@rubytech/taskmaster 1.0.10 → 1.0.11

package/dist/agents/pi-embedded-runner/compact.js

@@ -138,6 +138,10 @@ export async function compactEmbeddedPiSessionDirect(params) {
             sessionId: params.sessionId,
             warn: makeBootstrapWarn({ sessionLabel, warn: (message) => log.warn(message) }),
         });
+        // Extract skill base dirs for scoped skill_read tool
+        const skillBaseDirs = (params.skillsSnapshot?.resolvedSkills ?? [])
+            .map((s) => s.baseDir)
+            .filter(Boolean);
         const runAbortController = new AbortController();
         const toolsRaw = createTaskmasterCodingTools({
             exec: {
@@ -159,6 +163,7 @@ export async function compactEmbeddedPiSessionDirect(params) {
             modelProvider: model.provider,
             modelId,
             modelAuthMode: resolveModelAuthMode(model.provider, params.config),
+            skillBaseDirs,
         });
         const tools = sanitizeToolsForGoogle({ tools: toolsRaw, provider });
         logToolSchemasForGoogle({ tools, provider });
@@ -254,6 +259,7 @@ export async function compactEmbeddedPiSessionDirect(params) {
             extraSystemPrompt: params.extraSystemPrompt,
             ownerNumbers: params.ownerNumbers,
             reasoningTagHint,
+            finalTagHint: !reasoningTagHint,
             heartbeatPrompt: isDefaultAgent
                 ? resolveHeartbeatPrompt(params.config?.agents?.defaults?.heartbeat?.prompt)
                 : undefined,

package/dist/agents/pi-embedded-runner/run/attempt.js

@@ -143,6 +143,10 @@ export async function runEmbeddedAttempt(params) {
             ? ["Reminder: commit your changes in this workspace after edits."]
             : undefined;
         const agentDir = params.agentDir ?? resolveTaskmasterAgentDir();
+        // Extract skill base dirs for scoped skill_read tool
+        const skillBaseDirs = (params.skillsSnapshot?.resolvedSkills ?? [])
+            .map((s) => s.baseDir)
+            .filter(Boolean);
         // Check if the model supports native image input
         const modelHasVision = params.model.input?.includes("image") ?? false;
         const toolsRaw = params.disableTools
@@ -175,6 +179,7 @@ export async function runEmbeddedAttempt(params) {
                 hasRepliedRef: params.hasRepliedRef,
                 modelHasVision,
                 skipMessageDelivery: params.skipMessageDelivery,
+                skillBaseDirs,
             });
         const tools = sanitizeToolsForGoogle({ tools: toolsRaw, provider: params.provider });
         logToolSchemasForGoogle({ tools, provider: params.provider });
@@ -279,6 +284,7 @@ export async function runEmbeddedAttempt(params) {
             extraSystemPrompt: params.extraSystemPrompt,
             ownerNumbers: params.ownerNumbers,
             reasoningTagHint,
+            finalTagHint: !reasoningTagHint,
             heartbeatPrompt: isDefaultAgent
                 ? resolveHeartbeatPrompt(params.config?.agents?.defaults?.heartbeat?.prompt)
                 : undefined,

package/dist/agents/pi-embedded-runner/system-prompt.js

@@ -8,6 +8,7 @@ export function buildEmbeddedSystemPrompt(params) {
         extraSystemPrompt: params.extraSystemPrompt,
         ownerNumbers: params.ownerNumbers,
         reasoningTagHint: params.reasoningTagHint,
+        finalTagHint: params.finalTagHint,
         heartbeatPrompt: params.heartbeatPrompt,
         skillsPrompt: params.skillsPrompt,
         docsPath: params.docsPath,

package/dist/agents/pi-tools.js

@@ -218,6 +218,7 @@ export function createTaskmasterCodingTools(options) {
             modelHasVision: options?.modelHasVision,
             requesterAgentIdOverride: agentId,
             messageSkipDelivery: options?.skipMessageDelivery,
+            skillBaseDirs: options?.skillBaseDirs,
         }),
     ];
     const coreToolNames = new Set(tools

