ur-agent 1.80.2 → 1.80.4

package/dist/cli.js

@@ -107784,7 +107784,7 @@ var init_auth = __esm(() => {
 
 // src/utils/userAgent.ts
 function getURCodeUserAgent() {
-  return `ur/${"1.80.2"}`;
+  return `ur/${"1.80.4"}`;
 }
 
 // src/utils/workloadContext.ts
@@ -107806,7 +107806,7 @@ function getUserAgent() {
   const clientApp = process.env.UR_AGENT_SDK_CLIENT_APP ? `, client-app/${process.env.UR_AGENT_SDK_CLIENT_APP}` : "";
   const workload = getWorkload();
   const workloadSuffix = workload ? `, workload/${workload}` : "";
-  return `ur-cli/${"1.80.2"} (${process.env.USER_TYPE}, ${process.env.UR_CODE_ENTRYPOINT ?? "cli"}${agentSdkVersion}${clientApp}${workloadSuffix})`;
+  return `ur-cli/${"1.80.4"} (${process.env.USER_TYPE}, ${process.env.UR_CODE_ENTRYPOINT ?? "cli"}${agentSdkVersion}${clientApp}${workloadSuffix})`;
 }
 function getMCPUserAgent() {
   const parts = [];
@@ -107820,7 +107820,7 @@ function getMCPUserAgent() {
     parts.push(`client-app/${process.env.UR_AGENT_SDK_CLIENT_APP}`);
   }
   const suffix = parts.length > 0 ? ` (${parts.join(", ")})` : "";
-  return `ur/${"1.80.2"}${suffix}`;
+  return `ur/${"1.80.4"}${suffix}`;
 }
 function getWebFetchUserAgent() {
   return `UR-User (${getURCodeUserAgent()})`;
@@ -107958,7 +107958,7 @@ var init_user = __esm(() => {
       deviceId,
       sessionId: getSessionId(),
       email: getEmail(),
-      appVersion: "1.80.2",
+      appVersion: "1.80.4",
       platform: getHostPlatformForAnalytics(),
       organizationUuid,
       accountUuid,
@@ -115845,7 +115845,7 @@ var init_metadata = __esm(() => {
   COMPOUND_OPERATOR_REGEX = /\s*(?:&&|\|\||[;|])\s*/;
   WHITESPACE_REGEX = /\s+/;
   getVersionBase = memoize_default(() => {
-    const match = "1.80.2".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
+    const match = "1.80.4".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
     return match ? match[0] : undefined;
   });
   buildEnvContext = memoize_default(async () => {
@@ -115885,7 +115885,7 @@ var init_metadata = __esm(() => {
       isGithubAction: isEnvTruthy(process.env.GITHUB_ACTIONS),
       isURCodeAction: isEnvTruthy(process.env.UR_CODE_ACTION),
       isURAiAuth: isURAISubscriber(),
-      version: "1.80.2",
+      version: "1.80.4",
       versionBase: getVersionBase(),
       buildTime: "",
       deploymentEnvironment: env2.detectDeploymentEnvironment(),
@@ -116555,7 +116555,7 @@ function initialize1PEventLogging() {
   const platform2 = getPlatform();
   const attributes = {
     [import_semantic_conventions4.ATTR_SERVICE_NAME]: "ur",
-    [import_semantic_conventions4.ATTR_SERVICE_VERSION]: "1.80.2"
+    [import_semantic_conventions4.ATTR_SERVICE_VERSION]: "1.80.4"
   };
   if (platform2 === "wsl") {
     const wslVersion = getWslVersion();
@@ -116583,7 +116583,7 @@ function initialize1PEventLogging() {
       })
     ]
   });
-  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.urhq.ur.events", "1.80.2");
+  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.urhq.ur.events", "1.80.4");
 }
 async function reinitialize1PEventLoggingIfConfigChanged() {
   if (!is1PEventLoggingEnabled() || !firstPartyEventLoggerProvider) {
@@ -119068,7 +119068,7 @@ var init_types2 = __esm(() => {
       requireBeforeChanges: exports_external.object({
         enabled: exports_external.boolean().optional(),
         freeReads: exports_external.number().optional()
-      }).optional().describe("Require a task list before any tool that changes the workspace (Edit, Write, Bash, ...). " + "Reads are never blocked, so the agent can investigate before planning; freeReads is how many " + "tool calls may run before the gate applies at all. Set enabled=false to make the task list advisory again.")
