@todoforai/cli 0.1.66 → 0.1.68

package/README.md

@@ -39,6 +39,8 @@ echo "content" | tfa-cli                   # pipe from stdin
 tfa-cli --path /my/project "Fix bug"       # explicit workspace
 ```
 
+Ctrl+C (or closing the terminal) only exits the CLI — the todo keeps running; `tfa-cli --resume <id>` reattaches. Exception: `--isolated` runs are stopped, since they can't outlive their bridge.
+
 ### Start from a registry template
 
 ```bash

package/dist/todoforai-cli.js

@@ -42969,6 +42969,9 @@ class ApiClient {
   unshareDevice(id, email) {
     return this.request("POST", `/api/v1/devices/${id}/unshare`, { id, email });
   }
+  leaveDevice(id) {
+    return this.request("POST", `/api/v1/devices/${id}/leave`, { id });
+  }
   setDeviceWallpaperMode(id, mode) {
     return this.request("POST", `/api/v1/devices/${id}/wallpaper-mode`, { id, mode });
   }
@@ -43008,6 +43011,15 @@ class ApiClient {
   listProjectGroups(projectId) {
     return this.request("GET", `/api/v1/projects/${projectId}/groups`);
   }
+  getProjectGroupIntake(projectId, groupTag) {
+    return this.request("GET", `/api/v1/projects/${projectId}/groups/${encodeURIComponent(groupTag)}/intake`);
+  }
+  updateProjectGroupIntake(projectId, groupTag, fields) {
+    return this.request("PUT", `/api/v1/projects/${projectId}/groups/${encodeURIComponent(groupTag)}/intake`, { projectId, groupTag, ...fields });
+  }
+  regenerateProjectGroupIntake(projectId, groupTag) {
+    return this.request("POST", `/api/v1/projects/${projectId}/groups/${encodeURIComponent(groupTag)}/intake/regenerate`, { projectId, groupTag });
+  }
   upsertProjectGroup(projectId, slug, fields) {
     return this.request("PUT", `/api/v1/projects/${projectId}/groups/${encodeURIComponent(slug)}`, { projectId, slug, ...fields });
   }
@@ -43609,6 +43621,7 @@ var TodoStatus;
   TodoStatus2["PAUSED"] = "PAUSED";
   TodoStatus2["POSTPONED"] = "POSTPONED";
   TodoStatus2["REVIEW_REQUESTED"] = "REVIEW_REQUESTED";
+  TodoStatus2["WAITING_AGENT"] = "WAITING_AGENT";
   TodoStatus2["RUNNING"] = "RUNNING";
   TodoStatus2["WAITING_FOR_USER"] = "WAITING_FOR_USER";
   TodoStatus2["COMPACTING"] = "COMPACTING";
@@ -43623,6 +43636,11 @@ var TodoStatus;
   TodoStatus2["ARCHIVED"] = "ARCHIVED";
   TodoStatus2["DELETED"] = "DELETED";
 })(TodoStatus ||= {});
+var CLOSED_STATUSES = [
+  "DONE" /* DONE */,
+  "ARCHIVED" /* ARCHIVED */,
+  "DELETED" /* DELETED */
+];
 // ../packages/shared-fbe/src/constants.ts
 var APPEAL_EMAIL = "support@todofor.ai";
 var ACCOUNT_SUSPENDED_MESSAGE = `Account suspended for suspected abuse. If you think this is a mistake, email ${APPEAL_EMAIL}.`;
@@ -43639,22 +43657,28 @@ var PROVIDER_BY_AUTHOR = {
   "x-ai": "xai",
   "z-ai": "z.ai",
   google: "google-ai-studio",
-  moonshotai: "opencode_go"
+  moonshotai: "opencode_go",
+  meta: "meta"
 };
 var MODEL_PROVIDER_OVERRIDES = {
   "openai/gpt-5.5-pro": "openrouter"
 };
+var MODEL_ENDPOINT_OVERRIDES = {
+  "google/gemini-4-argon": { "google-ai-studio": "vertex" }
+};
 function resolveDispatchProvider(modelId, endpointProvider) {
-  return MODEL_PROVIDER_OVERRIDES[modelId.toLowerCase()] ?? endpointProvider;
+  const id = modelId.toLowerCase();
+  return MODEL_PROVIDER_OVERRIDES[id] ?? MODEL_ENDPOINT_OVERRIDES[id]?.[endpointProvider.toLowerCase()] ?? endpointProvider;
 }
 var SUBSCRIPTION_PROVIDERS = new Set(["opencode_go"]);
 function applyProviderOverride(qualified) {
   const colon = qualified.indexOf(":");
+  const provider = qualified.slice(0, colon);
   const rest = qualified.slice(colon + 1);
   const suffix = rest.match(/\([^)]+\)$/)?.[0] ?? "";
   const bare = (suffix ? rest.slice(0, -suffix.length) : rest).toLowerCase();
-  const override = MODEL_PROVIDER_OVERRIDES[bare];
-  return override ? `${override}:${bare}${suffix}` : qualified;
+  const resolved = resolveDispatchProvider(bare, provider);
+  return resolved === provider ? qualified : `${resolved}:${bare}${suffix}`;
 }
 function isQualifiedModel(model) {
   const id = model.trim();
@@ -43677,9 +43701,9 @@ function qualifyModel(model) {
   const override = MODEL_PROVIDER_OVERRIDES[lower];
   if (override)
     return { model: `${override}:${lower}${suffix}` };
-  const provider = PROVIDER_BY_AUTHOR[lower.split("/")[0]];
-  if (provider && lower.includes("/"))
-    return { model: `${provider}:${lower}${suffix}` };
+  const author = PROVIDER_BY_AUTHOR[lower.split("/")[0]];
+  if (author && lower.includes("/"))
+    return { model: `${resolveDispatchProvider(lower, author)}:${lower}${suffix}` };
   return { model: id };
 }
 function qualifiedModelIds(listing, filter) {
@@ -43738,6 +43762,7 @@ var mimetypes_default = {
     js: { mime: "text/javascript", type: "text" },
     ts: { mime: "text/typescript", type: "text" },
     html: { mime: "text/html", type: "text" },
+    htm: { mime: "text/html", type: "text" },
     css: { mime: "text/css", type: "text" },
     xml: { mime: "text/xml", type: "text" },
     py: { mime: "text/x-python", type: "text" },
@@ -43776,7 +43801,7 @@ var mimetypes_default = {
     docx: { mime: "application/vnd.openxmlformats-officedocument.wordprocessingml.document", type: "document", tags: ["docx"] },
     ppt: { mime: "application/vnd.ms-powerpoint", type: "document" },
     pptx: { mime: "application/vnd.openxmlformats-officedocument.presentationml.presentation", type: "document", tags: ["pptx"] },
-    xls: { mime: "application/vnd.ms-excel", type: "spreadsheet" },
+    xls: { mime: "application/vnd.ms-excel", type: "spreadsheet", tags: ["xls"] },
     xlsx: { mime: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", type: "spreadsheet", tags: ["xlsx"] },
     zip: { mime: "application/zip", type: "archive" },
     rar: { mime: "application/vnd.rar", type: "archive" },
@@ -44169,6 +44194,8 @@ var USER_HEADINGS = new Set([
   "steps",
   "data needed"
 ]);
+// ../packages/shared-fbe/src/bridgeProtocol.ts
+var ADB_DATA_CHUNK = 40 * 1024;
 // ../packages/shared-fbe/src/bashPatterns.ts
 function splitShellCommands(input) {
   const parts = [];
@@ -44410,7 +44437,6 @@ function getBlockServerId(block) {
   const prefix = getBlockServerPrefix(block);
   return prefix ? prefix.slice(0, -1) : "*";
 }
-
 // ../packages/shared-fbe/src/permissionUtils.ts
 function parsePattern(pattern) {
   const colonIndex = pattern.indexOf(":");
@@ -44640,7 +44666,7 @@ Exactly ONE \`api_recommend_template\` call per proposal: it carries both what t
 };
 var JARVIS_AGENT = {
   id: "00000000-0000-0000-0000-202601013152",
-  name: "JARVIS",
+  name: "Tod",
   ownerId: "SYSTEM",
   systemMessage: "",
   model: "",
@@ -44967,6 +44993,7 @@ var tool_catalog_default = {
     label: "GitLab",
     summary: "Work with your GitLab repos, merge requests and pipelines.",
     statusCmd: "glab auth status 2>&1 | grep -o 'Logged in to [^ ]* [a-z]* [^ ]*' | paste -sd ' ' - | grep -m1 .",
+    logoutCmd: "glab auth logout --hostname gitlab.com 2>&1 </dev/null",
     loginCmd: "glab auth login --device",
     credentialPaths: ["~/.config/glab-cli/config.yml"],
     description: "GitLab equivalent of `gh`.",
@@ -45128,6 +45155,7 @@ var tool_catalog_default = {
     credentialPaths: ["~/.config/shopify-cli-kit-nodejs/config.json"],
     versionCmd: "shopify version 2>/dev/null | tail -n 1",
     statusCmd: `python3 -c "import json,os,sys;p=os.path.expanduser('~/.config/shopify-cli-kit-nodejs/config.json');sys.exit(0 if json.load(open(p)).get('session') else 1)" 2>/dev/null && echo authenticated`,
+    logoutCmd: "shopify auth logout",
     deviceCodePattern: "verification code: ([A-Z0-9-]+)",
     oauthUrlPattern: "(https://accounts\\.shopify\\.com/activate-with-code\\S*)",
     canStreamLogin: true,
@@ -45173,7 +45201,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "TODOforAI",
     summary: "Create and follow up on your TODOs, and show results in the chat.",
-    description: 'Manage the user\'s OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli "prompt"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> "text"`). Inspect: `list [--status open]`, `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|ARCHIVED|POSTPONED|CANCELLED|DELETED` (close, reopen, shelve, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r \'.items[].id\'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (permissions/MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo\'s readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `--alias <todoId>:<name>` updates another todo\'s artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user\'s bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify "Title" "message" [--href /t/<id>]` leaves a note in the user\'s Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows.',
+    description: 'Manage the user\'s OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli "prompt"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> "text"`). Inspect: `list [--status open]`, `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|ARCHIVED|POSTPONED|CANCELLED|DELETED` (close, reopen, shelve, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r \'.items[].id\'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (permissions/MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo\'s readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `--alias <todoId>:<name>` updates another todo\'s artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Show viewer chrome: `--title` appears in the header; a kebab menu holds file actions, versions and sharing when available. Desktop floating previews add minimize (park in a tab), maximize/restore and close (X); inline blocks have no window controls. For authored HTML, do not duplicate the header/controls or add a rounded, bordered root card: the floating viewer owns the rounded frame. Keep content edge-to-edge; internal layout padding is fine. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user\'s bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify "Title" "message" [--href /t/<id>]` leaves a note in the user\'s Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows. Project files: `memory sync|path [--project <id>]` requires a project and checks out only projects/<id>/{memory,context} and projects/<id>/me/{memory,context}; legacy global files are read-only recovery. Voice commands use `--scope mine|project` (default mine, private within this project; project is shared).',
     installCmd: "npm install -g @todoforai/cli",
     versionCmd: "tfa-cli --version 2>/dev/null | sed -n 1p",
     preinstallCloud: true,
@@ -45321,6 +45349,7 @@ var tool_catalog_default = {
     summary: "Manage your Microsoft Azure resources.",
     binName: "az",
     statusCmd: "az account show --query user.name -o tsv 2>/dev/null | tr -d '\\r' | grep -m1 .",
+    logoutCmd: "az logout 2>&1; az account clear 2>&1",
     loginCmd: "az login --use-device-code",
     oauthUrlPattern: "(https://login\\.microsoft\\.com/device\\S*)",
