@withone/cli 1.46.0 → 1.47.1

package/README.md

@@ -488,6 +488,9 @@ Press Ctrl+C during execution to pause - the run can be resumed later with `one
 | `--skip-validation` | Skip input validation against action schemas |
 | `--allow-bash` | Allow bash step execution (disabled by default for security) |
 | `-v, --verbose` | Show full request/response for each step |
+| `--output-file <path>` | Stream the full result to a file instead of stdout — for large results that would otherwise be truncated or exceed the JSON string-size limit. stdout (and `--agent` output) then carries an `outputFile` pointer instead of inline `steps`. |
+
+Step-level `if`/`unless` conditions (and `while`/`condition` steps) are null-safe: a condition that references a skipped or not-yet-run step's output (e.g. `$.steps.maybeSkipped.output.x`) evaluates to `false` rather than crashing the run.
 
 ### `one flow list`
 
@@ -566,7 +569,7 @@ Run `one update` manually whenever you want to upgrade.
 
 ### Telemetry
 
-The CLI collects **usage analytics** — which command was run, the CLI version, OS/arch, and whether it ran in `--agent` mode — to help us prioritize improvements. Events are linked to your One account (user id, email, name, org) so they line up with your dashboard activity. **Command arguments, inputs, connection data, and secrets are never collected** (only the command name, e.g. `actions execute`). A one-time notice is shown on first run. Events are queued locally and sent in the background, so telemetry never slows down or blocks a command.
+The CLI collects **usage analytics** — which command was run, the CLI version, OS/arch, and whether it ran in `--agent` mode — to help us prioritize improvements. Events are linked to your One account (user id, email, name, org) so they line up with your dashboard activity. **Command arguments, inputs, connection data, and secrets are never collected** (only the command name, e.g. `actions execute`). A one-time notice is shown on first run. Commands are aggregated locally and sent as periodic, batched roll-ups in the background, so telemetry never slows down or blocks a command (and stays lightweight even under heavy automation).
 
 To opt out, set any of:
 

package/dist/{chunk-56QOOA5V.js → chunk-HS5AHQ4V.js}

@@ -1,10 +1,10 @@
 import {
   getMemoryConfigOrDefault
-} from "./chunk-BKD7A42U.js";
+} from "./chunk-TXTRXV74.js";
 import {
   getOpenAiApiKey,
   readConfig
-} from "./chunk-OEN5DNG7.js";
+} from "./chunk-K6MWE2ZH.js";
 
 // src/lib/output.ts
 import * as p from "@clack/prompts";
@@ -15,6 +15,14 @@ function setAgentMode(value) {
 function isAgentMode() {
   return _agentMode || process.env.ONE_AGENT === "1";
 }
+function silenceWarningsInAgentMode() {
+  const agent = process.argv.includes("--agent") || process.env.ONE_AGENT === "1";
+  if (!agent) return;
+  process.env.NODE_NO_WARNINGS = "1";
+  process.removeAllListeners("warning");
+  process.emitWarning = (() => {
+  });
+}
 function createSpinner() {
   if (isAgentMode()) {
     return { start() {
@@ -141,6 +149,7 @@ function semanticSearchUpgradeLine(opts = {}) {
 export {
   setAgentMode,
   isAgentMode,
+  silenceWarningsInAgentMode,
   createSpinner,
   intro2 as intro,
   outro2 as outro,

package/dist/{chunk-GDKMOLZ5.js → chunk-IFTHWFLL.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-44CV5IMX.js";
 import {
   getCacheTtl
-} from "./chunk-OEN5DNG7.js";
+} from "./chunk-K6MWE2ZH.js";
 