+      }).optional().describe("Require a task list before any tool that changes the workspace (Edit, Write, Bash, ...). " + "The default strict-hybrid policy enforces classified multi-step, risky, delegated, and release work " + "while allowing positively classified atomic changes to proceed directly. Reads are never blocked. " + "Set freeReads=0 to require a task before every mutation, or enabled=false to make task tracking advisory.")
     }).optional().describe("Task list behaviour."),
     context: exports_external.object({
       pruneToolResults: exports_external.object({
@@ -126304,6 +126304,7 @@ var init_a2aCardSignature = () => {};
 var exports_trends = {};
 __export(exports_trends, {
   formatAgentTrendReport: () => formatAgentTrendReport,
+  formatA2AV1AgentCard: () => formatA2AV1AgentCard,
   formatA2AAgentCard: () => formatA2AAgentCard,
   buildAgentTrendReport: () => buildAgentTrendReport,
   buildA2AV1AgentCard: () => buildA2AV1AgentCard,
@@ -126542,7 +126543,10 @@ function formatAgentTrendReport(report = buildAgentTrendReport()) {
 function formatA2AAgentCard(options = {}, pretty = true) {
   return JSON.stringify(buildA2AAgentCard(options), null, pretty ? 2 : 0);
 }
-var urVersion = "1.80.2", researchSnapshotDate = "2026-08-10", coverage, priorityRoadmap;
+function formatA2AV1AgentCard(options = {}, pretty = true) {
+  return JSON.stringify(buildA2AV1AgentCard(options), null, pretty ? 2 : 0);
+}
+var urVersion = "1.80.4", researchSnapshotDate = "2026-08-10", coverage, priorityRoadmap;
 var init_trends = __esm(() => {
   init_a2aCardSignature();
   coverage = [
@@ -129432,7 +129436,7 @@ function getAttributionHeader(fingerprint) {
   if (!isAttributionHeaderEnabled()) {
     return "";
   }
-  const version2 = `${"1.80.2"}.${fingerprint}`;
+  const version2 = `${"1.80.4"}.${fingerprint}`;
   const entrypoint = process.env.UR_CODE_ENTRYPOINT ?? "unknown";
   const cch = "";
   const workload = getWorkload();
@@ -168090,6 +168094,7 @@ Usage notes:
   - When using fetched content in your final answer, mention the fetched URL or domain as the source
   - Results may be summarized if the content is very large
   - Includes a self-cleaning 15-minute cache for faster responses when repeatedly accessing the same URL
+  - A permanent HTTP 4xx response means the URL cannot be fetched as written. Do not retry that URL with the same or a different prompt; use WebSearch, fetch a parent/index page, or choose another source.
   - When a URL redirects to a different host, the tool will inform you and provide the redirect URL in a special format. You should then make a new WebFetch request with the redirect URL to fetch the content.
   - For GitHub URLs, prefer using the gh CLI via Bash instead (e.g., gh pr view, gh issue view, gh api).
 `;
@@ -184625,7 +184630,7 @@ var init_projectSafety = __esm(() => {
 function getInstruments() {
   if (instruments)
     return instruments;
-  const meter = import_api10.metrics.getMeter("ur-agent.gen_ai", "1.80.2");
+  const meter = import_api10.metrics.getMeter("ur-agent.gen_ai", "1.80.4");
   instruments = {
     operationDuration: meter.createHistogram("gen_ai.client.operation.duration", {
       description: "GenAI operation duration.",
@@ -184723,7 +184728,7 @@ function genAiAgentAttributes() {
     "gen_ai.operation.name": GEN_AI_OPERATION_INVOKE_AGENT,
     "gen_ai.provider.name": "ur",
     "gen_ai.agent.name": "UR-Nexus",
-    "gen_ai.agent.version": "1.80.2"
+    "gen_ai.agent.version": "1.80.4"
   };
 }
 function genAiWorkflowAttributes(workflowName, workflowRunId) {
@@ -184744,7 +184749,7 @@ function genAiWorkflowAttributes(workflowName, workflowRunId) {
 function startGenAiWorkflowSpan(workflowName, workflowRunId) {
   const attributes = genAiWorkflowAttributes(workflowName, workflowRunId);
   const name = typeof attributes["gen_ai.workflow.name"] === "string" ? `invoke_workflow ${attributes["gen_ai.workflow.name"]}` : GEN_AI_OPERATION_INVOKE_WORKFLOW;
