ur-agent 1.37.3 → 1.40.0

package/docs/ACP.md

@@ -67,7 +67,7 @@ curl -s http://127.0.0.1:8123/acp \
 
 ```json
 { "jsonrpc": "2.0", "id": 1,
-  "result": { "name": "ur-agent", "protocolVersion": "0.1.0",
+  "result": { "name": "UR", "protocolVersion": "0.1.0",
     "workspaceRoot": "/path/to/project",
     "capabilities": { "tools": true, "tasks": true, "sessions": true,
       "ide": true, "streaming": false, "cancellation": true } } }

package/docs/AGENT_FEATURES.md

@@ -215,7 +215,7 @@ and route model work through the local Ollama-backed UR runtime.
 | Recurring automations | `ur automation` and `.ur/automations/` | Project-local automation specs with validation, next-run calculation, manual run, due-run, dry-run, and last-run state |
 | Model capability report | `ur model-doctor` | Local Ollama model inventory with context length, advertised capabilities, and likely vision/code readiness |
 | Reusable agent templates | `ur agent-templates install` | Project agents for review, tests, browser QA, docs research, security, release notes, PR fixes, and memory curation |
-| GitHub agent runner | `.github/workflows/ur-agent.yml` scaffold | Opt-in CI entry point for manual prompts or `/ur` issue comments |
+| GitHub agent runner | `.github/workflows/ur.yml` scaffold | Opt-in CI entry point for manual prompts or `/ur` issue comments |
 | A2A adapter handoff | `ur a2a serve` | Loopback Agent Card and token-gated task execution endpoint |
 | Semantic memory index | `ur semantic-memory build|search` | Local memory index over durable memory, docs, README, and UR instructions |
 | Claim provenance ledger | `ur claim-ledger add|list|validate` | Maps generated claims to web, file, MCP, tool, or user sources |

package/docs/CONFIGURATION.md

@@ -4,7 +4,7 @@ UR reads configuration from CLI flags, environment variables, and project or use
 
 ## Model Providers
 
-UR-AGENT supports official provider access paths only:
+UR-Nexus supports official provider access paths only:
 
 - Explicit API providers: OpenAI, Anthropic, Gemini, OpenRouter, and
   OpenAI-compatible endpoints.
@@ -24,7 +24,7 @@ Bash/File tool execution, and sandbox guarantees apply to UR-run tools and
 final UR output, not to actions the external CLI performs internally. See
 [Provider Guide](providers.md) for the full provider capability matrix.
 
-UR-AGENT never scrapes browser sessions, extracts OAuth refresh tokens, reads
+UR-Nexus never scrapes browser sessions, extracts OAuth refresh tokens, reads
 hidden provider auth files, bypasses provider restrictions, or proxies consumer
 web sessions as APIs.
 
@@ -151,6 +151,71 @@ The scan is limited to active local IPv4 interfaces, ignores loopback/link-local
 addresses, and uses bounded concurrency with short timeouts. It is opt-in and
 never runs automatically unless enabled.
 
+## Prompt Planning
+
+UR-Nexus can plan an `ur exec` prompt into small executable tasks, show a task
+board, run independent tasks through parallel logical workers, and verify task
+claims after execution. The defaults are:
+
+```json
+{
+  "taskPlanning": true,
+  "parallelAgents": true,
+  "maxAgents": 3,
+  "showTaskBoard": true,
+  "strictVerification": true
+}
+```
+
+`taskPlanning` enables prompt decomposition. `parallelAgents` allows independent
+tasks to run concurrently up to `maxAgents`. `showTaskBoard` renders visible
+progress during real execution and keeps the final board in the execution
+report. `strictVerification` rejects unsupported claims about changed files,
+commands, or generated output. With `--no-strict-verification`, unsupported
+claims become warnings and the task may finish when no hard execution error was
+observed.
+
+Legacy nested configuration is still accepted under `urAgent`, while new
+configuration can use the top-level keys above or a `nexus` object.
+
+Per-run flags:
+
+```sh
+ur exec "update docs and tests" --max-agents 3
+ur exec "run exactly one direct prompt" --no-task-planning
+ur exec "plan but run sequentially" --no-parallel-agents
+ur exec "run without task board output" --no-task-board
+ur exec "run quietly but keep the final board" --quiet
+ur exec "warn instead of failing unsupported claims" --no-strict-verification
+```
+
+The final `ur exec` report is generated from task execution evidence only:
+finished, failed, and blocked task records, actual changed files from workspace
+snapshots, unreported changed files, verified commands surfaced by the executor,
+unverified command claims, verification failures, and warnings. Command tracking
+cannot prove detached or provider-internal activity unless the task runner
+surfaces those commands as observed evidence.
+
+## Project Safety Policy
+
+The project safety policy lives at `.ur/safety-policy.json`. By default,
+autonomous safe mode requires sandbox coverage for write, execute, and network
+commands. Project owners who want to personally approve local network checks
+instead of hard-requiring sandbox network isolation can remove `network` from
+`sandboxRequiredFor`:
+
+```json
+{
+  "version": 1,
+  "sandboxRequiredFor": ["write", "execute"]
+}
+```
+
+That setting makes commands such as `curl -s http://localhost:8000/ | head -20`
+eligible for the normal permission flow instead of failing only because the
+sandbox is unavailable. Secret-file and destructive-command rules still apply
+unless explicitly changed by the project policy.
+
 ## CLI Flags
 
 Frequently used flags:

package/docs/IDE.md

@@ -84,7 +84,7 @@ searchable command palette.
 
 Install it with `ur ide install` (offers the bundled VSIX) or from the
 packaged `.vsix`. The extension is bundled inside this repository and
-packaged as a local VSIX when installed from UR-AGENT; the public install
+packaged as a local VSIX when installed from UR-Nexus; the public install
 path does not depend on an unpublished marketplace extension ID. Every
 feature below runs UR as a local subprocess and never talks to a model
 provider or network service directly.

package/docs/TROUBLESHOOTING.md

@@ -34,7 +34,7 @@ ur --version
   source checkouts — executes the CLI through Bun (this repository pins
   `bun@1.3.14`). The npm-installed `bin/ur.js` launcher starts under Node
   only to detect Bun and re-exec into it; if Bun is missing or too old, the
-  launcher prints `UR-AGENT requires Bun ... at runtime` and exits instead of
+  launcher prints `UR-Nexus requires Bun ... at runtime` and exits instead of
   falling back to Node.
 - Fix: install Bun, then rerun. Set `BUN_BIN` to an absolute Bun path if
   `bun` is installed but not on `PATH`.

package/docs/USAGE.md

@@ -88,7 +88,7 @@ use `ollama.host` in settings if you want plain `ur` to default to a LAN host.
 Models exposed by the chosen Ollama app are valid, including local models and
 Ollama Cloud-backed models.
 
-UR-AGENT also has explicit provider commands for legal access paths:
+UR-Nexus also has explicit provider commands for legal access paths:
 
