@taskforcehq/taskforce 0.3.305 → 0.3.307

package/dist/core/Taskforce.d.ts

@@ -3,10 +3,22 @@ import { WorkspaceAssetStore } from '../storage/workspaceAssetStore.js';
 import { type SyncEventInput } from './SyncReconciliationService.js';
 import { type FirstClassTaxonomyDisplayLabels, type WorkspaceTaxonomyState } from '../shared/taxonomyState.js';
 import { type AiProfileSurfaceType } from '../shared/aiProfileSurfaceType.js';
+import { type AiProfileSeatScope } from '../shared/aiProfileSeatScope.js';
+import type { PlanningBootstrapPayload } from '../types.js';
 import type { TaskActor } from '../shared/taskActor.js';
 export type { TaskActor } from '../shared/taskActor.js';
 export type { WorkspaceDeletedAssetRecord, WorkspaceDeleteSummary } from './types.js';
-import type { GlobalTaskforceSettings, UserGlobalSyncSettings, WorkspaceDeleteSummary } from './types.js';
+import type { GlobalTaskforceSettings, UserGlobalSyncSettings, WorkspaceDeleteSummary, UserAuthProvider } from './types.js';
+export interface PlanningBootstrapDiagnostics {
+    initiativeCount?: number;
+    workstreamCount?: number;
+    workstreamLinkedTaskCount?: number;
+    workstreamTaskSummaryCount?: number;
+    initiativeLoadMs?: number;
+    workstreamLoadMs?: number;
+    taskSummaryQueryMs?: number;
+    taskSummaryBuildMs?: number;
+}
 import type { AnnotatedAttachmentAnnotation, AnnotatedAttachmentPayload, AnnotatedAttachmentSession, AnnotatedAttachmentSessionRecord } from '../annotatedAttachments/types.js';
 import type { DocumentReviewAnchor, DocumentReviewCommentSyncRecord, DocumentReviewSession, DocumentReviewSessionRecord, DocumentReviewSessionStatus } from '../documentReviews/types.js';
 import { type TaskforceTheme } from '../utils/theme.js';
@@ -32,10 +44,25 @@ export interface TaskEventDetails {
     changes?: Record<string, TaskEventChange>;
     [key: string]: unknown;
 }
+export type ActivityEntityType = 'task' | 'initiative' | 'workstream';
+interface BaseEntityEvent {
+    id: string;
+    workspaceId: string;
+    entityType: ActivityEntityType;
+    entityId: string;
+    action: string;
+    actor: string;
+    actorType: 'human' | 'ai' | 'system';
+    createdAt: string;
+    details?: TaskEventDetails;
+    actorProfile?: TaskActor | null;
+}
 export interface TaskEvent {
     id: string;
     taskId: string;
     workspaceId: string;
+    entityType?: 'task';
+    entityId?: string;
     action: string;
     actor: string;
     actorType: 'human' | 'ai' | 'system';
@@ -43,6 +70,11 @@ export interface TaskEvent {
     details?: TaskEventDetails;
     actorProfile?: TaskActor | null;
 }
+export interface PlanningEntityEvent extends BaseEntityEvent {
+    entityType: 'initiative' | 'workstream';
+    entityId: string;
+}
+export type EntityEvent = TaskEvent | PlanningEntityEvent;
 export interface CommentActivityItem {
     id: string;
     type: 'comment';
@@ -56,6 +88,13 @@ export interface AuditActivityItem {
     event: TaskEvent;
 }
 export type TaskActivityItem = CommentActivityItem | AuditActivityItem;
+export interface EntityAuditActivityItem {
+    id: string;
+    type: 'event';
+    timestamp: string;
+    event: EntityEvent;
+}
+export type EntityActivityItem = CommentActivityItem | EntityAuditActivityItem;
 export type DeletedTaskSource = 'ui' | 'mcp' | 'sync' | 'workspace-delete' | 'system';
 export interface DeletedTaskDetails {
     reason?: string | null;
@@ -98,12 +137,7 @@ export interface TaskItem {
     comments?: Comment[];
     activity?: TaskActivityItem[];
     taskEvents?: TaskEvent[];
-    attachments?: Array<string | {
-        path: string;
-        fsPath?: string;
-        caption?: string;
-        timestamp?: string;
-    }>;
+    attachments?: AttachmentItem[];
     /** @deprecated Use status='done'. Safe to remove after v0.4.x migration gate. */
     completed?: boolean;
     /** @deprecated Use status='cancelled'. Safe to remove after v0.4.x migration gate. */
@@ -122,6 +156,18 @@ export interface TaskItem {
     workstreamId?: string | null;
     checklistItems?: ChecklistItem[];
 }
+export type AttachmentItem = string | {
+    path: string;
+    fsPath?: string;
+    caption?: string;
+    displayName?: string;
