = fs14.mkdtempSync(path13.join(os3.tmpdir(), "one-skill-"));
+  const tmp = fs12.mkdtempSync(path10.join(os2.tmpdir(), "one-skill-"));
   for (const file of files) {
-    const dest = path13.join(tmp, ...file.path.split("/"));
-    fs14.mkdirSync(path13.dirname(dest), { recursive: true });
-    fs14.writeFileSync(dest, file.data);
+    const dest = path10.join(tmp, ...file.path.split("/"));
+    fs12.mkdirSync(path10.dirname(dest), { recursive: true });
+    fs12.writeFileSync(dest, file.data);
   }
   return {
     kind: "registry",
@@ -13052,7 +12532,7 @@ async function registrySkillSource(skill, fetchImpl = fetch) {
     origin: tarball,
     cleanup: () => {
       try {
-        fs14.rmSync(tmp, { recursive: true, force: true });
+        fs12.rmSync(tmp, { recursive: true, force: true });
       } catch {
       }
     }
@@ -13096,7 +12576,7 @@ function readTarEntries(tar, prefix) {
       if ((type === "0" || type === "\0") && full.startsWith(prefix)) {
         const rel = full.slice(prefix.length);
         const parts = rel.split("/");
-        if (rel && !path13.isAbsolute(rel) && !parts.includes("..") && !parts.includes("")) {
+        if (rel && !path10.isAbsolute(rel) && !parts.includes("..") && !parts.includes("")) {
           out.push({ path: rel, data: Buffer.from(body) });
         }
       }
@@ -13107,11 +12587,11 @@ function readTarEntries(tar, prefix) {
 }
 var SKILL_STAMP = ".one-skill.json";
 function canonicalSkillDir(skill, plan) {
-  return path13.join(plan.root, ...UNIVERSAL_PROJECT_DIR.split("/"), skill.dirName);
+  return path10.join(plan.root, ...UNIVERSAL_PROJECT_DIR.split("/"), skill.dirName);
 }
 function readStamp(dir) {
   try {
-    return JSON.parse(fs14.readFileSync(path13.join(dir, SKILL_STAMP), "utf-8"));
+    return JSON.parse(fs12.readFileSync(path10.join(dir, SKILL_STAMP), "utf-8"));
   } catch {
     return null;
   }
@@ -13121,9 +12601,9 @@ function resolveAgentFolders(plan) {
   const chosen = SKILL_AGENT_TARGETS.filter((agent) => {
     if (explicit) return plan.agents.includes(agent.id);
     if (plan.scope === "global") {
-      return fs14.existsSync(path13.join(plan.root, path13.dirname(agent.homeDir)));
+      return fs12.existsSync(path10.join(plan.root, path10.dirname(agent.homeDir)));
     }
-    return agent.projectMarker === null || fs14.existsSync(path13.join(plan.root, agent.projectMarker));
+    return agent.projectMarker === null || fs12.existsSync(path10.join(plan.root, agent.projectMarker));
   });
   const readers = [];
   const byDir = /* @__PURE__ */ new Map();
@@ -13138,33 +12618,33 @@ function resolveAgentFolders(plan) {
   return { readers, folders: [...byDir].map(([dir, agents]) => ({ dir, agents })) };
 }
 function copyDir(src, dest) {
-  fs14.mkdirSync(dest, { recursive: true });
-  for (const entry of fs14.readdirSync(src, { withFileTypes: true })) {
+  fs12.mkdirSync(dest, { recursive: true });
+  for (const entry of fs12.readdirSync(src, { withFileTypes: true })) {
     if (entry.name === SKILL_STAMP) continue;
-    const from = path13.join(src, entry.name);
-    const to = path13.join(dest, entry.name);
+    const from = path10.join(src, entry.name);
+    const to = path10.join(dest, entry.name);
     if (entry.isDirectory()) copyDir(from, to);
-    else fs14.copyFileSync(from, to);
+    else fs12.copyFileSync(from, to);
   }
 }
 function removePath(target) {
   try {
-    const stat = fs14.lstatSync(target);
-    if (stat.isSymbolicLink()) fs14.unlinkSync(target);
-    else fs14.rmSync(target, { recursive: true, force: true });
