@todoforai/cli 0.1.73 → 0.1.74

package/dist/todoforai-cli.js

@@ -43767,14 +43767,15 @@ var mimetypes_default = {
     to_jpeg_90: { toMime: "image/jpeg", toExt: "jpg", quality: 0.9 }
   },
   types: {
-    image: { icon: "mdi:file-image", color: "yellow", prefixRule: "image/", needsObjectUrl: true },
-    audio: { icon: "mdi:file-music", color: "grey", prefixRule: "audio/", needsObjectUrl: true },
-    video: { icon: "mdi:file-video", color: "yellow", prefixRule: "video/", needsObjectUrl: true },
+    image: { icon: "vscode-icons:file-type-image", color: "green", prefixRule: "image/", needsObjectUrl: true },
+    audio: { icon: "mdi:file-music", color: "blue", prefixRule: "audio/", needsObjectUrl: true },
+    video: { icon: "vscode-icons:file-type-video", color: "red", prefixRule: "video/", needsObjectUrl: true },
     pdf: { icon: "vscode-icons:file-type-pdf2", color: "red", needsObjectUrl: true },
     document: { icon: "vscode-icons:file-type-word", color: "lightblue" },
     spreadsheet: { icon: "vscode-icons:file-type-excel", color: "green" },
-    text: { icon: "mdi:file", color: "white", prefixRule: "text/" },
-    archive: { icon: "mdi:folder-zip", color: "purple" },
+    presentation: { icon: "vscode-icons:file-type-powerpoint", color: "red" },
+    text: { icon: "vscode-icons:file-type-text", color: "white", prefixRule: "text/" },
+    archive: { icon: "vscode-icons:file-type-zip", color: "yellow" },
     unknown: { icon: "mdi:file", color: "grey" },
     mcp_text: { icon: "mdi:robot", color: "purple" },
     mcp_image: { icon: "mdi:robot", color: "purple", needsObjectUrl: true },
@@ -43825,8 +43826,8 @@ var mimetypes_default = {
     pdf: { mime: "application/pdf", type: "pdf" },
     doc: { mime: "application/msword", type: "document" },
     docx: { mime: "application/vnd.openxmlformats-officedocument.wordprocessingml.document", type: "document", tags: ["docx"] },
-    ppt: { mime: "application/vnd.ms-powerpoint", type: "document" },
-    pptx: { mime: "application/vnd.openxmlformats-officedocument.presentationml.presentation", type: "document", tags: ["pptx"] },
+    ppt: { mime: "application/vnd.ms-powerpoint", type: "presentation" },
+    pptx: { mime: "application/vnd.openxmlformats-officedocument.presentationml.presentation", type: "presentation", tags: ["pptx"] },
     xls: { mime: "application/vnd.ms-excel", type: "spreadsheet", tags: ["xls"] },
     xlsx: { mime: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet", type: "spreadsheet", tags: ["xlsx"] },
     zip: { mime: "application/zip", type: "archive" },
@@ -44074,7 +44075,7 @@ var FILE_TOOL_TYPES = new Set([
   "modify_file" /* ModifyFile */
 ]);
 // ../packages/shared-fbe/src/channels.ts
-var privateSuffix = (privateOwnerId) => privateOwnerId ? `:private:${privateOwnerId}` : "";
+var privateSuffix = (userId) => userId ? `:private:${userId}` : "";
 var SERVER_TO_FRONTENDS = {
   task: {
     actionUpdate: (userId) => `${"task_action:update" /* TASK_ACTION_UPDATE */}:${userId}`
@@ -44122,9 +44123,9 @@ var SERVER_TO_FRONTENDS = {
     writeFileResult: (edgeId) => `${"edge:write_file_response" /* EDGE_WRITE_FILE_RESPONSE */}:${edgeId}`
   },
   project: {
-    new_message: (projectId, privateOwnerId) => `${"task:new_update" /* TASK_NEW */}:${projectId}${privateSuffix(privateOwnerId)}`,
-    new_todo: (projectId, privateOwnerId) => `${"todo:new" /* NEW_TODO */}:${projectId}${privateSuffix(privateOwnerId)}`,
-    status: (projectId, privateOwnerId) => `${"project:status" /* PROJECT_STATUS */}:${projectId}${privateSuffix(privateOwnerId)}`
+    new_message: (projectId, memberId) => `${"task:new_update" /* TASK_NEW */}:${projectId}${privateSuffix(memberId)}`,
+    new_todo: (projectId, memberId) => `${"todo:new" /* NEW_TODO */}:${projectId}${privateSuffix(memberId)}`,
+    status: (projectId, memberId) => `${"project:status" /* PROJECT_STATUS */}:${projectId}${privateSuffix(memberId)}`
   },
   todo: {
     msgStart: (todoId) => `${"todo:msg_start" /* TODO_MSG_START */}:${todoId}`,
@@ -44710,6 +44711,137 @@ var OUTPUT_POLICIES = {
   full: { firstLimit: Infinity, lastLimit: 0, hardCap: RUN_OUTPUT_CAP, lineLimit: MAX_LINE_LEN },
   raw: { firstLimit: Infinity, lastLimit: 0, hardCap: Infinity, lineLimit: Infinity }
 };
+// ../packages/shared-fbe/src/agentRoles.ts
+var SAFE = "Prepare drafts and lists; never send, publish, pay or delete anything without my OK.";
+var AGENT_ROLES = [
+  {
+    key: "assistant",
+    name: "Assistant",
+    icon: "inbox",
+    color: "#6366f1",
+    tagline: "Inbox, calendar, meetings",
+    outcomes: ["Inbox sorted, replies drafted", "A brief before every meeting", "Your week planned by Monday"],
+    tools: ["zele", "zele-calendar", "outlook-api"],
+    systemMessage: `You are my executive assistant. Keep my inbox and calendar under control. ${SAFE}
+
+How you work:
+1. Read new emails and sort them: needs me / FYI / ignore.
