@doist/todoist-cli 1.67.0 → 1.68.0

package/dist/lib/skills/content.js

@@ -32,6 +32,7 @@ td auth login --additional-scopes=app-management
 td auth login --read-only --additional-scopes=app-management
 td auth login --additional-scopes=backups
 td auth login --read-only --additional-scopes=backups
+td auth login --additional-scopes=billing
 td auth login --additional-scopes=app-management,backups
 td auth login --callback-port 9000           # override the OAuth callback port
 td auth login --json                         # emit the new account record as JSON
@@ -51,6 +52,7 @@ Opt-in OAuth scopes are requested via \`--additional-scopes=<list>\` (comma-sepa
 
 - \`app-management\` — adds the \`dev:app_console\` scope (manage your registered Todoist apps — rotate secrets, edit webhooks, etc.). Required by \`td apps list\` and \`td apps view\`.
 - \`backups\` — adds the \`backups:read\` scope (list and download Todoist backups). Required by \`td backup list\` and \`td backup download\`.
+- \`billing\` — adds the \`billing:read_write\` scope, or \`billing:read\` when combined with \`--read-only\` (view subscription, plan, and pricing). Required by \`td billing\` subcommands.
 
 Combine freely with \`--read-only\` to keep data access read-only while still granting an opt-in scope (e.g. \`td auth login --read-only --additional-scopes=backups\`). When a command fails for lack of a scope, the error suggests a re-login command that preserves whichever flags were originally used.
 
@@ -89,6 +91,7 @@ Resolution order: \`--user <ref>\` > \`user.defaultUser\` from config > the only
 - Account and tooling: \`td stats\`, \`td settings ...\`, \`td config view\`, \`td user ...\`, \`td completion ...\`, \`td view <todoist-url>\`, \`td doctor\`, \`td update\`, \`td changelog\`
 - Developer apps: \`td apps list/view\` (requires \`td auth login --additional-scopes=app-management\`)
 - Backups: \`td backup list/download\` (requires \`td auth login --additional-scopes=backups\`)
+- Billing: \`td billing subscription/plan/prices/pricing\` (requires \`td auth login --additional-scopes=billing\`)
 
 ## References
 
@@ -135,6 +138,7 @@ Choosing between \`task add\` and \`task quickadd\`:
 - Use \`td task add\` when you need flags that Quick Add syntax can't express (\`--deadline\`, \`--description\`, \`--parent\`, \`--duration\`, \`--uncompletable\`, \`--order\`), when the text is being composed programmatically, or when you need explicit \`id:\` / URL references for project/section/parent.
 - \`td task quickadd\` supports \`--stdin\`, \`--json\`, and \`--dry-run\` only; everything else is embedded in the text.
 - The top-level \`td add <text>\` is a human shorthand for \`td task quickadd\` — same parser, same flag surface (\`--stdin\`, \`--json\`, \`--dry-run\`). Agents should prefer \`td task quickadd\` / \`qa\` for discoverability alongside the other task subcommands.
+- \`--due\` on \`task add\` / \`task update\` is **sent verbatim** to the API as \`due_string\` — the CLI does not parse or rewrite it. The server's \`due_string\` parser handles simple inputs ("2026-06-01", "tomorrow", "every Monday") but does **not** unpack some more complex clauses (i.e. \`starting <date>\`).
 
 Useful task flags:
 - \`--stdin\` on \`task add\` reads the task description from stdin; on \`task quickadd\` (and the top-level \`td add\`) it reads the full natural-language text from stdin.
@@ -337,6 +341,19 @@ The \`apps\` command surface manages the user's registered Todoist developer app
 
 The OAuth \`client_id\` is **public** and always shown. The four sensitive credentials — client secret, verification token, test access token, distribution token — are **hidden by default**. In plain mode each of those lines renders a \`(hidden — pass --include-secrets to reveal)\` hint; in \`--json\` / \`--ndjson\` the \`clientSecret\`, \`verificationToken\`, \`distributionToken\`, and \`testToken\` keys are omitted from the payload entirely. With \`--include-secrets\`, the values are rendered / emitted normally — in that mode a non-existent test token reads as \`(not created)\`. Webhook configuration is always included when configured (callback URL, event list, version); a missing webhook renders as \`(not configured)\` in plain output and \`null\` in JSON.
 
