@yemi33/minions 0.1.1682 → 0.1.1683

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.1683 (2026-05-02)
+
+### Fixes
+- rename Claude tab, merge plugins by runtime, fix detection and escaping
+
 ## 0.1.1682 (2026-05-02)
 
 ### Features

package/dashboard/js/render-skills.js

@@ -4,6 +4,33 @@ let _skillsTab = 'all';
 let _skillsPage = 0;
 const SKILLS_PER_PAGE = 5;
 
+// Per-runtime tabs that fold native and plugin skills into one bucket — agents
+// see "skills my Claude/Copilot install can use" rather than discovery-source
+// trivia. Project tabs are added dynamically per configured project.
+const SOURCE_META = {
+  'claude-code':    { icon: '⚡', label: 'claude',         group: 'claude'  },
+  'plugin':         { icon: '🔌', label: 'claude plugin',  group: 'claude'  },
+  'copilot':        { icon: '🤖', label: 'copilot',        group: 'copilot' },
+  'copilot-plugin': { icon: '🔌', label: 'copilot plugin', group: 'copilot' },
+  'agent-skill':    { icon: '🤝', label: 'agent',          group: 'agent'   },
+};
+
+function _skillMetaOf(s) {
+  if (SOURCE_META[s]) return SOURCE_META[s];
+  if (s && s.startsWith('project:')) {
+    const name = s.slice('project:'.length);
+    return { icon: '📁', label: name, group: name };
+  }
+  return { icon: '🔧', label: 'unknown', group: 'unknown' };
+}
+
+// Inline onclick handlers run in HTML-attr-then-JS context. escHtml alone is
+// unsafe (apostrophes survive into the JS string). JSON.stringify produces a
+// valid JS literal; HTML-escaping that literal is safe in either context.
+function _jsArg(value) {
+  return escHtml(JSON.stringify(value == null ? '' : String(value)));
+}
+
 function renderSkills(skills) {
   const el = document.getElementById('skills-list');
   const countEl = document.getElementById('skills-count');
@@ -13,32 +40,21 @@ function renderSkills(skills) {
     return;
   }
 
-  const SOURCE_META = {
-    'claude-code':    { icon: '⚡', label: 'global',  group: 'global'  },
-    'copilot':        { icon: '🤖', label: 'copilot', group: 'copilot' },
-    'agent-skill':    { icon: '🤝', label: 'agent',   group: 'agent'   },
-    'plugin':         { icon: '🔌', label: 'plugin',  group: 'plugins' },
-    'copilot-plugin': { icon: '🤖', label: 'copilot', group: 'copilot' },
-  };
-  const metaOf = (s) => {
-    if (SOURCE_META[s]) return SOURCE_META[s];
-    if (s && s.startsWith('project:')) {
-      const name = s.slice('project:'.length);
-      return { icon: '📁', label: name, group: name };
-    }
-    return { icon: '🔧', label: 'global', group: 'global' };
-  };
-  const sourceIcon = (s) => metaOf(s).icon;
-  const sourceLabel = (s) => metaOf(s).label;
-
   // Group by source
   const groups = {};
   for (const r of skills) {
-    const key = metaOf(r.source).group;
+    const key = _skillMetaOf(r.source).group;
     if (!groups[key]) groups[key] = [];
     groups[key].push(r);
   }
-  const groupKeys = Object.keys(groups).sort((a, b) => a === 'global' ? -1 : b === 'global' ? 1 : a.localeCompare(b));
+  const groupKeys = Object.keys(groups).sort((a, b) => {
+    const order = ['claude', 'copilot', 'agent'];
+    const ai = order.indexOf(a), bi = order.indexOf(b);
+    if (ai >= 0 && bi >= 0) return ai - bi;
+    if (ai >= 0) return -1;
+    if (bi >= 0) return 1;
+    return a.localeCompare(b);
+  });
 
   // Tab bar
   const tabs = [{ key: 'all', label: 'All (' + skills.length + ')' }];
@@ -49,10 +65,18 @@ function renderSkills(skills) {
     const active = _skillsTab === t.key;
     html += '<button class="pr-pager-btn" style="font-size:9px;padding:2px 8px;' +
       (active ? 'background:var(--green);color:#fff;border-color:var(--green)' : '') +
-      '" onclick="_skillsTab=\'' + escHtml(t.key) + '\';_skillsPage=0;renderSkills(window._lastSkills)">' + escHtml(t.label) + '</button>';
+      '" onclick="_skillsSelectTab(' + _jsArg(t.key) + ')">' + escHtml(t.label) + '</button>';
   }
   html += '</div>';
 
+  // Note clarifying skill visibility — agents read these on demand, runtime
+  // assets (~/.claude/skills, ~/.copilot/skills) are not auto-injected for
+  // the OTHER runtime. A Copilot agent only sees Copilot-native + plugin skills.
+  html += '<div style="font-size:9px;color:var(--muted);margin-bottom:8px;line-height:1.4">' +
+    'Skills are reference docs agents read on demand — they are not injected wholesale into prompts. ' +
+    'Each tab reflects what the matching runtime would see; cross-runtime skills are NOT visible to a different runtime.' +
+    '</div>';
+
   // Filter by tab
   const filtered = _skillsTab === 'all' ? skills : (groups[_skillsTab] || []);
 
