donebear 0.3.8 → 0.4.0

package/dist/cli.mjs

@@ -1,25 +1,256 @@
 #!/usr/bin/env node
-import { a as toCliError, b as DONEBEAR_TOKEN_ENV, d as DEFAULT_OAUTH_CALLBACK_PATH, f as DEFAULT_OAUTH_CALLBACK_PORT, i as EXIT_CODES, l as CONFIG_DIR, n as setCurrentWorkspace, o as AUTH_FILE_PATH, r as CliError, s as CLI_NAME, t as ensureLocalContext } from "./context-store-DuCNavgl.mjs";
+import { a as toCliError, b as DONEBEAR_TOKEN_ENV, d as DEFAULT_OAUTH_CALLBACK_PATH, f as DEFAULT_OAUTH_CALLBACK_PORT, i as EXIT_CODES, l as CONFIG_DIR, n as setCurrentWorkspace, o as AUTH_FILE_PATH, r as CliError, s as CLI_NAME, t as ensureLocalContext } from "./context-store-BBEVWudm.mjs";
 import { n as readStdin, t as promptForValue } from "./prompt-GfcWO85b.mjs";
 import { createRequire } from "node:module";
-import { Command, InvalidArgumentError } from "commander";
-import { homedir } from "node:os";
-import { basename, join, resolve } from "node:path";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
-import { accessSync, constants, existsSync, readdirSync, statSync } from "node:fs";
-import { config } from "dotenv";
-import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { basename, join, resolve } from "node:path";
+import { createInterface } from "node:readline";
+import { homedir } from "node:os";
 import { execSync, spawn } from "node:child_process";
 import { styleText } from "node:util";
 import jmespath from "jmespath";
 import { stringify } from "yaml";
+import { accessSync, constants, existsSync, readdirSync, statSync } from "node:fs";
+import { config } from "dotenv";
+import { Command, InvalidArgumentError } from "commander";
+import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { createServer } from "node:http";
 import { fileURLToPath } from "node:url";
 import Database from "better-sqlite3";
-import { createInterface } from "node:readline";
 //#region \0rolldown/runtime.js
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
 //#endregion
+//#region src/output.ts
+const writeLine = (stream, message) => {
+	stream.write(`${message}\n`);
+};
+const colorize = (context, format, message) => {
+	if (!context.color) return message;
+	return styleText(format, message);
+};
+const writeJson = (value) => {
+	writeLine(process.stdout, JSON.stringify(value, null, 2));
+};
+const writeYaml = (value) => {
+	process.stdout.write(stringify(value));
+};
+const writeInfo = (context, message) => {
+	writeLine(process.stdout, colorize(context, "cyan", message));
+};
+const writeSuccess = (context, message) => {
+	writeLine(process.stdout, colorize(context, "green", message));
+};
+const writeWarning = (context, message) => {
+	writeLine(process.stderr, colorize(context, "yellow", message));
+};
+const writeError = (context, message) => {
+	writeLine(process.stderr, colorize(context, "red", message));
+};
+const writeDebug = (context, message) => {
+	if (!context.debug) return;
+	writeLine(process.stderr, colorize(context, "gray", `[debug] ${message}`));
+};
+const writeTotal = (context, count) => {
+	writeLine(process.stdout, colorize(context, "cyan", String(count)));
+};
+const escapeCsvField = (value) => {
+	if (value.includes(",") || value.includes("\"") || value.includes("\n")) return `"${value.replaceAll("\"", "\"\"")}"`;
+	return value;
+};
+const writeCsv = (headers, rows) => {
+	writeLine(process.stdout, headers.map(escapeCsvField).join(","));
+	for (const row of rows) writeLine(process.stdout, row.map(escapeCsvField).join(","));
+};
+const writeTsv = (headers, rows) => {
+	writeLine(process.stdout, headers.join("	"));
+	for (const row of rows) writeLine(process.stdout, row.join("	"));
+};
+/**
+* Write structured data to stdout, applying --jq filter and --limit if set.
+* Use this for all JSON/YAML/structured output from commands.
+*/
+const writeOutput = (context, data) => {
+	let result = data;
+	if (context.jq) try {
+		result = jmespath.search(result, context.jq);
+	} catch (error) {
+		throw new CliError(`Invalid --jq expression: ${error instanceof Error ? error.message : String(error)}`, EXIT_CODES.VALIDATION);
+	}
+	if (context.limit !== null && Array.isArray(result)) result = result.slice(0, context.limit);
+	switch (context.format) {
+		case "yaml":
+			writeYaml(result);
+			break;
+		case "json":
+			writeJson(result);
+			break;
+		default:
+			writeJson(result);
+			break;
+	}
+	if (context.copy) copyToClipboard(JSON.stringify(result, null, 2));
+};
+/**
+* Handles --total, --format csv, --format tsv, --format yaml output.
+* Returns true if the format was handled; caller renders text mode if false.