 // src/lib/flow-runner.ts
 import fs3 from "fs";
@@ -902,6 +902,14 @@ function evaluateExpression(expr, context) {
   const fn = new Function("$", `return (${expr})`);
   return fn(context);
 }
+function evaluateCondition(expr, context) {
+  try {
+    return Boolean(evaluateExpression(expr, context));
+  } catch (err) {
+    if (err instanceof TypeError) return false;
+    throw err;
+  }
+}
 var ALLOWED_MODULES = {
   buffer: () => import("buffer"),
   crypto: () => import("crypto"),
@@ -1106,7 +1114,7 @@ async function executeCodeModule(stepId, modulePath, context, options) {
 }
 async function executeConditionStep(step, context, api, permissions, allowedActionIds, options, flowStack) {
   const condition = step.condition;
-  const result = evaluateExpression(condition.expression, context);
+  const result = evaluateCondition(condition.expression, context);
   const branch = result ? condition.then : condition.else || [];
   const branchResults = await executeSteps(branch, context, api, permissions, allowedActionIds, options, void 0, flowStack);
   return {
@@ -1246,7 +1254,7 @@ async function executeWhileStep(step, context, api, permissions, allowedActionId
   };
   for (let iteration = 0; iteration < maxIterations; iteration++) {
     if (iteration > 0) {
-      const conditionResult = evaluateExpression(config.condition, context);
+      const conditionResult = evaluateCondition(config.condition, context);
       if (!conditionResult) break;
     }
     await executeSteps(config.steps, context, api, permissions, allowedActionIds, options, void 0, flowStack);
@@ -1271,7 +1279,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-VIKPVLBL.js");
+  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-7YOPMXWO.js");
   const { flow: subFlow, rootDir: subRootDir } = loadFlowWithMeta2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,
@@ -1468,7 +1476,7 @@ function checkRequires(step, context) {
 }
 async function executeSingleStep(step, context, api, permissions, allowedActionIds, options, flowStack = []) {
   if (step.if) {
-    const condResult = evaluateExpression(step.if, context);
+    const condResult = evaluateCondition(step.if, context);
     if (!condResult) {
       const result = { status: "skipped" };
       context.steps[step.id] = result;
@@ -1476,7 +1484,7 @@ async function executeSingleStep(step, context, api, permissions, allowedActionI
     }
   }
   if (step.unless) {
-    const condResult = evaluateExpression(step.unless, context);
+    const condResult = evaluateCondition(step.unless, context);
     if (condResult) {
       const result = { status: "skipped" };
       context.steps[step.id] = result;

package/dist/{chunk-OEN5DNG7.js → chunk-K6MWE2ZH.js}

@@ -303,6 +303,54 @@ function writeAnalyticsQueue(lines) {
   } catch {
   }
 }
+function usageLogFile() {
+  return path.join(configDir(), ".cli-usage-log.jsonl");
+}
+function usageStateFile() {
+  return path.join(configDir(), ".cli-usage-state.json");
+}
+var USAGE_LOG_MAX = 5e3;
+function appendUsageLog(line) {
+  try {
+    if (!fs.existsSync(configDir())) fs.mkdirSync(configDir(), { mode: 448 });
+    fs.appendFileSync(usageLogFile(), `${line}
+`, { mode: 384 });
+  } catch {
+  }
+}
+function readUsageLog() {
+  try {
+    return fs.readFileSync(usageLogFile(), "utf-8").split("\n").filter(Boolean).slice(-USAGE_LOG_MAX);
+  } catch {
+    return [];
+  }
+}
+function writeUsageLog(lines) {
+  try {
+    if (lines.length === 0) {
+      fs.rmSync(usageLogFile(), { force: true });
+      return;
+    }
+    if (!fs.existsSync(configDir())) fs.mkdirSync(configDir(), { mode: 448 });
+    fs.writeFileSync(usageLogFile(), `${lines.slice(-USAGE_LOG_MAX).join("\n")}
+`, { mode: 384 });
+  } catch {
+  }
+}
+function readUsageState() {
+  try {
+    return JSON.parse(fs.readFileSync(usageStateFile(), "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function writeUsageState(state) {
+  try {
+    if (!fs.existsSync(configDir())) fs.mkdirSync(configDir(), { mode: 448 });
+    fs.writeFileSync(usageStateFile(), JSON.stringify(state), { mode: 384 });
+  } catch {
+  }
+}
 
 export {
   getProjectRoot,
@@ -334,5 +382,10 @@ export {
   markTelemetryNoticeShown,
   appendAnalyticsQueue,
   readAnalyticsQueue,
-  writeAnalyticsQueue
+  writeAnalyticsQueue,
+  appendUsageLog,
+  readUsageLog,
+  writeUsageLog,
+  readUsageState,
+  writeUsageState
 };

package/dist/{chunk-GIMKPA2J.js → chunk-OADHUAEU.js}

@@ -5,10 +5,10 @@ import {
   getMemoryConfig,
   getMemoryConfigOrDefault,
   updateMemoryConfig
-} from "./chunk-BKD7A42U.js";
+} from "./chunk-TXTRXV74.js";
 import {
   getOpenAiApiKey
-} from "./chunk-OEN5DNG7.js";
+} from "./chunk-K6MWE2ZH.js";
 
