@taskforcehq/taskforce 0.3.305 → 0.3.307

package/dist/server/routes/annotatedAttachments.js

@@ -40,6 +40,57 @@ export function registerAnnotatedAttachmentRoutes(deps) {
         });
         return false;
     };
+    addRoute('GET', '/api/taskforce/annotated-attachments/images', async (req, res) => {
+        const workspaceId = requestWorkspaceId(req);
+        if (!ensureAnnotatedAttachmentAccess(req, res, workspaceId))
+            return;
+        try {
+            const assetStore = core.getWorkspaceAssetStore();
+            const imageAssets = assetStore
+                .listAllByWorkspace(workspaceId, { kind: 'image' })
+                .filter((entry) => !entry.deletedAt);
+            const images = imageAssets.map((asset) => {
+                const activeLinks = assetStore
+                    .listLinksForAsset(asset.assetId, workspaceId)
+                    .filter((entry) => !entry.deletedAt)
+                    .filter((entry) => entry.targetType !== 'task' || (!!entry.taskId && !!core.getTask(entry.taskId, workspaceId)));
+                const activeTaskLinks = activeLinks
+                    .filter((entry) => entry.targetType === 'task' && !!entry.taskId)
+                    .filter((entry) => !!core.getTask(entry.taskId, workspaceId));
+                const firstTaskLink = activeTaskLinks[0] || null;
+                const linkedTask = firstTaskLink?.taskId
+                    ? core.getTask(firstTaskLink.taskId, workspaceId)
+                    : null;
+                const sessions = core.listAnnotatedAttachmentSessions({
+                    workspaceId,
+                    imageAssetId: asset.assetId,
+                });
+                const displayName = String(asset.logicalName || asset.originalFilename || asset.assetId).trim() || asset.assetId;
+                return {
+                    assetId: asset.assetId,
+                    referenceNumber: typeof asset.referenceNumber === 'number' ? asset.referenceNumber : null,
+                    imageReferenceLabel: getImageReferenceLabel(asset) || null,
+                    path: `/api/taskforce/context/${encodeURIComponent(asset.storageKey)}`,
+                    displayName,
+                    originalFilename: asset.originalFilename || null,
+                    mimeType: asset.mimeType,
+                    sizeBytes: asset.sizeBytes,
+                    updatedAt: asset.updatedAt || null,
+                    attachmentCount: activeTaskLinks.length,
+                    sessionCount: sessions.length,
+                    taskId: firstTaskLink?.taskId || null,
+                    taskReferenceLabel: linkedTask?.referenceLabel || null,
+                };
+            });
+            res.setHeader('Cache-Control', 'no-store');
+            writeJson(res, 200, { images });
+        }
+        catch (error) {
+            writeJson(res, resolveErrorStatusCode(error, 400), {
+                error: String(error?.message || 'Failed to list annotated attachment images.'),
+            });
+        }
+    });
     addRoute('GET', '/api/taskforce/annotated-attachments/images/:reference', async (req, res, params) => {
         const workspaceId = requestWorkspaceId(req);
         if (!ensureAnnotatedAttachmentAccess(req, res, workspaceId))

package/dist/server/routes/auth.d.ts

@@ -6,9 +6,20 @@
  *
  * Routes registered here:
  *   GET  /api/taskforce/auth/runtime-config
+ *   GET  /api/taskforce/auth/providers
+ *   GET  /api/taskforce/auth/oauth/:provider/start
+ *   GET  /api/taskforce/auth/oauth/:provider/callback
+ *   POST /api/taskforce/auth/oauth/apple/callback
+ *   GET  /api/taskforce/account/login-methods
+ *   DELETE /api/taskforce/account/login-methods/:provider
+ *   POST /api/taskforce/account/login-methods/password
  *   GET  /api/taskforce/auth/session
  *   GET  /api/taskforce/auth/admin-session
  *   POST /api/taskforce/auth/profile
+ *   POST /api/taskforce/auth/profile/avatar/init
+ *   POST /api/taskforce/auth/profile/avatar/upload
+ *   POST /api/taskforce/auth/profile/avatar/finalize
+ *   POST /api/taskforce/auth/profile/avatar/discard
  *   POST /api/taskforce/auth/login
  *   POST /api/taskforce/auth/register
  *   POST /api/taskforce/auth/verify-email/request
@@ -26,6 +37,9 @@
  *   GET  /api/taskforce/account/plan-preview
  *   GET  /api/taskforce/auth/workspace-members
  *   GET  /api/taskforce/workspace/assignee-options
+ *   POST /api/taskforce/workspace/ai-profiles/avatar
+ *   POST /api/taskforce/workspace/ai-profiles/avatar/upload
+ *   POST /api/taskforce/workspace/ai-profiles/surface-type
  *   GET  /api/taskforce/admin/users
  *   POST /api/taskforce/admin/users/invite
  *   PATCH /api/taskforce/admin/users/:id/role
@@ -40,19 +54,21 @@ import type { TaskforceCore } from '../../core/Taskforce.js';
 import { type RouteHandler, type RouteContext } from './primitives.js';
 import type { ResolvedObjectStorageConfig } from '../../storage/objectStorage.js';
 import { ObjectStorageClient } from '../../storage/objectStorageClient.js';
+import type { WorkspaceAssetStore } from '../../storage/workspaceAssetStore.js';
 export interface AuthRouteDependencies {
     addRoute: (method: string, path: string, handler: RouteHandler) => void;
     core: TaskforceCore;
     context: RouteContext;
     requestWorkspaceId: (req: IncomingMessage) => string;
     requestUserId: (req: IncomingMessage) => string;
+    resolveAuthenticatedUserId: (req: IncomingMessage) => string;
     requestRole: (req: IncomingMessage) => string;
     ensureAppAccess: (req: IncomingMessage, res: ServerResponse) => boolean;
     ensureAuthenticatedUser: (req: IncomingMessage) => boolean;
-    ensureWorkspaceAdminRole: (req: IncomingMessage) => boolean;
+    ensureWorkspaceAdminRole: (req: IncomingMessage, workspaceIdOverride?: string | null) => boolean;
     ensureCloudPlanData: (req: IncomingMessage, res: ServerResponse) => boolean;
     requireCloudRuntime: (res: ServerResponse, feature: string) => boolean;
-    auditAuthAction: (req: IncomingMessage, action: string, details: Record<string, unknown>) => void;
+    auditAuthAction: (req: IncomingMessage, action: string, details: Record<string, unknown>, workspaceIdOverride?: string | null) => void;
     resolveAdminRequestActor: (req: IncomingMessage) => {
         authenticated: boolean;
         userId: string;
@@ -60,5 +76,13 @@ export interface AuthRouteDependencies {
     };
     resolveEffectiveObjectStorageConfig: () => ResolvedObjectStorageConfig;
     getObjectStorageClient: () => ObjectStorageClient | null;
+    workspaceAssetStore: WorkspaceAssetStore | null;
+    ensureWithinDir: (candidatePath: string, rootDir: string) => string | null;
+    markAssetDeleted: (pathValue: string) => unknown;
+    appendStorageTelemetry: (event: string, payload?: {
+        path?: string;
+        status?: string;
+        provider?: string;
+    }) => void;
 }
 export declare function registerAuthRoutes(deps: AuthRouteDependencies): void;