@taskforcehq/taskforce 0.3.304 → 0.3.306

package/dist/utils/workspaceSyncPresentation.js

@@ -1,12 +1,78 @@
+function resolveBlockedReasonPresentation(reason) {
+    switch (reason) {
+        case 'auth-required':
+            return {
+                summary: 'Sync is paused until you sign in again.',
+                recommendedAction: 'Sign in, then press Sync to retry.'
+            };
+        case 'attach-cloud':
+            return {
+                summary: 'This workspace still needs its first cloud pull before local pushes can run.',
+                recommendedAction: 'Keep this window open for the first cloud pull. If it seems stuck, press Repair.'
+            };
+        case 'provision-local':
+            return {
+                summary: 'This workspace is still doing its first cloud upload before normal pulls can run.',
+                recommendedAction: 'Keep this window open until the first cloud upload finishes.'
+            };
+        case 'repair-active':
+            return {
+                summary: 'Repair is already running for this workspace.',
+                recommendedAction: 'Wait for repair to finish before retrying sync.'
+            };
+        case 'retry-pending':
+            return {
+                summary: 'Sync hit a temporary problem and is waiting for its scheduled retry.',
+                recommendedAction: 'Wait for the automatic retry, or press Sync to retry now.'
+            };
+        case 'push-in-flight':
+        case 'pull-in-flight':
+            return {
+                summary: 'A sync request is already running for this workspace.',
+                recommendedAction: 'Wait for the current sync request to finish.'
+            };
+        case 'lease-held':
+            return {
+                summary: 'Another local window is already syncing this workspace.',
+                recommendedAction: 'Use a single local window for sync, or close the other syncing window.'
+            };
+        case 'invalid-workspace':
+            return {
+                summary: 'Workspace setup is required before sync can run.',
+                recommendedAction: 'Open or create a named workspace before retrying sync.'
+            };
+        case 'cloud-auth-unconfigured':
+            return {
+                summary: 'Cloud sync is unavailable because cloud authentication is not configured.',
+                recommendedAction: 'Configure cloud authentication before turning on sync.'
+            };
+        case 'runtime-not-local':
+            return {
+                summary: 'Workspace sync controls are only available in the local runtime.',
+                recommendedAction: 'Open this workspace in the local app to manage sync.'
+            };
+        case 'sync-disabled':
+            return {
+                summary: 'Workspace sync is currently turned off.',
+                recommendedAction: 'Turn on sync when you are ready to connect this workspace to cloud.'
+            };
+        default:
+            return null;
+    }
+}
 export function resolveHeaderWorkspaceSyncPresentation(input) {
     const actionable = input.runtimeMode === 'local' && input.isAuthenticated;
     if (actionable) {
+        const blockedReasonPresentation = resolveBlockedReasonPresentation(input.retryBlockedReason
+            || input.pullBlockedReason
+            || input.pushBlockedReason
+            || null);
         return {
             actionable,
             status: input.workspaceSyncStatus,
             syncEnabledLabel: input.workspaceCloudSyncEnabled ? 'yes' : 'no',
-            summary: input.workspaceSyncSummary,
-            recommendedAction: input.workspaceSyncRecommendedAction,
+            summary: blockedReasonPresentation?.summary || input.workspaceSyncSummary,
+            recommendedAction: blockedReasonPresentation?.recommendedAction || input.workspaceSyncRecommendedAction,
             lastError: input.workspaceSyncError
         };
     }

