@taskforcehq/taskforce 0.3.300 → 0.3.302

package/README.md

@@ -177,6 +177,25 @@ npx @taskforcehq/taskforce open [port]
 - Before changing sync logic, confirm the watched build actually rebuilt, restart the local CLI/runtime if behavior still looks stale, and then retest sync.
 - If a sync bug seems "fixed in code but still reproducible," treat stale build output or a long-lived local runtime process as the first thing to rule out.
 
+### Local Validation Runbooks
+
+These checks used to exist as manual-only GitHub Actions workflows, but they now live as local runbooks to avoid burning Actions credits.
+
+- Full surface validation:
+  - `npm ci`
+  - `npm run check:deploy-preflight`
+  - `npm run build:app`
+  - `npm run build:site`
+  - `npm run build:admin`
+  - `npm run test -- src/server/auth.test.ts src/server/routes.test.ts src/server/cors.test.ts`
+- Auth and runtime guard:
+  - `npm ci`
+  - `npm run test:auth-runtime-guard`
+- Sync regression guard:
+  - `npm ci`
+  - `npx vitest src/sync/workspaceSyncModel.test.ts src/sync/syncService.test.ts src/sync/cloudSyncApi.test.ts src/hooks/useWorkspaceSyncController.test.ts src/hooks/useSyncOrchestrator.retry-closure.test.tsx src/server/routes.sync.integration.test.ts src/server/routes.test.ts`
+  - optional realtime attachment check: `npm run test:e2e:realtime:attachments`
+
 ### 🧭 Initiatives
 Initiatives provide template-based planning for complex work (for example `launch`, `migration`, `incident`) with reusable Definition of Done and Rollback checklist blocks.
 

package/dist/Taskforce.module.css

@@ -595,7 +595,7 @@
 }
 
 .taskIdBadge {
-  display: flex;
+  display: inline-flex;
   align-items: center;
   gap: 5px;
   background: color-mix(in srgb, var(--color-info, #3b82f6) 12%, transparent);
@@ -611,9 +611,20 @@
   position: relative;
   z-index: 5;
   white-space: nowrap;
+  min-width: 0;
+  max-width: min(100%, 12rem);
   box-shadow: 0 0 0 1px color-mix(in srgb, var(--color-info, #3b82f6) 8%, transparent);
 }
 
+.taskIdBadgeLabel {
+  display: block;
+  min-width: 0;
+  max-width: 100%;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
 .taskIdBadge:hover {
   background: color-mix(in srgb, var(--color-info, #3b82f6) 18%, transparent);
   color: var(--color-info, #3b82f6);
@@ -2861,6 +2872,19 @@
   line-height: 1;
 }
 
+.taskHierarchyMeta {
+  display: inline-flex;
+  align-items: center;
+  padding: 2px 8px;
+  border-radius: 999px;
+  border: 1px solid rgba(245, 158, 11, 0.24);
+  background: rgba(245, 158, 11, 0.14);
+  color: var(--text-secondary);
+  font-size: 11px;
+  font-weight: 600;
+  line-height: 1.2;
+}
+
 .taskHierarchyAddBtn {
   justify-content: center;
   padding-inline: 6px;
@@ -3838,7 +3862,7 @@
 .codeBlock {
   margin: 0;
   background: #1e1e2e !important;
-  padding: 20px !important;
+  padding: 14px 16px !important;
   border: none !important;
   overflow-x: auto;
   border-radius: 0 !important;

package/dist/TaskforceCore.filter-persistence.test.js

@@ -91,7 +91,7 @@ function installFetchStub(persistedState, options) {
     vi.stubGlobal('fetch', vi.fn((url, init) => {
         const method = String(init?.method || 'GET').toUpperCase();
         if (url.includes('/api/taskforce/auth/runtime-config')) {
-            return Promise.resolve({ ok: true, json: () => Promise.resolve({ config: { runtimeMode: 'local', workspaceMode: 'single-local', authSource: 'local' } }) });
+            return Promise.resolve({ ok: true, json: () => Promise.resolve({ config: { runtimeMode: 'local', workspaceMode: 'single-local', authSource: 'cloud' } }) });
         }
         if (url.includes('/api/taskforce/auth/session')) {
             return Promise.resolve({ ok: true, json: () => Promise.resolve({ authenticated: false, authRequiredForApi: false, userId: 'anonymous', email: '', workspaceId: 'default' }) });

