@taskforcehq/taskforce 0.3.309 → 0.3.313

package/dist/server/buildInfo.test.js

@@ -1,29 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { resolveBuildInfo } from './buildInfo.js';
-describe('resolveBuildInfo', () => {
-    it('uses explicit TASKFORCE_BUILD_VERSION without appending metadata', () => {
-        const info = resolveBuildInfo({
-            TASKFORCE_BUILD_VERSION: '1.2.3-custom',
-            TASKFORCE_BUILD_DEPLOY_ID: 'railway-9999',
-            TASKFORCE_BUILD_GIT_SHA: 'abcdef1234567890',
-            TASKFORCE_BUILD_TIME: '2026-02-20T12:34:56Z',
-            npm_package_version: '0.3.13-beta.2'
-        });
-        expect(info.version).toBe('1.2.3-custom');
-    });
-    it('appends deploy metadata when version is sourced from package version', () => {
-        const info = resolveBuildInfo({
-            npm_package_version: '0.3.13-beta.2',
-            TASKFORCE_BUILD_DEPLOY_ID: 'railway-123456',
-            TASKFORCE_BUILD_GIT_SHA: 'a1b2c3d4e5f67890',
-            TASKFORCE_BUILD_TIME: '2026-02-20T12:34:56Z'
-        });
-        expect(info.version).toBe('0.3.13-beta.2+railway-123456.a1b2c3d4e5f6.20260220123456');
-    });
-    it('leaves package version unchanged when no deploy metadata is available', () => {
-        const info = resolveBuildInfo({
-            npm_package_version: '0.3.13-beta.2'
-        });
-        expect(info.version).toBe('0.3.13-beta.2');
-    });
-});

package/dist/server/cors.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/cors.test.js

@@ -1,77 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { applyCorsHeaders, getAllowedOriginsFromEnv, resolveAllowedOrigin } from './cors';
-function mockReq(origin) {
-    return {
-        headers: origin ? { origin } : {}
-    };
-}
-function mockRes() {
-    const store = {};
-    return {
-        setHeader: (name, value) => {
-            store[name] = value;
-            return undefined;
-        },
-        getHeader: (name) => store[name]
-    };
-}
-describe('server cors helpers', () => {
-    it('parses allowed origins from env', () => {
-        const set = getAllowedOriginsFromEnv('https://a.test, https://b.test');
-        expect(set.has('https://a.test')).toBe(true);
-        expect(set.has('https://b.test')).toBe(true);
-        expect(set.has('https://app.taskforcehq.ai')).toBe(true);
-    });
-    it('resolves allowed origin only when listed', () => {
-        const allowed = new Set(['https://taskforcehq.ai']);
-        expect(resolveAllowedOrigin('https://taskforcehq.ai', allowed)).toBe('https://taskforcehq.ai');
-        expect(resolveAllowedOrigin('https://evil.test', allowed)).toBeNull();
-    });
-    it('resolves localhost loopback origins when loopback token is present', () => {
-        const allowed = new Set(['__loopback__']);
-        expect(resolveAllowedOrigin('http://localhost:3000', allowed)).toBe('http://localhost:3000');
-        expect(resolveAllowedOrigin('https://127.0.0.1:4444', allowed)).toBe('https://127.0.0.1:4444');
-        expect(resolveAllowedOrigin('https://evil.test', allowed)).toBeNull();
-    });
-    it('resolves null origin when null token is present', () => {
-        const allowed = new Set(['__null__']);
-        expect(resolveAllowedOrigin('null', allowed)).toBe('null');
-        expect(resolveAllowedOrigin('https://evil.test', allowed)).toBeNull();
-    });
-    it('supports wildcard origin prefixes from env', () => {
-        const allowed = new Set(['https://preview.taskforcehq.ai:*']);
-        expect(resolveAllowedOrigin('https://preview.taskforcehq.ai:8787', allowed)).toBe('https://preview.taskforcehq.ai:8787');
-        expect(resolveAllowedOrigin('https://preview.taskforcehq.ai', allowed)).toBeNull();
-    });
-    it('allows non-CORS request without origin header', () => {
-        const allowed = new Set(['https://taskforcehq.ai']);
-        const req = mockReq();
-        const res = mockRes();
-        const result = applyCorsHeaders(req, res, allowed);
-        expect(result.allowed).toBe(true);
-        expect(res.getHeader('Access-Control-Allow-Origin')).toBeUndefined();
-        expect(res.getHeader('Vary')).toBe('Origin');
-    });
-    it('allows request with approved origin and sets allow-origin header', () => {
-        const allowed = new Set(['https://taskforcehq.ai']);
-        const req = mockReq('https://taskforcehq.ai');
-        const res = mockRes();
-        const result = applyCorsHeaders(req, res, allowed);
-        expect(result.allowed).toBe(true);
-        expect(res.getHeader('Access-Control-Allow-Origin')).toBe('https://taskforcehq.ai');
-        expect(res.getHeader('Access-Control-Allow-Credentials')).toBe('true');
-    });
-    it('includes official staging and performance app origins by default', () => {
-        const allowed = getAllowedOriginsFromEnv();
-        expect(resolveAllowedOrigin('https://staging-app.taskforcehq.ai', allowed)).toBe('https://staging-app.taskforcehq.ai');
-        expect(resolveAllowedOrigin('https://performance-app.taskforcehq.ai', allowed)).toBe('https://performance-app.taskforcehq.ai');
-    });
-    it('rejects disallowed origin', () => {
-        const allowed = new Set(['https://taskforcehq.ai']);
-        const req = mockReq('https://evil.test');
-        const res = mockRes();
-        const result = applyCorsHeaders(req, res, allowed);
-        expect(result.allowed).toBe(false);
-        expect(res.getHeader('Access-Control-Allow-Origin')).toBeUndefined();
-    });
-});