+    const stat = fs12.lstatSync(target);
+    if (stat.isSymbolicLink()) fs12.unlinkSync(target);
+    else fs12.rmSync(target, { recursive: true, force: true });
   } catch {
   }
 }
 function linkDir(target, linkPath) {
   removePath(linkPath);
-  fs14.mkdirSync(path13.dirname(linkPath), { recursive: true });
+  fs12.mkdirSync(path10.dirname(linkPath), { recursive: true });
   try {
-    fs14.symlinkSync(path13.relative(path13.dirname(linkPath), target), linkPath, "dir");
+    fs12.symlinkSync(path10.relative(path10.dirname(linkPath), target), linkPath, "dir");
     return "symlink";
   } catch {
   }
   try {
-    fs14.symlinkSync(target, linkPath, "junction");
+    fs12.symlinkSync(target, linkPath, "junction");
     return "junction";
   } catch {
   }
@@ -13195,17 +12675,17 @@ function installSkill(skill, source, plan, cliVersion2) {
     installedBy: `@withone/cli@${cliVersion2}`,
     installedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  fs14.writeFileSync(path13.join(canonical, SKILL_STAMP), JSON.stringify(stamp, null, 2) + "\n");
+  fs12.writeFileSync(path10.join(canonical, SKILL_STAMP), JSON.stringify(stamp, null, 2) + "\n");
   return { skill, version: source.version, source: source.kind, origin: source.origin, scope: plan.scope, root: plan.root, canonical, readers, links };
 }
 function removeSkill(skill, plan) {
   const canonical = canonicalSkillDir(skill, plan);
   const stamp = readStamp(canonical);
-  if (!stamp && !fs14.existsSync(path13.join(canonical, "SKILL.md"))) return { removed: false, paths: [] };
+  if (!stamp && !fs12.existsSync(path10.join(canonical, "SKILL.md"))) return { removed: false, paths: [] };
   const paths = [];
   for (const link of stamp?.links ?? []) {
     const full = fromStamp(plan.root, link.path);
-    if (fs14.existsSync(full) || isDanglingLink(full)) {
+    if (fs12.existsSync(full) || isDanglingLink(full)) {
       removePath(full);
       paths.push(full);
     }
@@ -13218,18 +12698,18 @@ function toPosix(p9) {
   return p9.split("\\").join("/");
 }
 function fromStamp(root, rel) {
-  return path13.join(root, ...toPosix(rel).split("/"));
+  return path10.join(root, ...toPosix(rel).split("/"));
 }
 function isDanglingLink(p9) {
   try {
-    return fs14.lstatSync(p9).isSymbolicLink();
+    return fs12.lstatSync(p9).isSymbolicLink();
   } catch {
     return false;
   }
 }
 function installedSkill(skill, plan) {
   const canonical = canonicalSkillDir(skill, plan);
-  if (!fs14.existsSync(path13.join(canonical, "SKILL.md"))) return null;
+  if (!fs12.existsSync(path10.join(canonical, "SKILL.md"))) return null;
   const stamp = readStamp(canonical);
   return { scope: plan.scope, root: plan.root, canonical, version: stamp?.version ?? null, source: stamp?.source ?? null, links: stamp?.links ?? [] };
 }
@@ -13238,7 +12718,7 @@ function globalRoot() {
 }
 function refreshProjectSkills(cwd, cliVersion2) {
   const root = findProjectRoot(cwd);
-  if (!root || path13.resolve(root) === path13.resolve(homeDir())) return [];
+  if (!root || path10.resolve(root) === path10.resolve(homeDir())) return [];
   const results = [];
   for (const skill of OPTIONAL_SKILLS) {
     const canonical = canonicalSkillDir(skill, { scope: "project", root });
@@ -13261,8 +12741,8 @@ function refreshProjectSkills(cwd, cliVersion2) {
 }
 
 // src/commands/skills.ts
-import path14 from "path";
-import pc16 from "picocolors";
+import path11 from "path";
+import pc15 from "picocolors";
 function requireSkill(name) {
