@taskforcehq/taskforce 0.3.306 → 0.3.308

package/dist/server/routes/admin.js

@@ -72,6 +72,7 @@ import { buildCloudMcpRuntimeAuth, resolveErrorStatusCode } from './shared.js';
 import { buildAuthBehavior, buildSiteBehavior, getRouteEmailConfig, resolvePublicAuthBaseUrl, resolveRuntimeConfigBaseUrl, } from './authSupport.js';
 import { applyWorkspaceRepair, scanWorkspaceRepair } from '../../sync/workspaceRepair.js';
 import { testMintAppleClientSecret } from '../auth/providers/appleClientSecret.js';
+const PRICING_PAGE_DESCRIPTION_MAX_LENGTH = 2000;
 // === SECTION: Registration ===
 export function registerAdminRoutes(deps) {
     const { addRoute, core, context, requestWorkspaceId, requestUserId, requestRole, requestHeader, requestRuntimeMode, ensureAppAccess, ensureAdminRole, ensureCloudPlanData, requireCloudRuntime, resolveAuthenticatedUserId, resolveAdminRequestActor, auditAdminAction, resolveEffectiveObjectStorageConfig, getObjectStorageClient, taskAssetStore, normalizeDocumentPathInput, ensureWithinDir, getAssetMetadata, markAssetDeleted, clearAssetDeleted, removeAssetMetadata, getStorageTelemetry, appendStorageTelemetry, getStorageIntegrityHistory, appendStorageIntegrityHistory, getDocumentPurgeHistory, appendDocumentPurgeHistory, getCollaborationTelemetry, isCollaborationPolicyEnabled, normalizeMcpOauthScopeString, MCP_TOKEN_SCOPE_VALUES, MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS, MCP_WRITE_RATE_LIMIT_ENABLED, MCP_WRITE_RATE_LIMIT_ACTOR_MAX_REQUESTS, MCP_WRITE_RATE_LIMIT_WORKSPACE_MAX_REQUESTS, MCP_WRITE_RATE_LIMIT_WINDOW_MS, } = deps;
@@ -79,6 +80,26 @@ export function registerAdminRoutes(deps) {
     const workspaceAssetStore = typeof core.getDatabaseAdapter === 'function' && typeof core.getTenantId === 'function'
         ? new WorkspaceAssetStore(core.getDatabaseAdapter(), core.getTenantId())
         : null;
+    const isAiProfileAvatarStorageKey = (storageKey, workspaceId) => {
+        const normalized = String(storageKey || '').replace(/\\/g, '/');
+        return normalized.startsWith(`workspaces/${workspaceId}/assets/images/ai-profiles/`)
+            && normalized.includes('/avatar/');
+    };
+    const listReferencedAiProfileAvatarStorageKeys = (workspaceId) => {
+        const referenced = new Set();
+        const profiles = typeof core.listAiProfiles === 'function'
+            ? core.listAiProfiles(workspaceId, { includeArchived: true })
+            : [];
+        for (const profile of Array.isArray(profiles) ? profiles : []) {
+            for (const value of [profile?.avatarUrl, profile?.avatarSourceUrl]) {
+                const storageKey = normalizeDocumentPathInput(value);
+                if (!storageKey || !isAiProfileAvatarStorageKey(storageKey, workspaceId))
+                    continue;
+                referenced.add(storageKey);
+            }
+        }
+        return referenced;
+    };
     // === SECTION: Email helpers ===
     const resolveEffectiveVirusScanSettings = () => {
         const settings = core.getGlobalSettings().objectStorage || {};
@@ -95,11 +116,15 @@ export function registerAdminRoutes(deps) {
     };
     // === SECTION: MCP helpers ===
     const MCP_CONNECTION_TEST_TIMEOUT_MS = 5000;
-    const writeMcpHttpError = (res, statusCode, message) => {
+    const writeMcpHttpError = (res, statusCode, message, data) => {
         res.writeHead(statusCode, { 'Content-Type': 'application/json' });
         res.end(JSON.stringify({
             jsonrpc: '2.0',
-            error: { code: -32000, message },
+            error: {
+                code: -32000,
+                message,
+                ...(data ? { data } : {}),
+            },
             id: null,
         }));
     };
@@ -394,6 +419,8 @@ export function registerAdminRoutes(deps) {
                 authenticatedViaOAuth: oauthAuth || null,
                 userId: null,
                 ...bootstrap,
+                aiProfileToken: bootstrap.aiProfileToken || oauthAuth?.aiProfileToken || null,
+                aiProfileName: bootstrap.aiProfileName || oauthAuth?.aiProfileName || null,
             };
         }
         core.addMcpAuditLog({
@@ -506,6 +533,7 @@ export function registerAdminRoutes(deps) {
             return;
         }
         const authScopes = auth.authenticatedViaToken?.scopes || auth.authenticatedViaOAuth?.scopes || [];