@@ -63,10 +87,11 @@ function renderSkills(skills) {
 
   html += '<div style="display:flex;flex-direction:column;gap:6px">';
   for (const r of page) {
+    const meta = _skillMetaOf(r.source);
     const autoTag = r.autoGenerated ? '<span style="font-size:8px;background:rgba(63,185,80,0.15);color:var(--green);padding:1px 4px;border-radius:3px;margin-left:4px">auto</span>' : '';
-    html += '<div class="inbox-item" onclick="openSkill(\'' + escHtml(r.file) + '\',\'' + escHtml(r.source || 'claude-code') + '\',\'' + escHtml(r.dir || '') + '\')" style="border-left-color:var(--green)">' +
-      '<div class="inbox-name"><span style="color:var(--green);font-weight:600">' + sourceIcon(r.source) + ' ' + escHtml(r.name) + '</span>' + autoTag +
-        '<span style="font-size:9px;color:var(--muted);margin-left:auto">' + escHtml(sourceLabel(r.source)) + '</span>' +
+    html += '<div class="inbox-item" onclick="openSkill(' + _jsArg(r.file) + ',' + _jsArg(r.source || 'claude-code') + ',' + _jsArg(r.dir || '') + ')" style="border-left-color:var(--green)">' +
+      '<div class="inbox-name"><span style="color:var(--green);font-weight:600">' + meta.icon + ' ' + escHtml(r.name) + '</span>' + autoTag +
+        '<span style="font-size:9px;color:var(--muted);margin-left:auto">' + escHtml(meta.label) + '</span>' +
       '</div>' +
       (r.description ? '<div class="inbox-preview" style="color:var(--text)">' + escHtml(r.description) + '</div>' : '') +
     '</div>';
@@ -90,6 +115,12 @@ function renderSkills(skills) {
   window._lastSkills = skills;
 }
 
+function _skillsSelectTab(key) {
+  _skillsTab = key;
+  _skillsPage = 0;
+  renderSkills(window._lastSkills);
+}
+
 function openSkill(file, source, dir) {
   document.getElementById('modal-title').textContent = file;
   document.getElementById('modal-body').innerHTML = '<p style="color:var(--muted)">Loading...</p>';

package/dashboard/js/render-work-items.js

@@ -498,7 +498,6 @@ function openWorkItemDetail(id) {
       }
     });
   }
-  if (arts.skills && arts.skills.length > 0) arts.skills.forEach(function(s) { artPills += '<span onclick="openSkill(\'' + escapeHtml(s) + '\',\'minions\',\'\')" style="' + pillStyle + '">⚙ ' + escapeHtml(s) + '</span> '; });
   if (artPills) html += field('Artifacts', '<div style="display:flex;flex-wrap:wrap;gap:4px">' + artPills + '</div>');
 
   if (item._totalCostUsd != null) html += field('Cumulative Cost', '$' + Number(item._totalCostUsd).toFixed(4));

package/dashboard/pages/tools.html

@@ -1,5 +1,5 @@
       <section>
-        <h2>Minions Skills <span class="count" id="skills-count">0</span> <span style="font-size:10px;color:var(--muted);font-weight:400;text-transform:none;letter-spacing:0">auto-discovered from project repos</span></h2>
+        <h2>Minions Skills <span class="count" id="skills-count">0</span> <span style="font-size:10px;color:var(--muted);font-weight:400;text-transform:none;letter-spacing:0">discovered from runtime native dirs, plugin installs, and configured project repos</span></h2>
         <div id="skills-list"><p class="empty">No skills yet. Agents create these when they discover repeatable workflows.</p></div>
       </section>
       <section>

package/engine/copilot-models.json

@@ -1,5 +1,5 @@
 {
   "runtime": "copilot",
   "models": null,
-  "cachedAt": "2026-05-02T15:15:12.425Z"
+  "cachedAt": "2026-05-02T15:30:24.792Z"
 }

package/engine/lifecycle.js

@@ -1703,10 +1703,14 @@ function extractSkillsFromOutput(output, agentId, dispatchItem, config, runtimeN
       const skillDir = path.join(personalSkillRoot, name.replace(/[^a-z0-9-]/g, '-'));
       const skillPath = path.join(skillDir, 'SKILL.md');
       if (!fs.existsSync(skillPath)) {
-        // Native skill format: only name + description in frontmatter.
+        // Native skill format: only name + description in frontmatter. The
+        // `Auto-extracted` marker is an HTML comment so the dashboard's
+        // autoGenerated detection picks it up without polluting the body
+        // an agent reads.
         const description = m('description') || m('trigger') || `Auto-extracted skill from ${agentName}`;
         const body = fmMatch[2] || '';
-        const ccContent = `---\nname: ${name}\ndescription: ${description}\n---\n\n${body.trim()}\n`;
+        const marker = `<!-- Auto-extracted by ${agentName} on ${dateStamp()} -->`;
+        const ccContent = `---\nname: ${name}\ndescription: ${description}\n---\n\n${marker}\n\n${body.trim()}\n`;
         if (!fs.existsSync(skillDir)) fs.mkdirSync(skillDir, { recursive: true });
         shared.safeWrite(skillPath, ccContent);
         try { require('./queries').invalidateSkillsCache(); } catch {}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.1682",
+  "version": "0.1.1683",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"