   const skill = findOptionalSkill(name);
   if (!skill) {
@@ -13285,7 +12765,7 @@ function resolvePlan(options) {
   const agents = parseAgents(options.agents);
   if (options.global) return { scope: "global", root: globalRoot(), agents };
   const root = findProjectRoot(process.cwd());
-  if (!root || path14.resolve(root) === path14.resolve(homeDir())) {
+  if (!root || path11.resolve(root) === path11.resolve(homeDir())) {
     error("No project here: run this inside your app (a folder with package.json or .git), or pass --global.");
   }
   return { scope: "project", root, agents };
@@ -13301,7 +12781,7 @@ async function resolveSource(skill, plan) {
   }
 }
 function display(p9, root) {
-  const rel = path14.relative(root, p9);
+  const rel = path11.relative(root, p9);
   return rel && !rel.startsWith("..") ? rel : p9;
 }
 function report(command, result, packageInProject) {
@@ -13317,7 +12797,7 @@ function report(command, result, packageInProject) {
       root: result.root,
       installedTo: [
         { path: result.canonical, kind: "folder", agents: result.readers },
-        ...result.links.map((l) => ({ path: path14.join(result.root, ...l.path.split("/")), kind: l.kind, agents: l.agents }))
+        ...result.links.map((l) => ({ path: path11.join(result.root, ...l.path.split("/")), kind: l.kind, agents: l.agents }))
       ],
       next: nextSteps(result, packageInProject)
     });
@@ -13325,20 +12805,20 @@ function report(command, result, packageInProject) {
   }
   const scopeLabel2 = result.scope === "project" ? "this project" : "every project on this machine";
   console.log();
-  console.log(`  ${pc16.green("\u2713")} ${pc16.bold(`${result.skill.title} skill ${result.version}`)} installed for ${scopeLabel2}`);
+  console.log(`  ${pc15.green("\u2713")} ${pc15.bold(`${result.skill.title} skill ${result.version}`)} installed for ${scopeLabel2}`);
   console.log();
-  const from = result.source === "project" ? `${where(result.origin)} ${pc16.dim("(the version your code uses)")}` : `npm ${pc16.dim(result.scope === "project" ? `(latest ${result.skill.packageName}; not installed in this project yet)` : `(latest ${result.skill.packageName})`)}`;
-  console.log(`  ${pc16.dim("From")}  ${from}`);
+  const from = result.source === "project" ? `${where(result.origin)} ${pc15.dim("(the version your code uses)")}` : `npm ${pc15.dim(result.scope === "project" ? `(latest ${result.skill.packageName}; not installed in this project yet)` : `(latest ${result.skill.packageName})`)}`;
+  console.log(`  ${pc15.dim("From")}  ${from}`);
   const rows = [
     { path: where(result.canonical), agents: result.readers },
-    ...result.links.map((l) => ({ path: `${l.path}${l.kind === "copy" ? pc16.dim(" (copy)") : ""}`, agents: l.agents }))
+    ...result.links.map((l) => ({ path: `${l.path}${l.kind === "copy" ? pc15.dim(" (copy)") : ""}`, agents: l.agents }))
   ];
   rows.forEach((row, i) => {
-    const agents = row.agents.length ? pc16.dim(row.agents.join(", ")) : pc16.dim("shared copy the links point to");
-    console.log(`  ${pc16.dim(i === 0 ? "To  " : "    ")}  ${row.path}  ${agents}`);
+    const agents = row.agents.length ? pc15.dim(row.agents.join(", ")) : pc15.dim("shared copy the links point to");
+    console.log(`  ${pc15.dim(i === 0 ? "To  " : "    ")}  ${row.path}  ${agents}`);
   });
   console.log();
-  console.log(`  ${pc16.bold("Next")}`);
+  console.log(`  ${pc15.bold("Next")}`);
   nextSteps(result, packageInProject).forEach((step, i) => console.log(`  ${i + 1}. ${step}`));