+        const requestId = String(req.headers['x-request-id'] || req.headers['x-railway-request-id'] || '').trim() || randomUUID();
         const deniedToolName = findDeniedCloudMcpToolName(body, authScopes);
         if (deniedToolName) {
             core.addMcpAuditLog({
@@ -515,7 +543,7 @@ export function registerAdminRoutes(deps) {
                 tokenId: auth.authenticatedViaToken?.tokenId || auth.authenticatedViaOAuth?.grantId || null,
                 toolName: deniedToolName,
                 details: {
-                    requestId: String(req.headers['x-request-id'] || req.headers['x-railway-request-id'] || '').trim() || randomUUID(),
+                    requestId,
                     ip: req.socket?.remoteAddress || null,
                     userAgent: requestHeader(req, 'user-agent', '') || null,
                     outcome: 'deny',
@@ -528,11 +556,13 @@ export function registerAdminRoutes(deps) {
         }
         if (!applyCloudMcpWriteRateLimit(req, res, auth, body))
             return;
+        let runtime = null;
         try {
-            const runtime = createTaskforceMcpServer({
+            runtime = createTaskforceMcpServer({
                 projectRoot: core.getPaths().projectRoot,
                 tenantId: core.getTenantId(),
                 workspaceId: auth.workspaceId,
+                core,
                 serverName: 'taskforce-cloud',
                 logStartup: false,
                 runtimeMode: 'cloud',
@@ -540,7 +570,7 @@ export function registerAdminRoutes(deps) {
                     req,
                     auth,
                     requestHeader,
-                    requestId: String(req.headers['x-request-id'] || req.headers['x-railway-request-id'] || '').trim() || randomUUID(),
+                    requestId,
                     authScopes,
                 }),
             });
@@ -557,8 +587,27 @@ export function registerAdminRoutes(deps) {
             recordCloudMcpCredentialUsage(req, auth.authenticatedViaToken, auth.authenticatedViaOAuth);
         }
         catch (error) {
+            console.error('[Taskforce MCP] Cloud transport request failed:', {
+                requestId,
+                kind: 'tool_transport_failure',
+                message: error instanceof Error ? error.message : String(error),
+            });
             if (!res.headersSent) {
-                writeMcpHttpError(res, 500, 'Internal server error.');
+                writeMcpHttpError(res, 500, 'MCP transport failure.', {
+                    kind: 'tool_transport_failure',
+                    retryable: true,
+                    requestId,
+                });
+            }
+        }
+        finally {
+            if (runtime) {
+                try {
+                    await runtime.server.close();
+                }
+                catch (closeError) {
+                    console.warn('[Taskforce MCP] Cloud transport cleanup failed:', closeError);
+                }
             }
         }
     };
@@ -664,6 +713,88 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ success: false, error: String(error?.message || 'Unable to list feature catalog'), code: error?.code }));
         }
     });
+    addRoute('POST', '/api/platform/features', async (req, res) => {
+        if (!ensureCloudPlanData(req, res))
+            return;
+        if (!ensureAdminRole(req)) {
+            res.writeHead(403, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Forbidden: system admin role required.' }));
+            return;
+        }
+        const body = await parseJsonBody(req);
+        const label = String(body?.label || '');
+        const description = body?.description === undefined || body?.description === null
+            ? body?.description
+            : String(body.description);
+        const publicLabel = body?.publicLabel === undefined || body?.publicLabel === null
+            ? body?.publicLabel
+            : String(body.publicLabel);
+        const publicDescription = body?.publicDescription === undefined || body?.publicDescription === null
+            ? body?.publicDescription
+            : String(body.publicDescription);
+        const publicDescriptionVisible = body?.publicDescriptionVisible === undefined || body?.publicDescriptionVisible === null
+            ? body?.publicDescriptionVisible
