ur-agent 1.65.6 → 1.65.7

package/dist/sdk/index.cjs

@@ -0,0 +1,189 @@
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toCommonJS = (from) => {
+  var entry = (__moduleCache ??= new WeakMap).get(from), desc;
+  if (entry)
+    return entry;
+  entry = __defProp({}, "__esModule", { value: true });
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (var key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(entry, key))
+        __defProp(entry, key, {
+          get: __accessProp.bind(from, key),
+          enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+        });
+  }
+  __moduleCache.set(from, entry);
+  return entry;
+};
+var __moduleCache;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+
+// src/sdk/index.ts
+var exports_sdk = {};
+__export(exports_sdk, {
+  queryJSON: () => queryJSON,
+  query: () => query,
+  parseResultText: () => parseResultText,
+  UrClient: () => UrClient
+});
+module.exports = __toCommonJS(exports_sdk);
+var import_node_child_process = require("node:child_process");
+function pickResultText(parsed) {
+  if (parsed == null)
+    return null;
+  if (typeof parsed === "string")
+    return parsed;
+  if (Array.isArray(parsed)) {
+    for (let i = parsed.length - 1;i >= 0; i--) {
+      const found = pickResultText(parsed[i]);
+      if (found !== null)
+        return found;
+    }
+    return null;
+  }
+  if (typeof parsed === "object") {
+    const obj = parsed;
+    if (typeof obj.result === "string")
+      return obj.result;
+    if (typeof obj.text === "string")
+      return obj.text;
+    if (typeof obj.content === "string")
+      return obj.content;
+  }
+  return null;
+}
+function pickTerminalResultText(parsed) {
+  for (let i = parsed.length - 1;i >= 0; i--) {
+    const item = parsed[i];
+    if (typeof item === "object" && item !== null && !Array.isArray(item) && item.type === "result") {
+      const found = pickResultText(item);
+      if (found !== null)
+        return found;
+    }
+  }
+  return null;
+}
+function parseResultText(stdout) {
+  const trimmed = stdout.trim();
+  if (!trimmed)
+    return "";
+  try {
+    return pickResultText(JSON.parse(trimmed)) ?? trimmed;
+  } catch {
+    const parsedLines = [];
+    for (const line of trimmed.split(/\r?\n/u)) {
+      const candidate = line.trim();
+      if (!candidate)
+        continue;
+      try {
+        parsedLines.push(JSON.parse(candidate));
+      } catch {}
+    }
+    if (parsedLines.length === 0)
+      return trimmed;
+    return pickTerminalResultText(parsedLines) ?? trimmed;
+  }
+}
+function validateQueryInput(prompt, options) {
+  if (typeof prompt !== "string" || prompt.trim().length === 0) {
+    throw new TypeError("prompt must be a non-empty string");
+  }
+  if (options.maxTurns !== undefined && (!Number.isSafeInteger(options.maxTurns) || options.maxTurns <= 0)) {
+    throw new RangeError("maxTurns must be a positive safe integer");
+  }
+  if (options.timeoutMs !== undefined && (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs <= 0)) {
+    throw new RangeError("timeoutMs must be a positive safe integer");
+  }
+  if (options.outputFormat !== undefined && !["json", "text", "stream-json"].includes(options.outputFormat)) {
+    throw new TypeError('outputFormat must be "json", "text", or "stream-json"');
+  }
+}
+function buildArgs(prompt, options) {
+  const outputFormat = options.outputFormat ?? "json";
+  const args = [
+    ...options.bin?.args ?? [],
+    "-p",
+    "--output-format",
+    outputFormat
+  ];
+  if (outputFormat === "stream-json")
+    args.push("--verbose");
+  if (options.maxTurns !== undefined) {
+    args.push("--max-turns", String(options.maxTurns));
+  }
+  if (options.skipPermissions)
+    args.push("--dangerously-skip-permissions");
+  args.push(prompt);
+  return args;
+}
+async function query(prompt, options = {}) {
+  validateQueryInput(prompt, options);
+  const file = options.bin?.file ?? "ur";
+  const args = buildArgs(prompt, options);
+  const env = {
+    ...process.env,
+    ...options.env ?? {},
+    ...options.model ? { UR_MODEL: options.model } : {}
+  };
+  return await new Promise((resolve) => {
+    import_node_child_process.execFile(file, args, { cwd: options.cwd, env, timeout: options.timeoutMs ?? 30 * 60 * 1000, maxBuffer: 64 * 1024 * 1024 }, (error, stdout, stderr) => {
+      const raw = stdout ?? "";
+      const exitCode = error && typeof error.code === "number" ? error.code : error ? 1 : 0;
+      resolve({
+        ok: exitCode === 0,
+        text: parseResultText(raw),
+        raw,
+        exitCode,
+        stderr: stderr ?? ""
+      });
+    });
+  });
+}
+async function queryJSON(prompt, options = {}) {
+  const { ok, text } = await query(prompt, options);
+  if (!ok)
+    return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+class UrClient {
+  defaults;
+  constructor(defaults = {}) {
+    this.defaults = defaults;
+  }
+  query(prompt, options = {}) {
+    return query(prompt, this.mergeOptions(options));
+  }
+  queryJSON(prompt, options = {}) {
+    return queryJSON(prompt, this.mergeOptions(options));
+  }
+  mergeOptions(options) {
+    return {
+      ...this.defaults,
+      ...options,
+      env: this.defaults.env || options.env ? { ...this.defaults.env ?? {}, ...options.env ?? {} } : undefined
+    };
+  }
+}

