@todoforai/cli 0.1.61 → 0.1.63

package/dist/todoforai-cli.js

@@ -42675,25 +42675,53 @@ var require_dist = __commonJS((exports) => {
 });
 
 // src/index.ts
-import { realpathSync as realpathSync2, readFileSync as readFileSync3, existsSync as existsSync2 } from "fs";
-import { resolve as resolve4 } from "path";
+import { realpathSync as realpathSync2, readFileSync as readFileSync5, existsSync as existsSync4 } from "fs";
+import { resolve as resolve5 } from "path";
 import { fileURLToPath } from "url";
-import { homedir as homedir3 } from "os";
+import { homedir as homedir5 } from "os";
 import path4 from "path";
 
 // node_modules/@todoforai/update-notifier/src/index.ts
 import fs from "node:fs";
 import path from "node:path";
 import os from "node:os";
-function isLinkedInstall() {
+import { spawn, spawnSync } from "node:child_process";
+function installer() {
+  let real;
   try {
-    return !fs.realpathSync(process.argv[1] || "").includes(`${path.sep}node_modules${path.sep}`);
+    real = fs.realpathSync(process.argv[1] || "");
   } catch {
-    return false;
+    return null;
   }
+  if (!real.includes(`${path.sep}node_modules${path.sep}`))
+    return null;
+  return real.includes(path.join(".bun", "install", "global")) ? "bun" : "npm";
 }
 var TTL_MS = 24 * 60 * 60 * 1000;
 var CACHE_DIR = path.join(os.homedir(), ".config", "todoforai");
+var cacheFileFor = (name) => path.join(CACHE_DIR, `notifier-${encodeURIComponent(name)}.json`);
+function readCache(name) {
+  try {
+    return JSON.parse(fs.readFileSync(cacheFileFor(name), "utf8"));
+  } catch {
+    return {};
+  }
+}
+function writeCache(name, cache) {
+  try {
+    fs.mkdirSync(CACHE_DIR, { recursive: true });
+    fs.writeFileSync(cacheFileFor(name), JSON.stringify(cache));
+  } catch {}
+}
+function refreshCache(name, cache) {
+  if (Date.now() - (cache.ts ?? 0) <= TTL_MS)
+    return;
+  writeCache(name, { ...cache, ts: Date.now() });
+  fetch(`https://registry.npmjs.org/${name}/latest`, { signal: AbortSignal.timeout(3000) }).then((r) => r.ok ? r.json() : null).then((j) => {
+    if (j?.version)
+      writeCache(name, { ...cache, ts: Date.now(), latest: j.version });
+  }).catch(() => {});
+}
 function cmpVer(a, b) {
   const pa = a.split("-")[0].split(".").map((n) => parseInt(n, 10) || 0);
   const pb = b.split("-")[0].split(".").map((n) => parseInt(n, 10) || 0);
@@ -42705,13 +42733,11 @@ function cmpVer(a, b) {
   return 0;
 }
 function checkForUpdates(pkg) {
-  if (!process.stderr.isTTY || process.env.CI || process.env.NO_UPDATE_NOTIFIER || isLinkedInstall())
+  if (!process.stderr.isTTY || process.env.CI || process.env.NO_UPDATE_NOTIFIER || !installer())
     return;
-  const cacheFile = path.join(CACHE_DIR, `notifier-${encodeURIComponent(pkg.name)}.json`);
-  let cache = {};
-  try {
-    cache = JSON.parse(fs.readFileSync(cacheFile, "utf8"));
-  } catch {}
+  if (process.argv.includes("--json"))
+    return;
+  const cache = readCache(pkg.name);
   if (cache.latest && cmpVer(cache.latest, pkg.version) > 0) {
     process.stderr.write(`
 \x1B[33m  Update available: \x1B[2m${pkg.version}\x1B[22m → \x1B[1m${cache.latest}\x1B[0m
@@ -42719,17 +42745,67 @@ function checkForUpdates(pkg) {
 
 `);
   }
-  if (Date.now() - (cache.ts ?? 0) > TTL_MS) {
+  refreshCache(pkg.name, cache);
+}
+function backgroundUpdate(pkg) {
+  const mgr = installer();
+  if (process.env.CI || process.env.NO_UPDATE_NOTIFIER || !mgr)
+    return;
+  const cache = readCache(pkg.name);
+  const latest = cache.latest;
+  if (latest && cmpVer(latest, pkg.version) > 0 && cache.tried !== latest) {
+    const next = { ...cache, tried: latest };
+    writeCache(pkg.name, next);
     try {
-      fs.mkdirSync(CACHE_DIR, { recursive: true });
-      fs.writeFileSync(cacheFile, JSON.stringify({ ...cache, ts: Date.now() }));
+      const args = mgr === "bun" ? ["add", "-g", `${pkg.name}@${latest}`] : ["i", "-g", `${pkg.name}@${latest}`];
+      const win = process.platform === "win32";
+      spawn(win ? `${mgr}.cmd` : mgr, args, { detached: true, stdio: "ignore", shell: win, windowsHide: true }).unref();
     } catch {}
-    fetch(`https://registry.npmjs.org/${pkg.name}/latest`, { signal: AbortSignal.timeout(3000) }).then((r) => r.ok ? r.json() : null).then((j) => {
-      if (!j?.version)
-        return;
-      fs.writeFileSync(cacheFile, JSON.stringify({ ts: Date.now(), latest: j.version }));
-    }).catch(() => {});
+    refreshCache(pkg.name, next);
+    return;
   }
+  checkForUpdates(pkg);
+}
+var log = (msg) => process.stderr.write(msg + `
+`);
+function install(pkg, mgr, latest) {
+  log(`\x1B[33m  Updating ${pkg.name} ${pkg.version} → ${latest} ...\x1B[0m`);
+  const cmd = process.platform === "win32" ? `${mgr}.cmd` : mgr;
+  const args = mgr === "bun" ? ["add", "-g", `${pkg.name}@${latest}`] : ["i", "-g", `${pkg.name}@${latest}`];
+  const r = spawnSync(cmd, args, { stdio: "inherit", timeout: 120000 });
+  if (r.status !== 0) {
+    writeCache(pkg.name, { ...readCache(pkg.name), failed: latest });
+    log(`\x1B[31m  Update to ${latest} failed — run manually: ${mgr} ${args.join(" ")}\x1B[0m`);
+    return "failed";
+  }
+  log(`\x1B[32m  ✓ Updated to ${latest}\x1B[0m (active from the next start)`);
+  writeCache(pkg.name, { ts: Date.now(), latest });
+  return "updated";
+}
+async function fetchLatest(name, timeoutMs) {
+  try {
+    const r = await fetch(`https://registry.npmjs.org/${name}/latest`, { signal: AbortSignal.timeout(timeoutMs) });
+    return r.ok ? (await r.json())?.version : undefined;
+  } catch {
+    return;
+  }
+}
+async function selfUpdate(pkg) {
+  const mgr = installer();
+  if (!mgr) {
+    log(`\x1B[33mNot a package-manager install — update manually: npm i -g ${pkg.name}\x1B[0m`);
+    return "unsupported";
+  }
+  const latest = await fetchLatest(pkg.name, 1e4);
+  if (!latest) {
+    log("\x1B[31mCould not reach the npm registry.\x1B[0m");
+    return "failed";
+  }
+  if (cmpVer(latest, pkg.version) <= 0) {
+    log(`\x1B[32m✓ Already up to date (${pkg.version}).\x1B[0m`);
+    return "current";
+  }
+  return install(pkg, mgr, latest);
 }
 
 // src/tips.ts
@@ -42981,6 +43057,9 @@ class ApiClient {
   getAgentSettings(id) {
     return this.request("GET", `/api/v1/agents/${id}`);
   }
+  importSession(input) {
+    return this.request("POST", "/api/v1/todos/import", input, 120000);
+  }
   addMessage(projectId, content, agentSettings, todoId, attachments, scheduledTimestamp, groupTag, groupName) {
     const payload = { content, agentSettings, attachments: attachments || [] };
     if (todoId)
@@ -43055,6 +43134,19 @@ class ApiClient {
       throw new Error(`API GET /resources/show failed: ${res.status} ${await res.text()}`);
     return res.json();
   }
+  async shareShow(todoId, key) {
+    const url = `${this.apiUrl}${restBasePath(this.apiKey)}/resources/show/${encodeURIComponent(todoId)}/${encodeURIComponent(key)}/share`;
+    const res = await fetch(url, { method: "POST", headers: { "x-api-key": this.apiKey }, signal: AbortSignal.timeout(30000) });
+    if (!res.ok)
+      throw new Error(`API POST /resources/show/share failed: ${res.status} ${await res.text()}`);
+    return res.json();
+  }
+  async unshareShow(todoId, key) {
+    const url = `${this.apiUrl}${restBasePath(this.apiKey)}/resources/show/${encodeURIComponent(todoId)}/${encodeURIComponent(key)}/share`;
+    const res = await fetch(url, { method: "DELETE", headers: { "x-api-key": this.apiKey }, signal: AbortSignal.timeout(30000) });
+    if (!res.ok)
+      throw new Error(`API DELETE /resources/show/share failed: ${res.status} ${await res.text()}`);
+  }
   async removeShow(todoId, key) {
     const url = `${this.apiUrl}${restBasePath(this.apiKey)}/resources/show/${encodeURIComponent(todoId)}/${encodeURIComponent(key)}`;
     const res = await fetch(url, {
@@ -43232,7 +43324,7 @@ function writeCredential(apiUrl, apiKey) {
 }
 
 // ../packages/shared-api/src/frontend-ws.ts
-var log = (level, ...args) => console.log(`[frontend-ws:${level}]`, ...args);
+var log2 = (level, ...args) => console.log(`[frontend-ws:${level}]`, ...args);
 
