@withone/cli 1.53.0 → 1.54.1

package/README.md

@@ -24,7 +24,7 @@
   <a href="https://withone.ai/knowledge"><img src="https://img.shields.io/endpoint?url=https%3A%2F%2Fapi.withone.ai%2Fopen%2Fcount%2Ftools" alt="tools"></a>
 </p>
 
-One gives your AI agent authenticated access to 400+ platforms - Gmail, Slack, Shopify, HubSpot, Stripe, Notion, and everything else - through a single interface. No API keys to juggle, no OAuth flows to build, no request formats to memorize. Connect a platform once, and your agent can search for actions, read the docs, and execute API calls in seconds.
+One gives your AI agent authenticated access to 600+ platforms - Gmail, Slack, Shopify, HubSpot, Stripe, Notion, and everything else - through a single interface. No API keys to juggle, no OAuth flows to build, no request formats to memorize. Connect a platform once, and your agent can search for actions, read the docs, and execute API calls in seconds.
 
 ## Install
 
@@ -48,7 +48,10 @@ one login              # Opens browser for authentication (global or per-directo
 one logout             # Clear credentials (with scope picker and confirmation)
 ```
 
-Requires Node.js 18+.
+Requires Node.js 18+. `one sync` additionally needs Node 20+, because its
+local SQLite engine (`better-sqlite3`, an optional dependency) ships prebuilt
+binaries only for Node 20 and above. On Node 18 every other command works
+normally; `one sync` reports that the engine isn't installed.
 
 ## Quick start
 
@@ -241,7 +244,7 @@ Shows the connection details and asks for confirmation before deleting. Use `--f
 
 ### `one platforms`
 
-Browse all 200+ available platforms.
+Browse all 600+ available platforms.
 
 ```bash
 one platforms              # all platforms

package/dist/{chunk-IKYXS7EI.js → chunk-XN4ZWMLX.js}

@@ -143,6 +143,15 @@ function loadBuiltinProfile(platform, model) {
     return null;
   }
 }
+var CAPABILITY_FIELDS = ["identityKeys", "identityKey", "enrich", "dateFilter", "memory"];
+function findMissingBuiltinCapabilities(platform, model, installed) {
+  if (!installed) return [];
+  const builtin = loadBuiltinProfile(platform, model);
+  if (!builtin) return [];
+  return CAPABILITY_FIELDS.filter(
+    (field) => builtin[field] !== void 0 && installed[field] === void 0
+  );
+}
 function listBuiltinProfiles(platform) {
   const dir = getProfilesDir();
   if (!dir) return [];
@@ -1070,6 +1079,7 @@ export {
   resolveEntityIdentity,
   collectIdentityKeys,
   loadBuiltinProfile,
+  findMissingBuiltinCapabilities,
   listBuiltinProfiles,
   memMigrateCommand,
   buildIdentityMap,