-  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.80.2").startSpan(name, { kind: import_api10.SpanKind.INTERNAL, attributes });
+  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.80.4").startSpan(name, { kind: import_api10.SpanKind.INTERNAL, attributes });
 }
 function endGenAiWorkflowSpan(span, options2 = {}) {
   try {
@@ -184782,7 +184787,7 @@ function startGenAiMemorySpan(operation, options2 = {}) {
   if (options2.recordCount !== undefined && Number.isInteger(options2.recordCount) && options2.recordCount >= 0) {
     attributes["gen_ai.memory.record.count"] = options2.recordCount;
   }
-  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.80.2").startSpan(operation, { kind: import_api10.SpanKind.INTERNAL, attributes });
+  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.80.4").startSpan(operation, { kind: import_api10.SpanKind.INTERNAL, attributes });
 }
 function endGenAiMemorySpan(span, options2 = {}) {
   try {
@@ -278497,7 +278502,7 @@ function getTelemetryAttributes() {
     attributes["session.id"] = sessionId;
   }
   if (shouldIncludeAttribute("OTEL_METRICS_INCLUDE_VERSION")) {
-    attributes["app.version"] = "1.80.2";
+    attributes["app.version"] = "1.80.4";
   }
   const oauthAccount = getOauthAccountInfo();
   if (oauthAccount) {
@@ -319488,7 +319493,7 @@ function getInstallationEnv() {
   return;
 }
 function getURCodeVersion() {
-  return "1.80.2";
+  return "1.80.4";
 }
 async function getInstalledVSCodeExtensionVersion(command) {
   const { stdout } = await execFileNoThrow(command, ["--list-extensions", "--show-versions"], {
@@ -326858,7 +326863,7 @@ async function setupSdkMcpClients(sdkMcpConfigs, sendMcpMessage) {
     const client2 = new Client({
       name: "ur",
       title: "UR",
-      version: "1.80.2",
+      version: "1.80.4",
       description: "UR-Nexus autonomous engineering workflow engine",
       websiteUrl: PRODUCT_URL
     }, {
@@ -327219,7 +327224,7 @@ var init_client5 = __esm(() => {
       const client2 = new Client({
         name: "ur",
         title: "UR",
-        version: "1.80.2",
+        version: "1.80.4",
         description: "UR-Nexus autonomous engineering workflow engine",
         websiteUrl: PRODUCT_URL
       }, {
@@ -339957,7 +339962,7 @@ async function createRuntime() {
   bootstrapTelemetry();
   const resource = defaultResource().merge(detectResources({ detectors: [envDetector] })).merge(resourceFromAttributes({
     [import_semantic_conventions7.ATTR_SERVICE_NAME]: "ur-agent",
-    [import_semantic_conventions7.ATTR_SERVICE_VERSION]: "1.80.2"
+    [import_semantic_conventions7.ATTR_SERVICE_VERSION]: "1.80.4"
   }));
   const tracerProvider = exporters.traces.length > 0 ? new BasicTracerProvider({
     resource,
@@ -339990,11 +339995,11 @@ async function createRuntime() {
   setMeterProvider(meterProvider);
   setLoggerProvider(loggerProvider);
   if (meterProvider) {
-    const meter = meterProvider.getMeter("ur-agent", "1.80.2");
+    const meter = meterProvider.getMeter("ur-agent", "1.80.4");
     setMeter(meter, (name, options2) => meter.createCounter(name, options2));
   }
   if (loggerProvider) {
-    setEventLogger(loggerProvider.getLogger("ur-agent.events", "1.80.2"));
+    setEventLogger(loggerProvider.getLogger("ur-agent.events", "1.80.4"));
   }
   if (!cleanupRegistered3) {
     cleanupRegistered3 = true;
@@ -340656,9 +340661,9 @@ async function assertMinVersion() {
   if (false) {}
   try {
     const versionConfig = await getDynamicConfig_BLOCKS_ON_INIT("tengu_version_config", { minVersion: "0.0.0" });
-    if (versionConfig.minVersion && lt("1.80.2", versionConfig.minVersion)) {
+    if (versionConfig.minVersion && lt("1.80.4", versionConfig.minVersion)) {
       console.error(`
-It looks like your version of UR (${"1.80.2"}) needs an update.
+It looks like your version of UR (${"1.80.4"}) needs an update.
 A newer version (${versionConfig.minVersion} or higher) is required to continue.
