@todoforai/cli 0.1.71 → 0.1.73

package/dist/todoforai-cli.js

@@ -43281,6 +43281,10 @@ class ApiClient {
     const { projectId, ...body } = input;
     return this.request("POST", `/api/v1/projects/${projectId}/recommendations`, body);
   }
+  async feedIgnore(input) {
+    const { projectId, ...body } = input;
+    return this.request("POST", `/api/v1/projects/${projectId}/feed/ignored`, body);
+  }
   async getRegistrySpec(specId) {
     const base = this.apiUrl.replace(/\/api\/v1\/?$/, "").replace(/\/$/, "");
     const res = await fetch(`${base}/cookie/v1/registry/templates/${specId}`);
@@ -44079,7 +44083,9 @@ var SERVER_TO_FRONTENDS = {
     updated: (userId) => `${"business_context:updated" /* BUSINESS_CONTEXT_UPDATED */}:${userId}`
   },
   resource: {
-    contentUpdated: (userId) => `${"resource:content_updated" /* RESOURCE_CONTENT_UPDATED */}:${userId}`
+    contentUpdated: (userId) => `${"resource:content_updated" /* RESOURCE_CONTENT_UPDATED */}:${userId}`,
+    contentUpdatedInTodo: (todoId) => `${"resource:content_updated" /* RESOURCE_CONTENT_UPDATED */}:todo:${todoId}`,
+    contentUpdatedInProject: (projectId) => `${"resource:content_updated" /* RESOURCE_CONTENT_UPDATED */}:project:${projectId}`
   },
   hexGrid: {
     updated: (projectId) => `${"hexgrid:updated" /* HEXGRID_UPDATED */}:${projectId}`
@@ -44132,6 +44138,7 @@ var SERVER_TO_FRONTENDS = {
     start_universal: (todoId) => `${"block:start_universal" /* BLOCK_START_UNIVERSAL */}:${todoId}`,
     message: (todoId) => `${"block:message" /* BLOCK_MESSAGE */}:${todoId}`,
     end: (todoId) => `${"block:end" /* BLOCK_END */}:${todoId}`,
+    toolDelta: (todoId) => `${"block:tool_delta" /* BLOCK_TOOL_DELTA */}:${todoId}`,
     new_message: (todoId) => `${"todo:new_message" /* TODO_NEW_MESSAGE */}:${todoId}`,
     sh_msg_result: (todoId) => `${"block:sh_msg_result" /* BLOCK_SH_MSG_RESULT */}:${todoId}`,
     sh_msg_start_result: (todoId) => `${"block:sh_msg_start" /* BLOCK_SH_MSG_START */}:${todoId}`,
@@ -44218,6 +44225,7 @@ var USER_HEADINGS = new Set([
 ]);
 // ../packages/shared-fbe/src/bridgeProtocol.ts
 var ADB_DATA_CHUNK = 40 * 1024;
+var SHELL_DATA_CHUNK = 40 * 1024;
 // ../packages/shared-fbe/src/bashPatterns.ts
 function splitShellCommands(input) {
   const parts = [];
@@ -44633,32 +44641,15 @@ To materialize growth recommendations, propose todos on the project board. A pro
 
 Exactly ONE \`api_recommend_template\` call per proposal: it carries both what the todo is and where it lands on the board.
 
-1. WHAT IT IS. Pass \`name\` + \`body\`, written for THIS business, and optionally \`description\`, \`short\` and \`categories\`.
+1. WHAT IT IS. Pass \`name\`, \`description\` and \`body\`, written for THIS business.
    - Reuse an existing registry template instead ONLY when it already fits this business closely with no meaningful edits: pass its id as \`templateId\` and omit \`name\`/\`body\`. If it needs tailoring, write yours inline. Do not recommend a generic playbook that ignores this company's specifics.
 
