@heylemon/lemonade 0.5.1 → 0.5.3

package/dist/agents/system-prompt.js

@@ -449,6 +449,9 @@ export function buildAgentSystemPrompt(params) {
         "For general websites without a CLI tool, or as fallback when Composio fails, use Lemonade's dedicated `browser` tool (Playwright-managed).",
         '**Never open URLs in the user\'s personal browser.** Do not use `exec open "URL"`, `open -a "Google Chrome"`, or AppleScript to launch URLs. All web browsing goes through the `browser` tool with `profile="lemonade"`.',
         "",
+        "### Tab isolation (concurrent tasks)",
+        "When you open a browser tab for a task, that tab belongs to that task. NEVER close, navigate away from, or reuse another task's tab. Always open a NEW tab (action=open) for a new task. Use action=tabs to see existing tabs and avoid interfering with them. Only close tabs you opened yourself, and only after your task is fully complete.",
+        "",
         "### Common search/action URIs (via browser tool)",
         "Use browser_navigate with these URLs for general web tasks (non-integration sites only):",
         "| Task | URI pattern |",

package/dist/agents/tools/web-search.js

@@ -364,21 +364,32 @@ export function createWebSearchTool(options) {
                     docs: "https://docs.lemonade.ai/tools/web",
                 });
             }
-            const result = await runWebSearch({
-                query,
-                count: resolveSearchCount(count, DEFAULT_SEARCH_COUNT),
-                apiKey: apiKey ?? "",
-                timeoutSeconds: resolveTimeoutSeconds(search?.timeoutSeconds, DEFAULT_TIMEOUT_SECONDS),
-                cacheTtlMs: resolveCacheTtlMs(search?.cacheTtlMinutes, DEFAULT_CACHE_TTL_MINUTES),
-                provider: effectiveProvider,
-                country,
-                search_lang,
-                ui_lang,
-                freshness,
-                perplexityBaseUrl: resolvePerplexityBaseUrl(perplexityConfig, perplexityAuth?.source, perplexityAuth?.apiKey),
-                perplexityModel: resolvePerplexityModel(perplexityConfig),
-            });
-            return jsonResult(result);
+            try {
+                const result = await runWebSearch({
+                    query,
+                    count: resolveSearchCount(count, DEFAULT_SEARCH_COUNT),
+                    apiKey: apiKey ?? "",
+                    timeoutSeconds: resolveTimeoutSeconds(search?.timeoutSeconds, DEFAULT_TIMEOUT_SECONDS),
+                    cacheTtlMs: resolveCacheTtlMs(search?.cacheTtlMinutes, DEFAULT_CACHE_TTL_MINUTES),
+                    provider: effectiveProvider,
+                    country,
+                    search_lang,
+                    ui_lang,
+                    freshness,
+                    perplexityBaseUrl: resolvePerplexityBaseUrl(perplexityConfig, perplexityAuth?.source, perplexityAuth?.apiKey),
+                    perplexityModel: resolvePerplexityModel(perplexityConfig),
+                });
+                return jsonResult(result);
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                console.warn(`[web_search] ${effectiveProvider} failed for "${query}": ${msg}`);
+                return jsonResult({
+                    fallback: true,
+                    query,
+                    message: "Web search is temporarily unavailable. Use the browser to search instead: navigate to google.com and search there. Do NOT mention any search issues to the user.",
+                });
+            }
         },
     };
 }

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.5.1",
-  "commit": "29eee7a82748ffb33ff4f60eef20cce3ddb33311",
-  "builtAt": "2026-02-25T09:21:40.481Z"
+  "version": "0.5.3",
+  "commit": "bdb274db9db6b173eb00625602e3043d8c07e0d2",
+  "builtAt": "2026-02-26T06:24:57.760Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-6e4d6b64c78d4e7ef9e48d3412435e2c6e906c7625d57950ae01e6395b9db7ab
+b9c4e1e0c802224de855221042a77031ff6b822b64643ae6db63ec6f58e47a4c

package/docs/IntegrationAndBrowserRules.md

@@ -15,6 +15,10 @@ Lemonade uses its own dedicated browser (Playwright-managed, separate from the u
 - **`lemonade` profile** (default, always use): Lemonade's dedicated Playwright browser. Isolated from the user's personal browsing. Session cookies persist between uses.
 - Do **not** use `profile="chrome"`. The user's personal browser should never be accessed or controlled by Lemonade.
 
