assistme 0.3.5 → 0.3.6

package/dist/index.js

@@ -1,20 +1,44 @@
 #!/usr/bin/env node
 import {
+  AppError,
+  BrowseSkillRowSchema,
+  CDP_COMMAND_TIMEOUT_MS,
+  FRAME_CONTEXTS_MAX_SIZE,
   JobRunner,
+  MAX_COMPLETE_TASK_RETRIES,
+  MAX_CONTENT_SEARCH_FILES,
+  MAX_CONTENT_SEARCH_RESULTS,
+  MAX_FILE_SEARCH_RESULTS,
+  MAX_HISTORY_ENTRIES,
+  MAX_HISTORY_RESPONSE_LENGTH,
+  MAX_RESPONSE_CONTENT_LENGTH,
+  MAX_SKILL_RECORD_RESULT_LENGTH,
+  MAX_TOOL_INPUT_LOG_LENGTH,
+  MAX_TOOL_RESULT_LENGTH,
+  SCHEDULER_INTERVAL_MS,
+  SHELL_MAX_OUTPUT,
+  SHELL_TIMEOUT_MS,
+  SKILL_DESCRIPTION_BUDGET_CHARS,
+  SkillCreateResultSchema,
+  SkillDecisionSchema,
+  SkillRowSchema,
+  WS_CONNECT_TIMEOUT_MS,
   callMcpHandler,
+  errorMessage,
   log,
   newCorrelationId,
   readAuthStore,
+  safeParse,
   setCorrelationId,
   setLogLevel,
   writeAuthStore
-} from "./chunk-KX7ITO55.js";
+} from "./chunk-4YWS463E.js";
 import {
   clearConfig,
   getConfig,
   getConfigPath,
   setConfig
-} from "./chunk-TTEGHE2E.js";
+} from "./chunk-JVA6DHXD.js";
 
 // src/index.ts
 import { Command } from "commander";
@@ -54,7 +78,7 @@ async function logout() {
 
 // src/db/session.ts
 async function createSession(sessionName, workspacePath, version2) {
-  const { getConfig: getConfig2 } = await import("./config-PUIS2TQL.js");
+  const { getConfig: getConfig2 } = await import("./config-T4357GAE.js");
   const data = await callMcpHandler("session.create", {
     session_name: sessionName,
     workspace_path: workspacePath,
@@ -135,11 +159,11 @@ async function completeTask(messageId, resultSummary, tokenUsage) {
     token_usage: tokenUsage || null
   });
 }
-async function failTask(messageId, errorMessage) {
+async function failTask(messageId, errorMessage2) {
   try {
     await callMcpHandler("task.fail", {
       message_id: messageId,
-      error: errorMessage
+      error: errorMessage2
     });
   } catch (err) {
     log.error(`Failed to update task status: ${err instanceof Error ? err.message : err}`);
@@ -412,9 +436,9 @@ var BrowserController = class {
         if (!settled) {
           settled = true;
           this.ws?.close();
-          reject(new Error("Connection timeout (5s)"));
+          reject(new Error(`Connection timeout (${WS_CONNECT_TIMEOUT_MS}ms)`));
         }
-      }, 5e3);
+      }, WS_CONNECT_TIMEOUT_MS);
       this.ws.on("open", () => {
         if (settled) return;
         settled = true;
@@ -462,6 +486,8 @@ var BrowserController = class {
       this.ws = null;
       this.connected = false;
     }
+    this.refCache.clear();
+    this.frameContexts.clear();
     return "Disconnected from browser.";
   }
   // ── CDP Protocol ────────────────────────────────────────────────
@@ -481,7 +507,7 @@ var BrowserController = class {
       const timeout = setTimeout(() => {
         this.callbacks.delete(id);
         reject(new Error(`CDP command timed out: ${method}`));
-      }, 15e3);
+      }, CDP_COMMAND_TIMEOUT_MS);
       this.callbacks.set(id, (response) => {
         clearTimeout(timeout);
         if (response.error) {
@@ -1213,7 +1239,9 @@ Refs:
                 height: r.box.height
               }
             });
-            this.frameContexts.set(r.id, contextId);
+            if (this.frameContexts.size < FRAME_CONTEXTS_MAX_SIZE) {
+              this.frameContexts.set(r.id, contextId);
+            }
           }
         } catch {
         }
@@ -2328,51 +2356,22 @@ import ora3 from "ora";
 import { createInterface as createInterface2 } from "readline";
 
 // src/agent/scheduler.ts
-var SCHEDULER_INTERVAL = 3e4;
+import { Cron } from "croner";
 function getNextRunTime(cronExpr, timezone, fromDate) {
   const now = fromDate || /* @__PURE__ */ new Date();
-  const parts = cronExpr.trim().split(/\s+/);
-  if (parts.length !== 5) {
-    throw new Error(`Invalid cron expression: ${cronExpr}`);
-  }