+*/
+const writeFormattedRows = (context, totalCount, headers, rows) => {
+	if (context.total) {
+		writeTotal(context, totalCount);
+		return true;
+	}
+	if (context.format === "yaml") {
+		const objects = rows.map((row) => Object.fromEntries(headers.map((h, i) => [h, row[i]])));
+		writeYaml(objects);
+		if (context.copy) copyToClipboard(stringify(objects));
+		return true;
+	}
+	if (context.format === "csv") {
+		writeCsv(headers, rows);
+		if (context.copy) copyToClipboard([headers.join(","), ...rows.map((r) => r.join(","))].join("\n"));
+		return true;
+	}
+	if (context.format === "tsv") {
+		writeTsv(headers, rows);
+		if (context.copy) copyToClipboard([headers.join("	"), ...rows.map((r) => r.join("	"))].join("\n"));
+		return true;
+	}
+	return false;
+};
+const copyToClipboard = (text) => {
+	try {
+		if (process.platform === "darwin") execSync("pbcopy", { input: text });
+		else if (process.platform === "win32") execSync("clip", { input: text });
+		else try {
+			execSync("xclip -selection clipboard", { input: text });
+		} catch {
+			execSync("xsel --clipboard --input", { input: text });
+		}
+		return true;
+	} catch {
+		return false;
+	}
+};
+//#endregion
+//#region src/commands/interactive.ts
+const HISTORY_FILE = join(CONFIG_DIR, "history.json");
+const MAX_HISTORY = 200;
+const isHistoryFile = (value) => {
+	if (typeof value !== "object" || value === null) return false;
+	const record = value;
+	return record.version === 1 && Array.isArray(record.entries) && record.entries.every((e) => typeof e === "string");
+};
+const loadHistory = async (historyFile) => {
+	try {
+		const raw = await readFile(historyFile, "utf-8");
+		const parsed = JSON.parse(raw);
+		if (isHistoryFile(parsed)) return parsed.entries;
+		return [];
+	} catch {
+		return [];
+	}
+};
+const tokenize = (input) => {
+	const tokens = [];
+	let current = "";
+	let inQuote = false;
+	let quoteChar = "";
+	for (const char of input) if (inQuote) if (char === quoteChar) inQuote = false;
+	else current += char;
+	else if (char === "\"" || char === "'") {
+		inQuote = true;
+		quoteChar = char;
+	} else if (char === " ") {
+		if (current.length > 0) {
+			tokens.push(current);
+			current = "";
+		}
+	} else current += char;
+	if (current.length > 0) tokens.push(current);
+	return tokens;
+};
+const buildCompleter = (program) => (line) => {
+	const allCommands = program.commands.flatMap((cmd) => [cmd.name(), ...cmd.aliases()]);
+	const hits = allCommands.filter((c) => c.startsWith(line));
+	return [hits.length > 0 ? hits : allCommands, line];
+};
+const runInteractiveMode = async (context, program) => {
+	const history = await loadHistory(HISTORY_FILE);
+	const rl = createInterface({
+		completer: buildCompleter(program),
+		historySize: MAX_HISTORY,
+		input: process.stdin,
+		output: process.stdout,
+		prompt: "donebear> "
+	});
+	for (const entry of [...history].toReversed()) rl.history.push(entry);
+	writeSuccess(context, "Done Bear interactive mode. Type \"exit\" or Ctrl+D to quit.");
+	writeInfo(context, "Commands: task, workspace, project, label, team, today, search, auth, whoami");
+	rl.prompt();
+	const sessionEntries = [];
+	for await (const line of rl) {
+		const trimmed = line.trim();
+		if (!trimmed) {
+			rl.prompt();
+			continue;
+		}
+		if (trimmed === "exit" || trimmed === "quit" || trimmed === ":q") break;
+		const tokens = tokenize(trimmed);
+		try {
+			await program.parseAsync([
+				"node",
+				"donebear",
+				...tokens
+			]);
+		} catch {}
+		sessionEntries.push(trimmed);
+		rl.prompt();
+	}
+	rl.close();
+	if (sessionEntries.length > 0) try {
+		const payload = {
+			entries: [...await loadHistory(HISTORY_FILE), ...sessionEntries].slice(-MAX_HISTORY),
+			version: 1
+		};
+		await mkdir(CONFIG_DIR, {
+			mode: 448,
+			recursive: true
+		});
+		await writeFile(HISTORY_FILE, `${JSON.stringify(payload, null, 2)}\n`, {
+			encoding: "utf-8",
+			mode: 384
+		});
+	} catch {}
+};
+//#endregion
+//#region src/env.ts
+const DEFAULT_ENV_FILES = [
+	".env.local",
+	".env",
+	"apps/manage-frontend/.env.local",
+	"apps/manage-api/.env"
+];
+let loaded = false;
+const loadCliEnvironmentFiles = () => {
+	if (loaded) return;
+	for (const relativePath of DEFAULT_ENV_FILES) {
+		const absolutePath = resolve(process.cwd(), relativePath);
+		if (!existsSync(absolutePath)) continue;
+		config({
+			override: false,
+			path: absolutePath,
+			quiet: true
+		});
+	}
+	loaded = true;
+};
+const readEnvValue = (key) => {
+	const value = process.env[key];
+	if (typeof value !== "string") return;
+	const trimmed = value.trim();
+	return trimmed.length > 0 ? trimmed : void 0;
+};
+//#endregion
 //#region src/jwt.ts
 const parseJwtBase64Url = (input) => {
 	const normalized = input.replaceAll("-", "+").replaceAll("_", "/");
@@ -140,34 +371,6 @@ const clearStoredAuthSession = async () => {
 	await rm(AUTH_FILE_PATH, { force: true });
 };
 //#endregion
-//#region src/env.ts
-const DEFAULT_ENV_FILES = [
-	".env.local",
-	".env",
-	"apps/manage-frontend/.env.local",
-	"apps/manage-api/.env"
-];
-let loaded = false;
-const loadCliEnvironmentFiles = () => {
-	if (loaded) return;
-	for (const relativePath of DEFAULT_ENV_FILES) {
-		const absolutePath = resolve(process.cwd(), relativePath);
-		if (!existsSync(absolutePath)) continue;
-		config({
-			override: false,
-			path: absolutePath,
-			quiet: true
-		});
-	}
-	loaded = true;
-};
-const readEnvValue = (key) => {
-	const value = process.env[key];
-	if (typeof value !== "string") return;
-	const trimmed = value.trim();
-	return trimmed.length > 0 ? trimmed : void 0;
-};
-//#endregion
 //#region src/supabase.ts
 const resolveSupabaseConfig = () => {
 	const url = readEnvValue("DONEBEAR_SUPABASE_URL") ?? "https://kdarvputxmlxqemisnbh.supabase.co";
@@ -368,153 +571,41 @@ const formatDateOnlyEpoch = (epochMs) => {
 const formatInstantEpoch = (epochMs) => {
 	if (!isFiniteEpoch(epochMs)) return null;
 	const date = new Date(epochMs);
-	if (Number.isNaN(date.getTime())) return null;
-	return date.toISOString();
-};
-const parseDateOnlyString = (value) => {
-	if (typeof value !== "string") return null;
-	const trimmed = value.trim();
-	const match = ISO_DATE_ONLY_REGEX.exec(trimmed);
-	if (!match) return null;
-	const year = Number.parseInt(match[1] ?? "", 10);
-	const month = Number.parseInt(match[2] ?? "", 10);
-	const parts = {
-		day: Number.parseInt(match[3] ?? "", 10),
-		month,
-		year
-	};
-	return isValidDateOnlyParts(parts) ? parts : null;
