@yemi33/minions 0.1.1685 → 0.1.1686

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 0.1.1686 (2026-05-02)
+
+### Fixes
+- prevent interactive az auth in agents (#1991)
+
 ## 0.1.1685 (2026-05-02)
 
 ### Features

package/engine/copilot-models.json

@@ -1,5 +1,5 @@
 {
   "runtime": "copilot",
   "models": null,
-  "cachedAt": "2026-05-02T18:11:21.378Z"
+  "cachedAt": "2026-05-02T18:15:36.411Z"
 }

package/engine/spawn-agent.js

@@ -35,6 +35,7 @@
 const fs = require('fs');
 const os = require('os');
 const path = require('path');
+const { execSync } = require('child_process');
 const { runFile, cleanChildEnv, killGracefully, killImmediate, ts } = require('./shared');
 const { resolveRuntime } = require('./runtimes');
 
@@ -128,6 +129,27 @@ function normalizeRuntimeExit(code, signal) {
   return 1;
 }
 
+function injectAdoTokenEnv(env, { execSync: _execSync = execSync, warn = (msg) => process.stderr.write(msg + '\n') } = {}) {
+  let token;
+  try {
+    token = String(_execSync('azureauth ado token --mode iwa --mode broker --output token --timeout 1', {
+      encoding: 'utf8',
+      timeout: 30000,
+      windowsHide: true,
+    }) || '').trim();
+  } catch (err) {
+    warn(`spawn-agent.js: ADO token fetch failed: ${err.message}`);
+    return false;
+  }
+  if (!token || !token.startsWith('eyJ')) {
+    warn('spawn-agent.js: invalid ADO token from azureauth; continuing without Azure DevOps PAT env');
+    return false;
+  }
+  env.AZURE_DEVOPS_EXT_PAT = token;
+  env.AZURE_DEVOPS_EXT_AZURE_RM_PAT = token;
+  return true;
+}
+
 const PROCESS_EXIT_SENTINEL_FLUSH_TIMEOUT_MS = 2000;
 
 function formatProcessExitSentinel(exitCode, signal) {
@@ -200,6 +222,7 @@ function main() {
   const { promptFile, sysPromptFile, runtimeName, opts, passthrough } = parsed;
 
   const env = cleanChildEnv();
+  injectAdoTokenEnv(env);
 
   let runtime;
   try { runtime = resolveRuntime(runtimeName); }
@@ -355,6 +378,6 @@ function main() {
   });
 }
 
-module.exports = { parseSpawnArgs, buildSpawnInvocation, normalizeRuntimeExit, writeProcessExitSentinel };
+module.exports = { parseSpawnArgs, buildSpawnInvocation, normalizeRuntimeExit, injectAdoTokenEnv, writeProcessExitSentinel };
 
 if (require.main === module) main();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.1685",
+  "version": "0.1.1686",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"