     deviceCodePattern: "enter the code ([A-Z0-9]+)",
@@ -45406,7 +45435,7 @@ var tool_catalog_default = {
     preinstallCloud: true,
     label: "Browser",
     summary: "Browse websites automatically: click, type, read and screenshot.",
-    description: "Browser automation over CDP (`open`/`snapshot`/`click`/`type`/`fill`/`read`/`screenshot`/`eval`). `connect '<url>'` to a listed live browser (prefer the user's real Chrome), verify with `snapshot`; if empty, `close` (own session only) and reconnect once. NEVER `close --all`. Shared browser: `tab new` for your own tab, `tab <id>` before each command. No URL listed: cloud → browser-manager-cli; PC with display → Chrome `--remote-debugging-port=9222`, attach `--cdp 9222`. Never `sleep`: `open` returns after load, but `click`/`fill` fail at once if the element isn't there yet — `wait '<sel>'`, `wait --text 'Done'`, `wait --url '**/dash'`, `wait --load networkidle` or `wait '#spinner' --state hidden` first.",
+    description: "Browser automation over CDP (`open`/`snapshot`/`click`/`type`/`fill`/`read`/`screenshot`/`eval`). `connect '<url>'` to a listed live browser (prefer the user's real Chrome), verify with `snapshot`; if empty, `close` (own session only) and reconnect once. NEVER `close --all`. Shared browser: `tab new` for your own tab, `tab <id>` before each command. No URL listed: cloud → browser-manager-cli; PC with display → Chrome `--remote-debugging-port=9222`, attach `--cdp 9222`. Never `sleep`: `open` returns after load, but `click`/`fill` fail at once if the element isn't there yet — `wait '<sel>'`, `wait --text 'Done'`, `wait --url '**/dash'`, `wait --load networkidle` or `wait '#spinner' --state hidden` first. Extension browsers (WEB_EXTENSION) only: try sign-in with credentials from `tfa-vault`; request human help only for a step you cannot complete yourself (MFA/CAPTCHA/consent). Use Node/Bun WebSocket on the listed CDP URL; `Target.getTargets` or `device_list` gives `tab-N`, whose N is the numeric tabId. On the SAME socket send `{id: 1, method: 'TodoforAI.requestHumanHelp', params: {tabId: N, message: 'what to do'}}` (message 1–500 chars). This focuses and pauses the tab, sets its yellow `?` badge, and shows needs-you in the extension popup. Tell the user to click Resume control and reply here, then end your turn; Resume does not wake the agent. Afterwards reconnect and snapshot fresh. `TodoforAI.humanHelpStatus` with `{tabId}` remains available while paused. If bootstrap fails on a restricted target, direct CDP `Target.createTarget` with an ordinary URL opens your tab on the SAME socket; pass numeric N from returned `tab-N` as `tabId`.",
     versionCmd: "agent-browser --version 2>/dev/null | sed -n 1p",
     preinstallJarvis: true
   },
@@ -45548,6 +45577,17 @@ var tool_catalog_default = {
     preinstallCloud: true,
     preinstallJarvis: true
   },
+  "tfa-find": {
+    internal: true,
+    category: "todoforai",
+    pkg: "@todoforai/tfa-find",
+    installer: "npm",
+    label: "File Search",
+    summary: "Find documents, photos and more by describing what you need.",
+    description: "Search files in folders you choose on your machine. Register folders, build a search index, then find relevant documents, images, audio and video with natural-language queries. CLI: tfa-find.",
+    versionCmd: "tfa-find --version 2>/dev/null | sed -n 1p",
+    installCmd: "npm install -g @todoforai/tfa-find"
+  },
   "tfa-memory": {
     category: "todoforai",
     pkg: "@todoforai/tfa-memory",
@@ -45935,6 +45975,7 @@ var tool_catalog_default = {
     loginCmd: "mailchimp-api auth --api-key <api_key>",
     oauthBroker: true,
     statusCmd: `mailchimp-api whoami 2>/dev/null | sed -n 's/.*"account_name"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m1 .`,
+    logoutCmd: "rm -f ~/.config/mailchimp-api/credentials.json",
     credentialPaths: [
       "~/.config/mailchimp-api/credentials.json"
     ],
@@ -45952,6 +45993,7 @@ var tool_catalog_default = {
     statusCmd: `facebook-pages-api whoami 2>/dev/null | sed -n 's/.*"name"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m10 .`,
     loginCmd: "facebook-pages-api auth --page-id <id> --page-token <token>",
     oauthBroker: true,
+    logoutCmd: "rm -f ~/.config/facebook-pages-api/credentials.json",
     credentialPaths: ["~/.config/facebook-pages-api/credentials.json"],
     description: "Facebook Pages CLI (Meta Graph API). `auth --page-id <id> --page-token <token>` (or env FB_PAGE_ID/FB_PAGE_TOKEN). `feed`, `comments`, `insights`, `conversations`, `media`, and `request <GET|POST|DELETE> <path> [--data <json>]` = any Graph edge with the page token attached (use instead of curl). Writes are live: `feed create --published false` for tests; `comments reply` posts publicly — get human approval. Follower totals: `whoami --fields followers_count,fan_count` (many classic insights metrics are retired). Instagram (linked professional account, same page token): `ig whoami|media|get|stories|tags|limit`, `ig publish --image_url U | --video_url U [--media_type STORIES] | --carousel U1,U2 [--caption …]` (public URLs; container → wait → publish; `--create-only` = dry run; 100 posts/24h), `ig comments list|replies|create|reply|hide|delete|toggle`, `ig insights [media_id]` (needs instagram_manage_insights). `--help` for subcommands.",
     versionCmd: "facebook-pages-api --version 2>/dev/null | sed -n 1p"
@@ -45993,6 +46035,7 @@ var tool_catalog_default = {
     voiceChannel: "Outlook",
     summary: "Read and write your Outlook mail.",
     statusCmd: `outlook-api whoami 2>/dev/null | sed -n 's/.*"userPrincipalName"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m10 .`,
+    logoutCmd: "outlook-api logout",
     loginCmd: "outlook-api auth",
     credentialPaths: ["~/.config/outlook-api/config.json"],
     description: "Outlook/Hotmail/M365 mail over Microsoft Graph (on-prem Exchange → ews-api). `auth` = device-code flow; `--tenant consumers` (default, personal) | `organizations`. list/search/read/attachments are read-only; `draft`/`reply` stay in Drafts unless --send; `send <draftId>`. `get <path>` = raw Graph GET. JSON out.",
@@ -46025,6 +46068,7 @@ var tool_catalog_default = {
     label: "Microsoft 365",
     summary: "Work with Microsoft 365 mail, Teams, SharePoint and users.",
     statusCmd: `m365 status --output text 2>/dev/null | tr -d '"' | grep -vi 'logged out' | grep -m1 .`,
+    logoutCmd: "m365 logout",
     loginCmd: "m365 login --authType deviceCode --appId 14d82eec-204b-4c2f-b7e8-296a70dab67e",
     deviceCodePattern: "enter the code ([A-Z0-9]{8,}) to authenticate",
     oauthUrlPattern: "open the page (https://\\S+) and enter",
@@ -49944,21 +49988,67 @@ var tool_catalog_default = {
     },
     statusCmd: `zoo user view --format json 2>/dev/null | sed -n 's/.*"email": *"\\([^"]*\\)".*/\\1/p' | grep -m1 .`,
     loginCmd: "zoo auth login --web",
+    logoutCmd: "printf 'y\\n' | zoo --host api.zoo.dev auth logout",
     loginNeedsPty: true,
     deviceCodePattern: "user code: ([A-Z0-9]{4}-[A-Z0-9]{4})",
-    oauthUrlPattern: "(https://api\\.zoo\\.dev/oauth2/device/verify\\S*)",
+    oauthUrlPattern: "(https://api\\.zoo\\.dev/oauth2/device/verify\\?[^\\s']+)",
     canStreamLogin: true,
     credentialPaths: [
       "~/.config/zoo/hosts.toml"
     ],
     description: 'Official Zoo (KittyCAD) CLI. Text-to-CAD: `zoo ml text-to-cad export --output-format step "a 40mm gear"`; convert: `zoo file convert in.obj out/ --output-format step`; mass/volume: `zoo file mass|volume <file>`; KCL: `zoo kcl export|snapshot`; raw: `zoo api /user`. Token alternative: `echo <token> | zoo auth login --with-token`.',
     versionCmd: "zoo --version 2>/dev/null | sed -n 1p"
+  },
+  "python-docx": {
+    category: "documents",
+    pkg: "python-docx",
+    pipModules: ["docx"],
+    installer: "pip",
+    label: "Word documents",
+    summary: "Create, read and edit Word documents.",
+    versionCmd: `{ "$HOME/.todoforai/tools/venv/bin/python" -c 'import docx; print(docx.__version__)' || python -c 'import docx; print(docx.__version__)' || python3 -c 'import docx; print(docx.__version__)' || py -c 'import docx; print(docx.__version__)'; } 2>/dev/null`,
+    description: "Python python-docx library. Use python3 to create, save, reopen and edit Office files; no Microsoft account required."
+  },
+  openpyxl: {
+    category: "documents",
+    pkg: "openpyxl",
+    pipModules: ["openpyxl"],
+    installer: "pip",
+    label: "Excel workbooks",
+    summary: "Create, read and edit Excel workbooks.",
+    versionCmd: `{ "$HOME/.todoforai/tools/venv/bin/python" -c 'import openpyxl; print(openpyxl.__version__)' || python -c 'import openpyxl; print(openpyxl.__version__)' || python3 -c 'import openpyxl; print(openpyxl.__version__)' || py -c 'import openpyxl; print(openpyxl.__version__)'; } 2>/dev/null`,
+    description: "Python openpyxl library. Use python3 to create, save, reopen and edit Office files; no Microsoft account required."
+  },
+  "python-pptx": {
+    category: "documents",
+    pkg: "python-pptx",
+    pipModules: ["pptx"],
+    installer: "pip",
+    label: "PowerPoint decks",
+    summary: "Create, read and edit PowerPoint decks.",
+    versionCmd: `{ "$HOME/.todoforai/tools/venv/bin/python" -c 'import pptx; print(pptx.__version__)' || python -c 'import pptx; print(pptx.__version__)' || python3 -c 'import pptx; print(pptx.__version__)' || py -c 'import pptx; print(pptx.__version__)'; } 2>/dev/null`,
+    description: "Python python-pptx library. Use python3 to create, save, reopen and edit Office files; no Microsoft account required."
+  },
+  "modal-h3": {
+    category: "creative",
+    pkg: "@todoforai/modal-h3",
+    installer: "npm",
+    label: "MiniMax-H3 on Modal",
+    summary: "Generate videos with sound using MiniMax-H3 on your own Modal GPUs.",
+    versionCmd: "modal-h3 --version 2>/dev/null | sed -n 1p",
+    statusCmd: `modal-h3 whoami 2>/dev/null | grep '"authenticated": true' >/dev/null && echo authenticated`,
+    loginCmd: "printf '%s' <proxy_token> | modal-h3 auth --token-stdin --fl2va-url <fl2va_url> --ref2va-url <ref2va_url>",
+    credentialPaths: ["~/.config/modal-h3/credentials.json"],
+    description: "MiniMax-H3 text/image/reference-to-video+audio on a self-deployed Modal app (SGLang, 4x H200, scale-to-zero). `modal-h3 generate -p '…' [--first @a.png] [--last …] [--ref-image|--ref-video|--ref-audio <url|@file>] [--duration 4-15] [--ratio 16:9|auto] [--quality high] -o out.mp4` (task inferred, retries 503 during cold start, polls, downloads), `warmup`, `status|download|delete <id>`, `list`, `api <METHOD> <path>`. Deploy once with `modal run modal/serve.py::download` + `modal deploy modal/serve.py`. Costs ~$18/h of 4x H200 while a container is up (cold start minutes, ~75 s per 5 s 768p clip warm); every request wakes a container, `whoami` is offline. Jobs live in container memory. 2K needs `minimax-api regenerate`."
   }
 };
 
