@todoforai/cli 0.1.65 → 0.1.67

package/dist/todoforai-cli.js

@@ -37682,19 +37682,19 @@ var require_doctype = __commonJS((exports) => {
     return DOCUMENT_MODE.NO_QUIRKS;
   };
   exports.serializeContent = function(name, publicId, systemId) {
-    let str = "!DOCTYPE ";
+    let str2 = "!DOCTYPE ";
     if (name) {
-      str += name;
+      str2 += name;
     }
     if (publicId) {
-      str += " PUBLIC " + enquoteDoctypeId(publicId);
+      str2 += " PUBLIC " + enquoteDoctypeId(publicId);
     } else if (systemId) {
-      str += " SYSTEM";
+      str2 += " SYSTEM";
     }
     if (systemId !== null) {
-      str += " " + enquoteDoctypeId(systemId);
+      str2 += " " + enquoteDoctypeId(systemId);
     }
-    return str;
+    return str2;
   };
 });
 
@@ -40266,14 +40266,14 @@ var require_serializer = __commonJS((exports, module) => {
       this.html += "<" + doctype.serializeContent(name, null, null) + ">";
     }
   }
-  Serializer.escapeString = function(str, attrMode) {
-    str = str.replace(AMP_REGEX, "&amp;").replace(NBSP_REGEX, "&nbsp;");
+  Serializer.escapeString = function(str2, attrMode) {
+    str2 = str2.replace(AMP_REGEX, "&amp;").replace(NBSP_REGEX, "&nbsp;");
     if (attrMode) {
-      str = str.replace(DOUBLE_QUOTE_REGEX, "&quot;");
+      str2 = str2.replace(DOUBLE_QUOTE_REGEX, "&quot;");
     } else {
-      str = str.replace(LT_REGEX, "&lt;").replace(GT_REGEX, "&gt;");
+      str2 = str2.replace(LT_REGEX, "&lt;").replace(GT_REGEX, "&gt;");
     }
-    return str;
+    return str2;
   };
   module.exports = Serializer;
 });
@@ -40664,19 +40664,19 @@ var require_doctype2 = __commonJS((exports) => {
     return DOCUMENT_MODE.NO_QUIRKS;
   };
   exports.serializeContent = function(name, publicId, systemId) {
-    let str = "!DOCTYPE ";
+    let str2 = "!DOCTYPE ";
     if (name) {
-      str += name;
+      str2 += name;
     }
     if (publicId) {
-      str += " PUBLIC " + enquoteDoctypeId(publicId);
+      str2 += " PUBLIC " + enquoteDoctypeId(publicId);
     } else if (systemId) {
-      str += " SYSTEM";
+      str2 += " SYSTEM";
     }
     if (systemId !== null) {
-      str += " " + enquoteDoctypeId(systemId);
+      str2 += " " + enquoteDoctypeId(systemId);
     }
-    return str;
+    return str2;
   };
 });
 
