@taskforcehq/taskforce 0.3.306 → 0.3.308

package/dist/core/AttachmentLinkService.d.ts

@@ -2,6 +2,7 @@ import type { DatabaseAdapter } from '../storage/databaseAdapter.js';
 export type AttachmentLinkInput = string | {
     path: string;
     fsPath?: string;
+    assetId?: string | null;
     caption?: string;
     displayName?: string;
     originalFilename?: string;
@@ -12,4 +13,6 @@ export interface AttachmentLinkServiceDeps {
     tenantId: string;
     normalizeWorkspaceId: (workspaceId: string) => string;
 }
+export type AttachmentLinkTargetType = 'task' | 'initiative' | 'workstream';
+export declare function syncCanonicalAttachmentLinksForTargetService(deps: AttachmentLinkServiceDeps, targetType: AttachmentLinkTargetType, targetId: string, workspaceId: string, attachments: AttachmentLinkInput[]): void;
 export declare function syncCanonicalTaskAttachmentLinksService(deps: AttachmentLinkServiceDeps, taskId: string, workspaceId: string, attachments: AttachmentLinkInput[]): void;

package/dist/core/AttachmentLinkService.js

@@ -63,6 +63,25 @@ function normalizeAttachmentStorageKey(pathValue, fsPathValue) {
     }
     return null;
 }
+function extractAttachmentAssetId(attachment) {
+    const explicitAssetId = typeof attachment === 'string'
+        ? ''
+        : String(attachment.assetId || '').trim();
+    if (explicitAssetId)
+        return explicitAssetId;
+    const pathValue = typeof attachment === 'string'
+        ? attachment.trim()
+        : String(attachment.path || '').trim();
+    const match = pathValue.match(/^\/api\/taskforce\/documents\/([^/?#]+)\/content(?:[?#].*)?$/);
+    if (!match)
+        return null;
+    try {
+        return decodeURIComponent(match[1]).trim() || null;
+    }
+    catch {
+        return match[1].trim() || null;
+    }
+}
 function ensureExternalReferenceAsset(deps, storageKeyRaw, workspaceId, attachment) {
     const storageKey = String(storageKeyRaw || '').trim();
     const normalizedWorkspaceId = deps.normalizeWorkspaceId(workspaceId);
@@ -124,25 +143,31 @@ function ensureExternalReferenceAsset(deps, storageKeyRaw, workspaceId, attachme
     `).run(assetId, deps.tenantId, normalizedWorkspaceId, 'file', logicalName, logicalName, mimeType, 'external', storageKey, urlHash, Buffer.byteLength(storageKey, 'utf8'), null, null, 1, 'clean', null, null, null, timestamp, timestamp);
     return assetId;
 }
-export function syncCanonicalTaskAttachmentLinksService(deps, taskId, workspaceId, attachments) {
-    const normalizedTaskId = String(taskId || '').trim();
+export function syncCanonicalAttachmentLinksForTargetService(deps, targetType, targetId, workspaceId, attachments) {
+    const normalizedTargetId = String(targetId || '').trim();
     const normalizedWorkspaceId = deps.normalizeWorkspaceId(workspaceId);
-    if (!normalizedTaskId)
+    if (!normalizedTargetId)
         return;
     const supportsTargetType = supportsWorkspaceAssetLinkTargetType(deps.db);
+    const safeTargetType = targetType === 'initiative' || targetType === 'workstream'
+        ? targetType
+        : 'task';
+    const nowIso = new Date().toISOString();
     if (supportsTargetType) {
         deps.db.prepare(`
             UPDATE workspace_asset_links
             SET deleted_at = ?, updated_at = ?
-            WHERE tenant_id = ? AND workspace_id = ? AND target_type = 'task' AND task_id = ? AND deleted_at IS NULL
-        `).run(new Date().toISOString(), new Date().toISOString(), deps.tenantId, normalizedWorkspaceId, normalizedTaskId);
+            WHERE tenant_id = ? AND workspace_id = ? AND target_type = ? AND task_id = ? AND deleted_at IS NULL
+        `).run(nowIso, nowIso, deps.tenantId, normalizedWorkspaceId, safeTargetType, normalizedTargetId);
     }
     else {
+        if (safeTargetType !== 'task')
+            return;
         deps.db.prepare(`
             UPDATE workspace_asset_links
             SET deleted_at = ?, updated_at = ?
             WHERE tenant_id = ? AND workspace_id = ? AND task_id = ? AND deleted_at IS NULL
-        `).run(new Date().toISOString(), new Date().toISOString(), deps.tenantId, normalizedWorkspaceId, normalizedTaskId);
