@todoforai/cli 0.1.65 → 0.1.66

package/dist/todoforai-cli.js

@@ -37682,19 +37682,19 @@ var require_doctype = __commonJS((exports) => {
     return DOCUMENT_MODE.NO_QUIRKS;
   };
   exports.serializeContent = function(name, publicId, systemId) {
-    let str = "!DOCTYPE ";
+    let str2 = "!DOCTYPE ";
     if (name) {
-      str += name;
+      str2 += name;
     }
     if (publicId) {
-      str += " PUBLIC " + enquoteDoctypeId(publicId);
+      str2 += " PUBLIC " + enquoteDoctypeId(publicId);
     } else if (systemId) {
-      str += " SYSTEM";
+      str2 += " SYSTEM";
     }
     if (systemId !== null) {
-      str += " " + enquoteDoctypeId(systemId);
+      str2 += " " + enquoteDoctypeId(systemId);
     }
-    return str;
+    return str2;
   };
 });
 
@@ -40266,14 +40266,14 @@ var require_serializer = __commonJS((exports, module) => {
       this.html += "<" + doctype.serializeContent(name, null, null) + ">";
     }
   }
-  Serializer.escapeString = function(str, attrMode) {
-    str = str.replace(AMP_REGEX, "&amp;").replace(NBSP_REGEX, "&nbsp;");
+  Serializer.escapeString = function(str2, attrMode) {
+    str2 = str2.replace(AMP_REGEX, "&amp;").replace(NBSP_REGEX, "&nbsp;");
     if (attrMode) {
-      str = str.replace(DOUBLE_QUOTE_REGEX, "&quot;");
+      str2 = str2.replace(DOUBLE_QUOTE_REGEX, "&quot;");
     } else {
-      str = str.replace(LT_REGEX, "&lt;").replace(GT_REGEX, "&gt;");
+      str2 = str2.replace(LT_REGEX, "&lt;").replace(GT_REGEX, "&gt;");
     }
-    return str;
+    return str2;
   };
   module.exports = Serializer;
 });
@@ -40664,19 +40664,19 @@ var require_doctype2 = __commonJS((exports) => {
     return DOCUMENT_MODE.NO_QUIRKS;
   };
   exports.serializeContent = function(name, publicId, systemId) {
-    let str = "!DOCTYPE ";
+    let str2 = "!DOCTYPE ";
     if (name) {
-      str += name;
+      str2 += name;
     }
     if (publicId) {
-      str += " PUBLIC " + enquoteDoctypeId(publicId);
+      str2 += " PUBLIC " + enquoteDoctypeId(publicId);
     } else if (systemId) {
-      str += " SYSTEM";
+      str2 += " SYSTEM";
     }
     if (systemId !== null) {
-      str += " " + enquoteDoctypeId(systemId);
+      str2 += " " + enquoteDoctypeId(systemId);
     }
-    return str;
+    return str2;
   };
 });
 
@@ -42981,8 +42981,8 @@ class ApiClient {
   renameBusinessContext(projectId, name) {
     return this.request("PUT", `/api/v1/projects/${projectId}/business-context`, { projectId, name });
   }
-  listVoiceSources(projectId) {
-    return this.request("GET", `/api/v1/projects/${projectId}/voice-sources`);
+  listVoiceSources(projectId, scope) {
+    return this.request("GET", `/api/v1/projects/${projectId}/voice-sources${scope ? `?scope=${scope}` : ""}`);
   }
   collectVoiceSource(projectId, channel, opts) {
     return this.request("POST", "/api/v1/business-context/collect-voice-source", { projectId, channel, ...opts }, 130000);
@@ -42990,8 +42990,8 @@ class ApiClient {
   removeVoiceSource(projectId, channel, opts = {}) {
     return this.request("POST", "/api/v1/business-context/remove-voice-source", { projectId, channel, ...opts });
   }
-  refineBrandVoice(projectId, source, correction) {
-    return this.request("POST", "/api/v1/business-context/refine-brand-voice", { projectId, ...source && { source }, ...correction && { correction } });
+  refineBrandVoice(projectId, source, correction, scope) {
