@rubytech/taskmaster 1.9.1 → 1.9.3

package/dist/agents/tools/image-generate-api.js

@@ -1,15 +1,18 @@
 import { createSubsystemLogger } from "../../logging/subsystem.js";
-import { fetchWithTimeout, normalizeBaseUrl, readErrorResponse } from "../../media-understanding/providers/shared.js";
+import { fetchWithTimeout, normalizeBaseUrl, readErrorResponse, } from "../../media-understanding/providers/shared.js";
 const log = createSubsystemLogger("image-gen");
+/** Show first 4 and last 4 characters of a key, mask everything in between. */
+function maskKey(key) {
+    if (key.length <= 12)
+        return `${key.slice(0, 4)}...`;
+    return `${key.slice(0, 4)}...${key.slice(-4)}`;
+}
 /* ------------------------------------------------------------------ */
 /*  Constants                                                         */
 /* ------------------------------------------------------------------ */
 const DEFAULT_BASE_URL = "https://generativelanguage.googleapis.com/v1beta";
 const DEFAULT_TIMEOUT_MS = 120_000;
-const GEMINI_IMAGE_MODELS = new Set([
-    "gemini-2.5-flash-image",
-    "gemini-3-pro-image-preview",
-]);
+const GEMINI_IMAGE_MODELS = new Set(["gemini-2.5-flash-image", "gemini-3-pro-image-preview"]);
 /* ------------------------------------------------------------------ */
 /*  Model detection                                                   */
 /* ------------------------------------------------------------------ */
@@ -47,7 +50,7 @@ export async function generateImageGemini(params) {
     const res = await fetchWithTimeout(url, { method: "POST", headers, body: JSON.stringify(body) }, timeoutMs, fetchFn);
     if (!res.ok) {
         const detail = await readErrorResponse(res);
-        log.error("gemini HTTP error", { status: res.status, detail });
+        log.error("gemini HTTP error", { status: res.status, key: maskKey(params.apiKey), detail });
         const suffix = detail ? `: ${detail}` : "";
         throw new Error(`Image generation failed (HTTP ${res.status})${suffix}`);
     }
@@ -125,7 +128,7 @@ export async function generateImageImagen(params) {
     const res = await fetchWithTimeout(url, { method: "POST", headers, body: JSON.stringify(body) }, timeoutMs, fetchFn);
     if (!res.ok) {
         const detail = await readErrorResponse(res);
-        log.error("imagen HTTP error", { status: res.status, detail });
+        log.error("imagen HTTP error", { status: res.status, key: maskKey(params.apiKey), detail });
         const suffix = detail ? `: ${detail}` : "";
         throw new Error(`Image generation failed (HTTP ${res.status})${suffix}`);
     }

package/dist/agents/tools/image-generate-tool.js

@@ -8,6 +8,15 @@ import { sanitizeToolResultImages } from "../tool-images.js";
 import { readNumberParam, readStringParam } from "./common.js";
 const log = createSubsystemLogger("image-gen");
 /* ------------------------------------------------------------------ */
+/*  Helpers                                                           */
+/* ------------------------------------------------------------------ */
+/** Show first 4 and last 4 characters of a key, mask everything in between. */
+function maskKey(key) {
+    if (key.length <= 12)
+        return `${key.slice(0, 4)}...`;
+    return `${key.slice(0, 4)}...${key.slice(-4)}`;
+}
+/* ------------------------------------------------------------------ */
 /*  Constants                                                         */
 /* ------------------------------------------------------------------ */
 const SUPPORTED_MODELS = new Set([
@@ -47,7 +56,9 @@ export function createImageGenerateTool(options) {
         parameters: Type.Object({
             prompt: Type.String({ description: "The image generation prompt." }),
             model: Type.Optional(Type.String({ description: "Model ID. Default: gemini-2.5-flash-image." })),
-            aspectRatio: Type.Optional(Type.String({ description: "e.g. 1:1, 16:9, 9:16, 3:4, 4:3. Gemini also supports 2:3, 3:2, 4:5, 5:4, 21:9." })),
+            aspectRatio: Type.Optional(Type.String({
+                description: "e.g. 1:1, 16:9, 9:16, 3:4, 4:3. Gemini also supports 2:3, 3:2, 4:5, 5:4, 21:9.",
+            })),
             resolution: Type.Optional(Type.String({ description: "1K, 2K, or 4K (4K: gemini-3-pro-image-preview only)." })),
             numberOfImages: Type.Optional(Type.Number({ description: "1-4 images per request. Imagen models only." })),
             personGeneration: Type.Optional(Type.String({ description: "dont_allow, allow_adult, allow_all. Imagen models only." })),
@@ -73,6 +84,7 @@ export function createImageGenerateTool(options) {
                 agentDir: options?.agentDir,
             });
             const apiKey = requireApiKey(auth, "google");
+            log.info("resolved google API key", { source: auth.source, key: maskKey(apiKey) });
             /* --- Call the appropriate backend ---------------------------- */
             const isGemini = isGeminiImageModel(modelRaw);
             const result = isGemini

