@withone/cli 1.55.2 → 1.55.4

package/dist/index.js

@@ -155,7 +155,7 @@ import { Command } from "commander";
 
 // src/commands/init.ts
 import * as p3 from "@clack/prompts";
-import pc2 from "picocolors";
+import pc3 from "picocolors";
 import fs3 from "fs";
 import path4 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -654,8 +654,9 @@ import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/commands/update.ts
 import { spawn } from "child_process";
-import { readFileSync, writeFileSync, mkdirSync, rmSync } from "fs";
-import { join } from "path";
+import { existsSync as existsSync2, readFileSync, writeFileSync, mkdirSync, rmSync, openSync, closeSync } from "fs";
+import { delimiter, dirname, join } from "path";
+import pc2 from "picocolors";
 
 // src/lib/version.ts
 import { createRequire } from "module";
@@ -688,9 +689,13 @@ var currentVersion = cliVersion();
 var ONE_DIR = () => join(homeDir(), ".one");
 var CACHE_PATH = () => join(ONE_DIR(), "update-check.json");
 var LOCK_PATH = () => join(ONE_DIR(), "auto-update.lock");
+var STATE_PATH = () => join(ONE_DIR(), "auto-update-state.json");
+var LOG_PATH = () => join(ONE_DIR(), "auto-update.log");
 var CHECK_INTERVAL_MS = 4 * 60 * 60 * 1e3;
 var AGE_GATE_MS = 30 * 60 * 1e3;
 var LOCK_TTL_MS = 10 * 60 * 1e3;
+var FAILED_UPDATE_NOTICE_THRESHOLD = 3;
+var FAILED_UPDATE_NOTICE_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 async function fetchLatestVersionInfo() {
   try {
     const res = await fetch("https://registry.npmjs.org/@withone/cli");
@@ -734,6 +739,22 @@ async function checkLatestVersionCached() {
 function getCurrentVersion() {
   return currentVersion;
 }
+function resolveNpmBin(nodeExecPath = process.execPath) {
+  const name = process.platform === "win32" ? "npm.cmd" : "npm";
+  try {
+    const sibling = join(dirname(nodeExecPath), name);
+    if (existsSync2(sibling)) return sibling;
+  } catch {
+  }
+  return name;
+}
+function updateChildEnv(env = process.env, nodeExecPath = process.execPath) {
+  const nodeDir = dirname(nodeExecPath);
+  const key = Object.keys(env).find((k) => k.toUpperCase() === "PATH") ?? "PATH";
+  const parts = (env[key] ?? "").split(delimiter).filter(Boolean);
+  if (!parts.includes(nodeDir)) parts.unshift(nodeDir);
+  return { ...env, [key]: parts.join(delimiter) };
+}
 async function updateCommand() {
   const s = createSpinner();
   s.start("Checking for updates...");
@@ -753,23 +774,26 @@ async function updateCommand() {
   }
   s.stop(`Update available: v${currentVersion} \u2192 v${latestVersion}`);
   console.log(`Updating @withone/cli: v${currentVersion} \u2192 v${latestVersion}...`);
+  const npmBin = resolveNpmBin();
+  const env = updateChildEnv();
+  const useShell = process.platform === "win32";
+  const command = useShell ? `"${npmBin}"` : npmBin;
   await new Promise((resolve) => {
-    const child = spawn("npm", ["cache", "clean", "--force"], {
-      stdio: "ignore",
-      shell: true
-    });
+    const child = spawn(command, ["cache", "clean", "--force"], { stdio: "ignore", shell: useShell, env });
     child.on("close", () => resolve());
     child.on("error", () => resolve());
   });
   const code = await new Promise((resolve) => {
-    const child = spawn("npm", ["install", "-g", `@withone/cli@${latestVersion}`, "--force"], {
+    const child = spawn(command, ["install", "-g", `@withone/cli@${latestVersion}`, "--force"], {
       stdio: isAgentMode() ? "pipe" : "inherit",
-      shell: true
+      shell: useShell,
+      env
     });
     child.on("close", resolve);
     child.on("error", () => resolve(1));
   });
   if (code === 0) {
+    clearAutoUpdateState();
     if (isAgentMode()) {
       json({ current: currentVersion, latest: latestVersion, updated: true, message: "Updated successfully" });
     } else {
@@ -791,15 +815,74 @@ function isAutoUpdateDisabled() {
   const v = process.env.ONE_NO_AUTO_UPDATE ?? process.env.ONE_DISABLE_AUTO_UPDATE;
   return v === "1" || v === "true";
 }
+function readAutoUpdateState() {
+  try {
+    const parsed = JSON.parse(readFileSync(STATE_PATH(), "utf8"));
+    return { ...parsed, failures: typeof parsed.failures === "number" ? parsed.failures : 0 };
+  } catch {
+    return { failures: 0 };
+  }
+}
+function writeAutoUpdateState(state) {
+  try {
+    mkdirSync(ONE_DIR(), { recursive: true });
+    writeFileSync(STATE_PATH(), JSON.stringify(state), { mode: 384 });
+  } catch {
+  }
+}
+function clearAutoUpdateState() {
+  try {
+    rmSync(STATE_PATH(), { force: true });
+  } catch {
+  }
+}
+function reconcileAbandonedAttempt(lock) {
+  const target = lock.targetVersion;
+  if (!target) return;
+  if (!isNewerVersion(target, currentVersion)) {
+    clearAutoUpdateState();
+    return;
+  }
+  const state = readAutoUpdateState();
+  writeAutoUpdateState({
+    ...state,
+    failures: state.failures + 1,
+    lastError: `install of v${target} never completed (npm may not be on this environment's PATH)`
+  });
+}
+function shouldWarnAboutFailedUpdates(state, now = Date.now()) {
+  if (state.failures < FAILED_UPDATE_NOTICE_THRESHOLD) return false;
+  if (state.lastNoticeAt && now - state.lastNoticeAt < FAILED_UPDATE_NOTICE_INTERVAL_MS) return false;
+  return true;
+}
+function maybeWarnAboutFailedUpdates(targetVersion) {
+  const state = readAutoUpdateState();
+  if (!shouldWarnAboutFailedUpdates(state)) return;
+  writeAutoUpdateState({ ...state, lastNoticeAt: Date.now() });
+  process.stderr.write(
+    pc2.yellow(
+      `One CLI could not auto-update (v${currentVersion} \u2192 v${targetVersion}) after ${state.failures} attempts.
+`
+    ) + pc2.dim(
+      `Update manually with: npm install -g @withone/cli@latest
+Details: ${LOG_PATH()}. Silence this with ONE_NO_AUTO_UPDATE=1.
+`
+    )
+  );
+}
 function acquireUpdateLock(targetVersion) {
   try {
     mkdirSync(ONE_DIR(), { recursive: true });
   } catch {
   }
+  let abandoned = null;
   try {
     const lock = JSON.parse(readFileSync(LOCK_PATH(), "utf8"));
     const startedAt = typeof lock.startedAt === "number" ? lock.startedAt : 0;
-    if (Date.now() - startedAt < LOCK_TTL_MS) return false;
+    if (Date.now() - startedAt < LOCK_TTL_MS) {
+      return { acquired: false, abandoned: null };
+    }
+    abandoned = { targetVersion: lock.targetVersion };
     rmSync(LOCK_PATH(), { force: true });
   } catch {
   }
@@ -810,9 +893,23 @@ function acquireUpdateLock(targetVersion) {
       { flag: "wx" }
       // fail if another invocation created it first
     );
-    return true;
+    return { acquired: true, abandoned };
   } catch {
-    return false;
+    return { acquired: false, abandoned };
+  }
+}
+function releaseUpdateLock() {
+  try {
+    rmSync(LOCK_PATH(), { force: true });
+  } catch {
+  }
+}
+function installLogTarget() {
+  try {
+    mkdirSync(ONE_DIR(), { recursive: true });
+    return openSync(LOG_PATH(), "a", 384);
+  } catch {
+    return "ignore";
   }
 }
 function autoUpdate(targetVersion, publishedAt) {
@@ -821,17 +918,40 @@ function autoUpdate(targetVersion, publishedAt) {
     const age = Date.now() - new Date(publishedAt).getTime();
     if (age < AGE_GATE_MS) return;
   }
-  if (!acquireUpdateLock(targetVersion)) return;
-  const child = spawn("npm", ["install", "-g", `@withone/cli@${targetVersion}`], {
-    detached: true,
-    stdio: "ignore",
-    shell: true
-  });
-  child.on("error", () => {
+  const claim = acquireUpdateLock(targetVersion);
+  if (claim.abandoned) {
+    reconcileAbandonedAttempt(claim.abandoned);
+    maybeWarnAboutFailedUpdates(targetVersion);
+  }
+  if (!claim.acquired) return;
+  const npmBin = resolveNpmBin();
+  const useShell = process.platform === "win32";
+  const log5 = installLogTarget();
+  const child = spawn(
+    useShell ? `"${npmBin}"` : npmBin,
+    ["install", "-g", `@withone/cli@${targetVersion}`],
+    {
+      detached: true,
+      // Keep npm's own diagnostics: when an install does fail, the reason is on
+      // disk instead of nowhere.
+      stdio: log5 === "ignore" ? "ignore" : ["ignore", log5, log5],
+      shell: useShell,
+      env: updateChildEnv()
+    }
+  );
+  if (log5 !== "ignore") {
     try {
-      rmSync(LOCK_PATH(), { force: true });
+      closeSync(log5);
     } catch {
     }
+  }
+  child.on("error", (err) => {
+    writeAutoUpdateState({ ...readAutoUpdateState(), lastError: err.message });
+    releaseUpdateLock();
+  });
+  child.on("exit", (code) => {
+    if (code === 0) clearAutoUpdateState();
+    releaseUpdateLock();
   });
   child.unref();
 }
@@ -1063,25 +1183,25 @@ async function loginCommand() {
   let targetScope = "global";
   const existingKey = getApiKey();
   if (existingKey) {
-    const pc16 = (await import("picocolors")).default;
+    const pc17 = (await import("picocolors")).default;
     const resolved2 = resolveConfig();
     const whoami2 = resolved2.config?.whoami;
     const env2 = getEnvFromApiKey(existingKey);
-    const envLabel2 = env2 === "test" ? pc16.yellow("test") : pc16.green("live");
-    const currentScope = resolved2.scope === "project" ? pc16.cyan("local config") : pc16.magenta("global config");
+    const envLabel2 = env2 === "test" ? pc17.yellow("test") : pc17.green("live");
+    const currentScope = resolved2.scope === "project" ? pc17.cyan("local config") : pc17.magenta("global config");
     const lines = ["You are already logged in.", ""];
     if (whoami2) {
       const contextParts2 = [];
       if (whoami2.organization) contextParts2.push(whoami2.organization.name);
       if (whoami2.project) contextParts2.push(whoami2.project.name);
       const scopeDisplay2 = contextParts2.length > 0 ? contextParts2.join(" / ") : "Personal";
-      lines.push(`${pc16.bold(scopeDisplay2)} ${pc16.dim("\xB7")} ${envLabel2}`);
-      lines.push(`${whoami2.user.name} ${pc16.dim(`(${whoami2.user.email})`)}`);
-      if (whoami2.organization) lines.push(`${pc16.dim("Org:")} ${whoami2.organization.name}`);
-      if (whoami2.project) lines.push(`${pc16.dim("Project:")} ${whoami2.project.name}`);
+      lines.push(`${pc17.bold(scopeDisplay2)} ${pc17.dim("\xB7")} ${envLabel2}`);
+      lines.push(`${whoami2.user.name} ${pc17.dim(`(${whoami2.user.email})`)}`);
+      if (whoami2.organization) lines.push(`${pc17.dim("Org:")} ${whoami2.organization.name}`);
+      if (whoami2.project) lines.push(`${pc17.dim("Project:")} ${whoami2.project.name}`);
     }
     lines.push("");
-    lines.push(`${pc16.dim("Stored in")} ${currentScope}`);
+    lines.push(`${pc17.dim("Stored in")} ${currentScope}`);
     p2.note(lines.join("\n"));
     const scopeChoice = await p2.select({
       message: "Where would you like to log in?",
@@ -1104,40 +1224,40 @@ async function loginCommand() {
   if (resolved.config) {
     writeConfig({ ...resolved.config, whoami }, targetScope);
   }
-  const pc15 = (await import("picocolors")).default;
+  const pc16 = (await import("picocolors")).default;
   const env = getEnvFromApiKey(apiKey);
   const contextParts = [];
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc15.yellow("test") : pc15.green("live");
-  const configLabel = targetScope === "project" ? pc15.cyan("local config") : pc15.magenta("global config");
+  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
+  const configLabel = targetScope === "project" ? pc16.cyan("local config") : pc16.magenta("global config");
   const infoLines = [
-    `${pc15.bold(scopeDisplay)} ${pc15.dim("\xB7")} ${envLabel}`,
-    `${whoami.user.name} ${pc15.dim(`(${whoami.user.email})`)}`
+    `${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`,
+    `${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`
   ];
-  if (whoami.organization) infoLines.push(`${pc15.dim("Org:")} ${whoami.organization.name}`);
-  if (whoami.project) infoLines.push(`${pc15.dim("Project:")} ${whoami.project.name}`);
+  if (whoami.organization) infoLines.push(`${pc16.dim("Org:")} ${whoami.organization.name}`);
+  if (whoami.project) infoLines.push(`${pc16.dim("Project:")} ${whoami.project.name}`);
   infoLines.push("");
-  infoLines.push(`${pc15.dim("Stored in")} ${configLabel}`);
+  infoLines.push(`${pc16.dim("Stored in")} ${configLabel}`);
   p2.note(infoLines.join("\n"), "Logged in");
   console.log();
-  console.log(`  ${pc15.dim("Next steps:")}`);
-  console.log(`  ${pc15.cyan("one add <platform>")}  ${pc15.dim("\u2014")} Connect a platform (e.g. gmail, slack, stripe)`);
+  console.log(`  ${pc16.dim("Next steps:")}`);
+  console.log(`  ${pc16.cyan("one add <platform>")}  ${pc16.dim("\u2014")} Connect a platform (e.g. gmail, slack, stripe)`);
   console.log();
-  console.log(pc15.bold("  Copy-paste this to your AI agent:"));
+  console.log(pc16.bold("  Copy-paste this to your AI agent:"));
   console.log();
-  console.log(pc15.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log(pc15.cyan("  \u2502"));
-  console.log(pc15.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc15.cyan("  \u2502  lets you interact with 600+ third-party platforms (Gmail,"));
-  console.log(pc15.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
-  console.log(pc15.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
-  console.log(pc15.cyan("  \u2502  third-party platform or external service, use the `one`"));
-  console.log(pc15.cyan("  \u2502  skill. Please save this to your project instructions or"));
-  console.log(pc15.cyan("  \u2502  memory so you remember it in future conversations."));
-  console.log(pc15.cyan("  \u2502"));
-  console.log(pc15.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc16.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc16.cyan("  \u2502"));
+  console.log(pc16.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
+  console.log(pc16.cyan("  \u2502  lets you interact with 600+ third-party platforms (Gmail,"));
+  console.log(pc16.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
+  console.log(pc16.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
+  console.log(pc16.cyan("  \u2502  third-party platform or external service, use the `one`"));
+  console.log(pc16.cyan("  \u2502  skill. Please save this to your project instructions or"));
+  console.log(pc16.cyan("  \u2502  memory so you remember it in future conversations."));
+  console.log(pc16.cyan("  \u2502"));
+  console.log(pc16.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log();
   p2.outro("Happy building!");
 }
@@ -1245,18 +1365,18 @@ async function nonInteractiveInit(options) {
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc2.yellow("test") : pc2.green("live");
+  const envLabel = env === "test" ? pc3.yellow("test") : pc3.green("live");
   console.log();
-  console.log(`  ${pc2.bold("Setup complete")} ${scopeLabel(scope)}`);
-  console.log(`  ${pc2.dim("\u2500".repeat(42))}`);
-  console.log(`  ${pc2.dim("Account:")} ${scopeDisplay} ${pc2.dim("\xB7")} ${envLabel}`);
-  console.log(`  ${pc2.dim("User:")}    ${whoami.user.name} ${pc2.dim(`(${whoami.user.email})`)}`);
-  console.log(`  ${pc2.dim("Config:")}  ${tildify(configPath)}`);
+  console.log(`  ${pc3.bold("Setup complete")} ${scopeLabel(scope)}`);
+  console.log(`  ${pc3.dim("\u2500".repeat(42))}`);
+  console.log(`  ${pc3.dim("Account:")} ${scopeDisplay} ${pc3.dim("\xB7")} ${envLabel}`);
+  console.log(`  ${pc3.dim("User:")}    ${whoami.user.name} ${pc3.dim(`(${whoami.user.email})`)}`);
+  console.log(`  ${pc3.dim("Config:")}  ${tildify(configPath)}`);
   if (installed.length > 0) {
-    console.log(`  ${pc2.dim("Skill:")}   ${pc2.green("installed")} ${pc2.dim("\xB7 " + installed.join(", "))}`);
+    console.log(`  ${pc3.dim("Skill:")}   ${pc3.green("installed")} ${pc3.dim("\xB7 " + installed.join(", "))}`);
   }
   console.log();
-  console.log(`  ${pc2.dim("Connect a platform later with")} ${pc2.cyan("one add <platform>")}`);
+  console.log(`  ${pc3.dim("Connect a platform later with")} ${pc3.cyan("one add <platform>")}`);
   printOnboardingPrompt();
 }
 async function chooseConfigScope(options) {
@@ -1271,8 +1391,8 @@ async function chooseConfigScope(options) {
   const homeProject = tildify(getProjectConfigPath(projectRoot));
   if (hasProject) {
     console.log();
-    console.log(`  ${pc2.dim("Project:")}  ${projectName}   ${pc2.dim(projectRoot)}`);
-    console.log(`  ${pc2.bold("Active config:")} ${pc2.cyan("project")} ${pc2.dim("\xB7 " + homeProject)}`);
+    console.log(`  ${pc3.dim("Project:")}  ${projectName}   ${pc3.dim(projectRoot)}`);
+    console.log(`  ${pc3.bold("Active config:")} ${pc3.cyan("project")} ${pc3.dim("\xB7 " + homeProject)}`);
     console.log();
     if (hasGlobal) {
       const which2 = await p3.select({
@@ -1289,11 +1409,11 @@ async function chooseConfigScope(options) {
     return "project";
   }
   console.log();
-  console.log(`  ${pc2.bold("Initializing One")}`);
-  console.log(`  ${pc2.dim("\u2500".repeat(42))}`);
-  console.log(`  ${pc2.dim("Project:")}  ${projectName}   ${pc2.dim(projectRoot)}`);
-  console.log(`  ${pc2.dim("Global:")}   ${hasGlobal ? pc2.green("\u2713 configured") : pc2.yellow("\u2014 not set up")}   ${pc2.dim(homeGlobal)}`);
-  console.log(`  ${pc2.dim("Project:")}  ${pc2.yellow("\u2014 not set up")}   ${pc2.dim(homeProject)}`);
+  console.log(`  ${pc3.bold("Initializing One")}`);
+  console.log(`  ${pc3.dim("\u2500".repeat(42))}`);
+  console.log(`  ${pc3.dim("Project:")}  ${projectName}   ${pc3.dim(projectRoot)}`);
+  console.log(`  ${pc3.dim("Global:")}   ${hasGlobal ? pc3.green("\u2713 configured") : pc3.yellow("\u2014 not set up")}   ${pc3.dim(homeGlobal)}`);
+  console.log(`  ${pc3.dim("Project:")}  ${pc3.yellow("\u2014 not set up")}   ${pc3.dim(homeProject)}`);
   console.log();
   const defaultScope = hasGlobal ? "project" : "global";
   const hint = hasGlobal ? "Your global config stays as-is. This folder gets its own setup." : "No global config yet \u2014 this becomes your default for every folder.";
@@ -1322,7 +1442,7 @@ function tildify(filePath) {
   return filePath.startsWith(home) ? "~" + filePath.slice(home.length) : filePath;
 }
 function scopeLabel(scope) {
-  return scope === "project" ? pc2.cyan("[project]") : pc2.magenta("[global]");
+  return scope === "project" ? pc3.cyan("[project]") : pc3.magenta("[global]");
 }
 function scopedMessage(scope, message) {
   return `${scopeLabel(scope)} ${message}`;
@@ -1333,20 +1453,20 @@ async function handleExistingConfig(apiKey, scope, options) {
   const skillInstalled = isSkillInstalled2();
   const activeConfigPath = scope === "project" ? getProjectConfigPath() : getGlobalConfigPath();
   console.log();
-  console.log(`  ${pc2.bold("Current Setup")} ${scopeLabel(scope)}`);
-  console.log(`  ${pc2.dim("\u2500".repeat(42))}`);
-  console.log(`  ${pc2.dim("API Key:")}  ${masked}`);
-  console.log(`  ${pc2.dim("Skill:")}    ${skillInstalled ? pc2.green("installed") : pc2.yellow("not installed")}`);
-  console.log(`  ${pc2.dim("Config:")}   ${tildify(activeConfigPath)}`);
+  console.log(`  ${pc3.bold("Current Setup")} ${scopeLabel(scope)}`);
+  console.log(`  ${pc3.dim("\u2500".repeat(42))}`);
+  console.log(`  ${pc3.dim("API Key:")}  ${masked}`);
+  console.log(`  ${pc3.dim("Skill:")}    ${skillInstalled ? pc3.green("installed") : pc3.yellow("not installed")}`);
+  console.log(`  ${pc3.dim("Config:")}   ${tildify(activeConfigPath)}`);
   const ac = getAccessControl();
   if (Object.keys(ac).length > 0) {
     console.log();
-    console.log(`  ${pc2.bold("Access Control")}`);
-    console.log(`  ${pc2.dim("\u2500".repeat(42))}`);
-    if (ac.permissions) console.log(`  ${pc2.dim("Permissions:")}   ${ac.permissions}`);
-    if (ac.connectionKeys) console.log(`  ${pc2.dim("Connections:")}   ${ac.connectionKeys.join(", ")}`);
-    if (ac.actionIds) console.log(`  ${pc2.dim("Action IDs:")}    ${ac.actionIds.join(", ")}`);
-    if (ac.knowledgeAgent) console.log(`  ${pc2.dim("Knowledge only:")} yes`);
+    console.log(`  ${pc3.bold("Access Control")}`);
+    console.log(`  ${pc3.dim("\u2500".repeat(42))}`);
+    if (ac.permissions) console.log(`  ${pc3.dim("Permissions:")}   ${ac.permissions}`);
+    if (ac.connectionKeys) console.log(`  ${pc3.dim("Connections:")}   ${ac.connectionKeys.join(", ")}`);
+    if (ac.actionIds) console.log(`  ${pc3.dim("Action IDs:")}    ${ac.actionIds.join(", ")}`);
+    if (ac.knowledgeAgent) console.log(`  ${pc3.dim("Knowledge only:")} yes`);
   }
   console.log();
   const actionOptions = [];
@@ -1456,7 +1576,7 @@ async function handleUpdateKey(statuses, scope) {
     whoamiResult = result.whoami;
   } else {
     p3.note(`Get your API key at:
-${pc2.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
+${pc3.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
     const openBrowser = await p3.confirm({
       message: scopedMessage(scope, "Open browser to get API key?"),
       initialValue: true
@@ -1501,10 +1621,10 @@ ${pc2.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
   if (whoamiResult.organization) contextParts.push(whoamiResult.organization.name);
   if (whoamiResult.project) contextParts.push(whoamiResult.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc2.yellow("test") : pc2.green("live");
+  const envLabel = env === "test" ? pc3.yellow("test") : pc3.green("live");
   p3.note(
-    `${scopeDisplay} ${pc2.dim("\xB7")} ${envLabel}
-${whoamiResult.user.name} ${pc2.dim(`(${whoamiResult.user.email})`)}`,
+    `${scopeDisplay} ${pc3.dim("\xB7")} ${envLabel}
+${whoamiResult.user.name} ${pc3.dim(`(${whoamiResult.user.email})`)}`,
     "Account"
   );
   const ac = getAccessControl();
@@ -1628,7 +1748,7 @@ async function promptOpenAiKey(scope) {
   const entered = await p3.password({
     message: scopedMessage(
       scope,
-      `OpenAI API key ${pc2.dim("(optional \u2014 enables semantic search in `one mem`)")}`
+      `OpenAI API key ${pc3.dim("(optional \u2014 enables semantic search in `one mem`)")}`
     ),
     mask: "\u2022",
     // Validator accepts empty → treated as "skip".
@@ -1683,7 +1803,7 @@ async function promptSkillInstall() {
     ...primaryAgents.map((a) => ({
       value: a.id,
       label: a.name,
-      hint: isSkillInstalledForAgent(a) ? pc2.green("installed") : void 0
+      hint: isSkillInstalledForAgent(a) ? pc3.green("installed") : void 0
     })),
     {
       value: "_other",
@@ -1707,7 +1827,7 @@ async function promptSkillInstall() {
       options: otherAgents.map((a) => ({
         value: a.id,
         label: a.name,
-        hint: isSkillInstalledForAgent(a) ? pc2.green("installed") : void 0
+        hint: isSkillInstalledForAgent(a) ? pc3.green("installed") : void 0
       }))
     });
     if (!p3.isCancel(otherChoice)) {
@@ -1723,7 +1843,7 @@ async function promptSkillInstall() {
   const { installed, failed } = installSkillForAgents(selectedIds);
   spinner5.stop(installed.length > 0 ? "Skill installed" : "Installation failed");
   for (const name of installed) {
-    p3.log.success(`${name}: ${pc2.green("\u2713")} skill installed`);
+    p3.log.success(`${name}: ${pc3.green("\u2713")} skill installed`);
   }
   for (const name of failed) {
     p3.log.warn(`${name}: failed to install`);
@@ -1732,19 +1852,19 @@ async function promptSkillInstall() {
 }
 function printOnboardingPrompt() {
   console.log();
-  console.log(pc2.bold("  Copy-paste this to your AI agent:"));
+  console.log(pc3.bold("  Copy-paste this to your AI agent:"));
   console.log();
-  console.log(pc2.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-  console.log(pc2.cyan("  \u2502"));
-  console.log(pc2.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
-  console.log(pc2.cyan("  \u2502  lets you interact with 600+ third-party platforms (Gmail,"));
-  console.log(pc2.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
-  console.log(pc2.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
-  console.log(pc2.cyan("  \u2502  third-party platform or external service, use the `one`"));
-  console.log(pc2.cyan("  \u2502  skill. Please save this to your project instructions or"));
-  console.log(pc2.cyan("  \u2502  memory so you remember it in future conversations."));
-  console.log(pc2.cyan("  \u2502"));
-  console.log(pc2.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc3.cyan("  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  console.log(pc3.cyan("  \u2502"));
+  console.log(pc3.cyan("  \u2502  The One CLI (`one`) is now installed on this machine. It"));
+  console.log(pc3.cyan("  \u2502  lets you interact with 600+ third-party platforms (Gmail,"));
+  console.log(pc3.cyan("  \u2502  Slack, Shopify, HubSpot, Stripe, GitHub, etc.) through"));
+  console.log(pc3.cyan("  \u2502  their APIs. Whenever you need to interact with any"));
+  console.log(pc3.cyan("  \u2502  third-party platform or external service, use the `one`"));
+  console.log(pc3.cyan("  \u2502  skill. Please save this to your project instructions or"));
+  console.log(pc3.cyan("  \u2502  memory so you remember it in future conversations."));
+  console.log(pc3.cyan("  \u2502"));
+  console.log(pc3.cyan("  \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
   console.log();
 }
 async function freshSetup(scope, options) {
@@ -1772,10 +1892,10 @@ async function freshSetup(scope, options) {
     if (result.whoami.organization) contextParts.push(result.whoami.organization.name);
     if (result.whoami.project) contextParts.push(result.whoami.project.name);
     const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-    const envLabel = env2 === "test" ? pc2.yellow("test") : pc2.green("live");
+    const envLabel = env2 === "test" ? pc3.yellow("test") : pc3.green("live");
     p3.note(
-      `${scopeDisplay} ${pc2.dim("\xB7")} ${envLabel}
-${result.whoami.user.name} ${pc2.dim(`(${result.whoami.user.email})`)}`,
+      `${scopeDisplay} ${pc3.dim("\xB7")} ${envLabel}
+${result.whoami.user.name} ${pc3.dim(`(${result.whoami.user.email})`)}`,
       "Account"
     );
     writeConfig(
@@ -1789,7 +1909,7 @@ ${result.whoami.user.name} ${pc2.dim(`(${result.whoami.user.email})`)}`,
     );
   } else {
     p3.note(`Get your API key at:
-${pc2.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
+${pc3.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
     const openBrowser = await p3.confirm({
       message: scopedMessage(scope, "Open browser to get API key?"),
       initialValue: true
@@ -1832,10 +1952,10 @@ ${pc2.cyan(getApiKeyUrl())}`, `API Key ${scopeLabel(scope)}`);
     if (whoami.organization) contextParts.push(whoami.organization.name);
     if (whoami.project) contextParts.push(whoami.project.name);
     const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-    const envLabel = env2 === "test" ? pc2.yellow("test") : pc2.green("live");
+    const envLabel = env2 === "test" ? pc3.yellow("test") : pc3.green("live");
     p3.note(
-      `${scopeDisplay} ${pc2.dim("\xB7")} ${envLabel}
-${whoami.user.name} ${pc2.dim(`(${whoami.user.email})`)}`,
+      `${scopeDisplay} ${pc3.dim("\xB7")} ${envLabel}
+${whoami.user.name} ${pc3.dim(`(${whoami.user.email})`)}`,
       "Account"
     );
     writeConfig(
@@ -1859,11 +1979,11 @@ ${whoami.user.name} ${pc2.dim(`(${whoami.user.email})`)}`,
   };
   await promptConnectIntegrations(apiKey, connParams);
   const savedPath = scope === "project" ? getProjectConfigPath() : getGlobalConfigPath();
-  const resolutionHint = scope === "project" ? `When you run ${pc2.cyan("one")} from ${pc2.bold(path4.basename(getProjectRoot()))}, it uses this project config.
+  const resolutionHint = scope === "project" ? `When you run ${pc3.cyan("one")} from ${pc3.bold(path4.basename(getProjectRoot()))}, it uses this project config.
 From anywhere else, it falls back to your global config.` : `This config applies to every folder unless a project config is set.`;
   p3.note(
     `${scopeLabel(scope)} Config saved to:
-${pc2.dim(tildify(savedPath))}
+${pc3.dim(tildify(savedPath))}
 
