@taskforcehq/taskforce 0.3.306 → 0.3.308

package/dist/mcp/taskAttachmentTypes.d.ts

@@ -6,7 +6,7 @@ export type TaskAttachmentRecord = {
     displayName?: string;
     originalFilename?: string;
     timestamp?: string;
-    assetId?: string;
+    assetId?: string | null;
     referenceNumber?: number | null;
     referenceLabel?: string | null;
     taskId?: string | null;

package/dist/mcp/taskPlanningRegistrar.js

@@ -87,6 +87,18 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
                 description: stringProperty('Optional initiative description.'),
                 ownerId: stringProperty(`${context.assigneeHint} Call list_assignees to inspect the current eligible IDs.`),
                 order: numberProperty('Optional sort order among initiatives.'),
+                attachments: arrayProperty('Optional attachment descriptors to store on the initiative. Prefer save_initiative_attachment for generated content or files.', {
+                    type: 'object',
+                    properties: {
+                        path: { type: 'string' },
+                        fsPath: { type: 'string' },
+                        caption: { type: 'string' },
+                        displayName: { type: 'string' },
+                        originalFilename: { type: 'string' },
+                        assetId: { type: 'string' },
+                    },
+                    required: ['path'],
+                }),
             },
             required: ['title'],
         },
@@ -100,6 +112,18 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
                 description: stringProperty('Updated initiative description.'),
                 ownerId: stringProperty(`${context.assigneeHint} Call list_assignees to inspect the current eligible IDs.`),
                 order: numberProperty('Optional sort order among initiatives.'),
+                attachments: arrayProperty('Replacement attachment descriptors for the initiative. Prefer save_initiative_attachment and delete_initiative_attachment for generated content or files.', {
+                    type: 'object',
+                    properties: {
+                        path: { type: 'string' },
+                        fsPath: { type: 'string' },
+                        caption: { type: 'string' },
+                        displayName: { type: 'string' },
+                        originalFilename: { type: 'string' },
+                        assetId: { type: 'string' },
+                    },
+                    required: ['path'],
+                }),
             },
             required: ['id'],
         },
@@ -144,6 +168,18 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
                 ownerId: stringProperty(`${context.assigneeHint} Call list_assignees to inspect the current eligible IDs.`),
                 initiativeId: stringProperty('Optional initiative ID or initiative reference such as IN-123.'),
                 order: numberProperty('Optional sort order among workstreams.'),
+                attachments: arrayProperty('Optional attachment descriptors to store on the workstream. Prefer save_workstream_attachment for generated content or files.', {
+                    type: 'object',
+                    properties: {
+                        path: { type: 'string' },
+                        fsPath: { type: 'string' },
+                        caption: { type: 'string' },
+                        displayName: { type: 'string' },
+                        originalFilename: { type: 'string' },
+                        assetId: { type: 'string' },
+                    },
+                    required: ['path'],
+                }),
             },
             required: ['title'],
         },
@@ -158,6 +194,18 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
                 ownerId: stringProperty(`${context.assigneeHint} Call list_assignees to inspect the current eligible IDs.`),
                 initiativeId: stringProperty('Optional initiative ID or initiative reference such as IN-123. Pass an empty string to unlink.'),
                 order: numberProperty('Optional sort order among workstreams.'),
+                attachments: arrayProperty('Replacement attachment descriptors for the workstream. Prefer save_workstream_attachment and delete_workstream_attachment for generated content or files.', {
+                    type: 'object',
+                    properties: {
+                        path: { type: 'string' },
+                        fsPath: { type: 'string' },
+                        caption: { type: 'string' },
+                        displayName: { type: 'string' },
+                        originalFilename: { type: 'string' },
+                        assetId: { type: 'string' },
+                    },
+                    required: ['path'],
+                }),
             },
             required: ['id'],
         },

