ur-agent 1.30.5 → 1.31.0

package/docs/AGENT_FEATURES.md

@@ -81,7 +81,7 @@ ur upgrade
 
 | Addition | Surface | What it adds |
 | --- | --- | --- |
-| Legal multi-provider connectivity | `ur provider list\|status\|doctor`, `ur config set provider ...`, `ur auth chatgpt\|claude\|gemini\|antigravity` for bridge diagnostics | API-key providers and local/OpenAI-compatible runtimes are UR-native. Subscription CLIs are optional external app bridges blocked from normal runtime unless explicitly enabled. UR stores only safe non-secret preferences and never scrapes browser sessions, extracts OAuth tokens, reads hidden provider auth files, bypasses provider restrictions, or proxies consumer web sessions as APIs. |
+| Legal multi-provider connectivity | `ur provider list\|status\|doctor`, `ur config set provider ...`, bridge diagnostics only when explicitly enabled | API-key providers and local/OpenAI-compatible runtimes are UR-native. Subscription access is visible but unavailable unless a real independent backend exists; UR does not expose fake subscription models. External app bridges are blocked from normal runtime unless explicitly enabled. UR stores only safe non-secret preferences and never scrapes browser sessions, extracts OAuth tokens, reads hidden provider auth files, bypasses provider restrictions, or proxies consumer web sessions as APIs. |
 | Provider-aware status bar | Interactive bottom status bar, `src/components/StatusLine.tsx`, `src/utils/statusBar.ts` | Shows only important runtime state: active provider, selected model, mode, git branch, active task state, checks/build state when known, and update availability. Hidden in CI, dumb terminals, and non-interactive mode; custom status-line hooks still override it. |
 | Clean update checks | `ur upgrade`, `ur update`, `src/cli/update.ts` | Detects development/source checkouts and prints a short pull-or-install message instead of attempting self-mutation. npm-installed builds compare the local version with `ur-agent` on npm and print update, latest, registry failure, and malformed-response states without stale planning text. |
 | Bundled IDE extension install | `extensions/vscode-ur-inline-diffs/`, `src/utils/ide.ts`, `ur ide diff` | Public VS Code install now packages the repo's bundled inline-diffs extension as a local VSIX instead of trying an unpublished marketplace ID. The extension remains local-only and reviews `.ur/ide/diffs` bundles from the current workspace. |

package/docs/USAGE.md

@@ -115,6 +115,11 @@ back to Ollama, Claude API does not fall back to Claude Code, and local/server
 providers do not leak cloud model lists. Use `ur provider status` to inspect the
 active provider, model, access type, and runtime backend.
 
+The default provider list keeps subscription access visible as `subscription`,
+but it is marked unavailable unless a real independent subscription runtime is
+configured. UR does not list fake subscription models and does not call provider
+apps by default.
+
 Provider values accept canonical IDs and common aliases. For example,
 `openai-api`, `anthropic-api`, `gemini-api`, `openrouter`, `ollama`,
 `lmstudio`, `llama.cpp`, and `vllm` are normal UR-native runtime providers.
@@ -124,12 +129,11 @@ opt-in is enabled.
 
 API modes are explicit and read keys only from environment variables:
 `OPENAI_API_KEY`, `ANTHROPIC_API_KEY`, `GEMINI_API_KEY`, and
-`OPENROUTER_API_KEY`. Codex CLI, Claude Code, Gemini CLI, and Antigravity are
-external app bridges, not required dependencies; they are blocked from normal
-runtime selection unless `UR_ENABLE_EXTERNAL_APP_PROVIDERS=1` is set. UR-AGENT
-never scrapes browser sessions, extracts OAuth tokens, or bypasses provider
-restrictions. OpenAI-compatible local or cloud endpoints use `base_url` plus
-`model`.
+`OPENROUTER_API_KEY`. Provider app bridges are not required dependencies; they
+are blocked from normal runtime selection unless
+`UR_ENABLE_EXTERNAL_APP_PROVIDERS=1` is set. UR-AGENT never scrapes browser
+sessions, extracts OAuth tokens, or bypasses provider restrictions.
+OpenAI-compatible local or cloud endpoints use `base_url` plus `model`.
 