 ${resolutionHint}`,
     "Setup Complete"
@@ -1873,18 +1993,18 @@ ${resolutionHint}`,
 }
 function printBanner() {
   console.log();
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588       "));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588       "));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588       "));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588       "));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
-  console.log(pc2.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588      \u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588       "));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588       "));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   "));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588       "));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588    \u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588       "));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
+  console.log(pc3.yellow("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588      \u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588"));
   console.log();
-  console.log(pc2.dim("  I N F R A S T R U C T U R E   F O R   A G E N T S"));
+  console.log(pc3.dim("  I N F R A S T R U C T U R E   F O R   A G E N T S"));
   console.log();
 }
 var TOP_INTEGRATIONS = [
@@ -1929,13 +2049,13 @@ async function promptConnectIntegrations(apiKey, connParams) {
       } catch {
         p3.note("https://app.withone.ai/connections", "Open in browser");
       }
-      p3.log.info(`Connect from the dashboard, or use ${pc2.cyan("one add <platform>")}`);
+      p3.log.info(`Connect from the dashboard, or use ${pc3.cyan("one add <platform>")}`);
       break;
     }
     const platform = choice;
     const integration = TOP_INTEGRATIONS.find((i) => i.value === platform);
     const label = integration?.label ?? platform;
-    p3.log.info(`Opening browser to connect ${pc2.cyan(label)}...`);
+    p3.log.info(`Opening browser to connect ${pc3.cyan(label)}...`);
     try {
       await openConnectionPage(platform, connParams);
     } catch {
@@ -1948,13 +2068,13 @@ async function promptConnectIntegrations(apiKey, connParams) {
     try {
       await api.waitForConnection(platform, 5 * 60 * 1e3, 5e3);
       spinner5.stop(`${label} connected!`);
-      p3.log.success(`${pc2.green("\u2713")} ${label} is now available to your AI agents`);
+      p3.log.success(`${pc3.green("\u2713")} ${label} is now available to your AI agents`);
       connected.push(platform);
       first = false;
     } catch (error2) {
       spinner5.stop("Connection timed out");
       if (error2 instanceof TimeoutError) {
-        p3.log.warn(`No worries. Connect later with: ${pc2.cyan(`one add ${platform}`)}`);
+        p3.log.warn(`No worries. Connect later with: ${pc3.cyan(`one add ${platform}`)}`);
       }
       first = false;
     }
@@ -1971,7 +2091,7 @@ function maskApiKey(key) {
 
