@yemi33/minions 0.1.847 → 0.1.848

package/CHANGELOG.md

@@ -1,6 +1,6 @@
 # Changelog
 
-## 0.1.847 (2026-04-11)
+## 0.1.848 (2026-04-11)
 
 ### Features
 -  optimistic UI updates for all remaining dashboard pages
@@ -9,6 +9,7 @@
 -  stale PRD shows Regenerate PRD + Resume as-is buttons
 
 ### Fixes
+- PID file leak in indirect spawn + kb-sweep race condition (#821)
 -  KB create modal stays open on API error for retry
 -  steering resume failure no longer silently marked as SUCCESS
 -  cli.js reads PID files from wrong directory on reattach

package/dashboard.js

@@ -1887,6 +1887,9 @@ const server = http.createServer(async (req, res) => {
       global._kbSweepInFlight = false;
     }
     if (global._kbSweepInFlight) return jsonReply(res, 409, { error: 'sweep already in progress' });
+    // Generation token prevents stale finally blocks from clearing the flag for a new sweep
+    const sweepToken = Date.now() + Math.random();
+    global._kbSweepToken = sweepToken;
     global._kbSweepInFlight = true;
     global._kbSweepStartedAt = Date.now();
     try {
@@ -2028,7 +2031,7 @@ If nothing to do: { "duplicates": [], "reclassify": [], "remove": [] }`;
       const summary = `${merged} duplicates merged, ${removed} stale removed, ${reclassified} reclassified${pruned ? ', ' + pruned + ' old swept files pruned' : ''}`;
       safeWrite(path.join(ENGINE_DIR, 'kb-swept.json'), JSON.stringify({ timestamp: new Date().toISOString(), summary }));
       return jsonReply(res, 200, { ok: true, summary, plan });
-    } catch (e) { return jsonReply(res, 500, { error: e.message }); } finally { global._kbSweepInFlight = false; }
+    } catch (e) { return jsonReply(res, 500, { error: e.message }); } finally { if (global._kbSweepToken === sweepToken) global._kbSweepInFlight = false; }
   }
 
   async function handlePlansList(req, res) {

package/engine/llm.js

@@ -108,7 +108,9 @@ function _spawnProcess(promptText, sysPromptText, { direct, label, model, maxTur
   const sysPath = path.join(tmpDir, `${label}-sys-${id}.md`);
   safeWrite(promptPath, promptText);
   safeWrite(sysPath, sysPromptText || '');
-  cleanupFiles.push(promptPath, sysPath);
+  // spawn-agent.js derives a PID file from prompt path — include it in cleanup to prevent leaks
+  const pidPath = promptPath.replace(/prompt-/, 'pid-').replace(/\.md$/, '.pid');
+  cleanupFiles.push(promptPath, sysPath, pidPath);
 
   const spawnScript = path.join(ENGINE_DIR, 'spawn-agent.js');
   const args = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.847",
+  "version": "0.1.848",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"