ur-agent 1.18.0 → 1.20.0

package/documentation/index.html

@@ -43,7 +43,7 @@
     <main id="content" class="content">
       <header class="topbar">
         <div>
-          <p class="eyebrow">Version 1.18.0</p>
+          <p class="eyebrow">Version 1.20.0</p>
           <h1>UR Agent Documentation</h1>
           <p class="lead">A practical, tutorial-style reference for installing, configuring, automating, extending, and operating UR Agent.</p>
         </div>
@@ -80,6 +80,10 @@
             <strong>Test-first execution</strong>
             <span><code>ur test-first</code> detects compile/test/lint commands, stores failure traces, and installs edit-time verifier gates.</span>
           </article>
+          <article>
+            <strong>Safety and context</strong>
+            <span><code>ur safety</code> evaluates command risk. <code>ur context-pack</code> writes architecture context and task memory.</span>
+          </article>
           <article>
             <strong>Release checks</strong>
             <span>Typecheck, tests, bundle verification, smoke, package checks, and secret scan are part of the release path.</span>
@@ -146,11 +150,11 @@ ur -p --output-format json "Review the current diff"</code></pre>
           </article>
           <article>
             <h3>Project context</h3>
-            <p><code>UR.md</code>, <code>AGENTS.md</code>, <code>.ur/agents</code>, <code>.ur/workflows</code>, memory, knowledge, and settings shape behavior.</p>
+            <p><code>UR.md</code>, <code>AGENTS.md</code>, <code>.ur/agents</code>, <code>.ur/workflows</code>, <code>.ur/project-manifest.json</code>, memory, knowledge, and settings shape behavior.</p>
           </article>
           <article>
             <h3>Permission boundary</h3>
-            <p>Tool access is controlled by permission mode, allowed/disallowed tools, sandbox settings, and user approval.</p>
+            <p>Tool access is controlled by permission mode, project safety policy, allowed/disallowed tools, sandbox settings, and user approval.</p>
           </article>
           <article>
             <h3>Agent orchestration</h3>
@@ -232,6 +236,33 @@ ur test-first --dry-run
 ur test-first install</code></pre>
           </article>
 
+          <article>
+            <h3>Preview command safety and pack context</h3>
+            <ol>
+              <li>Inspect the active safety policy.</li>
+              <li>Preview risky command behavior before adding it to scripts or automations.</li>
+              <li>Write architecture context and record task decisions.</li>
+            </ol>
+            <pre><code>ur safety status
+ur safety check --command "rm -rf build"
+ur context-pack scan
+ur context-pack remember --decision "Use manifest commands first"
+ur context-pack compress</code></pre>
+          </article>
+
+          <article>
+            <h3>Start the ACP server and run a prompt pool</h3>
+            <ol>
+              <li>Start the Agent Communication Protocol server for IDE extensions.</li>
+              <li>Run one or more prompts in non-interactive mode with concurrency.</li>
+              <li>Capture per-prompt outputs to a directory.</li>
+            </ol>
+            <pre><code>ur acp serve --port 8123
+ur acp status --json
+ur exec "add tests for the parser" --concurrency 4 --json
+ur exec --file prompts.jsonl --output-dir ./outputs --dry-run</code></pre>
+          </article>
+
           <article>
             <h3>Use a multi-agent pattern</h3>
             <ol>
@@ -386,8 +417,16 @@ ur --model qwen2.5-coder:latest</code></pre>
             <h3>Permissions</h3>
             <pre><code>ur -p --allowed-tools "Read,Edit,Bash(git:*)" \
   --disallowed-tools "Bash(rm:*)" \
-  "Review the current diff"</code></pre>
-            <p>Use explicit tool boundaries for automation. Reserve <code>--dangerously-skip-permissions</code> for disposable sandboxes.</p>
+  "Review the current diff"
+ur safety check --command "rm -rf build"</code></pre>
+            <p>Use explicit tool boundaries for automation. Preview risky commands with <code>ur safety</code>. Reserve <code>--dangerously-skip-permissions</code> for disposable sandboxes.</p>
+          </article>
+          <article>
+            <h3>Project context</h3>
+            <pre><code>ur context-pack scan
+ur context-pack remember --constraint "Run command evidence before success claims"
+ur context-pack compress</code></pre>
+            <p>Context packs summarize architecture from manifests and preserve task decisions, constraints, commands, and diffs under <code>.ur/context</code>.</p>
           </article>
           <article>
             <h3>Verifier</h3>
@@ -463,7 +502,7 @@ ur claim-ledger validate</code></pre>
           <article>
             <h3>New agent-platform command is missing</h3>
             <pre><code>ur --version
-ur --help | grep -E "repo-edit|test-first|spec|arena|escalate|ci-loop|artifacts"
+ur --help | grep -E "repo-edit|test-first|safety|context-pack|spec|arena|escalate|ci-loop|artifacts"
 npm install -g ur-agent@latest --registry=https://registry.npmjs.org/
 hash -r</code></pre>
           </article>

