@yemi33/minions 0.1.2171 → 0.1.2172

package/engine.js

@@ -4793,15 +4793,39 @@ function materializePlansAsWorkItems(config) {
     if (desiredFileName && desiredFileName.toLowerCase() !== String(fileName).toLowerCase()) {
       const fromPath = path.join(PRD_DIR, fileName);
       const desiredPath = shared.sanitizePath(desiredFileName, PRD_DIR);
-      const toPath = shared.uniquePath(desiredPath);
-      try {
-        fs.renameSync(fromPath, toPath);
-        nextFileName = path.basename(toPath);
-        const migrated = migratePrdFilenameReferences(fileName, nextFileName);
-        if (migrated > 0) log('info', `Plan project enforcement: migrated ${migrated} PRD reference(s) from ${fileName} to ${nextFileName}`);
-        changed = true;
-      } catch (e) {
-        log('warn', `Plan project enforcement: could not rename ${fileName} to ${path.basename(toPath)}: ${e.message}`);
+      // W-mq8qdai6 — refuse to rename into a name owned by an archived PRD.
+      // `shared.uniquePath` only scans the live `prd/` directory; without this
+      // guard, an archived PRD with the canonical "<project>-<date>.json" name
+      // would silently collide with the rename target. The dashboard joins
+      // work items to PRDs by basename (sourcePlan === <prd filename>), so a
+      // live↔archive name collision bleeds the archived PRD's done items,
+      // verify task, and PRs into the live PRD's view (the bug-fix-plan vs
+      // minions-opg-2026-06-10 incident).
+      const archiveBasenames = new Set(
+        safeReadDir(path.join(PRD_DIR, 'archive'))
+          .filter(f => f.endsWith('.json'))
+          .map(f => f.toLowerCase())
+      );
+      if (archiveBasenames.has(desiredFileName.toLowerCase())) {
+        log('warn', `Plan project enforcement: skipping rename of ${fileName} to ${desiredFileName} — would collide with archived PRD`);
+      } else {
+        const toPath = shared.uniquePath(desiredPath);
+        const toBasename = path.basename(toPath);
+        if (archiveBasenames.has(toBasename.toLowerCase())) {
+          // uniquePath bumped past a live conflict (e.g. <name>-2.json) but
+          // the bumped name itself is owned by an archived PRD — same risk.
+          log('warn', `Plan project enforcement: skipping rename of ${fileName} to ${toBasename} — would collide with archived PRD`);
+        } else {
+          try {
+            fs.renameSync(fromPath, toPath);
+            nextFileName = toBasename;
+            const migrated = migratePrdFilenameReferences(fileName, nextFileName);
+            if (migrated > 0) log('info', `Plan project enforcement: migrated ${migrated} PRD reference(s) from ${fileName} to ${nextFileName}`);
+            changed = true;
+          } catch (e) {
+            log('warn', `Plan project enforcement: could not rename ${fileName} to ${toBasename}: ${e.message}`);
+          }
+        }
       }
     }
     if (changed) log('info', `Plan project enforcement: preserved declared project "${declaredProject}" for ${nextFileName}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.2171",
+  "version": "0.1.2172",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"