feat(asana): expand provider to 101 core REST actions (#215)

## Summary

- expand the Asana provider from its original small action set to 101
core collaboration REST actions across workspaces, users, teams,
projects, sections, tasks, stories/comments, tags, custom
fields/settings, and attachments
- add a shared typed Asana runtime with consistent pagination, error
mapping, request validation, and injected SSRF-guarded egress
- complete advanced project/task search filters, asynchronous duplicate
job responses, date and placement constraints, and official provider
scopes
- support safe external and transit-file attachments with public URL
validation, multipart uploads, encoded filenames, and the 100 MiB limit
- keep provider loading lazy and split definitions/runtime by resource
responsibility

Reference: https://developers.asana.com/reference/rest-api-reference

## Verification

- `npm run fix-check`
- `npx vitest run src/providers/asana/runtime.test.ts` — 259 passed
- `npm test` — 59 files, 825 tests passed
- `npm run build`
- catalog generation — 1129 providers, 12254 actions
- verified 101 unique Asana definitions match 101 executors
- built and smoke-tested the Docker image locally; health passed and the
live catalog exposed all 101 Asana actions

## Notes

- specialized and enterprise-oriented Asana resource families remain out
of scope
- the provider continues to use Personal Access Token authentication;
OAuth-only attachment app linking is intentionally not exposed

---------

Co-authored-by: Kevin Cui <bh@bugs.cc>

Author: cctv1005s

src/providers/asana/actions-attachments.ts

@@ -0,0 +1,99 @@
+import type { ActionDefinition, JsonSchema } from "../../core/types.ts";
+
+import { s } from "../../core/json-schema.ts";
+import { defineProviderAction } from "../../core/provider-definition.ts";
+import {
+  attachmentSchema,
+  gidField,
+  includeFieldsSchema,
+  nextCursorSchema,
+  paginationFields,
+  successOutputSchema,
+} from "./schemas.ts";
+
+const service = "asana";
+
+const attachmentOutputSchema = s.object("The output payload for this action.", {
+  attachment: attachmentSchema,
+});
+
+const attachmentsOutputSchema = s.object("The output payload for this action.", {
+  attachments: s.array("The Asana attachments.", attachmentSchema),
+  nextCursor: nextCursorSchema,
+});
+
+function resourceInput(idField: string, description: string): JsonSchema {
+  return s.object(
+    "The input payload for this action.",
+    {
+      [idField]: gidField(description),
+      includeFields: includeFieldsSchema,
+    },
+    { required: [idField] },
+  );
+}
+
+const createAttachmentInputSchema = s.object(
+  "The input payload for this action.",
+  {
+    parentId: gidField("The parent task, project, or project brief gid."),
+    fileId: s.nonEmptyString("The local transit file identifier to upload."),
+    externalUrl: s.url("The public URL of an external resource to attach."),
+    name: s.nonEmptyString("The attachment name required for an external resource."),
+    includeFields: includeFieldsSchema,
+  },
+  { required: ["parentId"] },
+);
+createAttachmentInputSchema.oneOf = [
+  {
+    required: ["fileId"],
+    not: { anyOf: [{ required: ["externalUrl"] }, { required: ["name"] }] },
+  },
+  {
+    required: ["externalUrl", "name"],
+    not: { required: ["fileId"] },
+  },
+];
+
+export const asanaAttachmentActions: ActionDefinition[] = [
+  defineProviderAction(service, {
+    name: "get_attachment",
+    description: "Get an Asana attachment by gid.",
+    requiredScopes: ["attachments:read"],
+    inputSchema: resourceInput("attachmentId", "The attachment gid."),
+    outputSchema: attachmentOutputSchema,
+  }),
+  defineProviderAction(service, {
+    name: "delete_attachment",
+    description: "Delete an Asana attachment.",
+    requiredScopes: ["attachments:delete"],
+    inputSchema: s.object(
+      "The input payload for this action.",
+      { attachmentId: gidField("The attachment gid.") },
+      { required: ["attachmentId"] },
+    ),
+    outputSchema: successOutputSchema,
+  }),
+  defineProviderAction(service, {
+    name: "list_attachments",
+    description: "List attachments on an Asana task, project, or project brief.",
+    requiredScopes: ["attachments:read"],
+    inputSchema: s.object(
+      "The input payload for this action.",
+      {
+        parentId: gidField("The parent task, project, or project brief gid."),
+        ...paginationFields,
+        includeFields: includeFieldsSchema,
+      },
+      { required: ["parentId"] },
+    ),
+    outputSchema: attachmentsOutputSchema,
+  }),
+  defineProviderAction(service, {
+    name: "create_attachment",
+    description: "Attach a public external URL or local transit file to an Asana object.",
+    requiredScopes: ["attachments:write"],
+    inputSchema: createAttachmentInputSchema,
+    outputSchema: attachmentOutputSchema,
+  }),
+];