@todoforai/cli 0.1.72 → 0.1.74

package/dist/todoforai-cli.js

@@ -43281,6 +43281,10 @@ class ApiClient {
     const { projectId, ...body } = input;
     return this.request("POST", `/api/v1/projects/${projectId}/recommendations`, body);
   }
+  async feedIgnore(input) {
+    const { projectId, ...body } = input;
+    return this.request("POST", `/api/v1/projects/${projectId}/feed/ignored`, body);
+  }
   async getRegistrySpec(specId) {
     const base = this.apiUrl.replace(/\/api\/v1\/?$/, "").replace(/\/$/, "");
     const res = await fetch(`${base}/cookie/v1/registry/templates/${specId}`);
@@ -43763,14 +43767,15 @@ var mimetypes_default = {
     to_jpeg_90: { toMime: "image/jpeg", toExt: "jpg", quality: 0.9 }
   },
   types: {
-    image: { icon: "mdi:file-image", color: "yellow", prefixRule: "image/", needsObjectUrl: true },
-    audio: { icon: "mdi:file-music", color: "grey", prefixRule: "audio/", needsObjectUrl: true },
-    video: { icon: "mdi:file-video", color: "yellow", prefixRule: "video/", needsObjectUrl: true },
+    image: { icon: "vscode-icons:file-type-image", color: "green", prefixRule: "image/", needsObjectUrl: true },
+    audio: { icon: "mdi:file-music", color: "blue", prefixRule: "audio/", needsObjectUrl: true },
+    video: { icon: "vscode-icons:file-type-video", color: "red", prefixRule: "video/", needsObjectUrl: true },
     pdf: { icon: "vscode-icons:file-type-pdf2", color: "red", needsObjectUrl: true },
     document: { icon: "vscode-icons:file-type-word", color: "lightblue" },
     spreadsheet: { icon: "vscode-icons:file-type-excel", color: "green" },
-    text: { icon: "mdi:file", color: "white", prefixRule: "text/" },
-    archive: { icon: "mdi:folder-zip", color: "purple" },
+    presentation: { icon: "vscode-icons:file-type-powerpoint", color: "red" },
+    text: { icon: "vscode-icons:file-type-text", color: "white", prefixRule: "text/" },
+    archive: { icon: "vscode-icons:file-type-zip", color: "yellow" },
     unknown: { icon: "mdi:file", color: "grey" },
     mcp_text: { icon: "mdi:robot", color: "purple" },
     mcp_image: { icon: "mdi:robot", color: "purple", needsObjectUrl: true },
@@ -43821,8 +43826,8 @@ var mimetypes_default = {
     pdf: { mime: "application/pdf", type: "pdf" },
     doc: { mime: "application/msword", type: "document" },
     docx: { mime: "application/vnd.openxmlformats-officedocument.wordprocessingml.document", type: "document", tags: ["docx"] },
-    ppt: { mime: "application/vnd.ms-powerpoint", type: "document" },
-    pptx: { mime: "application/vnd.openxmlformats-officedocument.presentationml.presentation", type: "document", tags: ["pptx"] },
+    ppt: { mime: "application/vnd.ms-powerpoint", type: "presentation" },
+    pptx: { mime: "application/vnd.openxmlformats-officedocument.presentationml.presentation", type: "presentation", tags: ["pptx"] },
     xls: { mime: "application/vnd.ms-excel", type: "spreadsheet", tags: ["xls"] },
     xlsx: { mime: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", type: "spreadsheet", tags: ["xlsx"] },
     zip: { mime: "application/zip", type: "archive" },
@@ -44070,7 +44075,7 @@ var FILE_TOOL_TYPES = new Set([
   "modify_file" /* ModifyFile */
 ]);
 // ../packages/shared-fbe/src/channels.ts
-var privateSuffix = (privateOwnerId) => privateOwnerId ? `:private:${privateOwnerId}` : "";
+var privateSuffix = (userId) => userId ? `:private:${userId}` : "";
 var SERVER_TO_FRONTENDS = {
   task: {
     actionUpdate: (userId) => `${"task_action:update" /* TASK_ACTION_UPDATE */}:${userId}`
@@ -44118,9 +44123,9 @@ var SERVER_TO_FRONTENDS = {
     writeFileResult: (edgeId) => `${"edge:write_file_response" /* EDGE_WRITE_FILE_RESPONSE */}:${edgeId}`
   },
   project: {
-    new_message: (projectId, privateOwnerId) => `${"task:new_update" /* TASK_NEW */}:${projectId}${privateSuffix(privateOwnerId)}`,
-    new_todo: (projectId, privateOwnerId) => `${"todo:new" /* NEW_TODO */}:${projectId}${privateSuffix(privateOwnerId)}`,
-    status: (projectId, privateOwnerId) => `${"project:status" /* PROJECT_STATUS */}:${projectId}${privateSuffix(privateOwnerId)}`
+    new_message: (projectId, memberId) => `${"task:new_update" /* TASK_NEW */}:${projectId}${privateSuffix(memberId)}`,
+    new_todo: (projectId, memberId) => `${"todo:new" /* NEW_TODO */}:${projectId}${privateSuffix(memberId)}`,
+    status: (projectId, memberId) => `${"project:status" /* PROJECT_STATUS */}:${projectId}${privateSuffix(memberId)}`
   },
   todo: {
     msgStart: (todoId) => `${"todo:msg_start" /* TODO_MSG_START */}:${todoId}`,
@@ -44637,32 +44642,15 @@ To materialize growth recommendations, propose todos on the project board. A pro
 
 Exactly ONE \`api_recommend_template\` call per proposal: it carries both what the todo is and where it lands on the board.
 
-1. WHAT IT IS. Pass \`name\` + \`body\`, written for THIS business, and optionally \`description\`, \`short\` and \`categories\`.
+1. WHAT IT IS. Pass \`name\`, \`description\` and \`body\`, written for THIS business.
    - Reuse an existing registry template instead ONLY when it already fits this business closely with no meaningful edits: pass its id as \`templateId\` and omit \`name\`/\`body\`. If it needs tailoring, write yours inline. Do not recommend a generic playbook that ignores this company's specifics.
 