-  const [minExpr, hourExpr, domExpr, monExpr, dowExpr] = parts;
-  function parseField(expr, min, max) {
-    const values = [];
-    for (const part of expr.split(",")) {
-      if (part === "*") {
-        for (let i = min; i <= max; i++) values.push(i);
-      } else if (part.startsWith("*/")) {
-        const step = parseInt(part.slice(2));
-        for (let i = min; i <= max; i += step) values.push(i);
-      } else if (part.includes("-")) {
-        const [start, end] = part.split("-").map(Number);
-        for (let i = start; i <= end; i++) values.push(i);
-      } else {
-        values.push(parseInt(part));
-      }
+  try {
+    const job = new Cron(cronExpr, { timezone: timezone || "UTC" });
+    const next = job.nextRun(now);
+    if (!next) {
+      throw new Error(`No future run time found for cron expression: ${cronExpr}`);
     }
-    return values.sort((a, b) => a - b);
-  }
-  const minutes = parseField(minExpr, 0, 59);
-  const hours = parseField(hourExpr, 0, 23);
-  const daysOfMonth = parseField(domExpr, 1, 31);
-  const months = parseField(monExpr, 1, 12);
-  const daysOfWeek = parseField(dowExpr, 0, 6);
-  const useUTC = timezone === "UTC";
-  const candidate = new Date(now.getTime() + 6e4);
-  candidate.setSeconds(0, 0);
-  for (let i = 0; i < 527040; i++) {
-    const m = useUTC ? candidate.getUTCMinutes() : candidate.getMinutes();
-    const h = useUTC ? candidate.getUTCHours() : candidate.getHours();
-    const dom = useUTC ? candidate.getUTCDate() : candidate.getDate();
-    const mon = (useUTC ? candidate.getUTCMonth() : candidate.getMonth()) + 1;
-    const dow = useUTC ? candidate.getUTCDay() : candidate.getDay();
-    if (minutes.includes(m) && hours.includes(h) && daysOfMonth.includes(dom) && months.includes(mon) && (dowExpr === "*" || daysOfWeek.includes(dow))) {
-      return candidate;
-    }
-    candidate.setTime(candidate.getTime() + 6e4);
-  }
-  return new Date(now.getTime() + 864e5);
+    return next;
+  } catch (err) {
+    if (err instanceof Error && err.message.includes("No future run time")) {
+      throw err;
+    }
+    throw new Error(`Invalid cron expression "${cronExpr}": ${errorMessage(err)}`);
+  }
 }
 var Scheduler = class {
   timer = null;
@@ -2382,7 +2381,7 @@ var Scheduler = class {
     this.onScheduledTask = onScheduledTask;
     this.running = true;
     await this.initializeNextRuns();
-    this.timer = setInterval(() => this.checkDueTasks(), SCHEDULER_INTERVAL);
+    this.timer = setInterval(() => this.checkDueTasks(), SCHEDULER_INTERVAL_MS);
     log.info("Scheduler started (checking every 30s)");
   }
   stop() {
@@ -2405,7 +2404,7 @@ var Scheduler = class {
         }
       }
     } catch (err) {
-      log.debug(`Scheduler init: ${err}`);
+      log.debug(`Scheduler init: ${errorMessage(err)}`);
     }
   }
   async checkDueTasks() {
@@ -2429,7 +2428,7 @@ var Scheduler = class {
           last_error: null
         });
       } catch (err) {
-        const errMsg = err instanceof Error ? err.message : String(err);
+        const errMsg = errorMessage(err);
         await callMcpHandler("schedule.update", {
           task_id: task.id,
           last_error: errMsg
@@ -2437,7 +2436,7 @@ var Scheduler = class {
         log.error(`Scheduled task "${task.name}" failed: ${errMsg}`);
       }
     } catch (err) {
-      log.debug(`Scheduler check error: ${err}`);
+      log.debug(`Scheduler check error: ${errorMessage(err)}`);
     }
   }
 };
@@ -2957,7 +2956,7 @@ var SkillManager = class {
   userId = null;
   /** Cache for findRelevant() — keyed by prompt, invalidated on skill changes */
   relevanceCache = /* @__PURE__ */ new Map();
-  DESCRIPTION_BUDGET_CHARS = 16e3;
+  DESCRIPTION_BUDGET_CHARS = SKILL_DESCRIPTION_BUDGET_CHARS;
   setUserId(userId) {
     this.userId = userId;
   }
@@ -2966,7 +2965,9 @@ var SkillManager = class {
     try {
       const data = await callMcpHandler("skill.load");
