@taskforcehq/taskforce 0.3.329 → 0.3.332

package/dist/mcp/taskPlanningRegistrar.js

@@ -414,7 +414,7 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
         },
     }));
     register('get_task_checklist', (context) => ({
-        description: context.describeTool('Read the structured checklist items for one task. Returns stored checklist items, not markdown parsing.'),
+        description: context.describeTool('Read the structured checklist items for one task. Returns stored checklist items plus detailRevision for optimistic concurrency; it does not parse markdown.'),
         inputSchema: {
             properties: {
                 taskId: stringProperty('Task ID or task reference such as T-123.'),
@@ -433,6 +433,24 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
             required: ['taskId', 'text'],
         },
     }));
+    register('update_task_checklist_item', (context) => ({
+        description: context.describeTool('Update one existing checklist item without replacing the full checklist. Read get_task_checklist first and pass expectedDetailRevision to reject concurrent changes. Pass idempotencyKey only when retrying an ambiguous outcome; reuse it only with the exact same task, item, patch, and revision.'),
+        inputSchema: {
+            properties: {
+                taskId: stringProperty('Task ID or task reference such as T-123.'),
+                itemId: stringProperty('Stable checklist item ID returned by get_task_checklist.'),
+                text: stringProperty('Optional replacement checklist text. Must be descriptive and non-empty.'),
+                done: booleanProperty('Optional completion state.'),
+                order: integerProperty('Optional non-negative display order. Sibling items are not renumbered.', 0),
+                expectedDetailRevision: stringProperty('Optional task detailRevision from get_task_checklist. A stale value rejects the update without mutation.'),
+                idempotencyKey: {
+                    type: 'string', minLength: 1, maxLength: 128,
+                    description: 'Optional opaque retry key scoped to the active workspace, actor, and tool.',
+                },
+            },
+            required: ['taskId', 'itemId'],
+        },
+    }));
     register('replace_task_checklist', (context) => ({
         description: context.describeTool('Replace the structured checklist items for one task with a new ordered list. Use this when a user explicitly asks to create, update, or replace a task checklist; do not just draft checklist text.'),
         inputSchema: {
@@ -567,7 +585,7 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
         },
     }));
     register('update_task', (context) => ({
-        description: context.describeTool('Update an existing task. Current taxonomy values are included in this tool schema; call get_config only for richer metadata or after a validation mismatch. Use start_task when beginning active work on a tracked task, and prefer finish_task for the final completion or review handoff.'),
+        description: context.describeTool('Update task fields. Use start_task to begin tracked work. Review transitions are rejected; use finish_task so its required handoff comment, status, and reviewer commit atomically.'),
         inputSchema: {
             properties: {
                 id: stringProperty('Task ID or task reference such as T-123.'),
@@ -587,18 +605,19 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
         },
     }));
     register('finish_task', (context) => ({
-        description: context.describeTool('Default end-of-task handoff. Use outcome=\'done\' for completed work or outcome=\'review\' for validation. Both remain active and unarchived; use archive_task for history. Archived tasks require reopen_task first.'),
+        description: context.describeTool('Finish active work as done or review without archiving. Review atomically commits its required handoff comment and reviewer. Pass a human or AI reviewer ID unless an eligible human is already assigned. No Git or PR required.'),
         inputSchema: {
             properties: {
                 id: stringProperty('Task ID or task reference such as T-123.'),
                 outcome: stringProperty('Completion outcome.', ['review', 'done']),
-                comment: stringProperty('Optional completion note returned in the handoff response.'),
+                comment: stringProperty('Required for review and persisted atomically with the transition; optional for done.'),
+                reviewer: stringProperty('Reviewer assignee ID. Required for review unless an eligible human is already assigned.'),
             },
             required: ['id', 'outcome'],
         },
     }));
     register('archive_task', (context) => ({
-        description: context.describeTool('Move a task to history by archiving it. Use status=\'done\' for completed work or status=\'cancelled\' for abandoned work. active tasks may still use status=done for final lookover without being archived.'),
+        description: context.describeTool('Move a task to history by archiving it. Use status=\'done\' for completed work or status=\'cancelled\' for abandoned work. Returns compact task and archive state so callers can verify the final status and isArchived=true.'),
         inputSchema: {
             properties: {
                 id: stringProperty('Task ID or task reference such as T-123.'),
@@ -609,7 +628,7 @@ export function registerTaskPlanningTools(registerTool, executeTool) {
         },
     }));
     register('unarchive_task', (context) => ({
-        description: context.describeTool('Restore an archived task to the active task list.'),
+        description: context.describeTool('Restore an archived task to the active task list. Returns compact task and unarchive state so callers can verify isArchived=false.'),
         inputSchema: {
             properties: {
                 id: stringProperty('Task ID or task reference such as T-123.'),