package/dist/sdk/index.d.ts

@@ -0,0 +1,68 @@
+/**
+ * UR programmatic SDK.
+ *
+ * A tiny, dependency-free wrapper around UR's headless mode (`ur -p
+ * --output-format json`) so other programs can drive the agent without parsing
+ * the TUI. It shells out to the installed `ur` binary, so it inherits the same
+ * permission model, MCP config, and local Ollama routing as the interactive CLI.
+ *
+ * This is the subprocess counterpart to the loopback A2A server: A2A is for
+ * agent-to-agent task hand-off over HTTP; this SDK is for local programmatic
+ * calls that launch an installed `ur` process.
+ *
+ * @example
+ *   import { query } from 'ur-agent/sdk'
+ *   const { text } = await query('Summarize the README in one line')
+ *   console.log(text)
+ */
+export type OutputFormat = 'json' | 'text' | 'stream-json';
+export type QueryOptions = {
+    /** Working directory for the run. Defaults to process.cwd(). */
+    cwd?: string;
+    /** Force a specific Ollama model (sets UR_MODEL for the child). */
+    model?: string;
+    /** Cap agentic turns. */
+    maxTurns?: number;
+    /** Output format passed to `ur -p`. Defaults to 'json'. */
+    outputFormat?: OutputFormat;
+    /** Pass --dangerously-skip-permissions (sandboxes/CI only). */
+    skipPermissions?: boolean;
+    /** Kill the run after this many ms. Defaults to 30 minutes. */
+    timeoutMs?: number;
+    /** Override the binary. Defaults to 'ur' on PATH. */
+    bin?: {
+        file: string;
+        args?: string[];
+    };
+    /** Extra environment variables for the child process. */
+    env?: Record<string, string>;
+};
+export type QueryResult = {
+    ok: boolean;
+    /** Best-effort final assistant text. */
+    text: string;
+    /** Raw stdout from the child. */
+    raw: string;
+    exitCode: number;
+    stderr: string;
+};
+/**
+ * Extract the final text from JSON, text, or stream-json (NDJSON) output.
+ *
+ * For stream-json, the terminal `result` envelope wins even when lifecycle
+ * events follow it. If the input is not structured output, the original
+ * trimmed text is returned.
+ */
+export declare function parseResultText(stdout: string): string;
+/** Run a single headless UR query and resolve with its result. */
+export declare function query(prompt: string, options?: QueryOptions): Promise<QueryResult>;
+/** Run a query expecting JSON content and parse it (returns null on failure). */
+export declare function queryJSON<T = unknown>(prompt: string, options?: QueryOptions): Promise<T | null>;
+/** A reusable client that applies shared defaults to every query. */
+export declare class UrClient {
+    private readonly defaults;
+    constructor(defaults?: QueryOptions);
+    query(prompt: string, options?: QueryOptions): Promise<QueryResult>;
+    queryJSON<T = unknown>(prompt: string, options?: QueryOptions): Promise<T | null>;
+    private mergeOptions;
+}

