ur-agent 1.45.6 → 1.47.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ur-agent",
-  "version": "1.45.6",
+  "version": "1.47.0",
   "description": "UR-Nexus — autonomous engineering workflow engine (plan, execute, test, verify, document, benchmark, reproduce)",
   "type": "module",
   "packageManager": "bun@1.3.14",
@@ -57,6 +57,7 @@
     "test": "bun test",
     "smoke": "node ./bin/ur.js --version",
     "secrets:scan": "bash scripts/secret-scan.sh",
+    "dependencies:audit": "bun audit",
     "benchmark:report": "node scripts/benchmark-report.mjs",
     "benchmark:smoke": "node scripts/benchmark-smoke.mjs",
     "benchmark:local": "node scripts/benchmark-local.mjs",
@@ -69,91 +70,104 @@
     "package:check": "node scripts/package-check.mjs",
     "prepack": "bun run release:check"
   },
+  "overrides": {
+    "fast-uri": "3.1.3",
+    "form-data": "4.0.6",
+    "hono": "4.12.30",
+    "ip-address": "10.2.0",
+    "qs": "6.15.3"
+  },
   "dependencies": {
+    "@a2a-js/sdk": "0.3.14",
+    "@ag-ui/core": "0.0.57",
+    "@ag-ui/encoder": "0.0.57",
     "diff2html": "^3.4.56",
-    "playwright-core": "^1.55.0",
-    "sharp": "^0.35.1"
+    "playwright-core": "^1.61.1",
+    "sharp": "^0.35.3"
   },
   "devDependencies": {
-    "@alcalzone/ansi-tokenize": "^0.1.0",
-    "@aws-sdk/credential-provider-node": "^3.972.58",
+    "@agentclientprotocol/sdk": "1.2.1",
+    "@alcalzone/ansi-tokenize": "^0.1.3",
+    "@aws-sdk/credential-provider-node": "^3.972.68",
     "@commander-js/extra-typings": "^13.1.0",
     "@growthbook/growthbook": "1.6.5",
-    "@modelcontextprotocol/sdk": "^1.12.1",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "@opentelemetry/api": "1.9.1",
-    "@opentelemetry/api-logs": "0.214.0",
-    "@opentelemetry/core": "2.6.1",
-    "@opentelemetry/resources": "2.6.1",
-    "@opentelemetry/sdk-logs": "0.214.0",
-    "@opentelemetry/sdk-metrics": "2.6.1",
-    "@opentelemetry/sdk-trace-base": "2.6.1",
-    "@opentelemetry/semantic-conventions": "1.40.0",
-    "@smithy/node-http-handler": "^4.8.2",
-    "@types/diff": "^7.0.0",
+    "@opentelemetry/api-logs": "0.220.0",
+    "@opentelemetry/core": "2.9.0",
+    "@opentelemetry/exporter-logs-otlp-http": "0.220.0",
+    "@opentelemetry/exporter-metrics-otlp-http": "0.220.0",
+    "@opentelemetry/exporter-trace-otlp-http": "0.220.0",
+    "@opentelemetry/resources": "2.9.0",
+    "@opentelemetry/sdk-logs": "0.220.0",
+    "@opentelemetry/sdk-metrics": "2.9.0",
+    "@opentelemetry/sdk-trace-base": "2.9.0",
+    "@opentelemetry/semantic-conventions": "1.43.0",
+    "@smithy/node-http-handler": "^4.9.6",
     "@types/lodash-es": "^4.17.12",
-    "@types/node": "^22.0.0",
-    "@types/picomatch": "^3.0.0",
+    "@types/node": "^22.20.1",
+    "@types/picomatch": "^3.0.2",
     "@types/proper-lockfile": "^4.1.4",
-    "@types/react": "^18.3.0",
-    "@types/react-reconciler": "^0.28.0",
