donebear 0.4.3 → 0.5.0

package/dist/cli.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { a as toCliError, b as DONEBEAR_TOKEN_ENV, d as DEFAULT_OAUTH_CALLBACK_PATH, f as DEFAULT_OAUTH_CALLBACK_PORT, i as EXIT_CODES, l as CONFIG_DIR, n as setCurrentWorkspace, o as AUTH_FILE_PATH, r as CliError, s as CLI_NAME, t as ensureLocalContext } from "./context-store-BBEVWudm.mjs";
-import { n as readStdin, t as promptForValue } from "./prompt-GfcWO85b.mjs";
+import { S as DONEBEAR_TOKEN_ENV, _ as DONEBEAR_API_URL_ENV, a as SyncMutationRejectedError, c as CLI_NAME, f as DEFAULT_APP_URL, i as EXIT_CODES, m as DEFAULT_OAUTH_CALLBACK_PORT, n as setCurrentWorkspace, o as toCliError, p as DEFAULT_OAUTH_CALLBACK_PATH, r as CliError, s as AUTH_FILE_PATH, t as ensureLocalContext, u as CONFIG_DIR } from "./context-store-ByUXl7Cn.mjs";
+import { n as readStdin, t as promptForValue } from "./prompt-Bv9qkjNw.mjs";
 import { createRequire } from "node:module";
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { basename, join, resolve } from "node:path";
@@ -14,11 +14,31 @@ import { accessSync, constants, existsSync, readdirSync, statSync } from "node:f
 import { config } from "dotenv";
 import { Command, InvalidArgumentError } from "commander";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { createServer } from "node:http";
-import { fileURLToPath } from "node:url";
 import Database from "better-sqlite3";
 //#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
 //#endregion
 //#region src/output.ts
 const writeLine = (stream, message) => {
@@ -84,9 +104,7 @@ const writeOutput = (context, data) => {
 		case "json":
 			writeJson(result);
 			break;
-		default:
-			writeJson(result);
-			break;
+		default: writeJson(result);
 	}
 	if (context.copy) copyToClipboard(JSON.stringify(result, null, 2));
 };
@@ -155,9 +173,10 @@ const tokenize = (input) => {
 	let current = "";
 	let inQuote = false;
 	let quoteChar = "";
-	for (const char of input) if (inQuote) if (char === quoteChar) inQuote = false;
-	else current += char;
-	else if (char === "\"" || char === "'") {
+	for (const char of input) if (inQuote) {
+		if (char === quoteChar) inQuote = false;
+		else current += char;
+	} else if (char === "\"" || char === "'") {
 		inQuote = true;
 		quoteChar = char;
 	} else if (char === " ") {
@@ -209,7 +228,7 @@ const runInteractiveMode = async (context, program) => {
 	rl.close();
 	if (sessionEntries.length > 0) try {
 		const payload = {
-			entries: [...await loadHistory(HISTORY_FILE), ...sessionEntries].slice(-MAX_HISTORY),
+			entries: [...await loadHistory(HISTORY_FILE), ...sessionEntries].slice(-200),
 			version: 1
 		};
 		await mkdir(CONFIG_DIR, {
@@ -346,7 +365,8 @@ const parseAuthFile = (payload) => {
 };
 const readStoredAuthSession = async () => {
 	try {
-		return parseAuthFile(await readFile(AUTH_FILE_PATH, "utf-8")).session;
+		const raw = await readFile(AUTH_FILE_PATH, "utf-8");
+		return parseAuthFile(raw).session;
 	} catch (error) {
 		if (isRecord$1(error) && error.code === "ENOENT") return null;
 		if (error instanceof CliError) throw error;
@@ -501,6 +521,8 @@ const resolveTokenStatus = (token) => {
 */
 const TASK_FIELDS = {
 	bootstrapFields: [
+		"agentAssigneeId",
+		"revision",
 		"id",
 		"number",
 		"title",
@@ -534,6 +556,7 @@ const TASK_FIELDS = {
 		"repeatNextAt"
 	],
 	insertFields: [
+		"agentAssigneeId",
 		"archivedAt",
 		"assigneeId",
 		"completedAt",
@@ -554,6 +577,7 @@ const TASK_FIELDS = {
 		"repeatStatus",
 		"repeatTemplateId",
 		"repeatType",
+		"revision",
 		"sortOrder",
 		"start",
 		"startBucket",
@@ -566,6 +590,8 @@ const TASK_FIELDS = {
 		"workspaceId"
 	],
 	iosKeys: [
+		"agentAssigneeId",
+		"revision",
 		"id",
 		"number",
 		"title",
@@ -618,11 +644,14 @@ const TASK_FIELDS = {
 		"projectId",
 		"teamId",
 		"assigneeId",
+		"agentAssigneeId",
+		"revision",
 		"headingId",
 		"repeatRule",
 		"repeatTemplateId"
 	],
 	updateFields: [
+		"agentAssigneeId",
 		"title",
 		"description",
 		"sortOrder",
@@ -654,7 +683,7 @@ const TASK_FIELDS = {
 }.readProjection.join("\n");
 //#endregion
 //#region ../../packages/task-logic/src/date-only.ts
-const DATE_ONLY_DAY_MS = 1440 * 60 * 1e3;
+const DATE_ONLY_DAY_MS = 864e5;
 const DATE_ONLY_INPUT_PATTERN = /^(\d{4})-(\d{2})-(\d{2})$/u;
 const isFiniteEpoch$1 = (value) => typeof value === "number" && Number.isFinite(value);
 const isCanonicalDateOnlyEpoch = (value) => value % DATE_ONLY_DAY_MS === 0;
@@ -918,6 +947,71 @@ const createSyncMutateClient = ({ baseUrl, errorMapper = defaultErrorMapper$1, f
 	return { mutate };
 };
 //#endregion
+//#region ../../packages/manage-client/src/bound-task-update.ts
+/** Task fields a bound agent may change through a conditional command. */
+const BOUND_TASK_PATCH_FIELDS = [
+	"archivedAt",
+	"completedAt",
+	"deadlineAt",
+	"description",
+	"headingId",
+	"projectId",
+	"reminderAt",
+	"start",
+	"startBucket",
+	"startDate",
+	"teamId",
+	"title",
+	"todayIndexReferenceDate"
+];
+/**
+* Bound keys write through the conditional Task command; unbound callers
+* retain native sync. Returns false when the caller is not a bound agent.
+*/
+const updateBoundTasks = async (input) => {
+	const noun = input.noun ?? "change";
+	if (!input.token.startsWith("db_")) return false;
+	const workspaceId = input.updates[0]?.task.workspaceId;
+	if (!workspaceId || input.updates.some(({ task }) => task.workspaceId !== workspaceId)) throw new Error("Change tasks in one explicit workspace.");
+	const binding = await input.send(`/api/task-agents/self?workspaceId=${encodeURIComponent(workspaceId)}`);
+	if (binding.workspaceId !== workspaceId || binding.agent === void 0) throw new Error("Task agent binding is unavailable.");
+	if (binding.agent === null) return false;
+	if (binding.agent.disabledAt !== null) throw new Error("This task agent is disabled.");
+	if (input.updates.some(({ task }) => task.agentAssigneeId !== binding.agent?.id)) throw new Error("A task agent can change only tasks assigned to it.");
+	if (input.updates.some(({ task }) => !Number.isInteger(task.revision) || task.revision < 1)) throw new Error("The change requires the original selected task revision.");
+	const allowed = new Set(BOUND_TASK_PATCH_FIELDS);
+	for (const { patch } of input.updates) {
+		const refused = Object.keys(patch).filter((key) => !allowed.has(key));
+		if (refused.length > 0) throw new Error(`A task agent cannot change ${refused.join(", ")}. Hand the task off instead.`);
+	}
+	let changed = 0;
+	for (const { task, patch } of input.updates.filter(({ task: selected }, index, updates) => updates.findIndex((candidate) => candidate.task.id === selected.id) === index)) try {
+		const result = await input.send("/api/task-commands", {
+			expectedRevision: task.revision,
+			kind: "update",
+			operationId: crypto.randomUUID(),
+			patch,
+			taskId: task.id,
+			workspaceId
+		});
+		if (result.kind !== "update" || result.task?.id !== task.id || Object.entries(patch).some(([key, value]) => result.task?.[key] !== value) || result.task.revision !== task.revision + 1) throw new Error("The change has no matching committed receipt; do not retry automatically.");
+		changed += 1;
+	} catch (error) {
+		throw new Error(`${noun[0]?.toUpperCase()}${noun.slice(1)} failed with ${changed} confirmed ${noun}(s). The current request may have an unknown outcome; do not retry automatically. ${error instanceof Error ? error.message : "No response."}`, { cause: error });
+	}
+	return true;
+};
+/** Archive is the one bound write the CLI also drives; it keeps its own wording. */
+const archiveBoundTasks = (input) => updateBoundTasks({
+	noun: "archive",
+	send: input.send,
+	token: input.token,
+	updates: input.tasks.map((task) => ({
+		patch: { archivedAt: input.archivedAt },
+		task
+	}))
+});
+//#endregion
 //#region ../../packages/manage-client/src/index.ts
 const TASKS_QUERY = `
   query DonebearTasks($first: Int!, $after: String, $workspaceId: ID!) {
@@ -956,6 +1050,7 @@ const toInstantEpoch = (value) => {
 	return Number.isFinite(epoch) ? epoch : null;
 };
 const toTaskRecord$1 = (node) => ({
+	agentAssigneeId: node.agentAssigneeId,
 	archivedAt: toInstantEpoch(node.archivedAt),
 	assigneeId: node.assigneeId,
 	completedAt: toInstantEpoch(node.completedAt),
@@ -969,6 +1064,7 @@ const toTaskRecord$1 = (node) => ({
 	projectId: node.projectId,
 	repeatRule: node.repeatRule,
 	repeatTemplateId: node.repeatTemplateId,
+	revision: node.revision,
 	start: node.start,
 	startBucket: node.startBucket,
 	startDate: parseDateOnlyInputToEpoch(node.startDate),
@@ -1291,7 +1387,7 @@ const WORKSPACE_INVITATION_CREATE_MUTATION = `
   mutation WorkspaceInvitationCreate($input: WorkspaceInvitationCreateInput!) {
     workspaceInvitationCreate(input: $input) {
       success lastSyncId
-      invitation { id email code role expiresAt createdAt usedAt usedByUserId workspaceId }
+      invitation { id email code role expiresAt createdAt usedAt usedByUserId workspaceId kind projectId }
     }
   }
 `;
@@ -1369,6 +1465,7 @@ const toTaskRecord = (value) => {
 	if (typeof row.id !== "string" || typeof row.number !== "number" || typeof row.title !== "string") return null;
 	if (typeof row.creatorId !== "string" || typeof row.workspaceId !== "string" || typeof row.start !== "string" || typeof row.startBucket !== "string") return null;
 	return {
+		agentAssigneeId: typeof row.agentAssigneeId === "string" ? row.agentAssigneeId : null,
 		archivedAt: toNullableNumber(row.archivedAt),
 		assigneeId: typeof row.assigneeId === "string" ? row.assigneeId : null,
 		completedAt: toNullableNumber(row.completedAt),
@@ -1382,6 +1479,7 @@ const toTaskRecord = (value) => {
 		projectId: typeof row.projectId === "string" ? row.projectId : null,
 		repeatRule: typeof row.repeatRule === "string" ? row.repeatRule : null,
 		repeatTemplateId: typeof row.repeatTemplateId === "string" ? row.repeatTemplateId : null,
+		revision: typeof row.revision === "number" ? row.revision : 0,
 		start: row.start,
 		startBucket: row.startBucket,
 		startDate: toNullableNumber(row.startDate),
@@ -1530,12 +1628,14 @@ const toTaskAttachmentRecord = (value) => {
 };
 /** A task's comment thread, oldest first. */
 const loadCommentsByTask = async (context, options) => {
-	const rows = await requestNdjson(context, `${options.baseUrl}/sync/batch`, {
-		body: { requests: [{
-			indexedKey: "taskId",
-			keyValue: options.taskId,
-			modelName: "Comment"
-		}] },
+	const url = `${options.baseUrl}/sync/batch`;
+	const body = { requests: [{
+		indexedKey: "taskId",
+		keyValue: options.taskId,
+		modelName: "Comment"
+	}] };
+	const rows = await requestNdjson(context, url, {
+		body,
 		token: options.token
 	});
 	const results = [];
@@ -1546,12 +1646,14 @@ const loadCommentsByTask = async (context, options) => {
 	return results.toSorted((a, b) => (a.createdAt ?? 0) - (b.createdAt ?? 0));
 };
 const loadReadyTaskAttachmentsByTask = async (context, options) => {
-	const rows = await requestNdjson(context, `${options.baseUrl}/sync/batch`, {
-		body: { requests: [{
-			indexedKey: "taskId",
-			keyValue: options.taskId,
-			modelName: "TaskAttachment"
-		}] },
+	const url = `${options.baseUrl}/sync/batch`;
+	const body = { requests: [{
+		indexedKey: "taskId",
+		keyValue: options.taskId,
+		modelName: "TaskAttachment"
+	}] };
+	const rows = await requestNdjson(context, url, {
+		body,
 		token: options.token
 	});
 	const results = [];
@@ -1564,7 +1666,8 @@ const loadReadyTaskAttachmentsByTask = async (context, options) => {
 const resolveApiBaseUrl = (context) => {
 	const fromContext = context.apiUrlOverride?.trim();
 	if (fromContext) return normalizeApiUrl(fromContext);
-	return normalizeApiUrl(readEnvValue("DONEBEAR_API_URL") ?? "https://api.donebear.com");
+	const fromEnv = readEnvValue(DONEBEAR_API_URL_ENV);
+	return normalizeApiUrl(fromEnv ?? "https://api.donebear.com");
 };
 const mapGraphqlFailure = (failure) => {
 	if (failure.type === "http") {
@@ -1600,11 +1703,12 @@ const listWorkspaces = async (_context, options) => await createGraphqlClient({
 	getToken: () => options.token
 }).listWorkspaces();
 const createWorkspace = async (context, options) => {
-	return toWorkspaceRecordFromGraphqlNode((await requestGraphql(context, options.baseUrl, {
+	const data = await requestGraphql(context, options.baseUrl, {
 		query: WORKSPACE_CREATE_MUTATION,
 		token: options.token,
 		variables: { input: options.body }
-	})).workspaceCreate.workspace);
+	});
+	return toWorkspaceRecordFromGraphqlNode(data.workspaceCreate.workspace);
 };
 const joinWorkspace = async (context, options) => {
 	const data = await requestGraphql(context, options.baseUrl, {
@@ -1634,12 +1738,14 @@ const loadTasksByWorkspaceIds = (context, options) => paginateGraphql(context, {
 	variables: { workspaceIds: options.workspaceIds }
 });
 const loadTaskById = async (context, options) => {
-	const rows = await requestNdjson(context, `${options.baseUrl}/sync/batch`, {
-		body: { requests: [{
-			indexedKey: "id",
-			keyValue: options.taskId,
-			modelName: "Task"
-		}] },
+	const url = `${options.baseUrl}/sync/batch`;
+	const body = { requests: [{
+		indexedKey: "id",
+		keyValue: options.taskId,
+		modelName: "Task"
+	}] };
+	const rows = await requestNdjson(context, url, {
+		body,
 		token: options.token
 	});
 	for (const row of rows) {
@@ -1697,12 +1803,14 @@ const loadTeamsByWorkspaceIds = (context, options) => paginateGraphql(context, {
 	variables: { workspaceIds: options.workspaceIds }
 });
 const loadChecklistItemsByTask = async (context, options) => {
-	const rows = await requestNdjson(context, `${options.baseUrl}/sync/batch`, {
-		body: { requests: [{
-			indexedKey: "taskId",
-			keyValue: options.taskId,
-			modelName: "TaskChecklistItem"
-		}] },
+	const url = `${options.baseUrl}/sync/batch`;
+	const body = { requests: [{
+		indexedKey: "taskId",
+		keyValue: options.taskId,
+		modelName: "TaskChecklistItem"
+	}] };
+	const rows = await requestNdjson(context, url, {
+		body,
 		token: options.token
 	});
 	const results = [];
@@ -1722,7 +1830,10 @@ const mapSyncMutateFailure = (failure) => {
 		const exitCode = status === 401 || status === 403 ? EXIT_CODES.AUTH_REQUIRED : EXIT_CODES.ERROR;
 		return new CliError(extractErrorMessage(body), exitCode);
 	}
-	if (failure.type === "mutation") return new CliError(failure.response.results.find((item) => !item.success)?.error ?? "Sync mutation failed", EXIT_CODES.ERROR);
+	if (failure.type === "mutation") {
+		const result = failure.response.results.find((item) => !item.success);
+		return new SyncMutationRejectedError(result?.error ?? "Sync mutation failed", failure.response.results);
+	}
 	if (failure.type === "timeout") return new CliError(`Sync mutation timed out after ${failure.timeoutMs}ms`, EXIT_CODES.ERROR);
 	if (failure.cause instanceof Error) return failure.cause;
 	return new CliError("Sync mutation request failed", EXIT_CODES.ERROR);
@@ -1766,14 +1877,17 @@ const listWorkspaceInvitations = async (context, options) => await paginateGraph
 const createWorkspaceInvitation = async (context, options) => {
 	const input = omitUndefined({
 		email: options.email,
+		kind: options.kind,
+		projectId: options.projectId,
 		role: options.role,
 		workspaceId: options.workspaceId
 	});
-	return toWorkspaceInvitationRecordFromGraphqlNode((await requestGraphql(context, options.baseUrl, {
+	const data = await requestGraphql(context, options.baseUrl, {
 		query: WORKSPACE_INVITATION_CREATE_MUTATION,
 		token: options.token,
 		variables: { input }
-	})).workspaceInvitationCreate.invitation);
+	});
+	return toWorkspaceInvitationRecordFromGraphqlNode(data.workspaceInvitationCreate.invitation);
 };
 const listWorkspaceHistory = async (context, options) => {
 	const variables = omitUndefined({
@@ -1853,6 +1967,56 @@ const requireUserId = async (context, commandContext) => {
 		token: commandContext.token
 	})).id;
 };
+const packageManifest = createRequire(import.meta.url)("../package.json");
+//#endregion
+//#region src/crash-report.ts
+const POSTHOG_HOST = "https://us.i.posthog.com";
+const SHUTDOWN_TIMEOUT_MS = 2e3;
+const buildKey = () => "";
+const hasNodeErrorCode = (error) => [error, error.cause].some((candidate) => typeof candidate === "object" && candidate !== null && "code" in candidate && typeof candidate.code === "string");
+const isCliBug = (error) => (error instanceof TypeError || error instanceof ReferenceError || error instanceof RangeError) && !hasNodeErrorCode(error);
+const crashReportingEnabled = (key, env) => key.length > 0 && ![
+	"1",
+	"true",
+	"yes"
+].includes(env.DO_NOT_TRACK?.trim().toLowerCase() ?? "");
+const REDACTED_MESSAGE = "[message not sent]";
+const WINDOWS_PATH = /^[A-Za-z]:\\/u;
+/** The report as sent: home paths cut to `~`, every exception message gone. */
+const redactCrashReport = (event, home) => {
+	if (!event) return event;
+	const forms = home ? [.../* @__PURE__ */ new Set([
+		home,
+		home.replaceAll("\\", "/"),
+		pathToFileURL(home, { windows: WINDOWS_PATH.test(home) }).pathname
+	])] : [];
+	let json = JSON.stringify(event);
+	for (const form of forms) json = json.replaceAll(JSON.stringify(form).slice(1, -1), "~");
+	const redacted = JSON.parse(json);
+	const exceptions = redacted.properties?.$exception_list;
+	for (const exception of exceptions ?? []) exception.value = REDACTED_MESSAGE;
+	return redacted;
+};
+const reportCrash = async (error) => {
+	const key = buildKey();
+	if (!(isCliBug(error) && crashReportingEnabled(key, process.env))) return;
+	try {
+		const { PostHog } = await import("posthog-node");
+		const home = homedir();
+		const client = new PostHog(key, {
+			before_send: (event) => redactCrashReport(event, home),
+			disableGeoip: true,
+			flushAt: 1,
+			host: POSTHOG_HOST
+		});
+		client.captureException(error, void 0, {
+			cli_version: packageManifest.version,
+			node_version: process.version,
+			os_platform: process.platform
+		});
+		await client.shutdown(SHUTDOWN_TIMEOUT_MS);
+	} catch {}
+};
 //#endregion
 //#region src/options.ts
 const parseOutputFormat = (value) => {
@@ -1942,6 +2106,7 @@ const runWithErrorHandling = async (context, action) => {
 		}
 		if (context.debug && error instanceof Error && typeof error.stack === "string") writeDebug(context, error.stack);
 		process.exitCode = cliError.exitCode;
+		if (cliError.exitCode === EXIT_CODES.ERROR) await reportCrash(error);
 	}
 };
 //#endregion
@@ -2023,8 +2188,9 @@ const runCreate = async (context, label, options) => {
 };
 const runList = async (context) => {
 	const { token } = await requireAuthToken(context);
+	const baseUrl = resolveApiBaseUrl(context);
 	const keys = await listApiKeys(context, {
-		baseUrl: resolveApiBaseUrl(context),
+		baseUrl,
 		token
 	});
 	if (context.json) {
@@ -2046,8 +2212,9 @@ const runList = async (context) => {
 };
 const runRevoke = async (context, keyId) => {
 	const { token } = await requireAuthToken(context);
+	const baseUrl = resolveApiBaseUrl(context);
 	await revokeApiKey(context, {
-		baseUrl: resolveApiBaseUrl(context),
+		baseUrl,
 		keyId,
 		token
 	});
@@ -2231,9 +2398,187 @@ const createOAuthState = () => randomBytes(24).toString("hex");
 const createCodeVerifier = () => randomBytes(64).toString("base64url");
 const createCodeChallenge = (verifier) => createHash("sha256").update(verifier).digest().toString("base64url");
 //#endregion
+//#region src/api/agent-signup.ts
+const parseJson = async (response) => {
+	const raw = await response.text();
+	if (raw.length === 0) return null;
+	try {
+		return JSON.parse(raw);
+	} catch {
+		return raw;
+	}
+};
+const throwForFailure = (status, payload) => {
+	const message = typeof payload === "string" && payload.length > 0 ? payload : extractErrorMessage(payload);
+	const record = typeof payload === "object" && payload !== null ? payload : {};
+	const code = typeof record.code === "string" ? record.code : null;
+	if (status === 409 || code === "DUPLICATE_EMAIL") throw new CliError(message, EXIT_CODES.AUTH_REQUIRED, "Run `donebear auth login` with this email. Do not start another signup.");
+	if (status === 429 || code === "RATE_LIMIT_EXCEEDED") throw new CliError(message, EXIT_CODES.ERROR, "Wait, then retry.");
+	if (status === 400 || code === "INVALID_REQUEST") throw new CliError(message, EXIT_CODES.VALIDATION);
+	throw new CliError(message, EXIT_CODES.ERROR);
+};
+const request = async (endpoint, options) => {
+	const headers = new Headers({ Accept: "application/json" });
+	if (options.token) headers.set("Authorization", `Bearer ${options.token}`);
+	if (options.body !== void 0) headers.set("Content-Type", "application/json");
+	let response;
+	try {
+		response = await fetch(endpoint, {
+			body: options.body === void 0 ? void 0 : JSON.stringify(options.body),
+			headers,
+			method: options.method ?? "GET"
+		});
+	} catch (error) {
+		throw new CliError("Cannot connect to Done Bear API.", EXIT_CODES.NETWORK, error instanceof Error ? error.message : void 0);
+	}
+	const payload = await parseJson(response);
+	if (!response.ok) throwForFailure(response.status, payload);
+	return payload;
+};
+const startAgentSignup = async (_context, apiBaseUrl, input) => {
+	return await request(`${apiBaseUrl}/api/agent-signup`, {
+		body: {
+			email: input.email,
+			...input.name ? { name: input.name } : {}
+		},
+		method: "POST"
+	});
+};
+const pollAgentSignup = async (_context, apiBaseUrl, pollToken) => {
+	return await request(`${apiBaseUrl}/api/agent-signup/poll`, {
+		method: "GET",
+		token: pollToken
+	});
+};
+const verifyAgentSignupCode = async (_context, apiBaseUrl, input) => {
+	return await request(`${apiBaseUrl}/api/agent-signup/verify`, {
+		body: input,
+		method: "POST"
+	});
+};
+//#endregion
+//#region src/commands/auth-signup.ts
+const MISSING_EMAIL_MESSAGE = "Pass --email with the human's address. Do not invent one.";
+const POLL_INTERVAL_MS = 2e3;
+const defaultClock = {
+	now: () => Date.now(),
+	sleep: (ms, signal) => new Promise((resolve, reject) => {
+		if (signal.aborted) {
+			resolve();
+			return;
+		}
+		const timer = setTimeout(resolve, ms);
+		signal.addEventListener("abort", () => {
+			clearTimeout(timer);
+			reject(/* @__PURE__ */ new Error("aborted"));
+		}, { once: true });
+	})
+};
+const isComplete = (value) => value.status === "complete";
+const printWaiting = (context, verifyUrl, instructions) => {
+	writeWarning(context, instructions.agent);
+	writeWarning(context, instructions.human);
+	writeWarning(context, `Verify link: ${verifyUrl}`);
+	writeWarning(context, "Waiting for the human to verify. The CLI will continue once that happens.");
+};
+const sessionFromComplete = (complete) => ({
+	accessToken: complete.apiKey.key,
+	createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+	expiresAt: null,
+	provider: "oauth2",
+	refreshToken: null,
+	tokenType: "bearer",
+	user: {
+		email: complete.user.email,
+		id: complete.user.id
+	}
+});
+const printComplete = (context, complete, verifyUrl) => {
+	if (context.json) {
+		writeJson({
+			apiKey: complete.apiKey,
+			email: complete.email,
+			instructions: {
+				agent: "Store the API key as DONEBEAR_TOKEN. Paste mcp.cursor into the MCP config. Do not log the full key.",
+				human: "Verification is done."
+			},
+			mcp: complete.mcp,
+			ok: true,
+			sessionStored: true,
+			status: "complete",
+			user: complete.user,
+			verifyUrl,
+			workspace: complete.workspace
+		});
+		return;
+	}
+	writeSuccess(context, "Signup complete. API key stored in the CLI session.");
+	writeInfo(context, `Signed in as ${complete.user.email}`);