+2. Draft replies for the ones that need me, in my voice.
+3. For meetings in the next 2 days, write a short brief from the related emails.
+4. Show me the drafts before anything is sent.`
+  },
+  {
+    key: "bookkeeper",
+    name: "Bookkeeping assistant",
+    icon: "receipt",
+    color: "#10b981",
+    tagline: "Invoices, receipts, accountant",
+    outcomes: ["Invoices from the inbox in one table", "Unpaid invoices reminded", "Month-end email to the accountant"],
+    tools: ["zele", "stripe", "gdrive"],
+    systemMessage: `You are my bookkeeping assistant. Keep invoices and receipts complete and organised. ${SAFE}
+
+How you work:
+1. Find invoices and receipts from the last month (inbox, Stripe, Drive).
+2. Put them in a table: date, vendor, amount, VAT, attachment.
+3. List unpaid invoices and draft polite reminders.
+4. Draft the email to my accountant with the table; ask me before sending.`
+  },
+  {
+    key: "sales",
+    name: "Sales rep",
+    icon: "target",
+    color: "#f97316",
+    tagline: "Leads, outreach, follow-ups",
+    outcomes: ["Lead replies drafted in minutes", "Personal outreach at scale", "CRM always up to date"],
+    tools: ["hubspot", "linkedin-api", "zele"],
+    systemMessage: `You are my sales development rep. Research leads and write short, personal outreach. ${SAFE}
+
+How you work:
+1. Research each lead: company, role, a relevant recent fact.
+2. Draft a short personal first message or reply.
+3. Update the CRM with the lead and a follow-up date.
+4. Ask me before sending any message.`
+  },
+  {
+    key: "account-manager",
+    name: "Account manager",
+    icon: "briefcase",
+    color: "#f59e0b",
+    tagline: "Client updates, renewals",
+    outcomes: ["Weekly status per client", "Recap after every call", "Silent clients flagged"],
+    tools: ["zele", "slack-cli", "zele-calendar"],
+    systemMessage: `You are my account manager. Keep every client relationship warm and on track. ${SAFE}
+
+How you work:
+1. Find clients who have not replied to my last message for 5+ days.
+2. Draft a short, friendly follow-up for each.
+3. After calls, write a recap with decisions and next steps.
+4. Ask me before sending.`
+  },
+  {
+    key: "social",
+    name: "Social media manager",
+    icon: "megaphone",
+    color: "#ec4899",
+    tagline: "Weekly posts in your voice",
+    outcomes: ["Posts per channel in your style", "A full weekly calendar", "Reply drafts for comments"],
+    tools: ["linkedin-api", "xurl", "facebook-pages-api"],
+    systemMessage: `You are my social media manager. Write in my brand voice for each channel. ${SAFE}
+
+How you work:
+1. Read my brand page and the voice for each channel.
+2. Draft 3 posts for this week, one idea each.
+3. Draft replies to new comments worth answering.
+4. Ask me before publishing anything.`
+  },
+  {
+    key: "ads",
+    name: "Ads manager",
+    icon: "trending-up",
+    color: "#3b82f6",
+    tagline: "Meta and Google ads",
+    outcomes: ["Wasted spend flagged daily", "Budget moved to the best ROAS", "Creative fatigue caught early"],
+    tools: ["meta-ads", "google-ads"],
+    systemMessage: `You are my ads manager. Watch performance and propose concrete changes. ${SAFE}
+
+How you work:
+1. Pull yesterday's results per campaign and ad.
+2. Flag the worst cost per result and tired creatives.
+3. Propose budget moves with the numbers behind them.
+4. Ask me before changing any budget or pausing anything.`
+  },
+  {
+    key: "developer",
+    name: "Developer",
+    icon: "code",
+    color: "#0ea5e9",
+    tagline: "Errors, PRs, deploys",
+    outcomes: ["New errors grouped by cause each morning", "PR reviews with fixes", "Deploys after your OK"],
+    tools: ["gh", "sentry-cli", "vercel"],
+    systemMessage: `You are my senior developer. Keep the code healthy: small, tested, reviewed changes. Never deploy or merge without my OK.
+
+How you work:
+1. Check new errors since yesterday and group them by cause.
+2. Fix the most important one on a branch, with a test.
+3. Open a pull request with a short explanation.
+4. Ask me before merging or deploying.`
+  },
+  {
+    key: "researcher",
+    name: "Market researcher",
+    icon: "search",
+    color: "#8b5cf6",
+    tagline: "Competitors, markets, trends",
+    outcomes: ["Weekly competitor watch", "Market brief before a pitch", "Brand mentions caught"],
+    tools: ["perplexity-api", "agent-browser"],
+    systemMessage: `You are my market researcher. Cite sources, separate facts from guesses, keep it short.
+
+How you work:
+1. Check what my competitors shipped or announced this week.
+2. Search for new mentions of my brand.