 ```sh
 ur provider list
@@ -140,7 +140,7 @@ API modes are explicit. Keys are read from a key stored via
 `ur connect <provider>` (OS keychain) or from the environment variables
 `OPENAI_API_KEY`, `ANTHROPIC_API_KEY`, `GEMINI_API_KEY`, and
 `OPENROUTER_API_KEY`. Subscription CLIs are optional, never required
-dependencies, and never used as a silent fallback. UR-AGENT never scrapes
+dependencies, and never used as a silent fallback. UR-Nexus never scrapes
 browser sessions, extracts OAuth tokens, or bypasses provider restrictions.
 OpenAI-compatible local or cloud endpoints use `base_url` plus `model`.
 

package/docs/VALIDATION.md

@@ -19,7 +19,7 @@ You need:
 
 ```sh
 ur --version
-# expected: the version from package.json, e.g. "1.35.1 (UR-AGENT)"
+# expected: the version from package.json, e.g. "1.35.1 (UR-Nexus)"
 ```
 
 ## 0.1 Permission safety and context pack (1.19.0)

package/docs/plugins.md

@@ -1,6 +1,6 @@
-# UR-AGENT plugins
+# UR-Nexus plugins
 
-UR-AGENT plugins are trusted local extension bundles. They can contribute slash
+UR-Nexus plugins are trusted local extension bundles. They can contribute slash
 commands, MCP servers, executable skills, templates, validators, language
 adapters, LSP servers, hooks, output styles, and agents.
 
