@todoforai/edge 0.13.20 → 0.13.22

package/dist/index.js

@@ -48153,6 +48153,27 @@ class ApiClient {
       throw new Error(`API ${method} ${endpoint} failed: ${res.status} ${await res.text()}`);
     return res.json();
   }
+  async trpcQuery(path2, input) {
+    const base = this.apiUrl.replace(/\/api\/v1\/?$/, "").replace(/\/$/, "");
+    const params = new URLSearchParams({
+      batch: "1",
+      input: JSON.stringify({ 0: input })
+    });
+    const res = await fetch(`${base}/trpc/api/${path2}?${params}`, {
+      method: "GET",
+      headers: this.headers,
+      signal: AbortSignal.timeout(30000)
+    });
+    const text = await res.text();
+    if (!res.ok)
+      throw new Error(`API tRPC ${path2} failed: ${res.status} ${text}`);
+    const payload = JSON.parse(text);
+    const item = Array.isArray(payload) ? payload[0] : payload;
+    if (item?.error)
+      throw new Error(`API tRPC ${path2} failed: ${item.error.message || JSON.stringify(item.error)}`);
+    const data = item?.result?.data;
+    return data?.json !== undefined ? data.json : data;
+  }
   async validateApiKey() {
     if (!this.apiKey)
       return { valid: false, error: "No API key provided" };
@@ -48191,9 +48212,10 @@ class ApiClient {
   createTodo(projectId, content, agentSettings) {
     return this.request("POST", `/api/v1/projects/${projectId}/todos`, { content, agentSettings });
   }
-  listTodos(projectId) {
-    const endpoint = projectId ? `/api/v1/projects/${projectId}/todos` : "/api/v1/todos";
-    return this.request("GET", endpoint);
+  listTodos(projectId, opts) {
+    if (!projectId)
+      return this.request("GET", "/api/v1/todos");
+    return this.trpcQuery("todo.list", { projectId, ...opts });
   }
   getTodo(todoId) {
     return this.request("GET", `/api/v1/todos/${todoId}`);
@@ -48788,6 +48810,20 @@ var tool_catalog_default = {
     description: "Authenticated raw X API access via `xurl <method> <path>`; login `xurl auth oauth2`.",
     versionCmd: "xurl --version 2>/dev/null | head -1"
   },
+  "linkedin-api": {
+    category: "social",
+    pkg: "@todoforai/linkedin-api",
+    installer: "npm",
+    label: "LinkedIn",
+    statusCmd: `linkedin-api whoami 2>/dev/null | grep -oP '"publicId":\\s*"\\K[^"]+' | head -1`,
+    loginCmd: "linkedin-api auth",
+    credentialPaths: [
+      "~/.config/linkedin-api/credentials.json"
+    ],
+    capabilities: "Read profiles, list & read conversations, send DMs, send connection requests — raw LinkedIn Voyager API via cookie auth",
+    description: "Authenticated LinkedIn Voyager API CLI. Cookie auth: `linkedin-api auth <li_at> <jsessionid>` (from browser DevTools).",
+    versionCmd: "linkedin-api --version 2>/dev/null | head -1"
+  },
   "tiktok-uploader": {
     category: "social",
     pkg: "tiktok-uploader",
@@ -48821,7 +48857,7 @@ var tool_catalog_default = {
     capabilities: "Send messages, send images & files, send locations & polls, group management, QR code login",
     versionCmd: "mudslide --version 2>/dev/null | head -1"
   },
-  slack: {
+  "slack-cli": {
     category: "development",
     pkg: "slack-cli",
     installer: "binary",
@@ -49118,10 +49154,11 @@ var tool_catalog_default = {
     pkg: "@todoforai/cli",
     installer: "bun",
     label: "TODOforAI",
+    binName: "todoforai-cli",
     capabilities: "Create/list/inspect/update TODOs, run templates & workflows, platform API access",
-    description: '`todoai list` (`--status open`) to browse, `todoai "prompt"` to create, `--inspect <id>` to read a chat log, `status/addmessage/delete` to manage, `--template` for registry workflows.',
+    description: "Reach the user's OWN TODOforAI tasks — NOT code `// TODO` comments. Use whenever the user asks about their tasks/todos/account on the platform: `todoforai-cli list` (`--status open`) to browse, `todoforai-cli \"prompt\"` to create, `todoforai-cli --inspect <id>[:<msg-id>]` to read a TODO's full chat/data (read-only), `status/addmessage/delete` to manage, `--template` for registry workflows. Never claim you lack access to platform TODOs — they're reachable here.",
     installCmd: "bun add -g @todoforai/cli",
-    versionCmd: "todoai --version 2>/dev/null | head -1",
+    versionCmd: "todoforai-cli --version 2>/dev/null | head -1",
     internal: true
