@withone/cli 1.54.0 → 1.55.0

package/README.md

@@ -24,7 +24,7 @@
   <a href="https://withone.ai/knowledge"><img src="https://img.shields.io/endpoint?url=https%3A%2F%2Fapi.withone.ai%2Fopen%2Fcount%2Ftools" alt="tools"></a>
 </p>
 
-One gives your AI agent authenticated access to 400+ platforms - Gmail, Slack, Shopify, HubSpot, Stripe, Notion, and everything else - through a single interface. No API keys to juggle, no OAuth flows to build, no request formats to memorize. Connect a platform once, and your agent can search for actions, read the docs, and execute API calls in seconds.
+One gives your AI agent authenticated access to 600+ platforms - Gmail, Slack, Shopify, HubSpot, Stripe, Notion, and everything else - through a single interface. No API keys to juggle, no OAuth flows to build, no request formats to memorize. Connect a platform once, and your agent can search for actions, read the docs, and execute API calls in seconds.
 
 ## Install
 
@@ -48,7 +48,10 @@ one login              # Opens browser for authentication (global or per-directo
 one logout             # Clear credentials (with scope picker and confirmation)
 ```
 
-Requires Node.js 18+.
+Requires Node.js 18+. `one sync` additionally needs Node 20+, because its
+local SQLite engine (`better-sqlite3`, an optional dependency) ships prebuilt
+binaries only for Node 20 and above. On Node 18 every other command works
+normally; `one sync` reports that the engine isn't installed.
 
 ## Quick start
 
@@ -241,7 +244,7 @@ Shows the connection details and asks for confirmation before deleting. Use `--f
 
 ### `one platforms`
 
-Browse all 200+ available platforms.
+Browse all 600+ available platforms.
 
 ```bash
 one platforms              # all platforms

package/dist/{chunk-XN4ZWMLX.js → chunk-FS4HAKZ6.js}

@@ -523,7 +523,9 @@ async function writePageToMemory(profile, records, opts = {}) {
   const searchablePaths = getSearchablePaths(profile);
   const declaresIdentityKeys = (profile.identityKeys?.length ?? 0) > 0;
   const enrichTimestampField = profile.enrich?.timestampField ?? "_enriched_at";
-  for (const record of records) {
+  for (const rawRecord of records) {
+    const derived = deriveFields(rawRecord, profile.derive);
+    const record = Object.keys(derived).length > 0 ? { ...rawRecord, ...derived } : rawRecord;
     report.attempted++;
     const externalId = getByDotPath(record, profile.idField);
     if (externalId === void 0 || externalId === null || externalId === "") {
@@ -608,6 +610,24 @@ function identityValuesFor(prefix, raw, opts = {}) {
   const v = s.toLowerCase().trim();
   return v ? [v] : [];
 }
+function deriveFields(record, derive) {
+  const out = {};
+  if (!derive) return out;
+  for (const [field, spec] of Object.entries(derive)) {
+    const { path: path5, extract } = typeof spec === "string" ? { path: spec, extract: void 0 } : spec;
+    if (!path5) continue;
+    const values = resolveIdentityPath(record, path5).filter((v) => v !== null && v !== void 0 && typeof v !== "object");
+    if (values.length === 0) continue;
+    if (extract === "email") {
+      const emails = values.flatMap((v) => identityValuesFor("email", v));
+      if (emails.length === 0) continue;
+      out[field] = emails[0];
+      continue;
+    }
+    out[field] = values[0];
+  }
+  return out;
+}
 function tokenizeIdentityPath(path5) {
   const tokens = [];
   const re = /([^.[\]]+)|\[([^\]]*)\]/g;

