@todoforai/cli 0.1.22 → 0.1.25

package/bin/todoforai-cli.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env bun
+// Dev (linked repo): run src directly so there is no stale-build step.
+// Published package ships only dist/ (the @shared/* file: deps are bundled in).
+import { existsSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+
+const src = fileURLToPath(new URL("../src/index.ts", import.meta.url));
+const dist = fileURLToPath(new URL("../dist/todoai.js", import.meta.url));
+await import(existsSync(src) ? src : dist);

package/dist/todoai.js

@@ -42732,6 +42732,10 @@ function randomTip() {
 }
 
 // ../edge/bun/src/api.ts
+function restBasePath(apiKey) {
+  return apiKey.startsWith("dst_") ? "/dst/v1" : "/api/v1";
+}
+
 class ApiClient {
   apiUrl;
   apiKey;
@@ -42743,7 +42747,7 @@ class ApiClient {
     return { "content-type": "application/json", "x-api-key": this.apiKey };
   }
   async request(method, endpoint, body) {
-    const url = `${this.apiUrl}${endpoint}`;
+    const url = `${this.apiUrl}${endpoint.replace(/^\/api\/v1/, restBasePath(this.apiKey))}`;
     const opts = { method, headers: this.headers, signal: AbortSignal.timeout(30000) };
     if (body)
       opts.body = JSON.stringify(body);
@@ -42777,7 +42781,7 @@ class ApiClient {
     if (!this.apiKey)
       return { valid: false, error: "No API key provided" };
     try {
-      const res = await fetch(`${this.apiUrl}/api/v1/apikey/validate`, {
+      const res = await fetch(`${this.apiUrl}${restBasePath(this.apiKey)}/apikey/validate`, {
         headers: { "x-api-key": this.apiKey },
         signal: AbortSignal.timeout(1e4)
       });
@@ -42814,6 +42818,13 @@ class ApiClient {
   listTodos(projectId, opts) {
     if (!projectId)
       return this.request("GET", "/api/v1/todos");
+    if (this.apiKey.startsWith("dst_")) {
+      const qs = new URLSearchParams;
+      for (const [k, v] of Object.entries(opts ?? {}))
+        if (v !== undefined)
+          qs.set(k, String(v));
+      return this.request("GET", `/api/v1/projects/${projectId}/todos${qs.size ? `?${qs}` : ""}`);
+    }
     return this.trpcQuery("todo.list", { projectId, ...opts });
   }
   getTodo(todoId) {
@@ -42875,17 +42886,21 @@ class ApiClient {
   listDevices() {
     return this.request("GET", "/api/v1/devices");
   }
-  startFromTemplate(projectId, templateId, opts) {
+  startFromSpec(projectId, specId, opts) {
     return this.request("POST", `/api/v1/projects/${projectId}/todos/from-template`, {
-      templateId,
+      specId,
       ...opts
     });
   }
-  async getRegistryTemplate(templateId) {
+  recommend(input) {
+    const { projectId, ...body } = input;
+    return this.request("POST", `/api/v1/projects/${projectId}/recommendations`, body);
+  }
+  async getRegistrySpec(specId) {
     const base = this.apiUrl.replace(/\/api\/v1\/?$/, "").replace(/\/$/, "");
-    const res = await fetch(`${base}/cookie/v1/registry/templates/${templateId}`);
+    const res = await fetch(`${base}/cookie/v1/registry/templates/${specId}`);
     if (!res.ok)
-      throw new Error(`Template '${templateId}' not found (${res.status})`);
+      throw new Error(`Spec '${specId}' not found (${res.status})`);
     return res.json();
   }
   async initDeviceLogin(clientName = "edge") {
@@ -42904,7 +42919,7 @@ class ApiClient {
       throw new Error(`Device login poll failed: ${res.status}`);
     return res.json();
   }
-  async listRegistryTemplates(category = "all") {
+  async listRegistrySpecs(category = "all") {
     const base = this.apiUrl.replace(/\/api\/v1\/?$/, "").replace(/\/$/, "");
     const res = await fetch(`${base}/cookie/v1/registry/templates?category=${category}`);
     if (!res.ok)
@@ -43135,13 +43150,16 @@ import { parseArgs } from "util";
 // package.json
 var package_default = {
   name: "@todoforai/cli",
-  version: "0.1.3",
+  version: "0.1.24",
   type: "module",
   bin: {
-    "todoforai-cli": "dist/todoai.js",
-    todoai: "dist/todoai.js"
+    "todoforai-cli": "bin/todoforai-cli.js",
+    todoai: "bin/todoforai-cli.js"
   },
-  files: ["dist/todoai.js"],
+  files: [
+    "bin",
+    "dist/todoai.js"
+  ],
   scripts: {
     build: "bun build src/index.ts --target=bun --outfile dist/todoai.js --external ws",
     prepublishOnly: "bun run build",
@@ -43400,8 +43418,8 @@ var SERVER_TO_FRONTENDS = {
   hexGrid: {
     updated: (projectId) => `${"hexgrid:updated" /* HEXGRID_UPDATED */}:${projectId}`
   },
-  recommendation: {
-    updated: (projectId) => `${"recommendation:updated" /* RECOMMENDATION_UPDATED */}:${projectId}`
+  placement: {
+    updated: (projectId) => `${"placement:updated" /* PLACEMENT_UPDATED */}:${projectId}`
   },
   sandbox: {
     state: (userId) => `${"sandbox:state" /* SANDBOX_STATE */}:${userId}`
@@ -43447,6 +43465,7 @@ var SERVER_TO_FRONTENDS = {
     block_update: (todoId) => `todo:${todoId}:block_update`,
     context_summary_updated: (todoId) => `${"context:summary_updated" /* CONTEXT_SUMMARY_UPDATED */}:${todoId}`,
     context_info_updated: (todoId) => `${"context:info_updated" /* CONTEXT_INFO_UPDATED */}:${todoId}`,
+    predicted_reply_updated: (todoId) => `${"predict:reply_updated" /* PREDICTED_REPLY_UPDATED */}:${todoId}`,
     error_result: (todoId) => `${"block:error_result" /* BLOCK_ERROR_RESULT */}:${todoId}`,
     meta_result: (todoId) => `${"block:meta_result" /* BLOCK_META_RESULT */}:${todoId}`,
     file_changed: (edgeId, path3) => `${"block:file_changed" /* BLOCK_FILE_CHANGED */}:${edgeId}:${path3}`,
@@ -43827,12 +43846,12 @@ var BUSINESS_ANALYZER_AGENT = {
 
