@yemi33/minions 0.1.438 → 0.1.440

package/CHANGELOG.md

@@ -1,6 +1,11 @@
 # Changelog
 
-## 0.1.438 (2026-04-06)
+## 0.1.440 (2026-04-06)
+
+### Fixes
+-  safeFetch compat — drop AbortSignal.any, avoid opts mutation
+
+## 0.1.439 (2026-04-06)
 
 ### Features
 -  version check interval on settings page
@@ -11,6 +16,7 @@
 - Convert remaining lifecycle.js safeWrite calls to mutateJsonFileLocked
 
 ### Fixes
+-  prevent HTTP/1.1 connection exhaustion with safeFetch timeout
 -  KB sweep failed state visible for 60s, auto-release stale guard
 -  agent detail fetch error shows retry and close buttons
 -  New Session fully resets command center state

package/dashboard/js/live-stream.js

@@ -115,7 +115,7 @@ async function refreshLiveOutput() {
   if (!currentAgentId || currentTab !== 'live') { stopLivePolling(); return; }
   if (_steerInFlight) return; // Don't clobber immediate steering feedback
   try {
-    const text = await fetch('/api/agent/' + currentAgentId + '/live?tail=16384').then(r => r.text());
+    const text = await safeFetch('/api/agent/' + currentAgentId + '/live?tail=16384').then(r => r.text());
     const el = document.getElementById('live-messages');
     if (el) {
       const wasAtBottom = el.scrollHeight - el.scrollTop - el.clientHeight < 150;

package/dashboard/js/refresh.js

@@ -95,7 +95,7 @@ function _processStatusUpdate(data) {
 
 async function refresh() {
   try {
-    const data = await fetch('/api/status').then(r => r.json());
+    const data = await safeFetch('/api/status').then(r => r.json());
     _processStatusUpdate(data);
   } catch(e) { console.error('refresh error', e); }
 }

package/dashboard/js/render-agents.js

@@ -34,7 +34,7 @@ async function openAgentDetail(id) {
     (agent.resultSummary ? '<div style="margin-top:4px;font-size:11px;color:var(--text);line-height:1.4">' + renderMd(agent.resultSummary.slice(0, 300)) + '</div>' : '');
 
   try {
-    const detail = await fetch('/api/agent/' + id).then(r => r.json());
+    const detail = await safeFetch('/api/agent/' + id).then(r => r.json());
     renderDetailTabs(detail);
     renderDetailContent(detail, currentTab);
   } catch(e) {

package/dashboard/js/state.js

@@ -93,4 +93,15 @@ function rerenderPrdFromCache() {
   renderPrd(window._lastStatus.prd, window._lastStatus.prdProgress);
 }
 
-window.MinionsState = { getPageFromUrl, switchPage, getPrdRequeueState, setPrdRequeueState, clearPrdRequeueState, prunePrdRequeueState, rerenderPrdFromCache };
+// Global fetch wrapper with timeout — prevents connection exhaustion from hung requests.
+// Use for all short API calls. Long-lived streams (CC, doc-chat) manage their own AbortControllers.
+function safeFetch(url, opts) {
+  var timeout = (opts && opts.timeout) || 15000;
+  var controller = new AbortController();
+  var timer = setTimeout(function() { controller.abort(); }, timeout);
+  var fetchOpts = Object.assign({}, opts, { signal: controller.signal });
+  delete fetchOpts.timeout;
+  return fetch(url, fetchOpts).finally(function() { clearTimeout(timer); });
+}
+
+window.MinionsState = { getPageFromUrl, switchPage, getPrdRequeueState, setPrdRequeueState, clearPrdRequeueState, prunePrdRequeueState, rerenderPrdFromCache, safeFetch };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.438",
+  "version": "0.1.440",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"