ur-agent 1.45.3 → 1.45.4

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 1.45.4
+
+- Added mandatory provider-first model selection for the first interactive run
+  in every workspace that has no project-local model. The validated provider
+  and model pair is saved to `.ur/settings.local.json` before the REPL starts.
+- Prevented user-global and built-in defaults from silently choosing a model
+  for a fresh folder. Explicit CLI/environment, shared project, flag, managed,
+  agent, and restored-session model choices continue without interruption.
+- Made fresh headless workspaces fail before model execution with actionable
+  guidance to run the picker or pass `--model <model>`; initialization-only and
+  resume flows remain non-blocking. AutoApprove behavior is unchanged.
+
 ## 1.45.3
 
 - Made slash-command resolution deterministic across bundled skills, plugins,
@@ -15,6 +27,10 @@
   guidance instead of invoking a fix agent repeatedly.
 - Serialized concurrent artifact-viewer startup so simultaneous callers share
   one server and one reported URL.
+- Synchronized the user guides, static documentation site, and technical
+  specifications with the final command counts, source-priority rules,
+  `/skill` versus `/skills`, merged `/sandbox`, CI cwd behavior, and explicit
+  worktree publishing contract.
 
 ## 1.45.2
 

package/README.md

@@ -214,16 +214,19 @@ Development build detected. To update, pull latest source or install from npm.
 Choose a model or Ollama host:
 
 ```sh
+ur                              # first run opens provider/model selection
 ur --model qwen2.5-coder:7b
 ur --ollama-host http://192.168.1.50:11434
 ur --discover-ollama
 ```
 
-For Ollama sessions, model selection precedence is `OLLAMA_MODEL`, then
-`UR_MODEL`, then the model router over the configured Ollama host. Once a
-provider/model pair is selected with `/model` or `ur config set`, runtime
-requests use that provider backend; they do not fall back to Ollama unless
-`ollama` is the selected provider.
+A fresh workspace never silently inherits a user-global or built-in model.
+Interactive `ur` requires a provider/model choice and stores it in the
+gitignored `.ur/settings.local.json`. Fresh print-mode runs require an explicit
+`--model`, `OLLAMA_MODEL`, `UR_MODEL`, workspace setting, or managed setting.
+For Ollama sessions, explicit environment precedence is `OLLAMA_MODEL`, then
+`UR_MODEL`. Once selected, runtime requests use that provider backend; they do
+not fall back to Ollama unless `ollama` is the selected provider.
 
 ### Legal Provider Auth
 

package/dist/cli.js

@@ -61538,8 +61538,9 @@ function __resetOllamaRouteMemoForTests() {
   memoizedRoutedFastModel = undefined;
 }
 function getDefaultOllamaModel() {
-  if (process.env.OLLAMA_MODEL) {
-    return process.env.OLLAMA_MODEL;
+  const explicitModel = process.env.OLLAMA_MODEL || process.env.UR_MODEL;
+  if (explicitModel) {
+    return explicitModel;
   }
   if (isOllamaAutoRouteEnabled()) {
     if (memoizedRoutedDefaultModel)
@@ -73086,7 +73087,7 @@ var init_auth = __esm(() => {
 
 // src/utils/userAgent.ts
 function getURCodeUserAgent() {
-  return `ur/${"1.45.3"}`;
+  return `ur/${"1.45.4"}`;
 }
 
 // src/utils/workloadContext.ts
@@ -73108,7 +73109,7 @@ function getUserAgent() {
   const clientApp = process.env.UR_AGENT_SDK_CLIENT_APP ? `, client-app/${process.env.UR_AGENT_SDK_CLIENT_APP}` : "";
   const workload = getWorkload();
   const workloadSuffix = workload ? `, workload/${workload}` : "";
-  return `ur-cli/${"1.45.3"} (${process.env.USER_TYPE}, ${process.env.UR_CODE_ENTRYPOINT ?? "cli"}${agentSdkVersion}${clientApp}${workloadSuffix})`;
+  return `ur-cli/${"1.45.4"} (${process.env.USER_TYPE}, ${process.env.UR_CODE_ENTRYPOINT ?? "cli"}${agentSdkVersion}${clientApp}${workloadSuffix})`;
 }
 function getMCPUserAgent() {
   const parts = [];
@@ -73122,7 +73123,7 @@ function getMCPUserAgent() {
     parts.push(`client-app/${process.env.UR_AGENT_SDK_CLIENT_APP}`);
   }
   const suffix = parts.length > 0 ? ` (${parts.join(", ")})` : "";
-  return `ur/${"1.45.3"}${suffix}`;
+  return `ur/${"1.45.4"}${suffix}`;
 }
 function getWebFetchUserAgent() {
   return `UR-User (${getURCodeUserAgent()})`;
@@ -73260,7 +73261,7 @@ var init_user = __esm(() => {
       deviceId,
       sessionId: getSessionId(),
       email: getEmail(),
-      appVersion: "1.45.3",
+      appVersion: "1.45.4",
       platform: getHostPlatformForAnalytics(),
       organizationUuid,
       accountUuid,
@@ -79835,7 +79836,7 @@ var init_metadata = __esm(() => {
   COMPOUND_OPERATOR_REGEX = /\s*(?:&&|\|\||[;|])\s*/;
   WHITESPACE_REGEX = /\s+/;
   getVersionBase = memoize_default(() => {
-    const match = "1.45.3".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
+    const match = "1.45.4".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
     return match ? match[0] : undefined;
   });
   buildEnvContext = memoize_default(async () => {
@@ -79875,7 +79876,7 @@ var init_metadata = __esm(() => {
       isGithubAction: isEnvTruthy(process.env.GITHUB_ACTIONS),
       isURCodeAction: isEnvTruthy(process.env.UR_CODE_ACTION),
       isURAiAuth: isURAISubscriber(),
-      version: "1.45.3",
+      version: "1.45.4",
       versionBase: getVersionBase(),
       buildTime: "",
       deploymentEnvironment: env2.detectDeploymentEnvironment(),
@@ -80545,7 +80546,7 @@ function initialize1PEventLogging() {
   const platform2 = getPlatform();
   const attributes = {
     [import_semantic_conventions4.ATTR_SERVICE_NAME]: "ur",
-    [import_semantic_conventions4.ATTR_SERVICE_VERSION]: "1.45.3"
+    [import_semantic_conventions4.ATTR_SERVICE_VERSION]: "1.45.4"
   };
   if (platform2 === "wsl") {
     const wslVersion = getWslVersion();
@@ -80572,7 +80573,7 @@ function initialize1PEventLogging() {
       })
     ]
   });
-  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.urhq.ur.events", "1.45.3");
+  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.urhq.ur.events", "1.45.4");
 }
 async function reinitialize1PEventLoggingIfConfigChanged() {
   if (!is1PEventLoggingEnabled() || !firstPartyEventLoggerProvider) {
@@ -86497,7 +86498,7 @@ function formatAgentTrendReport(report = buildAgentTrendReport()) {
 function formatA2AAgentCard(options = {}, pretty = true) {
   return JSON.stringify(buildA2AAgentCard(options), null, pretty ? 2 : 0);
 }
-var urVersion = "1.45.3", coverage, priorityRoadmap;
+var urVersion = "1.45.4", coverage, priorityRoadmap;
 var init_trends = __esm(() => {
   coverage = [
     {
@@ -88363,7 +88364,7 @@ function getAttributionHeader(fingerprint) {
   if (!isAttributionHeaderEnabled()) {
     return "";
   }
-  const version2 = `${"1.45.3"}.${fingerprint}`;
+  const version2 = `${"1.45.4"}.${fingerprint}`;
   const entrypoint = process.env.UR_CODE_ENTRYPOINT ?? "unknown";
   const cch = "";
   const workload = getWorkload();
@@ -196544,7 +196545,7 @@ function getTelemetryAttributes() {
     attributes["session.id"] = sessionId;
   }
   if (shouldIncludeAttribute("OTEL_METRICS_INCLUDE_VERSION")) {
-    attributes["app.version"] = "1.45.3";
+    attributes["app.version"] = "1.45.4";
   }
   const oauthAccount = getOauthAccountInfo();
   if (oauthAccount) {
@@ -232025,7 +232026,7 @@ function getInstallationEnv() {
   return;
 }
 function getURCodeVersion() {
-  return "1.45.3";
+  return "1.45.4";
 }
 async function getInstalledVSCodeExtensionVersion(command) {
   const { stdout } = await execFileNoThrow(command, ["--list-extensions", "--show-versions"], {
@@ -239407,7 +239408,7 @@ async function setupSdkMcpClients(sdkMcpConfigs, sendMcpMessage) {
     const client2 = new Client({
       name: "ur",
       title: "UR",
-      version: "1.45.3",
+      version: "1.45.4",
       description: "UR-Nexus autonomous engineering workflow engine",
       websiteUrl: PRODUCT_URL
     }, {
@@ -239770,7 +239771,7 @@ var init_client5 = __esm(() => {
       const client2 = new Client({
         name: "ur",
         title: "UR",
-        version: "1.45.3",
+        version: "1.45.4",
         description: "UR-Nexus autonomous engineering workflow engine",
         websiteUrl: PRODUCT_URL
       }, {
@@ -246807,9 +246808,9 @@ async function assertMinVersion() {
   if (false) {}
   try {
     const versionConfig = await getDynamicConfig_BLOCKS_ON_INIT("tengu_version_config", { minVersion: "0.0.0" });
-    if (versionConfig.minVersion && lt("1.45.3", versionConfig.minVersion)) {
+    if (versionConfig.minVersion && lt("1.45.4", versionConfig.minVersion)) {
       console.error(`
-It looks like your version of UR (${"1.45.3"}) needs an update.
+It looks like your version of UR (${"1.45.4"}) needs an update.
 A newer version (${versionConfig.minVersion} or higher) is required to continue.
 