package/dist/utils/workspaceSyncPresentation.test.js

@@ -25,7 +25,10 @@ describe('resolveHeaderWorkspaceSyncPresentation', () => {
             workspaceCloudSyncEnabled: true,
             workspaceSyncSummary: 'Sync needs attention before it can continue.',
             workspaceSyncRecommendedAction: 'Press Sync to retry.',
-            workspaceSyncError: 'Retry later'
+            workspaceSyncError: 'Retry later',
+            pushBlockedReason: null,
+            pullBlockedReason: null,
+            retryBlockedReason: null
         });
         expect(result.actionable).toBe(true);
         expect(result.status).toBe('attention');
@@ -33,4 +36,36 @@ describe('resolveHeaderWorkspaceSyncPresentation', () => {
         expect(result.summary).toBe('Sync needs attention before it can continue.');
         expect(result.lastError).toBe('Retry later');
     });
+    it('surfaces the highest-priority blocked sync reason in the visible summary', () => {
+        const result = resolveHeaderWorkspaceSyncPresentation({
+            runtimeMode: 'local',
+            isAuthenticated: true,
+            workspaceSyncStatus: 'attention',
+            workspaceCloudSyncEnabled: true,
+            workspaceSyncSummary: 'Sync needs attention before it can continue.',
+            workspaceSyncRecommendedAction: 'Press Sync to retry.',
+            workspaceSyncError: 'Retry later',
+            pushBlockedReason: 'attach-cloud',
+            pullBlockedReason: 'retry-pending',
+            retryBlockedReason: 'auth-required'
+        });
+        expect(result.summary).toBe('Sync is paused until you sign in again.');
+        expect(result.recommendedAction).toBe('Sign in, then press Sync to retry.');
+    });
+    it('explains when another local window holds the sync lease', () => {
+        const result = resolveHeaderWorkspaceSyncPresentation({
+            runtimeMode: 'local',
+            isAuthenticated: true,
+            workspaceSyncStatus: 'attention',
+            workspaceCloudSyncEnabled: true,
+            workspaceSyncSummary: 'Sync needs attention before it can continue.',
+            workspaceSyncRecommendedAction: 'Press Sync to retry.',
+            workspaceSyncError: 'Retry later',
+            pushBlockedReason: 'lease-held',
+            pullBlockedReason: null,
+            retryBlockedReason: null
+        });
+        expect(result.summary).toBe('Another local window is already syncing this workspace.');
+        expect(result.recommendedAction).toBe('Use a single local window for sync, or close the other syncing window.');
+    });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taskforcehq/taskforce",
-  "version": "0.3.304",
+  "version": "0.3.306",
   "description": "Mission Command center for AI-powered task management (beta - under active development)",
   "author": "Taskforce HQ <hello@taskforcehq.ai> (https://taskforcehq.ai)",
   "license": "MIT",
@@ -54,7 +54,7 @@
     "build:ui": "npm run build:app",
     "check:deploy-preflight": "npm run build",
     "hooks:install": "git config core.hooksPath .githooks",
-    "build": "shx rm -rf dist && tsc && shx cp src/Taskforce.module.css dist/Taskforce.module.css && shx mkdir -p dist/resources && shx cp -r src/resources/* dist/resources/ && shx rm -f dist/resources/templates/workflows/release.yaml && shx mkdir -p dist/public && shx cp -r src/assets/images/* dist/public/ && shx cp -r src/assets/favicon/* dist/public/ && shx chmod +x dist/cli.js && npm run build:ui",
+    "build": "shx rm -rf dist && tsc && shx cp src/Taskforce.module.css dist/Taskforce.module.css && shx mkdir -p dist/styles && shx cp src/styles/fonts.css dist/styles/fonts.css && shx mkdir -p dist/assets/fonts && shx cp src/assets/fonts/*.woff2 dist/assets/fonts/ && shx mkdir -p dist/resources && shx cp -r src/resources/* dist/resources/ && shx rm -f dist/resources/templates/workflows/release.yaml && shx mkdir -p dist/public && shx cp -r src/assets/images/* dist/public/ && shx cp -r src/assets/favicon/* dist/public/ && shx chmod +x dist/cli.js && npm run build:ui",
     "mcp": "node dist/mcp/server.js",
     "gen:workflows": "node scripts/generate-workflow-templates.mjs",
     "check:workflows": "node scripts/generate-workflow-templates.mjs --check",
@@ -76,6 +76,12 @@
     "test:e2e:realtime:attachments": "npm run test:e2e:realtime -- tests/e2e/attachment-sync.spec.ts",
     "test:e2e:realtime:multiclient": "npm run test:e2e:realtime -- tests/e2e/realtime-multiclient.spec.ts",
     "test:e2e:realtime:reconnect": "npm run test:e2e:realtime -- tests/e2e/realtime-reconnect.spec.ts",
+    "test:e2e:onboarding": "npx playwright test -c playwright.e2e.config.ts tests/e2e/auth-runtime.spec.ts tests/e2e/billing-runtime.spec.ts",
+    "test:billing:deterministic": "npx vitest run src/server/routes/billing.test.ts src/components/views/PlansPage.test.tsx src/components/views/PlanComparisonPage.test.tsx src/migrations/billingSchemaParity.test.ts",
+    "test:billing:runtime:mock": "npx playwright test -c playwright.e2e.config.ts tests/e2e/billing-runtime.spec.ts",
+    "test:billing:local": "npm run test:billing:deterministic && npm run test:billing:runtime:mock",
+    "test:billing:performance:smoke": "sh scripts/run-billing-performance-smoke.sh",
+    "test:billing:performance:smoke:live": "TASKFORCE_BILLING_ENABLE_LIVE_PURCHASE=1 sh scripts/run-billing-performance-smoke.sh",
     "playwright:auth:bootstrap": "node scripts/bootstrap-playwright-auth.mjs",
     "playwright:auth": "sh scripts/playwright-auth.sh",
     "playwright:interactive": "playwright test -c playwright.interactive.config.ts tests/e2e/interactive.smoke.spec.ts",
@@ -83,6 +89,7 @@
     "qa:open": "node scripts/qa-open.mjs",
     "check:env": "node --import tsx scripts/check-env.ts --target=server --strict=true",
     "check:env:soak": "node --import tsx scripts/check-env.ts --target=soak --strict=true",
+    "check:mcp-smoke": "node scripts/check-cloud-mcp.mjs",
     "check:compat": "node scripts/check-compat-boundaries.mjs",
     "gen:env-example": "node --import tsx scripts/generate-env-example.ts",
     "check:sync-smoke-preflight": "node --import tsx src/soak/preflight.cli.ts",
@@ -104,6 +111,7 @@
     "js-yaml": "^4.1.1",
     "nodemailer": "^6.10.1",
     "pg": "^8.18.0",
+    "react-avatar-editor": "^15.1.0",
     "rehype-sanitize": "^6.0.0",
     "stripe": "^20.3.1",
     "ws": "^8.18.0"

package/scripts/check-cloud-mcp.mjs

@@ -0,0 +1,83 @@
+#!/usr/bin/env node
+
+const DEFAULT_ENDPOINTS = {
+    production: 'https://mcp.taskforcehq.ai/mcp',
+    staging: 'https://staging-mcp.taskforcehq.ai/mcp',
+    performance: 'https://performance-mcp.taskforcehq.ai/mcp'
+};
+
+const REQUEST_TIMEOUT_MS = 10000;
+
+function normalizeTargets(argv) {
+    const values = argv.length > 0 ? argv : Object.keys(DEFAULT_ENDPOINTS);
+    return values.map((value) => {
+        const normalized = String(value || '').trim().toLowerCase();
+        if (DEFAULT_ENDPOINTS[normalized]) {
+            return {
+                label: normalized,
+                url: DEFAULT_ENDPOINTS[normalized]
+            };
+        }
+        return {
+            label: normalized || 'custom',
+            url: String(value || '').trim()
+        };
+    });
+}
+
+async function checkEndpoint(target) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+    try {
+        const response = await fetch(target.url, {
+            method: 'GET',
+            headers: {
+                Accept: 'application/json'
+            },
+            signal: controller.signal
+        });
+        const contentType = String(response.headers.get('content-type') || '');
+        const responseText = await response.text();
+        let payload = null;
+        try {
+            payload = responseText ? JSON.parse(responseText) : null;
+        } catch {
+            payload = null;
+        }
+        const message = typeof payload?.error?.message === 'string'
+            ? payload.error.message.trim()
+            : '';
+
+        if (response.status !== 401) {
+            throw new Error(`expected HTTP 401 but received ${response.status}`);
+        }
+        if (!contentType.includes('application/json')) {
+            throw new Error(`expected application/json response but received ${contentType || 'unknown content-type'}`);
+        }
+        if (message !== 'Unauthorized.') {
+            throw new Error(`expected MCP Unauthorized. payload but received message=${JSON.stringify(message || responseText.slice(0, 200))}`);
+        }
+
+        console.log(`[mcp-smoke] ${target.label} ok ${target.url} -> 401 Unauthorized.`);
+    } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`[mcp-smoke] ${target.label} failed ${target.url}: ${message}`);
+    } finally {
+        clearTimeout(timeout);
+    }
+}
+
+async function main() {
+    const targets = normalizeTargets(process.argv.slice(2));
+    for (const target of targets) {
+        if (!target.url) {
+            throw new Error(`[mcp-smoke] ${target.label} has no URL to check.`);
+        }
+        await checkEndpoint(target);
+    }
+}
+
+main().catch((error) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 1;
+});

