@withone/cli 1.52.0 → 1.52.2

package/README.md

@@ -140,7 +140,7 @@ Supports Claude Code, Claude Desktop, Cursor, Windsurf, Codex, and Kiro.
 
 When you run `one` in a project, it uses the project config if one exists and falls back to the global config otherwise. Use `one config path` to see which config is active and the full resolution order.
 
-In a monorepo, the project root is the nearest ancestor with `.one/`, `.git`, or `package.json` — checked in that order. Run `mkdir .one` in a nested subproject to make it its own project root (so the config is keyed by the nested dir's slug instead of the monorepo's).
+In a monorepo, the project root is the nearest ancestor with `.one/`, `.git`, or `package.json` — checked in that order. Run `mkdir .one` in a nested subproject to make it its own project root (so the config is keyed by the nested dir's slug instead of the monorepo's). Your home directory itself is never treated as a project root — `~/.one` is the CLI's own config directory, and a dotfiles `.git` or stray `package.json` in `$HOME` shouldn't turn everything under home into one project. Scope that applies to all of home is the global config.
 
 If you've already set up, `one init` shows your current status for the active scope and lets you update your key, install to more agents, or reconfigure.
 
@@ -683,6 +683,22 @@ ONE_PERMISSIONS=read
 
 > ⚠️ **Add `.onerc` to your `.gitignore`.** If you put `ONE_SECRET` in it, committing the file will leak your API key. Treat `.onerc` like `.env` — never check it in.
 
+### Relocating the CLI's state (`ONE_HOME`)
+
+Everything the CLI stores — `~/.one/config.json`, the knowledge cache, memory
+databases, sync schedules, and the installed skill files — is rooted at your
+home directory. Set `ONE_HOME` to put it somewhere else:
+
+```bash
+export ONE_HOME=/srv/one-state
+one whoami          # now reads /srv/one-state/.one/config.json
+```
+
+Useful for containers, CI runners, and shared/multi-tenant shells where the
+account's home directory isn't the right place for per-workspace state. It
+works identically on every platform — unlike `HOME`, which `os.homedir()`
+ignores on Windows.
+
 ## The workflow
 
 The power of One is in the workflow. Every interaction follows the same pattern:

package/dist/{chunk-C7DWZ7B5.js → chunk-5O5KODGV.js}

@@ -3,7 +3,7 @@ import {
   readConfig,
   setOpenAiApiKey,
   writeConfig
-} from "./chunk-SO323PZP.js";
+} from "./chunk-EVEUGRCB.js";
 
 // src/lib/memory/config.ts
 var DEFAULT_MEMORY_CONFIG = {

package/dist/{chunk-Z4KAQGIG.js → chunk-DDCDPVJH.js}

@@ -5,10 +5,11 @@ import {
   getMemoryConfig,
   getMemoryConfigOrDefault,
   updateMemoryConfig
-} from "./chunk-C7DWZ7B5.js";
+} from "./chunk-5O5KODGV.js";
 import {
-  getOpenAiApiKey
-} from "./chunk-SO323PZP.js";
+  getOpenAiApiKey,
+  homeDir
+} from "./chunk-EVEUGRCB.js";
 
 // src/lib/memory/schema.ts
 var SCHEMA_VERSION = "2.3.1";
@@ -1458,7 +1459,6 @@ var postgresPlugin = {
 import fs from "fs";
 import net from "net";
 import path from "path";
-import os from "os";
 import { createRequire } from "module";
 import { spawn } from "child_process";
 var requireFromHere = createRequire(import.meta.url);
@@ -1473,7 +1473,12 @@ var BASE_CAPABILITIES = {
   rawSql: true
 };
 var DEFAULTS = {
-  dataDir: path.join(os.homedir(), ".one", "pg"),
+  // Getter, not a bound value: DEFAULTS is built at module load, so a plain
+  // `path.join(homeDir(), ...)` here would capture the home directory before
+  // ONE_HOME could take effect. See lib/home.ts.
+  get dataDir() {
+    return path.join(homeDir(), ".one", "pg");
+  },
   database: "one_mem",
   schema: "public",
   pgvector: true,

