@taskforcehq/taskforce 0.3.307 → 0.3.309

package/dist/server/routes/admin.js

@@ -72,6 +72,7 @@ import { buildCloudMcpRuntimeAuth, resolveErrorStatusCode } from './shared.js';
 import { buildAuthBehavior, buildSiteBehavior, getRouteEmailConfig, resolvePublicAuthBaseUrl, resolveRuntimeConfigBaseUrl, } from './authSupport.js';
 import { applyWorkspaceRepair, scanWorkspaceRepair } from '../../sync/workspaceRepair.js';
 import { testMintAppleClientSecret } from '../auth/providers/appleClientSecret.js';
+const PRICING_PAGE_DESCRIPTION_MAX_LENGTH = 2000;
 // === SECTION: Registration ===
 export function registerAdminRoutes(deps) {
     const { addRoute, core, context, requestWorkspaceId, requestUserId, requestRole, requestHeader, requestRuntimeMode, ensureAppAccess, ensureAdminRole, ensureCloudPlanData, requireCloudRuntime, resolveAuthenticatedUserId, resolveAdminRequestActor, auditAdminAction, resolveEffectiveObjectStorageConfig, getObjectStorageClient, taskAssetStore, normalizeDocumentPathInput, ensureWithinDir, getAssetMetadata, markAssetDeleted, clearAssetDeleted, removeAssetMetadata, getStorageTelemetry, appendStorageTelemetry, getStorageIntegrityHistory, appendStorageIntegrityHistory, getDocumentPurgeHistory, appendDocumentPurgeHistory, getCollaborationTelemetry, isCollaborationPolicyEnabled, normalizeMcpOauthScopeString, MCP_TOKEN_SCOPE_VALUES, MCP_CLOUD_TOOL_SCOPE_REQUIREMENTS, MCP_WRITE_RATE_LIMIT_ENABLED, MCP_WRITE_RATE_LIMIT_ACTOR_MAX_REQUESTS, MCP_WRITE_RATE_LIMIT_WORKSPACE_MAX_REQUESTS, MCP_WRITE_RATE_LIMIT_WINDOW_MS, } = deps;
@@ -712,6 +713,88 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ success: false, error: String(error?.message || 'Unable to list feature catalog'), code: error?.code }));
         }
     });
+    addRoute('POST', '/api/platform/features', async (req, res) => {
+        if (!ensureCloudPlanData(req, res))
+            return;
+        if (!ensureAdminRole(req)) {
+            res.writeHead(403, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Forbidden: system admin role required.' }));
+            return;
+        }
+        const body = await parseJsonBody(req);
+        const label = String(body?.label || '');
+        const description = body?.description === undefined || body?.description === null
+            ? body?.description
+            : String(body.description);
+        const publicLabel = body?.publicLabel === undefined || body?.publicLabel === null
+            ? body?.publicLabel
+            : String(body.publicLabel);
+        const publicDescription = body?.publicDescription === undefined || body?.publicDescription === null
+            ? body?.publicDescription
+            : String(body.publicDescription);
+        const publicDescriptionVisible = body?.publicDescriptionVisible === undefined || body?.publicDescriptionVisible === null
+            ? body?.publicDescriptionVisible
+            : (body.publicDescriptionVisible === false ? false : true);
+        const publicDisplayOrder = body?.publicDisplayOrder === undefined || body?.publicDisplayOrder === null || body?.publicDisplayOrder === ''
+            ? null
+            : Math.max(0, Math.floor(Number(body.publicDisplayOrder)));
+        if (!label.trim()) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature label is required.', code: 'PLAN_FEATURE_LABEL_REQUIRED' }));
+            return;
+        }
+        if (label.trim().length > 120) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature label must be 120 characters or fewer.', code: 'PLAN_FEATURE_LABEL_TOO_LONG' }));
+            return;
+        }
+        if (typeof description === 'string' && description.trim().length > 280) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature description must be 280 characters or fewer.', code: 'PLAN_FEATURE_DESCRIPTION_TOO_LONG' }));
+            return;
+        }
+        if (typeof publicLabel === 'string' && publicLabel.trim().length > 120) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Public label must be 120 characters or fewer.', code: 'PLAN_FEATURE_PUBLIC_LABEL_TOO_LONG' }));
+            return;
+        }
+        if (typeof publicDescription === 'string' && publicDescription.trim().length > 280) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Public description must be 280 characters or fewer.', code: 'PLAN_FEATURE_PUBLIC_DESCRIPTION_TOO_LONG' }));
+            return;
+        }
+        if (publicDisplayOrder !== null && !Number.isFinite(publicDisplayOrder)) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Public display order must be a non-negative number.', code: 'PLAN_FEATURE_PUBLIC_DISPLAY_ORDER_INVALID' }));
+            return;
+        }
+        try {
+            const feature = core.createCustomPlanFeatureCatalogEntry({
+                label,
+                description,
+                publicLabel,
+                publicDescription,
+                publicDescriptionVisible,
+                publicDisplayOrder
+            });
+            auditAdminAction(req, 'platform-plan-feature-catalog-created', {
+                featureKey: feature.featureKey,
+                label: feature.label,
+                description: feature.description,
+                publicLabel: feature.publicLabel ?? null,
