npm - @rubytech/taskmaster - Versions diffs - 1.0.106 → 1.0.108 - Mend

@rubytech/taskmaster 1.0.106 → 1.0.108

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (62) hide show

package/dist/agents/skills-status.js +23 -3
package/dist/agents/skills.js +1 -0
package/dist/agents/system-prompt.js +3 -0
package/dist/agents/taskmaster-tools.js +5 -0
package/dist/agents/tool-policy.js +2 -1
package/dist/agents/tools/authorize-admin-tool.js +1 -1
package/dist/agents/tools/memory-tool.js +2 -1
package/dist/agents/tools/software-update-tool.js +114 -0
package/dist/auto-reply/reply/commands-status.js +5 -9
package/dist/auto-reply/reply/get-reply-run.js +1 -1
package/dist/auto-reply/reply/get-reply.js +1 -1
package/dist/auto-reply/reply/model-selection.js +1 -1
package/dist/browser/routes/screencast.js +1 -1
package/dist/browser/screencast.js +1 -1
package/dist/build-info.json +3 -3
package/dist/commands/agent.js +2 -2
package/dist/config/zod-schema.js +12 -1
package/dist/control-ui/assets/index-B2FEGOCu.css +1 -0
package/dist/control-ui/assets/index-nLVF-pVT.js +3762 -0
package/dist/control-ui/assets/index-nLVF-pVT.js.map +1 -0
package/dist/control-ui/index.html +2 -2
package/dist/control-ui/maxy-icon.png +0 -0
package/dist/cron/isolated-agent/recipients.js +70 -0
package/dist/cron/isolated-agent/run.js +43 -13
package/dist/gateway/config-reload.js +1 -0
package/dist/gateway/control-ui.js +111 -5
package/dist/gateway/protocol/index.js +6 -1
package/dist/gateway/protocol/schema/agents-models-skills.js +23 -0
package/dist/gateway/protocol/schema/protocol-schemas.js +6 -1
package/dist/gateway/server-http.js +6 -1
package/dist/gateway/server-methods/access.js +3 -3
package/dist/gateway/server-methods/brand.js +160 -0
package/dist/gateway/server-methods/browser-screencast.js +3 -3
package/dist/gateway/server-methods/skills.js +159 -3
package/dist/gateway/server-methods/workspaces.js +7 -7
package/dist/gateway/server-methods-list.js +5 -0
package/dist/gateway/server-methods.js +2 -0
package/dist/gateway/server.impl.js +1 -1
package/dist/infra/heartbeat-runner.js +17 -0
package/dist/infra/heartbeat-update-notify.js +120 -0
package/dist/infra/tunnel.js +1 -1
package/dist/memory/embeddings.js +0 -4
package/dist/memory/manager.js +15 -6
package/dist/web/inbound/media.js +1 -1
package/dist/web/login-qr.js +0 -23
package/dist/web/providers/cloud/receive.js +1 -1
package/dist/web/providers/cloud/webhook.js +1 -1
package/package.json +1 -1
package/skills/skill-builder/SKILL.md +97 -0
package/skills/skill-builder/references/lean-pattern.md +118 -0
package/skills/zero-to-prototype/SKILL.md +35 -0
package/skills/zero-to-prototype/references/discovery.md +64 -0
package/skills/zero-to-prototype/references/prd.md +83 -0
package/skills/zero-to-prototype/references/validation.md +67 -0
package/taskmaster-docs/USER-GUIDE.md +65 -31
package/templates/customer/agents/public/AGENTS.md +3 -10
package/templates/taskmaster/agents/public/SOUL.md +0 -4
package/templates/tradesupport/agents/public/AGENTS.md +3 -10
package/dist/control-ui/assets/index-DjhCZlZd.css +0 -1
package/dist/control-ui/assets/index-DtuDNTAC.js +0 -3539
package/dist/control-ui/assets/index-DtuDNTAC.js.map +0 -1
package/skills/taskmaster/SKILL.md +0 -164

package/dist/control-ui/index.html CHANGED Viewed

@@ -6,8 +6,8 @@
     <title>Taskmaster Control</title>
     <meta name="color-scheme" content="dark light" />
     <link rel="icon" type="image/png" href="./favicon.png" />
-    <script type="module" crossorigin src="./assets/index-DtuDNTAC.js"></script>
-    <link rel="stylesheet" crossorigin href="./assets/index-DjhCZlZd.css">
+    <script type="module" crossorigin src="./assets/index-nLVF-pVT.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-B2FEGOCu.css">
   </head>
   <body>
     <taskmaster-app></taskmaster-app>

