@todoforai/edge 0.13.19 → 0.13.21

package/dist/index.js

@@ -48145,7 +48145,7 @@ class ApiClient {
   }
   async request(method, endpoint, body) {
     const url = `${this.apiUrl}${endpoint}`;
-    const opts = { method, headers: this.headers };
+    const opts = { method, headers: this.headers, signal: AbortSignal.timeout(30000) };
     if (body)
       opts.body = JSON.stringify(body);
     const res = await fetch(url, opts);
@@ -48772,7 +48772,6 @@ var tool_catalog_default = {
       "~/.zele/sqlite.db"
     ],
     capabilities: "Read inbox, search/send/reply email, email addresses — multi-account Gmail, OAuth browser login for setup.",
-    description: "Use for anything Gmail: reading the user's inbox, searching mail, sending or replying to email. Multi-account, OAuth login via `zele login`.",
     versionCmd: "zele --version 2>/dev/null | head -1"
   },
   xurl: {
@@ -48786,9 +48785,23 @@ var tool_catalog_default = {
       "~/.xurl"
     ],
     capabilities: "Post tweets, reply & quote, read timelines, search tweets, like & repost, follow/unfollow, DMs, media uploads",
-    description: "Use to interact with X/Twitter: post/reply/quote tweets, search, read timelines, like/repost, follow, DMs, media upload. Authenticated raw API access via `xurl <method> <path>`.",
+    description: "Authenticated raw X API access via `xurl <method> <path>`; login `xurl auth oauth2`.",
     versionCmd: "xurl --version 2>/dev/null | head -1"
   },
+  "linkedin-api": {
+    category: "social",
+    pkg: "@todoforai/linkedin-api",
+    installer: "npm",
+    label: "LinkedIn",
+    statusCmd: `linkedin-api whoami 2>/dev/null | grep -oP '"publicId":\\s*"\\K[^"]+' | head -1`,
+    loginCmd: "linkedin-api auth",
+    credentialPaths: [
+      "~/.config/linkedin-api/credentials.json"
+    ],
+    capabilities: "Read profiles, list & read conversations, send DMs, send connection requests — raw LinkedIn Voyager API via cookie auth",
+    description: "Authenticated LinkedIn Voyager API CLI. Cookie auth: `linkedin-api auth <li_at> <jsessionid>` (from browser DevTools).",
+    versionCmd: "linkedin-api --version 2>/dev/null | head -1"
+  },
   "tiktok-uploader": {
     category: "social",
     pkg: "tiktok-uploader",
@@ -48799,7 +48812,6 @@ var tool_catalog_default = {
       "~/.tiktok/cookies.txt"
     ],
     capabilities: "Upload videos, batch uploads, schedule posts, custom covers, hashtags & mentions",
-    description: "Upload videos to TikTok, schedule posts, set covers and hashtags.",
     versionCmd: "pip show tiktok-uploader 2>/dev/null | grep -oP 'Version: \\K.*'"
   },
   instagrapi: {
@@ -48808,7 +48820,6 @@ var tool_catalog_default = {
     installer: "pip",
     label: "Instagram",
     capabilities: "Upload photos & reels, post stories, send DMs, like & comment, manage followers",
-    description: "Instagram automation: upload photos/reels, stories, DMs, likes, follower management.",
     versionCmd: "pip show instagrapi 2>/dev/null | grep -oP 'Version: \\K.*'"
   },
   mudslide: {
@@ -48822,7 +48833,6 @@ var tool_catalog_default = {
       "~/.local/share/mudslide"
     ],
     capabilities: "Send messages, send images & files, send locations & polls, group management, QR code login",
-    description: "Use to send WhatsApp messages/files/media/locations/polls from CLI. QR-code login via `mudslide login`.",
     versionCmd: "mudslide --version 2>/dev/null | head -1"
   },
   slack: {
@@ -48836,7 +48846,7 @@ var tool_catalog_default = {
       "~/.slack/credentials.json"
     ],
     capabilities: "Build & deploy Slack apps, manage workspaces & triggers, run datastore queries, tail logs — official Slack CLI.",
-    description: "Use for Slack platform development: scaffold/run/deploy Slack apps, manage triggers and datastores, manage workspace auth. `slack-cli login` to authenticate. Invoked as `slack-cli` to avoid colliding with the Slack desktop app's `slack` binary.",
+    description: "`slack-cli login` to auth. Invoked as `slack-cli` to avoid colliding with the Slack desktop app's `slack` binary.",
     versionCmd: "slack-cli version 2>/dev/null | head -1",
     binName: "slack-cli",
     binary: {
@@ -48877,18 +48887,8 @@ var tool_catalog_default = {
       "~/.config/telegram-send/telegram-send.conf"
     ],
     capabilities: "Send messages, send files & images, send video & audio, Markdown/HTML formatting, channel & group support",
-    description: "Send Telegram messages and files from CLI via a bot.",
     versionCmd: "telegram-send --version 2>/dev/null | head -1"
