ur-agent 1.11.0

package/CHANGELOG.md

@@ -0,0 +1,101 @@
+# Changelog
+
+## 1.11.0
+
+### Changed
+- **Ollama model selection now lets routing work by default.** The launcher no
+  longer forces `OLLAMA_MODEL` when neither `OLLAMA_MODEL` nor `UR_MODEL` is
+  set, so UR's Ollama router can choose from the models exposed by the local
+  Ollama app. The built-in fallback is `qwen3-coder:480b-cloud` when model-list
+  discovery is unavailable.
+- **Repository metadata now matches production.** Package metadata, docs, bundled
+  issue links, marketplace defaults, and GitHub workflow templates now point to
+  `Maitham16/UR-mapek`.
+
+### Added
+- **Release consistency gate.** `bun run release:check` verifies package,
+  `bunfig.toml`, bundled CLI, docs, and launcher version output agree. It also
+  runs automatically from `prepack`.
+- **Quality notes.** `QUALITY.md` documents the release gate, runtime
+  assumptions, safety boundaries, and known limits.
+- **Stronger production CI.** The GitHub workflow now runs typecheck, tests,
+  bundle, smoke, secret scan, release check, package dry-run, and global install
+  verification.
+
+### Fixed
+- **Stale bundle/version drift.** The release process now prevents publishing a
+  package where `package.json`, `dist/cli.js`, `bunfig.toml`, and `ur --version`
+  disagree.
+- **Ollama Cloud wording.** Docs now clarify that UR talks only to the local
+  Ollama app, while models exposed by that app may be local or Ollama
+  Cloud-backed.
+
+## 1.10.2
+
+### Fixed
+- **Clipboard image paste — the fix that actually ships.** The 1.10.1 change edited the native NSPasteboard branch, which is dead-code-eliminated from the bundle (its feature gate compiles out), so it never ran. The live path is osascript, whose `saveImage` reused a fixed temp file (`ur_cli_latest_screenshot.png`) opened `with write permission` but never truncated — so a smaller image pasted over a previously larger one kept the old trailing bytes, producing a corrupt PNG ("found in clipboard but not attached"). Added `set eof fp to 0` to truncate before writing.
+
+## 1.10.1
+
+### Fixed
+- **Clipboard image paste.** An image the clipboard reported as present but the native reader couldn't decode was silently dropped — "found in clipboard but not attached." `getImageFromClipboard` now falls back to the osascript path instead of treating a native `null` as authoritative.
+- **Token truncation on Ollama Cloud models.** Cloud models (the `-cloud` / `:cloud` suffix) now default to a 128K-token context floor for both `num_ctx` and auto-compaction, instead of the small or missing value `/api/show` reports for them — so prompts are no longer silently truncated, with no env vars required. The reported value is still used when it is larger, and `UR_OLLAMA_NUM_CTX` (no longer capped to the detected value) / `OLLAMA_CONTEXT_TOKENS` still override.
+
+### Changed
+- **Default model** is now `qwen3-coder:480b-cloud` instead of `llama3.2`, so a session started without an explicit model no longer falls back to a 3B model.
+- **Comment discipline now applies to all sessions.** UR's "default to writing no comments / don't explain WHAT the code does / verify it actually works before reporting complete" guidance was gated to internal builds; it is now enabled for everyone (the upstream `@[MODEL LAUNCH]` TODO had it marked for external release).
+
+## 1.10.0
+
+### Added
+- **`skill-forge` plugin** in the `ur-plugins-official` marketplace — have the agent author skills for you. `/forge-skill <description>` runs on the active session model: it designs the skill (name, `when_to_use` triggers, arguments, minimal `allowed-tools`, inline vs fork, and steps that each carry a success criterion), shows the `SKILL.md` for a single confirmation, then saves it to `~/.ur/skills/<name>/` (or `./.ur/skills/` with `--project`) without clobbering an existing one. `/skill-refine <name> : <change>` improves an existing skill, and a bundled `skill-authoring` skill encodes the conventions. Complements the built-in `/create-skill`, which only scaffolds an empty template.
+
+### Verified
+- The plugin manifest plus its two command and one skill frontmatter blocks parse as strict YAML; the marketplace entry resolves; and there are no slash-command name collisions across the marketplace.
+
+## 1.9.0
+
+### Added
+- **Seven first-party integration plugins** in the `ur-plugins-official` marketplace. Each bundles an official MCP server, curated slash commands, and a methodology skill, and falls back to a CLI or local library so the commands still work before any token is configured:
+  - **`obsidian`** — operate a vault as a second brain: `/second-brain`, `/daily-note`, `/moc`, `/backlinks`, `/vault-search`. Direct vault file edits or the Obsidian Local REST API MCP server, plus a Zettelkasten/PARA/MOC skill.