 
 To update, please run:
@@ -340874,7 +340879,7 @@ async function installGlobalPackage(specificVersion) {
     logError2(new AutoUpdaterError("Another process is currently installing an update"));
     logEvent("tengu_auto_updater_lock_contention", {
       pid: process.pid,
-      currentVersion: "1.80.2"
+      currentVersion: "1.80.4"
     });
     return "in_progress";
   }
@@ -340883,7 +340888,7 @@ async function installGlobalPackage(specificVersion) {
     if (!env2.isRunningWithBun() && env2.isNpmFromWindowsPath()) {
       logError2(new Error("Windows NPM detected in WSL environment"));
       logEvent("tengu_auto_updater_windows_npm_in_wsl", {
-        currentVersion: "1.80.2"
+        currentVersion: "1.80.4"
       });
       console.error(`
 Error: Windows NPM detected in WSL
@@ -341418,7 +341423,7 @@ function detectLinuxGlobPatternWarnings() {
 }
 async function getDoctorDiagnostic() {
   const installationType = await getCurrentInstallationType();
-  const version2 = typeof MACRO !== "undefined" ? "1.80.2" : "unknown";
+  const version2 = typeof MACRO !== "undefined" ? "1.80.4" : "unknown";
   const installationPath = await getInstallationPath();
   const invokedBinary = getInvokedBinary();
   const multipleInstallations = await detectMultipleInstallations();
@@ -342353,8 +342358,8 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
     const maxVersion = await getMaxVersion();
     if (maxVersion && gt(version2, maxVersion)) {
       logForDebugging(`Native installer: maxVersion ${maxVersion} is set, capping update from ${version2} to ${maxVersion}`);
-      if (gte("1.80.2", maxVersion)) {
-        logForDebugging(`Native installer: current version ${"1.80.2"} is already at or above maxVersion ${maxVersion}, skipping update`);
+      if (gte("1.80.4", maxVersion)) {
+        logForDebugging(`Native installer: current version ${"1.80.4"} is already at or above maxVersion ${maxVersion}, skipping update`);
         logEvent("tengu_native_update_skipped_max_version", {
           latency_ms: Date.now() - startTime,
           max_version: maxVersion,
@@ -342365,7 +342370,7 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
       version2 = maxVersion;
     }
   }
-  if (!forceReinstall && version2 === "1.80.2" && await versionIsAvailable(version2) && await isPossibleURBinary(executablePath)) {
+  if (!forceReinstall && version2 === "1.80.4" && await versionIsAvailable(version2) && await isPossibleURBinary(executablePath)) {
     logForDebugging(`Found ${version2} at ${executablePath}, skipping install`);
     logEvent("tengu_native_update_complete", {
       latency_ms: Date.now() - startTime,
@@ -391965,100 +391970,281 @@ var init_preapproved = __esm(() => {
   })());
 });
 
-// src/tools/WebFetchTool/UI.tsx
-function renderToolUseMessage15({
-  url: url3,
-  prompt
-}, {
-  verbose
-}) {
-  if (!url3) {
-    return null;
+// src/utils/messagePredicates.ts
+function isHumanTurn(m) {
+  return m.type === "user" && !m.isMeta && m.toolUseResult === undefined;
+}
+
+// src/services/tools/repeatedFailureGuard.ts
+import { createHash as createHash30 } from "crypto";
+function writeFramedText(hash3, value) {
+  hash3.update(`${value.length}:`);
+  for (let offset = 0;offset < value.length; ) {
+    const end = Math.min(offset + HASH_CHUNK_CODE_UNITS, value.length);
+    hash3.update(value.slice(offset, end), "utf16le");
+    offset = end;
   }
-  if (verbose) {
-    return `url: "${url3}"${verbose && prompt ? `, prompt: "${prompt}"` : ""}`;
+}
+function writeToken(hash3, kind, value = "") {
+  writeFramedText(hash3, kind);
+  writeFramedText(hash3, value);
+}
+function visitCanonical(value, state, depth) {
+  state.nodesVisited++;
+  if (state.nodesVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalNodes || depth > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalDepth) {
+    throw new CanonicalTraversalLimitError;
+  }
+  if (value === null) {
+    writeToken(state.hash, "null");
+    return;
+  }
+  switch (typeof value) {
+    case "string":
+      state.textCodeUnitsVisited += value.length;
+      if (state.textCodeUnitsVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalTextCodeUnits) {