   console.log();
 }
@@ -13401,7 +12881,7 @@ async function skillsUpdateCommand(name, options) {
     console.log("No optional skills are installed here. See: one skills list");
     return;
   }
-  for (const r of updated) console.log(`  ${pc16.green("\u2713")} ${r.skill.title} skill ${r.version} ${pc16.dim(display(r.canonical, r.root))}`);
+  for (const r of updated) console.log(`  ${pc15.green("\u2713")} ${r.skill.title} skill ${r.version} ${pc15.dim(display(r.canonical, r.root))}`);
 }
 async function skillsRemoveCommand(name, options) {
   const skill = requireSkill(name);
@@ -13415,12 +12895,12 @@ async function skillsRemoveCommand(name, options) {
     console.log(`${skill.title} skill is not installed ${plan.scope === "global" ? "globally" : "in this project"}.`);
     return;
   }
-  console.log(`  ${pc16.green("\u2713")} Removed the ${skill.title} skill`);
-  for (const p9 of result.paths) console.log(`    ${pc16.dim(display(p9, plan.root))}`);
+  console.log(`  ${pc15.green("\u2713")} Removed the ${skill.title} skill`);
+  for (const p9 of result.paths) console.log(`    ${pc15.dim(display(p9, plan.root))}`);
 }
 async function skillsListCommand() {
   const projectRoot = findProjectRoot(process.cwd());
-  const inProject = projectRoot && path14.resolve(projectRoot) !== path14.resolve(homeDir()) ? projectRoot : null;
+  const inProject = projectRoot && path11.resolve(projectRoot) !== path11.resolve(homeDir()) ? projectRoot : null;
   const optional = OPTIONAL_SKILLS.map((skill) => {
     const project = inProject ? installedSkill(skill, { scope: "project", root: inProject }) : null;
     const global = installedSkill(skill, { scope: "global", root: globalRoot() });
@@ -13448,19 +12928,19 @@ async function skillsListCommand() {
     return;
   }
   console.log();
-  console.log(`  ${pc16.bold("one")}      ${oneSkill.installed ? pc16.green(`installed ${oneSkill.version ?? ""}`.trim()) : pc16.yellow("not installed")}  ${pc16.dim("managed by one init")}`);
+  console.log(`  ${pc15.bold("one")}      ${oneSkill.installed ? pc15.green(`installed ${oneSkill.version ?? ""}`.trim()) : pc15.yellow("not installed")}  ${pc15.dim("managed by one init")}`);
   for (const s of optional) {
-    const state = s.project ? pc16.green(`project ${s.project.version ?? ""}`.trim()) + (s.project.upToDate ? "" : pc16.yellow(` (package is ${s.packageInProject}: run one skills update ${s.skill})`)) : s.global ? pc16.green(`global ${s.global.version ?? ""}`.trim()) : pc16.dim(`not installed \u2014 one skills add ${s.skill}`);
-    console.log(`  ${pc16.bold(s.skill.padEnd(8))} ${state}`);
-    console.log(`  ${" ".repeat(8)} ${pc16.dim(s.description)}`);
+    const state = s.project ? pc15.green(`project ${s.project.version ?? ""}`.trim()) + (s.project.upToDate ? "" : pc15.yellow(` (package is ${s.packageInProject}: run one skills update ${s.skill})`)) : s.global ? pc15.green(`global ${s.global.version ?? ""}`.trim()) : pc15.dim(`not installed \u2014 one skills add ${s.skill}`);
+    console.log(`  ${pc15.bold(s.skill.padEnd(8))} ${state}`);
+    console.log(`  ${" ".repeat(8)} ${pc15.dim(s.description)}`);
   }
   console.log();
 }
 
 // src/cli.ts
 silenceWarningsInAgentMode();
-var require4 = createRequire3(import.meta.url);
-var { version } = require4("../package.json");
+var require2 = createRequire(import.meta.url);
+var { version } = require2("../package.json");
 var program = new Command();
 program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 750+ platforms through one interface.