+  - **`github`** — `/gh-pr-review`, `/gh-pr-create`, `/gh-issues`, `/gh-repo-health` via GitHub's official remote MCP server (`api.githubcopilot.com/mcp/`) or the `gh` CLI.
+  - **`gitlab`** — `/gl-mr-review`, `/gl-mr-create`, `/gl-issues`, `/gl-pipeline` via GitLab's official MCP server (OAuth) or the `glab` CLI.
+  - **`huggingface`** — `/hf-model-search`, `/hf-dataset-search`, `/hf-model-card`, `/hf-download` via the official Hugging Face MCP server or the `hf` CLI.
+  - **`word`** — `/docx-new`, `/docx-from-md`, `/docx-review`, `/docx-edit` via the Office Word MCP server (`uvx`) or a pandoc / python-docx fallback.
+  - **`powerpoint`** — `/pptx-new`, `/pptx-from-md`, `/pptx-review`, `/pptx-theme` via the Office PowerPoint MCP server (`uvx`) or a python-pptx fallback.
+  - **`miro`** — `/miro-board`, `/miro-diagram`, `/miro-stickies`, `/miro-export` via Miro's official MCP server (OAuth) or the REST API.
+- Each manifest wires its MCP server through `userConfig`, so tokens are prompted at enable time and stored in secure storage (keychain / credentials file) — never in plaintext settings or prompt content.
+
+### Verified
+- All seven manifests validate against the plugin schema (mcpServers transport, `userConfig` identifiers, `${user_config}` resolution); 36 command/skill frontmatter blocks parse as strict YAML; no secret keys are referenced in prompt content; and there are no slash-command name collisions across the marketplace.
+
+## 1.8.0
+
+### Added
+- **`/create-skill` command.** Scaffold a new skill without leaving the REPL: `/create-skill <name> [: <description>] [--project]` writes a ready-to-edit `SKILL.md` (with frontmatter) to `~/.ur/skills/<name>/` — or `.ur/skills/` with `--project` — refuses to clobber an existing skill, and clears caches so it shows up immediately (alias `/new-skill`).
+- **Game Designer mode.** A new built-in output style (`/output-style`) that makes UR reason like a game designer — core loops, player fantasy, game feel, and tunable balance constants — while it writes working code.
+- **Thinking toggle in the model picker.** `/model` now lets you toggle extended thinking with `t` (alongside `← →` effort cycling) for models that support it. The choice applies to the session and persists via `alwaysThinkingEnabled`.
+
+### Fixed
+- **`/update-config` no longer crashes** with `Undefined cannot be represented in JSON Schema`. The settings-schema generator now tolerates Zod types with no JSON Schema equivalent (e.g. the `enabledPlugins` union) instead of throwing.
+
+## 1.7.0
+
+### Added
+- **Adaptive model routing (Ollama).** The agent auto-selects the best installed model per tier — the strongest coder model for the main loop, the smallest fast model for light internal work (titles, classification, session search, hooks). Honors `OLLAMA_MODEL` / `OLLAMA_SMALL_FAST_MODEL`; gated by `UR_OLLAMA_AUTO_ROUTE`.
+- **Per-model context auto-tuning.** Each request sets `num_ctx` from the model's real context window and the prompt size (floored at 32K for agent work, bucketed so the KV cache stays warm), fixing silent truncation at Ollama's 4096 default. Override with `UR_OLLAMA_NUM_CTX`.
+- **Keep-alive for faster responses.** Requests set `keep_alive` (default 30m) to keep the active model warm between turns and cut first-token latency. Override with `UR_OLLAMA_KEEP_ALIVE`.
+- **Smarter model listing.** `/model` shows each model's tier (coder/fast) and context window; `/ur-doctor` reports the routing picks and recommends pulling a coder model when none is installed.
+
+### Verified
+- New unit tests for routing, context tuning, and keep-alive (including an end-to-end request-body assertion); full suite green.
+
+## 1.6.0
+
+### Added
+- **Proactive clarification & planning prompts.** The agent now uses the `AskUserQuestion` multiple-choice popup before significant or ambiguous work and at key planning decisions. Options are navigated with arrow keys and submitted; the last "Other" entry always lets you type a custom answer.
+- **Smarter prompt handling.** New always-on guidance makes the agent resolve ambiguity before acting, work in verifiable steps and check each step's output against the request before continuing, verify work actually runs before reporting done, report outcomes faithfully, and keep changes precisely scoped and professional.
+
+### Changed
+- **Fewer permission prompts (Balanced default).** When no permission mode is explicitly configured, sessions now start in `acceptEdits`: in-project file edits and safe filesystem/read-only commands are auto-approved, while risky or out-of-project actions still prompt. Override anytime with `permissions.defaultMode` or `--permission-mode`.
+- **Elegant breathing spinner.** The house glyph (`⌂`) and bar now pulse smoothly between dim and bright instead of hard-blinking.