package/dist/server/documentReviewRoutes.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/documentReviewRoutes.test.js

@@ -1,190 +0,0 @@
-import { afterEach, describe, expect, it } from 'vitest';
-import { Readable, Writable } from 'stream';
-import fs from 'fs';
-import os from 'os';
-import path from 'path';
-import { TaskforceCore } from '../core/Taskforce.js';
-import { createRoutes, matchRoute } from './routes.js';
-function createProjectRoot() {
-    return fs.mkdtempSync(path.join(os.tmpdir(), 'taskforce-document-review-routes-'));
-}
-function createMockReq(method, url, body, headers) {
-    const req = new Readable();
-    req._read = () => { };
-    if (body === undefined) {
-        req.push(null);
-    }
-    else {
-        req.push(JSON.stringify(body));
-        req.push(null);
-    }
-    req.method = method;
-    req.url = url;
-    req.headers = headers || {};
-    return req;
-}
-function createMockRes() {
-    const bodyChunks = [];
-    const headers = new Map();
-    const res = new Writable({
-        write(chunk, _encoding, callback) {
-            bodyChunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
-            callback();
-        }
-    });
-    res.statusCode = 200;
-    res.writeHead = ((statusCode, nextHeaders) => {
-        res.statusCode = statusCode;
-        if (nextHeaders) {
-            for (const [key, value] of Object.entries(nextHeaders)) {
-                headers.set(key.toLowerCase(), value);
-            }
-        }
-        return res;
-    });
-    res.setHeader = ((name, value) => {
-        headers.set(name.toLowerCase(), value);
-    });
-    res.getHeader = ((name) => headers.get(name.toLowerCase()));
-    const originalEnd = res.end.bind(res);
-    res.end = ((chunk) => {
-        if (chunk !== undefined) {
-            bodyChunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
-        }
-        return originalEnd();
-    });
-    res.__getBody = () => Buffer.concat(bodyChunks).toString('utf8');
-    return res;
-}
-describe('document review routes', () => {
-    afterEach(() => {
-        // no-op
-    });
-    it('creates, lists, updates, and comments on document review sessions', async () => {
-        const projectRoot = createProjectRoot();
-        const core = new TaskforceCore({
-            projectRoot,
-            storagePath: path.join(projectRoot, '.taskforce'),
-        });
-        try {
-            core.createWorkspace({ workspaceId: 'workspace-1', name: 'Workspace 1' });
-            const now = new Date().toISOString();
-            core.db.prepare(`
-                INSERT INTO users (id, tenant_id, email, display_name, beta_access, is_disabled, created_at, updated_at)
-                VALUES (?, ?, ?, ?, ?, ?, ?, ?)
-            `).run('user-local-1', core.getTenantId(), 'local@example.com', 'Local User', 1, 0, now, now);
-            core.db.prepare(`
-                INSERT INTO workspace_memberships (id, tenant_id, workspace_id, user_id, role, status, created_at, updated_at)
-                VALUES (?, ?, ?, ?, ?, ?, ?, ?)
-            `).run('membership-local-1', core.getTenantId(), 'workspace-1', 'user-local-1', 'owner', 'active', now, now);
-            const assetStore = core.getWorkspaceAssetStore();
-            assetStore.upsertAsset({
-                assetId: 'asset-doc-1',
-                workspaceId: 'workspace-1',
-                kind: 'document',
-                originalFilename: 'implementation-plan.md',
-                logicalName: 'Implementation Plan',
-                mimeType: 'text/markdown',
-                storageProvider: 'local',
-                storageKey: 'workspaces/workspace-1/assets/documents/asset-doc-1-implementation-plan.md',
-                contentSha256: 'sha-doc-1',
-                sizeBytes: 512,
-                documentId: 'doc-1',
-                version: 3,
-            });
-            const routes = createRoutes(core);
-            const createReq = createMockReq('POST', '/api/taskforce/document-reviews/sessions?workspaceId=workspace-1', {
-                assetId: 'asset-doc-1',
-                title: 'Review round 1',
-            }, { 'x-taskforce-user-id': 'user-local-1' });
-            const createRes = createMockRes();
-            await matchRoute('POST', '/api/taskforce/document-reviews/sessions', routes)?.handler(createReq, createRes, {});
-            expect(createRes.statusCode).toBe(200);
-            const created = JSON.parse(createRes.__getBody());
-            expect(created.session).toMatchObject({
-                assetId: 'asset-doc-1',
-                documentId: 'doc-1',
-                documentVersion: 3,
-                title: 'Review round 1',
-                status: 'open',
-            });
-            const sessionId = String(created.session.id);