+3. Write a one-page brief with sources.`
+  }
+];
 // ../packages/shared-fbe/src/tool_catalog.json
 var tool_catalog_default = {
   zele: {
@@ -44798,6 +44930,22 @@ var tool_catalog_default = {
     description: "Figma REST API CLI. File commands take a file key or Figma URL. Canvas writes (frames/text/shapes) use `figma-api run` via the plugin bridge. Run `figma-api <cmd> --help` for params.",
     versionCmd: "figma-api --version 2>/dev/null | sed -n 1p"
   },
+  "slack-api": {
+    oauthBroker: true,
+    category: "communication",
+    pkg: "@todoforai/slack-api",
+    installer: "npm",
+    label: "Slack",
+    summary: "Read and answer your Slack as yourself: DMs and mentions, search, history, threads.",
+    loginCmd: "slack-api auth --token <user_token>",
+    statusCmd: `slack-api whoami 2>/dev/null | sed -n 's/.*"user"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m1 .`,
+    logoutCmd: "slack-api logout",
+    credentialPaths: [
+      "~/.config/slack-api/credentials.json"
+    ],
+    versionCmd: "slack-api --version 2>/dev/null | sed -n 1p",
+    description: "Slack Web API as the signed-in user (user token xoxp-, sees exactly what the user sees), JSON out. Sign-in: Connect (TODOforAI Slack app, user scopes) or `slack-api auth --stdin` / env SLACK_USER_TOKEN. `slack-api inbox [--days 3]` = DMs to you + @mentions, newest first, one JSON line each {id, thread, from, chat, subject, text, url, date} — a ready Feed source: `tfa-wait slack --feed --draft --repeat --forever --watch 'slack-api inbox' --every 2m --name Slack \"{{payload.text}}\"` (send-ready reply drafts in the Feed). Also `search '<slack query>'`, `history <C…|D…>`, `thread <channel> <ts>`, `conversations`, `user <U…>`, `dm <U…>`, `send <channel> <text> [--thread ts] --yes` (posts AS the user; without --yes only previews), `api <method> --param k=v` for any Web API method. search.messages is Tier 2 (~20/min); on ratelimited the error has retry_after. For Slack app development use slack-cli instead."
+  },
   "slack-cli": {
     preinstallCloud: true,
     cloudInstallCmd: "curl -fsSL https://github.com/slackapi/slack-cli/releases/download/v4.2.0/slack_cli_4.2.0_linux_amd64.tar.gz | tar -xz -C /tmp bin/slack && install -m0755 /tmp/bin/slack /usr/local/bin/slack-cli && rm -rf /tmp/bin",
@@ -45231,7 +45379,7 @@ var tool_catalog_default = {
     installer: "npm",
     label: "TODOforAI",
     summary: "Create and follow up on your TODOs, and show results in the chat.",
-    description: "Manage the user's OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli \"prompt\"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> \"text\"`). Inspect: `list [--status open]` (your own todos; `--project-wide` for every member's), `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|ARCHIVED|POSTPONED|CANCELLED|DELETED` (close, reopen, shelve, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r '.items[].id'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (permissions/MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo's readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `show ref <alias|todoId:alias>` re-posts it live at the chat bottom, `--alias <todoId>:<name>` updates another todo's artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Show viewer chrome: `--title` appears in the header; a kebab menu holds file actions, versions and sharing when available. Desktop floating previews add minimize (park in a tab), maximize/restore and close (X); inline blocks have no window controls. For authored HTML, do not duplicate the header/controls or add a rounded, bordered root card: the floating viewer owns the rounded frame. Keep content edge-to-edge; internal layout padding is fine. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user's bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify \"Title\" \"message\" [--href /t/<id>] [--url <link>: tap opens it on the phone, e.g. a Google Maps navigation link]` leaves a note in the user's Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows. Project files: `memory sync|path [--project <id>]` requires a project and checks out only projects/<id>/{memory,context} and projects/<id>/me/{memory,context}; legacy global files are read-only recovery. Voice commands use `--scope mine|project` (default mine, private within this project; project is shared).",
+    description: "Manage the user's OWN TODOforAI tasks (not code `// TODO` comments). Delegate/spin off work: `tfa-cli \"prompt\"` creates a real TODO with its own agent and chat (`-n` wait for completion, `--no-watch` fire-and-forget, `--project/--agent/--model`, `--resume <id>`, `addmessage <id> \"text\"`). Inspect: `list [--status open]` (your own todos; `--contributor all` for every member's), `--inspect <id>`. Edit any todo without opening it: `status <id> DONE|READY|CANCELLED|ARCHIVED|DELETED` (close, reopen, stop, archive, trash — `todo restore <id>` undoes a delete) and `todo set <id|-> title=… group=… star=true schedule=<unix-ms> agent=… brand=…` (own todo fields). Both take ONE id, so a loop over `list --json | jq -r '.items[].id'` is how you close, retitle, refile or archive MANY todos at once; `project set|settings|groups …` (name, settings, todo groups), `agent create|update <agent> model=… sysmsg=…` (also permissions=… and judgeSysmsg=…; MCP/device wiring and delete are refused from an agent shell). Surface results into chat: `show <file|-> [todo-id]` (renders by mimetype, private to the todo's readers; `--card <name>` via project renderer; `--alias <name>` updates in place, `show ref <alias|todoId:alias>` re-posts it live at the chat bottom, `--alias <todoId>:<name>` updates another todo's artifact; `show share <ref>` makes it public and prints the link, `show unshare <ref>` makes it private again), `open <url>` embeds a live preview. Show