package/LICENSE

@@ -0,0 +1,37 @@
+UR Agent Non-Commercial Self-Responsibility License
+Version 1.0
+
+Copyright (c) 2026 Maitham Al-rubaye
+
+Permission is granted to install, run, copy, inspect, and modify this software
+only for personal, educational, research, evaluation, and other
+non-commercial purposes.
+
+Commercial use is not permitted without prior written permission from the
+copyright holder. Commercial use includes selling the software, offering it as
+part of a paid product or service, using it to provide paid consulting or
+managed services, or using it primarily for business revenue generation.
+
+You may share modified or unmodified copies only if you keep this license and
+copyright notice with the software, clearly mark material changes, and do not
+remove attribution to the original author.
+
+You, the user, are solely responsible for how you use this software and for
+any outputs, actions, commands, files, network requests, automation,
+integrations, or decisions created with it. You are responsible for reviewing
+the software, its configuration, its tool access, and its outputs before using
+them in any project, system, repository, device, or service.
+
+This software is provided "as is", without warranty of any kind, express or
+implied, including warranties of merchantability, fitness for a particular
+purpose, non-infringement, accuracy, security, availability, or suitability for
+any use.
+
+To the maximum extent permitted by law, the author and copyright holder will
+not be liable for any claim, damage, loss, cost, security incident, data loss,
+business interruption, legal issue, or other liability arising from or related
+to this software, its outputs, or its use, whether in contract, tort, or any
+other legal theory.
+
+Any use outside this license requires prior written permission from the
+copyright holder.

package/QUALITY.md

@@ -0,0 +1,53 @@
+# UR Quality Notes
+
+UR is a local-first terminal coding agent. Production releases should be
+verifiable from a clean checkout and should not depend on local machine state
+other than Bun and the local Ollama app.
+
+## Release Gate
+
+Run these commands before tagging or pushing a release:
+
+```sh
+bun run typecheck
+bun test
+bun run bundle
+bun run smoke
+bun run secrets:scan
+bun run release:check
+npm pack --dry-run
+```
+
+`bun run release:check` is also wired into `prepack`, so stale bundles and
+version drift fail before packaging.
+
+## Runtime Assumptions
+
+- UR runs through Bun.
+- Model requests go to the local Ollama app at `http://localhost:11434/api`.
+- The local Ollama app may expose local models or Ollama Cloud-backed models.
+- UR does not call model provider APIs directly and does not manage model API
+  keys.
+- The GitHub install path runs `dist/cli.js`, so the bundle must match the
+  package version.
+
+## Safety Boundaries
+
+- Sensitive tool actions go through permission checks.
+- Dangerous auto-allow rules for shell, PowerShell, and subagents are blocked
+  from classifier-backed auto mode.
+- The verifier runs deterministic L1 checks for false completion claims,
+  repeated tool loops, empty assistant turns, and project gates.
+- Deep verification through the verification subagent is manual by default and
+  can be enabled with `UR_VERIFIER_AUTO_SUBAGENT=1`.
+- Secrets must stay in environment variables, secure storage, or local ignored
+  settings files; tracked files are scanned by `bun run secrets:scan`.
+
+## Known Limits
+
+- `dist/cli.js` is generated and must be rebuilt after source, version, or macro
+  changes.
+- A failed Ollama model-list lookup falls back to `qwen3-coder:480b-cloud`.
+- MCP servers can access external systems; only enable servers you trust.
+- Live model behavior should be validated manually with `docs/VALIDATION.md`
+  before major releases.