-    "@types/semver": "^7.5.0",
-    "@types/shell-quote": "^1.7.0",
-    "@types/stack-utils": "^2.0.0",
-    "@types/ws": "^8.5.0",
-    "ajv": "^8.17.0",
+    "@types/react": "^18.3.31",
+    "@types/react-reconciler": "^0.28.9",
+    "@types/semver": "^7.7.1",
+    "@types/shell-quote": "^1.7.5",
+    "@types/stack-utils": "^2.0.3",
+    "@types/ws": "^8.18.1",
+    "ajv": "^8.20.0",
     "asciichart": "^1.5.25",
     "auto-bind": "^5.0.1",
-    "axios": "^1.7.0",
+    "axios": "^1.18.1",
     "bidi-js": "^1.0.3",
-    "bun-types": "^1.2.0",
-    "chalk": "^5.4.0",
-    "chokidar": "^4.0.0",
+    "bun-types": "^1.3.14",
+    "chalk": "^5.6.2",
+    "chokidar": "^4.0.3",
     "cli-boxes": "^3.0.0",
     "code-excerpt": "^4.0.0",
     "color-diff-napi": "^0.0.1",
     "commander": "^13.1.0",
-    "diff": "^7.0.0",
-    "emoji-regex": "^10.4.0",
+    "diff": "^8.0.4",
+    "emoji-regex": "^10.6.0",
     "env-paths": "^3.0.0",
-    "execa": "^9.5.0",
-    "fflate": "^0.8.2",
+    "execa": "^9.6.1",
+    "fflate": "^0.8.3",
     "figures": "^6.1.0",
-    "fuse.js": "^7.3.0",
-    "get-east-asian-width": "^1.3.0",
+    "fuse.js": "^7.5.0",
+    "get-east-asian-width": "^1.6.0",
     "google-auth-library": "^10.9.0",
     "highlight.js": "^11.11.1",
-    "https-proxy-agent": "^7.0.0",
-    "ignore": "^6.0.0",
+    "https-proxy-agent": "^7.0.6",
+    "ignore": "^6.0.2",
     "indent-string": "^5.0.0",
     "jsonc-parser": "^3.3.1",
-    "lodash-es": "^4.17.21",
-    "lru-cache": "^11.0.0",
-    "marked": "^15.0.0",
-    "p-map": "^7.0.0",
-    "picomatch": "^4.0.0",
+    "lodash-es": "^4.18.1",
+    "lru-cache": "^11.5.2",
+    "marked": "^15.0.12",
+    "p-map": "^7.0.5",
+    "picomatch": "^4.0.5",
     "proper-lockfile": "^4.1.2",
     "qrcode": "^1.5.4",
     "react": "^19.2.7",
     "react-compiler-runtime": "^1.0.0",
     "react-reconciler": "^0.33.0",
-    "semver": "^7.6.0",
-    "shell-quote": "^1.8.0",
+    "semver": "^7.8.5",
+    "shell-quote": "^1.10.0",
     "signal-exit": "^4.1.0",
-    "stack-utils": "^2.0.0",
-    "strip-ansi": "^7.1.0",
-    "supports-hyperlinks": "^3.1.0",
+    "stack-utils": "^2.0.6",
+    "strip-ansi": "^7.2.0",
+    "supports-hyperlinks": "^3.2.0",
     "tree-kill": "^1.2.2",
-    "type-fest": "^4.30.0",
-    "typescript": "^5.7.0",
-    "undici": "^7.3.0",
-    "usehooks-ts": "^3.1.0",
+    "type-fest": "^4.41.0",
+    "typescript": "^5.9.3",
+    "undici": "^7.28.0",
+    "usehooks-ts": "^3.1.1",
     "vscode-jsonrpc": "^8.2.1",
-    "vscode-languageserver-protocol": "^3.17.0",
-    "vscode-languageserver-types": "^3.17.5",
-    "wrap-ansi": "^9.0.0",
-    "ws": "^8.18.0",
+    "vscode-languageserver-protocol": "^3.18.2",
+    "vscode-languageserver-types": "^3.18.0",
+    "wrap-ansi": "^9.0.2",
+    "ws": "^8.21.1",
     "xss": "^1.0.15",
-    "yaml": "^2.7.0",
-    "zod": "^3.24.0"
+    "yaml": "^2.9.0",
+    "zod": "^3.25.76"
   }
 }

