@taskforcehq/taskforce 0.3.168

package/scripts/test-global.js

@@ -0,0 +1,143 @@
+import { execSync, spawnSync } from 'child_process';
+import { existsSync, readFileSync, readdirSync, unlinkSync } from 'fs';
+import { join } from 'path';
+
+const DEFAULT_COMMAND_TIMEOUT_MS = Number.parseInt(
+    String(process.env.TASKFORCE_TEST_GLOBAL_TIMEOUT_MS || ''),
+    10
+) || 20 * 60 * 1000;
+
+const BUILD_COMMAND_TIMEOUT_MS = Number.parseInt(
+    String(process.env.TASKFORCE_TEST_GLOBAL_BUILD_TIMEOUT_MS || ''),
+    10
+) || 30 * 60 * 1000;
+
+const run = (cmd, options = {}) => {
+    const timeoutMs = Number.isFinite(Number(options.timeoutMs))
+        ? Number(options.timeoutMs)
+        : DEFAULT_COMMAND_TIMEOUT_MS;
+    const retries = Math.max(0, Number(options.retries) || 0);
+
+    for (let attempt = 0; attempt <= retries; attempt += 1) {
+        const tryLabel = retries > 0 ? ` (attempt ${attempt + 1}/${retries + 1})` : '';
+        console.log(`\n🏃 Running: ${cmd}${tryLabel}`);
+        try {
+            execSync(cmd, {
+                stdio: 'inherit',
+                timeout: timeoutMs,
+                killSignal: 'SIGTERM'
+            });
+            return;
+        } catch (error) {
+            const timedOut = error?.signal === 'SIGTERM' && /ETIMEDOUT/i.test(String(error?.message || ''));
+            if (timedOut) {
+                console.error(`⏱️  Command timed out after ${Math.round(timeoutMs / 1000)}s: ${cmd}`);
+            } else {
+                console.error(`❌ Command failed: ${cmd}`);
+            }
+
+            if (attempt < retries) {
+                console.log('🔁 Retrying...');
+                continue;
+            }
+
+            process.exit(1);
+        }
+    }
+};
+
+console.log('🏗️  Building project...');
+run('npm run build', { timeoutMs: BUILD_COMMAND_TIMEOUT_MS, retries: 1 });
+
+console.log('📦  Creating tarball...');
+const packageJson = JSON.parse(readFileSync(join(process.cwd(), 'package.json'), 'utf8'));
+const tarballPrefix = `${String(packageJson.name).replace(/^@/, '').replace(/\//g, '-')}-`;
+// Ensure no old tarballs exist
+const files = readdirSync('.');
+const tarballs = files.filter(f => f.startsWith(tarballPrefix) && f.endsWith('.tgz'));
+tarballs.forEach(f => {
+    console.log(`  Removing old tarball: ${f}`);
+    unlinkSync(f);
+});
+
+run('npm pack');
+
+// Find the generated tarball
+const newFiles = readdirSync('.');
+const tarball = newFiles.find(f => f.startsWith(tarballPrefix) && f.endsWith('.tgz'));
+
+if (!tarball) {
+    console.error('❌  Error: Tarball not generated.');
+    process.exit(1);
+}
+
+console.log(`🌍  Installing globally (${tarball})...`);
+
+const installGlobal = () => spawnSync('npm', ['install', '-g', `./${tarball}`], { encoding: 'utf8' });
+const printOutput = (result) => {
+    if (result.stdout) process.stdout.write(result.stdout);
+    if (result.stderr) process.stderr.write(result.stderr);
+};
+
+let installResult = installGlobal();
+printOutput(installResult);
+
+if (installResult.status !== 0) {
+    const combinedOutput = `${installResult.stdout || ''}\n${installResult.stderr || ''}`;
+    const isFileExists = /EEXIST/i.test(combinedOutput);
+    const isPermissionError = /(EACCES|EPERM|permission denied)/i.test(combinedOutput);
+
+    if (isFileExists) {
+        console.log('⚠️  Existing global binary detected. Cleaning up and retrying...');
+        const packageName = String(packageJson.name);
+        const uninstallResult = spawnSync('npm', ['uninstall', '-g', packageName], { encoding: 'utf8' });
+        printOutput(uninstallResult);
+
+        const pathMatch = combinedOutput.match(/npm error path (.+)/i);
+        if (pathMatch?.[1]) {
+            const stalePath = pathMatch[1].trim();
+            try {
+                if (existsSync(stalePath)) {
+                    unlinkSync(stalePath);
+                    console.log(`🧹  Removed stale binary: ${stalePath}`);
+                }
+            } catch (error) {
+                console.log(`⚠️  Could not remove stale binary at ${stalePath}.`);
+            }
+        }
+
+        try {
+            const npmPrefix = execSync('npm config get prefix', { encoding: 'utf8' }).trim();
+            const taskforceBin = join(npmPrefix, 'bin', 'taskforce');
+            if (existsSync(taskforceBin)) {
+                unlinkSync(taskforceBin);
+                console.log(`🧹  Removed stale binary: ${taskforceBin}`);
+            }
+        } catch (error) {
+            console.log('⚠️  Could not inspect npm global bin path. Continuing with reinstall...');
+        }
+
+        installResult = installGlobal();
+        printOutput(installResult);
+    } else if (isPermissionError) {
+        console.log('⚠️  Permission denied. Retrying with sudo...');
+        try {
+            execSync(`sudo npm install -g ./${tarball}`, { stdio: 'inherit' });
+            installResult = { status: 0 };
+        } catch (sudoError) {
+            console.error('❌  Failed to install globally with sudo.');
+            process.exit(1);
+        }
+    }
+}
+
+if (installResult.status !== 0) {
+    console.error('❌  Failed to install globally.');
+    process.exit(1);
+}
+
+console.log('🧹  Cleaning up artifacts...');
+unlinkSync(tarball);
+
+console.log('✅  Successfully installed!');
+console.log('🚀  You can now run "taskforce open" from any directory.');

