@rubytech/taskmaster 1.0.66 → 1.0.67

package/dist/agents/memory-search.js

@@ -42,7 +42,7 @@ function resolveStorePath(agentId, raw) {
 function mergeConfig(defaults, overrides, agentId) {
     const enabled = overrides?.enabled ?? defaults?.enabled ?? true;
     const sessionMemory = overrides?.experimental?.sessionMemory ?? defaults?.experimental?.sessionMemory ?? false;
-    const provider = overrides?.provider ?? defaults?.provider ?? "local";
+    const provider = overrides?.provider ?? defaults?.provider ?? "auto";
     const defaultRemote = defaults?.remote;
     const overrideRemote = overrides?.remote;
     const hasRemote = Boolean(defaultRemote || overrideRemote);

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.66",
+  "version": "1.0.67",
   "commit": "d9051199b654984c06db2b45b2b5712191e13a2c",
-  "builtAt": "2026-02-18T18:21:11.232Z"
+  "builtAt": "2026-02-18T18:41:34.789Z"
 }

package/dist/config/schema.js

@@ -402,7 +402,7 @@ const FIELD_HELP = {
     "agents.defaults.memorySearch": "Vector search over MEMORY.md and memory/*.md (per-agent overrides supported).",
     "agents.defaults.memorySearch.sources": 'Sources to index for memory search (default: ["memory"]; add "sessions" to include session transcripts).',
     "agents.defaults.memorySearch.experimental.sessionMemory": "Enable experimental session transcript indexing for memory search (default: false).",
-    "agents.defaults.memorySearch.provider": 'Embedding provider ("openai", "gemini", or "local").',
+    "agents.defaults.memorySearch.provider": 'Embedding provider ("auto", "openai", "gemini", or "local"). Auto uses remote when API keys are available, falls back to local.',
     "agents.defaults.memorySearch.remote.baseUrl": "Custom base URL for remote embeddings (OpenAI-compatible proxies or Gemini overrides).",
     "agents.defaults.memorySearch.remote.apiKey": "Custom API key for the remote embedding provider.",
     "agents.defaults.memorySearch.remote.headers": "Extra headers for remote embeddings (merged; remote overrides OpenAI headers).",

package/dist/config/zod-schema.agent-runtime.js

@@ -286,7 +286,7 @@ export const MemorySearchSchema = z
     })
         .strict()
         .optional(),
-    provider: z.union([z.literal("openai"), z.literal("local"), z.literal("gemini")]).optional(),
+    provider: z.union([z.literal("auto"), z.literal("openai"), z.literal("local"), z.literal("gemini")]).optional(),
     remote: z
         .object({
         baseUrl: z.string().optional(),

package/dist/gateway/net.js

@@ -1,22 +1,29 @@
 import net from "node:net";
-import os from "node:os";
 import { pickPrimaryTailnetIPv4, pickPrimaryTailnetIPv6 } from "../infra/tailnet.js";
 /**
- * Collect all IP addresses assigned to this machine's network interfaces.
- * Includes LAN, loopback, Tailnet, and any other bound address.
- * Used to distinguish same-machine access from truly external requests.
+ * Check if an IPv4 address belongs to a private (RFC 1918) or link-local range.
+ * These addresses are non-routable on the public internet, so any request
+ * from one is by definition on the local network — safe for LAN access.
+ *
+ * Ranges: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 169.254.0.0/16
  */
-function getOwnIpAddresses() {
-    const addresses = new Set();
-    const interfaces = os.networkInterfaces();
-    for (const iface of Object.values(interfaces)) {
-        if (!iface)
-            continue;
-        for (const info of iface) {
-            addresses.add(info.address.toLowerCase());
-        }
-    }
-    return addresses;
+function isPrivateIPv4(ip) {
+    const parts = ip.split(".");
+    if (parts.length !== 4)
+        return false;
+    const a = parseInt(parts[0], 10);
+    const b = parseInt(parts[1], 10);
+    if (Number.isNaN(a) || Number.isNaN(b))
+        return false;
+    if (a === 10)
+        return true; // 10.0.0.0/8
+    if (a === 172 && b >= 16 && b <= 31)
+        return true; // 172.16.0.0/12
+    if (a === 192 && b === 168)
+        return true; // 192.168.0.0/16
+    if (a === 169 && b === 254)
+        return true; // 169.254.0.0/16 (link-local)
+    return false;
 }
 export function isLoopbackAddress(ip) {
     if (!ip)
@@ -96,9 +103,9 @@ export function isLocalGatewayAddress(ip) {
     const tailnetIPv6 = pickPrimaryTailnetIPv6();
     if (tailnetIPv6 && ip.trim().toLowerCase() === tailnetIPv6.toLowerCase())
         return true;
-    // Check all IPs assigned to this machine's network interfaces.
-    // Covers same-machine access via LAN hostname, mDNS (.local), etc.
-    if (getOwnIpAddresses().has(normalized))
+    // Any RFC 1918 private or link-local address is on the local network.
+    // These are non-routable on the public internet, so they're safe.
+    if (isPrivateIPv4(normalized))
         return true;
     return false;
 }