 To update, please run:
@@ -247025,7 +247026,7 @@ async function installGlobalPackage(specificVersion) {
     logError2(new AutoUpdaterError("Another process is currently installing an update"));
     logEvent("tengu_auto_updater_lock_contention", {
       pid: process.pid,
-      currentVersion: "1.45.3"
+      currentVersion: "1.45.4"
     });
     return "in_progress";
   }
@@ -247034,7 +247035,7 @@ async function installGlobalPackage(specificVersion) {
     if (!env2.isRunningWithBun() && env2.isNpmFromWindowsPath()) {
       logError2(new Error("Windows NPM detected in WSL environment"));
       logEvent("tengu_auto_updater_windows_npm_in_wsl", {
-        currentVersion: "1.45.3"
+        currentVersion: "1.45.4"
       });
       console.error(`
 Error: Windows NPM detected in WSL
@@ -247569,7 +247570,7 @@ function detectLinuxGlobPatternWarnings() {
 }
 async function getDoctorDiagnostic() {
   const installationType = await getCurrentInstallationType();
-  const version2 = typeof MACRO !== "undefined" ? "1.45.3" : "unknown";
+  const version2 = typeof MACRO !== "undefined" ? "1.45.4" : "unknown";
   const installationPath = await getInstallationPath();
   const invokedBinary = getInvokedBinary();
   const multipleInstallations = await detectMultipleInstallations();
@@ -248504,8 +248505,8 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
     const maxVersion = await getMaxVersion();
     if (maxVersion && gt(version2, maxVersion)) {
       logForDebugging(`Native installer: maxVersion ${maxVersion} is set, capping update from ${version2} to ${maxVersion}`);
-      if (gte("1.45.3", maxVersion)) {
-        logForDebugging(`Native installer: current version ${"1.45.3"} is already at or above maxVersion ${maxVersion}, skipping update`);
+      if (gte("1.45.4", maxVersion)) {
+        logForDebugging(`Native installer: current version ${"1.45.4"} is already at or above maxVersion ${maxVersion}, skipping update`);
         logEvent("tengu_native_update_skipped_max_version", {
           latency_ms: Date.now() - startTime,
           max_version: maxVersion,
@@ -248516,7 +248517,7 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
       version2 = maxVersion;
     }
   }
-  if (!forceReinstall && version2 === "1.45.3" && await versionIsAvailable(version2) && await isPossibleURBinary(executablePath)) {
+  if (!forceReinstall && version2 === "1.45.4" && await versionIsAvailable(version2) && await isPossibleURBinary(executablePath)) {
     logForDebugging(`Found ${version2} at ${executablePath}, skipping install`);
     logEvent("tengu_native_update_complete", {
       latency_ms: Date.now() - startTime,
@@ -346376,7 +346377,7 @@ function Feedback({
       platform: env2.platform,
       gitRepo: envInfo.isGit,
       terminal: env2.terminal,
-      version: "1.45.3",
+      version: "1.45.4",
       transcript: normalizeMessagesForAPI(messages),
       errors: sanitizedErrors,
       lastApiRequest: getLastAPIRequest(),
@@ -346568,7 +346569,7 @@ function Feedback({
                       ", ",
                       env2.terminal,
                       ", v",
-                      "1.45.3"
+                      "1.45.4"
                     ]
                   }, undefined, true, undefined, this)
                 ]
@@ -346674,7 +346675,7 @@ ${sanitizedDescription}
 ` + `**Environment Info**
 ` + `- Platform: ${env2.platform}
 ` + `- Terminal: ${env2.terminal}
-` + `- Version: ${"1.45.3"}
+` + `- Version: ${"1.45.4"}
 ` + `- Feedback ID: ${feedbackId}
 ` + `
 **Errors**
@@ -349785,7 +349786,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "1.45.3"
+    value: "1.45.4"
   }, {
     label: "Session name",
     value: nameValue
@@ -353115,7 +353116,7 @@ function Config({
         }
       }, undefined, false, undefined, this)
     }, undefined, false, undefined, this) : showSubmenu === "ChannelDowngrade" ? /* @__PURE__ */ jsx_dev_runtime178.jsxDEV(ChannelDowngradeDialog, {
-      currentVersion: "1.45.3",
+      currentVersion: "1.45.4",
       onChoice: (choice) => {
         setShowSubmenu(null);
         setTabsHidden(false);
@@ -353127,7 +353128,7 @@ function Config({
           autoUpdatesChannel: "stable"
         };
         if (choice === "stay") {
-          newSettings.minimumVersion = "1.45.3";
+          newSettings.minimumVersion = "1.45.4";
         }
         updateSettingsForSource("userSettings", newSettings);
         setSettingsData((prev_27) => ({
@@ -361197,7 +361198,7 @@ function HelpV2(t0) {
   let t6;
   if ($3[31] !== tabs) {
     t6 = /* @__PURE__ */ jsx_dev_runtime205.jsxDEV(Tabs, {
-      title: `UR v${"1.45.3"}`,
+      title: `UR v${"1.45.4"}`,
       color: "professionalBlue",
       defaultTab: "general",
       children: tabs
@@ -361971,7 +361972,7 @@ function buildToolUseContext(tools, readFileStateCache) {
 async function handleInitialize(options2) {
   return {
     name: "UR",
-    version: "1.45.3",
+    version: "1.45.4",
     protocolVersion: "0.1.0",
     workspaceRoot: options2.cwd,
     capabilities: {
@@ -382113,7 +382114,7 @@ function getAllReleaseNotes(changelogContent = getStoredChangelogFromMemory()) {
     return [];
   }
 }
-async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.45.3") {
+async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.45.4") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -382140,7 +382141,7 @@ async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.45.3")
     releaseNotes
   };
 }
-function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.45.3") {
+function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.45.4") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -385232,7 +385233,7 @@ function getRecentActivitySync() {
   return cachedActivity;
 }
 function getLogoDisplayData() {
-  const version2 = process.env.DEMO_VERSION ?? "1.45.3";
+  const version2 = process.env.DEMO_VERSION ?? "1.45.4";
   const serverUrl = getDirectConnectServerUrl();
   const displayPath = process.env.DEMO_VERSION ? "/code/ur" : getDisplayPath(getCwd());
   const cwd2 = serverUrl ? `${displayPath} in ${serverUrl.replace(/^https?:\/\//, "")}` : displayPath;
@@ -386116,7 +386117,7 @@ function LogoV2() {
   if ($3[2] === Symbol.for("react.memo_cache_sentinel")) {
     t2 = () => {
       const currentConfig2 = getGlobalConfig();
-      if (currentConfig2.lastReleaseNotesSeen === "1.45.3") {
+      if (currentConfig2.lastReleaseNotesSeen === "1.45.4") {
         return;
       }
       saveGlobalConfig(_temp327);
@@ -386801,12 +386802,12 @@ function LogoV2() {
   return t41;
 }
 function _temp327(current) {
-  if (current.lastReleaseNotesSeen === "1.45.3") {
+  if (current.lastReleaseNotesSeen === "1.45.4") {
     return current;
   }
   return {
     ...current,
-    lastReleaseNotesSeen: "1.45.3"
+    lastReleaseNotesSeen: "1.45.4"
   };
 }
 function _temp243(s_0) {
@@ -604849,7 +604850,7 @@ async function captureMemoryDiagnostics(trigger2, dumpNumber = 0) {
     smapsRollup,
     platform: process.platform,
     nodeVersion: process.version,
-    ccVersion: "1.45.3"
+    ccVersion: "1.45.4"
   };
 }
 async function performHeapDump(trigger2 = "manual", dumpNumber = 0) {
@@ -605435,7 +605436,7 @@ var init_bridge_kick = __esm(() => {
 var call143 = async () => {
   return {
     type: "text",
-    value: "1.45.3"
+    value: "1.45.4"
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -616545,7 +616546,7 @@ function generateHtmlReport(data, insights) {