viewer chrome: `--title` appears in the header; a kebab menu holds file actions, versions and sharing when available. Desktop floating previews add minimize (park in a tab), maximize/restore and close (X); inline blocks have no window controls. For authored HTML, do not duplicate the header/controls or add a rounded, bordered root card: the floating viewer owns the rounded frame. Keep content edge-to-edge; internal layout padding is fine. Pick by where the output lives: read once → plain reply; interactive, this chat only → `html_snippet`; kept/revised later → `show --alias`, then `show share` only if someone outside needs a link; format the user asked for (pptx, docx…) → `show` the file. Notifications: `inbox [needs-you|messages|activity] [--unread]` reads the user's bell feed (what finished/failed/needs them while away), `inbox seen [tab]` marks it read; `notify \"Title\" \"message\" [--href /t/<id>] [--url <link>: tap opens it on the phone, e.g. a Google Maps navigation link]` leaves a note in the user's Messages tab + phone push (shown as from you); `--to <email>` reaches a member of the current project instead (`project members` lists them, 20/day) — nobody else; same text is delivered once, max 10/day to the user, use for things they must see later (not chat replies). This is the ONLY way to display a local file (image, pdf, html) in the chat: markdown `![](path.png)` with a local/relative path does NOT resolve to workspace files or attachments and 404s in the browser. `--template` for registry workflows. Project files: `memory sync|path [--project <id>]` requires a project and checks out only projects/<id>/{memory,context} and projects/<id>/me/{memory,context}; legacy global files are read-only recovery. Voice commands use `--scope mine|project` (default mine, private within this project; project is shared).",
     installCmd: "npm install -g @todoforai/cli",
     versionCmd: "tfa-cli --version 2>/dev/null | sed -n 1p",
     preinstallCloud: true,
@@ -45435,12 +45583,9 @@ var tool_catalog_default = {
     binName: "az",
     statusCmd: "az account show --query user.name -o tsv 2>/dev/null | tr -d '\\r' | grep -m1 .",
     logoutCmd: "az logout 2>&1; az account clear 2>&1",
-    loginCmd: "az login --use-device-code",
-    oauthUrlPattern: "(https://login\\.microsoft\\.com/device\\S*)",
-    deviceCodePattern: "enter the code ([A-Z0-9]+)",
-    canStreamLogin: true,
+    loginCmd: "az login --allow-no-subscriptions",
     credentialPaths: ["~/.azure"],
-    description: 'Official Azure CLI. Device-code login: prints login.microsoft.com/device + a code, then polls — no callback port. Azure SQL: `az sql server list -o json`, `az sql db list -s <server> -g <rg>`, `az sql server firewall-rule create …`; run queries with go-sqlcmd (github.com/microsoft/go-sqlcmd): `sqlcmd -S <server>.database.windows.net -d <db> --authentication-method ActiveDirectoryDefault -Q "SELECT …"` (reuses the az login) or `-U user -P pass` for SQL auth.',
+    description: 'Official Azure CLI. Browser login with a localhost callback (device code is blocked by Entra Security Defaults on new tenants); `--allow-no-subscriptions` so tenants without a subscription still sign in. Azure SQL: `az sql server list -o json`, `az sql db list -s <server> -g <rg>`, `az sql server firewall-rule create …`; run queries with go-sqlcmd (github.com/microsoft/go-sqlcmd): `sqlcmd -S <server>.database.windows.net -d <db> --authentication-method ActiveDirectoryDefault -Q "SELECT …"` (reuses the az login) or `-U user -P pass` for SQL auth.',
     versionCmd: "az version -o tsv 2>/dev/null | cut -f1 | sed -n 1p"
   },
   doctl: {
@@ -46132,11 +46277,12 @@ var tool_catalog_default = {
     statusCmd: `outlook-api whoami 2>/dev/null | sed -n 's/.*"userPrincipalName"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m10 .`,
     logoutCmd: "outlook-api logout",
     loginCmd: "outlook-api auth --tenant common",
+    oauthBroker: true,
     credentialPaths: ["~/.config/outlook-api/config.json"],
-    description: "Outlook/Hotmail/M365 mail and calendar over Microsoft Graph (on-prem Exchange → ews-api). `auth` = device-code flow; `--tenant consumers` (default, personal) | `organizations`. list/search/read/attachments are read-only; `draft`/`reply` stay in Drafts unless --send; `send <draftId>`. Calendar: `events [--days N|--start|--end] [--tz Europe/Budapest]` (calendarView, recurrences expanded), `event <id>`, `calendars`, `freebusy <emails…>`; writes: `event-create`, `event-respond <id> accept|tentativelyAccept|decline`, `event-delete`. `get <path>` = raw Graph GET. JSON out.",
+    description: "Outlook/Hotmail/M365 mail and calendar over Microsoft Graph (on-prem Exchange → ews-api). `auth --tenant common` = browser login, redirect to localhost:8644 (`--device` = device code for headless hosts). list/search/read/attachments are read-only; `draft`/`reply` stay in Drafts unless --send; `send <draftId>`. Calendar: `events [--days N|--start|--end] [--tz Europe/Budapest]` (calendarView, recurrences expanded), `event <id>`, `calendars`, `freebusy <emails…>`; writes: `event-create`, `event-respond <id> accept|tentativelyAccept|decline`, `event-delete`. `get <path>` = raw Graph GET. JSON out.",
     versionCmd: "outlook-api --version 2>/dev/null | sed -n 1p",
-    deviceCodePattern: "enter the code ([A-Z0-9]+)",
-    oauthUrlPattern: "(https://(?:www\\.microsoft\\.com/link|login\\.microsoft\\.com/device))",
+    oauthUrlPattern: "(https://login\\.microsoftonline\\.com/\\S+/oauth2/v2\\.0/authorize\\S+)",
+    oauthCallbackPort: 8644,
     canStreamLogin: true
   },
   "outlook-calendar": {
@@ -46151,11 +46297,12 @@ var tool_catalog_default = {
     statusCmd: `outlook-api whoami 2>/dev/null | sed -n 's/.*"userPrincipalName"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p' | grep -m10 .`,
