@yemi33/minions 0.1.401 → 0.1.402

package/CHANGELOG.md

@@ -1,11 +1,12 @@
 # Changelog
 
-## 0.1.401 (2026-04-06)
+## 0.1.402 (2026-04-06)
 
 ### Features
 -  pipeline stages detect and link inbox notes as artifacts
 
 ### Fixes
+-  prevent auto-review of human PRs + add unlink button
 -  reconcilePrs only auto-tracks PRs linked to minions work items
 -  auto-detect main branch when configured mainBranch doesn't exist
 -  engine restart button shows toast + green checkmark, suppresses stale banner 30s

package/dashboard/js/render-prs.js

@@ -28,12 +28,13 @@ function prRow(pr) {
     '<td><span class="pr-badge ' + buildClass + '">' + escHtml(buildLabel) + '</span></td>' +
     '<td><span class="pr-badge ' + statusClass + '">' + escHtml(statusLabel) + '</span></td>' +
     '<td><span class="pr-date">' + escHtml((pr.created || '—').slice(0, 16).replace('T', ' ')) + '</span></td>' +
+    '<td><button class="pr-pager-btn" style="font-size:9px;padding:1px 5px;color:var(--red);border-color:var(--red)" data-pr-id="' + escHtml(String(prId)) + '" onclick="event.stopPropagation();unlinkPr(this.dataset.prId)" title="Remove from tracking">x</button></td>' +
     '</tr>';
 }
 
 function prTableHtml(rows) {
   return '<div class="pr-table-wrap"><table class="pr-table"><thead><tr>' +
-    '<th>PR</th><th>Title</th><th>Agent</th><th>Branch</th><th>Review</th><th>Signed Off By</th><th>Build</th><th>Status</th><th>Created</th>' +
+    '<th>PR</th><th>Title</th><th>Agent</th><th>Branch</th><th>Review</th><th>Signed Off By</th><th>Build</th><th>Status</th><th>Created</th><th></th>' +
     '</tr></thead><tbody>' + rows + '</tbody></table></div>';
 }
 
@@ -150,4 +151,17 @@ async function _submitLinkPr() {
   } catch (e) { alert('Error: ' + e.message); openAddPrModal(); }
 }
 
-window.MinionsPrs = { prRow, prTableHtml, renderPrs, prPrev, prNext, openAllPrs, openModal, openAddPrModal };
+async function unlinkPr(id) {
+  if (!confirm('Remove ' + id + ' from tracking?')) return;
+  try {
+    const res = await fetch('/api/pull-requests/delete', {
+      method: 'POST', headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ id })
+    });
+    if (!res.ok) { const d = await res.json().catch(() => ({})); alert('Failed: ' + (d.error || 'unknown')); return; }
+    showToast('cmd-toast', id + ' removed', true);
+    refresh();
+  } catch (e) { alert('Error: ' + e.message); }
+}
+
+window.MinionsPrs = { prRow, prTableHtml, renderPrs, prPrev, prNext, openAllPrs, openModal, openAddPrModal, unlinkPr };

package/dashboard.js

@@ -3631,6 +3631,26 @@ What would you like to discuss or change? When you're happy, say "approve" and I
       return jsonReply(res, 200, { ok: true, id: prId });
     }},
 
+    { method: 'POST', path: '/api/pull-requests/delete', desc: 'Remove a PR from tracking', params: 'id, project?', handler: async (req, res) => {
+      const body = await readBody(req);
+      const { id, project: projectName } = body;
+      if (!id) return jsonReply(res, 400, { error: 'id required' });
+      reloadConfig();
+      const projects = shared.getProjects(CONFIG);
+      const targetProject = projectName ? projects.find(p => p.name?.toLowerCase() === projectName.toLowerCase()) : projects[0];
+      const prPath = targetProject ? shared.projectPrPath(targetProject) : path.join(MINIONS_DIR, 'pull-requests.json');
+      let found = false;
+      mutateJsonFileLocked(prPath, (prs) => {
+        if (!Array.isArray(prs)) return prs;
+        const idx = prs.findIndex(p => p.id === id);
+        if (idx >= 0) { prs.splice(idx, 1); found = true; }
+        return prs;
+      }, { defaultValue: [] });
+      if (!found) return jsonReply(res, 404, { error: 'PR not found' });
+      invalidateStatusCache();
+      return jsonReply(res, 200, { ok: true });
+    }},
+
     { method: 'POST', path: '/api/plans/create', desc: 'Create a plan from user-provided content', params: 'title, content, project?', handler: async (req, res) => {
       const body = await readBody(req);
       const { title, content, project: projectName } = body;

package/engine.js

@@ -1261,9 +1261,14 @@ function discoverFromPrs(config, project) {
     (dispatch.active || []).filter(d => d.meta?.pr?.id).map(d => d.meta.pr.id)
   );
 
+  const knownAgents = new Set(Object.keys(config.agents || {}));
   for (const pr of prs) {
     if (pr.status !== 'active') continue;
     if (activePrIds.has(pr.id)) continue; // Skip PRs with active dispatch (prevent race)
+    // Skip human-authored PRs not linked to any work item — only auto-manage agent PRs
+    // Manually-linked PRs with autoObserve are allowed through (they have _autoObserve flag)
+    const isAgentPr = knownAgents.has((pr.agent || '').toLowerCase()) || (pr.prdItems && pr.prdItems.length > 0) || pr._autoObserve;
+    if (!isAgentPr) continue;
 
     const prNumber = (pr.id || '').replace(/^PR-/, '');
     // Use reviewStatus as single source of truth (synced from ADO/GitHub votes)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.401",
+  "version": "0.1.402",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"