-            const commentReq = createMockReq('POST', `/api/taskforce/document-reviews/sessions/${sessionId}/comments?workspaceId=workspace-1`, {
-                body: 'Please tighten the rollout section.',
-                anchor: { kind: 'line-range', startLine: 18, endLine: 24 },
-            }, { 'x-taskforce-user-id': 'user-local-1' });
-            const commentRes = createMockRes();
-            await matchRoute('POST', `/api/taskforce/document-reviews/sessions/${sessionId}/comments`, routes)?.handler(commentReq, commentRes, { id: sessionId });
-            expect(commentRes.statusCode).toBe(200);
-            const commented = JSON.parse(commentRes.__getBody());
-            expect(commented.session.comments).toHaveLength(1);
-            expect(commented.session.comments[0]).toMatchObject({
-                body: 'Please tighten the rollout section.',
-                anchor: { kind: 'line-range', startLine: 18, endLine: 24 },
-                authorActorId: 'user-local-1',
-                authorActor: expect.objectContaining({
-                    id: 'user-local-1',
-                }),
-            });
-            const commentId = String(commented.session.comments[0].id);
-            const patchReq = createMockReq('PATCH', `/api/taskforce/document-reviews/sessions/${sessionId}/comments/${commentId}?workspaceId=workspace-1`, {
-                body: 'Please tighten the rollout and ownership sections.',
-            }, { 'x-taskforce-user-id': 'user-local-1' });
-            const patchRes = createMockRes();
-            await matchRoute('PATCH', `/api/taskforce/document-reviews/sessions/${sessionId}/comments/${commentId}`, routes)?.handler(patchReq, patchRes, { id: sessionId, commentId });
-            expect(patchRes.statusCode).toBe(200);
-            const patched = JSON.parse(patchRes.__getBody());
-            expect(patched.session.comments[0].body).toBe('Please tighten the rollout and ownership sections.');
-            const listReq = createMockReq('GET', '/api/taskforce/document-reviews/sessions?workspaceId=workspace-1&assetId=asset-doc-1');
-            const listRes = createMockRes();
-            await matchRoute('GET', '/api/taskforce/document-reviews/sessions', routes)?.handler(listReq, listRes, {});
-            expect(listRes.statusCode).toBe(200);
-            const listed = JSON.parse(listRes.__getBody());
-            expect(listed.sessions).toHaveLength(1);
-            expect(listed.sessions[0].id).toBe(sessionId);
-            const deleteCommentReq = createMockReq('DELETE', `/api/taskforce/document-reviews/sessions/${sessionId}/comments/${commentId}?workspaceId=workspace-1`, undefined, { 'x-taskforce-user-id': 'user-local-1' });
-            const deleteCommentRes = createMockRes();
-            await matchRoute('DELETE', `/api/taskforce/document-reviews/sessions/${sessionId}/comments/${commentId}`, routes)?.handler(deleteCommentReq, deleteCommentRes, { id: sessionId, commentId });
-            expect(deleteCommentRes.statusCode).toBe(200);
-            const afterDelete = JSON.parse(deleteCommentRes.__getBody());
-            expect(afterDelete.session.comments).toHaveLength(0);
-        }
-        finally {
-            core.close();
-            fs.rmSync(projectRoot, { recursive: true, force: true });
-        }
-    });
-    it('blocks anonymous cloud access before reading document review sessions', async () => {
-        const projectRoot = createProjectRoot();
-        const core = new TaskforceCore({
-            projectRoot,
-            storagePath: path.join(projectRoot, '.taskforce'),
-        });
-        try {
-            const routes = createRoutes(core, {
-                authConfig: {
-                    runtimeMode: 'cloud',
-                    enabled: true,
-                    requiredForApi: true,
-                    excludedPaths: ['/api/taskforce/health', '/api/taskforce/auth'],
-                    defaultRole: 'member',
-                    defaultWorkspaceId: '',
-                    sessionCookieName: 'taskforce_session',
-                    sessionSecret: 'test-secret',
-                    sessionTtlSeconds: 3600,
-                    sessionCookieSameSite: 'None',
-                    sessionCookieSecure: true,
-                },
-            });
-            const req = createMockReq('GET', '/api/taskforce/document-reviews/sessions?assetId=asset-doc-1', undefined, { 'x-taskforce-runtime-mode': 'cloud' });
-            const res = createMockRes();
-            await matchRoute('GET', '/api/taskforce/document-reviews/sessions', routes)?.handler(req, res, {});
-            expect(res.statusCode).toBe(401);
-            expect(res.__getBody()).toContain('Authentication required.');
-        }
-        finally {
-            core.close();
-            fs.rmSync(projectRoot, { recursive: true, force: true });
-        }
-    });
-});