package/dist/index.js

@@ -66,7 +66,7 @@ import {
   writeDraftProfile,
   writePageToMemory,
   writeProfile
-} from "./chunk-XN4ZWMLX.js";
+} from "./chunk-FS4HAKZ6.js";
 import {
   getByDotPath
 } from "./chunk-44CV5IMX.js";
@@ -1104,7 +1104,7 @@ async function loginCommand() {
   console.log(pc15.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log(pc15.cyan("  \u2502"));
   console.log(pc15.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc15.cyan("  \u2502  lets you interact with 400+ third-party platforms (Gmail,"));
+  console.log(pc15.cyan("  \u2502  lets you interact with 600+ third-party platforms (Gmail,"));
   console.log(pc15.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
   console.log(pc15.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
   console.log(pc15.cyan("  \u2502  third-party platform or external service, use the `one`"));
@@ -1711,7 +1711,7 @@ function printOnboardingPrompt() {
   console.log(pc2.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log(pc2.cyan("  \u2502"));
   console.log(pc2.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc2.cyan("  \u2502  lets you interact with 400+ third-party platforms (Gmail,"));
+  console.log(pc2.cyan("  \u2502  lets you interact with 600+ third-party platforms (Gmail,"));
   console.log(pc2.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
   console.log(pc2.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
   console.log(pc2.cyan("  \u2502  third-party platform or external service, use the `one`"));
@@ -1888,7 +1888,7 @@ async function promptConnectIntegrations(apiKey, connParams) {
         label: i.label,
         hint: i.hint
       })),
-      { value: "more", label: "Browse all 200+ platforms" },
+      { value: "more", label: "Browse all 600+ platforms" },
       { value: "skip", label: "Skip for now", hint: "you can always run one add later" }
     ];
     const message = first ? "Connect your first integration?" : "Connect another?";
@@ -5888,6 +5888,21 @@ async function enrichPhase(api, db, config2, model, idField, connectionKey, plat
   const duration = elapsed < 1e3 ? `${elapsed}ms` : elapsed < 6e4 ? `${(elapsed / 1e3).toFixed(1)}s` : `${Math.floor(elapsed / 6e4)}m ${Math.floor(elapsed % 6e4 / 1e3)}s`;
   return { enriched, skipped, rateLimited, total, duration };
 }
+async function enrichOneForPreview(api, profile, record, connectionKey) {
+  const config2 = profile.enrich;
+  if (!config2) return null;
+  try {
+    const detailAction = (await resolveActionDetails(api, config2.actionId)).details;
+    const detail = await enrichSingleRow(api, detailAction, config2, record, connectionKey, profile.platform);
+    if (!detail) return null;
+    let enrichedData = detail;
+    if (config2.fields && config2.fields.length > 0) enrichedData = pickFields(enrichedData, config2.fields);
+    if (config2.exclude && config2.exclude.length > 0) stripExcludedFields(enrichedData, config2.exclude);
+    return config2.merge !== false ? deepMerge(record, enrichedData) : { ...enrichedData, [profile.idField]: record[profile.idField] };
+  } catch {
+    return null;
+  }
+}
 async function enrichSingleRow(api, detailAction, config2, row, connectionKey, platform) {
   const pathVars = interpolateParams(config2.pathVars, row);
   const queryParams = interpolateParams(config2.queryParams, row);
@@ -6879,7 +6894,14 @@ async function testSyncProfile(api, profile) {
   }));
   report.sample = first;
   report.samples = records.slice(0, SEARCHABLE_SAMPLE_SIZE);
-  report.identityKeysPreview = buildIdentityKeysPreview(report.samples, profile);
+  if (profile.enrich && (profile.identityKeys?.length ?? 0) > 0 && report.samples.length > 0) {
+    const merged = await enrichOneForPreview(api, profile, report.samples[0], connectionKey);
+    if (merged) {
+      const preview = buildIdentityKeysPreview([merged], profile);
+      if (preview) report.identityKeysPreview = { ...preview, previewedAfterEnrich: true };
+    }
+  }
+  report.identityKeysPreview ??= buildIdentityKeysPreview(report.samples, profile);
   report.ok = checks.every((c) => c.ok);
   return report;
 }
@@ -8379,7 +8401,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
       `  detected legacy .one/sync/data/${platform}.db (${dbSize}) \u2014 auto-migrating into memory before sync.
 `
     );
-    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-UGDDHWGY.js");
+    const { memMigrateCommand: memMigrateCommand3 } = await import("./migrate-37A463L6.js");
     await memMigrateCommand3({ platform, yes: true });
     return;
   }
@@ -8388,7 +8410,7 @@ async function maybeAutoMigrateLegacy(platform, models) {
     initialValue: true
   });
   if (p7.isCancel(shouldMigrate) || !shouldMigrate) return;
-  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-UGDDHWGY.js");
+  const { memMigrateCommand: memMigrateCommand2 } = await import("./migrate-37A463L6.js");
   await memMigrateCommand2({ platform, yes: true });
 }
 async function syncSuggestSearchableCommand(platformModel, options = {}) {
@@ -10036,7 +10058,7 @@ Before using any feature, read its guide section first: \`one guide actions\`, \
 