package/dist/agents/skills/workspace.js

@@ -1,6 +1,6 @@
 import fs from "node:fs";
 import path from "node:path";
-import { formatSkillsForPrompt, loadSkillsFromDir, } from "@mariozechner/pi-coding-agent";
+import { loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 import { createSubsystemLogger } from "../../logging/subsystem.js";
 import { CONFIG_DIR, resolveUserPath } from "../../utils.js";
 import { resolveBundledSkillsDir } from "./bundled-dir.js";
@@ -10,6 +10,41 @@ import { resolvePluginSkillDirs } from "./plugin-skills.js";
 import { serializeByKey } from "./serialize.js";
 const fsp = fs.promises;
 const skillsLogger = createSubsystemLogger("skills");
+function escapeXml(str) {
+    return str
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&apos;");
+}
+/**
+ * Format skills for inclusion in a system prompt.
+ * Identical to the library's formatSkillsForPrompt except it references
+ * `skill_read` instead of `read` so agents denied group:fs can still
+ * load skill content.
+ */
+function formatSkillsForPromptTaskmaster(skills) {
+    const visibleSkills = skills.filter((s) => !s.disableModelInvocation);
+    if (visibleSkills.length === 0)
+        return "";
+    const lines = [
+        "\n\nThe following skills provide specialized instructions for specific tasks.",
+        "Use the skill_read tool to load a skill's file when the task matches its description.",
+        "When a skill file references a relative path, resolve it against the skill directory (parent of SKILL.md / dirname of the path) and use that absolute path in tool commands.",
+        "",
+        "<available_skills>",
+    ];
+    for (const skill of visibleSkills) {
+        lines.push("  <skill>");
+        lines.push(`    <name>${escapeXml(skill.name)}</name>`);
+        lines.push(`    <description>${escapeXml(skill.description)}</description>`);
+        lines.push(`    <location>${escapeXml(skill.filePath)}</location>`);
+        lines.push("  </skill>");
+    }
+    lines.push("</available_skills>");
+    return lines.join("\n");
+}
 const skillCommandDebugOnce = new Set();
 function debugSkillCommandOnce(messageKey, message, meta) {
     if (skillCommandDebugOnce.has(messageKey))
@@ -141,7 +176,9 @@ export function buildWorkspaceSkillSnapshot(workspaceDir, opts) {
     const promptEntries = eligible.filter((entry) => entry.invocation?.disableModelInvocation !== true);
     const resolvedSkills = promptEntries.map((entry) => entry.skill);
     const remoteNote = opts?.eligibility?.remote?.note?.trim();
-    const prompt = [remoteNote, formatSkillsForPrompt(resolvedSkills)].filter(Boolean).join("\n");
+    const prompt = [remoteNote, formatSkillsForPromptTaskmaster(resolvedSkills)]
+        .filter(Boolean)
+        .join("\n");
     return {
         prompt,
         skills: eligible.map((entry) => ({
@@ -157,7 +194,7 @@ export function buildWorkspaceSkillsPrompt(workspaceDir, opts) {
     const eligible = filterSkillEntries(skillEntries, opts?.config, opts?.skillFilter, opts?.eligibility);
     const promptEntries = eligible.filter((entry) => entry.invocation?.disableModelInvocation !== true);
     const remoteNote = opts?.eligibility?.remote?.note?.trim();
-    return [remoteNote, formatSkillsForPrompt(promptEntries.map((entry) => entry.skill))]
+    return [remoteNote, formatSkillsForPromptTaskmaster(promptEntries.map((entry) => entry.skill))]
         .filter(Boolean)
         .join("\n");
 }

package/dist/agents/system-prompt.js

@@ -132,9 +132,11 @@ export function buildAgentSystemPrompt(params) {
         sessions_spawn: "Spawn a sub-agent session",
         session_status: "Show a /status-equivalent status card (usage + time + Reasoning/Verbose/Elevated); use for model-use questions (📊 session_status); optional per-session model override",
         image: "Analyze an image with the configured image model",
+        skill_read: "Read files within skill directories (SKILL.md, references)",
     };
     const toolOrder = [
         "read",
+        "skill_read",
         "write",
         "edit",
         "apply_patch",
@@ -192,6 +194,10 @@ export function buildAgentSystemPrompt(params) {
     }
     const hasGateway = availableTools.has("gateway");
     const readToolName = resolveToolName("read");
+    // For skills section: prefer skill_read when agent has it but not read
+    const skillReadToolName = availableTools.has("skill_read") && !availableTools.has("read")
+        ? resolveToolName("skill_read")
+        : readToolName;
     const execToolName = resolveToolName("exec");
     const processToolName = resolveToolName("process");
     const extraSystemPrompt = params.extraSystemPrompt?.trim();
@@ -211,6 +217,15 @@ export function buildAgentSystemPrompt(params) {
             "<final>Hey there! What would you like to do next?</final>",
         ].join(" ")
         : undefined;
+    // For providers with native thinking (e.g. Anthropic), we only need the <final> instruction
+    // to prevent internal reasoning/planning text from leaking to the user.
+    const finalOnlyHint = !reasoningHint && params.finalTagHint
+        ? [
+            "Wrap every user-facing reply in <final>...</final> tags.",
+            "Only text inside <final> is shown to the user; everything outside is discarded.",
+            "Do not narrate your plan or next steps outside <final> — the user cannot see it.",
+        ].join(" ")
+        : undefined;
     const reasoningLevel = params.reasoningLevel ?? "off";
     const userTimezone = params.userTimezone?.trim();
     const skillsPrompt = params.skillsPrompt?.trim();
@@ -231,7 +246,7 @@ export function buildAgentSystemPrompt(params) {
     const skillsSection = buildSkillsSection({
         skillsPrompt,
         isMinimal,
-        readToolName,
+        readToolName: skillReadToolName,
     });
     const memorySection = buildMemorySection({ isMinimal, availableTools });
     const docsSection = buildDocsSection({
@@ -417,6 +432,9 @@ export function buildAgentSystemPrompt(params) {
     if (reasoningHint) {
         lines.push("## Reasoning Format", reasoningHint, "");
     }
+    else if (finalOnlyHint) {
+        lines.push("## Output Format", finalOnlyHint, "");
+    }
     const contextFiles = params.contextFiles ?? [];
     if (contextFiles.length > 0) {
         const hasSoulFile = contextFiles.some((file) => {

