@rubytech/taskmaster 1.21.2 → 1.22.0

package/dist/agents/skills/agent-scope.js

@@ -1,14 +1,13 @@
 import { PRELOADED_SKILL_AGENTS } from "./types.js";
 const DEFAULT_AGENTS = ["admin", "public"];
 /**
- * Resolve which agents can access a skill.
- * Preloaded skills use the hardcoded map (not overridable).
- * User/licensed skills use config, defaulting to all agents.
+ * Resolve which agents can access a given skill.
+ * - Preloaded skills use the hardcoded map (not overridable by users).
+ * - User/licensed skills use `config.skills.entries[name].agents`, defaulting to both agents.
  */
 export function resolveSkillAgents(skillName, isPreloaded, config) {
-    if (isPreloaded) {
+    if (isPreloaded)
         return PRELOADED_SKILL_AGENTS[skillName] ?? DEFAULT_AGENTS;
-    }
     const entry = config?.skills?.entries?.[skillName];
     return entry?.agents ?? DEFAULT_AGENTS;
 }

package/dist/agents/skills/types.js

@@ -1 +1,25 @@
-export {};
+/**
+ * Hardcoded agent access for preloaded (bundled) skills.
+ * Users cannot override these — they are enforced at prompt build time.
+ */
+export const PRELOADED_SKILL_AGENTS = {
+    "system-admin": ["admin"],
+    "log-review": ["admin"],
+    "strategic-proactivity": ["admin"],
+    "skill-builder": ["admin"],
+    anthropic: ["admin"],
+    openai: ["admin"],
+    "google-ai": ["admin"],
+    tavily: ["admin"],
+    twilio: ["admin"],
+    brevo: ["admin"],
+    stripe: ["admin"],
+    taskmaster: ["admin", "public"],
+    "business-assistant": ["admin", "public"],
+    "event-management": ["admin", "public"],
+    weather: ["admin", "public"],
+    "image-gen": ["admin", "public"],
+    "qr-code": ["admin", "public"],
+    "sales-closer": ["admin", "public"],
+    "zero-to-prototype": ["admin", "public"],
+};

package/dist/agents/skills/workspace.js

@@ -9,6 +9,7 @@ import { parseFrontmatter, resolveTaskmasterMetadata, resolveSkillInvocationPoli
 import { resolvePluginSkillDirs } from "./plugin-skills.js";
 import { hasMarker } from "../../license/skill-pack.js";
 import { serializeByKey } from "./serialize.js";
+import { resolveSkillAgents } from "./agent-scope.js";
 const fsp = fs.promises;
 const skillsLogger = createSubsystemLogger("skills");
 function escapeXml(str) {
@@ -94,7 +95,21 @@ function debugSkillCommandOnce(messageKey, message, meta) {
     skillCommandDebugOnce.add(messageKey);
     skillsLogger.debug(message, meta);
 }
-function filterSkillEntries(entries, config, skillFilter, eligibility) {
+function resolveBundledSkillNamesSet() {
+    const dir = resolveBundledSkillsDir();
+    if (!dir)
+        return new Set();
+    try {
+        return new Set(fs
+            .readdirSync(dir, { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            .map((d) => d.name));
+    }
+    catch {
+        return new Set();
+    }
+}
+function filterSkillEntries(entries, config, skillFilter, eligibility, agentId) {
     let filtered = entries.filter((entry) => shouldIncludeSkill({ entry, config, eligibility }));
     // If skillFilter is provided, only include skills in the filter list.
     if (skillFilter !== undefined) {
@@ -107,6 +122,15 @@ function filterSkillEntries(entries, config, skillFilter, eligibility) {
                 : [];
         console.log(`[skills] After filter: ${filtered.map((entry) => entry.skill.name).join(", ")}`);
     }
+    // Agent-level filtering: exclude skills not accessible to this agent.
+    if (agentId) {
+        const bundledNames = resolveBundledSkillNamesSet();
+        filtered = filtered.filter((entry) => {
+            const isPreloaded = bundledNames.has(entry.skill.name);
+            const allowedAgents = resolveSkillAgents(entry.skill.name, isPreloaded, config);
+            return allowedAgents.includes(agentId);
+        });
+    }
     return filtered;
 }
 const SKILL_COMMAND_MAX_LENGTH = 32;
@@ -214,7 +238,7 @@ function loadSkillEntries(workspaceDir, opts) {
 }
 export function buildWorkspaceSkillSnapshot(workspaceDir, opts) {
     const skillEntries = opts?.entries ?? loadSkillEntries(workspaceDir, opts);
-    const eligible = filterSkillEntries(skillEntries, opts?.config, opts?.skillFilter, opts?.eligibility);
+    const eligible = filterSkillEntries(skillEntries, opts?.config, opts?.skillFilter, opts?.eligibility, opts?.agentId);
     const promptEntries = eligible.filter((entry) => entry.invocation?.disableModelInvocation !== true);
     const resolvedSkills = promptEntries.map((entry) => entry.skill);
     const remoteNote = opts?.eligibility?.remote?.note?.trim();
@@ -233,7 +257,7 @@ export function buildWorkspaceSkillSnapshot(workspaceDir, opts) {
 }
 export function buildWorkspaceSkillsPrompt(workspaceDir, opts) {
     const skillEntries = opts?.entries ?? loadSkillEntries(workspaceDir, opts);
-    const eligible = filterSkillEntries(skillEntries, opts?.config, opts?.skillFilter, opts?.eligibility);
+    const eligible = filterSkillEntries(skillEntries, opts?.config, opts?.skillFilter, opts?.eligibility, opts?.agentId);
     const promptEntries = eligible.filter((entry) => entry.invocation?.disableModelInvocation !== true);
     const remoteNote = opts?.eligibility?.remote?.note?.trim();
     return [remoteNote, formatSkillsForPromptTaskmaster(promptEntries)].filter(Boolean).join("\n");
@@ -354,8 +378,8 @@ export async function syncBundledSkillsToWorkspace(workspaceDir, opts) {
     }
     return { synced };
 }
-export function filterWorkspaceSkillEntries(entries, config) {
-    return filterSkillEntries(entries, config);
+export function filterWorkspaceSkillEntries(entries, config, agentId) {
+    return filterSkillEntries(entries, config, undefined, undefined, agentId);
 }
 export function buildWorkspaceSkillCommandSpecs(workspaceDir, opts) {
     const skillEntries = opts?.entries ?? loadSkillEntries(workspaceDir, opts);