+                publicDescription: feature.publicDescription ?? null,
+                publicDescriptionVisible: feature.publicDescriptionVisible ?? null,
+                publicDisplayOrder: feature.publicDisplayOrder ?? null
+            });
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: true, feature }));
+        }
+        catch (error) {
+            const statusCode = resolveErrorStatusCode(error, 400);
+            res.writeHead(statusCode, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: String(error?.message || 'Unable to create feature catalog entry'), code: error?.code }));
+        }
+    });
     addRoute('PATCH', '/api/platform/features/:featureKey', async (req, res, params) => {
         if (!ensureCloudPlanData(req, res))
             return;
@@ -722,15 +805,34 @@ export function registerAdminRoutes(deps) {
         }
         const body = await parseJsonBody(req);
         const featureKey = String(params.featureKey || '').trim();
+        const label = body?.label === undefined || body?.label === null
+            ? body?.label
+            : String(body.label);
+        const description = body?.description === undefined || body?.description === null
+            ? body?.description
+            : String(body.description);
         const publicLabel = body?.publicLabel === undefined || body?.publicLabel === null
             ? body?.publicLabel
             : String(body.publicLabel);
         const publicDescription = body?.publicDescription === undefined || body?.publicDescription === null
             ? body?.publicDescription
             : String(body.publicDescription);
+        const publicDescriptionVisible = body?.publicDescriptionVisible === undefined || body?.publicDescriptionVisible === null
+            ? body?.publicDescriptionVisible
+            : (body.publicDescriptionVisible === false ? false : true);
         const publicDisplayOrder = body?.publicDisplayOrder === undefined || body?.publicDisplayOrder === null || body?.publicDisplayOrder === ''
             ? null
             : Math.max(0, Math.floor(Number(body.publicDisplayOrder)));
+        if (typeof label === 'string' && label.trim().length > 120) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature label must be 120 characters or fewer.', code: 'PLAN_FEATURE_LABEL_TOO_LONG' }));
+            return;
+        }
+        if (typeof description === 'string' && description.trim().length > 280) {
+            res.writeHead(400, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: 'Feature description must be 280 characters or fewer.', code: 'PLAN_FEATURE_DESCRIPTION_TOO_LONG' }));
+            return;
+        }
         if (typeof publicLabel === 'string' && publicLabel.trim().length > 120) {
             res.writeHead(400, { 'Content-Type': 'application/json' });
             res.end(JSON.stringify({ success: false, error: 'Public label must be 120 characters or fewer.', code: 'PLAN_FEATURE_PUBLIC_LABEL_TOO_LONG' }));
@@ -749,14 +851,20 @@ export function registerAdminRoutes(deps) {
         try {
             const feature = core.updatePlanFeatureCatalogMarketingCopy({
                 featureKey,
+                label,
+                description,
                 publicLabel,
                 publicDescription,
+                publicDescriptionVisible,
                 publicDisplayOrder
             });
             auditAdminAction(req, 'platform-plan-feature-catalog-updated', {
                 featureKey,
+                label: feature.label,
+                description: feature.description,
                 publicLabel: feature.publicLabel ?? null,
                 publicDescription: feature.publicDescription ?? null,
+                publicDescriptionVisible: feature.publicDescriptionVisible ?? null,
                 publicDisplayOrder: feature.publicDisplayOrder ?? null
             });
             res.writeHead(200, { 'Content-Type': 'application/json' });
@@ -768,6 +876,27 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ success: false, error: String(error?.message || 'Unable to update feature catalog entry'), code: error?.code }));
         }
     });
+    addRoute('DELETE', '/api/platform/features/:featureKey', async (req, res, params) => {
+        if (!ensureCloudPlanData(req, res))
+            return;
+        if (!ensureAdminRole(req)) {
+            res.writeHead(403, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Forbidden: system admin role required.' }));
+            return;
+        }
+        const featureKey = String(params.featureKey || '').trim();
+        try {
+            core.deleteCustomPlanFeatureCatalogEntry(featureKey);
+            auditAdminAction(req, 'platform-plan-feature-catalog-deleted', { featureKey });
+            res.writeHead(200, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: true }));
+        }
+        catch (error) {
+            const statusCode = resolveErrorStatusCode(error, 400);
+            res.writeHead(statusCode, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ success: false, error: String(error?.message || 'Unable to delete feature catalog entry'), code: error?.code }));
+        }
+    });
     addRoute('POST', '/api/platform/plans/:planId/versions', async (req, res, params) => {