package/scripts/export-sqlite-to-postgres.mjs

@@ -49,19 +49,19 @@ lines.push('');
 
 for (const t of tasks) {
     lines.push(`INSERT INTO tasks (
-  id, tenant_id, title, description, status, priority, complexity, type, category,
+  id, tenant_id, workspace_id, title, description, status, priority, complexity, type, category,
   approach, created_at, updated_at, completed_at, canceled_reason,
   is_archived, specialists, taxonomies, created_by,
-  scheduled_date, due_date, scheduled_week_key, order_in_day,
-  parent_task_id, child_display_order
+  scheduled_date, due_date, scheduled_week_key, order_in_day
 ) VALUES (
-  ${sqlString(t.id)}, ${sqlString(t.tenant_id || 'default')}, ${sqlString(t.title)}, ${sqlString(t.description)}, ${sqlString(t.status)}, ${sqlNumber(t.priority)}, ${sqlNumber(t.complexity)}, ${sqlString(t.type)}, ${sqlString(t.category)},
+  ${sqlString(t.id)}, ${sqlString(t.tenant_id || 'default')}, ${sqlString(t.workspace_id || 'default')}, ${sqlString(t.title)}, ${sqlString(t.description)}, ${sqlString(t.status)}, ${sqlNumber(t.priority)}, ${sqlNumber(t.complexity)}, ${sqlString(t.type)}, ${sqlString(t.category)},
   ${sqlString(t.approach)}, ${sqlString(t.created_at)}, ${sqlString(t.updated_at)}, ${sqlString(t.completed_at)}, ${sqlString(t.canceled_reason)},
   ${sqlBool(t.is_archived)}, ${sqlString(t.specialists)}, ${sqlString(t.taxonomies)}, ${sqlString(t.created_by)},
-  ${sqlString(t.scheduled_date)}, ${sqlString(t.due_date)}, ${sqlString(t.scheduled_week_key)}, ${sqlNumber(t.order_in_day)},
-  ${sqlString(t.parent_task_id)}, ${sqlNumber(t.child_display_order)}
+  ${sqlString(t.scheduled_date)}, ${sqlString(t.due_date)}, ${sqlString(t.scheduled_week_key)}, ${sqlNumber(t.order_in_day)}
 )
 ON CONFLICT (id) DO UPDATE SET
+  tenant_id = EXCLUDED.tenant_id,
+  workspace_id = EXCLUDED.workspace_id,
   title = EXCLUDED.title,
   description = EXCLUDED.description,
   status = EXCLUDED.status,
@@ -81,9 +81,7 @@ ON CONFLICT (id) DO UPDATE SET
   scheduled_date = EXCLUDED.scheduled_date,
   due_date = EXCLUDED.due_date,
   scheduled_week_key = EXCLUDED.scheduled_week_key,
-  order_in_day = EXCLUDED.order_in_day,
-  parent_task_id = EXCLUDED.parent_task_id,
-  child_display_order = EXCLUDED.child_display_order;`);
+  order_in_day = EXCLUDED.order_in_day;`);
 }
 
 for (const c of comments) {

package/scripts/playwright-auth.sh

@@ -1,15 +1,19 @@
 #!/usr/bin/env sh
 set -eu
 
-LOCAL_ENV_FILE="${TASKFORCE_PLAYWRIGHT_ENV_FILE:-/Users/rossburke/.codex/taskforce-playwright.env}"
+LOCAL_ENV_FILE="${TASKFORCE_PLAYWRIGHT_ENV_FILE:-$HOME/.codex/taskforce-playwright.env}"
 REPO_E2E_ENV_FILE="${TASKFORCE_PLAYWRIGHT_REPO_E2E_ENV_FILE:-.env.e2e}"
 
 if [ -f "$LOCAL_ENV_FILE" ]; then
+  set -a
   # shellcheck disable=SC1090
   . "$LOCAL_ENV_FILE"
+  set +a
 elif [ -f "$REPO_E2E_ENV_FILE" ]; then
+  set -a
   # shellcheck disable=SC1090
   . "$REPO_E2E_ENV_FILE"
+  set +a
 fi
 
 exec node scripts/bootstrap-playwright-auth.mjs "$@"