+        throw new CanonicalTraversalLimitError;
+      }
+      writeToken(state.hash, "string", value);
+      return;
+    case "number":
+      writeToken(state.hash, "number", Object.is(value, -0) ? "-0" : String(value));
+      return;
+    case "boolean":
+      writeToken(state.hash, "boolean", String(value));
+      return;
+    case "undefined":
+      writeToken(state.hash, "undefined");
+      return;
+    case "bigint":
+      writeToken(state.hash, "bigint", value.toString());
+      return;
+    case "symbol": {
+      const description = String(value.description ?? "");
+      state.textCodeUnitsVisited += description.length;
+      if (state.textCodeUnitsVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalTextCodeUnits) {
+        throw new CanonicalTraversalLimitError;
+      }
+      writeToken(state.hash, "symbol", description);
+      return;
+    }
+    case "function": {
+      const name = value.name || "<anonymous>";
+      state.textCodeUnitsVisited += name.length;
+      if (state.textCodeUnitsVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalTextCodeUnits) {
+        throw new CanonicalTraversalLimitError;
+      }
+      writeToken(state.hash, "function", name);
+      return;
+    }
+    case "object": {
+      const object4 = value;
+      const existingReference = state.seen.get(object4);
+      if (existingReference !== undefined) {
+        writeToken(state.hash, "reference", String(existingReference));
+        return;
+      }
+      const reference = state.nextReference++;
+      state.seen.set(object4, reference);
+      if (Array.isArray(value)) {
+        if (value.length + state.nodesVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalNodes) {
+          throw new CanonicalTraversalLimitError;
+        }
+        writeToken(state.hash, "array", String(value.length));
+        for (let index2 = 0;index2 < value.length; index2++) {
+          if (!(index2 in value)) {
+            writeToken(state.hash, "hole");
+            continue;
+          }
+          visitCanonical(value[index2], state, depth + 1);
+        }
+        return;
+      }
+      const record3 = value;
+      const keys2 = Object.keys(record3);
+      if (keys2.length + state.nodesVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalNodes) {
+        throw new CanonicalTraversalLimitError;
+      }
+      keys2.sort();
+      writeToken(state.hash, "object", String(keys2.length));
+      for (const key of keys2) {
+        state.textCodeUnitsVisited += key.length;
+        if (state.textCodeUnitsVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalTextCodeUnits) {
+          throw new CanonicalTraversalLimitError;
+        }
+        writeToken(state.hash, "key", key);
+        visitCanonical(record3[key], state, depth + 1);
+      }
+      return;
+    }
   }
-  return url3;
 }
-function renderToolUseProgressMessage8() {
-  return /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(MessageResponse, {
-    height: 1,
-    children: /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
-      dimColor: true,
-      children: "Fetching\u2026"
-    }, undefined, false, undefined, this)
-  }, undefined, false, undefined, this);
+function digestText(domain2, value) {
+  const hash3 = createHash30("sha256");
+  writeToken(hash3, "domain", domain2);
+  writeToken(hash3, "value", value);
+  return hash3.digest("hex");
 }
-function renderToolResultMessage14({
-  bytes,
-  code,
-  codeText,
-  result
-}, _progressMessagesForMessage, {
-  verbose
-}) {
-  const formattedSize = formatFileSize(bytes);
-  if (verbose) {
-    return /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedBox_default, {
-      flexDirection: "column",
-      children: [
-        /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(MessageResponse, {
-          height: 1,
-          children: /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
-            children: [
-              "Received ",
-              /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
-                bold: true,
-                children: formattedSize
-              }, undefined, false, undefined, this),
-              " (",
-              code,