package/dist/index.js

@@ -45,6 +45,7 @@ import {
   ensureTable,
   evolveSchema,
   extractSearchableFromPaths,
+  findMissingBuiltinCapabilities,
   generateTemplate,
   getDatabaseSize,
   getSearchablePaths,
@@ -65,7 +66,7 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-IKYXS7EI.js";
+} from "./chunk-XN4ZWMLX.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -1103,7 +1104,7 @@ async function loginCommand() {
   console.log(pc15.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log(pc15.cyan("  \u2502"));
   console.log(pc15.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc15.cyan("  \u2502  lets you interact with 400+ third-party platforms (Gmail,"));
+  console.log(pc15.cyan("  \u2502  lets you interact with 600+ third-party platforms (Gmail,"));
   console.log(pc15.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
   console.log(pc15.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
   console.log(pc15.cyan("  \u2502  third-party platform or external service, use the `one`"));
@@ -1710,7 +1711,7 @@ function printOnboardingPrompt() {
   console.log(pc2.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log(pc2.cyan("  \u2502"));
   console.log(pc2.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc2.cyan("  \u2502  lets you interact with 400+ third-party platforms (Gmail,"));
+  console.log(pc2.cyan("  \u2502  lets you interact with 600+ third-party platforms (Gmail,"));
   console.log(pc2.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
   console.log(pc2.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
   console.log(pc2.cyan("  \u2502  third-party platform or external service, use the `one`"));
@@ -1887,7 +1888,7 @@ async function promptConnectIntegrations(apiKey, connParams) {
         label: i.label,
         hint: i.hint
       })),
-      { value: "more", label: "Browse all 200+ platforms" },
+      { value: "more", label: "Browse all 600+ platforms" },
       { value: "skip", label: "Skip for now", hint: "you can always run one add later" }
     ];
     const message = first ? "Connect your first integration?" : "Connect another?";
@@ -7829,7 +7830,12 @@ async function syncProfilesCommand(platform) {
         model: p10.model,
         description: p10.description,
         hasEnrich: !!p10.enrich,
-        hasIdentityKey: !!p10.identityKey
+        // `identityKey` (singular) is the entity-merge key; `identityKeys`
+        // (plural, #167) are non-merging association keys. Reading only the
+        // singular reported hasIdentityKey:false for gmail/gcal/fathom — the
+        // three profiles the plural form was added for. (#129/#130)
+        hasIdentityKey: !!p10.identityKey || !!p10.identityKeys,
+        hasIdentityKeys: !!p10.identityKeys
       })),
       total: profiles.length,
       _hint: profiles.length > 0 ? "Use a built-in profile: one --agent sync init <platform> <model>" : "No built-in profiles found. Use sync init to auto-infer from action knowledge."
@@ -7846,7 +7852,7 @@ async function syncProfilesCommand(platform) {
   for (const p10 of profiles) {
     const extras = [];
     if (p10.enrich) extras.push("enrich");
-    if (p10.identityKey) extras.push("identity");
+    if (p10.identityKey || p10.identityKeys) extras.push("identity");
     if (p10.dateFilter) extras.push("incremental");
     const tags = extras.length > 0 ? ` ${pc9.dim(`[${extras.join(", ")}]`)}` : "";
     console.log(`  ${pc9.bold(`${p10.platform}/${p10.model}`.padEnd(35))} ${p10.description}${tags}`);
@@ -8158,6 +8164,15 @@ async function syncRunCommand(platform, options) {
   if (!options.dryRun) {
     await maybeAutoMigrateLegacy(platform, toSync.map((p10) => p10.model));
   }
+  const profileDrift = toSync.map((p10) => ({ model: p10.model, missing: findMissingBuiltinCapabilities(platform, p10.model, p10) })).filter((d) => d.missing.length > 0);
+  if (profileDrift.length > 0 && !isAgentMode()) {
+    for (const d of profileDrift) {
+      console.log(
+        `  ${pc9.yellow("!")} ${platform}/${d.model} is missing ${d.missing.map((f) => pc9.bold(f)).join(", ")} from the current built-in profile.
+    Run ${pc9.bold(`one sync init ${platform} ${d.model}`)} to pick ${d.missing.length > 1 ? "them" : "it"} up.`
+      );
+    }
+  }
   const results = [];
   for (const profile of toSync) {
     try {
@@ -8181,7 +8196,19 @@ async function syncRunCommand(platform, options) {
     }
   }
   if (isAgentMode()) {
-    json({ platform, results });
+    json({
+      platform,
+      results,
+      // Surfaced to agents too: a profile silently missing a capability the
+      // built-in now declares is invisible in the record counts. (#129/#130)
+      ...profileDrift.length > 0 ? {
+        profileDrift: profileDrift.map((d) => ({
+          model: d.model,
+          missingFields: d.missing,
+          fix: `one sync init ${platform} ${d.model}`
+        }))
+      } : {}
+    });
     return;
   }
   for (const r of results) {
@@ -8352,7 +8379,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-U2MZVGU6.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-UGDDHWGY.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -8361,7 +8388,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p7.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-U2MZVGU6.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-UGDDHWGY.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -10009,7 +10036,7 @@ Before using any feature, read its guide section first: \`one guide actions\`, \
 
 ## Features
 
-### 1. Actions \u2014 Execute API calls on 400+ platforms
+### 1. Actions \u2014 Execute API calls on 600+ platforms
 Search for actions, read their docs, and execute them. This is the core workflow.
 
