@yemi33/minions 0.1.2241 → 0.1.2242

package/bin/minions.js

@@ -1358,6 +1358,15 @@ ${fs.existsSync(path.join(PKG_ROOT, '.git')) ? `
   // Clear stale beacons AFTER the kill so the old dashboard's last writes
   // can't repopulate the file in the gap between clear and shutdown.
   _clearDashboardBrowserState(MINIONS_HOME);
+  // Respawn-race guard: the watchdog (or a surviving supervisor) can spawn a
+  // fresh engine/dashboard during the kill→spawn window — those become ORPHANS
+  // the new stack never reaps, and orphan engines keep dispatching agents +
+  // spawning copilot (the root of the recurring multi-engine / MCP-auth storms).
+  // stop-intent is STILL set here, so any respawn has already stood down or is
+  // about to; reap once more so the stack we spawn below is the ONLY one. Scoped
+  // by command-line to engine/dashboard/supervisor — never touches agent/copilot
+  // children, preserving the re-attach invariant.
+  killMinionsProcesses(['engine.js', 'dashboard.js', 'supervisor.js']);
   // Clear stop-intent so the freshly-spawned supervisor resumes guarding.
   clearStopIntent();
   spawnFullStackAndVerify({ rest, forceOpen, dashWasUp, restartStartMs });

package/engine/shared.js

@@ -5666,6 +5666,30 @@ function resolveAgentCopilotHome(minionsDir) {
   return path.join(base, '.minions-agent-copilot-home');
 }
 
+/**
+ * Derive a scratch/temp base dir on the same volume agent work already lives on
+ * — the configured worktree location (engine.worktreeRoot, default
+ * `../worktrees`). Agents (copilot/node/git + JVM-based MCP servers) write heavy
+ * temp under %TEMP% / $TMPDIR; when that resolves to a full system drive (e.g.
+ * C:), operations thrash or fail and routinely overrun the CLI's per-command
+ * timeout, surfacing to the operator as "Operation cancelled". Anchoring agent
+ * temp next to the worktrees keeps scratch on the operator's work volume with NO
+ * config knob and NO hardcoded path — it simply follows wherever worktrees
+ * already go (a location the operator already placed off the system drive).
+ *
+ * Returns an absolute dir path, or null when no anchor can be resolved — callers
+ * MUST treat null as "leave the inherited TEMP untouched" (fail-open).
+ */
+function resolveAgentTempBaseDir(project, engine, minionsDir) {
+  let projectRoot;
+  try { projectRoot = resolveProjectRootDir(project && project.localPath, minionsDir); }
+  catch { return null; }
+  const wtRel = (engine && engine.worktreeRoot) || ENGINE_DEFAULTS.worktreeRoot;
+  let anchor;
+  try { anchor = path.resolve(projectRoot, wtRel); } catch { return null; }
+  return path.join(anchor, '.agent-temp');
+}
+
 // Seed the agent COPILOT_HOME's mcp-config (copy of `~/.copilot/mcp-config.json`
 // MINUS `engine.copilotAgentDisabledMcpServers`) and return the home path. This
 // is the single source of truth for "what MCP servers may a minions-spawned
@@ -8995,6 +9019,7 @@ module.exports = {
   assertWorktreeOutsideProject,
   resolveProjectRootDir,
   resolveAgentCopilotHome,
+  resolveAgentTempBaseDir,
   ensureAgentCopilotHome,
   resolveSpawnPaths,
   validateWorkItemWorkdir,

package/engine.js

@@ -1915,6 +1915,25 @@ function _applyAgentCopilotHome(childEnv) {
   catch { /* leave inherited COPILOT_HOME untouched */ }
 }
 
+// Point a spawned agent's TEMP/TMP/TMPDIR at a scratch dir on the worktree
+// volume instead of the (often full) system drive — see
+// shared.resolveAgentTempBaseDir. copilot/node/git + JVM-based MCP servers write
+// heavy temp there; on a full C: that thrashes and overruns the CLI's per-command
+// timeout ("Operation cancelled"). Best-effort + fail-open: any resolution/mkdir
+// failure leaves the inherited TEMP in place. Sets all three vars to cover
+// Windows (TEMP/TMP) and POSIX (TMPDIR).
+function _applyAgentTempEnv(childEnv, project) {
+  try {
+    const agentTmp = shared.resolveAgentTempBaseDir(project, getConfig()?.engine, MINIONS_DIR);
+    if (agentTmp) {
+      fs.mkdirSync(agentTmp, { recursive: true });
+      childEnv.TEMP = agentTmp;
+      childEnv.TMP = agentTmp;
+      childEnv.TMPDIR = agentTmp;
+    }
+  } catch { /* leave inherited TEMP untouched */ }
+}
+
 async function spawnAgent(dispatchItem, config) {
   const { id, agent: agentId, type, meta } = dispatchItem;
   // Resolve prompt — prefers sidecar file when dispatchItem._promptFile is set
@@ -3750,6 +3769,9 @@ async function spawnAgent(dispatchItem, config) {
   // MCP-free copilot config so agents never pop a per-spawn Microsoft auth
   // window — see _applyAgentCopilotHome / shared.resolveAgentCopilotHome.
   _applyAgentCopilotHome(childEnv);
+  // Keep agent scratch off a (possibly full) system drive — anchors TEMP/TMP to
+  // the worktree volume. See _applyAgentTempEnv / shared.resolveAgentTempBaseDir.
+  _applyAgentTempEnv(childEnv, project);
 
   if (getRepoHost(project) === 'ado') {
     // Inject cached ADO token so ADO agents skip re-authentication (#998).
@@ -4262,6 +4284,8 @@ async function spawnAgent(dispatchItem, config) {
       childEnv.MINIONS_NO_AUTO_OPEN = '1';
       // Same MCP-free copilot home on steering resume (see the initial spawn site).
       _applyAgentCopilotHome(childEnv);
+      // Same agent-scratch redirect on steering resume.
+      _applyAgentTempEnv(childEnv, project);
       if (getRepoHost(project) === 'ado') {
         // Inject cached ADO token for steering session too (#998)
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.2241",
+  "version": "0.1.2242",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"