         if (!ensureCloudPlanData(req, res))
             return;
@@ -1298,6 +1427,7 @@ export function registerAdminRoutes(deps) {
                 ...(siteSettings.siteTheme === 'light' || siteSettings.siteTheme === 'dark' ? { siteTheme: siteSettings.siteTheme } : {}),
                 ...(typeof siteSettings.pricingPageTitle === 'string' ? { pricingPageTitle: siteSettings.pricingPageTitle } : {}),
                 ...(typeof siteSettings.pricingPageDescription === 'string' ? { pricingPageDescription: siteSettings.pricingPageDescription } : {}),
+                ...(typeof siteSettings.pricingPageShowPublicDescriptions === 'boolean' ? { pricingPageShowPublicDescriptions: siteSettings.pricingPageShowPublicDescriptions } : {}),
                 onboardingPolicyMode: onboardingPolicy.mode,
                 onboardingPlanId: onboardingPolicy.planId
             },
@@ -1314,6 +1444,7 @@ export function registerAdminRoutes(deps) {
                 siteTheme: effectiveSite.siteTheme,
                 pricingPageTitle: effectiveSite.pricingPageTitle,
                 pricingPageDescription: effectiveSite.pricingPageDescription,
+                pricingPageShowPublicDescriptions: effectiveSite.pricingPageShowPublicDescriptions,
                 onboardingPolicyMode: effective.onboardingPolicyMode,
                 onboardingPlanId: effective.onboardingPlanId
             }
@@ -1347,6 +1478,9 @@ export function registerAdminRoutes(deps) {
                     : {}),
                 ...(typeof siteSettings.pricingPageDescription === 'string'
                     ? { pricingPageDescription: siteSettings.pricingPageDescription }
+                    : {}),
+                ...(typeof siteSettings.pricingPageShowPublicDescriptions === 'boolean'
+                    ? { pricingPageShowPublicDescriptions: siteSettings.pricingPageShowPublicDescriptions }
                     : {})
             },
             status: {
@@ -1355,7 +1489,8 @@ export function registerAdminRoutes(deps) {
                 animatedBackgroundEnabled: siteBehavior.animatedBackgroundEnabled,
                 siteTheme: siteBehavior.siteTheme,
                 pricingPageTitle: siteBehavior.pricingPageTitle,
-                pricingPageDescription: siteBehavior.pricingPageDescription
+                pricingPageDescription: siteBehavior.pricingPageDescription,
+                pricingPageShowPublicDescriptions: siteBehavior.pricingPageShowPublicDescriptions
             }
         }));
     };
@@ -1990,9 +2125,9 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ error: 'Pricing page title must be 120 characters or fewer.', code: 'PRICING_PAGE_TITLE_TOO_LONG' }));
             return;
         }
-        if (pricingPageDescription !== undefined && pricingPageDescription.length > 280) {
+        if (pricingPageDescription !== undefined && pricingPageDescription.length > PRICING_PAGE_DESCRIPTION_MAX_LENGTH) {
             res.writeHead(400, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ error: 'Pricing page description must be 280 characters or fewer.', code: 'PRICING_PAGE_DESCRIPTION_TOO_LONG' }));
+            res.end(JSON.stringify({ error: `Pricing page description must be ${PRICING_PAGE_DESCRIPTION_MAX_LENGTH} characters or fewer.`, code: 'PRICING_PAGE_DESCRIPTION_TOO_LONG' }));
             return;
         }
         const validation = core.validateOnboardingPolicy({
@@ -2022,6 +2157,9 @@ export function registerAdminRoutes(deps) {
                 : {}),
             ...(pricingPageDescription !== undefined
                 ? { pricingPageDescription }
+                : {}),
+            ...(typeof body?.pricingPageShowPublicDescriptions === 'boolean'
+                ? { pricingPageShowPublicDescriptions: body.pricingPageShowPublicDescriptions }
                 : {})
         };
         core.updateGlobalSettings({
@@ -2069,9 +2207,9 @@ export function registerAdminRoutes(deps) {
             res.end(JSON.stringify({ error: 'Pricing page title must be 120 characters or fewer.', code: 'PRICING_PAGE_TITLE_TOO_LONG' }));
             return;
         }
-        if (pricingPageDescription !== undefined && pricingPageDescription.length > 280) {
+        if (pricingPageDescription !== undefined && pricingPageDescription.length > PRICING_PAGE_DESCRIPTION_MAX_LENGTH) {
             res.writeHead(400, { 'Content-Type': 'application/json' });
-            res.end(JSON.stringify({ error: 'Pricing page description must be 280 characters or fewer.', code: 'PRICING_PAGE_DESCRIPTION_TOO_LONG' }));
+            res.end(JSON.stringify({ error: `Pricing page description must be ${PRICING_PAGE_DESCRIPTION_MAX_LENGTH} characters or fewer.`, code: 'PRICING_PAGE_DESCRIPTION_TOO_LONG' }));
             return;
         }
         core.updateGlobalSettings({
@@ -2093,6 +2231,9 @@ export function registerAdminRoutes(deps) {
                     : {}),
                 ...(pricingPageDescription !== undefined
                     ? { pricingPageDescription }
+                    : {}),
+                ...(typeof body?.pricingPageShowPublicDescriptions === 'boolean'
+                    ? { pricingPageShowPublicDescriptions: body.pricingPageShowPublicDescriptions }
                     : {})
             }
         });