package/dist/TaskforceCore.js

@@ -20,14 +20,6 @@ function isDebugModeEnabled() {
         return runtimeOverride;
     return typeof __DEBUG_MODE__ !== 'undefined' && __DEBUG_MODE__;
 }
-function buildDebugRegistrationCredentials() {
-    const suffix = Date.now().toString(36);
-    return {
-        email: `debug+${suffix}@example.com`,
-        password: 'DebugPass123!',
-        displayName: `Debug ${suffix.slice(-4).toUpperCase()}`
-    };
-}
 function defaultSetupTaxonomySections(pack) {
     return {
         categories: Boolean(pack?.categories?.length),
@@ -126,6 +118,7 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
         && !isPricingRoute
         && !isPlansRoute
         && !isPlansScreen;
+    const directRegistrationEnabled = cloudAuthConfigured;
     const setupStep = useMemo(() => String(new URLSearchParams(location.search).get('step') || '').trim().toLowerCase(), [location.search]);
     const setupIntent = useMemo(() => String(new URLSearchParams(location.search).get('intent') || '').trim().toLowerCase(), [location.search]);
     const isCreateWorkspaceIntent = isSetupRoute && setupStep === 'workspace' && setupIntent === 'create-workspace';
@@ -360,23 +353,27 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
     }, [location.search]);
     const loginRouteMode = useMemo(() => {
         const modeRaw = String(new URLSearchParams(location.search).get('mode') || '').trim().toLowerCase();
-        if (modeRaw === 'register' || modeRaw === 'verify' || modeRaw === 'forgot' || modeRaw === 'reset' || modeRaw === 'invite') {
+        if (modeRaw === 'register') {
+            return directRegistrationEnabled ? 'register' : 'login';
+        }
+        if (modeRaw === 'verify' || modeRaw === 'forgot' || modeRaw === 'reset' || modeRaw === 'invite') {
             return modeRaw;
         }
         return 'login';
-    }, [location.search]);
+    }, [directRegistrationEnabled, location.search]);
     const loginRouteToken = useMemo(() => String(new URLSearchParams(location.search).get('token') || '').trim(), [location.search]);
     const setLoginMode = useCallback((mode) => {
         const params = new URLSearchParams(location.search);
-        if (mode === 'login') {
+        const nextMode = mode === 'register' && !directRegistrationEnabled ? 'login' : mode;
+        if (nextMode === 'login') {
             params.delete('mode');
         }
         else {
-            params.set('mode', mode);
+            params.set('mode', nextMode);
         }
         const query = params.toString();
         navigate(`/login${query ? `?${query}` : ''}`, { replace: true });
-    }, [location.search, navigate]);
+    }, [directRegistrationEnabled, location.search, navigate]);
     const routeToWorkspaceSetupIfNeeded = useCallback(async (hintWorkspaceSetupRequired) => {
         if (!workspaceSwitchingEnabled)
             return false;
@@ -625,15 +622,7 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                 ? 'New password'
                                 : (authMode === 'invite'
                                     ? (invitePasswordRequired ? 'Create password' : 'Password')
-                                    : 'Password'), onChange: (event) => setLoginPassword(event.target.value) })), authMode === 'register' && isDebugModeEnabled() && (_jsx("button", { className: authStyles.authModeLink, type: "button", disabled: loginBusy, onClick: () => {
-                                const credentials = buildDebugRegistrationCredentials();
-                                setLoginEmail(credentials.email);
-                                setLoginDisplayName(credentials.displayName);
-                                setLoginPassword(credentials.password);
-                                setLoginNotice(null);
-                                setLoginError(null);
-                                setLoginErrorCode(null);
