@yemi33/minions 0.1.1535 → 0.1.1537

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +112 -0
  2. package/package.json +1 -1
package/CHANGELOG.md CHANGED
@@ -1,5 +1,117 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.1.1537 (2026-04-19)
4
+
5
+ ### Features
6
+ - Header gate — Origin allowlist, Content-Type enforcement, security response headers (#1336)
7
+ - Header gate — Origin allowlist, Content-Type enforcement, security response headers (#1327)
8
+ - escapeHtml helper, hotspot XSS migration, regression gate (#1323)
9
+ - Prototype pollution guard in readBody (SEC-13) (#1300)
10
+ - redact ADO tokens and JWTs from engine/log.json writes (#1297)
11
+ - SEC-02 — replace curl shell-out in ado.js with adoFetch (#1296)
12
+ - validate project name and path on POST /api/projects/add (SEC-04, SEC-05) (#1298)
13
+ - seed realActivityMap at spawn time, stamp pid in live-output (#1200)
14
+
15
+ ### Fixes
16
+ - ado merge-commit mismatch preserves prior buildStatus (closes #1233) (#1326)
17
+ - scheduler substitutes {{date}} in title and description (#1275)
18
+ - prevent archived plans from re-triggering via orphaned .backup restore
19
+ - pinned context optimistic save (closes #1295) (#1316)
20
+ - re-check throttle state per-PR iteration to avoid stale fixThrottled
21
+ - preserve buildErrorLog through transient states, persist poll time (#1273)
22
+ - auto-fetch PR title on link-pr (closes #1283) (#1299)
23
+ - scheduler double-fire within same cron minute (#1277)
24
+ - gate auto-fix dispatch on throttle state to prevent stale-data spurious fixes
25
+ - preserve buildErrorLog through transient build states (#1232) (#1274)
26
+ - annotate fast-exit empty-output failures with diagnostic hint (#1276)
27
+ - invalidate PRD cache on pr-links.json change + guard aggregate PRs (#1220) (#1272)
28
+ - pass --add-dir for minions + ~/.claude to agents (#1271)
29
+ - preserve VERDICT marker by tail-slicing agent output (#1234) (#1270)
30
+ - PRD info cache staleness and aggregate PR bleed-through (#1222)
31
+ - avoid no-op work item writes
32
+ - resilient claude binary resolution + surface spawn errors
33
+ - resolve native claude.exe from npm wrapper on Windows
34
+ - cap temp-agent creation at maxConcurrent per tick (#1219)
35
+ - reassign pending items from unspawned temp agents to idle named agents (#1204) (#1212)
36
+
37
+ ### Other
38
+ - test(scheduler): add unit tests for parseCronExpr, shouldRunNow, discoverScheduledWork (#1390)
39
+ - refactor: hoist fixThrottled before PR loop and drop underscore prefix
40
+ - docs(skill): add substitute-scheduler-template-vars (#1278)
41
+ - Clarify PR poll labels
42
+ - Prevent modal opens on text selection
43
+ - refactor: clarify settings page section structure and PR polling dependencies
44
+ - refactor: extract _probeClaudePackage helper, use shared.log for spawn errors
45
+ - Make work item descriptions scrollable
46
+ - Use PAT for publish merges
47
+ - test(queries): add unit tests for invalidateDispatchCache/getInbox/getAgentCharter (#1214)
48
+ - test(shared): add unit tests for truncateTextBytes/tailTextBytes/execSilent/trackReviewMetric/parseCanonicalPrId (#1215)
49
+ - Fix publish workflow merge
50
+ - chore: raise default meeting round timeout
51
+ - Harden prompt context handling
52
+ - Harden loop watch conversion
53
+ - Add watches sidebar activity badge
54
+ - test(cli): add unit tests for handleCommand, start, stop, kill, spawn (#1191)
55
+ - chore: untrack pipeline files — local config only
56
+ - restore: recover daily-arch-improvement and weekly-dead-code-cleanup pipelines
57
+ - Harden CC stream resilience
58
+
59
+ ## 0.1.1536 (2026-04-19)
60
+
61
+ ### Features
