@withone/cli 1.45.0 → 1.46.0

package/README.md

@@ -268,7 +268,7 @@ one actions execute stripe <actionId> <connectionKey> \
 | `--mock` | Return example response without making an API call |
 | `--skip-validation` | Skip input validation against the action schema |
 | `--output <path>` | Save response to a file (for binary downloads) |
-| `--no-cache` | Fetch action details fresh instead of from the local cache (execution itself is never cached) |
+| `--no-cache` | Bypass the cached action details and re-fetch them; the fresh details still refresh the cache (execution itself is never cached) |
 
 The CLI validates required parameters (path variables, query params, body fields) against the action schema before executing. Missing params return a clear error with the flag name and description. Pass `--skip-validation` to bypass.
 
@@ -564,6 +564,18 @@ export ONE_NO_AUTO_UPDATE=1
 
 Run `one update` manually whenever you want to upgrade.
 
+### Telemetry
+
+The CLI collects **usage analytics** — which command was run, the CLI version, OS/arch, and whether it ran in `--agent` mode — to help us prioritize improvements. Events are linked to your One account (user id, email, name, org) so they line up with your dashboard activity. **Command arguments, inputs, connection data, and secrets are never collected** (only the command name, e.g. `actions execute`). A one-time notice is shown on first run. Events are queued locally and sent in the background, so telemetry never slows down or blocks a command.
+
+To opt out, set any of:
+
+```bash
+export ONE_NO_TELEMETRY=1     # also accepted: ONE_DISABLE_TELEMETRY=1, or the cross-tool standard DO_NOT_TRACK=1
+```
+
+Telemetry is also disabled automatically when `CI=1`. You can persist the choice by adding `"telemetry": "off"` to `~/.one/config.json`.
+
 ### Project config (`.onerc`)
 
 Drop a `.onerc` file in your project root to override global settings per-project. Simple `KEY=VALUE` format; `#` for comments. Read from the current working directory (no parent lookup).

package/dist/{chunk-KH4ERRJ5.js → chunk-56QOOA5V.js}

@@ -1,10 +1,10 @@
 import {
   getMemoryConfigOrDefault
-} from "./chunk-77564KWS.js";
+} from "./chunk-BKD7A42U.js";
 import {
   getOpenAiApiKey,
   readConfig
-} from "./chunk-TVIZC7AC.js";
+} from "./chunk-OEN5DNG7.js";
 
 // src/lib/output.ts
 import * as p from "@clack/prompts";

package/dist/{chunk-77564KWS.js → chunk-BKD7A42U.js}

@@ -3,7 +3,7 @@ import {
   readConfig,
   setOpenAiApiKey,
   writeConfig
-} from "./chunk-TVIZC7AC.js";
+} from "./chunk-OEN5DNG7.js";
 
 // src/lib/memory/config.ts
 var DEFAULT_MEMORY_CONFIG = {

package/dist/{chunk-TLRJMJGU.js → chunk-EDVE3BQZ.js}

@@ -3,10 +3,10 @@ import {
   isAgentMode,
   json,
   requireMemoryInit
-} from "./chunk-KH4ERRJ5.js";
+} from "./chunk-56QOOA5V.js";
 import {
   getBackend
-} from "./chunk-TGWQUBKA.js";
+} from "./chunk-GIMKPA2J.js";
 
 // src/commands/mem/sql.ts
 async function memSqlCommand(sql) {

package/dist/{chunk-UXKF6AEG.js → chunk-GDKMOLZ5.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-44CV5IMX.js";
 import {
   getCacheTtl
-} from "./chunk-TVIZC7AC.js";
+} from "./chunk-OEN5DNG7.js";
 
 // src/lib/flow-runner.ts
 import fs3 from "fs";
@@ -672,29 +672,32 @@ function isActionDetailsEntry(entry) {
 }
 async function resolveActionDetails(api, actionId, opts = {}) {
   const useCache = opts.useCache !== false;
+  const warn = opts.warn ?? ((m) => {
+    process.stderr.write(m);
+  });
   const cachePath = knowledgeCachePath(actionId);
   const raw = useCache ? readCache(cachePath) : null;
   const cached = isActionDetailsEntry(raw) ? raw : null;
   if (cached && isFresh(cached)) {
-    return { details: cached.data, cacheHit: true, entry: cached };
+    return { details: cached.data, cacheHit: true, stale: false, entry: cached };
   }
   try {
     const result = await api.getActionDetailsWithMeta(actionId, cached?.etag ?? void 0);
     if (result.status === 304 && cached) {
       cached.cachedAt = (/* @__PURE__ */ new Date()).toISOString();
       writeCache(cachePath, cached);
-      return { details: cached.data, cacheHit: true, entry: cached };
+      return { details: cached.data, cacheHit: true, stale: false, entry: cached };
     }
     const entry = makeCacheEntry(actionId, result.data, result.etag);
     writeCache(cachePath, entry);
-    return { details: result.data, cacheHit: false, entry };
+    return { details: result.data, cacheHit: false, stale: false, entry };
   } catch (fetchError) {
     if (cached) {
-      process.stderr.write(
+      warn(
         `Warning: serving cached action details (network unavailable, cached ${formatAge(getAge(cached))} ago)
 `
       );
-      return { details: cached.data, cacheHit: true, entry: cached };
+      return { details: cached.data, cacheHit: true, stale: true, entry: cached };
     }
     throw fetchError;
   }
@@ -1268,7 +1271,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-FQVTF36N.js");
+  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-VIKPVLBL.js");
   const { flow: subFlow, rootDir: subRootDir } = loadFlowWithMeta2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,

package/dist/{chunk-TGWQUBKA.js → chunk-GIMKPA2J.js}

@@ -5,10 +5,10 @@ import {
   getMemoryConfig,
   getMemoryConfigOrDefault,
   updateMemoryConfig
-} from "./chunk-77564KWS.js";
+} from "./chunk-BKD7A42U.js";
 import {
   getOpenAiApiKey
-} from "./chunk-TVIZC7AC.js";
+} from "./chunk-OEN5DNG7.js";
 