 You have no previous context about this business yet \u2014 everything you know must come from the current business context markdown and what you research now. Do not assume prior knowledge or earlier conversations.
 
-This chat lives on the user's Brand page: the business context markdown you maintain is rendered live right next to this conversation, together with the brand voice answers and the company's online-presence map. Whenever you call update_business_context, the user sees the document change immediately \u2014 refer to it as "your brand page" (never as a file), and keep it polished since it doubles as the company's profile.
+This chat lives on the user's Brand page: the business context markdown you maintain is rendered live right next to this conversation, together with the brand voice answers and the company's online-presence map. The document lives at the \`todoforai:business-context\` resource; whenever you save to it, the user sees the document change immediately \u2014 refer to it as "your brand page" (never as a file), and keep it polished since it doubles as the company's profile.
 
 How to analyze and update the business context:
-1. Read the current business context markdown from the system prompt
+1. Read the current business context with \`Read todoforai:business-context\`
 2. Research: fetch websites with webfetch (follow key subpages like /about, /pricing, /contact if they exist); use google_search and google_rag to find competitors and fill knowledge gaps
-3. Merge findings into the existing context \u2014 preserve valid existing information, update conflicting facts only when the new source is clearer or more specific \u2014 and save with update_business_context
+3. Merge findings into the existing context \u2014 preserve valid existing information, update conflicting facts only when the new source is clearer or more specific \u2014 and save it with \`Edit todoforai:business-context\` (or \`Write todoforai:business-context\` to create/overwrite). You MUST persist your findings this way; analysis that is only spoken in chat and never written to the brand page is lost.
 
 Cover these sections (skip any without data):
 - **Company Info** \u2014 name, founding year, location, team size, stage
@@ -43846,7 +43865,7 @@ Cover these sections (skip any without data):
 
 If anything important remains unclear, add an **Open Questions** section at the end.
 