 class FrontendWebSocket {
   apiUrl;
@@ -43314,7 +43406,7 @@ class FrontendWebSocket {
         resolve(false);
       });
       sock.on("error", (err) => {
-        log("error", "WS error:", err.message);
+        log2("error", "WS error:", err.message);
         if (current())
           this.connected = false;
         resolve(false);
@@ -43597,6 +43689,11 @@ function qualifiedModelIds(listing, filter) {
   return q ? ids.filter((id) => id.toLowerCase().includes(q)) : ids;
 }
 // ../packages/shared-fbe/src/billing.ts
+var HOBBY_ALLOWED = new Set([
+  "anthropic/claude-sonnet-5.5",
+  "anthropic/claude-sonnet-5",
+  "anthropic/claude-haiku-4.5"
+]);
 var USAGE_WINDOWS = {
   SESSION_MS: 5 * 60 * 60 * 1000,
   WEEK_MS: 7 * 24 * 60 * 60 * 1000,
@@ -43746,6 +43843,75 @@ var NON_SHELL_TYPES = new Set([
   "IOS" /* IOS */
 ]);
 // ../packages/shared-fbe/src/blocks/index.ts
+var ToolType;
+((ToolType2) => {
+  ToolType2["Read"] = "read";
+  ToolType2["Create"] = "create";
+  ToolType2["Write"] = "write";
+  ToolType2["Edit"] = "edit";
+  ToolType2["ModifyFile"] = "modify_file";
+  ToolType2["Bash"] = "bash";
+  ToolType2["Grep"] = "grep";
+  ToolType2["List"] = "list";
+  ToolType2["Skill"] = "skill";
+  ToolType2["ApiGetCurrentContext"] = "api_get_current_context";
+  ToolType2["ApiGetTodo"] = "api_get_todo";
+  ToolType2["ApiAddTodoMessage"] = "api_add_todo_message";
+  ToolType2["ApiUpdateTodoStatus"] = "api_update_todo_status";
+  ToolType2["ApiDeleteTodo"] = "api_delete_todo";
+  ToolType2["ApiListProjects"] = "api_list_projects";
+  ToolType2["ApiGetProject"] = "api_get_project";
+  ToolType2["ApiCreateProject"] = "api_create_project";
+  ToolType2["ApiListProjectTodos"] = "api_list_project_todos";
+  ToolType2["ApiCreateTodo"] = "api_create_todo";
+  ToolType2["ApiListAgents"] = "api_list_agents";
+  ToolType2["ApiGetAgent"] = "api_get_agent";
+  ToolType2["ApiUpdateAgent"] = "api_update_agent";
+  ToolType2["ApiListBusinessContexts"] = "api_list_business_contexts";
+  ToolType2["ApiGetContextItem"] = "api_get_context_item";
+  ToolType2["ApiCreateContextItem"] = "api_create_context_item";
+  ToolType2["ApiUpdateContextItem"] = "api_update_context_item";
+  ToolType2["ApiDeleteContextItem"] = "api_delete_context_item";
+  ToolType2["ApiListEdges"] = "api_list_edges";
+  ToolType2["ApiGetEdge"] = "api_get_edge";
+  ToolType2["ApiListMcps"] = "api_list_mcps";
+  ToolType2["ApiGetUsage"] = "api_get_usage";
+  ToolType2["ApiGetBalance"] = "api_get_balance";
+  ToolType2["ApiGetApiSchema"] = "api_get_api_schema";
+  ToolType2["ApiListBoard"] = "api_list_board";
+  ToolType2["ApiUpsertGroup"] = "api_upsert_group";
+  ToolType2["ApiCreateTemplate"] = "api_create_template";
+  ToolType2["ApiRecommendTemplate"] = "api_recommend_template";
+  ToolType2["ImageGen"] = "image_gen";
+  ToolType2["HtmlSnippet"] = "html_snippet";
+  ToolType2["LivePreview"] = "live_preview";
+  ToolType2["OpenBrowser"] = "open_browser";
+  ToolType2["Show"] = "show";
+  ToolType2["Text"] = "text";
+  ToolType2["Reason"] = "reason";
+  ToolType2["Error"] = "error";
+  ToolType2["Compact"] = "compact";
+  ToolType2["Question"] = "question";
+  ToolType2["Login"] = "login_prompt";
+  ToolType2["BusinessOnboarding"] = "business_onboarding";
+  ToolType2["RequestMcpAccess"] = "request_mcp_access";
+  ToolType2["EdgeNotRunning"] = "edge_not_running";
+  ToolType2["WebFetch"] = "webfetch";
+  ToolType2["GoogleSearch"] = "google_search";
+  ToolType2["WebSearch"] = "web_search";
+  ToolType2["VaultSearch"] = "vault_search";
+  ToolType2["VaultResolve"] = "vault_resolve";
+  ToolType2["VaultWrite"] = "vault_write";
+  ToolType2["VaultWriteBatch"] = "vault_write_batch";
+  ToolType2["VaultUpdate"] = "vault_update";
+  ToolType2["Explore"] = "explore";
+  ToolType2["Plan"] = "plan";
+  ToolType2["Review"] = "review";
+  ToolType2["DeviceList"] = "device_list";
+  ToolType2["Mcp"] = "mcp";
+  ToolType2["NamedTool"] = "named_tool";
+})(ToolType ||= {});
+var TOOL_TYPE_VALUES = new Set(Object.values(ToolType));
 var USER_INPUT_BLOCK_TYPES = new Set([
   "question" /* Question */,
   "login_prompt" /* Login */,
@@ -43901,6 +44067,15 @@ function manualAnswersOf(sources) {
 }
 var manualSamples = (answers) => Object.entries(answers).filter(([, a]) => a.trim()).map(([prompt, text]) => ({ prompt, text: text.trim() }));
 var senderLabel = (s) => s.kind === "team" ? `${s.name} · TODO for AI team` : s.kind === "member" ? `${s.name} · teammate` : `${s.name} · your agent`;
+// ../packages/shared-fbe/src/jarvisEvents.ts
+var STATE = {
+  ["READY" /* READY */]: "agent ended its run and handed back; not opened yet",
+  ["READY_CHECKED" /* READY_CHECKED */]: "agent ended its run and handed back; its window was opened",
+  ["DONE" /* DONE */]: "done and closed",
+  ["ERROR" /* ERROR */]: "failed; not opened yet",
+  ["ERROR_CHECKED" /* ERROR_CHECKED */]: "failed; its window was opened",
+  ["WAITING_FOR_USER" /* WAITING_FOR_USER */]: "blocked, waiting on the user's answer or approval"
+};
 // ../packages/shared-fbe/src/templateBody.ts
 var USER_HEADINGS = new Set([
   "your task",
@@ -44418,7 +44593,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Gmail",
     summary: "Read and send Gmail from your own account.",
-    statusCmd: "zele whoami 2>/dev/null | grep 'email:' | grep -m1 .",
+    statusCmd: "zele whoami 2>/dev/null | grep -o 'email: *[^ ]*' | tr -d ' ' | paste -sd ' ' - | grep -m1 .",
     loginNeedsPty: true,
     loginCmd: "zele login --method google",
     oauthUrlPattern: "(https://accounts\\.google\\.com\\S+)",
@@ -44437,7 +44612,7 @@ var tool_catalog_default = {
     binName: "zele",
     label: "Google Calendar",
     summary: "See your Google Calendar and book, move or cancel events.",
-    statusCmd: "zele whoami 2>/dev/null | grep 'email:' | grep -m1 .",
+    statusCmd: "zele whoami 2>/dev/null | grep -o 'email: *[^ ]*' | tr -d ' ' | paste -sd ' ' - | grep -m1 .",
     loginNeedsPty: true,
     loginCmd: "zele login --method google",
     oauthUrlPattern: "(https://accounts\\.google\\.com\\S+)",
@@ -44478,6 +44653,7 @@ var tool_catalog_default = {
     versionCmd: "linkedin-api --version 2>/dev/null | sed -n 1p"
   },
   "figma-api": {
+    preinstallCloud: true,
     category: "design",
     pkg: "@todoforai/figma-api",
     installer: "npm",
@@ -44612,6 +44788,20 @@ var tool_catalog_default = {
     ],
     description: "AI music generation, custom lyrics, multiple genres."
   },
+  "tfa-suno": {
+    preinstallCloud: true,
+    category: "media",
+    pkg: "@todoforai/suno-api",
+    installer: "npm",
+    label: "Suno (TODOforAI)",
+    summary: "Generate music and songs from a prompt, billed to your TODOforAI credit.",
+    platformAuth: true,
+    versionCmd: "tfa-suno --version 2>/dev/null | sed -n 1p",
+    credentialPaths: [
+      "~/.config/todoforai/credentials.json"
+    ],
+    description: "Suno music generation via TODOforAI — no Suno key needed, billed to the user's TODOforAI credit (generate $0.12 for 2 songs, refunded if the task fails). Same commands as suno-api: `generate [prompt] [--customMode --lyrics <file> --style --title] [--instrumental] [--model V6]` polls until done and prints audio URLs; `--no-poll` + `details <taskId> [--wait]`; `stems`, `midi`, `lyrics-ts`, `replace-section`. Audio URLs expire after 14 days — download the mp3s you keep. Prefer this over suno-api unless the user has their own sunoapi.org key."
+  },
   ntn: {
     preinstallCloud: true,
     category: "utility",
@@ -44648,7 +44838,7 @@ var tool_catalog_default = {
     preinstallCloud: true,
     label: "GitHub",
     summary: "Work with your GitHub repos, pull requests and issues.",
-    statusCmd: "gh auth status 2>&1 | grep 'Logged in to' | grep -m1 .",
+    statusCmd: "gh auth status 2>&1 | grep -o 'Logged in to [^ ]* [a-z]* [^ ]*' | paste -sd ' ' - | grep -m1 .",
     loginCmd: "gh auth login --hostname github.com --git-protocol https",
     oauthUrlPattern: "(https://github\\.com/login/device\\S*)",
     deviceCodePattern: "one-time code:\\s*([A-Z0-9]{4}-[A-Z0-9]{4})",
@@ -44665,19 +44855,22 @@ var tool_catalog_default = {
     installer: "npm",
     label: "MCP (mcporter)",
     summary: "Use tools from any MCP server.",
-    statusCmd: "mcporter list 2>/dev/null | grep -v 'No MCP servers' | grep -m1 .",
-    description: "MCP servers as CLI: `mcporter list [server] [--schema]`, `mcporter call <server>.<tool> key=value` (`key=@file`), `mcporter config add <name> <cmd-or-url>`, `mcporter auth <server>`. `--help` for more.",
+    statusCmd: 'mcporter config list --json 2>/dev/null | node -e \'let d="";process.stdin.on("data",c=>d+=c).on("end",()=>{const s=JSON.parse(d||"{}").servers||[];if(!s.length)process.exit(1);console.log("Configured MCP servers (one line each; run `mcporter list <name>` before first use):");for(const x of s)console.log(`- ${x.name} — ${x.description?x.description+" ":""}(${x.baseUrl?new URL(x.baseUrl).host:x.command})`)})\'',
+    description: "MCP servers as CLI: `mcporter list <server>` (its tools), `mcporter call <server>.<tool> key=value` (`key=@file`), `mcporter auth <server>`, `mcporter config add <name> <cmd-or-url>`.",
     versionCmd: "mcporter --version 2>/dev/null | sed -n 1p",
     preinstallJarvis: true,
     preinstallCloud: true
   },
   glab: {
+    preinstallCloud: true,
+    cloudInstallCmd: "curl -fsSL https://gitlab.com/gitlab-org/cli/-/releases/v1.119.0/downloads/glab_1.119.0_linux_amd64.tar.gz | tar -xz -C /tmp bin/glab && install -m0755 /tmp/bin/glab /usr/local/bin/glab",
+    cloudVerifyCmd: "glab --version",
     category: "development",
     pkg: "glab",
     installer: "binary",
     label: "GitLab",
     summary: "Work with your GitLab repos, merge requests and pipelines.",
-    statusCmd: "glab auth status 2>&1 | grep 'Logged in to' | grep -m1 .",
+    statusCmd: "glab auth status 2>&1 | grep -o 'Logged in to [^ ]* [a-z]* [^ ]*' | paste -sd ' ' - | grep -m1 .",
     loginCmd: "glab auth login --device",
     credentialPaths: ["~/.config/glab-cli/config.yml"],
     description: "GitLab equivalent of `gh`.",
@@ -44703,6 +44896,7 @@ var tool_catalog_default = {
     canStreamLogin: true
   },
   eas: {
+    preinstallCloud: true,
     category: "deployment",
     pkg: "eas-cli",
     installer: "npm",
@@ -44718,6 +44912,7 @@ var tool_catalog_default = {
     versionCmd: "eas --version 2>/dev/null | sed -n 1p"
   },
   netlify: {
+    preinstallCloud: true,
     category: "deployment",
     pkg: "netlify-cli",
     installer: "npm",
@@ -44738,7 +44933,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Firebase",
     summary: "Deploy and manage Firebase hosting, database and functions.",
-    statusCmd: "firebase login:list 2>&1 | grep -oiE '[[:alnum:]._%+-]+@[[:alnum:].-]+\\.[[:alpha:]]{2,}' | grep -m1 .",
+    statusCmd: "firebase login:list 2>&1 | grep -oiE '[[:alnum:]._%+-]+@[[:alnum:].-]+\\.[[:alpha:]]{2,}' | sort -u | paste -sd ' ' - | grep -m1 .",
     loginCmd: "firebase login --no-localhost --reauth",
     loginNeedsPty: true,
     stdinPaste: true,
@@ -44778,11 +44973,12 @@ var tool_catalog_default = {
     credentialPaths: ["~/.config/stripe/config.toml"],
     description: "`stripe listen` forwards webhooks locally; `stripe get/post /v1/...` for raw API.",
     versionCmd: "stripe --version 2>/dev/null | sed -n 1p",
-    deviceCodePattern: "verification code:\\s*([A-Z0-9]{4}-[A-Z0-9]{4})",
-    oauthUrlPattern: "(https://access\\.stripe\\.com/stripecli/\\S+)",
-    canStreamLogin: true
+    oauthUrlPattern: "(https://dashboard\\.stripe\\.com/stripecli/confirm_auth\\S+)"
   },
   flyctl: {
+    preinstallCloud: true,
+    cloudInstallCmd: "curl -fsSL https://github.com/superfly/flyctl/releases/download/v0.4.108/flyctl_0.4.108_Linux_x86_64.tar.gz | tar -xz -C /usr/local/bin flyctl",
+    cloudVerifyCmd: "flyctl version",
     category: "cloud",
     pkg: "flyctl",
     installer: "binary",
@@ -44810,6 +45006,7 @@ var tool_catalog_default = {
     versionCmd: "supabase --version 2>/dev/null | sed -n 1p"
   },
   railway: {
+    preinstallCloud: true,
     category: "cloud",
     pkg: "@railway/cli",
     installer: "npm",
@@ -44851,6 +45048,7 @@ var tool_catalog_default = {
     versionCmd: "shop-app --version 2>/dev/null | sed -n 1p"
   },
   "datadog-ci": {
+    preinstallCloud: true,
     category: "monitoring",
     pkg: "@datadog/datadog-ci",
     installer: "npm",
@@ -44879,7 +45077,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "TODOforAI",
     summary: "Create and follow up on your TODOs, and show results in the chat.",
-    description: 'Manage the user\'s OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli "prompt"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> "text"`). Inspect: `list [--status open]`, `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|ARCHIVED|POSTPONED|CANCELLED|DELETED` (close, reopen, shelve, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r \'.items[].id\'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (permissions/MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype; `--card <name>` via project renderer; `--alias <name>` updates in place), `open <url>` embeds a live preview. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user\'s bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify "Title" "message" [--href /t/<id>]` leaves a note in the user\'s Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows.',
+    description: 'Manage the user\'s OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli "prompt"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> "text"`). Inspect: `list [--status open]`, `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|ARCHIVED|POSTPONED|CANCELLED|DELETED` (close, reopen, shelve, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r \'.items[].id\'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (permissions/MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo\'s readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `--alias <todoId>:<name>` updates another todo\'s artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user\'s bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify "Title" "message" [--href /t/<id>]` leaves a note in the user\'s Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows.',
     installCmd: "npm install -g @todoforai/cli",
     versionCmd: "tfa-cli --version 2>/dev/null | sed -n 1p",
     preinstallCloud: true,
@@ -45006,7 +45204,7 @@ var tool_catalog_default = {
     label: "Google Cloud",
     summary: "Manage your Google Cloud projects and services.",
     needsPython: true,
-    installCmd: `curl -fsSL https://dl.google.com/dl/cloudsdk/channels/rapid/google-cloud-sdk.tar.gz | tar -xzC "$HOME" && CLOUDSDK_PYTHON="$py" "$HOME/google-cloud-sdk/install.sh" --quiet --install-python false --usage-reporting false --path-update false --command-completion false && mkdir -p "$HOME/.todoforai/tools/bin" && rm -f "$HOME/.todoforai/tools/bin/gcloud" && printf '#!/bin/sh\\nCLOUDSDK_PYTHON="\${CLOUDSDK_PYTHON:-%s}" exec "$HOME/google-cloud-sdk/bin/gcloud" "$@"\\n' "$py" > "$HOME/.todoforai/tools/bin/gcloud" && chmod +x "$HOME/.todoforai/tools/bin/gcloud"`,
+    installCmd: `case "$(uname -s)-$(uname -m)" in Darwin-arm64) p=darwin-arm;; Darwin-*) p=darwin-x86_64;; Linux-aarch64|Linux-arm64) p=linux-arm;; *) p=linux-x86_64;; esac && tmp="$HOME/.gcloud-new.$$" && rm -rf "$tmp" && mkdir -p "$tmp" && curl -fsSL "https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-$p.tar.gz" | tar -xzC "$tmp" && rm -rf "$HOME/google-cloud-sdk" && mv "$tmp/google-cloud-sdk" "$HOME/google-cloud-sdk" && rm -rf "$tmp" && mkdir -p "$HOME/.todoforai/tools/bin" && rm -f "$HOME/.todoforai/tools/bin/gcloud" && printf '#!/bin/sh\\nCLOUDSDK_PYTHON="\${CLOUDSDK_PYTHON:-%s}" exec "$HOME/google-cloud-sdk/bin/gcloud" "$@"\\n' "$py" > "$HOME/.todoforai/tools/bin/gcloud" && chmod +x "$HOME/.todoforai/tools/bin/gcloud"`,
     statusCmd: `gcloud auth list --filter=status:ACTIVE --format="value(account)" 2>/dev/null | tr -d '\\r' | grep -m1 .`,
     loginCmd: "gcloud auth login --no-launch-browser",
     loginNeedsPty: true,
@@ -45015,8 +45213,7 @@ var tool_catalog_default = {
     credentialPaths: ["~/.config/gcloud"],
     description: "Official Google Cloud CLI. `gcloud auth login --no-launch-browser` prints the OAuth URL and waits for the pasted verification code.",
     versionCmd: "gcloud --version 2>/dev/null | sed -n 1p",
-    uninstallCmd: 'rm -rf "$HOME/google-cloud-sdk" "$HOME/.todoforai/tools/bin/gcloud"; hash -r 2>/dev/null; ! command -v gcloud >/dev/null 2>&1 || { echo "gcloud is still on PATH: $(command -v gcloud)"; exit 1; }',
-    updateCmd: "gcloud components update --quiet"
+    uninstallCmd: 'rm -rf "$HOME/google-cloud-sdk" "$HOME/.todoforai/tools/bin/gcloud"; hash -r 2>/dev/null; ! command -v gcloud >/dev/null 2>&1 || { echo "gcloud is still on PATH: $(command -v gcloud)"; exit 1; }'
   },
   az: {
     category: "cloud",
@@ -45150,19 +45347,6 @@ var tool_catalog_default = {
     },
     preinstallJarvis: true
   },
-  "todoforai-browser": {
-    category: "development",
-    pkg: "@todoforai/browser",
-    aliases: ["tfa-browser"],
-    installer: "npm",
-    preinstallCloud: true,
-    label: "Browser (Extension)",
-    summary: "Drive your own browser through the TODOforAI extension.",
-    versionCmd: `node -p "require(require('fs').realpathSync(require('child_process').execSync('command -v todoforai-browser',{encoding:'utf8'}).trim()).replace(/\\/dist\\/index\\.js$/, '/package.json')).version" 2>/dev/null`,
-    internal: true,
-    preinstallJarvis: true,
-    description: "Browser automation via extension (non-headless), web scraping, accessibility tree snapshots, screenshots, PDF generation"
-  },
   "tfa-explore": {
     preinstallCloud: true,
     category: "development",
@@ -45633,6 +45817,21 @@ var tool_catalog_default = {
     description: "WordPress REST API CLI. `wordpress-api auth --site https://example.com --user <user> --password '<application password>'` (application password, not the login password). Reading published content needs no auth. `posts list|get|create|update|delete`, `pages`, `media`, `categories`. `posts create` saves a draft unless --status publish. On Elementor/JetEngine sites content.rendered comes back empty — fetch the post's public URL for the body.",
     versionCmd: "wordpress-api --version 2>/dev/null | sed -n 1p"
   },
+  "mailchimp-api": {
+    category: "marketing",
+    pkg: "@todoforai/mailchimp-api",
+    installer: "npm",
+    label: "Mailchimp",
+    summary: "Manage Mailchimp audiences, contacts, email campaigns and reports.",
+    loginCmd: "mailchimp-api auth --api-key <api_key>",
+    oauthBroker: true,
+    statusCmd: `mailchimp-api whoami 2>/dev/null | sed -n 's/.*"account_name"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m1 .`,
+    credentialPaths: [
+      "~/.config/mailchimp-api/credentials.json"
+    ],
+    versionCmd: "mailchimp-api --version 2>/dev/null | sed -n 1p",
+    description: "Independent CLI over the official Mailchimp Marketing API: 155 endpoint commands for lists (email audiences), members (contacts; email or MD5), tags, segments, merge fields, interests, notes/events, campaigns/content/tests/scheduling, templates, reports, assets, landing pages, classic automations, journey triggers, webhooks and batches. JSON output; --data JSON|@file|-; --schema; --all pagination. Every write requires --yes; use --dry-run first. Raw request METHOD /path covers other Marketing endpoints. API-key auth, not OAuth onboarding. Plan/API restrictions apply; no Transactional/Mandrill or Open Commerce. Run --help for limits and consent cautions."
+  },
   "facebook-pages-api": {
     preinstallCloud: true,
     category: "social",
@@ -45647,8 +45846,10 @@ var tool_catalog_default = {
     versionCmd: "facebook-pages-api --version 2>/dev/null | sed -n 1p"
   },
   "ews-api": {
+    preinstallCloud: true,
     category: "email",
     pkg: "ews-api",
+    packages: ["ews-api==0.2.0"],
     installer: "pip",
     label: "Exchange (EWS)",
     summary: "Read and write mail on a company Exchange server.",
@@ -45676,6 +45877,7 @@ var tool_catalog_default = {
     canStreamLogin: true
   },
   neonctl: {
+    preinstallCloud: true,
     category: "database",
     pkg: "neonctl",
     installer: "npm",
@@ -45698,7 +45900,7 @@ var tool_catalog_default = {
     label: "Microsoft 365",
     summary: "Work with Microsoft 365 mail, Teams, SharePoint and users.",
     statusCmd: `m365 status --output text 2>/dev/null | tr -d '"' | grep -vi 'logged out' | grep -m1 .`,
-    loginCmd: "m365 login --authType deviceCode --appId 04b07795-8ddb-461a-bbee-02f9e1bf7b46",
+    loginCmd: "m365 login --authType deviceCode --appId 14d82eec-204b-4c2f-b7e8-296a70dab67e",
     deviceCodePattern: "enter the code ([A-Z0-9]{8,}) to authenticate",
     oauthUrlPattern: "open the page (https://\\S+) and enter",
     credentialPaths: ["~/.cli-m365-msal.json", "~/.cli-m365-connection.json"],
@@ -45737,6 +45939,7 @@ var tool_catalog_default = {
     versionCmd: "posthog-cli --version 2>/dev/null | sed -n 1p"
   },
   canva: {
+    preinstallCloud: true,
     category: "design",
     pkg: "@canva/cli",
     installer: "npm",
@@ -45752,6 +45955,7 @@ var tool_catalog_default = {
     oauthUrlPattern: "OPEN_URL: (https://www\\.canva\\.com/api/oauth/authorize\\S+)"
   },
   webflow: {
+    preinstallCloud: true,
     category: "development",
     pkg: "@webflow/webflow-cli",
     installer: "npm",
@@ -45766,6 +45970,7 @@ var tool_catalog_default = {
     versionCmd: "webflow --version 2>/dev/null | sed -n 1p"
   },
   readwise: {
+    preinstallCloud: true,
     category: "productivity",
     pkg: "@readwise/cli",
     installer: "npm",
@@ -45836,6 +46041,7 @@ var tool_catalog_default = {
     versionCmd: "exa --version 2>/dev/null | sed -n 1p"
   },
   mobbin: {
+    preinstallCloud: true,
     category: "design",
     pkg: "mobbin",
     installer: "npm",
@@ -45866,6 +46072,7 @@ var tool_catalog_default = {
     versionCmd: "{ python -c 'import sys; from importlib.metadata import version; print(version(sys.argv[1]))' blender-mcp || python3 -c 'import sys; from importlib.metadata import version; print(version(sys.argv[1]))' blender-mcp; } 2>/dev/null"
   },
   "google-ads": {
+    preinstallCloud: true,
     category: "marketing",
     pkg: "google-ads",
     packages: [
@@ -45935,6 +46142,7 @@ var model_promos_default = {
     { family: "gpt-5-6-sol", rate: 0.85, starts: "2026-08-26", ends: "2026-09-13" },
     { family: "gpt-5-6-sol", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
     { family: "gpt-6-sol", rate: 0.8, starts: "2026-09-22", ends: "2026-11-21" },
+    { family: "gpt-6-1-sol", rate: 0.8, starts: "2026-09-29", ends: "2026-11-21" },
     { family: "gpt-6-luna", rate: 0.8, starts: "2026-09-22", ends: "2026-11-21" },
     { family: "gpt-6-astra", rate: 0.85, starts: "2026-09-05", ends: "2026-09-13", boostable: false },
     { family: "gpt-6-astra", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21", boostable: false },
@@ -46135,7 +46343,13 @@ import { parseArgs } from "util";
 // package.json
 var package_default = {
   name: "@todoforai/cli",
-  version: "0.1.61",
+  description: "TODOforAI CLI — create and manage tasks with tfa-cli.",
+  homepage: "https://todofor.ai",
+  repository: {
+    type: "git",
+    url: "git+https://github.com/todoforai/cli.git"
+  },
+  version: "0.1.63",
   type: "module",
   bin: {
     "todoforai-cli": "bin/todoforai-cli.js",
@@ -46155,7 +46369,7 @@ var package_default = {
   },
   dependencies: {
     "@agentclientprotocol/sdk": "^1.4.0",
-    "@todoforai/update-notifier": "^0.1.0",
+    "@todoforai/update-notifier": "^0.4.0",
     chalk: "^6.0.0",
     "cli-highlight": "^2.1.11",
     "diff-match-patch": "^1.0.5",
@@ -46197,6 +46411,7 @@ Examples:
   tfa-cli device list|rename|wallpaper …        # Paired machines
   tfa-cli list [-n 30] [--cursor N] [--all] [--status S]  # List todos (paginated)
   tfa-cli status <todo-id> <STATUS>     # Update a todo's status
+  tfa-cli update                        # Update tfa-cli itself (also auto-updates in background; NO_UPDATE_NOTIFIER=1 disables)
   tfa-cli delete <todo-id>              # Permanently delete a todo
   tfa-cli addmessage <todo-id> "text"  # Send a message and exit (like -r, no watch/bridge)
   tfa-cli show <file|-> [todo-id]     # Render a local file (image/pdf/html…) in the chat; - = stdin
@@ -46208,6 +46423,7 @@ Examples:
   tfa-cli notify [--to <email>] "Title" "message" [--href /t/<id>]  # Note to your own user, or --to a project member (Messages tab + phone push)
   tfa-cli claim mint --seed <projectId> [--emails a@x,b@y] [--ttl <sec>]  # Mint /claim/<token> links for a project you own
   tfa-cli next [--direction "<text>"]  # Analyzer growth recommendation cards
+  tfa-cli import [claude|codex|<file>...] [--dry-run]  # Import Claude Code / Codex sessions as todos
   tfa-cli <command> help                # Details per command
 