package/dist/{chunk-SO323PZP.js → chunk-EVEUGRCB.js}

@@ -1,10 +1,17 @@
+// src/lib/home.ts
+import os from "os";
+function homeDir() {
+  const override = process.env.ONE_HOME;
+  if (override && override.trim() !== "") return override;
+  return os.homedir();
+}
+
 // src/lib/config.ts
 import fs from "fs";
 import path from "path";
-import os from "os";
 import { randomUUID } from "crypto";
 function configDir() {
-  return path.join(os.homedir(), ".one");
+  return path.join(homeDir(), ".one");
 }
 function configFile() {
   return path.join(configDir(), "config.json");
@@ -15,10 +22,12 @@ function projectsDir() {
 function getProjectRoot(cwd = process.cwd()) {
   let dir = path.resolve(cwd);
   const root = path.parse(dir).root;
+  const home = homeDir();
   while (dir !== root) {
-    if (fs.existsSync(path.join(dir, ".one")) || fs.existsSync(path.join(dir, ".git")) || fs.existsSync(path.join(dir, "package.json"))) {
+    if (dir !== home && (fs.existsSync(path.join(dir, ".one")) || fs.existsSync(path.join(dir, ".git")) || fs.existsSync(path.join(dir, "package.json")))) {
       return dir;
     }
+    if (dir === home) break;
     dir = path.dirname(dir);
   }
   return path.resolve(cwd);
@@ -365,6 +374,7 @@ function writeUsageState(state) {
 }
 
 export {
+  homeDir,
   getProjectRoot,
   getProjectConfigPath,
   getGlobalConfigPath,

package/dist/{chunk-ZOJW6IMU.js → chunk-FKHUH223.js}

@@ -6,11 +6,11 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-CLJFSFFM.js";
+} from "./chunk-GNSR3NYN.js";
 import {
   getBackend,
   upsertRecord
-} from "./chunk-Z4KAQGIG.js";
+} from "./chunk-DDCDPVJH.js";
 
 // src/commands/mem/migrate.ts
 import fs4 from "fs";

package/dist/{chunk-CLJFSFFM.js → chunk-GNSR3NYN.js}

@@ -1,10 +1,10 @@
 import {
   getMemoryConfigOrDefault
-} from "./chunk-C7DWZ7B5.js";
+} from "./chunk-5O5KODGV.js";
 import {
   getOpenAiApiKey,
   readConfig
-} from "./chunk-SO323PZP.js";
+} from "./chunk-EVEUGRCB.js";
 
 // src/lib/output.ts
 import * as p from "@clack/prompts";

package/dist/{chunk-UV4YYDF3.js → chunk-OWDR5L3Q.js}

@@ -3,10 +3,10 @@ import {
   isAgentMode,
   json,
   requireMemoryInit
-} from "./chunk-CLJFSFFM.js";
+} from "./chunk-GNSR3NYN.js";
 import {
   getBackend
-} from "./chunk-Z4KAQGIG.js";
+} from "./chunk-DDCDPVJH.js";
 
 // src/commands/mem/sql.ts
 async function memSqlCommand(sql) {

package/dist/{chunk-K56Z5BTM.js → chunk-WXJWF7QG.js}

@@ -3,8 +3,9 @@ import {
   setByDotPath
 } from "./chunk-44CV5IMX.js";
 import {
-  getCacheTtl
-} from "./chunk-SO323PZP.js";
+  getCacheTtl,
+  homeDir
+} from "./chunk-EVEUGRCB.js";
 
 // src/lib/flow-runner.ts
 import fs3 from "fs";
@@ -13,7 +14,7 @@ import crypto from "crypto";
 