package/dist/control-ui/maxy-icon.png ADDED Viewed

Binary file

package/dist/cron/isolated-agent/recipients.js ADDED Viewed

@@ -0,0 +1,70 @@
+/**
+ * Extract admin phone numbers from config bindings.
+ * Admin phones are bindings where agentId is "admin" (or legacy "management"),
+ * channel is "whatsapp", and peer.kind is "dm".
+ */
+export function resolveAdminBindingPhones(cfg, accountId) {
+    const bindings = Array.isArray(cfg.bindings) ? cfg.bindings : [];
+    const phones = [];
+    for (const binding of bindings) {
+        if (!binding || typeof binding !== "object")
+            continue;
+        const agentId = binding.agentId;
+        if (agentId !== "admin" && agentId !== "management")
+            continue;
+        const match = binding.match;
+        if (!match || typeof match !== "object")
+            continue;
+        const channel = typeof match.channel === "string" ? match.channel.toLowerCase() : "";
+        if (channel !== "whatsapp")
+            continue;
+        // Filter by accountId if specified
+        if (accountId && typeof match.accountId === "string" && match.accountId !== accountId)
+            continue;
+        const peer = match.peer;
+        if (!peer || typeof peer !== "object")
+            continue;
+        if (peer.kind !== "dm")
+            continue;
+        const id = typeof peer.id === "string" ? peer.id.trim() : "";
+        if (id)
+            phones.push(id);
+    }
+    return phones;
+}
+/**
+ * Expand the `to` field from a cron payload into individual recipient addresses.
+ *
+ * Supports:
+ * - Single phone: "+15551234567"
+ * - Comma-separated phones: "+15551234567,+15559876543"
+ * - "admins" token: resolves to all admin binding phones for the account
+ * - Mixed: "admins,+15559999999"
+ *
+ * Returns deduplicated list of phone numbers/addresses.
+ * Returns empty array if `to` is empty/undefined.
+ */
+export function expandCronRecipients(cfg, to, accountId) {
+    if (!to?.trim())
+        return [];
+    const parts = to.split(",").map((s) => s.trim()).filter(Boolean);
+    const seen = new Set();
+    const result = [];
+    for (const part of parts) {
+        if (part.toLowerCase() === "admins") {
+            for (const phone of resolveAdminBindingPhones(cfg, accountId)) {
+                if (!seen.has(phone)) {
+                    seen.add(phone);
+                    result.push(phone);
+                }
+            }
+        }
+        else {
+            if (!seen.has(part)) {
+                seen.add(part);
+                result.push(part);
+            }
+        }
+    }
+    return result;
+}

package/dist/cron/isolated-agent/run.js CHANGED Viewed

@@ -18,10 +18,12 @@ import { createOutboundSendDeps } from "../../cli/outbound-send-deps.js";
 import { resolveSessionTranscriptPath, updateSessionStore } from "../../config/sessions.js";
 import { registerAgentRunContext } from "../../infra/agent-events.js";
 import { deliverOutboundPayloads } from "../../infra/outbound/deliver.js";
+import { resolveOutboundTarget } from "../../infra/outbound/targets.js";
 import { getRemoteSkillEligibility } from "../../infra/skills-remote.js";
 import { buildAgentMainSessionKey, normalizeAgentId } from "../../routing/session-key.js";
 import { resolveAgentBoundAccountId } from "../../routing/bindings.js";
 import { resolveDeliveryTarget } from "./delivery-target.js";
+import { expandCronRecipients } from "./recipients.js";
 import { isHeartbeatOnlyResponse, pickLastNonEmptyTextFromPayloads, pickSummaryFromOutput, pickSummaryFromPayloads, resolveHeartbeatAckMaxChars, } from "./helpers.js";
 import { resolveCronSession } from "./session.js";
 function matchesMessagingToolDeliveryTarget(target, delivery) {
@@ -308,7 +310,15 @@ export async function runCronIsolatedAgentTurn(params) {
             accountId: resolvedDelivery.accountId,
         }));
     if (deliveryRequested && !skipHeartbeatDelivery && !skipMessagingToolDelivery) {
-        if (!resolvedDelivery.to) {
+        // Expand multi-recipient targets (comma-separated, "admins" token).
+        const expandedRecipients = expandCronRecipients(cfgWithAgentDefaults, agentPayload?.to, effectiveAccountId);
+        // Use expanded list if multi-target, otherwise fall back to the resolved single target.
+        const deliveryTargets = expandedRecipients.length > 1
+            ? expandedRecipients
+            : resolvedDelivery.to
+                ? [resolvedDelivery.to]
+                : [];
+        if (deliveryTargets.length === 0) {
             const reason = resolvedDelivery.error?.message ?? "Cron delivery requires a recipient (--to).";
             if (!bestEffortDeliver) {
                 return {
@@ -324,22 +334,42 @@ export async function runCronIsolatedAgentTurn(params) {
                 outputText,
             };
         }
-        try {
-            await deliverOutboundPayloads({
-                cfg: cfgWithAgentDefaults,
+        const errors = [];
+        for (const targetTo of deliveryTargets) {
+            // Validate each target against the channel.
+            const docked = resolveOutboundTarget({
                 channel: resolvedDelivery.channel,
-                to: resolvedDelivery.to,
+                to: targetTo,
+                cfg: cfgWithAgentDefaults,
                 accountId: resolvedDelivery.accountId,
-                payloads,
-                bestEffort: bestEffortDeliver,
-                deps: createOutboundSendDeps(params.deps),
+                mode: "explicit",
             });
-        }
-        catch (err) {
-            if (!bestEffortDeliver) {
-                return { status: "error", summary, outputText, error: String(err) };
+            if (!docked.ok) {
+                errors.push(`${targetTo}: ${docked.error.message}`);
+                continue;
+            }
+            try {
+                await deliverOutboundPayloads({
+                    cfg: cfgWithAgentDefaults,
+                    channel: resolvedDelivery.channel,
+                    to: docked.to,
+                    accountId: resolvedDelivery.accountId,
+                    payloads,
+                    bestEffort: bestEffortDeliver,
+                    deps: createOutboundSendDeps(params.deps),
+                });
             }
-            return { status: "ok", summary, outputText };
+            catch (err) {
+                errors.push(`${targetTo}: ${String(err)}`);
+            }
+        }
+        if (errors.length > 0 && !bestEffortDeliver) {
+            return {
+                status: "error",
+                summary,
+                outputText,
+                error: errors.join("; "),
+            };
         }
     }
     return { status: "ok", summary, outputText };