 Options:
@@ -46247,15 +46463,27 @@ Usage:
   tfa-cli show <file|-> [todo-id]     Render a file by mimetype (- reads stdin)
                                       [--title T] [--alias A] [--mime M] [--card <name>] [--link] [--json]
                                       --link: compact download chip instead of inline render
-                                      Prints "<todoId>:<alias|id>  <public url>". Re-showing with the same
-                                      --alias updates the block in place; old versions stay at /<id>/<version>
-  tfa-cli show rm <ref|alias>         Take it down (block, url, every version)
+                                      Prints "<todoId>:<alias|id>". Private: visible to whoever can read the todo.
+                                      Re-showing with the same --alias updates the block in place (new version)
+                                      --alias <todoId>:<alias> updates that todo's block instead,
+                                      so a later chat can revise an artifact made elsewhere
+  tfa-cli show share <ref|alias>      Make it public; prints its link (serves the latest version)
+  tfa-cli show unshare <ref|alias>    Make it private again (the link stops working)
+  tfa-cli show rm <ref|alias>         Take it down (block, link, every version)
   tfa-cli show list [todo-id]         List show blocks (ref, title, mime/url, card)
                                       [--project <id>] [--card <name>] [--json]
                                       no todo-id + --project (or $TODOFORAI_PROJECT_ID) = every todo
   tfa-cli open <url> [todo-id]        Live http(s) url as a preview  [--title T] [--alias A] [--json]
 
 todo-id defaults to $TODOFORAI_TODO_ID (agent shell) or the last todo this CLI touched.
+
+When to use what:
+  read once, move on             → plain chat reply
+  interactive, this chat only    → html_snippet (can exec/connect/chat back)
+  keep / revise later            → show <file> --alias <name>  (versioned, private)
+  someone outside needs it       → show share <alias>  (public link, revocable)
+  a live web page                → open <url>
+  a format the user asked for    → show the file (pptx, docx, xlsx, pdf…)
 `);
 }
 var STATUS_HELP = {
@@ -46286,7 +46514,7 @@ var WORD_FLAGS = {
   agents: "list-agents",
   config: "show-config"
 };
-var HELP_SUBCOMMANDS = ["agent", "todo", "project", "brand", "device", "list", "ls", "status", "show", "open", "inbox", "notify"];
+var HELP_SUBCOMMANDS = ["agent", "todo", "project", "brand", "device", "list", "ls", "status", "show", "open", "inbox", "notify", "import"];
 function parseCliArgs() {
   const { values, positionals } = parseArgs({
     args: process.argv.slice(2),
@@ -46326,6 +46554,7 @@ function parseCliArgs() {
       to: { type: "string" },
       unread: { type: "boolean", default: false },
       limit: { type: "string" },
+      days: { type: "string" },
       resume: { type: "string", short: "r" },
       continue: { type: "boolean", short: "c", default: false },
       "non-interactive": { type: "boolean", short: "n", default: false },
@@ -46698,7 +46927,7 @@ Cancelled
 import { resolve, basename } from "path";
 