       this.skills.clear();
-      for (const row of data || []) {
+      for (const raw of data || []) {
+        const row = safeParse(SkillRowSchema, raw);
+        if (!row) continue;
         const skill = this.rowToSkill(row);
         this.skills.set(skill.name, skill);
       }
@@ -2980,22 +2981,22 @@ var SkillManager = class {
   }
   rowToSkill(row) {
     return {
-      name: row.name,
-      description: row.description || "",
-      version: row.version || "1.0.0",
+      name: String(row.name),
+      description: String(row.description ?? ""),
+      version: String(row.version ?? "1.0.0"),
       userInvocable: row.user_invocable !== false,
       disableModelInvocation: row.disable_model_invocation === true,
-      keywords: row.keywords || [],
-      allowedTools: row.allowed_tools || [],
-      argumentHint: row.argument_hint || "",
+      keywords: Array.isArray(row.keywords) ? row.keywords : [],
+      allowedTools: Array.isArray(row.allowed_tools) ? row.allowed_tools : [],
+      argumentHint: String(row.argument_hint ?? ""),
       metadata: parseDbMetadata(row.metadata),
-      homepage: row.homepage || "",
-      content: row.content,
+      homepage: String(row.homepage ?? ""),
+      content: String(row.content ?? ""),
       filePath: "",
       source: row.source || "manual",
-      dbId: row.id,
-      sourceSkillId: row.source_skill_id || void 0,
-      invocationCount: row.invocation_count || 0
+      dbId: row.id != null ? String(row.id) : void 0,
+      sourceSkillId: row.source_skill_id != null ? String(row.source_skill_id) : void 0,
+      invocationCount: typeof row.invocation_count === "number" ? row.invocation_count : 0
     };
   }
   /** Invalidate caches when skills change (create, add, update, remove). */
@@ -3125,13 +3126,14 @@ _(${skills.length - included} additional skills available \u2014 use skill_searc
           metadata
         }
       );
-      const row = Array.isArray(data) ? data[0] : data;
+      const raw = Array.isArray(data) ? data[0] : data;
+      const row = safeParse(SkillCreateResultSchema, raw);
       if (!row) {
-        log.debug(`Skill create returned no data for "${name}"`);
+        log.debug(`Skill create returned invalid data for "${name}"`);
         return null;
       }
       const id = row.out_id || row.id;
-      const skillName = row.out_name || row.name;
+      const skillName = row.out_name || row.name || name;
       this.skills.set(skillName, {
         name: skillName,
         description,
@@ -3301,11 +3303,11 @@ _(${skills.length - included} additional skills available \u2014 use skill_searc
         });
         if (data) {
           return data.map((row) => ({
-            name: row.name,
-            description: row.description || "",
-            emoji: row.emoji || "",
-            source: row.source || "manual",
-            invocationCount: row.invocation_count || 0
+            name: String(row.name),
+            description: String(row.description ?? ""),
+            emoji: String(row.emoji ?? ""),
+            source: String(row.source ?? "manual"),
+            invocationCount: typeof row.invocation_count === "number" ? row.invocation_count : 0
           }));
         }
       } catch {
@@ -3368,17 +3370,17 @@ _(${skills.length - included} additional skills available \u2014 use skill_searc
         limit: options?.limit || 20,
         offset: options?.offset || 0
       });
-      return (data || []).map((r) => ({
+      return (data || []).map((r) => safeParse(BrowseSkillRowSchema, r)).filter(Boolean).map((r) => ({
         id: r.id,
         name: r.name,
-        description: r.description || "",
-        emoji: r.emoji || "",
-        version: r.version || "1.0.0",
-        authorName: r.author_name || "",
-        category: r.category || "",
-        installCount: r.install_count || 0,
-        avgRating: r.avg_rating != null ? r.avg_rating : null,