-};
-const parseApiDateOnlyToEpoch = (value) => {
-	const parts = parseDateOnlyString(value);
-	return parts ? dateOnlyPartsToEpoch(parts) : null;
-};
-const parseApiInstantToEpoch = (value) => {
-	if (typeof value !== "string") return null;
-	const trimmed = value.trim();
-	if (trimmed.length === 0 || !ISO_INSTANT_REGEX.test(trimmed)) return null;
-	const parsed = Date.parse(trimmed);
-	return Number.isNaN(parsed) ? null : parsed;
-};
-const parseCliDateOnlyToEpoch = (value, fieldLabel) => {
-	if (!value) return null;
-	const parts = parseDateOnlyString(value);
-	if (!parts) throw new Error(`Invalid ${fieldLabel}: ${value}. Expected YYYY-MM-DD.`);
-	return dateOnlyPartsToEpoch(parts);
-};
-const dateOnlyEpochFromLocalDate = (now = /* @__PURE__ */ new Date()) => Date.UTC(now.getFullYear(), now.getMonth(), now.getDate());
-//#endregion
-//#region src/output.ts
-const writeLine = (stream, message) => {
-	stream.write(`${message}\n`);
-};
-const colorize = (context, format, message) => {
-	if (!context.color) return message;
-	return styleText(format, message);
-};
-const writeJson = (value) => {
-	writeLine(process.stdout, JSON.stringify(value, null, 2));
-};
-const writeYaml = (value) => {
-	process.stdout.write(stringify(value));
-};
-const writeInfo = (context, message) => {
-	writeLine(process.stdout, colorize(context, "cyan", message));
-};
-const writeSuccess = (context, message) => {
-	writeLine(process.stdout, colorize(context, "green", message));
-};
-const writeWarning = (context, message) => {
-	writeLine(process.stderr, colorize(context, "yellow", message));
-};
-const writeError = (context, message) => {
-	writeLine(process.stderr, colorize(context, "red", message));
-};
-const writeDebug = (context, message) => {
-	if (!context.debug) return;
-	writeLine(process.stderr, colorize(context, "gray", `[debug] ${message}`));
-};
-const writeTotal = (context, count) => {
-	writeLine(process.stdout, colorize(context, "cyan", String(count)));
-};
-const escapeCsvField = (value) => {
-	if (value.includes(",") || value.includes("\"") || value.includes("\n")) return `"${value.replaceAll("\"", "\"\"")}"`;
-	return value;
-};
-const writeCsv = (headers, rows) => {
-	writeLine(process.stdout, headers.map(escapeCsvField).join(","));
-	for (const row of rows) writeLine(process.stdout, row.map(escapeCsvField).join(","));
-};
-const writeTsv = (headers, rows) => {
-	writeLine(process.stdout, headers.join("	"));
-	for (const row of rows) writeLine(process.stdout, row.join("	"));
-};
-/**
-* Write structured data to stdout, applying --jq filter and --limit if set.
-* Use this for all JSON/YAML/structured output from commands.
-*/
-const writeOutput = (context, data) => {
-	let result = data;
-	if (context.jq) try {
-		result = jmespath.search(result, context.jq);
-	} catch (error) {
-		throw new CliError(`Invalid --jq expression: ${error instanceof Error ? error.message : String(error)}`, EXIT_CODES.VALIDATION);
-	}
-	if (context.limit !== null && Array.isArray(result)) result = result.slice(0, context.limit);
-	switch (context.format) {
-		case "yaml":
-			writeYaml(result);
-			break;
-		case "json":
-			writeJson(result);
-			break;
-		default:
-			writeJson(result);
-			break;
-	}
-	if (context.copy) copyToClipboard(JSON.stringify(result, null, 2));
-};
-/**
-* Handles --total, --format csv, --format tsv, --format yaml output.
-* Returns true if the format was handled; caller renders text mode if false.
-*/
-const writeFormattedRows = (context, totalCount, headers, rows) => {
-	if (context.total) {
-		writeTotal(context, totalCount);
-		return true;
-	}
-	if (context.format === "yaml") {
-		const objects = rows.map((row) => Object.fromEntries(headers.map((h, i) => [h, row[i]])));
-		writeYaml(objects);
-		if (context.copy) copyToClipboard(stringify(objects));
-		return true;
-	}
-	if (context.format === "csv") {
-		writeCsv(headers, rows);
-		if (context.copy) copyToClipboard([headers.join(","), ...rows.map((r) => r.join(","))].join("\n"));
-		return true;
-	}
-	if (context.format === "tsv") {
-		writeTsv(headers, rows);
-		if (context.copy) copyToClipboard([headers.join("	"), ...rows.map((r) => r.join("	"))].join("\n"));
-		return true;
-	}
-	return false;
+	if (Number.isNaN(date.getTime())) return null;
+	return date.toISOString();
 };
-const copyToClipboard = (text) => {
-	try {
-		if (process.platform === "darwin") execSync("pbcopy", { input: text });
-		else if (process.platform === "win32") execSync("clip", { input: text });
-		else try {
-			execSync("xclip -selection clipboard", { input: text });
-		} catch {
-			execSync("xsel --clipboard --input", { input: text });
-		}
-		return true;
-	} catch {
-		return false;
-	}
+const parseDateOnlyString = (value) => {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	const match = ISO_DATE_ONLY_REGEX.exec(trimmed);
+	if (!match) return null;
+	const year = Number.parseInt(match[1] ?? "", 10);
+	const month = Number.parseInt(match[2] ?? "", 10);
+	const parts = {
+		day: Number.parseInt(match[3] ?? "", 10),
+		month,
+		year
+	};
+	return isValidDateOnlyParts(parts) ? parts : null;
+};
+const parseApiDateOnlyToEpoch = (value) => {
+	const parts = parseDateOnlyString(value);
+	return parts ? dateOnlyPartsToEpoch(parts) : null;
 };
+const parseApiInstantToEpoch = (value) => {
+	if (typeof value !== "string") return null;
+	const trimmed = value.trim();
+	if (trimmed.length === 0 || !ISO_INSTANT_REGEX.test(trimmed)) return null;
+	const parsed = Date.parse(trimmed);
+	return Number.isNaN(parsed) ? null : parsed;
+};
+const parseCliDateOnlyToEpoch = (value, fieldLabel) => {
+	if (!value) return null;
+	const parts = parseDateOnlyString(value);
+	if (!parts) throw new Error(`Invalid ${fieldLabel}: ${value}. Expected YYYY-MM-DD.`);
+	return dateOnlyPartsToEpoch(parts);
+};
+const dateOnlyEpochFromLocalDate = (now = /* @__PURE__ */ new Date()) => Date.UTC(now.getFullYear(), now.getMonth(), now.getDate());
 //#endregion
 //#region src/manage-api.ts
 const TASK_FIELDS = `
@@ -1999,11 +2090,11 @@ Examples:
 		});
 	});
 };
+const packageManifest = createRequire(import.meta.url)("../package.json");
 //#endregion
 //#region src/commands/doctor.ts
-const packageManifest$1 = createRequire(import.meta.url)("../package.json");
 const checkCliVersion = async () => {
-	const current = packageManifest$1.version;
+	const current = packageManifest.version;
 	try {
 		const response = await fetch("https://registry.npmjs.org/donebear/latest", { signal: AbortSignal.timeout(5e3) });