     logoutCmd: "outlook-api logout",
     loginCmd: "outlook-api auth --tenant common",
+    oauthBroker: true,
     credentialPaths: ["~/.config/outlook-api/config.json"],
     description: "Outlook/M365 calendar via `outlook-api`: `events [--days N|--start|--end] [--tz Europe/Budapest]` (calendarView, recurrences expanded), `event <id>`, `calendars`, `freebusy <emails…>` (getSchedule; work/school accounts only); writes: `event-create --subject --start --end [--tz] [--attendee …] [--online]`, `event-respond <id> accept|tentativelyAccept|decline`, `event-delete <id>`. Same sign-in as Outlook mail (`auth`, device code).",
     versionCmd: "outlook-api --version 2>/dev/null | sed -n 1p",
-    deviceCodePattern: "enter the code ([A-Z0-9]+)",
-    oauthUrlPattern: "(https://(?:www\\.microsoft\\.com/link|login\\.microsoft\\.com/device))",
+    oauthUrlPattern: "(https://login\\.microsoftonline\\.com/\\S+/oauth2/v2\\.0/authorize\\S+)",
+    oauthCallbackPort: 8644,
     canStreamLogin: true
   },
   neonctl: {
@@ -46183,11 +46330,9 @@ var tool_catalog_default = {
     summary: "Work with Microsoft 365 mail, Teams, SharePoint and users.",
     statusCmd: `m365 status --output text 2>/dev/null | tr -d '"' | grep -vi 'logged out' | grep -m1 .`,
     logoutCmd: "m365 logout",
-    loginCmd: "m365 login --authType deviceCode --appId 14d82eec-204b-4c2f-b7e8-296a70dab67e",
-    deviceCodePattern: "enter the code ([A-Z0-9]{8,}) to authenticate",
-    oauthUrlPattern: "open the page (https://\\S+) and enter",
+    loginCmd: "m365 login --authType browser --appId 14d82eec-204b-4c2f-b7e8-296a70dab67e",
     credentialPaths: ["~/.cli-m365-msal.json", "~/.cli-m365-connection.json"],
-    description: "Microsoft 365 from the shell: `m365 outlook message list`, `m365 teams team list`, `m365 spo site list`. Device-code login; add `--output json` for parseable output.",
+    description: "Microsoft 365 from the shell: `m365 outlook message list`, `m365 teams team list`, `m365 spo site list`. Browser login with a localhost callback (device code is blocked by Entra Security Defaults); add `--output json` for parseable output.",
     versionCmd: `m365 version 2>/dev/null | tr -d '"' | sed -n 1p`
   },
   gws: {
@@ -46361,7 +46506,7 @@ var tool_catalog_default = {
     installer: "pip",
     label: "Blender",
     summary: "Model, texture and render 3D scenes in a running Blender.",
-    statusCmd: `command -v blender-mcp >/dev/null && mcporter call blender.get_addon_status --output json 2>/dev/null | grep -o '"blender_version": "[^"]*"' | grep -m1 .`,
+    statusCmd: "command -v blender-mcp >/dev/null && mcporter call blender.get_addon_status --output json 2>/dev/null | grep -o 'blender_version[^,}]*' | grep -m1 .",
     loginNoBrowser: true,
     loginTerminalHint: "Needs Blender (blender.org) open on this host: in Blender, Edit → Preferences → Add-ons, enable `Blender MCP`, then press N in the 3D view → BlenderMCP tab → Connect / Start MCP server. Then press Connect here.",
     loginCmd: `blender-mcp install-addon >/dev/null 2>&1; command -v mcporter >/dev/null 2>&1 || npm install -g --prefix "$HOME/.local" mcporter; mcporter config add blender --command blender-mcp --env BLENDER_MCP_DISABLE_TELEMETRY=1 --description 'Blender 3D via ahujasid/blender-mcp addon' --scope home`,
@@ -50180,7 +50325,56 @@ var PUBLIC_EMAIL_DOMAINS = new Set([
   "gmx.com",
   "gmx.net",
   "mail.com",
-  "zoho.com"
+  "zoho.com",
+  "aol.com",
+  "msn.com",
+  "yahoo.co.uk",
+  "yahoo.de",
+  "yahoo.fr",
+  "yahoo.co.jp",
+  "ymail.com",
+  "pm.me",
+  "tutanota.com",
+  "tuta.io",
+  "gmx.de",
+  "gmx.at",
+  "web.de",
+  "t-online.de",
+  "freenet.de",
+  "orange.fr",
+  "free.fr",
+  "laposte.net",
+  "libero.it",
+  "virgilio.it",
+  "freemail.hu",
+  "citromail.hu",
+  "indamail.hu",
+  "vipmail.hu",
+  "t-email.hu",
+  "seznam.cz",
+  "centrum.cz",
+  "wp.pl",
+  "o2.pl",
+  "onet.pl",
+  "interia.pl",
+  "yandex.ru",
+  "yandex.com",
+  "mail.ru",
+  "rambler.ru",
+  "bk.ru",
+  "inbox.ru",
+  "list.ru",
+  "ukr.net",
+  "qq.com",
+  "foxmail.com",
+  "163.com",
+  "126.com",
+  "yeah.net",
+  "sina.com",
+  "naver.com",
+  "daum.net",
+  "hanmail.net",
+  "rediffmail.com"
 ]);
 // ../packages/shared-fbe/src/toolInstallCommand.ts
 var NPM_HOME = '"${TFA_NPM_HOME:-$HOME}"';
@@ -50197,38 +50391,52 @@ var model_promos_default = {
     "`family` is a regex on the normalized model id (last path segment, lowercase, dots→dashes, '(level)' suffix stripped);",
     "'(-\\\\d+)*' trailing point versions are appended by the consumer, so 'claude-opus-5' covers claude-opus-5.2 too.",
     "`provider` matches the provider name instead (TODO GO / Ollama Cloud, subscription-wide).",
-    "`rate` = fraction off. `boostable:false` = the Ultra/Team promo boost (remaining price × boost_remaining_price_factor: +50% usage, 85%→90%, 80%→86.6%) is NOT applied.",
+    "`rate` = fraction off. `boostable:false` = the Ultra/Team promo boost (remaining price × boost_remaining_price_factor ≈ 2/3: +50% usage, 70%→80%, 55%→70%; 0.6666 not 0.667 so the floored display hits 80/70) is NOT applied.",
     "`ends` is the last inclusive day (UTC).",
-    "Overlapping rows are fine: the consumer takes the highest live rate. Launch pricing = 85% until 2026-09-13 (Anthropic quota halves after), then 80% until 2026-11-21. Astra is never boosted.",
+    "Overlapping rows are fine: the consumer takes the highest live rate. Launch pricing = 85% until 2026-09-13, 80% until 2026-10-28; from 2026-10-29 to 2026-11-21: OpenAI 70%, Anthropic 55%, Astra 50%, Fable 30%; TODO GO/Ollama no promo (ended 2026-10-28). Astra/Fable/subscription providers are never boosted.",
     "A change here goes live with a backend + frontend deploy; agent/src/assets/model_promos.json is only the agent's offline fallback, refresh it occasionally."