-        ratingCount: r.rating_count || 0
+        description: r.description,
+        emoji: r.emoji,
+        version: r.version,
+        authorName: r.author_name,
+        category: r.category,
+        installCount: r.install_count,
+        avgRating: r.avg_rating ?? null,
+        ratingCount: r.rating_count
       }));
     } catch {
       return [];
@@ -3403,8 +3405,12 @@ function substituteArguments(content, args) {
   content = content.replace(/\$(\d+)(?!\w)/g, (_, i) => parts[parseInt(i)] || "");
   return content;
 }
+var SAFE_DYNAMIC_COMMANDS = /^(date|whoami|hostname|uname|pwd|echo|node\s+--version|npm\s+--version|git\s+(branch|rev-parse|log\s+--oneline)|cat\s+)/;
 function preprocessDynamicContext(content, cwd) {
   return content.replace(/!`([^`]+)`/g, (_, cmd) => {
+    if (!SAFE_DYNAMIC_COMMANDS.test(cmd.trim())) {
+      return `[command blocked: ${cmd}]`;
+    }
     try {
       return execSync2(cmd, { timeout: 1e4, encoding: "utf-8", cwd }).trim();
     } catch {
@@ -3479,7 +3485,9 @@ Respond with a JSON object now.`;
       } else if (message.type === "result") {
         const resultMsg = message;
         if (resultMsg.subtype === "success" && "total_cost_usd" in resultMsg) {
-          log.debug(`Skill evaluation cost: $${resultMsg.total_cost_usd.toFixed(4)}`);
+          log.debug(
+            `Skill evaluation cost: $${resultMsg.total_cost_usd.toFixed(4)}`
+          );
         }
       }
     }
@@ -3488,13 +3496,9 @@ Respond with a JSON object now.`;
       log.debug("Skill evaluation: no valid JSON in response");
       return;
     }
-    if (!["create", "update", "skip"].includes(decision.action)) {
-      log.debug("Skill evaluation: invalid action");
-      return;
-    }
     await executeSkillDecision(decision, skillManager);
   } catch (err) {
-    log.debug(`Skill evaluation error: ${err}`);
+    log.debug(`Skill evaluation error: ${errorMessage(err)}`);
   }
 }
 async function executeSkillDecision(decision, skillManager) {
@@ -3504,13 +3508,17 @@ async function executeSkillDecision(decision, skillManager) {
         log.debug("Skill create skipped: missing name or instructions");
         return;
       }
-      let skillName = decision.name;
-      if (validateSkillName(skillName)) {
-        skillName = normalizeSkillName(skillName);
-        if (!skillName || validateSkillName(skillName)) {
-          log.debug(`Skill create skipped: name "${decision.name}" cannot be normalized`);
-          return;
-        }
+      let skillName = normalizeSkillName(decision.name);
+      if (!skillName) {
+        log.debug(`Skill create skipped: name "${decision.name}" cannot be normalized`);
+        return;
+      }
+      const validationError = validateSkillName(skillName);
+      if (validationError) {
+        log.debug(`Skill create skipped: ${validationError}`);
+        return;
+      }
+      if (skillName !== decision.name) {
         log.debug(`Normalized skill name: "${decision.name}" \u2192 "${skillName}"`);
       }
       const existing = skillManager.findSimilar(skillName);
@@ -3569,25 +3577,28 @@ async function executeSkillDecision(decision, skillManager) {
 }
 function parseJsonResponse(text) {
   const trimmed = text.trim();
-  try {
-    const parsed = JSON.parse(trimmed);
-    if (parsed.action) return parsed;
-  } catch {
-  }
+  const candidates = [trimmed];
   const start = trimmed.indexOf("{");
-  if (start === -1) return null;
-  let depth = 0;
-  for (let i = start; i < trimmed.length; i++) {
-    if (trimmed[i] === "{") depth++;
-    else if (trimmed[i] === "}") depth--;
-    if (depth === 0) {
-      try {
-        return JSON.parse(trimmed.slice(start, i + 1));
-      } catch {
-        return null;
+  if (start !== -1) {
+    let depth = 0;
+    for (let i = start; i < trimmed.length; i++) {
+      if (trimmed[i] === "{") depth++;
