@yemi33/minions 0.1.876 → 0.1.878

package/CHANGELOG.md

@@ -1,11 +1,13 @@
 # Changelog
 
-## 0.1.876 (2026-04-11)
+## 0.1.878 (2026-04-11)
 
 ### Features
 -  add 13 missing CC action types for full dashboard parity
 
 ### Fixes
+- delete .backup sidecar when archiving PRD
+-  CC action bugs + security guard on generic fallback
 - reset central work-items.json on agent kill (closes #890) (#891)
 - include started_at in done/error agent status so duration renders
 

package/dashboard/js/command-center.js

@@ -1119,14 +1119,14 @@ async function ccExecuteAction(action, targetTabId) {
         break;
       }
       case 'reopen-prd-item': {
-        await _ccFetch('/api/prd-items/update', { id: action.id, file: action.file, status: 'updated' });
+        await _ccFetch('/api/prd-items/update', { source: action.file, itemId: action.id, status: 'updated' });
         status.innerHTML = '&#10003; PRD item reopened: <strong>' + escHtml(action.id) + '</strong>';
         status.style.color = 'var(--green)';
         wakeEngine();
         break;
       }
       case 'promote-to-kb': {
-        await _ccFetch('/api/inbox/promote-kb', { file: action.file, category: action.category || 'project-notes' });
+        await _ccFetch('/api/inbox/promote-kb', { name: action.file, category: action.category || 'project-notes' });
         status.innerHTML = '&#10003; Promoted to KB: <strong>' + escHtml(action.file) + '</strong>';
         status.style.color = 'var(--green)';
         refresh();
@@ -1186,9 +1186,21 @@ async function ccExecuteAction(action, targetTabId) {
         status.style.color = 'var(--green)';
         break;
       }
-      default:
-        status.innerHTML = '? Unknown action: ' + escHtml(action.type);
-        status.style.color = 'var(--muted)';
+      default: {
+        // Generic fallback: if action has an `endpoint` field, call it directly (local API only)
+        if (action.endpoint && action.endpoint.startsWith('/api/') && !action.endpoint.includes('..')) {
+          var genRes = await _ccFetch(action.endpoint, action.params || {});
+          var genData = await genRes.json().catch(function() { return {}; });
+          status.innerHTML = '&#10003; ' + escHtml(action.type) + ': ' + escHtml(genData.message || genData.id || 'done');
+          status.style.color = 'var(--green)';
+        } else if (action.endpoint) {
+          status.innerHTML = '&#10007; Blocked: endpoint must be a local /api/ path';
+          status.style.color = 'var(--red)';
+        } else {
+          status.innerHTML = '? Unknown action: <strong>' + escHtml(action.type) + '</strong>';
+          status.style.color = 'var(--muted)';
+        }
+      }
     }
   } catch (e) {
     status.innerHTML = '&#10007; Action failed: ' + escHtml(e.message);

package/engine/lifecycle.js

@@ -351,6 +351,11 @@ function archivePlan(planFile, plan, projects, config) {
       fs.renameSync(planPath, path.join(prdArchiveDir, planFile));
       log('info', `Archived completed PRD: prd/archive/${planFile}`);
     }
+    // Remove .backup sidecar — if left behind, safeJson() would restore the pre-completion
+    // snapshot (status: approved, no _completionNotified) on engine restart, re-triggering
+    // plan completion and spawning duplicate verify tasks for already-archived plans.
+    const backupPath = planPath + '.backup';
+    if (fs.existsSync(backupPath)) fs.unlinkSync(backupPath);
   } catch (err) {
     log('warn', `Failed to archive PRD ${planFile}: ${err.message}`);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yemi33/minions",
-  "version": "0.1.876",
+  "version": "0.1.878",
   "description": "Multi-agent AI dev team that runs from ~/.minions/ — five autonomous agents share a single engine, dashboard, and knowledge base",
   "bin": {
     "minions": "bin/minions.js"

package/prompts/cc-system.md

@@ -43,6 +43,8 @@ I'll dispatch dallas to fix that bug.
 ===ACTIONS===
 [{"type": "dispatch", "title": "Fix login bug", "workType": "fix", "agents": ["dallas"], "project": "MyApp", "description": "..."}]
 
+**Generic fallback:** For any action not listed below, include `"endpoint": "/api/..."` and `"params": {...}` to call the API directly. Example: `{"type": "custom-op", "endpoint": "/api/some/endpoint", "params": {"key": "value"}}`.
+
 Core action types:
 - **dispatch**: title, workType, priority (low/medium/high), agents[] (optional), project, description
   workTypes: `explore` (research, NO PR), `ask` (answer/report, NO PR), `implement` (new code, PR REQUIRED), `fix` (bug fix, PR REQUIRED), `review` (code review, NO PR), `test` (tests, PR if new), `verify` (merge/build/maintenance, NO PR)