package/scripts/update-homebrew-formula.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ $# -ne 5 ]]; then
+  cat <<'EOF'
+Usage:
+  scripts/update-homebrew-formula.sh <formula_path> <org> <repo> <version> <sha256>
+
+Example:
+  scripts/update-homebrew-formula.sh packaging/homebrew/Formula/taskforce.rb stratnexus taskforce 0.3.13 abc123...
+EOF
+  exit 1
+fi
+
+FORMULA_PATH="$1"
+ORG="$2"
+REPO="$3"
+VERSION="$4"
+SHA256="$5"
+
+if [[ ! -f "$FORMULA_PATH" ]]; then
+  echo "Formula file not found: $FORMULA_PATH" >&2
+  exit 1
+fi
+
+URL="https://github.com/${ORG}/${REPO}/archive/refs/tags/v${VERSION}.tar.gz"
+
+sed -i.bak \
+  -e "s#homepage \".*\"#homepage \"https://github.com/${ORG}/${REPO}\"#g" \
+  -e "s#url \".*\"#url \"${URL}\"#g" \
+  -e "s#sha256 \".*\"#sha256 \"${SHA256}\"#g" \
+  "$FORMULA_PATH"
+
+rm -f "${FORMULA_PATH}.bak"
+echo "Updated ${FORMULA_PATH}"
+echo "  homepage: https://github.com/${ORG}/${REPO}"
+echo "  url:      ${URL}"
+echo "  sha256:   ${SHA256}"