 // src/lib/memory/schema.ts
 var SCHEMA_VERSION = "2.1.0";

package/dist/{chunk-Z4HKASJT.js → chunk-MQU7UK5J.js}

@@ -6,11 +6,11 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-KH4ERRJ5.js";
+} from "./chunk-56QOOA5V.js";
 import {
   getBackend,
   upsertRecord
-} from "./chunk-TGWQUBKA.js";
+} from "./chunk-GIMKPA2J.js";
 
 // src/commands/mem/migrate.ts
 import fs4 from "fs";

package/dist/{chunk-TVIZC7AC.js → chunk-OEN5DNG7.js}

@@ -2,6 +2,7 @@
 import fs from "fs";
 import path from "path";
 import os from "os";
+import { randomUUID } from "crypto";
 function configDir() {
   return path.join(os.homedir(), ".one");
 }
@@ -241,6 +242,67 @@ async function ensureWhoAmI(api) {
 function getEnvFromApiKey(apiKey) {
   return apiKey.startsWith("sk_test_") ? "test" : "live";
 }
+function deviceIdFile() {
+  return path.join(configDir(), "device-id");
+}
+function telemetryNoticeFile() {
+  return path.join(configDir(), ".telemetry-notice");
+}
+function getDeviceId() {
+  try {
+    const existing = fs.readFileSync(deviceIdFile(), "utf-8").trim();
+    if (existing) return existing;
+  } catch {
+  }
+  const id = randomUUID();
+  try {
+    if (!fs.existsSync(configDir())) fs.mkdirSync(configDir(), { mode: 448 });
+    fs.writeFileSync(deviceIdFile(), id, { mode: 384 });
+  } catch {
+  }
+  return id;
+}
+function telemetryNoticeShown() {
+  return fs.existsSync(telemetryNoticeFile());
+}
+function markTelemetryNoticeShown() {
+  try {
+    if (!fs.existsSync(configDir())) fs.mkdirSync(configDir(), { mode: 448 });
+    fs.writeFileSync(telemetryNoticeFile(), (/* @__PURE__ */ new Date()).toISOString(), { mode: 384 });
+  } catch {
+  }
+}
+function analyticsQueueFile() {
+  return path.join(configDir(), ".analytics-queue.jsonl");
+}
+var ANALYTICS_QUEUE_MAX = 500;
+function appendAnalyticsQueue(line) {
+  try {
+    if (!fs.existsSync(configDir())) fs.mkdirSync(configDir(), { mode: 448 });
+    fs.appendFileSync(analyticsQueueFile(), `${line}
+`, { mode: 384 });
+  } catch {
+  }
+}
+function readAnalyticsQueue() {
+  try {
+    return fs.readFileSync(analyticsQueueFile(), "utf-8").split("\n").filter(Boolean);
+  } catch {
+    return [];
+  }
+}
+function writeAnalyticsQueue(lines) {
+  try {
+    if (lines.length === 0) {
+      fs.rmSync(analyticsQueueFile(), { force: true });
+      return;
+    }
+    if (!fs.existsSync(configDir())) fs.mkdirSync(configDir(), { mode: 448 });
+    fs.writeFileSync(analyticsQueueFile(), `${lines.slice(-ANALYTICS_QUEUE_MAX).join("\n")}
+`, { mode: 384 });
+  } catch {
+  }
+}
 
 export {
   getProjectRoot,
@@ -266,5 +328,11 @@ export {
   getWhoAmI,
   updateWhoAmI,
   ensureWhoAmI,
-  getEnvFromApiKey
+  getEnvFromApiKey,
+  getDeviceId,
+  telemetryNoticeShown,
+  markTelemetryNoticeShown,
+  appendAnalyticsQueue,
+  readAnalyticsQueue,
+  writeAnalyticsQueue
 };

package/dist/{embedding-C3E4EAQ7.js → embedding-4T4VYFEI.js}

@@ -2,8 +2,8 @@ import {
   defaultSearchableText,
   embed,
   embedBatch
-} from "./chunk-77564KWS.js";
-import "./chunk-TVIZC7AC.js";
+} from "./chunk-BKD7A42U.js";
+import "./chunk-OEN5DNG7.js";
 export {
   defaultSearchableText,
   embed,

package/dist/{flow-runner-FQVTF36N.js → flow-runner-VIKPVLBL.js}

@@ -11,9 +11,9 @@ import {
   saveFlow,
   summarizeFlowInputs,
   walkSteps
-} from "./chunk-UXKF6AEG.js";
+} from "./chunk-GDKMOLZ5.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-TVIZC7AC.js";
+import "./chunk-OEN5DNG7.js";
 export {
   FlowRunner,
   collectStepTypes,

package/dist/index.js

@@ -30,10 +30,10 @@ import {
   searchCachePath,
   validateActionInput,
   writeCache
-} from "./chunk-UXKF6AEG.js";
+} from "./chunk-GDKMOLZ5.js";
 import {
   memSqlCommand
-} from "./chunk-TLRJMJGU.js";
+} from "./chunk-EDVE3BQZ.js";
 import {
   countRecords,
   deleteDatabase,
@@ -58,7 +58,7 @@ import {
   upsertRecords,
   writeDraftProfile,
   writeProfile
-} from "./chunk-Z4HKASJT.js";
+} from "./chunk-MQU7UK5J.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -81,7 +81,7 @@ import {
   semanticSearchUpgradeHint,
   semanticSearchUpgradeLine,
   setAgentMode
-} from "./chunk-KH4ERRJ5.js";
+} from "./chunk-56QOOA5V.js";
 import {
   SCHEMA_VERSION,
   addRecord,
@@ -91,7 +91,7 @@ import {
   listBackendPlugins,
   loadBackendFromConfig,
   upsertRecord
-} from "./chunk-TGWQUBKA.js";
+} from "./chunk-GIMKPA2J.js";
 import {
   DEFAULT_MEMORY_CONFIG,
   defaultSearchableText,
@@ -101,14 +101,16 @@ import {
   memoryConfigExists,
   setOpenAiApiKey,
   updateMemoryConfig
-} from "./chunk-77564KWS.js";
+} from "./chunk-BKD7A42U.js";
 import {
+  appendAnalyticsQueue,
   configExists,
   ensureWhoAmI,
   getAccessControl,
   getAccessControlFromAllSources,
   getApiBase,
   getApiKey,
+  getDeviceId,
   getEnvFromApiKey,
   getGlobalConfigPath,
   getOpenAiApiKey,
@@ -116,19 +118,23 @@ import {
   getProjectRoot,
   getWhoAmI,
   globalConfigExists,
+  markTelemetryNoticeShown,
   projectConfigExists,
+  readAnalyticsQueue,
   readConfig,
   readGlobalConfig,
   readProjectConfig,
   resolveConfig,
+  telemetryNoticeShown,
   updateAccessControl,
   updateApiBase,
   updateWhoAmI,
+  writeAnalyticsQueue,
   writeConfig
-} from "./chunk-TVIZC7AC.js";
+} from "./chunk-OEN5DNG7.js";
 