package/dist/memory/embeddings.js

@@ -2,6 +2,7 @@ import fsSync from "node:fs";
 import os from "node:os";
 import { createSubsystemLogger } from "../logging/subsystem.js";
 import { resolveUserPath } from "../utils.js";
+import { getCustomProviderApiKey } from "../agents/model-auth.js";
 import { createGeminiEmbeddingProvider } from "./embeddings-gemini.js";
 import { createOpenAiEmbeddingProvider } from "./embeddings-openai.js";
 import { importNodeLlamaCpp } from "./node-llama.js";
@@ -174,36 +175,48 @@ export async function createEmbeddingProvider(options) {
     };
     const formatPrimaryError = (err, provider) => provider === "local" ? formatLocalSetupError(err) : formatError(err);
     if (requestedProvider === "auto") {
-        const missingKeyErrors = [];
-        let localError = null;
+        const errors = [];
+        // 1. If user configured an explicit local model file, try it first.
         if (canAutoSelectLocal(options)) {
             try {
                 const local = await createProvider("local");
                 return { ...local, requestedProvider };
             }
             catch (err) {
-                localError = formatLocalSetupError(err);
+                errors.push(formatLocalSetupError(err));
             }
         }
-        for (const provider of ["openai", "gemini"]) {
+        // 2. Try remote providers — preferred when API keys are available
+        //    (faster, no RAM overhead, no model download).
+        //    Only consider providers whose key is in the config (apiKeys section).
+        //    Environment variables are ignored for auto-selection to avoid using
+        //    stale dev keys that would fail at runtime.
+        const remoteProviders = [
+            { id: "openai", configKey: "openai" },
+            { id: "gemini", configKey: "google" },
+        ];
+        for (const { id, configKey } of remoteProviders) {
+            if (!getCustomProviderApiKey(options.config, configKey))
+                continue;
             try {
-                const result = await createProvider(provider);
+                const result = await createProvider(id);
                 return { ...result, requestedProvider };
             }
             catch (err) {
-                const message = formatPrimaryError(err, provider);
-                if (isMissingApiKeyError(err)) {
-                    missingKeyErrors.push(message);
-                    continue;
-                }
-                throw new Error(message);
+                errors.push(formatPrimaryError(err, id));
             }
         }
-        const details = [...missingKeyErrors, localError].filter(Boolean);
-        if (details.length > 0) {
-            throw new Error(details.join("\n\n"));
+        // 3. Fall back to local (downloads default model on first use).
+        try {
+            const local = await createProvider("local");
+            return { ...local, requestedProvider };
         }
-        throw new Error("No embeddings provider available.");
+        catch (err) {
+            errors.push(formatLocalSetupError(err));
+        }
+        throw new Error(errors.length > 0
+            ? errors.join("\n\n")
+            : "No embeddings provider available.");
     }
     try {
         const primary = await createProvider(requestedProvider);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/taskmaster",
-  "version": "1.0.66",
+  "version": "1.0.67",
   "description": "AI-powered business assistant for small businesses",
   "publishConfig": {
     "access": "public"

package/taskmaster-docs/USER-GUIDE.md

@@ -1267,6 +1267,57 @@ If the page loses connection during the update and doesn't reconnect within two
 
 ---
 
+## Command Line (CLI)
+
+Taskmaster includes a command-line tool called `taskmaster` that you can run in a terminal (Terminal on Mac, or via SSH on a Pi). You don't need the command line for day-to-day use — the Control Panel handles everything — but it's useful for troubleshooting, updating when the Control Panel isn't accessible, or automating tasks.
+
+### How to access the terminal
+
+- **Mac:** Open **Terminal** (search for "Terminal" in Spotlight)
+- **Raspberry Pi (direct):** Plug in a keyboard and monitor, open Terminal from the taskbar
+- **Raspberry Pi (remote):** From another computer, run `ssh admin@taskmaster.local` (replace `taskmaster` with your hostname if changed)
+
+### Essential commands
+
+| Command | What it does |
+|---------|-------------|
+| `taskmaster update` | Update to the latest version and restart the service |
+| `taskmaster daemon restart` | Restart the gateway service (picks up code and config changes) |
+| `taskmaster daemon status` | Check if the gateway service is running |
+| `taskmaster doctor` | Run health checks and fix common issues automatically |
+| `taskmaster status` | Show connection status for all channels (WhatsApp, Claude, etc.) |
+| `taskmaster dashboard` | Open the Control Panel in your browser |
+
+### Configuration commands
+
+| Command | What it does |
+|---------|-------------|
+| `taskmaster config set <key> <value>` | Change a config setting (e.g., `taskmaster config set gateway.port 19000`) |
+| `taskmaster config get <key>` | Read a config setting |
+| `taskmaster config` | Open the interactive config wizard |
+
+### When to use the CLI instead of the Control Panel
+
+- **Can't reach the Control Panel** — If the web UI is down, SSH into the device and use CLI commands to restart or update
+- **Updating from a specific version** — `taskmaster update` works even when the Control Panel can't load
+- **Changing network settings** — Port and hostname changes require the terminal (see "Changing Network Settings" above)
+- **Diagnosing problems** — `taskmaster doctor` runs automated health checks that can detect and fix issues the UI can't show
+- **Scripting and automation** — CLI commands can be combined in scripts for advanced setups
+
+### Getting help for any command
+
+Add `--help` to any command to see its options:
+
+```bash
+taskmaster update --help
+taskmaster daemon --help
+taskmaster config set --help
+```
+
+Or run `taskmaster help` to see all available commands.
+
+---
+
 ## Uninstalling Taskmaster
 
 ### From the Control Panel