 // ../packages/shared-fbe/src/toolCatalog.ts
 var TOOL_CATALOG = tool_catalog_default;
 // ../packages/shared-fbe/src/toolInstallCommand.ts
+var NPM_HOME = '"${TFA_NPM_HOME:-$HOME}"';
+var NPM_TOOLS = NPM_HOME.replace('}"', '}/.todoforai/tools"');
+var NPM_LOCAL = NPM_HOME.replace('}"', '}/.local"');
 var KEY_OF = new Map(Object.entries(TOOL_CATALOG).map(([k, e]) => [e, k]));
 var NODE_MIN_MAJOR = 24;
 var NODE_OK = `command -v npm >/dev/null 2>&1 && node -e 'process.exit(+process.versions.node.split(".")[0]>=${NODE_MIN_MAJOR}?0:1)' >/dev/null 2>&1`;
@@ -50200,7 +50290,7 @@ var package_default = {
     type: "git",
     url: "git+https://github.com/todoforai/cli.git"
   },
-  version: "0.1.66",
+  version: "0.1.68",
   type: "module",
   bin: {
     "todoforai-cli": "bin/todoforai-cli.js",
@@ -50330,6 +50420,13 @@ Usage:
 
 todo-id defaults to $TODOFORAI_TODO_ID (agent shell) or the last todo this CLI touched.
 