-                            }, children: "Fill Form" })), authMode === 'verify' && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: verificationToken, placeholder: "Verification token", onChange: (event) => setVerificationToken(event.target.value) })), authMode === 'reset' && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: resetToken, placeholder: "Reset token", onChange: (event) => setResetToken(event.target.value) })), authMode === 'invite' && (_jsxs(_Fragment, { children: [_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: inviteToken, placeholder: "Invite token", onChange: (event) => setInviteToken(event.target.value) }), inviteEmail && (_jsxs("p", { className: authStyles.loginSubtitle, children: ["Invite for: ", _jsx("strong", { children: inviteEmail }), inviteWorkspaceId ? ` · Workspace: ${inviteWorkspaceId}` : ''] }))] })), loginNotice && _jsx("p", { className: authStyles.loginSubtitle, children: loginNotice }), loginError && _jsx("p", { className: authStyles.loginError, children: loginError }), authMode === 'login' && loginErrorCode === 'EMAIL_NOT_VERIFIED' && loginEmail.trim() && (_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || verifyCooldownActive, onClick: async () => {
+                                    : 'Password'), onChange: (event) => setLoginPassword(event.target.value) })), authMode === 'verify' && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: verificationToken, placeholder: "Verification token", onChange: (event) => setVerificationToken(event.target.value) })), authMode === 'reset' && (_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: resetToken, placeholder: "Reset token", onChange: (event) => setResetToken(event.target.value) })), authMode === 'invite' && (_jsxs(_Fragment, { children: [_jsx("input", { className: `${styles.input} ${authStyles.loginInput}`, type: "text", value: inviteToken, placeholder: "Invite token", onChange: (event) => setInviteToken(event.target.value) }), inviteEmail && (_jsxs("p", { className: authStyles.loginSubtitle, children: ["Invite for: ", _jsx("strong", { children: inviteEmail }), inviteWorkspaceId ? ` · Workspace: ${inviteWorkspaceId}` : ''] }))] })), loginNotice && _jsx("p", { className: authStyles.loginSubtitle, children: loginNotice }), loginError && _jsx("p", { className: authStyles.loginError, children: loginError }), authMode === 'login' && loginErrorCode === 'EMAIL_NOT_VERIFIED' && loginEmail.trim() && (_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || verifyCooldownActive, onClick: async () => {
                                 setLoginBusy(true);
                                 setLoginNotice(null);
                                 const sent = await requestEmailVerification(loginEmail);
@@ -810,12 +799,12 @@ function TaskforceCoreWithRouter({ config = {}, initialTaskId, onTaskCountChange
                                                 ? 'Reset Password'
                                                 : (inviteResolution === 'existing_user_signed_out'
                                                     ? 'Sign In to Continue'
-                                                    : (invitePasswordRequired ? 'Create Account and Join' : 'Join Workspace'))) }), authMode === 'register' && (_jsxs("p", { className: authStyles.registerConsent, children: ["By creating an account, you agree to the", ' ', _jsx("a", { className: authStyles.registerConsentLink, href: "https://taskforcehq.com/legal/terms", target: "_blank", rel: "noopener noreferrer", children: "Terms of Service" }), ' ', "and acknowledge the", ' ', _jsx("a", { className: authStyles.registerConsentLink, href: "https://taskforcehq.com/legal/privacy", target: "_blank", rel: "noopener noreferrer", children: "Privacy Policy" }), "."] })), (authMode === 'login' || authMode === 'register') && (_jsxs("p", { className: authStyles.authModeSwitch, children: [authMode === 'login' ? 'Need an account?' : 'Already have an account?', ' ', _jsx("button", { className: authStyles.authModeSwitchLink, disabled: loginBusy, onClick: () => {
+                                                    : (invitePasswordRequired ? 'Create Account and Join' : 'Join Workspace'))) }), authMode === 'register' && (_jsxs("p", { className: authStyles.registerConsent, children: ["By creating an account, you agree to the", ' ', _jsx("a", { className: authStyles.registerConsentLink, href: "https://taskforcehq.com/legal/terms", target: "_blank", rel: "noopener noreferrer", children: "Terms of Service" }), ' ', "and acknowledge the", ' ', _jsx("a", { className: authStyles.registerConsentLink, href: "https://taskforcehq.com/legal/privacy", target: "_blank", rel: "noopener noreferrer", children: "Privacy Policy" }), "."] })), directRegistrationEnabled && (authMode === 'login' || authMode === 'register') && (_jsxs("p", { className: authStyles.authModeSwitch, children: [authMode === 'login' ? 'Need an account?' : 'Already have an account?', ' ', _jsx("button", { className: authStyles.authModeSwitchLink, disabled: loginBusy, onClick: () => {