-   Language: match the business. Write user-facing text such as names, bodies and notes in the language the company itself communicates in. When the company is international or unclear, use English. Only the frame stays in English. The heading lines \`Your task:\`, \`Steps:\` and \`Data needed:\` are parsed, so keep them exactly as-is. Everything else follows the business's language.
-
-   The body is read by a PERSON deciding whether to run it, so it must be understandable at a glance. The executing agent is capable and has the business context at run time, so it will elaborate and figure out the details itself. Write a minimal brief, not a playbook. Include ONLY what the agent could not figure out on its own: the business-specific direction such as company, competitor, segment, channel and the metric to move, plus any hard constraint. Cut everything else, including background, caveats, generic how-to and restated context.
-
-   Hard limits: body ≤80 words total. One sentence of persona. One-sentence task. 2-4 steps, each a short fragment of at most 8 words naming WHAT, not how. Data needed is a comma-separated list. If a sentence wouldn't change what the agent does, delete it.
+   A person reads it at a glance and decides whether to run it, so use as few words as possible. The executing agent is capable, reads the business context at run time and asks for anything it is missing, so give no steps, no list of inputs and no background.
+   - \`name\`: 3-6 words, action-first like "Win Reddit comparison threads", with no company name prefix.
+   - \`description\`: one plain sentence of at most 15 words saying what the user gets, such as "Three vs-Gmail pages, drafted and ready to publish." Never repeat the name.
+   - \`body\`: one sentence naming the expert to act as, such as "You are an SEO writer for email products." Nothing else: no headings, no task, no steps.
 
-   \`name\`: 3-6 words, action-first like "Win Reddit comparison threads", with no company name prefix. Give \`description\` and \`short\` one tight sentence each.
-
-   Example body at the right density (adapt specifics, keep the brevity):
-   "You are a B2B outbound specialist for dev-tool companies.
-   Your task:
-   Land Acme in 10 agency partner conversations this month.
-   Steps:
-   - Shortlist 30 EU automation agencies
-   - Draft one-line personalized openers
-   - Send, track replies in a sheet
-   Data needed:
-   Acme pricing page, current partner list, founder's LinkedIn"
-
-   Body structure (REQUIRED). The body is split into the agent's system prompt and the first user turn by section headings, so follow this exactly:
-   - Start with the persona, expertise and any Rules as plain prose at the top with no heading. This becomes the agent's system prompt.
-   - Then write the request using these exact standalone heading lines, letters only, each on its own line and ending with a colon: \`Your task:\`, \`Steps:\`, \`Data needed:\`. Everything under these headings becomes the first user turn.
-   - Headings must match exactly or the split breaks. Write \`Your task:\`, not \`Your task (SEO):\`. Put the business-specific detail in the body text under each heading, never in the heading itself.
+   Language: write the name, description, body and note in the language the company itself communicates in. When the company is international or unclear, use English.
 