 // src/cli.ts
-import { createRequire as createRequire2 } from "module";
+import { createRequire as createRequire3 } from "module";
 import path11 from "path";
 import { Command } from "commander";
 
@@ -1018,25 +1024,25 @@ async function loginCommand() {
   let targetScope = "global";
   const existingKey = getApiKey();
   if (existingKey) {
-    const pc14 = (await import("picocolors")).default;
+    const pc15 = (await import("picocolors")).default;
     const resolved2 = resolveConfig();
     const whoami2 = resolved2.config?.whoami;
     const env2 = getEnvFromApiKey(existingKey);
-    const envLabel2 = env2 === "test" ? pc14.yellow("test") : pc14.green("live");
-    const currentScope = resolved2.scope === "project" ? pc14.cyan("local config") : pc14.magenta("global config");
+    const envLabel2 = env2 === "test" ? pc15.yellow("test") : pc15.green("live");
+    const currentScope = resolved2.scope === "project" ? pc15.cyan("local config") : pc15.magenta("global config");
     const lines = ["You are already logged in.", ""];
     if (whoami2) {
       const contextParts2 = [];
       if (whoami2.organization) contextParts2.push(whoami2.organization.name);
       if (whoami2.project) contextParts2.push(whoami2.project.name);
       const scopeDisplay2 = contextParts2.length > 0 ? contextParts2.join(" / ") : "Personal";
-      lines.push(`${pc14.bold(scopeDisplay2)} ${pc14.dim("\xB7")} ${envLabel2}`);
-      lines.push(`${whoami2.user.name} ${pc14.dim(`(${whoami2.user.email})`)}`);
-      if (whoami2.organization) lines.push(`${pc14.dim("Org:")} ${whoami2.organization.name}`);
-      if (whoami2.project) lines.push(`${pc14.dim("Project:")} ${whoami2.project.name}`);
+      lines.push(`${pc15.bold(scopeDisplay2)} ${pc15.dim("\xB7")} ${envLabel2}`);
+      lines.push(`${whoami2.user.name} ${pc15.dim(`(${whoami2.user.email})`)}`);
+      if (whoami2.organization) lines.push(`${pc15.dim("Org:")} ${whoami2.organization.name}`);
+      if (whoami2.project) lines.push(`${pc15.dim("Project:")} ${whoami2.project.name}`);
     }
     lines.push("");
-    lines.push(`${pc14.dim("Stored in")} ${currentScope}`);
+    lines.push(`${pc15.dim("Stored in")} ${currentScope}`);
     p2.note(lines.join("\n"));
     const scopeChoice = await p2.select({
       message: "Where would you like to log in?",
@@ -1059,40 +1065,40 @@ async function loginCommand() {
   if (resolved.config) {
     writeConfig({ ...resolved.config, whoami }, targetScope);
   }
-  const pc13 = (await import("picocolors")).default;
+  const pc14 = (await import("picocolors")).default;
   const env = getEnvFromApiKey(apiKey);
   const contextParts = [];
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc13.yellow("test") : pc13.green("live");
-  const configLabel = targetScope === "project" ? pc13.cyan("local config") : pc13.magenta("global config");
+  const envLabel = env === "test" ? pc14.yellow("test") : pc14.green("live");
+  const configLabel = targetScope === "project" ? pc14.cyan("local config") : pc14.magenta("global config");
   const infoLines = [
-    `${pc13.bold(scopeDisplay)} ${pc13.dim("\xB7")} ${envLabel}`,
-    `${whoami.user.name} ${pc13.dim(`(${whoami.user.email})`)}`
+    `${pc14.bold(scopeDisplay)} ${pc14.dim("\xB7")} ${envLabel}`,
+    `${whoami.user.name} ${pc14.dim(`(${whoami.user.email})`)}`
   ];
-  if (whoami.organization) infoLines.push(`${pc13.dim("Org:")} ${whoami.organization.name}`);
-  if (whoami.project) infoLines.push(`${pc13.dim("Project:")} ${whoami.project.name}`);
+  if (whoami.organization) infoLines.push(`${pc14.dim("Org:")} ${whoami.organization.name}`);
+  if (whoami.project) infoLines.push(`${pc14.dim("Project:")} ${whoami.project.name}`);
   infoLines.push("");
-  infoLines.push(`${pc13.dim("Stored in")} ${configLabel}`);
+  infoLines.push(`${pc14.dim("Stored in")} ${configLabel}`);
   p2.note(infoLines.join("\n"), "Logged in");
   console.log();
-  console.log(`  ${pc13.dim("Next steps:")}`);
-  console.log(`  ${pc13.cyan("one add <platform>")}  ${pc13.dim("\u2014")} Connect a platform (e.g. gmail, slack, stripe)`);
+  console.log(`  ${pc14.dim("Next steps:")}`);
+  console.log(`  ${pc14.cyan("one add <platform>")}  ${pc14.dim("\u2014")} Connect a platform (e.g. gmail, slack, stripe)`);
   console.log();
-  console.log(pc13.bold("  Copy-paste this to your AI agent:"));
+  console.log(pc14.bold("  Copy-paste this to your AI agent:"));
   console.log();
-  console.log(pc13.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log(pc13.cyan("  \u2502"));
-  console.log(pc13.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc13.cyan("  \u2502  lets you interact with 400+ third-party platforms (Gmail,"));
-  console.log(pc13.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
-  console.log(pc13.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
-  console.log(pc13.cyan("  \u2502  third-party platform or external service, use the `one`"));
-  console.log(pc13.cyan("  \u2502  skill. Please save this to your project instructions or"));
-  console.log(pc13.cyan("  \u2502  memory so you remember it in future conversations."));
-  console.log(pc13.cyan("  \u2502"));
-  console.log(pc13.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc14.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc14.cyan("  \u2502"));
+  console.log(pc14.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
+  console.log(pc14.cyan("  \u2502  lets you interact with 400+ third-party platforms (Gmail,"));
+  console.log(pc14.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
+  console.log(pc14.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
+  console.log(pc14.cyan("  \u2502  third-party platform or external service, use the `one`"));
+  console.log(pc14.cyan("  \u2502  skill. Please save this to your project instructions or"));
+  console.log(pc14.cyan("  \u2502  memory so you remember it in future conversations."));
+  console.log(pc14.cyan("  \u2502"));
+  console.log(pc14.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log();
   p2.outro("Happy building!");
 }
@@ -2382,7 +2388,8 @@ async function actionsSearchCommand(platform, query, options) {
   try {
     const agentType = knowledgeAgent ? "knowledge" : options.type || "execute";
     const useCache = options.cache !== false;
-    const cachePath = searchCachePath(platform, query, agentType || "knowledge");
+    const searchType = agentType || "knowledge";
+    const cachePath = searchCachePath(platform, query, searchType);
     const cached = useCache ? readCache(cachePath) : null;
     let cleanedActions;
     let cacheHit = false;
@@ -2413,8 +2420,8 @@ async function actionsSearchCommand(platform, query, options) {
             path: action.path
           }));
           writeCache(cachePath, makeCacheEntry(
-            `${platform}_${query}_${agentType || "knowledge"}`,
-            { actions: cleanedActions },
+            `${platform}_${query}_${searchType}`,
+            { actions: cleanedActions, platform, query, searchType },
             result.etag
           ));
         }
@@ -2596,7 +2603,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
   }
   const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
-  spinner5.start("Loading action details...");
+  spinner5.start("Resolving action details...");
   try {
     const { details: actionDetails, cacheHit: preflightCacheHit } = await resolveActionDetails(api, actionId, { useCache: options.cache !== false });
     if (!isMethodAllowed(actionDetails.method, permissions)) {
@@ -2605,7 +2612,9 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
         `Method "${actionDetails.method}" is not allowed under "${permissions}" permission level.`