                                         setLoginError(null);
                                         setLoginErrorCode(null);
                                         setLoginNotice(null);
                                         setLoginMode(authMode === 'login' ? 'register' : 'login');
-                                    }, children: authMode === 'login' ? 'Register' : 'Sign In' })] })), _jsxs("div", { className: authStyles.authModeLinks, children: [(authMode === 'login' || authMode === 'register') && (_jsxs(_Fragment, { children: [_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || resetCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('forgot'); }, children: resetCooldownActive ? `Forgot Password (${resetCooldownSeconds}s)` : 'Forgot Password' }), _jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || verifyCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('verify'); }, children: verifyCooldownActive ? `Resend Verification (${verifyCooldownSeconds}s)` : 'Resend Verification' }), _jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('invite'); }, children: "Accept Invite" })] })), (authMode !== 'login' && authMode !== 'register') && (_jsxs(_Fragment, { children: [_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('login'); }, children: "Sign In" }), _jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('register'); }, children: "Register" }), authMode === 'reset' && (_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || resetCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('forgot'); }, children: resetCooldownActive ? `Forgot Password (${resetCooldownSeconds}s)` : 'Forgot Password' }))] }))] })] }) }) }));
+                                    }, children: authMode === 'login' ? 'Register' : 'Sign In' })] })), _jsxs("div", { className: authStyles.authModeLinks, children: [(authMode === 'login' || authMode === 'register') && (_jsxs(_Fragment, { children: [_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || resetCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('forgot'); }, children: resetCooldownActive ? `Forgot Password (${resetCooldownSeconds}s)` : 'Forgot Password' }), _jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || verifyCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('verify'); }, children: verifyCooldownActive ? `Resend Verification (${verifyCooldownSeconds}s)` : 'Resend Verification' }), _jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('invite'); }, children: "Accept Invite" })] })), (authMode !== 'login' && authMode !== 'register') && (_jsxs(_Fragment, { children: [_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('login'); }, children: "Sign In" }), directRegistrationEnabled && (_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('register'); }, children: "Register" })), authMode === 'reset' && (_jsx("button", { className: authStyles.authModeLink, disabled: loginBusy || resetCooldownActive, onClick: () => { setLoginError(null); setLoginErrorCode(null); setLoginNotice(null); setLoginMode('forgot'); }, children: resetCooldownActive ? `Forgot Password (${resetCooldownSeconds}s)` : 'Forgot Password' }))] }))] })] }) }) }));
     }
     if (shouldForceLogin && !isLoginRoute) {
         return (_jsx("div", { className: shellStyles.standaloneWrapper, "data-theme": currentTheme, children: _jsx("div", { className: authStyles.loginView, children: _jsxs("div", { className: authStyles.loginCard, children: [_jsxs("div", { className: authStyles.authBrandRow, children: [_jsx("img", { src: authBrandLogo, alt: "Taskforce", className: authStyles.loginLogo }), _jsx("h1", { className: authStyles.loginTitle, children: "Loading Taskforce" })] }), _jsx("p", { className: authStyles.loginSubtitle, children: "Redirecting to sign in..." })] }) }) }));