 </html>`;
 }
 function buildExportData(data, insights, facets, remoteStats) {
-  const version3 = typeof MACRO !== "undefined" ? "1.45.3" : "unknown";
+  const version3 = typeof MACRO !== "undefined" ? "1.45.4" : "unknown";
   const remote_hosts_collected = remoteStats?.hosts.filter((h2) => h2.sessionCount > 0).map((h2) => h2.name);
   const facets_summary = {
     total: facets.size,
@@ -620874,7 +620875,7 @@ var init_sessionStorage = __esm(() => {
   init_settings2();
   init_slowOperations();
   init_uuid();
-  VERSION5 = typeof MACRO !== "undefined" ? "1.45.3" : "unknown";
+  VERSION5 = typeof MACRO !== "undefined" ? "1.45.4" : "unknown";
   MAX_TOMBSTONE_REWRITE_BYTES = 50 * 1024 * 1024;
   SKIP_FIRST_PROMPT_PATTERN = /^(?:\s*<[a-z][\w-]*[\s>]|\[Request interrupted by user[^\]]*\])/;
   EPHEMERAL_PROGRESS_TYPES = new Set([
@@ -622079,7 +622080,7 @@ var init_filesystem = __esm(() => {
   });
   getBundledSkillsRoot = memoize_default(function getBundledSkillsRoot2() {
     const nonce = randomBytes18(16).toString("hex");
-    return join211(getURTempDir(), "bundled-skills", "1.45.3", nonce);
+    return join211(getURTempDir(), "bundled-skills", "1.45.4", nonce);
   });
   getResolvedWorkingDirPaths = memoize_default(getPathsForPermissionCheck);
 });
@@ -628374,7 +628375,7 @@ function computeFingerprint(messageText2, version3) {
 }
 function computeFingerprintFromMessages(messages) {
   const firstMessageText = extractFirstMessageText(messages);
-  return computeFingerprint(firstMessageText, "1.45.3");
+  return computeFingerprint(firstMessageText, "1.45.4");
 }
 var FINGERPRINT_SALT = "59cf53e54c78";
 var init_fingerprint = () => {};
@@ -630248,7 +630249,7 @@ async function sideQuery(opts) {
     betas.push(STRUCTURED_OUTPUTS_BETA_HEADER);
   }
   const messageText2 = extractFirstUserMessageText(messages);
-  const fingerprint2 = computeFingerprint(messageText2, "1.45.3");
+  const fingerprint2 = computeFingerprint(messageText2, "1.45.4");
   const attributionHeader = getAttributionHeader(fingerprint2);
   const systemBlocks = [
     attributionHeader ? { type: "text", text: attributionHeader } : null,
@@ -634985,7 +634986,7 @@ function buildSystemInitMessage(inputs) {
     slash_commands: inputs.commands.filter((c4) => c4.userInvocable !== false).map((c4) => c4.name),
     apiKeySource: getURHQApiKeyWithSource().source,
     betas: getSdkBetas(),
-    ur_version: "1.45.3",
+    ur_version: "1.45.4",
     output_style: outputStyle2,
     agents: inputs.agents.map((agent) => agent.agentType),
     skills: inputs.skills.filter((s) => s.userInvocable !== false).map((skill2) => skill2.name),
@@ -648845,7 +648846,7 @@ var init_useVoiceEnabled = __esm(() => {
 function getSemverPart(version3) {
   return `${import_semver13.major(version3, { loose: true })}.${import_semver13.minor(version3, { loose: true })}.${import_semver13.patch(version3, { loose: true })}`;
 }
-function useUpdateNotification(updatedVersion, initialVersion = "1.45.3") {
+function useUpdateNotification(updatedVersion, initialVersion = "1.45.4") {
   const [lastNotifiedSemver, setLastNotifiedSemver] = import_react228.useState(() => getSemverPart(initialVersion));
   if (!updatedVersion) {
     return null;
@@ -648894,7 +648895,7 @@ function AutoUpdater({
       return;
     }
     if (false) {}
-    const currentVersion = "1.45.3";
+    const currentVersion = "1.45.4";
     const channel = getInitialSettings()?.autoUpdatesChannel ?? "latest";
     let latestVersion = await getLatestVersion(channel);
     const isDisabled = isAutoUpdaterDisabled();
@@ -649123,12 +649124,12 @@ function NativeAutoUpdater({
     logEvent("tengu_native_auto_updater_start", {});
     try {
       const maxVersion = await getMaxVersion();
-      if (maxVersion && gt("1.45.3", maxVersion)) {
+      if (maxVersion && gt("1.45.4", maxVersion)) {
         const msg = await getMaxVersionMessage();
         setMaxVersionIssue(msg ?? "affects your version");
       }
       const result = await installLatest(channel);
-      const currentVersion = "1.45.3";
+      const currentVersion = "1.45.4";
       const latencyMs = Date.now() - startTime;
       if (result.lockFailed) {
         logEvent("tengu_native_auto_updater_lock_contention", {
@@ -649265,17 +649266,17 @@ function PackageManagerAutoUpdater(t0) {
       const maxVersion = await getMaxVersion();
       if (maxVersion && latest && gt(latest, maxVersion)) {
         logForDebugging(`PackageManagerAutoUpdater: maxVersion ${maxVersion} is set, capping update from ${latest} to ${maxVersion}`);
-        if (gte("1.45.3", maxVersion)) {
-          logForDebugging(`PackageManagerAutoUpdater: current version ${"1.45.3"} is already at or above maxVersion ${maxVersion}, skipping update`);
+        if (gte("1.45.4", maxVersion)) {
+          logForDebugging(`PackageManagerAutoUpdater: current version ${"1.45.4"} is already at or above maxVersion ${maxVersion}, skipping update`);
           setUpdateAvailable(false);
           return;
         }
         latest = maxVersion;
       }
-      const hasUpdate = latest && !gte("1.45.3", latest) && !shouldSkipVersion(latest);
+      const hasUpdate = latest && !gte("1.45.4", latest) && !shouldSkipVersion(latest);
       setUpdateAvailable(!!hasUpdate);
       if (hasUpdate) {
-        logForDebugging(`PackageManagerAutoUpdater: Update available ${"1.45.3"} -> ${latest}`);
+        logForDebugging(`PackageManagerAutoUpdater: Update available ${"1.45.4"} -> ${latest}`);
       }
     };
     $3[0] = t1;
@@ -649309,7 +649310,7 @@ function PackageManagerAutoUpdater(t0) {
       wrap: "truncate",
       children: [
         "currentVersion: ",
-        "1.45.3"
+        "1.45.4"
       ]
     }, undefined, true, undefined, this);
     $3[3] = verbose;
@@ -660006,7 +660007,7 @@ function buildStatusLineCommandInput(permissionMode, exceeds200kTokens, settings
       project_dir: getOriginalCwd(),
       added_dirs: addedDirs
     },
-    version: "1.45.3",
+    version: "1.45.4",
     output_style: {
       name: outputStyleName
     },
@@ -660089,7 +660090,7 @@ function StatusLineInner({
   const taskValues = Object.values(tasks2);
   const taskRunningCount = taskValues.filter((task2) => task2.status === "running" || task2.status === "pending").length;
   const defaultStatusLineText = buildDefaultStatusBar({
-    version: "1.45.3",
+    version: "1.45.4",
     providerLabel: providerRuntime.providerLabel,
     authMode: providerRuntime.authLabel,
     model: providerRuntime.model ?? renderModelName(mainLoopModel),
@@ -672082,7 +672083,7 @@ async function submitTranscriptShare(messages, trigger2, appearanceId) {
     } catch {}
     const data = {
       trigger: trigger2,
-      version: "1.45.3",
+      version: "1.45.4",
       platform: process.platform,
       transcript,
       subagentTranscripts: Object.keys(subagentTranscripts).length > 0 ? subagentTranscripts : undefined,
@@ -684368,7 +684369,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "1.45.3"
+              "1.45.4"
             ]
           }, undefined, true, undefined, this)
         ]
@@ -685628,7 +685629,7 @@ function completeOnboarding() {
   saveGlobalConfig((current) => ({
     ...current,
     hasCompletedOnboarding: true,
-    lastOnboardingVersion: "1.45.3"
+    lastOnboardingVersion: "1.45.4"
   }));
 }
 function showDialog(root2, renderer) {
@@ -689975,6 +689976,23 @@ var init_ollamaDiscovery = __esm(() => {
   init_ollamaModels();
 });
 