+    return this.request("POST", "/api/v1/business-context/refine-brand-voice", { projectId, ...source && { source }, ...correction && { correction }, ...scope && { scope } });
   }
   getProfile() {
     return this.request("GET", "/api/v1/users/profile");
@@ -43701,6 +43701,7 @@ function qualifiedModelIds(listing, filter) {
 var HOBBY_ALLOWED = new Set([
   "anthropic/claude-sonnet-5.5",
   "anthropic/claude-sonnet-5",
+  "anthropic/claude-haiku-5.5",
   "anthropic/claude-haiku-4.5"
 ]);
 var USAGE_WINDOWS = {
@@ -43836,6 +43837,53 @@ function getMimeTypeFromFilename(filename) {
   const ext = filename.toLowerCase().split(".").pop();
   return EXT_TO_MIME[ext || ""] || "";
 }
+function truncatedImageReason(data) {
+  const n = data.length;
+  const ascii = (i, len) => String.fromCharCode(...data.subarray(i, i + len));
+  if (n >= 4 && data[0] === 255 && data[1] === 216 && data[2] === 255) {
+    let i = 2;
+    while (i + 1 < n) {
+      if (data[i] !== 255)
+        return;
+      const marker = data[i + 1];
+      if (marker === 217)
+        return;
+      if (marker === 255) {
+        i++;
+        continue;
+      }
+      if (marker === 1 || marker >= 208 && marker <= 216) {
+        i += 2;
+        continue;
+      }
+      if (i + 3 >= n)
+        break;
+      i += 2 + (data[i + 2] << 8 | data[i + 3]);
+      if (marker === 218) {
+        while (i + 1 < n && !(data[i] === 255 && data[i + 1] !== 0 && !(data[i + 1] >= 208 && data[i + 1] <= 215)))
+          i++;
+      }
+    }
+    return "JPEG ends before its end-of-image marker (FF D9)";
+  }
+  if (n >= 8 && ascii(0, 8) === `‰PNG\r
+\x1A
+`) {
+    let i = 8;
+    while (i + 8 <= n) {
+      const len = (data[i] << 24 | data[i + 1] << 16 | data[i + 2] << 8 | data[i + 3]) >>> 0;
+      if (ascii(i + 4, 4) === "IEND")
+        return i + 12 <= n ? undefined : "PNG ends inside its IEND chunk";
+      i += 12 + len;
+    }
+    return "PNG ends before its IEND chunk";
+  }
+  if (n >= 12 && ascii(0, 4) === "RIFF" && ascii(8, 4) === "WEBP") {
+    const riff = (data[4] | data[5] << 8 | data[6] << 16 | data[7] << 24) >>> 0;
+    return n >= riff + 8 ? undefined : `WebP RIFF header declares ${riff + 8} bytes, file has ${n}`;
+  }
+  return;
+}
 var NEEDS_OBJECT_URL = new Set(Object.entries(mimetypes_default.types).filter(([, meta]) => meta.needsObjectUrl).map(([type]) => type));
 var MIME_TO_EXT = {};
 for (const [ext, entry] of Object.entries(mimetypes_default.extensions)) {
@@ -45358,7 +45406,7 @@ var tool_catalog_default = {
     preinstallCloud: true,
     label: "Browser",
     summary: "Browse websites automatically: click, type, read and screenshot.",
-    description: "Browser automation over CDP (`open`/`snapshot`/`click`/`type`/`fill`/`read`/`screenshot`/`eval`). `connect '<url>'` to a listed live browser (prefer the user's real Chrome), verify with `snapshot`; if empty, `close` (own session only) and reconnect once. NEVER `close --all`. Shared browser: `tab new` for your own tab, `tab <id>` before each command. No URL listed: cloud → browser-manager-cli; PC with display → Chrome `--remote-debugging-port=9222`, attach `--cdp 9222`.",