package/dist/gateway/config-reload.js CHANGED Viewed

@@ -45,6 +45,7 @@ const BASE_RELOAD_RULES_TAIL = [
     { prefix: "license", kind: "none" },
     { prefix: "plugins", kind: "restart" },
     { prefix: "ui", kind: "none" },
+    { prefix: "workspaces", kind: "none" },
     { prefix: "gateway", kind: "restart" },
     { prefix: "discovery", kind: "restart" },
     { prefix: "canvasHost", kind: "restart" },

package/dist/gateway/control-ui.js CHANGED Viewed

@@ -1,8 +1,11 @@
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { resolveAgentWorkspaceRoot } from "../agents/agent-scope.js";
+import { buildAgentSummaries } from "../commands/agents.config.js";
 import { DEFAULT_ASSISTANT_IDENTITY, resolveAssistantIdentity } from "./assistant-identity.js";
 import { resolvePublicAgentId } from "./public-chat/session.js";
+import { findBrandLogo } from "./server-methods/brand.js";
 import { buildControlUiAvatarUrl, CONTROL_UI_AVATAR_PREFIX, normalizeControlUiBasePath, resolveAssistantAvatarUrl, } from "./control-ui-shared.js";
 const ROOT_PREFIX = "/";
 function resolveControlUiRoot() {
@@ -132,7 +135,7 @@ const DEFAULT_BRAND_NAME = "Taskmaster";
 const DEFAULT_BRAND_ICON_URL = "/taskmaster-icon.png";
 const DEFAULT_ACCENT_COLOR = "#00d4ff";
 function injectControlUiConfig(html, opts) {
-    const { basePath, assistantName, assistantAvatar, brandName, brandIconUrl, accentColor } = opts;
+    const { basePath, assistantName, assistantAvatar, brandName, brandIconUrl, accentColor, backgroundColor, workspaceBrands, } = opts;
     const script = `<script>` +
         `window.__TASKMASTER_CONTROL_UI_BASE_PATH__=${JSON.stringify(basePath)};` +
         `window.__TASKMASTER_ASSISTANT_NAME__=${JSON.stringify(assistantName ?? DEFAULT_ASSISTANT_IDENTITY.name)};` +
@@ -140,6 +143,10 @@ function injectControlUiConfig(html, opts) {
         `window.__TASKMASTER_BRAND_NAME__=${JSON.stringify(brandName ?? DEFAULT_BRAND_NAME)};` +
         `window.__TASKMASTER_BRAND_ICON_URL__=${JSON.stringify(brandIconUrl ?? DEFAULT_BRAND_ICON_URL)};` +
         `window.__TASKMASTER_ACCENT_COLOR__=${JSON.stringify(accentColor ?? DEFAULT_ACCENT_COLOR)};` +
+        `window.__TASKMASTER_BACKGROUND_COLOR__=${JSON.stringify(backgroundColor ?? "")};` +
+        (workspaceBrands
+            ? `window.__TASKMASTER_WORKSPACE_BRANDS__=${JSON.stringify(workspaceBrands)};`
+            : "") +
         `</script>`;
     // Check if already injected
     if (html.includes("__TASKMASTER_ASSISTANT_NAME__"))
@@ -163,6 +170,37 @@ function resolveBrandIconUrl(iconKey, uiRoot) {
         return "/brand-icon.png";
     return DEFAULT_BRAND_ICON_URL;
 }
+/**
+ * Build a map of workspace name → brand config for injection into the client.
+ * Includes both config colours and whether a logo file exists on disk.
+ */
+function buildWorkspaceBrands(config) {
+    const wsConfig = config.workspaces ?? {};
+    const result = {};
+    const summaries = buildAgentSummaries(config);
+    const seen = new Set();
+    for (const summary of summaries) {
+        const root = resolveAgentWorkspaceRoot(config, summary.id);
+        const name = path.basename(root);
+        if (seen.has(name))
+            continue;
+        seen.add(name);
+        const wsBrand = wsConfig[name]?.brand;
+        const logoPath = findBrandLogo(root);
+        const entry = {};
+        if (wsBrand?.accentColor)
+            entry.accentColor = wsBrand.accentColor;
+        if (wsBrand?.backgroundColor)
+            entry.backgroundColor = wsBrand.backgroundColor;
+        if (logoPath)
+            entry.logoUrl = `/brand-logo/${encodeURIComponent(name)}`;
+        // Only include if there's something to inject
+        if (Object.keys(entry).length > 0) {
+            result[name] = entry;
+        }
+    }
+    return result;
+}
 function serveIndexHtml(res, indexPath, opts) {
     const { basePath, config, agentId } = opts;
     const identity = config
@@ -180,6 +218,8 @@ function serveIndexHtml(res, indexPath, opts) {
     const brandName = config?.ui?.brand?.name;
     const brandIconUrl = resolveBrandIconUrl(config?.ui?.brand?.icon, uiRoot);
     const accentColor = config?.ui?.seamColor;
+    // Build workspace brand map for the control panel
+    const workspaceBrands = config ? buildWorkspaceBrands(config) : undefined;
     res.setHeader("Content-Type", "text/html; charset=utf-8");
     res.setHeader("Cache-Control", "no-cache");
     const raw = fs.readFileSync(indexPath, "utf8");
@@ -190,6 +230,7 @@ function serveIndexHtml(res, indexPath, opts) {
         brandName,
         brandIconUrl,
         accentColor,
+        workspaceBrands,
     }));
 }
 function isSafeRelativePath(relPath) {
@@ -346,6 +387,55 @@ export function handleBrandIconRequest(req, res, opts) {
     serveFile(res, filePath);
     return true;
 }
+/**
+ * Dynamic route for `/brand-logo/:workspace`.
+ * Serves the uploaded brand logo from the workspace directory.
+ */
+export function handleBrandLogoRequest(req, res, opts) {
+    const url = new URL(req.url ?? "/", "http://localhost");
+    if (!url.pathname.startsWith("/brand-logo/"))
+        return false;
+    if (req.method !== "GET" && req.method !== "HEAD")
+        return false;
+    const workspace = decodeURIComponent(url.pathname.slice("/brand-logo/".length)).split("/")[0];
+    if (!workspace || !/^[a-z0-9][a-z0-9_-]{0,63}$/i.test(workspace)) {
+        respondNotFound(res);
+        return true;
+    }
+    const config = opts?.config;
+    if (!config) {
+        respondNotFound(res);
+        return true;
+    }
+    // Resolve workspace root by name
+    let workspaceDir = null;
+    const summaries = buildAgentSummaries(config);
+    for (const summary of summaries) {
+        const root = resolveAgentWorkspaceRoot(config, summary.id);
+        if (path.basename(root) === workspace) {
+            workspaceDir = root;
+            break;
+        }
+    }
+    if (!workspaceDir) {
+        respondNotFound(res);
+        return true;
+    }
+    const logoPath = findBrandLogo(workspaceDir);
+    if (!logoPath) {
+        respondNotFound(res);
+        return true;
+    }
+    if (req.method === "HEAD") {
+        res.statusCode = 200;
+        res.setHeader("Content-Type", contentTypeForExt(path.extname(logoPath).toLowerCase()));
+        res.setHeader("Cache-Control", "no-cache");
+        res.end();
+        return true;
+    }
+    serveFile(res, logoPath);
+    return true;
+}
 /**
  * Serve `/public/chat` — the same SPA but with public-chat flags injected.
  */
@@ -439,15 +529,30 @@ export function handlePublicChatHttpRequest(req, res, opts) {
     const cookieTtlDays = config.publicChat.cookieTtlDays ?? 30;
     const brandName = config.ui?.brand?.name;
     const brandIconUrl = resolveBrandIconUrl(config.ui?.brand?.icon, root);
-    const accentColor = config.ui?.seamColor;
+    // Resolve workspace-level brand — overrides device-level seamColor
+    const wsBrand = config.workspaces?.[accountId]?.brand;
+    const accentColor = wsBrand?.accentColor ?? config.ui?.seamColor;
+    const backgroundColor = wsBrand?.backgroundColor;
+    // Resolve workspace logo URL
+    const wsLogoUrl = (() => {
+        const summaries = buildAgentSummaries(config);
+        for (const s of summaries) {
+            const wsRoot = resolveAgentWorkspaceRoot(config, s.id);
+            if (path.basename(wsRoot) === accountId && findBrandLogo(wsRoot)) {
+                return `/brand-logo/${encodeURIComponent(accountId)}`;
+            }
+        }
+        return undefined;
+    })();
     const raw = fs.readFileSync(indexPath, "utf8");
     const injected = injectControlUiConfig(raw, {
         basePath: "",
         assistantName: identity.name,
         assistantAvatar: avatarValue,
         brandName,
-        brandIconUrl,
+        brandIconUrl: wsLogoUrl ?? brandIconUrl,
         accentColor,
+        backgroundColor,
     });
     // Inject <base href="/"> right after <head> so relative asset paths (./assets/...)
     // resolve from root. The URL is /public/chat/:accountId — 3 levels deep, so without
@@ -474,7 +579,7 @@ export function handlePublicChatHttpRequest(req, res, opts) {
 /** Widget script content — self-contained JS for embedding. */
 const WIDGET_SCRIPT = `(function(){
   "use strict";
-  var cfg={server:"",accountId:"",color:"#1a1a2e"};
+  var cfg={server:"",accountId:"",color:"#1a1a2e",bgColor:"#1a1a2e"};
   var isOpen=false;
   var btn,overlay,iframe;
@@ -482,6 +587,7 @@ const WIDGET_SCRIPT = `(function(){
     if(opts&&opts.server) cfg.server=opts.server.replace(/\\/$/,"");
     if(opts&&opts.accountId) cfg.accountId=opts.accountId;
     if(opts&&opts.color) cfg.color=opts.color;
+    if(opts&&opts.bgColor) cfg.bgColor=opts.bgColor;
     build();
   }
@@ -496,7 +602,7 @@ const WIDGET_SCRIPT = `(function(){
       ".tm-widget-overlay{position:fixed;bottom:78px;right:20px;width:400px;height:600px;",
       "max-width:calc(100vw - 40px);max-height:calc(100vh - 98px);",
       "border-radius:12px;overflow:hidden;box-shadow:0 8px 30px rgba(0,0,0,.3);",
-      "z-index:999998;display:none;background:#1a1a2e}",
+      "z-index:999998;display:none;background:"+cfg.bgColor+"}",
       ".tm-widget-overlay.open{display:block}",
       ".tm-widget-iframe{width:100%;height:100%;border:none}",
       "@media(max-width:480px){",

package/dist/gateway/protocol/index.js CHANGED Viewed

@@ -1,5 +1,5 @@
 import AjvPkg from "ajv";
-import { AgentEventSchema, AgentIdentityParamsSchema, AgentIdentityResultSchema, AgentParamsSchema, AgentSummarySchema, AgentsListParamsSchema, AgentsListResultSchema, AgentWaitParamsSchema, ChannelsLogoutParamsSchema, ChannelsStatusParamsSchema, ChannelsStatusResultSchema, ChatAbortParamsSchema, ChatEventSchema, ChatHistoryParamsSchema, ChatInjectParamsSchema, ChatSendParamsSchema, ConfigApplyParamsSchema, ConfigGetParamsSchema, ConfigPatchParamsSchema, ConfigSchemaParamsSchema, ConfigSchemaResponseSchema, ConfigSetParamsSchema, ConnectParamsSchema, CronAddParamsSchema, CronJobSchema, CronListParamsSchema, CronRemoveParamsSchema, CronRunParamsSchema, CronRunsParamsSchema, CronStatusParamsSchema, CronUpdateParamsSchema, DevicePairApproveParamsSchema, DevicePairListParamsSchema, DevicePairRejectParamsSchema, DeviceTokenRevokeParamsSchema, DeviceTokenRotateParamsSchema, ExecApprovalsGetParamsSchema, ExecApprovalsNodeGetParamsSchema, ExecApprovalsNodeSetParamsSchema, ExecApprovalsSetParamsSchema, ExecApprovalRequestParamsSchema, ExecApprovalResolveParamsSchema, ErrorCodes, ErrorShapeSchema, EventFrameSchema, errorShape, GatewayFrameSchema, HelloOkSchema, LogsTailParamsSchema, LogsTailResultSchema, SessionsTranscriptParamsSchema, SessionsTranscriptResultSchema, ModelsListParamsSchema, NodeDescribeParamsSchema, NodeEventParamsSchema, NodeInvokeParamsSchema, NodeInvokeResultParamsSchema, NodeListParamsSchema, NodePairApproveParamsSchema, NodePairListParamsSchema, NodePairRejectParamsSchema, NodePairRequestParamsSchema, NodePairVerifyParamsSchema, NodeRenameParamsSchema, PollParamsSchema, PROTOCOL_VERSION, PresenceEntrySchema, ProtocolSchemas, RequestFrameSchema, ResponseFrameSchema, SendParamsSchema, SessionsCompactParamsSchema, SessionsDeleteParamsSchema, SessionsListParamsSchema, SessionsPatchParamsSchema, SessionsPreviewParamsSchema, SessionsResetParamsSchema, SessionsResolveParamsSchema, ShutdownEventSchema, SkillsBinsParamsSchema, SkillsInstallParamsSchema, SkillsStatusParamsSchema, SkillsUpdateParamsSchema, SnapshotSchema, StateVersionSchema, TalkModeParamsSchema, TickEventSchema, UpdateRunParamsSchema, WakeParamsSchema, WebLoginStartParamsSchema, WebLoginWaitParamsSchema, WizardCancelParamsSchema, WizardNextParamsSchema, WizardNextResultSchema, WizardStartParamsSchema, WizardStartResultSchema, WizardStatusParamsSchema, WizardStatusResultSchema, WizardStepSchema, } from "./schema.js";
+import { AgentEventSchema, AgentIdentityParamsSchema, AgentIdentityResultSchema, AgentParamsSchema, AgentSummarySchema, AgentsListParamsSchema, AgentsListResultSchema, AgentWaitParamsSchema, ChannelsLogoutParamsSchema, ChannelsStatusParamsSchema, ChannelsStatusResultSchema, ChatAbortParamsSchema, ChatEventSchema, ChatHistoryParamsSchema, ChatInjectParamsSchema, ChatSendParamsSchema, ConfigApplyParamsSchema, ConfigGetParamsSchema, ConfigPatchParamsSchema, ConfigSchemaParamsSchema, ConfigSchemaResponseSchema, ConfigSetParamsSchema, ConnectParamsSchema, CronAddParamsSchema, CronJobSchema, CronListParamsSchema, CronRemoveParamsSchema, CronRunParamsSchema, CronRunsParamsSchema, CronStatusParamsSchema, CronUpdateParamsSchema, DevicePairApproveParamsSchema, DevicePairListParamsSchema, DevicePairRejectParamsSchema, DeviceTokenRevokeParamsSchema, DeviceTokenRotateParamsSchema, ExecApprovalsGetParamsSchema, ExecApprovalsNodeGetParamsSchema, ExecApprovalsNodeSetParamsSchema, ExecApprovalsSetParamsSchema, ExecApprovalRequestParamsSchema, ExecApprovalResolveParamsSchema, ErrorCodes, ErrorShapeSchema, EventFrameSchema, errorShape, GatewayFrameSchema, HelloOkSchema, LogsTailParamsSchema, LogsTailResultSchema, SessionsTranscriptParamsSchema, SessionsTranscriptResultSchema, ModelsListParamsSchema, NodeDescribeParamsSchema, NodeEventParamsSchema, NodeInvokeParamsSchema, NodeInvokeResultParamsSchema, NodeListParamsSchema, NodePairApproveParamsSchema, NodePairListParamsSchema, NodePairRejectParamsSchema, NodePairRequestParamsSchema, NodePairVerifyParamsSchema, NodeRenameParamsSchema, PollParamsSchema, PROTOCOL_VERSION, PresenceEntrySchema, ProtocolSchemas, RequestFrameSchema, ResponseFrameSchema, SendParamsSchema, SessionsCompactParamsSchema, SessionsDeleteParamsSchema, SessionsListParamsSchema, SessionsPatchParamsSchema, SessionsPreviewParamsSchema, SessionsResetParamsSchema, SessionsResolveParamsSchema, ShutdownEventSchema, SkillsBinsParamsSchema, SkillsCreateParamsSchema, SkillsDeleteParamsSchema, SkillsDeleteDraftParamsSchema, SkillsDraftsParamsSchema, SkillsInstallParamsSchema, SkillsReadParamsSchema, SkillsStatusParamsSchema, SkillsUpdateParamsSchema, SnapshotSchema, StateVersionSchema, TalkModeParamsSchema, TickEventSchema, UpdateRunParamsSchema, WakeParamsSchema, WebLoginStartParamsSchema, WebLoginWaitParamsSchema, WizardCancelParamsSchema, WizardNextParamsSchema, WizardNextResultSchema, WizardStartParamsSchema, WizardStartResultSchema, WizardStatusParamsSchema, WizardStatusResultSchema, WizardStepSchema, } from "./schema.js";
 const ajv = new AjvPkg({
     allErrors: true,
     strict: false,
@@ -51,6 +51,11 @@ export const validateSkillsStatusParams = ajv.compile(SkillsStatusParamsSchema);
 export const validateSkillsBinsParams = ajv.compile(SkillsBinsParamsSchema);
 export const validateSkillsInstallParams = ajv.compile(SkillsInstallParamsSchema);
 export const validateSkillsUpdateParams = ajv.compile(SkillsUpdateParamsSchema);
+export const validateSkillsReadParams = ajv.compile(SkillsReadParamsSchema);
+export const validateSkillsCreateParams = ajv.compile(SkillsCreateParamsSchema);
+export const validateSkillsDeleteParams = ajv.compile(SkillsDeleteParamsSchema);
+export const validateSkillsDraftsParams = ajv.compile(SkillsDraftsParamsSchema);
+export const validateSkillsDeleteDraftParams = ajv.compile(SkillsDeleteDraftParamsSchema);
 export const validateCronListParams = ajv.compile(CronListParamsSchema);
 export const validateCronStatusParams = ajv.compile(CronStatusParamsSchema);
 export const validateCronAddParams = ajv.compile(CronAddParamsSchema);

package/dist/gateway/protocol/schema/agents-models-skills.js CHANGED Viewed

@@ -45,3 +45,26 @@ export const SkillsUpdateParamsSchema = Type.Object({
     apiKey: Type.Optional(Type.String()),
     env: Type.Optional(Type.Record(NonEmptyString, Type.String())),
 }, { additionalProperties: false });
+export const SkillsReadParamsSchema = Type.Object({
+    name: NonEmptyString,
+}, { additionalProperties: false });
+const SkillReferenceFileSchema = Type.Object({
+    name: NonEmptyString,
+    content: Type.String(),
+}, { additionalProperties: false });
+export const SkillsCreateParamsSchema = Type.Object({
+    name: Type.String({
+        pattern: "^[a-z0-9][a-z0-9_-]*$",
+        minLength: 1,
+        description: "Skill directory name (lowercase, hyphens, underscores)",
+    }),
+    skillContent: NonEmptyString,
+    references: Type.Optional(Type.Array(SkillReferenceFileSchema)),
+}, { additionalProperties: false });
+export const SkillsDeleteParamsSchema = Type.Object({
+    name: NonEmptyString,
+}, { additionalProperties: false });
+export const SkillsDraftsParamsSchema = Type.Object({}, { additionalProperties: false });
+export const SkillsDeleteDraftParamsSchema = Type.Object({
+    name: NonEmptyString,
+}, { additionalProperties: false });

package/dist/gateway/protocol/schema/protocol-schemas.js CHANGED Viewed

@@ -1,5 +1,5 @@
 import { AgentEventSchema, AgentIdentityParamsSchema, AgentIdentityResultSchema, AgentParamsSchema, AgentWaitParamsSchema, PollParamsSchema, SendParamsSchema, WakeParamsSchema, } from "./agent.js";
-import { AgentSummarySchema, AgentsListParamsSchema, AgentsListResultSchema, ModelChoiceSchema, ModelsListParamsSchema, ModelsListResultSchema, SkillsBinsParamsSchema, SkillsBinsResultSchema, SkillsInstallParamsSchema, SkillsStatusParamsSchema, SkillsUpdateParamsSchema, } from "./agents-models-skills.js";
+import { AgentSummarySchema, AgentsListParamsSchema, AgentsListResultSchema, ModelChoiceSchema, ModelsListParamsSchema, ModelsListResultSchema, SkillsBinsParamsSchema, SkillsBinsResultSchema, SkillsCreateParamsSchema, SkillsDeleteParamsSchema, SkillsDeleteDraftParamsSchema, SkillsDraftsParamsSchema, SkillsInstallParamsSchema, SkillsReadParamsSchema, SkillsStatusParamsSchema, SkillsUpdateParamsSchema, } from "./agents-models-skills.js";
 import { ChannelsLogoutParamsSchema, ChannelsStatusParamsSchema, ChannelsStatusResultSchema, TalkModeParamsSchema, WebLoginStartParamsSchema, WebLoginWaitParamsSchema, } from "./channels.js";
 import { ConfigApplyParamsSchema, ConfigGetParamsSchema, ConfigPatchParamsSchema, ConfigSchemaParamsSchema, ConfigSchemaResponseSchema, ConfigSetParamsSchema, UpdateRunParamsSchema, } from "./config.js";
 import { CronAddParamsSchema, CronJobSchema, CronListParamsSchema, CronRemoveParamsSchema, CronRunLogEntrySchema, CronRunParamsSchema, CronRunsParamsSchema, CronStatusParamsSchema, CronUpdateParamsSchema, } from "./cron.js";
@@ -80,6 +80,11 @@ export const ProtocolSchemas = {
     SkillsBinsResult: SkillsBinsResultSchema,
     SkillsInstallParams: SkillsInstallParamsSchema,
     SkillsUpdateParams: SkillsUpdateParamsSchema,
+    SkillsReadParams: SkillsReadParamsSchema,
+    SkillsCreateParams: SkillsCreateParamsSchema,
+    SkillsDeleteParams: SkillsDeleteParamsSchema,
+    SkillsDraftsParams: SkillsDraftsParamsSchema,
+    SkillsDeleteDraftParams: SkillsDeleteDraftParamsSchema,
     CronJob: CronJobSchema,
     CronListParams: CronListParamsSchema,
     CronStatusParams: CronStatusParamsSchema,

package/dist/gateway/server-http.js CHANGED Viewed

@@ -5,7 +5,7 @@ import { loadConfig } from "../config/config.js";
 import { handleSlackHttpRequest } from "../slack/http/index.js";
 import { createCloudApiWebhookHandler } from "../web/providers/cloud/webhook-http.js";
 import { resolveAgentAvatar } from "../agents/identity-avatar.js";
-import { handleBrandIconRequest, handleControlUiAvatarRequest, handleControlUiHttpRequest, handlePublicChatHttpRequest, handlePublicWidgetRequest, } from "./control-ui.js";
+import { handleBrandIconRequest, handleBrandLogoRequest, handleControlUiAvatarRequest, handleControlUiHttpRequest, handlePublicChatHttpRequest, handlePublicWidgetRequest, } from "./control-ui.js";
 import { handlePublicChatApiRequest } from "./public-chat-api.js";
 import { isLicensed } from "../license/state.js";
 import { getEffectiveTrustedProxies, isExternalRequest } from "./net.js";
@@ -162,6 +162,9 @@ export function createGatewayHttpServer(opts) {
                 return;
             if (handlePublicWidgetRequest(req, res, { config: configSnapshot }))
                 return;
+            // Brand logos may be referenced from public chat pages
+            if (handleBrandLogoRequest(req, res, { config: configSnapshot }))
+                return;
             // Funnel restriction: block non-local requests from accessing non-public paths.
             // /public/* is already handled above, so any request reaching here is non-public.
             const trustedProxies = getEffectiveTrustedProxies(configSnapshot);
@@ -238,6 +241,8 @@ export function createGatewayHttpServer(opts) {
             if (controlUiEnabled) {
                 if (handleBrandIconRequest(req, res, { config: configSnapshot }))
                     return;
+                if (handleBrandLogoRequest(req, res, { config: configSnapshot }))
+                    return;
                 if (handleControlUiAvatarRequest(req, res, {
                     basePath: controlUiBasePath,
                     resolveAvatar: (agentId) => resolveAgentAvatar(configSnapshot, agentId),

package/dist/gateway/server-methods/access.js CHANGED Viewed

@@ -176,7 +176,7 @@ export const accessHandlers = {
             await writeConfigFile({
                 ...config,
                 access: {
-                    ...(config.access ?? {}),
+                    ...config.access,
                     masterPin: pin,
                 },
             });
@@ -210,9 +210,9 @@ export const accessHandlers = {
             await writeConfigFile({
                 ...config,
                 access: {
-                    ...(config.access ?? {}),
+                    ...config.access,
                     pins: {
-                        ...(config.access?.pins ?? {}),
+                        ...config.access?.pins,
                         [workspace]: pin,
                     },
                 },

package/dist/gateway/server-methods/brand.js ADDED Viewed

@@ -0,0 +1,160 @@
+import fs from "node:fs/promises";
+import fsSync from "node:fs";
+import path from "node:path";
+import { loadConfig } from "../../config/config.js";
+import { resolveAgentWorkspaceRoot } from "../../agents/agent-scope.js";
+import { buildAgentSummaries } from "../../commands/agents.config.js";
+import { ErrorCodes, errorShape } from "../protocol/index.js";
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const BRAND_LOGO_FILENAME_PREFIX = "brand-logo";
+const ALLOWED_EXTENSIONS = new Set([".png", ".jpg", ".jpeg", ".svg", ".webp"]);
+const MAX_LOGO_BYTES = 2 * 1024 * 1024; // 2 MB
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the workspace root directory for a given workspace name.
+ * Workspace name = basename of the workspace root (set during workspaces.create).
+ */
+function resolveWorkspaceRootByName(cfg, workspaceName) {
+    const summaries = buildAgentSummaries(cfg);
+    for (const summary of summaries) {
+        const root = resolveAgentWorkspaceRoot(cfg, summary.id);
+        if (path.basename(root) === workspaceName)
+            return root;
+    }
+    return null;
+}
+/**
+ * Find an existing brand logo file in a workspace directory.
+ * Returns the full path if found, null otherwise.
+ */
+export function findBrandLogo(workspaceDir) {
+    for (const ext of ALLOWED_EXTENSIONS) {
+        const candidate = path.join(workspaceDir, `${BRAND_LOGO_FILENAME_PREFIX}${ext}`);
+        if (fsSync.existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// RPC Handlers
+// ---------------------------------------------------------------------------
+export const brandHandlers = {
+    /**
+     * Upload a brand logo for a workspace.
+     * Params: { workspace: string, data: string (base64), mimeType: string }
+     */
+    "brand.uploadLogo": async ({ params, respond }) => {
+        const workspace = typeof params.workspace === "string" ? params.workspace.trim() : "";
+        const data = typeof params.data === "string" ? params.data : "";
+        const mimeType = typeof params.mimeType === "string" ? params.mimeType.trim() : "";
+        if (!workspace || !data) {
+            respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, "workspace and data are required"));
+            return;
+        }
+        // Derive extension from mimeType
+        const ext = mimeToExt(mimeType);
+        if (!ext || !ALLOWED_EXTENSIONS.has(ext)) {
+            respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, `unsupported image type "${mimeType}"; allowed: png, jpg, svg, webp`));
+            return;
+        }
+        const buffer = Buffer.from(data, "base64");
+        if (buffer.length > MAX_LOGO_BYTES) {
+            respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, `logo too large (${buffer.length} bytes, max ${MAX_LOGO_BYTES})`));
+            return;
+        }
+        const cfg = loadConfig();
+        const workspaceDir = resolveWorkspaceRootByName(cfg, workspace);
+        if (!workspaceDir) {
+            respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, `workspace "${workspace}" not found`));
+            return;
+        }
+        // Remove any existing brand logo (different extension)
+        for (const existingExt of ALLOWED_EXTENSIONS) {
+            const existing = path.join(workspaceDir, `${BRAND_LOGO_FILENAME_PREFIX}${existingExt}`);
+            try {
+                await fs.unlink(existing);
+            }
+            catch {
+                // ignore — file may not exist
+            }
+        }
+        const destPath = path.join(workspaceDir, `${BRAND_LOGO_FILENAME_PREFIX}${ext}`);
+        try {
+            await fs.writeFile(destPath, buffer);
+            respond(true, { path: destPath, size: buffer.length });
+        }
+        catch (err) {
+            respond(false, undefined, errorShape(ErrorCodes.UNAVAILABLE, String(err)));
+        }
+    },
+    /**
+     * Remove the brand logo for a workspace.
+     * Params: { workspace: string }
+     */
+    "brand.removeLogo": async ({ params, respond }) => {
+        const workspace = typeof params.workspace === "string" ? params.workspace.trim() : "";
+        if (!workspace) {
+            respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, "workspace is required"));
+            return;
+        }
+        const cfg = loadConfig();
+        const workspaceDir = resolveWorkspaceRootByName(cfg, workspace);
+        if (!workspaceDir) {
+            respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, `workspace "${workspace}" not found`));
+            return;
+        }
+        let removed = false;
+        for (const ext of ALLOWED_EXTENSIONS) {
+            const existing = path.join(workspaceDir, `${BRAND_LOGO_FILENAME_PREFIX}${ext}`);
+            try {
+                await fs.unlink(existing);
+                removed = true;
+            }
+            catch {
+                // ignore
+            }
+        }
+        respond(true, { removed });
+    },
+    /**
+     * Check whether a workspace has a brand logo.
+     * Params: { workspace: string }
+     */
+    "brand.hasLogo": ({ params, respond }) => {
+        const workspace = typeof params.workspace === "string" ? params.workspace.trim() : "";
+        if (!workspace) {
+            respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, "workspace is required"));
+            return;
+        }
+        const cfg = loadConfig();
+        const workspaceDir = resolveWorkspaceRootByName(cfg, workspace);
+        if (!workspaceDir) {
+            respond(false, undefined, errorShape(ErrorCodes.INVALID_REQUEST, `workspace "${workspace}" not found`));
+            return;
+        }
+        const logoPath = findBrandLogo(workspaceDir);
+        respond(true, { hasLogo: Boolean(logoPath) });
+    },
+};
+// ---------------------------------------------------------------------------
+// Helpers (private)
+// ---------------------------------------------------------------------------
+function mimeToExt(mime) {
+    switch (mime.toLowerCase()) {
+        case "image/png":
+            return ".png";
+        case "image/jpeg":
+        case "image/jpg":
+            return ".jpg";
+        case "image/svg+xml":
+            return ".svg";
+        case "image/webp":
+            return ".webp";
+        default:
+            return null;
+    }
+}