package/dist/sdk/index.js

@@ -0,0 +1,149 @@
+// src/sdk/index.ts
+import { execFile } from "node:child_process";
+function pickResultText(parsed) {
+  if (parsed == null)
+    return null;
+  if (typeof parsed === "string")
+    return parsed;
+  if (Array.isArray(parsed)) {
+    for (let i = parsed.length - 1;i >= 0; i--) {
+      const found = pickResultText(parsed[i]);
+      if (found !== null)
+        return found;
+    }
+    return null;
+  }
+  if (typeof parsed === "object") {
+    const obj = parsed;
+    if (typeof obj.result === "string")
+      return obj.result;
+    if (typeof obj.text === "string")
+      return obj.text;
+    if (typeof obj.content === "string")
+      return obj.content;
+  }
+  return null;
+}
+function pickTerminalResultText(parsed) {
+  for (let i = parsed.length - 1;i >= 0; i--) {
+    const item = parsed[i];
+    if (typeof item === "object" && item !== null && !Array.isArray(item) && item.type === "result") {
+      const found = pickResultText(item);
+      if (found !== null)
+        return found;
+    }
+  }
+  return null;
+}
+function parseResultText(stdout) {
+  const trimmed = stdout.trim();
+  if (!trimmed)
+    return "";
+  try {
+    return pickResultText(JSON.parse(trimmed)) ?? trimmed;
+  } catch {
+    const parsedLines = [];
+    for (const line of trimmed.split(/\r?\n/u)) {
+      const candidate = line.trim();
+      if (!candidate)
+        continue;
+      try {
+        parsedLines.push(JSON.parse(candidate));
+      } catch {}
+    }
+    if (parsedLines.length === 0)
+      return trimmed;
+    return pickTerminalResultText(parsedLines) ?? trimmed;
+  }
+}
+function validateQueryInput(prompt, options) {
+  if (typeof prompt !== "string" || prompt.trim().length === 0) {
+    throw new TypeError("prompt must be a non-empty string");
+  }
+  if (options.maxTurns !== undefined && (!Number.isSafeInteger(options.maxTurns) || options.maxTurns <= 0)) {
+    throw new RangeError("maxTurns must be a positive safe integer");
+  }
+  if (options.timeoutMs !== undefined && (!Number.isSafeInteger(options.timeoutMs) || options.timeoutMs <= 0)) {
+    throw new RangeError("timeoutMs must be a positive safe integer");
+  }
+  if (options.outputFormat !== undefined && !["json", "text", "stream-json"].includes(options.outputFormat)) {
+    throw new TypeError('outputFormat must be "json", "text", or "stream-json"');
+  }
+}
+function buildArgs(prompt, options) {
+  const outputFormat = options.outputFormat ?? "json";
+  const args = [
+    ...options.bin?.args ?? [],
+    "-p",
+    "--output-format",
+    outputFormat
+  ];
+  if (outputFormat === "stream-json")
+    args.push("--verbose");
+  if (options.maxTurns !== undefined) {
+    args.push("--max-turns", String(options.maxTurns));
+  }
+  if (options.skipPermissions)
+    args.push("--dangerously-skip-permissions");
+  args.push(prompt);
+  return args;
+}
+async function query(prompt, options = {}) {
+  validateQueryInput(prompt, options);
+  const file = options.bin?.file ?? "ur";
+  const args = buildArgs(prompt, options);
+  const env = {
+    ...process.env,
+    ...options.env ?? {},
+    ...options.model ? { UR_MODEL: options.model } : {}
+  };
+  return await new Promise((resolve) => {
+    execFile(file, args, { cwd: options.cwd, env, timeout: options.timeoutMs ?? 30 * 60 * 1000, maxBuffer: 64 * 1024 * 1024 }, (error, stdout, stderr) => {
+      const raw = stdout ?? "";
+      const exitCode = error && typeof error.code === "number" ? error.code : error ? 1 : 0;
+      resolve({
+        ok: exitCode === 0,
+        text: parseResultText(raw),
+        raw,
+        exitCode,
+        stderr: stderr ?? ""
+      });
+    });
+  });
+}
+async function queryJSON(prompt, options = {}) {
+  const { ok, text } = await query(prompt, options);
+  if (!ok)
+    return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+class UrClient {
+  defaults;
+  constructor(defaults = {}) {
+    this.defaults = defaults;
+  }
+  query(prompt, options = {}) {
+    return query(prompt, this.mergeOptions(options));
+  }
+  queryJSON(prompt, options = {}) {
+    return queryJSON(prompt, this.mergeOptions(options));
+  }
+  mergeOptions(options) {
+    return {
+      ...this.defaults,
+      ...options,
+      env: this.defaults.env || options.env ? { ...this.defaults.env ?? {}, ...options.env ?? {} } : undefined
+    };
+  }
+}
+export {
+  queryJSON,
+  query,
+  parseResultText,
+  UrClient
+};

