donebear 0.3.8 → 0.3.9

package/dist/cli.mjs

@@ -1,25 +1,256 @@
 #!/usr/bin/env node
-import { a as toCliError, b as DONEBEAR_TOKEN_ENV, d as DEFAULT_OAUTH_CALLBACK_PATH, f as DEFAULT_OAUTH_CALLBACK_PORT, i as EXIT_CODES, l as CONFIG_DIR, n as setCurrentWorkspace, o as AUTH_FILE_PATH, r as CliError, s as CLI_NAME, t as ensureLocalContext } from "./context-store-DuCNavgl.mjs";
+import { a as toCliError, b as DONEBEAR_TOKEN_ENV, d as DEFAULT_OAUTH_CALLBACK_PATH, f as DEFAULT_OAUTH_CALLBACK_PORT, i as EXIT_CODES, l as CONFIG_DIR, n as setCurrentWorkspace, o as AUTH_FILE_PATH, r as CliError, s as CLI_NAME, t as ensureLocalContext } from "./context-store-BBEVWudm.mjs";
 import { n as readStdin, t as promptForValue } from "./prompt-GfcWO85b.mjs";
 import { createRequire } from "node:module";
-import { Command, InvalidArgumentError } from "commander";
-import { homedir } from "node:os";
-import { basename, join, resolve } from "node:path";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
-import { accessSync, constants, existsSync, readdirSync, statSync } from "node:fs";
-import { config } from "dotenv";
-import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { basename, join, resolve } from "node:path";
+import { createInterface } from "node:readline";
+import { homedir } from "node:os";
 import { execSync, spawn } from "node:child_process";
 import { styleText } from "node:util";
 import jmespath from "jmespath";
 import { stringify } from "yaml";
+import { accessSync, constants, existsSync, readdirSync, statSync } from "node:fs";
+import { config } from "dotenv";
+import { Command, InvalidArgumentError } from "commander";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { createServer } from "node:http";
 import { fileURLToPath } from "node:url";
 import Database from "better-sqlite3";
-import { createInterface } from "node:readline";
 //#region \0rolldown/runtime.js
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 //#endregion
+//#region src/output.ts
+const writeLine = (stream, message) => {
+	stream.write(`${message}\n`);
+};
+const colorize = (context, format, message) => {
+	if (!context.color) return message;
+	return styleText(format, message);
+};
+const writeJson = (value) => {
+	writeLine(process.stdout, JSON.stringify(value, null, 2));
+};
+const writeYaml = (value) => {
+	process.stdout.write(stringify(value));
+};
+const writeInfo = (context, message) => {
+	writeLine(process.stdout, colorize(context, "cyan", message));
+};
+const writeSuccess = (context, message) => {
+	writeLine(process.stdout, colorize(context, "green", message));
+};
+const writeWarning = (context, message) => {
+	writeLine(process.stderr, colorize(context, "yellow", message));
+};
+const writeError = (context, message) => {
+	writeLine(process.stderr, colorize(context, "red", message));
+};
+const writeDebug = (context, message) => {
+	if (!context.debug) return;
+	writeLine(process.stderr, colorize(context, "gray", `[debug] ${message}`));
+};
+const writeTotal = (context, count) => {
+	writeLine(process.stdout, colorize(context, "cyan", String(count)));
+};
+const escapeCsvField = (value) => {
+	if (value.includes(",") || value.includes("\"") || value.includes("\n")) return `"${value.replaceAll("\"", "\"\"")}"`;
+	return value;
+};
+const writeCsv = (headers, rows) => {
+	writeLine(process.stdout, headers.map(escapeCsvField).join(","));
+	for (const row of rows) writeLine(process.stdout, row.map(escapeCsvField).join(","));
+};
+const writeTsv = (headers, rows) => {
+	writeLine(process.stdout, headers.join("	"));
+	for (const row of rows) writeLine(process.stdout, row.join("	"));
+};
+/**
+* Write structured data to stdout, applying --jq filter and --limit if set.
+* Use this for all JSON/YAML/structured output from commands.
+*/
+const writeOutput = (context, data) => {
+	let result = data;
+	if (context.jq) try {
+		result = jmespath.search(result, context.jq);
+	} catch (error) {
+		throw new CliError(`Invalid --jq expression: ${error instanceof Error ? error.message : String(error)}`, EXIT_CODES.VALIDATION);
+	}
+	if (context.limit !== null && Array.isArray(result)) result = result.slice(0, context.limit);
+	switch (context.format) {
+		case "yaml":
+			writeYaml(result);
+			break;
+		case "json":
+			writeJson(result);
+			break;
+		default:
+			writeJson(result);
+			break;
+	}
+	if (context.copy) copyToClipboard(JSON.stringify(result, null, 2));
+};
+/**
+* Handles --total, --format csv, --format tsv, --format yaml output.
