@taskforcehq/taskforce 0.3.321 → 0.3.323

package/dist/server/routes/admin.d.ts

@@ -40,6 +40,7 @@
  *   POST      /api/taskforce/admin/workspace-repair/scan
  *   POST      /api/taskforce/admin/workspace-repair/apply
  *   POST/GET/DELETE/OPTIONS /mcp (+ /mcp/)
+ *   GET       /.well-known/openai-apps-challenge
  *   GET       /.well-known/oauth-authorization-server
  *   GET       /.well-known/oauth-protected-resource
  *   POST      /oauth/mcp/register

package/dist/server/routes/admin.js

@@ -40,6 +40,7 @@
  *   POST      /api/taskforce/admin/workspace-repair/scan
  *   POST      /api/taskforce/admin/workspace-repair/apply
  *   POST/GET/DELETE/OPTIONS /mcp (+ /mcp/)
+ *   GET       /.well-known/openai-apps-challenge
  *   GET       /.well-known/oauth-authorization-server
  *   GET       /.well-known/oauth-protected-resource
  *   POST      /oauth/mcp/register
@@ -73,6 +74,7 @@ import { buildAuthBehavior, buildSiteBehavior, getRouteEmailConfig, resolvePubli
 import { applyWorkspaceRepair, scanWorkspaceRepair } from '../../sync/workspaceRepair.js';
 import { testMintAppleClientSecret } from '../auth/providers/appleClientSecret.js';
 const PRICING_PAGE_DESCRIPTION_MAX_LENGTH = 2000;
+const OPENAI_APPS_CHALLENGE_TOKEN = 'o9iBeJDuKPMtnKm5-B0BROga3bWDkJS6PBIg6JT9Izs';
 // === SECTION: Registration ===
 export function registerAdminRoutes(deps) {
     const { addRoute, core, context, requestWorkspaceId, requestUserId, requestRole, requestHeader, requestRuntimeMode, ensureAppAccess, ensureAdminRole, ensureCloudPlanData, requireCloudRuntime, resolveAuthenticatedUserId, resolveAdminRequestActor, auditAdminAction, resolveEffectiveObjectStorageConfig, getObjectStorageClient, taskAssetStore, normalizeDocumentPathInput, ensureWithinDir, getAssetMetadata, markAssetDeleted, clearAssetDeleted, removeAssetMetadata, getStorageTelemetry, appendStorageTelemetry, getStorageIntegrityHistory, appendStorageIntegrityHistory, getDocumentPurgeHistory, appendDocumentPurgeHistory, getCollaborationTelemetry, isCollaborationPolicyEnabled, normalizeMcpOauthScopeString, MCP_TOKEN_SCOPE_VALUES, MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS, MCP_WRITE_RATE_LIMIT_ENABLED, MCP_WRITE_RATE_LIMIT_ACTOR_MAX_REQUESTS, MCP_WRITE_RATE_LIMIT_WORKSPACE_MAX_REQUESTS, MCP_WRITE_RATE_LIMIT_WINDOW_MS, } = deps;
@@ -2524,6 +2526,21 @@ export function registerAdminRoutes(deps) {
         });
         res.end();
     });
+    // === SECTION: ChatGPT Apps domain verification ===
+    addRoute('GET', '/.well-known/openai-apps-challenge', async (_req, res) => {
+        res.writeHead(200, {
+            'Content-Type': 'text/plain; charset=utf-8',
+            'Cache-Control': 'no-store'
+        });
+        res.end(OPENAI_APPS_CHALLENGE_TOKEN);
+    });
+    addRoute('HEAD', '/.well-known/openai-apps-challenge', async (_req, res) => {
+        res.writeHead(200, {
+            'Content-Type': 'text/plain; charset=utf-8',
+            'Cache-Control': 'no-store'
+        });
+        res.end();
+    });
     // === SECTION: MCP OAuth 2.0 ===
     addRoute('GET', '/.well-known/oauth-authorization-server', async (req, res) => {
         const issuer = resolveMcpOauthIssuer(req);

package/dist/ui/.well-known/openai-apps-challenge

@@ -0,0 +1 @@
+o9iBeJDuKPMtnKm5-B0BROga3bWDkJS6PBIg6JT9Izs

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@taskforcehq/taskforce",
-  "version": "0.3.321",
+  "version": "0.3.323",
   "description": "Shared task and planning workspace for humans collaborating with AI (public beta)",
   "author": "Taskforce HQ <hello@taskforcehq.ai> (https://taskforcehq.ai)",
   "license": "MIT",