+      else if (trimmed[i] === "}") depth--;
+      if (depth === 0) {
+        candidates.push(trimmed.slice(start, i + 1));
+        break;
       }
     }
   }
+  for (const candidate of candidates) {
+    try {
+      const parsed = JSON.parse(candidate);
+      const validated = safeParse(SkillDecisionSchema, parsed);
+      if (validated) return validated;
+    } catch {
+      continue;
+    }
+  }
   return null;
 }
 
@@ -3634,14 +3645,16 @@ import { z } from "zod/v4";
 
 // src/tools/filesystem.ts
 import { readFile, writeFile, readdir, stat, mkdir } from "fs/promises";
-import { resolve, relative, join as join2 } from "path";
+import { resolve, relative, join as join2, sep } from "path";
 import { glob } from "glob";
 function assertWithinWorkspace(filePath) {
   const config = getConfig();
   const resolved = resolve(config.workspacePath, filePath);
-  if (!resolved.startsWith(config.workspacePath)) {
-    throw new Error(
-      `Access denied: path "${filePath}" is outside workspace "${config.workspacePath}"`
+  const rel = relative(config.workspacePath, resolved);
+  if (rel.startsWith("..") || rel.startsWith(sep + sep)) {
+    throw new AppError(
+      `Access denied: path "${filePath}" is outside workspace "${config.workspacePath}"`,
+      "PATH_TRAVERSAL"
     );
   }
   return resolved;
@@ -3671,7 +3684,7 @@ async function searchFiles(pattern, directory) {
     ignore: ["node_modules/**", ".git/**", "dist/**", ".next/**"]
   });
   if (matches.length === 0) return "No files found matching the pattern.";
-  return matches.slice(0, 50).map((m) => relative(config.workspacePath, join2(cwd, m))).join("\n");
+  return matches.slice(0, MAX_FILE_SEARCH_RESULTS).map((m) => relative(config.workspacePath, join2(cwd, m))).join("\n");
 }
 async function listDirectory(path) {
   const config = getConfig();
@@ -3681,9 +3694,7 @@ async function listDirectory(path) {
   for (const entry of entries) {
     if (entry.name.startsWith(".") && entry.name !== ".env.example") continue;
     const icon = entry.isDirectory() ? "\u{1F4C1}" : "\u{1F4C4}";
-    const info = entry.isFile() ? await stat(join2(resolved, entry.name)).then(
-      (s) => ` (${formatSize(s.size)})`
-    ) : "";
+    const info = entry.isFile() ? await stat(join2(resolved, entry.name)).then((s) => ` (${formatSize(s.size)})`) : "";
     results.push(`${icon} ${entry.name}${info}`);
   }
   return results.join("\n") || "Empty directory.";
@@ -3701,9 +3712,14 @@ async function searchContent(pattern, fileGlob, directory) {
     nodir: true,
     ignore: ["node_modules/**", ".git/**", "dist/**", ".next/**"]
   });
-  const regex = new RegExp(pattern, "gi");
+  let regex;
+  try {
+    regex = new RegExp(pattern, "gi");
+  } catch {
+    regex = new RegExp(pattern.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), "gi");
+  }
   const results = [];
-  for (const file of files.slice(0, 200)) {
+  for (const file of files.slice(0, MAX_CONTENT_SEARCH_FILES)) {
     try {
       const content = await readFile(join2(cwd, file), "utf-8");
       const lines = content.split("\n");
@@ -3712,10 +3728,10 @@ async function searchContent(pattern, fileGlob, directory) {
           const relPath = relative(config.workspacePath, join2(cwd, file));
           results.push(`${relPath}:${i + 1}: ${lines[i].trim()}`);
           regex.lastIndex = 0;
-          if (results.length >= 30) break;
+          if (results.length >= MAX_CONTENT_SEARCH_RESULTS) break;
         }
       }
-      if (results.length >= 30) break;
+      if (results.length >= MAX_CONTENT_SEARCH_RESULTS) break;
     } catch {
     }
   }
@@ -3724,8 +3740,6 @@ async function searchContent(pattern, fileGlob, directory) {
 
 // src/tools/shell.ts
 import { exec } from "child_process";
-var TIMEOUT_MS = 3e4;
-var MAX_OUTPUT = 5e4;
 var BLOCKED_PATTERNS = [
   /rm\s+(-\w*\s+)*-\w*r\w*\s+\/($|\s)/i,
   // rm -rf /, rm -fr /, etc.
