@rubytech/taskmaster 1.0.75 → 1.0.77

package/dist/gateway/server-http.js

@@ -6,6 +6,7 @@ import { handleSlackHttpRequest } from "../slack/http/index.js";
 import { createCloudApiWebhookHandler } from "../web/providers/cloud/webhook-http.js";
 import { resolveAgentAvatar } from "../agents/identity-avatar.js";
 import { handleBrandIconRequest, handleControlUiAvatarRequest, handleControlUiHttpRequest, handlePublicChatHttpRequest, handlePublicWidgetRequest, } from "./control-ui.js";
+import { handlePublicChatApiRequest } from "./public-chat-api.js";
 import { isLicensed } from "../license/state.js";
 import { getEffectiveTrustedProxies, isExternalRequest } from "./net.js";
 import { extractHookToken, getHookChannelError, normalizeAgentPayload, normalizeHookHeaders, normalizeWakePayload, readJsonBody, resolveHookChannel, resolveHookDeliver, } from "./hooks.js";
@@ -154,6 +155,8 @@ export function createGatewayHttpServer(opts) {
             const configSnapshot = loadConfig();
             // Public chat routes — served before license enforcement so public visitors
             // are never redirected to /setup.
+            if (await handlePublicChatApiRequest(req, res))
+                return;
             if (handlePublicChatHttpRequest(req, res, { config: configSnapshot }))
                 return;
             if (handlePublicWidgetRequest(req, res, { config: configSnapshot }))

package/dist/gateway/server-methods/web.js

@@ -65,7 +65,7 @@ async function ensurePairedAdminBinding(selfPhone, accountId) {
             return;
         }
         // Check if a paired binding already exists for this admin + account
-        const hasPaired = bindings.some((b) => {
+        const existingPairedIdx = bindings.findIndex((b) => {
             if (b.agentId !== adminAgentId)
                 return false;
             if (b.match.channel !== "whatsapp")
@@ -75,8 +75,20 @@ async function ensurePairedAdminBinding(selfPhone, accountId) {
                 return false;
             return b.match.peer?.kind === "dm" && b.meta?.paired === true;
         });
-        if (hasPaired) {
-            console.log(`[web] ensurePairedAdminBinding: paired binding already exists for ${adminAgentId} on account=${effectiveAccount}`);
+        if (existingPairedIdx !== -1) {
+            const existing = bindings[existingPairedIdx];
+            if (existing.match.peer?.id === selfPhone) {
+                console.log(`[web] ensurePairedAdminBinding: paired binding already exists for ${adminAgentId} on account=${effectiveAccount}`);
+                return;
+            }
+            // Phone number changed — update the existing binding
+            const updatedBindings = [...bindings];
+            updatedBindings[existingPairedIdx] = {
+                ...existing,
+                match: { ...existing.match, peer: { kind: "dm", id: selfPhone } },
+            };
+            await writeConfigFile({ ...cfg, bindings: updatedBindings });
+            console.log(`[web] ensurePairedAdminBinding: updated paired binding phone for ${adminAgentId}: ${existing.match.peer?.id} → ${selfPhone} (account=${effectiveAccount})`);
             return;
         }
         // Create the paired admin binding

package/dist/memory/embeddings.js

@@ -13,7 +13,7 @@ import { importNodeLlamaCpp } from "./node-llama.js";
  * runaway memory consumption (40-76 GB) on Intel x64 Mac + AMD GPU.
  */
 const DEFAULT_LOCAL_MODEL = {
-    model: "hf:ggml-org/embeddinggemma-300M-Q8_0-GGUF/embeddinggemma-300M-Q8_0.gguf",
+    model: "hf:ggml-org/embeddinggemma-300M-GGUF/embeddinggemma-300M-Q8_0.gguf",
     label: "embeddinggemma-300M",
 };
 function selectDefaultLocalModel() {