+// src/services/providers/startupModelSelection.ts
+function isNonEmptyModel(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
+function settingsSelectModel(settings) {
+  return isNonEmptyModel(settings?.provider?.model) || isNonEmptyModel(settings?.model);
+}
+function shouldRequireStartupModelSelection(context4) {
+  if (context4.isResume || context4.skipsModelExecution)
+    return false;
+  if (context4.explicitModels?.some(isNonEmptyModel))
+    return false;
+  if (context4.workspaceSettings?.some(settingsSelectModel))
+    return false;
+  return true;
+}
+
 // src/utils/telemetry/skillLoadedEvent.ts
 async function logSkillsLoaded(cwd2, contextWindowTokens) {
   const skills2 = await getSkillToolCommands(cwd2);
@@ -690633,7 +690651,7 @@ function appendToLog(path24, message) {
     cwd: getFsImplementation().cwd(),
     userType: process.env.USER_TYPE,
     sessionId: getSessionId(),
-    version: "1.45.3"
+    version: "1.45.4"
   };
   getLogWriter(path24).write(messageWithTimestamp);
 }
@@ -694792,8 +694810,8 @@ async function getEnvLessBridgeConfig() {
 }
 async function checkEnvLessBridgeMinVersion() {
   const cfg = await getEnvLessBridgeConfig();
-  if (cfg.min_version && lt("1.45.3", cfg.min_version)) {
-    return `Your version of UR (${"1.45.3"}) is too old for Remote Control.
+  if (cfg.min_version && lt("1.45.4", cfg.min_version)) {
+    return `Your version of UR (${"1.45.4"}) is too old for Remote Control.
 Version ${cfg.min_version} or higher is required. Run \`ur update\` to update.`;
   }
   return null;
@@ -695267,7 +695285,7 @@ async function initBridgeCore(params) {
   const rawApi = createBridgeApiClient({
     baseUrl,
     getAccessToken,
-    runnerVersion: "1.45.3",
+    runnerVersion: "1.45.4",
     onDebug: logForDebugging,
     onAuth401,
     getTrustedDeviceToken
@@ -700949,7 +700967,7 @@ async function startMCPServer(cwd3, debug2, verbose) {
   setCwd(cwd3);
   const server2 = new Server({
     name: "ur/tengu",
-    version: "1.45.3"
+    version: "1.45.4"
   }, {
     capabilities: {
       tools: {}
@@ -702991,7 +703009,7 @@ async function update() {
   logEvent("tengu_update_check", {});
   const diagnostic = await getDoctorDiagnostic();
   const result = await checkUpgradeStatus({
-    currentVersion: "1.45.3",
+    currentVersion: "1.45.4",
     packageName: UR_AGENT_PACKAGE_NAME,
     installationType: diagnostic.installationType,
     latestVersion: () => getLatestNpmPackageVersion(UR_AGENT_PACKAGE_NAME)
@@ -704014,37 +704032,33 @@ ${inputPrompt}` : mainThreadAgentDefinition.initialPrompt;
       effectiveModel = parseUserSpecifiedModel(mainThreadAgentDefinition.model);
     }
     setMainLoopModelOverride(effectiveModel);
-    if (getAPIProvider() === "ollama" && !getUserSpecifiedModelSetting()) {
+    const requiresStartupModelSelection = shouldRequireStartupModelSelection({
+      explicitModels: [
+        options2.model,
+        process.env.URHQ_MODEL,
+        process.env.OLLAMA_MODEL,
+        process.env.UR_MODEL,
+        mainThreadAgentDefinition?.model === "inherit" ? undefined : mainThreadAgentDefinition?.model
+      ],
+      workspaceSettings: [
+        getSettingsForSource("projectSettings"),
+        getSettingsForSource("localSettings"),
+        getSettingsForSource("flagSettings"),
+        getSettingsForSource("policySettings")
+      ],
+      isResume: Boolean(options2.continue || options2.resume || options2.fromPr || teleport || remote !== null),
+      skipsModelExecution: initOnly
+    });
+    if (requiresStartupModelSelection && isNonInteractiveSession) {
+      process.stderr.write(source_default.red("Error: No model has been selected for this workspace. Run `ur` interactively to choose a provider and model, or pass `--model <model>` for this run.\n"));
+      process.exit(1);
+    }
+    if (!requiresStartupModelSelection && getAPIProvider() === "ollama" && !getUserSpecifiedModelSetting()) {
       await listOllamaModelNames(AbortSignal.timeout(750)).catch(() => {});
     }
-    setInitialMainLoopModel(getUserSpecifiedModelSetting() || null);
-    const initialMainLoopModel = getInitialMainLoopModel();
-    const resolvedInitialModel = parseUserSpecifiedModel(initialMainLoopModel ?? getDefaultMainLoopModel());
-    await refreshOllamaModelMetadata(resolvedInitialModel, {
-      timeoutMs: 750
-    });
+    let initialMainLoopModel = getInitialMainLoopModel();
+    let resolvedInitialModel;
     let advisorModel;
-    if (isAdvisorEnabled()) {
-      const advisorOption = canUserConfigureAdvisor() ? options2.advisor : undefined;
-      if (advisorOption) {
-        logForDebugging(`[AdvisorTool] --advisor ${advisorOption}`);
-        if (!modelSupportsAdvisor(resolvedInitialModel)) {
-          process.stderr.write(source_default.red(`Error: The model "${resolvedInitialModel}" does not support the advisor tool.
-`));
-          process.exit(1);
-        }
-        const normalizedAdvisorModel = normalizeModelStringForAPI(parseUserSpecifiedModel(advisorOption));
-        if (!isValidAdvisorModel(normalizedAdvisorModel)) {
-          process.stderr.write(source_default.red(`Error: The model "${advisorOption}" cannot be used as an advisor.
-`));
-          process.exit(1);
-        }
-      }
-      advisorModel = canUserConfigureAdvisor() ? advisorOption ?? getInitialAdvisorSetting() : advisorOption;
-      if (advisorModel) {
-        logForDebugging(`[AdvisorTool] Advisor model: ${advisorModel}`);
-      }
-    }
     if (isAgentSwarmsEnabled() && storedTeammateOpts?.agentId && storedTeammateOpts?.agentName && storedTeammateOpts?.teamName && storedTeammateOpts?.agentType) {
       const customAgent = agentDefinitions.activeAgents.find((a2) => a2.agentType === storedTeammateOpts.agentType);
       if (customAgent) {
@@ -704159,6 +704173,45 @@ ${customInstructions}` : customInstructions;
         });
       }
     }
+    if (requiresStartupModelSelection) {
+      const selectedModel = await showSetupDialog(root2, (done) => /* @__PURE__ */ jsx_dev_runtime495.jsxDEV(ProviderFirstModelPicker, {
+        initial: null,
+        headerText: "Choose a provider and model for this workspace. The validated choice is saved locally before the first session starts.",
+        onSelect: (model) => {
+          if (model)
+            done(model);
+        }
+      }, undefined, false, undefined, this));
+      effectiveModel = selectedModel;
+      setMainLoopModelOverride(selectedModel);
+    }
+    setInitialMainLoopModel(getUserSpecifiedModelSetting() || null);
+    initialMainLoopModel = getInitialMainLoopModel();
+    resolvedInitialModel = parseUserSpecifiedModel(initialMainLoopModel ?? getDefaultMainLoopModel());
+    await refreshOllamaModelMetadata(resolvedInitialModel, {
+      timeoutMs: 750
+    });
+    if (isAdvisorEnabled()) {
+      const advisorOption = canUserConfigureAdvisor() ? options2.advisor : undefined;
+      if (advisorOption) {
+        logForDebugging(`[AdvisorTool] --advisor ${advisorOption}`);
+        if (!modelSupportsAdvisor(resolvedInitialModel)) {
+          process.stderr.write(source_default.red(`Error: The model "${resolvedInitialModel}" does not support the advisor tool.
+`));
+          process.exit(1);
+        }
+        const normalizedAdvisorModel = normalizeModelStringForAPI(parseUserSpecifiedModel(advisorOption));
+        if (!isValidAdvisorModel(normalizedAdvisorModel)) {
+          process.stderr.write(source_default.red(`Error: The model "${advisorOption}" cannot be used as an advisor.
+`));
+          process.exit(1);
+        }
+      }
+      advisorModel = canUserConfigureAdvisor() ? advisorOption ?? getInitialAdvisorSetting() : advisorOption;
+      if (advisorModel) {
+        logForDebugging(`[AdvisorTool] Advisor model: ${advisorModel}`);
+      }
+    }
     const bgRefreshThrottleMs = getFeatureValue_CACHED_MAY_BE_STALE("tengu_cicada_nap_ms", 0);
     const lastPrefetched = getGlobalConfig().startupPrefetchedAt ?? 0;
     const skipStartupPrefetches = isBareMode() || bgRefreshThrottleMs > 0 && Date.now() - lastPrefetched < bgRefreshThrottleMs;
@@ -704267,7 +704320,7 @@ ${customInstructions}` : customInstructions;
       }
     }
     logForDiagnosticsNoPII("info", "started", {
-      version: "1.45.3",
+      version: "1.45.4",
       is_native_binary: isInBundledMode()
     });
     registerCleanup(async () => {
@@ -705053,7 +705106,7 @@ Usage: ur --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("1.45.3 (UR-Nexus)", "-v, --version", "Output the version number");
+  }).version("1.45.4 (UR-Nexus)", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -705954,6 +706007,7 @@ var init_main3 = __esm(() => {
   init_createDirectConnectSession();
   init_manager();
   init_promptSuggestion();
+  init_ProviderFirstModelPicker();
   init_AppStateStore();
   init_onChangeAppState();
   init_ids();
@@ -705988,7 +706042,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"1.45.3"} (UR-Nexus)`);
+    console.log(`${"1.45.4"} (UR-Nexus)`);
     return;
   }
   if (args[0] === "a2a" && args[1] === "serve" && !args.includes("--help") && !args.includes("-h")) {

