@withone/cli 1.52.1 → 1.52.3

package/README.md

@@ -683,6 +683,22 @@ ONE_PERMISSIONS=read
 
 > ⚠️ **Add `.onerc` to your `.gitignore`.** If you put `ONE_SECRET` in it, committing the file will leak your API key. Treat `.onerc` like `.env` — never check it in.
 
+### Relocating the CLI's state (`ONE_HOME`)
+
+Everything the CLI stores — `~/.one/config.json`, the knowledge cache, memory
+databases, sync schedules, and the installed skill files — is rooted at your
+home directory. Set `ONE_HOME` to put it somewhere else:
+
+```bash
+export ONE_HOME=/srv/one-state
+one whoami          # now reads /srv/one-state/.one/config.json
+```
+
+Useful for containers, CI runners, and shared/multi-tenant shells where the
+account's home directory isn't the right place for per-workspace state. It
+works identically on every platform — unlike `HOME`, which `os.homedir()`
+ignores on Windows.
+
 ## The workflow
 
 The power of One is in the workflow. Every interaction follows the same pattern:

package/dist/{chunk-2VDKHGVN.js → chunk-5O5KODGV.js}

@@ -3,7 +3,7 @@ import {
   readConfig,
   setOpenAiApiKey,
   writeConfig
-} from "./chunk-RASDPNMJ.js";
+} from "./chunk-EVEUGRCB.js";
 
 // src/lib/memory/config.ts
 var DEFAULT_MEMORY_CONFIG = {

package/dist/{chunk-HSKAP73B.js → chunk-DDCDPVJH.js}

@@ -5,10 +5,11 @@ import {
   getMemoryConfig,
   getMemoryConfigOrDefault,
   updateMemoryConfig
-} from "./chunk-2VDKHGVN.js";
+} from "./chunk-5O5KODGV.js";
 import {
-  getOpenAiApiKey
-} from "./chunk-RASDPNMJ.js";
+  getOpenAiApiKey,
+  homeDir
+} from "./chunk-EVEUGRCB.js";
 
 // src/lib/memory/schema.ts
 var SCHEMA_VERSION = "2.3.1";
@@ -1458,7 +1459,6 @@ var postgresPlugin = {
 import fs from "fs";
 import net from "net";
 import path from "path";
-import os from "os";
 import { createRequire } from "module";
 import { spawn } from "child_process";
 var requireFromHere = createRequire(import.meta.url);
@@ -1473,7 +1473,12 @@ var BASE_CAPABILITIES = {
   rawSql: true
 };
 var DEFAULTS = {
-  dataDir: path.join(os.homedir(), ".one", "pg"),
+  // Getter, not a bound value: DEFAULTS is built at module load, so a plain
+  // `path.join(homeDir(), ...)` here would capture the home directory before
+  // ONE_HOME could take effect. See lib/home.ts.
+  get dataDir() {
+    return path.join(homeDir(), ".one", "pg");
+  },
   database: "one_mem",
   schema: "public",
   pgvector: true,

package/dist/{chunk-RASDPNMJ.js → chunk-EVEUGRCB.js}

@@ -1,10 +1,17 @@
+// src/lib/home.ts
+import os from "os";
+function homeDir() {
+  const override = process.env.ONE_HOME;
+  if (override && override.trim() !== "") return override;
+  return os.homedir();
+}
+
 // src/lib/config.ts
 import fs from "fs";
 import path from "path";
-import os from "os";
 import { randomUUID } from "crypto";
 function configDir() {
-  return path.join(os.homedir(), ".one");
+  return path.join(homeDir(), ".one");
 }
 function configFile() {
   return path.join(configDir(), "config.json");
@@ -15,11 +22,12 @@ function projectsDir() {
 function getProjectRoot(cwd = process.cwd()) {
   let dir = path.resolve(cwd);
   const root = path.parse(dir).root;
-  const home = os.homedir();
+  const home = homeDir();
   while (dir !== root) {
     if (dir !== home && (fs.existsSync(path.join(dir, ".one")) || fs.existsSync(path.join(dir, ".git")) || fs.existsSync(path.join(dir, "package.json")))) {
       return dir;
     }
+    if (dir === home) break;
     dir = path.dirname(dir);
   }
   return path.resolve(cwd);
@@ -366,6 +374,7 @@ function writeUsageState(state) {
 }
 
 export {
+  homeDir,
   getProjectRoot,
   getProjectConfigPath,
   getGlobalConfigPath,

package/dist/{chunk-I3ODIT2N.js → chunk-GNSR3NYN.js}

@@ -1,10 +1,10 @@
 import {
   getMemoryConfigOrDefault
-} from "./chunk-2VDKHGVN.js";
+} from "./chunk-5O5KODGV.js";
 import {
   getOpenAiApiKey,
   readConfig
-} from "./chunk-RASDPNMJ.js";
+} from "./chunk-EVEUGRCB.js";
 