 2. WHERE IT LANDS, in that same call. It becomes a PROPOSED todo on the project and never a running todo:
    Give it a one-line \`note\` of roughly 15 words at most giving the WHY for THIS business, which becomes the proposal's tooltip, a \`priority\` of high, medium or low. Leave \`group\` empty: proposals land on the board without a group, and you never create, rename or archive groups. Project and business context default to the current session, so pass them only when targeting a different one. The proposal appears as a ✧ row on the board for the user to review before any credits are spent. Re-proposing the same \`templateId\` refreshes that open proposal instead of duplicating it. An inline proposal is always a new one, so check the board you just read before repeating a move that is already there. Dismissed proposals since your last run are fed back to you. Don't re-propose those, steer elsewhere.
@@ -44723,6 +44711,137 @@ var OUTPUT_POLICIES = {
   full: { firstLimit: Infinity, lastLimit: 0, hardCap: RUN_OUTPUT_CAP, lineLimit: MAX_LINE_LEN },
   raw: { firstLimit: Infinity, lastLimit: 0, hardCap: Infinity, lineLimit: Infinity }
 };
+// ../packages/shared-fbe/src/agentRoles.ts
+var SAFE = "Prepare drafts and lists; never send, publish, pay or delete anything without my OK.";
+var AGENT_ROLES = [
+  {
+    key: "assistant",
+    name: "Assistant",
+    icon: "inbox",
+    color: "#6366f1",
+    tagline: "Inbox, calendar, meetings",
+    outcomes: ["Inbox sorted, replies drafted", "A brief before every meeting", "Your week planned by Monday"],
+    tools: ["zele", "zele-calendar", "outlook-api"],
+    systemMessage: `You are my executive assistant. Keep my inbox and calendar under control. ${SAFE}
+
+How you work:
+1. Read new emails and sort them: needs me / FYI / ignore.
+2. Draft replies for the ones that need me, in my voice.
+3. For meetings in the next 2 days, write a short brief from the related emails.
+4. Show me the drafts before anything is sent.`
+  },
+  {
+    key: "bookkeeper",
+    name: "Bookkeeping assistant",
+    icon: "receipt",
+    color: "#10b981",
+    tagline: "Invoices, receipts, accountant",
+    outcomes: ["Invoices from the inbox in one table", "Unpaid invoices reminded", "Month-end email to the accountant"],
+    tools: ["zele", "stripe", "gdrive"],
+    systemMessage: `You are my bookkeeping assistant. Keep invoices and receipts complete and organised. ${SAFE}
+
+How you work:
+1. Find invoices and receipts from the last month (inbox, Stripe, Drive).
+2. Put them in a table: date, vendor, amount, VAT, attachment.
+3. List unpaid invoices and draft polite reminders.
+4. Draft the email to my accountant with the table; ask me before sending.`
+  },
+  {
+    key: "sales",
+    name: "Sales rep",
+    icon: "target",
+    color: "#f97316",
+    tagline: "Leads, outreach, follow-ups",
+    outcomes: ["Lead replies drafted in minutes", "Personal outreach at scale", "CRM always up to date"],
+    tools: ["hubspot", "linkedin-api", "zele"],
+    systemMessage: `You are my sales development rep. Research leads and write short, personal outreach. ${SAFE}
+
+How you work:
+1. Research each lead: company, role, a relevant recent fact.
+2. Draft a short personal first message or reply.
+3. Update the CRM with the lead and a follow-up date.
+4. Ask me before sending any message.`
+  },
+  {
+    key: "account-manager",
+    name: "Account manager",
+    icon: "briefcase",
+    color: "#f59e0b",
+    tagline: "Client updates, renewals",
+    outcomes: ["Weekly status per client", "Recap after every call", "Silent clients flagged"],
+    tools: ["zele", "slack-cli", "zele-calendar"],
+    systemMessage: `You are my account manager. Keep every client relationship warm and on track. ${SAFE}
+
+How you work:
+1. Find clients who have not replied to my last message for 5+ days.
+2. Draft a short, friendly follow-up for each.
+3. After calls, write a recap with decisions and next steps.
+4. Ask me before sending.`
+  },
+  {
+    key: "social",
+    name: "Social media manager",
+    icon: "megaphone",
+    color: "#ec4899",
+    tagline: "Weekly posts in your voice",
+    outcomes: ["Posts per channel in your style", "A full weekly calendar", "Reply drafts for comments"],
+    tools: ["linkedin-api", "xurl", "facebook-pages-api"],
+    systemMessage: `You are my social media manager. Write in my brand voice for each channel. ${SAFE}
+
+How you work:
+1. Read my brand page and the voice for each channel.
+2. Draft 3 posts for this week, one idea each.
+3. Draft replies to new comments worth answering.
+4. Ask me before publishing anything.`
+  },
+  {
+    key: "ads",
+    name: "Ads manager",
+    icon: "trending-up",
+    color: "#3b82f6",
+    tagline: "Meta and Google ads",
+    outcomes: ["Wasted spend flagged daily", "Budget moved to the best ROAS", "Creative fatigue caught early"],
+    tools: ["meta-ads", "google-ads"],
+    systemMessage: `You are my ads manager. Watch performance and propose concrete changes. ${SAFE}
+
+How you work:
+1. Pull yesterday's results per campaign and ad.
+2. Flag the worst cost per result and tired creatives.
+3. Propose budget moves with the numbers behind them.
+4. Ask me before changing any budget or pausing anything.`
+  },
+  {
+    key: "developer",
+    name: "Developer",
+    icon: "code",
+    color: "#0ea5e9",
+    tagline: "Errors, PRs, deploys",
+    outcomes: ["New errors grouped by cause each morning", "PR reviews with fixes", "Deploys after your OK"],
+    tools: ["gh", "sentry-cli", "vercel"],
+    systemMessage: `You are my senior developer. Keep the code healthy: small, tested, reviewed changes. Never deploy or merge without my OK.
+
+How you work:
+1. Check new errors since yesterday and group them by cause.
+2. Fix the most important one on a branch, with a test.
+3. Open a pull request with a short explanation.
+4. Ask me before merging or deploying.`
+  },
+  {
+    key: "researcher",
+    name: "Market researcher",
+    icon: "search",
+    color: "#8b5cf6",
+    tagline: "Competitors, markets, trends",
+    outcomes: ["Weekly competitor watch", "Market brief before a pitch", "Brand mentions caught"],
+    tools: ["perplexity-api", "agent-browser"],
+    systemMessage: `You are my market researcher. Cite sources, separate facts from guesses, keep it short.
+
+How you work:
+1. Check what my competitors shipped or announced this week.
+2. Search for new mentions of my brand.
+3. Write a one-page brief with sources.`
+  }
+];
 // ../packages/shared-fbe/src/tool_catalog.json
 var tool_catalog_default = {
   zele: {
@@ -44811,6 +44930,22 @@ var tool_catalog_default = {
     description: "Figma REST API CLI. File commands take a file key or Figma URL. Canvas writes (frames/text/shapes) use `figma-api run` via the plugin bridge. Run `figma-api <cmd> --help` for params.",
     versionCmd: "figma-api --version 2>/dev/null | sed -n 1p"
   },
+  "slack-api": {
+    oauthBroker: true,
+    category: "communication",
+    pkg: "@todoforai/slack-api",
+    installer: "npm",
+    label: "Slack",
+    summary: "Read and answer your Slack as yourself: DMs and mentions, search, history, threads.",
+    loginCmd: "slack-api auth --token <user_token>",
+    statusCmd: `slack-api whoami 2>/dev/null | sed -n 's/.*"user"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m1 .`,
+    logoutCmd: "slack-api logout",
+    credentialPaths: [
+      "~/.config/slack-api/credentials.json"
+    ],
+    versionCmd: "slack-api --version 2>/dev/null | sed -n 1p",
+    description: "Slack Web API as the signed-in user (user token xoxp-, sees exactly what the user sees), JSON out. Sign-in: Connect (TODOforAI Slack app, user scopes) or `slack-api auth --stdin` / env SLACK_USER_TOKEN. `slack-api inbox [--days 3]` = DMs to you + @mentions, newest first, one JSON line each {id, thread, from, chat, subject, text, url, date} — a ready Feed source: `tfa-wait slack --feed --draft --repeat --forever --watch 'slack-api inbox' --every 2m --name Slack \"{{payload.text}}\"` (send-ready reply drafts in the Feed). Also `search '<slack query>'`, `history <C…|D…>`, `thread <channel> <ts>`, `conversations`, `user <U…>`, `dm <U…>`, `send <channel> <text> [--thread ts] --yes` (posts AS the user; without --yes only previews), `api <method> --param k=v` for any Web API method. search.messages is Tier 2 (~20/min); on ratelimited the error has retry_after. For Slack app development use slack-cli instead."
+  },
   "slack-cli": {
     preinstallCloud: true,
     cloudInstallCmd: "curl -fsSL https://github.com/slackapi/slack-cli/releases/download/v4.2.0/slack_cli_4.2.0_linux_amd64.tar.gz | tar -xz -C /tmp bin/slack && install -m0755 /tmp/bin/slack /usr/local/bin/slack-cli && rm -rf /tmp/bin",
@@ -45244,7 +45379,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "TODOforAI",
     summary: "Create and follow up on your TODOs, and show results in the chat.",
-    description: "Manage the user's OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli \"prompt\"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> \"text\"`). Inspect: `list [--status open]` (your own todos; `--project-wide` for every member's), `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|ARCHIVED|POSTPONED|CANCELLED|DELETED` (close, reopen, shelve, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r '.items[].id'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (permissions/MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo's readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `show ref <alias|todoId:alias>` re-posts it live at the chat bottom, `--alias <todoId>:<name>` updates another todo's artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Show viewer chrome: `--title` appears in the header; a kebab menu holds file actions, versions and sharing when available. Desktop floating previews add minimize (park in a tab), maximize/restore and close (X); inline blocks have no window controls. For authored HTML, do not duplicate the header/controls or add a rounded, bordered root card: the floating viewer owns the rounded frame. Keep content edge-to-edge; internal layout padding is fine. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user's bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify \"Title\" \"message\" [--href /t/<id>] [--url <link>: tap opens it on the phone, e.g. a Google Maps navigation link]` leaves a note in the user's Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows. Project files: `memory sync|path [--project <id>]` requires a project and checks out only projects/<id>/{memory,context} and projects/<id>/me/{memory,context}; legacy global files are read-only recovery. Voice commands use `--scope mine|project` (default mine, private within this project; project is shared).",
+    description: "Manage the user's OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli \"prompt\"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> \"text\"`). Inspect: `list [--status open]` (your own todos; `--contributor all` for every member's), `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|CANCELLED|ARCHIVED|DELETED` (close, reopen, stop, archive, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r '.items[].id'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (also permissions=… and judgeSysmsg=…; MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo's readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `show ref <alias|todoId:alias>` re-posts it live at the chat bottom, `--alias <todoId>:<name>` updates another todo's artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Show viewer chrome: `--title` appears in the header; a kebab menu holds file actions, versions and sharing when available. Desktop floating previews add minimize (park in a tab), maximize/restore and close (X); inline blocks have no window controls. For authored HTML, do not duplicate the header/controls or add a rounded, bordered root card: the floating viewer owns the rounded frame. Keep content edge-to-edge; internal layout padding is fine. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user's bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify \"Title\" \"message\" [--href /t/<id>] [--url <link>: tap opens it on the phone, e.g. a Google Maps navigation link]` leaves a note in the user's Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows. Project files: `memory sync|path [--project <id>]` requires a project and checks out only projects/<id>/{memory,context} and projects/<id>/me/{memory,context}; legacy global files are read-only recovery. Voice commands use `--scope mine|project` (default mine, private within this project; project is shared).",
     installCmd: "npm install -g @todoforai/cli",
     versionCmd: "tfa-cli --version 2>/dev/null | sed -n 1p",
     preinstallCloud: true,
@@ -45448,12 +45583,9 @@ var tool_catalog_default = {
     binName: "az",
     statusCmd: "az account show --query user.name -o tsv 2>/dev/null | tr -d '\\r' | grep -m1 .",
     logoutCmd: "az logout 2>&1; az account clear 2>&1",
-    loginCmd: "az login --use-device-code",
-    oauthUrlPattern: "(https://login\\.microsoft\\.com/device\\S*)",
-    deviceCodePattern: "enter the code ([A-Z0-9]+)",
-    canStreamLogin: true,
+    loginCmd: "az login --allow-no-subscriptions",
     credentialPaths: ["~/.azure"],