+            : (body.publicDescriptionVisible === false ? false : true);
+        const publicDisplayOrder = body?.publicDisplayOrder === undefined || body?.publicDisplayOrder === null || body?.publicDisplayOrder === ''
+            ? null
+            : Math.max(0, Math.floor(Number(body.publicDisplayOrder)));
+        if (!label.trim()) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature label is required.', code: 'PLAN_FEATURE_LABEL_REQUIRED' }));
+            return;
+        }
+        if (label.trim().length > 120) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature label must be 120 characters or fewer.', code: 'PLAN_FEATURE_LABEL_TOO_LONG' }));
+            return;
+        }
+        if (typeof description === 'string' && description.trim().length > 280) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature description must be 280 characters or fewer.', code: 'PLAN_FEATURE_DESCRIPTION_TOO_LONG' }));
+            return;
+        }
+        if (typeof publicLabel === 'string' && publicLabel.trim().length > 120) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Public label must be 120 characters or fewer.', code: 'PLAN_FEATURE_PUBLIC_LABEL_TOO_LONG' }));
+            return;
+        }
+        if (typeof publicDescription === 'string' && publicDescription.trim().length > 280) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Public description must be 280 characters or fewer.', code: 'PLAN_FEATURE_PUBLIC_DESCRIPTION_TOO_LONG' }));
+            return;
+        }
+        if (publicDisplayOrder !== null && !Number.isFinite(publicDisplayOrder)) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Public display order must be a non-negative number.', code: 'PLAN_FEATURE_PUBLIC_DISPLAY_ORDER_INVALID' }));
+            return;
+        }
+        try {
+            const feature = core.createCustomPlanFeatureCatalogEntry({
+                label,
+                description,
+                publicLabel,
+                publicDescription,
+                publicDescriptionVisible,
+                publicDisplayOrder
+            });
+            auditAdminAction(req, 'platform-plan-feature-catalog-created', {
+                featureKey: feature.featureKey,
+                label: feature.label,
+                description: feature.description,
+                publicLabel: feature.publicLabel ?? null,
+                publicDescription: feature.publicDescription ?? null,
+                publicDescriptionVisible: feature.publicDescriptionVisible ?? null,
+                publicDisplayOrder: feature.publicDisplayOrder ?? null
+            });
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: true, feature }));
+        }
+        catch (error) {
+            const statusCode = resolveErrorStatusCode(error, 400);
+            res.writeHead(statusCode, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: String(error?.message || 'Unable to create feature catalog entry'), code: error?.code }));
+        }
+    });
     addRoute('PATCH', '/api/platform/features/:featureKey', async (req, res, params) => {
         if (!ensureCloudPlanData(req, res))
             return;
@@ -674,15 +805,34 @@ export function registerAdminRoutes(deps) {
         }
         const body = await parseJsonBody(req);
         const featureKey = String(params.featureKey || '').trim();
+        const label = body?.label === undefined || body?.label === null
+            ? body?.label
+            : String(body.label);
+        const description = body?.description === undefined || body?.description === null
+            ? body?.description
+            : String(body.description);
         const publicLabel = body?.publicLabel === undefined || body?.publicLabel === null
             ? body?.publicLabel
             : String(body.publicLabel);
         const publicDescription = body?.publicDescription === undefined || body?.publicDescription === null
             ? body?.publicDescription
             : String(body.publicDescription);
+        const publicDescriptionVisible = body?.publicDescriptionVisible === undefined || body?.publicDescriptionVisible === null
+            ? body?.publicDescriptionVisible
+            : (body.publicDescriptionVisible === false ? false : true);
         const publicDisplayOrder = body?.publicDisplayOrder === undefined || body?.publicDisplayOrder === null || body?.publicDisplayOrder === ''