+* Returns true if the format was handled; caller renders text mode if false.
+*/
+const writeFormattedRows = (context, totalCount, headers, rows) => {
+	if (context.total) {
+		writeTotal(context, totalCount);
+		return true;
+	}
+	if (context.format === "yaml") {
+		const objects = rows.map((row) => Object.fromEntries(headers.map((h, i) => [h, row[i]])));
+		writeYaml(objects);
+		if (context.copy) copyToClipboard(stringify(objects));
+		return true;
+	}
+	if (context.format === "csv") {
+		writeCsv(headers, rows);
+		if (context.copy) copyToClipboard([headers.join(","), ...rows.map((r) => r.join(","))].join("\n"));
+		return true;
+	}
+	if (context.format === "tsv") {
+		writeTsv(headers, rows);
+		if (context.copy) copyToClipboard([headers.join("	"), ...rows.map((r) => r.join("	"))].join("\n"));
+		return true;
+	}
+	return false;
+};
+const copyToClipboard = (text) => {
+	try {
+		if (process.platform === "darwin") execSync("pbcopy", { input: text });
+		else if (process.platform === "win32") execSync("clip", { input: text });
+		else try {
+			execSync("xclip -selection clipboard", { input: text });
+		} catch {
+			execSync("xsel --clipboard --input", { input: text });
+		}
+		return true;
+	} catch {
+		return false;
+	}
+};
+//#endregion
+//#region src/commands/interactive.ts
+const HISTORY_FILE = join(CONFIG_DIR, "history.json");
+const MAX_HISTORY = 200;
+const isHistoryFile = (value) => {
+	if (typeof value !== "object" || value === null) return false;
+	const record = value;
+	return record.version === 1 && Array.isArray(record.entries) && record.entries.every((e) => typeof e === "string");
+};
+const loadHistory = async (historyFile) => {
+	try {
+		const raw = await readFile(historyFile, "utf-8");
+		const parsed = JSON.parse(raw);
+		if (isHistoryFile(parsed)) return parsed.entries;
+		return [];
+	} catch {
+		return [];
+	}
+};
+const tokenize = (input) => {
+	const tokens = [];
+	let current = "";
+	let inQuote = false;
+	let quoteChar = "";
+	for (const char of input) if (inQuote) if (char === quoteChar) inQuote = false;
+	else current += char;
+	else if (char === "\"" || char === "'") {
+		inQuote = true;
+		quoteChar = char;
+	} else if (char === " ") {
+		if (current.length > 0) {
+			tokens.push(current);
+			current = "";
+		}
+	} else current += char;
+	if (current.length > 0) tokens.push(current);
+	return tokens;
+};
+const buildCompleter = (program) => (line) => {
+	const allCommands = program.commands.flatMap((cmd) => [cmd.name(), ...cmd.aliases()]);
+	const hits = allCommands.filter((c) => c.startsWith(line));
+	return [hits.length > 0 ? hits : allCommands, line];
+};
+const runInteractiveMode = async (context, program) => {
+	const history = await loadHistory(HISTORY_FILE);
+	const rl = createInterface({
+		completer: buildCompleter(program),
+		historySize: MAX_HISTORY,
+		input: process.stdin,
+		output: process.stdout,
+		prompt: "donebear> "
+	});
+	for (const entry of [...history].toReversed()) rl.history.push(entry);
+	writeSuccess(context, "Done Bear interactive mode. Type \"exit\" or Ctrl+D to quit.");
+	writeInfo(context, "Commands: task, workspace, project, label, team, today, search, auth, whoami");
+	rl.prompt();
+	const sessionEntries = [];
+	for await (const line of rl) {
+		const trimmed = line.trim();
+		if (!trimmed) {
+			rl.prompt();
+			continue;
+		}
+		if (trimmed === "exit" || trimmed === "quit" || trimmed === ":q") break;
+		const tokens = tokenize(trimmed);
+		try {
+			await program.parseAsync([
+				"node",
+				"donebear",
+				...tokens
+			]);
+		} catch {}
+		sessionEntries.push(trimmed);
+		rl.prompt();
+	}
+	rl.close();
+	if (sessionEntries.length > 0) try {
+		const payload = {
+			entries: [...await loadHistory(HISTORY_FILE), ...sessionEntries].slice(-MAX_HISTORY),
+			version: 1
+		};
+		await mkdir(CONFIG_DIR, {
+			mode: 448,
+			recursive: true
+		});
+		await writeFile(HISTORY_FILE, `${JSON.stringify(payload, null, 2)}\n`, {
+			encoding: "utf-8",
+			mode: 384
+		});
+	} catch {}
+};
+//#endregion
+//#region src/env.ts
+const DEFAULT_ENV_FILES = [
+	".env.local",
+	".env",
+	"apps/manage-frontend/.env.local",
+	"apps/manage-api/.env"
+];
+let loaded = false;
+const loadCliEnvironmentFiles = () => {
+	if (loaded) return;