package/dist/server/email.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/email.test.js

@@ -1,113 +0,0 @@
-import { beforeEach, describe, expect, it, vi } from 'vitest';
-import { resolveEffectiveEmailConfig, resolveEmailConfig, sendEmail } from './email';
-import * as smtpTransport from './smtpTransport';
-vi.mock('./smtpTransport', () => ({
-    createSmtpTransport: vi.fn()
-}));
-describe('server/email', () => {
-    beforeEach(() => {
-        vi.clearAllMocks();
-    });
-    it('resolves google-workspace provider from env with alias app password', () => {
-        const config = resolveEmailConfig({
-            TASKFORCE_EMAIL_PROVIDER: 'google-workspace',
-            TASKFORCE_EMAIL_FROM: 'Taskforce <ops@example.com>',
-            TASKFORCE_EMAIL_GOOGLE_APP_PASSWORD: 'google-app-password'
-        });
-        expect(config.provider).toBe('google-workspace');
-        expect(config.providerApiKey).toBe('google-app-password');
-    });
-    it('prefers admin-stored provider key over env key', () => {
-        const config = resolveEffectiveEmailConfig({
-            TASKFORCE_EMAIL_PROVIDER: 'google-workspace',
-            TASKFORCE_EMAIL_GOOGLE_APP_PASSWORD: 'env-key'
-        }, {
-            provider: 'google-workspace',
-            providerApiKey: 'admin-key'
-        });
-        expect(config.providerApiKey).toBe('admin-key');
-    });
-    it('returns actionable error when google-workspace key is missing', async () => {
-        const result = await sendEmail({
-            to: 'qa@example.com',
-            subject: 'test',
-            text: 'hello'
-        }, {
-            provider: 'google-workspace',
-            from: 'Taskforce <ops@example.com>'
-        });
-        expect(result.ok).toBe(false);
-        expect(result.provider).toBe('google-workspace');
-        expect(result.error).toContain('Missing Google app password');
-    });
-    it('sends via nodemailer for google-workspace provider', async () => {
-        const sendMail = vi.fn().mockResolvedValue({ messageId: 'smtp-123' });
-        vi.mocked(smtpTransport.createSmtpTransport).mockResolvedValue({ sendMail });
-        const result = await sendEmail({
-            to: 'qa@example.com',
-            subject: 'test',
-            text: 'hello'
-        }, {
-            provider: 'google-workspace',
-            from: 'Taskforce <ops@example.com>',
-            providerApiKey: 'app-password'
-        });
-        expect(smtpTransport.createSmtpTransport).toHaveBeenCalledWith({
-            host: 'smtp.gmail.com',
-            port: 465,
-            secure: true,
-            auth: {
-                user: 'ops@example.com',
-                pass: 'app-password'
-            }
-        });
-        expect(sendMail).toHaveBeenCalled();
-        expect(result.ok).toBe(true);
-        expect(result.provider).toBe('google-workspace');
-        expect(result.messageId).toBe('smtp-123');
-    });
-    it('preserves resend provider behavior', async () => {
-        const fetchMock = vi.fn().mockResolvedValue({
-            ok: true,
-            json: async () => ({ id: 'resend-123' })
-        });
-        vi.stubGlobal('fetch', fetchMock);
-        const result = await sendEmail({
-            to: 'qa@example.com',
-            subject: 'test',
-            text: 'hello'
-        }, {
-            provider: 'resend',
-            from: 'Taskforce <no-reply@example.com>',
-            providerApiKey: 'resend-key'
-        });
-        expect(result.ok).toBe(true);
-        expect(result.provider).toBe('resend');
-        expect(result.messageId).toBe('resend-123');
-    });
-    it('retries transient resend failures and succeeds', async () => {
-        const fetchMock = vi.fn()
-            .mockResolvedValueOnce({
-            ok: false,
-            status: 429,
-            json: async () => ({ message: 'rate limited' })
-        })
-            .mockResolvedValueOnce({
-            ok: true,
-            json: async () => ({ id: 'resend-after-retry' })
-        });
-        vi.stubGlobal('fetch', fetchMock);
-        const result = await sendEmail({
-            to: 'qa@example.com',
-            subject: 'test',
-            text: 'hello'
-        }, {
-            provider: 'resend',
-            from: 'Taskforce <no-reply@example.com>',
-            providerApiKey: 'resend-key'
-        });
-        expect(fetchMock).toHaveBeenCalledTimes(2);
-        expect(result.ok).toBe(true);
-        expect(result.messageId).toBe('resend-after-retry');
-    });
-});

package/dist/server/index.cookieProxy.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/index.cookieProxy.test.js