-Maintain a single machine-readable **Growth Plan** block so the user's brand page can render a live presence map and a ranked, actionable growth plan. Write it as one fenced code block tagged \`growth-plan\` containing JSON (the user never sees this raw \u2014 it powers the presence hexes and the Growth Plan panel). Keep exactly one such block; rewrite it in full each time you update it. Concrete example (emit strictly valid JSON like this \u2014 no comments, no ranges, no "|" alternatives):
+Maintain a single machine-readable **Presence** block so the user's brand page can render a live presence map. Write it as one fenced code block tagged \`growth-plan\` containing JSON (the user never sees this raw \u2014 it powers the presence hexes on the brand page).
 
 \`\`\`growth-plan
 {
@@ -43854,25 +43873,16 @@ Maintain a single machine-readable **Growth Plan** block so the user's brand pag
     "linkedin-networking": { "score": 45, "handle": "https://linkedin.com/company/example", "note": "Company page exists but posts infrequently" },
     "x-twitter-presence": { "score": 60, "handle": "@example", "note": "Active, regular posts" },
     "newsletter": { "score": null, "note": "No newsletter signup found" }
-  },
-  "recommendations": [
-    {
-      "activityId": "linkedin-networking",
-      "title": "Publish two founder-led LinkedIn posts each week",
-      "rationale": "Target buyers are active on LinkedIn, but the page is nearly dormant.",
-      "angle": "Explain the operational pain through short customer scenarios.",
-      "track": "Qualified profile visits and demo requests per week",
-      "priority": "high"
-    }
-  ]
+  }
 }
 \`\`\`
 
-Rules for the Growth Plan block:
-- \`activityId\` MUST be one of these exact ids: facebook-posting, x-twitter-presence, tiktok-content, instagram-content, linkedin-networking, reddit-engagement, blog-writing, seo-optimization, backlink-building, keyword-research, aso-optimization, llm-optimization, google-ads-management, meta-ads-management, lead-outreach, crm-management, newsletter, affiliate-program, partnership-outreach, analytics-monitoring.
+Rules for the Presence block:
+- Keys MUST be one of these exact ids: facebook-posting, x-twitter-presence, tiktok-content, instagram-content, linkedin-networking, reddit-engagement, blog-writing, seo-optimization, backlink-building, keyword-research, aso-optimization, llm-optimization, google-ads-management, meta-ads-management, lead-outreach, crm-management, newsletter, affiliate-program, partnership-outreach, analytics-monitoring. Skip channels you did not check.
 - \`score\` is an integer 0-100, or \`null\` when you checked but found no presence. Base scores on real findings, not guesses. Include every channel you actually checked.
-- \`recommendations\`: 3-6 items. \`priority\` is exactly one of "high", "medium", "low"; put the single highest-leverage action first. Choose channels that fit THIS business's model, audience, and stage \u2014 don't recommend all 20; prioritize gaps where presence is weak/absent but impact is high. Make \`title\` a concrete next action, \`angle\` the actual message/positioning to use, and \`track\` a specific metric or cadence to record.
-- Keep it consistent with the prose Online Presence and Next Steps sections \u2014 the JSON is the structured mirror of that advice.
+- Keep it consistent with the prose Online Presence section \u2014 the JSON is the structured mirror of those findings.
+
+Growth recommendations are NOT part of this block \u2014 they live in the project's Recommendations column as placement cards (see "Recommending actionable TODOs" below). After any analysis that surfaces growth opportunities, materialize your top recommendations as cards there; the prose Next Steps section stays human-readable advice.
 
 Document order for the saved brand page: human-readable sections first, then the **Next Steps** section, then Open Questions (if any), and finally exactly one \`growth-plan\` block as the very last element. (Your chat reply can still end with a short spoken summary; only the saved markdown must end with the machine block.)
 
@@ -43882,21 +43892,28 @@ Guide the user one step at a time \u2014 they should always know the single next
 
 In follow-up conversations, act as an ongoing advisor: answer growth and digital-presence questions using the business context, refresh your analysis when asked, and suggest what to tackle next.
 