@@ -42969,6 +42969,9 @@ class ApiClient {
   unshareDevice(id, email) {
     return this.request("POST", `/api/v1/devices/${id}/unshare`, { id, email });
   }
+  leaveDevice(id) {
+    return this.request("POST", `/api/v1/devices/${id}/leave`, { id });
+  }
   setDeviceWallpaperMode(id, mode) {
     return this.request("POST", `/api/v1/devices/${id}/wallpaper-mode`, { id, mode });
   }
@@ -42981,8 +42984,8 @@ class ApiClient {
   renameBusinessContext(projectId, name) {
     return this.request("PUT", `/api/v1/projects/${projectId}/business-context`, { projectId, name });
   }
-  listVoiceSources(projectId) {
-    return this.request("GET", `/api/v1/projects/${projectId}/voice-sources`);
+  listVoiceSources(projectId, scope) {
+    return this.request("GET", `/api/v1/projects/${projectId}/voice-sources${scope ? `?scope=${scope}` : ""}`);
   }
   collectVoiceSource(projectId, channel, opts) {
     return this.request("POST", "/api/v1/business-context/collect-voice-source", { projectId, channel, ...opts }, 130000);
@@ -42990,8 +42993,8 @@ class ApiClient {
   removeVoiceSource(projectId, channel, opts = {}) {
     return this.request("POST", "/api/v1/business-context/remove-voice-source", { projectId, channel, ...opts });
   }
-  refineBrandVoice(projectId, source, correction) {
-    return this.request("POST", "/api/v1/business-context/refine-brand-voice", { projectId, ...source && { source }, ...correction && { correction } });
+  refineBrandVoice(projectId, source, correction, scope) {
+    return this.request("POST", "/api/v1/business-context/refine-brand-voice", { projectId, ...source && { source }, ...correction && { correction }, ...scope && { scope } });
   }
   getProfile() {
     return this.request("GET", "/api/v1/users/profile");
@@ -43008,6 +43011,15 @@ class ApiClient {
   listProjectGroups(projectId) {
     return this.request("GET", `/api/v1/projects/${projectId}/groups`);
   }
+  getProjectGroupIntake(projectId, groupTag) {
+    return this.request("GET", `/api/v1/projects/${projectId}/groups/${encodeURIComponent(groupTag)}/intake`);
+  }
+  updateProjectGroupIntake(projectId, groupTag, fields) {
+    return this.request("PUT", `/api/v1/projects/${projectId}/groups/${encodeURIComponent(groupTag)}/intake`, { projectId, groupTag, ...fields });
+  }
+  regenerateProjectGroupIntake(projectId, groupTag) {
+    return this.request("POST", `/api/v1/projects/${projectId}/groups/${encodeURIComponent(groupTag)}/intake/regenerate`, { projectId, groupTag });
+  }
   upsertProjectGroup(projectId, slug, fields) {
     return this.request("PUT", `/api/v1/projects/${projectId}/groups/${encodeURIComponent(slug)}`, { projectId, slug, ...fields });
   }
@@ -43609,6 +43621,7 @@ var TodoStatus;
   TodoStatus2["PAUSED"] = "PAUSED";
   TodoStatus2["POSTPONED"] = "POSTPONED";
   TodoStatus2["REVIEW_REQUESTED"] = "REVIEW_REQUESTED";
+  TodoStatus2["WAITING_AGENT"] = "WAITING_AGENT";
   TodoStatus2["RUNNING"] = "RUNNING";
   TodoStatus2["WAITING_FOR_USER"] = "WAITING_FOR_USER";
   TodoStatus2["COMPACTING"] = "COMPACTING";
@@ -43623,6 +43636,11 @@ var TodoStatus;
   TodoStatus2["ARCHIVED"] = "ARCHIVED";
   TodoStatus2["DELETED"] = "DELETED";
 })(TodoStatus ||= {});
+var CLOSED_STATUSES = [
+  "DONE" /* DONE */,
+  "ARCHIVED" /* ARCHIVED */,
+  "DELETED" /* DELETED */
+];
 // ../packages/shared-fbe/src/constants.ts
 var APPEAL_EMAIL = "support@todofor.ai";
 var ACCOUNT_SUSPENDED_MESSAGE = `Account suspended for suspected abuse. If you think this is a mistake, email ${APPEAL_EMAIL}.`;
@@ -43639,22 +43657,28 @@ var PROVIDER_BY_AUTHOR = {
   "x-ai": "xai",
   "z-ai": "z.ai",
   google: "google-ai-studio",
-  moonshotai: "opencode_go"
+  moonshotai: "opencode_go",
+  meta: "meta"
 };
 var MODEL_PROVIDER_OVERRIDES = {
   "openai/gpt-5.5-pro": "openrouter"
 };
+var MODEL_ENDPOINT_OVERRIDES = {
+  "google/gemini-4-argon": { "google-ai-studio": "vertex" }
+};
 function resolveDispatchProvider(modelId, endpointProvider) {
-  return MODEL_PROVIDER_OVERRIDES[modelId.toLowerCase()] ?? endpointProvider;
+  const id = modelId.toLowerCase();
+  return MODEL_PROVIDER_OVERRIDES[id] ?? MODEL_ENDPOINT_OVERRIDES[id]?.[endpointProvider.toLowerCase()] ?? endpointProvider;
 }
 var SUBSCRIPTION_PROVIDERS = new Set(["opencode_go"]);
 function applyProviderOverride(qualified) {
   const colon = qualified.indexOf(":");
+  const provider = qualified.slice(0, colon);
   const rest = qualified.slice(colon + 1);
   const suffix = rest.match(/\([^)]+\)$/)?.[0] ?? "";
   const bare = (suffix ? rest.slice(0, -suffix.length) : rest).toLowerCase();
-  const override = MODEL_PROVIDER_OVERRIDES[bare];
-  return override ? `${override}:${bare}${suffix}` : qualified;
+  const resolved = resolveDispatchProvider(bare, provider);
+  return resolved === provider ? qualified : `${resolved}:${bare}${suffix}`;
 }
 function isQualifiedModel(model) {
   const id = model.trim();
@@ -43677,9 +43701,9 @@ function qualifyModel(model) {
   const override = MODEL_PROVIDER_OVERRIDES[lower];
   if (override)
     return { model: `${override}:${lower}${suffix}` };
-  const provider = PROVIDER_BY_AUTHOR[lower.split("/")[0]];
-  if (provider && lower.includes("/"))
-    return { model: `${provider}:${lower}${suffix}` };
+  const author = PROVIDER_BY_AUTHOR[lower.split("/")[0]];
+  if (author && lower.includes("/"))
+    return { model: `${resolveDispatchProvider(lower, author)}:${lower}${suffix}` };
   return { model: id };
 }
 function qualifiedModelIds(listing, filter) {
@@ -43701,6 +43725,7 @@ function qualifiedModelIds(listing, filter) {
 var HOBBY_ALLOWED = new Set([
   "anthropic/claude-sonnet-5.5",
   "anthropic/claude-sonnet-5",
+  "anthropic/claude-haiku-5.5",
   "anthropic/claude-haiku-4.5"
 ]);
 var USAGE_WINDOWS = {
@@ -43737,6 +43762,7 @@ var mimetypes_default = {
     js: { mime: "text/javascript", type: "text" },
     ts: { mime: "text/typescript", type: "text" },
     html: { mime: "text/html", type: "text" },
+    htm: { mime: "text/html", type: "text" },
     css: { mime: "text/css", type: "text" },
     xml: { mime: "text/xml", type: "text" },
     py: { mime: "text/x-python", type: "text" },
@@ -43775,7 +43801,7 @@ var mimetypes_default = {
     docx: { mime: "application/vnd.openxmlformats-officedocument.wordprocessingml.document", type: "document", tags: ["docx"] },
     ppt: { mime: "application/vnd.ms-powerpoint", type: "document" },
     pptx: { mime: "application/vnd.openxmlformats-officedocument.presentationml.presentation", type: "document", tags: ["pptx"] },
-    xls: { mime: "application/vnd.ms-excel", type: "spreadsheet" },
+    xls: { mime: "application/vnd.ms-excel", type: "spreadsheet", tags: ["xls"] },
     xlsx: { mime: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", type: "spreadsheet", tags: ["xlsx"] },
     zip: { mime: "application/zip", type: "archive" },
     rar: { mime: "application/vnd.rar", type: "archive" },
@@ -43836,6 +43862,53 @@ function getMimeTypeFromFilename(filename) {
   const ext = filename.toLowerCase().split(".").pop();
   return EXT_TO_MIME[ext || ""] || "";
 }
+function truncatedImageReason(data) {
+  const n = data.length;
+  const ascii = (i, len) => String.fromCharCode(...data.subarray(i, i + len));
+  if (n >= 4 && data[0] === 255 && data[1] === 216 && data[2] === 255) {
+    let i = 2;
+    while (i + 1 < n) {
+      if (data[i] !== 255)
+        return;
+      const marker = data[i + 1];
+      if (marker === 217)
+        return;
+      if (marker === 255) {
+        i++;
+        continue;
+      }
+      if (marker === 1 || marker >= 208 && marker <= 216) {
+        i += 2;
+        continue;
+      }
+      if (i + 3 >= n)
+        break;
+      i += 2 + (data[i + 2] << 8 | data[i + 3]);
+      if (marker === 218) {
+        while (i + 1 < n && !(data[i] === 255 && data[i + 1] !== 0 && !(data[i + 1] >= 208 && data[i + 1] <= 215)))
+          i++;
+      }
+    }
+    return "JPEG ends before its end-of-image marker (FF D9)";
+  }
+  if (n >= 8 && ascii(0, 8) === `‰PNG\r
+\x1A
+`) {
+    let i = 8;
+    while (i + 8 <= n) {
+      const len = (data[i] << 24 | data[i + 1] << 16 | data[i + 2] << 8 | data[i + 3]) >>> 0;
+      if (ascii(i + 4, 4) === "IEND")
+        return i + 12 <= n ? undefined : "PNG ends inside its IEND chunk";
+      i += 12 + len;
+    }
+    return "PNG ends before its IEND chunk";
+  }
+  if (n >= 12 && ascii(0, 4) === "RIFF" && ascii(8, 4) === "WEBP") {
+    const riff = (data[4] | data[5] << 8 | data[6] << 16 | data[7] << 24) >>> 0;
+    return n >= riff + 8 ? undefined : `WebP RIFF header declares ${riff + 8} bytes, file has ${n}`;
+  }
+  return;
+}
 var NEEDS_OBJECT_URL = new Set(Object.entries(mimetypes_default.types).filter(([, meta]) => meta.needsObjectUrl).map(([type]) => type));
 var MIME_TO_EXT = {};
 for (const [ext, entry] of Object.entries(mimetypes_default.extensions)) {
@@ -44121,6 +44194,8 @@ var USER_HEADINGS = new Set([
   "steps",
   "data needed"
 ]);
+// ../packages/shared-fbe/src/bridgeProtocol.ts
+var ADB_DATA_CHUNK = 40 * 1024;
 // ../packages/shared-fbe/src/bashPatterns.ts
 function splitShellCommands(input) {
   const parts = [];
@@ -44362,7 +44437,6 @@ function getBlockServerId(block) {
   const prefix = getBlockServerPrefix(block);
   return prefix ? prefix.slice(0, -1) : "*";
 }
-
 // ../packages/shared-fbe/src/permissionUtils.ts
 function parsePattern(pattern) {
   const colonIndex = pattern.indexOf(":");
@@ -44592,7 +44666,7 @@ Exactly ONE \`api_recommend_template\` call per proposal: it carries both what t
 };
 var JARVIS_AGENT = {
   id: "00000000-0000-0000-0000-202601013152",
-  name: "JARVIS",
+  name: "Tod",
   ownerId: "SYSTEM",
   systemMessage: "",
   model: "",
@@ -45125,7 +45199,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "TODOforAI",
     summary: "Create and follow up on your TODOs, and show results in the chat.",
-    description: 'Manage the user\'s OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli "prompt"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> "text"`). Inspect: `list [--status open]`, `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|ARCHIVED|POSTPONED|CANCELLED|DELETED` (close, reopen, shelve, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r \'.items[].id\'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (permissions/MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo\'s readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `--alias <todoId>:<name>` updates another todo\'s artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user\'s bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify "Title" "message" [--href /t/<id>]` leaves a note in the user\'s Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows.',
+    description: 'Manage the user\'s OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli "prompt"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> "text"`). Inspect: `list [--status open]`, `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|ARCHIVED|POSTPONED|CANCELLED|DELETED` (close, reopen, shelve, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r \'.items[].id\'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (permissions/MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo\'s readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `--alias <todoId>:<name>` updates another todo\'s artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Show viewer chrome: `--title` appears in the header; a kebab menu holds file actions, versions and sharing when available. Desktop floating previews add minimize (park in a tab), maximize/restore and close (X); inline blocks have no window controls. For authored HTML, do not duplicate the header/controls or add a rounded, bordered root card: the floating viewer owns the rounded frame. Keep content edge-to-edge; internal layout padding is fine. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user\'s bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify "Title" "message" [--href /t/<id>]` leaves a note in the user\'s Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows. Project files: `memory sync|path [--project <id>]` requires a project and checks out only projects/<id>/{memory,context} and projects/<id>/me/{memory,context}; legacy global files are read-only recovery. Voice commands use `--scope mine|project` (default mine, private within this project; project is shared).',
     installCmd: "npm install -g @todoforai/cli",
     versionCmd: "tfa-cli --version 2>/dev/null | sed -n 1p",
     preinstallCloud: true,
@@ -45358,7 +45432,7 @@ var tool_catalog_default = {
     preinstallCloud: true,
     label: "Browser",
     summary: "Browse websites automatically: click, type, read and screenshot.",
-    description: "Browser automation over CDP (`open`/`snapshot`/`click`/`type`/`fill`/`read`/`screenshot`/`eval`). `connect '<url>'` to a listed live browser (prefer the user's real Chrome), verify with `snapshot`; if empty, `close` (own session only) and reconnect once. NEVER `close --all`. Shared browser: `tab new` for your own tab, `tab <id>` before each command. No URL listed: cloud → browser-manager-cli; PC with display → Chrome `--remote-debugging-port=9222`, attach `--cdp 9222`.",
+    description: "Browser automation over CDP (`open`/`snapshot`/`click`/`type`/`fill`/`read`/`screenshot`/`eval`). `connect '<url>'` to a listed live browser (prefer the user's real Chrome), verify with `snapshot`; if empty, `close` (own session only) and reconnect once. NEVER `close --all`. Shared browser: `tab new` for your own tab, `tab <id>` before each command. No URL listed: cloud → browser-manager-cli; PC with display → Chrome `--remote-debugging-port=9222`, attach `--cdp 9222`. Never `sleep`: `open` returns after load, but `click`/`fill` fail at once if the element isn't there yet — `wait '<sel>'`, `wait --text 'Done'`, `wait --url '**/dash'`, `wait --load networkidle` or `wait '#spinner' --state hidden` first.",
     versionCmd: "agent-browser --version 2>/dev/null | sed -n 1p",
     preinstallJarvis: true
   },
@@ -45903,6 +45977,7 @@ var tool_catalog_default = {
     summary: "Post to your Facebook Page and its linked Instagram account, and handle comments.",
     statusCmd: `facebook-pages-api whoami 2>/dev/null | sed -n 's/.*"name"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m10 .`,
     loginCmd: "facebook-pages-api auth --page-id <id> --page-token <token>",
+    oauthBroker: true,
     credentialPaths: ["~/.config/facebook-pages-api/credentials.json"],
     description: "Facebook Pages CLI (Meta Graph API). `auth --page-id <id> --page-token <token>` (or env FB_PAGE_ID/FB_PAGE_TOKEN). `feed`, `comments`, `insights`, `conversations`, `media`, and `request <GET|POST|DELETE> <path> [--data <json>]` = any Graph edge with the page token attached (use instead of curl). Writes are live: `feed create --published false` for tests; `comments reply` posts publicly — get human approval. Follower totals: `whoami --fields followers_count,fan_count` (many classic insights metrics are retired). Instagram (linked professional account, same page token): `ig whoami|media|get|stories|tags|limit`, `ig publish --image_url U | --video_url U [--media_type STORIES] | --carousel U1,U2 [--caption …]` (public URLs; container → wait → publish; `--create-only` = dry run; 100 posts/24h), `ig comments list|replies|create|reply|hide|delete|toggle`, `ig insights [media_id]` (needs instagram_manage_insights). `--help` for subcommands.",
     versionCmd: "facebook-pages-api --version 2>/dev/null | sed -n 1p"
@@ -49895,21 +49970,67 @@ var tool_catalog_default = {
     },
     statusCmd: `zoo user view --format json 2>/dev/null | sed -n 's/.*"email": *"\\([^"]*\\)".*/\\1/p' | grep -m1 .`,
     loginCmd: "zoo auth login --web",
+    logoutCmd: "printf 'y\\n' | zoo --host api.zoo.dev auth logout",
     loginNeedsPty: true,
     deviceCodePattern: "user code: ([A-Z0-9]{4}-[A-Z0-9]{4})",
-    oauthUrlPattern: "(https://api\\.zoo\\.dev/oauth2/device/verify\\S*)",
+    oauthUrlPattern: "(https://api\\.zoo\\.dev/oauth2/device/verify\\?[^\\s']+)",
     canStreamLogin: true,
     credentialPaths: [
       "~/.config/zoo/hosts.toml"
     ],
     description: 'Official Zoo (KittyCAD) CLI. Text-to-CAD: `zoo ml text-to-cad export --output-format step "a 40mm gear"`; convert: `zoo file convert in.obj out/ --output-format step`; mass/volume: `zoo file mass|volume <file>`; KCL: `zoo kcl export|snapshot`; raw: `zoo api /user`. Token alternative: `echo <token> | zoo auth login --with-token`.',
     versionCmd: "zoo --version 2>/dev/null | sed -n 1p"
+  },
+  "python-docx": {
+    category: "documents",
+    pkg: "python-docx",
+    pipModules: ["docx"],
+    installer: "pip",
+    label: "Word documents",
+    summary: "Create, read and edit Word documents.",
+    versionCmd: `{ "$HOME/.todoforai/tools/venv/bin/python" -c 'import docx; print(docx.__version__)' || python -c 'import docx; print(docx.__version__)' || python3 -c 'import docx; print(docx.__version__)' || py -c 'import docx; print(docx.__version__)'; } 2>/dev/null`,
+    description: "Python python-docx library. Use python3 to create, save, reopen and edit Office files; no Microsoft account required."
+  },
+  openpyxl: {
+    category: "documents",
+    pkg: "openpyxl",
+    pipModules: ["openpyxl"],
+    installer: "pip",
+    label: "Excel workbooks",
+    summary: "Create, read and edit Excel workbooks.",
+    versionCmd: `{ "$HOME/.todoforai/tools/venv/bin/python" -c 'import openpyxl; print(openpyxl.__version__)' || python -c 'import openpyxl; print(openpyxl.__version__)' || python3 -c 'import openpyxl; print(openpyxl.__version__)' || py -c 'import openpyxl; print(openpyxl.__version__)'; } 2>/dev/null`,
+    description: "Python openpyxl library. Use python3 to create, save, reopen and edit Office files; no Microsoft account required."
+  },
+  "python-pptx": {
+    category: "documents",
+    pkg: "python-pptx",
+    pipModules: ["pptx"],
+    installer: "pip",
+    label: "PowerPoint decks",
+    summary: "Create, read and edit PowerPoint decks.",
+    versionCmd: `{ "$HOME/.todoforai/tools/venv/bin/python" -c 'import pptx; print(pptx.__version__)' || python -c 'import pptx; print(pptx.__version__)' || python3 -c 'import pptx; print(pptx.__version__)' || py -c 'import pptx; print(pptx.__version__)'; } 2>/dev/null`,
+    description: "Python python-pptx library. Use python3 to create, save, reopen and edit Office files; no Microsoft account required."
+  },
+  "modal-h3": {
+    category: "creative",
+    pkg: "@todoforai/modal-h3",
+    installer: "npm",
+    label: "MiniMax-H3 on Modal",
+    summary: "Generate videos with sound using MiniMax-H3 on your own Modal GPUs.",
+    versionCmd: "modal-h3 --version 2>/dev/null | sed -n 1p",
+    statusCmd: `modal-h3 whoami 2>/dev/null | grep '"authenticated": true' >/dev/null && echo authenticated`,
+    loginCmd: "printf '%s' <proxy_token> | modal-h3 auth --token-stdin --fl2va-url <fl2va_url> --ref2va-url <ref2va_url>",
+    credentialPaths: ["~/.config/modal-h3/credentials.json"],
+    description: "MiniMax-H3 text/image/reference-to-video+audio on a self-deployed Modal app (SGLang, 4x H200, scale-to-zero). `modal-h3 generate -p '…' [--first @a.png] [--last …] [--ref-image|--ref-video|--ref-audio <url|@file>] [--duration 4-15] [--ratio 16:9|auto] [--quality high] -o out.mp4` (task inferred, retries 503 during cold start, polls, downloads), `warmup`, `status|download|delete <id>`, `list`, `api <METHOD> <path>`. Deploy once with `modal run modal/serve.py::download` + `modal deploy modal/serve.py`. Costs ~$18/h of 4x H200 while a container is up (cold start minutes, ~75 s per 5 s 768p clip warm); every request wakes a container, `whoami` is offline. Jobs live in container memory. 2K needs `minimax-api regenerate`."
   }
 };
 