+    originalFilename?: string;
+    timestamp?: string;
+    assetId?: string | null;
+    referenceNumber?: number | null;
+    referenceLabel?: string | null;
+    taskId?: string | null;
+};
 export interface InitiativeItem {
     id: string;
     referenceNumber?: number | null;
@@ -130,12 +176,9 @@ export interface InitiativeItem {
     description: string | null;
     ownerId?: string | null;
     comments?: Comment[];
-    attachments?: Array<string | {
-        path: string;
-        fsPath?: string;
-        caption?: string;
-        timestamp?: string;
-    }>;
+    activity?: EntityActivityItem[];
+    entityEvents?: PlanningEntityEvent[];
+    attachments?: AttachmentItem[];
     createdAt: string;
     updatedAt?: string;
     order?: number | null;
@@ -150,12 +193,9 @@ export interface WorkstreamItem {
     description: string | null;
     ownerId?: string | null;
     comments?: Comment[];
-    attachments?: Array<string | {
-        path: string;
-        fsPath?: string;
-        caption?: string;
-        timestamp?: string;
-    }>;
+    activity?: EntityActivityItem[];
+    entityEvents?: PlanningEntityEvent[];
+    attachments?: AttachmentItem[];
     createdAt: string;
     updatedAt?: string;
     order?: number | null;
@@ -350,6 +390,8 @@ interface UserAccessRecord {
     role: AccessRole;
     permissionMode: PermissionMode;
     disabled: boolean;
+    accountDisabled?: boolean;
+    workspaceDisabled?: boolean;
     betaAccess: boolean;
 }
 interface UserIdentityRecord {
@@ -374,10 +416,26 @@ interface UserAvatarUploadDraftRecord {
     createdAt: string;
     updatedAt: string;
 }
+interface TaskAttachmentUploadDraftRecord {
+    draftId: string;
+    workspaceId: string;
+    taskId: string;
+    actorRef: string;
+    storageKey: string;
+    mimeType: string;
+    originalFilename: string;
+    sizeBytes: number;
+    storageProvider: 'local' | 'r2' | 'external';
+    consumedAt?: string | null;
+    discardedAt?: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
 interface WorkspaceUserRecord {
     userId: string;
     email: string;
     displayName?: string | null;
+    avatarUrl?: string | null;
     role: AccessRole;
     permissionMode: PermissionMode;
     betaAccess: boolean;
@@ -395,12 +453,22 @@ export interface AiProfileRecord {
     username: string;
     icon: string;
     color: string;
+    avatarUrl?: string | null;
+    avatarSourceUrl?: string | null;
+    avatarRevision?: number;
+    avatarUpdatedAt?: string | null;
     description?: string | null;
     role?: string | null;
     provider?: string | null;
     model?: string | null;
     surfaceType?: AiProfileSurfaceType | null;
+    seatScope?: AiProfileSeatScope | null;
     providerMetadata?: Record<string, unknown> | null;
+    archivedAt?: string | null;
+    archivedBy?: string | null;
+    archivedReason?: string | null;
+    mergedIntoProfileId?: string | null;
+    rosterStateUpdatedAt?: string | null;
     createdAt: string;
     updatedAt: string;
     lastActiveAt?: string | null;
@@ -418,6 +486,9 @@ export interface ResolveAiProfileInput {
     profileToken?: string | null;
     providerMetadata?: Record<string, unknown> | null;
 }
+export interface ResolveAiProfileOptions {
+    trustedSeatScope?: AiProfileSeatScope | null;
+}
 export interface ResolveAiProfileResult {
     created: boolean;
     profile: AiProfileRecord;
@@ -563,6 +634,7 @@ export interface PlanVersionSnapshot {
 export interface PlanCatalogSnapshot {
     planId: string;
     displayName: string;
+    description: string | null;
     status: 'active' | 'archived';
     createdAt: string;
     updatedAt: string;
@@ -594,6 +666,7 @@ interface PasswordAuthResult {
         userId: string;
         workspaceId: string;
         role: AccessRole;
+        identityId?: string;
     };
     code?: 'INVALID_CREDENTIALS' | 'EMAIL_NOT_VERIFIED';
 }
@@ -686,6 +759,9 @@ export interface McpOAuthAccessTokenAuthResult {
     provider: McpOAuthProvider;
     scopes: McpAccessTokenScope[];
     status: McpOAuthGrantStatus;
+    aiProfileId?: string | null;
+    aiProfileToken?: string | null;
+    aiProfileName?: string | null;
 }
 /**
  * Subset of TaskforceCore methods required by the sync route.