   ],
-  boost_remaining_price_factor: 0.667,
+  boost_remaining_price_factor: 0.6666,
   promos: [
-    { family: "claude-fable-5", rate: 0.5, starts: "2026-06-29", ends: "2026-11-21", boostable: false },
+    { family: "claude-fable-5", rate: 0.5, starts: "2026-06-29", ends: "2026-10-28", boostable: false },
     { family: "claude-opus-5", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-opus-5", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-opus-5", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "claude-opus-4-[78]", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-opus-4-[78]", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-opus-4-[78]", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "claude-sonnet-5", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-sonnet-5", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-sonnet-5", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "claude-haiku-4-5", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-haiku-4-5", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-haiku-4-5", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "claude-haiku-5", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "claude-haiku-5", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "claude-haiku-5", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "gpt-5-5(-pro)?", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "gpt-5-5(-pro)?", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "gpt-5-5(-pro)?", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "gpt-5-6-sol", rate: 0.85, starts: "2026-08-26", ends: "2026-09-13" },
-    { family: "gpt-5-6-sol", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
-    { family: "gpt-6-sol", rate: 0.8, starts: "2026-09-22", ends: "2026-11-21" },
-    { family: "gpt-6-1-sol", rate: 0.8, starts: "2026-09-29", ends: "2026-11-21" },
-    { family: "gpt-6-luna", rate: 0.8, starts: "2026-09-22", ends: "2026-11-21" },
+    { family: "gpt-5-6-sol", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
+    { family: "gpt-6-sol", rate: 0.8, starts: "2026-09-22", ends: "2026-10-28" },
+    { family: "gpt-6-1-sol", rate: 0.8, starts: "2026-09-29", ends: "2026-10-28" },
+    { family: "gpt-6-luna", rate: 0.8, starts: "2026-09-22", ends: "2026-10-28" },
     { family: "gpt-6-astra", rate: 0.85, starts: "2026-09-05", ends: "2026-09-13", boostable: false },
-    { family: "gpt-6-astra", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21", boostable: false },
+    { family: "gpt-6-astra", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28", boostable: false },
     { family: "gpt-5-6-terra", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "gpt-5-6-terra", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
+    { family: "gpt-5-6-terra", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
     { family: "gpt-5-6-luna", rate: 0.85, starts: "2026-06-29", ends: "2026-09-13" },
-    { family: "gpt-5-6-luna", rate: 0.8, starts: "2026-09-14", ends: "2026-11-21" },
-    { provider: "opencode[_ -]?go|ollama[_ -]?cloud", rate: 0.5, starts: "2026-06-29", ends: "2026-11-21", boostable: false }
+    { family: "gpt-5-6-luna", rate: 0.8, starts: "2026-09-14", ends: "2026-10-28" },
+    { provider: "opencode[_ -]?go|ollama[_ -]?cloud", rate: 0.5, starts: "2026-06-29", ends: "2026-10-28", boostable: false },
+    { family: "claude-opus-5", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-opus-4-[78]", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-sonnet-5", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-haiku-4-5", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-haiku-5", rate: 0.55, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "claude-fable-5", rate: 0.3, starts: "2026-10-29", ends: "2026-11-21", boostable: false },
+    { family: "gpt-5-5(-pro)?", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-5-6-sol", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-6-sol", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-6-1-sol", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-6-luna", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-5-6-terra", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-5-6-luna", rate: 0.7, starts: "2026-10-29", ends: "2026-11-21" },
+    { family: "gpt-6-astra", rate: 0.5, starts: "2026-10-29", ends: "2026-11-21", boostable: false }
   ]
 };
 
@@ -50238,11 +50446,11 @@ var MODEL_PROMOS = model_promos_default.promos;
 // ../packages/shared-fbe/src/realtime/topics.ts
 var TOPICS = {
   ["todo:new" /* NEW_TODO */]: {
-    channel: (p) => SERVER_TO_FRONTENDS.project.new_todo(p.projectId, p.privateOwnerId),
+    channel: (p) => SERVER_TO_FRONTENDS.project.new_todo(p.projectId, p.memberId),
     audience: "frontend"
   },
   ["todo:new_message" /* TODO_NEW_MESSAGE */]: {
-    channel: (p) => SERVER_TO_FRONTENDS.project.new_message(p.projectId, p.privateOwnerId),
+    channel: (p) => SERVER_TO_FRONTENDS.project.new_message(p.projectId, p.memberId),
     audience: "frontend"
   },
   ["todo:new_message_created" /* TODO_NEW_MESSAGE_CREATED */]: {
@@ -50390,7 +50598,7 @@ var TOPICS = {
     audience: "frontend"
   },
   ["project:status" /* PROJECT_STATUS */]: {
-    channel: (p) => SERVER_TO_FRONTENDS.project.status(p.projectId, p.privateOwnerId),
+    channel: (p) => SERVER_TO_FRONTENDS.project.status(p.projectId, p.memberId),
     audience: "frontend"
   },
   ["todo:status" /* TODO_STATUS */]: {
@@ -50432,7 +50640,7 @@ var package_default = {
     type: "git",
     url: "git+https://github.com/todoforai/cli.git"
   },
-  version: "0.1.73",
+  version: "0.1.74",
   type: "module",
   bin: {
     "todoforai-cli": "bin/todoforai-cli.js",
@@ -50587,7 +50795,7 @@ var STATUS_HELP = {
   ["READY_CHECKED" /* READY_CHECKED */]: "AI finished and the user reviewed it",
   ["DONE" /* DONE */]: "Completed and finalized",
   ["REVIEW_REQUESTED" /* REVIEW_REQUESTED */]: "Asks the user to review",
-  ["POSTPONED" /* POSTPONED */]: "Put off for later",
+  ["CANCELLED" /* CANCELLED */]: "Stop a running TODO",
   ["ARCHIVED" /* ARCHIVED */]: "Archived (hidden from active list)",
   ["DELETED" /* DELETED */]: "Marked for deletion"
 };
@@ -50600,7 +50808,7 @@ ${Object.entries(STATUS_HELP).map(([s, d]) => `  ${s.padEnd(18)}${d}`).join(`
 `)}
 
 All valid statuses:
-  ${Object.values(TodoStatus).join(", ")}
+  ${Object.values(TodoStatus).filter((s) => s !== "POSTPONED" /* POSTPONED */).join(", ")}
 `);
 }
 var WORD_FLAGS = {
@@ -53466,8 +53674,9 @@ Examples:
   tfa-cli agent update <agent> sysmsg="You are a terse video editor."