   },
-  "apollo-api": {
-    category: "marketing",
-    pkg: "@todoforai/apollo-api",
-    installer: "npm",
-    label: "Apollo",
-    capabilities: "Lead search & enrichment, email sequences, CRM sync",
-    description: "Use for B2B prospecting: search Apollo's people/company DB, enrich leads with emails/titles/companies, manage sequences and CRM data. Needs APOLLO_API_KEY.",
-    versionCmd: "apollo-api --version 2>/dev/null | head -1"
-  },
   "meta-ads": {
     category: "marketing",
     pkg: "meta-ads",
@@ -48896,7 +48896,6 @@ var tool_catalog_default = {
     label: "Meta Ads",
     statusCmd: "meta auth status 2>&1",
     capabilities: "Meta/Facebook & Instagram ad campaigns: campaigns/adsets/ads CRUD, insights & reporting, catalog/product-feed/product-set/product-item, ad creatives, datasets (pixels), pages — Marketing API via the official `meta` CLI.",
-    description: "Manage Meta/Facebook & Instagram ad campaigns, insights, creatives, and catalogs.",
     versionCmd: "meta --version 2>/dev/null | head -1"
   },
   "elevenlabs-api": {
@@ -48904,8 +48903,7 @@ var tool_catalog_default = {
     pkg: "@todoforai/elevenlabs-api",
     installer: "npm",
     label: "ElevenLabs",
-    capabilities: "Text-to-speech, voice cloning, multiple languages",
-    description: "Use to generate speech audio from text, clone voices, or list voices. Needs ELEVENLABS_API_KEY.",
+    capabilities: "Text-to-speech, voice cloning, multiple languages. Needs ELEVENLABS_API_KEY.",
     versionCmd: "elevenlabs-api --version 2>/dev/null | head -1"
   },
   "codex-imagegen-api": {
@@ -48914,7 +48912,6 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Image Gen",
     capabilities: "AI image generation & editing via TODOFORAI backend (gpt-image)",
-    description: "Generate or edit images with AI.",
     versionCmd: "codex-imagegen-api --version 2>/dev/null | head -1"
   },
   "suno-api": {
@@ -48922,8 +48919,7 @@ var tool_catalog_default = {
     pkg: "@todoforai/suno-api",
     installer: "npm",
     label: "Suno",
-    capabilities: "AI music generation, custom lyrics, multiple genres",
-    description: "Use to generate music/songs from a prompt or custom lyrics. Needs SUNO_API_KEY.",
+    capabilities: "AI music generation, custom lyrics, multiple genres. Needs SUNO_API_KEY.",
     versionCmd: "suno-api --version 2>/dev/null | head -1"
   },
   ntn: {
@@ -48937,7 +48933,6 @@ var tool_catalog_default = {
       "~/.config/notion"
     ],
     capabilities: "Official Notion CLI: workspace-wide OAuth login, raw API calls (`ntn api <path>`), page/datasource management, file uploads, Workers deploy.",
-    description: "Read, create, and update Notion pages and databases.",
     versionCmd: "ntn --version 2>/dev/null | head -1"
   },
   "perplexity-api": {
@@ -48946,7 +48941,6 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Perplexity",
     capabilities: "AI-powered web search, chat completions, async chat, embeddings and agent runs",
-    description: "Web-grounded AI search with citations. Use when you need fresh information beyond training cutoff.",
     versionCmd: "perplexity-api --version 2>/dev/null | head -1"
   },
   gh: {
@@ -48961,7 +48955,7 @@ var tool_catalog_default = {
       "~/.config/gh/hosts.yml"
     ],
     capabilities: "Repos, PRs & issues, actions & releases, gists & SSH keys",
-    description: "Use for any GitHub operation: create/list/merge PRs, file issues, manage releases, trigger/inspect Actions, clone/fork repos, gists. Prefer `gh` over raw GitHub API calls.",
+    description: "Prefer `gh` over raw GitHub API calls.",
     versionCmd: "gh --version 2>/dev/null | head -1"
   },
   glab: {
@@ -48975,7 +48969,7 @@ var tool_catalog_default = {
       "~/.config/glab-cli/config.yml"
     ],
     capabilities: "Repos, MRs & issues, CI/CD pipelines, releases",
-    description: "Use for any GitLab operation: MRs, issues, pipelines, releases, repo management. GitLab equivalent of `gh`.",
+    description: "GitLab equivalent of `gh`.",
     versionCmd: "glab --version 2>/dev/null | head -1"
   },
   vercel: {
@@ -48989,7 +48983,7 @@ var tool_catalog_default = {
       "~/.local/share/com.vercel.cli/auth.json"
     ],
     capabilities: "Deploy & preview, environment variables, domain management",
-    description: "Use to deploy a project to Vercel (`vercel deploy`), manage env vars, domains, and preview URLs.",
+    description: "`vercel deploy`; manage env vars, domains, preview URLs.",
     versionCmd: "vercel --version 2>/dev/null | head -1"