@@ -733,7 +809,9 @@ export interface TaskforceSyncCapable {
     };
     listInitiatives(workspaceId?: string): InitiativeItem[];
     listWorkstreams(workspaceId?: string): WorkstreamItem[];
-    listAiProfiles(workspaceId: string): AiProfileRecord[];
+    listAiProfiles(workspaceId: string, options?: {
+        includeArchived?: boolean;
+    }): AiProfileRecord[];
     listWorkspaceUsers(workspaceId: string): WorkspaceUserRecord[];
     listDocumentReviewSessionsForSync(input: {
         workspaceId?: string | null;
@@ -750,6 +828,21 @@ export interface TaskforceSyncCapable {
     listTaskEventsForSync(input: {
         workspaceId?: string | null;
     }): TaskEvent[];
+    getTaskEventForSync(input: {
+        workspaceId?: string | null;
+        taskId: string;
+        eventId: string;
+    }): TaskEvent | null;
+    taskExistsForSync(id: string, workspaceId?: string | null): boolean;
+    listEntityEventsForSync(input: {
+        workspaceId?: string | null;
+    }): EntityEvent[];
+    getEntityEventForSync(input: {
+        workspaceId?: string | null;
+        eventId: string;
+    }): EntityEvent | null;
+    initiativeExistsForSync(id: string, workspaceId?: string | null): boolean;
+    workstreamExistsForSync(id: string, workspaceId?: string | null): boolean;
     upsertAiProfileForSync(profile: AiProfileRecord): AiProfileRecord;
     replaceWorkspaceUsersForSync(input: {
         workspaceId: string;
@@ -761,6 +854,7 @@ export interface TaskforceSyncCapable {
     upsertDocumentReviewCommentForSync(comment: DocumentReviewCommentSyncRecord): DocumentReviewCommentSyncRecord;
     upsertAnnotatedAttachmentSessionForSync(session: AnnotatedAttachmentSessionRecord): AnnotatedAttachmentSessionRecord;
     upsertTaskEventForSync(event: TaskEvent): TaskEvent;
+    upsertEntityEventForSync(event: EntityEvent): EntityEvent;
     deleteDocumentReviewSessionForSync(input: {
         workspaceId?: string | null;
         sessionId: string;
@@ -781,6 +875,23 @@ export interface TaskforceSyncCapable {
         keepId: string;
         mergeId: string;
     }): AiProfileRecord;
+    archiveAiProfile(input: {
+        workspaceId: string;
+        profileId: string;
+        archivedBy?: string | null;
+        reason?: string | null;
+    }): AiProfileRecord;
+    updateAiProfileAvatar(input: {
+        workspaceId: string;
+        profileId: string;
+        avatarUrl?: string | null;
+        avatarSourceUrl?: string | null;
+    }): AiProfileRecord;
+    updateAiProfileSurfaceType(input: {
+        workspaceId: string;
+        profileId: string;
+        surfaceType?: AiProfileSurfaceType | null;
+    }): AiProfileRecord;
     resolveWorkspaceActor(workspaceId: string, actorRef: unknown): TaskActor | null;
 }
 export declare class TaskforceCore implements TaskforceSyncCapable {
@@ -798,6 +909,7 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     private db;
     private globalSettingsDb;
     private authTokenService;
+    private identityService;
     private mcpTokenService;
     private planEntitlementService;
     private realtimeMutationListeners;
@@ -813,6 +925,7 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     private isGenericAiActorReference;
     private isKnownAiModelName;
     private isHumanActorReference;
+    private isStableActorReference;
     private normalizeAiProfileName;
     private normalizeAiProfileUsername;
     private normalizeAiProfileIcon;
