@rubytech/taskmaster 1.3.0 → 1.4.1

package/dist/agents/auth-profiles/oauth.js

@@ -59,6 +59,30 @@ async function refreshOAuthTokenWithLock(params) {
             type: "oauth",
         };
         saveAuthProfileStore(store, params.agentDir);
+        // Propagate refreshed credentials to the main store so auth.status and other agents
+        // see the fresh token. Without this, the main store retains a stale refresh token
+        // that Anthropic has already rotated, causing auth.status to permanently report
+        // "Connection expired" even though the agent is working fine.
+        const mainAuthPath = resolveAuthStorePath();
+        if (authPath !== mainAuthPath) {
+            try {
+                const mainStore = ensureAuthProfileStore();
+                const mainCred = mainStore.profiles[params.profileId];
+                const mainExpiry = mainCred?.type === "oauth" ? mainCred.expires : 0;
+                const freshExpiry = result.newCredentials.expires ?? 0;
+                if (freshExpiry > mainExpiry) {
+                    mainStore.profiles[params.profileId] = {
+                        ...(mainCred ?? cred),
+                        ...result.newCredentials,
+                        type: "oauth",
+                    };
+                    saveAuthProfileStore(mainStore);
+                }
+            }
+            catch {
+                // Best-effort — don't fail the agent's own refresh if main store update fails
+            }
+        }
         // Sync refreshed credentials back to Claude Code CLI if this is the claude-cli profile
         // This ensures Claude Code continues to work after Taskmaster refreshes the token
         if (params.profileId === CLAUDE_CLI_PROFILE_ID && cred.provider === "anthropic") {

package/dist/agents/tool-policy.js

@@ -1,6 +1,8 @@
 const TOOL_NAME_ALIASES = {
     bash: "exec",
     "apply-patch": "apply_patch",
+    customer_lookup: "contact_lookup",
+    customer_update: "contact_update",
 };
 export const TOOL_GROUPS = {
     // NOTE: Keep canonical (lowercase) tool names here.
@@ -22,12 +24,7 @@ export const TOOL_GROUPS = {
     // Host/runtime execution tools
     "group:runtime": ["exec", "process"],
     // Session management tools
-    "group:sessions": [
-        "sessions_list",
-        "sessions_history",
-        "sessions_spawn",
-        "session_status",
-    ],
+    "group:sessions": ["sessions_list", "sessions_history", "sessions_spawn", "session_status"],
     // UI helpers
     "group:ui": ["browser", "canvas"],
     // Automation + infra
@@ -93,12 +90,7 @@ const TOOL_PROFILES = {
         allow: ["group:fs", "group:runtime", "group:sessions", "group:memory", "image"],
     },
     messaging: {
-        allow: [
-            "group:messaging",
-            "sessions_list",
-            "sessions_history",
-            "session_status",
-        ],
+        allow: ["group:messaging", "sessions_list", "sessions_history", "session_status"],
     },
     full: {
         // "full" grants all Taskmaster-native tools, memory, web, sessions,

package/dist/agents/tools/message-history-tool.js

@@ -125,10 +125,9 @@ function resolveArchiveSubdir(params) {
     if (source === "admin") {
         return { subdir: "admin" };
     }
-    // Phone number — DM archive
+    // Phone number — always resolve to user archive
     if (source.startsWith("+")) {
-        const subdir = isAdminAgent ? "admin" : `users/${source}`;
-        return { subdir };
+        return { subdir: `users/${source}` };
     }
     // Group JID
     if (source.includes("@g.us")) {