   tfa-cli agent create name=Reviewer model=claude sysmsg="Review diffs only."
   tfa-cli agent update <agent> judgeSysmsg="Ask before sending email."   (approval checker; ""=off, null=inherit global)
+  tfa-cli agent update <agent> permissions='{"allow":[…],"ask":[…],"deny":[…]}'   (replaces all three lists; read them with get --json first)
 
-From an agent shell (dst_ token) permissions, edgesMcpConfigs, devicesConfig and delete are refused by the backend.
+From an agent shell (dst_ token) edgesMcpConfigs, devicesConfig, toolProfiles and delete are refused by the backend.
 `);
 }
 var FIELD_ALIASES = {
@@ -53674,7 +53883,7 @@ var STATUS_HELP2 = {
   ["READY_CHECKED" /* READY_CHECKED */]: "AI finished and the user reviewed it",
   ["DONE" /* DONE */]: "Completed and finalized",
   ["REVIEW_REQUESTED" /* REVIEW_REQUESTED */]: "Asks the user to review",
-  ["POSTPONED" /* POSTPONED */]: "Put off for later",
+  ["CANCELLED" /* CANCELLED */]: "Stop a running TODO",
   ["ARCHIVED" /* ARCHIVED */]: "Archived (hidden from active list)",
   ["DELETED" /* DELETED */]: "Marked for deletion"
 };
@@ -53891,7 +54100,7 @@ tfa-cli project — edit the current project
 Usage:
   tfa-cli project list                             Projects you can access (* = default)
   tfa-cli project members                          Who is on it (notify --to <email> reaches them)
-  tfa-cli project set <field=value>…               name=… description=…
+  tfa-cli project set <field=value>…               name=… description=… logo=<https image url|"">
                                                     (isPublic refused from an agent shell)
   tfa-cli project default                          Make it the project you land on at /
   tfa-cli project agent <agent>                    Default agent for new todos in this project
@@ -53901,11 +54110,15 @@ Usage:
   tfa-cli project groups intake <slug> [on|off|regenerate] [field=value]…
                                                    Public intake: autoStart maxSubmissions postIpLimit placeholder agentSettingsId
   tfa-cli project groups reorder <slug>…           Set wall order
-  tfa-cli project surfaces                         List the board's card surfaces (live refs shown as cards)
-  tfa-cli project surfaces set <id> ref=<ref> [title=…] [group=<slug>] [order=N]
+  tfa-cli project surfaces                         List the board's cards you can see: id, title, ref|note, group, color
+  tfa-cli project surfaces set <id> ref=<ref> [title=…] [group=<slug>] [color=#hex] [order=N]
                                                    Show a ref on the board: a todo id, <todoId>:<alias>
                                                    (shown artifact) or an http(s) url. group= puts it
                                                    inside that group's card; group="" makes it standalone.
+  tfa-cli project surfaces set <id> body="…" [group=<slug>] [color=#hex]
+                                                   A note (markdown text). Seen by
+                                                   whoever sees where it sits: standalone = the project,
+                                                   group = its members, your My Private group = only you.
   tfa-cli project surfaces rm <id>                 Take it off the board
 
 Examples:
@@ -53913,6 +54126,7 @@ Examples:
   tfa-cli project groups set marketing name=Marketing description="Top-of-funnel work"
   tfa-cli project groups reorder marketing sales ops
   tfa-cli project surfaces set weekly-kpis ref=$TODOFORAI_TODO_ID:kpi title="Weekly KPIs" group=marketing
+  tfa-cli project surfaces set sales-rules body="Quote prices in EUR, net of VAT." group=sales
 `);
 }
 var TODO_ALIASES = {
@@ -54101,21 +54315,23 @@ async function projectCommand(api, positionals, args, projectId) {
         console.log(JSON.stringify(surfaces, null, 2));
         return;
       }
+      const titleOf = (s) => s.title || (s.body ?? "").split(`
+`).find((l) => l.trim())?.trim().slice(0, 60) || "";
       for (const s of surfaces)
-        process.stderr.write(`${s.id}  ${s.ref}  ${DIM}${[s.title, s.group && `in ${s.group}`].filter(Boolean).join("  ")}${RESET}
+        process.stderr.write(`${s.id}  ${titleOf(s)}  ${DIM}${[s.ref ?? "note", s.group && `in ${s.group}`, s.color].filter(Boolean).join("  ")}${RESET}
 `);
       return;
     }
     if (verb === "set") {
       const [id, ...fields] = sargs;
       if (!id)
-        fail("Usage: tfa-cli project surfaces set <id> ref=<ref> [title=…] [group=<slug>] [order=N]");
+        fail("Usage: tfa-cli project surfaces set <id> [ref=<ref>|body=…] [title=…] [group=<slug>] [color=#hex] [order=N]");
       const surface = await api.upsertProjectSurface(projectId, id, parseAssignments2(fields));
       if (args.json) {
         console.log(JSON.stringify(surface, null, 2));
         return;
       }
-      process.stderr.write(`${GREEN}✅ surface ${id} shows ${surface.ref}${surface.group ? ` in ${surface.group}` : ""}${RESET}
+      process.stderr.write(`${GREEN}✅ surface ${id} ${surface.ref ? `shows ${surface.ref}` : "is a note"}${surface.group ? ` in ${surface.group}` : ""}${RESET}
 `);
       return;
     }
@@ -54487,40 +54703,26 @@ var VALID_STATUS = new Set(Object.values(TodoStatus));
 var isOpen = (s) => !CLOSED.has(s);
 function printListTodosHelp() {
   process.stderr.write(`
-todoforai-cli list — list YOUR todos in a project (recent first)
+todoforai-cli list [flags] — todos of a project, newest first (lastActivityAt)
 
-Default: only todos you opened or wrote in. --project-wide shows everyone's.