 **Quick start:**
@@ -10908,6 +10935,10 @@ Two ways to tag a record with a cross-platform identifier (e.g. email), dependin
 
 Each \`path\` supports \`[]\` wildcards (one key per element) and a \`[name=From]\` equality filter (e.g. Gmail \`messages[].payload.headers[name=From].value\`). \`email\`-prefixed values are email-extracted, so display-name headers (\`"Jane <jane@acme.com>"\`) and comma-lists normalize cleanly. Values are lowercased/trimmed/deduped. \`sync test\` previews how many identity keys each record resolves.
 
+The built-in \`gmail/gmailThreads\` profile collects From/To/**Cc/Bcc**. Gmail only returns a \`Bcc\` header on messages the authenticated user sent \u2014 it is stripped for recipients \u2014 so Bcc keys appear on your own sent threads and nowhere else.
+
+**Upgrading an existing profile.** \`sync run\` reads only your on-disk profile at \`.one/sync/profiles/<platform>_<model>.json\` \u2014 it never merges built-in updates, so a profile created before a capability shipped will not have it. \`sync run\` now warns when the shipped built-in declares \`identityKeys\`, \`identityKey\`, \`enrich\`, \`dateFilter\`, or \`memory\` that your copy lacks, and \`--agent\` output carries a \`profileDrift\` array with the same information. Run \`one sync init <platform> <model>\` to pick the fields up (it patches, preserving your edits).
+
 Query everything sharing an identity key, grouped by type:
 
 \`\`\`bash
@@ -11198,7 +11229,7 @@ function buildStep1() {
     nextCommand: "one onboard --step 2",
     message: `# One CLI \u2014 Agent Onboarding
 
-You now have access to the One CLI. It connects you to 400+ platforms
+You now have access to the One CLI. It connects you to 600+ platforms
 (Gmail, Slack, Stripe, Notion, etc.) \u2014 you'll learn the details shortly.
 
 IMPORTANT: Your only task right now is to send the message below to the
@@ -11208,7 +11239,7 @@ Do not offer demos yet. Just send this message and wait for their reply:
 ---
 
 I just got access to the One CLI \u2014 it connects me to your platforms like
-Gmail, Slack, Stripe, and 400+ others so I can work with them directly.
+Gmail, Slack, Stripe, and 600+ others so I can work with them directly.
 I'll show you what I can do in a moment.
 
 First, one quick setup step: right now only this conversation knows about
@@ -11237,7 +11268,7 @@ If they declined, skip this section.
 ## One CLI \u2014 Platform Integrations
 
 The One CLI (\`one\`) is installed and configured on this machine. It is a
-command-line tool that gives AI agents the ability to interact with 400+
+command-line tool that gives AI agents the ability to interact with 600+
 third-party platforms (Gmail, Slack, Shopify, HubSpot, Stripe, GitHub,
 Notion, Salesforce, etc.) through a single, unified interface.
 
@@ -11332,7 +11363,7 @@ function buildStep3(connections) {
 The user can connect any of these popular platforms:
 Gmail, Google Calendar, Slack, Notion, Shopify, Stripe, HubSpot, GitHub,
 Salesforce, QuickBooks, Asana, Jira, Linear, Intercom, Zendesk, Twilio,
-and 400+ more. Run \`one platforms\` for the full list.`);
+and 600+ more. Run \`one platforms\` for the full list.`);
   sections.push("## Onboarding complete!\n\nYou're all set. Use `one --agent guide` any time you need the full reference.");
   return {
     step: 3,
@@ -11363,7 +11394,7 @@ platform before you can start using actions. Suggest they run:
   one add slack
   one add <any-platform>
 
-Run \`one platforms\` to see all 400+ available platforms.`;
+Run \`one platforms\` to see all 600+ available platforms.`;
   }
   const header = `## Current State
 
@@ -11800,7 +11831,7 @@ silenceWarningsInAgentMode();
 var require4 = createRequire3(import.meta.url);
 var { version } = require4("../package.json");
 var program = new Command();
-program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 400+ platforms through one interface.
+program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 600+ platforms through one interface.
 
