@rubytech/taskmaster 1.29.2 → 1.30.1

package/dist/agents/model-fallback.js

@@ -150,6 +150,15 @@ export async function runWithModelFallback(params) {
         const candidate = candidates[i];
         try {
             const result = await params.run(candidate.provider, candidate.model);
+            // A fallback actually recovered — notify the UI with a clean message.
+            if (attempts.length > 0) {
+                const primary = attempts[0];
+                emitInfraAlertEvent({
+                    category: "model-fallback",
+                    message: `Primary model unavailable — using ${candidate.provider}/${candidate.model} instead.`,
+                });
+                log.info(`[model-fallback] recovered: ${primary.provider}/${primary.model} failed, using ${candidate.provider}/${candidate.model}`);
+            }
             return {
                 result,
                 provider: candidate.provider,
@@ -182,15 +191,6 @@ export async function runWithModelFallback(params) {
                     : " — no more fallback candidates");
             log.warn(fallbackMsg);
             console.warn(fallbackMsg);
-            if (i === 0) {
-                emitInfraAlertEvent({
-                    category: "model-fallback",
-                    message: `${candidate.provider}/${candidate.model} failed (${described.reason ?? "unknown"}): ${described.message}` +
-                        (i + 1 < candidates.length
-                            ? `. Falling back to ${candidates[i + 1].provider}/${candidates[i + 1].model}.`
-                            : ". No fallback available."),
-                });
-            }
             await params.onError?.({
                 provider: candidate.provider,
                 model: candidate.model,

package/dist/agents/subagent-announce.js

@@ -77,6 +77,10 @@ function resolveAnnounceOrigin(entry, requesterOrigin) {
 async function sendAnnounce(item) {
     const origin = item.origin;
     const threadId = origin?.threadId != null && origin.threadId !== "" ? String(origin.threadId) : undefined;
+    // Only attempt external delivery when we have a concrete recipient.
+    // Channels like WhatsApp reject delivery without a target (E.164 / group JID).
+    // Omitting `deliver` still stores the message in the session transcript.
+    const canDeliver = Boolean(origin?.to);
     await callGateway({
         method: "agent",
         params: {
@@ -86,7 +90,7 @@ async function sendAnnounce(item) {
             accountId: origin?.accountId,
             to: origin?.to,
             threadId,
-            deliver: true,
+            deliver: canDeliver,
             idempotencyKey: crypto.randomUUID(),
         },
         expectFinal: true,
@@ -337,12 +341,16 @@ export async function runSubagentAnnounceFlow(params) {
             const { entry } = loadRequesterSessionEntry(params.requesterSessionKey);
             directOrigin = deliveryContextFromSession(entry);
         }
+        // Only attempt external delivery when we have a concrete recipient.
+        // Cron-spawned subagents inherit the account's channel (e.g. whatsapp)
+        // but have no `to` — delivery would fail with "requires target".
+        const canDeliver = Boolean(directOrigin?.to);
         await callGateway({
             method: "agent",
             params: {
                 sessionKey: params.requesterSessionKey,
                 message: triggerMessage,
-                deliver: true,
+                deliver: canDeliver,
                 channel: directOrigin?.channel,
                 accountId: directOrigin?.accountId,
                 to: directOrigin?.to,

package/dist/agents/tools/cron-tool.js

@@ -138,7 +138,12 @@ EVENT SCHEMA (for add action):
 
 SCHEDULE TYPES (schedule.kind):
 - "at": One-shot at absolute time
-  { "kind": "at", "atMs": <unix-ms-timestamp> }
+  { "kind": "at", "atMs": "<ISO-datetime-string>" }
+  PREFERRED: pass atMs as an ISO 8601 string, e.g. "2026-03-11T09:00:00".
+  The system interprets timezone-naive strings in the user's configured timezone.
+  You may also pass a numeric unix-ms timestamp, but ISO strings are less error-prone.
+  IMPORTANT: atMs must be in the future. Jobs with past atMs are rejected.
+  Always call current_time first to confirm the current date and year before scheduling.
 - "every": Recurring interval
   { "kind": "every", "everyMs": <interval-ms>, "anchorMs": <optional-start-ms> }
 - "cron": Cron expression
@@ -184,9 +189,11 @@ Use jobId as the canonical identifier; id is accepted for compatibility. Use con
                     if (!params.job || typeof params.job !== "object") {
                         throw new Error("job required");
                     }
-                    const job = normalizeCronJobCreate(params.job) ?? params.job;
+                    const cfg = loadConfig();
+                    const userTimezone = cfg.agents?.defaults?.userTimezone;
+                    const job = normalizeCronJobCreate(params.job, { userTimezone: userTimezone || undefined }) ??
+                        params.job;
                     if (job && typeof job === "object" && !("agentId" in job)) {
-                        const cfg = loadConfig();
                         const agentId = opts?.agentSessionKey
                             ? resolveSessionAgentId({ sessionKey: opts.agentSessionKey, config: cfg })
                             : undefined;