+	for (const relativePath of DEFAULT_ENV_FILES) {
+		const absolutePath = resolve(process.cwd(), relativePath);
+		if (!existsSync(absolutePath)) continue;
+		config({
+			override: false,
+			path: absolutePath,
+			quiet: true
+		});
+	}
+	loaded = true;
+};
+const readEnvValue = (key) => {
+	const value = process.env[key];
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	return trimmed.length > 0 ? trimmed : void 0;
+};
+//#endregion
 //#region src/jwt.ts
 const parseJwtBase64Url = (input) => {
 	const normalized = input.replaceAll("-", "+").replaceAll("_", "/");
@@ -140,34 +371,6 @@ const clearStoredAuthSession = async () => {
 	await rm(AUTH_FILE_PATH, { force: true });
 };
 //#endregion
-//#region src/env.ts
-const DEFAULT_ENV_FILES = [
-	".env.local",
-	".env",
-	"apps/manage-frontend/.env.local",
-	"apps/manage-api/.env"
-];
-let loaded = false;
-const loadCliEnvironmentFiles = () => {
-	if (loaded) return;
-	for (const relativePath of DEFAULT_ENV_FILES) {
-		const absolutePath = resolve(process.cwd(), relativePath);
-		if (!existsSync(absolutePath)) continue;
-		config({
-			override: false,
-			path: absolutePath,
-			quiet: true
-		});
-	}
-	loaded = true;
-};
-const readEnvValue = (key) => {
-	const value = process.env[key];
-	if (typeof value !== "string") return;
-	const trimmed = value.trim();
-	return trimmed.length > 0 ? trimmed : void 0;
-};
-//#endregion
 //#region src/supabase.ts
 const resolveSupabaseConfig = () => {
 	const url = readEnvValue("DONEBEAR_SUPABASE_URL") ?? "https://kdarvputxmlxqemisnbh.supabase.co";
@@ -385,136 +588,24 @@ const parseDateOnlyString = (value) => {
 	};
 	return isValidDateOnlyParts(parts) ? parts : null;
 };
-const parseApiDateOnlyToEpoch = (value) => {
-	const parts = parseDateOnlyString(value);
-	return parts ? dateOnlyPartsToEpoch(parts) : null;
-};
-const parseApiInstantToEpoch = (value) => {
-	if (typeof value !== "string") return null;
-	const trimmed = value.trim();
-	if (trimmed.length === 0 || !ISO_INSTANT_REGEX.test(trimmed)) return null;
-	const parsed = Date.parse(trimmed);
-	return Number.isNaN(parsed) ? null : parsed;
-};
-const parseCliDateOnlyToEpoch = (value, fieldLabel) => {
-	if (!value) return null;
-	const parts = parseDateOnlyString(value);
-	if (!parts) throw new Error(`Invalid ${fieldLabel}: ${value}. Expected YYYY-MM-DD.`);
-	return dateOnlyPartsToEpoch(parts);
-};
-const dateOnlyEpochFromLocalDate = (now = /* @__PURE__ */ new Date()) => Date.UTC(now.getFullYear(), now.getMonth(), now.getDate());
-//#endregion
-//#region src/output.ts
-const writeLine = (stream, message) => {
-	stream.write(`${message}\n`);
-};
-const colorize = (context, format, message) => {
-	if (!context.color) return message;
-	return styleText(format, message);
-};
-const writeJson = (value) => {
-	writeLine(process.stdout, JSON.stringify(value, null, 2));
-};
-const writeYaml = (value) => {
-	process.stdout.write(stringify(value));
-};
-const writeInfo = (context, message) => {
-	writeLine(process.stdout, colorize(context, "cyan", message));
-};
-const writeSuccess = (context, message) => {
-	writeLine(process.stdout, colorize(context, "green", message));
-};
-const writeWarning = (context, message) => {
-	writeLine(process.stderr, colorize(context, "yellow", message));
-};
-const writeError = (context, message) => {
-	writeLine(process.stderr, colorize(context, "red", message));
-};
-const writeDebug = (context, message) => {
-	if (!context.debug) return;
-	writeLine(process.stderr, colorize(context, "gray", `[debug] ${message}`));
-};
-const writeTotal = (context, count) => {
-	writeLine(process.stdout, colorize(context, "cyan", String(count)));
-};
-const escapeCsvField = (value) => {
-	if (value.includes(",") || value.includes("\"") || value.includes("\n")) return `"${value.replaceAll("\"", "\"\"")}"`;
-	return value;
-};
-const writeCsv = (headers, rows) => {
-	writeLine(process.stdout, headers.map(escapeCsvField).join(","));
-	for (const row of rows) writeLine(process.stdout, row.map(escapeCsvField).join(","));
-};
-const writeTsv = (headers, rows) => {
-	writeLine(process.stdout, headers.join("	"));
-	for (const row of rows) writeLine(process.stdout, row.join("	"));
-};
-/**
-* Write structured data to stdout, applying --jq filter and --limit if set.
