Files
task-manager/server/index.ts
T
NotiBot 4f6aff32ab
continuous-integration/drone/push Build is passing
feat: API Key Auth + erweiterte MCP Tools + Dokumentation
- API Key Middleware für alle /api/ Endpoints (X-API-Key, Bearer, Query)
- API Key Management Routes (generate, revoke, status)
- MCP Tools erweitert: 12 Tools (war 3) inkl. bulk ops, dashboard, search
- Audit Logging für alle API/MCP Aktionen
- docs/API-REFERENCE.md - vollständige API Dokumentation
- docs/ARCHITECTURE.md - Architektur-Übersicht
- Vorbereitung für NotiBot-Integration
2026-02-03 10:23:18 +01:00

191 lines
6.7 KiB
TypeScript

import express, { type Request, Response, NextFunction } from "express";
import { registerRoutes } from "./routes.js";
import { initializeDatabase, closeDatabase } from "./db.js";
import { storage } from "./storage";
import { initializeVapid } from "./push.js";
import { apiKeyAuth } from "./api-key-auth.js";
const app = express();
app.set("trust proxy", true);
app.use(express.json());
app.use(express.urlencoded({ extended: false }));
app.use((req, res, next) => {
const start = Date.now();
const path = req.path;
let capturedJsonResponse: Record<string, any> | undefined = undefined;
const originalResJson = res.json;
res.json = function (bodyJson, ...args) {
capturedJsonResponse = bodyJson;
return originalResJson.apply(res, [bodyJson, ...args]);
};
res.on("finish", () => {
const duration = Date.now() - start;
if (path.startsWith("/api")) {
const formattedTime = new Date().toLocaleTimeString("en-US", {
hour: "numeric",
minute: "2-digit",
second: "2-digit",
hour12: true,
});
let logLine = `${req.method} ${path} ${res.statusCode} in ${duration}ms`;
if (capturedJsonResponse) {
logLine += ` :: ${JSON.stringify(capturedJsonResponse)}`;
}
if (logLine.length > 80) {
logLine = logLine.slice(0, 79) + "…";
}
console.log(`${formattedTime} [express] ${logLine}`);
}
});
// Ensure no caching for API routes to prevent sticky sessions
if (path.startsWith("/api")) {
res.header('Cache-Control', 'no-store, no-cache, must-revalidate, proxy-revalidate');
res.header('Pragma', 'no-cache');
res.header('Expires', '0');
}
next();
});
(async () => {
// Import utilities based on environment
// Use require-style imports to avoid bundler issues
let log: (message: string, source?: string) => void;
let serveStatic: (app: express.Express) => void;
let setupVite: ((app: express.Express, server: any) => Promise<void>) | undefined;
if (app.get("env") === "development") {
try {
const viteModule = await import("./vite.js");
log = viteModule.log;
setupVite = viteModule.setupVite;
serveStatic = viteModule.serveStatic;
} catch (error) {
console.error("Failed to load vite module:", error);
process.exit(1);
}
} else {
const staticModule = await import("./static.js");
log = staticModule.log;
serveStatic = staticModule.serveStatic;
}
// Initialize database if using production mode or USE_DB is true
if (process.env.NODE_ENV === 'production' || process.env.USE_DB === 'true') {
try {
await initializeDatabase();
// Initialize Web Push VAPID keys after database is ready
await initializeVapid();
} catch (error) {
console.error('Failed to initialize database:', error);
process.exit(1);
}
}
// Seed default AI System Prompt if missing
const currentPrompt = await storage.getSystemSettings("ai_system_prompt");
if (!currentPrompt) {
const defaultPrompt = `You are TaskFlow AI, an intelligent assistant for the TaskFlow application.
You have access to the user's current tasks and context.
User Name: \${user.username}
Current Date/Time: \${currentDate.toLocaleString('de-DE')} (Day: \${currentDate.toLocaleDateString('en-US', { weekday: 'long' })})
Current Context:
\${context}
Answer the user's questions based on this context. Be concise, helpful, and friendly.
### 🛠️ AVAILABLE TOOLS
You can create, search, update, and delete tasks using the provided tools.
**1. Task Management**
- **Create**: Use 'createTask'. Title is required.
- *Bulk Creation*: If the user provides a list of tasks, call 'createTask' multiple times in parallel.
- *Relative Dates*: Understand natural language! "Morgen" = Tomorrow, "Next Friday" = Date of next Friday. Always calculate the specific ISO string based on 'Current Date/Time'.
- *Returns*: The tool returns the created Task ID. Remember this ID for immediate edits.
- **Update/Delete**: First SEARCH for the task ID using 'searchTasks' (search by title), then use 'updateTask' or 'deleteTask'.
- *Editing Recently Created*: If the user says "Change that to...", refer to the ID of the task you just created.
- *Delete All*: Search all, then delete each.
- **Labels**: Use 'getLabels' tags.
**2. 🧠 Smart Planning & Scheduling**
- **"Break this down"**: Create subtasks with 'parentTaskId'.
- **"Find time for this"**: Use 'scheduleTask'.
- **Time Boxing**: Set 'estimatedDuration' (minutes) if mentioned.
**3. Gamification**
- Check achievements/XP with 'getAchievements'.
- Check highscores with 'getLeaderboard'.
### 📅 DATE & TIME RULES
- **"Today"**: Use the 'Current Date/Time' context.
- **"Morgen" / "Tomorrow"**: Add 1 day to Current Date.
- **Scheduling**: When using 'scheduleTask', inform the user specifically *when* you scheduled it.
IMPORTANT: Do NOT show Task IDs to the user. Reference tasks by Title.
CRITICAL: After executing tools, provide a concise summary of your actions.`;
await storage.setSystemSettings("ai_system_prompt", defaultPrompt);
console.log("Seeded default AI System Prompt");
}
const server = await registerRoutes(app);
app.use((err: any, _req: Request, res: Response, _next: NextFunction) => {
const status = err.status || err.statusCode || 500;
const message = err.message || "Internal Server Error";
res.status(status).json({ message });
// Don't throw err here, it crashes the server/socket after response is sent
});
// importantly only setup vite in development and after
// setting up all the other routes so the catch-all route
// doesn't interfere with the other routes
if (app.get("env") === "development") {
if (setupVite) {
await setupVite(app, server);
}
} else {
serveStatic(app);
}
// ALWAYS serve the app on the port specified in the environment variable PORT
// Other ports are firewalled. Default to 5000 if not specified.
// this serves both the API and the client.
// It is the only port that is not firewalled.
const port = parseInt(process.env.PORT || '5001', 10);
server.listen({
port,
host: "0.0.0.0",
}, () => {
log(`serving on port ${port}`);
});
// Graceful shutdown
const gracefulShutdown = async (signal: string) => {
log(`${signal} received, closing server gracefully...`);
server.close(async () => {
log('HTTP server closed');
await closeDatabase();
process.exit(0);
});
// Force close after 30 seconds
setTimeout(() => {
console.error('Forced shutdown after timeout');
process.exit(1);
}, 30000);
};
process.on('SIGTERM', () => gracefulShutdown('SIGTERM'));
process.on('SIGINT', () => gracefulShutdown('SIGINT'));
})();