 ## Features
 
-### 1. Actions \u2014 Execute API calls on 400+ platforms
+### 1. Actions \u2014 Execute API calls on 600+ platforms
 Search for actions, read their docs, and execute them. This is the core workflow.
 
 **Quick start:**
@@ -10859,6 +10881,30 @@ Enrichment runs after list sync completes (Phase 2), not inline. It's inherently
 
 **Limitation:** Each profile supports one enrich action. If you need multiple enrichments (e.g. both summary and transcript from Fathom), create a second profile/model for the second enrichment.
 
+## Derived fields (\`derive\`)
+
+Add flat, queryable top-level fields computed from paths already in the record \u2014 no shell, no \`jq\`:
+
+\`\`\`json
+{
+  "derive": {
+    "from_email": {
+      "path": "messages[0].payload.headers[name=From].value",
+      "extract": "email"
+    },
+    "company": "organization.name"
+  }
+}
+\`\`\`
+
+- Paths use the same resolver as \`identityKeys\`, so \`[]\` wildcards, \`[0]\` indexes and \`[name=From]\` filters all work
+- \`extract: "email"\` pulls the address out of a display-name header (\`"Jane <jane@acme.com>"\` \u2192 \`jane@acme.com\`), lowercased
+- A path resolving to nothing **omits** the field rather than writing null, so \`--where\` filters behave
+- A path resolving to several values takes the first \u2014 it's a flat field by definition, and the path syntax lets you be specific
+- Applied on both sync phases, so an enriching profile gets the same field whether the record came from the list or the detail pass
+
+**Prefer \`derive\` over \`transform\` for extracting a field.** \`transform\` spawns \`sh -c\`, so it needs \`jq\` (or whatever you invoke) on PATH and does nothing on Windows. \`derive\` is pure and works everywhere \u2014 which is why the built-in \`gmail/gmailThreads\` profile uses it for \`from_email\`. Reach for \`transform\` when you need real computation, not field extraction.
+
 ## Record Transform
 
 Pipe records through any shell command or flow between fetch and store. The command receives a JSON array on stdin and must return a JSON array on stdout.
@@ -10933,7 +10979,9 @@ Two ways to tag a record with a cross-platform identifier (e.g. email), dependin
 ]}
 \`\`\`
 
-Each \`path\` supports \`[]\` wildcards (one key per element) and a \`[name=From]\` equality filter (e.g. Gmail \`messages[].payload.headers[name=From].value\`). \`email\`-prefixed values are email-extracted, so display-name headers (\`"Jane <jane@acme.com>"\`) and comma-lists normalize cleanly. Values are lowercased/trimmed/deduped. \`sync test\` previews how many identity keys each record resolves.
+Each \`path\` supports \`[]\` wildcards (one key per element) and a \`[name=From]\` equality filter (e.g. Gmail \`messages[].payload.headers[name=From].value\`). \`email\`-prefixed values are email-extracted, so display-name headers (\`"Jane <jane@acme.com>"\`) and comma-lists normalize cleanly. Values are lowercased/trimmed/deduped.
+
+\`sync test\` previews how many identity keys each record resolves. For an **enriching** profile the participant paths live in the detail payload, so \`sync test\` spends one detail call on the first sample and previews against the merged shape \u2014 you see the keys a real sync would write, not zero plus a promise. If that call can't be made (rate limit, permissions), it falls back to the list-shape preview and says the keys resolve after enrichment.
 