package/dist/agents/skills-status.js

@@ -3,6 +3,7 @@ import path from "node:path";
 import { CONFIG_DIR } from "../utils.js";
 import { hasMarker } from "../license/skill-pack.js";
 import { hasBinary, isBundledSkillAllowed, isConfigPathTruthy, loadWorkspaceSkillEntries, resolveBundledAllowlist, resolveBundledSkillsDir, resolveConfigPath, resolveSkillConfig, resolveSkillsInstallPreferences, } from "./skills.js";
+import { resolveSkillAgents } from "./skills/agent-scope.js";
 function resolveSkillKey(entry) {
     return entry.taskmaster?.skillKey ?? entry.skill.name;
 }
@@ -149,6 +150,8 @@ function buildSkillStatus(entry, config, prefs, eligibility, bundledSkillNames)
                 missing.config.length === 0 &&
                 missing.os.length === 0));
     const preloaded = bundledSkillNames ? bundledSkillNames.has(entry.skill.name) : false;
+    const agents = [...resolveSkillAgents(entry.skill.name, preloaded, config)];
+    const agentsLocked = preloaded;
     const isMarketplace = hasMarker(entry.skill.baseDir);
     let marketplaceVersion;
     if (isMarketplace) {
@@ -177,6 +180,8 @@ function buildSkillStatus(entry, config, prefs, eligibility, bundledSkillNames)
         blockedByAllowlist,
         eligible,
         preloaded,
+        agents,
+        agentsLocked,
         marketplace: isMarketplace,
         marketplaceVersion,
         requirements: {

package/dist/auto-reply/reply/get-reply-run.js

@@ -115,6 +115,7 @@ export async function runPreparedReply(params) {
         workspaceDir,
         cfg,
         skillFilter: opts?.skillFilter,
+        agentId: _agentId,
     });
     sessionEntry = skillResult.sessionEntry ?? sessionEntry;
     currentSystemSent = skillResult.systemSent;

package/dist/auto-reply/reply/session-updates.js

@@ -116,7 +116,7 @@ export async function prependSystemEvents(params) {
     return `${block}\n\n${params.prefixedBodyBase}`;
 }
 export async function ensureSkillSnapshot(params) {
-    const { sessionEntry, sessionStore, sessionKey, storePath, sessionId, isFirstTurnInSession, workspaceDir, cfg, skillFilter, } = params;
+    const { sessionEntry, sessionStore, sessionKey, storePath, sessionId, isFirstTurnInSession, workspaceDir, cfg, skillFilter, agentId, } = params;
     let nextEntry = sessionEntry;
     let systemSent = sessionEntry?.systemSent ?? false;
     const remoteEligibility = getRemoteSkillEligibility();
@@ -135,6 +135,7 @@ export async function ensureSkillSnapshot(params) {
                 skillFilter,
                 eligibility: { remote: remoteEligibility },
                 snapshotVersion,
+                agentId,
             })
             : current.skillsSnapshot;
         nextEntry = {

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.21.2",
-  "commit": "ffd98ac2beb01992a243d3dee11c1a5c8dac870c",
-  "builtAt": "2026-03-06T21:01:06.591Z"
+  "version": "1.22.0",
+  "commit": "9d1f55fc9452c09c88a79e294df7c30387fdbd3f",
+  "builtAt": "2026-03-07T05:55:37.155Z"
 }