       );
     }
-    spinner5.stop(`Action: ${actionDetails.title} [${actionDetails.method}]`);
+    spinner5.stop(
+      `Action: ${actionDetails.title} [${actionDetails.method}]` + (preflightCacheHit ? pc6.dim(" (cached)") : "")
+    );
     const data = options.data ? parseJsonArg2(options.data, "--data") : void 0;
     const pathVariables = options.pathVars ? parseJsonArg2(options.pathVars, "--path-vars") : void 0;
     const queryParams = options.queryParams ? parseJsonArg2(options.queryParams, "--query-params") : void 0;
@@ -2830,6 +2839,7 @@ async function actionsExecuteParallelCommand() {
   const api = new OneApi(apiKey, getApiBase());
   const prepared = [];
   const errors = [];
+  const staleWarned = /* @__PURE__ */ new Set();
   for (let i = 0; i < segments.length; i++) {
     const seg = segments[i];
     const label = `${seg.platform}/${seg.actionId}`;
@@ -2843,7 +2853,14 @@ async function actionsExecuteParallelCommand() {
     let actionDetails;
     let preflightCacheHit = false;
     try {
-      const resolved = await resolveActionDetails(api, seg.actionId, { useCache: flags.useCache });
+      const resolved = await resolveActionDetails(api, seg.actionId, {
+        useCache: flags.useCache,
+        warn: (msg) => {
+          if (staleWarned.has(seg.actionId)) return;
+          staleWarned.add(seg.actionId);
+          process.stderr.write(msg);
+        }
+      });
       actionDetails = resolved.details;
       preflightCacheHit = resolved.cacheHit;
     } catch (err) {
@@ -5709,7 +5726,7 @@ async function syncModel(api, profile, options) {
         updateModelState(platform, model, { status: "failed", pagesProcessed, lastCursor }),
         (async () => {
           try {
-            const { getBackend: getBackend2 } = await import("./runtime-3NDWRLXL.js");
+            const { getBackend: getBackend2 } = await import("./runtime-ZN7NZILR.js");
             const backend = await getBackend2();
             await Promise.race([
               backend.close(),
@@ -6064,7 +6081,7 @@ async function syncModel(api, profile, options) {
         db.exec(`DROP TABLE IF EXISTS _seen_ids`);
       }
       if (options.toMemory !== false) {
-        const backend = await (await import("./runtime-3NDWRLXL.js")).getBackend();
+        const backend = await (await import("./runtime-ZN7NZILR.js")).getBackend();
         const type = `${platform}/${model}`;
         const existing = await backend.listKeysByType(type);
         const sourcePrefix = `${type}:`;
@@ -6144,7 +6161,7 @@ async function syncModel(api, profile, options) {
     let statusCounts;
     if (options.toMemory !== false) {
       try {
-        const backend = await (await import("./runtime-3NDWRLXL.js")).getBackend();
+        const backend = await (await import("./runtime-ZN7NZILR.js")).getBackend();
         const typeName = `${platform}/${model}`;
         const [active, archived] = await Promise.all([
           backend.count(typeName, { status: "active" }),
@@ -7777,7 +7794,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-ZABEXIXW.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-YMHNH3DT.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -7855,7 +7872,7 @@ async function syncDeleteCommand(platformModel, options) {
 async function maybeAutoMigrateLegacy(platform, models) {
   const dbSize = getDatabaseSize(platform);
   if (!dbSize || dbSize === "0 B") return;
-  const { getBackend: getBackend2 } = await import("./runtime-3NDWRLXL.js");
+  const { getBackend: getBackend2 } = await import("./runtime-ZN7NZILR.js");
   const backend = await getBackend2();
   let memoryHasData = false;
   for (const model of models) {
@@ -7871,7 +7888,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-VV3VOXWJ.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-SJXHOA2G.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -7880,7 +7897,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p7.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-VV3VOXWJ.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-SJXHOA2G.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -7941,7 +7958,7 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
   const state = await readSyncState();
-  const { getBackend: getBackend2 } = await import("./runtime-3NDWRLXL.js");
+  const { getBackend: getBackend2 } = await import("./runtime-ZN7NZILR.js");
   const backend = await getBackend2();
   const syncs = await Promise.all(profiles.map(async (p10) => {
     const modelState = state[p10.platform]?.[p10.model];
@@ -8859,7 +8876,7 @@ async function memDoctorCommand() {
   }
   if (cfg.embedding.provider === "openai") {
     try {
-      const { embed: embed2 } = await import("./embedding-C3E4EAQ7.js");
+      const { embed: embed2 } = await import("./embedding-4T4VYFEI.js");
       const result = await embed2("connectivity check");
       checks.push({
         name: "OpenAI embedding provider reachable",
@@ -9204,6 +9221,9 @@ async function cacheUpdateAllCommand() {
     error("Not configured. Run `one init` first.");
   }
   const api = new OneApi(apiKey, getApiBase());
+  const ac = getAccessControlFromAllSources();
+  const permissions = ac.permissions || "admin";
+  const actionIds = ac.actionIds || ["*"];
   const entries = listCacheEntries();
   if (entries.length === 0) {
     if (isAgentMode()) {
@@ -9226,8 +9246,36 @@ async function cacheUpdateAllCommand() {
         writeCache(e.filePath, newEntry);
         updated++;
       } else {
-        const refreshed = { ...e.entry, cachedAt: (/* @__PURE__ */ new Date()).toISOString() };
-        writeCache(e.filePath, refreshed);
+        const data = e.entry.data;
+        if (data?.platform && data?.query) {
+          const searchType = data.searchType ?? "knowledge";
+          const result = await api.searchActionsWithMeta(
+            data.platform,
+            data.query,
+            searchType,
+            e.entry.etag ?? void 0
+          );
+          if (result.status === 304) {
+            writeCache(e.filePath, { ...e.entry, cachedAt: (/* @__PURE__ */ new Date()).toISOString() });
+          } else {
+            let actions2 = result.data;
+            actions2 = filterByPermissions(actions2, permissions);
+            actions2 = actions2.filter((a) => isActionAllowed(a.systemId, actionIds));
+            const cleaned = actions2.map((a) => ({
+              actionId: a.systemId,
+              title: a.title,
+              method: a.method,
+              path: a.path
+            }));
+            writeCache(e.filePath, makeCacheEntry(
+              e.entry.key,
+              { actions: cleaned, platform: data.platform, query: data.query, searchType },
+              result.etag
+            ));
+          }
+        } else {
+          writeCache(e.filePath, { ...e.entry, cachedAt: (/* @__PURE__ */ new Date()).toISOString() });
+        }
         updated++;
       }
     } catch (err) {
@@ -9313,7 +9361,7 @@ one --agent actions execute <platform> <actionId> <key> -d '{}'  # Execute it
 - \`--mock\` \u2014 Return example response without making an API call (useful for building UI against a response shape)
 - \`--skip-validation\` \u2014 Skip input validation against the action schema
 - \`--output <path>\` \u2014 Save response to a file (for binary downloads like PDFs, images, documents)
-- \`--no-cache\` \u2014 Fetch action details fresh instead of from the local cache (execution itself is never cached)
+- \`--no-cache\` \u2014 Bypass the cached action details and re-fetch them; the fresh details still refresh the cache (execution itself is never cached)
 