-    description: 'Official Azure CLI. Device-code login: prints login.microsoft.com/device + a code, then polls — no callback port. Azure SQL: `az sql server list -o json`, `az sql db list -s <server> -g <rg>`, `az sql server firewall-rule create …`; run queries with go-sqlcmd (github.com/microsoft/go-sqlcmd): `sqlcmd -S <server>.database.windows.net -d <db> --authentication-method ActiveDirectoryDefault -Q "SELECT …"` (reuses the az login) or `-U user -P pass` for SQL auth.',
+    description: 'Official Azure CLI. Browser login with a localhost callback (device code is blocked by Entra Security Defaults on new tenants); `--allow-no-subscriptions` so tenants without a subscription still sign in. Azure SQL: `az sql server list -o json`, `az sql db list -s <server> -g <rg>`, `az sql server firewall-rule create …`; run queries with go-sqlcmd (github.com/microsoft/go-sqlcmd): `sqlcmd -S <server>.database.windows.net -d <db> --authentication-method ActiveDirectoryDefault -Q "SELECT …"` (reuses the az login) or `-U user -P pass` for SQL auth.',
     versionCmd: "az version -o tsv 2>/dev/null | cut -f1 | sed -n 1p"
   },
   doctl: {
@@ -46145,11 +46277,12 @@ var tool_catalog_default = {
     statusCmd: `outlook-api whoami 2>/dev/null | sed -n 's/.*"userPrincipalName"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m10 .`,
     logoutCmd: "outlook-api logout",
     loginCmd: "outlook-api auth --tenant common",
+    oauthBroker: true,
     credentialPaths: ["~/.config/outlook-api/config.json"],
-    description: "Outlook/Hotmail/M365 mail and calendar over Microsoft Graph (on-prem Exchange → ews-api). `auth` = device-code flow; `--tenant consumers` (default, personal) | `organizations`. list/search/read/attachments are read-only; `draft`/`reply` stay in Drafts unless --send; `send <draftId>`. Calendar: `events [--days N|--start|--end] [--tz Europe/Budapest]` (calendarView, recurrences expanded), `event <id>`, `calendars`, `freebusy <emails…>`; writes: `event-create`, `event-respond <id> accept|tentativelyAccept|decline`, `event-delete`. `get <path>` = raw Graph GET. JSON out.",
+    description: "Outlook/Hotmail/M365 mail and calendar over Microsoft Graph (on-prem Exchange → ews-api). `auth --tenant common` = browser login, redirect to localhost:8644 (`--device` = device code for headless hosts). list/search/read/attachments are read-only; `draft`/`reply` stay in Drafts unless --send; `send <draftId>`. Calendar: `events [--days N|--start|--end] [--tz Europe/Budapest]` (calendarView, recurrences expanded), `event <id>`, `calendars`, `freebusy <emails…>`; writes: `event-create`, `event-respond <id> accept|tentativelyAccept|decline`, `event-delete`. `get <path>` = raw Graph GET. JSON out.",
     versionCmd: "outlook-api --version 2>/dev/null | sed -n 1p",
-    deviceCodePattern: "enter the code ([A-Z0-9]+)",
-    oauthUrlPattern: "(https://(?:www\\.microsoft\\.com/link|login\\.microsoft\\.com/device))",
+    oauthUrlPattern: "(https://login\\.microsoftonline\\.com/\\S+/oauth2/v2\\.0/authorize\\S+)",
+    oauthCallbackPort: 8644,
     canStreamLogin: true
   },
   "outlook-calendar": {
@@ -46164,11 +46297,12 @@ var tool_catalog_default = {
     statusCmd: `outlook-api whoami 2>/dev/null | sed -n 's/.*"userPrincipalName"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m10 .`,
     logoutCmd: "outlook-api logout",
     loginCmd: "outlook-api auth --tenant common",
+    oauthBroker: true,
     credentialPaths: ["~/.config/outlook-api/config.json"],
     description: "Outlook/M365 calendar via `outlook-api`: `events [--days N|--start|--end] [--tz Europe/Budapest]` (calendarView, recurrences expanded), `event <id>`, `calendars`, `freebusy <emails…>` (getSchedule; work/school accounts only); writes: `event-create --subject --start --end [--tz] [--attendee …] [--online]`, `event-respond <id> accept|tentativelyAccept|decline`, `event-delete <id>`. Same sign-in as Outlook mail (`auth`, device code).",
     versionCmd: "outlook-api --version 2>/dev/null | sed -n 1p",
-    deviceCodePattern: "enter the code ([A-Z0-9]+)",
-    oauthUrlPattern: "(https://(?:www\\.microsoft\\.com/link|login\\.microsoft\\.com/device))",
+    oauthUrlPattern: "(https://login\\.microsoftonline\\.com/\\S+/oauth2/v2\\.0/authorize\\S+)",
+    oauthCallbackPort: 8644,
     canStreamLogin: true
   },
   neonctl: {
@@ -46196,11 +46330,9 @@ var tool_catalog_default = {
     summary: "Work with Microsoft 365 mail, Teams, SharePoint and users.",
     statusCmd: `m365 status --output text 2>/dev/null | tr -d '"' | grep -vi 'logged out' | grep -m1 .`,
     logoutCmd: "m365 logout",
-    loginCmd: "m365 login --authType deviceCode --appId 14d82eec-204b-4c2f-b7e8-296a70dab67e",
-    deviceCodePattern: "enter the code ([A-Z0-9]{8,}) to authenticate",
-    oauthUrlPattern: "open the page (https://\\S+) and enter",
+    loginCmd: "m365 login --authType browser --appId 14d82eec-204b-4c2f-b7e8-296a70dab67e",
     credentialPaths: ["~/.cli-m365-msal.json", "~/.cli-m365-connection.json"],
-    description: "Microsoft 365 from the shell: `m365 outlook message list`, `m365 teams team list`, `m365 spo site list`. Device-code login; add `--output json` for parseable output.",
+    description: "Microsoft 365 from the shell: `m365 outlook message list`, `m365 teams team list`, `m365 spo site list`. Browser login with a localhost callback (device code is blocked by Entra Security Defaults); add `--output json` for parseable output.",
     versionCmd: `m365 version 2>/dev/null | tr -d '"' | sed -n 1p`
   },
   gws: {
@@ -46374,7 +46506,7 @@ var tool_catalog_default = {
     installer: "pip",
     label: "Blender",
     summary: "Model, texture and render 3D scenes in a running Blender.",
-    statusCmd: `command -v blender-mcp >/dev/null && mcporter call blender.get_addon_status --output json 2>/dev/null | grep -o '"blender_version": "[^"]*"' | grep -m1 .`,
+    statusCmd: "command -v blender-mcp >/dev/null && mcporter call blender.get_addon_status --output json 2>/dev/null | grep -o 'blender_version[^,}]*' | grep -m1 .",
     loginNoBrowser: true,
     loginTerminalHint: "Needs Blender (blender.org) open on this host: in Blender, Edit → Preferences → Add-ons, enable `Blender MCP`, then press N in the 3D view → BlenderMCP tab → Connect / Start MCP server. Then press Connect here.",
     loginCmd: `blender-mcp install-addon >/dev/null 2>&1; command -v mcporter >/dev/null 2>&1 || npm install -g --prefix "$HOME/.local" mcporter; mcporter config add blender --command blender-mcp --env BLENDER_MCP_DISABLE_TELEMETRY=1 --description 'Blender 3D via ahujasid/blender-mcp addon' --scope home`,
@@ -50193,7 +50325,56 @@ var PUBLIC_EMAIL_DOMAINS = new Set([
   "gmx.com",
   "gmx.net",
   "mail.com",
-  "zoho.com"
+  "zoho.com",
+  "aol.com",
+  "msn.com",
+  "yahoo.co.uk",
+  "yahoo.de",
+  "yahoo.fr",
+  "yahoo.co.jp",
+  "ymail.com",
+  "pm.me",
+  "tutanota.com",
+  "tuta.io",
+  "gmx.de",
+  "gmx.at",
+  "web.de",
+  "t-online.de",
+  "freenet.de",
+  "orange.fr",
+  "free.fr",
+  "laposte.net",
+  "libero.it",
+  "virgilio.it",
+  "freemail.hu",
+  "citromail.hu",
+  "indamail.hu",
+  "vipmail.hu",
+  "t-email.hu",
+  "seznam.cz",
+  "centrum.cz",
+  "wp.pl",
+  "o2.pl",
+  "onet.pl",
+  "interia.pl",
+  "yandex.ru",
+  "yandex.com",
+  "mail.ru",
+  "rambler.ru",
+  "bk.ru",
+  "inbox.ru",
+  "list.ru",
+  "ukr.net",
+  "qq.com",
+  "foxmail.com",
+  "163.com",
+  "126.com",
+  "yeah.net",
+  "sina.com",
+  "naver.com",
+  "daum.net",
+  "hanmail.net",
+  "rediffmail.com"
 ]);
 // ../packages/shared-fbe/src/toolInstallCommand.ts
 var NPM_HOME = '"${TFA_NPM_HOME:-$HOME}"';
@@ -50210,38 +50391,52 @@ var model_promos_default = {
     "`family` is a regex on the normalized model id (last path segment, lowercase, dots→dashes, '(level)' suffix stripped);",
     "'(-\\\\d+)*' trailing point versions are appended by the consumer, so 'claude-opus-5' covers claude-opus-5.2 too.",
     "`provider` matches the provider name instead (TODO GO / Ollama Cloud, subscription-wide).",
-    "`rate` = fraction off. `boostable:false` = the Ultra/Team promo boost (remaining price × boost_remaining_price_factor: +50% usage, 85%→90%, 80%→86.6%) is NOT applied.",
+    "`rate` = fraction off. `boostable:false` = the Ultra/Team promo boost (remaining price × boost_remaining_price_factor ≈ 2/3: +50% usage, 70%→80%, 55%→70%; 0.6666 not 0.667 so the floored display hits 80/70) is NOT applied.",
     "`ends` is the last inclusive day (UTC).",
-    "Overlapping rows are fine: the consumer takes the highest live rate. Launch pricing = 85% until 2026-09-13 (Anthropic quota halves after), then 80% until 2026-11-21. Astra is never boosted.",
+    "Overlapping rows are fine: the consumer takes the highest live rate. Launch pricing = 85% until 2026-09-13, 80% until 2026-10-28; from 2026-10-29 to 2026-11-21: OpenAI 70%, Anthropic 55%, Astra 50%, Fable 30%; TODO GO/Ollama no promo (ended 2026-10-28). Astra/Fable/subscription providers are never boosted.",
     "A change here goes live with a backend + frontend deploy; agent/src/assets/model_promos.json is only the agent's offline fallback, refresh it occasionally."
   ],
-  boost_remaining_price_factor: 0.667,
+  boost_remaining_price_factor: 0.6666,
   promos: [
-    { family: "claude-fable-5", rate: 0.5, starts: "2026-06-29", ends: "2026-11-21", boostable: false },
+    { family: "claude-fable-5", rate: 0.5, starts: "2026-06-29", ends: "2026-10-28", boostable: false },
     { family: "claude-opus-5", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-opus-5", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-opus-5", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "claude-opus-4-[78]", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-opus-4-[78]", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-opus-4-[78]", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "claude-sonnet-5", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-sonnet-5", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-sonnet-5", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "claude-haiku-4-5", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-haiku-4-5", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-haiku-4-5", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "claude-haiku-5", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-haiku-5", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-haiku-5", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "gpt-5-5(-pro)?", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "gpt-5-5(-pro)?", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "gpt-5-5(-pro)?", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "gpt-5-6-sol", rate: 0.85, starts: "2026-08-26", ends: "2026-09-13" },
-    { family: "gpt-5-6-sol", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
-    { family: "gpt-6-sol", rate: 0.8, starts: "2026-09-22", ends: "2026-11-21" },
-    { family: "gpt-6-1-sol", rate: 0.8, starts: "2026-09-29", ends: "2026-11-21" },
-    { family: "gpt-6-luna", rate: 0.8, starts: "2026-09-22", ends: "2026-11-21" },
+    { family: "gpt-5-6-sol", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
+    { family: "gpt-6-sol", rate: 0.8, starts: "2026-09-22", ends: "2026-10-28" },
+    { family: "gpt-6-1-sol", rate: 0.8, starts: "2026-09-29", ends: "2026-10-28" },
+    { family: "gpt-6-luna", rate: 0.8, starts: "2026-09-22", ends: "2026-10-28" },
     { family: "gpt-6-astra", rate: 0.85, starts: "2026-09-05", ends: "2026-09-13", boostable: false },
-    { family: "gpt-6-astra", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21", boostable: false },
+    { family: "gpt-6-astra", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28", boostable: false },
     { family: "gpt-5-6-terra", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "gpt-5-6-terra", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "gpt-5-6-terra", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "gpt-5-6-luna", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "gpt-5-6-luna", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
-    { provider: "opencode[_ -]?go|ollama[_ -]?cloud", rate: 0.5, starts: "2026-06-29", ends: "2026-11-21", boostable: false }
+    { family: "gpt-5-6-luna", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
+    { provider: "opencode[_ -]?go|ollama[_ -]?cloud", rate: 0.5, starts: "2026-06-29", ends: "2026-10-28", boostable: false },
+    { family: "claude-opus-5", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-opus-4-[78]", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-sonnet-5", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-haiku-4-5", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-haiku-5", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-fable-5", rate: 0.3, starts: "2026-10-29", ends: "2026-11-21", boostable: false },
+    { family: "gpt-5-5(-pro)?", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-5-6-sol", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-6-sol", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-6-1-sol", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-6-luna", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-5-6-terra", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-5-6-luna", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-6-astra", rate: 0.5, starts: "2026-10-29", ends: "2026-11-21", boostable: false }
   ]
 };
 