+	writeInfo(context, `Workspace: ${complete.workspace.name} (${complete.workspace.urlKey ?? complete.workspace.id})`);
+	writeInfo(context, "API key (shown once):");
+	writeInfo(context, complete.apiKey.key);
+	writeInfo(context, "Paste-ready MCP config for Cursor:");
+	writeInfo(context, JSON.stringify(complete.mcp.cursor, null, 2));
+	writeInfo(context, complete.mcp.claude);
+};
+const runAgentSignup = async (context, options, clock = defaultClock) => {
+	const email = options.email?.trim() ?? "";
+	if (email.length === 0) throw new CliError(MISSING_EMAIL_MESSAGE, EXIT_CODES.VALIDATION, "Example: donebear auth signup --email person@example.com");
+	const apiBaseUrl = resolveApiBaseUrl(context);
+	const started = await startAgentSignup(context, apiBaseUrl, {
+		email,
+		name: options.name?.trim() || void 0
+	});
+	printWaiting(context, started.verifyUrl, started.instructions);
+	const abort = new AbortController();
+	const canPrompt = options.interactive && process.stdin.isTTY && !context.json && !context.quiet;
+	let submittedCode = null;
+	const promptTask = canPrompt ? promptForValue(context, "6-digit email code", abort.signal).then((value) => {
+		submittedCode = value;
+	}) : Promise.resolve();
+	const deadline = clock.now() + options.timeout * 1e3;
+	try {
+		while (clock.now() < deadline) {
+			if (submittedCode) {
+				const verified = await verifyAgentSignupCode(context, apiBaseUrl, {
+					code: submittedCode,
+					pollToken: started.pollToken
+				});
+				if (isComplete(verified)) {
+					abort.abort();
+					await writeStoredAuthSession(sessionFromComplete(verified));
+					printComplete(context, verified, started.verifyUrl);
+					return;
+				}
+				if (verified.status === "consumed") throw new CliError(verified.message, EXIT_CODES.ERROR);
+				submittedCode = null;
+			}
+			const polled = await pollAgentSignup(context, apiBaseUrl, started.pollToken);
+			if (isComplete(polled)) {
+				abort.abort();
+				await writeStoredAuthSession(sessionFromComplete(polled));
+				printComplete(context, polled, started.verifyUrl);
+				return;
+			}
+			if (polled.status === "consumed") throw new CliError(polled.message, EXIT_CODES.ERROR);
+			try {
+				await clock.sleep(POLL_INTERVAL_MS, abort.signal);
+			} catch {
+				break;
+			}
+		}
+	} finally {
+		abort.abort();
+		await promptTask.catch(() => void 0);
+	}
+	throw new CliError("Signup timed out before the email was verified.", EXIT_CODES.ERROR, "Ask the human to open the verify link, then run this command again if the code expired.");
+};
+const parseSignupTimeout = (value) => parsePositiveInteger(value, "Timeout");
+//#endregion
 //#region src/commands/auth.ts
 const runLogin = async (context, options) => {
-	const { authorizeUrl, tokenUrl } = buildOAuthUrls(resolveSupabaseConfig());
+	const config = resolveSupabaseConfig();
+	const { authorizeUrl, tokenUrl } = buildOAuthUrls(config);
 	const clientId = resolveOAuthClientId();
 	const redirectUrl = new URL(`http://127.0.0.1:${options.port}${DEFAULT_OAUTH_CALLBACK_PATH}`);
 	const state = createOAuthState();
@@ -2262,10 +2607,11 @@ const runLogin = async (context, options) => {
 		writeInfo(context, authUrlString);
 	}
 	const authorizationCode = await callbackPromise;
-	const storedSession = tokenResponseToStoredSession(await exchangeAuthorizationCode({
+	const tokenResponse = await exchangeAuthorizationCode({
 		clientId,
 		tokenUrl
-	}, authorizationCode, codeVerifier, redirectUrl.toString()));
+	}, authorizationCode, codeVerifier, redirectUrl.toString());
+	const storedSession = tokenResponseToStoredSession(tokenResponse);
 	await writeStoredAuthSession(storedSession);
 	if (context.json) {
 		writeJson({
@@ -2280,7 +2626,8 @@ const runLogin = async (context, options) => {
 	if (storedSession.user?.email) writeInfo(context, `Signed in as ${storedSession.user.email}`);
 };
 const runStatus = async (context) => {
-	const token = await resolveAuthToken(context, getOptionalSupabaseConfig());
+	const config = getOptionalSupabaseConfig();
+	const token = await resolveAuthToken(context, config);
 	if (!token) {
 		if (context.json) writeJson({
 			authenticated: false,
@@ -2333,6 +2680,7 @@ const getOptionalSupabaseConfig = () => {
 const registerAuthCommands = (program) => {
 	const auth = program.command("auth").description("Authenticate donebear CLI").addHelpText("after", `
 Examples:
+  donebear auth signup --email person@example.com --json
   donebear auth login
   donebear auth login --no-open     (print URL, don't open browser)
   donebear auth status --json
@@ -2361,6 +2709,25 @@ Non-interactive / CI use:
 			await runLogin(context, options);
 		});
 	});
+	auth.command("signup").description("Create a Done Bear account from a human email (agent signup)").option("--email <email>", "Human email to verify. Do not invent one.").option("--name <name>", "Optional display name").option("--timeout <seconds>", "Seconds to wait for email verification", parseSignupTimeout, 600).option("--no-interactive", "Never prompt for the email code; poll the verify link instead").addHelpText("after", `
+Creates a real human account. One person must verify the email (code or link).
+Do not invent an email address. If the address is already registered, run
+\`donebear auth login\` instead.
+
+Examples:
+  donebear auth signup --email person@example.com
+  donebear auth signup --email person@example.com --json --no-interactive
+`).action(async (options, command) => {
+		const context = contextFromCommand(command);
+		await runWithErrorHandling(context, async () => {
+			await runAgentSignup(context, {
+				email: options.email,
+				interactive: options.interactive !== false,
+				name: options.name,
+				timeout: options.timeout
+			});
+		});
+	});
 	auth.command("status").description("Check authentication status").action(async (_options, command) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
@@ -2418,7 +2785,7 @@ const parseTaskNumberRef = (value) => {
 	const normalized = value.trim();
 	if (!/^[1-9]\d*$/u.test(normalized)) throw new Error(`Invalid task number "${normalized}". Use the positive number shown on the task.`);
 	const number = Number(normalized);
-	if (!Number.isSafeInteger(number) || number > MAX_TASK_NUMBER) throw new TypeError(`Invalid task number "${normalized}". Number is too large.`);
+	if (!Number.isSafeInteger(number) || number > MAX_TASK_NUMBER) throw new Error(`Invalid task number "${normalized}". Number is too large.`);
 	return number;
 };
 const parseTaskState = (value) => {
@@ -2487,29 +2854,29 @@ const confirmAction = (context, message) => {
 	});
 };
 //#endregion
-//#region ../../node_modules/uuid/dist-node/regex.js
+//#region ../../node_modules/.pnpm/uuid@14.0.2/node_modules/uuid/dist-node/regex.js
 var regex_default = /^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i;
 //#endregion
-//#region ../../node_modules/uuid/dist-node/validate.js
+//#region ../../node_modules/.pnpm/uuid@14.0.2/node_modules/uuid/dist-node/validate.js
 function validate(uuid) {
 	return typeof uuid === "string" && regex_default.test(uuid);
 }
 //#endregion
-//#region ../../node_modules/uuid/dist-node/parse.js
+//#region ../../node_modules/.pnpm/uuid@14.0.2/node_modules/uuid/dist-node/parse.js
 function parse(uuid) {
 	if (!validate(uuid)) throw TypeError("Invalid UUID");
 	let v;
 	return Uint8Array.of((v = parseInt(uuid.slice(0, 8), 16)) >>> 24, v >>> 16 & 255, v >>> 8 & 255, v & 255, (v = parseInt(uuid.slice(9, 13), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(14, 18), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(19, 23), 16)) >>> 8, v & 255, (v = parseInt(uuid.slice(24, 36), 16)) / 1099511627776 & 255, v / 4294967296 & 255, v >>> 24 & 255, v >>> 16 & 255, v >>> 8 & 255, v & 255);
 }
 //#endregion
-//#region ../../node_modules/uuid/dist-node/stringify.js
+//#region ../../node_modules/.pnpm/uuid@14.0.2/node_modules/uuid/dist-node/stringify.js
 const byteToHex = [];
 for (let i = 0; i < 256; ++i) byteToHex.push((i + 256).toString(16).slice(1));
 function unsafeStringify(arr, offset = 0) {
 	return (byteToHex[arr[offset + 0]] + byteToHex[arr[offset + 1]] + byteToHex[arr[offset + 2]] + byteToHex[arr[offset + 3]] + "-" + byteToHex[arr[offset + 4]] + byteToHex[arr[offset + 5]] + "-" + byteToHex[arr[offset + 6]] + byteToHex[arr[offset + 7]] + "-" + byteToHex[arr[offset + 8]] + byteToHex[arr[offset + 9]] + "-" + byteToHex[arr[offset + 10]] + byteToHex[arr[offset + 11]] + byteToHex[arr[offset + 12]] + byteToHex[arr[offset + 13]] + byteToHex[arr[offset + 14]] + byteToHex[arr[offset + 15]]).toLowerCase();
 }
 //#endregion
-//#region ../../node_modules/uuid/dist-node/v35.js
+//#region ../../node_modules/.pnpm/uuid@14.0.2/node_modules/uuid/dist-node/v35.js
 function stringToBytes(str) {
 	str = unescape(encodeURIComponent(str));
 	const bytes = new Uint8Array(str.length);
@@ -2538,14 +2905,14 @@ function v35(version, hash, value, namespace, buf, offset) {
 	return unsafeStringify(bytes);
 }
 //#endregion
-//#region ../../node_modules/uuid/dist-node/sha1.js
+//#region ../../node_modules/.pnpm/uuid@14.0.2/node_modules/uuid/dist-node/sha1.js
 function sha1(bytes) {
 	if (Array.isArray(bytes)) bytes = Buffer.from(bytes);
 	else if (typeof bytes === "string") bytes = Buffer.from(bytes, "utf8");
 	return createHash("sha1").update(bytes).digest();
 }
 //#endregion
-//#region ../../node_modules/uuid/dist-node/v5.js
+//#region ../../node_modules/.pnpm/uuid@14.0.2/node_modules/uuid/dist-node/v5.js
 function v5(value, namespace, buf, offset) {
 	return v35(80, sha1, value, namespace, buf, offset);
 }
@@ -2566,6 +2933,11 @@ const createTeamProjectId = (params) => createCompositeSyncId("TeamProject", [
 	params.teamId,
 	params.projectId
 ]);
+const createTeamMembershipId = (params) => createCompositeSyncId("TeamMembership", [
+	params.workspaceId,
+	params.teamId,
+	params.userId
+]);
 const createProjectMembershipId = (params) => createCompositeSyncId("ProjectMembership", [
 	params.workspaceId,
 	params.projectId,
@@ -2651,7 +3023,7 @@ const resolveWorkspace = async (context, options) => {
 //#region src/commands/task.ts
 const DEFAULT_TASK_LIST_LIMIT = 20;
 /** The views `--when` can place a task in: the ones with start fields. */
-const ACTIVE_TASK_VIEWS = new Set([
+const ACTIVE_TASK_VIEWS = /* @__PURE__ */ new Set([
 	"inbox",
 	"anytime",
 	"today",
@@ -2659,7 +3031,7 @@ const ACTIVE_TASK_VIEWS = new Set([
 	"someday"
 ]);
 /** The views `--view` can filter a list by, which adds the two read-only ones. */
-const VALID_TASK_VIEWS = new Set([
+const VALID_TASK_VIEWS = /* @__PURE__ */ new Set([
 	...ACTIVE_TASK_VIEWS,
 	"logbook",
 	"trash"
@@ -2949,7 +3321,18 @@ const runTaskMutation = async (context, taskRef, payload) => {
 		taskRef,
 		workspaceRef: payload.workspaceRef
 	});
-	await mutateModel(context, {
+	if (!(payload.action === "ARCHIVE" && !context.dryRun && await archiveBoundTasks({
+		archivedAt: Number(payload.data.archivedAt),
+		send: (path, body) => requestJson(context, `${commandContext.apiBaseUrl}${path}`, {
+			token: commandContext.token,
+			...body === void 0 ? {} : {
+				body,
+				method: "POST"
+			}
+		}),
+		tasks: [task],
+		token: commandContext.token
+	}))) await mutateModel(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		request: {
 			batchId: randomUUID(),
@@ -2959,7 +3342,10 @@ const runTaskMutation = async (context, taskRef, payload) => {
 				clientTxId: randomUUID(),
 				modelId: task.id,
 				modelName: "Task",
-				payload: payload.data
+				payload: {
+					...payload.data,
+					...task.agentAssigneeId ? { expectedRevision: task.revision } : {}
+				}
 			}]
 		},
 		token: commandContext.token
@@ -2989,11 +3375,12 @@ const resolveProjectId = async (context, commandContext, projectRef, workspaceRe
 		token: commandContext.token,
 		workspaceRef
 	});
-	return resolveEntityId(await loadProjectsByWorkspace(context, {
+	const projects = await loadProjectsByWorkspace(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceId: workspace.id
-	}), projectRef, "Project");
+	});
+	return resolveEntityId(projects, projectRef, "Project");
 };
 const resolveTeamId = async (context, commandContext, teamRef, workspaceRef) => {
 	const { workspace } = await resolveWorkspace(context, {
@@ -3002,11 +3389,12 @@ const resolveTeamId = async (context, commandContext, teamRef, workspaceRef) =>
 		token: commandContext.token,
 		workspaceRef
 	});
-	return resolveEntityId(await loadTeamsByWorkspace(context, {
+	const teams = await loadTeamsByWorkspace(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceId: workspace.id
-	}), teamRef, "Team");
+	});
+	return resolveEntityId(teams, teamRef, "Team");
 };
 const validateTaskEditOptions = (options) => {
 	if (options.clearDescription && typeof options.description === "string") throw new Error("Use either --description or --clear-description, not both.");
@@ -3049,8 +3437,9 @@ const runTaskEdit = async (context, taskRef, options, workspaceOverride) => {
 	});
 };
 const runTaskRead = async (context, taskRef, options, workspaceOverride) => {
+	const commandContext = await resolveCommandContext(context);
 	const task = await resolveTaskReference(context, {
-		commandContext: await resolveCommandContext(context),
+		commandContext,
 		taskRef,
 		workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
 	});
@@ -3065,14 +3454,16 @@ const runTaskRead = async (context, taskRef, options, workspaceOverride) => {
 	writeInfo(context, task.description ?? "(empty)");
 };
 const runTaskAppend = async (context, taskRef, text, options, workspaceOverride) => {
+	const commandContext = await resolveCommandContext(context);
+	const newDesc = `${(await resolveTaskReference(context, {
+		commandContext,
+		taskRef,
+		workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
+	})).description ?? ""}\n${text.trim()}`;
 	await runTaskMutation(context, taskRef, {
 		action: "UPDATE",
 		data: {
-			description: `${(await resolveTaskReference(context, {
-				commandContext: await resolveCommandContext(context),
-				taskRef,
-				workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
-			})).description ?? ""}\n${text.trim()}`,
+			description: newDesc,
 			updatedAt: Date.now()
 		},
 		successMessage: "Appended",
@@ -3080,15 +3471,17 @@ const runTaskAppend = async (context, taskRef, text, options, workspaceOverride)
 	});
 };
 const runTaskPrepend = async (context, taskRef, text, options, workspaceOverride) => {
+	const commandContext = await resolveCommandContext(context);
 	const existing = (await resolveTaskReference(context, {
-		commandContext: await resolveCommandContext(context),
+		commandContext,
 		taskRef,
 		workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
 	})).description ?? "";
+	const newDesc = existing.length > 0 ? `${text.trim()}\n${existing}` : text.trim();
 	await runTaskMutation(context, taskRef, {
 		action: "UPDATE",
 		data: {
-			description: existing.length > 0 ? `${text.trim()}\n${existing}` : text.trim(),
+			description: newDesc,
 			updatedAt: Date.now()
 		},
 		successMessage: "Prepended",
@@ -3104,11 +3497,12 @@ const runTaskRandom = async (context, options, workspaceOverride) => {
 		token: commandContext.token,
 		workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
 	});
-	const filtered = filterTasks(await loadTasksByWorkspace(context, {
+	const tasks = await loadTasksByWorkspace(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceId: workspace.id
-	}), {
+	});
+	const filtered = filterTasks(tasks, {
 		search: null,
 		state: requestedState,
 		view: null
@@ -3188,7 +3582,10 @@ const runChecklistList = async (context, taskId, workspaceOption) => {
 		return;
 	}
 	writeInfo(context, `Checklist for: ${task.title}`);
-	for (const item of sorted) writeInfo(context, `${item.completedAt === null ? "[ ]" : "[x]"} ${item.id.slice(0, 8)}  ${item.title}`);
+	for (const item of sorted) {
+		const marker = item.completedAt === null ? "[ ]" : "[x]";
+		writeInfo(context, `${marker} ${item.id.slice(0, 8)}  ${item.title}`);
+	}
 };
 const registerTaskSubcommands = (task, workspaceOverride) => {
 	task.command("list").alias("ls").description("List tasks").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("-s, --state <state>", "open|done|archived|all", "open").option("-n, --limit <count>", "Maximum number of tasks", (value) => parsePositiveInteger(value, "Limit"), DEFAULT_TASK_LIST_LIMIT).option("-q, --search <query>", "Filter by title or description").option("-v, --view <view>", "Filter by view (inbox|anytime|today|upcoming|someday|logbook|trash)").addHelpText("after", `
@@ -3374,11 +3771,12 @@ const registerChecklistSubcommands = (checklist) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			const commandContext = await resolveCommandContext(context);
-			const item = await resolveChecklistItemReference(context, commandContext, (await resolveTaskReference(context, {
+			const resolvedTask = await resolveTaskReference(context, {
 				commandContext,
 				taskRef: taskId,
 				workspaceRef: options.workspace?.trim() ?? null
-			})).id, itemId);
+			});
+			const item = await resolveChecklistItemReference(context, commandContext, resolvedTask.id, itemId);
 			const now = Date.now();
 			await mutateModel(context, {
 				baseUrl: commandContext.apiBaseUrl,
@@ -3412,11 +3810,12 @@ const registerChecklistSubcommands = (checklist) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			const commandContext = await resolveCommandContext(context);
-			const item = await resolveChecklistItemReference(context, commandContext, (await resolveTaskReference(context, {
+			const resolvedTask = await resolveTaskReference(context, {
 				commandContext,
 				taskRef: taskId,
 				workspaceRef: options.workspace?.trim() ?? null
-			})).id, itemId);
+			});
+			const item = await resolveChecklistItemReference(context, commandContext, resolvedTask.id, itemId);
 			const now = Date.now();
 			await mutateModel(context, {
 				baseUrl: commandContext.apiBaseUrl,
@@ -3452,11 +3851,12 @@ const registerChecklistSubcommands = (checklist) => {
 			const newTitle = options.title.trim();
 			if (newTitle.length === 0) throw new Error("Checklist item title cannot be empty.");
 			const commandContext = await resolveCommandContext(context);
-			const item = await resolveChecklistItemReference(context, commandContext, (await resolveTaskReference(context, {
+			const resolvedTask = await resolveTaskReference(context, {
 				commandContext,
 				taskRef: taskId,
 				workspaceRef: options.workspace?.trim() ?? null
-			})).id, itemId);
+			});
+			const item = await resolveChecklistItemReference(context, commandContext, resolvedTask.id, itemId);
 			const now = Date.now();
 			await mutateModel(context, {
 				baseUrl: commandContext.apiBaseUrl,
@@ -3490,11 +3890,12 @@ const registerChecklistSubcommands = (checklist) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			const commandContext = await resolveCommandContext(context);
-			const item = await resolveChecklistItemReference(context, commandContext, (await resolveTaskReference(context, {
+			const resolvedTask = await resolveTaskReference(context, {
 				commandContext,
 				taskRef: taskId,
 				workspaceRef: options.workspace?.trim() ?? null
-			})).id, itemId);
+			});
+			const item = await resolveChecklistItemReference(context, commandContext, resolvedTask.id, itemId);
 			await mutateModel(context, {
 				baseUrl: commandContext.apiBaseUrl,
 				request: {
@@ -3549,12 +3950,13 @@ Agent tip: run "donebear spec task add" for full option reference
 		});
 	});
 	registerTaskSubcommands(task, workspaceOverride);
-	registerChecklistSubcommands(task.command("checklist").alias("cl").description("Manage task checklist items").argument("<task-number>", "Workspace-scoped task number").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").action(async (taskId, options, command) => {
+	const checklist = task.command("checklist").alias("cl").description("Manage task checklist items").argument("<task-number>", "Workspace-scoped task number").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").action(async (taskId, options, command) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			await runChecklistList(context, taskId, options.workspace);
 		});
-	}));
+	});
+	registerChecklistSubcommands(checklist);
 };
 //#endregion
 //#region src/commands/comment.ts
@@ -3716,11 +4118,12 @@ respond to a teammate's comment, add your own instead.
 		await runWithErrorHandling(context, async () => {
 			const body = await resolveCommentBody(options.body);
 			const commandContext = await resolveCommandContext(context);
-			const existing = await resolveCommentReference(context, commandContext, (await resolveTaskReference(context, {
+			const task = await resolveTaskReference(context, {
 				commandContext,
 				taskRef,
 				workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
-			})).id, commentRef);
+			});
+			const existing = await resolveCommentReference(context, commandContext, task.id, commentRef);
 			await mutateModel(context, {
 				baseUrl: commandContext.apiBaseUrl,
 				request: {
@@ -3756,11 +4159,12 @@ workspace owner or admin can remove anyone's.
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			const commandContext = await resolveCommandContext(context);
-			const existing = await resolveCommentReference(context, commandContext, (await resolveTaskReference(context, {
+			const task = await resolveTaskReference(context, {
 				commandContext,
 				taskRef,
 				workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
-			})).id, commentRef);
+			});
+			const existing = await resolveCommentReference(context, commandContext, task.id, commentRef);
 			await mutateModel(context, {
 				baseUrl: commandContext.apiBaseUrl,
 				request: {
@@ -3918,7 +4322,6 @@ Examples:
 		});
 	});
 };
-const packageManifest = createRequire(import.meta.url)("../package.json");
 //#endregion
 //#region src/commands/doctor.ts
 const checkCliVersion = async () => {
@@ -3960,13 +4363,14 @@ const maskToken = (token) => {
 };
 const checkAuth = async (context) => {
 	try {
-		const token = await resolveAuthToken(context, (() => {
+		const config = (() => {
 			try {
 				return resolveSupabaseConfig();
 			} catch {
 				return null;
 			}
-		})());
+		})();
+		const token = await resolveAuthToken(context, config);
 		if (!token) return {
 			message: "No API key or token found",
 			name: "Auth",
@@ -3987,7 +4391,7 @@ const checkAuth = async (context) => {
 };
 const checkWorkspace = async () => {
 	try {
-		const { ensureLocalContext } = await import("./context-store-ClAx1T2N.mjs");
+		const { ensureLocalContext } = await import("./context-store-BuhPB0I9.mjs");
 		const localContext = await ensureLocalContext();
 		if (!localContext.workspaceId) return {
 			message: "No workspace selected (run `donebear workspace use`)",
@@ -4009,7 +4413,10 @@ const checkWorkspace = async () => {
 };
 const detectClaudeDesktop = (home) => {
 	if (process.platform === "darwin") return existsSync(join(home, "Library", "Application Support", "Claude", "claude_desktop_config.json"));
-	if (process.platform === "win32") return existsSync(join(process.env.APPDATA ?? join(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json"));
+	if (process.platform === "win32") {
+		const appData = process.env.APPDATA ?? join(home, "AppData", "Roaming");
+		return existsSync(join(appData, "Claude", "claude_desktop_config.json"));
+	}
 	return existsSync(join(home, ".config", "claude", "config.json"));
 };
 const detectAgents = () => {
@@ -4309,6 +4716,10 @@ state and start date rather than stored as a column:
 