package/dist/server/routes/authSupport.d.ts

@@ -28,6 +28,7 @@ export declare function buildSiteBehavior(core: TaskforceCore): {
     siteTheme: string;
     pricingPageTitle: string;
     pricingPageDescription: string;
+    pricingPageShowPublicDescriptions: boolean;
 };
 export declare function shouldExposeDevAuthTokens(): boolean;
 export declare function resolveRuntimeConfigBaseUrl(req: IncomingMessage): string;

package/dist/server/routes/authSupport.js

@@ -64,7 +64,8 @@ export function buildSiteBehavior(core) {
         animatedBackgroundEnabled: resolveBooleanSetting(siteSettings.animatedBackgroundEnabled, false),
         siteTheme,
         pricingPageTitle,
-        pricingPageDescription
+        pricingPageDescription,
+        pricingPageShowPublicDescriptions: resolveBooleanSetting(siteSettings.pricingPageShowPublicDescriptions, false)
     };
 }
 export function shouldExposeDevAuthTokens() {

package/dist/server/routes/billing.d.ts

@@ -3,6 +3,7 @@ import type { TaskforceCore } from '../../core/Taskforce.js';
 import { type RouteHandler, type RouteContext } from './primitives.js';
 export type BillingInterval = 'month' | 'year';
 export type BillingPricingType = 'stripe' | 'free';
+export type BillingPricingAudience = 'public' | 'campaign';
 export interface BillingRouteDependencies {
     addRoute: (method: string, path: string, handler: RouteHandler) => void;
     core: TaskforceCore;