 The built-in \`gmail/gmailThreads\` profile collects From/To/**Cc/Bcc**. Gmail only returns a \`Bcc\` header on messages the authenticated user sent \u2014 it is stripped for recipients \u2014 so Bcc keys appear on your own sent threads and nowhere else.
 
@@ -11229,7 +11277,7 @@ function buildStep1() {
     nextCommand: "one onboard --step 2",
     message: `# One CLI \u2014 Agent Onboarding
 
-You now have access to the One CLI. It connects you to 400+ platforms
+You now have access to the One CLI. It connects you to 600+ platforms
 (Gmail, Slack, Stripe, Notion, etc.) \u2014 you'll learn the details shortly.
 
 IMPORTANT: Your only task right now is to send the message below to the
@@ -11239,7 +11287,7 @@ Do not offer demos yet. Just send this message and wait for their reply:
 ---
 
 I just got access to the One CLI \u2014 it connects me to your platforms like
-Gmail, Slack, Stripe, and 400+ others so I can work with them directly.
+Gmail, Slack, Stripe, and 600+ others so I can work with them directly.
 I'll show you what I can do in a moment.
 
 First, one quick setup step: right now only this conversation knows about
@@ -11268,7 +11316,7 @@ If they declined, skip this section.
 ## One CLI \u2014 Platform Integrations
 
 The One CLI (\`one\`) is installed and configured on this machine. It is a
-command-line tool that gives AI agents the ability to interact with 400+
+command-line tool that gives AI agents the ability to interact with 600+
 third-party platforms (Gmail, Slack, Shopify, HubSpot, Stripe, GitHub,
 Notion, Salesforce, etc.) through a single, unified interface.
 
@@ -11363,7 +11411,7 @@ function buildStep3(connections) {
 The user can connect any of these popular platforms:
 Gmail, Google Calendar, Slack, Notion, Shopify, Stripe, HubSpot, GitHub,
 Salesforce, QuickBooks, Asana, Jira, Linear, Intercom, Zendesk, Twilio,
-and 400+ more. Run \`one platforms\` for the full list.`);
+and 600+ more. Run \`one platforms\` for the full list.`);
   sections.push("## Onboarding complete!\n\nYou're all set. Use `one --agent guide` any time you need the full reference.");
   return {
     step: 3,
@@ -11394,7 +11442,7 @@ platform before you can start using actions. Suggest they run:
   one add slack
   one add <any-platform>
 
-Run \`one platforms\` to see all 400+ available platforms.`;
+Run \`one platforms\` to see all 600+ available platforms.`;
   }
   const header = `## Current State
 
@@ -11831,7 +11879,7 @@ silenceWarningsInAgentMode();
 var require4 = createRequire3(import.meta.url);
 var { version } = require4("../package.json");
 var program = new Command();
-program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 400+ platforms through one interface.
+program.name("one").option("--agent", "Machine-readable JSON output (no colors, spinners, or prompts)").description(`One CLI \u2014 Connect AI agents to 600+ platforms through one interface.
 
   Setup:
     one login                             Authenticate via browser (opens app.withone.ai)
@@ -11903,7 +11951,7 @@ program.name("one").option("--agent", "Machine-readable JSON output (no colors,
         -d '{"to":"j@example.com","subject":"Hello","body":"Hi!","connectionKey":"live::gmail::default::abc123"}'
 