@@ -8,7 +8,7 @@ adapters, LSP servers, hooks, output styles, and agents.
 
 ```text
 plugins/
-  core/        # first-party plugins shipped with UR-AGENT
+  core/        # first-party plugins shipped with UR-Nexus
   community/   # contributed plugins staged for review
   examples/    # templates users can copy
 src/plugins/   # built-in plugin registration code
@@ -48,7 +48,7 @@ ur --plugin-dir ./plugins/community/my-plugin
 4. Set `capabilities` accurately so users know what the plugin enables.
 5. Run `bun test test/marketplaceTree.test.ts` before submitting.
 
-Plugins are loaded from local UR-AGENT paths first. Network marketplace installs
+Plugins are loaded from local UR-Nexus paths first. Network marketplace installs
 remain explicit user actions and are subject to plugin policy checks.
 
 ## Manifest reference

package/docs/providers.md

@@ -1,6 +1,6 @@
-# UR-AGENT providers
+# UR-Nexus providers
 
-UR-AGENT integrates official model access paths only. API-key providers, local
+UR-Nexus integrates official model access paths only. API-key providers, local
 runtimes, and OpenAI-compatible servers are UR-native backends: UR owns the
 conversation loop, native tool-call parsing, streaming, errors, and UR-run tool
 execution. Subscription CLI providers (Codex CLI, Claude Code, Gemini CLI,
@@ -11,7 +11,7 @@ silent fallback.
 
 ## Legal auth policy
 
-UR-AGENT never:
+UR-Nexus never:
 
 - scrapes browser cookies or browser sessions
 - extracts, copies, or reuses OAuth refresh tokens
@@ -20,7 +20,7 @@ UR-AGENT never:
 - proxies a consumer web session as an API
 - claims provider support unless the official CLI/API path works
 
-UR-AGENT stores only safe config: provider name, model name, base URL, fallback
+UR-Nexus stores only safe config: provider name, model name, base URL, fallback
 preference, and non-secret preferences. API keys are read from environment
 variables only when the user explicitly selects API mode.
 
@@ -108,7 +108,7 @@ ur config set provider.fallback ollama
 
 ## Provider-scoped model selection
 
-UR-AGENT shows providers first, then only models available for the selected provider. This prevents incompatible model/provider pairs and keeps API-key, local/server, subscription, and external app bridge model lists separate. The generic `subscription` entry has no models unless a real independent subscription runtime is configured; UR does not list fake subscription models.
+UR-Nexus shows providers first, then only models available for the selected provider. This prevents incompatible model/provider pairs and keeps API-key, local/server, subscription, and external app bridge model lists separate. The generic `subscription` entry has no models unless a real independent subscription runtime is configured; UR does not list fake subscription models.
 
 ## Runtime provider routing
 
@@ -282,7 +282,7 @@ command instead of silently switching providers.
 
 ### Validation
 
-When you set a model that is incompatible with the current provider, UR-AGENT shows an error:
+When you set a model that is incompatible with the current provider, UR-Nexus shows an error:
 
 ```
 Invalid model for current provider:
@@ -293,7 +293,7 @@ Invalid model for current provider:
   Error: Model "claude-sonnet-5" is not available for provider "openai-api".
 ```
 
-When you change providers, UR-AGENT warns if the current model is incompatible:
+When you change providers, UR-Nexus warns if the current model is incompatible:
 
 ```
 Warning: Current model "gpt-5.5" is not available for provider "anthropic-api" and will be cleared.
@@ -377,7 +377,7 @@ CLIs, official login status where available, API key presence for API providers,
 local endpoint reachability, detectable model availability, unsupported account
 type signals, and fallback configuration.
 
-Fallback is never silent by default. If the selected provider fails, UR-AGENT
+Fallback is never silent by default. If the selected provider fails, UR-Nexus
 reports the selected provider, failure reason, suggested fix, and configured
 fallback option.
 