 // src/lib/flow-engine.ts
 import fs2 from "fs";
-import os2 from "os";
+import os from "os";
 import path2 from "path";
 import { exec, spawn } from "child_process";
 import { promisify } from "util";
@@ -597,12 +598,11 @@ ${knowledge}`;
 // src/lib/cache.ts
 import fs from "fs";
 import path from "path";
-import os from "os";
 function knowledgeDir() {
-  return path.join(os.homedir(), ".one", "cache", "knowledge");
+  return path.join(homeDir(), ".one", "cache", "knowledge");
 }
 function searchDir() {
-  return path.join(os.homedir(), ".one", "cache", "search");
+  return path.join(homeDir(), ".one", "cache", "search");
 }
 function sanitizeFilename(input) {
   return input.replace(/[^a-zA-Z0-9_\-\.]/g, "_");
@@ -2354,7 +2354,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-WZIYXW47.js");
+  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-MVSJ2GB7.js");
   const { flow: subFlow, rootDir: subRootDir } = loadFlowWithMeta2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,
@@ -2458,7 +2458,7 @@ function resolveBashEnv(envConfig, context, stepId) {
         const resolved2 = resolveValue(obj.json, context);
         const json = JSON.stringify(resolved2 ?? null);
         const tmp = path2.join(
-          os2.tmpdir(),
+          os.tmpdir(),
           `one-flow-${stepId}-${key}-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.json`
         );
         fs2.writeFileSync(tmp, json, { encoding: "utf-8" });

package/dist/{embedding-2YB6CGBA.js → embedding-Z2WCDN6R.js}

@@ -2,8 +2,8 @@ import {
   defaultSearchableText,
   embed,
   embedBatch
-} from "./chunk-C7DWZ7B5.js";
-import "./chunk-SO323PZP.js";
+} from "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
 export {
   defaultSearchableText,
   embed,

package/dist/{flow-runner-WZIYXW47.js → flow-runner-MVSJ2GB7.js}

@@ -12,9 +12,9 @@ import {
   stripStepsAlias,
   summarizeFlowInputs,
   walkSteps
-} from "./chunk-K56Z5BTM.js";
+} from "./chunk-WXJWF7QG.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-SO323PZP.js";
+import "./chunk-EVEUGRCB.js";
 export {
   FlowRunner,
   collectStepTypes,

package/dist/index.js

@@ -32,10 +32,10 @@ import {
   validateActionInput,
   walkSteps,
   writeCache
-} from "./chunk-K56Z5BTM.js";
+} from "./chunk-WXJWF7QG.js";
 import {
   memSqlCommand
-} from "./chunk-UV4YYDF3.js";
+} from "./chunk-OWDR5L3Q.js";
 import {
   collectIdentityKeys,
   countRecords,
@@ -65,7 +65,7 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-ZOJW6IMU.js";
+} from "./chunk-FKHUH223.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -89,7 +89,7 @@ import {
   semanticSearchUpgradeLine,
   setAgentMode,
   silenceWarningsInAgentMode
-} from "./chunk-CLJFSFFM.js";
+} from "./chunk-GNSR3NYN.js";
 import {
   SCHEMA_VERSION,
   addRecord,
@@ -99,7 +99,7 @@ import {
   listBackendPlugins,
   loadBackendFromConfig,
   updateRecord
-} from "./chunk-Z4KAQGIG.js";
+} from "./chunk-DDCDPVJH.js";
 import {
   DEFAULT_MEMORY_CONFIG,
   defaultSearchableText,
@@ -109,7 +109,7 @@ import {
   memoryConfigExists,
   setOpenAiApiKey,
   updateMemoryConfig
-} from "./chunk-C7DWZ7B5.js";
+} from "./chunk-5O5KODGV.js";
 import {
   appendAnalyticsQueue,
   appendUsageLog,
@@ -128,6 +128,7 @@ import {
   getProjectRoot,
   getWhoAmI,
   globalConfigExists,
+  homeDir,
   markTelemetryNoticeShown,
   projectConfigExists,
   readAnalyticsQueue,
@@ -144,7 +145,7 @@ import {
   writeConfig,
   writeUsageLog,
   writeUsageState
-} from "./chunk-SO323PZP.js";
+} from "./chunk-EVEUGRCB.js";
 