package/dist/plugins/bundled-dir.js

@@ -2,15 +2,20 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 export function resolveBundledPluginsDir() {
+    return resolveBundledPluginsDirDetailed().dir;
+}
+export function resolveBundledPluginsDirDetailed() {
+    const triedPaths = [];
     const override = process.env.TASKMASTER_BUNDLED_PLUGINS_DIR?.trim();
     if (override)
-        return override;
+        return { dir: override, source: "env" };
     // bun --compile: ship a sibling `extensions/` next to the executable.
     try {
         const execDir = path.dirname(process.execPath);
         const sibling = path.join(execDir, "extensions");
+        triedPaths.push(sibling);
         if (fs.existsSync(sibling))
-            return sibling;
+            return { dir: sibling, source: "exec-sibling" };
     }
     catch {
         // ignore
@@ -20,8 +25,9 @@ export function resolveBundledPluginsDir() {
         let cursor = path.dirname(fileURLToPath(import.meta.url));
         for (let i = 0; i < 6; i += 1) {
             const candidate = path.join(cursor, "extensions");
+            triedPaths.push(candidate);
             if (fs.existsSync(candidate))
-                return candidate;
+                return { dir: candidate, source: "walk-up" };
             const parent = path.dirname(cursor);
             if (parent === cursor)
                 break;
@@ -31,5 +37,5 @@ export function resolveBundledPluginsDir() {
     catch {
         // ignore
     }
-    return undefined;
+    return { dir: undefined, triedPaths };
 }

package/dist/plugins/discovery.js

@@ -1,7 +1,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { resolveConfigDir, resolveUserPath } from "../utils.js";
-import { resolveBundledPluginsDir } from "./bundled-dir.js";
+import { resolveBundledPluginsDirDetailed } from "./bundled-dir.js";
 const EXTENSION_EXTS = new Set([".ts", ".js", ".mts", ".cts", ".mjs", ".cjs"]);
 function isExtensionFile(filePath) {
     const ext = path.extname(filePath);
@@ -262,15 +262,22 @@ export function discoverTaskmasterPlugins(params) {
         diagnostics,
         seen,
     });
-    const bundledDir = resolveBundledPluginsDir();
-    if (bundledDir) {
+    const bundled = resolveBundledPluginsDirDetailed();
+    if (bundled.dir) {
         discoverInDirectory({
-            dir: bundledDir,
+            dir: bundled.dir,
             origin: "bundled",
             candidates,
             diagnostics,
             seen,
         });
     }
+    else {
+        diagnostics.push({
+            level: "warn",
+            message: `bundled extensions dir not resolved${bundled.triedPaths?.length ? ` (tried: ${bundled.triedPaths.join(", ")})` : ""}`,
+            source: "bundled-dir",
+        });
+    }
     return { candidates, diagnostics };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/taskmaster",
-  "version": "1.0.75",
+  "version": "1.0.77",
   "description": "AI-powered business assistant for small businesses",
   "publishConfig": {
     "access": "public"

package/skills/google-ai/references/browser-setup.md

@@ -55,24 +55,17 @@ Take a snapshot and check the page content.
 
 **Send the key as a separate message** — just the key on its own line, nothing else. This lets the user tap and copy it easily from their chat app.
 
-## Step 6: Add to Taskmaster
+## Step 6: Store the key
 
-Tell the user how to add the key:
+Use the `api_keys` tool to store the key directly:
 
-> "Open your browser and go to your Taskmaster setup page.
->
-> 1. Click **'Manage'** in the API Keys section
-> 2. Find the **Google** row (says 'Voice & Video')
-> 3. Paste your key into the field
-> 4. Click **Save**
->
-> Let me know when it's done and I'll test it!"
+```
+api_keys({ action: "set", provider: "google", apiKey: "<the key>" })
+```
 
-## Step 7: Confirm
+The key is applied immediately — no restart needed. Confirm to the user:
 
-Once the user confirms the key is saved:
-
-> "Google AI is now enabled. You can send me voice notes and videos — I'll understand them both."
+> "Done — I've saved the Google AI key. You can send me voice notes and videos now and I'll understand them both."
 