 // src/ensure-bridge.ts
-import { spawn, spawnSync } from "child_process";
+import { spawn as spawn2, spawnSync as spawnSync2 } from "child_process";
 import fs2 from "fs";
 import path2 from "path";
 import os2 from "os";
@@ -46708,7 +46937,7 @@ var INSTALL_TIMEOUT_MS = 90000;
 var bridgeBin = "todoforai-bridge";
 var bridgeBinary = () => bridgeBin;
 function probeBridge(bin) {
-  return spawnSync(bin, ["--version"], { stdio: "ignore" }).status === 0;
+  return spawnSync2(bin, ["--version"], { stdio: "ignore" }).status === 0;
 }
 function hasBridge() {
   if (probeBridge(bridgeBin))
@@ -46723,7 +46952,7 @@ function installBridge() {
   if (process.platform !== "linux" && process.platform !== "darwin")
     return false;
   console.error(`\x1B[2mInstalling TODOforAI Bridge (${INSTALLER_URL})...\x1B[0m`);
-  const r = spawnSync("sh", ["-c", `curl -fsSL --connect-timeout 10 --max-time 30 ${INSTALLER_URL} | sh`], { stdio: ["ignore", "ignore", "inherit"], timeout: INSTALL_TIMEOUT_MS, killSignal: "SIGKILL" });
+  const r = spawnSync2("sh", ["-c", `curl -fsSL --connect-timeout 10 --max-time 30 ${INSTALLER_URL} | sh`], { stdio: ["ignore", "ignore", "inherit"], timeout: INSTALL_TIMEOUT_MS, killSignal: "SIGKILL" });
   if (r.error?.code === "ETIMEDOUT")
     console.error("\x1B[33mBridge install timed out\x1B[0m");
   return r.status === 0 && hasBridge();
@@ -46776,7 +47005,7 @@ function bridgeWhoamiArgs(apiUrl) {
   return withProfile(["whoami"], apiUrl);
 }
 function bridgeDeviceId(apiUrl) {
-  const r = spawnSync(bridgeBin, bridgeWhoamiArgs(apiUrl), { encoding: "utf-8" });
+  const r = spawnSync2(bridgeBin, bridgeWhoamiArgs(apiUrl), { encoding: "utf-8" });
   if (r.status !== 0)
     return null;
   const m = (r.stdout || "").match(/^Device:.*\(id:\s*([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\)/im);
@@ -46802,11 +47031,11 @@ async function enrollBridgeWithApiKey(apiUrl, apiKey) {
     console.error(`\x1B[33mBridge enroll: mint failed (${e?.message || e})\x1B[0m`);
     return false;
   }
-  const login = spawnSync(bridgeBin, [...bridgeLoginArgs(apiUrl), "--token", token], { stdio: ["ignore", "ignore", "inherit"], timeout: 30000, killSignal: "SIGKILL" });
+  const login = spawnSync2(bridgeBin, [...bridgeLoginArgs(apiUrl), "--token", token], { stdio: ["ignore", "ignore", "inherit"], timeout: 30000, killSignal: "SIGKILL" });
   return login.status === 0;
 }
 function ensureBridgeCredentials(apiUrl, opts = {}) {
-  const whoami = spawnSync(bridgeBin, bridgeWhoamiArgs(apiUrl), { stdio: "ignore" });
+  const whoami = spawnSync2(bridgeBin, bridgeWhoamiArgs(apiUrl), { stdio: "ignore" });
   if (whoami.status === 0)
     return true;
   if (opts.interactive === false) {
@@ -46814,7 +47043,7 @@ function ensureBridgeCredentials(apiUrl, opts = {}) {
     return false;
   }
   console.error("\x1B[2mBridge credentials not found. Starting `todoforai-bridge login`...\x1B[0m");
-  const login = spawnSync(bridgeBin, bridgeLoginArgs(apiUrl), { stdio: "inherit" });
+  const login = spawnSync2(bridgeBin, bridgeLoginArgs(apiUrl), { stdio: "inherit" });
   return login.status === 0;
 }
 async function bridgeState(apiUrl, apiKey, deviceId) {
@@ -46840,7 +47069,7 @@ async function ensureBridgeRunning(apiUrl, apiKey, opts = {}) {
     console.error(`\x1B[2mBridge not started: \`todoforai-bridge\` was not found on PATH. Install it (curl -fsSL ${INSTALLER_URL} | sh), or pass --no-bridge (or deprecated --no-edge) to silence this.\x1B[0m`);
     return false;
   }
-  const hasCreds = spawnSync(bridgeBin, bridgeWhoamiArgs(apiUrl), { stdio: "ignore" }).status === 0 || await enrollBridgeWithApiKey(apiUrl, apiKey) || ensureBridgeCredentials(apiUrl, opts);
+  const hasCreds = spawnSync2(bridgeBin, bridgeWhoamiArgs(apiUrl), { stdio: "ignore" }).status === 0 || await enrollBridgeWithApiKey(apiUrl, apiKey) || ensureBridgeCredentials(apiUrl, opts);
   if (!hasCreds) {
     console.error("\x1B[33mBridge not started: `todoforai-bridge login` did not complete successfully.\x1B[0m");
     return false;
@@ -46857,7 +47086,7 @@ async function ensureBridgeRunning(apiUrl, apiKey, opts = {}) {
   fs2.mkdirSync(logDir, { recursive: true });
   const logFile = path2.join(logDir, "bridge.log");
   const out = fs2.openSync(logFile, "a");
-  const child = spawn(bridgeBin, bridgeRunArgs(apiUrl), {
+  const child = spawn2(bridgeBin, bridgeRunArgs(apiUrl), {
     detached: true,
     stdio: ["ignore", out, out]
   });
@@ -47091,7 +47320,7 @@ class ScopedConfig {
   }
 }
 // src/device-login.ts
-import { spawn as spawn2 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 class DeviceLoginError extends Error {
 }
 async function runDeviceLogin(apiUrl) {
@@ -47109,7 +47338,7 @@ async function runDeviceLogin(apiUrl) {
 `);
   try {
     const [cmd, args] = process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : [process.platform === "darwin" ? "open" : "xdg-open", [url]];
-    const child = spawn2(cmd, args, { stdio: "ignore", detached: true });
+    const child = spawn3(cmd, args, { stdio: "ignore", detached: true });
     child.on("error", () => {});
     child.unref();
   } catch {}
@@ -48308,7 +48537,7 @@ var createBuilder = (self, _styler, _isEmpty) => {
       return applyStyle(builder, "" + arguments_[0]);
     }
     if (arguments_.length === 2) {
-      return applyStyle(builder, arguments_[0] + " " + arguments_[1]);
+      return applyStyle(builder, `${arguments_[0] ?? ""} ${arguments_[1] ?? ""}`);
     }
     return applyStyle(builder, arguments_.join(" "));
   };
@@ -50707,11 +50936,442 @@ ${message}`).digest("hex").slice(0, 16);
 `);
 }
 