+Viewer chrome:
+  --title appears in the header; a kebab menu holds file actions, versions and sharing when available.
+  Desktop floating previews add minimize (park in a tab), maximize/restore and close (X).
+  Inline blocks have no window controls. Do not draw these controls or a duplicate title bar in authored HTML.
+  The floating viewer owns the rounded frame. Keep the HTML root flat, without a border, radius, shadow or outer margin;
+  internal content padding and spacing are fine. Existing files and websites keep their own styling.
+
 When to use what:
   read once, move on             → plain chat reply
   interactive, this chat only    → html_snippet (can exec/connect/chat back)
@@ -51404,15 +51501,20 @@ function blockToAnthropic(block, mode, format) {
     const msg = block.error_message || block.content || "(unknown error)";
     return [{ type: "text", text: `[error] ${msg}` }];
   }
+  const name = t === "named_tool" ? block.tool_name === "run_shell" ? "bash" : block.tool_name : t;
   const inputFields = [];
   for (const [k, v] of Object.entries(block)) {
-    if (BLOCK_META_KEYS.has(k))
+    if (BLOCK_META_KEYS.has(k) || k === "args" || t === "named_tool" && k === "tool_name")
       continue;
     if (v === undefined || v === null || v === "")
       continue;
     inputFields.push([k, v]);
   }
-  const use = format === "anthropic" ? { type: "tool_use", id: block.id, name: t, input: Object.fromEntries(inputFields) } : { type: "tool_use", content: `<${t}${inputFields.map(([k, v]) => ` ${k}=${xmlAttr(v)}`).join("")}/>` };
+  for (const [k, v] of Object.entries(block.args ?? {})) {
+    if (!inputFields.some(([key]) => key === k))
+      inputFields.push([k, v]);
+  }
+  const use = format === "anthropic" ? { type: "tool_use", id: block.id, name, input: Object.fromEntries(inputFields) } : { type: "tool_use", content: `<${name}${inputFields.map(([k, v]) => ` ${k}=${xmlAttr(v)}`).join("")}/>` };
   if (format === "compact" && mode !== "default")
     use.id = block.id;
   const items = [use];
@@ -51428,8 +51530,9 @@ function blockToAnthropic(block, mode, format) {
             source.name = att.originalName;
           parts.push({ type: isImage ? "image" : "document", source });
         }
-        if (typeof r.content === "string" && r.content)
-          parts.push({ type: "text", text: r.content });
+        const text = r.content || r.meta?.text;
+        if (typeof text === "string" && text)
+          parts.push({ type: "text", text });
         return parts;
       });
       const result = { type: "tool_result", tool_use_id: block.id };
@@ -51446,8 +51549,9 @@ function blockToAnthropic(block, mode, format) {
           const nameAttr = att.originalName && !isAutoName ? ` name=${xmlAttr(att.originalName)}` : "";
           parts.push(`<attachment uri=${xmlAttr(att.uri)}${nameAttr} size=${att.fileSize}/>`);
         }
-        if (typeof r.content === "string" && r.content)
-          parts.push(r.content);
+        const text = r.content || r.meta?.text;
+        if (typeof text === "string" && text)
+          parts.push(text);
       }
       const result = { type: "tool_result", content: parts.join(`
 `) };
@@ -52673,6 +52777,7 @@ function renderDiff(originalContent, modifiedContent, filePath) {
 
 // src/shutdown.ts
 var activeRun = null;
+var stopOnExit = false;
 var cleanups = [];
 var exiting = null;
 var cancelling = null;
@@ -52680,6 +52785,9 @@ var CANCEL_TIMEOUT_MS = 5000;
 function setActiveRun(run) {
   activeRun = run;
 }
+var stopsRunOnExit = () => stopOnExit;
+var detachNotice = (todoId) => `Todo keeps running — reattach: tfa-cli --resume ${todoId}
+`;
 function withTimeout(p, ms, fallback) {
   let timer;
   const timeout = new Promise((r) => {
@@ -52691,7 +52799,7 @@ function cancelActiveRun(timeoutMs = CANCEL_TIMEOUT_MS) {
   if (cancelling)
     return cancelling;
   const pending = activeRun;
-  if (!pending)
+  if (!pending || !stopOnExit)
     return Promise.resolve({ ok: false, todoId: null });
   const res = { ok: false };
   const attempt = (async () => {
@@ -52717,7 +52825,11 @@ function shutdown(code, reason) {
       process.stderr.write(`
 ${reason}
 `);
-    if (activeRun) {
+    if (activeRun && !stopOnExit) {
+      const run = await withTimeout(Promise.resolve(activeRun), CANCEL_TIMEOUT_MS, null);
+      if (run)
+        process.stderr.write(detachNotice(run.todoId));
+    } else if (activeRun) {
       const { ok, todoId } = await cancelActiveRun();
       if (ok)
         process.stderr.write(`Stopped todo ${todoId}
@@ -52829,20 +52941,6 @@ async function watchTodo(ws, todoId, projectId, opts = {}) {
   diffStoreByWs.set(ws, diffStore);
   const diffRendered = new Set;
   let approveAll = !!opts.autoApprove;
-  let interruptCount = 0;
-  const origHandler = process.listeners("SIGINT").slice();
-  process.removeAllListeners("SIGINT");
-  process.on("SIGINT", () => {
-    interruptCount++;
-    if (opts.exitOnInterrupt || interruptCount >= 2)
-      return void shutdown(130, "Cancelled by user (Ctrl+C)");
-    process.stderr.write(`
-${YELLOW}Interrupting... (Ctrl+C again to force exit)${RESET}
-`);
-    if (opts.interruptOnCancel !== false) {
-      ws.sendInterrupt(projectId, todoId);
-    }
-  });
   const pendingBlocks = [];
   let approvalPromptActive = false;
   let activeApprovalBlocks = [];
@@ -53065,14 +53163,10 @@ ${YELLOW}Connection lost — reconnecting...${RESET}
     await cancelActiveRun();
     process.exitCode = 1;
     if (!opts.suppressCancelNotice) {
-      process.stderr.write(`${YELLOW}Interrupted${RESET}
-`);
+      process.stderr.write(stopsRunOnExit() ? `${YELLOW}Interrupted${RESET}
+` : detachNotice(todoId));
     }
     return false;
-  } finally {
-    process.removeAllListeners("SIGINT");
-    for (const fn of origHandler)
-      process.on("SIGINT", fn);
   }
 }
 