package/dist/agents/taskmaster-tools.js

@@ -23,6 +23,7 @@ import { createLicenseGenerateTool } from "./tools/license-tool.js";
 import { createCustomerLookupTool } from "./tools/customer-lookup-tool.js";
 import { createCustomerUpdateTool } from "./tools/customer-update-tool.js";
 import { createRelayMessageTool } from "./tools/relay-message-tool.js";
+import { createSkillReadTool } from "./tools/skill-read-tool.js";
 export function createTaskmasterTools(options) {
     const imageTool = options?.agentDir?.trim()
         ? createImageTool({
@@ -127,6 +128,11 @@ export function createTaskmasterTools(options) {
         createCustomerUpdateTool(),
         createRelayMessageTool(),
     ];
+    // Add scoped skill_read tool when skill directories are provided
+    const skillDirs = (options?.skillBaseDirs ?? []).filter(Boolean);
+    if (skillDirs.length > 0) {
+        tools.push(createSkillReadTool({ allowedSkillDirs: skillDirs }));
+    }
     // Add memory tools (conditionally based on config)
     const memoryToolOptions = {
         config: options?.config,

package/dist/agents/tool-display.json

@@ -40,6 +40,11 @@
             "title": "Read",
             "detailKeys": ["path"]
         },
+        "skill_read": {
+            "emoji": "📖",
+            "title": "Skill Read",
+            "detailKeys": ["path"]
+        },
         "write": {
             "emoji": "✍️",
             "title": "Write",

package/dist/agents/tools/skill-read-tool.js

@@ -0,0 +1,75 @@
+import fs from "node:fs/promises";
+import { realpath } from "node:fs/promises";
+import path from "node:path";
+import { Type } from "@sinclair/typebox";
+import { readStringParam } from "./common.js";
+const SkillReadSchema = Type.Object({
+    path: Type.String({ description: "Absolute or relative path to the file to read" }),
+    skill_dir: Type.Optional(Type.String({
+        description: "Skill directory for resolving relative paths. If omitted, path must be absolute.",
+    })),
+});
+/**
+ * Create a scoped file-read tool that only allows reading files within
+ * the provided skill directories. This gives agents access to skill
+ * content (SKILL.md, references/) without exposing the full filesystem.
+ */
+export function createSkillReadTool(opts) {
+    // Pre-resolve allowed dirs at creation time (async realpath done at call time).
+    const allowedDirs = opts.allowedSkillDirs.filter(Boolean);
+    return {
+        label: "Skill Read",
+        name: "skill_read",
+        description: "Read a file within a skill directory (SKILL.md, references, etc.). " +
+            "Use this to load skill content on demand. " +
+            "Only files inside skill directories are accessible.",
+        parameters: SkillReadSchema,
+        execute: async (_toolCallId, args) => {
+            const params = args;
+            const rawPath = readStringParam(params, "path", { required: true });
+            const skillDir = readStringParam(params, "skill_dir");
+            // Resolve the target path
+            let targetPath;
+            if (path.isAbsolute(rawPath)) {
+                targetPath = path.resolve(rawPath);
+            }
+            else if (skillDir) {
+                targetPath = path.resolve(skillDir, rawPath);
+            }
+            else {
+                throw new Error("Relative path requires skill_dir. Provide an absolute path or include skill_dir.");
+            }
+            // Security: resolve symlinks on the target and check containment
+            let realTarget;
+            try {
+                realTarget = await realpath(targetPath);
+            }
+            catch {
+                throw new Error(`File not found: ${targetPath}`);
+            }
+            let allowed = false;
+            for (const dir of allowedDirs) {
+                let realDir;
+                try {
+                    realDir = await realpath(dir);
+                }
+                catch {
+                    continue;
+                }
+                const prefix = realDir.endsWith("/") ? realDir : `${realDir}/`;
+                if (realTarget === realDir || realTarget.startsWith(prefix)) {
+                    allowed = true;
+                    break;
+                }
+            }
+            if (!allowed) {
+                throw new Error(`Access denied: ${rawPath} is outside all skill directories.`);
+            }
+            const content = await fs.readFile(realTarget, "utf-8");
+            return {
+                content: [{ type: "text", text: content }],
+                details: { path: realTarget },
+            };
+        },
+    };
+}