-When the user asks you to recommend how to grow (e.g. "recommend growth TODOs", the brand page's guided suggestion), treat it as a growth-plan request: read the current business context (including any existing \`growth-plan\` block), research only where information is missing or stale, then update the business context with a refreshed Growth Plan block and reply in chat with the same ranked recommendations in plain language \u2014 lead with the single highest-leverage action and why. This must work at any point in the conversation, not just after a full website analysis.
+When the user asks you to recommend how to grow (e.g. "recommend growth TODOs", the brand page's guided suggestion, the board's Recommend button), read the current business context (including the presence block), research only where information is missing or stale, refresh the presence block if findings changed, then materialize your top growth actions as recommendation cards (see below). The cards ARE the growth plan \u2014 do not write a separate recommendations list into the markdown.
 
 Recommending actionable TODOs from your recommendations:
-When the user asks you to generate/recommend TODOs (e.g. "generate TODOs", the board's Generate button), turn your top recommendations into recommendation cards in the NEXT column. You NEVER create running todos \u2014 you only recommend templates by reference. Two tools, strict roles:
+To materialize growth recommendations, create recommendation cards in the project's Recommendations column. You NEVER create running todos \u2014 you only recommend templates by reference. Two tools, strict roles:
 
-1. FIND OR CREATE A TEMPLATE (todoregistry-cli):
-   - \`todoregistry-cli search <query>\` / \`todoregistry-cli list -c <category>\` / \`todoregistry-cli get <id>\` \u2014 prefer a matching existing template (proven playbook).
-   - If none fits, CREATE one right there (auth is inherited from your shell):
+1. GET A TEMPLATE (todoregistry-cli) \u2014 generate-first, reuse only on a close fit:
+   - Default: CREATE a template tailored to THIS business, right there (auth is inherited from your shell):
      \`todoregistry-cli create --name "<name>" --description "<one line>" --body @<prompt-file>\` (or \`--body -\` for stdin). It prints the new template id on stdout.
+   - Before creating, you MAY \`todoregistry-cli search <query>\` / \`list -c <category>\` / \`get <id>\`; reuse an existing template ONLY when it already fits this business closely with no meaningful edits. If it needs tailoring, create a new one instead \u2014 do not recommend a generic playbook that ignores this company's specifics.
+
+   Write every generated body to be unmistakably about THIS company \u2014 bake the specifics from the business context into the task itself: the company name, its actual competitors, the target segment, the specific channel/platform, and the concrete metric to move. A reader should never mistake it for a generic template.
+
+   Body structure (REQUIRED \u2014 the body is split into the agent's system prompt and the first user turn by section headings, so follow this exactly):
+   - Start with the persona/expertise and any Rules as plain prose/paragraphs at the top (no heading needed) \u2014 this becomes the agent's system prompt.
+   - Then the request, using these exact standalone heading lines (letters only, each on its own line, ending with a colon): \`Your task:\`, \`Steps:\`, \`Data needed:\`. Everything under these headings becomes the first user turn.
+   - Headings must match exactly (e.g. \`Your task:\`, not \`Your task (SEO):\`) or the split breaks. Put the business-specific detail in the body text under each heading, never in the heading itself.
 
 2. RECOMMEND (todoforai-cli \u2014 references a template id onto the project; never creates a running todo):
    \`todoforai-cli recommend --template <id> --project <projectId> --business-context <businessContextId> --note "<why>" --priority high|medium|low\`
-   Take <projectId> and <businessContextId> from your current session context and pass them explicitly. The card appears PAUSED in the NEXT column for the user to review before any credits are spent.
+   Take <projectId> and <businessContextId> from your current session context and pass them explicitly. Put the one-line WHY for THIS business in --note (the card's tooltip). The card appears in the Recommendations column for the user to review before any credits are spent.
 