@@ -53641,6 +53735,8 @@ Usage:
   tfa-cli project settings <field=value>…          Project settings (PUT /settings/projects/{id})
   tfa-cli project groups                           List todo groups
   tfa-cli project groups set <slug> <field=value>… Create/update a group: name description pinned archived order
+  tfa-cli project groups intake <slug> [on|off|regenerate] [field=value]…
+                                                   Public intake: autoStart maxSubmissions postIpLimit placeholder agentSettingsId
   tfa-cli project groups reorder <slug>…           Set wall order
   tfa-cli project surfaces                         List the board's card surfaces (live refs shown as cards)
   tfa-cli project surfaces set <id> ref=<ref> [title=…] [group=<slug>] [order=N]
@@ -53805,6 +53901,25 @@ async function projectCommand(api, positionals, args, projectId) {
 `);
       return;
     }
+    if (verb === "intake") {
+      const [slug, ...options] = gargs;
+      if (!slug)
+        fail("Usage: tfa-cli project groups intake <slug> [on|off|regenerate] [field=value]…");
+      const action = ["on", "off", "regenerate"].includes(options[0]) ? options.shift() : undefined;
+      if (options.length && action === "regenerate")
+        fail("regenerate does not accept settings");
+      const fields = parseAssignments2(options);
+      const intake = action === "regenerate" ? await api.regenerateProjectGroupIntake(projectId, slug) : action || options.length ? await api.updateProjectGroupIntake(projectId, slug, { ...fields, ...action && { enabled: action === "on" } }) : await api.getProjectGroupIntake(projectId, slug);
+      if (args.json) {
+        console.log(JSON.stringify(intake, null, 2));
+        return;
+      }
+      process.stderr.write(`${slug}: public ${intake.enabled ? "on" : "off"}, ${intake.submissionCount}/${intake.maxSubmissions}, autoStart=${intake.autoStart}
+`);
+      if (intake.url)
+        console.log(intake.url);
+      return;
+    }
     if (verb === "reorder") {
       if (!gargs.length)
         fail("Usage: tfa-cli project groups reorder <slug>…");
@@ -53880,11 +53995,10 @@ Usage:
   tfa-cli brand voice correct "<what is off>"      Tell the learner what it got wrong; profile is updated
                                                    in one pass and the correction is kept for every re-learn
 
-  Every voice verb takes --scope project|mine|personal — which voice to teach:
-    project   the project's, shared with its members (default; needs write access)
-    mine      yours, only in this project
-    personal  yours, in every project (e.g. your own Gmail)
-  Agents read all three; on the same voice name the narrower wins: mine > project > personal.
+  Every voice verb takes --scope mine|project — which voice to teach:
+    mine      yours, only in this project (default)
+    project   the project's, shared with its members (needs write access)
+  On the same voice name the narrower wins: mine > project.
 
 
 Questions the UI asks (keys for 'answers'):
@@ -53984,9 +54098,9 @@ async function voiceDeviceCommand(rest, args) {
 }
 async function voiceCommand(api, projectId, rest, args) {
   const [verb, ...vargs] = rest;
-  const scope = args.scope;
-  if (scope && !["project", "mine", "personal"].includes(scope))
-    fail(`--scope must be project, mine or personal, got '${scope}'`);
+  const scope = args.scope ?? "mine";
+  if (!["project", "mine"].includes(scope))
+    fail(`--scope must be mine or project, got '${scope}'`);
   if (verb === "collect" && !vargs[0])
     fail("Usage: tfa-cli brand voice collect <channel> [--url U | --account <page-id> | --max N] [--dry-run]");
   if (verb === "answers") {
@@ -54113,6 +54227,7 @@ Usage:
   tfa-cli device access <device>               who you shared the device with
   tfa-cli device share <device> <email>        let a teammate use it (their runs act as THEM)
   tfa-cli device unshare <device> <email>
+  tfa-cli device leave <device>                remove your own access to a shared device
 
 <device> is an id, name or hostname (unique partial works).
 Devices shared with you are marked "shared"; only the owner can rename/share them.
@@ -54149,6 +54264,12 @@ async function deviceCommand(api, positionals, args) {
       fail("Usage: tfa-cli device rename <device> <name>");
     await api.renameDevice(found.id, value);
     process.stderr.write(`${GREEN}✅ ${found.name} → ${value}${RESET}
+`);
+    return;
+  }
+  if (sub === "leave") {
+    await api.leaveDevice(found.id);
+    process.stderr.write(`${GREEN}✅ Removed ${found.name} from your devices${RESET}
 `);
     return;
   }
@@ -54198,15 +54319,7 @@ var STATUS_COLOR = {
   POSTPONED: CYAN,
   PAUSED: CYAN
 };
-var CLOSED = new Set([
-  "DONE",
-  "READY_CHECKED",
-  "CANCELLED",
-  "CANCELLED_CHECKED",
-  "ERROR_CHECKED",
-  "ARCHIVED",
-  "DELETED"
-]);
+var CLOSED = new Set(CLOSED_STATUSES);
 var VALID_STATUS = new Set(Object.values(TodoStatus));
 var isOpen = (s) => !CLOSED.has(s);
 function printListTodosHelp() {
@@ -54218,11 +54331,16 @@ Usage:
 