 // src/lib/memory/schema.ts
 var SCHEMA_VERSION = "2.1.0";

package/dist/{chunk-MQU7UK5J.js → chunk-PLMFRFTT.js}

@@ -6,11 +6,11 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-56QOOA5V.js";
+} from "./chunk-HS5AHQ4V.js";
 import {
   getBackend,
   upsertRecord
-} from "./chunk-GIMKPA2J.js";
+} from "./chunk-OADHUAEU.js";
 
 // src/commands/mem/migrate.ts
 import fs4 from "fs";

package/dist/{chunk-EDVE3BQZ.js → chunk-QV3Y5N5G.js}

@@ -3,10 +3,10 @@ import {
   isAgentMode,
   json,
   requireMemoryInit
-} from "./chunk-56QOOA5V.js";
+} from "./chunk-HS5AHQ4V.js";
 import {
   getBackend
-} from "./chunk-GIMKPA2J.js";
+} from "./chunk-OADHUAEU.js";
 
 // src/commands/mem/sql.ts
 async function memSqlCommand(sql) {

package/dist/{chunk-BKD7A42U.js → chunk-TXTRXV74.js}

@@ -3,7 +3,7 @@ import {
   readConfig,
   setOpenAiApiKey,
   writeConfig
-} from "./chunk-OEN5DNG7.js";
+} from "./chunk-K6MWE2ZH.js";
 
 // src/lib/memory/config.ts
 var DEFAULT_MEMORY_CONFIG = {

package/dist/{embedding-4T4VYFEI.js → embedding-NVFDR5PK.js}

@@ -2,8 +2,8 @@ import {
   defaultSearchableText,
   embed,
   embedBatch
-} from "./chunk-BKD7A42U.js";
-import "./chunk-OEN5DNG7.js";
+} from "./chunk-TXTRXV74.js";
+import "./chunk-K6MWE2ZH.js";
 export {
   defaultSearchableText,
   embed,

package/dist/{flow-runner-VIKPVLBL.js → flow-runner-7YOPMXWO.js}

@@ -11,9 +11,9 @@ import {
   saveFlow,
   summarizeFlowInputs,
   walkSteps
-} from "./chunk-GDKMOLZ5.js";
+} from "./chunk-IFTHWFLL.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-OEN5DNG7.js";
+import "./chunk-K6MWE2ZH.js";
 export {
   FlowRunner,
   collectStepTypes,

package/dist/index.js

@@ -30,10 +30,10 @@ import {
   searchCachePath,
   validateActionInput,
   writeCache
-} from "./chunk-GDKMOLZ5.js";
+} from "./chunk-IFTHWFLL.js";
 import {
   memSqlCommand
-} from "./chunk-EDVE3BQZ.js";
+} from "./chunk-QV3Y5N5G.js";
 import {
   countRecords,
   deleteDatabase,
@@ -58,7 +58,7 @@ import {
   upsertRecords,
   writeDraftProfile,
   writeProfile
-} from "./chunk-MQU7UK5J.js";
+} from "./chunk-PLMFRFTT.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -80,8 +80,9 @@ import {
   requireMemoryInit,
   semanticSearchUpgradeHint,
   semanticSearchUpgradeLine,
-  setAgentMode
-} from "./chunk-56QOOA5V.js";
+  setAgentMode,
+  silenceWarningsInAgentMode
+} from "./chunk-HS5AHQ4V.js";
 import {
   SCHEMA_VERSION,
   addRecord,
@@ -91,7 +92,7 @@ import {
   listBackendPlugins,
   loadBackendFromConfig,
   upsertRecord
-} from "./chunk-GIMKPA2J.js";
+} from "./chunk-OADHUAEU.js";
 import {
   DEFAULT_MEMORY_CONFIG,
   defaultSearchableText,
@@ -101,9 +102,10 @@ import {
   memoryConfigExists,
   setOpenAiApiKey,
   updateMemoryConfig
-} from "./chunk-BKD7A42U.js";
+} from "./chunk-TXTRXV74.js";
 import {
   appendAnalyticsQueue,
+  appendUsageLog,
   configExists,
   ensureWhoAmI,
   getAccessControl,
@@ -124,14 +126,18 @@ import {
   readConfig,
   readGlobalConfig,
   readProjectConfig,
+  readUsageLog,
+  readUsageState,
   resolveConfig,
   telemetryNoticeShown,
   updateAccessControl,
   updateApiBase,
   updateWhoAmI,
   writeAnalyticsQueue,
-  writeConfig
-} from "./chunk-OEN5DNG7.js";
+  writeConfig,
+  writeUsageLog,
+  writeUsageState
+} from "./chunk-K6MWE2ZH.js";
 