 // src/cli.ts
 import { createRequire as createRequire3 } from "module";
@@ -156,17 +157,15 @@ import * as p3 from "@clack/prompts";
 import pc2 from "picocolors";
 import fs3 from "fs";
 import path3 from "path";
-import os3 from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/lib/agents.ts
 import fs from "fs";
 import path from "path";
-import os from "os";
 import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
 function expandPath(p10) {
   if (p10.startsWith("~/")) {
-    return path.join(os.homedir(), p10.slice(2));
+    return path.join(homeDir(), p10.slice(2));
   }
   return p10;
 }
@@ -192,71 +191,73 @@ function getClaudeDesktopDetectDir() {
 }
 function getWindsurfConfigPath() {
   if (process.platform === "win32") {
-    return path.join(process.env.USERPROFILE || os.homedir(), ".codeium", "windsurf", "mcp_config.json");
+    return path.join(homeDir(), ".codeium", "windsurf", "mcp_config.json");
   }
   return "~/.codeium/windsurf/mcp_config.json";
 }
 function getWindsurfDetectDir() {
   if (process.platform === "win32") {
-    return path.join(process.env.USERPROFILE || os.homedir(), ".codeium", "windsurf");
+    return path.join(homeDir(), ".codeium", "windsurf");
   }
   return "~/.codeium/windsurf";
 }
 function getCursorConfigPath() {
   if (process.platform === "win32") {
-    return path.join(process.env.USERPROFILE || os.homedir(), ".cursor", "mcp.json");
+    return path.join(homeDir(), ".cursor", "mcp.json");
   }
   return "~/.cursor/mcp.json";
 }
-var AGENTS = [
-  {
-    id: "claude-code",
-    name: "Claude Code",
-    configPath: "~/.claude.json",
-    configKey: "mcpServers",
-    detectDir: "~/.claude",
-    projectConfigPath: ".mcp.json"
-  },
-  {
-    id: "claude-desktop",
-    name: "Claude Desktop",
-    configPath: getClaudeDesktopConfigPath(),
-    configKey: "mcpServers",
-    detectDir: getClaudeDesktopDetectDir()
-  },
-  {
-    id: "cursor",
-    name: "Cursor",
-    configPath: getCursorConfigPath(),
-    configKey: "mcpServers",
-    detectDir: "~/.cursor",
-    projectConfigPath: ".cursor/mcp.json"
-  },
-  {
-    id: "windsurf",
-    name: "Windsurf",
-    configPath: getWindsurfConfigPath(),
-    configKey: "mcpServers",
-    detectDir: getWindsurfDetectDir()
-  },
-  {
-    id: "codex",
-    name: "Codex",
-    configPath: "~/.codex/config.toml",
-    configKey: "mcp_servers",
-    detectDir: "~/.codex",
-    projectConfigPath: ".codex/config.toml",
-    configFormat: "toml"
-  },
-  {
-    id: "kiro",
-    name: "Kiro",
-    configPath: "~/.kiro/settings/mcp.json",
-    configKey: "mcpServers",
-    detectDir: "~/.kiro",
-    projectConfigPath: ".kiro/settings/mcp.json"
-  }
-];
+function getAgents() {
+  return [
+    {
+      id: "claude-code",
+      name: "Claude Code",
+      configPath: "~/.claude.json",
+      configKey: "mcpServers",
+      detectDir: "~/.claude",
+      projectConfigPath: ".mcp.json"
+    },
+    {
+      id: "claude-desktop",
+      name: "Claude Desktop",
+      configPath: getClaudeDesktopConfigPath(),
+      configKey: "mcpServers",
+      detectDir: getClaudeDesktopDetectDir()
+    },
+    {
+      id: "cursor",
+      name: "Cursor",
+      configPath: getCursorConfigPath(),
+      configKey: "mcpServers",
+      detectDir: "~/.cursor",
+      projectConfigPath: ".cursor/mcp.json"
+    },
+    {
+      id: "windsurf",
+      name: "Windsurf",
+      configPath: getWindsurfConfigPath(),
+      configKey: "mcpServers",
+      detectDir: getWindsurfDetectDir()
+    },
+    {
+      id: "codex",
+      name: "Codex",
+      configPath: "~/.codex/config.toml",
+      configKey: "mcp_servers",
+      detectDir: "~/.codex",
+      projectConfigPath: ".codex/config.toml",
+      configFormat: "toml"
+    },
+    {
+      id: "kiro",
+      name: "Kiro",
+      configPath: "~/.kiro/settings/mcp.json",
+      configKey: "mcpServers",
+      detectDir: "~/.kiro",
+      projectConfigPath: ".kiro/settings/mcp.json"
+    }
+  ];
+}
 function getAgentConfigPath(agent, scope = "global") {
   if (scope === "project" && agent.projectConfigPath) {
     return path.join(process.cwd(), agent.projectConfigPath);
@@ -329,7 +330,7 @@ function isMcpInstalled(agent, scope = "global") {
   return mcpServers?.["one"] !== void 0;
 }
 function getAgentStatuses() {
-  return AGENTS.map((agent) => {
+  return getAgents().map((agent) => {
     const detected = fs.existsSync(expandPath(agent.detectDir));
     const globalMcp = detected && isMcpInstalled(agent, "global");
     const projectMcp = agent.projectConfigPath ? isMcpInstalled(agent, "project") : null;
@@ -647,7 +648,6 @@ import open2 from "open";
 