+// src/import-command.ts
+import { statSync as statSync3 } from "fs";
+import { basename as basename3, dirname as dirname3, resolve as resolve4 } from "path";
+
+// src/import/claude.ts
+import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync3, statSync } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join3 } from "path";
+
+// src/import/common.ts
+import { createHash as createHash2 } from "crypto";
+var NOTE_MAX_LEN = 2000;
+var TOOL_RESULT_MAX_LEN = 4000;
+var SESSION_TITLE_MAX_LEN = 120;
+var clip = (s, max) => s.length > max ? `${s.slice(0, max)}…` : s;
+var hashContent = (s) => createHash2("sha256").update(s).digest("hex");
+function noteToolCall(name, input) {
+  const lines = [`[external_agent_tool_call: ${typeof name === "string" ? name : "tool"}]`];
+  const inp = input && typeof input === "object" ? input : null;
+  let shown = false;
+  if (inp) {
+    for (const [label, keys] of [["description", ["description"]], ["command", ["command", "cmd"]], ["file", ["file_path", "path", "notebook_path"]]]) {
+      const v = keys.map((k) => inp[k]).find((x) => typeof x === "string" && x);
+      if (v) {
+        lines.push(`${label}: ${clip(v, NOTE_MAX_LEN)}`);
+        shown = true;
+      }
+    }
+  }
+  if (!shown && input !== undefined)
+    lines.push(`input: ${clip(typeof input === "string" ? input : JSON.stringify(input), NOTE_MAX_LEN)}`);
+  lines.push("[/external_agent_tool_call]");
+  return lines.join(`
+`);
+}
+function noteToolResult(output, isError) {
+  const head = isError ? "[external_agent_tool_result: error]" : "[external_agent_tool_result]";
+  return `${head}
+${clip(output.trim(), TOOL_RESULT_MAX_LEN)}
+[/external_agent_tool_result]`;
+}
+function titleFromMessages(messages, fallback = "Imported session") {
+  const first = messages.find((m) => m.role === "user" && !m.content.startsWith("[external_agent_tool"))?.content ?? "";
+  const line = first.split(`
+`).map((l) => l.trim()).find(Boolean) ?? "";
+  return line ? clip(line, SESSION_TITLE_MAX_LEN) : fallback;
+}
+
+// src/import/claude.ts
+var claudeHome = () => process.env.CLAUDE_CONFIG_DIR || join3(homedir3(), ".claude");
+function listClaudeSessionFiles(home = claudeHome()) {
+  const root = join3(home, "projects");
+  if (!existsSync2(root))
+    return [];
+  const files = [];
+  for (const slug of readdirSync(root, { withFileTypes: true })) {
+    if (!slug.isDirectory())
+      continue;
+    const dir = join3(root, slug.name);
+    for (const f of readdirSync(dir))
+      if (f.endsWith(".jsonl"))
+        files.push(join3(dir, f));
+  }
+  return files;
+}
+var parseTs = (r) => {
+  if (typeof r.timestamp === "string") {
+    const t = Date.parse(r.timestamp);
+    if (!Number.isNaN(t))
+      return t;
+  }
+  if (typeof r.timestamp_ms === "number")
+    return r.timestamp_ms;
+  return;
+};
+var stripUserQuery = (s) => {
+  const m = s.match(/^\s*<user_query>\s*([\s\S]*?)\s*<\/user_query>\s*$/);
+  return m ? m[1] : s;
+};
+var isHarnessUserText = (s) => /^\s*<(command-name|local-command-caveat|local-command-stdout|local-command-stderr|system-reminder)>/.test(s);
+function flattenContent(content) {
+  if (typeof content === "string")
+    return { text: content, onlyToolResults: false };
+  if (!Array.isArray(content))
+    return { text: "", onlyToolResults: false };
+  const parts = [];
+  let toolResults = 0;
+  for (const b of content) {
+    if (!b || typeof b !== "object")
+      continue;
+    switch (b.type) {
+      case "text":
+        if (typeof b.text === "string" && b.text.trim())
+          parts.push(b.text);
+        break;
+      case "tool_use":
+        parts.push(noteToolCall(b.name, b.input));
+        break;
+      case "tool_result": {
+        toolResults++;
+        const inner = typeof b.content === "string" ? b.content : Array.isArray(b.content) ? b.content.map((c3) => c3?.type === "text" ? c3.text : `[${c3?.type ?? "block"}]`).join(`
+`) : "";
+        parts.push(noteToolResult(inner, b.is_error === true));
+        break;
+      }
+      case "thinking":
+      case "redacted_thinking":
+        break;
+      default:
+        parts.push(`[external unsupported block: ${b.type}]`);
+    }
+  }
+  return { text: parts.join(`
+
+`), onlyToolResults: toolResults > 0 && toolResults === content.length };
+}
+function parseClaudeSession(path3) {
+  const raw = readFileSync3(path3, "utf8");
+  const messages = [];
+  let cwd;
+  let customTitle;
+  let aiTitle;
+  for (const line of raw.split(`
+`)) {
+    if (!line.trim())
+      continue;
+    let r;
+    try {
+      r = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    if (!cwd && typeof r.cwd === "string" && r.cwd)
+      cwd = r.cwd;
+    if (r.type === "custom-title" && typeof r.customTitle === "string")
+      customTitle = r.customTitle;
+    if (r.type === "ai-title" && typeof r.aiTitle === "string")
+      aiTitle = r.aiTitle;
+    if (r.type !== "user" && r.type !== "assistant")
+      continue;
+    if (r.isMeta === true || r.isSidechain === true)
+      continue;
+    const { text, onlyToolResults } = flattenContent(r.message?.content);
+    const role = r.type === "user" && !onlyToolResults ? "user" : "assistant";
+    const content = (role === "user" ? stripUserQuery(text) : text).trim();
+    if (!content || role === "user" && isHarnessUserText(content))
+      continue;
+    messages.push({ role, content, timestamp: parseTs(r) });
+  }
+  if (!cwd || !messages.some((m) => m.role === "user"))
+    return null;
+  const st = statSync(path3);
+  return {
+    kind: "claude",
+    path: path3,
+    cwd,
+    messages,
+    title: customTitle?.trim() || aiTitle?.trim() || titleFromMessages(messages),
+    sha256: hashContent(raw),
+    modifiedAt: st.mtimeMs
+  };
+}
+
+// src/import/codex.ts
+import { existsSync as existsSync3, readdirSync as readdirSync2, readFileSync as readFileSync4, statSync as statSync2 } from "fs";
+import { homedir as homedir4 } from "os";
+import { join as join4 } from "path";
+var codexHome = () => process.env.CODEX_HOME || join4(homedir4(), ".codex");
+function listCodexSessionFiles(home = codexHome()) {
+  const root = join4(home, "sessions");
+  if (!existsSync3(root))
+    return [];
+  const out = [];
+  const walk = (dir) => {
+    for (const e of readdirSync2(dir, { withFileTypes: true })) {
+      const p = join4(dir, e.name);
+      if (e.isDirectory())
+        walk(p);
+      else if (e.name.startsWith("rollout-") && e.name.endsWith(".jsonl"))
+        out.push(p);
+    }
+  };
+  walk(root);
+  return out;
+}
+function readCodexTitles(home = codexHome()) {
+  const titles = new Map;
+  const idx = join4(home, "session_index.jsonl");
+  if (!existsSync3(idx))
+    return titles;
+  for (const line of readFileSync4(idx, "utf8").split(`
+`)) {
+    try {
+      const r = JSON.parse(line);
+      if (r?.id && typeof r.thread_name === "string")
+        titles.set(r.id, r.thread_name);
+    } catch {}
+  }
+  return titles;
+}
+var HARNESS_TAGS = ["environment_context", "recommended_plugins", "user_instructions", "permissions_instructions", "turn_aborted", "collaboration_mode_instructions"];
+var isHarnessBlock = (s) => {
+  const m = /^\s*<([a-z_]+)>[\s\S]*<\/\1>\s*$/.exec(s);
+  return !!m && HARNESS_TAGS.includes(m[1]);
+};
+var partsText = (content, dropHarness = false) => Array.isArray(content) ? content.map((c3) => typeof c3?.text === "string" ? c3.text : "").filter((t) => t.trim() && !(dropHarness && isHarnessBlock(t))).join(`
+
+`) : typeof content === "string" ? content : "";
+var outputText = (output) => {
+  if (typeof output === "string") {
+    try {
+      const parsed = JSON.parse(output);
+      if (Array.isArray(parsed))
+        return partsText(parsed);
+    } catch {}
+    return output;
+  }
+  return partsText(output);
+};
+function parseCodexSession(path3, titles = readCodexTitles()) {
+  const raw = readFileSync4(path3, "utf8");
+  const messages = [];
+  let cwd;
+  let sessionId;
+  for (const line of raw.split(`
+`)) {
+    if (!line.trim())
+      continue;
+    let r;
+    try {
+      r = JSON.parse(line);
+    } catch {
+      continue;
+    }
+    const ts = typeof r.timestamp === "string" ? Date.parse(r.timestamp) : NaN;
+    const timestamp = Number.isNaN(ts) ? undefined : ts;
+    if (r.type === "session_meta") {
+      cwd = cwd || r.payload?.cwd;
+      sessionId = sessionId || r.payload?.session_id || r.payload?.id;
+      continue;
+    }
+    if (r.type !== "response_item")
+      continue;
+    const p = r.payload ?? {};
+    switch (p.type) {
+      case "message": {
+        if (p.role !== "user" && p.role !== "assistant")
+          break;
+        const content = partsText(p.content, p.role === "user").trim();
+        if (content)
+          messages.push({ role: p.role, content, timestamp });
+        break;
+      }
+      case "function_call":
+      case "custom_tool_call": {
+        let input = p.arguments ?? p.input;
+        if (typeof input === "string") {
+          try {
+            input = JSON.parse(input);
+          } catch {}
+        }
+        messages.push({ role: "assistant", content: noteToolCall(p.name, input), timestamp });
+        break;
+      }
+      case "function_call_output":
+      case "custom_tool_call_output":
+        messages.push({ role: "assistant", content: noteToolResult(outputText(p.output), false), timestamp });
+        break;
+      default:
+        break;
+    }
+  }
+  if (!cwd || !messages.some((m) => m.role === "user"))
+    return null;
+  const st = statSync2(path3);
+  return {
+    kind: "codex",
+    path: path3,
+    cwd,
+    messages,
+    title: sessionId && titles.get(sessionId)?.trim() || titleFromMessages(messages),
+    sha256: hashContent(raw),
+    modifiedAt: st.mtimeMs
+  };
+}
+
+// src/import-command.ts
+var DEFAULT_MAX_AGE_DAYS = 30;
+var DEFAULT_MAX_COUNT = 50;
+var SOURCES = ["claude", "codex"];
+function printImportHelp() {
+  process.stderr.write(`
+tfa-cli import — import Claude Code / Codex sessions as todos
+
+Usage:
+  tfa-cli import [claude|codex] [flags]
+  tfa-cli import <session.jsonl>... [flags]
+
+Flags:
+      --project <id>      Target project (default: current default project)
+  -a, --agent <id|name>   Agent for every imported todo (default: match the session cwd, else your default agent)
+      --days <n>          Only sessions modified in the last n days (default: ${DEFAULT_MAX_AGE_DAYS}; 0 = all)
+      --limit <n>         Max sessions per source, newest first (default: ${DEFAULT_MAX_COUNT}; 0 = all)
+      --dry-run           Parse and list, write nothing (no login needed)
+      --json              Machine-readable output
+  -h, --help              Show this help
+
+Sources on this machine:
+  Claude Code  ${claudeHome()}/projects/*/*.jsonl
+  Codex        ${codexHome()}/sessions/**/rollout-*.jsonl
+`);
+}
+var codexTitles;
+function safeParse(kind, file) {
+  try {
+    return kind === "claude" ? parseClaudeSession(file) : parseCodexSession(file, codexTitles ??= readCodexTitles());
+  } catch {
+    return null;
+  }
+}
+function collect(kinds, days, limit) {
+  const cutoff = days > 0 ? Date.now() - days * 86400000 : 0;
+  return kinds.flatMap((kind) => {
+    const files = kind === "claude" ? listClaudeSessionFiles() : listCodexSessionFiles();
+    const sessions = files.map((f) => ({ f, mtime: statSync3(f).mtimeMs })).filter((x) => x.mtime >= cutoff).sort((a, b) => b.mtime - a.mtime).map((x) => safeParse(kind, x.f)).filter((s) => !!s);
+    return limit > 0 ? sessions.slice(0, limit) : sessions;
+  });
+}
+async function agentForCwd(api, cwd, fallback, cache) {
+  for (let dir = cwd;; dir = dirname3(dir)) {
+    const hit = cache.get(dir);
+    if (hit)
+      return hit;
+    const matches = await api.listAgentSettings({ workspacePath: dir }).catch(() => []);
+    if (matches.length) {
+      cache.set(dir, matches[0].id);
+      return matches[0].id;
+    }
+    if (dirname3(dir) === dir)
+      break;
+  }
+  cache.set(cwd, fallback);
+  return fallback;
+}
+async function importCommand(api, positionals, args, scopedProject, defaultAgentId) {
+  const days = args.days !== undefined ? Number(args.days) : DEFAULT_MAX_AGE_DAYS;
+  const limit = args.limit !== undefined ? Number(args.limit) : DEFAULT_MAX_COUNT;
+  const json = !!args.json;
+  const ops = positionals.slice(1);
+  const named = ops.filter((o) => SOURCES.includes(o));
+  const files = ops.filter((o) => !SOURCES.includes(o)).map((f) => resolve4(f));
+  const skipped = [];
+  const sessions = files.length ? files.flatMap((f) => {
+    const kind = named[0] ?? (basename3(f).startsWith("rollout-") ? "codex" : "claude");
+    const s = safeParse(kind, f);
+    if (!s)
+      skipped.push(f);
+    return s ? [s] : [];
+  }) : collect(named.length ? named : SOURCES, days, limit);
+  if (!json)
+    for (const f of skipped)
+      process.stderr.write(`${YELLOW}skip ${f}: not a readable session${RESET}
+`);
+  if (args["dry-run"]) {
+    const rows = sessions.map((s) => ({ kind: s.kind, title: s.title, cwd: s.cwd, messages: s.messages.length, path: s.path, modifiedAt: s.modifiedAt }));
+    if (json) {
+      console.log(JSON.stringify({ sessions: rows, skipped }));
+      return;
+    }
+    for (const r of rows)
+      process.stderr.write(`${CYAN}${r.kind.padEnd(7)}${RESET} ${r.title}  ${DIM}${r.messages} msgs · ${r.cwd}${RESET}
+`);
+    process.stderr.write(`${DIM}${rows.length} session(s) — dry run, nothing written${RESET}
+`);
+    return;
+  }
+  if (!api)
+    throw new Error("import: not authenticated");
+  const projectId = args.project || scopedProject;
+  if (!projectId) {
+    process.stderr.write(`${RED}No project — pass --project <id>${RESET}
+`);
+    process.exit(2);
+  }
+  let fallbackAgent = defaultAgentId;
+  if (args.agent || !fallbackAgent) {
+    const agents = await api.listAgentSettings();
+    fallbackAgent = args.agent ? agents.find((a) => a.id === args.agent || a.name === args.agent)?.id : agents[0]?.id;
+    if (!fallbackAgent) {
+      process.stderr.write(`${RED}Agent not found — pass --agent <id>${RESET}
+`);
+      process.exit(2);
+    }
+  }
+  const agentCache = new Map;
+  const results = [];
+  for (const s of sessions) {
+    const agentSettingsId = args.agent ? fallbackAgent : await agentForCwd(api, s.cwd, fallbackAgent, agentCache);
+    try {
+      const r = await api.importSession({
+        projectId,
+        agentSettingsId,
+        title: s.title,
+        messages: s.messages,
+        source: { kind: s.kind, path: s.path, sha256: s.sha256, cwd: s.cwd }
+      });
+      results.push({ ...r, kind: s.kind, title: s.title, path: s.path });
+      if (!json) {
+        const mark = r.outcome === "unchanged" ? `${DIM}=` : `${GREEN}✓`;
+        process.stderr.write(`${mark} ${r.outcome.padEnd(9)}${RESET} ${s.title}  ${DIM}${r.messageCount} msgs · ${r.todoId}${RESET}
+`);
+      }
+    } catch (e) {
+      results.push({ kind: s.kind, title: s.title, path: s.path, error: e.message });
+      if (!json)
+        process.stderr.write(`${RED}✗ failed    ${RESET} ${s.title}  ${DIM}${e.message}${RESET}
+`);
+    }
+  }
+  const failed = results.filter((r) => r.error).length;
+  if (json)
+    console.log(JSON.stringify({ imported: results, total: results.length, skipped }));
+  else {
+    const count = (o) => results.filter((r) => r.outcome === o).length;
+    process.stderr.write(`${GREEN}Imported ${count("created")} new, ${count("updated")} updated${failed ? `, ${RED}${failed} failed` : ""}${RESET}
+`);
+  }
+  if (failed)
+    process.exitCode = 1;
+}
+
 // src/index.ts
 import { randomUUID as randomUUID3 } from "crypto";
 
 // src/ensure-bridge.ts
-import { spawn as spawn3, spawnSync as spawnSync2 } from "child_process";
+import { spawn as spawn4, spawnSync as spawnSync3 } from "child_process";
 import fs3 from "fs";
 import path3 from "path";
 import os4 from "os";
@@ -50720,7 +51380,7 @@ var INSTALL_PREFIX2 = process.env.TODOFORAI_PREFIX || path3.join(os4.homedir(),
 var INSTALL_TIMEOUT_MS2 = 90000;
 var bridgeBin2 = "todoforai-bridge";
 function probeBridge2(bin) {
-  return spawnSync2(bin, ["--version"], { stdio: "ignore" }).status === 0;
+  return spawnSync3(bin, ["--version"], { stdio: "ignore" }).status === 0;
 }
 function hasBridge2() {
   if (probeBridge2(bridgeBin2))
@@ -50735,7 +51395,7 @@ function installBridge2() {
   if (process.platform !== "linux" && process.platform !== "darwin")
     return false;
   console.error(`\x1B[2mInstalling TODOforAI Bridge (${INSTALLER_URL2})...\x1B[0m`);
-  const r = spawnSync2("sh", ["-c", `curl -fsSL --connect-timeout 10 --max-time 30 ${INSTALLER_URL2} | sh`], { stdio: ["ignore", "ignore", "inherit"], timeout: INSTALL_TIMEOUT_MS2, killSignal: "SIGKILL" });
+  const r = spawnSync3("sh", ["-c", `curl -fsSL --connect-timeout 10 --max-time 30 ${INSTALLER_URL2} | sh`], { stdio: ["ignore", "ignore", "inherit"], timeout: INSTALL_TIMEOUT_MS2, killSignal: "SIGKILL" });
   if (r.error?.code === "ETIMEDOUT")
     console.error("\x1B[33mBridge install timed out\x1B[0m");
   return r.status === 0 && hasBridge2();
@@ -50788,7 +51448,7 @@ function bridgeWhoamiArgs2(apiUrl) {
   return withProfile2(["whoami"], apiUrl);
 }
 function bridgeDeviceId2(apiUrl) {
-  const r = spawnSync2(bridgeBin2, bridgeWhoamiArgs2(apiUrl), { encoding: "utf-8" });
+  const r = spawnSync3(bridgeBin2, bridgeWhoamiArgs2(apiUrl), { encoding: "utf-8" });
   if (r.status !== 0)
     return null;
   const m = (r.stdout || "").match(/^Device:.*\(id:\s*([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\)/im);
@@ -50814,11 +51474,11 @@ async function enrollBridgeWithApiKey2(apiUrl, apiKey) {
     console.error(`\x1B[33mBridge enroll: mint failed (${e?.message || e})\x1B[0m`);
     return false;
   }
-  const login = spawnSync2(bridgeBin2, [...bridgeLoginArgs2(apiUrl), "--token", token], { stdio: ["ignore", "ignore", "inherit"], timeout: 30000, killSignal: "SIGKILL" });
+  const login = spawnSync3(bridgeBin2, [...bridgeLoginArgs2(apiUrl), "--token", token], { stdio: ["ignore", "ignore", "inherit"], timeout: 30000, killSignal: "SIGKILL" });
   return login.status === 0;
 }
 function ensureBridgeCredentials2(apiUrl, opts = {}) {
-  const whoami = spawnSync2(bridgeBin2, bridgeWhoamiArgs2(apiUrl), { stdio: "ignore" });
+  const whoami = spawnSync3(bridgeBin2, bridgeWhoamiArgs2(apiUrl), { stdio: "ignore" });
   if (whoami.status === 0)
     return true;
   if (opts.interactive === false) {
@@ -50826,7 +51486,7 @@ function ensureBridgeCredentials2(apiUrl, opts = {}) {
     return false;
   }
   console.error("\x1B[2mBridge credentials not found. Starting `todoforai-bridge login`...\x1B[0m");
-  const login = spawnSync2(bridgeBin2, bridgeLoginArgs2(apiUrl), { stdio: "inherit" });
+  const login = spawnSync3(bridgeBin2, bridgeLoginArgs2(apiUrl), { stdio: "inherit" });
   return login.status === 0;
 }
 async function bridgeState2(apiUrl, apiKey, deviceId) {
@@ -50843,7 +51503,7 @@ async function waitForBridgeOnline2(apiUrl, apiKey, deviceId, timeoutMs = 5000)
     const state = await bridgeState2(apiUrl, apiKey, deviceId);
     if (state !== "offline")
       return state === "online";
-    await new Promise((resolve4) => setTimeout(resolve4, 150));
+    await new Promise((resolve5) => setTimeout(resolve5, 150));
   } while (Date.now() < deadline);
   return false;
 }
@@ -50852,7 +51512,7 @@ async function ensureBridgeRunning2(apiUrl, apiKey, opts = {}) {
     console.error(`\x1B[2mBridge not started: \`todoforai-bridge\` was not found on PATH. Install it (curl -fsSL ${INSTALLER_URL2} | sh), or pass --no-bridge (or deprecated --no-edge) to silence this.\x1B[0m`);
     return false;
   }
-  const hasCreds = spawnSync2(bridgeBin2, bridgeWhoamiArgs2(apiUrl), { stdio: "ignore" }).status === 0 || await enrollBridgeWithApiKey2(apiUrl, apiKey) || ensureBridgeCredentials2(apiUrl, opts);
+  const hasCreds = spawnSync3(bridgeBin2, bridgeWhoamiArgs2(apiUrl), { stdio: "ignore" }).status === 0 || await enrollBridgeWithApiKey2(apiUrl, apiKey) || ensureBridgeCredentials2(apiUrl, opts);
   if (!hasCreds) {
     console.error("\x1B[33mBridge not started: `todoforai-bridge login` did not complete successfully.\x1B[0m");
     return false;
@@ -50869,7 +51529,7 @@ async function ensureBridgeRunning2(apiUrl, apiKey, opts = {}) {
   fs3.mkdirSync(logDir, { recursive: true });
   const logFile = path3.join(logDir, "bridge.log");
   const out = fs3.openSync(logFile, "a");
-  const child = spawn3(bridgeBin2, bridgeRunArgs2(apiUrl), {
+  const child = spawn4(bridgeBin2, bridgeRunArgs2(apiUrl), {
     detached: true,
     stdio: ["ignore", out, out]
   });
@@ -50894,7 +51554,7 @@ async function ensureBridgeRunning2(apiUrl, apiKey, opts = {}) {
 }
 