-   Language: match the business. Write user-facing text such as names, bodies and notes in the language the company itself communicates in. When the company is international or unclear, use English. Only the frame stays in English. The heading lines \`Your task:\`, \`Steps:\` and \`Data needed:\` are parsed, so keep them exactly as-is. Everything else follows the business's language.
-
-   The body is read by a PERSON deciding whether to run it, so it must be understandable at a glance. The executing agent is capable and has the business context at run time, so it will elaborate and figure out the details itself. Write a minimal brief, not a playbook. Include ONLY what the agent could not figure out on its own: the business-specific direction such as company, competitor, segment, channel and the metric to move, plus any hard constraint. Cut everything else, including background, caveats, generic how-to and restated context.
-
-   Hard limits: body ≤80 words total. One sentence of persona. One-sentence task. 2-4 steps, each a short fragment of at most 8 words naming WHAT, not how. Data needed is a comma-separated list. If a sentence wouldn't change what the agent does, delete it.
-
-   \`name\`: 3-6 words, action-first like "Win Reddit comparison threads", with no company name prefix. Give \`description\` and \`short\` one tight sentence each.
+   A person reads it at a glance and decides whether to run it, so use as few words as possible. The executing agent is capable, reads the business context at run time and asks for anything it is missing, so give no steps, no list of inputs and no background.
+   - \`name\`: 3-6 words, action-first like "Win Reddit comparison threads", with no company name prefix.
+   - \`description\`: one plain sentence of at most 15 words saying what the user gets, such as "Three vs-Gmail pages, drafted and ready to publish." Never repeat the name.
+   - \`body\`: one sentence naming the expert to act as, such as "You are an SEO writer for email products." Nothing else: no headings, no task, no steps.
 
-   Example body at the right density (adapt specifics, keep the brevity):
-   "You are a B2B outbound specialist for dev-tool companies.
-   Your task:
-   Land Acme in 10 agency partner conversations this month.
-   Steps:
-   - Shortlist 30 EU automation agencies
-   - Draft one-line personalized openers
-   - Send, track replies in a sheet
-   Data needed:
-   Acme pricing page, current partner list, founder's LinkedIn"
-
-   Body structure (REQUIRED). The body is split into the agent's system prompt and the first user turn by section headings, so follow this exactly:
-   - Start with the persona, expertise and any Rules as plain prose at the top with no heading. This becomes the agent's system prompt.
-   - Then write the request using these exact standalone heading lines, letters only, each on its own line and ending with a colon: \`Your task:\`, \`Steps:\`, \`Data needed:\`. Everything under these headings becomes the first user turn.
-   - Headings must match exactly or the split breaks. Write \`Your task:\`, not \`Your task (SEO):\`. Put the business-specific detail in the body text under each heading, never in the heading itself.
+   Language: write the name, description, body and note in the language the company itself communicates in. When the company is international or unclear, use English.
 
