@todoforai/edge 0.13.18 → 0.13.20

package/dist/index.js

@@ -47977,10 +47977,10 @@ function setConnectionContext(get) {
 function getConnectionEnv() {
   if (!getter)
     return {};
-  const { apiUrl, apiKey } = getter();
-  if (!apiUrl || !apiKey)
+  const { apiUrl, sessionToken } = getter();
+  if (!apiUrl || !sessionToken)
     return {};
-  return { TODOFORAI_API_URL: apiUrl, TODOFORAI_API_TOKEN: apiKey };
+  return { TODOFORAI_API_URL: apiUrl, TODOFORAI_API_TOKEN: sessionToken };
 }
 
 // src/constants.ts
@@ -48033,7 +48033,8 @@ var EF = {
   FRONTEND_FILE_CHUNK_RESULT: "frontend:file_chunk_result"
 };
 var S2E = {
-  EDGE_CONFIG_UPDATE: "edge:config_update"
+  EDGE_CONFIG_UPDATE: "edge:config_update",
+  SESSION_TOKEN: "edge:session_token"
 };
 var msg = {
   edgeStatus(edgeId, status) {
@@ -48144,7 +48145,7 @@ class ApiClient {
   }
   async request(method, endpoint, body) {
     const url = `${this.apiUrl}${endpoint}`;
-    const opts = { method, headers: this.headers };
+    const opts = { method, headers: this.headers, signal: AbortSignal.timeout(30000) };
     if (body)
       opts.body = JSON.stringify(body);
     const res = await fetch(url, opts);
@@ -48771,7 +48772,6 @@ var tool_catalog_default = {
       "~/.zele/sqlite.db"
     ],
     capabilities: "Read inbox, search/send/reply email, email addresses — multi-account Gmail, OAuth browser login for setup.",
-    description: "Use for anything Gmail: reading the user's inbox, searching mail, sending or replying to email. Multi-account, OAuth login via `zele login`.",
     versionCmd: "zele --version 2>/dev/null | head -1"
   },
   xurl: {
@@ -48785,7 +48785,7 @@ var tool_catalog_default = {
       "~/.xurl"
     ],
     capabilities: "Post tweets, reply & quote, read timelines, search tweets, like & repost, follow/unfollow, DMs, media uploads",
-    description: "Use to interact with X/Twitter: post/reply/quote tweets, search, read timelines, like/repost, follow, DMs, media upload. Authenticated raw API access via `xurl <method> <path>`.",
+    description: "Authenticated raw X API access via `xurl <method> <path>`; login `xurl auth oauth2`.",
     versionCmd: "xurl --version 2>/dev/null | head -1"
   },
   "tiktok-uploader": {
@@ -48798,7 +48798,6 @@ var tool_catalog_default = {
       "~/.tiktok/cookies.txt"
     ],
     capabilities: "Upload videos, batch uploads, schedule posts, custom covers, hashtags & mentions",
-    description: "Upload videos to TikTok, schedule posts, set covers and hashtags.",
     versionCmd: "pip show tiktok-uploader 2>/dev/null | grep -oP 'Version: \\K.*'"
   },
   instagrapi: {
@@ -48807,7 +48806,6 @@ var tool_catalog_default = {
     installer: "pip",
     label: "Instagram",
     capabilities: "Upload photos & reels, post stories, send DMs, like & comment, manage followers",
-    description: "Instagram automation: upload photos/reels, stories, DMs, likes, follower management.",
     versionCmd: "pip show instagrapi 2>/dev/null | grep -oP 'Version: \\K.*'"
   },
   mudslide: {
@@ -48821,9 +48819,50 @@ var tool_catalog_default = {
       "~/.local/share/mudslide"
     ],
     capabilities: "Send messages, send images & files, send locations & polls, group management, QR code login",
-    description: "Use to send WhatsApp messages/files/media/locations/polls from CLI. QR-code login via `mudslide login`.",
     versionCmd: "mudslide --version 2>/dev/null | head -1"
   },
+  slack: {
+    category: "development",
+    pkg: "slack-cli",
+    installer: "binary",
+    label: "Slack",
+    statusCmd: "slack-cli auth list 2>&1 | grep -q 'Team' && echo authenticated",
+    loginCmd: "slack-cli login",
+    credentialPaths: [
+      "~/.slack/credentials.json"
+    ],
+    capabilities: "Build & deploy Slack apps, manage workspaces & triggers, run datastore queries, tail logs — official Slack CLI.",
+    description: "`slack-cli login` to auth. Invoked as `slack-cli` to avoid colliding with the Slack desktop app's `slack` binary.",
+    versionCmd: "slack-cli version 2>/dev/null | head -1",
+    binName: "slack-cli",
+    binary: {
+      "linux-x86_64": {
+        url: "https://github.com/slackapi/slack-cli/releases/download/v4.2.0/slack_cli_4.2.0_linux_amd64.tar.gz",
+        archive: "tar.gz",
+        extract: "bin/slack"
+      },
+      "linux-aarch64": {
+        url: "https://github.com/slackapi/slack-cli/releases/download/v4.2.0/slack_cli_4.2.0_linux_arm64.tar.gz",
+        archive: "tar.gz",
+        extract: "bin/slack"
+      },
+      "darwin-x86_64": {
+        url: "https://github.com/slackapi/slack-cli/releases/download/v4.2.0/slack_cli_4.2.0_macOS_amd64.tar.gz",
+        archive: "tar.gz",
+        extract: "bin/slack"
+      },
+      "darwin-aarch64": {
+        url: "https://github.com/slackapi/slack-cli/releases/download/v4.2.0/slack_cli_4.2.0_macOS_arm64.tar.gz",
+        archive: "tar.gz",
+        extract: "bin/slack"
+      },
+      "windows-x86_64": {
+        url: "https://github.com/slackapi/slack-cli/releases/download/v4.2.0/slack_cli_4.2.0_windows_64-bit.zip",
+        archive: "zip",
+        extract: "bin/slack.exe"
+      }
+    }
+  },
   "telegram-send": {
     category: "messaging",
     pkg: "telegram-send",
@@ -48834,18 +48873,8 @@ var tool_catalog_default = {
       "~/.config/telegram-send/telegram-send.conf"
     ],
     capabilities: "Send messages, send files & images, send video & audio, Markdown/HTML formatting, channel & group support",
-    description: "Send Telegram messages and files from CLI via a bot.",
     versionCmd: "telegram-send --version 2>/dev/null | head -1"
   },
-  "apollo-api": {
-    category: "marketing",
-    pkg: "@todoforai/apollo-api",
-    installer: "npm",
-    label: "Apollo",
-    capabilities: "Lead search & enrichment, email sequences, CRM sync",
-    description: "Use for B2B prospecting: search Apollo's people/company DB, enrich leads with emails/titles/companies, manage sequences and CRM data. Needs APOLLO_API_KEY.",
-    versionCmd: "apollo-api --version 2>/dev/null | head -1"
-  },
   "meta-ads": {
     category: "marketing",
     pkg: "meta-ads",
@@ -48853,7 +48882,6 @@ var tool_catalog_default = {