package/dist/mcp/toolRegistry.d.ts

@@ -185,6 +185,62 @@ export declare const MCP_TOOL_REGISTRY: Readonly<{
         };
         readonly mutating: false;
     };
+    readonly get_workstream_attachments: {
+        readonly permission: {
+            readonly kind: "scope";
+            readonly scope: "tasks:read";
+        };
+        readonly mutating: false;
+    };
+    readonly read_workstream_attachment: {
+        readonly permission: {
+            readonly kind: "scope";
+            readonly scope: "tasks:read";
+        };
+        readonly mutating: false;
+    };
+    readonly save_workstream_attachment: {
+        readonly permission: {
+            readonly kind: "scope";
+            readonly scope: "tasks:write";
+        };
+        readonly mutating: true;
+    };
+    readonly delete_workstream_attachment: {
+        readonly permission: {
+            readonly kind: "scope";
+            readonly scope: "tasks:write";
+        };
+        readonly mutating: true;
+    };
+    readonly get_initiative_attachments: {
+        readonly permission: {
+            readonly kind: "scope";
+            readonly scope: "tasks:read";
+        };
+        readonly mutating: false;
+    };
+    readonly read_initiative_attachment: {
+        readonly permission: {
+            readonly kind: "scope";
+            readonly scope: "tasks:read";
+        };
+        readonly mutating: false;
+    };
+    readonly save_initiative_attachment: {
+        readonly permission: {
+            readonly kind: "scope";
+            readonly scope: "tasks:write";
+        };
+        readonly mutating: true;
+    };
+    readonly delete_initiative_attachment: {
+        readonly permission: {
+            readonly kind: "scope";
+            readonly scope: "tasks:write";
+        };
+        readonly mutating: true;
+    };
     readonly search_images: {
         readonly permission: {
             readonly kind: "scope";

package/dist/mcp/toolRegistry.js

@@ -26,6 +26,14 @@ export const MCP_TOOL_REGISTRY = Object.freeze({
     replace_task_checklist: { permission: { kind: 'scope', scope: 'tasks:write' }, mutating: true },
     get_task_attachments: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },
     read_task_attachment: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },
+    get_workstream_attachments: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },
+    read_workstream_attachment: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },
+    save_workstream_attachment: { permission: { kind: 'scope', scope: 'tasks:write' }, mutating: true },
+    delete_workstream_attachment: { permission: { kind: 'scope', scope: 'tasks:write' }, mutating: true },
+    get_initiative_attachments: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },
+    read_initiative_attachment: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },
+    save_initiative_attachment: { permission: { kind: 'scope', scope: 'tasks:write' }, mutating: true },
+    delete_initiative_attachment: { permission: { kind: 'scope', scope: 'tasks:write' }, mutating: true },
     search_images: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },
     get_image: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },
     search_documents: { permission: { kind: 'scope', scope: 'tasks:read' }, mutating: false },

package/dist/mcp/toolRegistry.test.js

@@ -11,6 +11,8 @@ describe('MCP tool registry', () => {
         expect(MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS.search_documents).toBe('tasks:read');
         expect(MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS.read_task_attachment).toBe('tasks:read');
         expect(MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS.get_task_attachments).toBe('tasks:read');
+        expect(MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS.read_workstream_attachment).toBe('tasks:read');
+        expect(MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS.get_initiative_attachments).toBe('tasks:read');
         expect(MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS.export_resources).toBeUndefined();
     });
     it('derives mutating tool names from the shared registry', () => {
@@ -20,6 +22,8 @@ describe('MCP tool registry', () => {
         expect(MCP_WRITE_TOOL_NAMES).toEqual(expected);
         expect(MCP_WRITE_TOOL_NAMES.has('read_task_attachment')).toBe(false);
         expect(MCP_WRITE_TOOL_NAMES.has('save_task_attachment')).toBe(true);
+        expect(MCP_WRITE_TOOL_NAMES.has('save_workstream_attachment')).toBe(true);
+        expect(MCP_WRITE_TOOL_NAMES.has('delete_initiative_attachment')).toBe(true);
         expect(MCP_WRITE_TOOL_NAMES.has('finish_task')).toBe(true);
         expect(MCP_WRITE_TOOL_NAMES.has('review_document')).toBe(true);
     });

package/dist/migrations/taskSchemaMigrations.js

@@ -198,6 +198,25 @@ export function ensureWorkspaceSchema(db) {
             FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE
         );
 