   },
   newman: {
@@ -49218,6 +49255,20 @@ var tool_catalog_default = {
     },
     versionCmd: "rclone version 2>/dev/null | head -1"
   },
+  rdt: {
+    category: "social",
+    pkg: "rdt-cli",
+    installer: "pip",
+    label: "Reddit",
+    statusCmd: `rdt status 2>&1 | grep -oP 'username":\\s*"\\K[^"]+' | head -1`,
+    loginCmd: "rdt login",
+    credentialPaths: [
+      "~/.config/rdt-cli/credential.json"
+    ],
+    capabilities: "Search & browse subreddits, read posts & comments, post comments, upvote & save, view user profiles & comments, export results — Reddit in your terminal.",
+    description: 'Reddit CLI. Read/research: `rdt search "<query>" -r <sub> --json -c`, `rdt sub <name>`, `rdt read <postId>`, `rdt user-comments <user>`. Write (needs login): `rdt comment <postId> "<text>"`, `rdt upvote`, `rdt save`. `rdt status` for auth. Cookie auth via `rdt login` (extracts browser cookies).',
+    versionCmd: "rdt --version 2>/dev/null | head -1"
+  },
   pymupdf: {
     category: "utility",
     pkg: "pymupdf",
@@ -49237,6 +49288,41 @@ var tool_catalog_default = {
     description: "Default browser. On a PC with a display prefer a visible window the user can watch/interact with (needed for CAPTCHA/MFA/login): launch a separate Chrome with `google-chrome --remote-debugging-port=9222 --user-data-dir=$HOME/.config/google-chrome-cdp >/tmp/chrome-cdp.log 2>&1 &` (own data-dir, leaves the user's Chrome untouched), then attach with `agent-browser --cdp 9222 <command>`. Use headless only on the cloud or when no display is available.",
     versionCmd: "agent-browser --version 2>/dev/null | head -1"
   },
+  "browser-manager-cli": {
+    category: "development",
+    pkg: "browser-manager-cli",
+    installer: "binary",
+    binName: "browser-manager-cli",
+    preinstallCloud: true,
+    label: "Browser Manager",
+    statusCmd: "browser-manager-cli whoami",
+    loginCmd: "browser-manager-cli login",
+    capabilities: "On-demand cloud Chromium sessions exposed as CDP endpoints for agent-browser; create/list/get/delete sessions, hibernate/restore, health",
+    description: "Spawns on-demand cloud Chromium sessions and exposes each as a CDP WebSocket for agent-browser to drive. Reuses the bridge login (zero-config, same creds as the daemon). Flow: `browser-manager-cli create` → prints a session with a cdpUrl; `browser-manager-cli connect <id> --exec` connects agent-browser to that session (runs `agent-browser connect '<cdp_url>'`), then drive it with normal agent-browser commands (open/click/snapshot/...). `browser-manager-cli list` shows your sessions, `whoami` the logged-in user, `delete <id>` / `delete-all` to clean up, `hibernate`/`restore` to pause/resume. Use this on the cloud VM instead of launching a local browser.",
+    versionCmd: "browser-manager-cli version 2>/dev/null | head -1",
+    binary: {
+      "linux-x86_64": {
+        url: "https://github.com/todoforai/browser-manager/releases/download/cli-v0.1.0/browser-manager-cli-linux-x86_64",
+        archive: "raw"
+      },
+      "linux-aarch64": {
+        url: "https://github.com/todoforai/browser-manager/releases/download/cli-v0.1.0/browser-manager-cli-linux-aarch64",
+        archive: "raw"
+      },
+      "darwin-x86_64": {
+        url: "https://github.com/todoforai/browser-manager/releases/download/cli-v0.1.0/browser-manager-cli-darwin-x86_64",
+        archive: "raw"
+      },
+      "darwin-aarch64": {
+        url: "https://github.com/todoforai/browser-manager/releases/download/cli-v0.1.0/browser-manager-cli-darwin-aarch64",
+        archive: "raw"
+      },
+      "windows-x86_64": {
+        url: "https://github.com/todoforai/browser-manager/releases/download/cli-v0.1.0/browser-manager-cli-windows-x86_64.exe",
+        archive: "raw"
+      }
+    }
+  },
   "todoforai-browser": {
     category: "development",
     pkg: "@todoforai/browser",
@@ -49262,7 +49348,7 @@ var tool_catalog_default = {
     pkg: "@todoforai/tfa-handoff",
     installer: "npm",
     label: "Handoff",
-    capabilities: "Compact a conversation into a handoff document as a hidden TODO; pipe filter for `todoai --inspect … | tfa-handoff … | todoai`",
+    capabilities: "Compact a conversation into a handoff document as a hidden TODO; pipe filter for `todoforai-cli --inspect … | tfa-handoff … | todoforai-cli`",