@@ -1,67 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { applyCloudProxyForwardedHeaders, resolveCloudProxyBaseUrl, resolveCloudProxyUpstreamBaseUrl, rewriteProxySetCookieForLocalHost, shouldProxyCloudPath, shouldRewriteSetCookieForLocalDevHost, TASKFORCE_PROXY_CLOUD_ENVIRONMENT_HEADER, TASKFORCE_PROXY_ORIGIN_BASE_URL_HEADER, TASKFORCE_PROXY_ORIGIN_HOST_HEADER, TASKFORCE_PROXY_ORIGIN_PROTO_HEADER, TASKFORCE_PROXY_ORIGIN_RUNTIME_HEADER } from './index';
-describe('proxy cookie rewrite helpers', () => {
-    it('detects local dev hosts', () => {
-        expect(shouldRewriteSetCookieForLocalDevHost('localhost:5174')).toBe(true);
-        expect(shouldRewriteSetCookieForLocalDevHost('127.0.0.1:8080')).toBe(true);
-        expect(shouldRewriteSetCookieForLocalDevHost('[::1]:3000')).toBe(true);
-        expect(shouldRewriteSetCookieForLocalDevHost('performance-app.taskforcehq.ai')).toBe(false);
-    });
-    it('removes domain attribute for locally proxied cookies', () => {
-        const rewritten = rewriteProxySetCookieForLocalHost('taskforce_session=abc123; Path=/; HttpOnly; Secure; SameSite=None; Domain=.taskforcehq.ai');
-        expect(rewritten).toContain('taskforce_session=abc123');
-        expect(rewritten).toContain('Path=/');
-        expect(rewritten).toContain('HttpOnly');
-        expect(rewritten).toContain('Secure');
-        expect(rewritten).toContain('SameSite=None');
-        expect(rewritten.toLowerCase()).not.toContain('domain=');
-    });
-    it('includes public pricing in the local cloud proxy path set', () => {
-        expect(shouldProxyCloudPath('/api/taskforce/public/pricing')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/public/site-config')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/public/site-config-script')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/version')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/account/entitlements')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/account/profile-summary')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/account/team-management-access')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/admin/mcp-audit-logs')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/billing/status')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/billing/checkout-session')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/auth/session')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/workspace/assignee-options')).toBe(false);
-        expect(shouldProxyCloudPath('/api/taskforce/workspace/ai-profiles/avatar')).toBe(false);
-        expect(shouldProxyCloudPath('/api/taskforce/settings/mcp/tokens')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/settings/mcp/test-connection')).toBe(true);
-        expect(shouldProxyCloudPath('/api/platform/plans')).toBe(true);
-        expect(shouldProxyCloudPath('/api/taskforce/sync/workspace/apply-local')).toBe(false);
-        expect(shouldProxyCloudPath('/api/taskforce/sync/workspace/documents')).toBe(false);
-        expect(shouldProxyCloudPath('/api/taskforce/sync/workspace/assets')).toBe(false);