 // src/cli.ts
 import { createRequire as createRequire3 } from "module";
@@ -3648,6 +3654,26 @@ function validateCodeModules(flow2, rootDir) {
 // src/commands/flow.ts
 import fs5 from "fs";
 import path5 from "path";
+async function writeFlowResultFile(filePath, meta, steps) {
+  const abs = path5.resolve(filePath);
+  const ws = fs5.createWriteStream(abs);
+  const done = new Promise((resolve, reject) => {
+    ws.on("finish", () => resolve());
+    ws.on("error", reject);
+  });
+  ws.write(
+    `{"event":"workflow:result","runId":${JSON.stringify(meta.runId)},"logFile":${JSON.stringify(meta.logFile)},"status":${JSON.stringify(meta.status)},"steps":{`
+  );
+  let first = true;
+  for (const [id, result] of Object.entries(steps)) {
+    ws.write(`${first ? "" : ","}${JSON.stringify(id)}:${JSON.stringify(result)}`);
+    first = false;
+  }
+  ws.write("}}");
+  ws.end();
+  await done;
+  return abs;
+}
 function getConfig2() {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -3848,16 +3874,16 @@ ${pc7.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
     if (!options.verbose && !isAgentMode()) {
       execSpinner.stop("Workflow completed");
     }
+    const resultFile = options.outputFile ? await writeFlowResultFile(options.outputFile, { runId, logFile: logPath, status: "success" }, context.steps) : void 0;
     if (isAgentMode()) {
-      json({
-        event: "workflow:result",
-        runId,
-        logFile: logPath,
-        status: "success",
-        steps: context.steps
-      });
+      json(
+        resultFile ? { event: "workflow:result", runId, logFile: logPath, status: "success", outputFile: resultFile } : { event: "workflow:result", runId, logFile: logPath, status: "success", steps: context.steps }
+      );
       return;
     }
+    if (resultFile) {
+      note(`Full result written to ${resultFile}`, "Output");
+    }
     const stepEntries = Object.entries(context.steps);
     const succeeded = stepEntries.filter(([, r]) => r.status === "success").length;
     const failed = stepEntries.filter(([, r]) => r.status === "failed").length;
@@ -5726,7 +5752,7 @@ async function syncModel(api, profile, options) {
         updateModelState(platform, model, { status: "failed", pagesProcessed, lastCursor }),
         (async () => {
           try {
-            const { getBackend: getBackend2 } = await import("./runtime-ZN7NZILR.js");
+            const { getBackend: getBackend2 } = await import("./runtime-B5GCQ34P.js");
             const backend = await getBackend2();
             await Promise.race([
               backend.close(),
@@ -6081,7 +6107,7 @@ async function syncModel(api, profile, options) {
         db.exec(`DROP TABLE IF EXISTS _seen_ids`);
       }
       if (options.toMemory !== false) {
-        const backend = await (await import("./runtime-ZN7NZILR.js")).getBackend();
+        const backend = await (await import("./runtime-B5GCQ34P.js")).getBackend();
         const type = `${platform}/${model}`;
         const existing = await backend.listKeysByType(type);
         const sourcePrefix = `${type}:`;
@@ -6161,7 +6187,7 @@ async function syncModel(api, profile, options) {
     let statusCounts;
     if (options.toMemory !== false) {
       try {
-        const backend = await (await import("./runtime-ZN7NZILR.js")).getBackend();
+        const backend = await (await import("./runtime-B5GCQ34P.js")).getBackend();
         const typeName = `${platform}/${model}`;
         const [active, archived] = await Promise.all([
           backend.count(typeName, { status: "active" }),
@@ -7794,7 +7820,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-YMHNH3DT.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-W3ZUOUNR.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -7872,7 +7898,7 @@ async function syncDeleteCommand(platformModel, options) {
 async function maybeAutoMigrateLegacy(platform, models) {
   const dbSize = getDatabaseSize(platform);
   if (!dbSize || dbSize === "0 B") return;
-  const { getBackend: getBackend2 } = await import("./runtime-ZN7NZILR.js");
+  const { getBackend: getBackend2 } = await import("./runtime-B5GCQ34P.js");
   const backend = await getBackend2();
   let memoryHasData = false;
   for (const model of models) {
@@ -7888,7 +7914,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-SJXHOA2G.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-UDEANXEZ.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -7897,7 +7923,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p7.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-SJXHOA2G.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-UDEANXEZ.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -7958,7 +7984,7 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
   const state = await readSyncState();
-  const { getBackend: getBackend2 } = await import("./runtime-ZN7NZILR.js");
+  const { getBackend: getBackend2 } = await import("./runtime-B5GCQ34P.js");
   const backend = await getBackend2();
   const syncs = await Promise.all(profiles.map(async (p10) => {
     const modelState = state[p10.platform]?.[p10.model];
@@ -8876,7 +8902,7 @@ async function memDoctorCommand() {
   }
   if (cfg.embedding.provider === "openai") {
     try {
-      const { embed: embed2 } = await import("./embedding-4T4VYFEI.js");
+      const { embed: embed2 } = await import("./embedding-NVFDR5PK.js");
       const result = await embed2("connectivity check");
       checks.push({
         name: "OpenAI embedding provider reachable",
@@ -9386,6 +9412,8 @@ one --agent flow list                                 # List all workflows
 - AI analysis via bash steps: \`claude --print\` with \`parseJson: true\`
 - Use \`--allow-bash\` to enable bash steps, \`--mock\` for dry-run with realistic mock responses (uses example data from action schemas)
 - Use \`--skip-validation\` to bypass input validation on action steps
+- Use \`--output-file <path>\` to stream the full result to a file instead of stdout \u2014 for large results that would otherwise be truncated or hit the JSON string-size limit; stdout (and \`--agent\` output) then carries an \`outputFile\` pointer instead of inline \`steps\`
+- Step-level \`if\`/\`unless\` (and \`while\`/\`condition\` steps) are null-safe: a condition referencing a skipped or not-yet-run step's output (e.g. \`$.steps.maybeSkipped.output.x\`) evaluates to \`false\` instead of crashing the flow
 