+    description: "Browser automation over CDP (`open`/`snapshot`/`click`/`type`/`fill`/`read`/`screenshot`/`eval`). `connect '<url>'` to a listed live browser (prefer the user's real Chrome), verify with `snapshot`; if empty, `close` (own session only) and reconnect once. NEVER `close --all`. Shared browser: `tab new` for your own tab, `tab <id>` before each command. No URL listed: cloud → browser-manager-cli; PC with display → Chrome `--remote-debugging-port=9222`, attach `--cdp 9222`. Never `sleep`: `open` returns after load, but `click`/`fill` fail at once if the element isn't there yet — `wait '<sel>'`, `wait --text 'Done'`, `wait --url '**/dash'`, `wait --load networkidle` or `wait '#spinner' --state hidden` first.",
     versionCmd: "agent-browser --version 2>/dev/null | sed -n 1p",
     preinstallJarvis: true
   },
@@ -45903,6 +45951,7 @@ var tool_catalog_default = {
     summary: "Post to your Facebook Page and its linked Instagram account, and handle comments.",
     statusCmd: `facebook-pages-api whoami 2>/dev/null | sed -n 's/.*"name"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m10 .`,
     loginCmd: "facebook-pages-api auth --page-id <id> --page-token <token>",
+    oauthBroker: true,
     credentialPaths: ["~/.config/facebook-pages-api/credentials.json"],
     description: "Facebook Pages CLI (Meta Graph API). `auth --page-id <id> --page-token <token>` (or env FB_PAGE_ID/FB_PAGE_TOKEN). `feed`, `comments`, `insights`, `conversations`, `media`, and `request <GET|POST|DELETE> <path> [--data <json>]` = any Graph edge with the page token attached (use instead of curl). Writes are live: `feed create --published false` for tests; `comments reply` posts publicly — get human approval. Follower totals: `whoami --fields followers_count,fan_count` (many classic insights metrics are retired). Instagram (linked professional account, same page token): `ig whoami|media|get|stories|tags|limit`, `ig publish --image_url U | --video_url U [--media_type STORIES] | --carousel U1,U2 [--caption …]` (public URLs; container → wait → publish; `--create-only` = dry run; 100 posts/24h), `ig comments list|replies|create|reply|hide|delete|toggle`, `ig insights [media_id]` (needs instagram_manage_insights). `--help` for subcommands.",
     versionCmd: "facebook-pages-api --version 2>/dev/null | sed -n 1p"
@@ -50151,7 +50200,7 @@ var package_default = {
     type: "git",
     url: "git+https://github.com/todoforai/cli.git"
   },
-  version: "0.1.65",
+  version: "0.1.66",
   type: "module",
   bin: {
     "todoforai-cli": "bin/todoforai-cli.js",
@@ -50251,6 +50300,7 @@ Options:
   --no-bridge                     Do not auto-spawn bridge
   --json
   --detailed | --format-anthropic  inspect --json: keep ids/timestamps | Anthropic messages shape
+  --full                          inspect: no truncation of text, thinking, tool calls and results
   --safe                          Validate API key upfront
   --debug, -d
   --debug-dump                    Attach LLM request debug info per turn (requires server grant)
@@ -50263,8 +50313,9 @@ tfa-cli show — put a file or url into the chat
 
 Usage:
   tfa-cli show <file|-> [todo-id]     Render a file by mimetype (- reads stdin)
-                                      [--title T] [--alias A] [--mime M] [--card <name>] [--link] [--json]
+                                      [--title T] [--alias A] [--mime M] [--card <name>] [--link] [--force] [--json]
                                       --link: compact download chip instead of inline render
+                                      Refuses a likely-truncated image (JPEG/PNG cut before the end marker, WebP shorter than its RIFF size); --force shows it anyway
                                       Prints "<todoId>:<alias|id>". Private: visible to whoever can read the todo.