package/dist/agents/workspace.js

@@ -20,7 +20,7 @@ export const DEFAULT_IDENTITY_FILENAME = "IDENTITY.md";
 export const DEFAULT_USER_FILENAME = "USER.md";
 export const DEFAULT_HEARTBEAT_FILENAME = "HEARTBEAT.md";
 export const DEFAULT_BOOTSTRAP_FILENAME = "BOOTSTRAP.md";
-const TEMPLATE_DIR = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../docs/reference/templates");
+const TEMPLATE_DIR = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "../../templates/customer/agents/admin");
 function stripFrontMatter(content) {
     if (!content.startsWith("---"))
         return content;
@@ -39,7 +39,7 @@ async function loadTemplate(name) {
         return stripFrontMatter(content);
     }
     catch {
-        throw new Error(`Missing workspace template: ${name} (${templatePath}). Ensure docs/reference/templates are packaged.`);
+        throw new Error(`Missing workspace template: ${name} (${templatePath}). Ensure templates/customer is packaged.`);
     }
 }
 async function writeFileIfMissing(filePath, content) {

package/dist/auto-reply/reply/get-reply-run.js

@@ -9,7 +9,6 @@ import { resolveGroupSessionKey, resolveSessionFilePath, } from "../../config/se
 import { logVerbose } from "../../globals.js";
 import { clearCommandLane, getQueueSize } from "../../process/command-queue.js";
 import { normalizeMainKey } from "../../routing/session-key.js";
-import { isReasoningTagProvider } from "../../utils/provider-utils.js";
 import { hasControlCommand } from "../command-detection.js";
 import { buildInboundMediaNote } from "../media-note.js";
 import { formatXHighModelHint, normalizeThinkLevel, supportsXHighThinking, } from "../thinking.js";
@@ -257,7 +256,7 @@ export async function runPreparedReply(params) {
             blockReplyBreak: resolvedBlockStreamingBreak,
             ownerNumbers: command.ownerList.length > 0 ? command.ownerList : undefined,
             extraSystemPrompt: extraSystemPrompt || undefined,
-            ...(isReasoningTagProvider(provider) ? { enforceFinalTag: true } : {}),
+            enforceFinalTag: true,
             skipMessageDelivery: opts?.skipMessageDelivery,
         },
     };

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.10",
-  "commit": "ea3f9738ae14b41c3edb34d5acc713e741b3f0db",
-  "builtAt": "2026-02-15T09:22:34.386Z"
+  "version": "1.0.11",
+  "commit": "b6abbf7e2a7a62f677e6a5969f4d7c9054ad2894",
+  "builtAt": "2026-02-15T10:55:15.410Z"
 }

package/dist/cli/gateway-cli/dev.js

@@ -10,7 +10,7 @@ const DEV_IDENTITY_NAME = "C3-PO";
 const DEV_IDENTITY_THEME = "protocol droid";
 const DEV_IDENTITY_EMOJI = "🤖";
 const DEV_AGENT_WORKSPACE_SUFFIX = "dev";
-const DEV_TEMPLATE_DIR = path.resolve(path.dirname(new URL(import.meta.url).pathname), "../../../docs/reference/templates");
+const DEV_TEMPLATE_DIR = path.resolve(path.dirname(new URL(import.meta.url).pathname), "../../../templates/customer/agents/admin");
 async function loadDevTemplate(name, fallback) {
     try {
         const raw = await fs.promises.readFile(path.join(DEV_TEMPLATE_DIR, name), "utf-8");

package/dist/cli/provision-seed.js

@@ -141,6 +141,7 @@ export function buildDefaultAgentList(workspaceRoot) {
                 "list_admins",
                 "relay_message",
                 "browser",
+                "skill_read",
             ],
             deny: ["exec", "process", "group:fs", "group:runtime", "canvas"],
         },