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.9.1",
-  "commit": "0b919997a5bc45f672df09785fe6c44edd03fdc0",
-  "builtAt": "2026-02-27T06:34:25.149Z"
+  "version": "1.9.3",
+  "commit": "65d408bbe013355d2df19762fe1a745a98c3584e",
+  "builtAt": "2026-02-27T07:59:49.321Z"
 }

package/dist/config/legacy.migrations.part-3.js

@@ -267,6 +267,34 @@ export const LEGACY_CONFIG_MIGRATIONS_PART_3 = [
             changes.push("Set default model fallbacks: google/gemini-3-pro-preview, openai/gpt-5.2.");
         },
     },
+    {
+        id: "admin-agent-tools-add-image_generate",
+        describe: "Add image_generate to admin agent tools.allow",
+        apply: (raw, changes) => {
+            const agents = getRecord(raw.agents);
+            const list = getAgentsList(agents);
+            for (const entry of list) {
+                if (!isRecord(entry))
+                    continue;
+                const id = typeof entry.id === "string" ? entry.id.trim() : "";
+                if (!id)
+                    continue;
+                const isAdmin = id === "admin" || id.endsWith("-admin");
+                if (!isAdmin)
+                    continue;
+                const tools = getRecord(entry.tools);
+                if (!tools)
+                    continue;
+                if (!Array.isArray(tools.allow))
+                    continue;
+                const allow = tools.allow;
+                if (!allow.includes("image_generate")) {
+                    allow.push("image_generate");
+                    changes.push(`Added image_generate to agent "${id}" tools.allow.`);
+                }
+            }
+        },
+    },
     {
         id: "agents-tools-remove-sessions_send",
         describe: "Remove sessions_send from agent tools.allow (tool removed for security)",

package/dist/gateway/server.impl.js

@@ -102,21 +102,16 @@ export async function startGatewayServer(port = 18789, opts = {}) {
                 .join("\n")}`);
         }
     }
-    // Persist default model fallbacks to config if missing.  The in-memory
-    // defaults cover runtime, but writing to disk makes the fallback chain
-    // visible in the config file and survives across gateway restarts.
+    // Run all migrations unconditionally to catch additive changes (new tools
+    // in agent allow lists, new defaults) that the legacy-rules system cannot
+    // detect — rules flag keys that *exist*, not keys that are *missing*.
+    // Migrations are idempotent; nothing is written when there are no changes.
     if (configSnapshot.exists && !isNixMode) {
         const parsed = configSnapshot.parsed;
-        const agentsRaw = parsed?.agents;
-        const defaultsRaw = agentsRaw?.defaults;
-        const modelRaw = defaultsRaw?.model;
-        const fallbacks = modelRaw?.fallbacks;
-        if (!Array.isArray(fallbacks) || fallbacks.length === 0) {
-            const { config: migrated, changes } = migrateLegacyConfig(parsed ?? {});
-            if (migrated && changes.length > 0) {
-                await writeConfigFile(migrated);
-                log.info(`gateway: applied config defaults:\n${changes.map((entry) => `- ${entry}`).join("\n")}`);
-            }
+        const { config: migrated, changes } = migrateLegacyConfig(parsed ?? {});
+        if (migrated && changes.length > 0) {
+            await writeConfigFile(migrated);
+            log.info(`gateway: applied config defaults:\n${changes.map((entry) => `- ${entry}`).join("\n")}`);
         }
     }
     configSnapshot = await readConfigFileSnapshot();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/taskmaster",
-  "version": "1.9.1",
+  "version": "1.9.3",
   "description": "AI-powered business assistant for small businesses",
   "publishConfig": {
     "access": "public"

package/taskmaster-docs/USER-GUIDE.md

@@ -1356,7 +1356,7 @@ Or, if the SD card is already written:
 ssh admin@taskmaster.local
 ```
 
-Enter the password when prompted. The default password depends on how the Pi was set up — typically `taskmaster` for pre-installed devices, or whatever you chose during Raspberry Pi OS setup.
+Enter the password when prompted. The default password is `password` for pre-installed devices, or whatever you chose during Raspberry Pi OS setup.
 
 > **Security tip:** Change the default password after your first SSH login by running `passwd` on the Pi.