     label: "Meta Ads",
     statusCmd: "meta auth status 2>&1",
     capabilities: "Meta/Facebook & Instagram ad campaigns: campaigns/adsets/ads CRUD, insights & reporting, catalog/product-feed/product-set/product-item, ad creatives, datasets (pixels), pages — Marketing API via the official `meta` CLI.",
-    description: "Manage Meta/Facebook & Instagram ad campaigns, insights, creatives, and catalogs.",
     versionCmd: "meta --version 2>/dev/null | head -1"
   },
   "elevenlabs-api": {
@@ -48861,8 +48889,7 @@ var tool_catalog_default = {
     pkg: "@todoforai/elevenlabs-api",
     installer: "npm",
     label: "ElevenLabs",
-    capabilities: "Text-to-speech, voice cloning, multiple languages",
-    description: "Use to generate speech audio from text, clone voices, or list voices. Needs ELEVENLABS_API_KEY.",
+    capabilities: "Text-to-speech, voice cloning, multiple languages. Needs ELEVENLABS_API_KEY.",
     versionCmd: "elevenlabs-api --version 2>/dev/null | head -1"
   },
   "codex-imagegen-api": {
@@ -48871,7 +48898,6 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Image Gen",
     capabilities: "AI image generation & editing via TODOFORAI backend (gpt-image)",
-    description: "Generate or edit images with AI.",
     versionCmd: "codex-imagegen-api --version 2>/dev/null | head -1"
   },
   "suno-api": {
@@ -48879,8 +48905,7 @@ var tool_catalog_default = {
     pkg: "@todoforai/suno-api",
     installer: "npm",
     label: "Suno",
-    capabilities: "AI music generation, custom lyrics, multiple genres",
-    description: "Use to generate music/songs from a prompt or custom lyrics. Needs SUNO_API_KEY.",
+    capabilities: "AI music generation, custom lyrics, multiple genres. Needs SUNO_API_KEY.",
     versionCmd: "suno-api --version 2>/dev/null | head -1"
   },
   ntn: {
@@ -48894,7 +48919,6 @@ var tool_catalog_default = {
       "~/.config/notion"
     ],
     capabilities: "Official Notion CLI: workspace-wide OAuth login, raw API calls (`ntn api <path>`), page/datasource management, file uploads, Workers deploy.",
-    description: "Read, create, and update Notion pages and databases.",
     versionCmd: "ntn --version 2>/dev/null | head -1"
   },
   "perplexity-api": {
@@ -48903,7 +48927,6 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Perplexity",
     capabilities: "AI-powered web search, chat completions, async chat, embeddings and agent runs",
-    description: "Web-grounded AI search with citations. Use when you need fresh information beyond training cutoff.",
     versionCmd: "perplexity-api --version 2>/dev/null | head -1"
   },
   gh: {
@@ -48918,7 +48941,7 @@ var tool_catalog_default = {
       "~/.config/gh/hosts.yml"
     ],
     capabilities: "Repos, PRs & issues, actions & releases, gists & SSH keys",
-    description: "Use for any GitHub operation: create/list/merge PRs, file issues, manage releases, trigger/inspect Actions, clone/fork repos, gists. Prefer `gh` over raw GitHub API calls.",
+    description: "Prefer `gh` over raw GitHub API calls.",
     versionCmd: "gh --version 2>/dev/null | head -1"
   },
   glab: {
@@ -48932,7 +48955,7 @@ var tool_catalog_default = {
       "~/.config/glab-cli/config.yml"
     ],
     capabilities: "Repos, MRs & issues, CI/CD pipelines, releases",
-    description: "Use for any GitLab operation: MRs, issues, pipelines, releases, repo management. GitLab equivalent of `gh`.",
+    description: "GitLab equivalent of `gh`.",
     versionCmd: "glab --version 2>/dev/null | head -1"
   },
   vercel: {
@@ -48946,7 +48969,7 @@ var tool_catalog_default = {
       "~/.local/share/com.vercel.cli/auth.json"
     ],
     capabilities: "Deploy & preview, environment variables, domain management",
-    description: "Use to deploy a project to Vercel (`vercel deploy`), manage env vars, domains, and preview URLs.",
+    description: "`vercel deploy`; manage env vars, domains, preview URLs.",
     versionCmd: "vercel --version 2>/dev/null | head -1"
   },
   netlify: {
@@ -48960,7 +48983,7 @@ var tool_catalog_default = {
       "~/.netlify/config.json"
     ],
     capabilities: "Deploy & preview, serverless functions, forms & identity",
-    description: "Use to deploy sites/functions to Netlify, manage env vars, forms, identity. `netlify deploy --prod` for production.",
+    description: "`netlify deploy --prod` for production; manage env vars, forms, identity.",
     versionCmd: "netlify --version 2>/dev/null | head -1"
   },
   firebase: {
@@ -48974,7 +48997,7 @@ var tool_catalog_default = {
       "~/.config/configstore/firebase-tools.json"
     ],
     capabilities: "Hosting & deploy, Firestore & Realtime DB, auth & functions",
-    description: "Use for Firebase: deploy hosting/functions, manage Firestore/Realtime DB rules and data, auth users, emulators.",
+    description: "Deploy hosting/functions, manage Firestore/RTDB rules and data, auth users, emulators.",
     versionCmd: "firebase --version 2>/dev/null | head -1"
   },
   wrangler: {
@@ -48988,7 +49011,7 @@ var tool_catalog_default = {
       "~/.config/.wrangler/config/default.toml"
     ],
     capabilities: "Workers & Pages deploy, KV & D1 storage, R2 & Queues",
-    description: "Use for Cloudflare developer platform: deploy Workers/Pages, manage KV/D1/R2/Queues, tail logs. Use `cloudflared` for tunnels.",
+    description: "Tail logs with `wrangler tail`. Use `cloudflared` for tunnels.",
     versionCmd: "wrangler --version 2>/dev/null | head -1"
   },
   stripe: {
@@ -49002,7 +49025,7 @@ var tool_catalog_default = {
       "~/.config/stripe/config.toml"
     ],
     capabilities: "Payments & subscriptions, webhook testing, invoice management",
-    description: "Use for Stripe: inspect/create customers, charges, subscriptions, invoices, webhooks. `stripe listen` to forward webhooks locally; `stripe get/post /v1/...` for raw API.",
+    description: "`stripe listen` forwards webhooks locally; `stripe get/post /v1/...` for raw API.",
     versionCmd: "stripe --version 2>/dev/null | head -1"
   },
   flyctl: {
@@ -49016,7 +49039,7 @@ var tool_catalog_default = {
       "~/.fly/config.yml"
     ],