 // ../packages/shared-fbe/src/toolCatalog.ts
 var TOOL_CATALOG = tool_catalog_default;
 // ../packages/shared-fbe/src/toolInstallCommand.ts
+var NPM_HOME = '"${TFA_NPM_HOME:-$HOME}"';
+var NPM_TOOLS = NPM_HOME.replace('}"', '}/.todoforai/tools"');
+var NPM_LOCAL = NPM_HOME.replace('}"', '}/.local"');
 var KEY_OF = new Map(Object.entries(TOOL_CATALOG).map(([k, e]) => [e, k]));
 var NODE_MIN_MAJOR = 24;
 var NODE_OK = `command -v npm >/dev/null 2>&1 && node -e 'process.exit(+process.versions.node.split(".")[0]>=${NODE_MIN_MAJOR}?0:1)' >/dev/null 2>&1`;
@@ -50151,7 +50272,7 @@ var package_default = {
     type: "git",
     url: "git+https://github.com/todoforai/cli.git"
   },
-  version: "0.1.65",
+  version: "0.1.67",
   type: "module",
   bin: {
     "todoforai-cli": "bin/todoforai-cli.js",
@@ -50251,6 +50372,7 @@ Options:
   --no-bridge                     Do not auto-spawn bridge
   --json
   --detailed | --format-anthropic  inspect --json: keep ids/timestamps | Anthropic messages shape
+  --full                          inspect: no truncation of text, thinking, tool calls and results
   --safe                          Validate API key upfront
   --debug, -d
   --debug-dump                    Attach LLM request debug info per turn (requires server grant)
@@ -50263,8 +50385,9 @@ tfa-cli show — put a file or url into the chat
 
 Usage:
   tfa-cli show <file|-> [todo-id]     Render a file by mimetype (- reads stdin)
-                                      [--title T] [--alias A] [--mime M] [--card <name>] [--link] [--json]
+                                      [--title T] [--alias A] [--mime M] [--card <name>] [--link] [--force] [--json]
                                       --link: compact download chip instead of inline render
+                                      Refuses a likely-truncated image (JPEG/PNG cut before the end marker, WebP shorter than its RIFF size); --force shows it anyway
                                       Prints "<todoId>:<alias|id>". Private: visible to whoever can read the todo.
                                       Re-showing with the same --alias updates the block in place (new version)
                                       --alias <todoId>:<alias> updates that todo's block instead,
@@ -50279,6 +50402,13 @@ Usage:
 
 todo-id defaults to $TODOFORAI_TODO_ID (agent shell) or the last todo this CLI touched.
 
+Viewer chrome:
+  --title appears in the header; a kebab menu holds file actions, versions and sharing when available.
+  Desktop floating previews add minimize (park in a tab), maximize/restore and close (X).
+  Inline blocks have no window controls. Do not draw these controls or a duplicate title bar in authored HTML.
+  The floating viewer owns the rounded frame. Keep the HTML root flat, without a border, radius, shadow or outer margin;
+  internal content padding and spacing are fine. Existing files and websites keep their own styling.
+
 When to use what:
   read once, move on             → plain chat reply
   interactive, this chat only    → html_snippet (can exec/connect/chat back)
@@ -50342,10 +50472,12 @@ function parseCliArgs() {
       mime: { type: "string" },
       card: { type: "string" },
       link: { type: "boolean", default: false },
+      force: { type: "boolean", default: false },
       direction: { type: "string" },
       url: { type: "string" },
       account: { type: "string" },
       "from-company": { type: "boolean", default: false },
+      scope: { type: "string" },
       "dry-run": { type: "boolean", default: false },
       max: { type: "string" },
       seed: { type: "string" },
@@ -50370,6 +50502,7 @@ function parseCliArgs() {
       "no-edge": { type: "boolean", default: false },
       json: { type: "boolean", default: false },
       detailed: { type: "boolean", default: false },
+      full: { type: "boolean", default: false },
       "format-anthropic": { type: "boolean", default: false },
       safe: { type: "boolean", default: false },
       debug: { type: "boolean", short: "d", default: false },
@@ -51268,7 +51401,8 @@ function getFrontendUrl(apiUrl, todoId) {
 }
 