 - inbox     captured, not yet placed
 - today     start date today or earlier
+
+A private email address (Settings on the web) can also drop a message into
+today as a task: subject is the title, body is the notes. Slack capture is
+unchanged.
 - upcoming  start date in the future
 - anytime   actionable now, no date pressure
 - someday   parked, off every working list
@@ -4324,7 +4735,9 @@ completed task's view is logbook, so \`--state done --view today\` matches
 nothing. What was finished today or this week comes off the completion date,
 not the ordering: the list prints it in the \`completed\` column, \`task show
 --json\` reports it as \`completedAtIso\`, and each row from \`task list --json\`
-carries \`completedAt\`.
+carries \`completedAt\`. The iOS and web apps can keep completed to-dos on Today
+until a day roll or Log Completed (Settings → Preferences → Logging). The CLI
+still treats every completed task as logbook.
 
     donebear task add "Renew passport" --when upcoming --deadline 2030-03-01 --json
     donebear task list --view logbook --json
@@ -4382,8 +4795,16 @@ Clear a date with the explicit flag rather than passing an empty value:
     donebear task edit 12 --clear-deadline --json
     donebear project edit launch --clear-target-date --json
 
-Repeating tasks exist in Done Bear but are not editable from the CLI. If a user
-asks to make something repeat, say so rather than creating a run of copies.`,
+Repeat rules are configured in the app and cannot be edited from the CLI. If a user
+asks to make something repeat, say so rather than creating a run of copies.
+
+Upcoming copies can be edited or completed early. Fixed repeats keep their
+calendar schedule; after-completion repeats count from actual completion.
+CLI date edits affect the copy only. Use When in the app to choose Make
+Exception or Update Rule for a fixed series. Custom and count-limited
+patterns need the Repeat editor.
+In the app, search for Repeating to see rules and upcoming copies. Select multiple
+repeating tasks and use More to pause, resume, or stop their series.`,
 		title: "Dates and deadlines",
 		whenToUse: "Setting or clearing a due date, or choosing between a deadline and a start date."
 	},
@@ -4400,12 +4821,18 @@ never have to read a task first just to preserve its other fields.
 - cleared   use the paired flag: \`--clear-deadline\`, \`--clear-project\`,
             \`--clear-team\`, \`--clear-description\`.
 
+The description is markdown. Write a link as a bare URL (\`https://…\`), which
+every client shows as a link; \`<https://…>\` shows its angle brackets on iOS
+and here.
+
 Not on \`task edit\`:
 
 - labels      \`donebear label add|remove\`
 - completion  \`donebear task done|reopen\`
 - archiving   \`donebear task archive\` (moves to Trash, not a delete)
 
+An API key bound to a task agent archives only its own assigned tasks, using the selected revision. A changed task returns a conflict; reload and review it before retrying. Pass \`-w <workspace>\` to select the intended workspace.
+
 Task numbers are positive integers scoped to the workspace. Projects, teams, and
 labels also resolve by key or name.
 
@@ -4425,7 +4852,10 @@ thing that needs care.
 2. Check for truncation. Results carry a count; if you passed \`--limit\`, you
    are looking at a page, not the set.
 3. Show the user the titles, not the ids, and get agreement before writing.
-4. Then write, one call per task.
+4. Then write, one call per task. Archive writes are not atomic: a later
+   conflict leaves earlier tasks in Trash. Inspect Trash and re-read the failed
+   task before retrying. After a timeout, reconcile current task state first;
+   never retry the whole set blindly.
 
     donebear task list --state open --view today --json --jq "[].{number: number, title: title}"
 
@@ -4593,9 +5023,21 @@ off unless the user named a second one:
 Ids and names never cross workspaces. A missing task, project, or label is
 missing from *this* workspace before it is deleted.
 
+A workspace owner can turn on domain join from Settings → Members. People who
+later sign in with a verified address on that work domain join as members,
+without an invite code. Personal email hosts cannot be used. The CLI has no
+domain-join command; joining by code remains \`donebear workspace join\`.
+
 Auth precedence: \`DONEBEAR_TOKEN\` in the environment, then the stored session
-from \`donebear auth login\`. Set the env var for anything non-interactive; the
-browser login flow will hang in CI.
+from \`donebear auth login\` or \`donebear auth signup\`. Set the env var for
+anything non-interactive; the browser login flow will hang in CI.
+
+New accounts from a coding agent: \`donebear auth signup --email <human-email>
+--json --no-interactive\`. Do not invent an email. One human step verifies it
+(link or 6-digit code). The CLI then stores a \`db_\` key with read+write and
+prints paste-ready MCP config for \`https://mcp.donebear.com/mcp\`. If that
+email is already registered, run \`donebear auth login\` instead. WorkOS
+\`agent_auth\` and RFC 8628 device code are not offered.
 
     export DONEBEAR_TOKEN=<token>
     donebear whoami --json
@@ -4605,6 +5047,15 @@ write fails with an explicit message rather than silently doing nothing — tell
 the user they need a write-scoped key rather than trying to work around it.
 \`donebear doctor --json\` reports which of these is actually in effect.
 