   },
   netlify: {
@@ -49003,7 +48997,7 @@ var tool_catalog_default = {
       "~/.netlify/config.json"
     ],
     capabilities: "Deploy & preview, serverless functions, forms & identity",
-    description: "Use to deploy sites/functions to Netlify, manage env vars, forms, identity. `netlify deploy --prod` for production.",
+    description: "`netlify deploy --prod` for production; manage env vars, forms, identity.",
     versionCmd: "netlify --version 2>/dev/null | head -1"
   },
   firebase: {
@@ -49017,7 +49011,7 @@ var tool_catalog_default = {
       "~/.config/configstore/firebase-tools.json"
     ],
     capabilities: "Hosting & deploy, Firestore & Realtime DB, auth & functions",
-    description: "Use for Firebase: deploy hosting/functions, manage Firestore/Realtime DB rules and data, auth users, emulators.",
+    description: "Deploy hosting/functions, manage Firestore/RTDB rules and data, auth users, emulators.",
     versionCmd: "firebase --version 2>/dev/null | head -1"
   },
   wrangler: {
@@ -49031,7 +49025,7 @@ var tool_catalog_default = {
       "~/.config/.wrangler/config/default.toml"
     ],
     capabilities: "Workers & Pages deploy, KV & D1 storage, R2 & Queues",
-    description: "Use for Cloudflare developer platform: deploy Workers/Pages, manage KV/D1/R2/Queues, tail logs. Use `cloudflared` for tunnels.",
+    description: "Tail logs with `wrangler tail`. Use `cloudflared` for tunnels.",
     versionCmd: "wrangler --version 2>/dev/null | head -1"
   },
   stripe: {
@@ -49045,7 +49039,7 @@ var tool_catalog_default = {
       "~/.config/stripe/config.toml"
     ],
     capabilities: "Payments & subscriptions, webhook testing, invoice management",
-    description: "Use for Stripe: inspect/create customers, charges, subscriptions, invoices, webhooks. `stripe listen` to forward webhooks locally; `stripe get/post /v1/...` for raw API.",
+    description: "`stripe listen` forwards webhooks locally; `stripe get/post /v1/...` for raw API.",
     versionCmd: "stripe --version 2>/dev/null | head -1"
   },
   flyctl: {
@@ -49059,7 +49053,7 @@ var tool_catalog_default = {
       "~/.fly/config.yml"
     ],
     capabilities: "Deploy containers globally, Postgres & volumes, auto-scaling",
-    description: "Use to deploy apps/containers to Fly.io edge, manage Postgres/volumes/machines/secrets. `flyctl deploy` from app dir.",
+    description: "`flyctl deploy` from app dir; manage Postgres/volumes/machines/secrets.",
     versionCmd: "flyctl version 2>/dev/null | head -1"
   },
   supabase: {
@@ -49073,7 +49067,7 @@ var tool_catalog_default = {
       "~/.config/supabase/access-token"
     ],
     capabilities: "Postgres database, auth & storage, edge functions",
-    description: "Use for Supabase projects: run/migrate local Postgres, deploy edge functions, manage auth/storage, link to cloud project.",
+    description: "Link to cloud project; runs/migrates local Postgres.",
     versionCmd: "supabase --version 2>/dev/null | head -1"
   },
   railway: {
@@ -49087,7 +49081,7 @@ var tool_catalog_default = {
       "~/.railway/config.json"
     ],
     capabilities: "Deploy apps & databases, environment management, auto-scaling",
-    description: "Use to deploy apps/services to Railway, provision databases, manage env vars and environments. `railway up` to deploy current dir.",
+    description: "`railway up` to deploy current dir.",
     versionCmd: "railway --version 2>/dev/null | head -1"
   },
   shopify: {
@@ -49100,16 +49094,23 @@ var tool_catalog_default = {
       "~/.config/shopify/config.json"
     ],
     capabilities: "Theme development, app scaffolding, store management",
-    description: "Use for Shopify dev: scaffold/develop themes and apps, push/pull themes, run dev server against a store.",
     versionCmd: "shopify version 2>/dev/null | head -1"
   },
+  "shop-app": {
+    category: "ecommerce",
+    pkg: "@todoforai/shop-app",
+    installer: "npm",
+    label: "Shop",
+    capabilities: "Product search & price comparison across Shopify stores",
+    description: "Shop.app product search across Shopify stores (no auth). `shop-app search '<query>' --ships-to HU -n 10` returns products with price, rating, URL, variants. `shop-app similar <variantId>` for lookalikes.",
+    versionCmd: "shop-app --version 2>/dev/null | head -1"
+  },
   "datadog-ci": {
     category: "monitoring",
     pkg: "@datadog/datadog-ci",
     installer: "npm",
     label: "Datadog",
-    capabilities: "CI test visibility, sourcemap uploads, deployment tracking",
