ur-agent 1.65.9 → 1.65.11

package/CHANGELOG.md

@@ -1,5 +1,53 @@
 # Changelog
 
+## 1.65.11
+
+- Hardened `AskUserQuestion` for weaker models without inventing user intent.
+  Its model schema now exposes only a strict 1–4-question request shape with
+  2–8 nested choices, compact validation explains malformed flat arrays, and
+  lossless recovery never fabricates labels, descriptions, or prose-derived
+  questions.
+- Made question interaction truthful and safe. Answers are accepted only after
+  post-permission validation has collected one real response per question,
+  custom `Other` works in both menu layouts, question-keyed UI state is
+  prototype-safe, and HTML-configured previews render escaped inert text
+  instead of executable model markup.
+- Improved weak-model file-tool recovery. `Write` now explains that
+  `file_path` and complete `content` must be supplied together and never treats
+  surrounding prose as file data; a narrow deletion-only `Edit` whose desired
+  replacement is already uniquely present reports “already up to date” without
+  writing, while ambiguous and general stale edits still fail closed.
+- Corrected task-gate control flow and diagnostics. `ExitPlanMode` can reach
+  its approval transition without an implementation task, stale out-of-mode
+  calls remain invalid, and gate recovery distinguishes a missing plan from an
+  all-terminal task list so unfinished Edit/Bash work is reopened rather than
+  retried unchanged. A simple loopback browser preview bypasses only the task
+  gate while retaining Bash permission and rewrite checks.
+- Kept package validation compatible with both npm 11 and npm 12
+  `npm pack --json` output shapes, so upgrading npm does not make a valid
+  tarball look missing during tests or release checks.
+
+## 1.65.10
+
+- Reworked approved-plan execution into a capability-aware task graph. Plans
+  now split separately completable outcomes, keep genuinely atomic work whole,
+  express review-to-fix and verification dependencies, and launch only ready,
+  non-conflicting work in parallel waves of at most eight. The handoff uses
+  `TaskCreate`/`TaskUpdate`, `TodoWrite`, or the numbered plan according to the
+  tools actually available, and never advertises a worker that is not active.
+- Made the built-in Explore and Plan agents available in the standard CLI with
+  structurally read-only tools. Parent and child execution boundaries reject
+  mutations even after permission-hook rewrites, custom agents cannot inherit
+  the exemption by reusing a name, and team creation/deletion rechecks live
+  plan mode before changing state.
+- Task tools now accept positive safe-integer JSON task IDs as well as strings
+  and normalize them to canonical persisted strings, fixing smaller models
+  that call `TaskUpdate` with `taskId: 1`.
+- Exact edit failures now return a bounded preview and a verified line anchor
+  for a fresh, smaller contiguous match. Large cross-section replacements fail
+  closed with actionable recovery instead of retrying unchanged or applying a
+  risky fuzzy edit.
+
 ## 1.65.9
 
 - Fixed the plan-file/task-list deadlock. While plan mode is active, the exact