 // src/commands/connection.ts
 import * as p4 from "@clack/prompts";
-import pc4 from "picocolors";
+import pc5 from "picocolors";
 
 // src/lib/access.ts
 async function resolveAllowedActions(api, actionIds) {
@@ -2057,7 +2177,7 @@ function countMatchingChars(a, b) {
 }
 
 // src/lib/table.ts
-import pc3 from "picocolors";
+import pc4 from "picocolors";
 function printTable(columns, rows) {
   if (rows.length === 0) return;
   const gap = "  ";
@@ -2069,10 +2189,10 @@ function printTable(columns, rows) {
   });
   const header = columns.map((col, i) => {
     const padded = col.align === "right" ? col.label.padStart(widths[i]) : col.label.padEnd(widths[i]);
-    return pc3.dim(padded);
+    return pc4.dim(padded);
   }).join(gap);
   console.log(`${indent}${header}`);
-  const separator = columns.map((_, i) => pc3.dim("\u2500".repeat(widths[i]))).join(gap);
+  const separator = columns.map((_, i) => pc4.dim("\u2500".repeat(widths[i]))).join(gap);
   console.log(`${indent}${separator}`);
   for (const row of rows) {
     const line = columns.map((col, i) => {
@@ -2097,7 +2217,7 @@ async function connectionAddCommand(platformArg, options) {
   if (isAgentMode()) {
     error("This command requires interactive input. Run without --agent.");
   }
-  p4.intro(pc4.bgCyan(pc4.black(" One ")));
+  p4.intro(pc5.bgCyan(pc5.black(" One ")));
   const apiKey = getApiKey();
   if (!apiKey) {
     p4.cancel("Not configured. Run `one init` first.");
@@ -2132,7 +2252,7 @@ async function connectionAddCommand(platformArg, options) {
           ]
         });
         if (p4.isCancel(suggestion) || suggestion === "__other__") {
-          p4.note(`Run ${pc4.cyan("one platforms")} to see all available platforms.`);
+          p4.note(`Run ${pc5.cyan("one platforms")} to see all available platforms.`);
           p4.cancel("Connection cancelled.");
           process.exit(0);
         }
@@ -2140,7 +2260,7 @@ async function connectionAddCommand(platformArg, options) {
       } else {
         p4.cancel(`Unknown platform: ${platformArg}
 
-Run ${pc4.cyan("one platforms")} to see available platforms.`);
+Run ${pc5.cyan("one platforms")} to see available platforms.`);
         process.exit(1);
       }
     }
@@ -2163,7 +2283,7 @@ Run ${pc4.cyan("one platforms")} to see available platforms.`);
     } else {
       p4.cancel(`Unknown platform: ${platformInput}
 
-Run ${pc4.cyan("one platforms")} to see available platforms.`);
+Run ${pc5.cyan("one platforms")} to see available platforms.`);
       process.exit(1);
     }
   }
@@ -2174,8 +2294,8 @@ Run ${pc4.cyan("one platforms")} to see available platforms.`);
     ...whoami?.project && { projectId: whoami.project.id }
   };
   const url = getConnectionUrl(platform, connParams);
-  p4.log.info(`Opening browser to connect ${pc4.cyan(platform)}...`);
-  p4.note(pc4.dim(url), "URL");
+  p4.log.info(`Opening browser to connect ${pc5.cyan(platform)}...`);
+  p4.note(pc5.dim(url), "URL");
   try {
     await openConnectionPage(platform, connParams);
   } catch {
@@ -2203,7 +2323,7 @@ The connection is usable; set the tag later in the dashboard or retry.`
         );
       }
     }
-    p4.log.success(`${pc4.green("\u2713")} ${connection2.platform} is now available to your AI agents.${tag ? ` (tag: ${tag})` : ""}`);
+    p4.log.success(`${pc5.green("\u2713")} ${connection2.platform} is now available to your AI agents.${tag ? ` (tag: ${tag})` : ""}`);
     p4.outro("Connection complete!");
   } catch (error2) {
     pollSpinner.stop("Connection timed out");
@@ -2214,7 +2334,7 @@ The connection is usable; set the tag later in the dashboard or retry.`
   - Browser popup was blocked
   - Wrong account selected
 
-Try again with: ${pc4.cyan(`one connection add ${platform}`)}`,
+Try again with: ${pc5.cyan(`one connection add ${platform}`)}`,
         "Timed Out"
       );
     } else {
@@ -2278,14 +2398,14 @@ async function connectionListCommand(options) {
         p4.note(
           `No connections matching "${searchQuery}".
 
-Try: ${pc4.cyan("one connection list")} to see all connections.`,
+Try: ${pc5.cyan("one connection list")} to see all connections.`,
           "No Results"
         );
       } else {
         p4.note(
           `No connections yet.
 
-Add one with: ${pc4.cyan("one connection add gmail")}`,
+Add one with: ${pc5.cyan("one connection add gmail")}`,
           "No Connections"
         );
       }
@@ -2307,9 +2427,9 @@ Add one with: ${pc4.cyan("one connection add gmail")}`,
         { key: "status", label: "" },
         { key: "platform", label: "Platform" },
         { key: "state", label: "Status" },
-        { key: "key", label: "Connection Key", color: pc4.dim },
-        ...hasTags ? [{ key: "tags", label: "Tags", color: pc4.dim }] : [],
-        ...hasScopedAccess ? [{ key: "access", label: "Access", color: pc4.yellow }] : []
+        { key: "key", label: "Connection Key", color: pc5.dim },
+        ...hasTags ? [{ key: "tags", label: "Tags", color: pc5.dim }] : [],
+        ...hasScopedAccess ? [{ key: "access", label: "Access", color: pc5.yellow }] : []
       ],
       rows
     );
@@ -2323,7 +2443,7 @@ Add one with: ${pc4.cyan("one connection add gmail")}`,
       }
       p4.note(`${wrapText(lines.join("\n"))}
 
-Change it with: ${pc4.cyan("one config")}`, "Access");
+Change it with: ${pc5.cyan("one config")}`, "Access");
     }
     if (displayed.length < filtered.length) {
       p4.note(
@@ -2331,7 +2451,7 @@ Change it with: ${pc4.cyan("one config")}`, "Access");
         "Limited"
       );
     } else {
-      p4.note(`Add more with: ${pc4.cyan("one connection add <platform>")}`, "Tip");
+      p4.note(`Add more with: ${pc5.cyan("one connection add <platform>")}`, "Tip");
     }
   } catch (error2) {
     spinner5.stop("Failed to load connections");
@@ -2367,7 +2487,7 @@ async function connectionDeleteCommand(connectionKey, options) {
   spinner5.stop(`Found ${connection2.platform} (${connection2.state})`);
   if (!isAgentMode() && !options?.force) {
     console.log();
-    console.log(`  ${getStatusIndicator(connection2.state)} ${connection2.platform}  ${pc4.dim(connection2.key)}`);
+    console.log(`  ${getStatusIndicator(connection2.state)} ${connection2.platform}  ${pc5.dim(connection2.key)}`);
     console.log();
     const confirmed = await p4.confirm({
       message: "Are you sure you want to delete this connection?",
@@ -2391,7 +2511,7 @@ async function connectionDeleteCommand(connectionKey, options) {
       });
       return;
     }
-    p4.log.success(`${pc4.green("\u2713")} ${connection2.platform} connection removed.`);
+    p4.log.success(`${pc5.green("\u2713")} ${connection2.platform} connection removed.`);
   } catch (error2) {
     deleteSpinner.stop("Failed to delete connection");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
@@ -2431,19 +2551,19 @@ function wrapText(text5, width = 72) {
 function getStatusIndicator(state) {
   switch (state) {
     case "operational":
-      return pc4.green("\u25CF");
+      return pc5.green("\u25CF");
     case "degraded":
-      return pc4.yellow("\u25CF");
+      return pc5.yellow("\u25CF");
     case "failed":
-      return pc4.red("\u25CF");
+      return pc5.red("\u25CF");
     default:
-      return pc4.dim("\u25CB");
+      return pc5.dim("\u25CB");
   }
 }
 
 // src/commands/platforms.ts
 import * as p5 from "@clack/prompts";
-import pc5 from "picocolors";
+import pc6 from "picocolors";
 async function platformsCommand(options) {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -2509,7 +2629,7 @@ async function platformsCommand(options) {
       );
     }
     console.log();
-    p5.note(`Connect with: ${pc5.cyan("one connection add <platform>")}`, "Tip");
+    p5.note(`Connect with: ${pc6.cyan("one connection add <platform>")}`, "Tip");
   } catch (error2) {
     spinner5.stop("Failed to load platforms");
     error(`Error: ${error2 instanceof Error ? error2.message : "Unknown error"}`);
@@ -2518,7 +2638,7 @@ async function platformsCommand(options) {
 
 // src/commands/actions.ts
 import * as p6 from "@clack/prompts";
-import pc6 from "picocolors";
+import pc7 from "picocolors";
 function getConfig() {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -2539,11 +2659,11 @@ function parseJsonArg2(value, argName) {
   }
 }
 async function actionsSearchCommand(platform, query, options) {
-  intro(pc6.bgCyan(pc6.black(" One ")));
+  intro(pc7.bgCyan(pc7.black(" One ")));
   const { apiKey, permissions, actionIds, knowledgeAgent } = getConfig();
   const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
-  spinner5.start(`Searching actions on ${pc6.cyan(platform)} for "${query}"...`);
+  spinner5.start(`Searching actions on ${pc7.cyan(platform)} for "${query}"...`);
   try {
     const agentType = knowledgeAgent ? "knowledge" : options.type || "execute";
     const useCache = options.cache !== false;
@@ -2616,7 +2736,7 @@ async function actionsSearchCommand(platform, query, options) {
 Suggestions:
   - Try a more general query (e.g., 'list', 'get', 'search', 'create')
   - Verify the platform name is correct
-  - Check available platforms with ${pc6.cyan("one platforms")}
+  - Check available platforms with ${pc7.cyan("one platforms")}
 
 Examples of good queries:
   - "search contacts"
@@ -2641,15 +2761,15 @@ Examples of good queries:
       [
         { key: "method", label: "Method" },
         { key: "title", label: "Title" },
-        { key: "actionId", label: "Action ID", color: pc6.dim },
-        { key: "path", label: "Path", color: pc6.dim }
+        { key: "actionId", label: "Action ID", color: pc7.dim },
+        { key: "path", label: "Path", color: pc7.dim }
       ],
       rows
     );
     console.log();
     p6.note(
-      `Get details: ${pc6.cyan(`one actions knowledge ${platform} <actionId>`)}
-Execute:     ${pc6.cyan(`one actions execute ${platform} <actionId> <connectionKey>`)}`,
+      `Get details: ${pc7.cyan(`one actions knowledge ${platform} <actionId>`)}
+Execute:     ${pc7.cyan(`one actions execute ${platform} <actionId> <connectionKey>`)}`,
       "Next Steps"
     );
   } catch (error2) {
@@ -2682,7 +2802,7 @@ async function actionsKnowledgeCommand(platform, actionId, options) {
     }
     return;
   }
-  intro(pc6.bgCyan(pc6.black(" One ")));
+  intro(pc7.bgCyan(pc7.black(" One ")));
   const { apiKey, actionIds, connectionKeys } = getConfig();
   const api = new OneApi(apiKey, getApiBase());
   if (!isActionAllowed(actionId, actionIds)) {
@@ -2707,7 +2827,7 @@ async function actionsKnowledgeCommand(platform, actionId, options) {
     }
   }
   const spinner5 = createSpinner();
-  spinner5.start(`Loading knowledge for action ${pc6.dim(actionId)}...`);
+  spinner5.start(`Loading knowledge for action ${pc7.dim(actionId)}...`);
   try {
     const { details, cacheHit, entry } = await resolveActionDetails(api, actionId, {
       useCache: options.cache !== false
@@ -2736,7 +2856,7 @@ async function actionsKnowledgeCommand(platform, actionId, options) {
     console.log(knowledgeWithGuidance);
     console.log();
     p6.note(
-      `Execute: ${pc6.cyan(`one actions execute ${platform} ${actionId} <connectionKey>`)}`,
+      `Execute: ${pc7.cyan(`one actions execute ${platform} ${actionId} <connectionKey>`)}`,
       "Next Step"
     );
   } catch (error2) {
@@ -2747,7 +2867,7 @@ async function actionsKnowledgeCommand(platform, actionId, options) {
   }
 }
 async function actionsExecuteCommand(platform, actionId, connectionKey, options) {
-  intro(pc6.bgCyan(pc6.black(" One ")));
+  intro(pc7.bgCyan(pc7.black(" One ")));
   const { apiKey, permissions, actionIds, connectionKeys, knowledgeAgent } = getConfig();
   if (knowledgeAgent) {
     error(
@@ -2772,7 +2892,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
       );
     }
     spinner5.stop(
-      `Action: ${actionDetails.title} [${actionDetails.method}]` + (preflightCacheHit ? pc6.dim(" (cached)") : "")
+      `Action: ${actionDetails.title} [${actionDetails.method}]` + (preflightCacheHit ? pc7.dim(" (cached)") : "")
     );
     const data = options.data ? parseJsonArg2(options.data, "--data") : void 0;
     const pathVariables = options.pathVars ? parseJsonArg2(options.pathVars, "--path-vars") : void 0;
@@ -2792,9 +2912,9 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
         }
         console.log();
         for (const m of validation.missing) {
-          console.log(pc6.red(`  ${m.flag} is missing "${m.param}"`));
+          console.log(pc7.red(`  ${m.flag} is missing "${m.param}"`));
           if (m.description) {
-            console.log(pc6.dim(`    ${m.description}`));
+            console.log(pc7.dim(`    ${m.description}`));
           }
         }
         console.log();
@@ -2819,7 +2939,7 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
       }
       console.log();
       if (mockResponse) {
-        console.log(pc6.bold("Mock Response:"));
+        console.log(pc7.bold("Mock Response:"));
         console.log(JSON.stringify(mockResponse, null, 2));
       } else {
         note("No example output available for this action", "Mock");
@@ -2860,26 +2980,26 @@ async function actionsExecuteCommand(platform, actionId, connectionKey, options)
       return;
     }
     console.log();
-    console.log(pc6.dim("Request:"));
+    console.log(pc7.dim("Request:"));
     console.log(
-      pc6.dim(
+      pc7.dim(
         `  ${result.requestConfig.method} ${result.requestConfig.url}`
       )
     );
     if (options.dryRun) {
       if (result.requestConfig.data) {
         console.log();
-        console.log(pc6.dim("Body:"));
-        console.log(pc6.dim(JSON.stringify(result.requestConfig.data, null, 2)));
+        console.log(pc7.dim("Body:"));
+        console.log(pc7.dim(JSON.stringify(result.requestConfig.data, null, 2)));
       }
       console.log();
       note("Dry run \u2014 request was not sent", "Dry Run");
     } else {
       console.log();
-      console.log(pc6.bold("Response:"));
+      console.log(pc7.bold("Response:"));
       const rd = result.responseData;
       if (rd && typeof rd === "object" && typeof rd.text === "string" && "contentType" in rd) {
-        if (rd.contentType) console.log(pc6.dim(`(${rd.contentType})`));
+        if (rd.contentType) console.log(pc7.dim(`(${rd.contentType})`));
         console.log(rd.text);
       } else {
         console.log(JSON.stringify(result.responseData, null, 2));
@@ -3083,7 +3203,7 @@ async function actionsExecuteParallelCommand() {
     }
     console.log();
     for (const e of errors) {
-      console.log(`  ${pc6.red("\u2717")} Segment ${e.segment} (${e.label}):`);
+      console.log(`  ${pc7.red("\u2717")} Segment ${e.segment} (${e.label}):`);
       for (const msg of e.messages) {
         console.log(`    ${msg}`);
       }
@@ -3178,17 +3298,17 @@ async function actionsExecuteParallelCommand() {
   console.log();
   for (const r of results) {
     const label = `${r.platform}/${r.actionId}`;
-    const time = pc6.dim(`(${(r.durationMs / 1e3).toFixed(2)}s)`);
+    const time = pc7.dim(`(${(r.durationMs / 1e3).toFixed(2)}s)`);
     if (r.mock) {
-      console.log(`  [${r.segment}/${total}] ${label} ${pc6.cyan("\u25C7 mock")} ${time}`);
-      if (r.response) console.log(`  ${pc6.dim(JSON.stringify(r.response, null, 2).split("\n").join("\n  "))}`);
+      console.log(`  [${r.segment}/${total}] ${label} ${pc7.cyan("\u25C7 mock")} ${time}`);
+      if (r.response) console.log(`  ${pc7.dim(JSON.stringify(r.response, null, 2).split("\n").join("\n  "))}`);
     } else if (r.dryRun) {
-      console.log(`  [${r.segment}/${total}] ${label} ${pc6.yellow("\u2298 dry-run")} ${time}`);
+      console.log(`  [${r.segment}/${total}] ${label} ${pc7.yellow("\u2298 dry-run")} ${time}`);
     } else if (r.status === "success") {
-      console.log(`  [${r.segment}/${total}] ${label} ${pc6.green("\u2713")} ${time}`);
-      if (r.response) console.log(`  ${pc6.dim(JSON.stringify(r.response, null, 2).split("\n").join("\n  "))}`);
+      console.log(`  [${r.segment}/${total}] ${label} ${pc7.green("\u2713")} ${time}`);
+      if (r.response) console.log(`  ${pc7.dim(JSON.stringify(r.response, null, 2).split("\n").join("\n  "))}`);
     } else {
-      console.log(`  [${r.segment}/${total}] ${label} ${pc6.red("\u2717")} ${time} \u2014 ${r.error}`);
+      console.log(`  [${r.segment}/${total}] ${label} ${pc7.red("\u2717")} ${time} \u2014 ${r.error}`);
     }
   }
   console.log();
@@ -3203,22 +3323,22 @@ async function actionsExecuteParallelCommand() {
 function colorMethod(method) {
   switch (method.toUpperCase()) {
     case "GET":
-      return pc6.green(method);
+      return pc7.green(method);
     case "POST":
-      return pc6.yellow(method);
+      return pc7.yellow(method);
     case "PUT":
-      return pc6.blue(method);
+      return pc7.blue(method);
     case "PATCH":
-      return pc6.magenta(method);
+      return pc7.magenta(method);
     case "DELETE":
-      return pc6.red(method);
+      return pc7.red(method);
     default:
       return method;
   }
 }
 