 		if (!response.ok) return {
@@ -2068,7 +2159,7 @@ const checkAuth = async (context) => {
 };
 const checkWorkspace = async () => {
 	try {
-		const { ensureLocalContext } = await import("./context-store-CK4yIl9e.mjs");
+		const { ensureLocalContext } = await import("./context-store-ClAx1T2N.mjs");
 		const localContext = await ensureLocalContext();
 		if (!localContext.workspaceId) return {
 			message: "No workspace selected (run `donebear workspace use`)",
@@ -2283,6 +2374,7 @@ const normalizeThingsLabelLookupKey = (value) => value.trim().toLocaleLowerCase(
 //#region src/import/model-id.ts
 const IMPORT_ID_NAMESPACE = "b1f9f0ac-9f76-54ed-8eb0-7d6d3a0a0a31";
 const SYNC_COMPOSITE_ID_NAMESPACE = "92a73695-d772-4b43-9fb4-d79f5fbef300";
+const IDEMPOTENCY_ID_NAMESPACE = "4c8af5e2-1d36-5a0b-9c47-2f81b3d6e955";
 const uuidToBytes = (uuid) => {
 	const normalized = uuid.replaceAll("-", "");
 	if (normalized.length !== 32) throw new Error(`Invalid UUID namespace: ${uuid}`);
@@ -2311,6 +2403,7 @@ const createUuidV5 = (name, namespace) => {
 };
 const createCompositeSyncId = (model, parts) => createUuidV5(`${model}:${JSON.stringify(parts)}`, SYNC_COMPOSITE_ID_NAMESPACE);
 const createDeterministicImportId = (params) => createUuidV5(`things:${params.workspaceId}:${params.modelName}:${params.sourceId}`, IMPORT_ID_NAMESPACE);
+const createIdempotentMutationId = (params) => createUuidV5(`idem:${params.workspaceId}:${params.modelName}:${params.part}:${params.key}`, IDEMPOTENCY_ID_NAMESPACE);
 const createTaskLabelId = (params) => createCompositeSyncId("TaskLabel", [
 	params.workspaceId,
 	params.taskId,
@@ -6527,97 +6620,6 @@ Notes:
 	});
 };
 //#endregion
-//#region src/commands/interactive.ts
-const HISTORY_FILE = join(CONFIG_DIR, "history.json");
-const MAX_HISTORY = 200;
-const isHistoryFile = (value) => {
-	if (typeof value !== "object" || value === null) return false;
-	const record = value;
-	return record.version === 1 && Array.isArray(record.entries) && record.entries.every((e) => typeof e === "string");
-};
-const loadHistory = async (historyFile) => {
-	try {
-		const raw = await readFile(historyFile, "utf-8");
-		const parsed = JSON.parse(raw);
-		if (isHistoryFile(parsed)) return parsed.entries;
-		return [];
-	} catch {
-		return [];
-	}
-};
-const tokenize = (input) => {
-	const tokens = [];
-	let current = "";
-	let inQuote = false;
-	let quoteChar = "";
-	for (const char of input) if (inQuote) if (char === quoteChar) inQuote = false;
-	else current += char;
-	else if (char === "\"" || char === "'") {
-		inQuote = true;
-		quoteChar = char;
-	} else if (char === " ") {
-		if (current.length > 0) {
-			tokens.push(current);
-			current = "";
-		}
-	} else current += char;
-	if (current.length > 0) tokens.push(current);
-	return tokens;
-};
-const buildCompleter = (program) => (line) => {
-	const allCommands = program.commands.flatMap((cmd) => [cmd.name(), ...cmd.aliases()]);
-	const hits = allCommands.filter((c) => c.startsWith(line));
-	return [hits.length > 0 ? hits : allCommands, line];
-};
-const runInteractiveMode = async (context, program) => {
-	const history = await loadHistory(HISTORY_FILE);
-	const rl = createInterface({
-		completer: buildCompleter(program),
-		historySize: MAX_HISTORY,
-		input: process.stdin,
-		output: process.stdout,
-		prompt: "donebear> "
-	});
-	for (const entry of [...history].toReversed()) rl.history.push(entry);
-	writeSuccess(context, "Done Bear interactive mode. Type \"exit\" or Ctrl+D to quit.");
-	writeInfo(context, "Commands: task, workspace, project, label, team, today, search, auth, whoami");
-	rl.prompt();
-	const sessionEntries = [];
-	for await (const line of rl) {
-		const trimmed = line.trim();
-		if (!trimmed) {
-			rl.prompt();
-			continue;
-		}
-		if (trimmed === "exit" || trimmed === "quit" || trimmed === ":q") break;
-		const tokens = tokenize(trimmed);
-		try {
-			await program.parseAsync([
-				"node",
-				"donebear",
-				...tokens
-			]);
-		} catch {}
-		sessionEntries.push(trimmed);
-		rl.prompt();
-	}
-	rl.close();
-	if (sessionEntries.length > 0) try {
-		const payload = {
-			entries: [...await loadHistory(HISTORY_FILE), ...sessionEntries].slice(-MAX_HISTORY),
-			version: 1
-		};
-		await mkdir(CONFIG_DIR, {
-			mode: 448,
-			recursive: true
-		});
-		await writeFile(HISTORY_FILE, `${JSON.stringify(payload, null, 2)}\n`, {
-			encoding: "utf-8",
-			mode: 384
-		});
-	} catch {}
-};
-//#endregion
 //#region src/commands/label.ts
 const sortLabels = (labels, sort) => {
 	const sorted = [...labels];
@@ -7091,17 +7093,23 @@ const runProjectAdd = async (context, name, options) => {
 		token: commandContext.token,
 		workspaceRef: normalizeWorkspaceRef(options.workspace)
 	});
-	const projectId = randomUUID();
+	const idempotencyId = (part) => options.idempotencyKey ? createIdempotentMutationId({
+		key: options.idempotencyKey,
+		modelName: "Project",
+		part,
+		workspaceId: workspace.id
+	}) : null;
+	const projectId = idempotencyId("model") ?? randomUUID();
 	const now = Date.now();
 	const key = generateProjectSlug(normalizedName, projectId);
 	await mutateModel(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		request: {
-			batchId: randomUUID(),
+			batchId: idempotencyId("batch") ?? randomUUID(),
 			transactions: [{
 				action: "INSERT",
-				clientId: commandContext.localContext.clientId,
-				clientTxId: randomUUID(),
+				clientId: options.idempotencyKey ? "cli-idem" : commandContext.localContext.clientId,
+				clientTxId: idempotencyId("tx") ?? randomUUID(),
 				modelId: projectId,
 				modelName: "Project",
 				payload: {
@@ -7268,7 +7276,7 @@ Agent tip: run "donebear spec project add" for full option reference
 			await runProjectShow(context, projectRef, { workspace: workspaceOverride ?? normalizeWorkspaceRef(options.workspace) ?? void 0 });
 		});
 	});
-	project.command("add").alias("create").description("Create a project").argument("[name]", "Project name (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-d, --description <text>", "Project description").option("--target-date <date>", "Target date (YYYY-MM-DD)").action(async (name, options, command) => {
+	project.command("add").alias("create").description("Create a project").argument("[name]", "Project name (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-d, --description <text>", "Project description").option("--target-date <date>", "Target date (YYYY-MM-DD)").option("--idempotency-key <key>", "Stable key making retries safe (repeated calls create only one project)").action(async (name, options, command) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			await runProjectAdd(context, name, {