@@ -50251,11 +50446,11 @@ var MODEL_PROMOS = model_promos_default.promos;
 // ../packages/shared-fbe/src/realtime/topics.ts
 var TOPICS = {
   ["todo:new" /* NEW_TODO */]: {
-    channel: (p) => SERVER_TO_FRONTENDS.project.new_todo(p.projectId, p.privateOwnerId),
+    channel: (p) => SERVER_TO_FRONTENDS.project.new_todo(p.projectId, p.memberId),
     audience: "frontend"
   },
   ["todo:new_message" /* TODO_NEW_MESSAGE */]: {
-    channel: (p) => SERVER_TO_FRONTENDS.project.new_message(p.projectId, p.privateOwnerId),
+    channel: (p) => SERVER_TO_FRONTENDS.project.new_message(p.projectId, p.memberId),
     audience: "frontend"
   },
   ["todo:new_message_created" /* TODO_NEW_MESSAGE_CREATED */]: {
@@ -50403,7 +50598,7 @@ var TOPICS = {
     audience: "frontend"
   },
   ["project:status" /* PROJECT_STATUS */]: {
-    channel: (p) => SERVER_TO_FRONTENDS.project.status(p.projectId, p.privateOwnerId),
+    channel: (p) => SERVER_TO_FRONTENDS.project.status(p.projectId, p.memberId),
     audience: "frontend"
   },
   ["todo:status" /* TODO_STATUS */]: {
@@ -50445,7 +50640,7 @@ var package_default = {
     type: "git",
     url: "git+https://github.com/todoforai/cli.git"
   },
-  version: "0.1.72",
+  version: "0.1.74",
   type: "module",
   bin: {
     "todoforai-cli": "bin/todoforai-cli.js",
@@ -50515,6 +50710,7 @@ Examples:
   tfa-cli open <url> [todo-id]        # Live url preview in the chat
   tfa-cli connect <key>… [--reason "why"]  # Sign-in card for connectors on this machine (several keys = one choice)
   tfa-cli recommend --template <id> | --title "…" [--info] [--source "label|ref|url"]  # ✧ proposal card, or an ⓘ info row
+  tfa-cli ignore --title "…" [--source "label|ref|url|from"] [--note "why"]  # Log an inbound item as noise (folded under the Feed card)
   tfa-cli inbox [needs-you|messages|activity] [--unread]  # Read the notification feed (the bell)
   tfa-cli inbox seen [tab]              # Mark notifications read
   tfa-cli notify [--to <email>] "Title" "message" [--href /t/<id>] [--url <link>]  # Note to your own user, or --to a project member (Messages tab + phone push)
@@ -50599,7 +50795,7 @@ var STATUS_HELP = {
   ["READY_CHECKED" /* READY_CHECKED */]: "AI finished and the user reviewed it",
   ["DONE" /* DONE */]: "Completed and finalized",
   ["REVIEW_REQUESTED" /* REVIEW_REQUESTED */]: "Asks the user to review",
-  ["POSTPONED" /* POSTPONED */]: "Put off for later",
+  ["CANCELLED" /* CANCELLED */]: "Stop a running TODO",
   ["ARCHIVED" /* ARCHIVED */]: "Archived (hidden from active list)",
   ["DELETED" /* DELETED */]: "Marked for deletion"
 };
@@ -50612,7 +50808,7 @@ ${Object.entries(STATUS_HELP).map(([s, d]) => `  ${s.padEnd(18)}${d}`).join(`
 `)}
 