package/README.md

@@ -0,0 +1,141 @@
+# UR Agent
+
+UR is a Bun/TypeScript terminal coding agent. It starts an interactive session by default, can run once in print mode for scripts, and supports project context, slash commands, MCP servers, plugins, skills, and custom agents.
+
+The package installs a global `ur` command from this GitHub repository. The launcher requires Bun and sends all model requests to the local Ollama app.
+
+## Requirements
+
+- Bun. This workspace was verified with Bun 1.3.14.
+- Node.js-compatible shell environment
+- A local Ollama app/server for model requests at http://localhost:11434/api
+- Optional: GitHub CLI, tmux, and IDE integrations for workflows that use them
+
+## Install
+
+### IMPORTANT
+If you have previous version remove it with:
+
+```sh
+npm uninstall -g ur-agent
+bun remove -g ur-agent
+```
+
+### Then, install:
+
+```sh
+bun add -g github:Maitham16/UR-mapek
+ur --version
+ur
+```
+
+If you prefer npm for the global install, Bun is still required at runtime:
+
+```sh
+npm install -g github:Maitham16/UR-mapek
+ur --version
+```
+
+UR auto-routes to an installed Ollama model when possible. If you want a specific model, choose it explicitly:
+
+```sh
+UR_MODEL=qwen3-coder:480b-cloud ur
+```
+
+The launch wrapper reads `OLLAMA_MODEL` first, then `UR_MODEL`. If neither is set, UR lets its Ollama router choose from the models exposed by your local Ollama app, including Ollama Cloud-backed models. If routing cannot discover a model list, the built-in fallback is `qwen3-coder:480b-cloud`.
+
+## Development From Source
+
+```sh
+bun install
+bun run start
+```
+
+To make the `ur` command available from this checkout during development:
+
+```sh
+bun link
+ur
+```
+
+## Common Usage
+
+Start an interactive session:
+
+```sh
+ur
+```
+
+Ask one question and print the answer:
+
+```sh
+ur -p "summarize this repository"
+```
+
+Use JSON output for automation:
+
+```sh
+ur -p --output-format json "list the main commands"
+```
+
+Resume a recent session:
+
+```sh
+ur --continue
+ur --resume
+```
+
+Run with a specific model:
+
+```sh
+ur --model qwen3-coder:480b-cloud
+```
+
+See all CLI options and subcommands:
+
+```sh
+ur --help
+ur mcp --help
+ur plugin --help
+```
+
+## Documentation
+
+- [Usage Guide](docs/USAGE.md)
+- [Configuration](docs/CONFIGURATION.md)
+- [Development Guide](docs/DEVELOPMENT.md)
+
+The `examples/` directory also contains prompt examples for coding, research, browser, image, video, MCP, and memory workflows.
+
+## License And Responsibility
+
+UR Agent is released under the [UR Agent Non-Commercial Self-Responsibility License](LICENSE). Commercial use is not allowed without written permission from Maitham Al-rubaye.
+
+The software is provided as-is. Users are responsible for reviewing how they run it, what tools it can access, and any outputs or actions it creates.
+
+## Security
+
+Do not commit secrets, passwords, API keys, OAuth tokens, private keys, `.env` files, local UR memory, generated indexes, logs, or local settings. The package `files` list ships the launcher, bundled CLI, docs, examples, changelog, quality notes, README, and license.
+
+## Project Context
+
+UR reads project instructions from `UR.md` files and can load project assets from `.ur/`. Shared project configuration may be committed, but local files such as `.ur/settings.local.json`, `.ur/memory/`, `.ur/index/`, and `UR.local.md` are ignored by Git.
+
+## Development
+
+```sh
+bun run dev
+bun run typecheck
+bun test
+bun run bundle
+bun run smoke
+bun run secrets:scan
+bun run release:check
+npm pack --dry-run
+```
+
+The package is configured for GitHub installation through `github:Maitham16/UR-mapek`. It is not published to the npm registry yet.
+
+## Designed By
+
+Maitham Al-rubaye