                                       Re-showing with the same --alias updates the block in place (new version)
                                       --alias <todoId>:<alias> updates that todo's block instead,
@@ -50342,10 +50393,12 @@ function parseCliArgs() {
       mime: { type: "string" },
       card: { type: "string" },
       link: { type: "boolean", default: false },
+      force: { type: "boolean", default: false },
       direction: { type: "string" },
       url: { type: "string" },
       account: { type: "string" },
       "from-company": { type: "boolean", default: false },
+      scope: { type: "string" },
       "dry-run": { type: "boolean", default: false },
       max: { type: "string" },
       seed: { type: "string" },
@@ -50370,6 +50423,7 @@ function parseCliArgs() {
       "no-edge": { type: "boolean", default: false },
       json: { type: "boolean", default: false },
       detailed: { type: "boolean", default: false },
+      full: { type: "boolean", default: false },
       "format-anthropic": { type: "boolean", default: false },
       safe: { type: "boolean", default: false },
       debug: { type: "boolean", short: "d", default: false },
@@ -51268,7 +51322,8 @@ function getFrontendUrl(apiUrl, todoId) {
 }
 
 // src/inspect.ts
-var xmlAttr = (v) => JSON.stringify(String(v));
+var str = (v) => typeof v === "string" ? v : JSON.stringify(v);
+var xmlAttr = (v) => JSON.stringify(str(v));
 var DROP_IF_EMPTY = new Set(["runMeta", "meta", "attachments", "blocks"]);
 var ALWAYS_DROP = new Set(["messageIds", "data"]);
 var DETAILED_ONLY = new Set([
@@ -51494,12 +51549,14 @@ function applySlice(arr, spec) {
     throw new Error(`Bad slice: '${spec}'`);
   return arr.slice(start, end);
 }
-var trunc = (s, n) => s.length > n ? s.slice(0, n) + `
-${DIM}... (${s.length} chars)${RESET}` : s;
+var truncAt = (s, n) => s.length > n ? s.slice(0, n) + `
+${DIM}... (${s.length} chars, --full for all)${RESET}` : s;
 var indent = (s, pre) => s.split(`
 `).join(`
 ${pre}`);
-function printFullChat(todo, frontendUrl, slice, mode = "default", format = "compact") {
+function printFullChat(todo, frontendUrl, slice, mode = "default", format = "compact", full = false) {
+  const out = (s) => process.stdout.write(s);
+  const trunc = (s, n) => full ? s : truncAt(s, n);
   const statusColors = {
     DONE: GREEN,
     READY: GREEN,
@@ -51513,34 +51570,34 @@ function printFullChat(todo, frontendUrl, slice, mode = "default", format = "com
     TODO: CYAN
   };
   const statusColor = statusColors[todo.status] || DIM;
-  process.stderr.write(`${BOLD}TODO${RESET} ${todo.id}
+  out(`${BOLD}TODO${RESET} ${todo.id}
 `);
-  process.stderr.write(`${DIM}Status:${RESET} ${statusColor}${todo.status}${RESET}
+  out(`${DIM}Status:${RESET} ${statusColor}${todo.status}${RESET}
 `);
-  process.stderr.write(`${DIM}URL:${RESET}    ${CYAN}${frontendUrl}${RESET}
+  out(`${DIM}URL:${RESET}    ${CYAN}${frontendUrl}${RESET}
 `);
-  process.stderr.write(`${DIM}Created:${RESET} ${new Date(todo.createdAt).toLocaleString()}
+  out(`${DIM}Created:${RESET} ${new Date(todo.createdAt).toLocaleString()}
 `);
   if (todo.agentSettingsId)
-    process.stderr.write(`${DIM}Agent:${RESET}  ${todo.agentSettingsId}
+    out(`${DIM}Agent:${RESET}  ${todo.agentSettingsId}
 `);
   if (slice)
-    process.stderr.write(`${DIM}Slice:${RESET}  [${slice}]
+    out(`${DIM}Slice:${RESET}  [${slice}]
 `);
-  process.stderr.write("─".repeat(60) + `
+  out("─".repeat(60) + `
 `);
   let messages = todo.messages || [];
   if (slice) {
     try {
       messages = applySlice(messages, slice);
     } catch (e) {