 All valid statuses:
-  ${Object.values(TodoStatus).join(", ")}
+  ${Object.values(TodoStatus).filter((s) => s !== "POSTPONED" /* POSTPONED */).join(", ")}
 `);
 }
 var WORD_FLAGS = {
@@ -53478,8 +53674,9 @@ Examples:
   tfa-cli agent update <agent> sysmsg="You are a terse video editor."
   tfa-cli agent create name=Reviewer model=claude sysmsg="Review diffs only."
   tfa-cli agent update <agent> judgeSysmsg="Ask before sending email."   (approval checker; ""=off, null=inherit global)
+  tfa-cli agent update <agent> permissions='{"allow":[…],"ask":[…],"deny":[…]}'   (replaces all three lists; read them with get --json first)
 
-From an agent shell (dst_ token) permissions, edgesMcpConfigs, devicesConfig and delete are refused by the backend.
+From an agent shell (dst_ token) edgesMcpConfigs, devicesConfig, toolProfiles and delete are refused by the backend.
 `);
 }
 var FIELD_ALIASES = {
@@ -53686,7 +53883,7 @@ var STATUS_HELP2 = {
   ["READY_CHECKED" /* READY_CHECKED */]: "AI finished and the user reviewed it",
   ["DONE" /* DONE */]: "Completed and finalized",
   ["REVIEW_REQUESTED" /* REVIEW_REQUESTED */]: "Asks the user to review",
-  ["POSTPONED" /* POSTPONED */]: "Put off for later",
+  ["CANCELLED" /* CANCELLED */]: "Stop a running TODO",
   ["ARCHIVED" /* ARCHIVED */]: "Archived (hidden from active list)",
   ["DELETED" /* DELETED */]: "Marked for deletion"
 };
@@ -53903,7 +54100,7 @@ tfa-cli project — edit the current project
 Usage:
   tfa-cli project list                             Projects you can access (* = default)
   tfa-cli project members                          Who is on it (notify --to <email> reaches them)
-  tfa-cli project set <field=value>…               name=… description=…
+  tfa-cli project set <field=value>…               name=… description=… logo=<https image url|"">
                                                     (isPublic refused from an agent shell)
   tfa-cli project default                          Make it the project you land on at /
   tfa-cli project agent <agent>                    Default agent for new todos in this project
@@ -53913,11 +54110,15 @@ Usage:
   tfa-cli project groups intake <slug> [on|off|regenerate] [field=value]…
                                                    Public intake: autoStart maxSubmissions postIpLimit placeholder agentSettingsId
   tfa-cli project groups reorder <slug>…           Set wall order
-  tfa-cli project surfaces                         List the board's card surfaces (live refs shown as cards)
-  tfa-cli project surfaces set <id> ref=<ref> [title=…] [group=<slug>] [order=N]
+  tfa-cli project surfaces                         List the board's cards you can see: id, title, ref|note, group, color
+  tfa-cli project surfaces set <id> ref=<ref> [title=…] [group=<slug>] [color=#hex] [order=N]
                                                    Show a ref on the board: a todo id, <todoId>:<alias>
                                                    (shown artifact) or an http(s) url. group= puts it
                                                    inside that group's card; group="" makes it standalone.
+  tfa-cli project surfaces set <id> body="…" [group=<slug>] [color=#hex]
+                                                   A note (markdown text). Seen by
+                                                   whoever sees where it sits: standalone = the project,
+                                                   group = its members, your My Private group = only you.
   tfa-cli project surfaces rm <id>                 Take it off the board
 