 // src/commands/flow.ts
-import pc7 from "picocolors";
+import pc8 from "picocolors";
 
 // src/lib/flow-validator.ts
 import fs4 from "fs";
@@ -3976,25 +4096,25 @@ function previewValue(value, max = 120) {
 }
 function renderDryRef(ref) {
   if (ref.status === "resolved") {
-    return `${pc7.green("\u2713")} ${ref.selector} ${pc7.dim("\u2192")} ${previewValue(ref.value)}`;
+    return `${pc8.green("\u2713")} ${ref.selector} ${pc8.dim("\u2192")} ${previewValue(ref.value)}`;
   }
   if (ref.status === "deferred") {
-    return `${pc7.dim("\u25CB")} ${ref.selector} ${pc7.dim("\u2192 pending (produced by a later step)")}`;
+    return `${pc8.dim("\u25CB")} ${ref.selector} ${pc8.dim("\u2192 pending (produced by a later step)")}`;
   }
-  return `${pc7.yellow("!")} ${ref.selector} ${pc7.yellow("\u2192 unresolved \u2014 check the input/env name")}`;
+  return `${pc8.yellow("!")} ${ref.selector} ${pc8.yellow("\u2192 unresolved \u2014 check the input/env name")}`;
 }
 function renderDryResolution(steps) {
   const isExpr = (t) => t === "transform" || t === "condition" || t === "while";
   for (const s of steps) {
-    const label = s.name ? `${s.stepId} ${pc7.dim(`"${s.name}"`)}` : s.stepId;
-    console.log(`  ${pc7.cyan("\u25B8")} ${label} ${pc7.dim(`(${s.type})`)}`);
+    const label = s.name ? `${s.stepId} ${pc8.dim(`"${s.name}"`)}` : s.stepId;
+    console.log(`  ${pc8.cyan("\u25B8")} ${label} ${pc8.dim(`(${s.type})`)}`);
     if (s.error !== void 0) {
-      console.log(`      ${pc7.red("error")} ${s.error}`);
+      console.log(`      ${pc8.red("error")} ${s.error}`);
     } else if (isExpr(s.type) && s.deferred) {
       const deps = s.references.map((r) => r.selector).join(", ");
-      console.log(`      ${pc7.dim("\u25CB pending \u2014 depends on")} ${deps} ${pc7.dim("(produced by a later step)")}`);
+      console.log(`      ${pc8.dim("\u25CB pending \u2014 depends on")} ${deps} ${pc8.dim("(produced by a later step)")}`);
     } else if (isExpr(s.type)) {
-      console.log(`      ${pc7.dim("=")} ${previewValue(s.resolved)}`);
+      console.log(`      ${pc8.dim("=")} ${previewValue(s.resolved)}`);
     }
     if (!(isExpr(s.type) && s.deferred)) {
       for (const ref of s.references) {
@@ -4002,7 +4122,7 @@ function renderDryResolution(steps) {
       }
     }
     if (!isExpr(s.type) && s.references.length === 0 && s.error === void 0) {
-      console.log(`      ${pc7.dim("(no interpolations)")}`);
+      console.log(`      ${pc8.dim("(no interpolations)")}`);
     }
   }
 }
@@ -4056,7 +4176,7 @@ async function autoResolveConnectionInputs(flow2, inputs, api) {
   return resolved;
 }
 async function flowCreateCommand(key, options) {
-  intro(pc7.bgCyan(pc7.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   let flow2;
   if (options.definition) {
     let raw = options.definition;
@@ -4112,11 +4232,11 @@ ${errors.map((e) => `  ${e.path}: ${e.message}`).join("\n")}`);
     return;
   }
   note(`Workflow "${flow2.name}" saved to ${flowPath}`, "Created");
-  outro(`Validate: ${pc7.cyan(`one flow validate ${flow2.key}`)}
-Execute:  ${pc7.cyan(`one flow execute ${flow2.key}`)}`);
+  outro(`Validate: ${pc8.cyan(`one flow validate ${flow2.key}`)}
+Execute:  ${pc8.cyan(`one flow execute ${flow2.key}`)}`);
 }
 async function flowExecuteCommand(keyOrPath, options) {
-  intro(pc7.bgCyan(pc7.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const { apiKey, permissions, actionIds } = getConfig2();
   const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
@@ -4149,7 +4269,7 @@ ${preflightErrors.map((e) => `  ${e.path}: ${e.message}`).join("\n")}`);
     if (isAgentMode()) {
       json({ event: "flow:deprecation", flowKey: flow2.key, warning: msg });
     } else {
-      console.error(pc7.yellow(`\u26A0 ${msg}`));
+      console.error(pc8.yellow(`\u26A0 ${msg}`));
     }
   }
   if (!options.allowBash && flowRequiresBash(flow2)) {
@@ -4183,7 +4303,7 @@ ${preflightErrors.map((e) => `  ${e.path}: ${e.message}`).join("\n")}`);
     runner.requestPause();
     if (!isAgentMode()) {
       console.log(`
-${pc7.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
+${pc8.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
     }
   };
   process.on("SIGINT", sigintHandler);
@@ -4203,12 +4323,12 @@ ${pc7.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
     } else if (options.verbose) {
       const ts = (/* @__PURE__ */ new Date()).toISOString().split("T")[1].slice(0, 8);
       if (event.event === "step:start") {
-        console.log(`  ${pc7.dim(ts)} ${pc7.cyan("\u25B6")} ${event.stepName} ${pc7.dim(`(${event.type})`)}`);
+        console.log(`  ${pc8.dim(ts)} ${pc8.cyan("\u25B6")} ${event.stepName} ${pc8.dim(`(${event.type})`)}`);
       } else if (event.event === "step:complete") {
-        const status = event.status === "success" ? pc7.green("\u2713") : event.status === "skipped" ? pc7.dim("\u25CB") : pc7.red("\u2717");
-        console.log(`  ${pc7.dim(ts)} ${status} ${event.stepId} ${pc7.dim(`${event.durationMs}ms`)}`);
+        const status = event.status === "success" ? pc8.green("\u2713") : event.status === "skipped" ? pc8.dim("\u25CB") : pc8.red("\u2717");
+        console.log(`  ${pc8.dim(ts)} ${status} ${event.stepId} ${pc8.dim(`${event.durationMs}ms`)}`);
       } else if (event.event === "step:error") {
-        console.log(`  ${pc7.dim(ts)} ${pc7.red("\u2717")} ${event.stepId}: ${event.error}`);
+        console.log(`  ${pc8.dim(ts)} ${pc8.red("\u2717")} ${event.stepId}: ${event.error}`);
       }
     }
   };
@@ -4257,8 +4377,8 @@ ${pc7.yellow("Pausing after current step completes...")} (run ID: ${runId})`);
       console.log();
       const missing = dryRunSteps.reduce((n, s) => n + s.references.filter((r) => r.status === "missing").length, 0);
       note(
-        `Dry run \u2014 no steps executed. Resolved ${dryRunSteps.length} step(s)` + (missing > 0 ? `; ${pc7.yellow(`${missing} unresolved input/env reference(s)`)}` : "") + `.
-${pc7.dim("$.steps.* refs resolve at runtime \u2014 re-run with --stop-after=<stepId> to resolve them against real output.")}`,
+        `Dry run \u2014 no steps executed. Resolved ${dryRunSteps.length} step(s)` + (missing > 0 ? `; ${pc8.yellow(`${missing} unresolved input/env reference(s)`)}` : "") + `.
+${pc8.dim("$.steps.* refs resolve at runtime \u2014 re-run with --stop-after=<stepId> to resolve them against real output.")}`,
         "Dry Run"
       );
       return;
@@ -4268,17 +4388,17 @@ ${pc7.dim("$.steps.* refs resolve at runtime \u2014 re-run with --stop-after=<st
     const failed = stepEntries.filter(([, r]) => r.status === "failed").length;
     const skipped = stepEntries.filter(([, r]) => r.status === "skipped").length;
     console.log();
-    console.log(`  ${pc7.green("\u2713")} ${succeeded} succeeded  ${failed > 0 ? pc7.red(`\u2717 ${failed} failed`) : ""}  ${skipped > 0 ? pc7.dim(`\u25CB ${skipped} skipped`) : ""}`);
-    console.log(`  ${pc7.dim(`Run ID: ${runId}`)}`);
-    console.log(`  ${pc7.dim(`Log: ${logPath}`)}`);
+    console.log(`  ${pc8.green("\u2713")} ${succeeded} succeeded  ${failed > 0 ? pc8.red(`\u2717 ${failed} failed`) : ""}  ${skipped > 0 ? pc8.dim(`\u25CB ${skipped} skipped`) : ""}`);
+    console.log(`  ${pc8.dim(`Run ID: ${runId}`)}`);
+    console.log(`  ${pc8.dim(`Log: ${logPath}`)}`);
     if (dryResolveTarget) {
       console.log();
-      console.log(`  ${pc7.dim(`Resolved (not executed) "${dryResolveTarget.stepId}":`)}`);
+      console.log(`  ${pc8.dim(`Resolved (not executed) "${dryResolveTarget.stepId}":`)}`);
       renderDryResolution([dryResolveTarget]);
     }
     if (stoppedAfter) {
       note(
-        `Stopped after step "${stoppedAfter}". Inspect step outputs with: ${pc7.cyan(`one flow inspect ${runId}`)}`,
+        `Stopped after step "${stoppedAfter}". Inspect step outputs with: ${pc8.cyan(`one flow inspect ${runId}`)}`,
         "Stopped"
       );
     } else if (options.dryRun) {
@@ -4300,13 +4420,13 @@ ${pc7.dim("$.steps.* refs resolve at runtime \u2014 re-run with --stop-after=<st
       });
       process.exit(1);
     }
-    console.log(`  ${pc7.dim(`Run ID: ${runId}`)}`);
-    console.log(`  ${pc7.dim(`Log: ${logPath}`)}`);
+    console.log(`  ${pc8.dim(`Run ID: ${runId}`)}`);
+    console.log(`  ${pc8.dim(`Log: ${logPath}`)}`);
     error(`Workflow failed: ${errorMsg}`);
   }
 }
 async function flowListCommand() {
-  intro(pc7.bgCyan(pc7.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const flows = listFlows();
   if (isAgentMode()) {
     json({ workflows: flows });
@@ -4338,7 +4458,7 @@ async function flowListCommand() {
   console.log();
 }
 async function flowValidateCommand(keyOrPath) {
-  intro(pc7.bgCyan(pc7.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const spinner5 = createSpinner();
   spinner5.start(`Validating "${keyOrPath}"...`);
   let flowData;
@@ -4367,7 +4487,7 @@ async function flowValidateCommand(keyOrPath) {
     }
     console.log();
     for (const e of errors) {
-      console.log(`  ${pc7.red("\u2717")} ${pc7.dim(e.path)}: ${e.message}`);
+      console.log(`  ${pc8.red("\u2717")} ${pc8.dim(e.path)}: ${e.message}`);
     }
     console.log();
     error(`${errors.length} validation error(s) found`);
@@ -4380,7 +4500,7 @@ async function flowValidateCommand(keyOrPath) {
   note(`Workflow "${flowData.key}" passed all validation checks`, "Valid");
 }
 async function flowResumeCommand(runId, options = {}) {
-  intro(pc7.bgCyan(pc7.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const state = FlowRunner.loadRunState(runId);
   if (!state) {
     error(`Run "${runId}" not found`);
@@ -4433,8 +4553,8 @@ async function flowResumeCommand(runId, options = {}) {
       });
       return;
     }
-    console.log(`  ${pc7.green("\u2713")} Resumed and completed successfully`);
-    console.log(`  ${pc7.dim(`Log: ${runner.getLogPath()}`)}`);
+    console.log(`  ${pc8.green("\u2713")} Resumed and completed successfully`);
+    console.log(`  ${pc8.dim(`Log: ${runner.getLogPath()}`)}`);
   } catch (error2) {
     spinner5.stop("Resume failed");
     const errorMsg = error2 instanceof Error ? error2.message : String(error2);
@@ -4446,7 +4566,7 @@ async function flowResumeCommand(runId, options = {}) {
   }
 }
 async function flowRunsCommand(flowKey) {
-  intro(pc7.bgCyan(pc7.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const runs = FlowRunner.listRuns(flowKey);
   if (isAgentMode()) {
     json({
@@ -4486,7 +4606,7 @@ async function flowRunsCommand(flowKey) {
   console.log();
 }
 async function flowInspectCommand(runId, options = {}) {
-  intro(pc7.bgCyan(pc7.black(" One Workflow ")));
+  intro(pc8.bgCyan(pc8.black(" One Workflow ")));
   const state = FlowRunner.loadRunState(runId);
   if (!state) {
     const msg = `No run found for id "${runId}". List runs with: one flow runs`;
@@ -4515,44 +4635,44 @@ async function flowInspectCommand(runId, options = {}) {
     return;
   }
   console.log();
-  console.log(`  ${pc7.bold(state.flowKey)} ${pc7.dim(`run ${state.runId}`)}  ${colorStatus(state.status)}`);
-  console.log(`  ${pc7.dim(`Started: ${state.startedAt}${state.completedAt ? `  \xB7  Ended: ${state.completedAt}` : ""}`)}`);
-  if (state.currentStepId) console.log(`  ${pc7.dim(`Current step: ${state.currentStepId}`)}`);
+  console.log(`  ${pc8.bold(state.flowKey)} ${pc8.dim(`run ${state.runId}`)}  ${colorStatus(state.status)}`);
+  console.log(`  ${pc8.dim(`Started: ${state.startedAt}${state.completedAt ? `  \xB7  Ended: ${state.completedAt}` : ""}`)}`);
+  if (state.currentStepId) console.log(`  ${pc8.dim(`Current step: ${state.currentStepId}`)}`);
   console.log();
   if (stepEntries.length === 0) {
     note("No step outputs recorded yet for this run.", "Steps");
   } else {
     for (const [id, result] of stepEntries) {
-      const icon = result.status === "success" ? pc7.green("\u2713") : result.status === "skipped" ? pc7.dim("\u25CB") : result.status === "timeout" ? pc7.yellow("\u29D6") : pc7.red("\u2717");
-      const dur = result.durationMs !== void 0 ? pc7.dim(` ${result.durationMs}ms`) : "";
-      const retries = result.retries ? pc7.dim(` (${result.retries} retr${result.retries === 1 ? "y" : "ies"})`) : "";
-      console.log(`  ${icon} ${id} ${pc7.dim(`[${result.status}]`)}${dur}${retries}`);
+      const icon = result.status === "success" ? pc8.green("\u2713") : result.status === "skipped" ? pc8.dim("\u25CB") : result.status === "timeout" ? pc8.yellow("\u29D6") : pc8.red("\u2717");
+      const dur = result.durationMs !== void 0 ? pc8.dim(` ${result.durationMs}ms`) : "";
+      const retries = result.retries ? pc8.dim(` (${result.retries} retr${result.retries === 1 ? "y" : "ies"})`) : "";
+      console.log(`  ${icon} ${id} ${pc8.dim(`[${result.status}]`)}${dur}${retries}`);
       if (result.error) {
-        console.log(`      ${pc7.red("error")} ${result.error}${result.errorCode ? pc7.dim(` (${result.errorCode})`) : ""}`);
+        console.log(`      ${pc8.red("error")} ${result.error}${result.errorCode ? pc8.dim(` (${result.errorCode})`) : ""}`);
       }
       if (result.output !== void 0) {
         const json2 = JSON.stringify(result.output, null, options.full ? 2 : 0) ?? String(result.output);
-        const shown = options.full || json2.length <= 240 ? json2 : `${json2.slice(0, 239)}\u2026  ${pc7.dim("(--full for all)")}`;
-        const indented = options.full ? shown.split("\n").map((l) => `        ${l}`).join("\n") : `      ${pc7.dim("output")} ${shown}`;
+        const shown = options.full || json2.length <= 240 ? json2 : `${json2.slice(0, 239)}\u2026  ${pc8.dim("(--full for all)")}`;
+        const indented = options.full ? shown.split("\n").map((l) => `        ${l}`).join("\n") : `      ${pc8.dim("output")} ${shown}`;
         console.log(indented);
       }
     }
   }
   console.log();
-  console.log(`  ${pc7.dim(`State: ${statePath}`)}`);
-  console.log(`  ${pc7.dim(`Log:   ${path6.join(".one/flows/.logs", `${state.flowKey}-${state.runId}.log`)}`)}`);
+  console.log(`  ${pc8.dim(`State: ${statePath}`)}`);
+  console.log(`  ${pc8.dim(`Log:   ${path6.join(".one/flows/.logs", `${state.flowKey}-${state.runId}.log`)}`)}`);
   console.log();
 }
 function colorStatus(status) {
   switch (status) {
     case "completed":
-      return pc7.green(status);
+      return pc8.green(status);
     case "running":
-      return pc7.cyan(status);
+      return pc8.cyan(status);
     case "paused":
-      return pc7.yellow(status);
+      return pc8.yellow(status);
     case "failed":
-      return pc7.red(status);
+      return pc8.red(status);
     default:
       return status;
   }
@@ -4730,7 +4850,7 @@ async function flowScaffoldCommand(template) {
 }
 