-* Use this for all JSON/YAML/structured output from commands.
-*/
-const writeOutput = (context, data) => {
-	let result = data;
-	if (context.jq) try {
-		result = jmespath.search(result, context.jq);
-	} catch (error) {
-		throw new CliError(`Invalid --jq expression: ${error instanceof Error ? error.message : String(error)}`, EXIT_CODES.VALIDATION);
-	}
-	if (context.limit !== null && Array.isArray(result)) result = result.slice(0, context.limit);
-	switch (context.format) {
-		case "yaml":
-			writeYaml(result);
-			break;
-		case "json":
-			writeJson(result);
-			break;
-		default:
-			writeJson(result);
-			break;
-	}
-	if (context.copy) copyToClipboard(JSON.stringify(result, null, 2));
-};
-/**
-* Handles --total, --format csv, --format tsv, --format yaml output.
-* Returns true if the format was handled; caller renders text mode if false.
-*/
-const writeFormattedRows = (context, totalCount, headers, rows) => {
-	if (context.total) {
-		writeTotal(context, totalCount);
-		return true;
-	}
-	if (context.format === "yaml") {
-		const objects = rows.map((row) => Object.fromEntries(headers.map((h, i) => [h, row[i]])));
-		writeYaml(objects);
-		if (context.copy) copyToClipboard(stringify(objects));
-		return true;
-	}
-	if (context.format === "csv") {
-		writeCsv(headers, rows);
-		if (context.copy) copyToClipboard([headers.join(","), ...rows.map((r) => r.join(","))].join("\n"));
-		return true;
-	}
-	if (context.format === "tsv") {
-		writeTsv(headers, rows);
-		if (context.copy) copyToClipboard([headers.join("	"), ...rows.map((r) => r.join("	"))].join("\n"));
-		return true;
-	}
-	return false;
+const parseApiDateOnlyToEpoch = (value) => {
+	const parts = parseDateOnlyString(value);
+	return parts ? dateOnlyPartsToEpoch(parts) : null;
 };
-const copyToClipboard = (text) => {
-	try {
-		if (process.platform === "darwin") execSync("pbcopy", { input: text });
-		else if (process.platform === "win32") execSync("clip", { input: text });
-		else try {
-			execSync("xclip -selection clipboard", { input: text });
-		} catch {
-			execSync("xsel --clipboard --input", { input: text });
-		}
-		return true;
-	} catch {
-		return false;
-	}
+const parseApiInstantToEpoch = (value) => {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	if (trimmed.length === 0 || !ISO_INSTANT_REGEX.test(trimmed)) return null;
+	const parsed = Date.parse(trimmed);
+	return Number.isNaN(parsed) ? null : parsed;
 };
+const parseCliDateOnlyToEpoch = (value, fieldLabel) => {
+	if (!value) return null;
+	const parts = parseDateOnlyString(value);
+	if (!parts) throw new Error(`Invalid ${fieldLabel}: ${value}. Expected YYYY-MM-DD.`);
+	return dateOnlyPartsToEpoch(parts);
+};
+const dateOnlyEpochFromLocalDate = (now = /* @__PURE__ */ new Date()) => Date.UTC(now.getFullYear(), now.getMonth(), now.getDate());
 //#endregion
 //#region src/manage-api.ts
 const TASK_FIELDS = `
@@ -1999,11 +2090,11 @@ Examples:
 		});
 	});
 };
+const packageManifest = createRequire(import.meta.url)("../package.json");
 //#endregion
 //#region src/commands/doctor.ts
-const packageManifest$1 = createRequire(import.meta.url)("../package.json");
 const checkCliVersion = async () => {
-	const current = packageManifest$1.version;
+	const current = packageManifest.version;
 	try {
 		const response = await fetch("https://registry.npmjs.org/donebear/latest", { signal: AbortSignal.timeout(5e3) });
 		if (!response.ok) return {
@@ -2068,7 +2159,7 @@ const checkAuth = async (context) => {
 };
 const checkWorkspace = async () => {
 	try {
-		const { ensureLocalContext } = await import("./context-store-CK4yIl9e.mjs");
+		const { ensureLocalContext } = await import("./context-store-ClAx1T2N.mjs");
 		const localContext = await ensureLocalContext();
 		if (!localContext.workspaceId) return {
 			message: "No workspace selected (run `donebear workspace use`)",
@@ -2283,6 +2374,7 @@ const normalizeThingsLabelLookupKey = (value) => value.trim().toLocaleLowerCase(
 //#region src/import/model-id.ts
 const IMPORT_ID_NAMESPACE = "b1f9f0ac-9f76-54ed-8eb0-7d6d3a0a0a31";
 const SYNC_COMPOSITE_ID_NAMESPACE = "92a73695-d772-4b43-9fb4-d79f5fbef300";