 ### 3. Relay \u2014 Webhook event forwarding between platforms
 Receive webhooks from platforms (Stripe, GitHub, Airtable, Attio, Google Calendar) and forward event data to any connected platform using passthrough actions with Handlebars templates. No middleware, no code.
@@ -10822,24 +10850,100 @@ function send(item) {
     }
   })();
 }
-function capture(event, properties = {}) {
+function capture(event, properties = {}, opts = {}) {
   if (isTelemetryDisabled()) {
     debugLog(`disabled \u2014 skipping "${event}"`);
     return;
   }
+  const did = opts.distinctId ?? distinctId();
   const props = { ...baseProperties(), ...properties, $insert_id: randomUUID() };
-  const set = personSet();
-  if (set) props.$set = set;
+  if (did === distinctId()) {
+    const set = personSet();
+    if (set) props.$set = set;
+  }
   const item = {
     event,
-    distinct_id: distinctId(),
+    distinct_id: did,
     properties: props,
-    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    timestamp: opts.timestamp ?? (/* @__PURE__ */ new Date()).toISOString()
   };
   appendAnalyticsQueue(JSON.stringify(item));
 }
-function captureCommand(command) {
-  capture("CLI Command Run", { command: commandPath(command) });
+var ROLLUP_WINDOW_MS = 5 * 60 * 1e3;
+var ROLLUP_MAX_BATCH = 500;
+function utcDay(ts) {
+  return new Date(ts).toISOString().slice(0, 10);
+}
+function recordCommand(command) {
+  if (isTelemetryDisabled()) {
+    writeUsageLog([]);
+    return;
+  }
+  const did = distinctId();
+  const entry = { ts: Date.now(), command: commandPath(command), agent: isAgentMode(), did };
+  appendUsageLog(JSON.stringify(entry));
+  const today = utcDay(entry.ts);
+  const state = readUsageState();
+  const firstTouch = state.lastDay !== today || state.distinctId !== did;
+  flushUsageRollups({ force: firstTouch });
+  if (firstTouch) writeUsageState({ lastDay: today, distinctId: did });
+}
+function flushUsageRollups(opts = {}) {
+  if (isTelemetryDisabled()) {
+    writeUsageLog([]);
+    return;
+  }
+  const entries = [];
+  for (const line of readUsageLog()) {
+    try {
+      const e = JSON.parse(line);
+      if (e && typeof e.ts === "number" && typeof e.command === "string" && typeof e.did === "string") {
+        entries.push(e);
+      }
+    } catch {
+    }
+  }
+  if (entries.length === 0) {
+    writeUsageLog([]);
+    return;
+  }
+  const currentDid = entries[entries.length - 1].did;
+  const now = Date.now();
+  const groups = /* @__PURE__ */ new Map();
+  for (const e of entries) {
+    const g = groups.get(e.did);
+    if (g) g.push(e);
+    else groups.set(e.did, [e]);
+  }
+  const kept = [];
+  for (const [did, group] of groups) {
+    const due = opts.force === true || did !== currentDid || // a superseded login's batch — flush it now
+    group.length >= ROLLUP_MAX_BATCH || now - group[0].ts >= ROLLUP_WINDOW_MS;
+    if (due) emitRollup(did, group);
+    else kept.push(...group);
+  }
+  writeUsageLog(kept.map((e) => JSON.stringify(e)));
+}
+function emitRollup(did, group) {
+  const byCommand = {};
+  let agentCount = 0;
+  for (const e of group) {
+    byCommand[e.command] = (byCommand[e.command] ?? 0) + 1;
+    if (e.agent) agentCount += 1;
+  }
+  capture(
+    "CLI Usage Rollup",
+    {
+      command_count: group.length,
+      by_command: byCommand,
+      agent_count: agentCount,
+      human_count: group.length - agentCount,
+      window_start: new Date(group[0].ts).toISOString(),
+      window_end: new Date(group[group.length - 1].ts).toISOString()
+    },
+    { distinctId: did, timestamp: new Date(group[group.length - 1].ts).toISOString() }
+  );
+  debugLog(`rollup \u2014 ${group.length} command(s) for ${did}`);
 }
 function commandPath(command) {
   const parts = [];
@@ -10887,6 +10991,7 @@ function maybeShowTelemetryNotice() {
 }
 