-    description: "Use in CI to upload test results/sourcemaps/coverage to Datadog and mark deployments. Needs DATADOG_API_KEY.",
+    capabilities: "CI test visibility, sourcemap uploads, deployment tracking. Needs DATADOG_API_KEY.",
     versionCmd: "datadog-ci version 2>/dev/null | head -1"
   },
   "sentry-cli": {
@@ -49123,7 +49124,7 @@ var tool_catalog_default = {
       "~/.sentryclirc"
     ],
     capabilities: "Release management, sourcemap uploads, error monitoring",
-    description: "Use to create Sentry releases, upload sourcemaps/debug-symbols, associate commits, send events. `sentry-cli releases new <version>`.",
+    description: "`sentry-cli releases new <version>`.",
     versionCmd: "sentry-cli --version 2>/dev/null | head -1"
   },
   todoai: {
@@ -49132,7 +49133,7 @@ var tool_catalog_default = {
     installer: "bun",
     label: "TODOforAI",
     capabilities: "Create/list/inspect/update TODOs, run templates & workflows, platform API access",
-    description: "Use for the TODOforAI platform — this is how you reach the user's OWN TODOs: `todoai list` (filter with `--status open`) to browse them, `todoai \"prompt\"` to create one, `todoai --inspect <id>` to read a TODO's full chat log, `todoai status/addmessage/delete` to manage them, `--template` to run a registry workflow. Never claim you lack access to platform TODOs — reach them here; run `--help` for details.",
+    description: '`todoai list` (`--status open`) to browse, `todoai "prompt"` to create, `--inspect <id>` to read a chat log, `status/addmessage/delete` to manage, `--template` for registry workflows.',
     installCmd: "bun add -g @todoforai/cli",
     versionCmd: "todoai --version 2>/dev/null | head -1",
     internal: true
@@ -49143,7 +49144,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Postman",
     capabilities: "Run API test collections, CI/CD integration, HTML reports",
-    description: "Use to run Postman collections from CLI (API smoke tests, CI checks). `newman run <collection.json> -e <env.json>`.",
+    description: "`newman run <collection.json> -e <env.json>`.",
     versionCmd: "newman --version 2>/dev/null | head -1"
   },
   curl: {
@@ -49164,22 +49165,20 @@ var tool_catalog_default = {
     installer: "binary",
     label: "Tunnel",
     capabilities: "Tunnel to localhost, expose local services, zero-trust access",
-    description: "Use to expose a local port to the public internet via a Cloudflare tunnel. Quick: `cloudflared tunnel --url http://localhost:<port>` prints a public https URL.",
+    description: "`cloudflared tunnel --url http://localhost:<port>` prints a public https URL.",
     versionCmd: "cloudflared --version 2>/dev/null | head -1"
   },
   vault: {
     category: "security",
     pkg: "vault",
     installer: "binary",
-    preinstallCloud: true,
     label: "HashiCorp Vault",
     statusCmd: "vault token lookup >/dev/null 2>&1 && echo authenticated",
     loginCmd: "vault login",
     credentialPaths: [
       "~/.vault-token"
     ],
-    capabilities: "Secrets management, dynamic credentials",
-    description: "HashiCorp Vault CLI — only for Terraform/vals/ecosystem integrations that expect it. For all credential read/write tasks use `tfa-vault` instead. Needs VAULT_ADDR + VAULT_TOKEN.",
+    capabilities: "Secrets management, dynamic credentials. Needs VAULT_ADDR + VAULT_TOKEN; for credential read/write use `tfa-vault` instead.",
     versionCmd: "vault --version 2>/dev/null | head -1"
   },
   rclone: {
@@ -49194,7 +49193,6 @@ var tool_catalog_default = {
       "~/.config/rclone/rclone.conf"
     ],
     capabilities: "Access Google Drive, OneDrive, Dropbox, S3 and 40+ cloud providers. List, copy, sync, move, mount files as virtual filesystem (FUSE). Use 'rclone config create <name> <provider>' to connect (opens browser for OAuth).",
-    description: "Access cloud storage (Google Drive, OneDrive, Dropbox, S3, 40+ providers). List, copy, sync, or mount files.",
     subProviders: {
       gdrive: {
         label: "Google Drive",
@@ -49239,8 +49237,7 @@ var tool_catalog_default = {
     pkg: "pymupdf",
     installer: "pip",
     label: "PDF",
-    capabilities: "PDF text editing, extraction, merge, split",
-    description: "Read, edit, merge, or split PDFs programmatically. Call via `python3 -c`.",
+    capabilities: "PDF text editing, extraction, merge, split. Call via `python3 -c`.",
     versionCmd: "python3 -c 'import pymupdf; print(pymupdf.__version__)' 2>/dev/null",
     preinstallCloud: true
   },