 // src/isolated.ts
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 async function mintMayflyToken(apiUrl, apiKey, todoId) {
   const res = await fetch(`${apiUrl}${restBasePath(apiKey)}/cli/mayfly/token`, {
     method: "POST",
@@ -50925,7 +51585,7 @@ async function spawnMayflyBridge(apiUrl, todoId, workspace, opts = {}) {
         delete env2[p + n];
     env2.TODOFORAI_MAYFLY_TOKEN = sessionToken;
   }
-  const child = spawn4(bridgeBinary(), args, { stdio: ["ignore", "pipe", "pipe"], env: env2 });
+  const child = spawn5(bridgeBinary(), args, { stdio: ["ignore", "pipe", "pipe"], env: env2 });
   let stopped = false;
   const stop = () => {
     if (stopped)
@@ -51019,9 +51679,7 @@ var CLIENT_METHODS = {
   terminal_release: "terminal/release",
   terminal_wait_for_exit: "terminal/wait_for_exit",
   terminal_kill: "terminal/kill",
-  mcp_connect: "mcp/connect",
   mcp_message: "mcp/message",
-  mcp_disconnect: "mcp/disconnect",
   elicitation_create: "elicitation/create",
   elicitation_complete: "elicitation/complete"
 };
@@ -51074,7 +51732,7 @@ __export(exports_external, {
   setErrorMap: () => setErrorMap,
   set: () => set,
   safeParseAsync: () => safeParseAsync2,
-  safeParse: () => safeParse2,
+  safeParse: () => safeParse3,
   safeEncodeAsync: () => safeEncodeAsync2,
   safeEncode: () => safeEncode2,
   safeDecodeAsync: () => safeDecodeAsync2,
@@ -51311,7 +51969,7 @@ __export(exports_core2, {
   stripTabAndNewline: () => stripTabAndNewline,
   standardProps: () => standardProps,
   safeParseAsync: () => safeParseAsync,
-  safeParse: () => safeParse,
+  safeParse: () => safeParse2,
   safeEncodeAsync: () => safeEncodeAsync,
   safeEncode: () => safeEncode,
   safeDecodeAsync: () => safeDecodeAsync,
@@ -52807,7 +53465,7 @@ var _safeParse = (_Err) => (schema, value, _ctx) => {
   }
   return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value };
 };
-var safeParse = /* @__PURE__ */ _safeParse($ZodRealError);
+var safeParse2 = /* @__PURE__ */ _safeParse($ZodRealError);
 function failure(Err, issues, ctx) {
   let error;
   return {
@@ -54995,7 +55653,7 @@ function handleIntersectionResults(result, left, right) {
   const unrecKeys = new Map;
   let unrecIssue;
   const keyIssues = new Map;
-  const collect = (iss, side) => {
+  const collect2 = (iss, side) => {
     let keys;
     if (iss.code === "unrecognized_keys" && !iss.path?.length) {
       unrecIssue ?? (unrecIssue = iss);
@@ -55016,11 +55674,11 @@ function handleIntersectionResults(result, left, right) {
     return true;
   };
   for (const iss of left.issues) {
-    if (!collect(iss, "l"))
+    if (!collect2(iss, "l"))
       result.issues.push(iss);
   }
   for (const iss of right.issues) {
-    if (!collect(iss, "r"))
+    if (!collect2(iss, "r"))
       result.issues.push(iss);
   }
   const bothKeys = [...unrecKeys].filter(([, f]) => f.l && f.r).map(([k]) => k);
@@ -56024,7 +56682,7 @@ class $ZodCyclicError extends Error {
     this.name = "ZodCyclicError";
   }
 }
-var STATE = "~memo";
+var STATE2 = "~memo";
 var NO_ISSUES = [];
 function isRef(value) {
   return value !== null && typeof value === "object";
@@ -56036,7 +56694,7 @@ var recursive = /* @__PURE__ */ new WeakMap;
 var NONE = 0;
 var ASSUMED = 1;
 var PROVEN = 2;
-function isRecursive(inst, stack, resolve4) {
+function isRecursive(inst, stack, resolve5) {
   const cached2 = recursive.get(inst);
   if (cached2 !== undefined)
     return cached2 ? PROVEN : NONE;
@@ -56046,7 +56704,7 @@ function isRecursive(inst, stack, resolve4) {
   let result = NONE;
   const check = (child) => {
     if (result !== PROVEN && child?._zod) {
-      const answer = isRecursive(child, stack, resolve4);
+      const answer = isRecursive(child, stack, resolve5);
       if (answer > result)
         result = answer;
     }
@@ -56057,7 +56715,7 @@ function isRecursive(inst, stack, resolve4) {
       const desc = Object.getOwnPropertyDescriptor(sh, key);
       if (spread && !desc.enumerable)
         continue;
-      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve4) : NONE;
+      const child = desc.get ? ASSUMED : desc.value?._zod ? isRecursive(desc.value, stack, resolve5) : NONE;
       if (child > answer)
         answer = child;
     }
@@ -56120,7 +56778,7 @@ function isRecursive(inst, stack, resolve4) {
       check(def.output);
       break;
     case "lazy": {
-      const inner = def._cachedInner ?? (resolve4 ? inst._zod.innerType : undefined);
+      const inner = def._cachedInner ?? (resolve5 ? inst._zod.innerType : undefined);
       merge2(inner ? isRecursive(inner, stack, false) : ASSUMED);
       break;
     }
@@ -56234,10 +56892,10 @@ var memo = {
         const input = payload.value;
         if (!isRef(input))
           return base(payload, ctx);
-        let state = ctx[STATE];
+        let state = ctx[STATE2];
         if (!state) {
           state = { buckets: new WeakMap, backEdges: undefined };
-          ctx[STATE] = state;
+          ctx[STATE2] = state;
         }
         let bucket;
         if (lastCtx === ctx) {
@@ -56286,7 +56944,7 @@ function memoizer() {
   return memo;
 }
 function isBackEdge(ctx, value) {
-  const backEdges = ctx[STATE]?.backEdges;
+  const backEdges = ctx[STATE2]?.backEdges;
   return backEdges !== undefined && isRef(value) && backEdges.has(value);
 }
 // node_modules/zod/v4/locales/index.js
@@ -67966,7 +68624,7 @@ var ZodRealError = /* @__PURE__ */ $constructor("ZodError", initializer2, undefi
 // node_modules/zod/v4/classic/parse.js
 var parse3 = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync2 = /* @__PURE__ */ _parseAsync(ZodRealError);
-var safeParse2 = /* @__PURE__ */ _safeParse(ZodRealError);
+var safeParse3 = /* @__PURE__ */ _safeParse(ZodRealError);
 var safeParseAsync2 = /* @__PURE__ */ _safeParseAsync(ZodRealError);
 var encode2 = /* @__PURE__ */ _encode(ZodRealError);
 var decode2 = /* @__PURE__ */ _decode(ZodRealError);
@@ -68106,7 +68764,7 @@ var ZodType = /* @__PURE__ */ $constructor("ZodType", (inst, def) => {
     return await parseAsync2(this, data, params, { callee: _parseAsync2 });
   },
   safeParse(data, params) {
-    return safeParse2(this, data, params);
+    return safeParse3(this, data, params);
   },
   async safeParseAsync(data, params) {
     return safeParseAsync2(this, data, params);
@@ -70970,27 +71628,16 @@ var zCreateElicitationRequest = preserveCustomPayload(intersection(union([
   })
 })), "mode", ["form", "url"]);
 var zMcpServerAcpId = string2();
-var zConnectMcpRequest = object({
-  serverId: zMcpServerAcpId,
-  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
-    return;
-  })
-});
-var zMcpConnectionId = string2();
+var zMcpRequestId = string2();
 var zMessageMcpRequest = object({
-  connectionId: zMcpConnectionId,
+  serverId: zMcpServerAcpId,
+  requestId: zMcpRequestId,
   method: string2(),
   params: record(string2(), unknown()).nullish(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
 });
-var zDisconnectMcpRequest = object({
-  connectionId: zMcpConnectionId,
-  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
-    return;
-  })
-});
 var zExtRequest = unknown();
 var zAgentRequest = object({
   id: zRequestId,
@@ -71005,9 +71652,7 @@ var zAgentRequest = object({
     zWaitForTerminalExitRequest,
     zKillTerminalRequest,
     zCreateElicitationRequest,
-    zConnectMcpRequest,
     zMessageMcpRequest,
-    zDisconnectMcpRequest,
     zExtRequest
   ]).nullish()
 });
@@ -71703,7 +72348,6 @@ var zCloseNesResponse = object({
   })
 });
 var zExtResponse = unknown();
-var zMessageMcpResponse = unknown();
 var zErrorCode = union([
   literal(-32700),
   literal(-32600),
@@ -71749,8 +72393,7 @@ var zAgentResponse = union([
       zStartNesResponse,
       zSuggestNesResponse,
       zCloseNesResponse,
-      zExtResponse,
-      zMessageMcpResponse
+      zExtResponse
     ])
   }),
   object({
@@ -71968,6 +72611,108 @@ var zCompactionSummaryChunk = object({
     return;
   })
 });
+var zSessionCancelCapabilities = object({
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
+var zSubagentSessionCapabilities = object({
+  cancel: defaultOnError(zSessionCancelCapabilities.nullish(), () => {
+    return;
+  }),
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
+var zRunningStateUpdate = object({
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
+var zIdleStateUpdate = object({
+  stopReason: defaultOnError(zStopReason.nullish(), () => {
+    return;
+  }),
+  usage: defaultOnError(zUsage.nullish(), () => {
+    return;
+  }),
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
+var zRequiresActionStateUpdate = object({
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
+var zUnknownStateUpdate = object({
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
+var zStateUpdate = preserveCustomPayload(union([
+  zRunningStateUpdate.and(object({
+    state: literal("running")
+  })),
+  zIdleStateUpdate.and(object({
+    state: literal("idle")
+  })),
+  zRequiresActionStateUpdate.and(object({
+    state: literal("requires_action")
+  })),
+  zUnknownStateUpdate.and(object({
+    state: literal("unknown")
+  })),
+  excludeKnownTags(object({
+    state: string2()
+  }), "state", ["idle", "requires_action", "running", "unknown"])
+]), "state", ["idle", "requires_action", "running", "unknown"]);
+var zSubagentUpdate = object({
+  sessionId: zSessionId,
+  title: defaultOnError(string2().nullish(), () => {
+    return;
+  }),
+  description: defaultOnError(string2().nullish(), () => {
+    return;
+  }),
+  capabilities: defaultOnError(zSubagentSessionCapabilities.nullish(), () => {
+    return;
+  }),
+  state: defaultOnError(zStateUpdate.nullish(), () => {
+    return;
+  }),
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
+var zSessionMessage = object({
+  messageId: zMessageId,
+  senderSessionId: defaultOnError(zSessionId.nullish(), () => {
+    return;
+  }),
+  recipientSessionId: defaultOnError(zSessionId.nullish(), () => {
+    return;
+  }),
+  content: defaultOnError(vecSkipError(zContentBlock).nullish(), () => {
+    return;
+  }),
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
+var zSessionMessageChunk = object({
+  messageId: zMessageId,
+  senderSessionId: defaultOnError(zSessionId.nullish(), () => {
+    return;
+  }),
+  recipientSessionId: defaultOnError(zSessionId.nullish(), () => {
+    return;
+  }),
+  content: zContentBlock,
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
 var zSessionUpdate = union([
   zContentChunk.and(object({
     sessionUpdate: literal("user_message_chunk")
@@ -72016,6 +72761,15 @@ var zSessionUpdate = union([
   })),
   zCompactionSummaryChunk.and(object({
     sessionUpdate: literal("compaction_summary_chunk")
+  })),
+  zSubagentUpdate.and(object({
+    sessionUpdate: literal("subagent_update")
+  })),
+  zSessionMessage.and(object({
+    sessionUpdate: literal("session_message")
+  })),
+  zSessionMessageChunk.and(object({
+    sessionUpdate: literal("session_message_chunk")
   }))
 ]);
 var zSessionNotification = object({
@@ -72031,23 +72785,12 @@ var zCompleteElicitationNotification = object({
     return;
   })
 });
-var zMessageMcpNotification = object({
-  connectionId: zMcpConnectionId,
-  method: string2(),
-  params: defaultOnError(record(string2(), unknown()).nullish(), () => {
-    return;
-  }),
-  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
-    return;
-  })
-});
 var zExtNotification = unknown();
 var zAgentNotification = object({
   method: string2(),
   params: union([
     zSessionNotification,
     zCompleteElicitationNotification,
-    zMessageMcpNotification,
     zExtNotification
   ]).nullish()
 });
@@ -72087,6 +72830,11 @@ var zClientSessionCapabilities = object({
     return;
   })
 });
+var zSubagentCapabilities = object({
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
 var zPlanCapabilities = object({
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
@@ -72154,6 +72902,9 @@ var zClientCapabilities = object({
   session: defaultOnError(zClientSessionCapabilities.nullish(), () => {
     return;
   }),
+  subagents: defaultOnError(zSubagentCapabilities.nullish(), () => {
+    return;
+  }),
   plan: defaultOnError(zPlanCapabilities.nullish(), () => {
     return;
   }),
@@ -72507,7 +73258,6 @@ var zClientRequest = object({
     zStartNesRequest,
     zSuggestNesRequest,
     zCloseNesRequest,
-    zMessageMcpRequest,
     zExtRequest
   ]).nullish()
 });
@@ -72622,17 +73372,29 @@ var zCreateElicitationResponse = preserveCustomPayload(intersection(union([
     return;
   })
 })), "action", ["accept", "cancel", "decline"]);
-var zConnectMcpResponse = object({
-  connectionId: zMcpConnectionId,
-  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
-    return;
-  })
+var zMcpError = looseObject({
+  code: int().min(-2147483648, {
+    error: "Invalid value: Expected int32 to be >= -2147483648"
+  }).max(2147483647, {
+    error: "Invalid value: Expected int32 to be <= 2147483647"
+  }),
+  message: string2(),
+  data: unknown().optional()
 });
-var zDisconnectMcpResponse = object({
-  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
-    return;
+var zMessageMcpResponse = union([
+  object({
+    result: unknown(),
+    _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+      return;
+    })
+  }),
+  object({
+    error: zMcpError,
+    _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+      return;
+    })
   })
-});
+]);
 var zClientResponse = union([
   object({
     id: zRequestId,
@@ -72646,8 +73408,6 @@ var zClientResponse = union([
       zWaitForTerminalExitResponse,
       zKillTerminalResponse,
       zCreateElicitationResponse,
-      zConnectMcpResponse,
-      zDisconnectMcpResponse,
       zMessageMcpResponse,
       zExtResponse
     ])
@@ -72736,6 +73496,15 @@ var zRejectNesNotification = object({
     return;
   })
 });
+var zMessageMcpNotification = object({
+  serverId: zMcpServerAcpId,
+  requestId: zMcpRequestId,
+  method: string2(),
+  params: record(string2(), unknown()).nullish(),
+  _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
+    return;
+  })
+});
 var zClientNotification = object({
   method: string2(),
   params: union([
@@ -73103,11 +73872,11 @@ class Connection {
   prepareRequest(method, params, mapResponse, options = {}) {
     const id = this.nextRequestId++;
     let cancel = () => {};
-    const response = new Promise((resolve4, reject) => {
+    const response = new Promise((resolve5, reject) => {
       const pendingResponse = {
         resolve: (value) => {
           try {
-            resolve4(mapResponse ? mapResponse(value) : value);
+            resolve5(mapResponse ? mapResponse(value) : value);
           } catch (error62) {
             reject(error62);
           }
@@ -73158,8 +73927,8 @@ class Connection {
     this.stream = stream;
     this.staticHandlers = handlers;
     this.allowBatches = options?.allowBatches ?? true;
-    this.closedPromise = new Promise((resolve4) => {
-      this.abortController.signal.addEventListener("abort", () => resolve4());
+    this.closedPromise = new Promise((resolve5) => {
+      this.abortController.signal.addEventListener("abort", () => resolve5());
     });
     this.receive();
   }
@@ -73525,53 +74294,124 @@ function protocolErrorResponse(error62) {
   };
 }
 