package/dist/mcp/toolProfiles.d.ts

@@ -5,11 +5,13 @@ type McpScopedPermission = Extract<McpPermission, {
     kind: 'scope';
 }>;
 type McpScope = McpScopedPermission['scope'];
+export type CloudMcpToolProfile = Extract<McpToolProfile, 'default' | 'extended'>;
 export declare function normalizeMcpToolProfile(value: unknown, fallback: McpToolProfile): McpToolProfile;
 export declare function getDefaultMcpToolProfile(runtimeMode: 'local' | 'cloud'): McpToolProfile;
 export declare function isMcpToolVisibleInProfile(name: string, profile: McpToolProfile): boolean;
 export declare function getMcpToolRequiredProfiles(name: string): McpToolProfile[];
 export declare function getMcpToolProfileMembership(profile: McpToolProfile): McpToolName[];
+export declare function getCloudMcpToolProfileMembership(profile: CloudMcpToolProfile, scopes?: readonly McpScope[]): McpToolName[];
 export declare function getManagedAgentMcpRuntimeProfile(_profile?: ManagedAgentMcpToolProfile): McpToolProfile;
 export declare function getManagedAgentMcpToolProfileMembership(profile?: ManagedAgentMcpToolProfile): McpToolName[];
 export declare function getManagedAgentMcpToolScopes(profile?: ManagedAgentMcpToolProfile): McpScope[];

package/dist/mcp/toolProfiles.js

@@ -14,9 +14,11 @@ const MANAGED_AGENT_ALLOWED_MUTATING_TOOLS = new Set([
     'add_comment',
     'add_initiative_comment',
     'add_task_checklist_item',
+    'update_task_checklist_item',
     'add_workstream_comment',
     'complete_workflow_step',
     'replace_task_checklist',
+    'review_document',
 ]);
 export function normalizeMcpToolProfile(value, fallback) {
     const normalized = typeof value === 'string' ? value.trim().toLowerCase() : '';
@@ -45,6 +47,15 @@ export function getMcpToolProfileMembership(profile) {
         .map(([name]) => name)
         .sort((left, right) => left.localeCompare(right));
 }
+export function getCloudMcpToolProfileMembership(profile, scopes) {
+    const allowedScopes = scopes ? new Set(scopes) : null;
+    return getMcpToolProfileMembership(profile).filter((name) => {
+        const permission = MCP_TOOL_REGISTRY[name].permission;
+        if (permission.kind === 'local-only' || permission.kind === 'session-only')
+            return false;
+        return permission.kind === 'public' || !allowedScopes || allowedScopes.has(permission.scope);
+    });
+}
 export function getManagedAgentMcpRuntimeProfile(_profile = MCP_MANAGED_AGENT_DEFAULT_PROFILE) {
     return 'default';
 }

package/dist/mcp/toolRegistry.d.ts

@@ -51,6 +51,7 @@ export declare const MCP_TOOL_REGISTRY: Readonly<{
     readonly update_workstream_initiative: McpToolRegistryEntry;
     readonly get_task_checklist: McpToolRegistryEntry;
     readonly add_task_checklist_item: McpToolRegistryEntry;
+    readonly update_task_checklist_item: McpToolRegistryEntry;
     readonly replace_task_checklist: McpToolRegistryEntry;
     readonly get_task_attachments: McpToolRegistryEntry;
     readonly get_workstream_attachments: McpToolRegistryEntry;