package/docs/AGENT_FEATURES.md

@@ -81,6 +81,24 @@ The optional `provider.fallback` value is used only to print an explicit
 recovery recommendation in provider diagnostics. It never silently or
 automatically changes the active provider.
 
+## v1.45.4 Additions
+
+- Fresh workspaces require a provider/model choice before their first
+  interactive session and persist the validated pair locally.
+- Fresh headless workspaces fail before model execution unless a model is
+  supplied explicitly or by workspace/managed configuration.
+- Resume, initialization-only, and explicit model paths remain uninterrupted;
+  AutoApprove behavior is unchanged.
+
+## v1.45.3 Additions
+
+| Addition | Surface | What it adds |
+| --- | --- | --- |
+| Deterministic slash registry | `src/commands.ts`, `test/commandRegistryIntegrity.test.ts` | Resolves bundled, plugin, project, workflow, and built-in commands by explicit source priority; rejects duplicate canonical tokens, removes only conflicting aliases, validates every lazy loader, and keeps the technical command catalog complete. |
+| Unified sandbox command | `/sandbox [status\|check\|init\|eval\|exclude]` | One interactive slash command now owns both the settings UI and text subcommands; the shell-facing `ur sandbox` implementation is shared rather than separately registered. |
+| Actionable CI cwd handling | `ur ci-loop --cwd <path>` | Reports the absolute execution directory, retains assertion and stack context, and stops "No tests found" after one attempt without wasting a fix-agent run. |
+| Explicit worktree completion | `/debug-v2`, `/refactor`, `/paper-implementation`, `/benchmark`, `/security-review`, `/dockerize`, `/latex-paper`, `/batch` | Keeps changes local, asks before the final full suite, and never commits, pushes, or opens a PR unless separately requested. |
+
 ## v1.25.x Additions
 
 | Addition | Surface | What it adds |
@@ -286,7 +304,7 @@ ur escalate plan "debug the race condition in the scheduler"
 ur escalate run "refactor the cache layer" --force-oracle
 ur escalate oracle "is this lock-free queue correct?"
 ur arena "implement the rate limiter" --agents 3 --apply
-ur ci-loop --command "bun test" --max-attempts 3
+ur ci-loop --command "bun test" --cwd . --max-attempts 3
 ur artifacts capture-diff
 ur artifacts capture-tests --command "bun test"
 ur artifacts approve 1

package/docs/AGENT_TRENDS.md

@@ -48,7 +48,7 @@ ur context-pack remember --decision "Use manifest commands first"
 ur context-pack compress
 ur acp serve --port 8123
 ur exec "add tests for the parser" --concurrency 4 --json
-ur ci-loop --command "bun test" --dry-run
+ur ci-loop --command "bun test" --cwd . --dry-run
 ur artifacts capture-diff
 ur artifacts capture-tests --command "bun test"
 ur claim-ledger validate
@@ -87,7 +87,7 @@ Inside an interactive session:
 | Spec-driven development | Covered | `ur spec` scaffolds requirements/design/tasks under `.ur/specs/`, tracks phase/approvals, and runs the Spec Kit / Kiro task list one task at a time | Add bidirectional sync with an external `specs/` directory |
 | Capability-aware model escalation | Covered | `ur escalate` selects fast/oracle tiers from `model-doctor`, runs routine work fast, and auto-escalates hard/failed work to the strong local model | Learn per-model success rates to tune the difficulty threshold |
 | Best-of-N agent judging | Covered | `ur arena` runs N agents per task in isolated worktrees and judges diffs with the self-review gate; winner is selectable/appliable | Add an optional model judge alongside the deterministic scorer |
-| Self-healing CI | Covered | `ur ci-loop` runs a command, summarizes failures, invokes a fix agent, and re-runs with bounded retries; commits/pushes are self-review gated | Wire to `ur trigger` so a failed CI webhook auto-launches the loop |
+| Self-healing CI | Covered | `ur ci-loop` reports its resolved cwd, preserves assertion/stack context, stops no-test configuration failures before invoking a fixer, and re-runs real failures with bounded retries; commits/pushes require explicit flags and are self-review gated | Wire to `ur trigger` so a failed CI webhook can explicitly launch the loop |
 | Verifiable artifacts | Covered | `ur artifacts` records plans/diffs/test-runs with approve/reject/feedback under `.ur/artifacts/`; comments steer active background agents through stream-json inbox injection | Attach browser-QA screenshots and link artifacts to claim-ledger entries |
 | Native IDE review | Covered | `ur ide diff` writes `.ur/ide/diffs/` bundles and `extensions/vscode-ur-inline-diffs/` provides a VS Code tree/webview/comment surface | Add JetBrains packaging if demand appears |
 | ACP / IDE agent server | Covered | `ur acp serve|stop|status` exposes an HTTP+JSON-RPC agent server so VS Code/Cursor/Zed extensions can list tools, call tools, and submit tasks | Ship reference editor extensions |
@@ -105,7 +105,7 @@ ur spec run demo --all --dry-run
 ur arena "implement a debounce helper" --agents 2 --dry-run
 ur escalate run "refactor the cache layer" --force-oracle --dry-run
 ur test-first --dry-run
-ur ci-loop --command "bun test" --dry-run
+ur ci-loop --command "bun test" --cwd . --dry-run
 ur artifacts capture-tests --command "bun test"
 ```
 

package/docs/CONFIGURATION.md

@@ -77,6 +77,15 @@ incompatible saved model instead of silently carrying it across providers. The
 saved provider/model pair controls the runtime backend for the next agent
 request; Ollama is only used when `ollama` is the selected provider.
 
+The same provider-first picker is mandatory on the first interactive run in a
+workspace with no model in `.ur/settings.json` or `.ur/settings.local.json`.
+The result is validated and written to the gitignored local settings file.
+User-global and built-in model defaults do not silently select a model for a
+new folder. `--model`, `OLLAMA_MODEL`, `UR_MODEL`, agent configuration,
+`--settings`, managed settings, and resumed sessions are deliberate selections
+and therefore do not open the startup picker. Fresh `-p` runs without one of
+those inputs fail with an actionable message before making a model request.
+
 Use this to inspect the active runtime path:
 