 Flags:
   -n, --limit <n>          Max rows to show (default: 30)
-      --cursor <n>         Fetch todos older than this cursor (lastActivityAt)
-      --page-size <n>      Backend page size per request (default: min(limit, 100), max: 100)
+      --cursor <n>         Fetch todos older than this cursor (sort field, epoch ms)
+      --since <t>          Only todos with sort field >= t (inclusive)
+      --until <t>          Only todos with sort field < t (exclusive)
+                           t = epoch ms | YYYY-MM-DD (local midnight) | ISO datetime | 12h / 3d ago
+      --sort <key>         activity (lastActivityAt, default) | created (createdAt)
+      --contributor <u>    Only todos a member opened/wrote in (id or email; comma = any)
+      --page-size <n>      Backend page size per request (default: min(limit, 400), max: 400)
       --search <text>      Search content/status on the backend
   -s, --status <S[,S2]>    Filter by status (comma-separated, union).
-  -A, --all                Include DONE (also CANCELLED, ARCHIVED, …)
+  -A, --all                Include closed (DONE, ARCHIVED, DELETED)
       --project <id>       Project ID (default: current default project)
       --json               Output { items, nextCursor } as JSON
   -h, --help               Show this help
@@ -54233,6 +54351,8 @@ Examples:
   todoforai-cli list --cursor 1719234567890  # next page
   todoforai-cli list --all                   # include DONE
   todoforai-cli list -s RUNNING,REVIEW_REQUESTED
+  todoforai-cli list -A --since 2026-10-11 --until 2026-10-12   # touched that day
+  todoforai-cli list -A --sort created --since 7d --contributor a@b.com
   todoforai-cli list --search bug --json | jq '.items[].id'
 `);
 }
@@ -54258,6 +54378,25 @@ function cursorValue(value) {
   }
   return n;
 }
+function parseTime(value, name, now = Date.now()) {
+  if (value === undefined)
+    return;
+  const s = String(value).trim();
+  const rel = s.match(/^(\d+)([mhd])$/);
+  let n;
+  if (/^\d+$/.test(s))
+    n = Number(s);
+  else if (rel)
+    n = now - Number(rel[1]) * { m: 60000, h: 3600000, d: 86400000 }[rel[2]];
+  else
+    n = Date.parse(/^\d{4}-\d{2}-\d{2}$/.test(s) ? `${s}T00:00` : s);
+  if (!Number.isFinite(n) || n < 0) {
+    process.stderr.write(`${RED}Error: ${name} must be epoch ms, YYYY-MM-DD, ISO datetime or e.g. 12h / 3d${RESET}
+`);
+    process.exit(2);
+  }
+  return n;
+}
 function toItemsPage(response) {
   if (Array.isArray(response))
     return { items: response };
@@ -54266,8 +54405,25 @@ function toItemsPage(response) {
     nextCursor: typeof response?.nextCursor === "number" ? response.nextCursor : undefined
   };
 }
-function rowTime(t) {
-  return Number(t.lastActivityAt ?? t.createdAt ?? 0);
+function rowTime(t, sort = "activity") {
+  return Number((sort === "created" ? t.createdAt : t.lastActivityAt ?? t.createdAt) ?? 0);
+}
+async function resolveContributors(api, projectId, raw) {
+  const wanted = raw.split(",").map((s) => s.trim()).filter(Boolean);
+  if (!wanted.some((w) => w.includes("@")))
+    return wanted;
+  const members = await api.getProjectMembers(projectId);
+  return wanted.map((w) => {
+    if (!w.includes("@"))
+      return w;
+    const m = members.find((m2) => m2.email?.toLowerCase() === w.toLowerCase());
+    if (!m) {
+      process.stderr.write(`${RED}Error: no project member with email ${w}${RESET}
+`);
+      process.exit(2);
+    }
+    return m.id;
+  });
 }
 function printStatusError(unknown) {
   process.stderr.write(`${RED}Error: unknown status ${unknown.map((s) => `'${s}'`).join(", ")}${RESET}
@@ -54290,6 +54446,10 @@ async function listTodosCommand(api, defaultProjectId, argv) {
       cursor: { type: "string" },
       "page-size": { type: "string" },
       search: { type: "string" },
+      since: { type: "string" },
+      until: { type: "string" },
+      sort: { type: "string" },
+      contributor: { type: "string" },
       status: { type: "string", short: "s" },
       all: { type: "boolean", short: "A", default: false },
       project: { type: "string" },
@@ -54309,9 +54469,20 @@ async function listTodosCommand(api, defaultProjectId, argv) {
     process.exit(1);
   }
   const limit = positiveInt(values.limit, "--limit") ?? 30;
-  const pageSize = Math.min(positiveInt(values["page-size"], "--page-size") ?? Math.min(Math.max(limit, 1), 100), 100);
+  const pageSize = Math.min(positiveInt(values["page-size"], "--page-size") ?? Math.min(Math.max(limit, 1), 400), 400);
+  const sort = values.sort === undefined ? "activity" : String(values.sort);
+  if (sort !== "activity" && sort !== "created") {
+    process.stderr.write(`${RED}Error: --sort must be activity or created${RESET}
+`);
+    process.exit(2);
+  }
+  const since = parseTime(values.since, "--since");
+  const until = parseTime(values.until, "--until");
   let cursor = cursorValue(values.cursor);
+  if (until !== undefined)
+    cursor = cursor === undefined ? until : Math.min(cursor, until);
   const search = values.search ? String(values.search) : undefined;
+  const contributorIds = values.contributor ? await resolveContributors(api, projectId, String(values.contributor)) : undefined;
   const requested = values.status ? String(values.status).split(",").map((s) => s.trim().toUpperCase()).filter(Boolean) : null;
   const unknown = requested?.filter((s) => s !== "OPEN" && !VALID_STATUS.has(s)) ?? [];
   if (unknown.length)
@@ -54323,9 +54494,24 @@ async function listTodosCommand(api, defaultProjectId, argv) {
   let backendNextCursor;
   while (rows.length < limit) {
     const requestLimit = Math.min(pageSize, limit - rows.length);
-    const page = toItemsPage(await api.listTodos(projectId, { limit: requestLimit, cursor, search }));
+    const page = toItemsPage(await api.listTodos(projectId, {
+      limit: requestLimit,
+      cursor,
+      search,
+      since,
+      contributorIds,
+      ...!includeClosed && { excludeClosed: true },
+      ...sort !== "activity" && { sort }
+    }));
     backendNextCursor = page.nextCursor;
+    let exhausted = false;
     for (const t of page.items) {
+      if (since !== undefined && rowTime(t) < since) {
+        exhausted = true;
+        break;
+      }
+      if (since !== undefined && rowTime(t, sort) < since)
+        continue;
       const status = String(t.status).toUpperCase();
       if (!includeClosed && CLOSED.has(status))
         continue;
@@ -54335,14 +54521,18 @@ async function listTodosCommand(api, defaultProjectId, argv) {
       if (rows.length >= limit)
         break;
     }
+    if (exhausted) {
+      backendNextCursor = undefined;
+      break;
+    }
     if (!backendNextCursor || page.items.length === 0)
       break;
     cursor = backendNextCursor;
   }
-  rows.sort((a, b) => rowTime(b) - rowTime(a));
+  rows.sort((a, b) => rowTime(b, sort) - rowTime(a, sort));
   const visible = rows.slice(0, limit);
   const hasBufferedRows = rows.length > visible.length;
-  const nextCursor = visible.length && (backendNextCursor !== undefined || hasBufferedRows) ? rowTime(visible[visible.length - 1]) : undefined;
+  const nextCursor = visible.length && (backendNextCursor !== undefined || hasBufferedRows) ? rowTime(visible[visible.length - 1], sort) : undefined;
   if (values.json) {
     process.stdout.write(JSON.stringify({ items: visible, nextCursor }, null, 2) + `
 `);
@@ -54360,7 +54550,7 @@ async function listTodosCommand(api, defaultProjectId, argv) {
   for (const t of visible) {
     const status = String(t.status).toUpperCase();
     const sc = STATUS_COLOR[status] || DIM;
-    const ts = new Date(rowTime(t)).toISOString().slice(0, 16).replace("T", " ");
+    const ts = new Date(rowTime(t, sort)).toISOString().slice(0, 16).replace("T", " ");
     const title = String(t.content ?? "").split(`
 `)[0].slice(0, 100);
     process.stdout.write(`${sc}${status.padEnd(statusW)}${RESET}  ${DIM}${ts}${RESET}  ${t.id}  ${title}
@@ -55248,7 +55438,6 @@ tfa-cli memory — memory and context folders as git checkouts
 