 // src/lib/output.ts
 import * as p from "@clack/prompts";

package/dist/{chunk-P5KRUMV3.js → chunk-IKYXS7EI.js}

@@ -6,11 +6,11 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-I3ODIT2N.js";
+} from "./chunk-GNSR3NYN.js";
 import {
   getBackend,
   upsertRecord
-} from "./chunk-HSKAP73B.js";
+} from "./chunk-DDCDPVJH.js";
 
 // src/commands/mem/migrate.ts
 import fs4 from "fs";
@@ -216,6 +216,32 @@ function listSyncedPlatforms() {
   if (!fs3.existsSync(DATA_DIR)) return [];
   return fs3.readdirSync(DATA_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(/\.db$/, ""));
 }
+function isDriverFault(err) {
+  const code = err?.code;
+  if (code === "ERR_DLOPEN_FAILED") return true;
+  const msg = err instanceof Error ? err.message : String(err ?? "");
+  return /NODE_MODULE_VERSION|compiled against a different Node\.js version|Could not locate the bindings file|invalid ELF header|wrong ELF class|symbol not found|image not found|not a valid Win32 application/i.test(msg);
+}
+function passesIntegrityCheck(Ctor, dbPath) {
+  let probe;
+  try {
+    probe = new Ctor(dbPath, { readonly: true, fileMustExist: true });
+    const result = probe.pragma("quick_check");
+    const first = Array.isArray(result) ? result[0] : result;
+    const verdict = typeof first === "string" ? first : first?.quick_check;
+    return verdict === "ok";
+  } catch {
+    return false;
+  } finally {
+    try {
+      probe?.close();
+    } catch {
+    }
+  }
+}
+function backupPathFor(dbPath, now = /* @__PURE__ */ new Date()) {
+  return `${dbPath}.bak.${now.toISOString().replace(/[:.]/g, "-")}`;
+}
 async function openDatabase(platform, opts = {}) {
   const Database = await loadSqlite();
   fs3.mkdirSync(DATA_DIR, { recursive: true });
@@ -226,13 +252,38 @@ async function openDatabase(platform, opts = {}) {
   let db;
   try {
     db = new Database(dbPath);
-  } catch {
-    const backupPath = dbPath + ".bak";
-    if (fs3.existsSync(dbPath)) {
-      fs3.renameSync(dbPath, backupPath);
-      process.stderr.write(`Database corrupted, starting fresh. Backup saved at ${backupPath}
-`);
+  } catch (err) {
+    if (isDriverFault(err)) {
+      const detail = err instanceof Error ? err.message.split("\n")[0] : String(err);
+      throw new Error(
+        `The local sync engine (better-sqlite3) could not load in this Node process.
+Your database was NOT modified.
+
+This usually means the CLI is running under a different Node than the one
+better-sqlite3 was built for \u2014 currently node ${process.version} (NODE_MODULE_VERSION ${process.versions.modules}). \`one\` is a #!/usr/bin/env node shim, so a minimal PATH under cron, launchd,
+or an agent runner can select a different interpreter than your shell does.
+
+Rebuild it against this Node with:
+  one sync install
+
+Underlying error: ${detail}`
+      );
     }
+    if (!fs3.existsSync(dbPath)) throw err;
+    if (passesIntegrityCheck(Database, dbPath)) {
+      const detail = err instanceof Error ? err.message.split("\n")[0] : String(err);
+      throw new Error(
+        `Could not open ${dbPath}, but it passes SQLite's integrity check \u2014 so it is not corrupt and has been left untouched.
+
+Underlying error: ${detail}`
+      );
+    }
+    const backupPath = backupPathFor(dbPath);
+    fs3.renameSync(dbPath, backupPath);
+    process.stderr.write(
+      `Database at ${dbPath} failed its integrity check. Backup saved at ${backupPath}, starting fresh.
+`
+    );
     db = new Database(dbPath);
   }
   db.pragma("journal_mode = WAL");

package/dist/{chunk-PQQAMG2S.js → chunk-OWDR5L3Q.js}

@@ -3,10 +3,10 @@ import {
   isAgentMode,
   json,
   requireMemoryInit
-} from "./chunk-I3ODIT2N.js";
+} from "./chunk-GNSR3NYN.js";
 import {
   getBackend
-} from "./chunk-HSKAP73B.js";
+} from "./chunk-DDCDPVJH.js";
 