     capabilities: "Deploy containers globally, Postgres & volumes, auto-scaling",
-    description: "Use to deploy apps/containers to Fly.io edge, manage Postgres/volumes/machines/secrets. `flyctl deploy` from app dir.",
+    description: "`flyctl deploy` from app dir; manage Postgres/volumes/machines/secrets.",
     versionCmd: "flyctl version 2>/dev/null | head -1"
   },
   supabase: {
@@ -49030,7 +49053,7 @@ var tool_catalog_default = {
       "~/.config/supabase/access-token"
     ],
     capabilities: "Postgres database, auth & storage, edge functions",
-    description: "Use for Supabase projects: run/migrate local Postgres, deploy edge functions, manage auth/storage, link to cloud project.",
+    description: "Link to cloud project; runs/migrates local Postgres.",
     versionCmd: "supabase --version 2>/dev/null | head -1"
   },
   railway: {
@@ -49044,7 +49067,7 @@ var tool_catalog_default = {
       "~/.railway/config.json"
     ],
     capabilities: "Deploy apps & databases, environment management, auto-scaling",
-    description: "Use to deploy apps/services to Railway, provision databases, manage env vars and environments. `railway up` to deploy current dir.",
+    description: "`railway up` to deploy current dir.",
     versionCmd: "railway --version 2>/dev/null | head -1"
   },
   shopify: {
@@ -49057,16 +49080,23 @@ var tool_catalog_default = {
       "~/.config/shopify/config.json"
     ],
     capabilities: "Theme development, app scaffolding, store management",
-    description: "Use for Shopify dev: scaffold/develop themes and apps, push/pull themes, run dev server against a store.",
     versionCmd: "shopify version 2>/dev/null | head -1"
   },
+  "shop-app": {
+    category: "ecommerce",
+    pkg: "@todoforai/shop-app",
+    installer: "npm",
+    label: "Shop",
+    capabilities: "Product search & price comparison across Shopify stores",
+    description: "Shop.app product search across Shopify stores (no auth). `shop-app search '<query>' --ships-to HU -n 10` returns products with price, rating, URL, variants. `shop-app similar <variantId>` for lookalikes.",
+    versionCmd: "shop-app --version 2>/dev/null | head -1"
+  },
   "datadog-ci": {
     category: "monitoring",
     pkg: "@datadog/datadog-ci",
     installer: "npm",
     label: "Datadog",
-    capabilities: "CI test visibility, sourcemap uploads, deployment tracking",
-    description: "Use in CI to upload test results/sourcemaps/coverage to Datadog and mark deployments. Needs DATADOG_API_KEY.",
+    capabilities: "CI test visibility, sourcemap uploads, deployment tracking. Needs DATADOG_API_KEY.",
     versionCmd: "datadog-ci version 2>/dev/null | head -1"
   },
   "sentry-cli": {
@@ -49080,7 +49110,7 @@ var tool_catalog_default = {
       "~/.sentryclirc"
     ],
     capabilities: "Release management, sourcemap uploads, error monitoring",
-    description: "Use to create Sentry releases, upload sourcemaps/debug-symbols, associate commits, send events. `sentry-cli releases new <version>`.",
+    description: "`sentry-cli releases new <version>`.",
     versionCmd: "sentry-cli --version 2>/dev/null | head -1"
   },
   todoai: {
@@ -49089,7 +49119,7 @@ var tool_catalog_default = {
     installer: "bun",
     label: "TODOforAI",
     capabilities: "Create/list/inspect/update TODOs, run templates & workflows, platform API access",
-    description: "Use for the TODOforAI platform — this is how you reach the user's OWN TODOs: `todoai list` (filter with `--status open`) to browse them, `todoai \"prompt\"` to create one, `todoai --inspect <id>` to read a TODO's full chat log, `todoai status/addmessage/delete` to manage them, `--template` to run a registry workflow. Never claim you lack access to platform TODOs — reach them here; run `--help` for details.",
+    description: '`todoai list` (`--status open`) to browse, `todoai "prompt"` to create, `--inspect <id>` to read a chat log, `status/addmessage/delete` to manage, `--template` for registry workflows.',
     installCmd: "bun add -g @todoforai/cli",
     versionCmd: "todoai --version 2>/dev/null | head -1",
     internal: true
@@ -49100,7 +49130,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Postman",
     capabilities: "Run API test collections, CI/CD integration, HTML reports",
-    description: "Use to run Postman collections from CLI (API smoke tests, CI checks). `newman run <collection.json> -e <env.json>`.",
+    description: "`newman run <collection.json> -e <env.json>`.",
     versionCmd: "newman --version 2>/dev/null | head -1"
   },
   curl: {
@@ -49121,22 +49151,20 @@ var tool_catalog_default = {
     installer: "binary",
     label: "Tunnel",
     capabilities: "Tunnel to localhost, expose local services, zero-trust access",
-    description: "Use to expose a local port to the public internet via a Cloudflare tunnel. Quick: `cloudflared tunnel --url http://localhost:<port>` prints a public https URL.",
+    description: "`cloudflared tunnel --url http://localhost:<port>` prints a public https URL.",
     versionCmd: "cloudflared --version 2>/dev/null | head -1"
   },
   vault: {
     category: "security",
     pkg: "vault",
     installer: "binary",
-    preinstallCloud: true,
     label: "HashiCorp Vault",
     statusCmd: "vault token lookup >/dev/null 2>&1 && echo authenticated",
     loginCmd: "vault login",
     credentialPaths: [
       "~/.vault-token"
     ],
-    capabilities: "Secrets management, dynamic credentials",
-    description: "HashiCorp Vault CLI — only for Terraform/vals/ecosystem integrations that expect it. For all credential read/write tasks use `tfa-vault` instead. Needs VAULT_ADDR + VAULT_TOKEN.",
+    capabilities: "Secrets management, dynamic credentials. Needs VAULT_ADDR + VAULT_TOKEN; for credential read/write use `tfa-vault` instead.",
     versionCmd: "vault --version 2>/dev/null | head -1"
   },
   rclone: {
@@ -49151,7 +49179,6 @@ var tool_catalog_default = {
       "~/.config/rclone/rclone.conf"
     ],
     capabilities: "Access Google Drive, OneDrive, Dropbox, S3 and 40+ cloud providers. List, copy, sync, move, mount files as virtual filesystem (FUSE). Use 'rclone config create <name> <provider>' to connect (opens browser for OAuth).",
