ur-agent 1.56.1 → 1.57.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,44 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 1.57.1
|
|
4
|
+
|
|
5
|
+
- Fixed the `Computer` tool returning a byte count instead of the screenshot.
|
|
6
|
+
`mapToolResultToToolResultBlockParam` dropped the captured image, so the
|
|
7
|
+
model saw only "Captured 5164460 bytes" and had to ask the user where to save
|
|
8
|
+
the file — defeating the tool's main purpose. Screenshots now come back as an
|
|
9
|
+
image content block, resized through the same path `FileRead` uses so a
|
|
10
|
+
Retina capture cannot exceed the request size limit.
|
|
11
|
+
- When encoding fails the file still exists, so the result now reports the path
|
|
12
|
+
for the model to read rather than reporting nothing usable.
|
|
13
|
+
|
|
14
|
+
## 1.57.0
|
|
15
|
+
|
|
16
|
+
- Connected four features that were built, tested and then left unreachable.
|
|
17
|
+
Each had passing unit tests while contributing nothing to a real session.
|
|
18
|
+
- `wrapUntrusted()` now runs on WebFetch and WebSearch results, at the
|
|
19
|
+
`mapToolResultToToolResultBlockParam` choke point every return path passes
|
|
20
|
+
through. Fetched pages and search results reach the model inside a
|
|
21
|
+
nonce-bound boundary they cannot close, with injection signals labelled. The
|
|
22
|
+
WebSearch citation reminder deliberately stays outside the boundary: it is
|
|
23
|
+
UR's own instruction, and wrapping it would present it as untrusted data.
|
|
24
|
+
- Added the `Computer` tool, so desktop control is available to the agent and
|
|
25
|
+
not only to the human through `/computer`. Screenshots are permitted as
|
|
26
|
+
read-only; clicks and keystrokes always ask, because the model chooses the
|
|
27
|
+
coordinates and the user has not seen them. Clicks are bounds-checked against
|
|
28
|
+
real screen geometry and refused when geometry is unavailable. The UI renders
|
|
29
|
+
a character count rather than the typed text, so a dictated password is not
|
|
30
|
+
echoed into the transcript.
|
|
31
|
+
- Added opt-in end-of-turn side effects at the `handleStopHooks` seam:
|
|
32
|
+
`voice.speakResponses` reads replies aloud, and `memory.suggest` proposes
|
|
33
|
+
durable facts deduped against stored memory. Both default to off, run on the
|
|
34
|
+
main thread only so subagents stay silent, and are best-effort — speech is
|
|
35
|
+
fire-and-forget so a long reply cannot delay the next prompt, and any failure
|
|
36
|
+
is swallowed rather than ending the turn.
|
|
37
|
+
- Extracted `existingMemoryLines` into `memoryLines.ts`, shared by
|
|
38
|
+
`/memory-suggest` and the turn hook.
|
|
39
|
+
- Added `test/wiringIntegration.test.ts`, which asserts the connections rather
|
|
40
|
+
than the modules — the specific failure the unit tests could not catch.
|
|
41
|
+
|
|
3
42
|
## 1.56.1
|
|
4
43
|
|
|
5
44
|
- Documented the 1.52.0–1.56.0 features, which had reached `technical/03` as
|