 Usage:
   tfa-cli memory sync [--project <id>]   Clone, or pull, into:
-      ~/.todoforai/{memory,context}                    yours            (todoforai:memory, todoforai:context)
       ~/.todoforai/projects/<id>/{memory,context}      the project's    (todoforai:projects/<id>/…)
       ~/.todoforai/projects/<id>/me/{memory,context}   yours in it      (todoforai:projects/<id>/me/…)
   tfa-cli memory path [--project <id>]   Print the checkout paths
@@ -55258,14 +55447,17 @@ use plain git: log, diff, show, revert, commit, then \`git push\` — the push u
 folder. A push behind the server is refused: \`git pull\` first. Files over 5 MB live outside
 history (upload them instead). Project folders: members with write access push; your own in
 a project (me/) is private to you. The project
-defaults to $TODOFORAI_PROJECT_ID.
+defaults to $TODOFORAI_PROJECT_ID and is required. Legacy global folders are read-only
+recovery, not synced.
 `);
 }
 var FOLDERS = ["memory", "context"];
 function checkouts(projectId) {
   const root = join5(homedir5(), ".todoforai");
-  const project = projectId && join5(root, "projects", projectId);
-  const scopes = [[root, ""], ...project ? [[project, `projects/${projectId}/`], [join5(project, "me"), `projects/${projectId}/me/`]] : []];
+  if (!projectId)
+    throw new Error("Select a project with --project <id> or $TODOFORAI_PROJECT_ID.");
+  const project = join5(root, "projects", projectId);
+  const scopes = [[project, `projects/${projectId}/`], [join5(project, "me"), `projects/${projectId}/me/`]];
   return scopes.flatMap(([dir, remote]) => FOLDERS.map((f) => [join5(dir, f), `${remote}${f}.git`]));
 }
 function git(args, cwd) {
@@ -56226,6 +56418,7 @@ __export(exports_util, {
   toZod: () => toZod,
   stringifyPrimitive: () => stringifyPrimitive,
   slugify: () => slugify,
+  sizeCaps: () => sizeCaps,
   shallowClone: () => shallowClone,
   safeExtend: () => safeExtend,
   required: () => required,
@@ -56800,6 +56993,18 @@ function prefixIssues(path4, issues) {
 function unwrapMessage(message) {
   return typeof message === "string" ? message : message?.message;
 }
+function sizeCaps(defChecks) {
+  const caps = [];
+  for (const ch of defChecks ?? []) {
+    const d = ch._zod.def;
+    if (!/_(length|size)$|_equals$/.test(d.check))
+      break;
+    const max = d.maximum ?? d.length ?? d.size;
+    if (max >= 0)
+      caps.push([max, ch]);
+  }
+  return caps;
+}
 function attachSchema(issues, start, inst) {
   var _a;
   for (let i = start;i < issues.length; i++) {
@@ -58219,7 +58424,7 @@ ${content.join(`
 var version = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js
@@ -58968,6 +59173,31 @@ var $ZodDate = /* @__PURE__ */ $constructor("$ZodDate", (inst, def) => {
     return payload;
   };
 });
+function capSize(inst, size) {
+  const caps = sizeCaps(inst._zod.def.checks);
+  if (!caps.length)
+    return;
+  const cap = Math.min(...caps.map((c3) => c3[0]));
+  const parse2 = inst._zod.parse;
+  inst._zod.parse = (payload, ctx) => {
+    const n = size(payload.value);
+    if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+      for (const [max, ch] of sizeCaps(inst._zod.def.checks)) {
+        if (n > max && ch._zod.def.when(payload)) {
+          const start = payload.issues.length;
+          ch._zod.check(payload);
+          payload.issues[start].continue = false;
+          attachSchema(payload.issues, start, inst);
+          return payload;
+        }
+      }
+    }
+    return parse2(payload, ctx);
+  };
+}
+var arraySize = (input) => Array.isArray(input) ? input.length : -1;
+var mapSize = (input) => input instanceof Map ? input.size : -1;
+var setSize = (input) => input instanceof Set ? input.size : -1;
 function handleArrayResult(result, final, index) {
   if (result.issues.length) {
     final.issues.push(...prefixIssues(index, result.issues));
@@ -59011,6 +59241,7 @@ var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
     }
     return payload;
   };
+  capSize(inst, arraySize);
 });
 function handlePropertyResult(result, final, key, input, optin, optout) {
   const isPresent = key in input;
@@ -59965,6 +60196,7 @@ var $ZodMap = /* @__PURE__ */ $constructor("$ZodMap", (inst, def) => {
       return Promise.all(proms).then(() => payload);
     return payload;
   };
+  capSize(inst, mapSize);
 });
 function handleMapResult(keyResult, valueResult, final, key, input, inst, ctx) {
   if (keyResult.issues.length) {
@@ -60031,6 +60263,7 @@ var $ZodSet = /* @__PURE__ */ $constructor("$ZodSet", (inst, def) => {
       return Promise.all(proms).then(() => payload);
     return payload;
   };
+  capSize(inst, setSize);
 });
 function handleSetResult(result, final) {
   if (result.issues.length) {
@@ -69480,9 +69713,15 @@ function generateNullableCheck(doc, ctx, schema, accessor, buildsValue = true) {
   doc.write(`}`);
   return outputVar;
 }
+function generateSizeGate(doc, schema, size) {
+  for (const [max, check] of sizeCaps(schema._zod.def.checks)) {
+    doc.write(`if (${size} > ${numericOperand(max, check._zod.def.check)}) return INVALID;`);
+  }
+}
 function generateArrayCheck(doc, ctx, schema, accessor, buildsValue = true) {
   const def = schema._zod.def;
   doc.write(`if (!Array.isArray(${accessor})) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.length`);
   const outputVar = buildsValue ? newVar(ctx) : null;
   const iVar = newVar(ctx);
   const elemVar = newVar(ctx);
@@ -69882,6 +70121,7 @@ function literalPropertyKey(ctx, key) {
 function generateMapCheck(doc, ctx, schema, accessor) {
   const def = schema._zod.def;
   doc.write(`if (!(${accessor} instanceof Map)) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.size`);
   const outputVar = newVar(ctx);
   const kVar = newVar(ctx);
   const valVar = newVar(ctx);
@@ -69898,6 +70138,7 @@ function generateMapCheck(doc, ctx, schema, accessor) {
 function generateSetCheck(doc, ctx, schema, accessor) {
   const def = schema._zod.def;
   doc.write(`if (!(${accessor} instanceof Set)) return INVALID;`);
+  generateSizeGate(doc, schema, `${accessor}.size`);
   const outputVar = newVar(ctx);
   const valVar = newVar(ctx);
   doc.write(`const ${outputVar} = new Set();`);
@@ -75065,6 +75306,21 @@ function preserveCustomPayload(schema, key, knownTags) {
     return output2;
   });
 }
+function defaultOnErrorOptionalStringTag(schema, key) {
+  return exports_external.preprocess((value) => {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+      return value;
+    }
+    const record2 = value;
+    const tag = record2[key];
+    if (tag === undefined || tag === null || typeof tag === "string") {
+      return value;
+    }
+    const normalized = { ...record2 };
+    delete normalized[key];
+    return normalized;
+  }, schema);
+}
 function vecSkipError(itemSchema) {
   return exports_external.array(itemSchema.catch(skippedItem)).transform((items) => items.filter((item) => item !== skippedItem));
 }
@@ -75083,16 +75339,12 @@ var zWriteTextFileRequest = object({
 var zReadTextFileRequest = object({
   sessionId: zSessionId,
   path: string2(),
-  line: defaultOnError(int().gte(0).max(4294967295, {
+  line: int().gte(0).max(4294967295, {
     error: "Invalid value: Expected uint32 to be <= 4294967295"
-  }).nullish(), () => {
-    return;
-  }),
-  limit: defaultOnError(int().gte(0).max(4294967295, {
+  }).nullish(),
+  limit: int().gte(0).max(4294967295, {
     error: "Invalid value: Expected uint32 to be <= 4294967295"
-  }).nullish(), () => {
-    return;
-  }),
+  }).nullish(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -75343,14 +75595,10 @@ var zEnvVariable = object({
 var zCreateTerminalRequest = object({
   sessionId: zSessionId,
   command: string2(),
-  args: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  env: defaultOnError(vecSkipError(zEnvVariable).optional(), () => []),
-  cwd: defaultOnError(string2().nullish(), () => {
-    return;
-  }),
-  outputByteLimit: defaultOnError(number2().nullish(), () => {
-    return;
-  }),
+  args: array(string2()).optional(),
+  env: array(zEnvVariable).optional(),
+  cwd: string2().nullish(),
+  outputByteLimit: number2().nullish(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -75876,10 +76124,8 @@ var zAuthMethodTerminal = object({
   description: defaultOnError(string2().nullish(), () => {
     return;
   }),
-  args: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  env: defaultOnError(record(string2(), string2()).optional(), () => {
-    return;
-  }),
+  args: array(string2()).optional(),
+  env: record(string2(), string2()).optional(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -76577,17 +76823,61 @@ var zRunningStateUpdate = object({
     return;
   })
 });
-var zIdleStateUpdate = object({
-  stopReason: defaultOnError(zStopReason.nullish(), () => {
+var zErrorStopReason = object({
+  error: defaultOnError(zError.nullish(), () => {
     return;
+  })
+});
+var zIdleStateUpdate = defaultOnErrorOptionalStringTag(preserveCustomPayload(intersection(union([
+  object({
+    stopReason: literal("end_turn")
+  }),
+  object({
+    stopReason: literal("max_tokens")
   }),
+  object({
+    stopReason: literal("max_turn_requests")
+  }),
+  object({
+    stopReason: literal("refusal")
+  }),
+  object({
+    stopReason: literal("cancelled")
+  }),
+  zErrorStopReason.and(object({
+    stopReason: literal("error")
+  })),
+  excludeKnownTags(object({
+    stopReason: string2()
+  }), "stopReason", [
+    "cancelled",
+    "end_turn",
+    "error",
+    "max_tokens",
+    "max_turn_requests",
+    "refusal"
+  ]),
+  object({
+    stopReason: _null3().optional()
+  })
+]), object({
   usage: defaultOnError(zUsage.nullish(), () => {
     return;
   }),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
+  }),
+  stopReason: defaultOnError(string2().nullish(), () => {
+    return;
   })
-});
+})), "stopReason", [
+  "cancelled",
+  "end_turn",
+  "error",
+  "max_tokens",
+  "max_turn_requests",
+  "refusal"
+]), "stopReason");
 var zRequiresActionStateUpdate = object({
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
@@ -76970,16 +77260,16 @@ var zMcpServer = union([
 ]);
 var zNewSessionRequest = object({
   cwd: string2(),
-  additionalDirectories: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  mcpServers: requiredDefaultOnError(vecSkipError(zMcpServer), () => []),
+  additionalDirectories: array(string2()).optional(),
+  mcpServers: array(zMcpServer),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
 });
 var zLoadSessionRequest = object({
-  mcpServers: requiredDefaultOnError(vecSkipError(zMcpServer), () => []),
+  mcpServers: array(zMcpServer),
   cwd: string2(),
-  additionalDirectories: defaultOnError(vecSkipError(string2()).optional(), () => []),
+  additionalDirectories: array(string2()).optional(),
   sessionId: zSessionId,
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
@@ -77001,8 +77291,8 @@ var zDeleteSessionRequest = object({
 var zForkSessionRequest = object({
   sessionId: zSessionId,
   cwd: string2(),
-  additionalDirectories: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  mcpServers: defaultOnError(vecSkipError(zMcpServer).optional(), () => []),
+  additionalDirectories: array(string2()).optional(),
+  mcpServers: array(zMcpServer).optional(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -77010,8 +77300,8 @@ var zForkSessionRequest = object({
 var zResumeSessionRequest = object({
   sessionId: zSessionId,
   cwd: string2(),
-  additionalDirectories: defaultOnError(vecSkipError(string2()).optional(), () => []),
-  mcpServers: defaultOnError(vecSkipError(zMcpServer).optional(), () => []),
+  additionalDirectories: array(string2()).optional(),
+  mcpServers: array(zMcpServer).optional(),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -77392,7 +77682,7 @@ var zDidChangeDocumentNotification = object({
   sessionId: zSessionId,
   uri: string2(),
   version: number2(),
-  contentChanges: requiredDefaultOnError(vecSkipError(zTextDocumentContentChangeEvent), () => []),
+  contentChanges: array(zTextDocumentContentChangeEvent),
   _meta: defaultOnError(record(string2(), unknown()).nullish(), () => {
     return;
   })
@@ -78471,9 +78761,26 @@ var zGuardElicitationPropertySchemaBoolean = zBooleanPropertySchema.and(object({
 var zGuardElicitationPropertySchemaArray = zMultiSelectPropertySchema.and(object({ type: literal("array") }));
 var zGuardMultiSelectItemsString = zStringMultiSelectItems.and(object({ type: literal("string") }));
 var zGuardStateUpdateRunning = zRunningStateUpdate.and(object({ state: literal("running") }));
-var zGuardStateUpdateIdle = zIdleStateUpdate.and(object({ state: literal("idle") }));
+var zGuardStateUpdateIdle = zIdleStateUpdate.and(object({ usage: zUsage.nullish() })).and(object({ state: literal("idle") }));
 var zGuardStateUpdateRequiresAction = zRequiresActionStateUpdate.and(object({ state: literal("requires_action") }));
 var zGuardStateUpdateUnknown = zUnknownStateUpdate.and(object({ state: literal("unknown") }));
+var zGuardIdleStateUpdateEndTurn = object({
+  stopReason: literal("end_turn")
+});
+var zGuardIdleStateUpdateMaxTokens = object({
+  stopReason: literal("max_tokens")
+});
+var zGuardIdleStateUpdateMaxTurnRequests = object({
+  stopReason: literal("max_turn_requests")
+});
+var zGuardIdleStateUpdateRefusal = object({
+  stopReason: literal("refusal")
+});
+var zGuardIdleStateUpdateCancelled = object({
+  stopReason: literal("cancelled")
+});
+var zGuardIdleStateUpdateError = zErrorStopReason.and(object({ error: zError.nullish() })).and(object({ stopReason: literal("error") }));
+var zGuardIdleStateUpdateNone = object({ stopReason: _null3().optional() });
 var zGuardCreateElicitationResponseAccept = zElicitationAcceptAction.and(object({ action: literal("accept") }));
 var zGuardCreateElicitationResponseDecline = object({
   action: literal("decline")
@@ -79832,6 +80139,7 @@ async function runAcp(apiUrl, apiKey, opts) {
 