 2. WHERE IT LANDS, in that same call. It becomes a PROPOSED todo on the project and never a running todo:
    Give it a one-line \`note\` of roughly 15 words at most giving the WHY for THIS business, which becomes the proposal's tooltip, a \`priority\` of high, medium or low. Leave \`group\` empty: proposals land on the board without a group, and you never create, rename or archive groups. Project and business context default to the current session, so pass them only when targeting a different one. The proposal appears as a ✧ row on the board for the user to review before any credits are spent. Re-proposing the same \`templateId\` refreshes that open proposal instead of duplicating it. An inline proposal is always a new one, so check the board you just read before repeating a move that is already there. Dismissed proposals since your last run are fed back to you. Don't re-propose those, steer elsewhere.
@@ -45607,6 +45598,16 @@ var tool_catalog_default = {
     installCmd: "npm install -g @todoforai/tfa-summary",
     internal: true
   },
+  "tfa-cat": {
+    category: "todoforai",
+    pkg: "tfa-cat",
+    installer: "system",
+    label: "Cat",
+    summary: "Show images and PDFs from the shell to the agent.",
+    description: "`cat` that lets you SEE media: `tfa-cat shot.png` (or `… | tfa-cat`) attaches images/PDFs to this bash result; text prints like cat; its stdout redirected/piped → raw bytes. Also `todoforai:<path>` files (`tfa-cat todoforai:todos/<id>/data.csv > data.csv`; binaries like docx/xlsx: redirect, then edit with your tools). Big text costs context: read what you need (`| head`, `| sed -n 40,80p`, `| grep -n`).",
+    versionCmd: "tfa-cat --version 2>/dev/null | sed -n 1p",
+    internal: true
+  },
   "tfa-handoff": {
     preinstallCloud: true,
     category: "todoforai",
@@ -50352,6 +50353,10 @@ var TOPICS = {
     channel: (p) => SERVER_TO_FRONTENDS.todo.msgStopSequence(p.todoId),
     audience: "frontend"
   },
+  ["block:tool_delta" /* BLOCK_TOOL_DELTA */]: {
+    channel: (p) => SERVER_TO_FRONTENDS.todo.toolDelta(p.todoId),
+    audience: "frontend"
+  },
   ["block:diff_result" /* BLOCK_DIFF_RESULT */]: {
     channel: (p) => SERVER_TO_FRONTENDS.todo.diff_result(p.todoId),
     audience: "frontend"
@@ -50427,7 +50432,7 @@ var package_default = {
     type: "git",
     url: "git+https://github.com/todoforai/cli.git"
   },
-  version: "0.1.71",
+  version: "0.1.73",
   type: "module",
   bin: {
     "todoforai-cli": "bin/todoforai-cli.js",
@@ -50496,7 +50501,8 @@ Examples:
   tfa-cli show list|ref|rm …          # List / re-surface / take down shown files
   tfa-cli open <url> [todo-id]        # Live url preview in the chat
   tfa-cli connect <key>… [--reason "why"]  # Sign-in card for connectors on this machine (several keys = one choice)
-  tfa-cli recommend --template <id>    # Add a template as a recommendation card
+  tfa-cli recommend --template <id> | --title "…" [--info] [--source "label|ref|url"]  # ✧ proposal card, or an ⓘ info row
+  tfa-cli ignore --title "…" [--source "label|ref|url|from"] [--note "why"]  # Log an inbound item as noise (folded under the Feed card)
   tfa-cli inbox [needs-you|messages|activity] [--unread]  # Read the notification feed (the bell)
   tfa-cli inbox seen [tab]              # Mark notifications read
   tfa-cli notify [--to <email>] "Title" "message" [--href /t/<id>] [--url <link>]  # Note to your own user, or --to a project member (Messages tab + phone push)
@@ -50624,6 +50630,8 @@ function parseCliArgs() {
       inspect: { type: "string", short: "i" },
       template: { type: "string", short: "t" },
       note: { type: "string" },
+      info: { type: "boolean", default: false },
+      source: { type: "string" },
       priority: { type: "string" },
       title: { type: "string" },
       alias: { type: "string" },
@@ -51400,6 +51408,16 @@ class ScopedConfig {
     s.recent_projects = [{ id, name: name || id }, ...s.recent_projects.filter((p) => p.id !== id)].slice(0, 10);
     this.store.save();
   }
+  cachedUserId(tokenFp) {
+    const s = this.data;
+    return s.user_id && s.user_id_token_fp === tokenFp ? s.user_id : null;
+  }
+  setUserId(id, tokenFp) {
+    const s = this.data;
+    s.user_id = id;
+    s.user_id_token_fp = tokenFp;
+    this.store.save();
+  }
   setDefaultAgent(name, settings) {
     const s = this.data;
     s.default_agent_name = name;
@@ -53447,10 +53465,9 @@ Examples:
   tfa-cli agent update <agent> model=anthropic:anthropic/claude-opus-5 temperature=0.5
   tfa-cli agent update <agent> sysmsg="You are a terse video editor."
   tfa-cli agent create name=Reviewer model=claude sysmsg="Review diffs only."
+  tfa-cli agent update <agent> judgeSysmsg="Ask before sending email."   (approval checker; ""=off, null=inherit global)
 