   Setup:
     one login                             Authenticate via browser (opens app.withone.ai)
@@ -11872,7 +11903,7 @@ program.name("one").option("--agent", "Machine-readable JSON output (no colors,
         -d '{"to":"j@example.com","subject":"Hello","body":"Hi!","connectionKey":"live::gmail::default::abc123"}'
 
   Platform names are lowercase; multi-word names use dashes (e.g. hubspot, ship-station, google-calendar).
-  Run 'one platforms' to browse all 400+ available platforms.`).version(version);
+  Run 'one platforms' to browse all 600+ available platforms.`).version(version);
 var updateCheckPromise;
 program.hook("preAction", (thisCommand, actionCommand) => {
   const opts = program.opts();

package/dist/{migrate-U2MZVGU6.js → migrate-UGDDHWGY.js}

@@ -3,7 +3,7 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-IKYXS7EI.js";
+} from "./chunk-XN4ZWMLX.js";
 import "./chunk-44CV5IMX.js";
 import "./chunk-GNSR3NYN.js";
 import "./chunk-DDCDPVJH.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.53.0",
+  "version": "1.54.1",
   "description": "CLI for managing One",
   "type": "module",
   "files": [
@@ -36,7 +36,7 @@
   },
   "optionalDependencies": {
     "@electric-sql/pglite": "^0.2.17",
-    "better-sqlite3": "^11.7.0",
+    "better-sqlite3": "^12.11.1",
     "pg": "^8.20.0"
   },
   "devDependencies": {

package/profiles/gmail/gmailThreads.json

@@ -18,7 +18,8 @@
   "identityKeys": [
     { "prefix": "email", "path": "messages[].payload.headers[name=From].value" },
     { "prefix": "email", "path": "messages[].payload.headers[name=To].value" },
-    { "prefix": "email", "path": "messages[].payload.headers[name=Cc].value" }
+    { "prefix": "email", "path": "messages[].payload.headers[name=Cc].value" },
+    { "prefix": "email", "path": "messages[].payload.headers[name=Bcc].value" }
   ],
   "enrich": {
     "actionId": "conn_mod_def::GJ3ok0Eq0R8::AAzgZVLqTg2iBuITKpJLZg",

package/skills/one/SKILL.md

@@ -20,7 +20,7 @@ description: |
 
 # One CLI
 
-You have access to the One CLI which lets you interact with 400+ third-party platforms through their APIs. Always include the `--agent` flag right after `one` for structured JSON output.
+You have access to the One CLI which lets you interact with 600+ third-party platforms through their APIs. Always include the `--agent` flag right after `one` for structured JSON output.
 
 If the user wants a separate API key / connections for a specific project (vs. their default), walk them through running `one init` from that project folder and picking the "project" scope — see `references/scoping.md`. For monorepo subprojects (where a parent already has `.git`/`package.json`), have them `mkdir .one` in the subproject first so the config is keyed to that dir, not the monorepo root.
 
@@ -311,6 +311,8 @@ Without declared paths, the default walker concatenates every string in the reco
 
 **Connections are late-bound** — profiles use `"connection": { "platform": "<name>" }`, not literal `connectionKey` strings. The key is resolved at sync time, so `one add <platform>` (re-auth) doesn't break the profile. For multi-account platforms, add `"tag": "<connection-tag>"` to disambiguate, and create the tagged connection with `one add <platform> --tag <name>`. Don't hardcode connection keys in profiles.
 
+**Installed profiles do not auto-update.** `sync run` reads only `.one/sync/profiles/<platform>_<model>.json` and never merges the shipped built-in, so a profile created before a capability shipped silently lacks it — a pre-#167 gmail profile writes zero identity keys, forever, with no change in record counts. `sync run` warns when the built-in declares `identityKeys` / `identityKey` / `enrich` / `dateFilter` / `memory` that your copy lacks (agent mode: a `profileDrift` array). Fix with `one sync init <platform> <model>`, which patches rather than overwrites.
+
 **Cross-platform identity on a profile.** Two separate fields, and picking the wrong one silently mangles data:
 
 - `"identityKey": "properties.email"` — singular. "This record IS this entity." One dot-path; the value lands in `keys[]` and MERGES records for the same entity across platforms (HubSpot + Attio for one person collapse into a single record).