             ? null
             : Math.max(0, Math.floor(Number(body.publicDisplayOrder)));
+        if (typeof label === 'string' && label.trim().length > 120) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature label must be 120 characters or fewer.', code: 'PLAN_FEATURE_LABEL_TOO_LONG' }));
+            return;
+        }
+        if (typeof description === 'string' && description.trim().length > 280) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature description must be 280 characters or fewer.', code: 'PLAN_FEATURE_DESCRIPTION_TOO_LONG' }));
+            return;
+        }
         if (typeof publicLabel === 'string' && publicLabel.trim().length > 120) {
             res.writeHead(400, { 'Content-Type': 'application/json' });
             res.end(JSON.stringify({ success: false, error: 'Public label must be 120 characters or fewer.', code: 'PLAN_FEATURE_PUBLIC_LABEL_TOO_LONG' }));
@@ -701,14 +851,20 @@ export function registerAdminRoutes(deps) {
         try {
             const feature = core.updatePlanFeatureCatalogMarketingCopy({
                 featureKey,
+                label,
+                description,
                 publicLabel,
                 publicDescription,
+                publicDescriptionVisible,
                 publicDisplayOrder
             });
             auditAdminAction(req, 'platform-plan-feature-catalog-updated', {
                 featureKey,
+                label: feature.label,
+                description: feature.description,
                 publicLabel: feature.publicLabel ?? null,
                 publicDescription: feature.publicDescription ?? null,
+                publicDescriptionVisible: feature.publicDescriptionVisible ?? null,
                 publicDisplayOrder: feature.publicDisplayOrder ?? null
             });
             res.writeHead(200, { 'Content-Type': 'application/json' });
@@ -720,6 +876,27 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ success: false, error: String(error?.message || 'Unable to update feature catalog entry'), code: error?.code }));
         }
     });
+    addRoute('DELETE', '/api/platform/features/:featureKey', async (req, res, params) => {
+        if (!ensureCloudPlanData(req, res))
+            return;
+        if (!ensureAdminRole(req)) {
+            res.writeHead(403, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Forbidden: system admin role required.' }));
+            return;
+        }
+        const featureKey = String(params.featureKey || '').trim();
+        try {
+            core.deleteCustomPlanFeatureCatalogEntry(featureKey);
+            auditAdminAction(req, 'platform-plan-feature-catalog-deleted', { featureKey });
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: true }));
+        }
+        catch (error) {
+            const statusCode = resolveErrorStatusCode(error, 400);
+            res.writeHead(statusCode, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: String(error?.message || 'Unable to delete feature catalog entry'), code: error?.code }));
+        }
+    });
     addRoute('POST', '/api/platform/plans/:planId/versions', async (req, res, params) => {
         if (!ensureCloudPlanData(req, res))
             return;
@@ -1231,8 +1408,10 @@ export function registerAdminRoutes(deps) {
         }
         const globalSettings = core.getGlobalSettings();
         const authSettings = globalSettings.auth || {};
+        const siteSettings = globalSettings.site || {};
         const onboardingPolicy = core.getOnboardingPolicy();
         const effective = buildAuthBehavior(core);
+        const effectiveSite = buildSiteBehavior(core);
         res.writeHead(200, { 'Content-Type': 'application/json' });
         res.end(JSON.stringify({
             settings: {
@@ -1242,6 +1421,13 @@ export function registerAdminRoutes(deps) {
                 ...(typeof authSettings.authRateLimitEnabled === 'boolean' ? { authRateLimitEnabled: authSettings.authRateLimitEnabled } : {}),
                 ...(typeof authSettings.authRateLimitMaxRequests === 'number' ? { authRateLimitMaxRequests: authSettings.authRateLimitMaxRequests } : {}),
                 ...(typeof authSettings.authRateLimitWindowMs === 'number' ? { authRateLimitWindowMs: authSettings.authRateLimitWindowMs } : {}),