 The CLI validates required parameters against the action schema before executing. If you're missing a required path variable, query param, or body field, you'll get a clear error listing what's missing and which flag to use. Pass \`--skip-validation\` to bypass.
 
@@ -9439,7 +9487,7 @@ one --agent actions execute <platform> <actionId> <connectionKey> [options]
 - \`--mock\` \u2014 Return example response without making an API call
 - \`--skip-validation\` \u2014 Skip input validation against the action schema
 - \`--output <path>\` \u2014 Save response to a file (for binary downloads like PDFs, images, documents)
-- \`--no-cache\` \u2014 Fetch action details fresh instead of from the local cache (execution itself is never cached)
+- \`--no-cache\` \u2014 Bypass the cached action details and re-fetch them; the fresh details still refresh the cache (execution itself is never cached)
 
 Execute reuses the action details cached by \`actions knowledge\` (method, path, schema), so in the standard search \u2192 knowledge \u2192 execute flow it makes a single API call \u2014 the action being executed. The live response is never cached. In \`--agent\` mode the response includes \`"_preflight": {"cache": "hit"|"miss"}\` showing whether the lookup was served from disk.
 
@@ -10566,20 +10614,20 @@ function buildWorkflowIdeas(connections) {
 // src/commands/logout.ts
 import fs12 from "fs";
 import * as p9 from "@clack/prompts";
-function formatWhoami(config2, apiKey, pc13) {
+function formatWhoami(config2, apiKey, pc14) {
   const whoami = config2.whoami;
   const env = getEnvFromApiKey(apiKey);
-  const envLabel = env === "test" ? pc13.yellow("test") : pc13.green("live");
+  const envLabel = env === "test" ? pc14.yellow("test") : pc14.green("live");
   const lines = [];
   if (whoami) {
     const contextParts = [];
     if (whoami.organization) contextParts.push(whoami.organization.name);
     if (whoami.project) contextParts.push(whoami.project.name);
     const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-    lines.push(`${pc13.bold(scopeDisplay)} ${pc13.dim("\xB7")} ${envLabel}`);
-    lines.push(`${whoami.user.name} ${pc13.dim(`(${whoami.user.email})`)}`);
+    lines.push(`${pc14.bold(scopeDisplay)} ${pc14.dim("\xB7")} ${envLabel}`);
+    lines.push(`${whoami.user.name} ${pc14.dim(`(${whoami.user.email})`)}`);
   } else {
-    lines.push(`${pc13.dim("Key:")} ${apiKey.slice(0, 8)}... ${pc13.dim("\xB7")} ${envLabel}`);
+    lines.push(`${pc14.dim("Key:")} ${apiKey.slice(0, 8)}... ${pc14.dim("\xB7")} ${envLabel}`);
   }
   return lines;
 }
@@ -10608,7 +10656,7 @@ async function logoutCommand() {
     json({ status: cleared ? "logged_out" : "not_logged_in", message: cleared ? "Credentials cleared." : "No config found." });
     return;
   }
-  const pc13 = (await import("picocolors")).default;
+  const pc14 = (await import("picocolors")).default;
   const globalConfig = readGlobalConfig();
   const projectConfig = readProjectConfig();
   const hasGlobal = globalConfig?.apiKey != null;
@@ -10617,13 +10665,13 @@ async function logoutCommand() {
   if (hasGlobal && hasProject) {
     const infoLines = ["You are logged in with multiple configs.", ""];
     if (projectConfig) {
-      infoLines.push(`${pc13.cyan("Local config:")}`);
-      infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc13));
+      infoLines.push(`${pc14.cyan("Local config:")}`);
+      infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc14));
       infoLines.push("");
     }
     if (globalConfig) {
-      infoLines.push(`${pc13.magenta("Global config:")}`);
-      infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc13));
+      infoLines.push(`${pc14.magenta("Global config:")}`);
+      infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc14));
     }
     p9.note(infoLines.join("\n"));
     const choice = await p9.select({
@@ -10641,14 +10689,14 @@ async function logoutCommand() {
     targetScope = choice;
   } else if (hasProject) {
     const infoLines = ["You are logged in.", ""];
-    infoLines.push(`${pc13.dim("Stored in")} ${pc13.cyan("local config")}`);
-    infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc13));
+    infoLines.push(`${pc14.dim("Stored in")} ${pc14.cyan("local config")}`);
+    infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc14));
     p9.note(infoLines.join("\n"));
     targetScope = "project";
   } else if (hasGlobal) {
     const infoLines = ["You are logged in.", ""];
-    infoLines.push(`${pc13.dim("Stored in")} ${pc13.magenta("global config")}`);
-    infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc13));
+    infoLines.push(`${pc14.dim("Stored in")} ${pc14.magenta("global config")}`);
+    infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc14));
     p9.note(infoLines.join("\n"));
     targetScope = "global";
   } else {
@@ -10682,9 +10730,165 @@ async function logoutCommand() {
   p9.outro("Logged out.");
 }
 
-// src/cli.ts
+// src/lib/analytics.ts
+import { createRequire as createRequire2 } from "module";
