@rubytech/taskmaster 1.44.3 → 1.44.4

package/dist/agents/tools/message-tool.js

@@ -208,6 +208,12 @@ function filterActionsForContext(params) {
  * never fall through to the global list, which would leak actions from
  * other channels (e.g. Discord "poll" appearing in webchat sessions).
  */
+/**
+ * Channels where the "broadcast" action must never appear in the agent tool schema.
+ * WhatsApp prohibits automated bulk messaging — exposing the action to agents
+ * would encourage policy-violating behaviour.
+ */
+const BROADCAST_EXCLUDED_CHANNELS = new Set(["whatsapp"]);
 function resolveMessageToolActions(options) {
     if (options?.currentChannel) {
         const channelActions = filterActionsForContext({
@@ -220,6 +226,10 @@ function resolveMessageToolActions(options) {
         });
         // Always include "send"; if the channel plugin reports nothing, send is all we need.
         const allActions = new Set(["send", ...channelActions]);
+        // Never expose broadcast on channels that prohibit automated bulk messaging.
+        if (BROADCAST_EXCLUDED_CHANNELS.has(options.currentChannel.toLowerCase())) {
+            allActions.delete("broadcast");
+        }
         return Array.from(allActions);
     }
     if (options?.config) {

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.44.3",
-  "commit": "32d7a0ee09ae38288deb15bad1d3890ccbe39a0d",
-  "builtAt": "2026-03-20T07:51:26.410Z"
+  "version": "1.44.4",
+  "commit": "b8d7b214abfbb7854ac8d717f1d474cda32f8bf2",
+  "builtAt": "2026-03-22T15:16:51.871Z"
 }

package/dist/config/schema.js

@@ -138,7 +138,7 @@ const FIELD_LABELS = {
     "tools.message.crossContext.marker.enabled": "Cross-Context Marker",
     "tools.message.crossContext.marker.prefix": "Cross-Context Marker Prefix",
     "tools.message.crossContext.marker.suffix": "Cross-Context Marker Suffix",
-    "tools.message.broadcast.enabled": "Enable Message Broadcast",
+    "tools.message.broadcast.enabled": "Enable Message Broadcast (excludes WhatsApp)",
     "tools.web.search.enabled": "Enable Web Search Tool",
     "tools.web.search.provider": "Web Search Provider",
     "tools.web.search.apiKey": "Brave Search API Key",
@@ -352,7 +352,7 @@ const FIELD_HELP = {
     "tools.message.crossContext.marker.enabled": "Add a visible origin marker when sending cross-context (default: true).",
     "tools.message.crossContext.marker.prefix": 'Text prefix for cross-context markers (supports "{channel}").',
     "tools.message.crossContext.marker.suffix": 'Text suffix for cross-context markers (supports "{channel}").',
-    "tools.message.broadcast.enabled": "Enable broadcast action (default: true).",
+    "tools.message.broadcast.enabled": "Enable broadcast action (default: false). WhatsApp is always excluded — automated broadcasts violate WhatsApp's Terms of Service.",
     "tools.web.search.enabled": "Enable the web_search tool (requires a provider API key).",
     "tools.web.search.provider": 'Search provider ("brave", "perplexity", or "tavily").',
     "tools.web.search.apiKey": "Brave Search API key (fallback: BRAVE_API_KEY env var).",

package/dist/infra/outbound/message-action-runner.js

@@ -350,24 +350,43 @@ function resolveGateway(input) {
         mode: input.gateway.mode,
     };
 }
+/**
+ * Channels where automated broadcast is prohibited by the provider's Terms of Service.
+ * WhatsApp explicitly forbids automated bulk/broadcast messaging — violating this policy
+ * risks permanent number bans and account termination.
+ */
+const BROADCAST_BLOCKED_CHANNELS = new Set(["whatsapp"]);
 async function handleBroadcastAction(input, params) {
     throwIfAborted(input.abortSignal);
-    const broadcastEnabled = input.cfg.tools?.message?.broadcast?.enabled !== false;
+    const broadcastEnabled = input.cfg.tools?.message?.broadcast?.enabled === true;
     if (!broadcastEnabled) {
-        throw new Error("Broadcast is disabled. Set tools.message.broadcast.enabled to true.");
+        throw new Error("Broadcast is disabled. Set tools.message.broadcast.enabled to true in config. " +
+            "Note: WhatsApp is always excluded — automated broadcasts violate WhatsApp's Terms of Service.");
     }
     const rawTargets = readStringArrayParam(params, "targets", { required: true }) ?? [];
     if (rawTargets.length === 0) {
         throw new Error("Broadcast requires at least one target in --targets.");
     }
     const channelHint = readStringParam(params, "channel");
+    // Hard block: reject broadcast requests that explicitly target a blocked channel.
+    if (channelHint) {
+        const normalizedHint = channelHint.trim().toLowerCase();
+        if (normalizedHint !== "all" && BROADCAST_BLOCKED_CHANNELS.has(normalizedHint)) {
+            throw new Error(`Broadcast to ${channelHint} is blocked. Automated broadcast messaging violates ${channelHint}'s Terms of Service and risks permanent account bans.`);
+        }
+    }
     const configured = await listConfiguredMessageChannels(input.cfg);
     if (configured.length === 0) {
         throw new Error("Broadcast requires at least one configured channel.");
     }
-    const targetChannels = channelHint && channelHint.trim().toLowerCase() !== "all"
+    const allTargetChannels = channelHint && channelHint.trim().toLowerCase() !== "all"
         ? [await resolveChannel(input.cfg, { channel: channelHint })]
         : configured;
+    // Silently exclude blocked channels from broadcast fan-out.
+    const targetChannels = allTargetChannels.filter((ch) => !BROADCAST_BLOCKED_CHANNELS.has(ch));
+    if (targetChannels.length === 0) {
+        throw new Error("No eligible channels for broadcast. WhatsApp is excluded — automated broadcasts violate WhatsApp's Terms of Service.");
+    }
     const results = [];
     const isAbortError = (err) => err instanceof Error && err.name === "AbortError";
     for (const targetChannel of targetChannels) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/taskmaster",
-  "version": "1.44.3",
+  "version": "1.44.4",
   "description": "AI-powered business assistant for small businesses",
   "publishConfig": {
     "access": "public"