 // src/shutdown.ts
 var activeRun2 = null;
+var stopOnExit2 = false;
 var cleanups2 = [];
 var exiting2 = null;
 var cancelling2 = null;
@@ -79839,6 +80147,11 @@ var CANCEL_TIMEOUT_MS2 = 5000;
 function setActiveRun2(run2) {
   activeRun2 = run2;
 }
+function stopRunOnExit() {
+  stopOnExit2 = true;
+}
+var detachNotice2 = (todoId) => `Todo keeps running — reattach: tfa-cli --resume ${todoId}
+`;
 function trackStart(ws, projectId, started) {
   setActiveRun2(started.then((todoId) => ({ ws, projectId, todoId }), () => null));
 }
@@ -79856,7 +80169,7 @@ function cancelActiveRun2(timeoutMs = CANCEL_TIMEOUT_MS2) {
   if (cancelling2)
     return cancelling2;
   const pending = activeRun2;
-  if (!pending)
+  if (!pending || !stopOnExit2)
     return Promise.resolve({ ok: false, todoId: null });
   const res = { ok: false };
   const attempt = (async () => {
@@ -79882,7 +80195,11 @@ function shutdown2(code, reason) {
       process.stderr.write(`
 ${reason}
 `);
-    if (activeRun2) {
+    if (activeRun2 && !stopOnExit2) {
+      const run2 = await withTimeout2(Promise.resolve(activeRun2), CANCEL_TIMEOUT_MS2, null);
+      if (run2)
+        process.stderr.write(detachNotice2(run2.todoId));
+    } else if (activeRun2) {
       const { ok, todoId } = await cancelActiveRun2();
       if (ok)
         process.stderr.write(`Stopped todo ${todoId}
@@ -79912,7 +80229,7 @@ function finish(code) {
   });
 }
 function installSignalHandlers() {
-  process.on("SIGINT", () => void shutdown2(130, "Cancelled by user (Ctrl+C)"));
+  process.on("SIGINT", () => void shutdown2(130, "Exited (Ctrl+C)"));
   process.on("SIGTERM", () => void shutdown2(143, "Terminated (SIGTERM)"));
   process.on("SIGHUP", () => void shutdown2(129, "Hangup (SIGHUP)"));
 }
@@ -80632,8 +80949,7 @@ async function main() {
       await watchTodo(ws2, todoId, projectId2, {
         json: !!args.json,
         autoApprove,
-        agentSettings: agent3,
-        exitOnInterrupt: !!args["non-interactive"]
+        agentSettings: agent3
       });
       if (!args["non-interactive"]) {
         process.stderr.write(`
@@ -80684,7 +81000,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
       cfg.addToHistory(followUp);
       await appendTracked(api2, ws2, projectId2, followUp, agent3, todoId);
       await linkToSpawningBlock(api2, todoId);
-      await watchTodo(ws2, todoId, projectId2, { json: !!args.json, autoApprove, agentSettings: agent3, exitOnInterrupt: !!args["non-interactive"] });
+      await watchTodo(ws2, todoId, projectId2, { json: !!args.json, autoApprove, agentSettings: agent3 });
     }
     if (!args["non-interactive"]) {
       await interactiveLoop(ws2, api2, todoId, projectId2, agent3, !!args.json, autoApprove, cfg);
@@ -80706,6 +81022,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
   if (mayfly) {
     process.stderr.write(`${DIM2}Isolated bridge:${RESET2} ${CYAN2}mayfly-${isolatedTodoId}${RESET2}
 `);
+    stopRunOnExit();
     onShutdown(mayfly.stop);
     mayfly.child.on("exit", (code, sig) => {
       if (!mayfly.stopped())
@@ -80845,8 +81162,7 @@ Resumed: ${CYAN2}${getFrontendUrl(apiUrl, todoId)}${RESET2}
     await watchTodo(ws, actualTodoId, projectId, {
       json: !!args.json,
       autoApprove,
-      agentSettings: agent2,
-      exitOnInterrupt: !!args["non-interactive"]
+      agentSettings: agent2
     });
     if (!args["non-interactive"]) {
       process.stderr.write(`

package/package.json

@@ -6,7 +6,7 @@
     "type": "git",
     "url": "git+https://github.com/todoforai/cli.git"
   },
-  "version": "0.1.66",
+  "version": "0.1.68",
   "type": "module",
   "bin": {
     "todoforai-cli": "bin/todoforai-cli.js",