 ```sh
@@ -127,8 +136,8 @@ UR_MODEL=qwen2.5-coder:7b
 ```
 
 `OLLAMA_MODEL` selects the model name and takes precedence over `UR_MODEL` only
-for Ollama runtime sessions. If neither is set, UR lets its Ollama router choose
-from the model list advertised by the configured Ollama app.
+for Ollama runtime sessions. If neither is set and the workspace has no saved
+model, interactive startup asks and headless startup requires `--model`.
 
 ### Discovering LAN Ollama servers
 

package/docs/DEVELOPMENT.md

@@ -56,6 +56,11 @@ context.
 
 The GitHub install path uses the bundled launcher in `dist/cli.js`, so `bun run bundle` must be run before packaging or pushing a release. `bun run release:check` verifies that `package.json`, `bunfig.toml`, the bundle, docs, and `node ./bin/ur.js --version` agree. The GitHub workflow keeps production bundle, release, package, and global-install checks behind the Bun test step; do not publish, tag, or push release artifacts until that workflow is green.
 
+For a patch release, keep the version synchronized in `package.json`,
+`bunfig.toml`, the VS Code extension manifest, the JetBrains Gradle build,
+`documentation/index.html`, `technical/README.md`, and `CHANGELOG.md`. Rebuild
+`dist/cli.js` after changing the version.
+
 ## Build
 
 ```sh
@@ -73,6 +78,7 @@ only the root README. Check:
 - `CHANGELOG.md`
 - `docs/`
 - `documentation/`
+- `technical/`
 - `examples/`
 - extension and plugin README files when the feature affects them
 
@@ -80,6 +86,11 @@ For top-level commands, also update the static documentation site command data
 in `documentation/app.js` and any relevant tutorial section in
 `documentation/index.html`.
 
+For slash-command changes, update `technical/03-slash-commands.md` and run
+`bun test test/commandRegistryIntegrity.test.ts`. That test verifies unique
+canonical names and aliases, non-empty descriptions, loadable implementations,
+and coverage of every visible shipped command in the technical reference.
+
 For command surfaces that write `.ur/` state, update configuration and
 validation docs with the generated files and cleanup expectations.
 

package/docs/TROUBLESHOOTING.md

@@ -182,12 +182,13 @@ ur sandbox check
   gates.
 
 ```sh
-ur ci-loop --command "bun test" --max-attempts 3
+ur ci-loop --command "bun test" --cwd . --max-attempts 3
 ur test-first detect
 ```
 
 If the runner says "No tests found", check the working directory printed by
-the result and run from the test root or pass it explicitly:
+the result and run from the test root or pass it explicitly. This configuration
+failure stops after the first attempt and does not invoke a fix agent:
 
 ```sh
 ur ci-loop --command "bun test" --cwd ./packages/app --max-attempts 3

package/docs/USAGE.md

@@ -8,6 +8,13 @@ UR is a terminal agent. Running `ur` opens an interactive session in the current
 ur
 ```
 
+On the first interactive run in a folder without a workspace model, UR opens
+the provider-first model picker before the REPL. A validated choice is saved to
+`.ur/settings.local.json` and reused in that workspace. A global user model is
+not silently copied into new folders. Shared `.ur/settings.json`, managed,
+`--settings`, agent, CLI, environment, and resumed-session choices remain
+explicit inputs and skip this one-time picker.
+
 Use interactive mode for iterative coding, debugging, research, and repository exploration. The session can read project instructions, use tools, call slash commands, and keep resumable conversation history.
 
 Useful options:
@@ -29,9 +36,13 @@ UR also accepts custom "Other" answers when the dialog includes one.
 Print mode is useful for scripts and shell pipelines:
 
 ```sh
-ur -p "write a changelog entry for the current diff"
+ur -p --model qwen2.5-coder:7b "write a changelog entry for the current diff"
 ```
 
+In a fresh workspace without a configured model, print mode exits before any
+model request and tells the caller to pass `--model <model>` or run interactive
+setup. This keeps automation deterministic instead of selecting a default.
+
 Output formats:
 
 ```sh
@@ -57,8 +68,9 @@ in this order:
 1. `OLLAMA_MODEL`
 2. `UR_MODEL`
 
-If neither variable is set and `ollama` is the selected provider, UR lets its
-Ollama router choose from the models exposed by your local Ollama app.
+If neither variable is set, a fresh workspace requires an interactive choice.
+After the provider/model pair has been stored locally, that exact pair is used
+for subsequent sessions.
 
 You can also choose the model for a single session:
 
@@ -241,7 +253,9 @@ UR includes slash commands and CLI subcommands for common workflows:
 - `ur escalate ...` to plan, run, or ask an oracle model for hard tasks
 - `ur arena ...` to run multiple agents on the same task and select a winner
 - `ur test-first ...` to detect compile/test/lint commands, store failure traces, and install after-edit gates
-- `ur ci-loop ...` to run tests, repair failures, and rerun with a bounded loop
+- `ur ci-loop ...` to run tests in an explicit working directory, repair real
+  failures, and rerun with a bounded loop. A "No tests found" result stops
+  after one attempt and reports how to correct `--cwd`.
 - `ur artifacts ...` to capture reviewable diffs, test runs, notes, and feedback
 - `ur ide diff ...` to capture editor-readable inline diff bundles
 - `ur acp ...` to start/stop/status the Agent Communication Protocol server for IDE extensions
@@ -334,7 +348,7 @@ ur context-pack remember --accepted "Use p-map for concurrency" --scope project
 ur context-pack compress
 ur acp serve --port 8123
 ur exec "add tests for the parser" --concurrency 4 --json
-ur ci-loop --command "bun test" --dry-run
+ur ci-loop --command "bun test" --cwd . --dry-run
 ur artifacts capture-diff
 ur bg run "fix the flaky parser test" --worktree --dry-run
 ur worktree list

package/docs/VALIDATION.md

@@ -19,10 +19,28 @@ You need:
 
