@rubytech/taskmaster 1.12.2 → 1.13.0

package/dist/agents/workspace-migrations.js

@@ -116,9 +116,56 @@ async function patchOwnerLearning(agentsPath, content) {
         return null;
     return insertSection(content, OWNER_LEARNING_SECTION, findCapabilitiesInsertPoint);
 }
+// ---------------------------------------------------------------------------
+// Migration: Public Agent Security (cross-user isolation)
+// ---------------------------------------------------------------------------
+const PUBLIC_SECURITY_SECTION = `## Security
+
+**User isolation is absolute.** Each user conversation is a sealed scope. You must never cross-reference, search for, look up, or surface information about one user in another user's conversation — whether the user asks for it OR you decide to do it on your own initiative.
+
+**Never:**
+- Search memory for another user's personal details (name, phone, address, history)
+- Attempt to identify, verify, or correlate users across conversations
+- Relay, summarise, or reference information from one user's session in another
+- Proactively look up contact details for people mentioned in system messages
+
+If a user asks for information about another person, politely decline — it would violate strict security protocols.`;
+function hasSecurityIsolationSection(content) {
+    return content.includes("User isolation is absolute");
+}
+/**
+ * Find insertion point after the "## Every Session" block's trailing `---`.
+ * Falls back to inserting before the first `## ` heading after the title.
+ */
+function findPostEverySessionInsertPoint(content) {
+    const everySessionIdx = content.indexOf("## Every Session");
+    if (everySessionIdx !== -1) {
+        const separatorIdx = content.indexOf("---", everySessionIdx);
+        if (separatorIdx !== -1) {
+            const afterSeparator = separatorIdx + 3;
+            // Skip any whitespace after the separator
+            const rest = content.slice(afterSeparator);
+            const trimmedStart = rest.length - rest.trimStart().length;
+            return afterSeparator + trimmedStart;
+        }
+    }
+    // Fallback: insert before the first ## heading after the title line
+    const firstHeading = content.indexOf("\n## ", content.indexOf("\n") + 1);
+    if (firstHeading !== -1)
+        return firstHeading + 1; // after the newline
+    return -1;
+}
+async function patchPublicSecurity(agentsPath, content) {
+    if (!isPublicAgent(content))
+        return null;
+    if (hasSecurityIsolationSection(content))
+        return null;
+    return insertSection(content, PUBLIC_SECURITY_SECTION, findPostEverySessionInsertPoint);
+}
 const MIGRATIONS = [
     { name: "skill-recommendations", apply: patchSkillRecommendations },
     { name: "owner-learning", apply: patchOwnerLearning },
+    { name: "public-security", apply: patchPublicSecurity },
 ];
 /**
  * Run all workspace migrations for every configured agent.

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.12.2",
-  "commit": "fbdb63476b89e240f906d24767712cbd3c60d8d0",
-  "builtAt": "2026-03-02T19:00:42.657Z"
+  "version": "1.13.0",
+  "commit": "8afa9946296eb30c5f89942432f3964c6ddd48a4",
+  "builtAt": "2026-03-03T13:10:41.309Z"
 }

