ur-agent 1.45.2 → 1.45.4

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## 1.45.4
+
+- Added mandatory provider-first model selection for the first interactive run
+  in every workspace that has no project-local model. The validated provider
+  and model pair is saved to `.ur/settings.local.json` before the REPL starts.
+- Prevented user-global and built-in defaults from silently choosing a model
+  for a fresh folder. Explicit CLI/environment, shared project, flag, managed,
+  agent, and restored-session model choices continue without interruption.
+- Made fresh headless workspaces fail before model execution with actionable
+  guidance to run the picker or pass `--model <model>`; initialization-only and
+  resume flows remain non-blocking. AutoApprove behavior is unchanged.
+
+## 1.45.3
+
+- Made slash-command resolution deterministic across bundled skills, plugins,
+  project skills, workflows, and built-ins. Duplicate canonical tokens are
+  rejected by source priority and conflicting aliases are removed; registry
+  tests now verify every shipped command token, description, and lazy loader.
+- Removed overlapping `/paper`, `/security`, `/audit`, `/skills`, and
+  `/sandbox` registrations. The single `/sandbox` command now provides both
+  interactive settings and `status`, `check`, `init`, `eval`, and `exclude`
+  subcommands.
+- Added `/ci-loop --cwd <path>` and working-directory evidence. Test-runner
+  "No tests found" failures now stop after one attempt with actionable cwd
+  guidance instead of invoking a fix agent repeatedly.
+- Serialized concurrent artifact-viewer startup so simultaneous callers share
+  one server and one reported URL.
+- Synchronized the user guides, static documentation site, and technical
+  specifications with the final command counts, source-priority rules,
+  `/skill` versus `/skills`, merged `/sandbox`, CI cwd behavior, and explicit
+  worktree publishing contract.
+
 ## 1.45.2
 
 Correctness and containment release completing the runtime audit.

package/README.md

@@ -214,16 +214,19 @@ Development build detected. To update, pull latest source or install from npm.
 Choose a model or Ollama host:
 
 ```sh
+ur                              # first run opens provider/model selection
 ur --model qwen2.5-coder:7b
 ur --ollama-host http://192.168.1.50:11434
 ur --discover-ollama
 ```
 
-For Ollama sessions, model selection precedence is `OLLAMA_MODEL`, then
-`UR_MODEL`, then the model router over the configured Ollama host. Once a
-provider/model pair is selected with `/model` or `ur config set`, runtime
-requests use that provider backend; they do not fall back to Ollama unless
-`ollama` is the selected provider.
+A fresh workspace never silently inherits a user-global or built-in model.
+Interactive `ur` requires a provider/model choice and stores it in the
+gitignored `.ur/settings.local.json`. Fresh print-mode runs require an explicit
+`--model`, `OLLAMA_MODEL`, `UR_MODEL`, workspace setting, or managed setting.
+For Ollama sessions, explicit environment precedence is `OLLAMA_MODEL`, then
+`UR_MODEL`. Once selected, runtime requests use that provider backend; they do
+not fall back to Ollama unless `ollama` is the selected provider.
 
 ### Legal Provider Auth
 
@@ -362,7 +365,7 @@ as first-class subcommands in the shipped CLI.
 | `ur spec` | Default spec-first workflow: create requirements, design, and task documents under `.ur/specs/`, run the task list, and verify with strict proof gates. |
 | `ur escalate` | Plan or run work with fast and oracle model tiers selected from local model capabilities. |
 | `ur arena` | Run multiple agents on the same task in isolated worktrees and surface the winning diff. |
-| `ur ci-loop` | Run a build or test command, hand failures to a fix agent, and retry with a bounded budget. |
+| `ur ci-loop` | Run a build or test command in an explicit working directory, hand failures to a fix agent, and retry with a bounded budget. |
 | `ur test-first` | Detect the project stack, run compile/test/lint commands, store failure traces, and install edit-time verify gates. |
 | `ur safety` | Inspect or initialize project shell safety policy and evaluate command risk before execution. |
 | `ur sandbox` | Inspect and manage the sandbox/permission architecture: status, dependency check, policy init, and command approval levels. |
@@ -556,7 +559,7 @@ ur context-pack remember --accepted "Use p-map for bounded concurrency" --scope
 ur context-pack remember --rejected "Switch to esbuild" --alternative-to "Keep bun bundle"
 ur context-pack remember --attempt "Tried Deno runtime" --status superseded
 ur context-pack compress
-ur ci-loop --command "bun test" --max-attempts 3 --dry-run
+ur ci-loop --command "bun test" --cwd . --max-attempts 3 --dry-run
 ur bg run "fix the flaky parser test" --worktree --dry-run
 ur automation create nightly --schedule "0 9 * * 1-5" --prompt "Review open tasks"
 ur repo-edit preview rename oldName --to newName