myaiforone 1.1.67 → 1.1.68

package/docs/license-provisioning.md

@@ -0,0 +1,125 @@
+# License Provisioning
+
+How MyAIforOne issues and verifies 30-day trial license keys.
+
+## Architecture
+
+```
+[ User's browser ]
+       │  (1) fills email + name on myaiforone.com/get-key
+       ▼
+[ myaiforone.com server ]  ← holds admin key in env var, NEVER in browser
+       │  (2) calls POST /api/provision with x-api-key
+       ▼
+[ ai41license.agenticledger.ai ]
+       │  (3) returns licenseKey + expiresAt (30-day trial)
+       ▼
+[ myaiforone.com server ]
+       │  (4) emails key to user
+       ▼
+[ User pastes key into local MyAIforOne install ]
+```
+
+The licensing admin key lives **only** on the `myaiforone.com` backend. The browser never sees it. Local MyAIforOne installs never see it either — they just consume the key the user pastes into the license-activation modal (`public/license-check.js`).
+
+The local "Generate one here →" link in the license-activation modal points to `https://myaiforone.com/get-key`.
+
+---
+
+## Get Key API — Integration Instructions
+
+### Endpoint
+
+```
+POST https://myaiforone.com/api/get-key
+```
+
+### Headers
+
+```
+Content-Type: application/json
+```
+
+### Request Body
+
+```json
+{
+  "email": "user@example.com",
+  "name": "Jane Doe"
+}
+```
+
+| Field | Type | Required | Notes |
+|-------|------|----------|-------|
+| `email` | string | Yes | Must be a valid, non-disposable email address |
+| `name`  | string | Yes | 1–100 characters |
+
+### Success Response (200)
+
+```json
+{
+  "success": true
+}
+```
+
+The license key is **not** returned in the response. It is emailed to the user at the address provided.
+
+### Error Responses
+
+| Status | Body | Meaning |
+|--------|------|---------|
+| 400 | `{"error": "Please enter a valid email address."}` | Missing or invalid email |
+| 400 | `{"error": "Please enter your name."}` | Missing or invalid name |
+| 400 | `{"error": "Please use a permanent email address."}` | Disposable/temporary email domain |
+| 429 | `{"error": "Too many requests. Try again in an hour."}` | IP rate limit (5 requests/hour) |
+| 429 | `{"error": "A key was already sent to this email recently..."}` | Email rate limit (1 per 24h) |
+| 500 | `{"error": "Something went wrong. Please try again in a few minutes."}` | Server/license server error |
+
+### Rate Limits
+
+- **Per IP:** 5 requests per hour
+- **Per email:** 1 request per 24 hours
+
+### What Happens
+
+1. Input is validated and email is checked against a disposable-domain blocklist.
+2. A 30-day trial license is provisioned on the licensing server.
+3. The license key is emailed to the user.
+4. If the email already has an active license, the existing key is re-sent (no duplicate created).
+
+### Example cURL
+
+```bash
+curl -X POST https://myaiforone.com/api/get-key \
+  -H 'Content-Type: application/json' \
+  -d '{"email": "jane@example.com", "name": "Jane Doe"}'
+```
+
+### Frontend Page
+
+Users can also obtain a key through the public web form at:
+
+```
+https://myaiforone.com/get-key
+```
+
+---
+
+## Verifying a License (local app side)
+
+The local platform calls `/api/license` and `/api/license/check` (proxied to the upstream `POST https://ai41license.agenticledger.ai/api/license/verify`) to validate the pasted key and gate features. This endpoint requires no auth — the license key itself is the credential. See `public/license-check.js` and `src/web-ui.ts` for the wiring.
+
+## Default trial features (30 days)
+
+- ✅ Web UI
+- ✅ Up to 3 agents
+- ✅ 1 channel
+- ❌ Everything else (super agents, channels, MCPs, skills, memory, goals, projects, gym, multi-model)
+
+Paid/enterprise plans unlock additional features via the same `/api/license/verify` response.
+
+## Related files
+
+- `public/license-check.js` — the license-activation modal shown on unlicensed installs (link to `myaiforone.com/get-key` lives here)
+- `src/web-ui.ts` — local `/api/license` and `/api/license/check` proxy routes
+- `public/admin.html` — Admin → Settings → License section (manual key entry/verify)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "myaiforone",
-  "version": "1.1.67",
+  "version": "1.1.68",
   "type": "module",
   "description": "Routes messages from phone channels to project-specific Claude Code agents",
   "bin": {

package/public/license-check.js

@@ -146,10 +146,10 @@ function showLicenseModal(licenseData) {
         <div style="text-align:center;margin-top:16px">
           <p style="font-size:12px;color:var(--text-muted, #94a3b8);margin-bottom:8px">
             Don&rsquo;t have a key?
-            <a href="https://aigym.agenticledger.ai/#download" target="_blank" style="color:var(--accent, #22d3ee);text-decoration:none;font-weight:600">
+            <a href="https://myaiforone.com/get-key" target="_blank" style="color:var(--accent, #22d3ee);text-decoration:none;font-weight:600">
               Generate one here &rarr;
             </a>
-            <span style="color:var(--text-dim, #64748b);font-size:11px;display:block;margin-top:2px">(skip to Step 4)</span>
+            <span style="color:var(--text-dim, #64748b);font-size:11px;display:block;margin-top:2px">Free 30-day trial &mdash; key sent by email</span>
           </p>
           <a href="/admin?tab=settings" style="font-size:11px;color:var(--text-muted, #94a3b8);text-decoration:none">
             or go to Admin Settings &rarr;