-      process.stderr.write(`${RED}${e.message}${RESET}
+      out(`${RED}${e.message}${RESET}
 `);
       process.exit(2);
     }
   }
   if (!messages.length) {
-    process.stderr.write(`${DIM}(no messages)${RESET}
+    out(`${DIM}(no messages)${RESET}
 `);
     return;
   }
@@ -51551,33 +51608,33 @@ function printFullChat(todo, frontendUrl, slice, mode = "default", format = "com
     const orig = messages[i];
     const ts = mode !== "default" && orig?.createdAt ? ` ${DIM}${new Date(orig.createdAt).toLocaleTimeString()}${RESET}` : "";
     const label = msg.role === "user" ? `${CYAN}▶ USER${RESET}` : `${GREEN}◀ ASSISTANT${RESET}`;
-    process.stderr.write(`
+    out(`
 ${label}${ts}
 `);
     const items = Array.isArray(msg.content) ? msg.content : [{ type: "text", text: msg.content }];
     for (const it of items) {
       if (it.type === "text") {
         if (it.text)
-          process.stdout.write(trunc(it.text, 2000) + `
+          out(trunc(it.text, 2000) + `
 `);
       } else if (it.type === "image" || it.type === "document") {
         const s = it.source ?? {};
-        process.stderr.write(`  ${YELLOW}[${it.type}]${RESET} ${DIM}${s.mimeType ?? ""}${RESET} ${s.name ?? ""} ${DIM}(${s.size ?? "?"} bytes)${RESET}
+        out(`  ${YELLOW}[${it.type}]${RESET} ${DIM}${s.mimeType ?? ""}${RESET} ${s.name ?? ""} ${DIM}(${s.size ?? "?"} bytes)${RESET}
   ${DIM}${s.uri ?? ""}${RESET}
 `);
       } else if (it.type === "thinking") {
         if (it.thinking)
-          process.stderr.write(`${DIM}[thinking]${RESET} ${trunc(it.thinking, 500)}
+          out(`${DIM}[thinking]${RESET} ${trunc(it.thinking, 500)}
 `);
       } else if (it.type === "tool_use") {
         toolUseCount++;
         if (it.content) {
-          process.stderr.write(`  ${YELLOW}${trunc(it.content, 200)}${RESET}
+          out(`  ${YELLOW}${trunc(it.content, 200)}${RESET}
 `);
         } else {
-          const argStr = Object.entries(it.input || {}).map(([k, v]) => `${DIM}${k}=${RESET}${String(v).split(`
+          const argStr = Object.entries(it.input || {}).map(([k, v]) => `${DIM}${k}=${RESET}${full ? str(v) : str(v).split(`
 `)[0].slice(0, 80)}`).join(" ");
-          process.stderr.write(`  ${YELLOW}[${it.name}]${RESET} ${argStr}
+          out(`  ${YELLOW}[${it.name}]${RESET} ${argStr}
 `);
         }
       } else if (it.type === "tool_result") {
@@ -51600,15 +51657,15 @@ ${label}${ts}
           }).join(`
 `);
         }
-        process.stderr.write(`  ${DIM}└─ result:${RESET}${status} ${indent(trunc(bodyStr, 500), `     ${DIM}│${RESET} `)}
+        out(`  ${DIM}└─ result:${RESET}${status} ${indent(trunc(bodyStr, 500), `     ${DIM}│${RESET} `)}
 `);
       }
     }
   }
-  process.stderr.write(`
+  out(`
 ` + "─".repeat(60) + `
 `);
-  process.stderr.write(`${DIM}Messages: ${shaped.length} | Tool calls: ${toolUseCount} | Tool errors: ${errorCount}${RESET}
+  out(`${DIM}Messages: ${shaped.length} | Tool calls: ${toolUseCount} | Tool errors: ${errorCount}${RESET}
 `);
 }
 
@@ -53823,6 +53880,12 @@ Usage:
   tfa-cli brand voice correct "<what is off>"      Tell the learner what it got wrong; profile is updated
                                                    in one pass and the correction is kept for every re-learn
 
+  Every voice verb takes --scope project|mine|personal — which voice to teach:
+    project   the project's, shared with its members (default; needs write access)
+    mine      yours, only in this project
+    personal  yours, in every project (e.g. your own Gmail)
+  Agents read all three; on the same voice name the narrower wins: mine > project > personal.