 // src/cli.ts
+silenceWarningsInAgentMode();
 var require4 = createRequire3(import.meta.url);
 var { version } = require4("../package.json");
 var program = new Command();
@@ -10970,7 +11075,7 @@ program.hook("preAction", (thisCommand, actionCommand) => {
     setAgentMode(true);
   }
   maybeShowTelemetryNotice();
-  captureCommand(actionCommand);
+  recordCommand(actionCommand);
   drainQueue();
   const commandName = thisCommand.args?.[0];
   if (commandName !== "update") {
@@ -10985,6 +11090,7 @@ program.hook("preAction", (thisCommand, actionCommand) => {
 });
 program.hook("postAction", async () => {
   await closeBackendIfCached();
+  flushUsageRollups();
   flush();
   if (!updateCheckPromise) return;
   const info = await updateCheckPromise;
@@ -11201,7 +11307,7 @@ var flow = program.command("flow").alias("f").description("Create, execute, and
 flow.command("create [key]").description("Create a new workflow from JSON definition").option("--definition <json>", "Workflow definition as JSON string").option("-o, --output <path>", "Custom output path (default .one/flows/<key>/flow.json)").action(async (key, options) => {
   await flowCreateCommand(key, options);
 });
-flow.command("execute <keyOrPath>").alias("x").description("Execute a workflow by key or file path").option("-i, --input <name=value>", "Input parameter (repeatable)", collect, []).option("--dry-run", "Validate and show execution plan without running").option("--mock", "With --dry-run: execute transforms/code with realistic mock API responses").option("--skip-validation", "Skip input validation against action schemas").option("--allow-bash", "Allow bash step execution (disabled by default for security)").option("-v, --verbose", "Show full request/response for each step").action(async (keyOrPath, options) => {
+flow.command("execute <keyOrPath>").alias("x").description("Execute a workflow by key or file path").option("-i, --input <name=value>", "Input parameter (repeatable)", collect, []).option("--dry-run", "Validate and show execution plan without running").option("--mock", "With --dry-run: execute transforms/code with realistic mock API responses").option("--skip-validation", "Skip input validation against action schemas").option("--allow-bash", "Allow bash step execution (disabled by default for security)").option("-v, --verbose", "Show full request/response for each step").option("--output-file <path>", "Write the full result to a file (streamed) instead of stdout \u2014 avoids truncation/string-limit errors for large results; stdout/agent output then carries an outputFile pointer").action(async (keyOrPath, options) => {
   await flowExecuteCommand(keyOrPath, options);
 });
 flow.command("list").alias("ls").description("List all workflows in .one/flows/").action(async () => {