-    description: "Access cloud storage (Google Drive, OneDrive, Dropbox, S3, 40+ providers). List, copy, sync, or mount files.",
     subProviders: {
       gdrive: {
         label: "Google Drive",
@@ -49196,8 +49223,7 @@ var tool_catalog_default = {
     pkg: "pymupdf",
     installer: "pip",
     label: "PDF",
-    capabilities: "PDF text editing, extraction, merge, split",
-    description: "Read, edit, merge, or split PDFs programmatically. Call via `python3 -c`.",
+    capabilities: "PDF text editing, extraction, merge, split. Call via `python3 -c`.",
     versionCmd: "python3 -c 'import pymupdf; print(pymupdf.__version__)' 2>/dev/null",
     preinstallCloud: true
   },
@@ -49208,16 +49234,16 @@ var tool_catalog_default = {
     preinstallCloud: true,
     label: "Browser",
     capabilities: "Headless browser automation, web scraping, accessibility tree snapshots, screenshots, PDF generation",
-    description: "Headless browser. Use for JS-rendered pages, scraping, screenshots, PDFs, and automated flows. Default browser — prefer over `todoforai-browser` unless the user's own session is needed.",
+    description: "Default browser. On a PC with a display prefer a visible window the user can watch/interact with (needed for CAPTCHA/MFA/login): launch a separate Chrome with `google-chrome --remote-debugging-port=9222 --user-data-dir=$HOME/.config/google-chrome-cdp >/tmp/chrome-cdp.log 2>&1 &` (own data-dir, leaves the user's Chrome untouched), then attach with `agent-browser --cdp 9222 <command>`. Use headless only on the cloud or when no display is available.",
     versionCmd: "agent-browser --version 2>/dev/null | head -1"
   },
   "todoforai-browser": {
     category: "development",
     pkg: "@todoforai/browser",
     installer: "npm",
+    preinstallCloud: true,
     label: "Browser (Extension)",
     capabilities: "Browser automation via extension (non-headless), web scraping, accessibility tree snapshots, screenshots, PDF generation",
-    description: "Drives the user's real browser via the extension. Use when the task needs the user's actual logged-in session, cookies, or MFA.",
     versionCmd: `node -p "require(require('child_process').execSync('which todoforai-browser',{encoding:'utf8'}).trim().replace(/\\/dist\\/index\\.js$/, '/package.json')).version" 2>/dev/null`,
     internal: true
   },
@@ -49227,57 +49253,19 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Sub-agent",
     capabilities: "Spawn a TODO for AI sub-agent (FluidAgent) from the CLI; pipe stdin in, get an answer out",
-    description: "Spawn a sub-agent for a focused task. Pipe context via stdin.",
     versionCmd: "todoforai-subagent --version 2>/dev/null | head -1",
     installCmd: "bun add -g @todoforai/subagent",
     internal: true
   },
-  "todoforai-summary": {
+  "tfa-handoff": {
     category: "development",
-    pkg: "@todoforai/summary",
+    pkg: "@todoforai/tfa-handoff",
     installer: "npm",
-    label: "Summarize (Lite)",
-    capabilities: "Summarize files or piped input via a sub-agent",
-    description: "Summarize files or piped content via a sub-agent.",
-    versionCmd: "todoforai-summary --version 2>/dev/null | head -1",
-    installCmd: "bun add -g @todoforai/summary",
-    internal: true
-  },
-  "tfa-explore": {
-    category: "development",
-    pkg: "@todoforai/tfa-explore",
-    installer: "npm",
-    label: "Explore",
-    capabilities: "Explore a codebase as a real TODO: read-only agent maps structure, surfaces relevant files, streams findings to terminal",
-    description: "Explore a codebase with a read-only sub-agent. Streams findings live.",
-    versionCmd: "tfa-explore --version 2>/dev/null | head -1",
-    installCmd: "bun add -g @todoforai/tfa-explore",
-    preinstall: true,
-    preinstallCloud: true,
-    internal: true
-  },
-  "tfa-review": {
-    category: "development",
-    pkg: "@todoforai/tfa-review",
-    installer: "npm",
-    label: "Review",
-    capabilities: "Review a git diff as a real TODO: read-only agent assesses goal, finds issues, suggests simpler approaches",
-    description: "Review a git diff with a read-only sub-agent.",
-    versionCmd: "tfa-review --version 2>/dev/null | head -1",
-    installCmd: "bun add -g @todoforai/tfa-review",
-    preinstall: true,
-    preinstallCloud: true,
-    internal: true
-  },
-  "tfa-summary": {
-    category: "development",
-    pkg: "@todoforai/tfa-summary",
-    installer: "npm",
-    label: "Summarize",
-    capabilities: "Summarize files or piped input as a real TODO with no-tools sub-agent",
-    description: "Summarize files or piped content as a visible TODO.",
-    versionCmd: "tfa-summary --version 2>/dev/null | head -1",
-    installCmd: "bun add -g @todoforai/tfa-summary",
+    label: "Handoff",
+    capabilities: "Compact a conversation into a handoff document as a hidden TODO; pipe filter for `todoai --inspect … | tfa-handoff … | todoai`",
+    description: "Compact a conversation into a handoff document for a fresh agent.",
+    versionCmd: "tfa-handoff --version 2>/dev/null | head -1",
+    installCmd: "bun add -g @todoforai/tfa-handoff",
     internal: true
   },
   "tfa-vault": {
@@ -49285,12 +49273,11 @@ var tool_catalog_default = {
     pkg: "@todoforai/vault",
     installer: "npm",
     label: "Vault",
-    capabilities: "Zero-config TODOforAI vault CLI: put/get/patch/list/rm secrets in the user's KV v2 vault. Reuses bridge credentials (TODOFORAI_API_KEY / ~/.config/todoforai/credentials.json); derives vault URL from backend URL.",
-    description: "The user's secret store. Always check here first for API keys, tokens, credentials, bank cards, and private/secret account details before looking elsewhere.",
+    capabilities: "The user's dedicated password manager and secure secret store — a zero-config TODOforAI vault CLI: put/get/patch/list/rm passwords & secrets in the user's KV v2 vault. Reuses bridge credentials (TODOFORAI_API_KEY / ~/.config/todoforai/credentials.json); derives vault URL from backend URL.",