 // src/commands/relay.ts
-import pc8 from "picocolors";
+import pc9 from "picocolors";
 function getConfig3() {
   const apiKey = getApiKey();
   if (!apiKey) {
@@ -4771,15 +4891,15 @@ async function relayCreateCommand(options) {
     }
     spinner5.stop("Relay endpoint created");
     console.log();
-    console.log(`  ${pc8.dim("ID:")}          ${result.id}`);
-    console.log(`  ${pc8.dim("URL:")}         ${result.url}`);
-    console.log(`  ${pc8.dim("Active:")}      ${result.active}`);
-    if (result.description) console.log(`  ${pc8.dim("Description:")} ${result.description}`);
-    if (result.eventFilters?.length) console.log(`  ${pc8.dim("Events:")}      ${result.eventFilters.join(", ")}`);
-    if (result.webhookPayload?.id) console.log(`  ${pc8.dim("Webhook ID:")}  ${result.webhookPayload.id}`);
+    console.log(`  ${pc9.dim("ID:")}          ${result.id}`);
+    console.log(`  ${pc9.dim("URL:")}         ${result.url}`);
+    console.log(`  ${pc9.dim("Active:")}      ${result.active}`);
+    if (result.description) console.log(`  ${pc9.dim("Description:")} ${result.description}`);
+    if (result.eventFilters?.length) console.log(`  ${pc9.dim("Events:")}      ${result.eventFilters.join(", ")}`);
+    if (result.webhookPayload?.id) console.log(`  ${pc9.dim("Webhook ID:")}  ${result.webhookPayload.id}`);
     if (result.warning) {
       console.log();
-      console.log(`  ${pc8.yellow("\u26A0 Warning:")} ${result.warning}`);
+      console.log(`  ${pc9.yellow("\u26A0 Warning:")} ${result.warning}`);
     }
     console.log();
   } catch (error2) {
@@ -4825,12 +4945,12 @@ async function relayListCommand(options) {
         { key: "description", label: "Description" },
         { key: "events", label: "Events" },
         { key: "actions", label: "Actions" },
-        { key: "id", label: "ID", color: pc8.dim }
+        { key: "id", label: "ID", color: pc9.dim }
       ],
       endpoints.map((e) => ({
-        status: e.active ? pc8.green("\u25CF") : pc8.dim("\u25CB"),
-        description: e.description || pc8.dim("(none)"),
-        events: e.eventFilters?.join(", ") || pc8.dim("all"),
+        status: e.active ? pc9.green("\u25CF") : pc9.dim("\u25CB"),
+        description: e.description || pc9.dim("(none)"),
+        events: e.eventFilters?.join(", ") || pc9.dim("all"),
         actions: String(e.actions?.length || 0),
         id: e.id.slice(0, 8)
       }))
@@ -4853,18 +4973,18 @@ async function relayGetCommand(id) {
     }
     spinner5.stop("Relay endpoint loaded");
     console.log();
-    console.log(`  ${pc8.dim("ID:")}          ${result.id}`);
-    console.log(`  ${pc8.dim("URL:")}         ${result.url}`);
-    console.log(`  ${pc8.dim("Active:")}      ${result.active}`);
-    if (result.description) console.log(`  ${pc8.dim("Description:")} ${result.description}`);
-    if (result.eventFilters?.length) console.log(`  ${pc8.dim("Events:")}      ${result.eventFilters.join(", ")}`);
-    console.log(`  ${pc8.dim("Actions:")}     ${result.actions?.length || 0}`);
+    console.log(`  ${pc9.dim("ID:")}          ${result.id}`);
+    console.log(`  ${pc9.dim("URL:")}         ${result.url}`);
+    console.log(`  ${pc9.dim("Active:")}      ${result.active}`);
+    if (result.description) console.log(`  ${pc9.dim("Description:")} ${result.description}`);
+    if (result.eventFilters?.length) console.log(`  ${pc9.dim("Events:")}      ${result.eventFilters.join(", ")}`);
+    console.log(`  ${pc9.dim("Actions:")}     ${result.actions?.length || 0}`);
     if (result.actions?.length) {
       for (const [i, action] of result.actions.entries()) {
-        console.log(`    ${pc8.dim(`[${i}]`)} type=${action.type}${action.actionId ? ` actionId=${action.actionId}` : ""}${action.url ? ` url=${action.url}` : ""}`);
+        console.log(`    ${pc9.dim(`[${i}]`)} type=${action.type}${action.actionId ? ` actionId=${action.actionId}` : ""}${action.url ? ` url=${action.url}` : ""}`);
       }
     }
-    console.log(`  ${pc8.dim("Created:")}     ${result.createdAt}`);
+    console.log(`  ${pc9.dim("Created:")}     ${result.createdAt}`);
     console.log();
   } catch (error2) {
     spinner5.stop("Failed to load relay endpoint");
@@ -4889,9 +5009,9 @@ async function relayUpdateCommand(id, options) {
       return;
     }
     spinner5.stop("Relay endpoint updated");
-    console.log(`  ${pc8.dim("ID:")} ${result.id}`);
-    console.log(`  ${pc8.dim("Active:")} ${result.active}`);
-    console.log(`  ${pc8.dim("Actions:")} ${result.actions?.length || 0}`);
+    console.log(`  ${pc9.dim("ID:")} ${result.id}`);
+    console.log(`  ${pc9.dim("Active:")} ${result.active}`);
+    console.log(`  ${pc9.dim("Actions:")} ${result.actions?.length || 0}`);
     console.log();
   } catch (error2) {
     spinner5.stop("Failed to update relay endpoint");
@@ -4932,9 +5052,9 @@ async function relayActivateCommand(id, options) {
       return;
     }
     spinner5.stop("Relay endpoint activated");
-    console.log(`  ${pc8.dim("ID:")} ${result.id}`);
-    console.log(`  ${pc8.dim("Active:")} ${result.active}`);
-    console.log(`  ${pc8.dim("Actions:")} ${result.actions?.length || 0}`);
+    console.log(`  ${pc9.dim("ID:")} ${result.id}`);
+    console.log(`  ${pc9.dim("Active:")} ${result.active}`);
+    console.log(`  ${pc9.dim("Actions:")} ${result.actions?.length || 0}`);
     console.log();
   } catch (error2) {
     spinner5.stop("Failed to activate relay endpoint");
@@ -4979,11 +5099,11 @@ async function relayEventsCommand(options) {
         { key: "platform", label: "Platform" },
         { key: "eventType", label: "Event Type" },
         { key: "timestamp", label: "Timestamp" },
-        { key: "id", label: "ID", color: pc8.dim }
+        { key: "id", label: "ID", color: pc9.dim }
       ],
       events.map((e) => ({
         platform: e.platform,
-        eventType: e.eventType || pc8.dim("unknown"),
+        eventType: e.eventType || pc9.dim("unknown"),
         timestamp: e.timestamp || e.createdAt,
         id: e.id.slice(0, 8)
       }))
@@ -5006,11 +5126,11 @@ async function relayEventGetCommand(id) {
     }
     spinner5.stop("Relay event loaded");
     console.log();
-    console.log(`  ${pc8.dim("ID:")}        ${result.id}`);
-    console.log(`  ${pc8.dim("Platform:")}  ${result.platform}`);
-    console.log(`  ${pc8.dim("Event:")}     ${result.eventType}`);
-    console.log(`  ${pc8.dim("Timestamp:")} ${result.timestamp || result.createdAt}`);
-    console.log(`  ${pc8.dim("Payload:")}`);
+    console.log(`  ${pc9.dim("ID:")}        ${result.id}`);
+    console.log(`  ${pc9.dim("Platform:")}  ${result.platform}`);
+    console.log(`  ${pc9.dim("Event:")}     ${result.eventType}`);
+    console.log(`  ${pc9.dim("Timestamp:")} ${result.timestamp || result.createdAt}`);
+    console.log(`  ${pc9.dim("Payload:")}`);
     console.log(JSON.stringify(result.payload, null, 2));
     console.log();
   } catch (error2) {
@@ -5047,11 +5167,11 @@ async function relayDeliveriesCommand(options) {
         { key: "error", label: "Error" }
       ],
       items.map((d) => ({
-        status: d.status === "success" ? pc8.green(d.status) : pc8.red(d.status),
-        code: d.statusCode != null ? String(d.statusCode) : pc8.dim("-"),
+        status: d.status === "success" ? pc9.green(d.status) : pc9.red(d.status),
+        code: d.statusCode != null ? String(d.statusCode) : pc9.dim("-"),
         attempt: String(d.attempt),
-        deliveredAt: d.deliveredAt || pc8.dim("-"),
-        error: d.error ? pc8.red(d.error.slice(0, 50)) : pc8.dim("-")
+        deliveredAt: d.deliveredAt || pc9.dim("-"),
+        error: d.error ? pc9.red(d.error.slice(0, 50)) : pc9.dim("-")
       }))
     );
   } catch (error2) {
@@ -5079,14 +5199,14 @@ async function relayPlatformsCommand() {
     printTable(
       [
         { key: "platform", label: "Platform" },
-        { key: "eventTypeCount", label: "Event types", color: pc8.dim }
+        { key: "eventTypeCount", label: "Event types", color: pc9.dim }
       ],
       platforms.map((p10) => ({ platform: p10.platform, eventTypeCount: String(p10.eventTypeCount) }))
     );
     console.log();
     console.log(
-      pc8.dim(
-        `  Run ${pc8.cyan("one relay event-types <platform>")} to see the full event list for a platform.
+      pc9.dim(
+        `  Run ${pc9.cyan("one relay event-types <platform>")} to see the full event list for a platform.
 `
       )
     );
@@ -5099,7 +5219,7 @@ async function relayEventTypesCommand(platform) {
   const { apiKey } = getConfig3();
   const api = new OneApi(apiKey, getApiBase());
   const spinner5 = createSpinner();
-  spinner5.start(`Loading event types for ${pc8.cyan(platform)}...`);
+  spinner5.start(`Loading event types for ${pc9.cyan(platform)}...`);
   try {
     const eventTypes = await api.listRelayEventTypes(platform);
     if (isAgentMode()) {
@@ -5810,7 +5930,7 @@ async function enrichPhase(api, db, config2, model, idField, connectionKey, plat
     );
     let batchHitRateLimit = false;
     const now = (/* @__PURE__ */ new Date()).toISOString();
-    const pending = [];
+    const pending2 = [];
     for (let j = 0; j < results.length; j++) {
       const result = results[j];
       const row = batch[j];
@@ -5829,7 +5949,7 @@ async function enrichPhase(api, db, config2, model, idField, connectionKey, plat
           const fp = merged[config2.invalidateOn] ?? row[config2.invalidateOn];
           merged[ENRICH_FINGERPRINT_COLUMN] = fp == null ? null : String(fp);
         }
-        pending.push({ merged, id });
+        pending2.push({ merged, id });
       } else if (result.status === "fulfilled" && result.value === null) {
         rateLimited++;
         skipped++;
@@ -5838,14 +5958,14 @@ async function enrichPhase(api, db, config2, model, idField, connectionKey, plat
         skipped++;
       }
     }
-    let writes = pending;
-    if (ctx.transform && pending.length > 0) {
-      const transformed = await transformRecords(ctx.transform, pending.map((p10) => p10.merged));
+    let writes = pending2;
+    if (ctx.transform && pending2.length > 0) {
+      const transformed = await transformRecords(ctx.transform, pending2.map((p10) => p10.merged));
       if (transformed) {
         const byId = /* @__PURE__ */ new Map();
         for (const r of transformed) byId.set(r[idField], r);
         writes = [];
-        for (const p10 of pending) {
+        for (const p10 of pending2) {
           const t = byId.get(p10.id);
           if (!t) continue;
           if (!t[tsField]) t[tsField] = now;
@@ -7798,7 +7918,7 @@ function suggestSearchablePaths(records, limit = 15) {
 // src/lib/memory/sync/index.ts
 import { spawn as spawn4 } from "child_process";
 import * as p7 from "@clack/prompts";
-import pc9 from "picocolors";
+import pc10 from "picocolors";
 async function syncInstallCommand() {
   if (await isSqliteAvailable()) {
     if (isAgentMode()) {
@@ -7863,15 +7983,15 @@ async function syncDoctorCommand() {
     return;
   }
   for (const c of checks) {
-    const mark = c.ok ? pc9.green("\u2713") : pc9.red("\u2717");
-    console.log(`  ${mark} ${c.name}${c.detail ? pc9.dim(` \u2014 ${c.detail}`) : ""}`);
+    const mark = c.ok ? pc10.green("\u2713") : pc10.red("\u2717");
+    console.log(`  ${mark} ${c.name}${c.detail ? pc10.dim(` \u2014 ${c.detail}`) : ""}`);
   }
   if (!allOk) {
     console.log(`
-${pc9.yellow("Sync is not ready.")} Try: ${pc9.bold("one sync install")}`);
+${pc10.yellow("Sync is not ready.")} Try: ${pc10.bold("one sync install")}`);
   } else {
     console.log(`
-${pc9.green("Sync is ready.")}`);
+${pc10.green("Sync is ready.")}`);
   }
 }
 function getApi() {
@@ -7914,11 +8034,11 @@ async function syncProfilesCommand(platform) {
     if (p10.enrich) extras.push("enrich");
     if (p10.identityKey || p10.identityKeys) extras.push("identity");
     if (p10.dateFilter) extras.push("incremental");
-    const tags = extras.length > 0 ? ` ${pc9.dim(`[${extras.join(", ")}]`)}` : "";
-    console.log(`  ${pc9.bold(`${p10.platform}/${p10.model}`.padEnd(35))} ${p10.description}${tags}`);
+    const tags = extras.length > 0 ? ` ${pc10.dim(`[${extras.join(", ")}]`)}` : "";
+    console.log(`  ${pc10.bold(`${p10.platform}/${p10.model}`.padEnd(35))} ${p10.description}${tags}`);
   }
   console.log(`
-${profiles.length} built-in profile(s). Run ${pc9.bold("one sync init <platform> <model>")} to use one.`);
+${profiles.length} built-in profile(s). Run ${pc10.bold("one sync init <platform> <model>")} to use one.`);
 }
 async function syncModelsCommand(platform) {
   const api = getApi();
@@ -7936,7 +8056,7 @@ async function syncModelsCommand(platform) {
       return;
     }
     const lines = models.map(
-      (m) => `  ${pc9.bold(m.name.padEnd(30))} ${pc9.dim(m.listAction.method)} ${pc9.dim(m.listAction.path)}`
+      (m) => `  ${pc10.bold(m.name.padEnd(30))} ${pc10.dim(m.listAction.method)} ${pc10.dim(m.listAction.path)}`
     );
     note(lines.join("\n"), `${platform} \u2014 ${models.length} models`);
   } catch (err) {
@@ -8040,15 +8160,15 @@ async function syncInitCommand(platform, model, options) {
         note(JSON.stringify(template, null, 2), "Sync profile template");
         if (inferred && inferred.reasoning.length > 0) {
           console.log(`
-${pc9.bold("Inferred from knowledge:")}`);
-          for (const r of inferred.reasoning) console.log(`  ${pc9.dim("\u2022")} ${r}`);
+${pc10.bold("Inferred from knowledge:")}`);
+          for (const r of inferred.reasoning) console.log(`  ${pc10.dim("\u2022")} ${r}`);
         }
         if (testReport) {
           console.log(`
-${pc9.bold("Test results:")}`);
+${pc10.bold("Test results:")}`);
           for (const c of testReport.checks) {
-            const mark = c.ok ? pc9.green("\u2713") : pc9.red("\u2717");
-            console.log(`  ${mark} ${c.name}${c.detail ? pc9.dim(` \u2014 ${c.detail}`) : ""}`);
+            const mark = c.ok ? pc10.green("\u2713") : pc10.red("\u2717");
+            console.log(`  ${mark} ${c.name}${c.detail ? pc10.dim(` \u2014 ${c.detail}`) : ""}`);
           }
         }
         console.log(`
@@ -8131,17 +8251,17 @@ async function syncTestCommand(platformModel, options = {}) {
     return;
   }
   for (const c of report.checks) {
-    const mark = c.ok ? pc9.green("\u2713") : pc9.red("\u2717");
-    console.log(`  ${mark} ${c.name}${c.detail ? pc9.dim(` \u2014 ${c.detail}`) : ""}`);
+    const mark = c.ok ? pc10.green("\u2713") : pc10.red("\u2717");
+    console.log(`  ${mark} ${c.name}${c.detail ? pc10.dim(` \u2014 ${c.detail}`) : ""}`);
   }
   if (report.detectedColumns && report.detectedColumns.length > 0) {
     console.log(`
-  ${pc9.bold("Detected columns:")}`);
+  ${pc10.bold("Detected columns:")}`);
     for (const col of report.detectedColumns.slice(0, 20)) {
-      console.log(`    ${col.name.padEnd(30)} ${pc9.dim(col.type)}`);
+      console.log(`    ${col.name.padEnd(30)} ${pc10.dim(col.type)}`);
     }
     if (report.detectedColumns.length > 20) {
-      console.log(pc9.dim(`    ... and ${report.detectedColumns.length - 20} more`));
+      console.log(pc10.dim(`    ... and ${report.detectedColumns.length - 20} more`));
     }
   }
   if (report.identityKeysPreview) {
@@ -8149,45 +8269,45 @@ async function syncTestCommand(platformModel, options = {}) {
     const total = perRecord.reduce((a, b) => a + b, 0);
     const min = perRecord.length ? Math.min(...perRecord) : 0;
     const max = perRecord.length ? Math.max(...perRecord) : 0;
-    const mark = total === 0 ? pc9.yellow("~") : pc9.green("\u2713");
+    const mark = total === 0 ? pc10.yellow("~") : pc10.green("\u2713");
     console.log(`
-  ${pc9.bold("Merge + identity keys")} ${pc9.dim(`(cross-platform \u2014 #128)`)}`);
+  ${pc10.bold("Merge + identity keys")} ${pc10.dim(`(cross-platform \u2014 #128)`)}`);
     console.log(`    ${mark} ${perRecord.length} sample${perRecord.length === 1 ? "" : "s"}, ${min}\u2013${max} key${max === 1 ? "" : "s"} per record`);
     if (sampleKeys.length > 0) {
-      console.log(`    ${pc9.dim("e.g.")} ${sampleKeys.slice(0, 8).map((k) => pc9.cyan(k)).join(", ")}`);
+      console.log(`    ${pc10.dim("e.g.")} ${sampleKeys.slice(0, 8).map((k) => pc10.cyan(k)).join(", ")}`);
     } else if (resolvesAfterEnrich) {
-      console.log(`    ${pc9.dim("note:")} 0 on these list-shape samples \u2014 this profile enriches, and its identityKeys paths resolve in the enrich phase.`);
+      console.log(`    ${pc10.dim("note:")} 0 on these list-shape samples \u2014 this profile enriches, and its identityKeys paths resolve in the enrich phase.`);
     } else {
-      console.log(`    ${pc9.yellow("note:")} no identity keys resolved on these samples \u2014 check the identityKey/identityKeys paths.`);
+      console.log(`    ${pc10.yellow("note:")} no identity keys resolved on these samples \u2014 check the identityKey/identityKeys paths.`);
     }
     if (entityFanOut) {
-      console.log(`    ${pc9.yellow("warn:")} identityKey resolved to MULTIPLE values on ${entityFanOut.count} of ${perRecord.length} samples \u2014 those records get NO merge key.`);
-      console.log(`          ${pc9.dim("saw:")} ${entityFanOut.sampleValues.map((v) => pc9.cyan(v)).join(", ")}`);
-      console.log(`          ${pc9.dim('A singular identityKey means "this record IS this entity", so a fan-out has no safe answer.')}`);
-      console.log(`          ${pc9.dim("Point it at a single-valued path, or move it to identityKeys[] for participant associations.")}`);
+      console.log(`    ${pc10.yellow("warn:")} identityKey resolved to MULTIPLE values on ${entityFanOut.count} of ${perRecord.length} samples \u2014 those records get NO merge key.`);
+      console.log(`          ${pc10.dim("saw:")} ${entityFanOut.sampleValues.map((v) => pc10.cyan(v)).join(", ")}`);
+      console.log(`          ${pc10.dim('A singular identityKey means "this record IS this entity", so a fan-out has no safe answer.')}`);
+      console.log(`          ${pc10.dim("Point it at a single-valued path, or move it to identityKeys[] for participant associations.")}`);
     }
   }
   if (searchablePreview) {
     console.log(`
-  ${pc9.bold("Searchable preview")} ${pc9.dim(`(${searchablePreview.mode}, ${searchablePreview.sampledRecords} sample${searchablePreview.sampledRecords === 1 ? "" : "s"})`)}`);
-    console.log(`    ${pc9.dim("length:")}  ${searchablePreview.length} chars (first sample)`);
-    console.log(`    ${pc9.dim("text:")}    ${searchablePreview.text.slice(0, 300)}${searchablePreview.length > 300 ? pc9.dim(" \u2026") : ""}`);
+  ${pc10.bold("Searchable preview")} ${pc10.dim(`(${searchablePreview.mode}, ${searchablePreview.sampledRecords} sample${searchablePreview.sampledRecords === 1 ? "" : "s"})`)}`);
+    console.log(`    ${pc10.dim("length:")}  ${searchablePreview.length} chars (first sample)`);
+    console.log(`    ${pc10.dim("text:")}    ${searchablePreview.text.slice(0, 300)}${searchablePreview.length > 300 ? pc10.dim(" \u2026") : ""}`);
     if (searchablePreview.paths) {
-      console.log(`    ${pc9.dim("paths:")}  ${pc9.dim('(hit rate across all samples \u2014 differentiates "wrong path" from "field sometimes missing")')}`);
+      console.log(`    ${pc10.dim("paths:")}  ${pc10.dim('(hit rate across all samples \u2014 differentiates "wrong path" from "field sometimes missing")')}`);
       for (const p10 of searchablePreview.paths) {
         const rate = `${p10.hits}/${p10.total}`;
-        const mark = p10.hits === p10.total ? pc9.green("\u2713") : p10.hits === 0 ? pc9.red("\u2717") : pc9.yellow("~");
-        const trailer = p10.sample ? pc9.dim(` \u2192 "${p10.sample}"`) : p10.hits === 0 ? pc9.dim(" (no sample matched \u2014 typo, or field never populated in this page)") : "";
+        const mark = p10.hits === p10.total ? pc10.green("\u2713") : p10.hits === 0 ? pc10.red("\u2717") : pc10.yellow("~");
+        const trailer = p10.sample ? pc10.dim(` \u2192 "${p10.sample}"`) : p10.hits === 0 ? pc10.dim(" (no sample matched \u2014 typo, or field never populated in this page)") : "";
         console.log(`      ${mark} ${rate.padStart(5)} ${p10.path}${trailer}`);
       }
     } else {
-      console.log(`    ${pc9.yellow("note:")} no memory.searchable declared \u2014 using the default walker (walks every field, often noisy).`);
-      console.log(`    ${pc9.dim("tip:")}  run \`one sync suggest-searchable ${platform}/${model}\` for an auto-ranked starter list, or pick paths by hand and add them to profile.memory.searchable.`);
+      console.log(`    ${pc10.yellow("note:")} no memory.searchable declared \u2014 using the default walker (walks every field, often noisy).`);
+      console.log(`    ${pc10.dim("tip:")}  run \`one sync suggest-searchable ${platform}/${model}\` for an auto-ranked starter list, or pick paths by hand and add them to profile.memory.searchable.`);
     }
   }
   console.log(
     `
-${report.ok ? pc9.green("Profile looks good.") : pc9.red("Profile has issues.")} ` + (report.ok ? `Run: ${pc9.bold(`one sync run ${platform} --models ${model}`)}` : "Fix the issues above and test again.")
+${report.ok ? pc10.green("Profile looks good.") : pc10.red("Profile has issues.")} ` + (report.ok ? `Run: ${pc10.bold(`one sync run ${platform} --models ${model}`)}` : "Fix the issues above and test again.")
   );
 }
 function buildSearchablePreview(profile, samples) {
@@ -8228,8 +8348,8 @@ async function syncRunCommand(platform, options) {
   if (profileDrift.length > 0 && !isAgentMode()) {
     for (const d of profileDrift) {
       console.log(
-        `  ${pc9.yellow("!")} ${platform}/${d.model} is missing ${d.missing.map((f) => pc9.bold(f)).join(", ")} from the current built-in profile.
-    Run ${pc9.bold(`one sync init ${platform} ${d.model}`)} to pick ${d.missing.length > 1 ? "them" : "it"} up.`
+        `  ${pc10.yellow("!")} ${platform}/${d.model} is missing ${d.missing.map((f) => pc10.bold(f)).join(", ")} from the current built-in profile.
+    Run ${pc10.bold(`one sync init ${platform} ${d.model}`)} to pick ${d.missing.length > 1 ? "them" : "it"} up.`
       );
     }
   }
@@ -8272,21 +8392,21 @@ async function syncRunCommand(platform, options) {
     return;
   }
   for (const r of results) {
-    const status = r.status === "complete" ? pc9.green("complete") : r.status === "dry-run" ? pc9.yellow("dry-run") : pc9.red("failed");
-    console.log(`  ${pc9.bold(r.model)} \u2014 ${r.recordsSynced} records, ${r.pagesProcessed} pages, ${r.duration} [${status}]`);
+    const status = r.status === "complete" ? pc10.green("complete") : r.status === "dry-run" ? pc10.yellow("dry-run") : pc10.red("failed");
+    console.log(`  ${pc10.bold(r.model)} \u2014 ${r.recordsSynced} records, ${r.pagesProcessed} pages, ${r.duration} [${status}]`);
     if (r.reconcileSkipped) {
-      console.log(`    ${pc9.yellow("--full-refresh reconcile skipped \u2014 pagination truncated (e.g. --max-pages). Re-run without the cap to prune stale rows.")}`);
+      console.log(`    ${pc10.yellow("--full-refresh reconcile skipped \u2014 pagination truncated (e.g. --max-pages). Re-run without the cap to prune stale rows.")}`);
     }
     const sc = r.statusCounts;
     if (sc && (sc.archived > 0 || sc.active > 0)) {
-      const archivedColor = sc.archived > sc.active ? pc9.red : pc9.dim;
-      console.log(`    memory: ${pc9.green(String(sc.active))} active, ${archivedColor(String(sc.archived))} archived`);
+      const archivedColor = sc.archived > sc.active ? pc10.red : pc10.dim;
+      console.log(`    memory: ${pc10.green(String(sc.active))} active, ${archivedColor(String(sc.archived))} archived`);
     }
     if (r.error) {
       const errParts = [r.error.message];
       if (r.error.httpStatus) errParts.push(`HTTP ${r.error.httpStatus}`);
       if (r.error.retryAfter) errParts.push(`retry after ${r.error.retryAfter}s`);
-      console.log(`    ${pc9.red(errParts.join(" \u2014 "))}`);
+      console.log(`    ${pc10.red(errParts.join(" \u2014 "))}`);
     }
   }
 }
@@ -8312,8 +8432,8 @@ async function syncQueryCommand(platformModel, options) {
       json(result);
       return;
     }
-    console.log(pc9.dim(`Query: ${result.query}`));
-    console.log(pc9.dim(`Source: local | Last sync: ${result.lastSync ?? "never"} | Age: ${result.syncAge ?? "n/a"}`));
+    console.log(pc10.dim(`Query: ${result.query}`));
+    console.log(pc10.dim(`Source: local | Last sync: ${result.lastSync ?? "never"} | Age: ${result.syncAge ?? "n/a"}`));
     console.log(JSON.stringify(result.results, null, 2));
     console.log(`
 ${result.total} results`);
@@ -8335,7 +8455,7 @@ async function syncSearchCommand(query, options) {
       return;
     }
     for (const r of result.results) {
-      console.log(`  ${pc9.bold(`${r.platform}/${r.model}`)} ${pc9.dim(`(rank: ${r.rank.toFixed(2)})`)}`);
+      console.log(`  ${pc10.bold(`${r.platform}/${r.model}`)} ${pc10.dim(`(rank: ${r.rank.toFixed(2)})`)}`);
       console.log(`    ${JSON.stringify(r.record)}`);
     }
     console.log(`
@@ -8486,25 +8606,25 @@ async function syncSuggestSearchableCommand(platformModel, options = {}) {
     return;
   }
   console.log(`
-  ${pc9.bold("memory.searchable \u2014 ranked suggestions")} ${pc9.dim(`(${samples.length} samples)`)}`);
+  ${pc10.bold("memory.searchable \u2014 ranked suggestions")} ${pc10.dim(`(${samples.length} samples)`)}`);
   if (suggestions.length === 0) {
-    console.log(`    ${pc9.yellow("no high-signal leaves found")} \u2014 page may be all UUIDs / timestamps / enum markers. Inspect the sample with \`sync test\` and pick paths manually.`);
+    console.log(`    ${pc10.yellow("no high-signal leaves found")} \u2014 page may be all UUIDs / timestamps / enum markers. Inspect the sample with \`sync test\` and pick paths manually.`);
     return;
   }
   for (const s of suggestions) {
     const hitPct = Math.round(s.hitRate * 100);
     const noisePct = Math.round(s.noiseFraction * 100);
-    const noiseBadge = noisePct > 0 ? pc9.dim(` noise=${noisePct}%`) : "";
+    const noiseBadge = noisePct > 0 ? pc10.dim(` noise=${noisePct}%`) : "";
     console.log(
-      `    ${pc9.green(String(s.score).padStart(5))}  ${pc9.cyan(s.path.padEnd(52))}` + pc9.dim(` ${hitPct}% hit`) + pc9.dim(` avg=${s.avgLength}ch`) + noiseBadge + (s.sampleValue ? pc9.dim(`
+      `    ${pc10.green(String(s.score).padStart(5))}  ${pc10.cyan(s.path.padEnd(52))}` + pc10.dim(` ${hitPct}% hit`) + pc10.dim(` avg=${s.avgLength}ch`) + noiseBadge + (s.sampleValue ? pc10.dim(`
           \u2192 "${s.sampleValue.slice(0, 140)}"`) : "")
     );
   }
   console.log(`
-  ${pc9.bold("Paste-ready:")}`);
-  console.log("    " + pc9.cyan(`one sync init ${platform} ${model} --config '${JSON.stringify(configPatch)}'`));
+  ${pc10.bold("Paste-ready:")}`);
+  console.log("    " + pc10.cyan(`one sync init ${platform} ${model} --config '${JSON.stringify(configPatch)}'`));
   console.log(`
-  ${pc9.dim("then preview: ")}${pc9.cyan(`one sync test ${platform}/${model} --show-searchable`)}`);
+  ${pc10.dim("then preview: ")}${pc10.cyan(`one sync test ${platform}/${model} --show-searchable`)}`);
 }
 async function syncListCommand(platform) {
   const profiles = listProfiles(platform);
@@ -8538,10 +8658,10 @@ async function syncListCommand(platform) {
     return;
   }
   for (const s of syncs) {
-    const status = s.status === "idle" ? pc9.green("idle") : s.status === "syncing" ? pc9.yellow(`syncing \u2014 page ${s.pagesProcessed}`) : pc9.red("failed");
-    const legacy = s.legacyDbSize && s.legacyDbSize !== "0 B" ? pc9.yellow(`  legacy .db ${s.legacyDbSize}`) : "";
+    const status = s.status === "idle" ? pc10.green("idle") : s.status === "syncing" ? pc10.yellow(`syncing \u2014 page ${s.pagesProcessed}`) : pc10.red("failed");
+    const legacy = s.legacyDbSize && s.legacyDbSize !== "0 B" ? pc10.yellow(`  legacy .db ${s.legacyDbSize}`) : "";
     console.log(
-      `  ${pc9.bold(`${s.platform}/${s.model}`.padEnd(35))} ${String(s.totalRecords).padStart(8)} records  ${status}  ${pc9.dim(s.lastSync ? `last: ${s.lastSync}` : "never synced")}` + legacy
+      `  ${pc10.bold(`${s.platform}/${s.model}`.padEnd(35))} ${String(s.totalRecords).padStart(8)} records  ${status}  ${pc10.dim(s.lastSync ? `last: ${s.lastSync}` : "never synced")}` + legacy
     );
   }
 }
@@ -8620,8 +8740,8 @@ async function syncScheduleAddCommand(platform, options) {
     }
     const verb = replaced ? "Replaced existing schedule" : "Scheduled sync";
     outro(
-      `${verb} ${pc9.bold(entry.id)} \u2014 every ${pc9.bold(entry.every)} (cron: ${pc9.dim(entry.cronExpr)})
-Logs: ${pc9.dim(entry.logFile)}`
+      `${verb} ${pc10.bold(entry.id)} \u2014 every ${pc10.bold(entry.every)} (cron: ${pc10.dim(entry.cronExpr)})
+Logs: ${pc10.dim(entry.logFile)}`
     );
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
@@ -8640,14 +8760,14 @@ async function syncScheduleListCommand() {
     }
     for (const e of entries) {
       const modelsStr = e.models ? ` [${e.models.join(",")}]` : "";
-      const installed = e.cronInstalled ? pc9.green("\u25CF") : pc9.red("\u2717");
+      const installed = e.cronInstalled ? pc10.green("\u25CF") : pc10.red("\u2717");
       console.log(
-        `  ${installed} ${pc9.bold(e.id.padEnd(32))} every ${pc9.bold(e.every.padEnd(5))} ${pc9.dim(e.cronExpr.padEnd(13))}${modelsStr}`
+        `  ${installed} ${pc10.bold(e.id.padEnd(32))} every ${pc10.bold(e.every.padEnd(5))} ${pc10.dim(e.cronExpr.padEnd(13))}${modelsStr}`
       );
-      console.log(`      ${pc9.dim("cwd:")} ${e.cwd}`);
+      console.log(`      ${pc10.dim("cwd:")} ${e.cwd}`);
     }
     console.log(`
-${pc9.dim("\u25CF = cron line installed  \u2717 = registry drift, run `sync schedule repair <id>`")}`);
+${pc10.dim("\u25CF = cron line installed  \u2717 = registry drift, run `sync schedule repair <id>`")}`);
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
   }
@@ -8671,7 +8791,7 @@ async function syncScheduleRemoveCommand(idOrPlatform, options) {
       return;
     }
     for (const r of result.removed) {
-      console.log(`  ${pc9.green("\u2713")} removed ${pc9.bold(r.id)} ${pc9.dim(`(${r.cwd})`)}`);
+      console.log(`  ${pc10.green("\u2713")} removed ${pc10.bold(r.id)} ${pc10.dim(`(${r.cwd})`)}`);
     }
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
@@ -8689,21 +8809,21 @@ async function syncScheduleStatusCommand() {
       return;
     }
     for (const s of statuses) {
-      const driftMarker = s.drift === "ok" ? pc9.green("\u25CF") : s.drift === "missing-cron" ? pc9.red("\u2717 missing cron line") : pc9.yellow(`\u26A0 ${s.drift}`);
-      console.log(`  ${driftMarker} ${pc9.bold(s.entry.id)} \u2014 every ${s.entry.every} (${pc9.dim(s.entry.cronExpr)})`);
-      console.log(`      ${pc9.dim("cwd:")} ${s.entry.cwd}`);
-      console.log(`      ${pc9.dim("last run:")} ${s.lastRunAt ?? pc9.yellow("never")}`);
-      console.log(`      ${pc9.dim("log:")} ${s.entry.logFile} ${s.logExists ? pc9.dim(`(${s.logSize} bytes)`) : pc9.yellow("(empty)")}`);
+      const driftMarker = s.drift === "ok" ? pc10.green("\u25CF") : s.drift === "missing-cron" ? pc10.red("\u2717 missing cron line") : pc10.yellow(`\u26A0 ${s.drift}`);
+      console.log(`  ${driftMarker} ${pc10.bold(s.entry.id)} \u2014 every ${s.entry.every} (${pc10.dim(s.entry.cronExpr)})`);
+      console.log(`      ${pc10.dim("cwd:")} ${s.entry.cwd}`);
+      console.log(`      ${pc10.dim("last run:")} ${s.lastRunAt ?? pc10.yellow("never")}`);
+      console.log(`      ${pc10.dim("log:")} ${s.entry.logFile} ${s.logExists ? pc10.dim(`(${s.logSize} bytes)`) : pc10.yellow("(empty)")}`);
       if (s.logTail.length > 0) {
-        console.log(pc9.dim("      last lines:"));
+        console.log(pc10.dim("      last lines:"));
         for (const line of s.logTail.slice(-3)) {
-          console.log(pc9.dim(`        ${line}`));
+          console.log(pc10.dim(`        ${line}`));
         }
       }
     }
     if (statuses.some((s) => s.drift !== "ok")) {
       console.log(`
-${pc9.yellow("Drift detected.")} Run ${pc9.bold("one sync schedule repair <id>")} to heal.`);
+${pc10.yellow("Drift detected.")} Run ${pc10.bold("one sync schedule repair <id>")} to heal.`);
     }
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
@@ -8716,7 +8836,7 @@ async function syncScheduleRepairCommand(id) {
       json({ status: "repaired", ...healed });
       return;
     }
-    outro(`Repaired ${pc9.bold(healed.id)}: re-installed cron line with current node/cli paths.`);
+    outro(`Repaired ${pc10.bold(healed.id)}: re-installed cron line with current node/cli paths.`);
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
   }
@@ -9207,7 +9327,7 @@ function parseValue(raw) {
 }
 