-        expect(shouldProxyCloudPath('/api/taskforce/sync/events')).toBe(false);
-        expect(shouldProxyCloudPath('/api/taskforce/auth/runtime-config')).toBe(false);
-    });
-    it('defaults local cloud proxy base url to production when no env is configured', () => {
-        expect(resolveCloudProxyBaseUrl({})).toBe('https://app.taskforcehq.ai');
-    });
-    it('allows proxied requests to override the upstream environment per request', () => {
-        const req = {
-            headers: {
-                [TASKFORCE_PROXY_CLOUD_ENVIRONMENT_HEADER]: 'performance'
-            }
-        };
-        expect(resolveCloudProxyUpstreamBaseUrl(req, 'https://app.taskforcehq.ai')).toBe('https://performance-app.taskforcehq.ai');
-        expect(resolveCloudProxyUpstreamBaseUrl({ headers: {} }, 'https://app.taskforcehq.ai')).toBe('https://app.taskforcehq.ai');
-    });
-    it('preserves the original local host and protocol for proxied cloud requests', () => {
-        const headers = new Headers();
-        applyCloudProxyForwardedHeaders(headers, {
-            headers: { host: 'localhost:5174' },
-            socket: { encrypted: false }
-        });
-        expect(headers.get('x-forwarded-host')).toBe('localhost:5174');
-        expect(headers.get('x-forwarded-proto')).toBe('http');
-        expect(headers.get(TASKFORCE_PROXY_ORIGIN_HOST_HEADER)).toBe('localhost:5174');
-        expect(headers.get(TASKFORCE_PROXY_ORIGIN_PROTO_HEADER)).toBe('http');
-        expect(headers.get(TASKFORCE_PROXY_ORIGIN_BASE_URL_HEADER)).toBe('http://localhost:5174');
-        expect(headers.get(TASKFORCE_PROXY_ORIGIN_RUNTIME_HEADER)).toBe('local-proxy');
-    });
-});

package/dist/server/index.rateLimit.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/server/index.rateLimit.test.js

@@ -1,22 +0,0 @@
-import { describe, expect, it } from 'vitest';
-import { shouldApplyAuthRateLimitForPath } from './index';
-describe('shouldApplyAuthRateLimitForPath', () => {
-    it('applies auth rate limit to invite accept endpoint', () => {
-        expect(shouldApplyAuthRateLimitForPath('/api/taskforce/auth/invite/accept')).toBe(true);
-    });
-    it('excludes auth session endpoint', () => {
-        expect(shouldApplyAuthRateLimitForPath('/api/taskforce/auth/session')).toBe(false);
-    });
-    it('excludes auth providers metadata endpoint', () => {
-        expect(shouldApplyAuthRateLimitForPath('/api/taskforce/auth/providers')).toBe(false);
-    });
-    it('excludes runtime config bootstrap endpoint', () => {
-        expect(shouldApplyAuthRateLimitForPath('/api/taskforce/auth/runtime-config')).toBe(false);
-    });
-    it('excludes admin session endpoint', () => {
-        expect(shouldApplyAuthRateLimitForPath('/api/taskforce/auth/admin-session')).toBe(false);
-    });
-    it('does not apply to non-auth routes', () => {
-        expect(shouldApplyAuthRateLimitForPath('/api/taskforce/tasks')).toBe(false);
-    });
-});

package/dist/server/index.test.d.ts

@@ -1 +0,0 @@
-export {};