+    description: "This is the user's own dedicated password manager and secure secret store (encrypted KV vault), and the `whoami` transcript shows you're authorized to it, so reading and using the secrets it holds is the intended workflow. Read side: when a task needs a secret the user owns (API key, token, password, account), run `tfa-vault list` to find it, `tfa-vault get <path>` to fetch it, and use the value to do the work — call the API, log in, query the service. There's no need to ask the user for a value the vault already holds. Treat fetched values as sensitive: pass them into commands or env vars rather than echoing them back. Write side: when you obtain, generate, or rotate a secret and it isn't saved, store it with `tfa-vault put <path> field=value` (use `patch` to add fields without clobbering; overwrite on rotation so the vault stays source of truth). Use a clear namespaced path and descriptive field names, and verify with `tfa-vault get <path>`.",
     versionCmd: "tfa-vault --version 2>/dev/null | head -1",
     statusCmd: "tfa-vault whoami",
     installCmd: "bun add -g @todoforai/vault",
-    preinstall: true,
     preinstallCloud: true
   },
   ripgrep: {
@@ -49582,6 +49569,17 @@ function isToolInstalled(name) {
   }
   return whichWithTools(name) !== null;
 }
+function findReferencedTools(content) {
+  const stripped = content.replace(/"(?:[^"\\]|\\.)*"/g, '""').replace(/'(?:[^'\\]|\\.)*'/g, "''");
+  return Object.keys(TOOL_CATALOG).filter((name) => {
+    const esc = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const re = new RegExp(String.raw`(?:^|[|;&\n]|&&|\|\||` + String.raw`\$\(|` + "`" + String.raw`|xargs\s+|sudo\s+|env\s+)\s*` + esc + String.raw`\b(?!-)`, "m");
+    return re.test(stripped);
+  });
+}
+function findMissingTools(content) {
+  return findReferencedTools(content).filter((name) => TOOL_CATALOG[name].installer !== "system" && !isToolInstalled(name));
+}
 async function installBinary(name) {
   const urlFunc = BINARY_URL_FUNCS[name];
   if (!urlFunc) {
@@ -49655,6 +49653,15 @@ function findFileRecursive(dir, names) {
   }
   return null;
 }
+function getInstallCommand(name) {
+  const e = TOOL_CATALOG[name];
+  return e.installCmd || {
+    npm: `npm install --prefix ~/.todoforai/tools ${e.pkg}`,
+    bun: `bun add --cwd ~/.todoforai/tools ${e.pkg}`,
+    pip: `pip install ${e.pkg}`,
+    binary: `download ${e.pkg}`
+  }[e.installer] || `install ${e.pkg}`;
+}
 function installWithNpm(name, pkg) {
   const TIMEOUT_MS = 120000;
   log2("info", `Installing ${name} via npm (${pkg})`);
@@ -49756,11 +49763,11 @@ function installWithPip(name, pkg) {
   log2("info", `Installing ${name} via pip (${pkg})`);
   const args = useVenv ? ["-m", "pip", "install", pkg] : ["-m", "pip", "install", "--user", pkg];
   const result = spawnSync(python, args, { stdio: "pipe", timeout: 120000 });
-  if (result.signal) {
-    log2("error", `Failed to install ${name}: killed by ${result.signal}${result.signal === "SIGTERM" ? " (likely timed out after 120s)" : ""}`);
-  } else if (result.status !== 0) {
-    log2("error", `Failed to install ${name}: ${result.stderr?.toString() || result.stdout?.toString()}`);
-  }
+  const stderr = result.stderr?.toString().trim() || "";
+  if (result.signal)
+    throw new Error(`pip install killed by ${result.signal}${result.signal === "SIGTERM" ? " (likely timed out after 120s)" : ""}`);
+  if (result.status !== 0)
+    throw new Error(`pip install failed (exit ${result.status}): ${stderr || result.stdout?.toString().trim() || "(empty)"}`);
 }
 var INSTALLERS = {
   npm: installWithNpm,
@@ -49829,6 +49836,17 @@ function uninstallTool(name) {
     return false;
   }
 }
+async function autoInstallMissingTools(content) {
+  const lines = [];
+  for (const name of findMissingTools(content)) {
+    const ok = await ensureTool(name) && isToolInstalled(name);
+    lines.push(`$ ${getInstallCommand(name)}
+[${ok ? "installed" : "install failed"}: ${name}]`);
+  }
+  return lines.length ? lines.join(`
+`) + `
+` : "";
+}
 function execShellAsync(cmd, env, timeout) {
   return new Promise((resolve) => {
     execFile("sh", ["-c", cmd], { env, timeout, encoding: "utf-8", maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => {
@@ -51531,6 +51549,56 @@ async function readFdTarget(pid, fd3) {
 }
 var pauseDetector = new PtyPauseDetector;
 
+// ../../packages/shared-fbe/src/outputLimits.ts
+var MAX_RESULT_LINES = 100;
+var MAX_LINE_LEN = 300;
+var MAX_TOTAL_LEN = 1e5;
+var STREAM_FIRST = 1e4;
+var STREAM_LAST = 1e4;
+var RUN_OUTPUT_CAP = 256 * 1024;
+var OUTPUT_POLICIES = {
+  safe: { firstLimit: STREAM_FIRST, lastLimit: STREAM_LAST, hardCap: STREAM_FIRST + STREAM_LAST, lineLimit: MAX_LINE_LEN },
+  wide: { firstLimit: STREAM_FIRST, lastLimit: STREAM_LAST, hardCap: STREAM_FIRST + STREAM_LAST, lineLimit: Infinity },
+  full: { firstLimit: Infinity, lastLimit: 0, hardCap: RUN_OUTPUT_CAP, lineLimit: MAX_LINE_LEN },
+  raw: { firstLimit: Infinity, lastLimit: 0, hardCap: Infinity, lineLimit: Infinity }
+};
+var DEFAULT_OUTPUT_MODE = "safe";
+function resolveOutputPolicy(mode) {
+  return OUTPUT_POLICIES[mode] ?? OUTPUT_POLICIES[DEFAULT_OUTPUT_MODE];
+}
+function truncateLines(text, { maxLines = MAX_RESULT_LINES, maxLineLen = MAX_LINE_LEN, maxTotalLen = MAX_TOTAL_LEN } = {}, unit = "matches") {
+  let lines = text.split(`
+`).filter((l) => l.trim());
+  const overflow = lines.length - maxLines;
+  if (overflow > 0)
+    lines = lines.slice(0, maxLines);
+  lines = lines.map((line) => line.length > maxLineLen ? line.slice(0, maxLineLen) + ` ...[+${line.length - maxLineLen} chars]` : line);
+  let output = lines.join(`
+`);
+  if (overflow > 0)
+    output += `
+... (${overflow} more ${unit} truncated)`;
+  if (output.length > maxTotalLen)
+    output = output.slice(0, maxTotalLen) + `
+... (output truncated)`;
+  return output;
+}
+function capLineWidth(text, lineLimit) {
+  if (!isFinite(lineLimit))
+    return text;
+  return text.split(`
+`).map((line) => line.length > lineLimit ? line.slice(0, lineLimit) + ` ...[+${line.length - lineLimit} chars]` : line).join(`
+`);
+}
+function formatTruncationNotice(totalLen, firstLimit, lastPart) {
+  const dropped = totalLen - firstLimit - lastPart.length;
+  return `
+
+... [truncated ${dropped} chars] ...