 // src/inspect.ts
-var xmlAttr = (v) => JSON.stringify(String(v));
+var str = (v) => typeof v === "string" ? v : JSON.stringify(v);
+var xmlAttr = (v) => JSON.stringify(str(v));
 var DROP_IF_EMPTY = new Set(["runMeta", "meta", "attachments", "blocks"]);
 var ALWAYS_DROP = new Set(["messageIds", "data"]);
 var DETAILED_ONLY = new Set([
@@ -51349,15 +51483,20 @@ function blockToAnthropic(block, mode, format) {
     const msg = block.error_message || block.content || "(unknown error)";
     return [{ type: "text", text: `[error] ${msg}` }];
   }
+  const name = t === "named_tool" ? block.tool_name === "run_shell" ? "bash" : block.tool_name : t;
   const inputFields = [];
   for (const [k, v] of Object.entries(block)) {
-    if (BLOCK_META_KEYS.has(k))
+    if (BLOCK_META_KEYS.has(k) || k === "args" || t === "named_tool" && k === "tool_name")
       continue;
     if (v === undefined || v === null || v === "")
       continue;
     inputFields.push([k, v]);
   }
-  const use = format === "anthropic" ? { type: "tool_use", id: block.id, name: t, input: Object.fromEntries(inputFields) } : { type: "tool_use", content: `<${t}${inputFields.map(([k, v]) => ` ${k}=${xmlAttr(v)}`).join("")}/>` };
+  for (const [k, v] of Object.entries(block.args ?? {})) {
+    if (!inputFields.some(([key]) => key === k))
+      inputFields.push([k, v]);
+  }
+  const use = format === "anthropic" ? { type: "tool_use", id: block.id, name, input: Object.fromEntries(inputFields) } : { type: "tool_use", content: `<${name}${inputFields.map(([k, v]) => ` ${k}=${xmlAttr(v)}`).join("")}/>` };
   if (format === "compact" && mode !== "default")
     use.id = block.id;
   const items = [use];
@@ -51373,8 +51512,9 @@ function blockToAnthropic(block, mode, format) {
             source.name = att.originalName;
           parts.push({ type: isImage ? "image" : "document", source });
         }
-        if (typeof r.content === "string" && r.content)
-          parts.push({ type: "text", text: r.content });
+        const text = r.content || r.meta?.text;
+        if (typeof text === "string" && text)
+          parts.push({ type: "text", text });
         return parts;
       });
       const result = { type: "tool_result", tool_use_id: block.id };
@@ -51391,8 +51531,9 @@ function blockToAnthropic(block, mode, format) {
           const nameAttr = att.originalName && !isAutoName ? ` name=${xmlAttr(att.originalName)}` : "";
           parts.push(`<attachment uri=${xmlAttr(att.uri)}${nameAttr} size=${att.fileSize}/>`);
         }
-        if (typeof r.content === "string" && r.content)
-          parts.push(r.content);
+        const text = r.content || r.meta?.text;
+        if (typeof text === "string" && text)
+          parts.push(text);
       }
       const result = { type: "tool_result", content: parts.join(`
 `) };
@@ -51494,12 +51635,14 @@ function applySlice(arr, spec) {
     throw new Error(`Bad slice: '${spec}'`);
   return arr.slice(start, end);
 }
-var trunc = (s, n) => s.length > n ? s.slice(0, n) + `
-${DIM}... (${s.length} chars)${RESET}` : s;
+var truncAt = (s, n) => s.length > n ? s.slice(0, n) + `
+${DIM}... (${s.length} chars, --full for all)${RESET}` : s;
 var indent = (s, pre) => s.split(`
 `).join(`
 ${pre}`);
-function printFullChat(todo, frontendUrl, slice, mode = "default", format = "compact") {
+function printFullChat(todo, frontendUrl, slice, mode = "default", format = "compact", full = false) {
+  const out = (s) => process.stdout.write(s);
+  const trunc = (s, n) => full ? s : truncAt(s, n);
   const statusColors = {
     DONE: GREEN,
     READY: GREEN,
@@ -51513,34 +51656,34 @@ function printFullChat(todo, frontendUrl, slice, mode = "default", format = "com
     TODO: CYAN
   };
   const statusColor = statusColors[todo.status] || DIM;
-  process.stderr.write(`${BOLD}TODO${RESET} ${todo.id}
+  out(`${BOLD}TODO${RESET} ${todo.id}
 `);
-  process.stderr.write(`${DIM}Status:${RESET} ${statusColor}${todo.status}${RESET}
+  out(`${DIM}Status:${RESET} ${statusColor}${todo.status}${RESET}
 `);
-  process.stderr.write(`${DIM}URL:${RESET}    ${CYAN}${frontendUrl}${RESET}
+  out(`${DIM}URL:${RESET}    ${CYAN}${frontendUrl}${RESET}
 `);
-  process.stderr.write(`${DIM}Created:${RESET} ${new Date(todo.createdAt).toLocaleString()}
+  out(`${DIM}Created:${RESET} ${new Date(todo.createdAt).toLocaleString()}
 `);
   if (todo.agentSettingsId)
-    process.stderr.write(`${DIM}Agent:${RESET}  ${todo.agentSettingsId}
+    out(`${DIM}Agent:${RESET}  ${todo.agentSettingsId}
 `);
   if (slice)
-    process.stderr.write(`${DIM}Slice:${RESET}  [${slice}]
+    out(`${DIM}Slice:${RESET}  [${slice}]
 `);
-  process.stderr.write("─".repeat(60) + `
+  out("─".repeat(60) + `
 `);
   let messages = todo.messages || [];
   if (slice) {
     try {
       messages = applySlice(messages, slice);
     } catch (e) {
-      process.stderr.write(`${RED}${e.message}${RESET}
+      out(`${RED}${e.message}${RESET}
 `);
       process.exit(2);
     }
   }
   if (!messages.length) {
-    process.stderr.write(`${DIM}(no messages)${RESET}
+    out(`${DIM}(no messages)${RESET}
 `);
     return;
   }
@@ -51551,33 +51694,33 @@ function printFullChat(todo, frontendUrl, slice, mode = "default", format = "com
     const orig = messages[i];
     const ts = mode !== "default" && orig?.createdAt ? ` ${DIM}${new Date(orig.createdAt).toLocaleTimeString()}${RESET}` : "";
     const label = msg.role === "user" ? `${CYAN}▶ USER${RESET}` : `${GREEN}◀ ASSISTANT${RESET}`;
-    process.stderr.write(`
+    out(`
 ${label}${ts}
 `);
     const items = Array.isArray(msg.content) ? msg.content : [{ type: "text", text: msg.content }];
     for (const it of items) {
       if (it.type === "text") {
         if (it.text)
-          process.stdout.write(trunc(it.text, 2000) + `
+          out(trunc(it.text, 2000) + `
 `);
       } else if (it.type === "image" || it.type === "document") {
         const s = it.source ?? {};
-        process.stderr.write(`  ${YELLOW}[${it.type}]${RESET} ${DIM}${s.mimeType ?? ""}${RESET} ${s.name ?? ""} ${DIM}(${s.size ?? "?"} bytes)${RESET}
+        out(`  ${YELLOW}[${it.type}]${RESET} ${DIM}${s.mimeType ?? ""}${RESET} ${s.name ?? ""} ${DIM}(${s.size ?? "?"} bytes)${RESET}
   ${DIM}${s.uri ?? ""}${RESET}
 `);
       } else if (it.type === "thinking") {
         if (it.thinking)
-          process.stderr.write(`${DIM}[thinking]${RESET} ${trunc(it.thinking, 500)}
+          out(`${DIM}[thinking]${RESET} ${trunc(it.thinking, 500)}
 `);
       } else if (it.type === "tool_use") {
         toolUseCount++;
         if (it.content) {
-          process.stderr.write(`  ${YELLOW}${trunc(it.content, 200)}${RESET}
+          out(`  ${YELLOW}${trunc(it.content, 200)}${RESET}
 `);
         } else {
-          const argStr = Object.entries(it.input || {}).map(([k, v]) => `${DIM}${k}=${RESET}${String(v).split(`
+          const argStr = Object.entries(it.input || {}).map(([k, v]) => `${DIM}${k}=${RESET}${full ? str(v) : str(v).split(`
 `)[0].slice(0, 80)}`).join(" ");
-          process.stderr.write(`  ${YELLOW}[${it.name}]${RESET} ${argStr}
+          out(`  ${YELLOW}[${it.name}]${RESET} ${argStr}
 `);
         }
       } else if (it.type === "tool_result") {
@@ -51600,15 +51743,15 @@ ${label}${ts}
           }).join(`
 `);
         }
-        process.stderr.write(`  ${DIM}└─ result:${RESET}${status} ${indent(trunc(bodyStr, 500), `     ${DIM}│${RESET} `)}
+        out(`  ${DIM}└─ result:${RESET}${status} ${indent(trunc(bodyStr, 500), `     ${DIM}│${RESET} `)}
 `);
       }
     }
   }
-  process.stderr.write(`
+  out(`
 ` + "─".repeat(60) + `
 `);
-  process.stderr.write(`${DIM}Messages: ${shaped.length} | Tool calls: ${toolUseCount} | Tool errors: ${errorCount}${RESET}
+  out(`${DIM}Messages: ${shaped.length} | Tool calls: ${toolUseCount} | Tool errors: ${errorCount}${RESET}
 `);
 }
 
@@ -52616,6 +52759,7 @@ function renderDiff(originalContent, modifiedContent, filePath) {
 
 // src/shutdown.ts
 var activeRun = null;
+var stopOnExit = false;
 var cleanups = [];
 var exiting = null;
 var cancelling = null;
@@ -52623,6 +52767,9 @@ var CANCEL_TIMEOUT_MS = 5000;
 function setActiveRun(run) {
   activeRun = run;
 }
+var stopsRunOnExit = () => stopOnExit;
+var detachNotice = (todoId) => `Todo keeps running — reattach: tfa-cli --resume ${todoId}
+`;
 function withTimeout(p, ms, fallback) {
   let timer;
   const timeout = new Promise((r) => {
@@ -52634,7 +52781,7 @@ function cancelActiveRun(timeoutMs = CANCEL_TIMEOUT_MS) {
   if (cancelling)
     return cancelling;
   const pending = activeRun;
-  if (!pending)
+  if (!pending || !stopOnExit)
     return Promise.resolve({ ok: false, todoId: null });
   const res = { ok: false };
   const attempt = (async () => {
@@ -52660,7 +52807,11 @@ function shutdown(code, reason) {
       process.stderr.write(`
 ${reason}
 `);
-    if (activeRun) {
+    if (activeRun && !stopOnExit) {
+      const run = await withTimeout(Promise.resolve(activeRun), CANCEL_TIMEOUT_MS, null);
+      if (run)
+        process.stderr.write(detachNotice(run.todoId));
+    } else if (activeRun) {
       const { ok, todoId } = await cancelActiveRun();
       if (ok)
         process.stderr.write(`Stopped todo ${todoId}
@@ -52772,20 +52923,6 @@ async function watchTodo(ws, todoId, projectId, opts = {}) {
   diffStoreByWs.set(ws, diffStore);
   const diffRendered = new Set;
   let approveAll = !!opts.autoApprove;
-  let interruptCount = 0;
-  const origHandler = process.listeners("SIGINT").slice();
-  process.removeAllListeners("SIGINT");
-  process.on("SIGINT", () => {
-    interruptCount++;
-    if (opts.exitOnInterrupt || interruptCount >= 2)
-      return void shutdown(130, "Cancelled by user (Ctrl+C)");
-    process.stderr.write(`
-${YELLOW}Interrupting... (Ctrl+C again to force exit)${RESET}
-`);
-    if (opts.interruptOnCancel !== false) {
-      ws.sendInterrupt(projectId, todoId);
-    }
-  });
   const pendingBlocks = [];
   let approvalPromptActive = false;
   let activeApprovalBlocks = [];
@@ -53008,14 +53145,10 @@ ${YELLOW}Connection lost — reconnecting...${RESET}
     await cancelActiveRun();
     process.exitCode = 1;
     if (!opts.suppressCancelNotice) {
-      process.stderr.write(`${YELLOW}Interrupted${RESET}
-`);
+      process.stderr.write(stopsRunOnExit() ? `${YELLOW}Interrupted${RESET}
+` : detachNotice(todoId));
     }
     return false;
-  } finally {
-    process.removeAllListeners("SIGINT");
-    for (const fn of origHandler)
-      process.on("SIGINT", fn);
   }
 }
 