 // src/commands/mem/sql.ts
 async function memSqlCommand(sql) {

package/dist/{chunk-RKQXOFTX.js → chunk-WXJWF7QG.js}

@@ -3,8 +3,9 @@ import {
   setByDotPath
 } from "./chunk-44CV5IMX.js";
 import {
-  getCacheTtl
-} from "./chunk-RASDPNMJ.js";
+  getCacheTtl,
+  homeDir
+} from "./chunk-EVEUGRCB.js";
 
 // src/lib/flow-runner.ts
 import fs3 from "fs";
@@ -13,7 +14,7 @@ import crypto from "crypto";
 
 // src/lib/flow-engine.ts
 import fs2 from "fs";
-import os2 from "os";
+import os from "os";
 import path2 from "path";
 import { exec, spawn } from "child_process";
 import { promisify } from "util";
@@ -597,12 +598,11 @@ ${knowledge}`;
 // src/lib/cache.ts
 import fs from "fs";
 import path from "path";
-import os from "os";
 function knowledgeDir() {
-  return path.join(os.homedir(), ".one", "cache", "knowledge");
+  return path.join(homeDir(), ".one", "cache", "knowledge");
 }
 function searchDir() {
-  return path.join(os.homedir(), ".one", "cache", "search");
+  return path.join(homeDir(), ".one", "cache", "search");
 }
 function sanitizeFilename(input) {
   return input.replace(/[^a-zA-Z0-9_\-\.]/g, "_");
@@ -2354,7 +2354,7 @@ async function executeSubflowStep(step, context, api, permissions, allowedAction
   if (flowStack.includes(resolvedKey)) {
     throw new Error(`Circular flow detected: ${[...flowStack, resolvedKey].join(" \u2192 ")}`);
   }
-  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-ZZEJ6CZI.js");
+  const { loadFlowWithMeta: loadFlowWithMeta2 } = await import("./flow-runner-MVSJ2GB7.js");
   const { flow: subFlow, rootDir: subRootDir } = loadFlowWithMeta2(resolvedKey);
   const subContext = await executeFlow(
     subFlow,
@@ -2458,7 +2458,7 @@ function resolveBashEnv(envConfig, context, stepId) {
         const resolved2 = resolveValue(obj.json, context);
         const json = JSON.stringify(resolved2 ?? null);
         const tmp = path2.join(
-          os2.tmpdir(),
+          os.tmpdir(),
           `one-flow-${stepId}-${key}-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.json`
         );
         fs2.writeFileSync(tmp, json, { encoding: "utf-8" });

package/dist/{embedding-AVBSB7SG.js → embedding-Z2WCDN6R.js}

@@ -2,8 +2,8 @@ import {
   defaultSearchableText,
   embed,
   embedBatch
-} from "./chunk-2VDKHGVN.js";
-import "./chunk-RASDPNMJ.js";
+} from "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
 export {
   defaultSearchableText,
   embed,

package/dist/{flow-runner-ZZEJ6CZI.js → flow-runner-MVSJ2GB7.js}

@@ -12,9 +12,9 @@ import {
   stripStepsAlias,
   summarizeFlowInputs,
   walkSteps
-} from "./chunk-RKQXOFTX.js";
+} from "./chunk-WXJWF7QG.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-RASDPNMJ.js";
+import "./chunk-EVEUGRCB.js";
 export {
   FlowRunner,
   collectStepTypes,