+## Invites and share links
+
+\`donebear workspace invite --email user@example.com\` sends a single-use
+email invite. \`donebear workspace invite --share --copy\` mints a reusable
+join link at \`https://donebear.com/join?code=\`. \`--project <id>\` on
+\`--share\` scopes the link: whoever opens it joins the whole workspace as a
+member, gets that project, and uses a seat. Join with
+\`donebear workspace join <code>\` or by opening the link while signed in.
+
 ## Task attachments (read-only)
 
 Tasks can carry file/image attachments, capped at 10 MB per file and roughly
@@ -4625,6 +5076,9 @@ Three commands orient you, in order of cost:
     donebear guide <topic>     concepts and conventions, no auth
     donebear context --json    the live workspace: counts, recent tasks, projects
 
+No account yet: \`donebear auth signup --email <human-email> --json --no-interactive\`.
+Do not invent the email. A human verifies it, then the CLI stores a \`db_\` key.
+
 \`donebear spec <command> <subcommand>\` narrows to one command's flags, output
 shape, and examples. Read that before guessing at a flag.
 
@@ -4653,22 +5107,25 @@ workspace from the token.`,
 
 Two importers exist, and they are not the same thing.
 
+**In the apps**, Settings → Integrations & Import (web) and Settings → Import
+(iOS: Reminders, Todoist, Things) cover Todoist, TickTick, Microsoft To Do, Any.do, Apple
+Reminders, Things 3, Trello, Asana, Notion, Google Tasks, and plain CSV, JSON or
+iCal files. Things 3 is no longer CLI-only: on iPhone, Things → Settings →
+General → Diagnostics → Enter Code → \`491348\` → Send Things Database, then
+upload the \`.aar\` under Settings → Import → Things, or \`main.sqlite\` on the web.
+
 **In the terminal**, \`donebear import things\` reads a copy of a Things 3
 SQLite database and writes it into a workspace. It is the only import this CLI
-performs. \`donebear spec import things\` lists its flags.
+performs. \`donebear spec import things\` lists its flags. It is the power-user
+path; send people to the apps first.
 
 On macOS it finds that database itself — \`donebear import things --dry-run\`
-with no other flags is the whole command. This is worth volunteering, because
-Things keeps its database inside a folder Finder hides, under a dated directory
-whose name nobody can guess, and people hunting for it in Finder is the single
-most common way this import stalls. \`--database-url\` is for a database
-somewhere unusual: a backup, an external disk, another machine's copy.
+with no other flags is the whole command. \`--database-url\` is for a database
+somewhere unusual: an iPhone export, a backup, an external disk, another
+machine's copy.
 
-**In the web app**, Settings → Integrations & Import covers Todoist, TickTick,
-Microsoft To Do, Any.do, Apple Reminders, Things 3, Trello, Asana, Notion,
-Google Tasks, and plain CSV, JSON or iCal files. If a user asks how to move a
-backlog in from anything other than Things, that is where to send them; there
-is no CLI equivalent to offer.
+If a user asks how to move a backlog in from anything other than Things, that is
+the web import screen; there is no CLI equivalent to offer.
 
 Each of those is a file the user exports and uploads — Todoist from Settings →
 Backups, Google Tasks from Google Takeout, Microsoft To Do from a read-only
@@ -4677,6 +5134,13 @@ that may change: a read-only connect flow is being built so Done Bear can make
 that call instead, so treat the Graph export as the current route and check the
 import screen before promising a connection.
 
+Every importer, here and in the apps, only reads the source; none of them
+writes, edits or deletes anything in the app being left. The one path that
+does is Reminders Inbox on iPhone (Settings → Import → Reminders Inbox), which
+is a capture bridge rather than an import: a chosen Reminders list shows at the
+top of Inbox, and importing a to-do from there creates the task and removes it
+from Reminders after a confirmation. It has no CLI equivalent.
+
 The other direction is here though: \`donebear export\` writes a portable JSON
 archive of a workspace, and the web importer restores one.
 
@@ -4709,9 +5173,8 @@ only what is new.
 