+                ...(typeof siteSettings.showRunTaskforceLocally === 'boolean' ? { showRunTaskforceLocally: siteSettings.showRunTaskforceLocally } : {}),
+                ...(typeof siteSettings.pricingPageEnabled === 'boolean' ? { pricingPageEnabled: siteSettings.pricingPageEnabled } : {}),
+                ...(typeof siteSettings.animatedBackgroundEnabled === 'boolean' ? { animatedBackgroundEnabled: siteSettings.animatedBackgroundEnabled } : {}),
+                ...(siteSettings.siteTheme === 'light' || siteSettings.siteTheme === 'dark' ? { siteTheme: siteSettings.siteTheme } : {}),
+                ...(typeof siteSettings.pricingPageTitle === 'string' ? { pricingPageTitle: siteSettings.pricingPageTitle } : {}),
+                ...(typeof siteSettings.pricingPageDescription === 'string' ? { pricingPageDescription: siteSettings.pricingPageDescription } : {}),
+                ...(typeof siteSettings.pricingPageShowPublicDescriptions === 'boolean' ? { pricingPageShowPublicDescriptions: siteSettings.pricingPageShowPublicDescriptions } : {}),
                 onboardingPolicyMode: onboardingPolicy.mode,
                 onboardingPlanId: onboardingPolicy.planId
             },
@@ -1252,6 +1438,13 @@ export function registerAdminRoutes(deps) {
                 authRateLimitEnabled: effective.authRateLimitEnabled,
                 authRateLimitMaxRequests: effective.authRateLimitMaxRequests,
                 authRateLimitWindowMs: effective.authRateLimitWindowMs,
+                showRunTaskforceLocally: effectiveSite.showRunTaskforceLocally,
+                pricingPageEnabled: effectiveSite.pricingPageEnabled,
+                animatedBackgroundEnabled: effectiveSite.animatedBackgroundEnabled,
+                siteTheme: effectiveSite.siteTheme,
+                pricingPageTitle: effectiveSite.pricingPageTitle,
+                pricingPageDescription: effectiveSite.pricingPageDescription,
+                pricingPageShowPublicDescriptions: effectiveSite.pricingPageShowPublicDescriptions,
                 onboardingPolicyMode: effective.onboardingPolicyMode,
                 onboardingPlanId: effective.onboardingPlanId
             }
@@ -1273,11 +1466,31 @@ export function registerAdminRoutes(deps) {
                     : {}),
                 ...(typeof siteSettings.pricingPageEnabled === 'boolean'
                     ? { pricingPageEnabled: siteSettings.pricingPageEnabled }
+                    : {}),
+                ...(typeof siteSettings.animatedBackgroundEnabled === 'boolean'
+                    ? { animatedBackgroundEnabled: siteSettings.animatedBackgroundEnabled }
+                    : {}),
+                ...(siteSettings.siteTheme === 'light' || siteSettings.siteTheme === 'dark'
+                    ? { siteTheme: siteSettings.siteTheme }
+                    : {}),
+                ...(typeof siteSettings.pricingPageTitle === 'string'
+                    ? { pricingPageTitle: siteSettings.pricingPageTitle }
+                    : {}),
+                ...(typeof siteSettings.pricingPageDescription === 'string'
+                    ? { pricingPageDescription: siteSettings.pricingPageDescription }
+                    : {}),
+                ...(typeof siteSettings.pricingPageShowPublicDescriptions === 'boolean'
+                    ? { pricingPageShowPublicDescriptions: siteSettings.pricingPageShowPublicDescriptions }
                     : {})
             },
             status: {
                 showRunTaskforceLocally: siteBehavior.showRunTaskforceLocally,
-                pricingPageEnabled: siteBehavior.pricingPageEnabled
+                pricingPageEnabled: siteBehavior.pricingPageEnabled,
+                animatedBackgroundEnabled: siteBehavior.animatedBackgroundEnabled,
+                siteTheme: siteBehavior.siteTheme,
+                pricingPageTitle: siteBehavior.pricingPageTitle,
+                pricingPageDescription: siteBehavior.pricingPageDescription,
+                pricingPageShowPublicDescriptions: siteBehavior.pricingPageShowPublicDescriptions
             }
         }));
     };
@@ -1448,9 +1661,11 @@ export function registerAdminRoutes(deps) {
         }
         const reqUrl = new URL(req.url || '/api/taskforce/admin/orphaned-assets', 'http://localhost');
         const workspaceId = String(reqUrl.searchParams.get('workspaceId') || requestWorkspaceId(req) || '').trim();