package/dist/index.js

@@ -32,10 +32,10 @@ import {
   validateActionInput,
   walkSteps,
   writeCache
-} from "./chunk-RKQXOFTX.js";
+} from "./chunk-WXJWF7QG.js";
 import {
   memSqlCommand
-} from "./chunk-PQQAMG2S.js";
+} from "./chunk-OWDR5L3Q.js";
 import {
   collectIdentityKeys,
   countRecords,
@@ -65,7 +65,7 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-P5KRUMV3.js";
+} from "./chunk-IKYXS7EI.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -89,7 +89,7 @@ import {
   semanticSearchUpgradeLine,
   setAgentMode,
   silenceWarningsInAgentMode
-} from "./chunk-I3ODIT2N.js";
+} from "./chunk-GNSR3NYN.js";
 import {
   SCHEMA_VERSION,
   addRecord,
@@ -99,7 +99,7 @@ import {
   listBackendPlugins,
   loadBackendFromConfig,
   updateRecord
-} from "./chunk-HSKAP73B.js";
+} from "./chunk-DDCDPVJH.js";
 import {
   DEFAULT_MEMORY_CONFIG,
   defaultSearchableText,
@@ -109,7 +109,7 @@ import {
   memoryConfigExists,
   setOpenAiApiKey,
   updateMemoryConfig
-} from "./chunk-2VDKHGVN.js";
+} from "./chunk-5O5KODGV.js";
 import {
   appendAnalyticsQueue,
   appendUsageLog,
@@ -128,6 +128,7 @@ import {
   getProjectRoot,
   getWhoAmI,
   globalConfigExists,
+  homeDir,
   markTelemetryNoticeShown,
   projectConfigExists,
   readAnalyticsQueue,
@@ -144,7 +145,7 @@ import {
   writeConfig,
   writeUsageLog,
   writeUsageState
-} from "./chunk-RASDPNMJ.js";
+} from "./chunk-EVEUGRCB.js";
 
 // src/cli.ts
 import { createRequire as createRequire3 } from "module";
@@ -156,17 +157,15 @@ import * as p3 from "@clack/prompts";
 import pc2 from "picocolors";
 import fs3 from "fs";
 import path3 from "path";
-import os3 from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/lib/agents.ts
 import fs from "fs";
 import path from "path";
-import os from "os";
 import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
 function expandPath(p10) {
   if (p10.startsWith("~/")) {
-    return path.join(os.homedir(), p10.slice(2));
+    return path.join(homeDir(), p10.slice(2));
   }
   return p10;
 }
@@ -192,71 +191,73 @@ function getClaudeDesktopDetectDir() {
 }
 function getWindsurfConfigPath() {
   if (process.platform === "win32") {
-    return path.join(process.env.USERPROFILE || os.homedir(), ".codeium", "windsurf", "mcp_config.json");
+    return path.join(homeDir(), ".codeium", "windsurf", "mcp_config.json");
   }
   return "~/.codeium/windsurf/mcp_config.json";
 }
 function getWindsurfDetectDir() {
   if (process.platform === "win32") {
-    return path.join(process.env.USERPROFILE || os.homedir(), ".codeium", "windsurf");
+    return path.join(homeDir(), ".codeium", "windsurf");
   }
   return "~/.codeium/windsurf";
 }
 function getCursorConfigPath() {
   if (process.platform === "win32") {
-    return path.join(process.env.USERPROFILE || os.homedir(), ".cursor", "mcp.json");
+    return path.join(homeDir(), ".cursor", "mcp.json");
   }
   return "~/.cursor/mcp.json";
 }
-var AGENTS = [
-  {
-    id: "claude-code",
-    name: "Claude Code",
-    configPath: "~/.claude.json",