+
 
 Questions the UI asks (keys for 'answers'):
   "What makes you different from competitors?"
@@ -53921,10 +53984,13 @@ async function voiceDeviceCommand(rest, args) {
 }
 async function voiceCommand(api, projectId, rest, args) {
   const [verb, ...vargs] = rest;
+  const scope = args.scope;
+  if (scope && !["project", "mine", "personal"].includes(scope))
+    fail(`--scope must be project, mine or personal, got '${scope}'`);
   if (verb === "collect" && !vargs[0])
     fail("Usage: tfa-cli brand voice collect <channel> [--url U | --account <page-id> | --max N] [--dry-run]");
   if (verb === "answers") {
-    const answers = manualAnswersOf((await api.listVoiceSources(projectId)).sources);
+    const answers = manualAnswersOf((await api.listVoiceSources(projectId, scope)).sources);
     if (vargs.length) {
       for (const a of vargs) {
         const i = a.indexOf("=");
@@ -53932,7 +53998,7 @@ async function voiceCommand(api, projectId, rest, args) {
           fail(`Expected question=answer, got '${a}'`);
         answers[a.slice(0, i)] = a.slice(i + 1);
       }
-      await api.collectVoiceSource(projectId, MANUAL_CHANNEL, { samples: manualSamples(answers) });
+      await api.collectVoiceSource(projectId, MANUAL_CHANNEL, { samples: manualSamples(answers), scope });
       process.stderr.write(`${GREEN}✅ ${vargs.length} answer(s) saved${RESET}
 `);
       return;
@@ -53948,7 +54014,7 @@ async function voiceCommand(api, projectId, rest, args) {
     return;
   }
   if (!verb || verb === "show") {
-    const [{ sources, profile }, brand] = await Promise.all([api.listVoiceSources(projectId), api.getBusinessContext(projectId)]);
+    const [{ sources, profile }, brand] = await Promise.all([api.listVoiceSources(projectId, scope), api.getBusinessContext(projectId)]);
     if (args.json) {
       console.log(JSON.stringify({ brand, profile, sources }, null, 2));
       return;
@@ -53979,12 +54045,12 @@ ${DIM}match ${profile.match}/100 · source ${profile.source}${RESET}
       const { samples, note } = collectChannel(channel, Number(args.max ?? 40));
       if (!samples.length)
         fail(`${channel}: nothing usable came back${note ? ` (${note})` : ""}`);
-      const { sources: sources2 } = await api.collectVoiceSource(projectId, channel, { samples });
+      const { sources: sources2 } = await api.collectVoiceSource(projectId, channel, { samples, scope });
       process.stderr.write(`${GREEN}✅ ${channel}: ${samples.length} reply pairs stored (${sources2.length} source(s))${RESET}
 `);
       return;
     }
-    const { sources } = await api.collectVoiceSource(projectId, channel, { url: args.url, account: args.account });
+    const { sources } = await api.collectVoiceSource(projectId, channel, { url: args.url, account: args.account, scope });
     process.stderr.write(`${GREEN}✅ ${channel} collected (${sources.length} source(s))${RESET}
 `);
     return;
@@ -53992,7 +54058,7 @@ ${DIM}match ${profile.match}/100 · source ${profile.source}${RESET}
   if (verb === "remove") {
     if (!vargs[0])
