ur-agent 1.37.2 → 1.37.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +26 -0
- package/RELEASE.md +13 -0
- package/dist/cli.js +1039 -683
- package/docs/providers.md +29 -0
- package/documentation/index.html +10 -10
- package/extensions/vscode-ur-inline-diffs/package.json +1 -1
- package/package.json +14 -2
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,31 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.37.3
|
|
4
|
+
|
|
5
|
+
- Version bump: align package, build macro, VS Code extension, docs eyebrow, and
|
|
6
|
+
changelog for the 1.37.3 patch release.
|
|
7
|
+
|
|
8
|
+
## 1.37.2
|
|
9
|
+
|
|
10
|
+
- Tightened provider reliability: API-provider calls now use a finite default
|
|
11
|
+
timeout, consistent retry handling for transient network/provider failures,
|
|
12
|
+
and safer OpenAI-compatible base URL normalization without changing streaming,
|
|
13
|
+
tool-call, multimodal, or local-provider routing behavior.
|
|
14
|
+
- Hardened autonomous command safety: write, execute, and network commands now
|
|
15
|
+
require sandbox coverage in autonomous mode, unavailable sandboxes fail
|
|
16
|
+
closed unless explicit unsafe mode is set, and common secret read/exfiltration
|
|
17
|
+
patterns through pipes, redirects, and interpreter commands are denied.
|
|
18
|
+
- Started real TypeScript strictness migration with a strict-core typecheck
|
|
19
|
+
stage, removed several core runtime `@ts-nocheck` suppressions by fixing the
|
|
20
|
+
underlying types, and added a lint guard against new core suppressions.
|
|
21
|
+
- Improved release hygiene with package/source archive checks for dependency
|
|
22
|
+
trees, OS metadata, local env files, cache junk, logs, test output folders,
|
|
23
|
+
and nested archives; the secret scanner now works in both git checkouts and
|
|
24
|
+
extracted source archives.
|
|
25
|
+
- Added reproducible benchmark report scaffolding so local eval runs can be
|
|
26
|
+
converted into versioned structured reports without claiming unmeasured
|
|
27
|
+
benchmark results.
|
|
28
|
+
|
|
3
29
|
## 1.35.1
|
|
4
30
|
|
|
5
31
|
- Polished the bundled VS Code inline-diffs view with native toolbar icons,
|
package/RELEASE.md
CHANGED
|
@@ -23,6 +23,19 @@ npm pack --dry-run
|
|
|
23
23
|
npm publish --dry-run
|
|
24
24
|
```
|
|
25
25
|
|
|
26
|
+
If publishing or attaching a source archive, verify the actual zip artifact
|
|
27
|
+
before release:
|
|
28
|
+
|
|
29
|
+
```bash
|
|
30
|
+
bun run release:create-source-zip
|
|
31
|
+
bun run release:check-source-zip -- artifacts/source/ur-agent-$(node -p "require('./package.json').version")-source.zip
|
|
32
|
+
```
|
|
33
|
+
|
|
34
|
+
The source zip must contain source inputs such as `package.json`, `bun.lock`,
|
|
35
|
+
`src/`, `bin/`, `scripts/`, `README.md`, `CHANGELOG.md`, and `SECURITY.md`,
|
|
36
|
+
and must not contain local dependencies, runtime binaries, env files, logs,
|
|
37
|
+
caches, test output folders, temp files, or nested archives.
|
|
38
|
+
|
|
26
39
|
Also verify:
|
|
27
40
|
|
|
28
41
|
```bash
|