+// node_modules/@agentclientprotocol/sdk/dist/stream-limits.js
+var DEFAULT_MAX_MESSAGE_BYTES = 32 * 1024 * 1024;
+
+class MessageTooLargeError extends Error {
+  maxMessageBytes;
+  constructor(maxMessageBytes) {
+    super(`Incoming ACP data exceeds the configured ${maxMessageBytes} byte limit`);
+    this.maxMessageBytes = maxMessageBytes;
+    this.name = "MessageTooLargeError";
+  }
+}
+function resolveMaxMessageBytes(value) {
+  const maxMessageBytes = value ?? DEFAULT_MAX_MESSAGE_BYTES;
+  if (!Number.isSafeInteger(maxMessageBytes) || maxMessageBytes <= 0) {
+    throw new RangeError("maxMessageBytes must be a positive safe integer");
+  }
+  return maxMessageBytes;
+}
+
+class MessageBuffer {
+  #buffer = new Uint8Array(0);
+  #length = 0;
+  #maxMessageBytes;
+  constructor(maxMessageBytes) {
+    this.#maxMessageBytes = resolveMaxMessageBytes(maxMessageBytes);
+  }
+  get byteLength() {
+    return this.#length;
+  }
+  get lastByte() {
+    return this.#buffer[this.#length - 1];
+  }
+  #checkAppend(byteLength) {
+    if (byteLength > this.#maxMessageBytes - this.#length) {
+      this.clear();
+      throw new MessageTooLargeError(this.#maxMessageBytes);
+    }
+  }
+  append(bytes) {
+    this.#checkAppend(bytes.byteLength);
+    const length = this.#length + bytes.byteLength;
+    if (length > this.#buffer.byteLength) {
+      const capacity = Math.min(this.#maxMessageBytes, Math.max(length, this.#buffer.byteLength * 2, 1024));
+      const buffer = new Uint8Array(capacity);
+      buffer.set(this.#buffer.subarray(0, this.#length));
+      this.#buffer = buffer;
+    }
+    this.#buffer.set(bytes, this.#length);
+    this.#length = length;
+  }
+  take() {
+    const bytes = this.#buffer.subarray(0, this.#length);
+    this.clear();
+    return bytes;
+  }
+  clear() {
+    this.#buffer = new Uint8Array(0);
+    this.#length = 0;
+  }
+}
+
 // node_modules/@agentclientprotocol/sdk/dist/line-buffer.js
 var newline = 10;
 
 class LineBuffer {
-  #pending = [];
-  push(chunk) {
-    const lines = [];
+  #pending;
+  #maxMessageBytes;
+  constructor(maxMessageBytes) {
+    this.#maxMessageBytes = resolveMaxMessageBytes(maxMessageBytes);
+    this.#pending = new MessageBuffer(Math.min(Number.MAX_SAFE_INTEGER, this.#maxMessageBytes + 1));
+  }
+  *push(chunk) {
     let start = 0;
     let newlineIndex = chunk.indexOf(newline, start);
     while (newlineIndex !== -1) {
-      lines.push(this.#takeLine(chunk.subarray(start, newlineIndex)));
+      yield this.#takeLine(chunk.subarray(start, newlineIndex));
       start = newlineIndex + 1;
       newlineIndex = chunk.indexOf(newline, start);
     }
     if (start < chunk.byteLength) {
-      this.#pending.push(start === 0 ? chunk : new Uint8Array(chunk.subarray(start)));
+      const tail = chunk.subarray(start);
+      this.#checkLine(tail);
+      this.#pending.append(tail);
     }
-    return lines;
   }
   flush() {
-    if (this.#pending.length === 0) {
+    if (this.#pending.byteLength === 0) {
       return;
     }
-    return this.#takeLine(new Uint8Array(0));
+    return stripCarriageReturn(this.#pending.take());
+  }
+  clear() {
+    this.#pending.clear();
   }
   #takeLine(tail) {
-    if (this.#pending.length === 0) {
-      return tail;
-    }
-    let total = tail.byteLength;
-    for (const part of this.#pending) {
-      total += part.byteLength;
+    this.#checkLine(tail);
+    if (this.#pending.byteLength === 0) {
+      return stripCarriageReturn(tail);
     }
-    const line = new Uint8Array(total);
-    let offset = 0;
-    for (const part of this.#pending) {
-      line.set(part, offset);
-      offset += part.byteLength;
+    this.#pending.append(tail);
+    return stripCarriageReturn(this.#pending.take());
+  }
+  #checkLine(tail) {
+    const lastByte = tail.byteLength > 0 ? tail[tail.byteLength - 1] : this.#pending.lastByte;
+    const byteLength = this.#pending.byteLength + tail.byteLength - (lastByte === 13 ? 1 : 0);
+    if (byteLength > this.#maxMessageBytes) {
+      this.clear();
+      throw new MessageTooLargeError(this.#maxMessageBytes);
     }
-    line.set(tail, offset);
-    this.#pending = [];
-    return line;
   }
 }
+function stripCarriageReturn(line) {
+  return line[line.byteLength - 1] === 13 ? line.subarray(0, -1) : line;
+}
 
 // node_modules/@agentclientprotocol/sdk/dist/stream.js
-function ndJsonStream(output2, input2) {
+function ndJsonStream(output2, input2, options = {}) {
+  const maxMessageBytes = resolveMaxMessageBytes(options.maxMessageBytes);
   const textEncoder = new TextEncoder;
   const textDecoder = new TextDecoder;
   let cancelled = false;
@@ -73593,7 +74433,7 @@ function ndJsonStream(output2, input2) {
   };
   const readable = new ReadableStream({
     async start(controller) {
-      const lines = new LineBuffer;
+      const lines = new LineBuffer(maxMessageBytes);
       const enqueueLine = async (lineBytes) => {
         const trimmedLine = textDecoder.decode(lineBytes).trim();
         if (!trimmedLine) {
@@ -73645,8 +74485,10 @@ function ndJsonStream(output2, input2) {
           return;
         }
         controller.error(err);
+        reader.cancel(err).catch(() => {});
         return;
       } finally {
+        lines.clear();
         if (inputReader === reader) {
           inputReader = undefined;
         }
@@ -73680,6 +74522,10 @@ var zGuardElicitationPropertySchemaInteger = zIntegerPropertySchema.and(object({
 var zGuardElicitationPropertySchemaBoolean = zBooleanPropertySchema.and(object({ type: literal("boolean") }));
 var zGuardElicitationPropertySchemaArray = zMultiSelectPropertySchema.and(object({ type: literal("array") }));
 var zGuardMultiSelectItemsString = zStringMultiSelectItems.and(object({ type: literal("string") }));
+var zGuardStateUpdateRunning = zRunningStateUpdate.and(object({ state: literal("running") }));
+var zGuardStateUpdateIdle = zIdleStateUpdate.and(object({ state: literal("idle") }));
+var zGuardStateUpdateRequiresAction = zRequiresActionStateUpdate.and(object({ state: literal("requires_action") }));
+var zGuardStateUpdateUnknown = zUnknownStateUpdate.and(object({ state: literal("unknown") }));
 var zGuardCreateElicitationResponseAccept = zElicitationAcceptAction.and(object({ action: literal("accept") }));
 var zGuardCreateElicitationResponseDecline = object({
   action: literal("decline")
@@ -73688,8 +74534,8 @@ var zGuardCreateElicitationResponseCancel = object({
   action: literal("cancel")
 });
 // node_modules/@agentclientprotocol/sdk/dist/acp.js
-function ndJsonStream2(output2, input2) {
-  return ndJsonStream(output2, input2);
+function ndJsonStream2(output2, input2, options) {
+  return ndJsonStream(output2, input2, options);
 }
 function emptyObjectResponse(response) {
   return response ?? {};
@@ -73974,8 +74820,8 @@ class AsyncQueue {
     if (this.failed) {
       return Promise.reject(this.failure);
     }
-    return new Promise((resolve4, reject) => {
-      this.waiters.push({ resolve: resolve4, reject });
+    return new Promise((resolve5, reject) => {
+      this.waiters.push({ resolve: resolve5, reject });
     });
   }
 }
@@ -74703,7 +75549,7 @@ function classifyBlock2(info) {
 }
 
 // src/device-login.ts
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn6 } from "child_process";
 class DeviceLoginError2 extends Error {
 }
 async function runDeviceLogin2(apiUrl) {
@@ -74721,7 +75567,7 @@ async function runDeviceLogin2(apiUrl) {
 `);
   try {
     const [cmd, args] = process.platform === "win32" ? ["cmd", ["/c", "start", "", url2]] : [process.platform === "darwin" ? "open" : "xdg-open", [url2]];
-    const child = spawn5(cmd, args, { stdio: "ignore", detached: true });
+    const child = spawn6(cmd, args, { stdio: "ignore", detached: true });
     child.on("error", () => {});
     child.unref();
   } catch {}
@@ -74751,7 +75597,7 @@ async function runDeviceLogin2(apiUrl) {
 }
 