       fail("Usage: tfa-cli brand voice remove <channel> [--account <id>]   (no --account: every source of the channel)");
-    await api.removeVoiceSource(projectId, vargs[0], args.account ? { account: args.account } : { all: true });
+    await api.removeVoiceSource(projectId, vargs[0], { ...args.account ? { account: args.account } : { all: true }, scope });
     process.stderr.write(`${GREEN}✅ ${vargs[0]} removed${RESET}
 `);
     return;
@@ -54000,7 +54066,7 @@ ${DIM}match ${profile.match}/100 · source ${profile.source}${RESET}
   if (verb === "learn") {
     process.stderr.write(`${DIM}learning voice…${RESET}
 `);
-    const res = await api.refineBrandVoice(projectId, args["from-company"] ? "company" : undefined);
+    const res = await api.refineBrandVoice(projectId, args["from-company"] ? "company" : undefined, undefined, scope);
     if (!res.profile)
       fail(args["from-company"] ? "No brand page to learn from — 'tfa-cli brand create <name>' and fill it first" : "Nothing to learn from — add answers, collect a source, or fill the brand page first");
     if (args.json) {
@@ -54016,11 +54082,11 @@ ${res.profile}
     const text = vargs.join(" ").trim();
     if (!text)
       fail('Usage: tfa-cli brand voice correct "<what is off>"');
-    if (!(await api.listVoiceSources(projectId)).profile?.profile)
+    if (!(await api.listVoiceSources(projectId, scope)).profile?.profile)
       fail("No voice learned yet — 'tfa-cli brand voice learn' first");
     process.stderr.write(`${DIM}applying correction…${RESET}
 `);
-    const res = await api.refineBrandVoice(projectId, undefined, text);
+    const res = await api.refineBrandVoice(projectId, undefined, text, scope);
     if (!res.profile)
       fail("The correction pass returned nothing — try rewording it");
     if (args.json) {
@@ -55182,21 +55248,24 @@ tfa-cli memory — memory and context folders as git checkouts
 
 Usage:
   tfa-cli memory sync [--project <id>]   Clone, or pull, into:
-      ~/.todoforai/{memory,context}                 yours          (todoforai:memory, todoforai:context)
-      ~/.todoforai/projects/<id>/{memory,context}   the project's  (todoforai:projects/<id>/…)
+      ~/.todoforai/{memory,context}                    yours            (todoforai:memory, todoforai:context)
+      ~/.todoforai/projects/<id>/{memory,context}      the project's    (todoforai:projects/<id>/…)
+      ~/.todoforai/projects/<id>/me/{memory,context}   yours in it      (todoforai:projects/<id>/me/…)
   tfa-cli memory path [--project <id>]   Print the checkout paths
 
 Every change to these folders is committed on the server, from any client. In a checkout
 use plain git: log, diff, show, revert, commit, then \`git push\` — the push updates the live
 folder. A push behind the server is refused: \`git pull\` first. Files over 5 MB live outside
-history (upload them instead). Project folders: members with write access push. The project
+history (upload them instead). Project folders: members with write access push; your own in
+a project (me/) is private to you. The project
 defaults to $TODOFORAI_PROJECT_ID.