-    configKey: "mcpServers",
-    detectDir: "~/.claude",
-    projectConfigPath: ".mcp.json"
-  },
-  {
-    id: "claude-desktop",
-    name: "Claude Desktop",
-    configPath: getClaudeDesktopConfigPath(),
-    configKey: "mcpServers",
-    detectDir: getClaudeDesktopDetectDir()
-  },
-  {
-    id: "cursor",
-    name: "Cursor",
-    configPath: getCursorConfigPath(),
-    configKey: "mcpServers",
-    detectDir: "~/.cursor",
-    projectConfigPath: ".cursor/mcp.json"
-  },
-  {
-    id: "windsurf",
-    name: "Windsurf",
-    configPath: getWindsurfConfigPath(),
-    configKey: "mcpServers",
-    detectDir: getWindsurfDetectDir()
-  },
-  {
-    id: "codex",
-    name: "Codex",
-    configPath: "~/.codex/config.toml",
-    configKey: "mcp_servers",
-    detectDir: "~/.codex",
-    projectConfigPath: ".codex/config.toml",
-    configFormat: "toml"
-  },
-  {
-    id: "kiro",
-    name: "Kiro",
-    configPath: "~/.kiro/settings/mcp.json",
-    configKey: "mcpServers",
-    detectDir: "~/.kiro",
-    projectConfigPath: ".kiro/settings/mcp.json"
-  }
-];
+function getAgents() {
+  return [
+    {
+      id: "claude-code",
+      name: "Claude Code",
+      configPath: "~/.claude.json",
+      configKey: "mcpServers",
+      detectDir: "~/.claude",
+      projectConfigPath: ".mcp.json"
+    },
+    {
+      id: "claude-desktop",
+      name: "Claude Desktop",
+      configPath: getClaudeDesktopConfigPath(),
+      configKey: "mcpServers",
+      detectDir: getClaudeDesktopDetectDir()
+    },
+    {
+      id: "cursor",
+      name: "Cursor",
+      configPath: getCursorConfigPath(),
+      configKey: "mcpServers",
+      detectDir: "~/.cursor",
+      projectConfigPath: ".cursor/mcp.json"
+    },
+    {
+      id: "windsurf",
+      name: "Windsurf",
+      configPath: getWindsurfConfigPath(),
+      configKey: "mcpServers",
+      detectDir: getWindsurfDetectDir()
+    },
+    {
+      id: "codex",
+      name: "Codex",
+      configPath: "~/.codex/config.toml",
+      configKey: "mcp_servers",
+      detectDir: "~/.codex",
+      projectConfigPath: ".codex/config.toml",
+      configFormat: "toml"
+    },
+    {
+      id: "kiro",
+      name: "Kiro",
+      configPath: "~/.kiro/settings/mcp.json",
+      configKey: "mcpServers",
+      detectDir: "~/.kiro",
+      projectConfigPath: ".kiro/settings/mcp.json"
+    }
+  ];
+}
 function getAgentConfigPath(agent, scope = "global") {
   if (scope === "project" && agent.projectConfigPath) {
     return path.join(process.cwd(), agent.projectConfigPath);
@@ -329,7 +330,7 @@ function isMcpInstalled(agent, scope = "global") {
   return mcpServers?.["one"] !== void 0;
 }
 function getAgentStatuses() {
-  return AGENTS.map((agent) => {
+  return getAgents().map((agent) => {
     const detected = fs.existsSync(expandPath(agent.detectDir));
     const globalMcp = detected && isMcpInstalled(agent, "global");
     const projectMcp = agent.projectConfigPath ? isMcpInstalled(agent, "project") : null;
@@ -647,7 +648,6 @@ import open2 from "open";
 
