@taskforcehq/taskforce 0.3.317 → 0.3.318

package/dist/server/index.d.ts

@@ -41,6 +41,7 @@ export declare function writeJsonErrorIfPossible(res: http.ServerResponse, statu
 export declare function applyCloudProxyForwardedHeaders(headers: Headers, req: http.IncomingMessage): void;
 export declare function rewriteProxySetCookieForLocalHost(cookie: string): string;
 export declare function shouldRewriteProxySetCookieDomain(cookie: string, hostHeader: string | undefined): boolean;
+export declare function shouldForwardCloudProxyResponseHeader(name: string): boolean;
 export declare function shouldApplyAuthRateLimitForPath(pathname: string): boolean;
 export declare function resolveCloudProxyBaseUrl(env?: NodeJS.ProcessEnv): string;
 export declare function ensureBillingWebhookAuthExclusion(excludedPaths: string[]): string[];

package/dist/server/index.js

@@ -84,6 +84,10 @@ const CORS_RESPONSE_HEADERS = new Set([
     'access-control-max-age',
     'vary'
 ]);
+const CLOUD_PROXY_BODY_HEADERS = new Set([
+    'content-encoding',
+    'content-length'
+]);
 const REFRESH_DIAGNOSTIC_PATH_PREFIXES = [
     '/api/taskforce/auth/session',
     '/api/taskforce/config',
@@ -337,6 +341,18 @@ export function shouldRewriteProxySetCookieDomain(cookie, hostHeader) {
         return false;
     return !requestHost.endsWith(`.${cookieDomain}`);
 }
+export function shouldForwardCloudProxyResponseHeader(name) {
+    const normalizedName = String(name || '').trim().toLowerCase();
+    if (!normalizedName)
+        return false;
+    if (HOP_BY_HOP_HEADERS.has(normalizedName))
+        return false;
+    if (CORS_RESPONSE_HEADERS.has(normalizedName))
+        return false;
+    if (CLOUD_PROXY_BODY_HEADERS.has(normalizedName))
+        return false;
+    return normalizedName !== 'set-cookie';
+}
 async function readRequestBody(req, maxBytes) {
     const chunks = [];
     let total = 0;
@@ -685,12 +701,7 @@ export function createStandaloneServer(options) {
                 });
                 const outgoingHeaders = {};
                 for (const [key, value] of upstream.headers.entries()) {
-                    const name = key.toLowerCase();
-                    if (HOP_BY_HOP_HEADERS.has(name))
-                        continue;
-                    if (CORS_RESPONSE_HEADERS.has(name))
-                        continue;
-                    if (name === 'set-cookie')
+                    if (!shouldForwardCloudProxyResponseHeader(key))
                         continue;
                     outgoingHeaders[key] = value;
                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taskforcehq/taskforce",
-  "version": "0.3.317",
+  "version": "0.3.318",
   "description": "Shared task and planning workspace for humans collaborating with AI (public beta)",
   "author": "Taskforce HQ <hello@taskforcehq.ai> (https://taskforcehq.ai)",
   "license": "MIT",