 // src/commands/mem/records.ts
-import pc10 from "picocolors";
+import pc11 from "picocolors";
 async function memAddCommand(type, dataRaw, flags) {
   requireMemoryInit();
   const data = parseJsonArg(dataRaw, "data");
@@ -9406,7 +9526,7 @@ function summarizeRecord(r) {
     const v = d[field];
     if (typeof v === "string" && v.trim()) return v.trim().slice(0, 80);
   }
-  return pc10.dim("(untitled)");
+  return pc11.dim("(untitled)");
 }
 function relativeTime(iso) {
   if (!iso) return "";
@@ -9469,7 +9589,7 @@ async function memFindByKeyCommand(key, secondKey, flags) {
     });
     return;
   }
-  const label = matchedKeys.map((k) => pc10.cyan(k)).join(pc10.dim(" + "));
+  const label = matchedKeys.map((k) => pc11.cyan(k)).join(pc11.dim(" + "));
   if (records.length === 0) {
     console.log(`
   No records linked to ${label}.
@@ -9477,27 +9597,27 @@ async function memFindByKeyCommand(key, secondKey, flags) {
     return;
   }
   console.log();
-  console.log(`  ${label} ${pc10.dim("\u2014")} ${records.length}${truncated ? "+" : ""} record${records.length === 1 ? "" : "s"} across ${byType.size} type${byType.size === 1 ? "" : "s"}`);
+  console.log(`  ${label} ${pc11.dim("\u2014")} ${records.length}${truncated ? "+" : ""} record${records.length === 1 ? "" : "s"} across ${byType.size} type${byType.size === 1 ? "" : "s"}`);
   console.log();
   const typeWidth = Math.min(30, Math.max(...[...byType.keys()].map((t) => t.length)));
   for (const [type, list] of byType) {
-    console.log(`  ${pc10.bold(type.padEnd(typeWidth))}  ${pc10.dim(`${list.length} record${list.length === 1 ? "" : "s"}`)}`);
+    console.log(`  ${pc11.bold(type.padEnd(typeWidth))}  ${pc11.dim(`${list.length} record${list.length === 1 ? "" : "s"}`)}`);
     for (const r of list.slice(0, perType)) {
-      console.log(`    ${pc10.dim("\xB7")} ${summarizeRecord(r)}  ${pc10.dim(relativeTime(r.updated_at))}  ${pc10.dim(r.id)}`);
+      console.log(`    ${pc11.dim("\xB7")} ${summarizeRecord(r)}  ${pc11.dim(relativeTime(r.updated_at))}  ${pc11.dim(r.id)}`);
     }
     if (list.length > perType) {
-      console.log(`    ${pc10.dim(`\u2026 and ${list.length - perType} more (raise --limit)`)}`);
+      console.log(`    ${pc11.dim(`\u2026 and ${list.length - perType} more (raise --limit)`)}`);
     }
   }
   if (truncated) {
     console.log();
-    console.log(`  ${pc10.yellow("\u26A0")} Stopped at ${FIND_BY_KEY_FETCH_CAP} matches \u2014 there are more, and types sorting after the last one shown are missing entirely. Re-run with --type <type> to see them.`);
+    console.log(`  ${pc11.yellow("\u26A0")} Stopped at ${FIND_BY_KEY_FETCH_CAP} matches \u2014 there are more, and types sorting after the last one shown are missing entirely. Re-run with --type <type> to see them.`);
   }
   console.log();
 }
 