 There is no undo for \`donebear import things\`; a run has to be unpicked by
 hand. The web importer does offer one on its completion screen, but the receipt
-lives in the browser that ran the import, so it cannot be reached from the CLI,
-another device or the iOS app. Say that plainly rather than sending someone
-looking for a flag.`,
+lives in the browser that ran the import. An iOS import is undone with the
+usual undo for that change, not from the web receipt.`,
 		title: "Importing from another app",
 		whenToUse: "Moving a backlog in from Things 3 or another task manager, or restoring an export."
 	}
@@ -4866,11 +5329,14 @@ const summarizeThingsImportResult = (result) => {
 		`source: ${result.counts.source.tasks} tasks, ${result.counts.source.projects} projects, ${result.counts.source.headings} headings, ${result.counts.source.areas} areas, ${result.counts.source.tags} tags, ${result.counts.source.checklistItems} checklist items`,
 		`planned: ${result.counts.planned.teams ?? 0} teams, ${result.counts.planned.labels ?? 0} labels, ${result.counts.planned.projects ?? 0} projects, ${result.counts.planned.teamProjects ?? 0} team-project links, ${result.counts.planned.headings ?? 0} headings, ${result.counts.planned.tasks ?? 0} tasks, ${result.counts.planned.taskLabels ?? 0} task-label links, ${result.counts.planned.checklistItems ?? 0} checklist items`
 	];
+	const { leftBehind } = result.counts;
+	if (leftBehind.tasks > 0 || leftBehind.projects > 0) infoLines.push(`left behind (--open-only): ${leftBehind.tasks} to-dos, ${leftBehind.projects} projects`);
 	if (result.dryRun) infoLines.push("dry run: no mutations sent");
 	else infoLines.push(`mutations: ${result.execution.inserted} inserted, ${result.execution.updated} updated, ${result.execution.skipped} skipped across ${result.execution.batches} batch(es)`);
 	return {
 		infoLines,
-		successMessage: result.dryRun ? "Things 3 import dry run complete" : "Things 3 import complete"
+		successMessage: result.dryRun ? "Things 3 import dry run complete" : "Things 3 import complete",
+		warningLines: result.issues.map((issue) => issue.message)
 	};
 };
 //#endregion
@@ -4946,15 +5412,50 @@ const getUtcCalendarDayEndEpoch = (date) => {
 	return Date.UTC(parts.year, parts.month - 1, parts.day, 23, 59, 59, 999);
 };
 //#endregion
+//#region ../../packages/import-core/src/issues.ts
+/**
+* Codes are part of the contract between a provider and the completion report:
+* the UI groups by code, so adding a message variant must not mean adding a
+* code.
+*/
+const ImportIssueCode = {
+	/** The user chose to import without turning areas into teams. */
+	AREAS_NOT_IMPORTED: "areas_not_imported",
+	ASSIGNEE_UNRESOLVED: "assignee_unresolved",
+	ATTACHMENT_NOT_TRANSFERRED: "attachment_not_transferred",
+	DUPLICATE_SOURCE_ID: "duplicate_source_id",
+	FILE_TOO_LARGE: "file_too_large",
+	INVALID_DATE: "invalid_date",
+	INVALID_RECORD: "invalid_record",
+	/** Kept out of the plan because the user asked for open tasks only. */
+	LEFT_BEHIND: "left_behind",
+	MISSING_TITLE: "missing_title",
+	PARENT_NOT_FOUND: "parent_not_found",
+	RECURRENCE_APPROXIMATED: "recurrence_approximated",
+	RECURRENCE_UNSUPPORTED: "recurrence_unsupported",
+	TIMEZONE_UNKNOWN: "timezone_unknown",
+	UNKNOWN_FILE_SHAPE: "unknown_file_shape",
+	UNSUPPORTED_FIELD: "unsupported_field"
+};
+ImportIssueCode.AREAS_NOT_IMPORTED, ImportIssueCode.LEFT_BEHIND;
+const createIssue = (code, message, options = {}) => ({
+	code,
+	field: options.field ?? null,
+	message,
+	severity: options.severity ?? "warning",
+	sourceRecordId: options.sourceRecordId ?? null
+});
+//#endregion
 //#region ../../packages/import-core/src/things/ids.ts
 const THINGS_IMPORT_ID_NAMESPACE = "b1f9f0ac-9f76-54ed-8eb0-7d6d3a0a0a31";
 const createDeterministicImportId = (params) => createDeterministicId(THINGS_IMPORT_ID_NAMESPACE, `things:${params.workspaceId}:${params.modelName}:${params.sourceId}`);
 //#endregion
 //#region ../../packages/import-core/src/things/labels.ts
 const normalizeThingsLabelLookupKey = (value) => value.trim().toLocaleLowerCase();
+const normalizeThingsTeamLookupKey = (value) => value.trim().toLocaleLowerCase();
 //#endregion
 //#region ../../packages/import-core/src/things/values.ts
-var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
+var import_rrule = /* @__PURE__ */ __toESM((/* @__PURE__ */ __commonJSMin(((exports, module) => {
 	(function webpackUniversalModuleDefinition(root, factory) {
 		if (typeof exports === "object" && typeof module === "object") module.exports = factory();
 		else if (typeof define === "function" && define.amd) define([], factory);
@@ -4964,17 +5465,23 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return (() => {
 			"use strict";
 			var __webpack_require__ = {};
-			__webpack_require__.d = (exports$1, definition) => {
-				for (var key in definition) if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports$1, key)) Object.defineProperty(exports$1, key, {
-					enumerable: true,
-					get: definition[key]
-				});
-			};
-			__webpack_require__.o = (obj, prop) => Object.prototype.hasOwnProperty.call(obj, prop);
-			__webpack_require__.r = (exports$2) => {
-				if (typeof Symbol !== "undefined" && Symbol.toStringTag) Object.defineProperty(exports$2, Symbol.toStringTag, { value: "Module" });
-				Object.defineProperty(exports$2, "__esModule", { value: true });
-			};
+			(() => {
+				__webpack_require__.d = (exports$1, definition) => {
+					for (var key in definition) if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports$1, key)) Object.defineProperty(exports$1, key, {
+						enumerable: true,
+						get: definition[key]
+					});
+				};
+			})();
+			(() => {
+				__webpack_require__.o = (obj, prop) => Object.prototype.hasOwnProperty.call(obj, prop);
+			})();
+			(() => {
+				__webpack_require__.r = (exports$2) => {
+					if (typeof Symbol !== "undefined" && Symbol.toStringTag) Object.defineProperty(exports$2, Symbol.toStringTag, { value: "Module" });
+					Object.defineProperty(exports$2, "__esModule", { value: true });
+				};
+			})();
 			var __webpack_exports__ = {};
 			__webpack_require__.r(__webpack_exports__);
 			__webpack_require__.d(__webpack_exports__, {
@@ -5145,7 +5652,7 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 			/**
 			* Number of milliseconds of one day
 			*/
-			var ONE_DAY = 1e3 * 60 * 60 * 24;
+			var ONE_DAY = 864e5;
 			/**
 			* @see: <http://docs.python.org/library/datetime.html#datetime.MAXYEAR>
 			*/
@@ -5380,9 +5887,6 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 				}
 				return to.concat(ar || Array.prototype.slice.call(from));
 			}
-			function __await(v) {
-				return this instanceof __await ? (this.v = v, this) : new __await(v);
-			}
 			const callbackiterresult = function(_super) {
 				__extends(CallbackIterResult, _super);
 				function CallbackIterResult(method, args, iterator) {
@@ -5596,9 +6100,10 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 				ToText.prototype.WEEKLY = function() {
 					var gettext = this.gettext;
 					if (this.options.interval !== 1) this.add(this.options.interval.toString()).add(this.plural(this.options.interval) ? gettext("weeks") : gettext("week"));
-					if (this.byweekday && this.byweekday.isWeekdays) if (this.options.interval === 1) this.add(this.plural(this.options.interval) ? gettext("weekdays") : gettext("weekday"));
-					else this.add(gettext("on")).add(gettext("weekdays"));
-					else if (this.byweekday && this.byweekday.isEveryDay) this.add(this.plural(this.options.interval) ? gettext("days") : gettext("day"));
+					if (this.byweekday && this.byweekday.isWeekdays) {
+						if (this.options.interval === 1) this.add(this.plural(this.options.interval) ? gettext("weekdays") : gettext("weekday"));
+						else this.add(gettext("on")).add(gettext("weekdays"));
+					} else if (this.byweekday && this.byweekday.isEveryDay) this.add(this.plural(this.options.interval) ? gettext("days") : gettext("day"));
 					else {
 						if (this.options.interval === 1) this.add(gettext("week"));
 						if (this.origOptions.bymonth) {
@@ -5709,8 +6214,10 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 					var delimJoin = function(array, delimiter, finalDelimiter) {
 						var list = "";
 						for (var i = 0; i < array.length; i++) {
-							if (i !== 0) if (i === array.length - 1) list += " " + finalDelimiter + " ";
-							else list += delimiter + " ";
+							if (i !== 0) {
+								if (i === array.length - 1) list += " " + finalDelimiter + " ";
+								else list += delimiter + " ";
+							}
 							list += array[i];
 						}
 						return list;
@@ -5920,16 +6427,17 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 						var nth = decodeNTH();
 						var wkd = decodeWKD();
 						var m = decodeM();
-						if (nth) if (wkd) {
-							ttr.nextSymbol();
-							if (!options.byweekday) options.byweekday = [];
-							options.byweekday.push(RRule[wkd].nth(nth));
-						} else {
-							if (!options.bymonthday) options.bymonthday = [];
-							options.bymonthday.push(nth);
-							ttr.accept("day(s)");
-						}
-						else if (wkd) {
+						if (nth) {
+							if (wkd) {
+								ttr.nextSymbol();
+								if (!options.byweekday) options.byweekday = [];
+								options.byweekday.push(RRule[wkd].nth(nth));
+							} else {
+								if (!options.bymonthday) options.bymonthday = [];
+								options.bymonthday.push(nth);
+								ttr.accept("day(s)");
+							}
+						} else if (wkd) {
 							ttr.nextSymbol();
 							if (!options.byweekday) options.byweekday = [];
 							options.byweekday.push(RRule[wkd]);
@@ -6335,9 +6843,7 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 					case RRule.MONTHLY:
 						opts.bymonthday = opts.dtstart.getUTCDate();
 						break;
-					case RRule.WEEKLY:
-						opts.byweekday = [getWeekday(opts.dtstart)];
-						break;
+					case RRule.WEEKLY: opts.byweekday = [getWeekday(opts.dtstart)];
 				}
 				if (isPresent(opts.bymonth) && !isArray(opts.bymonth)) opts.bymonth = [opts.bymonth];
 				if (isPresent(opts.byyearday) && !isArray(opts.byyearday) && isNumber(opts.byyearday)) opts.byyearday = [opts.byyearday];
@@ -6369,14 +6875,15 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 				} else if (isWeekdayStr(opts.byweekday)) {
 					opts.byweekday = [Weekday.fromStr(opts.byweekday).weekday];
 					opts.bynweekday = null;
-				} else if (opts.byweekday instanceof Weekday) if (!opts.byweekday.n || opts.freq > RRule.MONTHLY) {
-					opts.byweekday = [opts.byweekday.weekday];
-					opts.bynweekday = null;
+				} else if (opts.byweekday instanceof Weekday) {
+					if (!opts.byweekday.n || opts.freq > RRule.MONTHLY) {
+						opts.byweekday = [opts.byweekday.weekday];
+						opts.bynweekday = null;
+					} else {
+						opts.bynweekday = [[opts.byweekday.weekday, opts.byweekday.n]];
+						opts.byweekday = null;
+					}
 				} else {
-					opts.bynweekday = [[opts.byweekday.weekday, opts.byweekday.n]];
-					opts.byweekday = null;
-				}
-				else {
 					var byweekday = [];
 					var bynweekday = [];
 					for (var i = 0; i < opts.byweekday.length; i++) {
@@ -6795,12 +7302,13 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 					nwdaymask: []
 				};
 				var ranges = [];
-				if (options.freq === RRule.YEARLY) if (empty(options.bymonth)) ranges = [[0, yearlen]];
-				else for (var j = 0; j < options.bymonth.length; j++) {
-					month = options.bymonth[j];
-					ranges.push(mrange.slice(month - 1, month + 1));
-				}
-				else if (options.freq === RRule.MONTHLY) ranges = [mrange.slice(month - 1, month + 1)];
+				if (options.freq === RRule.YEARLY) {
+					if (empty(options.bymonth)) ranges = [[0, yearlen]];
+					else for (var j = 0; j < options.bymonth.length; j++) {
+						month = options.bymonth[j];
+						ranges.push(mrange.slice(month - 1, month + 1));
+					}
+				} else if (options.freq === RRule.MONTHLY) ranges = [mrange.slice(month - 1, month + 1)];
 				if (empty(ranges)) return result;
 				result.nwdaymask = repeat(0, yearlen);
 				for (var j = 0; j < ranges.length; j++) {
@@ -6839,7 +7347,7 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 				var month = Math.floor((h + l - 7 * m + 114) / 31);
 				var day = (h + l - 7 * m + 114) % 31 + 1;
 				var date = Date.UTC(y, month - 1, day + offset);
-				return [Math.ceil((date - Date.UTC(y, 0, 1)) / (1e3 * 60 * 60 * 24))];
+				return [Math.ceil((date - Date.UTC(y, 0, 1)) / 864e5)];
 			}
 			const iterinfo = function() {
 				function Iterinfo(options) {
@@ -7708,10 +8216,8 @@ var import_rrule = (/* @__PURE__ */ __commonJSMin(((exports, module) => {
 			return __webpack_exports__;
 		})();
 	});
-})))();
+})))(), 1);
 const PACKED_DATE_MULTIPLIER = 128;
-const PACKED_DATE_DAY_MASK = 31;
-const PACKED_DATE_MONTH_MASK = 15;
 const PACKED_DATE_MONTH_SHIFT = 5;
 const PACKED_DATE_YEAR_SHIFT = 9;
 const THINGS_REMINDER_HOUR_SCALE = 67108864;
@@ -7732,8 +8238,8 @@ const decodeThingsPackedDateParts = (value) => {
 	if (integer <= 0 || integer % PACKED_DATE_MULTIPLIER !== 0) return null;
 	const packed = integer / PACKED_DATE_MULTIPLIER;
 	const parts = {
-		day: packed % (PACKED_DATE_DAY_MASK + 1),
-		month: Math.trunc(packed / 2 ** PACKED_DATE_MONTH_SHIFT) % (PACKED_DATE_MONTH_MASK + 1),
+		day: packed % 32,
+		month: Math.trunc(packed / 2 ** PACKED_DATE_MONTH_SHIFT) % 16,
 		year: Math.trunc(packed / 2 ** PACKED_DATE_YEAR_SHIFT)
 	};
 	return isValidPackedDate(parts) ? parts : null;
@@ -7769,7 +8275,8 @@ const combineThingsReminderAt = (options) => {
 };
 //#endregion
 //#region ../../packages/import-core/src/things/recurrence.ts
-const THINGS_FREQUENCY_TO_RRULE = new Map([
+const { RRule, rrulestr } = typeof import_rrule.RRule === "function" ? import_rrule : import_rrule.default;
+const THINGS_FREQUENCY_TO_RRULE = /* @__PURE__ */ new Map([
 	[4, "YEARLY"],
 	[8, "MONTHLY"],
 	[16, "DAILY"],
@@ -7784,6 +8291,11 @@ const THINGS_WEEKDAY_TO_RRULE = [
 	"FR",
 	"SA"
 ];
+/**
+* Things writes `ed` as Unix seconds at UTC midnight, and uses 4001-01-01 as
+* "never ends". Anything at or past it is treated as no end date.
+*/
+const THINGS_NEVER_ENDS_SECONDS = 64092211200;
 const parseNumericPlistField = (xml, key) => {
 	const match = new RegExp(`<key>${key}</key>\\s*<(integer|real)>([^<]+)</\\1>`, "u").exec(xml);
 	if (!match?.[2]) return null;
@@ -7809,8 +8321,8 @@ const parseOffsets = (xml) => {
 };
 const parseRRule = (rule) => {
 	try {
-		const parsed = (0, import_rrule.rrulestr)(rule);
-		return parsed instanceof import_rrule.RRule ? parsed : null;
+		const parsed = rrulestr(rule);
+		return parsed instanceof RRule ? parsed : null;
 	} catch {
 		return null;
 	}
@@ -7819,7 +8331,8 @@ const buildByDayTokens = (definition) => {
 	const tokens = definition.offsets.map((offset) => typeof offset.wd === "number" ? THINGS_WEEKDAY_TO_RRULE[offset.wd] ?? null : null).filter((value) => value !== null);
 	if (tokens.length > 0) return tokens;
 	if (definition.ia === null) return [];
-	return [THINGS_WEEKDAY_TO_RRULE[(/* @__PURE__ */ new Date(definition.ia * 1e3)).getUTCDay()] ?? "MO"];
+	const weekday = (/* @__PURE__ */ new Date(definition.ia * 1e3)).getUTCDay();
+	return [THINGS_WEEKDAY_TO_RRULE[weekday] ?? "MO"];
 };
 const buildMonthDays = (definition) => {
 	const monthDays = definition.offsets.map((offset) => typeof offset.dy === "number" ? Math.trunc(offset.dy) + 1 : null).filter((value) => value !== null && value >= 1);
@@ -7833,6 +8346,10 @@ const buildAnchor = (definition, task, timeZone) => {
 	if (!timeZone) return `DTSTART:${anchor}`;
 	return `DTSTART;TZID=${timeZone}:${anchor}`;
 };
+/**
+* Builds the rule without any end. The end is appended separately because a
+* count has to be resolved against this exact rule first.
+*/
 const buildRepeatRule = (definition, task, timeZone) => {
 	const frequency = definition.fu === null ? null : THINGS_FREQUENCY_TO_RRULE.get(definition.fu) ?? null;
 	if (!frequency) return null;
@@ -7884,21 +8401,77 @@ const parseThingsRecurrenceDefinition = (xml) => {
 	if (definition.ia === null && definition.sr === null && definition.ed === null && definition.rc === null && definition.fu === null && definition.fa === null && definition.tp === null && definition.ts === null && definition.offsets.length === 0) return null;
 	return definition;
 };
+const resolveThingsRepeatEnd = (definition) => {
+	const untilDate = definition.ed !== null && definition.ed < THINGS_NEVER_ENDS_SECONDS ? decodeThingsUnixCalendarDate(definition.ed, null) : null;
+	const count = definition.rc !== null && definition.rc > 0 ? Math.trunc(definition.rc) : null;
+	return untilDate === null && count === null ? null : {
+		count,
+		untilDate
+	};
+};
+/**
+* Date-only epoch of the last occurrence a count allows, counted from the
+* rule's DTSTART, or null when the rule has no DTSTART to count from.
+*
+* COUNT itself is never written: iOS only honours COUNT <= 0, and rrule counts
+* from DTSTART while the rule anchor is Things' `ia`. Resolving the count here
+* against that same anchor and storing the result as UNTIL gives every
+* platform one date to agree on. `instanceCreationCount` is not used: it
+* counts instances Things has already made from that same anchor, so it does
+* not change which occurrence is last. It would matter only if `ia` had moved
+* since the count began, and nothing in the database records that.
+*/
+const resolveLastOccurrenceDate = (repeatRule, count) => {
+	const parsed = parseRRule(`${repeatRule};COUNT=${count}`);
+	if (!parsed?.origOptions.dtstart) return null;
+	const last = parsed.all().at(-1);
+	return last ? normalizeOccurrenceEpoch(last, getRuleTimeZone(parsed)) : null;
+};
+/**
+* The last day a fixed repeat may land on, from Things' end date and count
+* together (whichever comes first), or null when neither can be resolved.
+*/
+const resolveFixedUntilDate = (repeatRule, end) => {
+	const lastByCount = end.count === null ? null : resolveLastOccurrenceDate(repeatRule, end.count);
+	if (end.count !== null && lastByCount === null) return null;
+	const candidates = [end.untilDate, lastByCount].filter((value) => value !== null);
+	return candidates.length > 0 ? Math.min(...candidates) : null;
+};
+/**
+* UNTIL as the end of that calendar day. rrule compares it against the rule's
+* wall-clock occurrences, so this admits the last day in the rule's own zone,
+* and iOS reads only the date digits, so both stop on the same day.
+*
+* With a TZID the time is local, written without `Z`, because that is how
+* rrule serializes it and so how manage-api's `canonicalizeRepeatRule` stores
+* it. Writing `Z` there would have the server rewrite the rule on insert.
+*/
+const formatUntil = (untilDate, timeZone) => {
+	const day = formatDateOnlyEpoch(untilDate);
+	return day ? `UNTIL=${day.replaceAll("-", "")}T235959${timeZone ? "" : "Z"}` : null;
+};
 const isThingsRepeatTemplateTask = (task) => task.recurrenceRuleRaw !== null && task.repeatTemplateSourceId === null;
 const isThingsRepeatInstanceTask = (task) => task.repeatTemplateSourceId !== null;
-const resolveThingsRepeatTemplateFields = (task, timeZone) => {
+const resolveThingsRepeatTemplateFields = (task, timeZone, today) => {
 	if (!isThingsRepeatTemplateTask(task)) return null;
 	const recurrence = parseThingsRecurrenceDefinition(task.recurrenceRuleRaw);
 	if (!recurrence) return null;
 	const repeatTimeZone = resolveTimeZoneOrNull(timeZone);
-	const repeatRule = buildRepeatRule(recurrence, task, repeatTimeZone);
-	if (!repeatRule) return null;
-	const currentInstanceDate = decodeThingsPackedCalendarDate(task.nextInstanceStartDate, repeatTimeZone) ?? decodeThingsPackedCalendarDate(task.startDate, repeatTimeZone) ?? decodeThingsUnixCalendarDate(recurrence.ia, repeatTimeZone) ?? decodeThingsUnixSeconds(recurrence.ia);
+	const openRule = buildRepeatRule(recurrence, task, repeatTimeZone);
+	if (!openRule) return null;
 	const repeatType = recurrence.tp === 1 ? "after_completion" : "fixed";
+	const end = resolveThingsRepeatEnd(recurrence);
+	const untilDate = end && repeatType === "fixed" ? resolveFixedUntilDate(openRule, end) : null;
+	const until = untilDate === null ? null : formatUntil(untilDate, repeatTimeZone);
+	const repeatRule = until ? `${openRule};${until}` : openRule;