@@ -389,11 +389,11 @@ fallback option.
   checks `claude auth status` when available. If `ANTHROPIC_API_KEY` is set,
   doctor warns that API-key mode may override subscription auth.
 - `gemini-cli`: launches only the official Gemini CLI flow. If the detected
-  path is an unsupported personal-account path, UR-AGENT prints a clear error.
+  path is an unsupported personal-account path, UR-Nexus prints a clear error.
 - `antigravity-cli`: detects official CLI commands including `agy --version`,
   `antigravity --version`, `google-antigravity --version`, or `ag --version`
   where installed. It launches only an installed official CLI command where
-  supported; UR-AGENT does not invent flags.
+  supported; UR-Nexus does not invent flags.
 
 ## API and local/server providers
 

package/documentation/README.md

@@ -1,6 +1,6 @@
-# UR-AGENT Documentation Site
+# UR-Nexus Documentation Site
 
-This folder is a static documentation project for UR-AGENT.
+This folder is a static documentation project for UR-Nexus.
 
 Open `index.html` directly in a browser. No build step or dev server is
 required.

package/documentation/app.js

@@ -72,7 +72,7 @@ const commands = [
     name: 'ur',
     category: 'Core',
     aliases: [],
-    summary: 'Start an interactive UR-AGENT session in the current workspace.',
+    summary: 'Start an interactive UR-Nexus session in the current workspace.',
     examples: ['ur', 'ur --model qwen3-coder:480b-cloud', 'ur --continue', 'ur --resume'],
   },
   {
@@ -268,7 +268,7 @@ const commands = [
     name: 'update',
     category: 'Ops',
     aliases: ['upgrade'],
-    summary: 'Check npm for UR-AGENT updates.',
+    summary: 'Check npm for UR-Nexus updates.',
     examples: ['ur update', 'ur upgrade'],
   },
   {
@@ -395,7 +395,7 @@ const commands = [
     category: 'Interop',
     aliases: ['embed'],
     summary: 'Show or scaffold examples for driving UR programmatically from TypeScript or Python.',
-    examples: ['ur sdk', 'ur sdk init', 'ur sdk init --force', "import { query } from 'ur-agent/sdk'"],
+    examples: ['ur sdk', 'ur sdk init', 'ur sdk init --force', "import { query } from 'ur-nexus/sdk'"],
   },
   {
     name: 'safety',
@@ -436,7 +436,7 @@ const commands = [
     name: 'update',
     category: 'Ops',
     aliases: ['upgrade'],
-    summary: 'Check npm for UR-AGENT updates. Interactive sessions also show an update-available notice when a newer package is published.',
+    summary: 'Check npm for UR-Nexus updates. Interactive sessions also show an update-available notice when a newer package is published.',
     examples: ['ur update', 'ur upgrade'],
   },
   {
@@ -713,7 +713,7 @@ const examples = [
   {
     title: 'SDK TypeScript',
     text: 'Drive UR from another Node program.',
-    code: "import { query } from 'ur-agent/sdk'\n\nconst result = await query('Review the current git diff', { maxTurns: 6 })\nconsole.log(result.text)",
+    code: "import { query } from 'ur-nexus/sdk'\n\nconst result = await query('Review the current git diff', { maxTurns: 6 })\nconsole.log(result.text)",
   },
   {
     title: 'Eval suite',

package/documentation/assets/ur-architecture.svg

@@ -1,5 +1,5 @@
 <svg xmlns="http://www.w3.org/2000/svg" width="1120" height="560" viewBox="0 0 1120 560" role="img" aria-labelledby="title desc">
-  <title id="title">UR-AGENT runtime architecture</title>
+  <title id="title">UR-Nexus runtime architecture</title>
   <desc id="desc">A diagram showing users, the UR CLI, project context, tools, agent orchestration, local Ollama models, and outputs.</desc>
   <defs>
     <linearGradient id="panel" x1="0" x2="1" y1="0" y2="1">