package/dist/commands/agents.commands.add.js

@@ -1,8 +1,5 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import { resolveAgentDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, } from "../agents/agent-scope.js";
+import { resolveAgentDir, resolveAgentWorkspaceDir } from "../agents/agent-scope.js";
 import { ensureAuthProfileStore } from "../agents/auth-profiles.js";
-import { resolveAuthStorePath } from "../agents/auth-profiles/paths.js";
 import { writeConfigFile } from "../config/config.js";
 import { logConfigUpdated } from "../config/logging.js";
 import { DEFAULT_AGENT_ID, normalizeAgentId } from "../routing/session-key.js";
@@ -17,15 +14,6 @@ import { applyAuthChoice, warnIfModelConfigLooksOff } from "./auth-choice.js";
 import { promptAuthChoiceGrouped } from "./auth-choice-prompt.js";
 import { setupChannels } from "./onboard-channels.js";
 import { ensureWorkspaceAndSessions } from "./onboard-helpers.js";
-async function fileExists(pathname) {
-    try {
-        await fs.stat(pathname);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
 export async function agentsAddCommand(opts, runtime = defaultRuntime, params) {
     const cfg = await requireValidConfig(runtime);
     if (!cfg)
@@ -173,25 +161,6 @@ export async function agentsAddCommand(opts, runtime = defaultRuntime, params) {
             workspace: workspaceDir,
             agentDir,
         });
-        const defaultAgentId = resolveDefaultAgentId(cfg);
-        if (defaultAgentId !== agentId) {
-            const sourceAuthPath = resolveAuthStorePath(resolveAgentDir(cfg, defaultAgentId));
-            const destAuthPath = resolveAuthStorePath(agentDir);
-            const sameAuthPath = path.resolve(sourceAuthPath).toLowerCase() === path.resolve(destAuthPath).toLowerCase();
-            if (!sameAuthPath &&
-                (await fileExists(sourceAuthPath)) &&
-                !(await fileExists(destAuthPath))) {
-                const shouldCopy = await prompter.confirm({
-                    message: `Copy auth profiles from "${defaultAgentId}"?`,
-                    initialValue: false,
-                });
-                if (shouldCopy) {
-                    await fs.mkdir(path.dirname(destAuthPath), { recursive: true });
-                    await fs.copyFile(sourceAuthPath, destAuthPath);
-                    await prompter.note(`Copied auth profiles from "${defaultAgentId}".`, "Auth profiles");
-                }
-            }
-        }
         const wantsAuth = await prompter.confirm({
             message: "Configure model/auth for this agent now?",
             initialValue: false,

package/dist/config/defaults.js

@@ -331,8 +331,8 @@ export function applyContextPruningDefaults(cfg) {
  * silently skipped at runtime, so listing them here is always safe.
  */
 const DEFAULT_MODEL_FALLBACKS = [
-    "google/gemini-3-pro-preview",
     "openai/gpt-5.2",
+    "google/gemini-3-pro-preview",
 ];
 export function applyModelFallbackDefaults(cfg) {
     const model = cfg.agents?.defaults?.model;

package/dist/config/legacy.migrations.part-3.js

@@ -246,7 +246,7 @@ export const LEGACY_CONFIG_MIGRATIONS_PART_3 = [
     },
     {
         id: "agents.defaults.model.fallbacks-defaults",
-        describe: "Set default model fallback chain (Google Gemini Pro, OpenAI GPT-5.2)",
+        describe: "Set default model fallback chain (OpenAI GPT-5.2, Google Gemini Pro)",
         apply: (raw, changes) => {
             const agents = getRecord(raw.agents);
             const defaults = getRecord(agents?.defaults);
@@ -257,14 +257,35 @@ export const LEGACY_CONFIG_MIGRATIONS_PART_3 = [
                 // Already has non-empty fallbacks — respect the user's choice.
                 if (Array.isArray(model.fallbacks) && model.fallbacks.length > 0)
                     return;
-                model.fallbacks = ["google/gemini-3-pro-preview", "openai/gpt-5.2"];
+                model.fallbacks = ["openai/gpt-5.2", "google/gemini-3-pro-preview"];
             }
             else {
                 defaults.model = {
-                    fallbacks: ["google/gemini-3-pro-preview", "openai/gpt-5.2"],
+                    fallbacks: ["openai/gpt-5.2", "google/gemini-3-pro-preview"],
                 };
             }
-            changes.push("Set default model fallbacks: google/gemini-3-pro-preview, openai/gpt-5.2.");
+            changes.push("Set default model fallbacks: openai/gpt-5.2, google/gemini-3-pro-preview.");
+        },
+    },
+    {
+        id: "agents.defaults.model.fallbacks-reorder-openai-first",
+        describe: "Reorder default model fallbacks: OpenAI before Google",
+        apply: (raw, changes) => {
+            const agents = getRecord(raw.agents);
+            const defaults = getRecord(agents?.defaults);
+            if (!defaults)
+                return;
+            const model = getRecord(defaults.model);
+            if (!model || !Array.isArray(model.fallbacks))
+                return;
+            const fb = model.fallbacks;
+            // Only swap if it matches the old default order exactly.
+            if (fb.length === 2 &&
+                fb[0] === "google/gemini-3-pro-preview" &&
+                fb[1] === "openai/gpt-5.2") {
+                model.fallbacks = ["openai/gpt-5.2", "google/gemini-3-pro-preview"];
+                changes.push("Reordered model fallbacks: openai/gpt-5.2 before google/gemini-3-pro-preview.");
+            }
         },
     },
     {