package/dist/mcp/toolRegistry.js

@@ -45,10 +45,11 @@ export const MCP_TOOL_REGISTRY = Object.freeze({
     add_workstream_comment: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     archive_workstream: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
     unarchive_workstream: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
-    update_task_workstream: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
-    update_workstream_initiative: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
+    update_task_workstream: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true, { name: 'update_task' }),
+    update_workstream_initiative: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true, { name: 'update_workstream' }),
     get_task_checklist: defaultTool({ kind: 'scope', scope: 'tasks:read' }, false),
     add_task_checklist_item: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
+    update_task_checklist_item: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     replace_task_checklist: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     get_task_attachments: defaultTool({ kind: 'scope', scope: 'tasks:read' }, false),
     get_workstream_attachments: extendedTool({ kind: 'scope', scope: 'tasks:read' }, false),
@@ -57,19 +58,19 @@ export const MCP_TOOL_REGISTRY = Object.freeze({
     get_initiative_attachments: extendedTool({ kind: 'scope', scope: 'tasks:read' }, false),
     save_initiative_attachment: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     delete_initiative_attachment: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
-    search_images: defaultTool({ kind: 'scope', scope: 'tasks:read' }, false),
-    get_image: defaultTool({ kind: 'scope', scope: 'tasks:read' }, false),
+    search_images: extendedTool({ kind: 'scope', scope: 'tasks:read' }, false),
+    get_image: extendedTool({ kind: 'scope', scope: 'tasks:read' }, false),
     search_documents: defaultTool({ kind: 'scope', scope: 'tasks:read' }, false),
     get_document: defaultTool({ kind: 'scope', scope: 'tasks:read' }, false),
     update_document: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     link_document: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     rehome_document: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     unlink_document: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
-    get_image_annotations: defaultTool({ kind: 'scope', scope: 'tasks:read' }, false),
+    get_image_annotations: extendedTool({ kind: 'scope', scope: 'tasks:read' }, false),
     create_annotated_attachment_session: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
     update_annotated_attachment_session: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
     delete_annotated_attachment_session: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
-    review_image: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
+    review_image: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
     add_annotated_attachment_marker: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true, { name: 'review_image' }),
     bulk_add_annotated_attachment_markers: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true, { name: 'review_image' }),
     update_annotated_attachment_marker: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
@@ -81,14 +82,14 @@ export const MCP_TOOL_REGISTRY = Object.freeze({
     review_document: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     add_document_review_comment: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true, { name: 'review_document' }),
     update_document_review_thread: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
-    update_document_review_comment: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
+    update_document_review_comment: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
     delete_document_review_comment: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
     get_schedule_board: defaultTool({ kind: 'scope', scope: 'tasks:read' }, false),
     update_schedule: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     bulk_carryover: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
     set_schedule_preferences: fullTool({ kind: 'session-only' }, true),
     resolve_profile: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
-    generate_profile_avatar: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
+    generate_profile_avatar: extendedTool({ kind: 'scope', scope: 'tasks:write' }, true),
     create_task: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     start_task: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),
     reopen_task: defaultTool({ kind: 'scope', scope: 'tasks:write' }, true),

package/dist/mcp/workflowExecutionRegistrar.js

@@ -32,16 +32,16 @@ export function registerWorkflowExecutionTools(registerTool, executeTool) {
         },
     }));
     register('complete_workflow_step', (context) => ({
-        description: context.describeTool('Complete the current workflow step when the active AI profile owns it. If the step requires a task comment, add the comment first and pass its returned commentId as evidence. Advances and reassigns the task automatically.'),
+        description: context.describeTool('Complete the current workflow step when the active AI profile owns it. Call get_task_workflow first for the same task and reuse its completionCall arguments exactly; never invent or reuse workflow IDs. If the step requires a task comment, add the comment first and pass its returned commentId as evidence. Advances and reassigns the task automatically.'),
         annotations: { idempotentHint: true },
         inputSchema: {
             additionalProperties: false,
             properties: {
                 taskId: { type: 'string', description: 'Task UUID or reference label such as T-123.' },
-                executionId: { type: 'string', description: 'Workflow execution ID returned by get_task_workflow.' },
-                stepId: { type: 'string', description: 'Current workflow step ID returned by get_task_workflow.' },
+                executionId: { type: 'string', description: 'Exact executionId from the same-task get_task_workflow completionCall; never invent or reuse it.' },
+                stepId: { type: 'string', description: 'Exact stepId from the same-task get_task_workflow completionCall; never invent or reuse it.' },
                 evidenceCommentId: {
-                    type: 'string',
+                    anyOf: [{ type: 'string' }, { type: 'null' }],
                     description: 'Exact commentId returned by add_comment when the current step requires task-comment evidence.',
                 },
             },

package/dist/migrations/taskSchemaMigrations.d.ts

@@ -44,6 +44,11 @@ export declare function ensureLocalSyncCoordinatorSchema(db: DatabaseAdapter): v
 export declare function ensureWorkspaceDocumentsSchema(db: DatabaseAdapter): void;
 export declare function ensureAnnotatedAttachmentSessionsSchema(db: DatabaseAdapter): void;
 export declare function ensureTaskforceAgentsSchema(db: DatabaseAdapter): void;
+export declare function ensureModelProviderConnectionsSchema(db: DatabaseAdapter): void;
+export declare function ensureTaskforceAgentConnectionBindingsSchema(db: DatabaseAdapter): void;
+export declare function ensureGitHubReviewEvidenceInstallationBindingsSchema(db: DatabaseAdapter): void;
+export declare function ensureExecutorPhaseAApprovalReceiptsSchema(db: DatabaseAdapter): void;
+export declare function ensureExecutorPhaseARunAuthorizationsSchema(db: DatabaseAdapter): void;
 export declare function ensureAgentRolesSchema(db: DatabaseAdapter): void;
 export declare function ensureTaskforceAgentSkillsSchema(db: DatabaseAdapter): void;
 export declare function ensureWorkflowSchema(db: DatabaseAdapter): void;