package/documentation/index.html

@@ -3,8 +3,8 @@
   <head>
     <meta charset="utf-8">
     <meta name="viewport" content="width=device-width, initial-scale=1">
-    <title>UR-AGENT Documentation</title>
-    <meta name="description" content="Professional documentation, tutorials, examples, and command reference for UR-AGENT.">
+    <title>UR-Nexus Documentation</title>
+    <meta name="description" content="Professional documentation, tutorials, examples, and command reference for UR-Nexus.">
     <link rel="stylesheet" href="styles.css">
   </head>
   <body>
@@ -14,7 +14,7 @@
       <div class="brand">
         <div class="brand-mark" aria-hidden="true">UR</div>
         <div>
-          <strong>UR-AGENT</strong>
+          <strong>UR-Nexus</strong>
           <span>Documentation</span>
         </div>
       </div>
@@ -44,9 +44,9 @@
     <main id="content" class="content">
       <header class="topbar">
         <div>
-          <p class="eyebrow">Version 1.37.3</p>
-          <h1>UR-AGENT Documentation</h1>
-          <p class="lead">A practical, tutorial-style reference for installing, configuring, automating, extending, and operating UR-AGENT.</p>
+          <p class="eyebrow">Version 1.40.0</p>
+          <h1>UR-Nexus Documentation</h1>
+          <p class="lead">A practical, tutorial-style reference for installing, configuring, automating, extending, and operating UR-Nexus.</p>
         </div>
         <div class="topbar-actions">
           <a class="button" href="#quickstart">Start</a>
@@ -136,7 +136,7 @@ ur -p --output-format json "Review the current diff"</code></pre>
         <div class="section-heading">
           <p class="eyebrow">Legal Access Paths</p>
           <h2>Providers and authentication</h2>
-          <p>UR-AGENT integrates official access paths only. It never scrapes browser sessions, extracts OAuth tokens, reads hidden provider auth files, bypasses provider restrictions, or proxies credentials.</p>
+          <p>UR-Nexus integrates official access paths only. It never scrapes browser sessions, extracts OAuth tokens, reads hidden provider auth files, bypasses provider restrictions, or proxies credentials.</p>
         </div>
         <div class="reference-grid">
           <article>
@@ -172,7 +172,7 @@ ur config set provider.fallback ollama</code></pre>
           <p>The CLI is the control plane. Project context and <code>.ur</code> assets feed agent orchestration, which uses approved provider adapters, local-first model runtimes, and approved tools to produce auditable results.</p>
         </div>
         <figure class="diagram">
-          <img src="assets/ur-architecture.svg" alt="UR-AGENT runtime architecture diagram">
+          <img src="assets/ur-architecture.svg" alt="UR-Nexus runtime architecture diagram">
         </figure>
       </section>
 

package/extensions/vscode-ur-inline-diffs/README.md

@@ -5,7 +5,7 @@ inline diff review, an actions panel, an agent status card, a searchable
 command palette, a provider/model picker, and an agent options panel — all
 backed by the `ur` CLI already on your machine.
 
-UR-AGENT packages this extension from the repository as a local VSIX when the
+UR-Nexus packages this extension from the repository as a local VSIX when the
 CLI installs the public IDE integration. It does not depend on an unpublished
 marketplace extension ID.
 

package/extensions/vscode-ur-inline-diffs/out/extension.js

@@ -2212,7 +2212,7 @@ function renderOptionsHtml(options) {
 </style>
 </head>
 <body>
-  <h1>UR Agent Options</h1>
+  <h1>UR-Nexus Options</h1>
   <p class="disclaimer">Based on local, curated data and the UR CLI's own provider registry only. This is not live market research and does not rank model quality.</p>
   <h2>Providers</h2>
   ${renderProviderTable(options)}
@@ -2248,7 +2248,7 @@ var AgentOptionsPanel = class _AgentOptionsPanel {
       _AgentOptionsPanel.current.panel.reveal(vscode12.ViewColumn.Active);
       return _AgentOptionsPanel.current;
     }
-    const panel = vscode12.window.createWebviewPanel("urAgentOptions", "UR Agent Options", vscode12.ViewColumn.Active, {
+    const panel = vscode12.window.createWebviewPanel("urAgentOptions", "UR-Nexus Options", vscode12.ViewColumn.Active, {
       enableScripts: true
     });
     const instance = new _AgentOptionsPanel(panel, onRefresh);
@@ -2494,7 +2494,7 @@ function renderStatusHtml(status) {
 </style>
 </head>
 <body>
-  <h1>UR Agent Status</h1>
+  <h1>UR-Nexus Status</h1>
   ${row("UR version", status.urVersion)}
   ${row("Workspace root", status.workspaceRoot)}
   ${row("Provider", status.provider.label)}
@@ -2545,7 +2545,7 @@ var StatusPanel = class _StatusPanel {
       _StatusPanel.current.panel.reveal(vscode15.ViewColumn.Active);
       return _StatusPanel.current;
     }
-    const panel = vscode15.window.createWebviewPanel("urAgentStatus", "UR Agent Status", vscode15.ViewColumn.Active, {
+    const panel = vscode15.window.createWebviewPanel("urAgentStatus", "UR-Nexus Status", vscode15.ViewColumn.Active, {
       enableScripts: true
     });
     const instance = new _StatusPanel(panel, onRefresh);