-  tfa-cli agent update <agent> judgeSysmsg="Ask before destructive actions. Everything else can run."   (auto-approve policy)
-
-From an agent shell (dst_ token) permissions, judgeSysmsg, edgesMcpConfigs, devicesConfig and delete are refused by the backend.
+From an agent shell (dst_ token) permissions, edgesMcpConfigs, devicesConfig and delete are refused by the backend.
 `);
 }
 var FIELD_ALIASES = {
@@ -53852,6 +53869,7 @@ Fields (PUT /todos/{id}):
   schedule         unix ms timestamp, 0 = immediate (alias: scheduledTimestamp)
   agent            agentSettingsId (alias: agentSettingsId)
   public           true|false — refused from an agent shell (isPublic)
+  kind             task|info — promote an ⓘ info row to a task (or back)
 
   tfa-cli todo message <todo-id|-> <message-id> <field=value>…
                    Edit a SCHEDULED (not yet run) message: content, schedule (unix ms;
@@ -54469,19 +54487,22 @@ var VALID_STATUS = new Set(Object.values(TodoStatus));
 var isOpen = (s) => !CLOSED.has(s);
 function printListTodosHelp() {
   process.stderr.write(`
-todoforai-cli list — list todos in a project (recent first)
+todoforai-cli list — list YOUR todos in a project (recent first)
+
+Default: only todos you opened or wrote in. --project-wide shows everyone's.
 
 Usage:
   todoforai-cli list [flags]
 
 Flags:
+      --project-wide       Every member's todos, not just yours
   -n, --limit <n>          Max rows to show (default: 30)
       --cursor <n>         Fetch todos older than this cursor (sort field, epoch ms)
       --since <t>          Only todos with sort field >= t (inclusive)
       --until <t>          Only todos with sort field < t (exclusive)
                            t = epoch ms | YYYY-MM-DD (local midnight) | ISO datetime | 12h / 3d ago
       --sort <key>         activity (lastActivityAt, default) | created (createdAt)
-      --contributor <u>    Only todos a member opened/wrote in (id or email; comma = any)
+      --contributor <u>    Only todos a member opened/wrote in (id or email; comma = any; replaces the "mine" default)
       --page-size <n>      Backend page size per request (default: min(limit, 400), max: 400)
       --search <text>      Search content/status on the backend
   -s, --status <S[,S2]>    Filter by status (comma-separated, union).
@@ -54491,7 +54512,8 @@ Flags:
   -h, --help               Show this help
 
