chore: import upstream snapshot with attribution

apps/sim/app/api/tools/asana/get-task/route.ts

@@ -0,0 +1,224 @@
+import { createLogger } from '@sim/logger'
+import { type NextRequest, NextResponse } from 'next/server'
+import { asanaGetTaskContract } from '@/lib/api/contracts/tools/asana'
+import { parseRequest } from '@/lib/api/server'
+import { checkInternalAuth } from '@/lib/auth/hybrid'
+import { validateAlphanumericId } from '@/lib/core/security/input-validation'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+
+export const dynamic = 'force-dynamic'
+
+const logger = createLogger('AsanaGetTaskAPI')
+
+export const POST = withRouteHandler(async (request: NextRequest) => {
+  try {
+    const auth = await checkInternalAuth(request)
+    if (!auth.success || !auth.userId) {
+      return NextResponse.json({ error: auth.error || 'Unauthorized' }, { status: 401 })
+    }
+
+    const parsed = await parseRequest(asanaGetTaskContract, request, {})
+    if (!parsed.success) return parsed.response
+    const { accessToken, taskGid, workspace, project, limit } = parsed.data.body
+
+    if (taskGid) {
+      const taskGidValidation = validateAlphanumericId(taskGid, 'taskGid', 100)
+      if (!taskGidValidation.isValid) {
+        return NextResponse.json({ error: taskGidValidation.error }, { status: 400 })
+      }
+
+      const url = `https://app.asana.com/api/1.0/tasks/${taskGid}?opt_fields=gid,name,notes,completed,assignee,assignee.name,due_on,created_at,modified_at,created_by,created_by.name,resource_type,resource_subtype`
+
+      const response = await fetch(url, {
+        method: 'GET',
+        headers: {
+          Authorization: `Bearer ${accessToken}`,
+          Accept: 'application/json',
+        },
+      })
+
+      if (!response.ok) {
+        const errorText = await response.text()
+        let errorMessage = `Asana API error: ${response.status} ${response.statusText}`
+
+        try {
+          const errorData = JSON.parse(errorText)
+          const asanaError = errorData.errors?.[0]
+          if (asanaError) {
+            errorMessage = `${asanaError.message || errorMessage} (${asanaError.help || ''})`
+          }
+          logger.error('Asana API error:', {
+            status: response.status,
+            statusText: response.statusText,
+            error: errorData,
+          })
+        } catch (_e) {
+          logger.error('Asana API error (unparsed):', {
+            status: response.status,
+            statusText: response.statusText,
+            error: errorText,
+          })
+        }
+
+        return NextResponse.json(
+          {
+            success: false,
+            error: errorMessage,
+            details: errorText,
+          },
+          { status: response.status }
+        )
+      }
+
+      const result = await response.json()
+      const task = result.data
+
+      return NextResponse.json({
+        success: true,
+        ts: new Date().toISOString(),
+        gid: task.gid,
+        resource_type: task.resource_type,
+        resource_subtype: task.resource_subtype,
+        name: task.name,
+        notes: task.notes || '',
+        completed: task.completed || false,
+        assignee: task.assignee
+          ? {
+              gid: task.assignee.gid,
+              name: task.assignee.name,
+            }
+          : undefined,
+        created_by: task.created_by
+          ? {
+              gid: task.created_by.gid,
+              resource_type: task.created_by.resource_type,
+              name: task.created_by.name,
+            }
+          : undefined,
+        due_on: task.due_on || undefined,
+        created_at: task.created_at,
+        modified_at: task.modified_at,
+      })
+    }
+
+    if (!workspace && !project) {
+      logger.error('Either taskGid or workspace/project must be provided')
+      return NextResponse.json(
+        { error: 'Either taskGid or workspace/project must be provided' },
+        { status: 400 }
+      )
+    }
+
+    const params = new URLSearchParams()
+
+    if (project) {
+      const projectValidation = validateAlphanumericId(project, 'project', 100)
+      if (!projectValidation.isValid) {
+        return NextResponse.json({ error: projectValidation.error }, { status: 400 })
+      }
+      params.append('project', project)
+    } else if (workspace) {
+      const workspaceValidation = validateAlphanumericId(workspace, 'workspace', 100)
+      if (!workspaceValidation.isValid) {
+        return NextResponse.json({ error: workspaceValidation.error }, { status: 400 })
+      }
+      params.append('workspace', workspace)
+    }
+
+    if (limit) {
+      params.append('limit', String(limit))
+    } else {
+      params.append('limit', '50')
+    }
+
+    params.append(
+      'opt_fields',
+      'gid,name,notes,completed,assignee,assignee.name,due_on,created_at,modified_at,created_by,created_by.name,resource_type,resource_subtype'
+    )
+
+    const url = `https://app.asana.com/api/1.0/tasks?${params.toString()}`
+
+    const response = await fetch(url, {
+      method: 'GET',
+      headers: {
+        Authorization: `Bearer ${accessToken}`,
+        Accept: 'application/json',
+      },
+    })
+
+    if (!response.ok) {
+      const errorText = await response.text()
+      let errorMessage = `Asana API error: ${response.status} ${response.statusText}`
+
+      try {
+        const errorData = JSON.parse(errorText)
+        const asanaError = errorData.errors?.[0]
+        if (asanaError) {
+          errorMessage = `${asanaError.message || errorMessage} (${asanaError.help || ''})`
+        }
+        logger.error('Asana API error:', {
+          status: response.status,
+          statusText: response.statusText,
+          error: errorData,
+        })
+      } catch (_e) {
+        logger.error('Asana API error (unparsed):', {
+          status: response.status,
+          statusText: response.statusText,
+          error: errorText,
+        })
+      }
+
+      return NextResponse.json(
+        {
+          success: false,
+          error: errorMessage,
+          details: errorText,
+        },
+        { status: response.status }
+      )
+    }
+
+    const result = await response.json()
+    const tasks = result.data
+
+    return NextResponse.json({
+      success: true,
+      ts: new Date().toISOString(),
+      tasks: tasks.map((task: any) => ({
+        gid: task.gid,
+        resource_type: task.resource_type,
+        resource_subtype: task.resource_subtype,
+        name: task.name,
+        notes: task.notes || '',
+        completed: task.completed || false,
+        assignee: task.assignee
+          ? {
+              gid: task.assignee.gid,
+              name: task.assignee.name,
+            }
+          : undefined,
+        created_by: task.created_by
+          ? {
+              gid: task.created_by.gid,
+              resource_type: task.created_by.resource_type,
+              name: task.created_by.name,
+            }
+          : undefined,
+        due_on: task.due_on || undefined,
+        created_at: task.created_at,
+        modified_at: task.modified_at,
+      })),
+      next_page: result.next_page,
+    })
+  } catch (error) {
+    logger.error('Error processing request:', error)
+    return NextResponse.json(
+      {
+        error: 'Failed to retrieve Asana task(s)',
+        details: (error as Error).message,
+      },
+      { status: 500 }
+    )
+  }
+})