-3. Recommend 3-6 templates matching your Growth Plan (highest priority first), then reply with a one-line summary per card and tell the user they're waiting in the NEXT column for review.`,
+3. Recommend 3-6 cards (highest priority first). Then reply with a one-line summary per card and tell the user they're waiting in the Recommendations column for review.`,
   mcpConfigs: {},
   edgesMcpConfigs: {},
   permissions: {
@@ -43972,12 +43989,16 @@ var TOPICS = {
     channel: (p) => SERVER_TO_FRONTENDS.todo.context_info_updated(p.todoId),
     audience: "frontend"
   },
+  ["predict:reply_updated" /* PREDICTED_REPLY_UPDATED */]: {
+    channel: (p) => SERVER_TO_FRONTENDS.todo.predicted_reply_updated(p.todoId),
+    audience: "frontend"
+  },
   ["hexgrid:updated" /* HEXGRID_UPDATED */]: {
     channel: (p) => SERVER_TO_FRONTENDS.hexGrid.updated(p.projectId),
     audience: "frontend"
   },
-  ["recommendation:updated" /* RECOMMENDATION_UPDATED */]: {
-    channel: (p) => SERVER_TO_FRONTENDS.recommendation.updated(p.projectId),
+  ["placement:updated" /* PLACEMENT_UPDATED */]: {
+    channel: (p) => SERVER_TO_FRONTENDS.placement.updated(p.projectId),
     audience: "frontend"
   },
   ["sandbox:state" /* SANDBOX_STATE */]: {
@@ -44104,12 +44125,13 @@ Usage:
   todoforai-cli status <todo-id> <STATUS>     # Update a todo's status (run 'status --help' for the full list)
   todoforai-cli delete <todo-id>              # Permanently delete a todo
   todoforai-cli addmessage <todo-id> "text"  # Add a message to an existing todo
-  todoforai-cli recommend --template <id>    # Add a template as a NEXT-column card (see 'todoregistry-cli create')
+  todoforai-cli show <file|-> [todo-id]     # Show a file in the chat (rendered by mimetype; - reads stdin)
+                                            #   [--title T] [--alias A] [--mime M] [--json]
+  todoforai-cli open <url> [todo-id]        # Show a live http(s) url in the chat as a preview
+                                            #   [--title T] [--alias A] [--json]
+  todoforai-cli recommend --template <id>    # Add a template as a recommendation card (see 'todoregistry-cli create')
   todoforai-cli claim mint --seed <projectId> [--emails a@x,b@y] [--ttl <sec>]  # Mint /claim/<token> ownership links for a project you own
-  todoforai-cli steering get                 # Show recommendation steering (direction + boosted/muted categories)
-  todoforai-cli steering direction "<text>"  # Set the direction the generator should follow
-  todoforai-cli steering boost|mute <cat>    # Favour / avoid a category
-  todoforai-cli next                         # Generate steered NEXT-column recommendations
+  todoforai-cli next [--direction "<text>"]  # Ask the analyzer for growth recommendation cards (optional free-text steer)
 
 Options:
   --path <dir>                    Workspace path (default: cwd)
@@ -44183,6 +44205,9 @@ function parseCliArgs() {
       note: { type: "string" },
       priority: { type: "string" },
       title: { type: "string" },
+      alias: { type: "string" },
+      mime: { type: "string" },
+      direction: { type: "string" },
       "business-context": { type: "string" },
       seed: { type: "string" },
       emails: { type: "string" },
@@ -44840,6 +44865,12 @@ class ScopedConfig {
   get data() {
     return this.store.data.per_api_url[this.apiUrl];
   }
+  clearDefaultProject() {
+    const s = this.data;
+    s.default_project_id = null;
+    s.default_project_name = null;
+    this.store.save();
+  }
   setDefaultProject(id, name) {
     const s = this.data;
     s.default_project_id = id;
@@ -46094,7 +46125,7 @@ Usage:
 <agent> is a name or id (unique partial name also works).
 Fields map directly to agent settings; values are parsed as JSON when possible
 (numbers, booleans), otherwise treated as strings. Common fields:
-  model           e.g. claude  |  anthropic:anthropic/claude-opus-4.8
+  model           e.g. claude  |  anthropic:anthropic/claude-opus-5
                   ('claude' is the rolling alias \u2192 latest Claude Opus)
   systemMessage   freeform prompt text (alias: sysmsg)
   temperature     number, e.g. 0.7
@@ -46103,7 +46134,7 @@ Fields map directly to agent settings; values are parsed as JSON when possible
 
 Examples:
   todoforai-cli agent update <agent> model=claude
-  todoforai-cli agent update <agent> model=anthropic:anthropic/claude-opus-4.8 temperature=0.5
+  todoforai-cli agent update <agent> model=anthropic:anthropic/claude-opus-5 temperature=0.5
   todoforai-cli agent update <agent> sysmsg="You are a terse video editor."
 `);
 }
@@ -46390,92 +46421,6 @@ async function listTodosCommand(api, defaultProjectId, argv) {
 `);
 }
 