+import { randomUUID } from "crypto";
+import pc13 from "picocolors";
 var require3 = createRequire2(import.meta.url);
-var { version } = require3("../package.json");
+var DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
+var DEFAULT_POSTHOG_KEY = "phc_a9ok4w0uxiZcVoSWOISIlin85lHMXQD3vWPaYnuRlRV";
+var inFlight = /* @__PURE__ */ new Set();
+var delivered = /* @__PURE__ */ new Set();
+function posthogHost() {
+  return process.env.ONE_POSTHOG_HOST || DEFAULT_POSTHOG_HOST;
+}
+function posthogKey() {
+  return process.env.ONE_POSTHOG_KEY || DEFAULT_POSTHOG_KEY;
+}
+function cliVersion() {
+  try {
+    return require3("../package.json").version;
+  } catch {
+    return "unknown";
+  }
+}
+function envName() {
+  const key = getApiKey();
+  return key ? getEnvFromApiKey(key) : "live";
+}
+function isOn(value) {
+  return value === "1" || value === "true";
+}
+function debugLog(message) {
+  if (isOn(process.env.ONE_ANALYTICS_DEBUG)) {
+    process.stderr.write(`[analytics] ${message}
+`);
+  }
+}
+function isTelemetryDisabled() {
+  if (isOn(process.env.ONE_NO_TELEMETRY) || isOn(process.env.ONE_DISABLE_TELEMETRY)) return true;
+  if (isOn(process.env.DO_NOT_TRACK)) return true;
+  if (isOn(process.env.CI)) return true;
+  if (readConfig()?.telemetry === "off") return true;
+  return false;
+}
+function distinctId() {
+  return getWhoAmI()?.user?.id ?? getDeviceId();
+}
+function baseProperties() {
+  return {
+    $lib: "one-cli",
+    cli_version: cliVersion(),
+    agent_mode: isAgentMode(),
+    env: envName(),
+    os: process.platform,
+    arch: process.arch,
+    node_version: process.versions.node
+  };
+}
+function personSet() {
+  const whoami = getWhoAmI();
+  if (!whoami?.user) return void 0;
+  const set = {};
+  if (whoami.user.email) set.email = whoami.user.email;
+  if (whoami.user.name) set.name = whoami.user.name;
+  if (whoami.organization?.id) set.organization_id = whoami.organization.id;
+  return Object.keys(set).length ? set : void 0;
+}
+function send(item) {
+  const insertId = item.properties.$insert_id;
+  const controller = new AbortController();
+  inFlight.add(controller);
+  void (async () => {
+    try {
+      const res = await fetch(`${posthogHost()}/i/v0/e/`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          api_key: posthogKey(),
+          event: item.event,
+          distinct_id: item.distinct_id,
+          properties: item.properties,
+          timestamp: item.timestamp
+        }),
+        signal: controller.signal
+      });
+      if (res.ok && insertId) delivered.add(insertId);
+      debugLog(`"${item.event}" -> HTTP ${res.status}${res.ok ? "" : " (retry next run)"}`);
+    } catch (err) {
+      debugLog(`"${item.event}" not sent: ${err instanceof Error ? err.message : String(err)} (retry next run)`);
+    } finally {
+      inFlight.delete(controller);
+    }
+  })();
+}
+function capture(event, properties = {}) {
+  if (isTelemetryDisabled()) {
+    debugLog(`disabled \u2014 skipping "${event}"`);
+    return;
+  }
+  const props = { ...baseProperties(), ...properties, $insert_id: randomUUID() };
+  const set = personSet();
+  if (set) props.$set = set;
+  const item = {
+    event,
+    distinct_id: distinctId(),
+    properties: props,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  appendAnalyticsQueue(JSON.stringify(item));
+}
+function captureCommand(command) {
+  capture("CLI Command Run", { command: commandPath(command) });
+}
+function commandPath(command) {
+  const parts = [];
+  let current = command;
+  while (current && current.name() && current.name() !== "one") {
+    parts.unshift(current.name());
+    current = current.parent;
+  }
+  return parts.join(" ") || command.name();
+}
+function drainQueue() {
+  if (isTelemetryDisabled()) {
+    writeAnalyticsQueue([]);
+    return;
+  }
+  for (const line of readAnalyticsQueue()) {
+    try {
+      const item = JSON.parse(line);
+      if (item?.properties?.$insert_id) send(item);
+    } catch {
+    }
+  }
+}
+function flush() {
+  for (const controller of inFlight) controller.abort();
+  const remaining = readAnalyticsQueue().filter((line) => {
+    try {
+      const id = JSON.parse(line).properties?.$insert_id;
+      return id ? !delivered.has(id) : false;
+    } catch {
+      return false;
+    }
+  });
+  writeAnalyticsQueue(remaining);
+}
+function maybeShowTelemetryNotice() {
+  if (isTelemetryDisabled() || isAgentMode()) return;
+  if (telemetryNoticeShown()) return;
+  markTelemetryNoticeShown();
+  process.stderr.write(
+    pc13.dim(
+      "One CLI collects usage analytics (which commands run, linked to your One account) to improve the product.\nNo arguments, inputs, or secrets are ever collected. Opt out anytime with ONE_NO_TELEMETRY=1.\n"
+    )
+  );
+}
+
+// src/cli.ts
+var require4 = createRequire3(import.meta.url);
+var { version } = require4("../package.json");
 var program = new Command();
 program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 400+ platforms through one interface.
 