 ```sh
 ur --version
-# expected: the version from package.json, e.g. "1.35.1 (UR-Nexus)"
+# expected for this release: "1.45.4 (UR-Nexus)"
 ```
 
-## 0.1 Permission safety and context pack (1.19.0)
+## 0.1 First-workspace model selection (1.45.4)
+
+In a new temporary directory, run `ur`. Expected: before the REPL appears, UR
+opens the provider-first picker. After selecting a connected provider and one
+of its models, `.ur/settings.local.json` contains both `provider.active` and
+the selected model. A second `ur` run in the same directory reuses that local
+pair without showing the startup picker.
+
+Before making the interactive choice, the equivalent headless command must
+exit non-zero without contacting a model:
+
+```sh
+ur -p "say hi"
+```
+
+Expected: `No model has been selected for this workspace`. Supplying
+`--model <model>`, `OLLAMA_MODEL`, or `UR_MODEL` bypasses the gate for that run.
+
+## 0.2 Permission safety and context pack (1.19.0)
 
 In a project checkout:
 
@@ -47,7 +65,7 @@ Expected:
 - `remember` appends task memory entries under `.ur/context/task-memory.jsonl`.
 - `compress` writes `.ur/context/compressed.md`.
 
-## 0.2 Test-first execution loop (1.18.0)
+## 0.3 Test-first execution loop (1.18.0)
 
 In a project checkout:
 
@@ -74,7 +92,7 @@ ur test-first --max-attempts 1
 Expected: a non-zero command creates a log under
 `.ur/test-first/traces/`, and the command reports `exhausted`, not `passed`.
 
-## 0.3 Reliable repo editing (1.17.0)
+## 0.4 Reliable repo editing (1.17.0)
 
 In a disposable checkout:
 
@@ -92,7 +110,7 @@ Expected:
 - If the check command exits non-zero, every touched file is restored and the
   JSON result reports `"rolledBack": true`.
 
-## 0.4 Network Ollama discovery (1.16.0)
+## 0.5 Network Ollama discovery (1.16.0)
 
 With at least one other Ollama server reachable on your LAN:
 
@@ -292,6 +310,9 @@ ur artifacts capture-tests --command "bun test"
 ```
 
 Expected: no `unknown option` or `too many arguments` parser errors.
+The CI-loop result should include the resolved working directory. If that
+directory has no matching tests, the run should stop after its first attempt
+with `--cwd` guidance and must not launch a fix agent.
 
 ## What to do if any step fails
 

package/documentation/app.js

@@ -2,7 +2,7 @@ const featureGroups = [
   {
     title: 'Core agent runtime',
     tags: ['interactive', 'headless', 'models'],
-    text: 'Interactive terminal sessions, one-shot print mode, JSON and stream-json output, resumable conversations, custom agents, model routing, local runtimes, and legal provider adapters.',
+    text: 'Interactive terminal sessions with first-workspace provider/model selection, deterministic one-shot print mode, JSON and stream-json output, resumable conversations, custom agents, model routing, local runtimes, and legal provider adapters.',
     commands: ['ur', 'ur -p', 'ur --resume', 'ur --continue', 'ur --model <model>', 'ur provider'],
   },
   {
@@ -72,15 +72,15 @@ const commands = [
     name: 'ur',
     category: 'Core',
     aliases: [],
-    summary: 'Start an interactive UR-Nexus session in the current workspace.',
+    summary: 'Start an interactive session; a fresh workspace must choose and locally persist a validated provider/model pair first.',
     examples: ['ur', 'ur --model qwen3-coder:480b-cloud', 'ur --continue', 'ur --resume'],
   },
   {
     name: 'ur -p',
     category: 'Core',
     aliases: ['--print'],
-    summary: 'Run one prompt headlessly and exit. This is the base mode for scripts, CI, evals, triggers, SDK calls, and A2A tasks.',
-    examples: ['ur -p "Summarize this repository"', 'ur -p --output-format json "Review the current diff"', 'ur -p --json-schema \'{"type":"object"}\' "Return structured output"'],
+    summary: 'Run one prompt headlessly and exit. Fresh workspaces require an explicit or workspace-configured model instead of loading a default.',
+    examples: ['ur -p --model qwen3-coder:480b-cloud "Summarize this repository"', 'ur -p --model qwen3-coder:480b-cloud --output-format json "Review the current diff"', 'ur -p --model qwen3-coder:480b-cloud --json-schema \'{"type":"object"}\' "Return structured output"'],
   },
   {
     name: 'acp',
@@ -191,8 +191,8 @@ const commands = [
     name: 'ci-loop',
     category: 'Automation',
     aliases: ['heal'],
-    summary: 'Run a build or test command, summarize failures, invoke a fix agent, and rerun with a bounded retry budget.',
-    examples: ['ur ci-loop --command "bun test" --dry-run', 'ur ci-loop --command "bun test" --max-attempts 3', 'ur ci-loop --from-log failure.log --dry-run', 'ur ci-loop --command "bun test" --commit'],
+    summary: 'Run a build or test command in an explicit working directory, preserve useful failure context, and rerun real failures with a bounded fix budget. No-test configuration failures stop immediately.',
+    examples: ['ur ci-loop --command "bun test" --cwd . --dry-run', 'ur ci-loop --command "bun test" --cwd ./packages/app --max-attempts 3', 'ur ci-loop --from-log failure.log --cwd . --dry-run', 'ur ci-loop --command "bun test" --cwd . --json'],
   },
   {
     name: 'context-pack',
@@ -264,13 +264,6 @@ const commands = [
     summary: 'Track persistent long-horizon objectives with notes, linked workflows, and resumable execution.',
     examples: ['ur goal add release-docs --objective "Ship professional docs" --workflow docs', 'ur goal note release-docs --note "Command reference drafted"', 'ur goal resume release-docs --dry-run', 'ur goal done release-docs'],
   },
-  {
-    name: 'update',
-    category: 'Ops',
-    aliases: ['upgrade'],
-    summary: 'Check npm for UR-Nexus updates.',
-    examples: ['ur update', 'ur upgrade'],
-  },
   {
     name: 'connect',
     category: 'Providers',
@@ -432,6 +425,41 @@ const commands = [
     summary: 'Parse GitHub, Slack, or generic webhook payloads and optionally launch a headless UR run.',
     examples: ['ur trigger parse --file payload.json --source github', 'ur trigger run --file payload.json --keyword /ur --dry-run', 'ur trigger run --file slack.json --max-turns 8'],
   },
+  {
+    name: 'audit',
+    category: 'Verification',
+    aliases: [],
+    summary: 'Export the hash-chained project audit trail or verify it for tampering.',
+    examples: ['ur audit export --format jsonl', 'ur audit export --format csv --out audit.csv', 'ur audit verify'],
+  },
+  {
+    name: 'cloud',
+    category: 'Agent Platform',
+    aliases: [],
+    summary: 'Run detached best-of-N tasks, inspect their results, and explicitly apply a selected winner.',
+    examples: ['ur cloud run "speed up parser" --attempts 3', 'ur cloud list', 'ur cloud show <id>', 'ur cloud apply <id>'],
+  },
+  {
+    name: 'recipe',
+    category: 'Automation',
+    aliases: ['recipes'],
+    summary: 'Create and run structured-output playbooks whose child result must satisfy the recipe schema.',
+    examples: ['ur recipe init triage', 'ur recipe list', 'ur recipe run triage "login returns 500"'],
+  },
+  {
+    name: 'thread',
+    category: 'Sessions',
+    aliases: ['threads'],
+    summary: 'Share a session transcript through the local artifacts server or list shared threads.',
+    examples: ['ur thread share', 'ur thread list', 'ur thread share <session-id>'],
+  },
+  {
+    name: 'wiki',
+    category: 'Knowledge',
+    aliases: ['repo-wiki'],
+    summary: 'Generate a living repository wiki and map, inspect status, or install its maintenance hook.',
+    examples: ['ur wiki generate', 'ur wiki map', 'ur wiki status', 'ur wiki install-hook'],
+  },
   {
     name: 'update',
     category: 'Ops',
@@ -472,7 +500,7 @@ const slashGroups = [
   {
     title: 'Agent skills',
     items: ['/debug-v2', '/refactor', '/paper-implementation', '/benchmark', '/security-review', '/dockerize', '/latex-paper', '/simplify', '/debug'],
-    text: 'Bundled slash skills that dispatch focused agent work in isolated git worktrees with clean commits and PR output.',
+    text: 'Bundled slash skills that dispatch focused work in isolated git worktrees, keep changes local, ask before the final full suite, and publish only after a separate explicit request.',
   },
   {
     title: 'Memory and evidence',
@@ -486,8 +514,8 @@ const slashGroups = [
   },
   {
     title: 'Models, tools, and interop',
-    items: ['/model', '/model-doctor', '/model-route', '/escalate', '/mcp', '/plugin', '/skills', '/sdk', '/a2a-card'],
-    text: 'Pick models, inspect capabilities, escalate to oracle models, manage MCP/plugin extensions, and expose interop surfaces.',
+    items: ['/model', '/model-doctor', '/model-route', '/escalate', '/mcp', '/plugin', '/skills', '/skill', '/sdk', '/a2a-card'],
+    text: 'Pick models, inspect capabilities, manage MCP/plugin extensions, browse prompt skills with /skills, run executable workflows with /skill, and expose interop surfaces.',
   },
   {
     title: 'Security operations',
@@ -502,7 +530,7 @@ const slashGroups = [
   {
     title: 'Preferences and environment',
     items: ['/config', '/permissions', '/sandbox', '/mode', '/theme', '/vim', '/terminal-setup', '/usage', '/ide'],
-    text: 'Configure permissions, sandboxing, UI preferences, IDE integration, and runtime environment details.',
+    text: 'Configure permissions and UI preferences; /sandbox combines its interactive settings with status, check, init, eval, and exclude operations.',
   },
 ];
 