+        CREATE TABLE IF NOT EXISTS task_attachment_upload_drafts (
+            draft_id TEXT PRIMARY KEY,
+            tenant_id TEXT NOT NULL DEFAULT 'default',
+            workspace_id TEXT NOT NULL,
+            task_id TEXT NOT NULL,
+            actor_ref TEXT NOT NULL,
+            storage_key TEXT NOT NULL,
+            mime_type TEXT NOT NULL,
+            original_filename TEXT NOT NULL,
+            size_bytes INTEGER NOT NULL DEFAULT 0,
+            storage_provider TEXT NOT NULL DEFAULT 'local',
+            consumed_at TEXT,
+            discarded_at TEXT,
+            created_at TEXT NOT NULL,
+            updated_at TEXT NOT NULL,
+            FOREIGN KEY (task_id) REFERENCES tasks(id) ON DELETE CASCADE,
+            FOREIGN KEY (workspace_id) REFERENCES workspaces(id) ON DELETE CASCADE
+        );
+
         CREATE TABLE IF NOT EXISTS auth_tokens (
             id TEXT PRIMARY KEY,
             tenant_id TEXT NOT NULL DEFAULT 'default',
@@ -388,6 +407,8 @@ export function ensureWorkspaceSchema(db) {
         CREATE INDEX IF NOT EXISTS idx_auth_tokens_user_purpose ON auth_tokens(user_id, purpose);
         CREATE INDEX IF NOT EXISTS idx_auth_tokens_workspace_purpose ON auth_tokens(workspace_id, purpose);
         CREATE INDEX IF NOT EXISTS idx_auth_tokens_expires ON auth_tokens(expires_at);
+        CREATE INDEX IF NOT EXISTS idx_task_attachment_upload_drafts_workspace_task ON task_attachment_upload_drafts(workspace_id, task_id);
+        CREATE INDEX IF NOT EXISTS idx_task_attachment_upload_drafts_actor_created ON task_attachment_upload_drafts(actor_ref, created_at);
         CREATE UNIQUE INDEX IF NOT EXISTS idx_mcp_access_tokens_prefix ON mcp_access_tokens(token_prefix);
         CREATE INDEX IF NOT EXISTS idx_mcp_access_tokens_workspace_user ON mcp_access_tokens(workspace_id, user_id);
         CREATE INDEX IF NOT EXISTS idx_mcp_access_tokens_status ON mcp_access_tokens(status);
@@ -455,6 +476,7 @@ export function ensureBillingSchema(db) {
             tenant_id TEXT NOT NULL DEFAULT 'default',
             plan_version_id TEXT NOT NULL,
             billing_interval TEXT NOT NULL,
+            pricing_audience TEXT NOT NULL DEFAULT 'public',
             stripe_price_id TEXT NOT NULL,
             pricing_type TEXT NOT NULL DEFAULT 'stripe',
             active BOOLEAN NOT NULL DEFAULT TRUE,
@@ -462,7 +484,7 @@ export function ensureBillingSchema(db) {
             currency TEXT,
             created_at TEXT NOT NULL,
             updated_at TEXT NOT NULL,
-            PRIMARY KEY (tenant_id, plan_version_id, billing_interval, stripe_price_id)
+            PRIMARY KEY (tenant_id, plan_version_id, billing_interval, pricing_audience, stripe_price_id)
         );
 