@@ -7387,8 +7395,8 @@ const filterTasks = (tasks, options) => {
 	if (query.length === 0) return viewFiltered;
 	return viewFiltered.filter((task) => {
 		const title = task.title.toLowerCase();
-		const notes = task.description?.toLowerCase() ?? "";
-		return title.includes(query) || notes.includes(query);
+		const description = task.description?.toLowerCase() ?? "";
+		return title.includes(query) || description.includes(query);
 	});
 };
 const loadTasksForScope = (context, scope, apiOptions) => {
@@ -7469,7 +7477,7 @@ const runTaskShow = async (context, taskRef, options, workspaceOverride) => {
 	if (task.projectId) writeInfo(context, `projectId: ${task.projectId}`);
 	if (task.teamId) writeInfo(context, `teamId: ${task.teamId}`);
 	if (task.assigneeId) writeInfo(context, `assigneeId: ${task.assigneeId}`);
-	if (task.description) writeInfo(context, `notes: ${task.description}`);
+	if (task.description) writeInfo(context, `description: ${task.description}`);
 };
 const resolveTitle = async (context, rawTitle) => {
 	if (rawTitle) {
@@ -7480,20 +7488,28 @@ const resolveTitle = async (context, rawTitle) => {
 	if (prompted) return prompted;
 	throw new CliError("Task title is required.", EXIT_CODES.VALIDATION, "Provide a title as an argument: donebear task add \"My task\"");
 };
-const resolveNotes = async (_context, flagNotes) => {
-	if (typeof flagNotes === "string") {
-		const trimmed = flagNotes.trim();
-		return trimmed.length > 0 ? trimmed : null;
+const resolveDescription = async (context, flagDescription) => {
+	if (typeof flagDescription !== "string") return null;
+	if (flagDescription === "-") {
+		const piped = await readStdin();
+		if (!piped) {
+			writeWarning(context, "No description received on stdin (--description -); task created without a description.");
+			return null;
+		}
+		return piped;
 	}
-	const stdinContent = await readStdin();
-	if (stdinContent) return stdinContent;
-	return null;
+	const trimmed = flagDescription.trim();
+	if (trimmed.length === 0) {
+		writeWarning(context, "Empty --description value; task created without a description.");
+		return null;
+	}
+	return trimmed;
 };
 const runTaskAdd = async (context, title, options, workspaceOverride) => {
 	const commandContext = await resolveCommandContext(context);
 	const userId = await requireUserId(context, commandContext);
 	const normalizedTitle = await resolveTitle(context, title);
-	const notes = await resolveNotes(context, options.notes);
+	const description = await resolveDescription(context, options.description);
 	const { workspace, autoSelected } = await resolveWorkspace(context, {
 		apiBaseUrl: commandContext.apiBaseUrl,
 		storedWorkspaceId: commandContext.localContext.workspaceId,
@@ -7509,7 +7525,13 @@ const runTaskAdd = async (context, title, options, workspaceOverride) => {
 		token: commandContext.token,
 		workspaceId: workspace.id
 	}).then((teams) => resolveEntityId(teams, options.team, "Team")) : Promise.resolve(null)]);
-	const taskId = randomUUID();
+	const idempotencyId = (part) => options.idempotencyKey ? createIdempotentMutationId({
+		key: options.idempotencyKey,
+		modelName: "Task",
+		part,
+		workspaceId: workspace.id
+	}) : null;
+	const taskId = idempotencyId("model") ?? randomUUID();
 	const now = Date.now();
 	const view = parseTaskView(options.when);
 	const startFields = buildTaskStartFields(view);
@@ -7517,11 +7539,11 @@ const runTaskAdd = async (context, title, options, workspaceOverride) => {
 	await mutateModel(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		request: {
-			batchId: randomUUID(),
+			batchId: idempotencyId("batch") ?? randomUUID(),
 			transactions: [{
 				action: "INSERT",
-				clientId: commandContext.localContext.clientId,
-				clientTxId: randomUUID(),
+				clientId: options.idempotencyKey ? "cli-idem" : commandContext.localContext.clientId,
+				clientTxId: idempotencyId("tx") ?? randomUUID(),
 				modelId: taskId,
 				modelName: "Task",
 				payload: {
@@ -7530,7 +7552,7 @@ const runTaskAdd = async (context, title, options, workspaceOverride) => {
 					createdAt: now,
 					creatorId: userId,
 					deadlineAt: deadlineEpoch,
-					description: notes,
+					description,
 					key: taskId.replaceAll("-", "").slice(0, 8),
 					projectId,
 					sortOrder: 0,
@@ -7550,6 +7572,7 @@ const runTaskAdd = async (context, title, options, workspaceOverride) => {
 			autoSelected,
 			created: true,
 			deadlineAt: deadlineEpoch,
+			description,
 			id: taskId,
 			projectId,
 			teamId,
@@ -7563,6 +7586,7 @@ const runTaskAdd = async (context, title, options, workspaceOverride) => {
 	if (autoSelected) writeInfo(context, `Auto-selected workspace: ${workspace.name}`);
 	writeSuccess(context, `Added task: ${normalizedTitle}`);
 	writeInfo(context, `id: ${taskId}`);
+	if (description) writeInfo(context, `description: ${description}`);
 };
 const runTaskMutation = async (context, taskRef, payload) => {
 	const commandContext = await resolveCommandContext(context);
@@ -7630,7 +7654,7 @@ const resolveTeamId = async (context, commandContext, teamRef, workspaceRef) =>
 	}), teamRef, "Team");
 };
 const validateTaskEditOptions = (options) => {
-	if (options.clearNotes && typeof options.notes === "string") throw new Error("Use either --notes or --clear-notes, not both.");
+	if (options.clearDescription && typeof options.description === "string") throw new Error("Use either --description or --clear-description, not both.");
 	if (options.clearDeadline && typeof options.deadline === "string") throw new Error("Use either --deadline or --clear-deadline, not both.");
 	if (options.clearProject && typeof options.project === "string") throw new Error("Use either --project or --clear-project, not both.");
 	if (options.clearTeam && typeof options.team === "string") throw new Error("Use either --team or --clear-team, not both.");
@@ -7641,10 +7665,10 @@ const applyScalarEdits = (updates, options) => {
 		if (title.length === 0) throw new Error("Task title cannot be empty.");
 		updates.title = title;
 	}
-	if (options.clearNotes) updates.description = null;
-	else if (typeof options.notes === "string") {
-		const notes = options.notes.trim();
-		updates.description = notes.length > 0 ? notes : null;