+const IDEMPOTENCY_ID_NAMESPACE = "4c8af5e2-1d36-5a0b-9c47-2f81b3d6e955";
 const uuidToBytes = (uuid) => {
 	const normalized = uuid.replaceAll("-", "");
 	if (normalized.length !== 32) throw new Error(`Invalid UUID namespace: ${uuid}`);
@@ -2311,6 +2403,7 @@ const createUuidV5 = (name, namespace) => {
 };
 const createCompositeSyncId = (model, parts) => createUuidV5(`${model}:${JSON.stringify(parts)}`, SYNC_COMPOSITE_ID_NAMESPACE);
 const createDeterministicImportId = (params) => createUuidV5(`things:${params.workspaceId}:${params.modelName}:${params.sourceId}`, IMPORT_ID_NAMESPACE);
+const createIdempotentMutationId = (params) => createUuidV5(`idem:${params.workspaceId}:${params.modelName}:${params.part}:${params.key}`, IDEMPOTENCY_ID_NAMESPACE);
 const createTaskLabelId = (params) => createCompositeSyncId("TaskLabel", [
 	params.workspaceId,
 	params.taskId,
@@ -6527,97 +6620,6 @@ Notes:
 	});
 };
 //#endregion
-//#region src/commands/interactive.ts
-const HISTORY_FILE = join(CONFIG_DIR, "history.json");
-const MAX_HISTORY = 200;
-const isHistoryFile = (value) => {
-	if (typeof value !== "object" || value === null) return false;
-	const record = value;
-	return record.version === 1 && Array.isArray(record.entries) && record.entries.every((e) => typeof e === "string");
-};
-const loadHistory = async (historyFile) => {
-	try {
-		const raw = await readFile(historyFile, "utf-8");
-		const parsed = JSON.parse(raw);
-		if (isHistoryFile(parsed)) return parsed.entries;
-		return [];
-	} catch {
-		return [];
-	}
-};
-const tokenize = (input) => {
-	const tokens = [];
-	let current = "";
-	let inQuote = false;
-	let quoteChar = "";
-	for (const char of input) if (inQuote) if (char === quoteChar) inQuote = false;
-	else current += char;
-	else if (char === "\"" || char === "'") {
-		inQuote = true;
-		quoteChar = char;
-	} else if (char === " ") {
-		if (current.length > 0) {
-			tokens.push(current);
-			current = "";
-		}
-	} else current += char;
-	if (current.length > 0) tokens.push(current);
-	return tokens;
-};
-const buildCompleter = (program) => (line) => {
-	const allCommands = program.commands.flatMap((cmd) => [cmd.name(), ...cmd.aliases()]);
-	const hits = allCommands.filter((c) => c.startsWith(line));
-	return [hits.length > 0 ? hits : allCommands, line];
-};
-const runInteractiveMode = async (context, program) => {
-	const history = await loadHistory(HISTORY_FILE);
-	const rl = createInterface({
-		completer: buildCompleter(program),
-		historySize: MAX_HISTORY,
-		input: process.stdin,
-		output: process.stdout,
-		prompt: "donebear> "
-	});
-	for (const entry of [...history].toReversed()) rl.history.push(entry);
-	writeSuccess(context, "Done Bear interactive mode. Type \"exit\" or Ctrl+D to quit.");
-	writeInfo(context, "Commands: task, workspace, project, label, team, today, search, auth, whoami");
-	rl.prompt();
-	const sessionEntries = [];
-	for await (const line of rl) {
-		const trimmed = line.trim();
-		if (!trimmed) {
-			rl.prompt();
-			continue;
-		}
-		if (trimmed === "exit" || trimmed === "quit" || trimmed === ":q") break;
-		const tokens = tokenize(trimmed);
-		try {
-			await program.parseAsync([
-				"node",
-				"donebear",
-				...tokens
-			]);
-		} catch {}
-		sessionEntries.push(trimmed);
-		rl.prompt();
-	}
-	rl.close();
-	if (sessionEntries.length > 0) try {
-		const payload = {
-			entries: [...await loadHistory(HISTORY_FILE), ...sessionEntries].slice(-MAX_HISTORY),
-			version: 1
-		};
-		await mkdir(CONFIG_DIR, {
-			mode: 448,
-			recursive: true
-		});
-		await writeFile(HISTORY_FILE, `${JSON.stringify(payload, null, 2)}\n`, {
-			encoding: "utf-8",
-			mode: 384
-		});
-	} catch {}
-};
-//#endregion
 //#region src/commands/label.ts
 const sortLabels = (labels, sort) => {
 	const sorted = [...labels];
@@ -7091,17 +7093,23 @@ const runProjectAdd = async (context, name, options) => {
 		token: commandContext.token,
 		workspaceRef: normalizeWorkspaceRef(options.workspace)
 	});
-	const projectId = randomUUID();
+	const idempotencyId = (part) => options.idempotencyKey ? createIdempotentMutationId({