package/dist/agents/tools/skill-read-tool.js

@@ -37,7 +37,24 @@ export function createSkillReadTool(opts) {
                 targetPath = path.resolve(skillDir, rawPath);
             }
             else {
-                throw new Error("Relative path requires skill_dir. Provide an absolute path or include skill_dir.");
+                // Fallback: search allowedDirs for the relative path.
+                // Sub-agents may omit skill_dir; resolve against known skill dirs.
+                let found;
+                for (const dir of allowedDirs) {
+                    const candidate = path.resolve(dir, rawPath);
+                    try {
+                        await fs.access(candidate);
+                        found = candidate;
+                        break;
+                    }
+                    catch {
+                        // not in this dir, try next
+                    }
+                }
+                if (!found) {
+                    throw new Error(`Relative path "${rawPath}" not found in any skill directory. Provide an absolute path or include skill_dir.`);
+                }
+                targetPath = found;
             }
             // Security: resolve symlinks on the target and check containment
             let realTarget;

package/dist/agents/workspace-migrations.js

@@ -709,6 +709,53 @@ async function patchBeagleAdminDriverContactTone(_agentsPath, content) {
     return content.replace(ADMIN_DRIVER_CONTACT_OLD, ADMIN_DRIVER_CONTACT_NEW);
 }
 // ---------------------------------------------------------------------------
+// Migration: Public Agent Write Permissions (v1.30)
+// ---------------------------------------------------------------------------
+//
+// The public agent's memory writes are scope-restricted, but its instructions
+// never stated which paths are writable. This caused 20+ retries per session
+// as the agent tried to write to restricted paths (e.g. memory/public/).
+const WRITE_PERMISSIONS_MARKER = "## Write Permissions";
+const PUBLIC_WRITE_PERMISSIONS_SECTION = `## Write Permissions
+
+Your memory writes are restricted by scope. Only these paths are writable:
+
+- \`memory/users/{phone}/**\` — user profiles and data (DM conversations only)
+- \`memory/groups/{groupId}/**\` — group member profiles and data (group conversations only)
+- \`memory/shared/events/**\` — shared event data
+
+Everything else is **read-only**. In particular:
+- \`memory/public/\` — read-only (knowledge base, product info)
+- \`memory/shared/\` outside \`events/\` — read-only
+
+If a write fails with "scope restricted", do not retry with the same or similar path. The restriction is permanent. Store the data under an allowed path instead.`;
+function hasWritePermissionsSection(content) {
+    return content.includes(WRITE_PERMISSIONS_MARKER);
+}
+/**
+ * Find insertion point before "## Memory Usage" (with or without emoji prefix).
+ */
+function findMemoryUsageInsertPoint(content) {
+    // Match both "## 🔍 Memory Usage" and "## Memory Usage"
+    const emojiIdx = content.indexOf("## 🔍 Memory Usage");
+    if (emojiIdx !== -1)
+        return emojiIdx;
+    const plainIdx = content.indexOf("## Memory Usage");
+    if (plainIdx !== -1)
+        return plainIdx;
+    return -1;
+}
+async function patchPublicWritePermissions(_agentsPath, content) {
+    if (!isPublicAgent(content))
+        return null;
+    if (hasWritePermissionsSection(content))
+        return null;
+    // Only apply to agents with a Memory Usage section (Taskmaster public agent)
+    if (!content.includes("Memory Usage"))
+        return null;
+    return insertSection(content, PUBLIC_WRITE_PERMISSIONS_SECTION, findMemoryUsageInsertPoint);
+}
+// ---------------------------------------------------------------------------
 // Migration: Sub-Agent Delegation (v1.24)
 // ---------------------------------------------------------------------------
 const DELEGATION_SECTION = `## Delegation — Sub-Agents
@@ -787,6 +834,7 @@ const MIGRATIONS = [
     { name: "beagle-admin-driver-reply-explicit", apply: patchBeagleAdminDriverReplyExplicit },
     { name: "beagle-admin-driver-contact-tone", apply: patchBeagleAdminDriverContactTone },
     { name: "delegation-section", apply: patchDelegationSection },
+    { name: "public-write-permissions", apply: patchPublicWritePermissions },
 ];
 /**
  * Run all workspace migrations for every configured agent.

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.29.2",
-  "commit": "d2161d7c3053b10edd3f8d588413a6c2cde3a8e7",
-  "builtAt": "2026-03-08T07:35:10.314Z"
+  "version": "1.30.1",
+  "commit": "014eac6ca905695d971d1b75e2a015abd85f9be1",
+  "builtAt": "2026-03-08T17:31:05.664Z"
 }