-              " ",
-              codeText,
-              ")"
-            ]
-          }, undefined, true, undefined, this)
-        }, undefined, false, undefined, this),
-        /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedBox_default, {
-          flexDirection: "column",
-          children: /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
-            children: result
-          }, undefined, false, undefined, this)
-        }, undefined, false, undefined, this)
-      ]
-    }, undefined, true, undefined, this);
+function canonicalInputDigest(input) {
+  const hash3 = createHash30("sha256");
+  writeToken(hash3, "domain", "repeated-failure-input-v2");
+  visitCanonical(input, {
+    hash: hash3,
+    nextReference: 0,
+    nodesVisited: 0,
+    textCodeUnitsVisited: 0,
+    seen: new WeakMap
+  }, 0);
+  return hash3.digest("hex");
+}
+function uniqueSerializationFailureDigest() {
+  serializationFailureNonce++;
+  return digestText("repeated-failure-unserializable-v2", serializationFailureNonce.toString());
+}
+function scopeDigest(scope) {
+  return scope ? digestText("repeated-failure-scope-v2", scope) : UNSCOPED_DIGEST;
+}
+function callSignature(toolName, input, scope) {
+  let inputDigest;
+  try {
+    inputDigest = canonicalInputDigest(input);
+  } catch {
+    inputDigest = uniqueSerializationFailureDigest();
   }
-  return /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(MessageResponse, {
-    height: 1,
-    children: /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
-      children: [
-        "Received ",
-        /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
-          bold: true,
-          children: formattedSize
-        }, undefined, false, undefined, this),
-        " (",
-        code,
-        " ",
-        codeText,
-        ")"
-      ]
-    }, undefined, true, undefined, this)
-  }, undefined, false, undefined, this);
+  return [
+    SIGNATURE_VERSION,
+    scopeDigest(scope),
+    digestText("repeated-failure-tool-v2", toolName),
+    inputDigest
+  ].join(":");
 }
-function getToolUseSummary6(input) {
-  if (!input?.url) {
-    return null;
+function isSha256Digest(value) {
+  return value?.length === SHA256_HEX_LENGTH && /^[0-9a-f]+$/.test(value);
+}
+function signatureStorageIdentity(signature) {
+  if (signature.length === UNSCOPED_SIGNATURE_LENGTH || signature.length === SCOPED_SIGNATURE_LENGTH) {
+    const parts = signature.split(":");
+    if (parts.length === 4 && parts[0] === SIGNATURE_VERSION && (parts[1] === UNSCOPED_DIGEST || isSha256Digest(parts[1])) && isSha256Digest(parts[2]) && isSha256Digest(parts[3])) {
+      return { key: signature, scope: parts[1] };
+    }
   }
-  return truncate3(input.url, TOOL_SUMMARY_MAX_LENGTH);
+  return {
+    key: `${SIGNATURE_VERSION}:legacy:${digestText("repeated-failure-legacy-signature-v2", signature)}`,
+    scope: UNSCOPED_DIGEST
+  };
 }
-var jsx_dev_runtime140;
-var init_UI14 = __esm(() => {
-  init_MessageResponse();
-  init_toolLimits();
-  init_ink2();
-  init_format2();
-  jsx_dev_runtime140 = __toESM(require_jsx_dev_runtime(), 1);
+function pruneExpiredFailures(now5) {
+  for (const [signature, record3] of failureCounts) {
+    if (now5 >= record3.lastFailureAt && now5 - record3.lastFailureAt >= REPEATED_FAILURE_GUARD_LIMITS.entryTtlMs) {
+      failureCounts.delete(signature);
+    }
+  }
+}
+function enforceFailureBounds(scope) {
+  let entriesInScope = 0;
+  for (const record3 of failureCounts.values()) {
+    if (record3.scopeDigest === scope)
+      entriesInScope++;
+  }
+  let scopeOverflow = entriesInScope - REPEATED_FAILURE_GUARD_LIMITS.maxEntriesPerScope;
+  if (scopeOverflow > 0) {
+    for (const [signature, record3] of failureCounts) {
+      if (record3.scopeDigest !== scope)
+        continue;
+      failureCounts.delete(signature);
+      scopeOverflow--;
+      if (scopeOverflow === 0)
+        break;
+    }
+  }
+  while (failureCounts.size > REPEATED_FAILURE_GUARD_LIMITS.maxEntries) {
+    const oldest = failureCounts.keys().next().value;
+    if (oldest === undefined)
+      break;
+    failureCounts.delete(oldest);
+  }
+}
+function recordCallFailure(signature) {