+        `).run(nowIso, nowIso, deps.tenantId, normalizedWorkspaceId, normalizedTargetId);
     }
     const selectAsset = deps.db.prepare(`
         SELECT asset_id, kind
@@ -150,11 +175,17 @@ export function syncCanonicalTaskAttachmentLinksService(deps, taskId, workspaceI
         WHERE tenant_id = ? AND workspace_id = ? AND storage_key = ? AND deleted_at IS NULL
         LIMIT 1
     `);
+    const selectAssetById = deps.db.prepare(`
+        SELECT asset_id, kind
+        FROM workspace_assets
+        WHERE tenant_id = ? AND workspace_id = ? AND asset_id = ? AND deleted_at IS NULL
+        LIMIT 1
+    `);
     const upsertLink = supportsTargetType
         ? deps.db.prepare(`
             INSERT INTO workspace_asset_links (
                 tenant_id, workspace_id, asset_id, target_type, task_id, role, display_name, sort_order, created_at, updated_at, deleted_at
-            ) VALUES (?, ?, ?, 'task', ?, ?, ?, ?, ?, ?, NULL)
+            ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)
             ON CONFLICT (tenant_id, workspace_id, asset_id, task_id, role) DO UPDATE SET
                 target_type = excluded.target_type,
                 display_name = excluded.display_name,
@@ -174,16 +205,27 @@ export function syncCanonicalTaskAttachmentLinksService(deps, taskId, workspaceI
         `);
     attachments.forEach((attachment, index) => {
         const storageKey = normalizeAttachmentStorageKey(typeof attachment === 'string' ? attachment : attachment.path, typeof attachment === 'string' ? null : attachment.fsPath);
-        if (!storageKey)
+        const attachmentAssetId = extractAttachmentAssetId(attachment);
+        if (!storageKey && !attachmentAssetId)
             return;
-        const row = selectAsset.get(deps.tenantId, normalizedWorkspaceId, storageKey);
+        const row = (storageKey
+            ? selectAsset.get(deps.tenantId, normalizedWorkspaceId, storageKey)
+            : null)
+            || (attachmentAssetId
+                ? selectAssetById.get(deps.tenantId, normalizedWorkspaceId, attachmentAssetId)
+                : null);
+        const isExternalStorageKey = typeof storageKey === 'string' && /^https?:\/\//i.test(storageKey);
+        const hasExplicitFileStorageKey = typeof storageKey === 'string'
+            && typeof attachment !== 'string'
+            && typeof attachment.fsPath === 'string'
+            && attachment.fsPath.trim().length > 0;
         const assetId = String(row?.asset_id || '').trim()
-            || ((/^https?:\/\//i.test(storageKey) || (typeof attachment !== 'string' && typeof attachment.fsPath === 'string' && attachment.fsPath.trim().length > 0))
+            || (isExternalStorageKey || hasExplicitFileStorageKey
                 ? ensureExternalReferenceAsset(deps, storageKey, normalizedWorkspaceId, attachment)
                 : '');
         if (!assetId)
             return;
-        const role = /^https?:\/\//i.test(storageKey)
+        const role = isExternalStorageKey
             ? 'reference'
             : String(row?.kind || '').trim() === 'image'
                 ? 'image'
@@ -192,8 +234,11 @@ export function syncCanonicalTaskAttachmentLinksService(deps, taskId, workspaceI
             ? null
             : (typeof attachment === 'string'
                 ? null
-                : buildAttachmentDisplayName(attachment, /^https?:\/\//i.test(storageKey) ? null : path.basename(storageKey)));
+                : buildAttachmentDisplayName(attachment, isExternalStorageKey || !storageKey ? null : path.basename(storageKey)));
         const timestamp = typeof attachment === 'string' ? new Date().toISOString() : (attachment.timestamp || new Date().toISOString());
-        upsertLink.run(deps.tenantId, normalizedWorkspaceId, assetId, normalizedTaskId, role, displayName, index, timestamp, timestamp);
+        upsertLink.run(deps.tenantId, normalizedWorkspaceId, assetId, safeTargetType, normalizedTargetId, role, displayName, index, timestamp, timestamp);
     });
 }
+export function syncCanonicalTaskAttachmentLinksService(deps, taskId, workspaceId, attachments) {
+    syncCanonicalAttachmentLinksForTargetService(deps, 'task', taskId, workspaceId, attachments);
+}