@@ -53584,6 +53717,8 @@ Usage:
   tfa-cli project settings <field=value>…          Project settings (PUT /settings/projects/{id})
   tfa-cli project groups                           List todo groups
   tfa-cli project groups set <slug> <field=value>… Create/update a group: name description pinned archived order
+  tfa-cli project groups intake <slug> [on|off|regenerate] [field=value]…
+                                                   Public intake: autoStart maxSubmissions postIpLimit placeholder agentSettingsId
   tfa-cli project groups reorder <slug>…           Set wall order
   tfa-cli project surfaces                         List the board's card surfaces (live refs shown as cards)
   tfa-cli project surfaces set <id> ref=<ref> [title=…] [group=<slug>] [order=N]
@@ -53748,6 +53883,25 @@ async function projectCommand(api, positionals, args, projectId) {
 `);
       return;
     }
+    if (verb === "intake") {
+      const [slug, ...options] = gargs;
+      if (!slug)
+        fail("Usage: tfa-cli project groups intake <slug> [on|off|regenerate] [field=value]…");
+      const action = ["on", "off", "regenerate"].includes(options[0]) ? options.shift() : undefined;
+      if (options.length && action === "regenerate")
+        fail("regenerate does not accept settings");
+      const fields = parseAssignments2(options);
+      const intake = action === "regenerate" ? await api.regenerateProjectGroupIntake(projectId, slug) : action || options.length ? await api.updateProjectGroupIntake(projectId, slug, { ...fields, ...action && { enabled: action === "on" } }) : await api.getProjectGroupIntake(projectId, slug);
+      if (args.json) {
+        console.log(JSON.stringify(intake, null, 2));
+        return;
+      }
+      process.stderr.write(`${slug}: public ${intake.enabled ? "on" : "off"}, ${intake.submissionCount}/${intake.maxSubmissions}, autoStart=${intake.autoStart}
+`);
+      if (intake.url)
+        console.log(intake.url);
+      return;
+    }
     if (verb === "reorder") {
       if (!gargs.length)
         fail("Usage: tfa-cli project groups reorder <slug>…");
@@ -53823,6 +53977,11 @@ Usage:
   tfa-cli brand voice correct "<what is off>"      Tell the learner what it got wrong; profile is updated
                                                    in one pass and the correction is kept for every re-learn
 
+  Every voice verb takes --scope mine|project — which voice to teach:
+    mine      yours, only in this project (default)
+    project   the project's, shared with its members (needs write access)
+  On the same voice name the narrower wins: mine > project.
+
 
 Questions the UI asks (keys for 'answers'):
   "What makes you different from competitors?"
@@ -53921,10 +54080,13 @@ async function voiceDeviceCommand(rest, args) {
 }
 async function voiceCommand(api, projectId, rest, args) {
   const [verb, ...vargs] = rest;
+  const scope = args.scope ?? "mine";
+  if (!["project", "mine"].includes(scope))
+    fail(`--scope must be mine or project, got '${scope}'`);
   if (verb === "collect" && !vargs[0])
     fail("Usage: tfa-cli brand voice collect <channel> [--url U | --account <page-id> | --max N] [--dry-run]");
   if (verb === "answers") {
-    const answers = manualAnswersOf((await api.listVoiceSources(projectId)).sources);
+    const answers = manualAnswersOf((await api.listVoiceSources(projectId, scope)).sources);
     if (vargs.length) {
       for (const a of vargs) {
         const i = a.indexOf("=");
@@ -53932,7 +54094,7 @@ async function voiceCommand(api, projectId, rest, args) {
           fail(`Expected question=answer, got '${a}'`);
         answers[a.slice(0, i)] = a.slice(i + 1);
       }
-      await api.collectVoiceSource(projectId, MANUAL_CHANNEL, { samples: manualSamples(answers) });
+      await api.collectVoiceSource(projectId, MANUAL_CHANNEL, { samples: manualSamples(answers), scope });
       process.stderr.write(`${GREEN}✅ ${vargs.length} answer(s) saved${RESET}
 `);
       return;
@@ -53948,7 +54110,7 @@ async function voiceCommand(api, projectId, rest, args) {
     return;
   }
   if (!verb || verb === "show") {
-    const [{ sources, profile }, brand] = await Promise.all([api.listVoiceSources(projectId), api.getBusinessContext(projectId)]);
+    const [{ sources, profile }, brand] = await Promise.all([api.listVoiceSources(projectId, scope), api.getBusinessContext(projectId)]);
     if (args.json) {
       console.log(JSON.stringify({ brand, profile, sources }, null, 2));
       return;
@@ -53979,12 +54141,12 @@ ${DIM}match ${profile.match}/100 · source ${profile.source}${RESET}
       const { samples, note } = collectChannel(channel, Number(args.max ?? 40));
       if (!samples.length)
         fail(`${channel}: nothing usable came back${note ? ` (${note})` : ""}`);
-      const { sources: sources2 } = await api.collectVoiceSource(projectId, channel, { samples });
+      const { sources: sources2 } = await api.collectVoiceSource(projectId, channel, { samples, scope });
       process.stderr.write(`${GREEN}✅ ${channel}: ${samples.length} reply pairs stored (${sources2.length} source(s))${RESET}
 `);
       return;
     }
-    const { sources } = await api.collectVoiceSource(projectId, channel, { url: args.url, account: args.account });
+    const { sources } = await api.collectVoiceSource(projectId, channel, { url: args.url, account: args.account, scope });
     process.stderr.write(`${GREEN}✅ ${channel} collected (${sources.length} source(s))${RESET}
 `);
     return;
@@ -53992,7 +54154,7 @@ ${DIM}match ${profile.match}/100 · source ${profile.source}${RESET}
   if (verb === "remove") {
     if (!vargs[0])
       fail("Usage: tfa-cli brand voice remove <channel> [--account <id>]   (no --account: every source of the channel)");
-    await api.removeVoiceSource(projectId, vargs[0], args.account ? { account: args.account } : { all: true });
+    await api.removeVoiceSource(projectId, vargs[0], { ...args.account ? { account: args.account } : { all: true }, scope });
     process.stderr.write(`${GREEN}✅ ${vargs[0]} removed${RESET}
 `);
     return;
@@ -54000,7 +54162,7 @@ ${DIM}match ${profile.match}/100 · source ${profile.source}${RESET}
   if (verb === "learn") {
     process.stderr.write(`${DIM}learning voice…${RESET}
 `);
-    const res = await api.refineBrandVoice(projectId, args["from-company"] ? "company" : undefined);
+    const res = await api.refineBrandVoice(projectId, args["from-company"] ? "company" : undefined, undefined, scope);
     if (!res.profile)
       fail(args["from-company"] ? "No brand page to learn from — 'tfa-cli brand create <name>' and fill it first" : "Nothing to learn from — add answers, collect a source, or fill the brand page first");
     if (args.json) {
@@ -54016,11 +54178,11 @@ ${res.profile}
     const text = vargs.join(" ").trim();
     if (!text)
       fail('Usage: tfa-cli brand voice correct "<what is off>"');
-    if (!(await api.listVoiceSources(projectId)).profile?.profile)
+    if (!(await api.listVoiceSources(projectId, scope)).profile?.profile)
       fail("No voice learned yet — 'tfa-cli brand voice learn' first");
     process.stderr.write(`${DIM}applying correction…${RESET}
 `);
-    const res = await api.refineBrandVoice(projectId, undefined, text);
+    const res = await api.refineBrandVoice(projectId, undefined, text, scope);
     if (!res.profile)
       fail("The correction pass returned nothing — try rewording it");
     if (args.json) {
@@ -54047,6 +54209,7 @@ Usage:
   tfa-cli device access <device>               who you shared the device with
   tfa-cli device share <device> <email>        let a teammate use it (their runs act as THEM)
   tfa-cli device unshare <device> <email>
+  tfa-cli device leave <device>                remove your own access to a shared device
 
 <device> is an id, name or hostname (unique partial works).
 Devices shared with you are marked "shared"; only the owner can rename/share them.
@@ -54083,6 +54246,12 @@ async function deviceCommand(api, positionals, args) {
       fail("Usage: tfa-cli device rename <device> <name>");
     await api.renameDevice(found.id, value);
     process.stderr.write(`${GREEN}✅ ${found.name} → ${value}${RESET}
+`);
+    return;
+  }
+  if (sub === "leave") {
+    await api.leaveDevice(found.id);
+    process.stderr.write(`${GREEN}✅ Removed ${found.name} from your devices${RESET}
 `);
     return;
   }
@@ -54132,15 +54301,7 @@ var STATUS_COLOR = {
   POSTPONED: CYAN,
   PAUSED: CYAN
 };
-var CLOSED = new Set([
-  "DONE",
-  "READY_CHECKED",
-  "CANCELLED",
-  "CANCELLED_CHECKED",
-  "ERROR_CHECKED",
-  "ARCHIVED",
-  "DELETED"
-]);
+var CLOSED = new Set(CLOSED_STATUSES);
 var VALID_STATUS = new Set(Object.values(TodoStatus));
 var isOpen = (s) => !CLOSED.has(s);
 function printListTodosHelp() {
@@ -54152,11 +54313,16 @@ Usage:
 