+	if (options.clearDescription) updates.description = null;
+	else if (typeof options.description === "string") {
+		const description = options.description.trim();
+		updates.description = description.length > 0 ? description : null;
 	}
 	if (typeof options.when === "string") Object.assign(updates, buildTaskStartFields(parseTaskView(options.when)));
 	if (options.clearDeadline) updates.deadlineAt = null;
@@ -7660,7 +7684,7 @@ const runTaskEdit = async (context, taskRef, options, workspaceOverride) => {
 	else if (typeof options.project === "string") updates.projectId = await resolveProjectId(context, commandContext, options.project, wsRef);
 	if (options.clearTeam) updates.teamId = null;
 	else if (typeof options.team === "string") updates.teamId = await resolveTeamId(context, commandContext, options.team, wsRef);
-	if (Object.keys(updates).length === 0) throw new Error("No updates provided. Use --title, --notes, --clear-notes, --when, --deadline, --clear-deadline, --project, --clear-project, --team, or --clear-team.");
+	if (Object.keys(updates).length === 0) throw new Error("No updates provided. Use --title, --description, --clear-description, --when, --deadline, --clear-deadline, --project, --clear-project, --team, or --clear-team.");
 	updates.updatedAt = Date.now();
 	await runTaskMutation(context, taskRef, {
 		action: "UPDATE",
@@ -7767,7 +7791,7 @@ const runTaskRandom = async (context, options, workspaceOverride) => {
 	writeInfo(context, `start: ${task.start}`);
 	writeInfo(context, `startBucket: ${task.startBucket}`);
 	writeInfo(context, `deadline: ${formatDateOnlyEpoch(task.deadlineAt) ?? "(none)"}`);
-	if (task.description) writeInfo(context, `notes: ${task.description}`);
+	if (task.description) writeInfo(context, `description: ${task.description}`);
 };
 const resolveChecklistItemReference = async (context, commandContext, taskId, itemRef) => {
 	const trimmed = itemRef.trim();
@@ -7838,7 +7862,7 @@ Agent tip: run "donebear spec task add" for full option reference
 			}, workspaceOverride);
 		});
 	});
-	task.command("list").alias("ls").description("List tasks").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-s, --state <state>", "open|done|archived|all", "open").option("-n, --limit <count>", "Maximum number of tasks", (value) => parsePositiveInteger(value, "Limit"), DEFAULT_TASK_LIST_LIMIT).option("-q, --search <query>", "Filter by title or notes").option("-v, --view <view>", "Filter by view (inbox|anytime|today|upcoming|someday|logbook|trash)").addHelpText("after", `
+	task.command("list").alias("ls").description("List tasks").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-s, --state <state>", "open|done|archived|all", "open").option("-n, --limit <count>", "Maximum number of tasks", (value) => parsePositiveInteger(value, "Limit"), DEFAULT_TASK_LIST_LIMIT).option("-q, --search <query>", "Filter by title or description").option("-v, --view <view>", "Filter by view (inbox|anytime|today|upcoming|someday|logbook|trash)").addHelpText("after", `
 Examples:
   donebear task list --json
   donebear task list --state done --json
@@ -7859,7 +7883,7 @@ Views:  inbox | anytime | today | upcoming | someday | logbook | trash
 			await runTaskShow(context, taskId, options, workspaceOverride);
 		});
 	});
-	task.command("read").description("Print the description (notes) of a task").argument("<id>", "Task id or unique prefix").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").action(async (taskId, options, command) => {
+	task.command("read").description("Print the description of a task").argument("<id>", "Task id or unique prefix").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").action(async (taskId, options, command) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			await runTaskRead(context, taskId, options, workspaceOverride);
@@ -7883,15 +7907,15 @@ Views:  inbox | anytime | today | upcoming | someday | logbook | trash
 			await runTaskRandom(context, options, workspaceOverride);
 		});
 	});
-	task.command("add").alias("create").description("Create a task").argument("[title]", "Task title (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-n, --notes <text>", "Task notes (or pipe via stdin)").option("--when <view>", "inbox|anytime|today|upcoming|someday", "inbox").option("--deadline <date>", "Deadline (YYYY-MM-DD or ISO datetime)").option("--project <key-or-id>", "Project key or id").option("--team <key-or-id>", "Team key or id").addHelpText("after", `
+	task.command("add").alias("create").description("Create a task").argument("[title]", "Task title (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-d, --description <text>", "Task description (use --description - to read from piped stdin)").option("--when <view>", "inbox|anytime|today|upcoming|someday", "inbox").option("--deadline <date>", "Deadline (YYYY-MM-DD or ISO datetime)").option("--project <key-or-id>", "Project key or id").option("--team <key-or-id>", "Team key or id").option("--idempotency-key <key>", "Stable key making retries safe (repeated calls create only one task)").addHelpText("after", `
 Examples:
   donebear task add "Fix login bug" --when today --json
-  donebear task add "Write tests" --deadline 2026-03-15 --project PROJ --json
-  donebear task add "Review PR" --when anytime --notes "Check for XSS" --json
-  echo "Multi-line notes" | donebear task add "My task"
+  donebear task add "Write tests" --deadline 2030-03-15 --project PROJ --json
+  donebear task add "Review PR" --when anytime --description "Check for XSS" --json
+  echo "Multi-line description" | donebear task add "My task" --description -
   donebear task add                       # prompts for title interactively
 
-Date format: YYYY-MM-DD (e.g. 2026-03-15)
+Date format: YYYY-MM-DD (e.g. 2030-03-15)
 View (--when): inbox | anytime | today | upcoming | someday
 `).action(async (title, options, command) => {
 		const context = contextFromCommand(command);
@@ -7899,7 +7923,7 @@ View (--when): inbox | anytime | today | upcoming | someday
 			await runTaskAdd(context, title, options, workspaceOverride);
 		});
 	});