package/dist/auto-reply/media-note.js

@@ -26,6 +26,17 @@ export function buildInboundMediaNote(ctx) {
             }
         }
     }
+    // Audio attachments must NOT be suppressed even when transcription succeeds.
+    // The [media attached: ...] annotation is stored alongside the transcript so
+    // the chat UI can render an audio playback widget via chat-sanitize.
+    const typesArray = Array.isArray(ctx.MediaTypes) ? ctx.MediaTypes : [];
+    const singleType = ctx.MediaType?.trim();
+    for (const idx of [...suppressed]) {
+        const mime = (typesArray[idx] ?? singleType ?? "").split(";")[0].trim();
+        if (mime.startsWith("audio/")) {
+            suppressed.delete(idx);
+        }
+    }
     const pathsFromArray = Array.isArray(ctx.MediaPaths) ? ctx.MediaPaths : undefined;
     const paths = pathsFromArray && pathsFromArray.length > 0
         ? pathsFromArray

package/dist/auto-reply/reply/get-reply.js

@@ -81,6 +81,10 @@ export async function getReplyFromConfig(ctx, opts, configOverride) {
             cfg,
         });
     }
+    // Notify caller that media understanding is complete.  The ctx body now
+    // contains the transcript / description instead of a raw <media:*> placeholder.
+    // Fires before the agent reply pipeline so archive hooks can record the resolved text.
+    opts?.onMediaResolved?.();
     const commandAuthorized = finalized.CommandAuthorized;
     resolveCommandAuthorization({
         ctx: finalized,

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.3.0",
-  "commit": "6432fa8c1f6f007fcdbee8123de84e0f8450d01c",
-  "builtAt": "2026-02-24T20:07:40.938Z"
+  "version": "1.4.1",
+  "commit": "1f1982be6d7498f1d27ddc9df05d45f6c118c774",
+  "builtAt": "2026-02-25T11:26:47.028Z"
 }

package/dist/cli/daemon-cli/status.gather.js

@@ -71,7 +71,13 @@ export async function gatherDaemonStatus(opts) {
     const tailnetIPv4 = pickPrimaryTailnetIPv4();
     const probeHost = pickProbeHostForBind(bindMode, tailnetIPv4, customBindHost);
     const probeUrlOverride = typeof opts.rpc.url === "string" && opts.rpc.url.trim().length > 0 ? opts.rpc.url.trim() : null;
-    const probeUrl = probeUrlOverride ?? `ws://${probeHost}:${daemonPort}`;
+    // Mirror server auto-TLS: non-loopback bind + tls.enabled unset → wss://
+    const tlsExplicit = daemonCfg.gateway?.tls?.enabled;
+    const probeScheme = tlsExplicit === true ||
+        (tlsExplicit === undefined && bindMode !== "loopback" && bindMode !== "auto")
+        ? "wss"
+        : "ws";
+    const probeUrl = probeUrlOverride ?? `${probeScheme}://${probeHost}:${daemonPort}`;
     const probeNote = !probeUrlOverride && bindMode === "lan"
         ? "Local probe uses loopback (127.0.0.1). bind=lan listens on 0.0.0.0 (all interfaces); use a LAN IP for remote clients."
         : !probeUrlOverride && bindMode === "loopback"

package/dist/commands/doctor-config-flow.js

@@ -1,5 +1,5 @@
 import { TaskmasterSchema, CONFIG_PATH_TASKMASTER, migrateLegacyConfig, readConfigFileSnapshot, } from "../config/config.js";
-import { reconcileAgentContactTools } from "../config/agent-tools-reconcile.js";
+import { reconcileAgentContactTools, reconcileStaleToolEntries, } from "../config/agent-tools-reconcile.js";
 import { applyPluginAutoEnable } from "../config/plugin-auto-enable.js";
 import { formatCliCommand } from "../cli/command-format.js";
 import { note } from "../terminal/note.js";
@@ -157,6 +157,18 @@ export async function loadAndMaybeMigrateDoctorConfig(params) {
             fixHints.push(`Run "${formatCliCommand("taskmaster doctor --fix")}" to apply these changes.`);
         }
     }
+    const staleReconcile = reconcileStaleToolEntries({ config: candidate });
+    if (staleReconcile.changes.length > 0) {
+        note(staleReconcile.changes.join("\n"), "Doctor changes");
+        candidate = staleReconcile.config;
+        pendingChanges = true;
+        if (shouldRepair) {
+            cfg = staleReconcile.config;
+        }
+        else {
+            fixHints.push(`Run "${formatCliCommand("taskmaster doctor --fix")}" to apply these changes.`);
+        }
+    }
     const toolReconcile = reconcileAgentContactTools({ config: candidate });
     if (toolReconcile.changes.length > 0) {
         note(toolReconcile.changes.join("\n"), "Doctor changes");

