@yemi33/minions 0.1.1585 → 0.1.1587

package/CHANGELOG.md

@@ -1,8 +1,10 @@
 # Changelog
 
-## 0.1.1585 (2026-04-28)
+## 0.1.1587 (2026-04-28)
 
 ### Fixes
+-  align doc chat timeout guards
+- stop URL regex at backslash to prevent JSONL escape leakage
 - optimistic UI for planApprove cascades to linked PRD
 - stack chain-of-thought above progress block (was side-by-side)
 

package/dashboard/js/modal-qa.js

@@ -27,7 +27,7 @@ let _qaProcessing = false; // true while waiting for response
 let _qaAbortController = null;
 let _qaQueue = []; // queued messages while processing
 const QA_QUEUE_CAP = 10; // max queued messages
-const QA_STREAM_STALL_MS = 90000; // abort doc-chat if heartbeats continue but no chunk/tool progress arrives
+const QA_STREAM_STALL_MS = 6 * 60 * 1000; // allow the full doc-chat timeout before treating heartbeat-only streams as stalled
 let _qaSessionKey = ''; // key for current conversation (title or filePath)
 
 function _renderQaUserMessage(thread, message, selection) {
@@ -614,7 +614,7 @@ async function _processQaMessage(message, selection, opts) {
     clearInterval(qaTimer);
     _clearQaStreamWatchdog();
     const qaElapsedExc = Math.round((Date.now() - qaStartTime) / 1000);
-    const stallMessage = 'Doc chat stalled with no tool or text progress for 90s.';
+    const stallMessage = 'Doc chat stalled with no tool or text progress for 6 minutes.';
     const messageHtml = _qaStreamStalled
       ? (streamedText
           ? _qaBuildAssistantHtml(streamedText + '\n\nError: ' + stallMessage, { borderColor: 'var(--red)', elapsed: qaElapsedExc })

package/dashboard.js

@@ -548,6 +548,7 @@ const ccLiveStreams = new Map(); // tabId → buffered live stream state for rec
 const CC_INFLIGHT_TIMEOUT_MS = 2 * 60 * 1000; // 2 minutes — auto-release if request hangs
 const CC_LOCK_WAIT_MS = 200; // grace period for previous handler's finally to release lock
 const CC_STREAM_HEARTBEAT_MS = 15000; // keep streaming responses alive across proxies/restart races
+const DOC_CHAT_TIMEOUT_MS = 360000; // allow longer doc-chat turns before timing out server-side
 const CC_STREAM_REATTACH_GRACE_MS = 60000; // keep CC job alive briefly after disconnect so the UI can reattach
 const CC_STREAM_DONE_RETENTION_MS = 30000; // retain final payload briefly so reconnect can still receive it
 function _releaseCCTab(tabId) { ccInFlightTabs.delete(tabId); ccInFlightAborts.delete(tabId); }
@@ -1425,6 +1426,7 @@ async function ccDocCall({ message, document, title, filePath, selection, canEdi
   const result = await ccCall(message, {
     store: 'doc', sessionKey,
     extraContext: docContext, label: 'doc-chat',
+    timeout: DOC_CHAT_TIMEOUT_MS,
     allowedTools: canEdit ? 'Read,Write,Edit,Glob,Grep' : 'Read,Glob,Grep',
     maxTurns: canEdit ? 25 : 10,
     skipStatePreamble: true,
@@ -1473,6 +1475,7 @@ async function ccDocCallStreaming({ message, document, title, filePath, selectio
   const result = await ccCallStreaming(message, {
     store: 'doc', sessionKey,
     extraContext: docContext, label: 'doc-chat',
+    timeout: DOC_CHAT_TIMEOUT_MS,
     allowedTools: canEdit ? 'Read,Write,Edit,Glob,Grep' : 'Read,Glob,Grep',
     maxTurns: canEdit ? 25 : 10,
     skipStatePreamble: true,

package/engine/lifecycle.js

@@ -771,9 +771,11 @@ function syncPrsFromOutput(output, agentId, meta, config) {
 
   // Extract PR URL directly from agent output — no manual construction
   function extractPrUrl(prId) {
-    const ghMatch = output.match(new RegExp(`https?://github\\.com/[^\\s"'\\)\\]]*?/pull/${prId}(?:[^\\s"'\\)\\]]*)`, 'i'));
+    // Stop at backslash in addition to whitespace/quotes — raw JSONL encodes newlines as \n (literal
+    // backslash-n), so without this the regex would capture e.g. "pull/1804\n/usr/bin/bash".
+    const ghMatch = output.match(new RegExp(`https?://github\\.com/[^\\s"'\\)\\]\\\\]*?/pull/${prId}(?:[^\\s"'\\)\\]\\\\]*)`, 'i'));
     if (ghMatch) return ghMatch[0].replace(/[.,;:]+$/, '');
-    const adoMatch = output.match(new RegExp(`https?://(?:dev\\.azure\\.com|[^/]+\\.visualstudio\\.com)[^\\s"'\\)\\]]*?pullrequest/${prId}(?:[^\\s"'\\)\\]]*)`, 'i'));
+    const adoMatch = output.match(new RegExp(`https?://(?:dev\\.azure\\.com|[^/]+\\.visualstudio\\.com)[^\\s"'\\)\\]\\\\]*?pullrequest/${prId}(?:[^\\s"'\\)\\]\\\\]*)`, 'i'));
     if (adoMatch) return adoMatch[0].replace(/[.,;:]+$/, '');
     return '';
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.1585",
+  "version": "0.1.1587",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"