 // src/lib/skill-sync.ts
 import fs2 from "fs";
-import os2 from "os";
 import path2 from "path";
 import { fileURLToPath } from "url";
 
@@ -655,13 +655,12 @@ import { fileURLToPath } from "url";
 import { createRequire } from "module";
 import { spawn } from "child_process";
 import { readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
-import { homedir } from "os";
 import { join } from "path";
 var require2 = createRequire(import.meta.url);
 var { version: currentVersion } = require2("../package.json");
-var ONE_DIR = join(homedir(), ".one");
-var CACHE_PATH = join(ONE_DIR, "update-check.json");
-var LOCK_PATH = join(ONE_DIR, "auto-update.lock");
+var ONE_DIR = () => join(homeDir(), ".one");
+var CACHE_PATH = () => join(ONE_DIR(), "update-check.json");
+var LOCK_PATH = () => join(ONE_DIR(), "auto-update.lock");
 var CHECK_INTERVAL_MS = 4 * 60 * 60 * 1e3;
 var AGE_GATE_MS = 30 * 60 * 1e3;
 var LOCK_TTL_MS = 10 * 60 * 1e3;
@@ -679,15 +678,15 @@ async function fetchLatestVersionInfo() {
 }
 function readCache2() {
   try {
-    return JSON.parse(readFileSync(CACHE_PATH, "utf8"));
+    return JSON.parse(readFileSync(CACHE_PATH(), "utf8"));
   } catch {
     return null;
   }
 }
 function writeCache2(latestVersion, publishedAt) {
   try {
-    mkdirSync(join(homedir(), ".one"), { recursive: true });
-    writeFileSync(CACHE_PATH, JSON.stringify({ lastCheck: Date.now(), latestVersion, publishedAt }));
+    mkdirSync(join(homeDir(), ".one"), { recursive: true });
+    writeFileSync(CACHE_PATH(), JSON.stringify({ lastCheck: Date.now(), latestVersion, publishedAt }));
   } catch {
   }
 }
@@ -767,19 +766,19 @@ function isAutoUpdateDisabled() {
 }
 function acquireUpdateLock(targetVersion) {
   try {
-    mkdirSync(ONE_DIR, { recursive: true });
+    mkdirSync(ONE_DIR(), { recursive: true });
   } catch {
   }
   try {
-    const lock = JSON.parse(readFileSync(LOCK_PATH, "utf8"));
+    const lock = JSON.parse(readFileSync(LOCK_PATH(), "utf8"));
     const startedAt = typeof lock.startedAt === "number" ? lock.startedAt : 0;
     if (Date.now() - startedAt < LOCK_TTL_MS) return false;
-    rmSync(LOCK_PATH, { force: true });
+    rmSync(LOCK_PATH(), { force: true });
   } catch {
   }
   try {
     writeFileSync(
-      LOCK_PATH,
+      LOCK_PATH(),
       JSON.stringify({ pid: process.pid, startedAt: Date.now(), targetVersion }),
       { flag: "wx" }
       // fail if another invocation created it first
@@ -803,7 +802,7 @@ function autoUpdate(targetVersion, publishedAt) {
   });
   child.on("error", () => {
     try {
-      rmSync(LOCK_PATH, { force: true });
+      rmSync(LOCK_PATH(), { force: true });
     } catch {
     }
   });
@@ -818,7 +817,7 @@ function getPackagedSkillDir() {
   return path2.resolve(here, "..", "skills", "one");
 }
 function getCanonicalSkillPath() {