 Flags:
   -n, --limit <n>          Max rows to show (default: 30)
-      --cursor <n>         Fetch todos older than this cursor (lastActivityAt)
-      --page-size <n>      Backend page size per request (default: min(limit, 100), max: 100)
+      --cursor <n>         Fetch todos older than this cursor (sort field, epoch ms)
+      --since <t>          Only todos with sort field >= t (inclusive)
+      --until <t>          Only todos with sort field < t (exclusive)
+                           t = epoch ms | YYYY-MM-DD (local midnight) | ISO datetime | 12h / 3d ago
+      --sort <key>         activity (lastActivityAt, default) | created (createdAt)
+      --contributor <u>    Only todos a member opened/wrote in (id or email; comma = any)
+      --page-size <n>      Backend page size per request (default: min(limit, 400), max: 400)
       --search <text>      Search content/status on the backend
   -s, --status <S[,S2]>    Filter by status (comma-separated, union).
-  -A, --all                Include DONE (also CANCELLED, ARCHIVED, …)
+  -A, --all                Include closed (DONE, ARCHIVED, DELETED)
       --project <id>       Project ID (default: current default project)
       --json               Output { items, nextCursor } as JSON
   -h, --help               Show this help
@@ -54167,6 +54333,8 @@ Examples:
   todoforai-cli list --cursor 1719234567890  # next page
   todoforai-cli list --all                   # include DONE
   todoforai-cli list -s RUNNING,REVIEW_REQUESTED
+  todoforai-cli list -A --since 2026-10-11 --until 2026-10-12   # touched that day
+  todoforai-cli list -A --sort created --since 7d --contributor a@b.com
   todoforai-cli list --search bug --json | jq '.items[].id'
 `);
 }
@@ -54192,6 +54360,25 @@ function cursorValue(value) {
   }
   return n;
 }
+function parseTime(value, name, now = Date.now()) {
+  if (value === undefined)
+    return;
+  const s = String(value).trim();
+  const rel = s.match(/^(\d+)([mhd])$/);
+  let n;
+  if (/^\d+$/.test(s))
+    n = Number(s);
+  else if (rel)
+    n = now - Number(rel[1]) * { m: 60000, h: 3600000, d: 86400000 }[rel[2]];
+  else
+    n = Date.parse(/^\d{4}-\d{2}-\d{2}$/.test(s) ? `${s}T00:00` : s);
+  if (!Number.isFinite(n) || n < 0) {
+    process.stderr.write(`${RED}Error: ${name} must be epoch ms, YYYY-MM-DD, ISO datetime or e.g. 12h / 3d${RESET}
+`);
+    process.exit(2);
+  }
+  return n;
+}
 function toItemsPage(response) {
   if (Array.isArray(response))
     return { items: response };
@@ -54200,8 +54387,25 @@ function toItemsPage(response) {
     nextCursor: typeof response?.nextCursor === "number" ? response.nextCursor : undefined
   };
 }
-function rowTime(t) {
-  return Number(t.lastActivityAt ?? t.createdAt ?? 0);
+function rowTime(t, sort = "activity") {
+  return Number((sort === "created" ? t.createdAt : t.lastActivityAt ?? t.createdAt) ?? 0);
+}
+async function resolveContributors(api, projectId, raw) {
+  const wanted = raw.split(",").map((s) => s.trim()).filter(Boolean);
+  if (!wanted.some((w) => w.includes("@")))
+    return wanted;
+  const members = await api.getProjectMembers(projectId);
+  return wanted.map((w) => {
+    if (!w.includes("@"))
+      return w;
+    const m = members.find((m2) => m2.email?.toLowerCase() === w.toLowerCase());
+    if (!m) {
+      process.stderr.write(`${RED}Error: no project member with email ${w}${RESET}
+`);
+      process.exit(2);
+    }
+    return m.id;
+  });
 }
 function printStatusError(unknown) {
   process.stderr.write(`${RED}Error: unknown status ${unknown.map((s) => `'${s}'`).join(", ")}${RESET}
@@ -54224,6 +54428,10 @@ async function listTodosCommand(api, defaultProjectId, argv) {
       cursor: { type: "string" },
       "page-size": { type: "string" },
       search: { type: "string" },
+      since: { type: "string" },
+      until: { type: "string" },
+      sort: { type: "string" },
+      contributor: { type: "string" },
       status: { type: "string", short: "s" },
       all: { type: "boolean", short: "A", default: false },
       project: { type: "string" },
@@ -54243,9 +54451,20 @@ async function listTodosCommand(api, defaultProjectId, argv) {
     process.exit(1);
   }
   const limit = positiveInt(values.limit, "--limit") ?? 30;
-  const pageSize = Math.min(positiveInt(values["page-size"], "--page-size") ?? Math.min(Math.max(limit, 1), 100), 100);
+  const pageSize = Math.min(positiveInt(values["page-size"], "--page-size") ?? Math.min(Math.max(limit, 1), 400), 400);
+  const sort = values.sort === undefined ? "activity" : String(values.sort);
+  if (sort !== "activity" && sort !== "created") {
+    process.stderr.write(`${RED}Error: --sort must be activity or created${RESET}
+`);
+    process.exit(2);
+  }
+  const since = parseTime(values.since, "--since");
+  const until = parseTime(values.until, "--until");
   let cursor = cursorValue(values.cursor);
+  if (until !== undefined)
+    cursor = cursor === undefined ? until : Math.min(cursor, until);
   const search = values.search ? String(values.search) : undefined;
+  const contributorIds = values.contributor ? await resolveContributors(api, projectId, String(values.contributor)) : undefined;
   const requested = values.status ? String(values.status).split(",").map((s) => s.trim().toUpperCase()).filter(Boolean) : null;
   const unknown = requested?.filter((s) => s !== "OPEN" && !VALID_STATUS.has(s)) ?? [];
   if (unknown.length)
@@ -54257,9 +54476,24 @@ async function listTodosCommand(api, defaultProjectId, argv) {
   let backendNextCursor;
   while (rows.length < limit) {
     const requestLimit = Math.min(pageSize, limit - rows.length);
-    const page = toItemsPage(await api.listTodos(projectId, { limit: requestLimit, cursor, search }));
+    const page = toItemsPage(await api.listTodos(projectId, {
+      limit: requestLimit,
+      cursor,
+      search,
+      since,
+      contributorIds,
+      ...!includeClosed && { excludeClosed: true },
+      ...sort !== "activity" && { sort }
+    }));
     backendNextCursor = page.nextCursor;
+    let exhausted = false;
     for (const t of page.items) {
+      if (since !== undefined && rowTime(t) < since) {
+        exhausted = true;
+        break;
+      }
+      if (since !== undefined && rowTime(t, sort) < since)
+        continue;
       const status = String(t.status).toUpperCase();
       if (!includeClosed && CLOSED.has(status))
         continue;
@@ -54269,14 +54503,18 @@ async function listTodosCommand(api, defaultProjectId, argv) {
       if (rows.length >= limit)
         break;
     }
+    if (exhausted) {
+      backendNextCursor = undefined;
+      break;
+    }
     if (!backendNextCursor || page.items.length === 0)
       break;
     cursor = backendNextCursor;
   }
-  rows.sort((a, b) => rowTime(b) - rowTime(a));
+  rows.sort((a, b) => rowTime(b, sort) - rowTime(a, sort));
   const visible = rows.slice(0, limit);
   const hasBufferedRows = rows.length > visible.length;
-  const nextCursor = visible.length && (backendNextCursor !== undefined || hasBufferedRows) ? rowTime(visible[visible.length - 1]) : undefined;
+  const nextCursor = visible.length && (backendNextCursor !== undefined || hasBufferedRows) ? rowTime(visible[visible.length - 1], sort) : undefined;
   if (values.json) {
     process.stdout.write(JSON.stringify({ items: visible, nextCursor }, null, 2) + `
 `);
@@ -54294,7 +54532,7 @@ async function listTodosCommand(api, defaultProjectId, argv) {
   for (const t of visible) {
     const status = String(t.status).toUpperCase();
     const sc = STATUS_COLOR[status] || DIM;
-    const ts = new Date(rowTime(t)).toISOString().slice(0, 16).replace("T", " ");
+    const ts = new Date(rowTime(t, sort)).toISOString().slice(0, 16).replace("T", " ");
     const title = String(t.content ?? "").split(`
 `)[0].slice(0, 100);
     process.stdout.write(`${sc}${status.padEnd(statusW)}${RESET}  ${DIM}${ts}${RESET}  ${t.id}  ${title}
@@ -55182,21 +55420,26 @@ tfa-cli memory — memory and context folders as git checkouts
 
 Usage:
   tfa-cli memory sync [--project <id>]   Clone, or pull, into:
-      ~/.todoforai/{memory,context}                 yours          (todoforai:memory, todoforai:context)
-      ~/.todoforai/projects/<id>/{memory,context}   the project's  (todoforai:projects/<id>/…)
+      ~/.todoforai/projects/<id>/{memory,context}      the project's    (todoforai:projects/<id>/…)
+      ~/.todoforai/projects/<id>/me/{memory,context}   yours in it      (todoforai:projects/<id>/me/…)
   tfa-cli memory path [--project <id>]   Print the checkout paths
 
