@yemi33/minions 0.1.876 → 0.1.877

package/CHANGELOG.md

@@ -1,11 +1,12 @@
 # Changelog
 
-## 0.1.876 (2026-04-11)
+## 0.1.877 (2026-04-11)
 
 ### Features
 -  add 13 missing CC action types for full dashboard parity
 
 ### Fixes
+-  CC action bugs + security guard on generic fallback
 - reset central work-items.json on agent kill (closes #890) (#891)
 - include started_at in done/error agent status so duration renders
 

package/dashboard/js/command-center.js

@@ -1119,14 +1119,14 @@ async function ccExecuteAction(action, targetTabId) {
         break;
       }
       case 'reopen-prd-item': {
-        await _ccFetch('/api/prd-items/update', { id: action.id, file: action.file, status: 'updated' });
+        await _ccFetch('/api/prd-items/update', { source: action.file, itemId: action.id, status: 'updated' });
         status.innerHTML = '&#10003; PRD item reopened: <strong>' + escHtml(action.id) + '</strong>';
         status.style.color = 'var(--green)';
         wakeEngine();
         break;
       }
       case 'promote-to-kb': {
-        await _ccFetch('/api/inbox/promote-kb', { file: action.file, category: action.category || 'project-notes' });
+        await _ccFetch('/api/inbox/promote-kb', { name: action.file, category: action.category || 'project-notes' });
         status.innerHTML = '&#10003; Promoted to KB: <strong>' + escHtml(action.file) + '</strong>';
         status.style.color = 'var(--green)';
         refresh();
@@ -1186,9 +1186,21 @@ async function ccExecuteAction(action, targetTabId) {
         status.style.color = 'var(--green)';
         break;
       }
-      default:
-        status.innerHTML = '? Unknown action: ' + escHtml(action.type);
-        status.style.color = 'var(--muted)';
+      default: {
+        // Generic fallback: if action has an `endpoint` field, call it directly (local API only)
+        if (action.endpoint && action.endpoint.startsWith('/api/') && !action.endpoint.includes('..')) {
+          var genRes = await _ccFetch(action.endpoint, action.params || {});
+          var genData = await genRes.json().catch(function() { return {}; });
+          status.innerHTML = '&#10003; ' + escHtml(action.type) + ': ' + escHtml(genData.message || genData.id || 'done');
+          status.style.color = 'var(--green)';
+        } else if (action.endpoint) {
+          status.innerHTML = '&#10007; Blocked: endpoint must be a local /api/ path';
+          status.style.color = 'var(--red)';
+        } else {
+          status.innerHTML = '? Unknown action: <strong>' + escHtml(action.type) + '</strong>';
+          status.style.color = 'var(--muted)';
+        }
+      }
     }
   } catch (e) {
     status.innerHTML = '&#10007; Action failed: ' + escHtml(e.message);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.876",
+  "version": "0.1.877",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"

package/prompts/cc-system.md

@@ -43,6 +43,8 @@ I'll dispatch dallas to fix that bug.
 ===ACTIONS===
 [{"type": "dispatch", "title": "Fix login bug", "workType": "fix", "agents": ["dallas"], "project": "MyApp", "description": "..."}]
 
+**Generic fallback:** For any action not listed below, include `"endpoint": "/api/..."` and `"params": {...}` to call the API directly. Example: `{"type": "custom-op", "endpoint": "/api/some/endpoint", "params": {"key": "value"}}`.
+
 Core action types:
 - **dispatch**: title, workType, priority (low/medium/high), agents[] (optional), project, description
   workTypes: `explore` (research, NO PR), `ask` (answer/report, NO PR), `implement` (new code, PR REQUIRED), `fix` (bug fix, PR REQUIRED), `review` (code review, NO PR), `test` (tests, PR if new), `verify` (merge/build/maintenance, NO PR)