package/scripts/run-billing-performance-smoke.sh

@@ -0,0 +1,24 @@
+#!/usr/bin/env sh
+set -eu
+
+LOCAL_ENV_FILE="${TASKFORCE_PLAYWRIGHT_ENV_FILE:-$HOME/.codex/taskforce-playwright.env}"
+REPO_E2E_ENV_FILE="${TASKFORCE_PLAYWRIGHT_REPO_E2E_ENV_FILE:-.env.e2e}"
+
+if [ -f "$LOCAL_ENV_FILE" ]; then
+  set -a
+  # shellcheck disable=SC1090
+  . "$LOCAL_ENV_FILE"
+  set +a
+elif [ -f "$REPO_E2E_ENV_FILE" ]; then
+  set -a
+  # shellcheck disable=SC1090
+  . "$REPO_E2E_ENV_FILE"
+  set +a
+fi
+
+TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL="${TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL:-https://performance-app.taskforcehq.ai}"
+export TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL
+export TASKFORCE_PLAYWRIGHT_BASE_URL="${TASKFORCE_PLAYWRIGHT_BASE_URL:-$TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL}"
+
+node scripts/bootstrap-playwright-auth.mjs
+exec npx playwright test -c playwright.interactive.config.ts tests/e2e/billing-performance.smoke.spec.ts "$@"

package/scripts/run-e2e-realtime.sh

@@ -1,16 +1,30 @@
 #!/bin/sh
 set -eu
 
-if [ -f .env.e2e ]; then
+LOCAL_ENV_FILE="${TASKFORCE_PLAYWRIGHT_ENV_FILE:-$HOME/.codex/taskforce-playwright.env}"
+REPO_E2E_ENV_FILE="${TASKFORCE_PLAYWRIGHT_REPO_E2E_ENV_FILE:-.env.e2e}"
+
+if [ -f "$LOCAL_ENV_FILE" ]; then
+  set -a
+  # shellcheck disable=SC1090
+  . "$LOCAL_ENV_FILE"
+  set +a
+elif [ -f "$REPO_E2E_ENV_FILE" ]; then
   set -a
-  . ./.env.e2e
+  # shellcheck disable=SC1090
+  . "$REPO_E2E_ENV_FILE"
   set +a
 fi
 
 # Mirror soak defaults so realtime e2e runs are plug-compatible with existing env setup.
 export SYNC_SOAK_LOCAL_BASE_URL="${SYNC_SOAK_LOCAL_BASE_URL:-http://localhost:5174}"
-export SYNC_SOAK_CLOUD_BASE_URL="${SYNC_SOAK_CLOUD_BASE_URL:-https://performance-app.taskforcehq.ai}"
+export SYNC_SOAK_CLOUD_BASE_URL="${SYNC_SOAK_CLOUD_BASE_URL:-${TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL:-https://performance-app.taskforcehq.ai}}"
 export SYNC_SOAK_WORKSPACE_ID="${SYNC_SOAK_WORKSPACE_ID:-test-smoke}"
+export SYNC_SOAK_EMAIL="${SYNC_SOAK_EMAIL:-${TASKFORCE_E2E_EMAIL:-}}"
+export SYNC_SOAK_PASSWORD="${SYNC_SOAK_PASSWORD:-${TASKFORCE_E2E_PASSWORD:-}}"
+PLAYWRIGHT_AUTH_STORAGE_STATE="${PLAYWRIGHT_AUTH_STORAGE_STATE:-${TASKFORCE_PLAYWRIGHT_STORAGE_STATE:-}}"
+unset TASKFORCE_E2E_EMAIL TASKFORCE_E2E_PASSWORD TASKFORCE_PLAYWRIGHT_STORAGE_STATE TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL
 
 node --import tsx scripts/check-env.ts --target=soak --strict=true
+export PLAYWRIGHT_AUTH_STORAGE_STATE
 npx playwright test -c playwright.e2e.config.ts "$@"

package/scripts/run-smoke.sh

@@ -1,22 +1,34 @@
 #!/bin/sh
 set -eu
 
-if [ -f .env.e2e ]; then
+LOCAL_ENV_FILE="${TASKFORCE_PLAYWRIGHT_ENV_FILE:-$HOME/.codex/taskforce-playwright.env}"
+REPO_E2E_ENV_FILE="${TASKFORCE_PLAYWRIGHT_REPO_E2E_ENV_FILE:-.env.e2e}"
+
+if [ -f "$LOCAL_ENV_FILE" ]; then
+  set -a
+  # shellcheck disable=SC1090
+  . "$LOCAL_ENV_FILE"
+  set +a
+elif [ -f "$REPO_E2E_ENV_FILE" ]; then
   set -a
-  . ./.env.e2e
+  # shellcheck disable=SC1090
+  . "$REPO_E2E_ENV_FILE"
   set +a
 fi
 
 # Provide safe defaults for non-secret settings; allow caller/.env.e2e overrides.
 export SYNC_SOAK_LOCAL_BASE_URL="${SYNC_SOAK_LOCAL_BASE_URL:-http://localhost:5174}"
-export SYNC_SOAK_CLOUD_BASE_URL="${SYNC_SOAK_CLOUD_BASE_URL:-https://performance-app.taskforcehq.ai}"
+export SYNC_SOAK_CLOUD_BASE_URL="${SYNC_SOAK_CLOUD_BASE_URL:-${TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL:-https://performance-app.taskforcehq.ai}}"
 export SYNC_SOAK_WORKSPACE_ID="${SYNC_SOAK_WORKSPACE_ID:-test-smoke}"
+export SYNC_SOAK_EMAIL="${SYNC_SOAK_EMAIL:-${TASKFORCE_E2E_EMAIL:-}}"
+export SYNC_SOAK_PASSWORD="${SYNC_SOAK_PASSWORD:-${TASKFORCE_E2E_PASSWORD:-}}"
+unset TASKFORCE_E2E_EMAIL TASKFORCE_E2E_PASSWORD TASKFORCE_PLAYWRIGHT_STORAGE_STATE TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL
 
 node --import tsx scripts/check-env.ts --target=soak --strict=true
 
-# Shared credentials are required and must come from env/.env.e2e.
+# Shared credentials are required and may come from the local Playwright auth env file or repo .env.e2e.
 if [ -z "${SYNC_SOAK_ACCOUNTS_JSON:-}" ] && { [ -z "${SYNC_SOAK_EMAIL:-}" ] || [ -z "${SYNC_SOAK_PASSWORD:-}" ]; }; then
-  echo "Missing credentials. Set SYNC_SOAK_ACCOUNTS_JSON or SYNC_SOAK_EMAIL+SYNC_SOAK_PASSWORD in env/.env.e2e." >&2
+  echo "Missing credentials. Set SYNC_SOAK_ACCOUNTS_JSON or SYNC_SOAK_EMAIL+SYNC_SOAK_PASSWORD in $TASKFORCE_PLAYWRIGHT_ENV_FILE or .env.e2e." >&2
   exit 1
 fi
 