 Examples:
@@ -53925,6 +54126,7 @@ Examples:
   tfa-cli project groups set marketing name=Marketing description="Top-of-funnel work"
   tfa-cli project groups reorder marketing sales ops
   tfa-cli project surfaces set weekly-kpis ref=$TODOFORAI_TODO_ID:kpi title="Weekly KPIs" group=marketing
+  tfa-cli project surfaces set sales-rules body="Quote prices in EUR, net of VAT." group=sales
 `);
 }
 var TODO_ALIASES = {
@@ -54113,21 +54315,23 @@ async function projectCommand(api, positionals, args, projectId) {
         console.log(JSON.stringify(surfaces, null, 2));
         return;
       }
+      const titleOf = (s) => s.title || (s.body ?? "").split(`
+`).find((l) => l.trim())?.trim().slice(0, 60) || "";
       for (const s of surfaces)
-        process.stderr.write(`${s.id}  ${s.ref}  ${DIM}${[s.title, s.group && `in ${s.group}`].filter(Boolean).join("  ")}${RESET}
+        process.stderr.write(`${s.id}  ${titleOf(s)}  ${DIM}${[s.ref ?? "note", s.group && `in ${s.group}`, s.color].filter(Boolean).join("  ")}${RESET}
 `);
       return;
     }
     if (verb === "set") {
       const [id, ...fields] = sargs;
       if (!id)
-        fail("Usage: tfa-cli project surfaces set <id> ref=<ref> [title=…] [group=<slug>] [order=N]");
+        fail("Usage: tfa-cli project surfaces set <id> [ref=<ref>|body=…] [title=…] [group=<slug>] [color=#hex] [order=N]");
       const surface = await api.upsertProjectSurface(projectId, id, parseAssignments2(fields));
       if (args.json) {
         console.log(JSON.stringify(surface, null, 2));
         return;
       }
-      process.stderr.write(`${GREEN}✅ surface ${id} shows ${surface.ref}${surface.group ? ` in ${surface.group}` : ""}${RESET}
+      process.stderr.write(`${GREEN}✅ surface ${id} ${surface.ref ? `shows ${surface.ref}` : "is a note"}${surface.group ? ` in ${surface.group}` : ""}${RESET}
 `);
       return;
     }
@@ -54499,40 +54703,26 @@ var VALID_STATUS = new Set(Object.values(TodoStatus));
 var isOpen = (s) => !CLOSED.has(s);
 function printListTodosHelp() {
   process.stderr.write(`
-todoforai-cli list — list YOUR todos in a project (recent first)
+todoforai-cli list [flags] — todos of a project, newest first (lastActivityAt)
 
-Default: only todos you opened or wrote in. --project-wide shows everyone's.
+Scope:  yours only (todos you opened or wrote in) → --contributor all = every member's
+        open only (hides DONE, ARCHIVED, DELETED)  → -A / --all = closed too
+Output: STATUS  YYYY-MM-DD HH:MM  <todoId>  <first line of content>
+        --json → { items: [{ id, status, content, lastActivityAt, createdAt, contributorIds, … }], nextCursor }
 