@@ -10760,11 +10964,14 @@ program.name("one").option("--agent", "Machine-readable JSON output (no colors,
   Platform names are lowercase; multi-word names use dashes (e.g. hubspot, ship-station, google-calendar).
   Run 'one platforms' to browse all 400+ available platforms.`).version(version);
 var updateCheckPromise;
-program.hook("preAction", (thisCommand) => {
+program.hook("preAction", (thisCommand, actionCommand) => {
   const opts = program.opts();
   if (opts.agent) {
     setAgentMode(true);
   }
+  maybeShowTelemetryNotice();
+  captureCommand(actionCommand);
+  drainQueue();
   const commandName = thisCommand.args?.[0];
   if (commandName !== "update") {
     updateCheckPromise = checkLatestVersionCached();
@@ -10778,6 +10985,7 @@ program.hook("preAction", (thisCommand) => {
 });
 program.hook("postAction", async () => {
   await closeBackendIfCached();
+  flush();
   if (!updateCheckPromise) return;
   const info = await updateCheckPromise;
   if (!info) return;
@@ -10961,13 +11169,13 @@ program.command("platforms").alias("p").description("List available platforms").
   await platformsCommand(options);
 });
 var actions = program.command("actions").alias("a").description("Search, explore, and execute platform actions (workflow: search \u2192 knowledge \u2192 execute)");
-actions.command("search <platform> <query>").description('Search for actions on a platform (e.g. one actions search gmail "send email")').option("-t, --type <type>", "execute (to run it) or knowledge (to learn about it). Default: knowledge").option("--no-cache", "Skip cache, fetch fresh from API").action(async (platform, query, options) => {
+actions.command("search <platform> <query>").description('Search for actions on a platform (e.g. one actions search gmail "send email")').option("-t, --type <type>", "execute (to run it) or knowledge (to learn about it). Default: knowledge").option("--no-cache", "Bypass the cache and re-fetch from the API (the fresh response still refreshes the cache)").action(async (platform, query, options) => {
   await actionsSearchCommand(platform, query, options);
 });
-actions.command("knowledge <platform> <actionId>").alias("k").description("Get full docs for an action \u2014 MUST call before execute to know required params").option("--no-cache", "Skip cache, fetch fresh from API").option("--cache-status", "Print cache metadata without fetching").action(async (platform, actionId, options) => {
+actions.command("knowledge <platform> <actionId>").alias("k").description("Get full docs for an action \u2014 MUST call before execute to know required params").option("--no-cache", "Bypass the cache and re-fetch from the API (the fresh response still refreshes the cache)").option("--cache-status", "Print cache metadata without fetching").action(async (platform, actionId, options) => {
   await actionsKnowledgeCommand(platform, actionId, options);
 });
-actions.command("execute [platform] [actionId] [connectionKey]").alias("x").allowUnknownOption(true).allowExcessArguments(true).description("Execute an action (or multiple with --parallel, separated by --)").option("-d, --data <json>", "Request body as JSON").option("--path-vars <json>", "Path variables as JSON").option("--query-params <json>", "Query parameters as JSON").option("--headers <json>", "Additional headers as JSON").option("--form-data", "Send as multipart/form-data").option("--form-url-encoded", "Send as application/x-www-form-urlencoded").option("--dry-run", "Show request that would be sent without executing").option("--mock", "Return example response without making an API call").option("--skip-validation", "Skip input validation against the action schema").option("--no-cache", "Fetch action details fresh instead of using the local cache (execution itself is never cached)").option("--output <path>", "Save binary response to a file (for non-JSON responses like file downloads)").option("--parallel", "Execute multiple actions concurrently (separate actions with --)").option("--max-concurrency <n>", "Max concurrent actions when using --parallel (default: 5)", "5").action(async (platform, actionId, connectionKey, options) => {
+actions.command("execute [platform] [actionId] [connectionKey]").alias("x").allowUnknownOption(true).allowExcessArguments(true).description("Execute an action (or multiple with --parallel, separated by --)").option("-d, --data <json>", "Request body as JSON").option("--path-vars <json>", "Path variables as JSON").option("--query-params <json>", "Query parameters as JSON").option("--headers <json>", "Additional headers as JSON").option("--form-data", "Send as multipart/form-data").option("--form-url-encoded", "Send as application/x-www-form-urlencoded").option("--dry-run", "Show request that would be sent without executing").option("--mock", "Return example response without making an API call").option("--skip-validation", "Skip input validation against the action schema").option("--no-cache", "Bypass the cached action details and re-fetch them (the fresh details still refresh the cache; execution itself is never cached)").option("--output <path>", "Save binary response to a file (for non-JSON responses like file downloads)").option("--parallel", "Execute multiple actions concurrently (separate actions with --)").option("--max-concurrency <n>", "Max concurrent actions when using --parallel (default: 5)", "5").action(async (platform, actionId, connectionKey, options) => {
   if (options.parallel) {
     await actionsExecuteParallelCommand();
     return;
@@ -11096,21 +11304,21 @@ program.command("whoami").description("Show the user, organization, and project
     });
     return;
   }
-  const pc13 = (await import("picocolors")).default;
+  const pc14 = (await import("picocolors")).default;
   const contextParts = [];
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc13.yellow("test") : pc13.green("live");
-  const configLabel = configScope === "project" ? pc13.cyan("project config") : pc13.magenta("global config");
+  const envLabel = env === "test" ? pc14.yellow("test") : pc14.green("live");
+  const configLabel = configScope === "project" ? pc14.cyan("project config") : pc14.magenta("global config");
   console.log();
-  console.log(`  ${pc13.bold(scopeDisplay)} ${pc13.dim("\xB7")} ${envLabel}`);
-  console.log(`  ${whoami.user.name} ${pc13.dim(`(${whoami.user.email})`)}`);
-  if (whoami.organization) console.log(`  ${pc13.dim("Org:")} ${whoami.organization.name} ${pc13.dim(`(${whoami.organization.id})`)}`);
-  if (whoami.project) console.log(`  ${pc13.dim("Project:")} ${whoami.project.name} ${pc13.dim(`(${whoami.project.id})`)}`);
+  console.log(`  ${pc14.bold(scopeDisplay)} ${pc14.dim("\xB7")} ${envLabel}`);
+  console.log(`  ${whoami.user.name} ${pc14.dim(`(${whoami.user.email})`)}`);
+  if (whoami.organization) console.log(`  ${pc14.dim("Org:")} ${whoami.organization.name} ${pc14.dim(`(${whoami.organization.id})`)}`);
+  if (whoami.project) console.log(`  ${pc14.dim("Project:")} ${whoami.project.name} ${pc14.dim(`(${whoami.project.id})`)}`);
   console.log();
-  console.log(`  ${pc13.dim("Using")} ${configLabel}`);
-  console.log(`  ${pc13.dim("API:")} ${apiBase}`);
+  console.log(`  ${pc14.dim("Using")} ${configLabel}`);
+  console.log(`  ${pc14.dim("API:")} ${apiBase}`);
   console.log();
 });
 program.command("add [platform]").description("Shortcut for: connection add").action(async (platform) => {