+		key: options.idempotencyKey,
+		modelName: "Project",
+		part,
+		workspaceId: workspace.id
+	}) : null;
+	const projectId = idempotencyId("model") ?? randomUUID();
 	const now = Date.now();
 	const key = generateProjectSlug(normalizedName, projectId);
 	await mutateModel(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		request: {
-			batchId: randomUUID(),
+			batchId: idempotencyId("batch") ?? randomUUID(),
 			transactions: [{
 				action: "INSERT",
-				clientId: commandContext.localContext.clientId,
-				clientTxId: randomUUID(),
+				clientId: options.idempotencyKey ? "cli-idem" : commandContext.localContext.clientId,
+				clientTxId: idempotencyId("tx") ?? randomUUID(),
 				modelId: projectId,
 				modelName: "Project",
 				payload: {
@@ -7268,7 +7276,7 @@ Agent tip: run "donebear spec project add" for full option reference
 			await runProjectShow(context, projectRef, { workspace: workspaceOverride ?? normalizeWorkspaceRef(options.workspace) ?? void 0 });
 		});
 	});
-	project.command("add").alias("create").description("Create a project").argument("[name]", "Project name (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-d, --description <text>", "Project description").option("--target-date <date>", "Target date (YYYY-MM-DD)").action(async (name, options, command) => {
+	project.command("add").alias("create").description("Create a project").argument("[name]", "Project name (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-d, --description <text>", "Project description").option("--target-date <date>", "Target date (YYYY-MM-DD)").option("--idempotency-key <key>", "Stable key making retries safe (repeated calls create only one project)").action(async (name, options, command) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			await runProjectAdd(context, name, {
@@ -7509,7 +7517,13 @@ const runTaskAdd = async (context, title, options, workspaceOverride) => {
 		token: commandContext.token,
 		workspaceId: workspace.id
 	}).then((teams) => resolveEntityId(teams, options.team, "Team")) : Promise.resolve(null)]);
-	const taskId = randomUUID();
+	const idempotencyId = (part) => options.idempotencyKey ? createIdempotentMutationId({
+		key: options.idempotencyKey,
+		modelName: "Task",
+		part,
+		workspaceId: workspace.id
+	}) : null;
+	const taskId = idempotencyId("model") ?? randomUUID();
 	const now = Date.now();
 	const view = parseTaskView(options.when);
 	const startFields = buildTaskStartFields(view);
@@ -7517,11 +7531,11 @@ const runTaskAdd = async (context, title, options, workspaceOverride) => {
 	await mutateModel(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		request: {
-			batchId: randomUUID(),
+			batchId: idempotencyId("batch") ?? randomUUID(),
 			transactions: [{
 				action: "INSERT",
-				clientId: commandContext.localContext.clientId,
-				clientTxId: randomUUID(),
+				clientId: options.idempotencyKey ? "cli-idem" : commandContext.localContext.clientId,
+				clientTxId: idempotencyId("tx") ?? randomUUID(),
 				modelId: taskId,
 				modelName: "Task",
 				payload: {
@@ -7883,15 +7897,15 @@ Views:  inbox | anytime | today | upcoming | someday | logbook | trash
 			await runTaskRandom(context, options, workspaceOverride);
 		});
 	});
-	task.command("add").alias("create").description("Create a task").argument("[title]", "Task title (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-n, --notes <text>", "Task notes (or pipe via stdin)").option("--when <view>", "inbox|anytime|today|upcoming|someday", "inbox").option("--deadline <date>", "Deadline (YYYY-MM-DD or ISO datetime)").option("--project <key-or-id>", "Project key or id").option("--team <key-or-id>", "Team key or id").addHelpText("after", `
+	task.command("add").alias("create").description("Create a task").argument("[title]", "Task title (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-n, --notes <text>", "Task notes (or pipe via stdin)").option("--when <view>", "inbox|anytime|today|upcoming|someday", "inbox").option("--deadline <date>", "Deadline (YYYY-MM-DD or ISO datetime)").option("--project <key-or-id>", "Project key or id").option("--team <key-or-id>", "Team key or id").option("--idempotency-key <key>", "Stable key making retries safe (repeated calls create only one task)").addHelpText("after", `