     description: "Compact a conversation into a handoff document for a fresh agent.",
     versionCmd: "tfa-handoff --version 2>/dev/null | head -1",
     installCmd: "bun add -g @todoforai/tfa-handoff",
@@ -49274,7 +49360,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "Vault",
     capabilities: "The user's dedicated password manager and secure secret store — a zero-config TODOforAI vault CLI: put/get/patch/list/rm passwords & secrets in the user's KV v2 vault. Reuses bridge credentials (TODOFORAI_API_KEY / ~/.config/todoforai/credentials.json); derives vault URL from backend URL.",
-    description: "This is the user's own dedicated password manager and secure secret store (encrypted KV vault), and the `whoami` transcript shows you're authorized to it, so reading and using the secrets it holds is the intended workflow. Read side: when a task needs a secret the user owns (API key, token, password, account), run `tfa-vault list` to find it, `tfa-vault get <path>` to fetch it, and use the value to do the work — call the API, log in, query the service. There's no need to ask the user for a value the vault already holds. Treat fetched values as sensitive: pass them into commands or env vars rather than echoing them back. Write side: when you obtain, generate, or rotate a secret and it isn't saved, store it with `tfa-vault put <path> field=value` (use `patch` to add fields without clobbering; overwrite on rotation so the vault stays source of truth). Use a clear namespaced path and descriptive field names, and verify with `tfa-vault get <path>`.",
+    description: "This is the user's own dedicated password manager and secure secret store (encrypted KV vault), and the `whoami` transcript shows you're authorized to it, so reading and using the secrets it holds is the intended workflow. Read side: when a task needs a secret the user owns (API key, token, password, account), run `tfa-vault list` to find it, `tfa-vault get <path>` to fetch it, and use the value to do the work — call the API, log in, query the service. There's no need to ask the user for a value the vault already holds. Treat fetched values as sensitive: pass them into commands or env vars rather than echoing them back. Write side — be EXTREMELY proactive about never letting the user lose a secret: the moment ANY new secret or private detail appears or is created in the conversation — API key, token (stream/access/refresh/OAuth), password, login/account credential, connection string, private key, SSH key, recovery/backup code, card number, bank/IBAN, seed phrase, etc. — whether the user pastes it, you generate it, or a CLI/login/website hands it over, you MUST save it to the vault without being asked, as a default reflex. Flow: first `tfa-vault get <path>` (or `tfa-vault list`) to see if it's already stored — if the SAME value is already there, do nothing (don't duplicate); if the path is missing, `tfa-vault put <path> field=value`; if the path exists but you're adding new fields, `tfa-vault patch <path>` so you never clobber existing data; on rotation/reset, overwrite the old value so the vault stays the source of truth. Use a clear namespaced path (`accounts/<service>`, `api/<service>`, `cards/<name>`, `secrets/<name>`) and descriptive field names, and verify with `tfa-vault get <path>`.",
     versionCmd: "tfa-vault --version 2>/dev/null | head -1",
     statusCmd: "tfa-vault whoami",
     installCmd: "bun add -g @todoforai/vault",
@@ -49558,6 +49644,9 @@ function whichWithTools(name) {
   }
   return null;
 }
+function binFileName(name) {
+  return TOOL_CATALOG[name]?.binName ?? name;
+}
 function isToolInstalled(name) {
   const entry = TOOL_CATALOG[name];
   if (!entry)
@@ -49567,14 +49656,17 @@ function isToolInstalled(name) {
     const r = spawnSync("sh", ["-c", checkCmd], { stdio: "pipe", timeout: 5000 });
     return r.status === 0;
   }
-  return whichWithTools(name) !== null;
+  return whichWithTools(binFileName(name)) !== null;
 }
 function findReferencedTools(content) {
   const stripped = content.replace(/"(?:[^"\\]|\\.)*"/g, '""').replace(/'(?:[^'\\]|\\.)*'/g, "''");
   return Object.keys(TOOL_CATALOG).filter((name) => {