 Every change to these folders is committed on the server, from any client. In a checkout
 use plain git: log, diff, show, revert, commit, then \`git push\` — the push updates the live
 folder. A push behind the server is refused: \`git pull\` first. Files over 5 MB live outside
-history (upload them instead). Project folders: members with write access push. The project
-defaults to $TODOFORAI_PROJECT_ID.
+history (upload them instead). Project folders: members with write access push; your own in
+a project (me/) is private to you. The project
+defaults to $TODOFORAI_PROJECT_ID and is required. Legacy global folders are read-only
+recovery, not synced.
 `);
 }
 var FOLDERS = ["memory", "context"];
 function checkouts(projectId) {
   const root = join5(homedir5(), ".todoforai");
-  const scopes = [[root, ""], ...projectId ? [[join5(root, "projects", projectId), `projects/${projectId}/`]] : []];
+  if (!projectId)
+    throw new Error("Select a project with --project <id> or $TODOFORAI_PROJECT_ID.");
+  const project = join5(root, "projects", projectId);
+  const scopes = [[project, `projects/${projectId}/`], [join5(project, "me"), `projects/${projectId}/me/`]];
   return scopes.flatMap(([dir, remote]) => FOLDERS.map((f) => [join5(dir, f), `${remote}${f}.git`]));
 }
 function git(args, cwd) {
@@ -56157,6 +56400,7 @@ __export(exports_util, {
   toZod: () => toZod,
   stringifyPrimitive: () => stringifyPrimitive,
   slugify: () => slugify,
+  sizeCaps: () => sizeCaps,
   shallowClone: () => shallowClone,
   safeExtend: () => safeExtend,
   required: () => required,
@@ -56399,14 +56643,14 @@ function promiseAllObject(promisesObj) {
 }
 function randomString(length = 10) {
   const chars = "abcdefghijklmnopqrstuvwxyz";
-  let str = "";
+  let str2 = "";
   for (let i = 0;i < length; i++) {
-    str += chars[Math.floor(Math.random() * chars.length)];
+    str2 += chars[Math.floor(Math.random() * chars.length)];
   }
-  return str;
+  return str2;
 }
-function esc(str) {
-  return JSON.stringify(str);
+function esc(str2) {
+  return JSON.stringify(str2);
 }
 function slugify(input) {
   return input.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -56519,8 +56763,8 @@ var primitiveTypes = /* @__PURE__ */ new Set([
   "symbol",
   "undefined"
 ]);
-function escapeRegex(str) {
-  return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function escapeRegex(str2) {
+  return str2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 function clone(inst, def, params) {
   const cl = new inst._zod.constr(def ?? inst._zod.def);
@@ -56731,6 +56975,18 @@ function prefixIssues(path4, issues) {
 function unwrapMessage(message) {
   return typeof message === "string" ? message : message?.message;
 }
+function sizeCaps(defChecks) {
+  const caps = [];
+  for (const ch of defChecks ?? []) {
+    const d = ch._zod.def;
+    if (!/_(length|size)$|_equals$/.test(d.check))
+      break;
+    const max = d.maximum ?? d.length ?? d.size;
+    if (max >= 0)
+      caps.push([max, ch]);
+  }
+  return caps;
+}
 function attachSchema(issues, start, inst) {
   var _a;
   for (let i = start;i < issues.length; i++) {
@@ -56771,13 +57027,13 @@ function getSizableOrigin(input) {
   return "unknown";
 }
 var highSurrogate = /[\uD800-\uDBFF]/;
-function codePointLength(str) {
-  const units = str.length;
-  if (!highSurrogate.test(str))
+function codePointLength(str2) {
+  const units = str2.length;
+  if (!highSurrogate.test(str2))
     return units;
   let count = units;
   for (let i = 0;i < units - 1; i++) {
-    if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) {
+    if ((str2.charCodeAt(i) & 64512) === 55296 && (str2.charCodeAt(i + 1) & 64512) === 56320) {
       count--;
       i++;
     }
@@ -58150,7 +58406,7 @@ ${content.join(`
 var version = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js
@@ -58899,6 +59155,31 @@ var $ZodDate = /* @__PURE__ */ $constructor("$ZodDate", (inst, def) => {
     return payload;
   };
 });
+function capSize(inst, size) {
+  const caps = sizeCaps(inst._zod.def.checks);
+  if (!caps.length)
+    return;
+  const cap = Math.min(...caps.map((c3) => c3[0]));
+  const parse2 = inst._zod.parse;
+  inst._zod.parse = (payload, ctx) => {
+    const n = size(payload.value);
+    if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+      for (const [max, ch] of sizeCaps(inst._zod.def.checks)) {
+        if (n > max && ch._zod.def.when(payload)) {
+          const start = payload.issues.length;
+          ch._zod.check(payload);
+          payload.issues[start].continue = false;
+          attachSchema(payload.issues, start, inst);
+          return payload;
+        }
+      }
+    }
+    return parse2(payload, ctx);
+  };
+}
+var arraySize = (input) => Array.isArray(input) ? input.length : -1;
+var mapSize = (input) => input instanceof Map ? input.size : -1;
+var setSize = (input) => input instanceof Set ? input.size : -1;
 function handleArrayResult(result, final, index) {
   if (result.issues.length) {
     final.issues.push(...prefixIssues(index, result.issues));
@@ -58942,6 +59223,7 @@ var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
     }
     return payload;
   };
+  capSize(inst, arraySize);
 });
 function handlePropertyResult(result, final, key, input, optin, optout) {
   const isPresent = key in input;
@@ -59896,6 +60178,7 @@ var $ZodMap = /* @__PURE__ */ $constructor("$ZodMap", (inst, def) => {
       return Promise.all(proms).then(() => payload);
     return payload;
   };
+  capSize(inst, mapSize);
 });
 function handleMapResult(keyResult, valueResult, final, key, input, inst, ctx) {
   if (keyResult.issues.length) {
@@ -59962,6 +60245,7 @@ var $ZodSet = /* @__PURE__ */ $constructor("$ZodSet", (inst, def) => {
       return Promise.all(proms).then(() => payload);
     return payload;
   };
+  capSize(inst, setSize);
 });
 function handleSetResult(result, final) {
   if (result.issues.length) {
@@ -69411,9 +69695,15 @@ function generateNullableCheck(doc, ctx, schema, accessor, buildsValue = true) {
   doc.write(`}`);
   return outputVar;
 }
+function generateSizeGate(doc, schema, size) {
+  for (const [max, check] of sizeCaps(schema._zod.def.checks)) {
+    doc.write(`if (${size} > ${numericOperand(max, check._zod.def.check)}) return INVALID;`);
+  }
+}
 function generateArrayCheck(doc, ctx, schema, accessor, buildsValue = true) {
   const def = schema._zod.def;
   doc.write(`if (!Array.isArray(${accessor})) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.length`);
   const outputVar = buildsValue ? newVar(ctx) : null;
   const iVar = newVar(ctx);
   const elemVar = newVar(ctx);
@@ -69813,6 +70103,7 @@ function literalPropertyKey(ctx, key) {
 function generateMapCheck(doc, ctx, schema, accessor) {
   const def = schema._zod.def;
   doc.write(`if (!(${accessor} instanceof Map)) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.size`);
   const outputVar = newVar(ctx);
   const kVar = newVar(ctx);
   const valVar = newVar(ctx);
@@ -69829,6 +70120,7 @@ function generateMapCheck(doc, ctx, schema, accessor) {
 function generateSetCheck(doc, ctx, schema, accessor) {
   const def = schema._zod.def;
   doc.write(`if (!(${accessor} instanceof Set)) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.size`);
   const outputVar = newVar(ctx);
   const valVar = newVar(ctx);
   doc.write(`const ${outputVar} = new Set();`);
@@ -74996,6 +75288,21 @@ function preserveCustomPayload(schema, key, knownTags) {
     return output2;
   });
 }
+function defaultOnErrorOptionalStringTag(schema, key) {
+  return exports_external.preprocess((value) => {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+      return value;
+    }
+    const record2 = value;
+    const tag = record2[key];
+    if (tag === undefined || tag === null || typeof tag === "string") {
+      return value;
+    }
+    const normalized = { ...record2 };
+    delete normalized[key];
+    return normalized;
+  }, schema);
+}
 function vecSkipError(itemSchema) {
   return exports_external.array(itemSchema.catch(skippedItem)).transform((items) => items.filter((item) => item !== skippedItem));
 }
@@ -75014,16 +75321,12 @@ var zWriteTextFileRequest = object({
 var zReadTextFileRequest = object({
   sessionId: zSessionId,
   path: string2(),
-  line: defaultOnError(int().gte(0).max(4294967295, {
+  line: int().gte(0).max(4294967295, {
     error: "Invalid value: Expected uint32 to be <= 4294967295"
-  }).nullish(), () => {
-    return;
-  }),
-  limit: defaultOnError(int().gte(0).max(4294967295, {
+  }).nullish(),
+  limit: int().gte(0).max(4294967295, {
     error: "Invalid value: Expected uint32 to be <= 4294967295"
-  }).nullish(), () => {
-    return;
-  }),
+  }).nullish(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -75274,14 +75577,10 @@ var zEnvVariable = object({
 var zCreateTerminalRequest = object({
   sessionId: zSessionId,
   command: string2(),
-  args: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  env: defaultOnError(vecSkipError(zEnvVariable).optional(), () => []),
-  cwd: defaultOnError(string2().nullish(), () => {
-    return;
-  }),
-  outputByteLimit: defaultOnError(number2().nullish(), () => {
-    return;
-  }),
+  args: array(string2()).optional(),
+  env: array(zEnvVariable).optional(),
+  cwd: string2().nullish(),
+  outputByteLimit: number2().nullish(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -75807,10 +76106,8 @@ var zAuthMethodTerminal = object({
   description: defaultOnError(string2().nullish(), () => {
     return;
   }),
-  args: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  env: defaultOnError(record(string2(), string2()).optional(), () => {
-    return;
-  }),
+  args: array(string2()).optional(),
+  env: record(string2(), string2()).optional(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -76508,17 +76805,61 @@ var zRunningStateUpdate = object({
     return;
   })
 });
-var zIdleStateUpdate = object({
-  stopReason: defaultOnError(zStopReason.nullish(), () => {
+var zErrorStopReason = object({
+  error: defaultOnError(zError.nullish(), () => {
     return;
+  })
+});
+var zIdleStateUpdate = defaultOnErrorOptionalStringTag(preserveCustomPayload(intersection(union([
+  object({
+    stopReason: literal("end_turn")
+  }),
+  object({
+    stopReason: literal("max_tokens")
+  }),
+  object({
+    stopReason: literal("max_turn_requests")
   }),
+  object({
+    stopReason: literal("refusal")
+  }),
+  object({
+    stopReason: literal("cancelled")
+  }),
+  zErrorStopReason.and(object({
+    stopReason: literal("error")
+  })),
+  excludeKnownTags(object({
+    stopReason: string2()
+  }), "stopReason", [
+    "cancelled",
+    "end_turn",
+    "error",
+    "max_tokens",
+    "max_turn_requests",
+    "refusal"
+  ]),
+  object({
+    stopReason: _null3().optional()
+  })
+]), object({
   usage: defaultOnError(zUsage.nullish(), () => {
     return;
   }),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
+  }),
+  stopReason: defaultOnError(string2().nullish(), () => {
+    return;
   })
-});
+})), "stopReason", [
+  "cancelled",
+  "end_turn",
+  "error",
+  "max_tokens",
+  "max_turn_requests",
+  "refusal"
+]), "stopReason");
 var zRequiresActionStateUpdate = object({
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
@@ -76901,16 +77242,16 @@ var zMcpServer = union([
 ]);
 var zNewSessionRequest = object({
   cwd: string2(),
-  additionalDirectories: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  mcpServers: requiredDefaultOnError(vecSkipError(zMcpServer), () => []),
+  additionalDirectories: array(string2()).optional(),
+  mcpServers: array(zMcpServer),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
 });
 var zLoadSessionRequest = object({
-  mcpServers: requiredDefaultOnError(vecSkipError(zMcpServer), () => []),
+  mcpServers: array(zMcpServer),
   cwd: string2(),
-  additionalDirectories: defaultOnError(vecSkipError(string2()).optional(), () => []),
+  additionalDirectories: array(string2()).optional(),
   sessionId: zSessionId,
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
@@ -76932,8 +77273,8 @@ var zDeleteSessionRequest = object({
 var zForkSessionRequest = object({
   sessionId: zSessionId,
   cwd: string2(),
-  additionalDirectories: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  mcpServers: defaultOnError(vecSkipError(zMcpServer).optional(), () => []),
+  additionalDirectories: array(string2()).optional(),
+  mcpServers: array(zMcpServer).optional(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -76941,8 +77282,8 @@ var zForkSessionRequest = object({
 var zResumeSessionRequest = object({
   sessionId: zSessionId,
   cwd: string2(),
-  additionalDirectories: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  mcpServers: defaultOnError(vecSkipError(zMcpServer).optional(), () => []),
+  additionalDirectories: array(string2()).optional(),
+  mcpServers: array(zMcpServer).optional(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -77323,7 +77664,7 @@ var zDidChangeDocumentNotification = object({
   sessionId: zSessionId,
   uri: string2(),
   version: number2(),
-  contentChanges: requiredDefaultOnError(vecSkipError(zTextDocumentContentChangeEvent), () => []),
+  contentChanges: array(zTextDocumentContentChangeEvent),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -78402,9 +78743,26 @@ var zGuardElicitationPropertySchemaBoolean = zBooleanPropertySchema.and(object({
 var zGuardElicitationPropertySchemaArray = zMultiSelectPropertySchema.and(object({ type: literal("array") }));
 var zGuardMultiSelectItemsString = zStringMultiSelectItems.and(object({ type: literal("string") }));
 var zGuardStateUpdateRunning = zRunningStateUpdate.and(object({ state: literal("running") }));
-var zGuardStateUpdateIdle = zIdleStateUpdate.and(object({ state: literal("idle") }));
+var zGuardStateUpdateIdle = zIdleStateUpdate.and(object({ usage: zUsage.nullish() })).and(object({ state: literal("idle") }));
 var zGuardStateUpdateRequiresAction = zRequiresActionStateUpdate.and(object({ state: literal("requires_action") }));
 var zGuardStateUpdateUnknown = zUnknownStateUpdate.and(object({ state: literal("unknown") }));
+var zGuardIdleStateUpdateEndTurn = object({
+  stopReason: literal("end_turn")
+});
+var zGuardIdleStateUpdateMaxTokens = object({
+  stopReason: literal("max_tokens")
+});
+var zGuardIdleStateUpdateMaxTurnRequests = object({
+  stopReason: literal("max_turn_requests")
+});
+var zGuardIdleStateUpdateRefusal = object({
+  stopReason: literal("refusal")
+});
+var zGuardIdleStateUpdateCancelled = object({
+  stopReason: literal("cancelled")
+});
+var zGuardIdleStateUpdateError = zErrorStopReason.and(object({ error: zError.nullish() })).and(object({ stopReason: literal("error") }));
+var zGuardIdleStateUpdateNone = object({ stopReason: _null3().optional() });
 var zGuardCreateElicitationResponseAccept = zElicitationAcceptAction.and(object({ action: literal("accept") }));
 var zGuardCreateElicitationResponseDecline = object({
   action: literal("decline")
@@ -79763,6 +80121,7 @@ async function runAcp(apiUrl, apiKey, opts) {
 