 Use `/model` in an interactive session to select provider first and model
 second. OpenAI API, Claude API, Gemini API, OpenRouter, Ollama, and
@@ -249,7 +253,7 @@ Interactive sessions include a compact bottom status bar when stdout is a real
 terminal:
 
 ```text
-Ollama | llama3 | ask | main | update 1.30.5 available
+Ollama | llama3 | ask | main | update 1.30.6 available
 ```
 
 The bar is not rendered in non-interactive mode, CI, dumb terminals, or

package/docs/providers.md

@@ -26,6 +26,7 @@ variables only when the user explicitly selects API mode.
 
 | Provider | Access type | Runtime kind | Runtime backend | Legal path |
 | --- | --- | --- | --- | --- |
+| Subscription | subscription | unavailable until configured | `subscription:unconfigured` | independent subscription runtime only |
 | OpenAI API | API | UR-native | `api:openai` | `OPENAI_API_KEY` |
 | Claude API | API | UR-native | `api:anthropic` | `ANTHROPIC_API_KEY` |
 | Gemini API | API | UR-native | `api:gemini` | `GEMINI_API_KEY` |
@@ -34,10 +35,7 @@ variables only when the user explicitly selects API mode.
 | LM Studio | local/server | UR-native | `openai-compatible:lmstudio` | local OpenAI-compatible server |
 | llama.cpp | local/server | UR-native | `openai-compatible:llama.cpp` | local OpenAI-compatible server |
 | vLLM | local/server | UR-native | `openai-compatible:vllm` | OpenAI-compatible server |
-| Codex CLI | subscription | external app bridge | `subscription-cli:codex` | official Codex CLI login |
-| Claude Code | subscription | external app bridge | `subscription-cli:claude-code` | official Claude Code login |
-| Gemini CLI | subscription | external app bridge | `subscription-cli:gemini` | official Gemini Code Assist login |
-| Antigravity | subscription | external app bridge | `subscription-cli:antigravity` | official Antigravity login, where supported |
+| External app bridges | subscription | opt-in diagnostics | `subscription-cli:*` | disabled unless explicitly enabled |
 
 ## Commands
 
@@ -62,7 +60,7 @@ ur config set provider.fallback ollama
 
 ## Provider-scoped model selection
 
-UR-AGENT shows providers first, then only models available for the selected provider. This prevents incompatible model/provider pairs and keeps API-key, local/server, and external app bridge model lists separate.
+UR-AGENT shows providers first, then only models available for the selected provider. This prevents incompatible model/provider pairs and keeps API-key, local/server, subscription, and external app bridge model lists separate. The generic `subscription` entry has no models unless a real independent subscription runtime is configured; UR does not list fake subscription models.
 
 ## Runtime provider routing
 
@@ -75,6 +73,9 @@ through that provider's backend:
   they delegate turns to another agent app. If deliberately enabled with
   `UR_ENABLE_EXTERNAL_APP_PROVIDERS=1`, failures still remain provider-scoped
   and never fall back to Ollama.
+- **Subscription** access is visible but blocked when no independent
+  subscription backend exists. It does not expose fake UR model IDs and does not
+  call external provider apps by default.
 
 The selected provider determines:
 - Which backend receives your requests
@@ -196,6 +197,33 @@ ur config set provider anthropic-api
 - Claude API and Claude Code are separate providers
 - Gemini API and Gemini CLI are separate providers
 
+### Connecting accounts (`ur connect` / `/connect`)
+
+Connect a provider once from inside UR (or a terminal). The connection persists,
+so you do not repeat it each session:
+
+```sh
+ur connect status                      # connection state for every provider
+ur connect codex-cli                   # subscription: launches the official login (Codex/Claude/Gemini)
+echo "$OPENAI_API_KEY" | ur connect openai-api   # API: store a key (from stdin, not shell history)
+ur connect openai-api --key <KEY>      # API: store a key explicitly
+ur connect logout openai-api           # clear a stored key
+```
+
+- **Subscription providers** (`codex-cli`, `claude-code-cli`, `gemini-cli`,
+  `antigravity-cli`) connect through their official CLI login using your own
+  account; the session is persisted by that CLI. UR never scrapes or copies
+  those tokens.
+- **API providers** (`openai-api`, `anthropic-api`, `gemini-api`, `openrouter`)
+  store the key in your OS keychain (macOS Keychain, with an encrypted file
+  fallback) — the same secure store UR uses for its own credentials. At runtime
+  a stored key is used first, then the provider's environment variable, so
+  setting the env var still works and never gets overwritten.
+
+If you select a provider that is not connected, UR shows a connect prompt in
+`/model` and the runtime fails clearly with the exact `ur connect <provider>`
+command instead of silently switching providers.
+
 ### Validation
 
 When you set a model that is incompatible with the current provider, UR-AGENT shows an error:

package/documentation/app.js

@@ -56,7 +56,7 @@ const featureGroups = [
   {
     title: 'Providers and auth',
     tags: ['subscription', 'API', 'local', 'status bar'],
-    text: 'UR-native API/local/OpenAI-compatible runtimes, optional external app bridge diagnostics, provider doctor checks, non-secret config, fallback hints, and provider-aware status-bar output.',
+    text: 'UR-native API/local/OpenAI-compatible runtimes, visible-but-unavailable subscription access when no independent backend exists, optional external app bridge diagnostics, provider doctor checks, non-secret config, fallback hints, and provider-aware status-bar output.',
     commands: ['ur provider list', 'ur provider status', 'ur provider doctor agy', 'ur config set provider openai-api', 'ur config set provider ollama'],
   },
   {
@@ -170,7 +170,7 @@ const commands = [
     name: 'auth',
     category: 'Ops',
     aliases: [],
-    summary: 'Launch official subscription CLI login flows for ChatGPT/Codex, Claude Code, Gemini CLI, and Antigravity where supported.',
+    summary: 'Launch optional external app bridge login flows only when those bridge diagnostics are explicitly enabled.',
     examples: ['ur auth chatgpt', 'ur auth claude', 'ur auth gemini', 'ur auth antigravity'],
   },
   {
@@ -590,8 +590,8 @@ const examples = [
   },
   {
     title: 'Provider setup',
-    text: 'Inspect legal provider paths, choose a local provider, and keep fallback explicit.',
-    code: 'ur provider list\nur provider doctor agy\nur config set provider openai-api\nur config set provider ollama\nur config set model qwen3-coder:480b-cloud\nur config set provider.fallback ollama',
+    text: 'Inspect legal provider paths, choose a local/API provider, and keep fallback explicit.',
+    code: 'ur provider list\nur provider doctor subscription\nur config set provider openai-api\nur config set provider ollama\nur config set model qwen3-coder:480b-cloud\nur config set provider.fallback ollama',
   },
   {
     title: 'PR handoff with self-review',

package/documentation/index.html

@@ -44,7 +44,7 @@
     <main id="content" class="content">
       <header class="topbar">
         <div>
-          <p class="eyebrow">Version 1.30.5</p>
+          <p class="eyebrow">Version 1.30.6</p>
           <h1>UR-AGENT Documentation</h1>
           <p class="lead">A practical, tutorial-style reference for installing, configuring, automating, extending, and operating UR-AGENT.</p>
         </div>
@@ -63,7 +63,7 @@
         <div class="stat-grid">
           <article>
             <strong>Local-first runtime</strong>
-            <span>Use local Ollama/OpenAI-compatible runtimes for private and offline work, or explicitly select official subscription/API provider paths.</span>
+            <span>Use local Ollama/OpenAI-compatible runtimes for private and offline work, or explicitly select configured API provider paths. Subscription access stays visible but unavailable when no independent backend exists.</span>
           </article>
           <article>
             <strong>Interactive and headless</strong>
@@ -79,7 +79,7 @@
           </article>
           <article>
             <strong>Legal provider routing</strong>
-            <span><code>ur provider</code>, <code>ur auth</code>, and safe <code>ur config set</code> commands select official subscription, API, and local providers without storing secrets.</span>
+            <span><code>ur provider</code> and safe <code>ur config set</code> commands select API, local, server, or configured subscription providers without storing secrets.</span>
           </article>
           <article>
             <strong>Reliable repo editing</strong>
@@ -146,7 +146,7 @@ ur auth claude
 ur auth gemini
 ur auth antigravity
 ur provider doctor agy</code></pre>
-            <p>Codex CLI, Claude Code CLI, Gemini CLI, and Antigravity are optional external app bridges. UR checks CLI presence and official login status without reading hidden credential files, but normal runtime selection uses API, local, or OpenAI-compatible providers unless <code>UR_ENABLE_EXTERNAL_APP_PROVIDERS=1</code> is set.</p>
+            <p>External app bridges are optional diagnostics only. Normal runtime selection uses API, local, OpenAI-compatible, or a real configured subscription backend; the generic subscription entry does not expose fake models and stays unavailable when no independent backend exists.</p>
           </article>
           <article>
             <h3>API and local providers</h3>
@@ -159,7 +159,7 @@ ur config set provider.fallback ollama</code></pre>
           </article>
           <article>
             <h3>Status bar and updates</h3>
-            <pre><code>Ollama | llama3 | ask | main | update 1.30.5 available</code></pre>
+            <pre><code>Ollama | llama3 | ask | main | update 1.30.6 available</code></pre>
             <p>The interactive status bar shows only important runtime state: provider, model, mode, branch, active tasks, checks status when known, and update availability. It is hidden in CI, dumb terminals, and non-interactive mode.</p>
           </article>
         </div>

package/extensions/vscode-ur-inline-diffs/package.json

@@ -2,7 +2,7 @@
   "name": "ur-inline-diffs",
   "displayName": "UR Inline Diffs",
   "description": "Review, apply, and reject UR inline diff bundles from .ur/ide/diffs inside VS Code.",
-  "version": "1.30.5",
+  "version": "1.30.6",
   "publisher": "ur-agent",
   "engines": {
     "vscode": "^1.92.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ur-agent",
-  "version": "1.30.5",
+  "version": "1.31.0",
   "description": "UR-AGENT — autonomous engineering workflow engine (plan, execute, test, verify, document, benchmark, reproduce)",
   "type": "module",
   "packageManager": "bun@1.3.14",