 // src/commands/mem/doctor.ts
-import pc11 from "picocolors";
+import pc12 from "picocolors";
 async function memDoctorCommand() {
   const checks = [];
   const cfg = getMemoryConfig();
@@ -9604,19 +9724,19 @@ function emit(checks, capInfo) {
     return;
   }
   for (const c of checks) {
-    const mark = c.ok ? pc11.green("\u2713") : pc11.red("\u2717");
-    const detail = c.detail ? pc11.dim(` \u2014 ${c.detail}`) : "";
+    const mark = c.ok ? pc12.green("\u2713") : pc12.red("\u2717");
+    const detail = c.detail ? pc12.dim(` \u2014 ${c.detail}`) : "";
     console.log(`  ${mark} ${c.name}${detail}`);
   }
   if (!allOk) {
-    console.log("\n" + pc11.yellow("Memory is not fully healthy."));
+    console.log("\n" + pc12.yellow("Memory is not fully healthy."));
     process.exitCode = 1;
   } else {
-    console.log("\n" + pc11.green("Memory is healthy."));
+    console.log("\n" + pc12.green("Memory is healthy."));
   }
   const line = semanticSearchUpgradeLine({ vectorSearchAvailable: capInfo.vectorSearchAvailable });
   if (line) console.log(`
-${pc11.dim(line)}`);
+${pc12.dim(line)}`);
 }
 
 // src/commands/mem/export.ts
@@ -9911,7 +10031,7 @@ function registerMemoryCommands(program2) {
 }
 
 // src/commands/cache.ts
-import pc12 from "picocolors";
+import pc13 from "picocolors";
 async function cacheClearCommand(actionId) {
   if (actionId) {
     const deleted = clearEntry(actionId);
@@ -9920,9 +10040,9 @@ async function cacheClearCommand(actionId) {
       return;
     }
     if (deleted) {
-      console.log(`Cleared cache for ${pc12.cyan(actionId)}`);
+      console.log(`Cleared cache for ${pc13.cyan(actionId)}`);
     } else {
-      console.log(`No cache entry found for ${pc12.dim(actionId)}`);
+      console.log(`No cache entry found for ${pc13.dim(actionId)}`);
     }
   } else {
     const count = clearAll();
@@ -9959,7 +10079,7 @@ async function cacheListCommand(options) {
     type: e.type,
     key: e.entry.key,
     age: formatAge(getAge(e.entry)),
-    status: isFresh(e.entry) ? pc12.green("fresh") : pc12.yellow("expired")
+    status: isFresh(e.entry) ? pc13.green("fresh") : pc13.yellow("expired")
   }));
   printTable(
     [
@@ -10050,13 +10170,13 @@ async function cacheUpdateAllCommand() {
   if (errors.length > 0) {
     console.log();
     for (const e of errors) {
-      console.log(`  ${pc12.red("\u2717")} ${e.key}: ${pc12.dim(e.error)}`);
+      console.log(`  ${pc13.red("\u2717")} ${e.key}: ${pc13.dim(e.error)}`);
     }
   }
 }
 
 // src/commands/guide.ts
-import pc13 from "picocolors";
+import pc14 from "picocolors";
 
 // src/lib/guide-content.ts
 var GUIDE_OVERVIEW = `# One CLI \u2014 Agent Guide
@@ -10884,6 +11004,12 @@ one sync schedule repair <id>             # Re-install broken cron line
 \`\`\`
 Backed by system cron (macOS/Linux). Schedules tracked in a global registry at \`~/.one/sync/schedules.json\`.
 