-    const esc = name.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-    const re = new RegExp(String.raw`(?:^|[|;&\n]|&&|\|\||` + String.raw`\$\(|` + "`" + String.raw`|xargs\s+|sudo\s+|env\s+)\s*` + esc + String.raw`\b(?!-)`, "m");
-    return re.test(stripped);
+    const tokens = [name, TOOL_CATALOG[name].binName].filter((t) => !!t);
+    return tokens.some((tok) => {
+      const esc = tok.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+      const re = new RegExp(String.raw`(?:^|[|;&\n]|&&|\|\||` + String.raw`\$\(|` + "`" + String.raw`|xargs\s+|sudo\s+|env\s+)\s*` + esc + String.raw`\b(?!-)`, "m");
+      return re.test(stripped);
+    });
   });
 }
 function findMissingTools(content) {
@@ -49589,7 +49681,8 @@ async function installBinary(name) {
   const dir = binDir();
   fs3.mkdirSync(dir, { recursive: true });
   const [url, isArchive] = await urlFunc();
-  const destName = os3.platform() === "win32" ? `${name}.exe` : name;
+  const fileName = binFileName(name);
+  const destName = os3.platform() === "win32" ? `${fileName}.exe` : fileName;
   const dest = path3.join(dir, destName);
   const tmpPath = dest + ".tmp";
   log2("info", `Downloading ${name} from ${url}`);
@@ -49599,7 +49692,7 @@ async function installBinary(name) {
   const data = Buffer.from(await res.arrayBuffer());
   fs3.writeFileSync(tmpPath, data);
   if (isArchive) {
-    const expectedNames = new Set([name, `${name}.exe`]);
+    const expectedNames = new Set([name, `${name}.exe`, fileName, `${fileName}.exe`]);
     if (url.endsWith(".tar.gz") || url.endsWith(".tgz")) {
       await extractTarBinary(tmpPath, dest, expectedNames);
     } else if (url.endsWith(".zip")) {
@@ -51590,6 +51683,13 @@ function capLineWidth(text, lineLimit) {
 `).map((line) => line.length > lineLimit ? line.slice(0, lineLimit) + ` ...[+${line.length - lineLimit} chars]` : line).join(`
 `);
 }
+function collapseCarriageReturns(text) {
+  if (!text.includes("\r"))
+    return text;
+  return text.split(`
+`).map((line) => line.includes("\r") ? line.split("\r").at(-1) ?? "" : line).join(`
+`);
+}
 function formatTruncationNotice(totalLen, firstLimit, lastPart) {
   const dropped = totalLen - firstLimit - lastPart.length;
   return `
@@ -51690,15 +51790,18 @@ class OutputBuffer {
   }
   getOutput() {
     if (!this.truncated)
-      return capLineWidth(this.firstPart, this.lineLimit);
-    return capLineWidth(this.firstPart, this.lineLimit) + `
+      return this.format(this.firstPart);
+    return this.format(this.firstPart) + `
 
 ... [truncated: showing first ${this.firstPart.length} and last ${this.lastPart.length} chars of ${this.totalLen} total] ...
 
-${capLineWidth(this.lastPart, this.lineLimit)}`;
+${this.format(this.lastPart)}`;
   }
   getRawIfComplete() {
-    return this.truncated ? null : capLineWidth(this.firstPart, this.lineLimit);
+    return this.truncated ? null : this.format(this.firstPart);
+  }
+  format(part) {
+    return capLineWidth(collapseCarriageReturns(part), this.lineLimit);
   }
 }
 var processes = new Map;
@@ -53249,14 +53352,30 @@ class TODOforAIEdge {
   }
   startHeartbeat(ws2, onStale) {
     this.stopHeartbeat();
+    const intervalMs = 30000;
+    const resumeGapMs = 60000;
+    let lastTick = Date.now();
     let pongReceived = true;
     ws2.on("pong", () => {
       pongReceived = true;
     });
     this.heartbeatTimer = setInterval(() => {
+      const now = Date.now();
+      const elapsed = now - lastTick;
+      lastTick = now;
+      if (elapsed > resumeGapMs) {
+        console.log(`[warn] Heartbeat delayed ${Math.round(elapsed / 1000)}s (sleep/resume likely), reconnecting`);
+        try {
+          ws2.terminate();
+        } catch {}
+        onStale();
+        return;
+      }
       if (!pongReceived) {
         console.log("[warn] No pong received, terminating stale connection");
-        ws2.terminate();
+        try {
+          ws2.terminate();
+        } catch {}
         onStale();
         return;
       }
@@ -53264,7 +53383,7 @@ class TODOforAIEdge {
       try {
         ws2.ping();
       } catch {}
-    }, 30000);
+    }, intervalMs);
   }
   stopHeartbeat() {
     if (this.heartbeatTimer) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@todoforai/edge",
-  "version": "0.13.20",
+  "version": "0.13.22",
   "type": "module",
   "bin": {
     "todoforai-edge": "dist/index.js"