+	const currentInstanceDate = decodeThingsPackedCalendarDate(task.nextInstanceStartDate, repeatTimeZone) ?? decodeThingsPackedCalendarDate(task.startDate, repeatTimeZone) ?? decodeThingsUnixCalendarDate(recurrence.ia, repeatTimeZone) ?? decodeThingsUnixSeconds(recurrence.ia);
+	const ended = untilDate !== null && (untilDate < today || currentInstanceDate !== null && currentInstanceDate > untilDate);
 	return {
 		currentInstanceDate,
+		droppedEnd: until ? null : end,
+		ended,
 		recurrence,
-		repeatNextAt: repeatType === "fixed" ? calculateNextOccurrence(repeatRule, currentInstanceDate) : null,
+		repeatNextAt: repeatType === "fixed" && !ended ? calculateNextOccurrence(repeatRule, currentInstanceDate) : null,
 		repeatRule,
 		repeatStatus: task.instanceCreationPaused || recurrence.ts === 1 ? "paused" : "active",
 		repeatType
@@ -8004,11 +8577,15 @@ const buildReminderAt = (task, startDate) => combineThingsReminderAt({
 	reminderTime: task.reminderTime,
 	startDate
 });
-const pickArchivedAt = (task) => {
+/**
+* `fallback` is the import time. A trashed task with no dates of its own must
+* still get an `archivedAt`, or it lands outside Trash.
+*/
+const pickArchivedAt = (task, fallback) => {
 	const updatedAt = decodeThingsUnixSeconds(task.userModificationDate);
 	const completedAt = decodeThingsUnixSeconds(task.stopDate);
 	const createdAt = decodeThingsUnixSeconds(task.creationDate);
-	if (task.trashed || task.status === 2) return updatedAt ?? completedAt ?? createdAt;
+	if (task.trashed || task.status === 2) return updatedAt ?? completedAt ?? createdAt ?? fallback;
 	return null;
 };
 const pickCompletedAt = (task) => {
@@ -8016,14 +8593,14 @@ const pickCompletedAt = (task) => {
 	return decodeThingsUnixSeconds(task.stopDate) ?? decodeThingsUnixSeconds(task.userModificationDate) ?? decodeThingsUnixSeconds(task.creationDate);
 };
 const sortValue = (primary, fallback) => typeof primary === "number" ? primary : fallback;
-const textDecoder = new TextDecoder();
+const textDecoder$1 = new TextDecoder();
 const encodeBase64 = (value) => {
 	let binary = "";
 	for (const byte of value) binary += String.fromCodePoint(byte);
 	return btoa(binary);
 };
 const sanitizeBinary = (value) => {
-	const asText = textDecoder.decode(value);
+	const asText = textDecoder$1.decode(value);
 	if (!asText.includes("�") && READABLE_TEXT_PATTERN.test(asText)) {
 		const trimmed = asText.trim();
 		if (trimmed.length > 0) return trimmed;
@@ -8161,7 +8738,7 @@ const buildTagTitleMap = (tags) => {
 const buildChecklistMutation = (options) => {
 	const sourceId = options.sourceId ?? options.item.uuid;
 	const title = normalizeTitle(options.item.title, `Checklist item ${options.item.uuid.slice(0, 8)}`);
-	const safeTitle = title.length > MAX_CHECKLIST_TITLE_LENGTH ? `${title.slice(0, MAX_CHECKLIST_TITLE_LENGTH - 3)}...` : title;
+	const safeTitle = title.length > MAX_CHECKLIST_TITLE_LENGTH ? `${title.slice(0, 497)}...` : title;
 	return {
 		modelId: createDeterministicImportId({
 			modelName: "TaskChecklistItem",
@@ -8183,19 +8760,25 @@ const buildChecklistMutation = (options) => {
 };
 const buildTeamActions = (ctx, areas) => {
 	const teams = [];
+	const teamMemberships = [];
+	const membershipIds = /* @__PURE__ */ new Set();
 	for (const area of [...areas].toSorted((a, b) => {
 		const indexComparison = compareNullableNumber(a.sortIndex, b.sortIndex);
 		if (indexComparison !== 0) return indexComparison;
 		return a.uuid.localeCompare(b.uuid);
 	})) {
-		const teamId = createDeterministicImportId({
+		const teamName = normalizeTitle(area.title, `Area ${area.uuid.slice(0, 8)}`);
+		const teamLookupKey = normalizeThingsTeamLookupKey(teamName);
+		const existingTeamId = ctx.existingTeamIdByName.get(teamLookupKey);
+		const teamId = existingTeamId ?? createDeterministicImportId({
 			modelName: "Team",
 			sourceId: area.uuid,
 			workspaceId: ctx.workspaceId
 		});
+		ctx.existingTeamIdByName.set(teamLookupKey, teamId);
 		ctx.areaTeamIdBySourceId.set(area.uuid, teamId);
 		const areaTagTitles = (ctx.areaTagMap.get(area.uuid) ?? []).map((link) => ctx.tagTitleById.get(link.tagId) ?? null).filter((title) => typeof title === "string");
-		teams.push({
+		if (!existingTeamId) teams.push({
 			modelId: teamId,
 			modelName: "Team",
 			payload: {
@@ -8204,14 +8787,36 @@ const buildTeamActions = (ctx, areas) => {
 				description: appendMetadataBlock(null, ctx.metadataMode, buildAreaMetadata(area, areaTagTitles)),
 				icon: null,
 				key: ctx.teamKeys.get(area.uuid) ?? "AREA",
-				name: normalizeTitle(area.title, `Area ${area.uuid.slice(0, 8)}`),
+				name: teamName,
 				updatedAt: ctx.createdAtFallback,
 				workspaceId: ctx.workspaceId
 			},
 			sourceId: area.uuid
 		});
+		const membershipId = createTeamMembershipId({
+			teamId,
+			userId: ctx.creatorId,
+			workspaceId: ctx.workspaceId
+		});
+		if (!membershipIds.has(membershipId)) {
+			membershipIds.add(membershipId);
+			teamMemberships.push({
+				modelId: membershipId,
+				modelName: "TeamMembership",
+				payload: {
+					createdAt: ctx.createdAtFallback,
+					teamId,
+					userId: ctx.creatorId,
+					workspaceId: ctx.workspaceId
+				},
+				sourceId: `${area.uuid}:${ctx.creatorId}`
+			});
+		}
 	}
-	return teams;
+	return {
+		teamMemberships,
+		teams
+	};
 };
 const buildLabelActions = (ctx, tags) => {
 	const labels = [];
@@ -8244,6 +8849,7 @@ const buildLabelActions = (ctx, tags) => {
 };
 const buildProjectActions = (ctx, sourceProjects) => {
 	const projects = [];
+	const projectMemberships = [];
 	const teamProjects = [];
 	for (const project of [...sourceProjects].toSorted((a, b) => {
 		const indexComparison = compareNullableNumber(a.sortIndex, b.sortIndex);
@@ -8262,7 +8868,7 @@ const buildProjectActions = (ctx, sourceProjects) => {
 			modelId: projectId,
 			modelName: "Project",
 			payload: {
-				archivedAt: pickArchivedAt(project),
+				archivedAt: pickArchivedAt(project, ctx.createdAtFallback),
 				color: null,
 				completedAt: pickCompletedAt(project),
 				createdAt: decodeThingsUnixSeconds(project.creationDate) ?? ctx.createdAtFallback,
@@ -8279,6 +8885,21 @@ const buildProjectActions = (ctx, sourceProjects) => {
 			},
 			sourceId: project.uuid
 		});
+		projectMemberships.push({
+			modelId: createProjectMembershipId({
+				projectId,
+				userId: ctx.creatorId,
+				workspaceId: ctx.workspaceId
+			}),
+			modelName: "ProjectMembership",
+			payload: {
+				createdAt: decodeThingsUnixSeconds(project.creationDate) ?? ctx.createdAtFallback,
+				projectId,
+				userId: ctx.creatorId,
+				workspaceId: ctx.workspaceId
+			},
+			sourceId: `${project.uuid}:${ctx.creatorId}`
+		});
 		if (project.areaId !== null) {
 			const teamId = ctx.areaTeamIdBySourceId.get(project.areaId);
 			if (teamId) teamProjects.push({
@@ -8299,6 +8920,7 @@ const buildProjectActions = (ctx, sourceProjects) => {
 		}
 	}
 	return {
+		projectMemberships,
 		projects,
 		teamProjects
 	};
@@ -8324,7 +8946,7 @@ const buildHeadingActions = (ctx, sourceHeadings) => {
 			modelId: headingId,
 			modelName: "ProjectHeading",
 			payload: {
-				archivedAt: pickArchivedAt(heading),
+				archivedAt: pickArchivedAt(heading, ctx.createdAtFallback),
 				createdAt: decodeThingsUnixSeconds(heading.creationDate) ?? ctx.createdAtFallback,
 				projectId: parentProjectId,
 				sortOrder: sortValue(heading.sortIndex, headings.length),
@@ -8395,7 +9017,7 @@ const pushTaskMutation = (ctx, tasks, taskLabels, checklistItems, mutationOption
 		modelId: mutationOptions.taskId,
 		modelName: "Task",
 		payload: {
-			archivedAt: pickArchivedAt(mutationOptions.task),
+			archivedAt: pickArchivedAt(mutationOptions.task, ctx.createdAtFallback),
 			assigneeId: null,
 			completedAt: pickCompletedAt(mutationOptions.task),
 			createdAt,
@@ -8435,8 +9057,22 @@ const pushTaskMutation = (ctx, tasks, taskLabels, checklistItems, mutationOption
 	});
 	return createdAt;
 };
+/**
+* The repeat is imported without its end, so it keeps going. Name the task in
+* the preview rather than let the user find out when it comes back.
+*/
+const buildRepeatEndIssue = (task, end, repeatType) => {
+	const title = normalizeTitle(task.title, `Task ${task.uuid.slice(0, 8)}`);
+	const until = formatDateOnlyEpoch(end.untilDate);
+	const thingsEnd = until ? `stops repeating on ${until} in Things` : `repeats ${end.count} ${end.count === 1 ? "time" : "times"} in Things`;
+	const outcome = repeatType === "after_completion" ? "In Done Bear it repeats after each completion with no end, so stop it by hand when you're done." : "That end won't carry over, so it keeps repeating in Done Bear.";
+	return createIssue(ImportIssueCode.RECURRENCE_APPROXIMATED, `"${title}" ${thingsEnd}. ${outcome}`, {
+		field: "repeatRule",
+		sourceRecordId: task.uuid
+	});
+};
 const planRepeatTemplateTask = (ctx, task, taskId, openRepeatInstanceTemplateIds, tasks, taskLabels, checklistItems) => {
-	const repeatTemplate = resolveThingsRepeatTemplateFields(task, ctx.timeZone);
+	const repeatTemplate = resolveThingsRepeatTemplateFields(task, ctx.timeZone, ctx.todayDateOnly);
 	if (!repeatTemplate) {
 		pushTaskMutation(ctx, tasks, taskLabels, checklistItems, {
 			sourceId: task.uuid,
@@ -8445,6 +9081,8 @@ const planRepeatTemplateTask = (ctx, task, taskId, openRepeatInstanceTemplateIds
 		});
 		return;
 	}
+	const archived = pickArchivedAt(task, ctx.createdAtFallback) !== null;
+	if (repeatTemplate.droppedEnd && !archived) ctx.issues.push(buildRepeatEndIssue(task, repeatTemplate.droppedEnd, repeatTemplate.repeatType));
 	pushTaskMutation(ctx, tasks, taskLabels, checklistItems, {
 		repeat: {
 			repeatInstanceDate: null,
@@ -8458,7 +9096,7 @@ const planRepeatTemplateTask = (ctx, task, taskId, openRepeatInstanceTemplateIds
 		task,
 		taskId
 	});
-	if (pickCompletedAt(task) !== null || pickArchivedAt(task) !== null || openRepeatInstanceTemplateIds.has(task.uuid)) return;
+	if (pickCompletedAt(task) !== null || archived || repeatTemplate.ended || openRepeatInstanceTemplateIds.has(task.uuid)) return;
 	const currentInstanceTaskId = createDeterministicImportId({
 		modelName: "Task",
 		sourceId: `${task.uuid}:current-instance`,
@@ -8497,7 +9135,7 @@ const buildTaskActions = (ctx, sourceTasks) => {
 		if (todayComparison !== 0) return todayComparison;
 		return a.uuid.localeCompare(b.uuid);
 	});
-	const openRepeatInstanceTemplateIds = new Set(sourceTasks.filter(isThingsRepeatInstanceTask).filter((task) => pickCompletedAt(task) === null && pickArchivedAt(task) === null).map((task) => task.repeatTemplateSourceId).filter((value) => typeof value === "string"));
+	const openRepeatInstanceTemplateIds = new Set(sourceTasks.filter(isThingsRepeatInstanceTask).filter((task) => pickCompletedAt(task) === null && pickArchivedAt(task, ctx.createdAtFallback) === null).map((task) => task.repeatTemplateSourceId).filter((value) => typeof value === "string"));
 	for (const task of sortedSourceTasks) ctx.taskIdBySourceId.set(task.uuid, createDeterministicImportId({
 		modelName: "Task",
 		sourceId: task.uuid,
@@ -8540,6 +9178,45 @@ const buildTaskActions = (ctx, sourceTasks) => {
 		tasks
 	};
 };
+/**
+* Still to do in Things: not completed (status 3), not canceled (status 2),
+* not in the Trash. Canceled and trashed items would arrive in Done Bear's
+* Trash anyway, and someone asking for open items does not want them.
+*/
+const isThingsItemOpen = (task) => !task.trashed && task.status !== 2 && task.status !== 3;
+/**
+* Decides, once and here, what `openOnly` keeps:
+*
+* - To-dos: only open ones. That includes repeat templates (the rule lives on
+*   them) and open repeat instances; completed instances are the Logbook
+*   history of a repeat and are left behind. An open instance whose template
+*   is left behind keeps its date but loses the link, since the template is
+*   not written.
+* - Projects: an open project always comes; a finished one comes only when an
+*   open to-do still lives in it (directly or under one of its headings), and
+*   keeps its finished state. Its headings follow it.
+* - Checklist items follow their to-do, ticked ones included: they are part of
+*   an open to-do's state and do not count as tasks.
+* - Areas and tags are not filtered.
+*/
+const selectOpenOnly = (sourceProjects, sourceHeadings, sourceTasks) => {
+	const tasks = sourceTasks.filter(isThingsItemOpen);
+	const projectIdByHeadingId = new Map(sourceHeadings.map((heading) => [heading.uuid, heading.projectId]));
+	const projectIdsWithOpenTasks = /* @__PURE__ */ new Set();
+	for (const task of tasks) {
+		const projectId = task.projectId ?? (task.headingId === null ? null : projectIdByHeadingId.get(task.headingId) ?? null);
+		if (projectId !== null) projectIdsWithOpenTasks.add(projectId);
+	}
+	const projects = sourceProjects.filter((project) => isThingsItemOpen(project) || projectIdsWithOpenTasks.has(project.uuid));
+	return {
+		leftBehind: {
+			projects: sourceProjects.length - projects.length,
+			tasks: sourceTasks.length - tasks.length
+		},
+		projects,
+		tasks
+	};
+};
 const buildThingsImportPlan = (options) => {
 	const { snapshot, workspaceId, existingLabelsByTitle } = options;
 	const ctx = {
@@ -8551,7 +9228,9 @@ const buildThingsImportPlan = (options) => {
 		createdAtFallback: Date.now(),
 		creatorId: options.creatorId,
 		existingLabelIdByTitle: existingLabelsByTitle ?? /* @__PURE__ */ new Map(),
+		existingTeamIdByName: options.existingTeamsByName ?? /* @__PURE__ */ new Map(),
 		headingIdBySourceId: /* @__PURE__ */ new Map(),
+		issues: [],
 		metadataMode: options.metadataMode,
 		projectIdBySourceId: /* @__PURE__ */ new Map(),
 		projectKeyCandidates: buildUniqueKeys(snapshot.tasks.filter((task) => classifyTaskKind(task) === "project"), {
@@ -8570,19 +9249,34 @@ const buildThingsImportPlan = (options) => {
 		todayDateOnly: localDateToDateOnlyEpoch(/* @__PURE__ */ new Date()),
 		workspaceId
 	};
-	const teams = options.skipTeams ? [] : buildTeamActions(ctx, snapshot.areas);
+	const { teamMemberships, teams } = options.skipTeams ? {
+		teamMemberships: [],
+		teams: []
+	} : buildTeamActions(ctx, snapshot.areas);
 	const labels = buildLabelActions(ctx, snapshot.tags);
 	const sourceProjects = snapshot.tasks.filter((task) => classifyTaskKind(task) === "project");
 	const sourceHeadings = snapshot.tasks.filter((task) => classifyTaskKind(task) === "heading");
 	const sourceTasks = snapshot.tasks.filter((task) => classifyTaskKind(task) === "task");
-	const { projects, teamProjects } = buildProjectActions(ctx, sourceProjects);
+	const selected = options.openOnly ? selectOpenOnly(sourceProjects, sourceHeadings, sourceTasks) : {
+		leftBehind: {
+			projects: 0,
+			tasks: 0
+		},
+		projects: sourceProjects,
+		tasks: sourceTasks
+	};
+	const { projectMemberships, projects, teamProjects } = buildProjectActions(ctx, selected.projects);
 	const headings = buildHeadingActions(ctx, sourceHeadings);
-	const { tasks, taskLabels, checklistItems } = buildTaskActions(ctx, sourceTasks);
+	const { tasks, taskLabels, checklistItems } = buildTaskActions(ctx, selected.tasks);
 	const phases = [
 		{
 			items: teams,
 			name: "teams"
 		},
+		{
+			items: teamMemberships,
+			name: "teamMemberships"
+		},
 		{
 			items: labels,
 			name: "labels"
@@ -8591,6 +9285,10 @@ const buildThingsImportPlan = (options) => {
 			items: projects,
 			name: "projects"
 		},
+		{
+			items: projectMemberships,
+			name: "projectMemberships"
+		},
 		{
 			items: teamProjects,
 			name: "teamProjects"
@@ -8614,6 +9312,7 @@ const buildThingsImportPlan = (options) => {
 	];
 	return {
 		counts: {
+			leftBehind: selected.leftBehind,
 			planned: Object.fromEntries(phases.map((phase) => [phase.name, phase.items.length])),
 			source: {
 				areaTagLinks: snapshot.areaTags.length,
@@ -8627,11 +9326,161 @@ const buildThingsImportPlan = (options) => {
 			}
 		},
 		databasePath: snapshot.databasePath,
+		issues: ctx.issues,
 		phases,
 		taskColumns: snapshot.taskColumns
 	};
 };
 //#endregion
+//#region ../../packages/import-core/src/things/snapshot.ts
+const textDecoder = new TextDecoder();
+const THINGS_REQUIRED_TABLE = "TMTask";
+const THINGS_SQLITE_FILE = "main.sqlite";
+const LEGACY_THINGS_SQLITE_FILE = "Things.sqlite3";
+const toThingsStringValue = (value) => {
+	if (typeof value === "string") {
+		const trimmed = value.trim();
+		return trimmed.length > 0 ? trimmed : null;
+	}
+	if (value instanceof Uint8Array) {
+		const text = textDecoder.decode(value).trim();
+		return text.length > 0 ? text : null;
+	}
+	return null;
+};
+const toThingsNumberValue = (value) => typeof value === "number" && Number.isFinite(value) ? value : null;
+const toThingsBooleanValue = (value) => {
+	const numeric = toThingsNumberValue(value);
+	return numeric === null ? null : numeric !== 0;
+};
+const normalizeThingsTaskRecord = (row) => {
+	const uuid = toThingsStringValue(row.uuid);
+	if (!uuid) return null;
+	return {
+		afterCompletionReferenceDate: toThingsNumberValue(row.rt1_afterCompletionReferenceDate ?? row.afterCompletionReferenceDate),
+		areaId: toThingsStringValue(row.area),
+		contactId: toThingsStringValue(row.contact ?? row.delegate),
+		creationDate: toThingsNumberValue(row.creationDate),
+		deadline: toThingsNumberValue(row.deadline ?? row.dueDate),
+		deadlineOffset: toThingsNumberValue(row.t2_deadlineOffset ?? row.dueDateOffset),
+		deadlineSuppressionDate: toThingsNumberValue(row.deadlineSuppressionDate ?? row.dueDateSuppressionDate),
+		headingId: toThingsStringValue(row.heading ?? row.actionGroup),
+		instanceCreationCount: toThingsNumberValue(row.rt1_instanceCreationCount ?? row.instanceCreationCount),
+		instanceCreationPaused: toThingsBooleanValue(row.rt1_instanceCreationPaused ?? row.instanceCreationPaused) ?? false,
+		instanceCreationStartDate: toThingsNumberValue(row.rt1_instanceCreationStartDate ?? row.instanceCreationStartDate),
+		lastReminderInteractionDate: toThingsNumberValue(row.lastReminderInteractionDate ?? row.lastAlarmInteractionDate),
+		nextInstanceStartDate: toThingsNumberValue(row.rt1_nextInstanceStartDate ?? row.nextInstanceStartDate),
+		notes: toThingsStringValue(row.notes),
+		projectId: toThingsStringValue(row.project),
+		raw: row,
+		recurrenceRuleRaw: toThingsStringValue(row.rt1_recurrenceRule ?? row.recurrenceRule),
+		reminderTime: toThingsNumberValue(row.reminderTime),
+		repeatTemplateSourceId: toThingsStringValue(row.rt1_repeatingTemplate ?? row.repeatingTemplate),
+		repeaterMigrationDate: toThingsNumberValue(row.repeaterMigrationDate),
+		repeaterRaw: toThingsStringValue(row.repeater),
+		sortIndex: toThingsNumberValue(row.index),
+		start: toThingsNumberValue(row.start),
+		startBucket: toThingsNumberValue(row.startBucket),
+		startDate: toThingsNumberValue(row.startDate),
+		status: toThingsNumberValue(row.status),
+		stopDate: toThingsNumberValue(row.stopDate),
+		title: toThingsStringValue(row.title),
+		todayIndex: toThingsNumberValue(row.todayIndex),
+		todayIndexReferenceDate: toThingsNumberValue(row.todayIndexReferenceDate),
+		trashed: toThingsBooleanValue(row.trashed) ?? false,
+		type: toThingsNumberValue(row.type),
+		userModificationDate: toThingsNumberValue(row.userModificationDate),
+		uuid
+	};
+};
+const normalizeThingsAreaRecord = (row) => {
+	const uuid = toThingsStringValue(row.uuid);
+	if (!uuid) return null;
+	return {
+		raw: row,
+		sortIndex: toThingsNumberValue(row.index),
+		title: toThingsStringValue(row.title),
+		uuid,
+		visible: toThingsBooleanValue(row.visible)
+	};
+};
+const normalizeThingsTagRecord = (row) => {
+	const uuid = toThingsStringValue(row.uuid);
+	if (!uuid) return null;
+	return {
+		parentId: toThingsStringValue(row.parent),
+		raw: row,
+		shortcut: toThingsStringValue(row.shortcut),
+		sortIndex: toThingsNumberValue(row.index),
+		title: toThingsStringValue(row.title),
+		usedDate: toThingsNumberValue(row.usedDate),
+		uuid
+	};
+};
+const normalizeThingsChecklistItemRecord = (row) => {
+	const uuid = toThingsStringValue(row.uuid);
+	if (!uuid) return null;
+	return {
+		creationDate: toThingsNumberValue(row.creationDate),
+		raw: row,
+		sortIndex: toThingsNumberValue(row.index),
+		status: toThingsNumberValue(row.status),
+		stopDate: toThingsNumberValue(row.stopDate),
+		taskId: toThingsStringValue(row.task),
+		title: toThingsStringValue(row.title),
+		userModificationDate: toThingsNumberValue(row.userModificationDate),