 Examples:
   donebear task add "Fix login bug" --when today --json
-  donebear task add "Write tests" --deadline 2026-03-15 --project PROJ --json
+  donebear task add "Write tests" --deadline 2030-03-15 --project PROJ --json
   donebear task add "Review PR" --when anytime --notes "Check for XSS" --json
   echo "Multi-line notes" | donebear task add "My task"
   donebear task add                       # prompts for title interactively
 
-Date format: YYYY-MM-DD (e.g. 2026-03-15)
+Date format: YYYY-MM-DD (e.g. 2030-03-15)
 View (--when): inbox | anytime | today | upcoming | someday
 `).action(async (title, options, command) => {
 		const context = contextFromCommand(command);
@@ -8271,9 +8285,15 @@ const OVERVIEW = {
 			subcommands: ["things"]
 		},
 		label: {
-			description: "List workspace labels",
+			description: "Manage workspace labels and task label assignments",
 			quick_example: "donebear label list --json",
-			subcommands: ["list", "show"]
+			subcommands: [
+				"list",
+				"show",
+				"create",
+				"add",
+				"remove"
+			]
 		},
 		project: {
 			description: "Manage projects",
@@ -8311,6 +8331,7 @@ const OVERVIEW = {
 				"read",
 				"append",
 				"prepend",
+				"random",
 				"checklist"
 			]
 		},
@@ -8436,10 +8457,21 @@ const COMMAND_SPECS = {
 			user: "{ id, email }"
 		},
 		non_interactive: "For CI/scripts, set DONEBEAR_TOKEN=<token> instead of using auth login.",
-		options: { "--no-open": {
-			description: "Print auth URL instead of opening browser",
-			type: "boolean"
-		} },
+		options: {
+			"--no-open": {
+				description: "Print auth URL instead of opening browser",
+				type: "boolean"
+			},
+			"--port": {
+				default: 8787,
+				description: "Loopback callback port for the OAuth redirect",
+				type: "number"
+			},
+			"--timeout": {
+				description: "Seconds to wait for the OAuth callback",
+				type: "number"
+			}
+		},
 		usage: "donebear auth login [options]"
 	},
 	"auth status": {
@@ -8561,6 +8593,10 @@ const COMMAND_SPECS = {
 				enum: ["note", "none"],
 				type: "string"
 			},
+			"--skip-teams": {
+				description: "Skip importing Things Areas as Teams and TeamProject links",
+				type: "boolean"
+			},
 			"--workspace": {
 				description: "Workspace id, slug, or name",
 				type: "string"
@@ -8576,7 +8612,15 @@ const COMMAND_SPECS = {
 			ok: "boolean",
 			workspace: "WorkspaceSummary"
 		},
-		options: { "--workspace": { type: "string" } },
+		options: {
+			"--sort": {
+				default: "alpha",
+				description: "Sort order: alpha|count",
+				enum: ["alpha", "count"],
+				type: "string"
+			},
+			"--workspace": { type: "string" }
+		},
 		usage: "donebear label list [options]"
 	},
 	"project add": {
@@ -8595,6 +8639,10 @@ const COMMAND_SPECS = {
 		notes: "URL slug is auto-generated from name (e.g. 'Q2 Launch' → 'q2-launch-a1b2c3d4').",
 		options: {
 			"--description": { type: "string" },
+			"--idempotency-key": {
+				description: "Stable key making retries safe (repeated calls create only one project)",
+				type: "string"
+			},
 			"--target-date": {
 				description: "Target completion date",
 				format: "YYYY-MM-DD",
@@ -8633,8 +8681,25 @@ const COMMAND_SPECS = {
 			ok: "boolean"
 		},
 		options: {
+			"--clear-description": {
+				description: "Clear the project description",
+				type: "boolean"
+			},
+			"--clear-target-date": {
+				description: "Clear the project target date",
+				type: "boolean"
+			},
 			"--description": { type: "string" },
 			"--name": { type: "string" },
+			"--status": {
+				description: "Set status",
+				enum: [
+					"active",
+					"done",
+					"archived"
+				],
+				type: "string"
+			},
 			"--target-date": {
 				format: "YYYY-MM-DD",
 				type: "string"
@@ -8734,6 +8799,10 @@ const COMMAND_SPECS = {
 				format: "YYYY-MM-DD",
 				type: "string"
 			},
+			"--idempotency-key": {
+				description: "Stable key making retries safe (repeated calls create only one task)",