package/dist/{migrate-VV3VOXWJ.js → migrate-SJXHOA2G.js}

@@ -3,12 +3,12 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-Z4HKASJT.js";
+} from "./chunk-MQU7UK5J.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-KH4ERRJ5.js";
-import "./chunk-TGWQUBKA.js";
-import "./chunk-77564KWS.js";
-import "./chunk-TVIZC7AC.js";
+import "./chunk-56QOOA5V.js";
+import "./chunk-GIMKPA2J.js";
+import "./chunk-BKD7A42U.js";
+import "./chunk-OEN5DNG7.js";
 export {
   buildIdentityMap,
   dotPathToJsonbExpr,

package/dist/{runtime-3NDWRLXL.js → runtime-ZN7NZILR.js}

@@ -4,9 +4,9 @@ import {
   getBackend,
   resetBackendSingleton,
   upsertRecord
-} from "./chunk-TGWQUBKA.js";
-import "./chunk-77564KWS.js";
-import "./chunk-TVIZC7AC.js";
+} from "./chunk-GIMKPA2J.js";
+import "./chunk-BKD7A42U.js";
+import "./chunk-OEN5DNG7.js";
 export {
   addRecord,
   closeBackendIfCached,

package/dist/sql-YMHNH3DT.js

@@ -0,0 +1,12 @@
+import {
+  memSqlCommand,
+  syncSqlCommand
+} from "./chunk-EDVE3BQZ.js";
+import "./chunk-56QOOA5V.js";
+import "./chunk-GIMKPA2J.js";
+import "./chunk-BKD7A42U.js";
+import "./chunk-OEN5DNG7.js";
+export {
+  memSqlCommand,
+  syncSqlCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.45.0",
+  "version": "1.46.0",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/skills/one/SKILL.md

@@ -90,7 +90,7 @@ Options:
 - `--mock` — Return example response without making an API call (useful for building UI)
 - `--skip-validation` — Skip input validation against the action schema
 - `--output <path>` — Save response to a file (for binary downloads like PDFs, images, documents)
-- `--no-cache` — Fetch action details fresh instead of from the local cache (execution itself is never cached)
+- `--no-cache` — Bypass the cached action details and re-fetch them; the fresh details still refresh the cache (execution itself is never cached)
 
 The CLI validates required parameters before executing. Missing params return a structured error with the flag name, parameter name, and description. Pass `--skip-validation` to bypass.
 

package/dist/sql-ZABEXIXW.js

@@ -1,12 +0,0 @@
-import {
-  memSqlCommand,
-  syncSqlCommand
-} from "./chunk-TLRJMJGU.js";
-import "./chunk-KH4ERRJ5.js";
-import "./chunk-TGWQUBKA.js";
-import "./chunk-77564KWS.js";
-import "./chunk-TVIZC7AC.js";
-export {
-  memSqlCommand,
-  syncSqlCommand
-};