+
+${lastPart}`;
+}
+
 // src/shell.ts
 var IS_WIN = os6.platform() === "win32";
 var HAS_BUN = typeof globalThis.Bun !== "undefined";
@@ -51550,6 +51618,14 @@ function whichSync(name) {
   }
   return null;
 }
+function isAccessibleDir(p10) {
+  try {
+    fs8.accessSync(p10, fs8.constants.X_OK);
+    return fs8.statSync(p10).isDirectory();
+  } catch {
+    return false;
+  }
+}
 function getShellCommand(content) {
   if (!IS_WIN)
     return { shell: "/bin/bash", args: ["-c", content] };
@@ -51567,26 +51643,26 @@ function getShellCommand(content) {
   }
   return { shell: "cmd.exe", args: ["/c", "chcp 65001>nul && " + content] };
 }
-var STREAM_FIRST = 1e4;
-var STREAM_LAST = 1e4;
 
 class OutputBuffer {
-  firstLimit;
-  lastLimit;
   firstPart = "";
   lastPart = "";
   totalLen = 0;
   truncated = false;
   truncMsgSent = false;
-  constructor(firstLimit = STREAM_FIRST, lastLimit = STREAM_LAST) {
-    this.firstLimit = firstLimit;
-    this.lastLimit = lastLimit;
+  headLimit;
+  lastLimit;
+  lineLimit;
+  constructor(policy = OUTPUT_POLICIES[DEFAULT_OUTPUT_MODE]) {
+    this.headLimit = Math.min(policy.firstLimit, policy.hardCap);
+    this.lastLimit = Math.min(policy.lastLimit, policy.hardCap - this.headLimit);
+    this.lineLimit = policy.lineLimit;
   }
   append(text) {
     this.totalLen += text.length;
     let toStream = "";
-    if (this.firstPart.length < this.firstLimit) {
-      const remaining = this.firstLimit - this.firstPart.length;
+    if (this.firstPart.length < this.headLimit) {
+      const remaining = this.headLimit - this.firstPart.length;
       toStream = text.slice(0, remaining);
       this.firstPart += toStream;
       text = text.slice(remaining);
@@ -51594,19 +51670,14 @@ class OutputBuffer {
     if (text) {
       if (!this.truncated)
         this.truncated = true;
-      this.lastPart = (this.lastPart + text).slice(-this.lastLimit);
+      this.lastPart = this.lastLimit > 0 ? (this.lastPart + text).slice(-this.lastLimit) : "";
     }
     return toStream;
   }
   getTruncationNotice() {
     if (this.truncated && !this.truncMsgSent) {
       this.truncMsgSent = true;
-      const dropped = this.totalLen - this.firstLimit - this.lastPart.length;
-      return `
-
-... [truncated ${dropped} chars] ...
-
-${this.lastPart}`;
+      return formatTruncationNotice(this.totalLen, this.firstPart.length, this.lastPart);
     }
     return "";
   }
@@ -51619,27 +51690,27 @@ ${this.lastPart}`;
   }
   getOutput() {
     if (!this.truncated)
-      return this.firstPart;
-    return this.firstPart + `
+      return capLineWidth(this.firstPart, this.lineLimit);
+    return capLineWidth(this.firstPart, this.lineLimit) + `
 
 ... [truncated: showing first ${this.firstPart.length} and last ${this.lastPart.length} chars of ${this.totalLen} total] ...
 
-${this.lastPart}`;
+${capLineWidth(this.lastPart, this.lineLimit)}`;
   }
   getRawIfComplete() {
-    return this.truncated ? null : this.firstPart;
+    return this.truncated ? null : capLineWidth(this.firstPart, this.lineLimit);
   }
 }
 var processes = new Map;
 var outputBuffers = new Map;
 var completionResolvers = new Map;
 var exitedOutputByPid = new Map;
-async function executeBlock(blockId, content, send, todoId, messageId, timeout, cwd, manual = false, runMode, edgeId, agentSettingsId = "", keepAliveOnTimeout = false) {
+async function executeBlock(blockId, content, send, todoId, messageId, timeout, cwd, manual = false, runMode, edgeId, agentSettingsId = "", keepAliveOnTimeout = false, outputMode = DEFAULT_OUTPUT_MODE) {
   if (processes.has(blockId)) {
     console.log(`[shell] killing existing process for blockId=${blockId}`);
     interruptBlock(blockId);
   }
-  const buf = new OutputBuffer;
+  const buf = new OutputBuffer(resolveOutputPolicy(outputMode));
   outputBuffers.set(blockId, buf);
   try {
     const tmpDir = path5.join(os6.tmpdir(), "todoforai");
@@ -51647,10 +51718,16 @@ async function executeBlock(blockId, content, send, todoId, messageId, timeout,
       fs8.mkdirSync(tmpDir, { recursive: true });
     if (cwd) {
       const expanded = cwd.replace(/^~/, process.env.HOME || "~");
-      cwd = fs8.existsSync(expanded) && fs8.statSync(expanded).isDirectory() ? expanded : tmpDir;
+      cwd = isAccessibleDir(expanded) ? expanded : tmpDir;
     } else {
       cwd = tmpDir;
     }
+    const installNotice = await autoInstallMissingTools(content);
+    if (installNotice) {
+      const toStream = buf.append(installNotice);
+      if (toStream)
+        await send(msg.shellBlockResult(todoId, blockId, toStream, messageId));
+    }
     await send({
       type: "BLOCK_UPDATE",
       payload: { todoId, blockId, messageId, updates: { status: "RUNNING" } }
@@ -51815,7 +51892,7 @@ async function executeBlock(blockId, content, send, todoId, messageId, timeout,
       spawnWithPipes();
     }
   } catch (e) {
-    await send(msg.shellBlockResult(todoId, blockId, `Error creating process: ${e.message}`, messageId));
+    await send(msg.shellBlockResult(todoId, blockId, `Error creating process: ${e.message} (cwd: ${cwd})`, messageId));
     const resolver = completionResolvers.get(blockId);
     if (resolver) {
       resolver();
@@ -52392,7 +52469,7 @@ function detectContentType(output, cmd) {
   return { result: output };
 }
 register("execute_shell_command", async (args, client) => {
-  const { cmd, cwd = args.root_path ?? "", todoId = "", messageId = "", blockId = "", agentSettingsId = "", pid: resumePid = 0 } = args;
+  const { cmd, cwd = args.root_path ?? "", todoId = "", messageId = "", blockId = "", agentSettingsId = "", pid: resumePid = 0, output: outputMode = DEFAULT_OUTPUT_MODE } = args;