@@ -49251,16 +49248,16 @@ var tool_catalog_default = {
     preinstallCloud: true,
     label: "Browser",
     capabilities: "Headless browser automation, web scraping, accessibility tree snapshots, screenshots, PDF generation",
-    description: "Headless browser. Use for JS-rendered pages, scraping, screenshots, PDFs, and automated flows. Default browser — prefer over `todoforai-browser` unless the user's own session is needed. On a PC with a display, prefer a visible window the user can watch and interact with (needed for CAPTCHA/MFA/login): launch a separate Chrome with `google-chrome --remote-debugging-port=9222 --user-data-dir=$HOME/.config/google-chrome-cdp >/tmp/chrome-cdp.log 2>&1 &` (own data-dir, leaves the user's running Chrome untouched), then attach with `agent-browser --cdp 9222 <command>`. Use headless only on the cloud or when no display is available.",
+    description: "Default browser. On a PC with a display prefer a visible window the user can watch/interact with (needed for CAPTCHA/MFA/login): launch a separate Chrome with `google-chrome --remote-debugging-port=9222 --user-data-dir=$HOME/.config/google-chrome-cdp >/tmp/chrome-cdp.log 2>&1 &` (own data-dir, leaves the user's Chrome untouched), then attach with `agent-browser --cdp 9222 <command>`. Use headless only on the cloud or when no display is available.",
     versionCmd: "agent-browser --version 2>/dev/null | head -1"
   },
   "todoforai-browser": {
     category: "development",
     pkg: "@todoforai/browser",
     installer: "npm",
+    preinstallCloud: true,
     label: "Browser (Extension)",
     capabilities: "Browser automation via extension (non-headless), web scraping, accessibility tree snapshots, screenshots, PDF generation",
-    description: "Drives the user's real browser via the extension. Use when the task needs the user's actual logged-in session, cookies, or MFA.",
     versionCmd: `node -p "require(require('child_process').execSync('which todoforai-browser',{encoding:'utf8'}).trim().replace(/\\/dist\\/index\\.js$/, '/package.json')).version" 2>/dev/null`,
     internal: true
   },
@@ -49270,55 +49267,19 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Sub-agent",
     capabilities: "Spawn a TODO for AI sub-agent (FluidAgent) from the CLI; pipe stdin in, get an answer out",
-    description: "Spawn a sub-agent for a focused task. Pipe context via stdin.",
     versionCmd: "todoforai-subagent --version 2>/dev/null | head -1",
     installCmd: "bun add -g @todoforai/subagent",
     internal: true
   },
-  "todoforai-summary": {
+  "tfa-handoff": {
     category: "development",
-    pkg: "@todoforai/summary",
+    pkg: "@todoforai/tfa-handoff",
     installer: "npm",
-    label: "Summarize (Lite)",
-    capabilities: "Summarize files or piped input via a sub-agent",
-    description: "Summarize files or piped content via a sub-agent.",
-    versionCmd: "todoforai-summary --version 2>/dev/null | head -1",
-    installCmd: "bun add -g @todoforai/summary",
-    internal: true
-  },
-  "tfa-explore": {
-    category: "development",
-    pkg: "@todoforai/tfa-explore",
-    installer: "npm",
-    label: "Explore",
-    capabilities: "Explore a codebase as a real TODO: read-only agent maps structure, surfaces relevant files, streams findings to terminal",
-    description: "Explore a codebase with a read-only sub-agent. Streams findings live.",
-    versionCmd: "tfa-explore --version 2>/dev/null | head -1",
-    installCmd: "bun add -g @todoforai/tfa-explore",
-    preinstallCloud: true,
-    internal: true
-  },
-  "tfa-review": {
-    category: "development",
-    pkg: "@todoforai/tfa-review",
-    installer: "npm",
-    label: "Review",
-    capabilities: "Review a git diff as a real TODO: read-only agent assesses goal, finds issues, suggests simpler approaches",
-    description: "Review a git diff with a read-only sub-agent.",
-    versionCmd: "tfa-review --version 2>/dev/null | head -1",
-    installCmd: "bun add -g @todoforai/tfa-review",
-    preinstallCloud: true,
-    internal: true
-  },
-  "tfa-summary": {
-    category: "development",
-    pkg: "@todoforai/tfa-summary",
-    installer: "npm",
-    label: "Summarize",
-    capabilities: "Summarize files or piped input as a real TODO with no-tools sub-agent",
-    description: "Summarize files or piped content as a visible TODO.",
-    versionCmd: "tfa-summary --version 2>/dev/null | head -1",
-    installCmd: "bun add -g @todoforai/tfa-summary",
+    label: "Handoff",