+        const aiProfileAvatarStorageKeys = listReferencedAiProfileAvatarStorageKeys(workspaceId);
         const assets = workspaceAssetStore.listAllByWorkspace(workspaceId, {
             includeDeleted: false
-        }).filter((asset) => workspaceAssetStore.listLinksForAsset(asset.assetId, workspaceId).every((link) => !!link.deletedAt))
+        }).filter((asset) => (!aiProfileAvatarStorageKeys.has(asset.storageKey)
+            && workspaceAssetStore.listLinksForAsset(asset.assetId, workspaceId).every((link) => !!link.deletedAt)))
             .map((asset) => ({
             assetId: asset.assetId,
             workspaceId: asset.workspaceId,
@@ -1529,6 +1744,11 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ error: 'Asset not found.' }));
             return;
         }
+        if (listReferencedAiProfileAvatarStorageKeys(workspaceId).has(asset.storageKey)) {
+            res.writeHead(409, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Asset is still referenced by an AI profile avatar.' }));
+            return;
+        }
         const objectStorageClient = getObjectStorageClient();
         const { basePath } = core.getPaths();
         try {
@@ -1891,6 +2111,25 @@ export function registerAdminRoutes(deps) {
             : body?.onboardingPlanId === null
                 ? null
                 : currentOnboardingPolicy.planId;
+        const pricingPageTitle = typeof body?.pricingPageTitle === 'string'
+            ? body.pricingPageTitle.trim()
+            : undefined;
+        const pricingPageDescription = typeof body?.pricingPageDescription === 'string'
+            ? body.pricingPageDescription.trim()
+            : undefined;
+        const siteTheme = body?.siteTheme === 'light' || body?.siteTheme === 'dark'
+            ? body.siteTheme
+            : undefined;
+        if (pricingPageTitle !== undefined && pricingPageTitle.length > 120) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Pricing page title must be 120 characters or fewer.', code: 'PRICING_PAGE_TITLE_TOO_LONG' }));
+            return;
+        }
+        if (pricingPageDescription !== undefined && pricingPageDescription.length > PRICING_PAGE_DESCRIPTION_MAX_LENGTH) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: `Pricing page description must be ${PRICING_PAGE_DESCRIPTION_MAX_LENGTH} characters or fewer.`, code: 'PRICING_PAGE_DESCRIPTION_TOO_LONG' }));
+            return;
+        }
         const validation = core.validateOnboardingPolicy({
             mode: onboardingPolicyMode,
             planId: onboardingPlanId
@@ -1900,6 +2139,29 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ error: validation.message || 'Invalid onboarding policy.', code: validation.code, details: validation.details }));
             return;
         }
+        const siteSettingsUpdate = {
+            ...(typeof body?.showRunTaskforceLocally === 'boolean'
+                ? { showRunTaskforceLocally: body.showRunTaskforceLocally }
+                : {}),
+            ...(typeof body?.pricingPageEnabled === 'boolean'
+                ? { pricingPageEnabled: body.pricingPageEnabled }
+                : {}),
+            ...(typeof body?.animatedBackgroundEnabled === 'boolean'
+                ? { animatedBackgroundEnabled: body.animatedBackgroundEnabled }
+                : {}),
+            ...(siteTheme !== undefined
+                ? { siteTheme }
+                : {}),
+            ...(pricingPageTitle !== undefined
+                ? { pricingPageTitle }
+                : {}),
+            ...(pricingPageDescription !== undefined
+                ? { pricingPageDescription }
+                : {}),
+            ...(typeof body?.pricingPageShowPublicDescriptions === 'boolean'
+                ? { pricingPageShowPublicDescriptions: body.pricingPageShowPublicDescriptions }
+                : {})
+        };
         core.updateGlobalSettings({
             auth: {
                 ...(typeof body?.allowSelfRegistration === 'boolean' ? { allowSelfRegistration: body.allowSelfRegistration } : {}),
@@ -1916,7 +2178,10 @@ export function registerAdminRoutes(deps) {
                     mode: onboardingPolicyMode,
                     planId: onboardingPlanId ?? null
                 }
-            }
+            },
+            ...(Object.keys(siteSettingsUpdate).length > 0
+                ? { site: siteSettingsUpdate }