@@ -823,6 +936,9 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     private workspaceUserToActor;
     private aiProfileRowToRecord;
     private aiProfileToActor;
+    private resolveCanonicalAiProfileId;
+    private findCanonicalAiProfileIdsByAlias;
+    private resolveUniqueAiProfileActorByAlias;
     private canonicalizeActorReference;
     private normalizeCreatedBy;
     private normalizeCommentAuthor;
@@ -831,9 +947,13 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     private normalizePlanningAttachments;
     private replaceTaskComments;
     private normalizeTaskEventActor;
+    private listEntityEventsInternal;
     private listTaskEventsInternal;
+    private buildEntityActivity;
     private buildTaskActivity;
+    private addEntityEvent;
     private addTaskEvent;
+    private replaceEntityEvents;
     private replaceTaskEvents;
     private mapDeletedTaskRow;
     private pruneDeletedTasks;
@@ -874,6 +994,9 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     private initiativeExists;
     private workstreamExists;
     private valueEqualsForBulkUpdate;
+    private buildPlanningEntityEventChanges;
+    private getPlanningEntityEventAction;
+    private addWorkstreamTaskMembershipEvents;
     private assertWorkstreamLinkAllowed;
     private assertInitiativeLinkAllowed;
     constructor(config: TaskforceConfig);
@@ -935,6 +1058,7 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     };
     private ensureDirectories;
     private migrateLegacyGlobalSettingsDbIfNeeded;
+    private supportsWorkspaceAssetLinkTargetType;
     private initializeSchema;
     private performMigrationIfNeeded;
     private backfillMcpAuditLogMetadataColumns;
@@ -942,6 +1066,7 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     private migrateUserBetaAccessBackfillIfNeeded;
     private migrateDuplicateAiProfilesIfNeeded;
     private migrateLegacyActorReferencesIfNeeded;
+    private migrateLegacyCommentActorReferencesIfNeeded;
     private getWorkspaceOwnerUserId;
     getWorkspacePlanMode(workspaceId: string): 'personal' | 'team';
     setWorkspacePlanMode(workspaceId: string, mode: 'personal' | 'team', source?: string): 'personal' | 'team';
@@ -992,9 +1117,10 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     getEffectiveTheme(workspaceId?: string, userId?: string): TaskforceTheme;
     hasProjectJsonBackupOverride(workspaceId?: string, userId?: string): boolean;
     getOnboardingPolicy(): import("./types.js").OnboardingPolicy;
+    listOnboardingPlanOptions(): import("./types.js").OnboardingPlanOption[];
     validateOnboardingPolicy(input?: {
         mode?: 'require_plan_selection' | 'auto_grant_free' | 'auto_start_trial';
-        planVersionId?: string | null;
+        planId?: string | null;
     }): import("./types.js").OnboardingPolicyValidationResult;
     updateGlobalSettings(settings: GlobalTaskforceSettings): void;
     private sanitizeUserGlobalSyncSettings;
@@ -1020,6 +1146,7 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     getJsonBackupEnabled(workspaceId?: string, userId?: string): boolean;
     private listCanonicalTaskAttachments;
     private syncCanonicalTaskAttachmentLinks;
+    private syncCanonicalPlanningAttachmentLinks;
     private rowToTask;
     private rowToInitiative;
     private rowToWorkstream;
@@ -1031,16 +1158,44 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     resolveTaskIdentifier(value: string, workspaceId?: string): TaskItem | null;