+    capabilities: "Compact a conversation into a handoff document as a hidden TODO; pipe filter for `todoai --inspect … | tfa-handoff … | todoai`",
+    description: "Compact a conversation into a handoff document for a fresh agent.",
+    versionCmd: "tfa-handoff --version 2>/dev/null | head -1",
+    installCmd: "bun add -g @todoforai/tfa-handoff",
     internal: true
   },
   "tfa-vault": {
@@ -49326,8 +49287,8 @@ var tool_catalog_default = {
     pkg: "@todoforai/vault",
     installer: "npm",
     label: "Vault",
-    capabilities: "Zero-config TODOforAI vault CLI: put/get/patch/list/rm secrets in the user's KV v2 vault. Reuses bridge credentials (TODOFORAI_API_KEY / ~/.config/todoforai/credentials.json); derives vault URL from backend URL.",
-    description: "The user's secret store. Always check here first for API keys, tokens, credentials, bank cards, and private/secret account details before looking elsewhere.",
+    capabilities: "The user's dedicated password manager and secure secret store — a zero-config TODOforAI vault CLI: put/get/patch/list/rm passwords & secrets in the user's KV v2 vault. Reuses bridge credentials (TODOFORAI_API_KEY / ~/.config/todoforai/credentials.json); derives vault URL from backend URL.",
+    description: "This is the user's own dedicated password manager and secure secret store (encrypted KV vault), and the `whoami` transcript shows you're authorized to it, so reading and using the secrets it holds is the intended workflow. Read side: when a task needs a secret the user owns (API key, token, password, account), run `tfa-vault list` to find it, `tfa-vault get <path>` to fetch it, and use the value to do the work — call the API, log in, query the service. There's no need to ask the user for a value the vault already holds. Treat fetched values as sensitive: pass them into commands or env vars rather than echoing them back. Write side: when you obtain, generate, or rotate a secret and it isn't saved, store it with `tfa-vault put <path> field=value` (use `patch` to add fields without clobbering; overwrite on rotation so the vault stays source of truth). Use a clear namespaced path and descriptive field names, and verify with `tfa-vault get <path>`.",
     versionCmd: "tfa-vault --version 2>/dev/null | head -1",
     statusCmd: "tfa-vault whoami",
     installCmd: "bun add -g @todoforai/vault",
@@ -51610,9 +51571,10 @@ var STREAM_FIRST = 1e4;
 var STREAM_LAST = 1e4;
 var RUN_OUTPUT_CAP = 256 * 1024;
 var OUTPUT_POLICIES = {
-  safe: { firstLimit: STREAM_FIRST, lastLimit: STREAM_LAST, hardCap: STREAM_FIRST + STREAM_LAST },
-  full: { firstLimit: Infinity, lastLimit: 0, hardCap: RUN_OUTPUT_CAP },
-  raw: { firstLimit: Infinity, lastLimit: 0, hardCap: Infinity }
+  safe: { firstLimit: STREAM_FIRST, lastLimit: STREAM_LAST, hardCap: STREAM_FIRST + STREAM_LAST, lineLimit: MAX_LINE_LEN },
+  wide: { firstLimit: STREAM_FIRST, lastLimit: STREAM_LAST, hardCap: STREAM_FIRST + STREAM_LAST, lineLimit: Infinity },
+  full: { firstLimit: Infinity, lastLimit: 0, hardCap: RUN_OUTPUT_CAP, lineLimit: MAX_LINE_LEN },
+  raw: { firstLimit: Infinity, lastLimit: 0, hardCap: Infinity, lineLimit: Infinity }
 };
 var DEFAULT_OUTPUT_MODE = "safe";
 function resolveOutputPolicy(mode) {
@@ -51635,6 +51597,13 @@ function truncateLines(text, { maxLines = MAX_RESULT_LINES, maxLineLen = MAX_LIN
 ... (output truncated)`;
   return output;
 }
+function capLineWidth(text, lineLimit) {
+  if (!isFinite(lineLimit))
+    return text;
+  return text.split(`
+`).map((line) => line.length > lineLimit ? line.slice(0, lineLimit) + ` ...[+${line.length - lineLimit} chars]` : line).join(`
+`);
+}
 function formatTruncationNotice(totalLen, firstLimit, lastPart) {
   const dropped = totalLen - firstLimit - lastPart.length;
   return `
@@ -51697,9 +51666,11 @@ class OutputBuffer {
   truncMsgSent = false;
   headLimit;
   lastLimit;
+  lineLimit;
   constructor(policy = OUTPUT_POLICIES[DEFAULT_OUTPUT_MODE]) {
     this.headLimit = Math.min(policy.firstLimit, policy.hardCap);
     this.lastLimit = Math.min(policy.lastLimit, policy.hardCap - this.headLimit);
+    this.lineLimit = policy.lineLimit;
   }
   append(text) {
     this.totalLen += text.length;
@@ -51733,15 +51704,15 @@ class OutputBuffer {
   }
   getOutput() {
     if (!this.truncated)
-      return this.firstPart;
-    return this.firstPart + `
+      return capLineWidth(this.firstPart, this.lineLimit);
+    return capLineWidth(this.firstPart, this.lineLimit) + `
 
 ... [truncated: showing first ${this.firstPart.length} and last ${this.lastPart.length} chars of ${this.totalLen} total] ...