+Cron runs jobs with a bare \`PATH=/usr/bin:/bin\`. The CLI pins the absolute \`node\` and CLI paths into the cron
+line, and its background auto-updater resolves \`npm\` next to that \`node\` rather than through \`PATH\`, so a
+scheduled install still upgrades itself. If an install repeatedly fails anyway, the reason is appended to
+\`~/.one/auto-update.log\` and a warning goes to stderr \u2014 check there before assuming a schedule is running the
+current version. \`one --agent sync schedule status\` reports drift and tails the logs.
+
 ## Record Enrichment
 
 When a list endpoint returns lightweight records (e.g. just IDs), add an \`enrich\` config to call a detail endpoint per record and merge the full data before storing:
@@ -11211,14 +11337,14 @@ async function guideCommand(topic = "all") {
     json({ topic, title, content, availableTopics });
     return;
   }
-  intro(pc13.bgCyan(pc13.black(" One Guide ")));
+  intro(pc14.bgCyan(pc14.black(" One Guide ")));
   console.log();
   console.log(content);
-  console.log(pc13.dim("\u2500".repeat(60)));
+  console.log(pc14.dim("\u2500".repeat(60)));
   console.log(
-    pc13.dim("Available topics: ") + availableTopics.map((t) => pc13.cyan(t.topic)).join(", ")
+    pc14.dim("Available topics: ") + availableTopics.map((t) => pc14.cyan(t.topic)).join(", ")
   );
-  console.log(pc13.dim(`Run ${pc13.cyan("one guide <topic>")} for a specific section.`));
+  console.log(pc14.dim(`Run ${pc14.cyan("one guide <topic>")} for a specific section.`));
 }
 
 // src/lib/platform-meta.ts
@@ -11541,20 +11667,20 @@ function buildWorkflowIdeas(connections) {
 // src/commands/logout.ts
 import fs12 from "fs";
 import * as p9 from "@clack/prompts";
-function formatWhoami(config2, apiKey, pc15) {
+function formatWhoami(config2, apiKey, pc16) {
   const whoami = config2.whoami;
   const env = getEnvFromApiKey(apiKey);
-  const envLabel = env === "test" ? pc15.yellow("test") : pc15.green("live");
+  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
   const lines = [];
   if (whoami) {
     const contextParts = [];
     if (whoami.organization) contextParts.push(whoami.organization.name);
     if (whoami.project) contextParts.push(whoami.project.name);
     const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-    lines.push(`${pc15.bold(scopeDisplay)} ${pc15.dim("\xB7")} ${envLabel}`);
-    lines.push(`${whoami.user.name} ${pc15.dim(`(${whoami.user.email})`)}`);
+    lines.push(`${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`);
+    lines.push(`${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`);
   } else {
-    lines.push(`${pc15.dim("Key:")} ${apiKey.slice(0, 8)}... ${pc15.dim("\xB7")} ${envLabel}`);
+    lines.push(`${pc16.dim("Key:")} ${apiKey.slice(0, 8)}... ${pc16.dim("\xB7")} ${envLabel}`);
   }
   return lines;
 }
@@ -11583,7 +11709,7 @@ async function logoutCommand() {
     json({ status: cleared ? "logged_out" : "not_logged_in", message: cleared ? "Credentials cleared." : "No config found." });
     return;
   }
-  const pc15 = (await import("picocolors")).default;
+  const pc16 = (await import("picocolors")).default;
   const globalConfig = readGlobalConfig();
   const projectConfig = readProjectConfig();
   const hasGlobal = globalConfig?.apiKey != null;
@@ -11592,13 +11718,13 @@ async function logoutCommand() {
   if (hasGlobal && hasProject) {
     const infoLines = ["You are logged in with multiple configs.", ""];
     if (projectConfig) {
-      infoLines.push(`${pc15.cyan("Local config:")}`);
-      infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc15));
+      infoLines.push(`${pc16.cyan("Local config:")}`);
+      infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc16));
       infoLines.push("");
     }
     if (globalConfig) {
-      infoLines.push(`${pc15.magenta("Global config:")}`);
-      infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc15));
+      infoLines.push(`${pc16.magenta("Global config:")}`);
+      infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc16));
     }
     p9.note(infoLines.join("\n"));
     const choice = await p9.select({
@@ -11616,14 +11742,14 @@ async function logoutCommand() {
     targetScope = choice;
   } else if (hasProject) {
     const infoLines = ["You are logged in.", ""];
-    infoLines.push(`${pc15.dim("Stored in")} ${pc15.cyan("local config")}`);
-    infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc15));
+    infoLines.push(`${pc16.dim("Stored in")} ${pc16.cyan("local config")}`);
+    infoLines.push(...formatWhoami(projectConfig, projectConfig.apiKey, pc16));
     p9.note(infoLines.join("\n"));
     targetScope = "project";
   } else if (hasGlobal) {
     const infoLines = ["You are logged in.", ""];
-    infoLines.push(`${pc15.dim("Stored in")} ${pc15.magenta("global config")}`);
-    infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc15));
+    infoLines.push(`${pc16.dim("Stored in")} ${pc16.magenta("global config")}`);
+    infoLines.push(...formatWhoami(globalConfig, globalConfig.apiKey, pc16));
     p9.note(infoLines.join("\n"));
     targetScope = "global";
   } else {
@@ -11660,12 +11786,24 @@ async function logoutCommand() {
 // src/lib/analytics.ts
 import { createRequire as createRequire2 } from "module";
 import { randomUUID, createHash } from "crypto";
-import pc14 from "picocolors";
+import pc15 from "picocolors";
 var require3 = createRequire2(import.meta.url);
 var DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com";
 var DEFAULT_POSTHOG_KEY = "phc_a9ok4w0uxiZcVoSWOISIlin85lHMXQD3vWPaYnuRlRV";
+var SEND_MAX_ATTEMPTS = 3;
+var QUEUE_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
+var EXIT_GRACE_MS = 300;
 var inFlight = /* @__PURE__ */ new Set();
+var pending = /* @__PURE__ */ new Set();
+var dispatched = /* @__PURE__ */ new Set();
 var delivered = /* @__PURE__ */ new Set();
+var UUID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function uuidFromInsertId(insertId) {
+  if (UUID_SHAPE.test(insertId)) return insertId.toLowerCase();
+  const h = createHash("sha1").update(`one-cli-event:${insertId}`).digest("hex");
+  const variant = (parseInt(h[16], 16) & 3 | 8).toString(16);
+  return `${h.slice(0, 8)}-${h.slice(8, 12)}-5${h.slice(13, 16)}-${variant}${h.slice(17, 20)}-${h.slice(20, 32)}`;
+}
 function posthogHost() {
   return process.env.ONE_POSTHOG_HOST || DEFAULT_POSTHOG_HOST;
 }
@@ -11721,9 +11859,10 @@ function personSet() {
 }
 function send(item) {
   const insertId = item.properties.$insert_id;
+  if (insertId) dispatched.add(insertId);
   const controller = new AbortController();
   inFlight.add(controller);
-  void (async () => {
+  const run = (async () => {
     try {
       const res = await fetch(`${posthogHost()}/i/v0/e/`, {
         method: "POST",
@@ -11732,6 +11871,8 @@ function send(item) {
           api_key: posthogKey(),
           event: item.event,
           distinct_id: item.distinct_id,
+          // PostHog's dedupe key — a re-sent copy is dropped on ingest.
+          uuid: item.uuid ?? (insertId ? uuidFromInsertId(insertId) : void 0),
           properties: item.properties,
           timestamp: item.timestamp
         }),
@@ -11745,6 +11886,8 @@ function send(item) {
       inFlight.delete(controller);
     }
   })();
+  pending.add(run);
+  void run.finally(() => pending.delete(run));
 }
 function capture(event, properties = {}, opts = {}) {
   if (isTelemetryDisabled()) {
@@ -11754,7 +11897,10 @@ function capture(event, properties = {}, opts = {}) {
   const did = opts.distinctId ?? distinctId();
   const props = { ...baseProperties(), ...properties };
   if (props.$insert_id === void 0) props.$insert_id = randomUUID();
-  if (did === distinctId()) {
+  const insertId = props.$insert_id;
+  if (opts.personProfile === false) {
+    props.$process_person_profile = false;
+  } else if (did === distinctId()) {
     const set = personSet();
     if (set) props.$set = set;
   }
@@ -11762,7 +11908,8 @@ function capture(event, properties = {}, opts = {}) {
     event,
     distinct_id: did,
     properties: props,
-    timestamp: opts.timestamp ?? (/* @__PURE__ */ new Date()).toISOString()
+    timestamp: opts.timestamp ?? (/* @__PURE__ */ new Date()).toISOString(),
+    uuid: uuidFromInsertId(insertId)
   };
   appendAnalyticsQueue(JSON.stringify(item));
 }
@@ -11856,7 +12003,12 @@ function emitRollup(did, group) {
       window_end: new Date(group[group.length - 1].ts).toISOString(),
       $insert_id: insertId
     },
-    { distinctId: did, timestamp: new Date(group[group.length - 1].ts).toISOString() }
+    {
+      distinctId: did,
+      timestamp: new Date(group[group.length - 1].ts).toISOString(),
+      // Rollups bill at the anonymous rate; the person already exists.
+      personProfile: false
+    }
   );
   debugLog(`rollup \u2014 ${group.length} command(s) for ${did}`);
 }
@@ -11874,32 +12026,69 @@ function drainQueue() {
     writeAnalyticsQueue([]);
     return;
   }
+  const now = Date.now();
+  const kept = [];
+  let changed = false;
   for (const line of readAnalyticsQueue()) {
+    let item;
     try {
-      const item = JSON.parse(line);
-      if (item?.properties?.$insert_id) send(item);
+      item = JSON.parse(line);
     } catch {
+      changed = true;
+      continue;
+    }
+    const insertId = item?.properties?.$insert_id;
+    if (!insertId) {
+      changed = true;
+      continue;
+    }
+    const age = now - Date.parse(item.timestamp);
+    const attempts = item.attempts ?? 0;
+    if (!(age < QUEUE_MAX_AGE_MS) || attempts >= SEND_MAX_ATTEMPTS) {
+      debugLog(`"${item.event}" dropped (${attempts} attempts, ${Math.round(age / 6e4)} min old)`);
+      changed = true;
+      continue;
     }
+    if (dispatched.has(insertId)) {
+      kept.push(line);
+      continue;
+    }
+    item.attempts = attempts + 1;
+    if (!item.uuid) item.uuid = uuidFromInsertId(insertId);
+    kept.push(JSON.stringify(item));
+    changed = true;
+    send(item);
   }
+  if (changed) writeAnalyticsQueue(kept);
 }
-function flush() {
+async function flush() {
+  if (pending.size > 0) {
+    await Promise.race([
+      Promise.allSettled([...pending]),
+      new Promise((resolve) => setTimeout(resolve, EXIT_GRACE_MS))
+    ]);
+  }
   for (const controller of inFlight) controller.abort();
   const remaining = readAnalyticsQueue().filter((line) => {
     try {
-      const id = JSON.parse(line).properties?.$insert_id;
-      return id ? !delivered.has(id) : false;
+      const item = JSON.parse(line);
+      const id = item.properties?.$insert_id;
+      if (!id || delivered.has(id)) return false;
+      return (item.attempts ?? 0) < SEND_MAX_ATTEMPTS;
     } catch {
       return false;
     }
   });
   writeAnalyticsQueue(remaining);
+  dispatched.clear();
+  delivered.clear();
 }
 function maybeShowTelemetryNotice() {
   if (isTelemetryDisabled() || isAgentMode()) return;
   if (telemetryNoticeShown()) return;
   markTelemetryNoticeShown();
   process.stderr.write(
-    pc14.dim(
+    pc15.dim(
       "One CLI collects usage analytics (which commands run, linked to your One account) to improve the product.\nNo arguments, inputs, or secrets are ever collected. Opt out anytime with ONE_NO_TELEMETRY=1.\n"
     )
   );
@@ -12006,7 +12195,8 @@ program.hook("preAction", (thisCommand, actionCommand) => {
 program.hook("postAction", async () => {
   await closeBackendIfCached();
   flushUsageRollups();
-  flush();
+  drainQueue();
+  await flush();
   if (!updateCheckPromise) return;
   const info = await updateCheckPromise;
   if (!info) return;
@@ -12328,21 +12518,21 @@ program.command("whoami").description("Show the user, organization, and project
     });
     return;
   }
-  const pc15 = (await import("picocolors")).default;
+  const pc16 = (await import("picocolors")).default;
   const contextParts = [];
   if (whoami.organization) contextParts.push(whoami.organization.name);
   if (whoami.project) contextParts.push(whoami.project.name);
   const scopeDisplay = contextParts.length > 0 ? contextParts.join(" / ") : "Personal";
-  const envLabel = env === "test" ? pc15.yellow("test") : pc15.green("live");
-  const configLabel = configScope === "project" ? pc15.cyan("project config") : pc15.magenta("global config");
+  const envLabel = env === "test" ? pc16.yellow("test") : pc16.green("live");
+  const configLabel = configScope === "project" ? pc16.cyan("project config") : pc16.magenta("global config");
   console.log();
-  console.log(`  ${pc15.bold(scopeDisplay)} ${pc15.dim("\xB7")} ${envLabel}`);
-  console.log(`  ${whoami.user.name} ${pc15.dim(`(${whoami.user.email})`)}`);
-  if (whoami.organization) console.log(`  ${pc15.dim("Org:")} ${whoami.organization.name} ${pc15.dim(`(${whoami.organization.id})`)}`);
-  if (whoami.project) console.log(`  ${pc15.dim("Project:")} ${whoami.project.name} ${pc15.dim(`(${whoami.project.id})`)}`);
+  console.log(`  ${pc16.bold(scopeDisplay)} ${pc16.dim("\xB7")} ${envLabel}`);
+  console.log(`  ${whoami.user.name} ${pc16.dim(`(${whoami.user.email})`)}`);
+  if (whoami.organization) console.log(`  ${pc16.dim("Org:")} ${whoami.organization.name} ${pc16.dim(`(${whoami.organization.id})`)}`);
+  if (whoami.project) console.log(`  ${pc16.dim("Project:")} ${whoami.project.name} ${pc16.dim(`(${whoami.project.id})`)}`);
   console.log();
-  console.log(`  ${pc15.dim("Using")} ${configLabel}`);
-  console.log(`  ${pc15.dim("API:")} ${apiBase}`);
+  console.log(`  ${pc16.dim("Using")} ${configLabel}`);
+  console.log(`  ${pc16.dim("API:")} ${apiBase}`);
   console.log();
 });
 program.command("add [platform]").description("Shortcut for: connection add").option("--tag <name>", "Tag the new connection (disambiguates multiple connections per platform in sync/flow profiles)").action(async (platform, options) => {