-	task.command("edit").description("Update task fields").argument("<id>", "Task id or unique prefix").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("--title <title>", "Replace task title").option("--notes <text>", "Replace task notes (empty string clears)").option("--clear-notes", "Clear task notes").option("--when <view>", "Set view bucket (inbox|anytime|today|upcoming|someday)").option("--deadline <date>", "Set deadline (YYYY-MM-DD or ISO datetime)").option("--clear-deadline", "Clear deadline").option("--project <key-or-id>", "Set project (key or id)").option("--clear-project", "Remove project assignment").option("--team <key-or-id>", "Set team (key or id)").option("--clear-team", "Remove team assignment").action(async (taskId, options, command) => {
+	task.command("edit").description("Update task fields").argument("<id>", "Task id or unique prefix").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("--title <title>", "Replace task title").option("--description <text>", "Replace task description (empty string clears)").option("--clear-description", "Clear task description").option("--when <view>", "Set view bucket (inbox|anytime|today|upcoming|someday)").option("--deadline <date>", "Set deadline (YYYY-MM-DD or ISO datetime)").option("--clear-deadline", "Clear deadline").option("--project <key-or-id>", "Set project (key or id)").option("--clear-project", "Remove project assignment").option("--team <key-or-id>", "Set team (key or id)").option("--clear-team", "Remove team assignment").action(async (taskId, options, command) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			await runTaskEdit(context, taskId, options, workspaceOverride);
@@ -8216,7 +8240,7 @@ const runSearch = async (context, query, options, workspaceOverride) => {
 	if (context.copy) copyToClipboard(taskListLines(limited).join("\n"));
 };
 const registerSearchCommand = (program, workspaceOverride) => {
-	program.command("search").description("Search tasks by title or notes").argument("[query]", "Search query (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-s, --state <state>", "open|done|archived|all", "all").option("-n, --limit <count>", "Maximum number of results", (value) => parsePositiveInteger(value, "Limit"), DEFAULT_SEARCH_LIMIT).addHelpText("after", `
+	program.command("search").description("Search tasks by title or description").argument("[query]", "Search query (prompted interactively if omitted)").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-s, --state <state>", "open|done|archived|all", "all").option("-n, --limit <count>", "Maximum number of results", (value) => parsePositiveInteger(value, "Limit"), DEFAULT_SEARCH_LIMIT).addHelpText("after", `
 Examples:
   donebear search "meeting"
   donebear search "launch" --state open
@@ -8271,9 +8295,15 @@ const OVERVIEW = {
 			subcommands: ["things"]
 		},
 		label: {
-			description: "List workspace labels",
+			description: "Manage workspace labels and task label assignments",
 			quick_example: "donebear label list --json",
-			subcommands: ["list", "show"]
+			subcommands: [
+				"list",
+				"show",
+				"create",
+				"add",
+				"remove"
+			]
 		},
 		project: {
 			description: "Manage projects",
@@ -8311,6 +8341,7 @@ const OVERVIEW = {
 				"read",
 				"append",
 				"prepend",
+				"random",
 				"checklist"
 			]
 		},
@@ -8436,10 +8467,21 @@ const COMMAND_SPECS = {
 			user: "{ id, email }"
 		},
 		non_interactive: "For CI/scripts, set DONEBEAR_TOKEN=<token> instead of using auth login.",
-		options: { "--no-open": {
-			description: "Print auth URL instead of opening browser",
-			type: "boolean"
-		} },
+		options: {
+			"--no-open": {
+				description: "Print auth URL instead of opening browser",
+				type: "boolean"
+			},
+			"--port": {
+				default: 8787,
+				description: "Loopback callback port for the OAuth redirect",
+				type: "number"
+			},
+			"--timeout": {
+				description: "Seconds to wait for the OAuth callback",
+				type: "number"
+			}
+		},
 		usage: "donebear auth login [options]"
 	},
 	"auth status": {
@@ -8561,6 +8603,10 @@ const COMMAND_SPECS = {
 				enum: ["note", "none"],
 				type: "string"
 			},
+			"--skip-teams": {
+				description: "Skip importing Things Areas as Teams and TeamProject links",
+				type: "boolean"
+			},
 			"--workspace": {
 				description: "Workspace id, slug, or name",
 				type: "string"
@@ -8576,7 +8622,15 @@ const COMMAND_SPECS = {
 			ok: "boolean",
 			workspace: "WorkspaceSummary"
 		},
-		options: { "--workspace": { type: "string" } },
+		options: {
+			"--sort": {
+				default: "alpha",
+				description: "Sort order: alpha|count",
+				enum: ["alpha", "count"],
+				type: "string"
+			},
+			"--workspace": { type: "string" }
+		},
 		usage: "donebear label list [options]"
 	},
 	"project add": {
@@ -8595,6 +8649,10 @@ const COMMAND_SPECS = {
 		notes: "URL slug is auto-generated from name (e.g. 'Q2 Launch' → 'q2-launch-a1b2c3d4').",
 		options: {
 			"--description": { type: "string" },
+			"--idempotency-key": {
+				description: "Stable key making retries safe (repeated calls create only one project)",
+				type: "string"
+			},
 			"--target-date": {
 				description: "Target completion date",
 				format: "YYYY-MM-DD",
@@ -8633,8 +8691,25 @@ const COMMAND_SPECS = {
 			ok: "boolean"
 		},
 		options: {
+			"--clear-description": {
+				description: "Clear the project description",
+				type: "boolean"
+			},
+			"--clear-target-date": {
+				description: "Clear the project target date",
+				type: "boolean"
+			},
 			"--description": { type: "string" },
 			"--name": { type: "string" },
+			"--status": {
+				description: "Set status",
+				enum: [
+					"active",
+					"done",
+					"archived"
+				],
+				type: "string"
+			},
 			"--target-date": {
 				format: "YYYY-MM-DD",
 				type: "string"
@@ -8712,13 +8787,14 @@ const COMMAND_SPECS = {
 		examples: [
 			"donebear task add \"Fix login bug\" --when today --json",
 			"donebear task add \"Write tests\" --deadline 2026-03-15 --project PROJ --json",
-			"donebear task add \"Review PR\" --when anytime --notes \"Triage for bugs\" --json",
-			"echo \"Multi-line notes\" | donebear task add \"My task\"",
+			"donebear task add \"Review PR\" --when anytime --description \"Triage for bugs\" --json",
+			"echo \"Multi-line description\" | donebear task add \"My task\" --description -",
 			"donebear task add  # prompts for title interactively in TTY"
 		],
 		json_output: {
 			created: "boolean",
 			deadlineAt: "number | null",
+			description: "string | null",
 			id: "string (UUID)",
 			projectId: "string | null",
 			teamId: "string | null",
@@ -8727,15 +8803,19 @@ const COMMAND_SPECS = {
 			workspaceId: "string",
 			workspaceName: "string"
 		},
-		notes: "Title is prompted interactively when omitted in TTY. Notes can be piped via stdin. Task id accepts full UUID or prefix of >= 4 chars in all other task subcommands.",