package/scripts/run-soak.sh

@@ -1,23 +1,35 @@
 #!/bin/sh
 set -eu
 
-if [ -f .env.e2e ]; then
+LOCAL_ENV_FILE="${TASKFORCE_PLAYWRIGHT_ENV_FILE:-$HOME/.codex/taskforce-playwright.env}"
+REPO_E2E_ENV_FILE="${TASKFORCE_PLAYWRIGHT_REPO_E2E_ENV_FILE:-.env.e2e}"
+
+if [ -f "$LOCAL_ENV_FILE" ]; then
+  set -a
+  # shellcheck disable=SC1090
+  . "$LOCAL_ENV_FILE"
+  set +a
+elif [ -f "$REPO_E2E_ENV_FILE" ]; then
   set -a
-  . ./.env.e2e
+  # shellcheck disable=SC1090
+  . "$REPO_E2E_ENV_FILE"
   set +a
 fi
 
 # Provide safe defaults for non-secret settings; allow caller/.env.e2e overrides.
 # Soak runs target the dedicated performance cloud by default.
 export SYNC_SOAK_LOCAL_BASE_URL="${SYNC_SOAK_LOCAL_BASE_URL:-http://localhost:5174}"
-export SYNC_SOAK_CLOUD_BASE_URL="${SYNC_SOAK_CLOUD_BASE_URL:-https://performance-app.taskforcehq.ai}"
+export SYNC_SOAK_CLOUD_BASE_URL="${SYNC_SOAK_CLOUD_BASE_URL:-${TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL:-https://performance-app.taskforcehq.ai}}"
 export SYNC_SOAK_WORKSPACE_ID="${SYNC_SOAK_WORKSPACE_ID:-test-smoke}"
+export SYNC_SOAK_EMAIL="${SYNC_SOAK_EMAIL:-${TASKFORCE_E2E_EMAIL:-}}"
+export SYNC_SOAK_PASSWORD="${SYNC_SOAK_PASSWORD:-${TASKFORCE_E2E_PASSWORD:-}}"
+unset TASKFORCE_E2E_EMAIL TASKFORCE_E2E_PASSWORD TASKFORCE_PLAYWRIGHT_STORAGE_STATE TASKFORCE_PLAYWRIGHT_CLOUD_BASE_URL
 
 node --import tsx scripts/check-env.ts --target=soak --strict=true
 
-# Shared credentials are required and must come from env/.env.e2e.
+# Shared credentials are required and may come from the local Playwright auth env file or repo .env.e2e.
 if [ -z "${SYNC_SOAK_ACCOUNTS_JSON:-}" ] && { [ -z "${SYNC_SOAK_EMAIL:-}" ] || [ -z "${SYNC_SOAK_PASSWORD:-}" ]; }; then
-  echo "Missing credentials. Set SYNC_SOAK_ACCOUNTS_JSON or SYNC_SOAK_EMAIL+SYNC_SOAK_PASSWORD in env/.env.e2e." >&2
+  echo "Missing credentials. Set SYNC_SOAK_ACCOUNTS_JSON or SYNC_SOAK_EMAIL+SYNC_SOAK_PASSWORD in $TASKFORCE_PLAYWRIGHT_ENV_FILE or .env.e2e." >&2
   exit 1
 fi
 