 
-${this.lastPart}`;
+${capLineWidth(this.lastPart, this.lineLimit)}`;
   }
   getRawIfComplete() {
-    return this.truncated ? null : this.firstPart;
+    return this.truncated ? null : capLineWidth(this.firstPart, this.lineLimit);
   }
 }
 var processes = new Map;
@@ -52624,7 +52595,7 @@ register("read_file_base64", async (args) => {
   return { path: fullPath, base64: data.toString("base64"), bytes: data.length };
 });
 register("search_files", async (args) => {
-  const { pattern, path: p10 = ".", cwd = args.root_path ?? "", head = 100, max_count = 5, glob: globPattern = "", ignore_case = true } = args;
+  const { pattern, path: p10 = ".", cwd = args.root_path ?? "", head = 100, max_count = 5, glob: globPattern = "", ignore_case = true, output: outputMode = DEFAULT_OUTPUT_MODE } = args;
   const { execSync: execWhich } = await import("child_process");
   const whichCmd = process.platform === "win32" ? "where" : "which";
   const which = (bin) => {
@@ -52703,7 +52674,7 @@ register("search_files", async (args) => {
       output = lines.join(`
 `);
     }
-    return { result: truncateLines(output, { maxLines: head }) };
+    return { result: truncateLines(output, { maxLines: head, maxLineLen: resolveOutputPolicy(outputMode).lineLimit }) };
   }
   if (code === 1)
     return { result: "No matches found." };
@@ -53006,6 +52977,8 @@ class TODOforAIEdge {
   browserExtensionBridge;
   stopping = false;
   reconnectTimer;
+  wakeReconnect;
+  connectedAt = 0;
   edgeConfig = {
     id: "",
     name: "Name uninitialized",
@@ -53288,25 +53261,40 @@ class TODOforAIEdge {
           console.log(`[warn] Unknown message type: ${msgType}`);
     }
   }
-  startHeartbeat(onStale) {
+  startHeartbeat(ws2, onStale) {
     this.stopHeartbeat();
+    const intervalMs = 30000;
+    const resumeGapMs = 60000;
+    let lastTick = Date.now();
     let pongReceived = true;
-    this.ws?.on("pong", () => {
+    ws2.on("pong", () => {
       pongReceived = true;
     });
     this.heartbeatTimer = setInterval(() => {
+      const now = Date.now();
+      const elapsed = now - lastTick;
+      lastTick = now;
+      if (elapsed > resumeGapMs) {
+        console.log(`[warn] Heartbeat delayed ${Math.round(elapsed / 1000)}s (sleep/resume likely), reconnecting`);
+        try {
+          ws2.terminate();
+        } catch {}
+        onStale();
+        return;
+      }
       if (!pongReceived) {
         console.log("[warn] No pong received, terminating stale connection");
-        this.stopHeartbeat();
-        this.ws?.terminate();
+        try {
+          ws2.terminate();
+        } catch {}
         onStale();
         return;
       }
       pongReceived = false;
       try {
-        this.ws?.ping();
+        ws2.ping();
       } catch {}
-    }, 30000);
+    }, intervalMs);
   }
   stopHeartbeat() {
     if (this.heartbeatTimer) {
@@ -53319,20 +53307,30 @@ class TODOforAIEdge {
       const url = `${this.wsUrl}?fingerprint=${encodeURIComponent(this.fingerprint)}`;
       if (this.debug)
         console.log(`[info] Connecting to ${url}`);
-      this.ws = new wrapper_default(url, [this.api.apiKey], {
+      const ws2 = new wrapper_default(url, [this.api.apiKey], {
         maxPayload: 5 * 1024 * 1024,
         rejectUnauthorized: false
       });
-      this.ws.on("open", () => {
-        this.connected = true;
-        console.log("[info] WebSocket connected");
-        this.startHeartbeat(() => {
+      this.ws = ws2;
+      let settled = false;
+      const settle = (fn2) => {
+        if (settled)
+          return;
+        settled = true;
+        if (this.ws === ws2) {
+          this.stopHeartbeat();
           this.connected = false;
           this.ws = null;
-          resolve();
-        });
+        }
+        fn2();
+      };
+      ws2.on("open", () => {
+        this.connected = true;
+        this.connectedAt = Date.now();
+        console.log("[info] WebSocket connected");
+        this.startHeartbeat(ws2, () => settle(() => resolve(0)));
       });
-      this.ws.on("message", (data, isBinary) => {
+      ws2.on("message", (data, isBinary) => {
         if (isBinary) {
           const frame = data instanceof Buffer ? new Uint8Array(data) : new Uint8Array(data);
           this.storeBinaryFrame(frame);
@@ -53340,36 +53338,30 @@ class TODOforAIEdge {
         }
         this.handleMessage(data.toString()).catch((e) => {