 
@@ -13698,8 +13178,8 @@ config.command("reset").description("Remove the project config for the current d
         return;
       }
     }
-    const fs16 = await import("fs");
-    fs16.unlinkSync(globalPath);
+    const fs14 = await import("fs");
+    fs14.unlinkSync(globalPath);
     if (isAgentMode()) {
       json({ deleted: true, scope: "global" });
     } else {
@@ -13716,15 +13196,15 @@ config.command("reset").description("Remove the project config for the current d
     }
     return;
   }
-  const fs15 = await import("fs");
-  const configContent = fs15.readFileSync(resolved.path, "utf-8");
-  fs15.unlinkSync(resolved.path);
+  const fs13 = await import("fs");
+  const configContent = fs13.readFileSync(resolved.path, "utf-8");
+  fs13.unlinkSync(resolved.path);
   const next = resolveConfig();
-  fs15.mkdirSync(path15.dirname(resolved.path), { recursive: true });
-  fs15.writeFileSync(resolved.path, configContent);
+  fs13.mkdirSync(path12.dirname(resolved.path), { recursive: true });
+  fs13.writeFileSync(resolved.path, configContent);
   let fallbackLabel;
   if (next.scope === "project") {
-    fallbackLabel = `parent project config (${path15.basename(next.projectRoot)})`;
+    fallbackLabel = `parent project config (${path12.basename(next.projectRoot)})`;
   } else if (next.scope === "global") {
     fallbackLabel = "global config";
   } else {
@@ -13733,7 +13213,7 @@ config.command("reset").description("Remove the project config for the current d
   if (!isAgentMode()) {
     const p9 = await import("@clack/prompts");
     const confirmed = await p9.confirm({
-      message: `Delete project config for ${path15.basename(resolved.projectRoot)}? Will fall back to ${fallbackLabel}.`,
+      message: `Delete project config for ${path12.basename(resolved.projectRoot)}? Will fall back to ${fallbackLabel}.`,
       initialValue: false
     });
     if (p9.isCancel(confirmed) || !confirmed) {
@@ -13741,9 +13221,9 @@ config.command("reset").description("Remove the project config for the current d
       return;
     }
   }
-  fs15.unlinkSync(resolved.path);
+  fs13.unlinkSync(resolved.path);
   try {
-    fs15.rmdirSync(path15.dirname(resolved.path));
+    fs13.rmdirSync(path12.dirname(resolved.path));
   } catch {
   }
   if (isAgentMode()) {
@@ -13906,22 +13386,22 @@ program.command("whoami").description("Show the user, organization, and project
     });
     return;
   }
-  const pc17 = (await import("picocolors")).default;
+  const pc16 = (await import("picocolors")).default;
   const contextParts = [];
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc17.yellow("test") : pc17.green("live");
-  const configLabel = configScope === "project" ? pc17.cyan("project config") : pc17.magenta("global config");
+  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
+  const configLabel = configScope === "project" ? pc16.cyan("project config") : pc16.magenta("global config");
   console.log();
-  console.log(`  ${pc17.bold(scopeDisplay)} ${pc17.dim("\xB7")} ${envLabel}`);
-  console.log(`  ${whoami.user.name} ${pc17.dim(`(${whoami.user.email})`)}`);
-  if (keyName) console.log(`  ${pc17.dim("Key:")} ${keyName}`);
-  if (whoami.organization) console.log(`  ${pc17.dim("Org:")} ${whoami.organization.name} ${pc17.dim(`(${whoami.organization.id})`)}`);
-  if (whoami.project) console.log(`  ${pc17.dim("Project:")} ${whoami.project.name} ${pc17.dim(`(${whoami.project.id})`)}`);
+  console.log(`  ${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`);
+  console.log(`  ${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`);
+  if (keyName) console.log(`  ${pc16.dim("Key:")} ${keyName}`);
+  if (whoami.organization) console.log(`  ${pc16.dim("Org:")} ${whoami.organization.name} ${pc16.dim(`(${whoami.organization.id})`)}`);
+  if (whoami.project) console.log(`  ${pc16.dim("Project:")} ${whoami.project.name} ${pc16.dim(`(${whoami.project.id})`)}`);
   console.log();
-  console.log(`  ${pc17.dim("Using")} ${configLabel}`);
-  console.log(`  ${pc17.dim("API:")} ${apiBase}`);
+  console.log(`  ${pc16.dim("Using")} ${configLabel}`);
+  console.log(`  ${pc16.dim("API:")} ${apiBase}`);
   console.log();
 });
 program.command("add [platform]").description("Shortcut for: connection add").option("--tag <name>", "Tag the new connection (disambiguates multiple connections per platform in sync/flow profiles)").action(async (platform, options) => {