+                : {})
         });
         res.writeHead(200, { 'Content-Type': 'application/json' });
         res.end(JSON.stringify({ success: true }));
@@ -1928,6 +2193,25 @@ export function registerAdminRoutes(deps) {
             return;
         }
         const body = await parseJsonBody(req);
+        const pricingPageTitle = typeof body?.pricingPageTitle === 'string'
+            ? body.pricingPageTitle.trim()
+            : undefined;
+        const pricingPageDescription = typeof body?.pricingPageDescription === 'string'
+            ? body.pricingPageDescription.trim()
+            : undefined;
+        const siteTheme = body?.siteTheme === 'light' || body?.siteTheme === 'dark'
+            ? body.siteTheme
+            : undefined;
+        if (pricingPageTitle !== undefined && pricingPageTitle.length > 120) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Pricing page title must be 120 characters or fewer.', code: 'PRICING_PAGE_TITLE_TOO_LONG' }));
+            return;
+        }
+        if (pricingPageDescription !== undefined && pricingPageDescription.length > PRICING_PAGE_DESCRIPTION_MAX_LENGTH) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: `Pricing page description must be ${PRICING_PAGE_DESCRIPTION_MAX_LENGTH} characters or fewer.`, code: 'PRICING_PAGE_DESCRIPTION_TOO_LONG' }));
+            return;
+        }
         core.updateGlobalSettings({
             site: {
                 ...(typeof body?.showRunTaskforceLocally === 'boolean'
@@ -1935,6 +2219,21 @@ export function registerAdminRoutes(deps) {
                     : {}),
                 ...(typeof body?.pricingPageEnabled === 'boolean'
                     ? { pricingPageEnabled: body.pricingPageEnabled }
+                    : {}),
+                ...(typeof body?.animatedBackgroundEnabled === 'boolean'
+                    ? { animatedBackgroundEnabled: body.animatedBackgroundEnabled }
+                    : {}),
+                ...(siteTheme !== undefined
+                    ? { siteTheme }
+                    : {}),
+                ...(pricingPageTitle !== undefined
+                    ? { pricingPageTitle }
+                    : {}),
+                ...(pricingPageDescription !== undefined
+                    ? { pricingPageDescription }
+                    : {}),
+                ...(typeof body?.pricingPageShowPublicDescriptions === 'boolean'
+                    ? { pricingPageShowPublicDescriptions: body.pricingPageShowPublicDescriptions }
                     : {})
             }
         });
@@ -2509,6 +2808,26 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ success: false, error: error.message, code: error?.code || 'MCP_TOKEN_REVOKE_FAILED' }));
         }
     });
+    addRoute('DELETE', '/api/taskforce/settings/mcp/tokens/:id', async (req, res, params) => {
+        if (!ensureAppAccess(req, res))
+            return;
+        const userId = resolveAuthenticatedUserId(req);
+        if (!userId || userId === 'anonymous') {
+            res.writeHead(401, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Authentication required.' }));
+            return;
+        }
+        try {
+            const deleted = core.deleteMcpAccessToken({ actorUserId: userId, workspaceId: requestWorkspaceId(req), tokenId: params.id });
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: true, deleted }));
+        }
+        catch (error) {
+            const statusCode = resolveErrorStatusCode(error);
+            res.writeHead(statusCode, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: error.message, code: error?.code || 'MCP_TOKEN_DELETE_FAILED' }));
+        }
+    });
     addRoute('POST', '/api/taskforce/settings/mcp/tokens/:id/regenerate', async (req, res, params) => {
         if (!ensureAppAccess(req, res))
             return;

package/dist/server/routes/annotatedAttachments.js

@@ -40,6 +40,57 @@ export function registerAnnotatedAttachmentRoutes(deps) {
         });
         return false;
     };
+    addRoute('GET', '/api/taskforce/annotated-attachments/images', async (req, res) => {
+        const workspaceId = requestWorkspaceId(req);
+        if (!ensureAnnotatedAttachmentAccess(req, res, workspaceId))
+            return;
+        try {
+            const assetStore = core.getWorkspaceAssetStore();
+            const imageAssets = assetStore