 // src/shutdown.ts
 var activeRun2 = null;
+var stopOnExit2 = false;
 var cleanups2 = [];
 var exiting2 = null;
 var cancelling2 = null;
@@ -79770,6 +80129,11 @@ var CANCEL_TIMEOUT_MS2 = 5000;
 function setActiveRun2(run2) {
   activeRun2 = run2;
 }
+function stopRunOnExit() {
+  stopOnExit2 = true;
+}
+var detachNotice2 = (todoId) => `Todo keeps running — reattach: tfa-cli --resume ${todoId}
+`;
 function trackStart(ws, projectId, started) {
   setActiveRun2(started.then((todoId) => ({ ws, projectId, todoId }), () => null));
 }
@@ -79787,7 +80151,7 @@ function cancelActiveRun2(timeoutMs = CANCEL_TIMEOUT_MS2) {
   if (cancelling2)
     return cancelling2;
   const pending = activeRun2;
-  if (!pending)
+  if (!pending || !stopOnExit2)
     return Promise.resolve({ ok: false, todoId: null });
   const res = { ok: false };
   const attempt = (async () => {
@@ -79813,7 +80177,11 @@ function shutdown2(code, reason) {
       process.stderr.write(`
 ${reason}
 `);
-    if (activeRun2) {
+    if (activeRun2 && !stopOnExit2) {
+      const run2 = await withTimeout2(Promise.resolve(activeRun2), CANCEL_TIMEOUT_MS2, null);
+      if (run2)
+        process.stderr.write(detachNotice2(run2.todoId));
+    } else if (activeRun2) {
       const { ok, todoId } = await cancelActiveRun2();
       if (ok)
         process.stderr.write(`Stopped todo ${todoId}
@@ -79843,7 +80211,7 @@ function finish(code) {
   });
 }
 function installSignalHandlers() {
-  process.on("SIGINT", () => void shutdown2(130, "Cancelled by user (Ctrl+C)"));
+  process.on("SIGINT", () => void shutdown2(130, "Exited (Ctrl+C)"));
   process.on("SIGTERM", () => void shutdown2(143, "Terminated (SIGTERM)"));
   process.on("SIGHUP", () => void shutdown2(129, "Hangup (SIGHUP)"));
 }
@@ -80266,17 +80634,17 @@ async function main() {
     const [, filePath, todoArg] = positionals;
     const todoId = todoArg || aliasTodoId(args.alias) || getEnv("TODO_ID") || cfgScope.data.last_todo_id;
     if (!filePath || !todoId) {
-      process.stderr.write(`${RED3}Usage: tfa-cli show <file|-> [todo-id] [--title T] [--alias A] [--mime M] [--card <name>] [--link]${RESET2}
+      process.stderr.write(`${RED3}Usage: tfa-cli show <file|-> [todo-id] [--title T] [--alias A] [--mime M] [--card <name>] [--link] [--force]${RESET2}
 `);
       process.exit(2);
     }
-    let blob, name;
+    let bytes, name, mime;
     if (filePath === "-") {
       const chunks = [];
       for await (const c3 of process.stdin)
         chunks.push(c3);
-      blob = new Blob([Buffer.concat(chunks)]);
-      if (blob.size === 0) {
+      bytes = Buffer.concat(chunks);
+      if (bytes.length === 0) {
         process.stderr.write(`${RED3}No data on stdin${RESET2}
 `);
         process.exit(1);
@@ -80289,9 +80657,21 @@ async function main() {
 `);
         process.exit(1);
       }
-      blob = new Blob([readFileSync5(abs)], { type: getMimeTypeFromFilename(abs) || undefined });
+      bytes = readFileSync5(abs);
+      mime = getMimeTypeFromFilename(abs) || undefined;
       name = path4.basename(filePath);
     }
+    const truncated = truncatedImageReason(bytes);
+    if (truncated) {
+      if (!args.force) {
+        process.stderr.write(`${RED3}${name} looks truncated: ${truncated} (${bytes.length} bytes). Re-export it, or pass --force to show it anyway.${RESET2}
+`);
+        process.exit(1);
+      }
+      process.stderr.write(`${YELLOW2}\u26A0 ${name} looks truncated: ${truncated} \u2014 showing anyway (--force)${RESET2}
+`);
+    }
+    const blob = new Blob([bytes], { type: mime });
     const res = await api2.showFile(todoId, blob, name, {
       title: args.title,
       alias: args.alias,
@@ -80494,7 +80874,7 @@ async function main() {
     }
     const mode = args.debug ? "debug" : args.detailed ? "detailed" : "default";
     const format = args["format-anthropic"] ? "anthropic" : "compact";
-    printFullChat(todo2, getFrontendUrl(apiUrl, todoId), slice, mode, format);
+    printFullChat(todo2, getFrontendUrl(apiUrl, todoId), slice, mode, format, args.full);
     return;
   }
   if (process.stderr.isTTY)
@@ -80551,8 +80931,7 @@ async function main() {
       await watchTodo(ws2, todoId, projectId2, {
         json: !!args.json,
         autoApprove,
-        agentSettings: agent3,
-        exitOnInterrupt: !!args["non-interactive"]
+        agentSettings: agent3
       });
       if (!args["non-interactive"]) {
         process.stderr.write(`
@@ -80603,7 +80982,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
       cfg.addToHistory(followUp);
       await appendTracked(api2, ws2, projectId2, followUp, agent3, todoId);
       await linkToSpawningBlock(api2, todoId);
-      await watchTodo(ws2, todoId, projectId2, { json: !!args.json, autoApprove, agentSettings: agent3, exitOnInterrupt: !!args["non-interactive"] });
+      await watchTodo(ws2, todoId, projectId2, { json: !!args.json, autoApprove, agentSettings: agent3 });
     }
     if (!args["non-interactive"]) {
       await interactiveLoop(ws2, api2, todoId, projectId2, agent3, !!args.json, autoApprove, cfg);
@@ -80625,6 +81004,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
   if (mayfly) {
     process.stderr.write(`${DIM2}Isolated bridge:${RESET2} ${CYAN2}mayfly-${isolatedTodoId}${RESET2}
 `);
+    stopRunOnExit();
     onShutdown(mayfly.stop);
     mayfly.child.on("exit", (code, sig) => {
       if (!mayfly.stopped())
@@ -80764,8 +81144,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
     await watchTodo(ws, actualTodoId, projectId, {
       json: !!args.json,
       autoApprove,
-      agentSettings: agent2,
-      exitOnInterrupt: !!args["non-interactive"]
+      agentSettings: agent2
     });
     if (!args["non-interactive"]) {
       process.stderr.write(`