@rubytech/taskmaster 1.3.0 → 1.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/taskmaster",
-  "version": "1.3.0",
+  "version": "1.4.1",
   "description": "AI-powered business assistant for small businesses",
   "publishConfig": {
     "access": "public"

package/taskmaster-docs/USER-GUIDE.md

@@ -202,6 +202,32 @@ If you forget your PIN, you'll need to edit the configuration file on the device
 
 ---
 
+## Secure Connection (HTTPS)
+
+Taskmaster automatically uses a secure (HTTPS) connection when you access it from another device on your network. This is required for features like voice notes, which need microphone access — browsers only allow microphone use on secure connections.
+
+### First-Time Certificate Warning
+
+The first time you open Taskmaster in your browser, you'll see a security warning that says something like **"Your connection is not private"** or **"This site's certificate is not trusted."** This is normal and expected.
+
+Taskmaster creates its own security certificate so your connection is encrypted. Because it's self-issued (not from a public authority like Google or Let's Encrypt), your browser doesn't recognise it automatically. Your data is still encrypted — the warning is about trust, not security.
+
+**To proceed:**
+
+- **Chrome / Edge:** Click **Advanced**, then **Proceed to taskmaster.local (unsafe)**
+- **Safari:** Click **Show Details**, then **visit this website**, then confirm
+- **Firefox:** Click **Advanced**, then **Accept the Risk and Continue**
+
+You only need to do this once per browser. After accepting, the warning won't appear again until the certificate expires (1 year).
+
+> **Tip (Mac):** To permanently trust the certificate and remove the warning entirely, open Terminal and run:
+> ```
+> sudo security add-trusted-cert -d -r trustAsRoot -k /Library/Keychains/System.keychain ~/.taskmaster/tls/gateway-cert.pem
+> ```
+> Enter your Mac password when prompted. After this, all browsers on that Mac will trust Taskmaster's certificate.
+
+---
+
 ## Two Assistants, One WhatsApp
 
 Taskmaster runs two assistants on the same WhatsApp number, each with a different job:
@@ -247,7 +273,7 @@ You can record and send voice notes directly from the Chat page. When the messag
 - **Tap** the microphone to start recording. A recording indicator with a timer appears. Tap the **send button** to send, or the **trash button** to discard.
 - **Press and hold** the microphone to record hands-free. Release to send automatically, or slide left to cancel.
 
-Your assistant transcribes the voice note and responds to the content, the same as a WhatsApp voice note.
+Your assistant transcribes the voice note and responds to the content, the same as a WhatsApp voice note. Sent voice notes appear as audio players in the conversation so you can replay them.
 
 ### Sending Messages While the Assistant is Working
 
@@ -977,7 +1003,7 @@ If the Pi checks pass but the control panel still doesn't load from another devi
 If you can't load the Control Panel in your browser:
 
 1. **Same network?** — Make sure your device is on the same WiFi or LAN as Taskmaster
-2. **Check the URL** — go to **http://taskmaster.local:18789**. Make sure you're using `http` (not `https`) and port `18789`
+2. **Check the URL** — go to **http://taskmaster.local:18789** (the browser will redirect to HTTPS automatically). If you see a certificate warning, see "Secure Connection (HTTPS)" above
 3. **Wait for boot** — after powering on the device, it takes 2–3 minutes for everything to start. If you just plugged it in, give it a moment
 4. **Try a different browser** — some browsers (especially on older devices) have trouble with `.local` addresses. Try Chrome or Safari
 5. **Use the IP address** — if `.local` doesn't resolve, find the device's IP address on your router and go to `http://<ip-address>:18789` instead