package/src/resources/templates/workflow-sources/workflowDocs.mjs

@@ -284,7 +284,7 @@ export const workflowDocs = [
                 '   - `### Next Action`',
                 '6. Ask whether to save as `{artifacts.implementationPlan.path}`.',
                 '7. If user confirms, persist task-specific content via `{{MCP_PREFIX}}save_task_attachment` using `filename: "implementation-plan.md"`.',
-                '   - Use `{{MCP_PREFIX}}link_task_context` only for linking existing files/URLs (for example, shared docs under `docs/`).',
+                '   - Use `{{MCP_PREFIX}}link_task_context` only for external http(s) URLs that should stay as references.',
                 '8. If setting status to `task` or `on-hold`, add explicit comment justification using `{{MCP_PREFIX}}add_comment`.',
                 '9. Never set `cancelled`, and never call `{{MCP_PREFIX}}archive_task`, unless explicitly instructed by the user.',
                 '10. Print `prompts.handoffPrompt` and stop.'
@@ -358,7 +358,7 @@ export const workflowDocs = [
                 '   - `### Next Step`',
                 '4. Ask whether to save as `{artifacts.collaborationBlueprint.path}`.',
                 '5. If user confirms, persist task-specific content via `{{MCP_PREFIX}}save_task_attachment` using `filename: "collaboration-blueprint.md"`.',
-                '   - Use `{{MCP_PREFIX}}link_task_context` only for linking existing files/URLs (for example, shared docs under `docs/`).',
+                '   - Use `{{MCP_PREFIX}}link_task_context` only for external http(s) URLs that should stay as references.',
                 '6. Ask concise clarification questions only if required fields above are missing.',
                 '7. If setting status to `task` or `on-hold`, add explicit comment justification using `{{MCP_PREFIX}}add_comment`.',
                 '8. Never set `cancelled`, and never call `{{MCP_PREFIX}}archive_task`, unless explicitly instructed by the user.',
@@ -435,14 +435,14 @@ export const workflowDocs = [
                 '   - `### Next Step`',
                 '4. Ask whether to save as `{artifacts.evaluationReport.path}`.',
                 '5. If user confirms, persist task-specific content via `{{MCP_PREFIX}}save_task_attachment` using `filename: "evaluation.md"`.',
-                '   - Use `{{MCP_PREFIX}}link_task_context` only for linking existing files/URLs (for example, shared docs under `docs/`).',
+                '   - Use `{{MCP_PREFIX}}link_task_context` only for external http(s) URLs that should stay as references.',
                 '6. Never set `cancelled`, and never call `{{MCP_PREFIX}}archive_task`, unless explicitly instructed by the user.',
                 '',
                 '## 3. Optional Report Artifact',
                 '',
                 '1. Use report files only when user opts in.',
                 '2. Save to `task attachment "evaluation.md"` and attach to task context when approved.',
-                '   - If the document is not task-specific, store it under `docs/` and optionally link it with `{{MCP_PREFIX}}link_task_context`.',
+                '   - If the document should become a shared durable document, save it through the canonical document/document-manager flow instead of a raw `docs/` file.',
                 '3. Stop.'
             ].join('\n')
         }
@@ -513,7 +513,7 @@ export const workflowDocs = [
                 '   - `### Next Status`',
                 '3. Ask whether to save as `{artifacts.reviewReport.path}`.',
                 '4. If user confirms, persist task-specific content via `{{MCP_PREFIX}}save_task_attachment` using `filename: "review.md"`.',
-                '   - Use `{{MCP_PREFIX}}link_task_context` only for linking existing files/URLs (for example, shared docs under `docs/`).',
+                '   - Use `{{MCP_PREFIX}}link_task_context` only for external http(s) URLs that should stay as references.',
                 '5. Keep status within allowed statuses (`task`, `on-hold`, `in-progress`, `review`, `done`) unless user explicitly instructs otherwise.',
                 '   - If setting status to `task` or `on-hold`, add explicit comment justification using `{{MCP_PREFIX}}add_comment`.',
                 '6. Never set `cancelled`, and never call `{{MCP_PREFIX}}archive_task`, unless explicitly instructed by the user.',
@@ -522,7 +522,7 @@ export const workflowDocs = [
                 '',
                 '1. Use report files only when user opts in.',
                 '2. Save to `task attachment "review.md"` and attach to task context when approved.',
-                '   - If the document is not task-specific, store it under `docs/` and optionally link it with `{{MCP_PREFIX}}link_task_context`.',
+                '   - If the document should become a shared durable document, save it through the canonical document/document-manager flow instead of a raw `docs/` file.',
                 '3. Stop.'
             ].join('\n')
         }

package/src/resources/templates/workflows/collaborate.yaml

@@ -102,7 +102,7 @@ content:
        - `### Next Step`
     4. Ask whether to save as `{artifacts.collaborationBlueprint.path}`.
     5. If user confirms, persist task-specific content via `{{MCP_PREFIX}}save_task_attachment` using `filename: "collaboration-blueprint.md"`.
-       - Use `{{MCP_PREFIX}}link_task_context` only for linking existing files/URLs (for example, shared docs under `docs/`).
+       - Use `{{MCP_PREFIX}}link_task_context` only for external http(s) URLs that should stay as references.
     6. Ask concise clarification questions only if required fields above are missing.
     7. If setting status to `task` or `on-hold`, add explicit comment justification using `{{MCP_PREFIX}}add_comment`.
     8. Never set `cancelled`, and never call `{{MCP_PREFIX}}archive_task`, unless explicitly instructed by the user.

package/src/resources/templates/workflows/evaluate.yaml

@@ -106,12 +106,12 @@ content:
        - `### Next Step`
     4. Ask whether to save as `{artifacts.evaluationReport.path}`.
     5. If user confirms, persist task-specific content via `{{MCP_PREFIX}}save_task_attachment` using `filename: "evaluation.md"`.
-       - Use `{{MCP_PREFIX}}link_task_context` only for linking existing files/URLs (for example, shared docs under `docs/`).
+       - Use `{{MCP_PREFIX}}link_task_context` only for external http(s) URLs that should stay as references.
     6. Never set `cancelled`, and never call `{{MCP_PREFIX}}archive_task`, unless explicitly instructed by the user.
 
     ## 3. Optional Report Artifact
 
     1. Use report files only when user opts in.
     2. Save to `task attachment "evaluation.md"` and attach to task context when approved.
-       - If the document is not task-specific, store it under `docs/` and optionally link it with `{{MCP_PREFIX}}link_task_context`.
+       - If the document should become a shared durable document, save it through the canonical document/document-manager flow instead of a raw `docs/` file.
     3. Stop.

package/src/resources/templates/workflows/plan.yaml

@@ -113,7 +113,7 @@ content:
        - `### Next Action`
     6. Ask whether to save as `{artifacts.implementationPlan.path}`.
     7. If user confirms, persist task-specific content via `{{MCP_PREFIX}}save_task_attachment` using `filename: "implementation-plan.md"`.
-       - Use `{{MCP_PREFIX}}link_task_context` only for linking existing files/URLs (for example, shared docs under `docs/`).
+       - Use `{{MCP_PREFIX}}link_task_context` only for external http(s) URLs that should stay as references.
     8. If setting status to `task` or `on-hold`, add explicit comment justification using `{{MCP_PREFIX}}add_comment`.
     9. Never set `cancelled`, and never call `{{MCP_PREFIX}}archive_task`, unless explicitly instructed by the user.
     10. Print `prompts.handoffPrompt` and stop.

package/src/resources/templates/workflows/review.yaml

@@ -102,7 +102,7 @@ content:
        - `### Next Status`
     3. Ask whether to save as `{artifacts.reviewReport.path}`.
     4. If user confirms, persist task-specific content via `{{MCP_PREFIX}}save_task_attachment` using `filename: "review.md"`.
-       - Use `{{MCP_PREFIX}}link_task_context` only for linking existing files/URLs (for example, shared docs under `docs/`).
+       - Use `{{MCP_PREFIX}}link_task_context` only for external http(s) URLs that should stay as references.
     5. Keep status within allowed statuses (`task`, `on-hold`, `in-progress`, `review`, `done`) unless user explicitly instructs otherwise.
        - If setting status to `task` or `on-hold`, add explicit comment justification using `{{MCP_PREFIX}}add_comment`.
     6. Never set `cancelled`, and never call `{{MCP_PREFIX}}archive_task`, unless explicitly instructed by the user.
@@ -111,5 +111,5 @@ content:
 
