@yemi33/minions 0.1.1585 → 0.1.1586

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -1,8 +1,9 @@
1
1
  # Changelog
2
2
 
3
- ## 0.1.1585 (2026-04-28)
3
+ ## 0.1.1586 (2026-04-28)
4
4
 
5
5
  ### Fixes
6
+ - stop URL regex at backslash to prevent JSONL escape leakage
6
7
  - optimistic UI for planApprove cascades to linked PRD
7
8
  - stack chain-of-thought above progress block (was side-by-side)
8
9
 
@@ -771,9 +771,11 @@ function syncPrsFromOutput(output, agentId, meta, config) {
771
771
 
772
772
  // Extract PR URL directly from agent output — no manual construction
773
773
  function extractPrUrl(prId) {
774
- const ghMatch = output.match(new RegExp(`https?://github\\.com/[^\\s"'\\)\\]]*?/pull/${prId}(?:[^\\s"'\\)\\]]*)`, 'i'));
774
+ // Stop at backslash in addition to whitespace/quotes — raw JSONL encodes newlines as \n (literal
775
+ // backslash-n), so without this the regex would capture e.g. "pull/1804\n/usr/bin/bash".
776
+ const ghMatch = output.match(new RegExp(`https?://github\\.com/[^\\s"'\\)\\]\\\\]*?/pull/${prId}(?:[^\\s"'\\)\\]\\\\]*)`, 'i'));
775
777
  if (ghMatch) return ghMatch[0].replace(/[.,;:]+$/, '');
776
- const adoMatch = output.match(new RegExp(`https?://(?:dev\\.azure\\.com|[^/]+\\.visualstudio\\.com)[^\\s"'\\)\\]]*?pullrequest/${prId}(?:[^\\s"'\\)\\]]*)`, 'i'));
778
+ const adoMatch = output.match(new RegExp(`https?://(?:dev\\.azure\\.com|[^/]+\\.visualstudio\\.com)[^\\s"'\\)\\]\\\\]*?pullrequest/${prId}(?:[^\\s"'\\)\\]\\\\]*)`, 'i'));
777
779
  if (adoMatch) return adoMatch[0].replace(/[.,;:]+$/, '');
778
780
  return '';
779
781
  }
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@yemi33/minions",
3
- "version": "0.1.1585",
3
+ "version": "0.1.1586",
4
4
  "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
5
5
  "bin": {
6
6
  "minions": "bin/minions.js"