package/extensions/vscode-ur-inline-diffs/package.json

@@ -2,8 +2,8 @@
   "name": "ur-inline-diffs",
   "displayName": "UR Inline Diffs",
   "description": "Review, apply, and reject UR inline diff bundles from .ur/ide/diffs inside VS Code.",
-  "version": "1.37.3",
-  "publisher": "ur-agent",
+  "version": "1.40.0",
+  "publisher": "ur-nexus",
   "engines": {
     "vscode": "^1.92.0"
   },

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ur-agent",
-  "version": "1.37.3",
-  "description": "UR-AGENT \u2014 autonomous engineering workflow engine (plan, execute, test, verify, document, benchmark, reproduce)",
+  "version": "1.40.0",
+  "description": "UR-Nexus — autonomous engineering workflow engine (plan, execute, test, verify, document, benchmark, reproduce)",
   "type": "module",
   "packageManager": "bun@1.3.14",
   "engines": {
@@ -16,7 +16,7 @@
     "url": "https://github.com/Maitham16/UR/issues"
   },
   "homepage": "https://github.com/Maitham16/UR#readme",
-  "license": "LicenseRef-UR-AGENT-Non-Commercial-Self-Responsibility",
+  "license": "LicenseRef-UR-Nexus-Non-Commercial-Self-Responsibility",
   "keywords": [
     "agent",
     "cli",
@@ -82,9 +82,9 @@
     "@opentelemetry/api-logs": "0.214.0",
     "@opentelemetry/core": "2.6.1",
     "@opentelemetry/resources": "2.6.1",
-    "@opentelemetry/sdk-logs": "0.214.0",
-    "@opentelemetry/sdk-metrics": "2.6.1",
-    "@opentelemetry/sdk-trace-base": "2.6.1",
+    "@opentelemetry/sdk-logs": "^0.220.0",
+    "@opentelemetry/sdk-metrics": "^2.9.0",
+    "@opentelemetry/sdk-trace-base": "^2.9.0",
     "@opentelemetry/semantic-conventions": "1.40.0",
     "@smithy/node-http-handler": "^4.8.2",
     "@types/diff": "^7.0.0",
@@ -110,7 +110,7 @@
     "code-excerpt": "^4.0.0",
     "color-diff-napi": "^0.0.1",
     "commander": "^13.1.0",
-    "diff": "^7.0.0",
+    "diff": "^9.0.0",
     "emoji-regex": "^10.4.0",
     "env-paths": "^3.0.0",
     "execa": "^9.5.0",

package/plugins/examples/README.md

@@ -1,6 +1,6 @@
-# UR-AGENT plugin examples
+# UR-Nexus plugin examples
 
-This directory contains templates for local UR-AGENT plugins. Copy an example
+This directory contains templates for local UR-Nexus plugins. Copy an example
 directory, edit its `.ur-plugin/plugin.json`, and install it with:
 
 ```bash

package/plugins/examples/command-template/README.md

@@ -1,6 +1,6 @@
 # Command Template
 
-Minimal local UR-AGENT plugin template.
+Minimal local UR-Nexus plugin template.
 
 ```bash
 ur --plugin-dir ./plugins/examples/command-template

package/plugins/examples/command-template/commands/example.md

@@ -1,5 +1,5 @@
 ---
-description: Demonstrate a minimal UR-AGENT plugin command.
+description: Demonstrate a minimal UR-Nexus plugin command.
 argument-hint: "[optional context]"
 ---