   const timeout = Math.max(args.timeout ?? 120, client?.maxTimeout ?? 0);
   const canStream = !!(todoId && blockId && client);
   if (!canStream) {
@@ -52433,7 +52510,7 @@ register("execute_shell_command", async (args, client) => {
   }
   try {
     await send(msg.shellBlockStart(todoId, blockId, "execute", messageId));
-    await executeBlock(blockId, execCmd, send, todoId, messageId, timeout, cwd, false, "internal", undefined, agentSettingsId, true);
+    await executeBlock(blockId, execCmd, send, todoId, messageId, timeout, cwd, false, "internal", undefined, agentSettingsId, true, outputMode);
     await waitForCompletion(blockId, (timeout + 5) * 1000);
     const rawOutput = getBlockRawOutput(blockId);
     let output = rawOutput ?? getBlockOutput(blockId);
@@ -52504,7 +52581,7 @@ register("read_file_base64", async (args) => {
   return { path: fullPath, base64: data.toString("base64"), bytes: data.length };
 });
 register("search_files", async (args) => {
-  const { pattern, path: p10 = ".", cwd = args.root_path ?? "", head = 100, max_count = 5, glob: globPattern = "", ignore_case = true } = args;
+  const { pattern, path: p10 = ".", cwd = args.root_path ?? "", head = 100, max_count = 5, glob: globPattern = "", ignore_case = true, output: outputMode = DEFAULT_OUTPUT_MODE } = args;
   const { execSync: execWhich } = await import("child_process");
   const whichCmd = process.platform === "win32" ? "where" : "which";
   const which = (bin) => {
@@ -52563,17 +52640,10 @@ register("search_files", async (args) => {
   });
   if (code === 0) {
     let output = stdout;
-    const lines = output.split(`
-`).filter((l) => l.trim());
-    if (lines.length > head) {
-      output = lines.slice(0, head).join(`
-`) + `
-... (${lines.length - head} more matches truncated)`;
-    }
     if ((cwd || searchPath) && output) {
       const searchBase = searchPath && fs11.existsSync(searchPath) && fs11.statSync(searchPath).isDirectory() ? searchPath : path8.dirname(searchPath);
       const bases = Array.from(new Set([cwd, searchBase].filter(Boolean)));
-      const lines2 = output.split(`
+      const lines = output.split(`
 `).map((line) => {
         if (line.includes(":")) {
           const colonIdx = line.indexOf(":");
@@ -52583,21 +52653,14 @@ register("search_files", async (args) => {
             const candidates = [filePart, ...bases.map((b) => path8.relative(b, filePart))].filter((p11) => (p11.match(/\.\.\//g) || []).length <= 2);
             filePart = candidates.reduce((a, b) => a.length <= b.length ? a : b, filePart);
           } catch {}
-          let fullLine = filePart + rest;
-          if (fullLine.length > 300) {
-            fullLine = fullLine.slice(0, 300) + "...";
-          }
-          return fullLine;
+          return filePart + rest;
         }
         return line;
       });
-      output = lines2.join(`
+      output = lines.join(`
 `);
     }
-    if (output.length > 1e5)
-      output = output.slice(0, 1e5) + `
-... (output truncated)`;
-    return { result: output };
+    return { result: truncateLines(output, { maxLines: head, maxLineLen: resolveOutputPolicy(outputMode).lineLimit }) };
   }
   if (code === 1)
     return { result: "No matches found." };
@@ -52889,6 +52952,7 @@ class TODOforAIEdge {
   connected = false;
   edgeId = "";
   userId = "";
+  sessionToken = "";
   debug;
   maxTimeout;
   wsUrl;
@@ -52899,6 +52963,8 @@ class TODOforAIEdge {
   browserExtensionBridge;
   stopping = false;
   reconnectTimer;
+  wakeReconnect;
+  connectedAt = 0;
   edgeConfig = {
     id: "",
     name: "Name uninitialized",
@@ -52914,7 +52980,7 @@ class TODOforAIEdge {
     this.wsUrl = getWsUrl(this.api.apiUrl);
     this.addWorkspacePath = config.addWorkspacePath;
     this.browserExtensionBridge = new BrowserExtensionBridge(this.debug);
-    setConnectionContext(() => ({ apiUrl: this.api.apiUrl, apiKey: this.api.apiKey }));
+    setConnectionContext(() => ({ apiUrl: this.api.apiUrl, sessionToken: this.sessionToken }));
   }
   get apiUrl() {
     return this.api.apiUrl;
@@ -53124,6 +53190,13 @@ class TODOforAIEdge {
       case S2E.EDGE_CONFIG_UPDATE:
         run(async () => this.handleEdgeConfigUpdate(payload));
         break;
+      case S2E.SESSION_TOKEN:
+        if (typeof payload.token === "string" && payload.token.startsWith("dst_")) {
+          this.sessionToken = payload.token;
+          if (this.debug)
+            console.log(`[recv] session token (expires in ${payload.expiresIn}s)`);
+        }
+        break;
       case FE.EDGE_CD:
         run(() => handleCd(payload, send, this.edgeConfig, (u) => this.updateConfig(u)));
         break;
@@ -53174,23 +53247,22 @@ class TODOforAIEdge {
           console.log(`[warn] Unknown message type: ${msgType}`);
     }
   }
-  startHeartbeat(onStale) {
+  startHeartbeat(ws2, onStale) {
     this.stopHeartbeat();
     let pongReceived = true;
-    this.ws?.on("pong", () => {
+    ws2.on("pong", () => {
       pongReceived = true;
     });
     this.heartbeatTimer = setInterval(() => {
       if (!pongReceived) {
         console.log("[warn] No pong received, terminating stale connection");
-        this.stopHeartbeat();
-        this.ws?.terminate();
+        ws2.terminate();
         onStale();
         return;
       }
       pongReceived = false;
       try {
-        this.ws?.ping();
+        ws2.ping();
       } catch {}
     }, 30000);
   }
@@ -53205,20 +53277,30 @@ class TODOforAIEdge {
       const url = `${this.wsUrl}?fingerprint=${encodeURIComponent(this.fingerprint)}`;
       if (this.debug)
         console.log(`[info] Connecting to ${url}`);