         CREATE INDEX IF NOT EXISTS idx_user_billing_tenant ON user_billing(tenant_id);
@@ -480,6 +502,7 @@ export function ensureBillingSchema(db) {
     const hasUnitAmountColumn = columns.some((c) => c.name === 'unit_amount');
     const hasCurrencyColumn = columns.some((c) => c.name === 'currency');
     const hasPricingTypeColumn = columns.some((c) => c.name === 'pricing_type');
+    const hasPricingAudienceColumn = columns.some((c) => c.name === 'pricing_audience');
     if (!hasUnitAmountColumn) {
         db.exec(`ALTER TABLE billing_price_mappings ADD COLUMN unit_amount INTEGER`);
     }
@@ -489,30 +512,34 @@ export function ensureBillingSchema(db) {
     if (!hasPricingTypeColumn) {
         db.exec(`ALTER TABLE billing_price_mappings ADD COLUMN pricing_type TEXT NOT NULL DEFAULT 'stripe'`);
     }
+    if (!hasPricingAudienceColumn) {
+        db.exec(`ALTER TABLE billing_price_mappings ADD COLUMN pricing_audience TEXT NOT NULL DEFAULT 'public'`);
+    }
     ensureBillingPriceMappingsConstraints(db);
     normalizeUserBillingDefaults(db);
 }
 function ensureBillingPriceMappingsConstraints(db) {
     if (db.provider === 'postgres') {
         db.exec(`
+            ALTER TABLE billing_price_mappings ADD COLUMN IF NOT EXISTS pricing_audience TEXT NOT NULL DEFAULT 'public';
+            DROP INDEX IF EXISTS idx_billing_price_mappings_active_interval;
             ALTER TABLE billing_price_mappings DROP CONSTRAINT IF EXISTS billing_price_mappings_pkey;
             ALTER TABLE billing_price_mappings
             ADD CONSTRAINT billing_price_mappings_pkey
-            PRIMARY KEY (tenant_id, plan_version_id, billing_interval, stripe_price_id);
+            PRIMARY KEY (tenant_id, plan_version_id, billing_interval, pricing_audience, stripe_price_id);
             CREATE UNIQUE INDEX IF NOT EXISTS idx_billing_price_mappings_active_interval
-            ON billing_price_mappings(tenant_id, plan_version_id, billing_interval)
+            ON billing_price_mappings(tenant_id, plan_version_id, billing_interval, pricing_audience)
             WHERE active = TRUE;
         `);
         return;
     }
     const indexes = db.prepare(`PRAGMA index_list(billing_price_mappings)`).all();
     const tableInfo = db.prepare(`PRAGMA table_info(billing_price_mappings)`).all();
-    const hasActiveIntervalIndex = indexes.some((index) => index.name === 'idx_billing_price_mappings_active_interval');
     const primaryKeyColumns = tableInfo
         .filter((column) => Number(column.pk || 0) > 0)
         .sort((a, b) => Number(a.pk || 0) - Number(b.pk || 0))
         .map((column) => String(column.name || ''));
-    const needsPrimaryKeyRepair = primaryKeyColumns.join('|') !== 'tenant_id|plan_version_id|billing_interval|stripe_price_id';
+    const needsPrimaryKeyRepair = primaryKeyColumns.join('|') !== 'tenant_id|plan_version_id|billing_interval|pricing_audience|stripe_price_id';
     if (needsPrimaryKeyRepair) {
         db.exec(`
             ALTER TABLE billing_price_mappings RENAME TO billing_price_mappings_legacy;
@@ -521,6 +548,7 @@ function ensureBillingPriceMappingsConstraints(db) {
                 tenant_id TEXT NOT NULL DEFAULT 'default',
                 plan_version_id TEXT NOT NULL,
                 billing_interval TEXT NOT NULL,
+                pricing_audience TEXT NOT NULL DEFAULT 'public',
                 stripe_price_id TEXT NOT NULL,
                 pricing_type TEXT NOT NULL DEFAULT 'stripe',
                 active BOOLEAN NOT NULL DEFAULT TRUE,
@@ -528,26 +556,25 @@ function ensureBillingPriceMappingsConstraints(db) {
                 currency TEXT,
                 created_at TEXT NOT NULL,
                 updated_at TEXT NOT NULL,
-                PRIMARY KEY (tenant_id, plan_version_id, billing_interval, stripe_price_id)
+                PRIMARY KEY (tenant_id, plan_version_id, billing_interval, pricing_audience, stripe_price_id)
             );
 
             INSERT INTO billing_price_mappings (
-                tenant_id, plan_version_id, billing_interval, stripe_price_id, pricing_type, active, unit_amount, currency, created_at, updated_at
+                tenant_id, plan_version_id, billing_interval, pricing_audience, stripe_price_id, pricing_type, active, unit_amount, currency, created_at, updated_at
             )
             SELECT
-                tenant_id, plan_version_id, billing_interval, stripe_price_id, COALESCE(pricing_type, 'stripe'), active, unit_amount, currency, created_at, updated_at
+                tenant_id, plan_version_id, billing_interval, COALESCE(pricing_audience, 'public'), stripe_price_id, COALESCE(pricing_type, 'stripe'), active, unit_amount, currency, created_at, updated_at
             FROM billing_price_mappings_legacy;
 