 `);
 }
 var FOLDERS = ["memory", "context"];
 function checkouts(projectId) {
   const root = join5(homedir5(), ".todoforai");
-  const scopes = [[root, ""], ...projectId ? [[join5(root, "projects", projectId), `projects/${projectId}/`]] : []];
+  const project = projectId && join5(root, "projects", projectId);
+  const scopes = [[root, ""], ...project ? [[project, `projects/${projectId}/`], [join5(project, "me"), `projects/${projectId}/me/`]] : []];
   return scopes.flatMap(([dir, remote]) => FOLDERS.map((f) => [join5(dir, f), `${remote}${f}.git`]));
 }
 function git(args, cwd) {
@@ -56399,14 +56468,14 @@ function promiseAllObject(promisesObj) {
 }
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
-  let str = "";
+  let str2 = "";
   for (let i = 0;i < length; i++) {
-    str += chars[Math.floor(Math.random() * chars.length)];
+    str2 += chars[Math.floor(Math.random() * chars.length)];
   }
-  return str;
+  return str2;
 }
-function esc(str) {
-  return JSON.stringify(str);
+function esc(str2) {
+  return JSON.stringify(str2);
 }
 function slugify(input) {
   return input.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -56519,8 +56588,8 @@ var primitiveTypes = /* @__PURE__ */ new Set([
   "symbol",
   "undefined"
 ]);
-function escapeRegex(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str2) {
+  return str2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
   const cl = new inst._zod.constr(def ?? inst._zod.def);
@@ -56771,13 +56840,13 @@ function getSizableOrigin(input) {
   return "unknown";
 }
 var highSurrogate = /[\uD800-\uDBFF]/;
-function codePointLength(str) {
-  const units = str.length;
-  if (!highSurrogate.test(str))
+function codePointLength(str2) {
+  const units = str2.length;
+  if (!highSurrogate.test(str2))
     return units;
   let count = units;
   for (let i = 0;i < units - 1; i++) {
-    if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) {
+    if ((str2.charCodeAt(i) & 64512) === 55296 && (str2.charCodeAt(i + 1) & 64512) === 56320) {
       count--;
       i++;
     }
@@ -80266,17 +80335,17 @@ async function main() {
     const [, filePath, todoArg] = positionals;
     const todoId = todoArg || aliasTodoId(args.alias) || getEnv("TODO_ID") || cfgScope.data.last_todo_id;
     if (!filePath || !todoId) {
-      process.stderr.write(`${RED3}Usage: tfa-cli show <file|-> [todo-id] [--title T] [--alias A] [--mime M] [--card <name>] [--link]${RESET2}
+      process.stderr.write(`${RED3}Usage: tfa-cli show <file|-> [todo-id] [--title T] [--alias A] [--mime M] [--card <name>] [--link] [--force]${RESET2}
 `);
       process.exit(2);
     }
-    let blob, name;
+    let bytes, name, mime;
     if (filePath === "-") {
       const chunks = [];
       for await (const c3 of process.stdin)
         chunks.push(c3);
-      blob = new Blob([Buffer.concat(chunks)]);
-      if (blob.size === 0) {
+      bytes = Buffer.concat(chunks);
+      if (bytes.length === 0) {
         process.stderr.write(`${RED3}No data on stdin${RESET2}
 `);
         process.exit(1);
@@ -80289,9 +80358,21 @@ async function main() {
 `);
         process.exit(1);
       }
-      blob = new Blob([readFileSync5(abs)], { type: getMimeTypeFromFilename(abs) || undefined });
+      bytes = readFileSync5(abs);
+      mime = getMimeTypeFromFilename(abs) || undefined;
       name = path4.basename(filePath);
     }
+    const truncated = truncatedImageReason(bytes);
+    if (truncated) {
+      if (!args.force) {
+        process.stderr.write(`${RED3}${name} looks truncated: ${truncated} (${bytes.length} bytes). Re-export it, or pass --force to show it anyway.${RESET2}
+`);
+        process.exit(1);
+      }
+      process.stderr.write(`${YELLOW2}\u26A0 ${name} looks truncated: ${truncated} \u2014 showing anyway (--force)${RESET2}
+`);
+    }
+    const blob = new Blob([bytes], { type: mime });
     const res = await api2.showFile(todoId, blob, name, {
       title: args.title,
       alias: args.alias,
@@ -80494,7 +80575,7 @@ async function main() {
     }
     const mode = args.debug ? "debug" : args.detailed ? "detailed" : "default";
     const format = args["format-anthropic"] ? "anthropic" : "compact";
-    printFullChat(todo2, getFrontendUrl(apiUrl, todoId), slice, mode, format);
+    printFullChat(todo2, getFrontendUrl(apiUrl, todoId), slice, mode, format, args.full);
     return;
   }
   if (process.stderr.isTTY)

package/package.json

@@ -6,7 +6,7 @@
     "type": "git",
     "url": "git+https://github.com/todoforai/cli.git"
   },
-  "version": "0.1.65",
+  "version": "0.1.66",
   "type": "module",
   "bin": {
     "todoforai-cli": "bin/todoforai-cli.js",