 // src/lib/skill-sync.ts
 import fs2 from "fs";
-import os2 from "os";
 import path2 from "path";
 import { fileURLToPath } from "url";
 
@@ -655,13 +655,12 @@ import { fileURLToPath } from "url";
 import { createRequire } from "module";
 import { spawn } from "child_process";
 import { readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
-import { homedir } from "os";
 import { join } from "path";
 var require2 = createRequire(import.meta.url);
 var { version: currentVersion } = require2("../package.json");
-var ONE_DIR = join(homedir(), ".one");
-var CACHE_PATH = join(ONE_DIR, "update-check.json");
-var LOCK_PATH = join(ONE_DIR, "auto-update.lock");
+var ONE_DIR = () => join(homeDir(), ".one");
+var CACHE_PATH = () => join(ONE_DIR(), "update-check.json");
+var LOCK_PATH = () => join(ONE_DIR(), "auto-update.lock");
 var CHECK_INTERVAL_MS = 4 * 60 * 60 * 1e3;
 var AGE_GATE_MS = 30 * 60 * 1e3;
 var LOCK_TTL_MS = 10 * 60 * 1e3;
@@ -679,15 +678,15 @@ async function fetchLatestVersionInfo() {
 }
 function readCache2() {
   try {
-    return JSON.parse(readFileSync(CACHE_PATH, "utf8"));
+    return JSON.parse(readFileSync(CACHE_PATH(), "utf8"));
   } catch {
     return null;
   }
 }
 function writeCache2(latestVersion, publishedAt) {
   try {
-    mkdirSync(join(homedir(), ".one"), { recursive: true });
-    writeFileSync(CACHE_PATH, JSON.stringify({ lastCheck: Date.now(), latestVersion, publishedAt }));
+    mkdirSync(join(homeDir(), ".one"), { recursive: true });
+    writeFileSync(CACHE_PATH(), JSON.stringify({ lastCheck: Date.now(), latestVersion, publishedAt }));
   } catch {
   }
 }
@@ -767,19 +766,19 @@ function isAutoUpdateDisabled() {
 }
 function acquireUpdateLock(targetVersion) {
   try {
-    mkdirSync(ONE_DIR, { recursive: true });
+    mkdirSync(ONE_DIR(), { recursive: true });
   } catch {
   }
   try {
-    const lock = JSON.parse(readFileSync(LOCK_PATH, "utf8"));
+    const lock = JSON.parse(readFileSync(LOCK_PATH(), "utf8"));
     const startedAt = typeof lock.startedAt === "number" ? lock.startedAt : 0;
     if (Date.now() - startedAt < LOCK_TTL_MS) return false;
-    rmSync(LOCK_PATH, { force: true });
+    rmSync(LOCK_PATH(), { force: true });
   } catch {
   }
   try {
     writeFileSync(
-      LOCK_PATH,
+      LOCK_PATH(),
       JSON.stringify({ pid: process.pid, startedAt: Date.now(), targetVersion }),
       { flag: "wx" }
       // fail if another invocation created it first
@@ -803,7 +802,7 @@ function autoUpdate(targetVersion, publishedAt) {
   });
   child.on("error", () => {
     try {
-      rmSync(LOCK_PATH, { force: true });
+      rmSync(LOCK_PATH(), { force: true });
     } catch {
     }
   });
@@ -818,7 +817,7 @@ function getPackagedSkillDir() {
   return path2.resolve(here, "..", "skills", "one");
 }
 function getCanonicalSkillPath() {
-  return path2.join(os2.homedir(), CANONICAL_SKILL_DIR, "one");
+  return path2.join(homeDir(), CANONICAL_SKILL_DIR, "one");
 }
 function getVersionMarkerPath() {
   return path2.join(getCanonicalSkillPath(), VERSION_MARKER);
@@ -1292,7 +1291,7 @@ async function chooseConfigScope(options) {
   return which;
 }
 function tildify(filePath) {
-  const home = os3.homedir();
+  const home = homeDir();
   return filePath.startsWith(home) ? "~" + filePath.slice(home.length) : filePath;
 }
 function scopeLabel(scope) {
@@ -1529,10 +1528,10 @@ function getSkillSourceDir() {
   return path3.resolve(__dirname2, "..", "skills", "one");
 }
 function getCanonicalSkillPath2() {
-  return path3.join(os3.homedir(), CANONICAL_SKILL_DIR2, "one");
+  return path3.join(homeDir(), CANONICAL_SKILL_DIR2, "one");
 }
 function getAgentSkillPath(agent) {
-  return path3.join(os3.homedir(), agent.skillDir, "one");
+  return path3.join(homeDir(), agent.skillDir, "one");
 }
 function isSkillInstalled2() {
   return fs3.existsSync(path3.join(getCanonicalSkillPath2(), "SKILL.md"));
@@ -6053,7 +6052,7 @@ async function syncModel(api, profile, options) {
         updateModelState(platform, model, { status: "failed", pagesProcessed, lastCursor }),
         (async () => {
           try {
-            const { getBackend: getBackend2 } = await import("./runtime-LBDMRCH2.js");
+            const { getBackend: getBackend2 } = await import("./runtime-AFXLC4IC.js");
             const backend = await getBackend2();
             await Promise.race([
               backend.close(),
@@ -6419,7 +6418,7 @@ async function syncModel(api, profile, options) {
         db.exec(`DROP TABLE IF EXISTS _seen_ids`);
       }
       if (options.toMemory !== false) {
-        const backend = await (await import("./runtime-LBDMRCH2.js")).getBackend();
+        const backend = await (await import("./runtime-AFXLC4IC.js")).getBackend();
         const type = `${platform}/${model}`;
         const existing = await backend.listKeysByType(type);
         const sourcePrefix = `${type}:`;
@@ -6505,7 +6504,7 @@ async function syncModel(api, profile, options) {
     let statusCounts;
     if (options.toMemory !== false) {
       try {
-        const backend = await (await import("./runtime-LBDMRCH2.js")).getBackend();
+        const backend = await (await import("./runtime-AFXLC4IC.js")).getBackend();
         const typeName = `${platform}/${model}`;
         const [active, archived] = await Promise.all([
           backend.count(typeName, { status: "active" }),
@@ -7035,19 +7034,18 @@ function inferProfileFromKnowledge(knowledge, modelName, platform) {
 // src/lib/memory/sync/schedule.ts
 import { spawnSync as spawnSync2 } from "child_process";
 import fs10 from "fs";
-import os5 from "os";
+import os from "os";
 import path10 from "path";
 