package/dist/core/GlobalSettingsService.js

@@ -194,6 +194,21 @@ export function getGlobalSettingsService(deps) {
                         : {}),
                     ...(typeof global.site.pricingPageEnabled === 'boolean'
                         ? { pricingPageEnabled: global.site.pricingPageEnabled }
+                        : {}),
+                    ...(typeof global.site.animatedBackgroundEnabled === 'boolean'
+                        ? { animatedBackgroundEnabled: global.site.animatedBackgroundEnabled }
+                        : {}),
+                    ...(global.site.siteTheme === 'light' || global.site.siteTheme === 'dark'
+                        ? { siteTheme: global.site.siteTheme }
+                        : {}),
+                    ...(typeof global.site.pricingPageTitle === 'string'
+                        ? { pricingPageTitle: global.site.pricingPageTitle.trim() }
+                        : {}),
+                    ...(typeof global.site.pricingPageDescription === 'string'
+                        ? { pricingPageDescription: global.site.pricingPageDescription.trim() }
+                        : {}),
+                    ...(typeof global.site.pricingPageShowPublicDescriptions === 'boolean'
+                        ? { pricingPageShowPublicDescriptions: global.site.pricingPageShowPublicDescriptions }
                         : {})
                 }
             }
@@ -407,6 +422,21 @@ export function updateGlobalSettingsService(deps, settings) {
                 : {}),
             ...(typeof incoming.pricingPageEnabled === 'boolean'
                 ? { pricingPageEnabled: incoming.pricingPageEnabled }
+                : {}),
+            ...(typeof incoming.animatedBackgroundEnabled === 'boolean'
+                ? { animatedBackgroundEnabled: incoming.animatedBackgroundEnabled }
+                : {}),
+            ...(incoming.siteTheme === 'light' || incoming.siteTheme === 'dark'
+                ? { siteTheme: incoming.siteTheme }
+                : {}),
+            ...(typeof incoming.pricingPageTitle === 'string'
+                ? { pricingPageTitle: incoming.pricingPageTitle.trim() }
+                : {}),
+            ...(typeof incoming.pricingPageDescription === 'string'
+                ? { pricingPageDescription: incoming.pricingPageDescription.trim() }
+                : {}),
+            ...(typeof incoming.pricingPageShowPublicDescriptions === 'boolean'
+                ? { pricingPageShowPublicDescriptions: incoming.pricingPageShowPublicDescriptions }
                 : {})
         };
     }

package/dist/core/GlobalSettingsService.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/core/GlobalSettingsService.test.js