             DROP TABLE billing_price_mappings_legacy;
         `);
     }
-    if (!hasActiveIntervalIndex) {
-        db.exec(`
-            CREATE UNIQUE INDEX IF NOT EXISTS idx_billing_price_mappings_active_interval
-            ON billing_price_mappings(tenant_id, plan_version_id, billing_interval)
-            WHERE active = 1;
-        `);
-    }
+    db.exec(`
+        DROP INDEX IF EXISTS idx_billing_price_mappings_active_interval;
+        CREATE UNIQUE INDEX IF NOT EXISTS idx_billing_price_mappings_active_interval
+        ON billing_price_mappings(tenant_id, plan_version_id, billing_interval, pricing_audience)
+        WHERE active = 1;
+    `);
 }
 function normalizeUserBillingDefaults(db) {
     if (db.provider === 'postgres') {
@@ -670,8 +697,12 @@ export function ensureEntitlementsSchema(db) {
         CREATE TABLE IF NOT EXISTS plan_feature_catalog_overrides (
             tenant_id TEXT NOT NULL DEFAULT 'default',
             feature_key TEXT NOT NULL,
+            label TEXT,
+            description TEXT,
+            is_custom INTEGER NOT NULL DEFAULT 0,
             public_label TEXT,
             public_description TEXT,
+            public_description_visible INTEGER,
             public_display_order INTEGER,
             created_at TEXT NOT NULL,
             updated_at TEXT NOT NULL,
@@ -733,6 +764,18 @@ export function ensureEntitlementsSchema(db) {
         db.exec(`ALTER TABLE plan_catalog ADD COLUMN description TEXT`);
     }
     const planFeatureCatalogOverrideColumns = db.prepare(`PRAGMA table_info(plan_feature_catalog_overrides)`).all();
+    if (!planFeatureCatalogOverrideColumns.some((column) => column.name === 'label')) {
+        db.exec(`ALTER TABLE plan_feature_catalog_overrides ADD COLUMN label TEXT`);
+    }
+    if (!planFeatureCatalogOverrideColumns.some((column) => column.name === 'description')) {
+        db.exec(`ALTER TABLE plan_feature_catalog_overrides ADD COLUMN description TEXT`);
+    }
+    if (!planFeatureCatalogOverrideColumns.some((column) => column.name === 'is_custom')) {
+        db.exec(`ALTER TABLE plan_feature_catalog_overrides ADD COLUMN is_custom INTEGER NOT NULL DEFAULT 0`);
+    }
+    if (!planFeatureCatalogOverrideColumns.some((column) => column.name === 'public_description_visible')) {
+        db.exec(`ALTER TABLE plan_feature_catalog_overrides ADD COLUMN public_description_visible INTEGER`);
+    }
     if (!planFeatureCatalogOverrideColumns.some((column) => column.name === 'public_display_order')) {
         db.exec(`ALTER TABLE plan_feature_catalog_overrides ADD COLUMN public_display_order INTEGER`);
     }

package/dist/server/aiProfileAvatarAssets.d.ts

@@ -0,0 +1,49 @@
+import type { TaskforceCore } from '../core/Taskforce.js';
+import type { ObjectStorageClient } from '../storage/objectStorageClient.js';
+import type { WorkspaceAssetStore } from '../storage/workspaceAssetStore.js';
+type AiAvatarSlot = 'display' | 'source';
+export interface AiProfileAvatarPayload {
+    buffer: Buffer;
+    mimeType: string;
+    originalName?: string | null;
+}
+export interface AiProfileAvatarAssetDeps {
+    core: TaskforceCore;
+    workspaceAssetStore: WorkspaceAssetStore | null;
+    getObjectStorageClient: () => ObjectStorageClient | null;
+    ensureWithinDir: (candidatePath: string, rootDir: string) => string | null;
+    markAssetDeleted: (pathValue: string) => unknown;
+    appendStorageTelemetry: (event: string, payload?: {
+        path?: string;
+        status?: string;
+        provider?: string;
+    }) => void;
+}
+export interface SaveAiProfileAvatarInput {
+    workspaceId: string;
+    profileId: string;
+    display: AiProfileAvatarPayload;
+    source?: AiProfileAvatarPayload | null;
+    actorId?: string | null;
+}
+export declare function buildAiProfileAvatarStorageKey(input: {
+    workspaceId: string;
+    profileId: string;
+    slot: AiAvatarSlot;
+    mimeType: string;
+}): string;
+export declare function storageKeyFromContextUrl(url: unknown): string | null;
+export declare function saveAiProfileAvatarAssets(deps: AiProfileAvatarAssetDeps, input: SaveAiProfileAvatarInput): Promise<{
+    profile: import("../core/Taskforce.js").AiProfileRecord;
+    displayAsset: import("../storage/workspaceAssetStore.js").WorkspaceAssetEntry;
+    sourceAsset: import("../storage/workspaceAssetStore.js").WorkspaceAssetEntry;
+    displayStorageKey: string;
+    sourceStorageKey: string;
+}>;
+export declare function clearAiProfileAvatarAssets(deps: AiProfileAvatarAssetDeps, input: {
+    workspaceId: string;
+    profileId: string;
+}): Promise<{
+    profile: import("../core/Taskforce.js").AiProfileRecord;
+}>;
+export {};