From d1630e69b2d918da559b5053ac975ab5730cbfdb Mon Sep 17 00:00:00 2001
From: Mike <mike@payfrit.com>
Date: Mon, 23 Mar 2026 19:04:15 +0000
Subject: [PATCH] Add team task tracker endpoints to public routes

Bot-to-bot endpoints don't have user tokens, so they need to
bypass auth middleware.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 api/helpers.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/api/helpers.php b/api/helpers.php
index 8790dc3..cc040f1 100644
--- a/api/helpers.php
+++ b/api/helpers.php
@@ -516,6 +516,11 @@ const PUBLIC_ROUTES = [
     '/api/tabs/pendingOrders.php',
     '/api/tabs/increaseAuth.php',
     '/api/tabs/cancel.php',
+    // team tasks (bot-to-bot, no user auth)
+    '/api/tasks/team/create.php',
+    '/api/tasks/team/update.php',
+    '/api/tasks/team/active.php',
+    '/api/tasks/team/list.php',
 ];
 
 /**