+  const now5 = repeatedFailureNow();
+  pruneExpiredFailures(now5);
+  const identity5 = signatureStorageIdentity(signature);
+  const existing2 = failureCounts.get(identity5.key);
+  const next = (existing2?.failures ?? 0) + 1;
+  const signatureScope = existing2?.scopeDigest ?? identity5.scope;
+  failureCounts.delete(identity5.key);
+  failureCounts.set(identity5.key, {
+    failures: next,
+    lastFailureAt: now5,
+    scopeDigest: signatureScope
+  });
+  enforceFailureBounds(signatureScope);
+  return next;
+}
+function recordCallSuccess(signature) {
+  failureCounts.delete(signatureStorageIdentity(signature).key);
+}
+function clearRepeatedFailuresForScope(scope) {
+  const target = scopeDigest(scope);
+  let cleared = 0;
+  for (const [signature, record3] of failureCounts) {
+    if (record3.scopeDigest !== target)
+      continue;
+    failureCounts.delete(signature);
+    cleared++;
+  }
+  return cleared;
+}
+function clearRepeatedFailuresForQuery(queryChainId) {
+  return clearRepeatedFailuresForScope(`query:${queryChainId}`);
+}
+function checkRepeatedFailure(signature, config3 = REPEATED_FAILURE_DEFAULTS) {
+  if (!config3.enabled)
+    return { action: "allow" };
+  const now5 = repeatedFailureNow();
+  pruneExpiredFailures(now5);
+  const failures = failureCounts.get(signatureStorageIdentity(signature).key)?.failures ?? 0;
+  if (failures >= config3.abortAfter) {
+    return {
+      action: "abort",
+      reason: `This exact call has failed ${failures} times and is still being ` + `repeated. Stopping the turn rather than continuing to loop.`
+    };
+  }
+  if (failures >= config3.limit) {
+    return {
+      action: "refuse",
+      reason: `This exact call has already failed ${failures} times with the same ` + `arguments, so it will fail again. Do not retry it unchanged. Either ` + `fix the arguments, use a different tool, or tell the user what is ` + `blocking you and stop.`
+    };
+  }
+  return { action: "allow" };
+}
+var REPEATED_FAILURE_DEFAULTS, REPEATED_FAILURE_GUARD_LIMITS, SIGNATURE_VERSION = "rf2", UNSCOPED_DIGEST = "-", SHA256_HEX_LENGTH = 64, HASH_CHUNK_CODE_UNITS, UNSCOPED_SIGNATURE_LENGTH, SCOPED_SIGNATURE_LENGTH, failureCounts, serializationFailureNonce = 0n, repeatedFailureNow, CanonicalTraversalLimitError, RepeatedToolFailureAbort;
+var init_repeatedFailureGuard = __esm(() => {
+  REPEATED_FAILURE_DEFAULTS = {
+    enabled: false,
+    limit: 3,
+    abortAfter: 6
+  };
+  REPEATED_FAILURE_GUARD_LIMITS = {
+    maxEntries: 2048,
+    maxEntriesPerScope: 256,
+    entryTtlMs: 30 * 60 * 1000,
+    maxCanonicalNodes: 50000,
+    maxCanonicalDepth: 128,
+    maxCanonicalTextCodeUnits: 1e6
+  };
+  HASH_CHUNK_CODE_UNITS = 16 * 1024;
+  UNSCOPED_SIGNATURE_LENGTH = SIGNATURE_VERSION.length + 3 + 1 + SHA256_HEX_LENGTH * 2;
+  SCOPED_SIGNATURE_LENGTH = SIGNATURE_VERSION.length + 3 + SHA256_HEX_LENGTH * 3;
+  failureCounts = new Map;
+  repeatedFailureNow = Date.now;
+  CanonicalTraversalLimitError = class CanonicalTraversalLimitError extends Error {
+  };
+  RepeatedToolFailureAbort = class RepeatedToolFailureAbort extends Error {
+    constructor(message) {
+      super(message);
+      this.name = "RepeatedToolFailureAbort";
+      Object.setPrototypeOf(this, new.target.prototype);
+    }
+  };
 });
 
 // src/tools/WebFetchTool/utils.ts
@@ -392068,6 +392254,7 @@ __export(exports_utils2, {
   isPrivateAddress: () => isPrivateAddress,
   isPreapprovedUrl: () => isPreapprovedUrl,
   isPermittedRedirect: () => isPermittedRedirect,
+  isPermanentWebFetchStatus: () => isPermanentWebFetchStatus,
   getWithPermittedRedirects: () => getWithPermittedRedirects,
   getURLMarkdownContent: () => getURLMarkdownContent,
   clearWebFetchCache: () => clearWebFetchCache,
@@ -392075,10 +392262,14 @@ __export(exports_utils2, {
   assertPublicUrl: () => assertPublicUrl,
   applyPromptToMarkdown: () => applyPromptToMarkdown,
   UnsafeUrlError: () => UnsafeUrlError,
+  PermanentWebFetchHttpError: () => PermanentWebFetchHttpError,
   MAX_MARKDOWN_LENGTH: () => MAX_MARKDOWN_LENGTH
 });
 import { lookup } from "dns/promises";
 import { isIP as isIP6 } from "net";
+function isPermanentWebFetchStatus(status) {