@@ -0,0 +1,45 @@
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import { afterEach, describe, expect, it } from 'vitest';
+import { TaskforceCore } from './Taskforce';
+const roots = [];
+function makeProjectRoot() {
+    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'taskforce-global-settings-'));
+    roots.push(root);
+    return root;
+}
+afterEach(() => {
+    while (roots.length > 0) {
+        const root = roots.pop();
+        if (root)
+            fs.rmSync(root, { recursive: true, force: true });
+    }
+});
+describe('TaskforceCore global site settings', () => {
+    it('persists pricing page title and description', () => {
+        const projectRoot = makeProjectRoot();
+        const storagePath = '.taskforce';
+        const core = new TaskforceCore({ projectRoot, storagePath });
+        core.updateGlobalSettings({
+            site: {
+                pricingPageTitle: 'Choose Your Plan',
+                pricingPageDescription: 'Compare plans and pick the right fit.',
+                pricingPageShowPublicDescriptions: false
+            }
+        });
+        expect(core.getGlobalSettings().site).toMatchObject({
+            pricingPageTitle: 'Choose Your Plan',
+            pricingPageDescription: 'Compare plans and pick the right fit.',
+            pricingPageShowPublicDescriptions: false
+        });
+        core.close();
+        const reopened = new TaskforceCore({ projectRoot, storagePath });
+        expect(reopened.getGlobalSettings().site).toMatchObject({
+            pricingPageTitle: 'Choose Your Plan',
+            pricingPageDescription: 'Compare plans and pick the right fit.',
+            pricingPageShowPublicDescriptions: false
+        });
+        reopened.close();
+    });
+});

package/dist/core/McpTokenService.d.ts

@@ -60,6 +60,11 @@ export declare class McpTokenService {
         workspaceId: string;
         tokenId: string;
     }): McpAccessTokenRecord;
+    deleteMcpAccessToken(input: {
+        actorUserId: string;
+        workspaceId: string;
+        tokenId: string;
+    }): boolean;
     regenerateMcpAccessToken(input: {
         actorUserId: string;
         workspaceId: string;
@@ -111,6 +116,13 @@ export declare class McpTokenService {
         grantId: string;
     }): McpOAuthConnectorGrantRecord;
     authenticateMcpOAuthAccessToken(token: string, workspaceId?: string): McpOAuthAccessTokenAuthResult | null;
+    bindMcpOAuthConnectorGrantAiProfile(input: {
+        grantId: string;
+        workspaceId: string;
+        profileId: string;
+        profileToken: string;
+        profileName: string;
+    }): boolean;
     recordMcpOAuthConnectorGrantUsage(input: {
         grantId: string;
         workspaceId: string;