+                .listAllByWorkspace(workspaceId, { kind: 'image' })
+                .filter((entry) => !entry.deletedAt);
+            const images = imageAssets.map((asset) => {
+                const activeLinks = assetStore
+                    .listLinksForAsset(asset.assetId, workspaceId)
+                    .filter((entry) => !entry.deletedAt)
+                    .filter((entry) => entry.targetType !== 'task' || (!!entry.taskId && !!core.getTask(entry.taskId, workspaceId)));
+                const activeTaskLinks = activeLinks
+                    .filter((entry) => entry.targetType === 'task' && !!entry.taskId)
+                    .filter((entry) => !!core.getTask(entry.taskId, workspaceId));
+                const firstTaskLink = activeTaskLinks[0] || null;
+                const linkedTask = firstTaskLink?.taskId
+                    ? core.getTask(firstTaskLink.taskId, workspaceId)
+                    : null;
+                const sessions = core.listAnnotatedAttachmentSessions({
+                    workspaceId,
+                    imageAssetId: asset.assetId,
+                });
+                const displayName = String(asset.logicalName || asset.originalFilename || asset.assetId).trim() || asset.assetId;
+                return {
+                    assetId: asset.assetId,
+                    referenceNumber: typeof asset.referenceNumber === 'number' ? asset.referenceNumber : null,
+                    imageReferenceLabel: getImageReferenceLabel(asset) || null,
+                    path: `/api/taskforce/context/${encodeURIComponent(asset.storageKey)}`,
+                    displayName,
+                    originalFilename: asset.originalFilename || null,
+                    mimeType: asset.mimeType,
+                    sizeBytes: asset.sizeBytes,
+                    updatedAt: asset.updatedAt || null,
+                    attachmentCount: activeTaskLinks.length,
+                    sessionCount: sessions.length,
+                    taskId: firstTaskLink?.taskId || null,
+                    taskReferenceLabel: linkedTask?.referenceLabel || null,
+                };
+            });
+            res.setHeader('Cache-Control', 'no-store');
+            writeJson(res, 200, { images });
+        }
+        catch (error) {
+            writeJson(res, resolveErrorStatusCode(error, 400), {
+                error: String(error?.message || 'Failed to list annotated attachment images.'),
+            });
+        }
+    });
     addRoute('GET', '/api/taskforce/annotated-attachments/images/:reference', async (req, res, params) => {
         const workspaceId = requestWorkspaceId(req);
         if (!ensureAnnotatedAttachmentAccess(req, res, workspaceId))

package/dist/server/routes/auth.d.ts

@@ -38,6 +38,8 @@
  *   GET  /api/taskforce/auth/workspace-members
  *   GET  /api/taskforce/workspace/assignee-options
  *   POST /api/taskforce/workspace/ai-profiles/avatar
+ *   POST /api/taskforce/workspace/ai-profiles/avatar/upload
+ *   POST /api/taskforce/workspace/ai-profiles/surface-type
  *   GET  /api/taskforce/admin/users
  *   POST /api/taskforce/admin/users/invite
  *   PATCH /api/taskforce/admin/users/:id/role
@@ -52,6 +54,7 @@ import type { TaskforceCore } from '../../core/Taskforce.js';
 import { type RouteHandler, type RouteContext } from './primitives.js';
 import type { ResolvedObjectStorageConfig } from '../../storage/objectStorage.js';
 import { ObjectStorageClient } from '../../storage/objectStorageClient.js';
+import type { WorkspaceAssetStore } from '../../storage/workspaceAssetStore.js';
 export interface AuthRouteDependencies {
     addRoute: (method: string, path: string, handler: RouteHandler) => void;
     core: TaskforceCore;
@@ -73,5 +76,13 @@ export interface AuthRouteDependencies {
     };
     resolveEffectiveObjectStorageConfig: () => ResolvedObjectStorageConfig;
     getObjectStorageClient: () => ObjectStorageClient | null;
+    workspaceAssetStore: WorkspaceAssetStore | null;
+    ensureWithinDir: (candidatePath: string, rootDir: string) => string | null;
+    markAssetDeleted: (pathValue: string) => unknown;
+    appendStorageTelemetry: (event: string, payload?: {
+        path?: string;
+        status?: string;
+        provider?: string;
+    }) => void;
 }
 export declare function registerAuthRoutes(deps: AuthRouteDependencies): void;