   Platform names are lowercase; multi-word names use dashes (e.g. hubspot, ship-station, google-calendar).
-  Run 'one platforms' to browse all 400+ available platforms.`).version(version);
+  Run 'one platforms' to browse all 600+ available platforms.`).version(version);
 var updateCheckPromise;
 program.hook("preAction", (thisCommand, actionCommand) => {
   const opts = program.opts();

package/dist/{migrate-UGDDHWGY.js → migrate-37A463L6.js}

@@ -3,7 +3,7 @@ import {
   dotPathToJsonbExpr,
   memMigrateCommand,
   reviveStringifiedJson
-} from "./chunk-XN4ZWMLX.js";
+} from "./chunk-FS4HAKZ6.js";
 import "./chunk-44CV5IMX.js";
 import "./chunk-GNSR3NYN.js";
 import "./chunk-DDCDPVJH.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@withone/cli",
-  "version": "1.54.0",
+  "version": "1.55.0",
   "description": "CLI for managing One",
   "type": "module",
   "files": [
@@ -36,7 +36,7 @@
   },
   "optionalDependencies": {
     "@electric-sql/pglite": "^0.2.17",
-    "better-sqlite3": "^11.7.0",
+    "better-sqlite3": "^12.11.1",
     "pg": "^8.20.0"
   },
   "devDependencies": {

package/profiles/gmail/gmailThreads.json

@@ -21,6 +21,12 @@
     { "prefix": "email", "path": "messages[].payload.headers[name=Cc].value" },
     { "prefix": "email", "path": "messages[].payload.headers[name=Bcc].value" }
   ],
+  "derive": {
+    "from_email": {
+      "path": "messages[0].payload.headers[name=From].value",
+      "extract": "email"
+    }
+  },
   "enrich": {
     "actionId": "conn_mod_def::GJ3ok0Eq0R8::AAzgZVLqTg2iBuITKpJLZg",
     "pathVars": { "userId": "me", "id": "{id}" },

package/skills/one/SKILL.md

@@ -20,7 +20,7 @@ description: |
 
 # One CLI
 
-You have access to the One CLI which lets you interact with 400+ third-party platforms through their APIs. Always include the `--agent` flag right after `one` for structured JSON output.
+You have access to the One CLI which lets you interact with 600+ third-party platforms through their APIs. Always include the `--agent` flag right after `one` for structured JSON output.
 
 If the user wants a separate API key / connections for a specific project (vs. their default), walk them through running `one init` from that project folder and picking the "project" scope — see `references/scoping.md`. For monorepo subprojects (where a parent already has `.git`/`package.json`), have them `mkdir .one` in the subproject first so the config is keyed to that dir, not the monorepo root.
 
@@ -311,6 +311,8 @@ Without declared paths, the default walker concatenates every string in the reco
 
 **Connections are late-bound** — profiles use `"connection": { "platform": "<name>" }`, not literal `connectionKey` strings. The key is resolved at sync time, so `one add <platform>` (re-auth) doesn't break the profile. For multi-account platforms, add `"tag": "<connection-tag>"` to disambiguate, and create the tagged connection with `one add <platform> --tag <name>`. Don't hardcode connection keys in profiles.
 
+**Extracting a flat field? Use `derive`, not `transform`.** `derive` computes top-level fields from paths already in the record (`"derive": { "from_email": { "path": "messages[0].payload.headers[name=From].value", "extract": "email" } }`), using the same path syntax as `identityKeys`. `transform` spawns `sh -c`, so it needs `jq` on PATH and silently does nothing on Windows — never put one in a profile you intend to share. A path that resolves to nothing omits the field rather than writing null.
+
 **Installed profiles do not auto-update.** `sync run` reads only `.one/sync/profiles/<platform>_<model>.json` and never merges the shipped built-in, so a profile created before a capability shipped silently lacks it — a pre-#167 gmail profile writes zero identity keys, forever, with no change in record counts. `sync run` warns when the built-in declares `identityKeys` / `identityKey` / `enrich` / `dateFilter` / `memory` that your copy lacks (agent mode: a `profileDrift` array). Fix with `one sync init <platform> <model>`, which patches rather than overwrites.
 
 **Cross-platform identity on a profile.** Two separate fields, and picking the wrong one silently mangles data: