@rubytech/taskmaster 1.0.44 → 1.0.45

package/dist/gateway/server-methods/browser-screencast.js

@@ -1,7 +1,9 @@
+import { createSubsystemLogger } from "../../logging/subsystem.js";
 import { ErrorCodes, errorShape } from "../protocol/index.js";
 import { registerScreencastFrameListener, removeScreencastFrameListener, getActiveScreencastSession, } from "../../browser/routes/screencast.js";
 import { stopScreencast } from "../../browser/screencast.js";
 import { resolveHandoff, getPendingHandoff } from "../../browser/handoff.js";
+const log = createSubsystemLogger("browser").child("screencast-rpc");
 /**
  * Gateway RPC handlers for browser screencast.
  * These relay between the UI WebSocket clients and the browser bridge.
@@ -11,9 +13,11 @@ export const browserScreencastHandlers = {
         const quality = typeof params.quality === "number" ? params.quality : 60;
         const maxWidth = typeof params.maxWidth === "number" ? params.maxWidth : 1280;
         const maxHeight = typeof params.maxHeight === "number" ? params.maxHeight : 720;
+        log.info(`screencast.start requested quality=${quality} maxWidth=${maxWidth} maxHeight=${maxHeight}`);
         // Stop existing session if any
         const existing = getActiveScreencastSession();
         if (existing?.active) {
+            log.info("stopping existing screencast session");
             stopScreencast(existing);
         }
         // Remove old listener
@@ -30,9 +34,11 @@ export const browserScreencastHandlers = {
         try {
             const bridgeUrl = await resolveBridgeUrl(context);
             if (!bridgeUrl) {
+                log.warn("screencast.start failed: bridge URL could not be resolved");
                 respond(false, undefined, errorShape(ErrorCodes.UNAVAILABLE, "Browser bridge not configured"));
                 return;
             }
+            log.info(`forwarding screencast.start to bridge at ${bridgeUrl}`);
             const res = await fetch(`${bridgeUrl}/screencast/start`, {
                 method: "POST",
                 headers: { "Content-Type": "application/json" },
@@ -40,21 +46,27 @@ export const browserScreencastHandlers = {
             });
             if (!res.ok) {
                 const body = (await res.json().catch(() => ({ error: "Unknown error" })));
-                respond(false, undefined, errorShape(ErrorCodes.UNAVAILABLE, body?.error ?? `HTTP ${res.status}`));
+                const msg = body?.error ?? `HTTP ${res.status}`;
+                log.error(`bridge returned error: ${msg}`);
+                respond(false, undefined, errorShape(ErrorCodes.UNAVAILABLE, msg));
                 return;
             }
             const result = (await res.json());
+            log.info(`screencast started: sessionId=${result.sessionId}`);
             respond(true, result);
         }
         catch (err) {
+            log.error(`screencast.start failed: ${err}`);
             respond(false, undefined, errorShape(ErrorCodes.UNAVAILABLE, String(err)));
         }
     },
     "browser.screencast.stop": async ({ respond, context }) => {
+        log.info("screencast.stop requested");
         removeScreencastFrameListener("gateway");
         try {
             const bridgeUrl = await resolveBridgeUrl(context);
             if (!bridgeUrl) {
+                log.info("screencast.stop: no bridge URL, returning ok");
                 respond(true, { ok: true });
                 return;
             }
@@ -63,9 +75,11 @@ export const browserScreencastHandlers = {
                 headers: { "Content-Type": "application/json" },
                 body: JSON.stringify({}),
             });
+            log.info("screencast stopped");
             respond(true, { ok: true });
         }
         catch (err) {
+            log.error(`screencast.stop failed: ${err}`);
             respond(false, undefined, errorShape(ErrorCodes.UNAVAILABLE, String(err)));
         }
     },
@@ -133,18 +147,24 @@ export const browserScreencastHandlers = {
 async function resolveBridgeUrl(context) {
     const health = context.getHealthCache();
     const browserUrl = health?.browser?.controlUrl;
-    if (browserUrl)
+    if (browserUrl) {
+        log.debug(`bridge URL from health cache: ${browserUrl}`);
         return browserUrl;
+    }
+    log.debug("no bridge URL in health cache, resolving from config");
     try {
         const { loadConfig } = await import("../../config/config.js");
         const { resolveBrowserConfig } = await import("../../browser/config.js");
         const cfg = loadConfig();
         const resolved = resolveBrowserConfig(cfg.browser);
-        if (resolved.enabled && resolved.controlUrl)
+        if (resolved.enabled && resolved.controlUrl) {
+            log.debug(`bridge URL from config: ${resolved.controlUrl}`);
             return resolved.controlUrl;
+        }
+        log.warn(`browser config resolved but not usable: enabled=${resolved.enabled} controlUrl=${resolved.controlUrl ?? "null"}`);
     }
-    catch {
-        // ignore
+    catch (err) {
+        log.error(`failed to resolve browser config: ${err}`);
     }
     return null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/taskmaster",
-  "version": "1.0.44",
+  "version": "1.0.45",
   "description": "AI-powered business assistant for small businesses",
   "publishConfig": {
     "access": "public"
@@ -77,12 +77,66 @@
     "dist/filler/**",
     "dist/license/**"
   ],
+  "scripts": {
+    "dev": "node scripts/run-node.mjs",
+    "postinstall": "node scripts/postinstall.js",
+    "prepack": "pnpm build && pnpm ui:build",
+    "docs:list": "node scripts/docs-list.js",
+    "docs:bin": "node scripts/build-docs-list.mjs",
+    "docs:dev": "cd docs && mint dev",
+    "docs:build": "cd docs && pnpm dlx --reporter append-only mint broken-links",
+    "build": "tsc -p tsconfig.json && node --import tsx scripts/canvas-a2ui-copy.ts && node --import tsx scripts/copy-hook-metadata.ts && node --import tsx scripts/write-build-info.ts",
+    "plugins:sync": "node --import tsx scripts/sync-plugin-versions.ts",
+    "release:check": "node --import tsx scripts/release-check.ts",
+    "ui:install": "node scripts/ui.js install",
+    "ui:dev": "node scripts/ui.js dev",
+    "ui:build": "node scripts/ui.js build",
+    "start": "node scripts/run-node.mjs",
+    "taskmaster": "node scripts/run-node.mjs",
+    "gateway:watch": "node scripts/watch-node.mjs gateway --force",
+    "logs": "npx tsx scripts/session-viewer.ts",
+    "gateway:dev": "TASKMASTER_SKIP_CHANNELS=1 node scripts/run-node.mjs --dev gateway",
+    "gateway:dev:reset": "TASKMASTER_SKIP_CHANNELS=1 node scripts/run-node.mjs --dev gateway --reset",
+    "tui": "node scripts/run-node.mjs tui",
+    "tui:dev": "TASKMASTER_PROFILE=dev node scripts/run-node.mjs tui",
+    "taskmaster:rpc": "node scripts/run-node.mjs agent --mode rpc --json",
+    "lint": "oxlint --type-aware src test",
+    "lint:fix": "pnpm format:fix && oxlint --type-aware --fix src test",
+    "format": "oxfmt --check src test",
+    "format:fix": "oxfmt --write src test",
+    "test": "node scripts/test-parallel.mjs",
+    "test:watch": "vitest",
+    "test:ui": "pnpm --dir ui test",
+    "test:force": "node --import tsx scripts/test-force.ts",
+    "test:coverage": "vitest run --coverage",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "test:live": "TASKMASTER_LIVE_TEST=1 vitest run --config vitest.live.config.ts",
+    "test:docker:onboard": "bash scripts/e2e/onboard-docker.sh",
+    "test:docker:gateway-network": "bash scripts/e2e/gateway-network-docker.sh",
+    "test:docker:live-models": "bash scripts/test-live-models-docker.sh",
+    "test:docker:live-gateway": "bash scripts/test-live-gateway-models-docker.sh",
+    "test:docker:qr": "bash scripts/e2e/qr-import-docker.sh",
+    "test:docker:doctor-switch": "bash scripts/e2e/doctor-install-switch-docker.sh",
+    "test:docker:plugins": "bash scripts/e2e/plugins-docker.sh",
+    "test:docker:cleanup": "bash scripts/test-cleanup-docker.sh",
+    "test:docker:all": "pnpm test:docker:live-models && pnpm test:docker:live-gateway && pnpm test:docker:onboard && pnpm test:docker:gateway-network && pnpm test:docker:qr && pnpm test:docker:doctor-switch && pnpm test:docker:plugins && pnpm test:docker:cleanup",
+    "test:all": "pnpm lint && pnpm build && pnpm test && pnpm test:e2e && pnpm test:live && pnpm test:docker:all",
+    "test:install:e2e": "bash scripts/test-install-sh-e2e-docker.sh",
+    "test:install:smoke": "bash scripts/test-install-sh-docker.sh",
+    "test:install:e2e:openai": "TASKMASTER_E2E_MODELS=openai bash scripts/test-install-sh-e2e-docker.sh",
+    "test:install:e2e:anthropic": "TASKMASTER_E2E_MODELS=anthropic bash scripts/test-install-sh-e2e-docker.sh",
+    "protocol:gen": "node --import tsx scripts/protocol-gen.ts",
+    "protocol:check": "pnpm protocol:gen && git diff --exit-code -- dist/protocol.schema.json",
+    "canvas:a2ui:bundle": "bash scripts/bundle-a2ui.sh",
+    "check:loc": "node --import tsx scripts/check-ts-max-loc.ts --max 500"
+  },
   "keywords": [],
   "author": "",
   "license": "MIT",
   "engines": {
     "node": ">=22.12.0"
   },
+  "packageManager": "pnpm@10.23.0",
   "dependencies": {
     "@agentclientprotocol/sdk": "0.13.1",
     "@aws-sdk/client-bedrock": "^3.975.0",
@@ -172,6 +226,14 @@
     "vitest": "^4.0.18",
     "wireit": "^0.14.12"
   },
+  "pnpm": {
+    "minimumReleaseAge": 2880,
+    "overrides": {
+      "@sinclair/typebox": "0.34.47",
+      "hono": "4.11.4",
+      "tar": "7.5.4"
+    }
+  },
   "vitest": {
     "coverage": {
       "provider": "v8",
@@ -200,57 +262,5 @@
       "**/vendor/**",
       "dist/Taskmaster.app/**"
     ]
-  },
-  "scripts": {
-    "dev": "node scripts/run-node.mjs",
-    "postinstall": "node scripts/postinstall.js",
-    "docs:list": "node scripts/docs-list.js",
-    "docs:bin": "node scripts/build-docs-list.mjs",
-    "docs:dev": "cd docs && mint dev",
-    "docs:build": "cd docs && pnpm dlx --reporter append-only mint broken-links",
-    "build": "tsc -p tsconfig.json && node --import tsx scripts/canvas-a2ui-copy.ts && node --import tsx scripts/copy-hook-metadata.ts && node --import tsx scripts/write-build-info.ts",
-    "plugins:sync": "node --import tsx scripts/sync-plugin-versions.ts",
-    "release:check": "node --import tsx scripts/release-check.ts",
-    "ui:install": "node scripts/ui.js install",
-    "ui:dev": "node scripts/ui.js dev",
-    "ui:build": "node scripts/ui.js build",
-    "start": "node scripts/run-node.mjs",
-    "taskmaster": "node scripts/run-node.mjs",
-    "gateway:watch": "node scripts/watch-node.mjs gateway --force",
-    "logs": "npx tsx scripts/session-viewer.ts",
-    "gateway:dev": "TASKMASTER_SKIP_CHANNELS=1 node scripts/run-node.mjs --dev gateway",
-    "gateway:dev:reset": "TASKMASTER_SKIP_CHANNELS=1 node scripts/run-node.mjs --dev gateway --reset",
-    "tui": "node scripts/run-node.mjs tui",
-    "tui:dev": "TASKMASTER_PROFILE=dev node scripts/run-node.mjs tui",
-    "taskmaster:rpc": "node scripts/run-node.mjs agent --mode rpc --json",
-    "lint": "oxlint --type-aware src test",
-    "lint:fix": "pnpm format:fix && oxlint --type-aware --fix src test",
-    "format": "oxfmt --check src test",
-    "format:fix": "oxfmt --write src test",
-    "test": "node scripts/test-parallel.mjs",
-    "test:watch": "vitest",
-    "test:ui": "pnpm --dir ui test",
-    "test:force": "node --import tsx scripts/test-force.ts",
-    "test:coverage": "vitest run --coverage",
-    "test:e2e": "vitest run --config vitest.e2e.config.ts",
-    "test:live": "TASKMASTER_LIVE_TEST=1 vitest run --config vitest.live.config.ts",
-    "test:docker:onboard": "bash scripts/e2e/onboard-docker.sh",
-    "test:docker:gateway-network": "bash scripts/e2e/gateway-network-docker.sh",
-    "test:docker:live-models": "bash scripts/test-live-models-docker.sh",
-    "test:docker:live-gateway": "bash scripts/test-live-gateway-models-docker.sh",
-    "test:docker:qr": "bash scripts/e2e/qr-import-docker.sh",
-    "test:docker:doctor-switch": "bash scripts/e2e/doctor-install-switch-docker.sh",
-    "test:docker:plugins": "bash scripts/e2e/plugins-docker.sh",
-    "test:docker:cleanup": "bash scripts/test-cleanup-docker.sh",
-    "test:docker:all": "pnpm test:docker:live-models && pnpm test:docker:live-gateway && pnpm test:docker:onboard && pnpm test:docker:gateway-network && pnpm test:docker:qr && pnpm test:docker:doctor-switch && pnpm test:docker:plugins && pnpm test:docker:cleanup",
-    "test:all": "pnpm lint && pnpm build && pnpm test && pnpm test:e2e && pnpm test:live && pnpm test:docker:all",
-    "test:install:e2e": "bash scripts/test-install-sh-e2e-docker.sh",
-    "test:install:smoke": "bash scripts/test-install-sh-docker.sh",
-    "test:install:e2e:openai": "TASKMASTER_E2E_MODELS=openai bash scripts/test-install-sh-e2e-docker.sh",
-    "test:install:e2e:anthropic": "TASKMASTER_E2E_MODELS=anthropic bash scripts/test-install-sh-e2e-docker.sh",
-    "protocol:gen": "node --import tsx scripts/protocol-gen.ts",
-    "protocol:check": "pnpm protocol:gen && git diff --exit-code -- dist/protocol.schema.json",
-    "canvas:a2ui:bundle": "bash scripts/bundle-a2ui.sh",
-    "check:loc": "node --import tsx scripts/check-ts-max-loc.ts --max 500"
   }
-}
+}

package/skills/google-ai/references/browser-setup.md

@@ -53,6 +53,8 @@ Take a snapshot and check the page content.
 - Copy the new key
 - Screenshot: "Created a new key for you."
 
+**Send the key as a separate message** — just the key on its own line, nothing else. This lets the user tap and copy it easily from their chat app.
+
 ## Step 6: Add to Taskmaster
 
 Tell the user how to add the key:

package/skills/tavily/references/browser-setup.md

@@ -44,6 +44,7 @@ Take a snapshot of the dashboard.
 - If the key is masked, click the eye icon to reveal it
 - Screenshot: "Here's your Tavily dashboard. Copying your API key..."
 - Copy the key value
+- **Send the key as a separate message** — just the key on its own line, nothing else. This lets the user tap and copy it easily from their chat app.
 
 ## Step 6: Add to Taskmaster
 

package/taskmaster-docs/USER-GUIDE.md

@@ -107,7 +107,7 @@ Once your license is activated:
 2. Sign in with your Claude Pro account
 3. Copy the code shown and paste it into the setup page
 4. Tap **Submit**
-5. When connected, tap **"Continue to WhatsApp"**
+5. When connected, tap **"Continue to Chat"** to start configuring your assistant
 
 > **Don't have Claude Pro?** Click "Or enter your API key" below the Connect button. Paste your Anthropic API key and tap Submit. This is the advanced option — most people find signing in with Claude Pro much easier.
 
@@ -206,13 +206,16 @@ Taskmaster runs two assistants on the same WhatsApp number, each with a differen
 
 **The Public Assistant** handles messages from your customers. It can reply to messages and look up information you've taught it, but it cannot access your files, run commands, or see private notes. If a customer tries to trick it into doing something it shouldn't, it simply can't — those capabilities don't exist for it.
 
-**The Admin Assistant** is your personal assistant. When you message yourself on WhatsApp (or use the Chat page), you're talking to this one. It has full access — it can manage files, browse the web, run scheduled tasks, and read everything.
+**The Admin Assistant** is your personal assistant. When you use the Chat page (or message yourself on WhatsApp), you're talking to this one. It has full access — it can manage files, browse the web, run scheduled tasks, and read everything.
 
 ### How does Taskmaster know which is which?
 
-Your phone number (the one you paired during setup) is marked as an admin. Messages from your number go to the admin assistant. Messages from everyone else go to the public assistant.
+There are two concepts to understand:
 
-You can add more admin numbers on the **Admins** page — for example, your personal phone, a business partner or manager who should also get full access.
+- **Paired WhatsApp number** — the WhatsApp account linked to your Pi during setup. This is the number your customers message. When you send yourself a message on this WhatsApp account (self-chat), it goes to the admin assistant.
+- **Admin phones** — additional phone numbers that get admin access when they message the paired WhatsApp. Useful if you have a separate personal phone, or if a business partner needs admin access from their own number.
+
+By default, messages from anyone other than registered admin phones go to the public assistant. You can add admin phones on the **Admins** page.
 
 ---
 

package/templates/customer/agents/admin/BOOTSTRAP.md

@@ -16,7 +16,7 @@ Explain that there's a second assistant — the **public agent** — that handle
 
 Ask conversationally, one thing at a time:
 - **Owner's name** (the person you're talking to)
-- **Phone number** (international format, e.g., +44 7504 472444)
+- **Phone number** — their personal mobile number (international format, e.g., +44 7591 215452). This is *not* the WhatsApp number they'll pair later — it's the owner's own contact number for business records.
 - **Business name**
 - **Location**
 - **Working hours**
@@ -43,33 +43,70 @@ All other files (SOUL.md, AGENTS.md, etc.) are already generic and reference USE
 
 ## Step 5: Authorize Admin Devices
 
-The paired device (self-chat) already has admin access. Ask if they want to add their personal phone as an additional admin device.
+At this point, WhatsApp has not been paired yet — that happens later via the Setup page. No phone numbers have admin access yet.
 
-If yes, use the `authorize_admin` tool with their phone number (international format, e.g., +447504472444).
+Ask the owner whether they'd like to register their personal phone number (the one they gave you in Step 3) as an **admin device**. Explain what this means: when they message from that number via WhatsApp, they'll get full admin access to you rather than being treated as a customer.
+
+If they confirm, use the `authorize_admin` tool with their phone number (international format with no spaces, e.g., +447504472444). Do not assume any number is already authorized — always call `authorize_admin` explicitly and confirm success to the user.
+
+If they have additional phone numbers they want to authorize (e.g., a business partner), authorize those too.
 
 ## Step 6: Help with API Keys
 
-Two free API keys unlock important capabilities. Offer to help the admin get them — use the browser to walk through signup and show screenshots so the user can follow along.
+Two free API keys unlock important capabilities. Offer to walk the admin through getting them — you can use the browser to guide them through signup and show screenshots so they can follow along.
 
-- **Tavily** (web search) — load the `tavily` skill's `references/browser-setup.md` and follow its steps
 - **Google AI** (voice notes + video) — load the `google-ai` skill's `references/browser-setup.md` and follow its steps
+- **Tavily** (web search) — load the `tavily` skill's `references/browser-setup.md` and follow its steps. The admin can use the same Google email they just set up to register.
 
-If the admin prefers to do it themselves, direct them to their Taskmaster setup page (API Keys section) and explain where to sign up: [app.tavily.com](https://app.tavily.com) for Tavily, [aistudio.google.com](https://aistudio.google.com) for Google AI.
+If the admin prefers to do it themselves later, they can manage API keys through the **Setup page** (API Keys section) — this requires logging in with the **admin PIN**, not an account PIN. Direct them to [app.tavily.com](https://app.tavily.com) for Tavily and [aistudio.google.com](https://aistudio.google.com) for Google AI.
 
 These keys are optional — the assistant works without them. Don't pressure. If the admin wants to skip this and come back later, that's fine.
 
-## Step 7: Explain What's Next
+If they need help with anything at all — setup, API keys, or general questions — suggest they reach out to **Dave at Taskmaster** via WhatsApp: [wa.me/447591215452](https://wa.me/447591215452).
+
+## Step 7: Rename the Account
+
+The default account is called "taskmaster" in the Setup page header. Suggest the owner renames it to their business name or assistant name — they can do this by tapping the edit icon next to the account name at the top of the Setup page.
+
+**Important:** This only changes the display name. Do **not** rename any folders in the filesystem — that will break the system.
+
+## Step 8: Set an Account PIN
+
+Suggest the owner sets an **account PIN** for their account. Explain the difference:
+
+- The **admin PIN** was set during initial setup (the very first screen). It unlocks full access to all accounts and device settings.
+- An **account PIN** is specific to one account. It lets someone access only that account without seeing others. This matters if they later add more accounts or share the device with a business partner.
+
+They can set the account PIN on the Setup page — look for the **Account PIN** row and tap **Set PIN**.
+
+## Step 9: Pair WhatsApp
+
+The assistant can't receive customer messages until a WhatsApp number is paired. Explain this to the owner:
+
+> "Everything's configured — but to start receiving customer messages, you need to pair a WhatsApp number. This is the business phone number that customers will message. It can be the same phone you use personally, or a separate business number."
+
+Guide them to do this via the Setup page:
+
+1. Go to the **Setup page** and find the **WhatsApp** row
+2. Tap **Link WhatsApp** (or **Relink WhatsApp** if re-pairing)
+3. Follow the QR code pairing flow on their phone
+
+Once paired, any message to that WhatsApp number from an unrecognized number goes to the **public agent**. Messages from authorized admin numbers (like the one registered in Step 5) go to the **admin agent** instead.
+
+If they're not ready to pair now, that's fine — they can do it anytime from the Setup page. Everything else is already configured and waiting.
+
+## Step 10: Explain What's Next
 
 Tell them:
-- They can message anytime to update business info
-- Customers who message will get the public agent (restricted access)
-- They (admin) get full access to configure everything
+- They can message you anytime to update business info, ask questions, or configure settings
+- Once WhatsApp is paired, customers who message the business number will talk to the public assistant automatically
+- Messages from their authorized phone number will reach you (the admin assistant) instead
 - You'll learn their business as you go
 
-## Step 8: Delete This File
+## Step 11: Delete This File
 
 Once setup is complete, create a file called `.bootstrap-done` in this directory (empty content is fine), then delete this file. The `.bootstrap-done` marker prevents this onboarding from reappearing.
 
 ---
 
-**Remember:** Be conversational, not robotic. This is WhatsApp, not a form. Ask one thing at a time.
+**Remember:** Be conversational, not robotic. This is a chat, not a form. Ask one thing at a time.