62
+ - Header gate — Origin allowlist, Content-Type enforcement, security response headers (#1336)
63
+ - Header gate — Origin allowlist, Content-Type enforcement, security response headers (#1327)
64
+ - escapeHtml helper, hotspot XSS migration, regression gate (#1323)
65
+ - Prototype pollution guard in readBody (SEC-13) (#1300)
66
+ - redact ADO tokens and JWTs from engine/log.json writes (#1297)
67
+ - SEC-02 — replace curl shell-out in ado.js with adoFetch (#1296)
68
+ - validate project name and path on POST /api/projects/add (SEC-04, SEC-05) (#1298)
69
+ - seed realActivityMap at spawn time, stamp pid in live-output (#1200)
70
+
71
+ ### Fixes
72
+ - ado merge-commit mismatch preserves prior buildStatus (closes #1233) (#1326)
73
+ - scheduler substitutes {{date}} in title and description (#1275)
74
+ - prevent archived plans from re-triggering via orphaned .backup restore
75
+ - pinned context optimistic save (closes #1295) (#1316)
76
+ - re-check throttle state per-PR iteration to avoid stale fixThrottled
77
+ - preserve buildErrorLog through transient states, persist poll time (#1273)
78
+ - auto-fetch PR title on link-pr (closes #1283) (#1299)
79
+ - scheduler double-fire within same cron minute (#1277)
80
+ - gate auto-fix dispatch on throttle state to prevent stale-data spurious fixes
81
+ - preserve buildErrorLog through transient build states (#1232) (#1274)
82
+ - annotate fast-exit empty-output failures with diagnostic hint (#1276)
83
+ - invalidate PRD cache on pr-links.json change + guard aggregate PRs (#1220) (#1272)
84
+ - pass --add-dir for minions + ~/.claude to agents (#1271)
85
+ - preserve VERDICT marker by tail-slicing agent output (#1234) (#1270)
86
+ - PRD info cache staleness and aggregate PR bleed-through (#1222)
87
+ - avoid no-op work item writes
88
+ - resilient claude binary resolution + surface spawn errors
89
+ - resolve native claude.exe from npm wrapper on Windows
90
+ - cap temp-agent creation at maxConcurrent per tick (#1219)
91
+ - reassign pending items from unspawned temp agents to idle named agents (#1204) (#1212)
92
+
93
+ ### Other
94
+ - test(scheduler): add unit tests for parseCronExpr, shouldRunNow, discoverScheduledWork (#1390)
95
+ - refactor: hoist fixThrottled before PR loop and drop underscore prefix
96
+ - docs(skill): add substitute-scheduler-template-vars (#1278)
97
+ - Clarify PR poll labels
98
+ - Prevent modal opens on text selection
99
+ - refactor: clarify settings page section structure and PR polling dependencies
100
+ - refactor: extract _probeClaudePackage helper, use shared.log for spawn errors
101
+ - Make work item descriptions scrollable
102
+ - Use PAT for publish merges
103
+ - test(queries): add unit tests for invalidateDispatchCache/getInbox/getAgentCharter (#1214)
104
+ - test(shared): add unit tests for truncateTextBytes/tailTextBytes/execSilent/trackReviewMetric/parseCanonicalPrId (#1215)
105
+ - Fix publish workflow merge
106
+ - chore: raise default meeting round timeout
107
+ - Harden prompt context handling
108
+ - Harden loop watch conversion
109
+ - Add watches sidebar activity badge
110
+ - test(cli): add unit tests for handleCommand, start, stop, kill, spawn (#1191)
111
+ - chore: untrack pipeline files — local config only
112
+ - restore: recover daily-arch-improvement and weekly-dead-code-cleanup pipelines
113
+ - Harden CC stream resilience
114
+
3
115
  ## 0.1.1535 (2026-04-19)
4
116
 
5
117
  ### Features
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@yemi33/minions",
3
- "version": "0.1.1535",
3
+ "version": "0.1.1537",
4
4
  "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
5
5
  "bin": {
6
6
  "minions": "bin/minions.js"