     1. Use report files only when user opts in.
     2. Save to `task attachment "review.md"` and attach to task context when approved.
-       - If the document is not task-specific, store it under `docs/` and optionally link it with `{{MCP_PREFIX}}link_task_context`.
+       - If the document should become a shared durable document, save it through the canonical document/document-manager flow instead of a raw `docs/` file.
     3. Stop.

package/dist/ui/assets/AgentsModule-BLWVbuKP.js

@@ -1 +0,0 @@
-import{r as n,j as e}from"./vendor-react-CKJs5o3c.js";import{p as T,u as C,v as w,w as S,t as s,x as M}from"./index-DXUdtH1B.js";import{h as L,B as A,k as I,aa as B,aI as H,aJ as D,b as R}from"./vendor-icons-I7ZwG1z_.js";import"./vendor-markdown-BUxTU7dS.js";import"./vendor-dnd-DRzYolkg.js";import"./vendor-router-BbWMxlnO.js";function F({workspaceId:h}){const[x,k]=n.useState([]),[j,y]=n.useState(!1),[c,P]=n.useState(null),[p,m]=n.useState(null),[d,g]=n.useState(null),N=n.useCallback(async()=>{if(h){y(!0);try{const a=await(await fetch(`/api/taskforce/workspace/assignee-options?workspaceId=${encodeURIComponent(h)}`,{credentials:"include"})).json().catch(()=>({})),t=Array.isArray(a?.assignees)?a.assignees.filter(i=>i.kind==="agent").map(i=>({id:String(i.value||""),name:String(i.label||i.value||"Unknown Agent"),username:String(i.username||i.value||""),icon:String(i.icon||"Bot"),color:String(i.color||"#6B7280"),kind:String(i.kind||"agent"),description:typeof i.description=="string"?i.description:null,role:typeof i.role=="string"?i.role:null,provider:typeof i.provider=="string"?i.provider:null,model:typeof i.model=="string"?i.model:null,surfaceType:T(i.surfaceType),createdAt:String(i.createdAt||""),updatedAt:String(i.updatedAt||i.createdAt||""),lastActiveAt:typeof i.lastActiveAt=="string"?i.lastActiveAt:null})):[];k(t)}finally{y(!1)}}},[h]);n.useEffect(()=>{N()},[N]);const f=n.useMemo(()=>{const r=new Map;for(const a of x){const t=C(a.surfaceType);r.has(t)||r.set(t,new Map);const i=r.get(t),v=a.name.toLowerCase();i.has(v)||i.set(v,[]),i.get(v).push(a)}return w.map(a=>({section:a,label:S(a),groups:Array.from(r.get(a)?.entries()||[]).map(([t,i])=>({groupId:`${a}:${t}`,section:a,sectionLabel:S(a),profiles:i,primaryProfile:i[0]}))})).filter(a=>a.groups.length>0)},[x]),o=n.useMemo(()=>f.flatMap(r=>r.groups),[f]),l=n.useMemo(()=>o.find(r=>r.groupId===d)||o[0]||null,[o,d]);n.useEffect(()=>{if(!o.length){d!==null&&g(null);return}(!d||!o.some(r=>r.groupId===d))&&g(o[0].groupId)},[o,d]);const b=async(r,a)=>{m(null);try{const t=await fetch("/api/taskforce/workspace/ai-profiles/merge",{method:"POST",credentials:"include",headers:{"Content-Type":"application/json"},body:JSON.stringify({keepId:r,mergeId:a})}),i=await t.json().catch(()=>({}));if(!t.ok){m({type:"error",message:String(i?.error||"Failed to merge AI profiles.")});return}P(null),m({type:"success",message:"AI profiles merged."}),await N()}catch{m({type:"error",message:"Failed to merge AI profiles."})}},u=r=>{const a=String(r||"").trim();if(!a)return"Unknown";const t=Date.parse(a);return Number.isFinite(t)?new Date(t).toLocaleString(void 0,{dateStyle:"medium",timeStyle:"short"}):a};return e.jsx("div",{className:`${s.standalonePage} ${s.standaloneContent}`,style:{overflow:"auto"},children:e.jsx("div",{className:s.settingsContent,style:{maxWidth:1080,margin:"0 auto",width:"100%"},children:e.jsx("div",{className:s.settingGroup,children:e.jsxs("div",{children:[e.jsx("h4",{className:s.settingSubTitle,children:"Registered AI Profiles"}),e.jsx("p",{className:`${s.settingsHint} ${s.marginBottom12}`,children:"AI agents register profiles when connecting via MCP. Merge duplicates created when a token was lost."}),j&&e.jsxs("div",{className:s.settingsHint,children:[e.jsx(L,{size:13,className:s.spinner})," Loading profiles…"]}),!j&&x.length===0&&e.jsx("div",{className:s.settingsHint,children:"No AI profiles registered yet."