package/bin/ur.js

@@ -0,0 +1,94 @@
+#!/usr/bin/env node
+import { spawn } from 'node:child_process'
+import { existsSync, readFileSync } from 'node:fs'
+import { dirname, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..')
+const entrypoint = resolve(packageRoot, 'src/entrypoints/cli.tsx')
+const bundledEntrypoint = resolve(packageRoot, 'dist/cli.js')
+const preload = resolve(packageRoot, 'plugins/bunBundleDev.ts')
+const packageJsonPath = resolve(packageRoot, 'package.json')
+
+function readPackageMetadata() {
+  try {
+    return JSON.parse(readFileSync(packageJsonPath, 'utf8'))
+  } catch {
+    return {}
+  }
+}
+
+function defineMacro(name, value) {
+  return `${name}=${value === undefined ? 'undefined' : JSON.stringify(value)}`
+}
+
+const packageMetadata = readPackageMetadata()
+const version =
+  typeof packageMetadata.version === 'string'
+    ? packageMetadata.version
+    : '0.0.0-dev'
+const packageName =
+  typeof packageMetadata.name === 'string' ? packageMetadata.name : 'ur-agent'
+const issuesUrl =
+  typeof packageMetadata.bugs?.url === 'string'
+    ? packageMetadata.bugs.url
+    : 'https://github.com/Maitham16/UR-mapek/issues'
+
+const bun = process.env.BUN_BIN || process.env.BUN_EXECUTABLE || 'bun'
+const ollamaModel =
+  process.env.OLLAMA_MODEL || process.env.UR_MODEL
+const userArgs = process.argv.slice(2)
+const args =
+  existsSync(bundledEntrypoint)
+    ? [bundledEntrypoint, ...userArgs]
+    : [
+        'run',
+        '--preload',
+        preload,
+        '--define',
+        defineMacro('MACRO.VERSION', version),
+        '--define',
+        defineMacro('MACRO.BUILD_TIME', ''),
+        '--define',
+        defineMacro('MACRO.PACKAGE_URL', packageName),
+        '--define',
+        defineMacro('MACRO.NATIVE_PACKAGE_URL', undefined),
+        '--define',
+        defineMacro('MACRO.FEEDBACK_CHANNEL', issuesUrl),
+        '--define',
+        defineMacro('MACRO.ISSUES_EXPLAINER', `file an issue at ${issuesUrl}`),
+        '--define',
+        defineMacro('MACRO.VERSION_CHANGELOG', ''),
+        entrypoint,
+        ...userArgs,
+      ]
+
+const child = spawn(bun, args, {
+  cwd: process.cwd(),
+  env: {
+    ...process.env,
+    ...(ollamaModel ? { OLLAMA_MODEL: ollamaModel } : {}),
+  },
+  stdio: 'inherit',
+})
+
+child.on('error', error => {
+  if (error.code === 'ENOENT') {
+    console.error(
+      'Ur requires Bun to run. Install Bun from https://bun.sh, then retry.',
+    )
+    process.exit(1)
+  }
+
+  console.error(error.message)
+  process.exit(1)
+})
+
+child.on('exit', (code, signal) => {
+  if (signal) {
+    process.kill(process.pid, signal)
+    return
+  }
+
+  process.exit(code ?? 1)
+})