-// src/steering-command.ts
-var RED2 = "\x1B[31m";
-var GREEN2 = "\x1B[32m";
-var DIM2 = "\x1B[2m";
-var RESET2 = "\x1B[0m";
-async function rest(ctx, method, path4, body) {
-  const res = await fetch(`${ctx.apiUrl}/api/v1${path4}`, {
-    method,
-    headers: { "content-type": "application/json", "x-api-key": ctx.apiKey },
-    ...body ? { body: JSON.stringify(body) } : {},
-    signal: AbortSignal.timeout(30000)
-  });
-  const text = await res.text();
-  if (!res.ok)
-    throw new Error(`${method} ${path4} failed: ${res.status} ${text}`);
-  return text ? JSON.parse(text) : null;
-}
-function printSteering(s) {
-  process.stderr.write(`${GREEN2}Direction:${RESET2} ${s.direction || DIM2 + "(none)" + RESET2}
-`);
-  process.stderr.write(`${GREEN2}Boosted:${RESET2}   ${s.boostedCategoryIds?.join(", ") || DIM2 + "(none)" + RESET2}
-`);
-  process.stderr.write(`${GREEN2}Muted:${RESET2}     ${s.mutedCategoryIds?.join(", ") || DIM2 + "(none)" + RESET2}
-`);
-}
-var USAGE = `${RED2}Usage:
-  todoforai-cli steering get [--project <id>]
-  todoforai-cli steering direction "<text>" [--project <id>]   (empty text clears it)
-  todoforai-cli steering boost <categoryId> [--project <id>]
-  todoforai-cli steering mute  <categoryId> [--project <id>]
-  todoforai-cli steering clear [--project <id>]                (clears all steering)${RESET2}`;
-async function steeringCommand(ctx, argv) {
-  const sub = argv[0];
-  const path4 = `/projects/${ctx.projectId}/recommendation-steering`;
-  if (!sub || sub === "get") {
-    const s = await rest(ctx, "GET", path4);
-    if (ctx.json)
-      console.log(JSON.stringify(s, null, 2));
-    else
-      printSteering(s);
-    return;
-  }
-  if (sub === "direction") {
-    const text = argv.slice(1).join(" ").trim();
-    const s = await rest(ctx, "PATCH", path4, { projectId: ctx.projectId, direction: text || null });
-    if (ctx.json)
-      console.log(JSON.stringify(s, null, 2));
-    else
-      process.stderr.write(`${GREEN2}\u2705 ${text ? `Direction set: ${text}` : "Direction cleared"}${RESET2}
-`);
-    return;
-  }
-  if (sub === "boost" || sub === "mute") {
-    const categoryId = argv[1];
-    if (!categoryId) {
-      process.stderr.write(USAGE + `
-`);
-      process.exit(2);
-    }
-    const current = await rest(ctx, "GET", path4);
-    const key = sub === "boost" ? "boostedCategoryIds" : "mutedCategoryIds";
-    const other = sub === "boost" ? "mutedCategoryIds" : "boostedCategoryIds";
-    const next = Array.from(new Set([...current[key] ?? [], categoryId]));
-    const nextOther = (current[other] ?? []).filter((c2) => c2 !== categoryId);
-    const s = await rest(ctx, "PATCH", path4, { projectId: ctx.projectId, [key]: next, [other]: nextOther });
-    if (ctx.json)
-      console.log(JSON.stringify(s, null, 2));
-    else
-      process.stderr.write(`${GREEN2}\u2705 ${sub === "boost" ? "Boosted" : "Muted"} ${categoryId}${RESET2}
-`);
-    return;
-  }
-  if (sub === "clear") {
-    const s = await rest(ctx, "PATCH", path4, { projectId: ctx.projectId, direction: null, boostedCategoryIds: [], mutedCategoryIds: [] });
-    if (ctx.json)
-      console.log(JSON.stringify(s, null, 2));
-    else
-      process.stderr.write(`${GREEN2}\u2705 Steering cleared${RESET2}
-`);
-    return;
-  }
-  process.stderr.write(USAGE + `
-`);
-  process.exit(2);
-}
-
 // src/index.ts
 try {
   const pkgPath = path4.resolve(fileURLToPath(import.meta.url), "../../package.json");
@@ -46676,8 +46621,7 @@ Cancelled by user (Ctrl+C)
     await deviceLogin();
     return;
   }
-  const notDst = (t) => t.startsWith("dst_") ? "" : t;