 Examples:
-  todoforai-cli list                         # 30 most recent open todos
+  todoforai-cli list                         # 30 most recent open todos of yours
+  todoforai-cli list --project-wide          # … of everyone in the project
   todoforai-cli list -n 50                   # last 50 open
   todoforai-cli list --cursor 1719234567890  # next page
   todoforai-cli list --all                   # include DONE
@@ -54583,7 +54605,7 @@ function matchesRequestedStatus(t, requested, wanted, wantOpen) {
   const s = String(t.status).toUpperCase();
   return wantOpen && isOpen(s) || (wanted?.has(s) ?? false);
 }
-async function listTodosCommand(api, defaultProjectId, argv) {
+async function listTodosCommand(api, defaultProjectId, argv, resolveUserId) {
   const { values } = parseArgs2({
     args: argv,
     options: {
@@ -54595,6 +54617,7 @@ async function listTodosCommand(api, defaultProjectId, argv) {
       until: { type: "string" },
       sort: { type: "string" },
       contributor: { type: "string" },
+      "project-wide": { type: "boolean", default: false },
       status: { type: "string", short: "s" },
       all: { type: "boolean", short: "A", default: false },
       project: { type: "string" },
@@ -54627,7 +54650,15 @@ async function listTodosCommand(api, defaultProjectId, argv) {
   if (until !== undefined)
     cursor = cursor === undefined ? until : Math.min(cursor, until);
   const search = values.search ? String(values.search) : undefined;
-  const contributorIds = values.contributor ? await resolveContributors(api, projectId, String(values.contributor)) : undefined;
+  let contributorIds = values.contributor ? await resolveContributors(api, projectId, String(values.contributor)) : undefined;
+  let mineOnly = false;
+  if (!contributorIds && !values["project-wide"] && resolveUserId) {
+    const me = await resolveUserId();
+    if (me) {
+      contributorIds = [me];
+      mineOnly = true;
+    }
+  }
   const requested = values.status ? String(values.status).split(",").map((s) => s.trim().toUpperCase()).filter(Boolean) : null;
   const unknown = requested?.filter((s) => s !== "OPEN" && !VALID_STATUS.has(s)) ?? [];
   if (unknown.length)
@@ -54683,8 +54714,9 @@ async function listTodosCommand(api, defaultProjectId, argv) {
 `);
     return;
   }
+  const scopeHint = mineOnly ? " of yours (--project-wide for everyone's)" : "";
   if (!visible.length) {
-    process.stderr.write(`${DIM}(no todos)${RESET}
+    process.stderr.write(`${DIM}(no todos${scopeHint})${RESET}
 `);
     if (nextCursor !== undefined)
       process.stderr.write(`${DIM}Next cursor: ${nextCursor} (re-run with the same filters plus --cursor ${nextCursor})${RESET}
@@ -54701,7 +54733,7 @@ async function listTodosCommand(api, defaultProjectId, argv) {
     process.stdout.write(`${sc}${status.padEnd(statusW)}${RESET}  ${DIM}${ts}${RESET}  ${t.id}  ${title}
 `);
   }
-  process.stderr.write(`${DIM}${visible.length} todo(s)${RESET}
+  process.stderr.write(`${DIM}${visible.length} todo(s)${scopeHint}${RESET}
 `);
   if (nextCursor !== undefined)
     process.stderr.write(`${DIM}Next cursor: ${nextCursor} (re-run with the same filters plus --cursor ${nextCursor})${RESET}
@@ -55656,7 +55688,7 @@ password=${apiKey}
 }
 
 // src/index.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash3, randomUUID as randomUUID3 } from "crypto";
 