     getInitiative(id: string, workspaceId?: string): InitiativeItem | null;
     listInitiatives(workspaceId?: string): InitiativeItem[];
-    createInitiative(input: Partial<InitiativeItem>, workspaceId?: string): InitiativeItem;
-    updateInitiative(id: string, patch: Partial<InitiativeItem>, workspaceId?: string): InitiativeItem;
-    archiveInitiative(id: string, workspaceId?: string): InitiativeItem;
-    unarchiveInitiative(id: string, workspaceId?: string): InitiativeItem;
+    private isTransientPlanningHydrationError;
+    private getInitiativeForWriteResult;
+    private getWorkstreamForWriteResult;
+    createInitiative(input: Partial<InitiativeItem>, workspaceId?: string, options?: {
+        actorRef?: string;
+        skipEntityEvents?: boolean;
+    }): InitiativeItem;
+    updateInitiative(id: string, patch: Partial<InitiativeItem>, workspaceId?: string, options?: {
+        actorRef?: string;
+        skipEntityEvents?: boolean;
+    }): InitiativeItem;
+    archiveInitiative(id: string, workspaceId?: string, options?: {
+        actorRef?: string;
+        skipEntityEvents?: boolean;
+    }): InitiativeItem;
+    unarchiveInitiative(id: string, workspaceId?: string, options?: {
+        actorRef?: string;
+        skipEntityEvents?: boolean;
+    }): InitiativeItem;
     getWorkstream(id: string, workspaceId?: string): WorkstreamItem | null;
     listWorkstreams(workspaceId?: string): WorkstreamItem[];
-    createWorkstream(input: Partial<WorkstreamItem>, workspaceId?: string): WorkstreamItem;
-    updateWorkstream(id: string, patch: Partial<WorkstreamItem>, workspaceId?: string): WorkstreamItem;
-    archiveWorkstream(id: string, workspaceId?: string): WorkstreamItem;
-    unarchiveWorkstream(id: string, workspaceId?: string): WorkstreamItem;
+    listPlanningBootstrap(workspaceId?: string, diagnostics?: PlanningBootstrapDiagnostics): PlanningBootstrapPayload;
+    createWorkstream(input: Partial<WorkstreamItem>, workspaceId?: string, options?: {
+        actorRef?: string;
+        skipEntityEvents?: boolean;
+    }): WorkstreamItem;
+    updateWorkstream(id: string, patch: Partial<WorkstreamItem>, workspaceId?: string, options?: {
+        actorRef?: string;
+        skipEntityEvents?: boolean;
+    }): WorkstreamItem;
+    archiveWorkstream(id: string, workspaceId?: string, options?: {
+        actorRef?: string;
+        skipEntityEvents?: boolean;
+    }): WorkstreamItem;
+    unarchiveWorkstream(id: string, workspaceId?: string, options?: {
+        actorRef?: string;
+        skipEntityEvents?: boolean;
+    }): WorkstreamItem;
     upsertInitiativeForSync(initiative: InitiativeItem, workspaceId?: string | null): InitiativeItem;
     upsertWorkstreamForSync(workstream: WorkstreamItem, workspaceId?: string | null): WorkstreamItem;
     listChecklistItems(taskId: string, workspaceId?: string): ChecklistItem[];
@@ -1112,6 +1267,24 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     private getSyncReconciliationServiceDeps;
     private getWorkspaceLifecycleServiceDeps;
     listTasks(workspaceId?: string): TaskFile;
+    /**
+     * Filter-pushdown listing used by read-only surfaces that don't need the
+     * full task graph (MCP list_tasks, CLI summaries). Avoids the per-task
+     * comments/events/attachments/checklist subqueries and actor resolution
+     * that rowToTask performs, and applies filters + sort + limit at the SQL
+     * layer so hot polls don't load the entire workspace.