@@ -662,8 +690,8 @@ const examples = [
   },
   {
     title: 'Self-healing CI',
-    text: 'Run a test command, summarize failures, attempt a bounded fix loop, and rerun.',
-    code: 'ur ci-loop --command "bun test" --dry-run\nur ci-loop --command "bun test" --max-attempts 3',
+    text: 'Run in an explicit cwd, preserve useful assertion and stack context, and attempt a bounded fix loop only for actionable failures.',
+    code: 'ur ci-loop --command "bun test" --cwd . --dry-run\nur ci-loop --command "bun test" --cwd ./packages/app --max-attempts 3',
   },
   {
     title: 'Test-first command evidence',

package/documentation/index.html

@@ -44,7 +44,7 @@
     <main id="content" class="content">
       <header class="topbar">
         <div>
-          <p class="eyebrow">Version 1.45.3</p>
+          <p class="eyebrow">Version 1.45.4</p>
           <h1>UR-Nexus Documentation</h1>
           <p class="lead">A practical, tutorial-style reference for installing, configuring, automating, extending, and operating UR-Nexus.</p>
         </div>
@@ -89,6 +89,10 @@
             <strong>Test-first execution</strong>
             <span><code>ur test-first</code> detects compile/test/lint commands, stores failure traces, and installs edit-time verifier gates.</span>
           </article>
+          <article>
+            <strong>Deterministic commands</strong>
+            <span>The external runtime exposes 150 commands and 217 unique slash tokens; registry tests reject ambiguous names, broken loaders, and undocumented visible commands.</span>
+          </article>
           <article>
             <strong>Safety and context</strong>
             <span><code>ur safety</code> evaluates command risk. <code>ur context-pack</code> writes architecture context and task memory.</span>
@@ -122,13 +126,13 @@ ur --model qwen3-coder:480b-cloud</code></pre>
           <article class="step">
             <span>3</span>
             <h3>Run once in scripts</h3>
-            <pre><code>ur -p "Summarize this repository"
-ur -p --output-format json "Review the current diff"</code></pre>
+            <pre><code>ur -p --model qwen3-coder:480b-cloud "Summarize this repository"
+ur -p --model qwen3-coder:480b-cloud --output-format json "Review the current diff"</code></pre>
           </article>
         </div>
         <div class="callout">
           <strong>Runtime requirement</strong>
-          <p>UR expects Bun. For local-first work, run a local Ollama app/server at <code>http://localhost:11434/api</code>. Set <code>OLLAMA_MODEL</code> or <code>UR_MODEL</code> to force a model route.</p>
+          <p>UR expects Bun. On the first interactive run in a workspace, choose a provider and model; UR validates and saves the pair locally before starting the session. Fresh print-mode workspaces require <code>--model</code> or another explicit model source.</p>
         </div>
       </section>
 
@@ -159,7 +163,7 @@ ur config set provider.fallback ollama</code></pre>
           </article>
           <article>
             <h3>Status bar and updates</h3>
-            <pre><code>Ollama | llama3 | ask | main | update 1.37.3 available</code></pre>
+            <pre><code>Ollama | llama3 | ask | main | update 1.45.4 available</code></pre>
             <p>The interactive status bar shows only important runtime state: provider, model, mode, branch, active tasks, checks status when known, and update availability. It is hidden in CI, dumb terminals, and print mode.</p>
           </article>
         </div>
@@ -396,13 +400,14 @@ ur arena "fix the parser" --agents 3 --apply</code></pre>
           <article>
             <h3>Repair failing CI in a bounded loop</h3>
             <ol>
-              <li>Run the build or test command.</li>
-              <li>Summarize the failure and launch a fix attempt.</li>
+              <li>Run the build or test command in the printed working directory.</li>
+              <li>Preserve the assertion and stack context, then launch a fix attempt only for an actionable failure.</li>
               <li>Rerun until the command passes or the retry budget is exhausted.</li>
             </ol>
-            <pre><code>ur ci-loop --command "bun test" --dry-run
-ur ci-loop --command "bun test" --max-attempts 3
-ur ci-loop --from-log failure.log --dry-run</code></pre>
+            <p>A <code>No tests found</code> result stops after the first attempt and points to <code>--cwd</code>; it does not invoke a fix agent.</p>
+            <pre><code>ur ci-loop --command "bun test" --cwd . --dry-run
+ur ci-loop --command "bun test" --cwd ./packages/app --max-attempts 3
+ur ci-loop --from-log failure.log --cwd . --dry-run</code></pre>
           </article>
 
           <article>
@@ -453,7 +458,7 @@ ur artifacts approve 1</code></pre>
             <pre><code>OLLAMA_MODEL=qwen3-coder:480b-cloud ur
 UR_MODEL=qwen3-coder:480b-cloud ur
 ur --model qwen2.5-coder:latest</code></pre>
-            <p><code>OLLAMA_MODEL</code> wins over <code>UR_MODEL</code>. Without either, UR routes from local Ollama model inventory.</p>
+            <p><code>OLLAMA_MODEL</code> wins over <code>UR_MODEL</code>. Without an explicit or workspace model, interactive startup opens the provider/model picker and fresh print mode exits before model execution.</p>
           </article>
           <article>
             <h3>Permissions</h3>
@@ -554,6 +559,12 @@ ur agent-inspect --file session.jsonl
 ur artifacts list
 ur eval report starter
 ur claim-ledger validate</code></pre>
+          </article>
+          <article>
+            <h3>CI loop reports no tests</h3>
+            <p>Use the working directory printed in the result. The loop stops after one attempt because changing code cannot repair a test-discovery cwd error.</p>
+            <pre><code>ur ci-loop --command "bun test" --cwd . --max-attempts 3
+ur ci-loop --command "bun test" --cwd ./packages/app --max-attempts 3</code></pre>
           </article>
           <article>
             <h3>New agent-platform command is missing</h3>

package/extensions/jetbrains-ur/build.gradle.kts

@@ -5,7 +5,7 @@ plugins {
 }
 
 group = "dev.urnexus"
-version = "1.45.3"
+version = "1.45.4"
 
 repositories {
     mavenCentral()

package/extensions/vscode-ur-inline-diffs/package.json

@@ -2,7 +2,7 @@
   "name": "ur-inline-diffs",
   "displayName": "UR Inline Diffs",
   "description": "Review, apply, and reject UR inline diff bundles from .ur/ide/diffs inside VS Code.",
-  "version": "1.45.3",
+  "version": "1.45.4",
   "publisher": "ur-nexus",
   "engines": {
     "vscode": "^1.92.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ur-agent",
-  "version": "1.45.3",
+  "version": "1.45.4",
   "description": "UR-Nexus — autonomous engineering workflow engine (plan, execute, test, verify, document, benchmark, reproduce)",
   "type": "module",
   "packageManager": "bun@1.3.14",