+		uuid
+	};
+};
+const normalizeThingsTaskTagRecord = (row) => {
+	const taskId = toThingsStringValue(row.tasks);
+	const tagId = toThingsStringValue(row.tags);
+	return taskId && tagId ? {
+		tagId,
+		taskId
+	} : null;
+};
+const normalizeThingsAreaTagRecord = (row) => {
+	const areaId = toThingsStringValue(row.areas);
+	const tagId = toThingsStringValue(row.tags);
+	return areaId && tagId ? {
+		areaId,
+		tagId
+	} : null;
+};
+const normalizeThingsContactRecord = (row) => {
+	const uuid = toThingsStringValue(row.uuid);
+	if (!uuid) return null;
+	return {
+		appleAddressBookId: toThingsStringValue(row.appleAddressBookId),
+		displayName: toThingsStringValue(row.displayName),
+		emails: toThingsStringValue(row.emails),
+		firstName: toThingsStringValue(row.firstName),
+		lastName: toThingsStringValue(row.lastName),
+		raw: row,
+		uuid
+	};
+};
+const mapPresent = (rows, normalize) => rows.map(normalize).filter((record) => record !== null);
+/**
+* Turns raw Things tables into the snapshot `buildThingsImportPlan` consumes.
+* Callers supply the SQL; this is the one place row → record mapping lives.
+*/
+const buildThingsDatabaseSnapshot = (reader, databasePath) => {
+	if (!reader.hasTable("TMTask")) throw new Error("This does not look like a Things 3 database. Select the main.sqlite file that contains the TMTask table.");
+	return {
+		areaTags: reader.hasTable("TMAreaTag") ? mapPresent(reader.readRows("TMAreaTag"), normalizeThingsAreaTagRecord) : [],
+		areas: reader.hasTable("TMArea") ? mapPresent(reader.readRows("TMArea"), normalizeThingsAreaRecord) : [],
+		checklistItems: reader.hasTable("TMChecklistItem") ? mapPresent(reader.readRows("TMChecklistItem"), normalizeThingsChecklistItemRecord) : [],
+		contacts: reader.hasTable("TMContact") ? mapPresent(reader.readRows("TMContact"), normalizeThingsContactRecord) : [],
+		databasePath,
+		tags: reader.hasTable("TMTag") ? mapPresent(reader.readRows("TMTag"), normalizeThingsTagRecord) : [],
+		taskColumns: reader.getTableColumns(THINGS_REQUIRED_TABLE),
+		taskTags: reader.hasTable("TMTaskTag") ? mapPresent(reader.readRows("TMTaskTag"), normalizeThingsTaskTagRecord) : [],
+		tasks: mapPresent(reader.readRows(THINGS_REQUIRED_TABLE), normalizeThingsTaskRecord)
+	};
+};
+//#endregion
 //#region ../../packages/sync-ids/src/meet-done-bear.ts
 /**
 * Ids for the "Meet Done Bear" sample project every new workspace is seeded
@@ -8685,8 +9534,6 @@ const listMeetDoneBearArchiveTargets = (options) => {
 //#region src/import/things-sqlite.ts
 const THINGS_CONTAINER_PATH = join(homedir(), "Library/Group Containers/JLMPQHK86H.com.culturedcode.ThingsMac");
 const THINGS_BUNDLE_NAME = "Things Database.thingsdatabase";
-const THINGS_SQLITE_FILE = "main.sqlite";
-const LEGACY_THINGS_SQLITE_FILE = "Things.sqlite3";
 const URL_SCHEME_PATTERN = /^[a-z][a-z0-9+.-]*:/iu;
 const isUrlLike = (value) => URL_SCHEME_PATTERN.test(value);
 const resolveInputPath = (databaseUrl) => {
@@ -8699,7 +9546,7 @@ const resolveInputPath = (databaseUrl) => {
 const expandThingsDatabasePath = (inputPath) => {
 	const resolvedPath = resolve(inputPath);
 	const lastSegment = basename(resolvedPath);
-	if (lastSegment === THINGS_SQLITE_FILE || lastSegment === LEGACY_THINGS_SQLITE_FILE) return resolvedPath;
+	if (lastSegment === "main.sqlite" || lastSegment === "Things.sqlite3") return resolvedPath;
 	if (lastSegment === THINGS_BUNDLE_NAME) return join(resolvedPath, THINGS_SQLITE_FILE);
 	if (lastSegment.startsWith("ThingsData-")) return join(resolvedPath, THINGS_BUNDLE_NAME, THINGS_SQLITE_FILE);
 	return resolvedPath;
@@ -8744,130 +9591,6 @@ const getTableColumns = (database, tableName) => {
 	if (!hasTable(database, tableName)) return [];
 	return database.prepare(`PRAGMA table_info(${tableName})`).all().map((row) => typeof row.name === "string" ? row.name : null).filter((name) => name !== null);
 };
-const toStringValue = (value) => {
-	if (typeof value === "string") {
-		const trimmed = value.trim();
-		return trimmed.length > 0 ? trimmed : null;
-	}
-	if (Buffer.isBuffer(value)) {
-		const text = value.toString("utf-8").trim();
-		return text.length > 0 ? text : null;
-	}
-	return null;
-};
-const toNumberValue = (value) => typeof value === "number" && Number.isFinite(value) ? value : null;
-const toBooleanValue = (value) => {
-	const numeric = toNumberValue(value);
-	return numeric === null ? null : numeric !== 0;
-};
-const normalizeTaskRecord = (row) => {
-	const uuid = toStringValue(row.uuid);
-	if (!uuid) return null;
-	return {
-		afterCompletionReferenceDate: toNumberValue(row.rt1_afterCompletionReferenceDate ?? row.afterCompletionReferenceDate),
-		areaId: toStringValue(row.area),
-		contactId: toStringValue(row.contact ?? row.delegate),
-		creationDate: toNumberValue(row.creationDate),
-		deadline: toNumberValue(row.deadline ?? row.dueDate),
-		deadlineOffset: toNumberValue(row.t2_deadlineOffset ?? row.dueDateOffset),
-		deadlineSuppressionDate: toNumberValue(row.deadlineSuppressionDate ?? row.dueDateSuppressionDate),
-		headingId: toStringValue(row.heading ?? row.actionGroup),
-		instanceCreationCount: toNumberValue(row.rt1_instanceCreationCount ?? row.instanceCreationCount),
-		instanceCreationPaused: toBooleanValue(row.rt1_instanceCreationPaused ?? row.instanceCreationPaused) ?? false,
-		instanceCreationStartDate: toNumberValue(row.rt1_instanceCreationStartDate ?? row.instanceCreationStartDate),
-		lastReminderInteractionDate: toNumberValue(row.lastReminderInteractionDate ?? row.lastAlarmInteractionDate),
-		nextInstanceStartDate: toNumberValue(row.rt1_nextInstanceStartDate ?? row.nextInstanceStartDate),
-		notes: toStringValue(row.notes),
-		projectId: toStringValue(row.project),
-		raw: row,
-		recurrenceRuleRaw: toStringValue(row.rt1_recurrenceRule ?? row.recurrenceRule),
-		reminderTime: toNumberValue(row.reminderTime),
-		repeatTemplateSourceId: toStringValue(row.rt1_repeatingTemplate ?? row.repeatingTemplate),
-		repeaterMigrationDate: toNumberValue(row.repeaterMigrationDate),
-		repeaterRaw: toStringValue(row.repeater),
-		sortIndex: toNumberValue(row.index),
-		start: toNumberValue(row.start),
-		startBucket: toNumberValue(row.startBucket),
-		startDate: toNumberValue(row.startDate),
-		status: toNumberValue(row.status),
-		stopDate: toNumberValue(row.stopDate),
-		title: toStringValue(row.title),
-		todayIndex: toNumberValue(row.todayIndex),
-		todayIndexReferenceDate: toNumberValue(row.todayIndexReferenceDate),
-		trashed: toBooleanValue(row.trashed) ?? false,
-		type: toNumberValue(row.type),
-		userModificationDate: toNumberValue(row.userModificationDate),
-		uuid
-	};
-};
-const normalizeAreaRecord = (row) => {
-	const uuid = toStringValue(row.uuid);
-	if (!uuid) return null;
-	return {
-		raw: row,
-		sortIndex: toNumberValue(row.index),
-		title: toStringValue(row.title),
-		uuid,
-		visible: toBooleanValue(row.visible)
-	};
-};
-const normalizeTagRecord = (row) => {
-	const uuid = toStringValue(row.uuid);
-	if (!uuid) return null;
-	return {
-		parentId: toStringValue(row.parent),
-		raw: row,
-		shortcut: toStringValue(row.shortcut),
-		sortIndex: toNumberValue(row.index),
-		title: toStringValue(row.title),
-		usedDate: toNumberValue(row.usedDate),
-		uuid
-	};
-};
-const normalizeChecklistItemRecord = (row) => {
-	const uuid = toStringValue(row.uuid);
-	if (!uuid) return null;
-	return {
-		creationDate: toNumberValue(row.creationDate),
-		raw: row,
-		sortIndex: toNumberValue(row.index),
-		status: toNumberValue(row.status),
-		stopDate: toNumberValue(row.stopDate),
-		taskId: toStringValue(row.task),
-		title: toStringValue(row.title),
-		userModificationDate: toNumberValue(row.userModificationDate),
-		uuid
-	};
-};
-const normalizeTaskTagRecord = (row) => {
-	const taskId = toStringValue(row.tasks);
-	const tagId = toStringValue(row.tags);
-	return taskId && tagId ? {
-		tagId,
-		taskId
-	} : null;
-};
-const normalizeAreaTagRecord = (row) => {
-	const areaId = toStringValue(row.areas);
-	const tagId = toStringValue(row.tags);
-	return areaId && tagId ? {
-		areaId,
-		tagId
-	} : null;
-};
-const normalizeContactRecord = (row) => {
-	const uuid = toStringValue(row.uuid);
-	if (!uuid) return null;
-	return {
-		appleAddressBookId: toStringValue(row.appleAddressBookId),
-		displayName: toStringValue(row.displayName),
-		emails: toStringValue(row.emails),
-		firstName: toStringValue(row.firstName),
-		lastName: toStringValue(row.lastName),
-		raw: row,
-		uuid
-	};
-};
 const resolveThingsDatabasePath = (databaseUrl) => expandThingsDatabasePath(resolveInputPath(databaseUrl));
 const resolveDefaultThingsDatabasePath = () => {
 	const resolved = findLatestThingsDatabasePath();
@@ -8882,17 +9605,11 @@ const loadThingsDatabase = (databaseUrl) => {
 		readonly: true
 	});
 	try {
-		return {
-			areaTags: hasTable(database, "TMAreaTag") ? readRows(database, "TMAreaTag").map(normalizeAreaTagRecord).filter((record) => record !== null) : [],
-			areas: hasTable(database, "TMArea") ? readRows(database, "TMArea").map(normalizeAreaRecord).filter((record) => record !== null) : [],
-			checklistItems: hasTable(database, "TMChecklistItem") ? readRows(database, "TMChecklistItem").map(normalizeChecklistItemRecord).filter((record) => record !== null) : [],
-			contacts: hasTable(database, "TMContact") ? readRows(database, "TMContact").map(normalizeContactRecord).filter((record) => record !== null) : [],
-			databasePath,
-			tags: hasTable(database, "TMTag") ? readRows(database, "TMTag").map(normalizeTagRecord).filter((record) => record !== null) : [],
-			taskColumns: getTableColumns(database, "TMTask"),
-			taskTags: hasTable(database, "TMTaskTag") ? readRows(database, "TMTaskTag").map(normalizeTaskTagRecord).filter((record) => record !== null) : [],
-			tasks: readRows(database, "TMTask").map(normalizeTaskRecord).filter((record) => record !== null)
-		};
+		return buildThingsDatabaseSnapshot({
+			getTableColumns: (tableName) => getTableColumns(database, tableName),
+			hasTable: (tableName) => hasTable(database, tableName),
+			readRows: (tableName) => readRows(database, tableName)
+		}, databasePath);
 	} finally {
 		database.close();
 	}
@@ -8900,7 +9617,15 @@ const loadThingsDatabase = (databaseUrl) => {
 //#endregion
 //#region src/import/things-runner.ts
 const WORKSPACE_SCOPED_MODELS = SYNC_CONTENT_MODELS;
-const INSERT_ONLY_MODELS = new Set(["TaskLabel", "TeamProject"]);
+const INSERT_ONLY_MODELS = /* @__PURE__ */ new Set([
+	"TaskLabel",
+	"TeamProject",
+	"TeamMembership",
+	"ProjectMembership"
+]);
+/** Membership joins are not in SYNC_CONTENT_MODELS (identity surface), but
+* Things import writes the importer's own rows and needs them for skip-on-rerun. */
+const THINGS_MEMBERSHIP_MODELS = ["TeamMembership", "ProjectMembership"];
 const chunk = (items, size) => {
 	const result = [];
 	for (let index = 0; index < items.length; index += size) result.push(items.slice(index, index + size));
@@ -8944,9 +9669,9 @@ const loadWorkspaceScopedRowsByModel = async (context, options) => {
 };
 const loadExistingImportState = async (options) => {
 	let modelNames;
-	if (options.dryRun) modelNames = ["Label"];
-	else if (options.skipTeams) modelNames = WORKSPACE_SCOPED_MODELS.filter((m) => m !== "Team" && m !== "TeamProject");
-	else modelNames = WORKSPACE_SCOPED_MODELS;
+	if (options.dryRun) modelNames = options.skipTeams ? ["Label"] : ["Label", "Team"];
+	else if (options.skipTeams) modelNames = [...WORKSPACE_SCOPED_MODELS.filter((m) => m !== "Team" && m !== "TeamProject"), "ProjectMembership"];
+	else modelNames = [...WORKSPACE_SCOPED_MODELS, ...THINGS_MEMBERSHIP_MODELS];
 	const rowsByModel = await loadWorkspaceScopedRowsByModel(options.context, {
 		apiBaseUrl: options.commandContext.apiBaseUrl,
 		modelNames,
@@ -8955,6 +9680,7 @@ const loadExistingImportState = async (options) => {
 	});
 	return {
 		existingLabelIdsByTitle: buildExistingLabelIdsByTitle(rowsByModel),
+		existingTeamIdsByName: buildExistingTeamIdsByName(rowsByModel),
 		rowsByModel
 	};
 };
@@ -8972,9 +9698,23 @@ const buildExistingLabelIdsByTitle = (rowsByModel) => {
 	}
 	return labelsByTitle;
 };
+const buildExistingTeamIdsByName = (rowsByModel) => {
+	const rows = rowsByModel.get("Team") ?? [];
+	const teamsByName = /* @__PURE__ */ new Map();
+	for (const row of rows) {
+		if (typeof row !== "object" || row === null) continue;
+		const record = row;
+		if (record.__class !== "Team") continue;
+		const id = typeof record.id === "string" ? record.id : null;
+		const name = typeof record.name === "string" ? record.name.trim() : "";
+		if (!id || name.length === 0) continue;
+		teamsByName.set(normalizeThingsTeamLookupKey(name), id);
+	}
+	return teamsByName;
+};
 const buildExistingIds = (rowsByModel) => {
-	const entries = WORKSPACE_SCOPED_MODELS.map((modelName) => [modelName, collectRowIds(rowsByModel.get(modelName) ?? [], modelName)]);
-	return new Map(entries);
+	const modelNames = [...WORKSPACE_SCOPED_MODELS, ...THINGS_MEMBERSHIP_MODELS];
+	return new Map(modelNames.map((modelName) => [modelName, collectRowIds(rowsByModel.get(modelName) ?? [], modelName)]));
 };
 const buildTransactions = (phaseItems, options) => {
 	const transactions = [];
@@ -8992,6 +9732,7 @@ const buildTransactions = (phaseItems, options) => {
 		if (action === "INSERT") {
 			inserted += 1;
 			existingIds.add(item.modelId);
+			options.existingIds.set(item.modelName, existingIds);
 		} else updated += 1;
 		transactions.push({
 			action,
@@ -9009,6 +9750,24 @@ const buildTransactions = (phaseItems, options) => {
 		updated
 	};
 };
+const PLAN_LIMIT_PATTERN = /plan includes up to|upgrade to add more/iu;
+const LIMITED_MODELS = ["Task", "Team"];
+/**
+* Turns a batch the server partly refused for the plan limit into one clear
+* stop: how many tasks and teams landed before it, and what to do next. Any
+* other refusal is passed through unchanged.
+*/
+const explainPlanLimitStop = (error, context) => {
+	if (!(error instanceof SyncMutationRejectedError) || !error.results.some((result) => !result.success && PLAN_LIMIT_PATTERN.test(result.error ?? ""))) return error;
+	const landed = new Map(context.landed);
+	const accepted = new Set(error.results.filter((result) => result.success).map((r) => r.clientTxId));
+	for (const tx of context.batch) if (tx.action === "INSERT" && accepted.has(tx.clientTxId)) landed.set(tx.modelName, (landed.get(tx.modelName) ?? 0) + 1);
+	const parts = LIMITED_MODELS.filter((model) => (context.planned.get(model) ?? 0) > 0).map((model) => {
+		const noun = model === "Task" ? "tasks" : "teams";
+		return `${landed.get(model) ?? 0} of ${context.planned.get(model) ?? 0} ${noun}`;
+	});
+	return new CliError(`Import stopped: the workspace reached its plan limit. Imported ${parts.join(" and ")} before it stopped.`, EXIT_CODES.ERROR, "Upgrade the workspace, or run again with --open-only (and --skip-teams if the team limit was hit). A re-run skips what already landed.");
+};
 const executeImportPlan = async (options, plan, rowsByModel) => {
 	const execution = {
 		batches: 0,
@@ -9017,25 +9776,37 @@ const executeImportPlan = async (options, plan, rowsByModel) => {
 		updated: 0
 	};
 	const existingIds = buildExistingIds(rowsByModel);
-	for (const phase of plan.phases) {
-		const prepared = buildTransactions(phase.items, {
-			clientId: options.commandContext.localContext.clientId,
-			existingIds
-		});
-		execution.inserted += prepared.inserted;
-		execution.updated += prepared.updated;
-		execution.skipped += prepared.skipped;
-		const transactionBatches = chunk(prepared.transactions, options.batchSize);
+	const prepared = plan.phases.map((phase) => buildTransactions(phase.items, {
+		clientId: options.commandContext.localContext.clientId,
+		existingIds
+	}));
+	const planned = /* @__PURE__ */ new Map();
+	for (const tx of prepared.flatMap((phase) => phase.transactions)) if (tx.action === "INSERT") planned.set(tx.modelName, (planned.get(tx.modelName) ?? 0) + 1);
+	const landed = /* @__PURE__ */ new Map();
+	for (const phasePrepared of prepared) {
+		execution.inserted += phasePrepared.inserted;
+		execution.updated += phasePrepared.updated;
+		execution.skipped += phasePrepared.skipped;
+		const transactionBatches = chunk(phasePrepared.transactions, options.batchSize);
 		for (const transactionBatch of transactionBatches) {
 			if (transactionBatch.length === 0) continue;
-			await mutateModel(options.context, {
-				baseUrl: options.commandContext.apiBaseUrl,
-				request: {
-					batchId: randomUUID(),
-					transactions: transactionBatch
-				},
-				token: options.commandContext.token
-			});
+			try {
+				await mutateModel(options.context, {
+					baseUrl: options.commandContext.apiBaseUrl,
+					request: {
+						batchId: randomUUID(),
+						transactions: transactionBatch
+					},
+					token: options.commandContext.token
+				});
+			} catch (error) {
+				throw explainPlanLimitStop(error, {
+					batch: transactionBatch,
+					landed,
+					planned
+				});
+			}
+			for (const tx of transactionBatch) if (tx.action === "INSERT") landed.set(tx.modelName, (landed.get(tx.modelName) ?? 0) + 1);
 			execution.batches += 1;
 		}
 	}
@@ -9077,7 +9848,9 @@ const runThingsImport = async (options) => {
 	const plan = buildThingsImportPlan({
 		creatorId: options.creatorId,
 		existingLabelsByTitle: existingState.existingLabelIdsByTitle,
+		existingTeamsByName: existingState.existingTeamIdsByName,
 		metadataMode: options.metadataMode,
+		openOnly: options.openOnly,
 		skipTeams: options.skipTeams,
 		snapshot,
 		timeZone: resolveLocalTimeZone(),
@@ -9093,6 +9866,7 @@ const runThingsImport = async (options) => {
 			skipped: 0,
 			updated: 0
 		},
+		issues: plan.issues,
 		taskColumns: plan.taskColumns,
 		workspace: options.workspace
 	};
@@ -9103,6 +9877,7 @@ const runThingsImport = async (options) => {
 		databasePath: plan.databasePath,
 		dryRun: false,
 		execution,
+		issues: plan.issues,
 		taskColumns: plan.taskColumns,
 		workspace: options.workspace
 	};
@@ -9132,6 +9907,7 @@ const runThingsImportCommand = async (context, options, workspaceOverride) => {
 		databaseUrl: options.databaseUrl,
 		dryRun: context.dryRun,
 		metadataMode,
+		openOnly: options.openOnly,
 		skipTeams: options.skipTeams,
 		workspace
 	});
@@ -9143,9 +9919,10 @@ const runThingsImportCommand = async (context, options, workspaceOverride) => {
 	const summary = summarizeThingsImportResult(result);
 	writeSuccess(context, summary.successMessage);
 	for (const line of summary.infoLines) writeInfo(context, line);
+	for (const line of summary.warningLines) writeWarning(context, line);
 };
 const registerImportCommands = (program, workspaceOverride) => {
-	program.command("import").description("Import external data into Done Bear").command("things").description("Import a Things 3 SQLite export").option("--database-url <database-url>", "Path, file:// URL, sqlite:// URL, .thingsdatabase bundle, or ThingsData-* directory").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("--skip-teams", "Skip importing Things Areas as Teams and TeamProject links", false).option("--metadata-mode <mode>", "How to preserve Things-only metadata: note|none", "none").option("--batch-size <count>", "Maximum sync mutations per batch", (value) => parsePositiveInteger(value, "Batch size"), 100).addHelpText("after", `
+	program.command("import").description("Import external data into Done Bear").command("things").description("Import a Things 3 SQLite export").option("--database-url <database-url>", "Path, file:// URL, sqlite:// URL, .thingsdatabase bundle, or ThingsData-* directory").option("-w, --workspace <workspace>", "Workspace id, slug, or exact name").option("--skip-teams", "Skip importing Things Areas as Teams and TeamProject links", false).option("--open-only", "Import only open to-dos; leave completed, canceled and trashed ones behind", false).option("--metadata-mode <mode>", "How to preserve Things-only metadata: note|none", "none").option("--batch-size <count>", "Maximum sync mutations per batch", (value) => parsePositiveInteger(value, "Batch size"), 100).addHelpText("after", `
 Examples:
   donebear import things --dry-run --json
   donebear import things --database-url ~/Backups/Things\\ Database.thingsdatabase --json
@@ -9153,6 +9930,7 @@ Examples:
 