+     */
+    listTasksSlim(workspaceId: string | undefined, filters?: {
+        category?: string;
+        status?: TaskStatus;
+        openOnly?: boolean;
+        assignee?: string;
+        priority?: number;
+        type?: string;
+        sort?: 'created' | 'priority' | 'updated';
+        order?: 'asc' | 'desc';
+        limit?: number;
+    }): Array<Record<string, unknown>>;
     getDataVersion(): number;
     getDatabaseProvider(): DatabaseProvider;
     isDatabaseHealthy(): boolean;
@@ -1165,11 +1338,33 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     markUserAvatarUploadDraftConsumed(userId: string, draftId: string): UserAvatarUploadDraftRecord | null;
     discardUserAvatarUploadDraft(userId: string, draftId: string): UserAvatarUploadDraftRecord | null;
     cleanupStaleUserAvatarUploadDrafts(userId: string, olderThanIso: string): UserAvatarUploadDraftRecord[];
+    createTaskAttachmentUploadDraft(input: {
+        draftId: string;
+        workspaceId: string;
+        taskId: string;
+        actorRef: string;
+        storageKey: string;
+        mimeType: string;
+        originalFilename: string;
+        sizeBytes: number;
+        storageProvider?: 'local' | 'r2' | 'external';
+    }): TaskAttachmentUploadDraftRecord;
+    getTaskAttachmentUploadDraft(draftId: string): TaskAttachmentUploadDraftRecord | null;
+    markTaskAttachmentUploadDraftConsumed(draftId: string): TaskAttachmentUploadDraftRecord | null;
+    discardTaskAttachmentUploadDraft(draftId: string): TaskAttachmentUploadDraftRecord | null;
     getSystemRole(userId: string): SystemRole;
     getUserBetaAccess(userId: string): boolean;
     countSystemAdmins(): number;
     hasAnySystemAdmin(): boolean;
-    listSystemUsers(): SystemUserRecord[];
+    countSystemUsers(input?: {
+        query?: string | null;
+    }): number;
+    listSystemUsers(input?: {
+        query?: string | null;
+        sort?: 'newest' | 'oldest' | null;
+        limit?: number | null;
+        offset?: number | null;
+    }): SystemUserRecord[];
     setSystemRole(userId: string, role: SystemRole): boolean;
     setUserDisabledGlobal(userId: string, disabled: boolean): boolean;
     setUserBetaAccessGlobal(userId: string, enabled: boolean): boolean;
@@ -1185,10 +1380,17 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
         users: WorkspaceUserRecord[];
         pruneMissing?: boolean;
     }): WorkspaceUserRecord[];
-    listAiProfiles(workspaceId: string): AiProfileRecord[];
+    listAiProfiles(workspaceId: string, options?: {
+        includeArchived?: boolean;
+        diagnostics?: {
+            metadataBackfillCount?: number;
+        };
+    }): AiProfileRecord[];
     getAiProfileByToken(input: {
         workspaceId: string;
         profileToken: string;
+        includeArchived?: boolean;
+        seatScope?: AiProfileSeatScope | null;
     }): AiProfileRecord | null;
     upsertAiProfileForSync(profile: AiProfileRecord): AiProfileRecord;
     mergeAiProfiles(input: {
@@ -1196,7 +1398,24 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
         keepId: string;
         mergeId: string;
     }): AiProfileRecord;
-    resolveAiProfile(input: ResolveAiProfileInput): ResolveAiProfileResult;
+    archiveAiProfile(input: {
+        workspaceId: string;
+        profileId: string;
+        archivedBy?: string | null;
+        reason?: string | null;
+    }): AiProfileRecord;
+    updateAiProfileAvatar(input: {
+        workspaceId: string;
+        profileId: string;
+        avatarUrl?: string | null;
+        avatarSourceUrl?: string | null;
+    }): AiProfileRecord;
+    updateAiProfileSurfaceType(input: {
+        workspaceId: string;
+        profileId: string;
+        surfaceType?: AiProfileSurfaceType | null;
+    }): AiProfileRecord;
+    resolveAiProfile(input: ResolveAiProfileInput, options?: ResolveAiProfileOptions): ResolveAiProfileResult;
     listAnnotatedAttachmentSessions(input: {
         workspaceId?: string | null;
         taskId?: string | null;
@@ -1271,6 +1490,7 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     upsertDocumentReviewCommentForSync(comment: DocumentReviewCommentSyncRecord): DocumentReviewCommentSyncRecord;
     upsertAnnotatedAttachmentSessionForSync(session: AnnotatedAttachmentSessionRecord): AnnotatedAttachmentSessionRecord;
     upsertTaskEventForSync(event: TaskEvent): TaskEvent;
+    upsertEntityEventForSync(event: EntityEvent): EntityEvent;
     deleteDocumentReviewSessionForSync(input: {
         workspaceId?: string | null;
         sessionId: string;
@@ -1385,6 +1605,7 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     upsertPlanCatalog(input: {
         planId: string;
         displayName: string;
+        description?: string | null;
         status?: 'active' | 'archived';
         initialMode?: 'personal' | 'team';
         initialSeatLimit?: number | null;
@@ -1392,10 +1613,17 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     }): {
         planId: string;
         displayName: string;
+        description: string | null;
         status: "active" | "archived";
     };
     listPlanCatalog(): import("./types.js").PlanCatalogSnapshot[];
     listPlanFeatureCatalog(): import("./types.js").PlanFeatureCatalogItem[];
+    updatePlanFeatureCatalogMarketingCopy(input: {
+        featureKey: string;
+        publicLabel?: string | null;
+        publicDescription?: string | null;
+        publicDisplayOrder?: number | null;
+    }): import("./types.js").PlanFeatureCatalogItem;
     listPlanVersions(planId: string): import("./types.js").PlanVersionSnapshot[];
     getPlanVersionFeatures(planId: string, versionId: string): import("./types.js").PlanVersionSnapshot;
     searchAccountsByEmail(query: string, limit?: number): {
@@ -1516,6 +1744,99 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
         checkoutPending: boolean;
         commercialState: EntitlementState;
     };
+    /**
+     * Creates an OAuth state record and returns the state token + PKCE materials.