+		notes: "Title is prompted interactively when omitted in TTY. The description is NOT read from stdin unless you pass --description - explicitly; without --description the task is created with no description (and the saved description is echoed back in the output). Task id accepts full UUID or prefix of >= 4 chars in all other task subcommands.",
 		options: {
 			"--deadline": {
 				description: "Due date",
 				format: "YYYY-MM-DD",
 				type: "string"
 			},
-			"--notes": {
-				description: "Body / description text (or pipe via stdin)",
+			"--description": {
+				description: "Body / description text. Pass --description - to read from piped stdin.",
+				type: "string"
+			},
+			"--idempotency-key": {
+				description: "Stable key making retries safe (repeated calls create only one task)",
 				type: "string"
 			},
 			"--project": {
@@ -8778,7 +8858,7 @@ const COMMAND_SPECS = {
 			}
 		},
 		command: "task append",
-		description: "Append text to task notes",
+		description: "Append text to a task's description",
 		examples: ["donebear task append abc1 \"Additional context\" --json"],
 		json_output: {
 			id: "string",
@@ -8824,20 +8904,40 @@ const COMMAND_SPECS = {
 			type: "string"
 		} },
 		command: "task edit",
-		examples: ["donebear task edit abc1 --title \"Updated title\" --json", "donebear task edit abc1 --when today --deadline 2026-03-20 --json"],
+		examples: [
+			"donebear task edit abc1 --title \"Updated title\" --json",
+			"donebear task edit abc1 --when today --deadline 2030-01-15 --json",
+			"donebear task edit abc1 --clear-deadline --json"
+		],
 		json_output: {
 			action: "string",
 			id: "string",
 			ok: "boolean"
 		},
 		options: {
+			"--clear-deadline": {
+				description: "Clear the due date",
+				type: "boolean"
+			},
+			"--clear-description": {
+				description: "Clear the description",
+				type: "boolean"
+			},
+			"--clear-project": {
+				description: "Remove the task from its project",
+				type: "boolean"
+			},
+			"--clear-team": {
+				description: "Remove the task from its team",
+				type: "boolean"
+			},
 			"--deadline": {
-				description: "Set due date (pass empty string to clear)",
+				description: "Set due date",
 				format: "YYYY-MM-DD",
 				type: "string"
 			},
-			"--notes": {
-				description: "Replace notes/description",
+			"--description": {
+				description: "Replace the task description",
 				type: "string"
 			},
 			"--project": {
@@ -8935,7 +9035,7 @@ const COMMAND_SPECS = {
 			}
 		},
 		command: "task prepend",
-		description: "Prepend text to task notes",
+		description: "Prepend text to a task's description",
 		examples: ["donebear task prepend abc1 \"URGENT: \" --json"],
 		json_output: {
 			id: "string",
@@ -8951,7 +9051,7 @@ const COMMAND_SPECS = {
 			type: "string"
 		} },
 		command: "task read",
-		description: "Print task description/notes as plain text",
+		description: "Print task description as plain text",
 		examples: ["donebear task read abc1"],
 		options: { "--workspace": { type: "string" } },
 		usage: "donebear task read <id> [options]"
@@ -9098,9 +9198,12 @@ const TOP_LEVEL_SPECS = {
 	},
 	label: {
 		command: "label",
-		description: "List workspace labels",
+		description: "Manage workspace labels and task label assignments",
 		subcommands: {
+			add: "Add a label to a task",
+			create: "Create a new label",
 			list: "List all labels",
+			remove: "Remove a label from a task",
 			show: "Get label details"
 		}
 	},
@@ -9124,14 +9227,15 @@ const TOP_LEVEL_SPECS = {
 		notes: "Task id accepts full UUID or a prefix of >= 4 chars.",
 		subcommands: {
 			add: "Create a new task",
-			append: "Append text to task notes",
+			append: "Append text to a task's description",
 			archive: "Archive a task",
 			checklist: "Manage task checklist items",
 			done: "Mark a task as complete",
 			edit: "Update task fields",
 			list: "List tasks (--state, --view, --search, --limit)",
-			prepend: "Prepend text to task notes",
-			read: "Print task notes as plain text",
+			prepend: "Prepend text to a task's description",
+			random: "Pick a random task (--state to filter)",
+			read: "Print task description as plain text",
 			reopen: "Reopen a completed task",
 			show: "Get task details by id",
 			unarchive: "Restore an archived task"
@@ -9757,30 +9861,8 @@ Examples:
 	});
 };
 //#endregion
-//#region src/cli.ts
-const packageManifest = createRequire(import.meta.url)("../package.json");
-const WORKSPACE_PREFIX_REGEX = /^workspace=(.+)$/iu;
-const extractWorkspaceTarget = (argv) => {
-	const processedArgv = [...argv];
-	const firstArg = processedArgv[2];
-	if (firstArg) {
-		const match = WORKSPACE_PREFIX_REGEX.exec(firstArg);
-		if (match?.[1]) {
-			processedArgv.splice(2, 1);
-			return {
-				processedArgv,
-				workspaceOverride: match[1].trim()
-			};
-		}
-	}
-	return {
-		processedArgv,
-		workspaceOverride: null
-	};
-};
-const main = async () => {
-	loadCliEnvironmentFiles();
-	const { processedArgv, workspaceOverride } = extractWorkspaceTarget(process.argv);
+//#region src/program.ts
+const buildProgram = (workspaceOverride = null) => {
 	const program = new Command();
 	program.name(CLI_NAME).description("Done Bear CLI for auth, workspace, and task workflows").version(packageManifest.version, "-v, --version").showHelpAfterError().showSuggestionAfterError();
 	addGlobalOptions(program);
@@ -9824,6 +9906,33 @@ Filtering & output:
 	registerSearchCommand(program, workspaceOverride);
 	registerHistoryCommand(program, workspaceOverride);
 	registerWhoAmICommand(program);
+	return program;
+};
+//#endregion
+//#region src/cli.ts
+const WORKSPACE_PREFIX_REGEX = /^workspace=(.+)$/iu;
+const extractWorkspaceTarget = (argv) => {
+	const processedArgv = [...argv];
+	const firstArg = processedArgv[2];
+	if (firstArg) {
+		const match = WORKSPACE_PREFIX_REGEX.exec(firstArg);
+		if (match?.[1]) {
+			processedArgv.splice(2, 1);
+			return {
+				processedArgv,
+				workspaceOverride: match[1].trim()
+			};
+		}
+	}
+	return {
+		processedArgv,
+		workspaceOverride: null
+	};
+};
+const main = async () => {
+	loadCliEnvironmentFiles();
+	const { processedArgv, workspaceOverride } = extractWorkspaceTarget(process.argv);
+	const program = buildProgram(workspaceOverride);
 	const hasUserArgs = processedArgv.length <= 2;
 	const isTTY = process.stdin.isTTY === true;
 	if (hasUserArgs && isTTY) {