package/dist/config/agent-tools-reconcile.js

@@ -8,6 +8,13 @@ const INDIVIDUAL_CONTACT_TOOLS = [
     "contact_lookup",
     "contact_update",
 ];
+/** Tool entries that should be removed from all agent allow lists. */
+const STALE_TOOL_ENTRIES = ["sessions_send"];
+/** Tool entries that should be renamed in all agent allow lists. */
+const TOOL_RENAMES = {
+    customer_lookup: "contact_lookup",
+    customer_update: "contact_update",
+};
 function isAdminAgent(agent) {
     const id = agent.id?.trim() ?? "";
     return id === "admin" || id.endsWith("-admin");
@@ -51,3 +58,63 @@ export function reconcileAgentContactTools(params) {
     }
     return { config, changes };
 }
+/**
+ * Remove stale tool entries and rename legacy tool names in all agent allow lists.
+ *
+ * Handles three cases for every agent (not just admin):
+ * 1. Remove entries listed in STALE_TOOL_ENTRIES (e.g. sessions_send).
+ * 2. Rename entries listed in TOOL_RENAMES (e.g. customer_lookup → contact_lookup).
+ * 3. After rename, drop individual contact_* entries that are redundant with group:contacts.
+ *
+ * Runs unconditionally on gateway startup (like reconcileAgentContactTools).
+ * Idempotent — skips agents that have no stale or renamed entries.
+ */
+export function reconcileStaleToolEntries(params) {
+    const config = structuredClone(params.config);
+    const changes = [];
+    const agents = config.agents?.list;
+    if (!Array.isArray(agents))
+        return { config, changes };
+    for (const agent of agents) {
+        if (!agent)
+            continue;
+        const allow = agent.tools?.allow;
+        if (!Array.isArray(allow))
+            continue;
+        const id = agent.id?.trim() ?? "<unnamed>";
+        // 1. Remove stale entries
+        for (const stale of STALE_TOOL_ENTRIES) {
+            const idx = allow.indexOf(stale);
+            if (idx !== -1) {
+                allow.splice(idx, 1);
+                changes.push(`Removed ${stale} from agent "${id}" tools.allow.`);
+            }
+        }
+        // 2. Rename legacy entries
+        for (const [oldName, newName] of Object.entries(TOOL_RENAMES)) {
+            const idx = allow.indexOf(oldName);
+            if (idx === -1)
+                continue;
+            // Only rename if the new name isn't already present
+            if (allow.includes(newName)) {
+                allow.splice(idx, 1);
+                changes.push(`Removed duplicate ${oldName} from agent "${id}" tools.allow (${newName} already present).`);
+            }
+            else {
+                allow[idx] = newName;
+                changes.push(`Renamed ${oldName} → ${newName} in agent "${id}" tools.allow.`);
+            }
+        }
+        // 3. Drop individual contact_* entries that are redundant with group:contacts
+        if (allow.includes("group:contacts")) {
+            for (const tool of INDIVIDUAL_CONTACT_TOOLS) {
+                const idx = allow.indexOf(tool);
+                if (idx !== -1) {
+                    allow.splice(idx, 1);
+                    changes.push(`Removed redundant ${tool} from agent "${id}" tools.allow (group:contacts covers it).`);
+                }
+            }
+        }
+    }
+    return { config, changes };
+}