+     * Delegates to AuthIdentityService.createOAuthState.
+     */
+    createOAuthLoginState(input: {
+        provider: string;
+        flowMode: string;
+        userId?: string | null;
+        inviteToken?: string | null;
+        returnTo?: string | null;
+        createdIp?: string | null;
+    }): {
+        state: string;
+        codeVerifier: string;
+        codeChallenge: string;
+        nonce: string;
+    };
+    /**
+     * Atomically consumes an OAuth state token and returns the row.
+     * Returns null if invalid, expired, or already consumed.
+     */
+    consumeOAuthLoginState(state: string): import('./AuthIdentityService.js').OAuthStateRecord | null;
+    /**
+     * Finds the Taskforce user associated with a provider identity.
+     * Returns { userId, identityId } or null if not yet linked.
+     */
+    findUserByOAuthProvider(provider: UserAuthProvider, providerSubject: string): {
+        userId: string;
+        identityId: string;
+    } | null;
+    /**
+     * Links an OAuth provider identity to an existing user.
+     * Throws IDENTITY_ALREADY_EXISTS if the user already has an identity for this provider.
+     */
+    linkOAuthProviderToUser(input: {
+        userId: string;
+        provider: UserAuthProvider;
+        providerSubject: string;
+        providerEmail?: string | null;
+        providerEmailVerified?: boolean | null;
+        displayNameSnapshot?: string | null;
+        avatarUrlSnapshot?: string | null;
+    }): string;
+    /**
+     * Lists all active login identities for a user.
+     * Used by the Account Hub "Login methods" section.
+     */
+    listLoginMethodsForUser(userId: string): import('./types.js').UserAuthIdentity[];
+    /**
+     * Unlinks a provider identity from a user.
+     * Throws LAST_IDENTITY_REQUIRED if it would be the last active method.
+     */
+    unlinkLoginMethod(userId: string, provider: UserAuthProvider): boolean;
+    /**
+     * Adds or replaces a password identity for a user that signed up via OAuth.
+     * Uses upsert semantics (safe to call on accounts that already have a password).
+     */
+    addPasswordToAccount(userId: string, password: string): string;
+    /**
+     * Registers a new user account via an OAuth provider (no password).
+     *
+     * Creates the user row, applies commercial onboarding, and links the
+     * provider identity — all in a single transaction.
+     *
+     * Returns the same shape as `registerPasswordUser` so callers can use
+     * the same session-issuance path.
+     */
+    registerOAuthUser(input: {
+        email: string | null;
+        emailVerified?: boolean;
+        provider: UserAuthProvider;
+        providerSubject: string;
+        displayName?: string | null;
+        avatarUrl?: string | null;
+        planVersionId?: string;
+        betaAccess?: boolean;
+    }): {
+        userId: string;
+        workspaceId: string | null;
+        role: AccessRole;
+        identityId: string;
+        planSelectionRequired: boolean;
+        checkoutPending: boolean;
+        commercialState: EntitlementState;
+    };
+    /**
+     * Looks up a user by email address (exact, case-insensitive).
+     * Returns { userId, email } or null.