package/dist/core/McpTokenService.js

@@ -518,6 +518,23 @@ export class McpTokenService {
         }
         return this.rowToMcpAccessTokenRecord(updated);
     }
+    deleteMcpAccessToken(input) {
+        this.getActiveWorkspaceMemberForMcp(input.actorUserId, input.workspaceId);
+        const row = this.getMcpAccessTokenRow(input.tokenId, input.workspaceId);
+        if (!row) {
+            throw new TaskforceRuleError('MCP token not found', 404, 'MCP_TOKEN_NOT_FOUND');
+        }
+        this.assertCanManageOwnMcpAccessToken(input.actorUserId, row);
+        const status = this.resolveMcpAccessTokenStatus(row);
+        if (status === 'active') {
+            throw new TaskforceRuleError('Active MCP tokens must be revoked before deletion', 400, 'MCP_TOKEN_DELETE_ACTIVE');
+        }
+        const result = this.db.prepare(`
+            DELETE FROM mcp_access_tokens
+            WHERE tenant_id = ? AND workspace_id = ? AND id = ?
+        `).run(this.tenantId, input.workspaceId, row.id);
+        return Number(result.changes || 0) > 0;
+    }
     regenerateMcpAccessToken(input) {
         this.getActiveWorkspaceMemberForMcp(input.actorUserId, input.workspaceId);
         const existing = this.getMcpAccessTokenRow(input.tokenId, input.workspaceId);
@@ -872,7 +889,8 @@ export class McpTokenService {
         if (!parsed)
             return null;
         const row = this.db.prepare(`
-            SELECT id, provider, client_id, user_id, workspace_id, scopes_json, token_hash, status, revoked_at
+            SELECT id, provider, client_id, user_id, workspace_id, scopes_json, token_hash, status, revoked_at,
+                   ai_profile_id, ai_profile_token, ai_profile_name
             FROM mcp_oauth_connector_grants
             WHERE tenant_id = ?
               AND token_prefix = ?
@@ -902,8 +920,33 @@ export class McpTokenService {
             provider: this.normalizeMcpOAuthProvider(row.provider),
             scopes,
             status: this.resolveMcpOAuthGrantStatus(row),
+            aiProfileId: row?.ai_profile_id ? String(row.ai_profile_id) : null,
+            aiProfileToken: row?.ai_profile_token ? String(row.ai_profile_token) : null,
+            aiProfileName: row?.ai_profile_name ? String(row.ai_profile_name) : null,
         };
     }
+    bindMcpOAuthConnectorGrantAiProfile(input) {
+        const grantId = String(input.grantId || '').trim();
+        const workspaceId = String(input.workspaceId || '').trim();
+        const profileId = String(input.profileId || '').trim();
+        const profileToken = String(input.profileToken || '').trim();
+        const profileName = String(input.profileName || '').trim();
+        if (!grantId || !workspaceId || !profileId || !profileToken || !profileName)
+            return false;
+        const now = new Date().toISOString();
+        const result = this.db.prepare(`
+            UPDATE mcp_oauth_connector_grants
+            SET ai_profile_id = ?,
+                ai_profile_token = ?,
+                ai_profile_name = ?,
+                updated_at = ?
+            WHERE tenant_id = ?
+              AND workspace_id = ?
+              AND id = ?
+              AND status = 'active'
+        `).run(profileId, profileToken, profileName, now, this.tenantId, workspaceId, grantId);
+        return Number(result?.changes || 0) > 0;
+    }
     recordMcpOAuthConnectorGrantUsage(input) {
         const grantId = String(input.grantId || '').trim();
         const workspaceId = String(input.workspaceId || '').trim();

package/dist/core/PlanEntitlementService.d.ts

@@ -20,6 +20,14 @@ export declare class PlanEntitlementService {
     private normalizeOptionalCatalogMarketingCopy;
     private canonicalizePlanFeatureKey;
     private normalizeOptionalCatalogDisplayOrder;
+    private normalizeOptionalCatalogDescriptionVisible;
+    private isBuiltInPlanFeatureKey;
+    private normalizeRequiredCatalogLabel;
+    private slugifyCustomPlanFeatureLabel;
+    private featureKeyExists;
+    private generateUniqueCustomPlanFeatureKey;
+    private listCustomPlanFeatureCatalogEntries;
+    private getCustomPlanFeatureCatalogEntry;
     private listPlanFeatureCatalogOverrideMap;
     normalizeEntitlementState(value: unknown): EntitlementState;
     private normalizeFeatureAccess;
@@ -171,10 +179,22 @@ export declare class PlanEntitlementService {
     };
     listPlanCatalog(): PlanCatalogSnapshot[];
     listPlanFeatureCatalog(): PlanFeatureCatalogItem[];
+    createCustomPlanFeatureCatalogEntry(input: {
+        label: string;
+        description?: string | null;
+        publicLabel?: string | null;
+        publicDescription?: string | null;
+        publicDescriptionVisible?: boolean | null;
+        publicDisplayOrder?: number | null;
+    }): PlanFeatureCatalogItem;
+    deleteCustomPlanFeatureCatalogEntry(featureKeyRaw: unknown): void;
     updatePlanFeatureCatalogMarketingCopy(input: {
         featureKey: string;
+        label?: string | null;
+        description?: string | null;
         publicLabel?: string | null;
         publicDescription?: string | null;
+        publicDescriptionVisible?: boolean | null;
         publicDisplayOrder?: number | null;
     }): PlanFeatureCatalogItem;
     listPlanVersions(planId: string): PlanVersionSnapshot[];