 // src/acp.ts
-var log2 = (...a) => process.stderr.write(`[acp] ${a.join(" ")}
+var log3 = (...a) => process.stderr.write(`[acp] ${a.join(" ")}
 `);
 var ACP_KIND = { create: "edit", edit: "edit", read: "read", search: "search", shell: "execute" };
 var toolTitle = (info) => {
@@ -74827,7 +75673,7 @@ class TodoforaiAgent {
       }
       this.api = new ApiClient(this.apiUrl, this.apiKey);
       this.ws = ws;
-      log2(`ready (${this.apiUrl})`);
+      log3(`ready (${this.apiUrl})`);
     })();
   }
   async requireAuth() {
@@ -74872,7 +75718,7 @@ class TodoforaiAgent {
     const agent2 = await this.resolveAgent(cwd);
     const todoId = randomUUID2();
     this.sessions.set(todoId, { todoId, projectId, agent: agent2 });
-    log2(`session ${todoId} agent=${agent2.name} cwd=${cwd}`);
+    log3(`session ${todoId} agent=${agent2.name} cwd=${cwd}`);
     return { sessionId: todoId, modes: await this.modes(agent2) };
   }
   async setSessionMode(p) {
@@ -74883,7 +75729,7 @@ class TodoforaiAgent {
     if (!agent2)
       throw RequestError.invalidParams(`unknown agent ${p.modeId}`);
     s.agent = agent2;
-    log2(`session ${s.todoId} agent=${agent2.name}`);
+    log3(`session ${s.todoId} agent=${agent2.name}`);
     this.conn.sessionUpdate({ sessionId: p.sessionId, update: { sessionUpdate: "current_mode_update", currentModeId: agent2.id } });
     return {};
   }
@@ -74893,7 +75739,7 @@ class TodoforaiAgent {
       return;
     s.turn.cancelled = true;
     if (s.turn.started && !await this.ws.sendInterrupt(s.projectId, s.todoId))
-      log2("interrupt not delivered (socket down)");
+      log3("interrupt not delivered (socket down)");
   }
   async prompt(p) {
     const s = this.sessions.get(p.sessionId);
@@ -74908,7 +75754,7 @@ ${b.resource.text}
 </file>
 ` : "").join("");
     const sessionId = p.sessionId;
-    const update = (u) => this.conn.sessionUpdate({ sessionId, update: u }).catch((e) => log2("update failed", e?.message));
+    const update = (u) => this.conn.sessionUpdate({ sessionId, update: u }).catch((e) => log3("update failed", e?.message));
     const blocks4 = new Map;
     const view = (id) => blocks4.get(id) ?? blocks4.set(id, new BlockView).get(id);
     const announce = (id, b) => {
@@ -74942,9 +75788,9 @@ ${b.resource.text}
           return;
         const ok = choice === "allow_once" || choice === "allow_remember" ? await this.ws.sendBlockApproval(s.todoId, messageId, id, choice, choice === "allow_remember" ? patterns : undefined) : await this.ws.sendBlockDeny(s.todoId, messageId, id);
         if (!ok)
-          log2(`approval for ${id} not delivered (socket down)`);
+          log3(`approval for ${id} not delivered (socket down)`);
       } catch (e) {
-        log2("permission request failed", e?.message);
+        log3("permission request failed", e?.message);
       }
     };
     const onEvent = (type, payload) => {
@@ -75020,18 +75866,18 @@ ${b.resource.text}
 async function runAcp(apiUrl, apiKey, opts) {
   console.log = (...a) => process.stderr.write(a.map(String).join(" ") + `
 `);
-  const eof = new Promise((resolve4) => {
-    process.stdin.once("end", resolve4);
-    process.stdin.once("close", resolve4);
-    process.stdin.once("error", resolve4);
+  const eof = new Promise((resolve5) => {
+    process.stdin.once("end", resolve5);
+    process.stdin.once("close", resolve5);
+    process.stdin.once("error", resolve5);
   });
   const stream = ndJsonStream2(Writable.toWeb(process.stdout), Readable.toWeb(process.stdin));
   let agent2;
   new AgentSideConnection((conn) => agent2 = new TodoforaiAgent(conn, apiUrl, apiKey, opts), stream);
   if (apiKey)
-    agent2.connect().catch((e) => log2("connect failed:", e?.message));
+    agent2.connect().catch((e) => log3("connect failed:", e?.message));
   else
-    log2("not logged in — waiting for authenticate");
+    log3("not logged in — waiting for authenticate");
   await eof;
   await agent2.close();
 }
@@ -75124,12 +75970,15 @@ function installSignalHandlers() {
 }
 
 // src/index.ts
+var ownPkg;
 try {
-  const pkgPath = path4.resolve(fileURLToPath(import.meta.url), "../../package.json");
-  checkForUpdates(JSON.parse(readFileSync3(pkgPath, "utf-8")));
+  ownPkg = JSON.parse(readFileSync5(path4.resolve(fileURLToPath(import.meta.url), "../../package.json"), "utf-8"));
+  if (process.argv[2] !== "update")
+    backgroundUpdate(ownPkg);
 } catch {}
+var aliasTodoId = (alias) => typeof alias === "string" && alias.includes(":") ? alias.slice(0, alias.indexOf(":")) : undefined;
 function formatPathWithTilde(path5) {
-  const home = homedir3();
+  const home = homedir5();
   return path5.startsWith(home) ? path5.replace(home, "~") : path5;
 }
 function promptArg(words) {
@@ -75239,6 +76088,10 @@ async function main() {
     console.log(VERSION);
     process.exit(0);
   }
+  if (positionals[0] === "update") {
+    const r = ownPkg ? await selfUpdate(ownPkg) : "unsupported";
+    process.exit(r === "updated" || r === "current" ? 0 : 1);
+  }
   if (positionals[0] === "status" && args.help) {
     printStatusHelp();
     process.exit(0);
@@ -75275,11 +76128,19 @@ async function main() {
     printNotifyHelp();
     process.exit(0);
   }
+  if (positionals[0] === "import" && args.help) {
+    printImportHelp();
+    process.exit(0);
+  }
+  if (positionals[0] === "import" && args["dry-run"]) {
+    await importCommand(null, positionals, args);
+    return;
+  }
   if ((positionals[0] === "list" || positionals[0] === "ls") && args.help) {
     printListTodosHelp();
     process.exit(0);
   }
-  if (args.help && !["list", "ls", "agent", "todo", "project", "brand", "device", "inbox", "notify"].includes(positionals[0])) {
+  if (args.help && !["list", "ls", "agent", "todo", "project", "brand", "device", "inbox", "notify", "import"].includes(positionals[0])) {
     printUsage();
     process.exit(0);
   }
@@ -75308,7 +76169,7 @@ async function main() {
   }
   if (args["reset-config"]) {
     const { unlinkSync } = await import("fs");
-    if (existsSync2(cfg.path)) {
+    if (existsSync4(cfg.path)) {
       unlinkSync(cfg.path);
       console.log(`Configuration reset: ${formatPathWithTilde(cfg.path)}`);
     } else
@@ -75418,6 +76279,10 @@ async function main() {
     await notifyCommand(api2, positionals, args, scopedProject);
     return;
   }
+  if (positionals[0] === "import") {
+    await importCommand(api2, positionals, args, scopedProject, cfgScope.data.default_agent_settings?.id);
+    return;
+  }
   if (positionals[0] === "delete") {
     const todoId = positionals[1];
     if (!todoId) {
@@ -75472,14 +76337,16 @@ async function main() {
       const kind = it.url ? `url ${it.url}` : it.mime || "";
       const card = it.cardRef ? ` card=${it.cardRef}` : "";
       const link = it.display === "link" ? " link" : "";
-      console.log(`${it.ref}  ${it.title || it.filename || ""}  ${kind}${card}${link}`);
+      const shared = it.shareUrl ? `  ${it.shareUrl}` : "";
+      console.log(`${it.ref}  ${it.title || it.filename || ""}  ${kind}${card}${link}${shared}`);
     }
     return;
   }
-  if (positionals[0] === "show" && positionals[1] === "rm") {
+  const showSub = positionals[1];
+  if (positionals[0] === "show" && (showSub === "rm" || showSub === "share" || showSub === "unshare")) {
     const arg = positionals[2];
     if (!arg) {
-      process.stderr.write(`${RED3}Usage: tfa-cli show rm <ref|alias>${RESET2}
+      process.stderr.write(`${RED3}Usage: tfa-cli show ${showSub} <ref|alias>${RESET2}
 `);
       process.exit(2);
     }
@@ -75487,18 +76354,30 @@ async function main() {
     const todoId = sep >= 0 ? arg.slice(0, sep) : getEnv("TODO_ID") || cfgScope.data.last_todo_id;
     const key = sep >= 0 ? arg.slice(sep + 1) : arg;
     if (!todoId || !key) {
-      process.stderr.write(`${RED3}show rm: need <todoId>:<alias> (no current todo)${RESET2}
+      process.stderr.write(`${RED3}show ${showSub}: need <todoId>:<alias> (no current todo)${RESET2}
 `);
       process.exit(2);
     }
-    await api2.removeShow(todoId, key);
-    process.stderr.write(`${GREEN2}\u2705 removed ${todoId}:${key}${RESET2}
+    if (showSub === "rm") {
+      await api2.removeShow(todoId, key);
+      process.stderr.write(`${GREEN2}\u2705 removed ${todoId}:${key}${RESET2}
 `);
+    } else if (showSub === "share") {
+      const res = await api2.shareShow(todoId, key);
+      if (args.json)
+        console.log(JSON.stringify(res, null, 2));
+      else
+        console.log(res.url);
+    } else {
+      await api2.unshareShow(todoId, key);
+      process.stderr.write(`${GREEN2}\u2705 ${todoId}:${key} is private again${RESET2}
+`);
+    }
     return;
   }
   if (positionals[0] === "show") {
     const [, filePath, todoArg] = positionals;
-    const todoId = todoArg || getEnv("TODO_ID") || cfgScope.data.last_todo_id;
+    const todoId = todoArg || aliasTodoId(args.alias) || getEnv("TODO_ID") || cfgScope.data.last_todo_id;
     if (!filePath || !todoId) {
       process.stderr.write(`${RED3}Usage: tfa-cli show <file|-> [todo-id] [--title T] [--alias A] [--mime M] [--card <name>] [--link]${RESET2}
 `);
@@ -75517,13 +76396,13 @@ async function main() {
       }
       name = "stdin";
     } else {
-      const abs = resolve4(filePath);
-      if (!existsSync2(abs)) {
+      const abs = resolve5(filePath);
+      if (!existsSync4(abs)) {
         process.stderr.write(`${RED3}File not found: ${filePath}${RESET2}
 `);
         process.exit(1);
       }
-      blob = new Blob([readFileSync3(abs)], { type: getMimeTypeFromFilename(abs) || undefined });
+      blob = new Blob([readFileSync5(abs)], { type: getMimeTypeFromFilename(abs) || undefined });
       name = path4.basename(filePath);
     }
     const res = await api2.showFile(todoId, blob, name, {
@@ -75536,12 +76415,12 @@ async function main() {
     if (args.json)
       console.log(JSON.stringify(res, null, 2));
     else
-      console.log(res.url ? `${res.ref}  ${res.url}` : res.ref);
+      console.log(res.shareUrl ? `${res.ref}  ${res.shareUrl}` : res.ref);
     return;
   }
   if (positionals[0] === "open") {
     const [, url2, todoArg] = positionals;
-    const todoId = todoArg || getEnv("TODO_ID") || cfgScope.data.last_todo_id;
+    const todoId = todoArg || aliasTodoId(args.alias) || getEnv("TODO_ID") || cfgScope.data.last_todo_id;
     if (!url2 || !todoId) {
       process.stderr.write(`${RED3}Usage: tfa-cli open <url> [todo-id]${RESET2}
 `);
@@ -75855,7 +76734,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
   const wsReady = ws ? ws.connect() : null;
   const bridgeReady = !args["no-bridge"] && !args["no-watch"] && !args.isolated ? ensureBridgeRunning2(apiUrl, apiKey) : null;
   const isolatedTodoId = args.isolated ? randomUUID3() : undefined;
-  const mayfly = isolatedTodoId ? await spawnMayflyBridge(apiUrl, isolatedTodoId, realpathSync2(resolve4(args.path || ".")), { debug: !!args.debug, apiKey }) : null;
+  const mayfly = isolatedTodoId ? await spawnMayflyBridge(apiUrl, isolatedTodoId, realpathSync2(resolve5(args.path || ".")), { debug: !!args.debug, apiKey }) : null;
   if (mayfly) {
     process.stderr.write(`${DIM2}Isolated bridge:${RESET2} ${CYAN2}mayfly-${isolatedTodoId}${RESET2}
 `);
@@ -75887,7 +76766,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
     cfgScope.setDefaultAgent(getDisplayName(preMatchedAgent), preMatchedAgent);
   } else {
     const pathArg = args.path || ".";
-    const resolved = realpathSync2(resolve4(pathArg));
+    const resolved = realpathSync2(resolve5(pathArg));
     const matches = await api2.listAgentSettings({ workspacePath: resolved });
     if (matches.length > 0) {
       preMatchedAgent = matches[0];
@@ -75960,7 +76839,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
   if (args.model)
     agent2 = { ...agent2, model: args.model };
   if (args["raw-sysmsg"]) {
-    const sysmsg = readFileSync3(resolve4(args["raw-sysmsg"]), "utf-8");
+    const sysmsg = readFileSync5(resolve5(args["raw-sysmsg"]), "utf-8");
     agent2 = { ...agent2, systemMessage: sysmsg, systemMessageMode: "raw" };
   }
   if (args["allow-all"]) {