package/dist/{migrate-SJXHOA2G.js → migrate-UDEANXEZ.js}

@@ -3,12 +3,12 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-MQU7UK5J.js";
+} from "./chunk-PLMFRFTT.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-56QOOA5V.js";
-import "./chunk-GIMKPA2J.js";
-import "./chunk-BKD7A42U.js";
-import "./chunk-OEN5DNG7.js";
+import "./chunk-HS5AHQ4V.js";
+import "./chunk-OADHUAEU.js";
+import "./chunk-TXTRXV74.js";
+import "./chunk-K6MWE2ZH.js";
 export {
   buildIdentityMap,
   dotPathToJsonbExpr,

package/dist/{runtime-ZN7NZILR.js → runtime-B5GCQ34P.js}

@@ -4,9 +4,9 @@ import {
   getBackend,
   resetBackendSingleton,
   upsertRecord
-} from "./chunk-GIMKPA2J.js";
-import "./chunk-BKD7A42U.js";
-import "./chunk-OEN5DNG7.js";
+} from "./chunk-OADHUAEU.js";
+import "./chunk-TXTRXV74.js";
+import "./chunk-K6MWE2ZH.js";
 export {
   addRecord,
   closeBackendIfCached,

package/dist/sql-W3ZUOUNR.js

@@ -0,0 +1,12 @@
+import {
+  memSqlCommand,
+  syncSqlCommand
+} from "./chunk-QV3Y5N5G.js";
+import "./chunk-HS5AHQ4V.js";
+import "./chunk-OADHUAEU.js";
+import "./chunk-TXTRXV74.js";
+import "./chunk-K6MWE2ZH.js";
+export {
+  memSqlCommand,
+  syncSqlCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.46.0",
+  "version": "1.47.1",
   "description": "CLI for managing One",
   "type": "module",
   "files": [

package/skills/one/references/flows.md

@@ -271,6 +271,10 @@ Selectors in data fields (`data`, `queryParams`, `pathVars`, `connectionKey`) ar
 
 The `if`, `unless`, `condition.expression`, `while.condition`, `transform.expression`, and `code.source` fields **do** support full JavaScript expressions (e.g., `$.input.email && $.input.email.length > 0`).
 
+**Condition null-safety:** `if`/`unless`, `while.condition`, and `condition.expression` are null-safe. A condition that walks into a skipped or not-yet-run step's output — e.g. `$.steps.maybeSkipped.output.value` — evaluates to `false` instead of throwing `Cannot read properties of undefined`. (This applies to *conditions* only; `transform.expression` and `code.source` still throw on undefined access, since their output feeds downstream steps and should fail loudly.)
+
+**Large results:** pass `--output-file <path>` to `flow execute` to stream the full result to a file instead of stdout. Use it when a flow aggregates large outputs that would otherwise be truncated on stdout or exceed the JSON string-size limit. stdout (and `--agent` output) then carries `{"event":"workflow:result", ..., "outputFile":"<path>"}` instead of inline `steps` — read the file for the full result.
+
 ## Step Types
 
 ### `action` — Execute a One API action

package/dist/sql-YMHNH3DT.js

@@ -1,12 +0,0 @@
-import {
-  memSqlCommand,
-  syncSqlCommand
-} from "./chunk-EDVE3BQZ.js";
-import "./chunk-56QOOA5V.js";
-import "./chunk-GIMKPA2J.js";
-import "./chunk-BKD7A42U.js";
-import "./chunk-OEN5DNG7.js";
-export {
-  memSqlCommand,
-  syncSqlCommand
-};