+Scope:  yours only (todos you opened or wrote in) → --contributor all = every member's
+        open only (hides DONE, ARCHIVED, DELETED)  → -A / --all = closed too
+Output: STATUS  YYYY-MM-DD HH:MM  <todoId>  <first line of content>
+        --json → { items: [{ id, status, content, lastActivityAt, createdAt, contributorIds, … }], nextCursor }
 
-Usage:
-  todoforai-cli list [flags]
+Filters (all combinable):
+  -s, --status <S,S2>    exact statuses, union (closed ones included); OPEN = any non-closed
+      --search <text>    content/status substring (backend)
+      --contributor <u>  id or email, comma = any; "all" = no filter (default: you)
+      --since/--until <t> window on the sort field: epoch ms | YYYY-MM-DD | ISO | 12h / 3d (ago)
+      --sort created     by createdAt instead of activity
+      --project <id>     other project (default: the current one)
 
-Flags:
-      --project-wide       Every member's todos, not just yours
-  -n, --limit <n>          Max rows to show (default: 30)
-      --cursor <n>         Fetch todos older than this cursor (sort field, epoch ms)
-      --since <t>          Only todos with sort field >= t (inclusive)
-      --until <t>          Only todos with sort field < t (exclusive)
-                           t = epoch ms | YYYY-MM-DD (local midnight) | ISO datetime | 12h / 3d ago
-      --sort <key>         activity (lastActivityAt, default) | created (createdAt)
-      --contributor <u>    Only todos a member opened/wrote in (id or email; comma = any; replaces the "mine" default)
-      --page-size <n>      Backend page size per request (default: min(limit, 400), max: 400)
-      --search <text>      Search content/status on the backend
-  -s, --status <S[,S2]>    Filter by status (comma-separated, union).
-  -A, --all                Include closed (DONE, ARCHIVED, DELETED)
-      --project <id>       Project ID (default: current default project)
-      --json               Output { items, nextCursor } as JSON
-  -h, --help               Show this help
+Paging: -n <limit> (default 30). "Next cursor: N" on stderr / nextCursor in JSON → re-run with --cursor N.
 
 Examples:
-  todoforai-cli list                         # 30 most recent open todos of yours
-  todoforai-cli list --project-wide          # … of everyone in the project
-  todoforai-cli list -n 50                   # last 50 open
-  todoforai-cli list --cursor 1719234567890  # next page
-  todoforai-cli list --all                   # include DONE
   todoforai-cli list -s RUNNING,REVIEW_REQUESTED
-  todoforai-cli list -A --since 2026-10-11 --until 2026-10-12   # touched that day
-  todoforai-cli list -A --sort created --since 7d --contributor a@b.com
-  todoforai-cli list --search bug --json | jq '.items[].id'
+  todoforai-cli list --contributor all -A --since 7d --json | jq -r '.items[] | [.id, .status] | @tsv'
 `);
 }
 function positiveInt(value, name) {
@@ -54617,7 +54819,6 @@ async function listTodosCommand(api, defaultProjectId, argv, resolveUserId) {
       until: { type: "string" },
       sort: { type: "string" },
       contributor: { type: "string" },
-      "project-wide": { type: "boolean", default: false },
       status: { type: "string", short: "s" },
       all: { type: "boolean", short: "A", default: false },
       project: { type: "string" },
@@ -54650,9 +54851,11 @@ async function listTodosCommand(api, defaultProjectId, argv, resolveUserId) {
   if (until !== undefined)
     cursor = cursor === undefined ? until : Math.min(cursor, until);
   const search = values.search ? String(values.search) : undefined;
-  let contributorIds = values.contributor ? await resolveContributors(api, projectId, String(values.contributor)) : undefined;
+  const contributorArg = values.contributor === undefined ? undefined : String(values.contributor);
+  const everyone = contributorArg?.trim().toLowerCase() === "all";
+  let contributorIds = contributorArg && !everyone ? await resolveContributors(api, projectId, contributorArg) : undefined;
   let mineOnly = false;
-  if (!contributorIds && !values["project-wide"] && resolveUserId) {
+  if (!contributorIds && !everyone && resolveUserId) {
     const me = await resolveUserId();
     if (me) {
       contributorIds = [me];
@@ -54714,7 +54917,7 @@ async function listTodosCommand(api, defaultProjectId, argv, resolveUserId) {
 `);
     return;
   }
-  const scopeHint = mineOnly ? " of yours (--project-wide for everyone's)" : "";
+  const scopeHint = mineOnly ? " of yours (--contributor all for everyone's)" : "";
   if (!visible.length) {
     process.stderr.write(`${DIM}(no todos${scopeHint})${RESET}
 `);

package/package.json

@@ -7,7 +7,7 @@
     "type": "git",
     "url": "git+https://github.com/todoforai/cli.git"
   },
-  "version": "0.1.73",
+  "version": "0.1.74",
   "type": "module",
   "bin": {
     "todoforai-cli": "bin/todoforai-cli.js",