@todoforai/cli 0.1.1 → 0.1.3

package/README.md

@@ -66,6 +66,7 @@ todoai --resume <todo-id>     # resume specific todo
 --continue, -c                  Continue most recent todo
 --non-interactive, -n           Run to completion and exit
 --dangerously-skip-permissions  Auto-approve all blocks (CI/benchmarks)
+--allow-all                     Set permissions to allow all tools (no approval needed)
 --no-watch                      Create todo and exit
 --json                          Output as JSON
 --safe                          Validate API key upfront

package/dist/todoai.js

@@ -43059,6 +43059,7 @@ Options:
   --continue, -c                  Continue most recent todo
   --non-interactive, -n           Run to completion and exit without interactive prompt
   --dangerously-skip-permissions  Auto-approve all blocks (for CI/benchmarks)
+  --allow-all                     Set permissions to allow all tools (no approval needed)
   --no-watch                      Create todo and exit
   --json                          Output as JSON
   --safe                          Validate API key upfront
@@ -43087,6 +43088,7 @@ function parseCliArgs() {
       continue: { type: "boolean", short: "c", default: false },
       "non-interactive": { type: "boolean", short: "n", default: false },
       "dangerously-skip-permissions": { type: "boolean", default: false },
+      "allow-all": { type: "boolean", default: false },
       "no-watch": { type: "boolean", default: false },
       json: { type: "boolean", default: false },
       safe: { type: "boolean", default: false },
@@ -44871,9 +44873,9 @@ Cancelled by user (Ctrl+C)
     return;
   }
   const apiUrl = normalizeApiUrl(args["api-url"] || cfg.data.default_api_url || getEnv("API_URL") || DEFAULT_API_URL);
-  if (positionals[0] === "login" && positionals.length === 1) {
-    const api2 = new ApiClient(apiUrl, "");
-    const { code, url, expiresIn } = await api2.initDeviceLogin("cli");
+  async function deviceLogin() {
+    const loginApi = new ApiClient(apiUrl, "");
+    const { code, url, expiresIn } = await loginApi.initDeviceLogin("cli");
     const userCode = new URL(url).searchParams.get("user_code") || code.slice(-8).toUpperCase();
     process.stderr.write(`
 \uD83D\uDD11 Open this URL to authorize:
@@ -44899,13 +44901,13 @@ Cancelled by user (Ctrl+C)
     while (Date.now() < deadline) {
       await new Promise((r) => setTimeout(r, 3000));
       try {
-        const poll = await api2.pollDeviceLogin(code);
+        const poll = await loginApi.pollDeviceLogin(code);
         failures = 0;
         if (poll.status === "complete" && poll.apiKey) {
           cfg.setDefaultApiKey(poll.apiKey);
           process.stderr.write(`${GREEN}\u2705 Login successful! API key saved.${RESET}
 `);
-          return;
+          return poll.apiKey;
         }
         if (poll.status === "expired")
           break;
@@ -44921,10 +44923,13 @@ Cancelled by user (Ctrl+C)
 `);
     process.exit(1);
   }
-  const apiKey = args["api-key"] || cfg.data.default_api_key || getEnv("API_KEY") || "";
+  if (positionals[0] === "login" && positionals.length === 1) {
+    await deviceLogin();
+    return;
+  }
+  let apiKey = args["api-key"] || cfg.data.default_api_key || getEnv("API_KEY") || "";
   if (!apiKey) {
-    process.stderr.write("Error: No API key. Set via --api-key, TODOFORAI_API_KEY env, or `todoai login`\n");
-    process.exit(1);
+    apiKey = await deviceLogin();
   }
   const api = new ApiClient(apiUrl, apiKey);
   if (args.inspect) {
@@ -44992,7 +44997,11 @@ Cancelled by user (Ctrl+C)
       const ws2 = new FrontendWebSocket(apiUrl, apiKey);
       await ws2.connect();
       const autoApprove = !!args["dangerously-skip-permissions"];
-      const agent2 = todo2.agentSettings || { id: todo2.agentSettingsId };
+      let agent2 = todo2.agentSettings || { id: todo2.agentSettingsId };
+      if (args["allow-all"]) {
+        const perms = agent2.permissions || { allow: [], ask: [], deny: [] };
+        agent2 = { ...agent2, permissions: { ...perms, allow: [...perms.allow || [], "*:*"] } };
+      }
       await watchTodo(ws2, todoId, projectId2, {
         json: !!args.json,
         autoApprove,
@@ -45002,7 +45011,7 @@ Cancelled by user (Ctrl+C)
         process.stderr.write(`
 ${"\u2500".repeat(40)}
 `);
-        await interactiveLoop(ws2, api, todoId, projectId2, agent2, !!args.json, autoApprove);
+        await interactiveLoop(ws2, api, todoId, projectId2, agent2, !!args.json, autoApprove, cfg);
       }
       await ws2.close();
     }
@@ -45132,6 +45141,10 @@ Resumed todo: ${todoId}
     await ws.connect();
   if (args.model)
     agent = { ...agent, model: args.model };
+  if (args["allow-all"]) {
+    const perms = agent.permissions || { allow: [], ask: [], deny: [] };
+    agent = { ...agent, permissions: { ...perms, allow: [...perms.allow || [], "*:*"] } };
+  }
   cfg.addToHistory(content);
   const todo = await api.addMessage(projectId, content, agent);
   const actualTodoId = todo.id || crypto.randomUUID();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@todoforai/cli",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "type": "module",
   "bin": {
     "todoai": "dist/todoai.js"