+				type: "string"
+			},
 			"--notes": {
 				description: "Body / description text (or pipe via stdin)",
 				type: "string"
@@ -8824,15 +8893,35 @@ const COMMAND_SPECS = {
 			type: "string"
 		} },
 		command: "task edit",
-		examples: ["donebear task edit abc1 --title \"Updated title\" --json", "donebear task edit abc1 --when today --deadline 2026-03-20 --json"],
+		examples: [
+			"donebear task edit abc1 --title \"Updated title\" --json",
+			"donebear task edit abc1 --when today --deadline 2030-01-15 --json",
+			"donebear task edit abc1 --clear-deadline --json"
+		],
 		json_output: {
 			action: "string",
 			id: "string",
 			ok: "boolean"
 		},
 		options: {
+			"--clear-deadline": {
+				description: "Clear the due date",
+				type: "boolean"
+			},
+			"--clear-notes": {
+				description: "Clear notes/description",
+				type: "boolean"
+			},
+			"--clear-project": {
+				description: "Remove the task from its project",
+				type: "boolean"
+			},
+			"--clear-team": {
+				description: "Remove the task from its team",
+				type: "boolean"
+			},
 			"--deadline": {
-				description: "Set due date (pass empty string to clear)",
+				description: "Set due date",
 				format: "YYYY-MM-DD",
 				type: "string"
 			},
@@ -9098,9 +9187,12 @@ const TOP_LEVEL_SPECS = {
 	},
 	label: {
 		command: "label",
-		description: "List workspace labels",
+		description: "Manage workspace labels and task label assignments",
 		subcommands: {
+			add: "Add a label to a task",
+			create: "Create a new label",
 			list: "List all labels",
+			remove: "Remove a label from a task",
 			show: "Get label details"
 		}
 	},
@@ -9131,6 +9223,7 @@ const TOP_LEVEL_SPECS = {
 			edit: "Update task fields",
 			list: "List tasks (--state, --view, --search, --limit)",
 			prepend: "Prepend text to task notes",
+			random: "Pick a random task (--state to filter)",
 			read: "Print task notes as plain text",
 			reopen: "Reopen a completed task",
 			show: "Get task details by id",
@@ -9757,30 +9850,8 @@ Examples:
 	});
 };
 //#endregion
-//#region src/cli.ts
-const packageManifest = createRequire(import.meta.url)("../package.json");
-const WORKSPACE_PREFIX_REGEX = /^workspace=(.+)$/iu;
-const extractWorkspaceTarget = (argv) => {
-	const processedArgv = [...argv];
-	const firstArg = processedArgv[2];
-	if (firstArg) {
-		const match = WORKSPACE_PREFIX_REGEX.exec(firstArg);
-		if (match?.[1]) {
-			processedArgv.splice(2, 1);
-			return {
-				processedArgv,
-				workspaceOverride: match[1].trim()
-			};
-		}
-	}
-	return {
-		processedArgv,
-		workspaceOverride: null
-	};
-};
-const main = async () => {
-	loadCliEnvironmentFiles();
-	const { processedArgv, workspaceOverride } = extractWorkspaceTarget(process.argv);
+//#region src/program.ts
+const buildProgram = (workspaceOverride = null) => {
 	const program = new Command();
 	program.name(CLI_NAME).description("Done Bear CLI for auth, workspace, and task workflows").version(packageManifest.version, "-v, --version").showHelpAfterError().showSuggestionAfterError();
 	addGlobalOptions(program);
@@ -9824,6 +9895,33 @@ Filtering & output:
 	registerSearchCommand(program, workspaceOverride);
 	registerHistoryCommand(program, workspaceOverride);
 	registerWhoAmICommand(program);
+	return program;
+};
+//#endregion
+//#region src/cli.ts
+const WORKSPACE_PREFIX_REGEX = /^workspace=(.+)$/iu;
+const extractWorkspaceTarget = (argv) => {
+	const processedArgv = [...argv];
+	const firstArg = processedArgv[2];
+	if (firstArg) {
+		const match = WORKSPACE_PREFIX_REGEX.exec(firstArg);
+		if (match?.[1]) {
+			processedArgv.splice(2, 1);
+			return {
+				processedArgv,
+				workspaceOverride: match[1].trim()
+			};
+		}
+	}
+	return {
+		processedArgv,
+		workspaceOverride: null
+	};
+};
+const main = async () => {
+	loadCliEnvironmentFiles();
+	const { processedArgv, workspaceOverride } = extractWorkspaceTarget(process.argv);
+	const program = buildProgram(workspaceOverride);
 	const hasUserArgs = processedArgv.length <= 2;
 	const isTTY = process.stdin.isTTY === true;
 	if (hasUserArgs && isTTY) {