 Notes:
   --database-url accepts a copied Things 3 export bundle, a direct main.sqlite path, or a ThingsData-* directory.
+  --open-only leaves the Logbook behind. Completed to-dos count toward the Free plan's task limit.
   --metadata-mode note preserves Things-only fields in task/project/team descriptions using a structured appendix.
 `).action(async (options, command) => {
 		const context = contextFromCommand(command);
@@ -9225,11 +10003,15 @@ const runLabelList = async (context, options) => {
 	}
 	writeInfo(context, `${scopeLabel(scope)} (${sorted.length} label(s))`);
 	for (const labelRecord of sorted) writeInfo(context, `${labelRecord.id.slice(0, 8)}  ${labelRecord.title}`);
-	if (context.copy) copyToClipboard(sorted.map((l) => `${l.id.slice(0, 8)}  ${l.title}`).join("\n"));
+	if (context.copy) {
+		const text = sorted.map((l) => `${l.id.slice(0, 8)}  ${l.title}`).join("\n");
+		copyToClipboard(text);
+	}
 };
 const runLabelShow = async (context, labelRef, options) => {
+	const commandContext = await resolveCommandContext(context);
 	const label = await resolveLabel(context, {
-		commandContext: await resolveCommandContext(context),
+		commandContext,
 		labelRef,
 		workspaceRef: normalizeWorkspaceRef(options.workspace)
 	});
@@ -9305,6 +10087,30 @@ const runLabelCreate = async (context, title, options) => {
 	}
 	writeSuccess(context, `Created label: ${title.trim()}`);
 };
+/**
+* A TaskLabel row is keyed on task, label and workspace together, so a DELETE
+* needs `workspaceId` as much as an INSERT does: without it the server cannot
+* address the row and rejects the mutation.
+*/
+const buildTaskLabelTransaction = (options) => {
+	const { action, clientId, labelId, taskId, workspaceId } = options;
+	const key = {
+		labelId,
+		taskId,
+		workspaceId
+	};
+	return {
+		action,
+		clientId,
+		clientTxId: randomUUID(),
+		modelId: `${taskId}:${labelId}`,
+		modelName: "TaskLabel",
+		payload: action === "INSERT" ? {
+			...key,
+			createdAt: Date.now()
+		} : key
+	};
+};
 const runLabelAdd = async (context, taskRef, labelRef, options) => {
 	const commandContext = await resolveCommandContext(context);
 	const workspaceRef = normalizeWorkspaceRef(options.workspace);
@@ -9322,19 +10128,13 @@ const runLabelAdd = async (context, taskRef, labelRef, options) => {
 		baseUrl: commandContext.apiBaseUrl,
 		request: {
 			batchId: randomUUID(),
-			transactions: [{
+			transactions: [buildTaskLabelTransaction({
 				action: "INSERT",
 				clientId: commandContext.localContext.clientId,
-				clientTxId: randomUUID(),
-				modelId: `${task.id}:${label.id}`,
-				modelName: "TaskLabel",
-				payload: {
-					createdAt: Date.now(),
-					labelId: label.id,
-					taskId: task.id,
-					workspaceId: task.workspaceId
-				}
-			}]
+				labelId: label.id,
+				taskId: task.id,
+				workspaceId: task.workspaceId
+			})]
 		},
 		token: commandContext.token
 	});
@@ -9366,17 +10166,13 @@ const runLabelRemove = async (context, taskRef, labelRef, options) => {
 		baseUrl: commandContext.apiBaseUrl,
 		request: {
 			batchId: randomUUID(),
-			transactions: [{
+			transactions: [buildTaskLabelTransaction({
 				action: "DELETE",
 				clientId: commandContext.localContext.clientId,
-				clientTxId: randomUUID(),
-				modelId: `${task.id}:${label.id}`,
-				modelName: "TaskLabel",
-				payload: {
-					labelId: label.id,
-					taskId: task.id
-				}
-			}]
+				labelId: label.id,
+				taskId: task.id,
+				workspaceId: task.workspaceId
+			})]
 		},
 		token: commandContext.token
 	});
@@ -9498,7 +10294,7 @@ const runProjectList = async (context, options) => {
 		token: commandContext.token,
 		workspaceRef: normalizeWorkspaceRef(options.workspace)
 	});
-	const filtered = filterProjects(sortProjectsByUpdatedDesc(scope.mode === "all" ? await loadProjectsByWorkspaceIds(context, {
+	const allProjects = scope.mode === "all" ? await loadProjectsByWorkspaceIds(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceIds: scope.workspaces.map((w) => w.id)
@@ -9506,7 +10302,8 @@ const runProjectList = async (context, options) => {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceId: scope.workspace.id
-	})), requestedStatus);
+	});
+	const filtered = filterProjects(sortProjectsByUpdatedDesc(allProjects), requestedStatus);
 	if (context.json) {
 		writeOutput(context, {
 			...scopeJsonFields(scope),
@@ -9545,11 +10342,15 @@ const runProjectList = async (context, options) => {
 		const suffix = target ? `  due ${target}` : "";
 		writeInfo(context, `${project.id.slice(0, 8)}  [${project.key}]  ${project.name}  (${status})${suffix}`);
 	}
-	if (context.copy) copyToClipboard(filtered.map((p) => `${p.id.slice(0, 8)}  [${p.key}]  ${p.name}  (${getProjectStatus(p)})`).join("\n"));
+	if (context.copy) {
+		const text = filtered.map((p) => `${p.id.slice(0, 8)}  [${p.key}]  ${p.name}  (${getProjectStatus(p)})`).join("\n");
+		copyToClipboard(text);
+	}
 };
 const runProjectShow = async (context, projectRef, options) => {
+	const commandContext = await resolveCommandContext(context);
 	const { project, workspace } = await resolveProjectReference(context, {
-		commandContext: await resolveCommandContext(context),
+		commandContext,
 		projectRef,
 		workspaceRef: normalizeWorkspaceRef(options.workspace)
 	});
@@ -9581,7 +10382,7 @@ const resolveProjectName = async (context, rawName) => {
 		const trimmed = rawName.trim();
 		if (trimmed.length > 0) return trimmed;
 	}
-	const { promptForValue } = await import("./prompt-B7mDo4K7.mjs");
+	const { promptForValue } = await import("./prompt-ujp1V6r9.mjs");
 	const prompted = await promptForValue(context, "Project name");
 	if (prompted) return prompted;
 	throw new CliError("Project name is required.", EXIT_CODES.VALIDATION, "Provide a name: donebear project add \"My project\"");
@@ -9826,10 +10627,7 @@ const runProjectMembershipChange = async (context, projectRef, options) => {
 		case "already_member":
 			writeInfo(context, `Already in project: ${project.name}`);
 			break;
-		case "not_a_member":
-			writeInfo(context, `Not in project: ${project.name}`);
-			break;
-		default: break;
+		case "not_a_member": writeInfo(context, `Not in project: ${project.name}`);
 	}
 };
 const registerProjectCommands = (program, workspaceOverride) => {
@@ -9964,7 +10762,7 @@ const runSearch = async (context, query, options, workspaceOverride) => {
 		token: commandContext.token,
 		workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
 	});
-	const filtered = filterTasks(scope.mode === "all" ? await loadTasksByWorkspaceIds(context, {
+	const tasks = scope.mode === "all" ? await loadTasksByWorkspaceIds(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceIds: scope.workspaces.map((w) => w.id)
@@ -9972,7 +10770,8 @@ const runSearch = async (context, query, options, workspaceOverride) => {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceId: scope.workspace.id
-	}), {
+	});
+	const filtered = filterTasks(tasks, {
 		search: trimmedQuery,
 		state: requestedState,
 		view: null
@@ -10017,7 +10816,7 @@ Examples:
 //#endregion
 //#region src/commands/spec.ts
 const OVERVIEW = {
-	authentication: "Set DONEBEAR_TOKEN env var, or run: donebear auth login",
+	authentication: "Set DONEBEAR_TOKEN env var, run: donebear auth login, or create an account with donebear auth signup --email <human-email>",
 	commands: {
 		"api-key": {
 			description: "Manage personal API keys",
@@ -10033,8 +10832,9 @@ const OVERVIEW = {
 			quick_example: "donebear auth status --json",
 			subcommands: [
 				"login",
-				"status",
-				"logout"
+				"logout",
+				"signup",
+				"status"
 			]
 		},
 		comment: {
@@ -10264,6 +11064,44 @@ const COMMAND_SPECS = {
 		},
 		usage: "donebear auth login [options]"
 	},
+	"auth signup": {
+		command: "auth signup",
+		examples: ["donebear auth signup --email person@example.com", "donebear auth signup --email person@example.com --json --no-interactive"],
+		json_output: {
+			apiKey: "{ id, key, prefix, scopes }",
+			email: "string",
+			instructions: "{ agent, human }",
+			mcp: "{ url, headers, cursor, claude }",
+			ok: "boolean",
+			sessionStored: "boolean",
+			status: "complete",
+			user: "{ id, email }",
+			verifyUrl: "string",
+			workspace: "{ id, name, urlKey }"
+		},
+		non_interactive: "Requires --email. Do not invent an address. --json and --no-interactive print the verify link on stderr, poll until the human verifies, then emit one complete JSON object on stdout. If the email is already registered, run donebear auth login instead.",
+		notes: "Creates a real human workspace after email verification, then mints a db_ API key with read+write (not admin). WorkOS agent_auth and RFC 8628 device code are not offered.",
+		options: {
+			"--email": {
+				description: "Human email to verify. Required. Do not invent an address.",
+				type: "string"
+			},
+			"--name": {
+				description: "Optional display name",
+				type: "string"
+			},
+			"--no-interactive": {
+				description: "Never prompt for the email code; poll the verify link instead",
+				type: "boolean"
+			},
+			"--timeout": {
+				default: 600,
+				description: "Seconds to wait for email verification",
+				type: "number"
+			}
+		},
+		usage: "donebear auth signup [options]"
+	},
 	"auth status": {
 		command: "auth status",
 		examples: ["donebear auth status --json"],
@@ -10536,6 +11374,10 @@ const COMMAND_SPECS = {
 				enum: ["note", "none"],
 				type: "string"
 			},
+			"--open-only": {
+				description: "Import only open to-dos; completed, canceled and trashed ones are left behind",
+				type: "boolean"
+			},
 			"--skip-teams": {
 				description: "Skip importing Things Areas as Teams and TeamProject links",
 				type: "boolean"
@@ -11120,6 +11962,44 @@ const COMMAND_SPECS = {
 		options: {},
 		usage: "donebear whoami"
 	},
+	"workspace invite": {
+		arguments: { workspace: {
+			description: "Workspace id, urlKey, or name. Defaults to the current workspace.",
+			required: false,
+			type: "string"
+		} },
+		command: "workspace invite",
+		examples: [
+			"donebear workspace invite --email user@example.com --role member",
+			"donebear workspace invite --share --copy",
+			"donebear workspace invite --share --project <project-id>"
+		],
+		json_output: {
+			invitation: "WorkspaceInvitationRecord",
+			workspace: "WorkspaceRecord"
+		},
+		notes: "Email invites are single-use. --share mints a reusable /join?code= link. --project requires --share.",
+		options: {
+			"--email": {
+				description: "Email address to invite (single-use)",
+				type: "string"
+			},
+			"--project": {
+				description: "Scope a share link so joiners also become members of this project",
+				type: "string"
+			},
+			"--role": {
+				default: "member",
+				description: "Role for an email invite: member|admin",
+				type: "string"
+			},
+			"--share": {
+				description: "Create a reusable join link instead of an email invite",
+				type: "boolean"
+			}
+		},
+		usage: "donebear workspace invite [workspace] [options]"
+	},
 	"workspace list": {
 		command: "workspace list",
 		examples: ["donebear workspace list --json"],
@@ -11162,10 +12042,11 @@ const TOP_LEVEL_SPECS = {
 	auth: {
 		command: "auth",
 		description: "Authentication",
-		non_interactive: "Set DONEBEAR_TOKEN=<token> to skip interactive login.",
+		non_interactive: "Set DONEBEAR_TOKEN=<token> to skip interactive login. New accounts: donebear auth signup --email <human-email> --json --no-interactive.",
 		subcommands: {
 			login: "OAuth login (Google or GitHub)",
 			logout: "Sign out and remove stored session",
+			signup: "Create an account from a human email (agent signup)",
 			status: "Show auth status"
 		},
 		tip: "donebear spec auth login: get full spec for auth login"
@@ -11252,7 +12133,7 @@ const TOP_LEVEL_SPECS = {
 			create: "Create a new workspace",
 			current: "Show the active workspace",
 			invitations: "List pending invitations",
-			invite: "Invite a user by email",
+			invite: "Invite by email, or mint a reusable --share join link",
 			join: "Join a workspace by invite",
 			list: "List all workspaces",
 			members: "List workspace members",
@@ -11300,6 +12181,7 @@ Examples:
   donebear spec project list     Detailed spec for project list
   donebear spec import things    Detailed spec for the Things importer
   donebear spec search           Detailed spec for search
+  donebear spec auth signup      Agent signup from a human email
   donebear spec auth login       Auth login options and non-interactive notes
 `).action(async (command, subcommand, _options, cmd) => {
 		const context = contextFromCommand(cmd);
@@ -11424,7 +12306,7 @@ const runToday = async (context, options, workspaceOverride) => {
 		token: commandContext.token,
 		workspaceRef: workspaceOverride ?? normalizeWorkspaceRef(options.workspace)
 	});
-	const todayTasks = filterToday(scope.mode === "all" ? await loadTasksByWorkspaceIds(context, {
+	const tasks = scope.mode === "all" ? await loadTasksByWorkspaceIds(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceIds: scope.workspaces.map((w) => w.id)
@@ -11432,7 +12314,8 @@ const runToday = async (context, options, workspaceOverride) => {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token,
 		workspaceId: scope.workspace.id
-	}));
+	});
+	const todayTasks = filterToday(tasks);
 	const limited = todayTasks.slice(0, options.limit);
 	if (context.json) {
 		writeOutput(context, {
@@ -11557,7 +12440,10 @@ const runWorkspaceList = async (context) => {
 		return;
 	}
 	writeInfo(context, "Workspaces:");
-	for (const workspace of workspaces) writeInfo(context, `${workspace.id === commandContext.localContext.workspaceId ? "*" : " "} ${workspace.id}  ${workspace.name}${workspace.urlKey ? ` (${workspace.urlKey})` : ""}  role=${workspace.role}`);
+	for (const workspace of workspaces) {
+		const marker = workspace.id === commandContext.localContext.workspaceId ? "*" : " ";
+		writeInfo(context, `${marker} ${workspace.id}  ${workspace.name}${workspace.urlKey ? ` (${workspace.urlKey})` : ""}  role=${workspace.role}`);
+	}
 };
 const runWorkspaceCurrent = async (context) => {
 	const commandContext = await resolveCommandContext(context);
@@ -11584,10 +12470,11 @@ const runWorkspaceCurrent = async (context) => {
 };
 const runWorkspaceUse = async (context, reference) => {
 	const commandContext = await resolveCommandContext(context);
-	const selected = findWorkspace(reference, await listWorkspaces(context, {
+	const workspaces = await listWorkspaces(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		token: commandContext.token
-	}));
+	});
+	const selected = findWorkspace(reference, workspaces);
 	if (!selected) throw new Error(`Workspace "${reference}" not found. Run \`donebear workspace list\`.`);
 	await setCurrentWorkspace(selected.id);
 	if (context.json) {
@@ -11758,10 +12645,14 @@ const runWorkspaceInvite = async (context, workspaceRefArg, workspaceOverride, o
 		token: commandContext.token,
 		workspaceRef: workspaceOverride ?? workspaceRefArg ?? null
 	});
+	if (options.share && options.email) throw new CliError("Use --share or --email, not both.", EXIT_CODES.VALIDATION);
+	if (options.project && !options.share) throw new CliError("--project requires --share.", EXIT_CODES.VALIDATION);
 	const invitation = await createWorkspaceInvitation(context, {
 		baseUrl: commandContext.apiBaseUrl,
 		email: options.email,
-		role: options.role ?? "member",
+		kind: options.share ? "share" : void 0,
+		projectId: options.project,
+		role: options.share ? "member" : options.role ?? "member",
 		token: commandContext.token,
 		workspaceId: workspace.id
 	});
@@ -11777,7 +12668,7 @@ const runWorkspaceInvite = async (context, workspaceRefArg, workspaceOverride, o
 	writeInfo(context, `role: ${invitation.role}`);
 	writeInfo(context, `expires: ${invitation.expiresAt}`);
 	if (invitation.email) writeInfo(context, `email: ${invitation.email}`);
-	const link = `${commandContext.apiBaseUrl}/invite/${invitation.code}`;
+	const link = `${DEFAULT_APP_URL}/join?code=${encodeURIComponent(invitation.code)}`;
 	writeInfo(context, `link: ${link}`);
 	if (context.copy) {
 		if (copyToClipboard(link)) writeInfo(context, "Link copied to clipboard.");
@@ -11793,6 +12684,8 @@ Examples:
   donebear workspace members
   donebear workspace invitations
   donebear workspace invite --email user@example.com --role member
+  donebear workspace invite --share --copy
+  donebear workspace invite --share --project <project-id>
 `).action(async (_options, command) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
@@ -11847,7 +12740,7 @@ Examples:
 			await runWorkspaceInvitations(context, workspaceRef, workspaceOverride);
 		});
 	});
-	workspace.command("invite").description("Create an invitation for the current or specified workspace").argument("[workspace]", "Workspace id, slug, or exact name").option("--email <email>", "Email address to invite").option("--role <role>", "Role for the invitee: member|admin", "member").action(async (workspaceRef, options, command) => {
+	workspace.command("invite").description("Create an invitation for the current or specified workspace").argument("[workspace]", "Workspace id, slug, or exact name").option("--email <email>", "Email address to invite").option("--share", "Create a reusable join link").option("--project <id>", "Scope a share link: joiners join the whole workspace as a member, get this project, and use a seat").option("--role <role>", "Role for the invitee: member|admin", "member").action(async (workspaceRef, options, command) => {
 		const context = contextFromCommand(command);
 		await runWithErrorHandling(context, async () => {
 			await runWorkspaceInvite(context, workspaceRef, workspaceOverride, options);
@@ -11875,8 +12768,9 @@ With auth:
   donebear import things --dry-run --json
 
 Auth:
-  donebear auth login            OAuth browser login
-  DONEBEAR_TOKEN=<token>         Non-interactive / CI: set this env var
+  donebear auth signup --email you@…   Create an account (human verifies email)
+  donebear auth login                  OAuth browser login
+  DONEBEAR_TOKEN=<token>               Non-interactive / CI: set this env var
 
 Workspace targeting:
   donebear workspace=myorg task list
@@ -11935,7 +12829,8 @@ const main = async () => {
 	const hasUserArgs = processedArgv.length <= 2;
 	const isTTY = process.stdin.isTTY === true;
 	if (hasUserArgs && isTTY) {
-		await runInteractiveMode(contextFromArgv(processedArgv), program);
+		const ttyContext = contextFromArgv(processedArgv);
+		await runInteractiveMode(ttyContext, program);
 		return;
 	}
 	await program.parseAsync(processedArgv);