-  let apiKey = args["api-key"] || notDst(readCredential(apiUrl)) || notDst(getEnv("API_TOKEN")) || "";
+  let apiKey = args["api-key"] || readCredential(apiUrl) || getEnv("API_TOKEN") || "";
   if (!apiKey) {
     apiKey = await deviceLogin();
   }
@@ -46721,8 +46665,8 @@ Cancelled by user (Ctrl+C)
     return;
   }
   if (positionals[0] === "addmessage") {
-    const [, todoId, ...rest2] = positionals;
-    const content2 = rest2.join(" ") || await readStdin();
+    const [, todoId, ...rest] = positionals;
+    const content2 = rest.join(" ") || await readStdin();
     if (!todoId || !content2) {
       process.stderr.write(`${RED}Usage: todoforai-cli addmessage <todo-id> "content"${RESET}
 `);
@@ -46737,6 +46681,55 @@ Cancelled by user (Ctrl+C)
 `);
     return;
   }
+  if (positionals[0] === "show") {
+    const [, filePath, todoArg] = positionals;
+    const todoId = todoArg || getEnv("TODO_ID") || cfgScope.data.last_todo_id;
+    if (!filePath || !todoId) {
+      process.stderr.write(`${RED}Usage: todoforai-cli show <file|-> [todo-id]${RESET}
+`);
+      process.exit(2);
+    }
+    let blob, name;
+    if (filePath === "-") {
+      blob = new Blob([await Bun.readableStreamToArrayBuffer(Bun.stdin.stream())]);
+      if (blob.size === 0) {
+        process.stderr.write(`${RED}No data on stdin${RESET}
+`);
+        process.exit(1);
+      }
+      name = "stdin";
+    } else {
+      const file = Bun.file(resolve3(filePath));
+      if (!await file.exists()) {
+        process.stderr.write(`${RED}File not found: ${filePath}${RESET}
+`);
+        process.exit(1);
+      }
+      blob = file;
+      name = path4.basename(filePath);
+    }
+    const res = await api.showFile(todoId, blob, name, { title: args.title, alias: args.alias, mime: args.mime });
+    if (args.json)
+      console.log(JSON.stringify(res, null, 2));
+    else
+      console.log(res.ref);
+    return;
+  }
+  if (positionals[0] === "open") {
+    const [, url, todoArg] = positionals;
+    const todoId = todoArg || getEnv("TODO_ID") || cfgScope.data.last_todo_id;
+    if (!url || !todoId) {
+      process.stderr.write(`${RED}Usage: todoforai-cli open <url> [todo-id]${RESET}
+`);
+      process.exit(2);
+    }
+    const res = await api.showUrl(todoId, url, { title: args.title, alias: args.alias });
+    if (args.json)
+      console.log(JSON.stringify(res, null, 2));
+    else
+      console.log(res.ref);
+    return;
+  }
   if (positionals[0] === "recommend") {
     const templateId = args.template || positionals[1];
     if (!templateId) {
@@ -46798,7 +46791,7 @@ Cancelled by user (Ctrl+C)
         process.exit(2);
       }
     }
-    const res = await fetch(`${apiUrl}/api/v1/claims/mint`, {
+    const res = await fetch(`${apiUrl}${restBasePath(apiKey)}/claims/mint`, {
       method: "POST",
       headers: { "content-type": "application/json", "x-api-key": apiKey },
       body: JSON.stringify({ seedProjectId, ...emails?.length ? { emails } : {}, ...ttlSec !== undefined ? { ttlSec } : {} }),
@@ -46819,7 +46812,7 @@ Cancelled by user (Ctrl+C)
 `);
     return;
   }
-  if (positionals[0] === "steering" || positionals[0] === "next") {
+  if (positionals[0] === "next") {
     let projectId2 = args.project || cfgScope.data.default_project_id;
     if (!projectId2) {
       const projects2 = await api.listProjects();
@@ -46830,29 +46823,25 @@ Cancelled by user (Ctrl+C)
 `);
       process.exit(2);
     }
-    const sctx = { apiUrl, apiKey, projectId: projectId2, json: !!args.json };
-    if (positionals[0] === "next") {
-      const res = await fetch(`${apiUrl}/api/v1/projects/${projectId2}/recommendations/generate`, {
-        method: "POST",