-Usage:
-  todoforai-cli list [flags]
+Filters (all combinable):
+  -s, --status <S,S2>    exact statuses, union (closed ones included); OPEN = any non-closed
+      --search <text>    content/status substring (backend)
+      --contributor <u>  id or email, comma = any; "all" = no filter (default: you)
+      --since/--until <t> window on the sort field: epoch ms | YYYY-MM-DD | ISO | 12h / 3d (ago)
+      --sort created     by createdAt instead of activity
+      --project <id>     other project (default: the current one)
 
-Flags:
-      --project-wide       Every member's todos, not just yours
-  -n, --limit <n>          Max rows to show (default: 30)
-      --cursor <n>         Fetch todos older than this cursor (sort field, epoch ms)
-      --since <t>          Only todos with sort field >= t (inclusive)
-      --until <t>          Only todos with sort field < t (exclusive)
-                           t = epoch ms | YYYY-MM-DD (local midnight) | ISO datetime | 12h / 3d ago
-      --sort <key>         activity (lastActivityAt, default) | created (createdAt)
-      --contributor <u>    Only todos a member opened/wrote in (id or email; comma = any; replaces the "mine" default)
-      --page-size <n>      Backend page size per request (default: min(limit, 400), max: 400)
-      --search <text>      Search content/status on the backend
-  -s, --status <S[,S2]>    Filter by status (comma-separated, union).
-  -A, --all                Include closed (DONE, ARCHIVED, DELETED)
-      --project <id>       Project ID (default: current default project)
-      --json               Output { items, nextCursor } as JSON
-  -h, --help               Show this help
+Paging: -n <limit> (default 30). "Next cursor: N" on stderr / nextCursor in JSON → re-run with --cursor N.
 
 Examples:
-  todoforai-cli list                         # 30 most recent open todos of yours
-  todoforai-cli list --project-wide          # … of everyone in the project
-  todoforai-cli list -n 50                   # last 50 open
-  todoforai-cli list --cursor 1719234567890  # next page
-  todoforai-cli list --all                   # include DONE
   todoforai-cli list -s RUNNING,REVIEW_REQUESTED
-  todoforai-cli list -A --since 2026-10-11 --until 2026-10-12   # touched that day
-  todoforai-cli list -A --sort created --since 7d --contributor a@b.com
-  todoforai-cli list --search bug --json | jq '.items[].id'
+  todoforai-cli list --contributor all -A --since 7d --json | jq -r '.items[] | [.id, .status] | @tsv'
 `);
 }
 function positiveInt(value, name) {
@@ -54629,7 +54819,6 @@ async function listTodosCommand(api, defaultProjectId, argv, resolveUserId) {
       until: { type: "string" },
       sort: { type: "string" },
       contributor: { type: "string" },
-      "project-wide": { type: "boolean", default: false },
       status: { type: "string", short: "s" },
       all: { type: "boolean", short: "A", default: false },
       project: { type: "string" },
@@ -54662,9 +54851,11 @@ async function listTodosCommand(api, defaultProjectId, argv, resolveUserId) {
   if (until !== undefined)
     cursor = cursor === undefined ? until : Math.min(cursor, until);
   const search = values.search ? String(values.search) : undefined;
-  let contributorIds = values.contributor ? await resolveContributors(api, projectId, String(values.contributor)) : undefined;
+  const contributorArg = values.contributor === undefined ? undefined : String(values.contributor);
+  const everyone = contributorArg?.trim().toLowerCase() === "all";
+  let contributorIds = contributorArg && !everyone ? await resolveContributors(api, projectId, contributorArg) : undefined;
   let mineOnly = false;
-  if (!contributorIds && !values["project-wide"] && resolveUserId) {
+  if (!contributorIds && !everyone && resolveUserId) {
     const me = await resolveUserId();
     if (me) {
       contributorIds = [me];
@@ -54726,7 +54917,7 @@ async function listTodosCommand(api, defaultProjectId, argv, resolveUserId) {
 `);
     return;
   }
-  const scopeHint = mineOnly ? " of yours (--project-wide for everyone's)" : "";
+  const scopeHint = mineOnly ? " of yours (--contributor all for everyone's)" : "";
   if (!visible.length) {
     process.stderr.write(`${DIM}(no todos${scopeHint})${RESET}
 `);
@@ -80418,6 +80609,28 @@ async function main() {
       console.log(res.ref);
     return;
   }
+  if (positionals[0] === "ignore") {
+    const title = args.title?.trim();
+    if (!title) {
+      process.stderr.write(`${RED3}Usage: tfa-cli ignore --title "..." [--source "label|ref|url|from"] [--note "why"] [--project <id>]${RESET2}
+`);
+      process.exit(2);
+    }
+    const source = args.source ? (() => {
+      const [label, ref, url2, from] = String(args.source).split("|");
+      return label && ref ? { label, ref, ...url2 ? { url: url2 } : {}, ...from ? { from } : {} } : undefined;
+    })() : undefined;
+    const projectId2 = args.project || getEnv("PROJECT_ID") || cfgScope.data.default_project_id;
+    if (!projectId2) {
+      process.stderr.write(`${RED3}No project found \u2014 pass --project <id>${RESET2}
+`);
+      process.exit(2);
+    }
+    await api2.feedIgnore({ projectId: projectId2, title, ...source ? { source } : {}, ...args.note ? { why: args.note } : {} });
+    process.stderr.write(`${DIM2}ignored: ${title}${RESET2}
+`);
+    return;
+  }
   if (positionals[0] === "recommend") {
     const templateId = args.template || positionals[1];
     const inlineTitle = !templateId && args.title?.trim();
@@ -80457,7 +80670,15 @@ async function main() {
     }
     const rec = await api2.recommend({
       projectId: projectId2,
-      ...templateId ? { specId: templateId } : { template: { name: inlineTitle, body: args.note || inlineTitle } },
+      ...templateId ? { specId: templateId } : { template: {
+        name: inlineTitle,
+        description: args.note || (source ? `From ${source.label}` : inlineTitle),
+        body: `Handle this item: ${inlineTitle}${args.note ? `
+
+${args.note}` : ""}${source?.url ? `
+
+Original: ${source.url}` : ""}`
+      } },
       ...args.info ? { todoKind: "info" } : {},
       ...source ? { source } : {},
       ...args.title ? { title: args.title } : {},

package/package.json

@@ -7,7 +7,7 @@
     "type": "git",
     "url": "git+https://github.com/todoforai/cli.git"
   },
-  "version": "0.1.72",
+  "version": "0.1.74",
   "type": "module",
   "bin": {
     "todoforai-cli": "bin/todoforai-cli.js",