           if (e instanceof AuthenticationError || e instanceof ServerError) {
-            this.ws?.close();
-            reject(e);
+            ws2.close();
+            settle(() => reject(e));
           } else {
             console.error("[handler error]", e);
           }
         });
       });
-      this.ws.on("close", (code, reason) => {
-        this.stopHeartbeat();
-        this.connected = false;
-        this.ws = null;
+      ws2.on("close", (code, reason) => {
         const reasonText = reason?.toString() || "<empty>";
-        const clean = code === 1000;
-        console.log(`[info] WebSocket closed code=${code} clean=${clean} reason=${reasonText}`);
+        console.log(`[info] WebSocket closed code=${code} clean=${code === 1000} reason=${reasonText}`);
         if (code === 4001) {
           console.log(`\x1B[33m[info] ${reasonText}. Not reconnecting.\x1B[0m`);
           console.log(`\x1B[33m[info] To replace the existing connection, restart with: todoforai-edge --kill\x1B[0m`);
-          reject(new ServerError(reasonText));
+          settle(() => reject(new ServerError(reasonText)));
         } else if (code === 4002) {
           console.log(`\x1B[33m[info] ${reasonText}. This instance was replaced by a new connection.\x1B[0m`);
-          reject(new ServerError(reasonText));
+          settle(() => reject(new ServerError(reasonText)));
         } else {
-          resolve();
+          settle(() => resolve(code));
         }
       });
-      this.ws.on("error", (err2) => {
-        this.stopHeartbeat();
-        this.connected = false;
-        this.ws = null;
-        reject(err2);
+      ws2.on("error", (err2) => {
+        console.error(`[error] WebSocket error: ${err2.message}`);
+        settle(() => resolve(0));
       });
     });
   }
@@ -53379,45 +53371,34 @@ class TODOforAIEdge {
     } catch {}
     this.fingerprint = generateFingerprint();
     console.log(`\x1B[36m\x1B[1m\uD83D\uDC46 Fingerprint:\x1B[0m ${this.fingerprint}`);
-    const maxAttempts = 20;
     let attempt = 0;
-    while (attempt < maxAttempts && !this.stopping) {
-      console.log(`[info] Connecting (attempt ${attempt + 1}/${maxAttempts})`);
+    while (!this.stopping) {
+      console.log(`[info] Connecting${attempt > 0 ? ` (retry ${attempt})` : ""}`);
+      this.connectedAt = 0;
       try {
         await this.connect();
-        if (this.stopping)
-          break;
-        attempt = 0;
       } catch (e) {
-        if (e instanceof AuthenticationError) {
-          console.error(`\x1B[31mAuthentication failed: ${e.message}\x1B[0m`);
-          break;
-        }
-        if (e instanceof ServerError) {
-          console.error(`\x1B[31mServer error: ${e.message}\x1B[0m`);
-          break;
-        }
-        attempt++;
-        console.error(`[error] Connection error: ${e.message}`);
-      } finally {
-        this.connected = false;
-        this.ws = null;
-      }
-      if (attempt > 0 && attempt < maxAttempts && !this.stopping) {
-        const delay = Math.min(4 + attempt, 20);
-        console.log(`[info] Reconnecting in ${delay}s...`);
-        await new Promise((r) => {
-          this.reconnectTimer = setTimeout(r, delay * 1000);
-        });
+        const label = e instanceof AuthenticationError ? "Authentication failed" : "Server error";
+        console.error(`\x1B[31m${label}: ${e.message}\x1B[0m`);
+        break;
       }
-    }
-    if (attempt >= maxAttempts) {
-      console.error("\x1B[31mMax reconnection attempts reached.\x1B[0m");
+      if (this.stopping)
+        break;
+      if (this.connectedAt && Date.now() - this.connectedAt > 60000)
+        attempt = 0;
+      attempt++;
+      const delay = Math.min(2 * 2 ** Math.min(attempt - 1, 4), 30);
+      console.log(`[info] Reconnecting in ${delay}s...`);
+      await new Promise((r) => {
+        this.wakeReconnect = r;
+        this.reconnectTimer = setTimeout(r, delay * 1000);
+      });
     }
   }
   stop() {
     this.stopping = true;
     clearTimeout(this.reconnectTimer);
+    this.wakeReconnect?.();
     this.stopHeartbeat();
     this.browserExtensionBridge.stop();
     this.frontendWs?.close();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@todoforai/edge",
-  "version": "0.13.19",
+  "version": "0.13.21",
   "type": "module",
   "bin": {
     "todoforai-edge": "dist/index.js"