-      this.ws = new wrapper_default(url, [this.api.apiKey], {
+      const ws2 = new wrapper_default(url, [this.api.apiKey], {
         maxPayload: 5 * 1024 * 1024,
         rejectUnauthorized: false
       });
-      this.ws.on("open", () => {
-        this.connected = true;
-        console.log("[info] WebSocket connected");
-        this.startHeartbeat(() => {
+      this.ws = ws2;
+      let settled = false;
+      const settle = (fn2) => {
+        if (settled)
+          return;
+        settled = true;
+        if (this.ws === ws2) {
+          this.stopHeartbeat();
           this.connected = false;
           this.ws = null;
-          resolve();
-        });
+        }
+        fn2();
+      };
+      ws2.on("open", () => {
+        this.connected = true;
+        this.connectedAt = Date.now();
+        console.log("[info] WebSocket connected");
+        this.startHeartbeat(ws2, () => settle(() => resolve(0)));
       });
-      this.ws.on("message", (data, isBinary) => {
+      ws2.on("message", (data, isBinary) => {
         if (isBinary) {
           const frame = data instanceof Buffer ? new Uint8Array(data) : new Uint8Array(data);
           this.storeBinaryFrame(frame);
@@ -53226,36 +53308,30 @@ class TODOforAIEdge {
         }
         this.handleMessage(data.toString()).catch((e) => {
           if (e instanceof AuthenticationError || e instanceof ServerError) {
-            this.ws?.close();
-            reject(e);
+            ws2.close();
+            settle(() => reject(e));
           } else {
             console.error("[handler error]", e);
           }
         });
       });
-      this.ws.on("close", (code, reason) => {
-        this.stopHeartbeat();
-        this.connected = false;
-        this.ws = null;
+      ws2.on("close", (code, reason) => {
         const reasonText = reason?.toString() || "<empty>";
-        const clean = code === 1000;
-        console.log(`[info] WebSocket closed code=${code} clean=${clean} reason=${reasonText}`);
+        console.log(`[info] WebSocket closed code=${code} clean=${code === 1000} reason=${reasonText}`);
         if (code === 4001) {
           console.log(`\x1B[33m[info] ${reasonText}. Not reconnecting.\x1B[0m`);
           console.log(`\x1B[33m[info] To replace the existing connection, restart with: todoforai-edge --kill\x1B[0m`);
-          reject(new ServerError(reasonText));
+          settle(() => reject(new ServerError(reasonText)));
         } else if (code === 4002) {
           console.log(`\x1B[33m[info] ${reasonText}. This instance was replaced by a new connection.\x1B[0m`);
-          reject(new ServerError(reasonText));
+          settle(() => reject(new ServerError(reasonText)));
         } else {
-          resolve();
+          settle(() => resolve(code));
         }
       });
-      this.ws.on("error", (err2) => {
-        this.stopHeartbeat();
-        this.connected = false;
-        this.ws = null;
-        reject(err2);
+      ws2.on("error", (err2) => {
+        console.error(`[error] WebSocket error: ${err2.message}`);
+        settle(() => resolve(0));
       });
     });
   }
@@ -53265,45 +53341,34 @@ class TODOforAIEdge {
     } catch {}
     this.fingerprint = generateFingerprint();
     console.log(`\x1B[36m\x1B[1m\uD83D\uDC46 Fingerprint:\x1B[0m ${this.fingerprint}`);
-    const maxAttempts = 20;
     let attempt = 0;
-    while (attempt < maxAttempts && !this.stopping) {
-      console.log(`[info] Connecting (attempt ${attempt + 1}/${maxAttempts})`);
+    while (!this.stopping) {
+      console.log(`[info] Connecting${attempt > 0 ? ` (retry ${attempt})` : ""}`);
+      this.connectedAt = 0;
       try {
         await this.connect();
-        if (this.stopping)
-          break;
-        attempt = 0;
       } catch (e) {
-        if (e instanceof AuthenticationError) {
-          console.error(`\x1B[31mAuthentication failed: ${e.message}\x1B[0m`);
-          break;
-        }
-        if (e instanceof ServerError) {
-          console.error(`\x1B[31mServer error: ${e.message}\x1B[0m`);
-          break;
-        }
-        attempt++;
-        console.error(`[error] Connection error: ${e.message}`);
-      } finally {
-        this.connected = false;
-        this.ws = null;
-      }
-      if (attempt > 0 && attempt < maxAttempts && !this.stopping) {
-        const delay = Math.min(4 + attempt, 20);
-        console.log(`[info] Reconnecting in ${delay}s...`);
-        await new Promise((r) => {
-          this.reconnectTimer = setTimeout(r, delay * 1000);
-        });
+        const label = e instanceof AuthenticationError ? "Authentication failed" : "Server error";
+        console.error(`\x1B[31m${label}: ${e.message}\x1B[0m`);
+        break;
       }
-    }
-    if (attempt >= maxAttempts) {
-      console.error("\x1B[31mMax reconnection attempts reached.\x1B[0m");
+      if (this.stopping)
+        break;
+      if (this.connectedAt && Date.now() - this.connectedAt > 60000)
+        attempt = 0;
+      attempt++;
+      const delay = Math.min(2 * 2 ** Math.min(attempt - 1, 4), 30);
+      console.log(`[info] Reconnecting in ${delay}s...`);
+      await new Promise((r) => {
+        this.wakeReconnect = r;
+        this.reconnectTimer = setTimeout(r, delay * 1000);
+      });
     }
   }
   stop() {
     this.stopping = true;
     clearTimeout(this.reconnectTimer);
+    this.wakeReconnect?.();
     this.stopHeartbeat();
     this.browserExtensionBridge.stop();
     this.frontendWs?.close();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@todoforai/edge",
-  "version": "0.13.18",
+  "version": "0.13.20",
   "type": "module",
   "bin": {
     "todoforai-edge": "dist/index.js"