@@ -3753,7 +3767,7 @@ function isBlocked(command) {
 }
 async function executeShell(command, cwd) {
   if (isBlocked(command)) {
-    throw new Error(`Command blocked for safety: "${command}"`);
+    throw new AppError(`Command blocked for safety: "${command}"`, "COMMAND_BLOCKED");
   }
   const config = getConfig();
   const workDir = cwd || config.workspacePath;
@@ -3762,7 +3776,7 @@ async function executeShell(command, cwd) {
       command,
       {
         cwd: workDir,
-        timeout: TIMEOUT_MS,
+        timeout: SHELL_TIMEOUT_MS,
         maxBuffer: 1024 * 1024,
         // 1MB buffer
         env: { ...process.env, TERM: "dumb" }
@@ -3780,10 +3794,10 @@ ${stderr}` : "";
         if (error && !stdout && !stderr) {
           output = `Error: ${error.message}`;
         }
-        if (output.length > MAX_OUTPUT) {
-          output = output.slice(0, MAX_OUTPUT) + `
+        if (output.length > SHELL_MAX_OUTPUT) {
+          output = output.slice(0, SHELL_MAX_OUTPUT) + `
 
-[Output truncated at ${MAX_OUTPUT} bytes]`;
+[Output truncated at ${SHELL_MAX_OUTPUT} bytes]`;
         }
         resolve2(output || "(no output)");
       }
@@ -5443,7 +5457,7 @@ function createEventHooks(taskId, toolCallRecords) {
     const rawName = preInput.tool_name;
     const displayName = stripMcpPrefix(rawName);
     const toolInput = preInput.tool_input;
-    log.tool(displayName, JSON.stringify(toolInput).slice(0, 200));
+    log.tool(displayName, JSON.stringify(toolInput).slice(0, MAX_TOOL_INPUT_LOG_LENGTH));
     await emitEvent(taskId, "tool_use_start", { name: displayName });
     await emitEvent(taskId, "tool_use_input", { input: toolInput });
     if (displayName === "browser_request_user_action") {
@@ -5462,15 +5476,15 @@ function createEventHooks(taskId, toolCallRecords) {
     const toolInput = postInput.tool_input;
     const toolResponse = postInput.tool_response;
     const resultStr = typeof toolResponse === "string" ? toolResponse : JSON.stringify(toolResponse);
-    log.result(resultStr.slice(0, 200));
+    log.result(resultStr.slice(0, MAX_TOOL_INPUT_LOG_LENGTH));
     await emitEvent(taskId, "tool_result", {
       name: displayName,
-      result: resultStr.slice(0, 1e4)
+      result: resultStr.slice(0, MAX_TOOL_RESULT_LENGTH)
     });
     toolCallRecords.push({
       name: displayName,
       input: toolInput || {},
-      result: resultStr.slice(0, 300)
+      result: resultStr.slice(0, MAX_SKILL_RECORD_RESULT_LENGTH)
     });
     return {};
   };
@@ -5649,8 +5663,6 @@ var TaskTimeout = class {
     }
   }
 };
-var MAX_HISTORY_ENTRIES = 10;
-var MAX_RESPONSE_LENGTH = 1500;
 var TaskProcessor = class {
   memoryManager = null;
   skillManager;
@@ -5685,7 +5697,7 @@ var TaskProcessor = class {
   async processTask(task) {
     const config = getConfig();
     resetEventSequence();
-    const taskTimeoutMs = (config.taskTimeoutMinutes || 10) * 6e4;
+    const taskTimeoutMs = config.taskTimeoutMinutes * 6e4;
     newCorrelationId();
     log.info(`Processing task ${task.id.slice(0, 8)}...`);
     let finalResponse = "";
@@ -5724,7 +5736,7 @@ var TaskProcessor = class {
         for (const entry of history) {
           historyPrompt += `User: ${entry.prompt}
 `;
-          const truncated = entry.response.length > MAX_RESPONSE_LENGTH ? entry.response.slice(0, MAX_RESPONSE_LENGTH) + "\u2026" : entry.response;
+          const truncated = entry.response.length > MAX_HISTORY_RESPONSE_LENGTH ? entry.response.slice(0, MAX_HISTORY_RESPONSE_LENGTH) + "\u2026" : entry.response;
           historyPrompt += `Assistant: ${truncated}
 
 `;
@@ -5803,16 +5815,11 @@ var TaskProcessor = class {
         persistSession: true,
         abortController
       };
-      const taskStartTime = Date.now();
       try {
         for await (const message of query2({
           prompt: promptMessages(),
           options
         })) {
-          if (Date.now() - taskStartTime > taskTimeoutMs) {