}),!j&&f.length>0&&e.jsxs("div",{className:s.aiProfilesExplorer,children:[e.jsx("div",{className:s.aiProfilesListPane,children:e.jsx("div",{className:s.aiProfilesList,children:f.map(r=>e.jsxs("div",{className:s.aiProfilesSection,children:[e.jsx("div",{className:s.aiProfilesSectionHeader,children:r.label}),r.groups.map(a=>{const t=l?.groupId===a.groupId,i=a.primaryProfile;return e.jsxs("button",{type:"button",className:`${s.aiProfileGroup} ${a.profiles.length>1?s.aiProfileGroupDuplicate:""} ${t?s.aiProfileGroupSelected:""}`,onClick:()=>g(a.groupId),"aria-pressed":t,children:[e.jsxs("div",{className:s.aiProfileGroupHeader,children:[e.jsx(A,{size:13,style:{color:i.color}}),e.jsx("span",{className:s.aiProfileName,children:i.name}),a.profiles.length>1&&e.jsxs("span",{className:s.aiProfileDuplicateBadge,children:[e.jsx(I,{size:11})," ",a.profiles.length," duplicates"]})]}),e.jsxs("div",{className:s.settingsHint,style:{marginTop:6},children:["@",i.username]}),(i.surfaceType||i.role||i.provider||i.model)&&e.jsxs("div",{className:s.aiProfileMetaRow,children:[i.surfaceType&&e.jsx("span",{className:s.aiProfileSurfaceBadge,children:M(i.surfaceType)}),i.role&&e.jsx("span",{children:i.role}),i.provider&&e.jsx("span",{children:i.provider}),i.model&&e.jsx("span",{children:i.model})]}),i.description&&e.jsx("div",{className:s.settingsHint,style:{marginTop:4},children:i.description})]},a.groupId)})]},r.section))})}),l&&e.jsx("div",{className:s.aiProfileDetailPane,children:e.jsxs("div",{className:s.aiProfileDetailCard,children:[e.jsxs("div",{className:s.aiProfileDetailHero,children:[e.jsx("div",{className:s.aiProfileDetailIcon,style:{color:l.primaryProfile.color},children:e.jsx(A,{size:18})}),e.jsxs("div",{className:s.aiProfileDetailHeading,children:[e.jsx("div",{className:s.aiProfileDetailTitleRow,children:e.jsx("h5",{className:s.aiProfileDetailTitle,children:l.primaryProfile.name})}),e.jsxs("div",{className:s.aiProfileDetailMetaRow,children:[e.jsxs("span",{className:s.aiProfileDetailHandle,children:["@",l.primaryProfile.username]}),e.jsx("span",{className:s.aiProfileDetailSectionBadge,children:l.sectionLabel}),l.profiles.length>1&&e.jsxs("span",{className:s.aiProfileDetailLinkedCount,children:[l.profiles.length," linked"]})]})]})]}),l.primaryProfile.description&&e.jsx("div",{className:s.aiProfileDetailDescription,children:l.primaryProfile.description}),e.jsxs("div",{className:s.aiProfileDetailGrid,children:[e.jsxs("div",{className:s.aiProfileDetailStat,children:[e.jsxs("span",{className:s.aiProfileDetailStatLabel,children:[e.jsx(B,{size:12})," Role"]}),e.jsx("span",{className:s.aiProfileDetailStatValue,children:l.primaryProfile.role||"Not set"})]}),e.jsxs("div",{className:s.aiProfileDetailStat,children:[e.jsxs("span",{className:s.aiProfileDetailStatLabel,children:[e.jsx(H,{size:12})," Provider"]}),e.jsx("span",{className:s.aiProfileDetailStatValue,children:[l.primaryProfile.provider,l.primaryProfile.model].filter(Boolean).join(" · ")||"Not set"})]}),e.jsxs("div",{className:s.aiProfileDetailStat,children:[e.jsxs("span",{className:s.aiProfileDetailStatLabel,children:[e.jsx(D,{size:12})," Last active"]}),e.jsx("span",{className:s.aiProfileDetailStatValue,children:u(l.primaryProfile.lastActiveAt)})]}),e.jsxs("div",{className:s.aiProfileDetailStat,children:[e.jsxs("span",{className:s.aiProfileDetailStatLabel,children:[e.jsx(D,{size:12})," Updated"]}),e.jsx("span",{className:s.aiProfileDetailStatValue,children:u(l.primaryProfile.updatedAt)})]})]}),e.jsxs("div",{className:s.aiProfileInstanceSection,children:[e.jsxs("div",{className:s.aiProfileInstanceSectionHeader,children:[e.jsx("span",{children:"Profile instances"}),e.jsx("span",{className:s.settingsHint,children:"Choose a keeper here if duplicates need to be merged."})]}),e.jsx("div",{className:s.aiProfileInstanceList,children:l.profiles.map(r=>e.jsxs("div",{className:s.aiProfileInstanceCard,children:[e.jsxs("div",{className:s.aiProfileInstanceTopRow,children:[e.jsxs("div",{children:[e.jsxs("div",{className:s.aiProfileInstanceName,children:["@",r.username]}),e.jsx("div",{className:s.aiProfileIdChip,children:r.id})]}),l.profiles.length>1&&c?.keepId===r.id&&e.jsx("span",{className:s.aiProfileKeepBadge,children:"Keeping"})]}),e.jsxs("div",{className:s.aiProfileInstanceMeta,children:[e.jsxs("span",{children:["Created ",u(r.createdAt)]}),e.jsxs("span",{children:["Updated ",u(r.updatedAt)]})]}),l.profiles.length>1&&c?.keepId!==r.id&&e.jsx("button",{className:s.secondaryHeaderBtn,title:"Keep this profile, merge others into it",onClick:()=>{const a=l.profiles.find(t=>t.id!==r.id)?.id;a&&P({keepId:r.id,mergeId:a})},children:"Keep this"})]},r.id))}),c&&l.profiles.some(r=>r.id===c.keepId)&&e.jsxs("div",{className:s.aiProfileMergeActions,children:[e.jsx("button",{className:s.dangerBtn,onClick:()=>{b(c.keepId,c.mergeId)},children:"Merge duplicates"}),e.jsx("button",{className:s.secondaryHeaderBtn,onClick:()=>P(null),children:"Cancel"})]})]})]})})]}),p&&e.jsxs("div",{className:`${p.type==="success"?s.successMessage:s.errorMessage} ${s.marginTop12}`,children:[p.type==="success"?e.jsx(R,{size:14}):e.jsx(I,{size:14}),p.message]})]})})})})}export{F as AgentsModule};