 // src/lib/memory/sync/schedule-registry.ts
 import fs9 from "fs";
-import os4 from "os";
 import path9 from "path";
-var REGISTRY_DIR = path9.join(os4.homedir(), ".one", "sync");
-var REGISTRY_FILE = path9.join(REGISTRY_DIR, "schedules.json");
+var REGISTRY_DIR = () => path9.join(homeDir(), ".one", "sync");
+var REGISTRY_FILE = () => path9.join(REGISTRY_DIR(), "schedules.json");
 function readRaw() {
   try {
-    if (!fs9.existsSync(REGISTRY_FILE)) return { schedules: [] };
-    const raw = fs9.readFileSync(REGISTRY_FILE, "utf-8");
+    if (!fs9.existsSync(REGISTRY_FILE())) return { schedules: [] };
+    const raw = fs9.readFileSync(REGISTRY_FILE(), "utf-8");
     const parsed = JSON.parse(raw);
     if (!parsed || !Array.isArray(parsed.schedules)) return { schedules: [] };
     return parsed;
@@ -7056,10 +7054,10 @@ function readRaw() {
   }
 }
 function writeRaw(file) {
-  fs9.mkdirSync(REGISTRY_DIR, { recursive: true });
-  const tmp = REGISTRY_FILE + ".tmp";
+  fs9.mkdirSync(REGISTRY_DIR(), { recursive: true });
+  const tmp = REGISTRY_FILE() + ".tmp";
   fs9.writeFileSync(tmp, JSON.stringify(file, null, 2));
-  fs9.renameSync(tmp, REGISTRY_FILE);
+  fs9.renameSync(tmp, REGISTRY_FILE());
 }
 function makeScheduleId(platform, cwd) {
   const slug = path9.basename(cwd).replace(/[^a-zA-Z0-9_-]/g, "-").toLowerCase();
@@ -7129,7 +7127,7 @@ function cronExprToDuration(expr) {
   return null;
 }
 function isWindows() {
-  return os5.platform() === "win32";
+  return os.platform() === "win32";
 }
 function resolveOneBinary() {
   try {
@@ -7733,6 +7731,7 @@ async function syncDoctorCommand() {
     checks.push({ name: "better-sqlite3 loads", ok: false, detail: err instanceof Error ? err.message : String(err) });
   }
   const allOk = checks.every((c) => c.ok);
+  if (!allOk) process.exitCode = 1;
   if (isAgentMode()) {
     json({ ok: allOk, checks });
     return;
@@ -8194,7 +8193,7 @@ ${result.total} results`);
   }
 }
 async function syncSqlCommand(platformModel, sql) {
-  const { syncSqlCommand: runSyncSql } = await import("./sql-YVDVJK7L.js");
+  const { syncSqlCommand: runSyncSql } = await import("./sql-3WNYRCWP.js");
   await runSyncSql(platformModel, sql);
 }
 async function syncDeleteCommand(platformModel, options) {
@@ -8272,7 +8271,7 @@ async function syncDeleteCommand(platformModel, options) {
 async function maybeAutoMigrateLegacy(platform, models) {
   const dbSize = getDatabaseSize(platform);
   if (!dbSize || dbSize === "0 B") return;
-  const { getBackend: getBackend2 } = await import("./runtime-LBDMRCH2.js");
+  const { getBackend: getBackend2 } = await import("./runtime-AFXLC4IC.js");
   const backend = await getBackend2();
   let memoryHasData = false;
   for (const model of models) {
@@ -8288,7 +8287,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-SOHPYWUU.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-U2MZVGU6.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -8297,7 +8296,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p7.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-SOHPYWUU.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-U2MZVGU6.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -8358,7 +8357,7 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
   const state = await readSyncState();
-  const { getBackend: getBackend2 } = await import("./runtime-LBDMRCH2.js");
+  const { getBackend: getBackend2 } = await import("./runtime-AFXLC4IC.js");
   const backend = await getBackend2();
   const syncs = await Promise.all(profiles.map(async (p10) => {
     const modelState = state[p10.platform]?.[p10.model];
@@ -8633,7 +8632,7 @@ function registerSyncSubcommands(sync) {
     await syncSqlCommand(platformModel, sql);
   });
   sync.command("schema <platform/model>").description("Inspect the JSON structure of synced records (field paths, types, examples) \u2014 useful before writing `sync sql` queries").action(async (platformModel) => {
-    const { syncSchemaCommand } = await import("./schema-GKS6MF25.js");
+    const { syncSchemaCommand } = await import("./schema-4JJO2CIZ.js");
     await syncSchemaCommand(platformModel);
   });
   sync.command("delete <platform/model>").description('Delete records from local sync data (e.g. one sync delete notion/pages --id "abc-123")').option("--id <value>", "Delete record by ID").option("--where <conditions>", 'Delete records matching conditions (e.g. "status=archived")').option("--where-sql <predicate>", `Delete using a raw SQL WHERE clause (e.g. "json_extract(data, '$.type') = 'promotion'")`).option("--yes", "Skip confirmation prompt").action(async (platformModel, options) => {
@@ -9410,7 +9409,7 @@ async function memDoctorCommand() {
   }
   if (cfg.embedding.provider === "openai") {
     try {
-      const { embed: embed2 } = await import("./embedding-AVBSB7SG.js");
+      const { embed: embed2 } = await import("./embedding-Z2WCDN6R.js");
       const result = await embed2("connectivity check");
       checks.push({
         name: "OpenAI embedding provider reachable",
@@ -10905,7 +10904,7 @@ Every \`sync X\` command is also exposed as \`mem sync X\` \u2014 same handlers,
 | Command | What it does |
 |---------|-------------|
 | \`sync profiles [platform]\` | List built-in pre-validated profiles |
-| \`sync doctor\` | Verify sync engine health |
+| \`sync doctor\` | Verify sync engine health. **Exits non-zero when not ready**, so \`one sync doctor && one sync run <platform>\` is a safe gate \u2014 run it first from cron/launchd, where a bare PATH can select a Node the native driver wasn't built for |
 | \`sync models <platform>\` | Discover available models |
 | \`sync init <plat> <model>\` | Create/patch profile (seeds from built-in, auto-tests) |
 | \`sync test <plat>/<model>\` | Validate profile. \`--show-searchable\` previews embedded text across 5 samples with per-path hit rates |