 ---
 

package/skills/tavily/references/browser-setup.md

@@ -46,24 +46,17 @@ Take a snapshot of the dashboard.
 - Copy the key value
 - **Send the key as a separate message** — just the key on its own line, nothing else. This lets the user tap and copy it easily from their chat app.
 
-## Step 6: Add to Taskmaster
+## Step 6: Store the key
 
-Tell the user how to add the key:
+Use the `api_keys` tool to store the key directly:
 
-> "Open your browser and go to your Taskmaster setup page.
->
-> 1. Click **'Manage'** in the API Keys section
-> 2. Find the **Tavily** row (says 'Web Search')
-> 3. Paste your key into the field
-> 4. Click **Save**
->
-> Let me know when it's done and I'll test it!"
+```
+api_keys({ action: "set", provider: "tavily", apiKey: "<the key>" })
+```
 
-## Step 7: Confirm
+The key is applied immediately — no restart needed. Confirm to the user:
 
-Once the user confirms the key is saved:
-
-> "Web search is now enabled. Try asking me to look something up — 'What's the price of 15mm copper pipe?' or 'Search for the best coffee machines.'"
+> "Done — I've saved the Tavily key. Web search is now enabled. Try asking me to look something up — 'What's the price of 15mm copper pipe?' or 'Search for the best coffee machines.'"
 
 ---
 

package/taskmaster-docs/USER-GUIDE.md

@@ -158,7 +158,7 @@ This check runs automatically — the badge updates on its own without needing t
 
 Your dashboard is protected by two layers of security:
 
-1. **Your network is the main barrier.** Taskmaster only runs on your local network (your home or office WiFi). Nobody outside your network can reach it at all — it is not accessible from the internet.
+1. **Your network is the main barrier.** The control panel only runs on your local network (your home or office WiFi). Nobody outside your network can reach it. If you enable Internet Access (see below), only the public chat is exposed — the control panel stays LAN-only.
 2. **PINs prevent casual access within your network.** The PIN stops other people on the same WiFi — family, employees, guests — from opening accounts that aren't theirs.
 
 If you enter the wrong PIN 5 times in a row, you'll be locked out for 5 minutes before you can try again.
@@ -1199,6 +1199,38 @@ No restart is needed — the change takes effect immediately.
 
 ---
 
+## Internet Access
+
+By default, Taskmaster is only reachable on your local network. If you want people outside your home or office to use the public chat widget — for example, embedding it on your website — you need to enable Internet Access.
+
+This uses **Tailscale Funnel**, a free service that gives your device a public HTTPS address. Only the public chat is exposed; the control panel stays local-network-only.
+
+### Enabling Internet Access
+
+1. Go to the **Setup** page (you must be logged in as admin)
+2. Find the **Internet Access** row in the status dashboard
+3. Click **Connect** — a QR code appears
+4. Scan the QR code with your phone and sign in with your Google or Microsoft account (this creates a free Tailscale account)
+5. Wait a few seconds — the status changes to "Connected (LAN only)"
+6. Click **Enable** — if this is your first time, you'll see a message asking you to enable Funnel on your Tailscale account. Click the link, toggle Funnel on, then come back and click Enable again
+7. Your public URL appears (e.g. `https://taskmaster.tail0e0afb.ts.net`)
+
+### What gets exposed
+
+- `/public/*` paths only — the public chat widget and API
+- The control panel, setup page, and all admin functions stay LAN-only
+- No one can access your settings, files, or WhatsApp from the internet
+
+### Disabling
+
+Click **Disable** on the Internet Access row. The public URL stops working immediately. Your device stays connected to Tailscale but nothing is exposed.
+
+### Copy your public URL
+
+When Internet Access is active, click the copy icon next to the URL to copy it to your clipboard. You can share this URL or embed it on your website.
+
+---
+
 ## Chat Commands
 
 You can control your assistant's behaviour by typing slash commands in any conversation. These are intercepted by the system — the assistant never sees them.