v0.7.0 — single package
v0.7.0 — 2026-05-22
Changed (breaking)
onenv-apiHTTP server removed. A consumer audit (no running processes, no launchctl/LaunchAgent entries, no references across the dev tree or~/.config) turned up zero callers. The Express server, its Zod schemas, rate-limiter, permission daemon, and dist/ are all gone. If you were running it, the equivalent flow is the CLI itself — everyonenvcommand now does what the HTTP endpoints did, with the same 1Password vault on the other side.- Single package at the repo root. Source moved from
onenv-manager/srctosrc/.package.jsonrenamedonenv-manager→onenv. The published binary name and thedist/cli.jspath are unchanged, but if you were sourcing internals from a sibling clone you will need to update paths. onenv-api/.env,AGENT_API_TOKEN,API_HOST,API_PORT,PERMISSION_TIMEOUT_MSall no longer exist. If your shell or systemd unit was setting these, drop them.
Added
ONENV_CONFIRM_MUTATIONS=1— opt-in macOS permission dialog before anyset/edit/unset/import. Ported from the deleted onenv-api. Off by default. Deny / timeout raisesPERMISSION_DENIED; non-macOS raisesPERMISSION_UNSUPPORTED.- The agent primer (XML / Markdown / JSON) now includes a
<permission>section explaining the gate, and no longer documents an HTTP API.
Fixed
- Pre-commit
check-dist-freshhook now checks a singlesrc/→dist/cli.jspair instead of looping over per-package dist files.
Notes
- 89 tests pass (was 86 + 3 new permission tests).
- The
~/.config/onenv-manager/state directory is unchanged for backwards compatibility — renaming it would force a manual migration for every existing user.
Migration
If you previously installed onenv via bun install.ts or bun link, the global onenv shim points at the now-deleted onenv-manager/dist/cli.js. Re-link after pulling:
cd /path/to/onenv
bun install
bun run build
bun link # re-points ~/.bun/bin/onenv at the new dist pathOr just re-run bun install.ts — it does the same thing plus dependency install.