package/examples/agent_features.md

@@ -48,6 +48,17 @@ ur test-first --dry-run
 ur test-first install
 ```
 
+Preview command safety and preserve project context:
+
+```sh
+ur safety status
+ur safety check --command "rm -rf build"
+ur context-pack scan
+ur context-pack remember --decision "Use package scripts before ad hoc commands"
+ur context-pack remember --constraint "Never expose secret values"
+ur context-pack compress
+```
+
 Use the local memory, evidence, and browser QA helpers:
 
 ```sh

package/examples/agent_trends.md

@@ -5,5 +5,9 @@
 - Run `ur a2a card` to print UR's Agent Card metadata for A2A discovery.
 - Run `ur test-first --dry-run` to preview the detected compile/test/lint
   evidence loop for the current project.
+- Run `ur safety check --command "rm -rf build"` to preview command permission
+  class, destructive approval, and sandbox posture.
+- Run `ur context-pack scan` and `ur context-pack compress` to preserve
+  manifest-derived architecture context and task memory.
 - Use `/agent-trends` inside a session before planning upgrades to local
   runtime, MCP, A2A, memory, browser, eval, identity, or provenance workflows.

package/examples/coding_task.md

@@ -12,6 +12,11 @@ UR plans, reads files, edits, and can run tests. Safety + stability:
 - Stack-aware quality loops can use `ur test-first`: detect compile/test/lint
   commands, store failed command traces, and install the same commands as
   after-edit verifier gates.
+- Risky commands can be previewed with `ur safety`: classify read/write/execute
+  and network permission, require approval for destructive operations, and
+  block common secret exfiltration paths.
+- Architecture context can be preserved with `ur context-pack`: scan manifests,
+  record decisions/constraints/commands/diffs, and compress old context.
 - Edits are diffable: `/diff` shows uncommitted changes; `/rewind` rolls back.
 - Every tool call is recorded to `.ur/actions.jsonl` — see `/actions`, `/evidence`.
 - `/stability metrics` and `/stability firewall` surface oscillation, repeated
@@ -26,4 +31,8 @@ ur repo-edit apply rename oldName --to newName --check "bun test"
 ur test-first detect
 ur test-first --dry-run
 ur test-first install
+ur safety check --command "rm -rf build"
+ur context-pack scan
+ur context-pack remember --diff "Added the health route and tests"
+ur context-pack compress
 ```

package/examples/memory.md

@@ -5,5 +5,11 @@
 - Project conventions live in project instruction files and the project DNA file.
 - `/dna` detects language, package manager, build/test/lint/run commands,
   ignored folders, and README, saved to `.ur/project_dna.md`.
+- `ur context-pack scan` writes `.ur/project-manifest.json` and
+  `.ur/context/architecture.md` from package scripts, instruction files,
+  `.ur/verify.json`, and safety config.
+- `ur context-pack remember --decision|--constraint|--command|--diff|--note`
+  appends durable task memory to `.ur/context/task-memory.jsonl`; `compress`
+  writes `.ur/context/compressed.md`.
 - `/ur-init` scaffolds the `.ur/` asset folder (docs, superpowers, brainstorming,
   memory, prompts).

package/extensions/vscode-ur-inline-diffs/package.json

@@ -2,7 +2,7 @@
   "name": "ur-inline-diffs",
   "displayName": "UR Inline Diffs",
   "description": "Review UR inline diff bundles from .ur/ide/diffs inside VS Code.",
-  "version": "1.18.0",
+  "version": "1.20.0",
   "publisher": "ur-agent",
   "engines": {
     "vscode": "^1.92.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ur-agent",
-  "version": "1.18.0",
+  "version": "1.20.0",
   "description": "UR terminal coding agent CLI",
   "type": "module",
   "packageManager": "bun@1.3.14",