ur-agent 1.65.10 → 1.65.12

package/CHANGELOG.md

@@ -1,5 +1,53 @@
 # Changelog
 
+## 1.65.12
+
+- Forced explicit weak-model decision menus through the real
+  `AskUserQuestion` UI. A provider-neutral end-turn guard accepts only one
+  canonical Ask object from explicit reasoning or one complete rigid Markdown
+  choice menu, validates it unchanged against the live tool schema, and rejects
+  examples, ambiguity, ordinary prose, workers, and headless sessions.
+- Removed two task-list dead ends without weakening the mutation boundary.
+  Live plan mode may run only the exact current plan-directory bootstrap Bash
+  shape before tasks exist, and the last actionable task remains `in_progress`
+  when a file mutation has no later successful observable check. The same task
+  can then be verified or corrected instead of creating a duplicate.
+- Improved exact `Edit` mismatch recovery for stale HTML blocks. Diagnostics
+  now select the most distinctive verified line near the real target, such as
+  `<script>`, rather than an unrelated generic closing tag; edits remain
+  fail-closed and never apply fuzzy replacements.
+- Raised the default Ollama Cloud timeout for the known-slow Kimi K2.7 family
+  from 120 to 300 seconds in both streaming and permitted non-streaming paths.
+  Explicit timeouts and the stricter remote-session ceiling still take
+  precedence.
+
+## 1.65.11
+
+- Hardened `AskUserQuestion` for weaker models without inventing user intent.
+  Its model schema now exposes only a strict 1–4-question request shape with
+  2–8 nested choices, compact validation explains malformed flat arrays, and
+  lossless recovery never fabricates labels, descriptions, or prose-derived
+  questions.
+- Made question interaction truthful and safe. Answers are accepted only after
+  post-permission validation has collected one real response per question,
+  custom `Other` works in both menu layouts, question-keyed UI state is
+  prototype-safe, and HTML-configured previews render escaped inert text
+  instead of executable model markup.
+- Improved weak-model file-tool recovery. `Write` now explains that
+  `file_path` and complete `content` must be supplied together and never treats
+  surrounding prose as file data; a narrow deletion-only `Edit` whose desired
+  replacement is already uniquely present reports “already up to date” without
+  writing, while ambiguous and general stale edits still fail closed.
+- Corrected task-gate control flow and diagnostics. `ExitPlanMode` can reach
+  its approval transition without an implementation task, stale out-of-mode
+  calls remain invalid, and gate recovery distinguishes a missing plan from an
+  all-terminal task list so unfinished Edit/Bash work is reopened rather than
+  retried unchanged. A simple loopback browser preview bypasses only the task
+  gate while retaining Bash permission and rewrite checks.
+- Kept package validation compatible with both npm 11 and npm 12
+  `npm pack --json` output shapes, so upgrading npm does not make a valid
+  tarball look missing during tests or release checks.
+
 ## 1.65.10
 
 - Reworked approved-plan execution into a capability-aware task graph. Plans