+     */
+    findUserByEmail(email: string): {
+        userId: string;
+        email: string;
+    } | null;
     private createOneTimeAuthToken;
     private consumeOneTimeAuthToken;
     inspectOneTimeAuthToken(token: string, purpose: AuthTokenPurpose): AuthTokenInspection;
@@ -1540,6 +1861,11 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
         workspaceId: string;
         tokenId: string;
     }): McpAccessTokenRecord;
+    deleteMcpAccessToken(input: {
+        actorUserId: string;
+        workspaceId: string;
+        tokenId: string;
+    }): boolean;
     regenerateMcpAccessToken(input: {
         actorUserId: string;
         workspaceId: string;
@@ -1591,6 +1917,13 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
         grantId: string;
     }): McpOAuthConnectorGrantRecord;
     authenticateMcpOAuthAccessToken(token: string, workspaceId?: string): McpOAuthAccessTokenAuthResult | null;
+    bindMcpOAuthConnectorGrantAiProfile(input: {
+        grantId: string;
+        workspaceId: string;
+        profileId: string;
+        profileToken: string;
+        profileName: string;
+    }): boolean;
     recordMcpOAuthConnectorGrantUsage(input: {
         grantId: string;
         workspaceId: string;
@@ -1620,15 +1953,33 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     revokeInviteAcceptanceForUser(userId: string): {
         revoked: number;
     };
-    inspectInviteAcceptance(token: string): {
-        state: 'valid' | 'expired' | 'used' | 'missing' | 'revoked';
-        email?: string;
-        userId?: string;
-        workspaceId?: string;
-        inviteeKind?: 'existing_user' | 'new_user';
-        passwordRequired?: boolean;
-    };
+    inspectInviteAcceptance(token: string): import('./types.js').InviteAcceptanceDetails;
     private completeInviteWorkspaceActivation;
+    /**
+     * Claims an invite by linking an OAuth provider identity to the invited user.
+     *
+     * Used when an invited user with `inviteeState: 'pending_setup'` completes an
+     * OAuth flow with `flow_mode: 'invite_claim'`.  The invite token must still be
+     * valid and the user must have zero active identities (pending setup).
+     *
+     * Returns the same shape as `acceptInviteWithToken` so callers can issue a
+     * session cookie on the same path.
+     */
+    claimInviteWithOAuthProvider(input: {
+        token: string;
+        provider: UserAuthProvider;
+        providerSubject: string;
+        providerEmail?: string | null;
+        providerEmailVerified?: boolean | null;
+        displayNameSnapshot?: string | null;
+        avatarUrlSnapshot?: string | null;
+    }): {
+        userId: string;
+        email: string;
+        workspaceId: string;
+        role: AccessRole;
+        identityId: string;
+    };
     acceptInviteWithToken(input: {
         token: string;
         password: string;
@@ -1637,6 +1988,7 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
         email: string;
         workspaceId: string;
         role: AccessRole;
+        identityId: string;
     };
     joinInviteWithAuthenticatedUser(input: {
         token: string;
@@ -1671,9 +2023,32 @@ export declare class TaskforceCore implements TaskforceSyncCapable {
     updateWorkspaceUserRole(userId: string, workspaceId: string, role: AccessRole): boolean;
     getTask(id: string, workspaceId?: string): TaskItem | null;
     listTaskEvents(taskId: string, workspaceId?: string): TaskEvent[];
+    taskExistsForSync(id: string, workspaceId?: string | null): boolean;
+    initiativeExistsForSync(id: string, workspaceId?: string | null): boolean;
+    workstreamExistsForSync(id: string, workspaceId?: string | null): boolean;
+    recordTaskEvent(input: {
+        taskId: string;
+        workspaceId?: string | null;
+        action: string;
+        actor?: unknown;
+        createdAt?: string;
+        details?: TaskEventDetails;
+    }): void;
     listTaskEventsForSync(input: {
         workspaceId?: string | null;
     }): TaskEvent[];
+    getTaskEventForSync(input: {
+        workspaceId?: string | null;
+        taskId: string;
+        eventId: string;
+    }): TaskEvent | null;
+    listEntityEventsForSync(input: {
+        workspaceId?: string | null;
+    }): EntityEvent[];
+    getEntityEventForSync(input: {
+        workspaceId?: string | null;
+        eventId: string;
+    }): EntityEvent | null;
     getScheduleBoard(weekKey: string, showWeekends?: boolean, workspaceId?: string): ScheduleBoardResult;
     updateTaskSchedule(id: string, input: {
         scheduledDate: string | null;