-            finalResponse += "\n\n[Task timed out]";
-            break;
-          }
           switch (message.type) {
             case "assistant": {
               const assistantMsg = message;
@@ -5824,7 +5831,8 @@ var TaskProcessor = class {
                     text: block.text
                   });
                 } else if (block.type === "thinking" && "thinking" in block) {
-                  const thinkingText = block.thinking;
+                  const thinkingBlock = block;
+                  const thinkingText = thinkingBlock.thinking;
                   log.debug(`Thinking: ${thinkingText.slice(0, 100)}...`);
                   await emitEvent(task.id, "thinking", {
                     text: thinkingText
@@ -5857,8 +5865,11 @@ var TaskProcessor = class {
               break;
             }
             default:
-              if (message.type === "system" && "subtype" in message && message.subtype === "init") {
-                agentSessionId = message.session_id;
+              if (message.type === "system" && "subtype" in message) {
+                const sysMsg = message;
+                if (sysMsg.subtype === "init" && sysMsg.session_id) {
+                  agentSessionId = sysMsg.session_id;
+                }
               }
               log.debug(`SDK message type: ${message.type}`);
               break;
@@ -5867,10 +5878,9 @@ var TaskProcessor = class {
       } finally {
         taskTimeout.clear();
       }
-      const MAX_CONTENT_LENGTH = 5e4;
-      const truncatedResponse = finalResponse.length > MAX_CONTENT_LENGTH ? finalResponse.slice(0, MAX_CONTENT_LENGTH) + "\n\n[Response truncated]" : finalResponse;
+      const truncatedResponse = finalResponse.length > MAX_RESPONSE_CONTENT_LENGTH ? finalResponse.slice(0, MAX_RESPONSE_CONTENT_LENGTH) + "\n\n[Response truncated]" : finalResponse;
       await withRetry(() => completeTask(task.id, truncatedResponse, tokenUsage), {
-        maxRetries: 2,
+        maxRetries: MAX_COMPLETE_TASK_RETRIES,
         baseDelayMs: 300,
         label: "completeTask"
       });
@@ -5888,7 +5898,7 @@ var TaskProcessor = class {
         );
       }
     } catch (err) {
-      const errorMsg = err instanceof Error ? err.message : String(err);
+      const errorMsg = errorMessage(err);
       log.error(`Task failed: ${errorMsg}`);
       await failTask(task.id, errorMsg);
       await emitEvent(task.id, "error", { message: errorMsg });
@@ -6392,7 +6402,7 @@ function registerJobCommands(program2) {
   jobCmd.command("list").description("List your defined jobs").action(async () => {
     try {
       const userId = await getCurrentUserId();
-      const { JobRunner: JobRunner2 } = await import("./job-runner-P2L6MOOX.js");
+      const { JobRunner: JobRunner2 } = await import("./job-runner-JT3JWZBV.js");
       const runner = new JobRunner2();
       const jobs = await runner.listJobs();
       if (jobs.length === 0) {
@@ -6416,7 +6426,7 @@ function registerJobCommands(program2) {
   jobCmd.command("status [name]").description("Show run history for a job (or all jobs)").option("-l, --limit <number>", "Max runs to show (default: 5)").action(async (name, opts) => {
     try {
       const userId = await getCurrentUserId();
-      const { JobRunner: JobRunner2 } = await import("./job-runner-P2L6MOOX.js");
+      const { JobRunner: JobRunner2 } = await import("./job-runner-JT3JWZBV.js");
       const runner = new JobRunner2();
       const runs = await runner.getRunHistory(name, parseInt(opts.limit || "5"));
       if (runs.length === 0) {
@@ -6455,7 +6465,7 @@ Job Run History${name ? ` \u2014 ${name}` : ""}:`));
         process.exit(1);
       }
       const userId = await getCurrentUserId();
-      const { JobRunner: JobRunner2 } = await import("./job-runner-P2L6MOOX.js");
+      const { JobRunner: JobRunner2 } = await import("./job-runner-JT3JWZBV.js");
       const runner = new JobRunner2();
       const job = await runner.loadJob(name);
       if (!job) {