package/plugins/core/engineering-discipline/skills/reproducible-release/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: Reproducible Release
+name: reproducible-release
+display-name: Reproducible Release
 description: Use when preparing a UR-style engineering change for release. Enforces spec -> plan -> patch -> test -> verify -> document -> benchmark -> reproduce, with explicit command evidence and rollback notes.
 version: 0.1.0
 ---

package/plugins/core/github/skills/github-workflow/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: GitHub Workflow
+name: github-workflow
+display-name: GitHub Workflow
 description: Reference for operating GitHub safely from an agent — the official MCP server toolsets, gh CLI cheatsheet, token scopes, pull-request etiquette, and guardrails. Use when reviewing or creating PRs, triaging issues, or inspecting CI on GitHub.
 version: 0.1.0
 ---

package/plugins/core/gitlab/skills/gitlab-workflow/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: GitLab Workflow
+name: gitlab-workflow
+display-name: GitLab Workflow
 description: Reference for operating GitLab from an agent — the official MCP server transport and prerequisites, glab CLI cheatsheet, token scopes, merge-request etiquette, pipeline triage, and guardrails. Use when reviewing or creating MRs, triaging issues, or inspecting CI/CD on GitLab.
 version: 0.1.0
 ---

package/plugins/core/huggingface/skills/huggingface-workflow/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: Hugging Face Workflow
+name: huggingface-workflow
+display-name: Hugging Face Workflow
 description: Reference for working the Hugging Face Hub from an agent — the official MCP server and its tools, hf CLI cheatsheet, token scopes, model-selection criteria, dataset due diligence, and licensing pitfalls. Use when searching, vetting, downloading, or comparing models and datasets.
 version: 0.1.0
 ---

package/plugins/core/miro/skills/miro-workflow/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: Miro Workflow
+name: miro-workflow
+display-name: Miro Workflow
 description: Reference for operating Miro from an agent — the official MCP server and its OAuth/team scoping, the tool groups (context, diagrams, docs, items), the REST API v2 fallback and token scopes, board structure conventions, and guardrails. Use when creating boards, diagrams, sticky notes, or summarizing a board.
 version: 0.1.0
 ---

package/plugins/core/obsidian/skills/second-brain/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: Second Brain (Obsidian)
+name: second-brain
+display-name: Second Brain (Obsidian)
 description: Conventions for building and maintaining a durable Obsidian knowledge base — atomic and evergreen notes, Zettelkasten linking, PARA structure, Maps of Content, frontmatter, and daily notes. Use when creating, organizing, linking, or searching notes in an Obsidian vault.
 version: 0.1.0
 ---

package/plugins/core/powerpoint/skills/deck-craft/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: Deck Craft (PowerPoint)
+name: deck-craft
+display-name: Deck Craft (PowerPoint)
 description: Conventions for professional PowerPoint decks — layouts over text boxes, one idea per slide, sparse text with detail in notes, visual hierarchy, charts, templates, and accessibility. Use when building, converting, reviewing, or theming .pptx files.
 version: 0.1.0
 ---

package/plugins/core/skill-forge/skills/skill-authoring/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: Skill Authoring
+name: skill-authoring
+display-name: Skill Authoring
 description: Conventions for writing a high-quality UR skill — frontmatter fields, trigger design, step structure with success criteria, tool scoping, and storage locations. Use when authoring, generating, or refining a SKILL.md.
 when_to_use: Use when creating or improving a skill — e.g. "make a skill that…", "turn this into a skill", "forge a skill", or editing a SKILL.md.
 allowed-tools: Read, Write, Edit, Glob, Grep, Bash(mkdir:*), AskUserQuestion

package/plugins/core/word/skills/document-craft/SKILL.md

@@ -1,5 +1,6 @@
 ---
-name: Document Craft (Word)
+name: document-craft
+display-name: Document Craft (Word)
 description: Conventions for producing professional Microsoft Word documents — styles over manual formatting, heading hierarchy, tables of contents, templates, track changes, tables, and accessibility. Use when creating, converting, reviewing, or editing .docx files.
 version: 0.1.0
 ---