-        headers: { "content-type": "application/json", "x-api-key": apiKey },
-        body: JSON.stringify({ projectId: projectId2, ...args["business-context"] ? { businessContextId: args["business-context"] } : {} }),
-        signal: AbortSignal.timeout(30000)
-      });
-      const text = await res.text();
-      if (!res.ok) {
-        process.stderr.write(`${RED}Generate failed: ${res.status} ${text}${RESET}
-`);
-        process.exit(1);
-      }
-      const out = JSON.parse(text);
-      if (args.json)
-        console.log(JSON.stringify(out, null, 2));
-      else
-        process.stderr.write(`${GREEN}\u2705 Generating recommendations \u2014 analyzer todo ${out.todoId}${RESET}
+    const direction = args.direction || positionals.slice(1).join(" ").trim() || undefined;
+    const res = await fetch(`${apiUrl}${restBasePath(apiKey)}/projects/${projectId2}/recommendations/generate`, {
+      method: "POST",
+      headers: { "content-type": "application/json", "x-api-key": apiKey },
+      body: JSON.stringify({ projectId: projectId2, ...args["business-context"] ? { businessContextId: args["business-context"] } : {}, ...direction ? { direction } : {} }),
+      signal: AbortSignal.timeout(30000)
+    });
+    const text = await res.text();
+    if (!res.ok) {
+      process.stderr.write(`${RED}Generate failed: ${res.status} ${text}${RESET}
 `);
-      return;
+      process.exit(1);
     }
-    await steeringCommand(sctx, positionals.slice(1));
+    const out = JSON.parse(text);
+    if (args.json)
+      console.log(JSON.stringify(out, null, 2));
+    else
+      process.stderr.write(`${GREEN}\u2705 Generating recommendations \u2014 analyzer todo ${out.todoId}${RESET}
+`);
     return;
   }
   if (args["list-agents"]) {
@@ -46925,7 +46914,8 @@ Cancelled by user (Ctrl+C)
     const projects2 = await api.listProjects();
     let projectId2 = args.project;
     if (!projectId2) {
-      projectId2 = cfgScope.data.default_project_id || projects2.find((p) => p.project?.isDefault)?.project?.id || projects2[0]?.project?.id;
+      const cached = cfgScope.data.default_project_id;
+      projectId2 = (cached && projects2.some((p) => getItemId(p) === cached) ? cached : null) || projects2.find((p) => p.project?.isDefault)?.project?.id || projects2[0]?.project?.id;
     }
     if (!projectId2) {
       process.stderr.write(`Error: No project found
@@ -47128,7 +47118,18 @@ Resumed: ${CYAN}${getFrontendUrl(apiUrl, projectId2, todoId)}${RESET}
     agent = { ...agent, permissions: { ...perms, allow: [...perms.allow || [], "*:*"] } };
   }
   cfg.addToHistory(content);
-  const todo = await api.addMessage(projectId, content, agent);
+  let todo;
+  try {
+    todo = await api.addMessage(projectId, content, agent);
+  } catch (e) {
+    if (!args.project && cfgScope.data.default_project_id === projectId && /failed: 403/.test(e.message || "")) {
+      cfgScope.clearDefaultProject();
+      process.stderr.write(`${RED}Not authorized for cached default project ${projectName} (${projectId}) \u2014 cleared it. Re-run to pick a project.${RESET}
+`);
+      process.exit(1);
+    }
+    throw e;
+  }
   const actualTodoId = todo.id || crypto.randomUUID();
   cfgScope.setLastTodoId(actualTodoId);
   const frontendUrl = getFrontendUrl(apiUrl, projectId, actualTodoId);

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@todoforai/cli",
-  "version": "0.1.22",
+  "version": "0.1.25",
   "type": "module",
   "bin": {
-    "todoforai-cli": "dist/todoai.js",
-    "todoai": "dist/todoai.js"
+    "todoforai-cli": "bin/todoforai-cli.js",
+    "todoai": "bin/todoforai-cli.js"
   },
   "files": [
+    "bin",
     "dist/todoai.js"
   ],
   "scripts": {