package/dist/config/sessions/transcript.js

@@ -111,3 +111,34 @@ export async function appendAssistantMessageToSessionTranscript(params) {
     emitSessionTranscriptUpdate(sessionFile);
     return { ok: true, sessionFile };
 }
+export async function appendUserMessageToSessionTranscript(params) {
+    const sessionKey = params.sessionKey.trim();
+    if (!sessionKey)
+        return { ok: false, reason: "missing sessionKey" };
+    const text = params.text.trim();
+    if (!text)
+        return { ok: false, reason: "empty text" };
+    const storePath = params.storePath ?? resolveDefaultSessionStorePath(params.agentId);
+    const store = loadSessionStore(storePath, { skipCache: true });
+    const entry = store[sessionKey];
+    if (!entry?.sessionId)
+        return { ok: false, reason: `unknown sessionKey: ${sessionKey}` };
+    const sessionFile = entry.sessionFile?.trim() || resolveSessionTranscriptPath(entry.sessionId, params.agentId);
+    await ensureSessionHeader({ sessionFile, sessionId: entry.sessionId });
+    const sessionManager = SessionManager.open(sessionFile);
+    sessionManager.appendMessage({
+        role: "user",
+        content: [{ type: "text", text }],
+        timestamp: Date.now(),
+    });
+    if (!entry.sessionFile || entry.sessionFile !== sessionFile) {
+        await updateSessionStore(storePath, (current) => {
+            current[sessionKey] = {
+                ...entry,
+                sessionFile,
+            };
+        });
+    }
+    emitSessionTranscriptUpdate(sessionFile);
+    return { ok: true, sessionFile };
+}

package/dist/config/types.business.js

@@ -0,0 +1 @@
+export {};

package/dist/config/zod-schema.js

@@ -24,6 +24,14 @@ const NodeHostSchema = z
 })
     .strict()
     .optional();
+const DayScheduleSchema = z
+    .object({
+    start: z.string().regex(/^\d{2}:\d{2}$/),
+    end: z.string().regex(/^\d{2}:\d{2}$/),
+})
+    .strict()
+    .nullable()
+    .optional();
 export const TaskmasterSchema = z
     .object({
     meta: z
@@ -233,6 +241,31 @@ export const TaskmasterSchema = z
     })
         .strict()
         .optional(),
+    business: z
+        .object({
+        openingHours: z
+            .object({
+            enabled: z.boolean(),
+            timezone: z.string().min(1).optional(),
+            schedule: z
+                .object({
+                monday: DayScheduleSchema,
+                tuesday: DayScheduleSchema,
+                wednesday: DayScheduleSchema,
+                thursday: DayScheduleSchema,
+                friday: DayScheduleSchema,
+                saturday: DayScheduleSchema,
+                sunday: DayScheduleSchema,
+            })
+                .strict(),
+            closedDates: z.array(z.string().regex(/^\d{4}-\d{2}-\d{2}$/)).optional(),
+        })
+            .strict()
+            .optional(),
+        publicAgentEnabled: z.boolean().optional(),
+    })
+        .strict()
+        .optional(),
     hooks: z
         .object({
         enabled: z.boolean().optional(),