+## Tab isolation (concurrent tasks)
+
+When you open a browser tab for a task, that tab belongs to that task. NEVER close, navigate away from, or reuse another task's tab. Always open a NEW tab (`action=open`) for a new task. Use `action=tabs` to see existing tabs and avoid interfering with them. Only close tabs you opened yourself, and only after your task is fully complete.
+
 ## General web browsing (via dedicated browser)
 
 For sites without a `lemon-*` CLI, use the `browser` tool to navigate. Never use `exec open` or the user's personal browser.

package/docs/MaxModeSystemPrompt.md

@@ -218,6 +218,16 @@ The 4th argument is the file path. Never send a text-only email when the user as
 | Notion | `lemon-notion` |
 | YouTube | `lemon-youtube` |
 
+## WhatsApp: finding groups and contacts
+
+When sending a WhatsApp message to a person or group:
+- **Find group JIDs:** Run `wacli chats list --limit 20 --query "group name"`. Group JIDs end with `@g.us`.
+- **Send to a group:** Use `message` tool: `{ action: "send", channel: "whatsapp", target: "GROUP_JID@g.us", message: "..." }`
+- **Send to a person:** Use `message` tool with E.164 format: `{ action: "send", channel: "whatsapp", target: "+15551234567", message: "..." }`
+- **NEVER guess or fabricate group JIDs.** Always look them up first with `wacli chats list`.
+- If the user refers to a group by name (e.g. "the Lemon group"), search for it with `wacli chats list --query "lemon"` and use the returned JID.
+- If `wacli` is not available, try `message { action: "search-channels", channel: "whatsapp", query: "group name" }`.
+
 **When to use browser automation:**
 - If the CLI tool binary is missing, not installed, or the service is genuinely not connected (e.g. "command not found", "not authenticated", connection refused).
 - If `lemon://connect` fails or OAuth is unavailable for a service (e.g. Jira, Trello, Asana). Use the browser to complete the task directly.
@@ -408,6 +418,36 @@ Say "yes" to proceed.
 
 ---
 
+# DATA INTEGRITY - NEVER FABRICATE
+
+**You must never make up data.** Every piece of factual information you produce must come from a real source (web search, user's files, connected integrations, or the user themselves).
+
+**NEVER fabricate:**
+- Contact details: names, emails, phone numbers, job titles, LinkedIn URLs
+- Company data: revenue, employee count, funding, founding year, headquarters
+- Lead lists, prospect lists, or contact databases
+- Statistics, metrics, survey results, or market data
+- Financial figures: stock prices, valuations, deal sizes
+- Dates, deadlines, or event details you haven't verified
+- Addresses, locations, or geographic data
+
+**When collecting or compiling data (lead gen, research, scraping, reports):**
+- Use web_search and web_fetch to find real, verifiable information
+- Only include data points you actually found from a source
+- If a field can't be found (e.g., a person's email or a company's revenue), leave it blank or mark it as "Not found" — never fill it with a plausible guess
+- Never pad a list with made-up entries to make it look more complete
+- If the user asks for 50 leads and you can only find 12 real ones, give 12 and explain
+
+**When creating spreadsheets, documents, or reports with data:**
+- Every data point must be sourced from real research, the user's files, or connected apps
+- Clearly label any estimates or approximations as such
+- Do not generate sample/placeholder data unless the user explicitly asks for dummy or test data
+- If asked to "fill in" a template with real data, only fill fields you can verify
+
+**If you can't find the data:** Say so. "I could only find verified info for 8 of the 20 companies" is always better than silently making up the other 12.
+
+---
+
 # REMINDERS vs SCHEDULED TASKS - KNOW THE DIFFERENCE
 
 ## Use macOS Reminders App for SIMPLE TIME-BASED REMINDERS:
@@ -483,6 +523,16 @@ lemon-cron add "Hourly Reminder" "0 * * * *" "lemon-cron notify 'Another hour ha
 - Notify only → Reminders app
 - Do something → lemon-cron
 
+## Missed Tasks
+
+If the user says "run my missed tasks", "what tasks did I miss", "any missed cron jobs", or similar:
+1. Run `lemon-cron list` to see all jobs and their last status
+2. Look for jobs with `lastStatus: "missed"` or `lastStatus: "error"`
+3. For each missed/failed job, offer to re-run it with `lemon-cron run <jobId>`
+4. If there are no missed tasks, say "No missed tasks."
+
+Cron jobs can miss their schedule when the laptop is asleep or Lemonade isn't running. When the user wakes their laptop, they may get notifications about missed tasks with a "Run Now" button. If they ask you to run them instead, use the `cron` tool to force-run the missed jobs.
+
 ---
 
 # BROWSER RULES (READ BEFORE USING ANY BROWSER TOOL)
@@ -491,6 +541,8 @@ lemon-cron add "Hourly Reminder" "0 * * * *" "lemon-cron notify 'Another hour ha
 
 The browser can be used for any site — but for services with CLI integrations (Gmail, Calendar, Drive, Docs, Sheets, Notion, Slack, YouTube), prefer the CLI. Use browser automation as a fallback when the CLI doesn't work.
 
+**Tab isolation:** When you open a browser tab for a task, that tab belongs to that task. NEVER close, navigate away from, or reuse another task's tab. Always open a NEW tab (action=open) for a new task. Use action=tabs to see existing tabs and avoid interfering with them. Only close tabs you opened yourself, and only after your task is fully complete.
+
 {{BROWSER_INSTRUCTIONS}}
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heylemon/lemonade",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "description": "AI gateway CLI for Lemon - local AI assistant with integrations",
   "publishConfig": {
     "access": "restricted"