OneCLI (YC26) is an open-source pro assistant for teams: identity-provider integration, a sandboxed personal agent with human-in-the-loop approvals. It runs with your access and never holds your keys.