-  return path2.join(os2.homedir(), CANONICAL_SKILL_DIR, "one");
+  return path2.join(homeDir(), CANONICAL_SKILL_DIR, "one");
 }
 function getVersionMarkerPath() {
   return path2.join(getCanonicalSkillPath(), VERSION_MARKER);
@@ -1292,7 +1291,7 @@ async function chooseConfigScope(options) {
   return which;
 }
 function tildify(filePath) {
-  const home = os3.homedir();
+  const home = homeDir();
   return filePath.startsWith(home) ? "~" + filePath.slice(home.length) : filePath;
 }
 function scopeLabel(scope) {
@@ -1529,10 +1528,10 @@ function getSkillSourceDir() {
   return path3.resolve(__dirname2, "..", "skills", "one");
 }
 function getCanonicalSkillPath2() {
-  return path3.join(os3.homedir(), CANONICAL_SKILL_DIR2, "one");
+  return path3.join(homeDir(), CANONICAL_SKILL_DIR2, "one");
 }
 function getAgentSkillPath(agent) {
-  return path3.join(os3.homedir(), agent.skillDir, "one");
+  return path3.join(homeDir(), agent.skillDir, "one");
 }
 function isSkillInstalled2() {
   return fs3.existsSync(path3.join(getCanonicalSkillPath2(), "SKILL.md"));
@@ -6053,7 +6052,7 @@ async function syncModel(api, profile, options) {
         updateModelState(platform, model, { status: "failed", pagesProcessed, lastCursor }),
         (async () => {
           try {
-            const { getBackend: getBackend2 } = await import("./runtime-HDZCBTWH.js");
+            const { getBackend: getBackend2 } = await import("./runtime-AFXLC4IC.js");
             const backend = await getBackend2();
             await Promise.race([
               backend.close(),
@@ -6419,7 +6418,7 @@ async function syncModel(api, profile, options) {
         db.exec(`DROP TABLE IF EXISTS _seen_ids`);
       }
       if (options.toMemory !== false) {
-        const backend = await (await import("./runtime-HDZCBTWH.js")).getBackend();
+        const backend = await (await import("./runtime-AFXLC4IC.js")).getBackend();
         const type = `${platform}/${model}`;
         const existing = await backend.listKeysByType(type);
         const sourcePrefix = `${type}:`;
@@ -6505,7 +6504,7 @@ async function syncModel(api, profile, options) {
     let statusCounts;
     if (options.toMemory !== false) {
       try {
-        const backend = await (await import("./runtime-HDZCBTWH.js")).getBackend();
+        const backend = await (await import("./runtime-AFXLC4IC.js")).getBackend();
         const typeName = `${platform}/${model}`;
         const [active, archived] = await Promise.all([
           backend.count(typeName, { status: "active" }),
@@ -7035,19 +7034,18 @@ function inferProfileFromKnowledge(knowledge, modelName, platform) {
 // src/lib/memory/sync/schedule.ts
 import { spawnSync as spawnSync2 } from "child_process";
 import fs10 from "fs";
-import os5 from "os";
+import os from "os";
 import path10 from "path";
 