package/dist/{migrate-SOHPYWUU.js → migrate-U2MZVGU6.js}

@@ -3,12 +3,12 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-P5KRUMV3.js";
+} from "./chunk-IKYXS7EI.js";
 import "./chunk-44CV5IMX.js";
-import "./chunk-I3ODIT2N.js";
-import "./chunk-HSKAP73B.js";
-import "./chunk-2VDKHGVN.js";
-import "./chunk-RASDPNMJ.js";
+import "./chunk-GNSR3NYN.js";
+import "./chunk-DDCDPVJH.js";
+import "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
 export {
   buildIdentityMap,
   dotPathToJsonbExpr,

package/dist/{runtime-LBDMRCH2.js → runtime-AFXLC4IC.js}

@@ -5,9 +5,9 @@ import {
   resetBackendSingleton,
   updateRecord,
   upsertRecord
-} from "./chunk-HSKAP73B.js";
-import "./chunk-2VDKHGVN.js";
-import "./chunk-RASDPNMJ.js";
+} from "./chunk-DDCDPVJH.js";
+import "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
 export {
   addRecord,
   closeBackendIfCached,

package/dist/{schema-GKS6MF25.js → schema-4JJO2CIZ.js}

@@ -3,12 +3,12 @@ import {
   note,
   okJson,
   requireMemoryInit
-} from "./chunk-I3ODIT2N.js";
+} from "./chunk-GNSR3NYN.js";
 import {
   getBackend
-} from "./chunk-HSKAP73B.js";
-import "./chunk-2VDKHGVN.js";
-import "./chunk-RASDPNMJ.js";
+} from "./chunk-DDCDPVJH.js";
+import "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
 
 // src/lib/memory/sync/schema.ts
 import pc from "picocolors";

package/dist/sql-3WNYRCWP.js

@@ -0,0 +1,12 @@
+import {
+  memSqlCommand,
+  syncSqlCommand
+} from "./chunk-OWDR5L3Q.js";
+import "./chunk-GNSR3NYN.js";
+import "./chunk-DDCDPVJH.js";
+import "./chunk-5O5KODGV.js";
+import "./chunk-EVEUGRCB.js";
+export {
+  memSqlCommand,
+  syncSqlCommand
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.52.1",
+  "version": "1.52.3",
   "description": "CLI for managing One",
   "type": "module",
   "files": [
@@ -23,7 +23,7 @@
     "dev": "tsup --watch",
     "start": "node bin/cli.js",
     "typecheck": "tsc --noEmit",
-    "test": "tsx --test \"src/**/*.test.ts\"",
+    "test": "node scripts/run-tests.mjs",
     "prepare": "tsup"
   },
   "dependencies": {

package/dist/sql-YVDVJK7L.js

@@ -1,12 +0,0 @@
-import {
-  memSqlCommand,
-  syncSqlCommand
-} from "./chunk-PQQAMG2S.js";
-import "./chunk-I3ODIT2N.js";
-import "./chunk-HSKAP73B.js";
-import "./chunk-2VDKHGVN.js";
-import "./chunk-RASDPNMJ.js";
-export {
-  memSqlCommand,
-  syncSqlCommand
-};