+### Billing
+\`\`\`bash
+td billing                       # subscription (default subcommand)
+td billing subscription --json
+td billing plan
+td billing prices
+td billing pricing --formatted
+\`\`\`
+
+The \`billing\` command surface is **read-only** and requires the \`billing\` OAuth scope — re-run \`td auth login --additional-scopes=billing\` to grant it. A normal login grants \`billing:read_write\`; adding \`--read-only\` narrows it to \`billing:read\`. Either satisfies these read commands. Without the scope, calls fail with a \`MISSING_SCOPE\` error whose hint preserves any previously used flags. All subcommands accept \`--json\` / \`--ndjson\`, which dump the raw SDK payload verbatim.
+
+\`td billing subscription\` (the default subcommand) shows the current plan, status, activation method, expiration date, plan price, invoice credit balance, and billing-portal URLs when present. \`td billing plan\` shows Pro plan status, downgrade date, and the per-cycle price list. \`td billing prices\` lists available Pro and Teams prices by billing cycle. \`td billing pricing\` shows current and legacy pricing keyed by version; \`--formatted\` returns localized price strings instead of minor-unit numbers.
+
 ### Settings, Stats, And Utilities
 \`\`\`bash
 td stats

package/dist/lib/skills/content.js.map

@@ -1 +1 @@
-{"version":3,"file":"content.js","sourceRoot":"","sources":["../../../src/lib/skills/content.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAA;AACvC,MAAM,CAAC,MAAM,iBAAiB,GAC1B,iRAAiR,CAAA;AACrR,MAAM,CAAC,MAAM,mBAAmB,GAC5B,iGAAiG,CAAA;AAErG,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgX5B,CAAA"}
+{"version":3,"file":"content.js","sourceRoot":"","sources":["../../../src/lib/skills/content.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,UAAU,GAAG,aAAa,CAAA;AACvC,MAAM,CAAC,MAAM,iBAAiB,GAC1B,iRAAiR,CAAA;AACrR,MAAM,CAAC,MAAM,mBAAmB,GAC5B,iGAAiG,CAAA;AAErG,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiY5B,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@doist/todoist-cli",
-  "version": "1.67.0",
+  "version": "1.68.0",
   "description": "TypeScript CLI for Todoist",
   "type": "module",
   "main": "dist/index.js",
@@ -51,8 +51,8 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@doist/cli-core": "0.16.1",
-    "@doist/todoist-sdk": "10.2.0",
+    "@doist/cli-core": "0.21.0",
+    "@doist/todoist-sdk": "10.3.0",
     "@napi-rs/keyring": "1.3.0",
     "@pnpm/tabtab": "0.5.4",
     "chalk": "5.6.2",
@@ -60,17 +60,18 @@
     "date-fns": "4.1.0",
     "marked": "18.0.3",
     "marked-terminal-renderer": "2.2.0",
+    "oauth4webapi": "3.8.6",
     "open": "11.0.0"
   },
   "devDependencies": {
     "@semantic-release/changelog": "6.0.3",
     "@semantic-release/exec": "7.1.0",
     "@semantic-release/git": "10.0.1",
-    "@types/node": "25.7.0",
+    "@types/node": "25.8.0",
     "conventional-changelog-conventionalcommits": "9.3.1",
     "lefthook": "2.1.6",
-    "oxfmt": "0.49.0",
-    "oxlint": "1.64.0",
+    "oxfmt": "0.50.0",
+    "oxlint": "1.65.0",
     "semantic-release": "25.0.3",
     "typescript": "6.0.3",
     "vitest": "4.1.6"