package/src/resources/templates/WORKFLOW_V2_POLICY.md

@@ -0,0 +1,55 @@
+# Taskforce Workflow v2 Policy
+
+This note defines the canonical policy for v2 workflow templates and environment exports.
+
+## 1) Dispatch Precedence
+- Explicit slash command invocation wins over task `approach`.
+- `/do` may route by `approach` when no conflicting explicit command is provided.
+- `approachMap` should exist as a global default, with optional per-workflow override.
+
+## 2) Required Tools Policy
+- Use hybrid enforcement:
+  - Critical tools: `strict-fail`
+  - Non-critical tools: `warn-and-fallback`
+- Define tools in `compat` as:
+  - `requiredToolsCritical`
+  - `requiredToolsOptional`
+- Fallback behavior must be explicit in workflow content:
+  - Mutating workflows (`do`, `plan`) should stop and ask user when MCP is unavailable.
+  - Non-mutating workflows (`evaluate`, optionally `review`) may continue read-only with clear warning.
+
+## 3) Status Transition Policy
+- AI-managed statuses (default allowed): `task`, `on-hold`, `in-progress`, `review`.
+- AI must not set `done` or `cancelled` unless the user explicitly instructs it.
+- If AI moves status to `task` or `on-hold`, it must add comment justification via MCP.
+- Structured workflow summary comments are validated at MCP `add_comment` time when known summary headings are used.
+
+## 4) Compatibility Policy
+- `compat.minTaskforceVersion` uses semver-aware comparisons.
+- Workflow execution should fail fast if critical compatibility checks are not met.
+
+## 5) MCP Availability Policy
+- `contextPolicy.mcpUnavailableAction` is required.
+- Recommended defaults:
+  - `do`, `plan`: `stop-and-request-user-action`
+  - `evaluate`, `review`: may allow warning-based read-only fallback (project policy dependent)
+
+## 6) Artifact Path Policy
+- Artifact paths must be project-root-relative.
+- Do not write artifacts outside the project root by default.
+- Optional artifacts should use `savePolicy: ask-before-save`.
+- Structured docs saved under `.taskforce/task-data/{taskId}/*` should include required section headings; attachment is validated at MCP attach time.
+
+## 7) Artifact Ownership
+- Keep artifacts owned by the workflow that produces them:
+  - `plan` -> `implementationPlan`
+  - `execute` -> `walkthrough`
+  - `evaluate` -> `evaluationReport` (optional)
+  - `review` -> `reviewReport` (optional)
+
+## 8) Template Maintenance Rule
+- Keep workflow `toolPolicy`, `compat`, `dispatch`, and `contextPolicy` concise and machine-readable.
+- Put explanatory operational details in `content.default`.
+- Edit source definitions in `src/resources/templates/workflow-sources/workflowDocs.mjs`.
+- Use `npm run gen:workflows` after edits to regenerate flattened workflow YAML files.
+- Use `npm run check:workflows` to detect drift between source and generated files.

package/src/resources/templates/environments/aider.yaml

@@ -0,0 +1,14 @@
+
+id: aider
+name: Aider
+icon: Zap
+workflows:
+  directory: .
+  format: markdown
+  filenamePattern: ".aider/commands/{name}.md"
+  overrides:
+    do:
+      filename: CONVENTIONS.md
+      strategy: inject
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/environments/antigravity.yaml

@@ -0,0 +1,10 @@
+
+id: antigravity
+name: Antigravity
+icon: Bot
+workflows:
+  directory: .agent/workflows
+  format: markdown
+  filenamePattern: "{name}.md"
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/environments/claude.yaml

@@ -0,0 +1,10 @@
+
+id: claude
+name: Claude Desktop
+icon: Terminal
+workflows:
+  directory: .claude/commands
+  format: markdown
+  filenamePattern: "{name}.md"
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/environments/cline.yaml

@@ -0,0 +1,10 @@
+
+id: cline
+name: Cline
+icon: Box
+workflows:
+  directory: .clinerules
+  format: markdown
+  filenamePattern: "{name}.md"
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/environments/codex.yaml

@@ -0,0 +1,13 @@
+id: codex
+name: Codex
+icon: Terminal
+workflows:
+  directory: .
+  format: markdown
+  filenamePattern: ".codex/workflows/{name}.md"
+  overrides:
+    do:
+      filename: AGENTS.md
+      strategy: inject
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/environments/copilot.yaml

@@ -0,0 +1,10 @@
+
+id: copilot
+name: GitHub Copilot
+icon: Github
+workflows:
+  directory: .github/prompts
+  format: markdown
+  filenamePattern: "{name}.prompt.md"
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/environments/cursor.yaml

@@ -0,0 +1,9 @@
+
+id: cursor
+name: Cursor AI
+workflows:
+  directory: .cursor/rules
+  format: mdc
+  filenamePattern: "{name}.mdc"
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/environments/gemini.yaml

@@ -0,0 +1,9 @@
+
+id: gemini
+name: Gemini CLI
+workflows:
+  directory: .gemini/commands
+  format: toml
+  filenamePattern: "{name}.toml"
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/environments/windsurf.yaml

@@ -0,0 +1,10 @@
+
+id: windsurf
+name: Windsurf
+icon: Wind
+workflows:
+  directory: .windsurf/rules
+  format: mdc
+  filenamePattern: "{name}.mdc"
+mcp:
+  prefix: "mcp_taskforce-{projectName}_"

package/src/resources/templates/workflow-sources/README.md

@@ -0,0 +1,9 @@
+# Workflow Template Sources
+
+This directory is the source of truth for workflow template definitions.
+
+- Edit `workflowDocs.mjs` to change workflow structure/content.
+- Run `npm run gen:workflows` to regenerate flattened YAML files in `../workflows`.
+- Use `npm run check:workflows` to verify generated files are up to date.
+
+Do not manually edit files in `../workflows` unless you immediately regenerate from source.