package/docs/VALIDATION.md

@@ -19,7 +19,7 @@ You need:
 
 ```sh
 ur --version
-# expected for this release: "1.65.6 (UR-Nexus)"
+# expected for this release: "1.65.7 (UR-Nexus)"
 ```
 
 ## 0.1 First-workspace model selection (1.45.4)

package/documentation/app.js

@@ -480,6 +480,97 @@ const commands = [
     summary: 'Check npm for UR-Nexus updates. Interactive sessions also show an update-available notice when a newer package is published.',
     examples: ['ur update', 'ur upgrade'],
   },
+  {
+    name: 'agent-ci',
+    category: 'Verification',
+    aliases: [],
+    summary: 'Validate and run policy-gated agents in isolated CI worktrees, producing reviewable artifacts instead of directly mutating the checkout.',
+    examples: ['ur agent-ci init default', 'ur agent-ci validate default', 'ur agent-ci run default --dry-run --json'],
+  },
+  {
+    name: 'computer',
+    category: 'Desktop',
+    aliases: ['desktop-control'],
+    summary: 'Capture a desktop screenshot or perform a bounded click/type action after explicit --yes confirmation.',
+    examples: ['ur computer screenshot', 'ur computer screenshot ./desktop.png', 'ur computer click 640 480 --yes'],
+  },
+  {
+    name: 'desktop-qa',
+    category: 'Verification',
+    aliases: ['qa-desktop'],
+    summary: 'Validate and run bounded Electron desktop fixtures with teardown, masked screenshots, and reviewable evidence.',
+    examples: ['ur desktop-qa list', 'ur desktop-qa validate', 'ur desktop-qa run .ur/desktop-qa/fixtures/smoke.json --json'],
+  },
+  {
+    name: 'grade-trajectory',
+    category: 'Verification',
+    aliases: ['grade'],
+    summary: 'Grade a transcript for tool choice, verification, safety, and execution efficiency, with an optional fail threshold.',
+    examples: ['ur grade-trajectory --file run.jsonl', 'ur grade-trajectory --file run.jsonl --min-score 70 --json'],
+  },
+  {
+    name: 'import-session',
+    category: 'Sessions',
+    aliases: [],
+    summary: 'Validate and import a session transcript exported from another machine.',
+    examples: ['ur import-session ./session.jsonl'],
+  },
+  {
+    name: 'learn',
+    category: 'Automation',
+    aliases: [],
+    summary: 'Mine execution outcomes and promote only reviewed, evidence-backed workflow playbooks.',
+    examples: ['ur learn stats', 'ur learn playbooks mine --min-runs 3 --dry-run', 'ur learn playbooks list --status approved'],
+  },
+  {
+    name: 'memory-integrity',
+    category: 'Knowledge',
+    aliases: ['mem-verify'],
+    summary: 'Baseline, verify, or quarantine file-backed memory stores when integrity checks fail.',
+    examples: ['ur memory-integrity verify', 'ur memory-integrity baseline --store all', 'ur memory-integrity verify --json'],
+  },
+  {
+    name: 'memory-suggest',
+    category: 'Knowledge',
+    aliases: ['suggest-memory'],
+    summary: 'Propose non-secret durable facts from recent user turns without silently writing them to memory.',
+    examples: ['ur memory-suggest --turns 12 --min-confidence 0.8'],
+  },
+  {
+    name: 'permission-profile',
+    category: 'Ops',
+    aliases: ['profile'],
+    summary: 'List named permission profiles or switch and clear the active profile.',
+    examples: ['ur permission-profile list', 'ur permission-profile use reviewing', 'ur permission-profile clear'],
+  },
+  {
+    name: 'selftest',
+    category: 'Verification',
+    aliases: ['drills'],
+    summary: 'Run observable end-to-end drills against the shipped binary and list manual prompts for checks that need a live model.',
+    examples: ['ur selftest list', 'ur selftest run --json'],
+  },
+  {
+    name: 'sources',
+    category: 'Security',
+    aliases: [],
+    summary: 'List untrusted fetched sources and check whether a text span came from an injection-flagged source.',
+    examples: ['ur sources', 'ur sources --flagged --json', 'ur sources --check "ignore previous instructions"'],
+  },
+  {
+    name: 'speak',
+    category: 'Desktop',
+    aliases: ['say'],
+    summary: 'Read supplied text aloud through the supported local system speech synthesiser.',
+    examples: ['ur speak "Build complete"', 'ur speak --voice Alex --rate 190 "Tests passed"'],
+  },
+  {
+    name: 'workspace',
+    category: 'Agent Platform',
+    aliases: [],
+    summary: 'Coordinate a dependency-aware task graph across repository worktrees with validation, verification, PR, and rollback plans.',
+    examples: ['ur workspace init', 'ur workspace validate', 'ur workspace run --max-concurrency 3 --dry-run', 'ur workspace pr-plan'],
+  },
   {
     name: 'workflow',
     category: 'Agent Platform',