 // src/lib/memory/sync/schedule-registry.ts
 import fs9 from "fs";
-import os4 from "os";
 import path9 from "path";
-var REGISTRY_DIR = path9.join(os4.homedir(), ".one", "sync");
-var REGISTRY_FILE = path9.join(REGISTRY_DIR, "schedules.json");
+var REGISTRY_DIR = () => path9.join(homeDir(), ".one", "sync");
+var REGISTRY_FILE = () => path9.join(REGISTRY_DIR(), "schedules.json");
 function readRaw() {
   try {
-    if (!fs9.existsSync(REGISTRY_FILE)) return { schedules: [] };
-    const raw = fs9.readFileSync(REGISTRY_FILE, "utf-8");
+    if (!fs9.existsSync(REGISTRY_FILE())) return { schedules: [] };
+    const raw = fs9.readFileSync(REGISTRY_FILE(), "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || !Array.isArray(parsed.schedules)) return { schedules: [] };
     return parsed;
@@ -7056,10 +7054,10 @@ function readRaw() {
   }
 }
 function writeRaw(file) {
-  fs9.mkdirSync(REGISTRY_DIR, { recursive: true });
-  const tmp = REGISTRY_FILE + ".tmp";
+  fs9.mkdirSync(REGISTRY_DIR(), { recursive: true });
+  const tmp = REGISTRY_FILE() + ".tmp";
   fs9.writeFileSync(tmp, JSON.stringify(file, null, 2));
-  fs9.renameSync(tmp, REGISTRY_FILE);
+  fs9.renameSync(tmp, REGISTRY_FILE());
 }
 function makeScheduleId(platform, cwd) {
   const slug = path9.basename(cwd).replace(/[^a-zA-Z0-9_-]/g, "-").toLowerCase();
@@ -7129,7 +7127,7 @@ function cronExprToDuration(expr) {
   return null;
 }
 function isWindows() {
-  return os5.platform() === "win32";
+  return os.platform() === "win32";
 }
 function resolveOneBinary() {
   try {
@@ -8194,7 +8192,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-AZDCMY7G.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-3WNYRCWP.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -8272,7 +8270,7 @@ async function syncDeleteCommand(platformModel, options) {
 async function maybeAutoMigrateLegacy(platform, models) {
   const dbSize = getDatabaseSize(platform);
   if (!dbSize || dbSize === "0 B") return;
-  const { getBackend: getBackend2 } = await import("./runtime-HDZCBTWH.js");
+  const { getBackend: getBackend2 } = await import("./runtime-AFXLC4IC.js");
   const backend = await getBackend2();
   let memoryHasData = false;
   for (const model of models) {
@@ -8288,7 +8286,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-LXDIZMXH.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-LA7I3OQN.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -8297,7 +8295,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p7.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-LXDIZMXH.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-LA7I3OQN.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -8358,7 +8356,7 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
   const state = await readSyncState();
-  const { getBackend: getBackend2 } = await import("./runtime-HDZCBTWH.js");
+  const { getBackend: getBackend2 } = await import("./runtime-AFXLC4IC.js");
   const backend = await getBackend2();
   const syncs = await Promise.all(profiles.map(async (p10) => {
     const modelState = state[p10.platform]?.[p10.model];
@@ -8633,7 +8631,7 @@ function registerSyncSubcommands(sync) {
     await syncSqlCommand(platformModel, sql);
   });
   sync.command("schema <platform/model>").description("Inspect the JSON structure of synced records (field paths, types, examples) \u2014 useful before writing `sync sql` queries").action(async (platformModel) => {
-    const { syncSchemaCommand } = await import("./schema-SYMG6SRC.js");
+    const { syncSchemaCommand } = await import("./schema-4JJO2CIZ.js");
     await syncSchemaCommand(platformModel);
   });
   sync.command("delete <platform/model>").description('Delete records from local sync data (e.g. one sync delete notion/pages --id "abc-123")').option("--id <value>", "Delete record by ID").option("--where <conditions>", 'Delete records matching conditions (e.g. "status=archived")').option("--where-sql <predicate>", `Delete using a raw SQL WHERE clause (e.g. "json_extract(data, '$.type') = 'promotion'")`).option("--yes", "Skip confirmation prompt").action(async (platformModel, options) => {
@@ -9410,7 +9408,7 @@ async function memDoctorCommand() {
   }
   if (cfg.embedding.provider === "openai") {
     try {
-      const { embed: embed2 } = await import("./embedding-2YB6CGBA.js");
+      const { embed: embed2 } = await import("./embedding-Z2WCDN6R.js");
       const result = await embed2("connectivity check");
       checks.push({
         name: "OpenAI embedding provider reachable",