 // src/ensure-bridge.ts
 import { spawn as spawn4, spawnSync as spawnSync4 } from "child_process";
@@ -80374,15 +80406,49 @@ async function main() {
       console.log(res.ref);
     return;
   }
+  if (positionals[0] === "ignore") {
+    const title = args.title?.trim();
+    if (!title) {
+      process.stderr.write(`${RED3}Usage: tfa-cli ignore --title "..." [--source "label|ref|url|from"] [--note "why"] [--project <id>]${RESET2}
+`);
+      process.exit(2);
+    }
+    const source = args.source ? (() => {
+      const [label, ref, url2, from] = String(args.source).split("|");
+      return label && ref ? { label, ref, ...url2 ? { url: url2 } : {}, ...from ? { from } : {} } : undefined;
+    })() : undefined;
+    const projectId2 = args.project || getEnv("PROJECT_ID") || cfgScope.data.default_project_id;
+    if (!projectId2) {
+      process.stderr.write(`${RED3}No project found \u2014 pass --project <id>${RESET2}
+`);
+      process.exit(2);
+    }
+    await api2.feedIgnore({ projectId: projectId2, title, ...source ? { source } : {}, ...args.note ? { why: args.note } : {} });
+    process.stderr.write(`${DIM2}ignored: ${title}${RESET2}
+`);
+    return;
+  }
   if (positionals[0] === "recommend") {
     const templateId = args.template || positionals[1];
-    if (!templateId) {
-      process.stderr.write(`${RED3}Usage: tfa-cli recommend --template <id> [--note "why"] [--priority high|medium|low] [--title "..."] [--group <slug> [--group-name "..."] [--group-description "..."]] [--project <id>]${RESET2}
+    const inlineTitle = !templateId && args.title?.trim();
+    if (!templateId && !inlineTitle) {
+      process.stderr.write(`${RED3}Usage: tfa-cli recommend --template <id> | --title "..." [--info] [--source "label|ref|url|from"] [--note "why"] [--priority high|medium|low] [--group <slug> [--group-name "..."] [--group-description "..."]] [--project <id>]${RESET2}
 `);
-      process.stderr.write(`${DIM2}Create a template first with: todoregistry-cli create --name ... --description ... --body @prompt.md${RESET2}
+      process.stderr.write(`${DIM2}--info: an information row (no \u2727, nothing to accept). --source: provenance; the same label|ref never creates a second row.${RESET2}
 `);
       process.exit(2);
     }
+    const source = (() => {
+      if (!args.source)
+        return;
+      const [label, ref, url2, from] = String(args.source).split("|");
+      if (!label || !ref) {
+        process.stderr.write(`${RED3}--source needs at least "label|ref"${RESET2}
+`);
+        process.exit(2);
+      }
+      return { label, ref, ...url2 ? { url: url2 } : {}, ...from ? { from } : {} };
+    })();
     let projectId2 = args.project || getEnv("PROJECT_ID") || cfgScope.data.default_project_id;
     if (!projectId2) {
       const projects2 = await api2.listProjects();
@@ -80401,7 +80467,17 @@ async function main() {
     }
     const rec = await api2.recommend({
       projectId: projectId2,
-      specId: templateId,
+      ...templateId ? { specId: templateId } : { template: {
+        name: inlineTitle,
+        description: args.note || (source ? `From ${source.label}` : inlineTitle),
+        body: `Handle this item: ${inlineTitle}${args.note ? `
+
+${args.note}` : ""}${source?.url ? `
+
+Original: ${source.url}` : ""}`
+      } },
+      ...args.info ? { todoKind: "info" } : {},
+      ...source ? { source } : {},
       ...args.title ? { title: args.title } : {},
       ...args.note ? { note: args.note } : {},
       ...priority ? { priority } : {},
@@ -80412,7 +80488,7 @@ async function main() {
     if (args.json)
       console.log(JSON.stringify(rec, null, 2));
     else
-      process.stderr.write(`${GREEN2}\u2705 Recommended template ${templateId} on project ${projectId2}${RESET2}
+      process.stderr.write(`${GREEN2}\u2705 ${args.info ? "\u24D8 info" : "\u2727 proposal"} ${rec?.id ?? ""} on project ${projectId2}${RESET2}
 `);
     return;
   }
@@ -80515,7 +80591,20 @@ async function main() {
       defaultProjectId = projects2.find((p) => p.project?.isDefault)?.project?.id || projects2[0]?.project?.id;
     }
     const sub = process.argv.slice(process.argv.indexOf(positionals[0]) + 1);
-    await listTodosCommand(api2, defaultProjectId ?? undefined, sub);
+    const tokenFp = createHash3("sha256").update(apiKey).digest("hex").slice(0, 16);
+    const resolveUserId = async () => {
+      const envId = getEnv("USER_ID");
+      if (envId)
+        return envId;
+      const cached2 = cfgScope.cachedUserId(tokenFp);
+      if (cached2)
+        return cached2;
+      const v = await api2.validateApiKey();
+      if (v.userId)
+        cfgScope.setUserId(v.userId, tokenFp);
+      return v.userId;
+    };
+    await listTodosCommand(api2, defaultProjectId ?? undefined, sub, resolveUserId);
     return;
   }
   if (args.inspect !== undefined) {

package/package.json

@@ -7,7 +7,7 @@
     "type": "git",
     "url": "git+https://github.com/todoforai/cli.git"
   },
-  "version": "0.1.71",
+  "version": "0.1.73",
   "type": "module",
   "bin": {
     "todoforai-cli": "bin/todoforai-cli.js",