package/documentation/index.html

@@ -45,7 +45,7 @@
     <main id="content" class="content">
       <header class="topbar">
         <div>
-          <p class="eyebrow">Version 1.65.6</p>
+          <p class="eyebrow">Version 1.65.7</p>
           <h1>UR-Nexus Documentation</h1>
           <p class="lead">A practical, tutorial-style reference for installing, configuring, automating, extending, and operating UR-Nexus.</p>
         </div>

package/extensions/jetbrains-ur/build.gradle.kts

@@ -7,7 +7,7 @@ plugins {
 }
 
 group = "dev.urnexus"
-version = "1.65.6"
+version = "1.65.7"
 
 repositories {
     mavenCentral()

package/extensions/vscode-ur-inline-diffs/package.json

@@ -2,7 +2,7 @@
   "name": "ur-inline-diffs",
   "displayName": "UR Inline Diffs",
   "description": "Review, apply, and reject UR inline diff bundles from .ur/ide/diffs inside VS Code.",
-  "version": "1.65.6",
+  "version": "1.65.7",
   "publisher": "ur-nexus",
   "engines": {
     "vscode": "^1.92.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ur-agent",
-  "version": "1.65.6",
+  "version": "1.65.7",
   "description": "UR-Nexus — autonomous engineering workflow engine (plan, execute, test, verify, document, benchmark, reproduce)",
   "type": "module",
   "packageManager": "bun@1.3.14",
@@ -27,10 +27,21 @@
   "bin": {
     "ur": "bin/ur.js"
   },
+  "exports": {
+    "./sdk": {
+      "types": "./dist/sdk/index.d.ts",
+      "import": "./dist/sdk/index.js",
+      "require": "./dist/sdk/index.cjs",
+      "default": "./dist/sdk/index.js"
+    },
+    "./package.json": "./package.json",
+    "./dist/*": "./dist/*"
+  },
   "files": [
     "bin",
     "dist",
     "docs",
+    "technical",
     "documentation",
     "extensions",
     "examples",
@@ -68,7 +79,7 @@
     "safety:matrix": "bun scripts/generate-safety-matrix.mjs",
     "provider:smoke": "bun scripts/provider-smoke.mjs",
     "package:check": "node scripts/package-check.mjs",
-    "prepack": "bun run release:check"
+    "prepack": "bun run build && bun run release:check"
   },
   "overrides": {
     "@hono/node-server": "2.0.11",