package/dist/{migrate-LXDIZMXH.js → migrate-LA7I3OQN.js}

@@ -3,12 +3,12 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-ZOJW6IMU.js";
+} from "./chunk-FKHUH223.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-CLJFSFFM.js";
-import "./chunk-Z4KAQGIG.js";
-import "./chunk-C7DWZ7B5.js";
-import "./chunk-SO323PZP.js";
+import "./chunk-GNSR3NYN.js";
+import "./chunk-DDCDPVJH.js";
+import "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
 export {
   buildIdentityMap,
   dotPathToJsonbExpr,

package/dist/{runtime-HDZCBTWH.js → runtime-AFXLC4IC.js}

@@ -5,9 +5,9 @@ import {
   resetBackendSingleton,
   updateRecord,
   upsertRecord
-} from "./chunk-Z4KAQGIG.js";
-import "./chunk-C7DWZ7B5.js";
-import "./chunk-SO323PZP.js";
+} from "./chunk-DDCDPVJH.js";
+import "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
 export {
   addRecord,
   closeBackendIfCached,

package/dist/{schema-SYMG6SRC.js → schema-4JJO2CIZ.js}

@@ -3,12 +3,12 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-CLJFSFFM.js";
+} from "./chunk-GNSR3NYN.js";
 import {
   getBackend
-} from "./chunk-Z4KAQGIG.js";
-import "./chunk-C7DWZ7B5.js";
-import "./chunk-SO323PZP.js";
+} from "./chunk-DDCDPVJH.js";
+import "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
 
 // src/lib/memory/sync/schema.ts
 import pc from "picocolors";

package/dist/sql-3WNYRCWP.js

@@ -0,0 +1,12 @@
+import {
+  memSqlCommand,
+  syncSqlCommand
+} from "./chunk-OWDR5L3Q.js";
+import "./chunk-GNSR3NYN.js";
+import "./chunk-DDCDPVJH.js";
+import "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
+export {
+  memSqlCommand,
+  syncSqlCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.52.0",
+  "version": "1.52.2",
   "description": "CLI for managing One",
   "type": "module",
   "files": [
@@ -23,7 +23,7 @@
     "dev": "tsup --watch",
     "start": "node bin/cli.js",
     "typecheck": "tsc --noEmit",
-    "test": "tsx --test \"src/**/*.test.ts\"",
+    "test": "node scripts/run-tests.mjs",
     "prepare": "tsup"
   },
   "dependencies": {

package/skills/one/references/scoping.md

@@ -5,7 +5,7 @@ The One CLI can be configured at two scopes:
 - **Global** — `~/.one/config.json`. Applies everywhere the user runs `one`.
 - **Project** — `~/.one/projects/<slug>/config.json`, where `<slug>` is the project root path with path separators (and any character Windows forbids in a path component) replaced by dashes (e.g. `/Users/jane/acme` → `-Users-jane-acme`; on Windows, `C:\Users\jane\acme` → `C--Users-jane-acme`). Only applies when running `one` from inside that project folder.
 
-**Detecting the project root.** The CLI walks up from cwd looking for `.one`, `.git`, or `package.json` and treats the nearest hit as the project root — `.one` is checked first so a monorepo subproject can opt into being its own root with `mkdir .one`. Without a `.one` opt-in, every cwd under a parent `.git`/`package.json` shares one project config keyed by that parent.
+**Detecting the project root.** The CLI walks up from cwd looking for `.one`, `.git`, or `package.json` and treats the nearest hit as the project root — `.one` is checked first so a monorepo subproject can opt into being its own root with `mkdir .one`. Without a `.one` opt-in, every cwd under a parent `.git`/`package.json` shares one project config keyed by that parent. Exception: `$HOME` itself is never a project root — `~/.one` is the CLI's own config directory (not an opt-in marker), and a dotfiles `.git` or stray `package.json` in home must not shadow the global config for every directory under it. If a marker-less dir should be its own project, `mkdir .one` inside it before picking project scope.
 
 **Resolution order:** env vars → `.onerc` in cwd → project config → global config. The project lookup walks from cwd up — the nearest ancestor that has a config under `~/.one/projects/<slug>/config.json` wins, so cwd's own slug is checked before any parent's.
 

package/dist/sql-AZDCMY7G.js

@@ -1,12 +0,0 @@
-import {
-  memSqlCommand,
-  syncSqlCommand
-} from "./chunk-UV4YYDF3.js";
-import "./chunk-CLJFSFFM.js";
-import "./chunk-Z4KAQGIG.js";
-import "./chunk-C7DWZ7B5.js";
-import "./chunk-SO323PZP.js";
-export {
-  memSqlCommand,
-  syncSqlCommand
-};