+  return status >= 400 && status < 500 && ![408, 409, 425, 429].includes(status);
+}
 function clearWebFetchCache() {
   URL_CACHE.clear();
   DOMAIN_CHECK_CACHE.clear();
@@ -392273,6 +392464,9 @@ async function getWithPermittedRedirects(url3, signal, redirectChecker, depth =
       const hostname3 = new URL(url3).hostname;
       throw new EgressBlockedError(hostname3);
     }
+    if (axios_default.isAxiosError(error40) && error40.response && isPermanentWebFetchStatus(error40.response.status)) {
+      throw new PermanentWebFetchHttpError(error40.response.status);
+    }
     throw error40;
   }
 }
@@ -392402,7 +392596,7 @@ async function applyPromptToMarkdown(prompt, markdownContent, signal, isNonInter
   }
   return "No response from model";
 }
-var DomainBlockedError, DomainCheckFailedError, EgressBlockedError, UnsafeUrlError, CACHE_TTL_MS2, MAX_CACHE_SIZE_BYTES, URL_CACHE, DOMAIN_CHECK_CACHE, turndownServicePromise, MAX_URL_LENGTH = 2000, MAX_HTTP_CONTENT_LENGTH = 10485760, FETCH_TIMEOUT_MS3 = 60000, MAX_REDIRECTS = 10, MAX_MARKDOWN_LENGTH = 1e5;
+var DomainBlockedError, DomainCheckFailedError, EgressBlockedError, UnsafeUrlError, PermanentWebFetchHttpError, CACHE_TTL_MS2, MAX_CACHE_SIZE_BYTES, URL_CACHE, DOMAIN_CHECK_CACHE, turndownServicePromise, MAX_URL_LENGTH = 2000, MAX_HTTP_CONTENT_LENGTH = 10485760, FETCH_TIMEOUT_MS3 = 60000, MAX_REDIRECTS = 10, MAX_MARKDOWN_LENGTH = 1e5;
 var init_utils11 = __esm(() => {
   init_axios2();
   init_index_min();
@@ -392444,6 +392638,15 @@ var init_utils11 = __esm(() => {
       this.name = "UnsafeUrlError";
     }
   };
+  PermanentWebFetchHttpError = class PermanentWebFetchHttpError extends Error {
+    status;
+    constructor(status) {
+      super(`WebFetch received permanent HTTP ${status}. Do not retry this URL unchanged, even with a different prompt. Use WebSearch, fetch a parent/index page, or choose another source.`);
+      this.status = status;
+      this.name = "PermanentWebFetchHttpError";
+      Object.setPrototypeOf(this, new.target.prototype);
+    }
+  };
   CACHE_TTL_MS2 = 15 * 60 * 1000;
   MAX_CACHE_SIZE_BYTES = 50 * 1024 * 1024;
   URL_CACHE = new I({
@@ -392456,6 +392659,164 @@ var init_utils11 = __esm(() => {
   });
 });
 
+// src/tools/WebFetchTool/permanentFailureCircuit.ts
+function normalizedFailureUrl(url3) {
+  try {
+    const parsed = new URL(url3);
+    if (parsed.protocol === "http:")
+      parsed.protocol = "https:";
+    parsed.hash = "";
+    return parsed.toString();
+  } catch {
+    return url3;
+  }
+}
+function webFetchPermanentFailureScope(context5) {
+  if (context5.queryTracking?.chainId) {
+    return `query:${context5.queryTracking.chainId}`;
+  }
+  const latestHumanTurn = context5.messages.findLast(isHumanTurn)?.uuid;
+  return `session:${getSessionId()}:agent:${context5.agentId ?? "main"}:` + `turn:${latestHumanTurn ?? "untracked"}`;
+}
+function webFetchPermanentFailureSignature(scope, url3) {
+  return callSignature("WebFetchPermanentURL", { url: normalizedFailureUrl(url3) }, scope);
+}
+function circuitMessage(decision) {
+  const recovery = "Do not fetch this URL again in this turn, even with a different prompt. " + "Use WebSearch, fetch a parent/index page, or choose another source.";
+  if (decision.action === "abort") {
+    return `Repeated permanent WebFetch failure. ${recovery} Stopping the turn instead of continuing the loop.`;
+  }
+  return `WebFetch circuit breaker: this URL already returned a permanent HTTP client error. ${recovery}`;
+}
+async function withWebFetchPermanentFailureCircuit(url3, scope, operation) {
+  const signature = webFetchPermanentFailureSignature(scope, url3);
+  const decision = checkRepeatedFailure(signature, WEB_FETCH_PERMANENT_FAILURE_POLICY);
+  if (decision.action === "abort") {
+    throw new RepeatedToolFailureAbort(circuitMessage(decision));
+  }
+  if (decision.action === "refuse") {
+    recordCallFailure(signature);
+    throw new Error(circuitMessage(decision));
+  }
+  try {
+    const result = await operation();
+    recordCallSuccess(signature);
+    return result;
+  } catch (error40) {
+    if (error40 instanceof PermanentWebFetchHttpError) {
+      recordCallFailure(signature);
+    }
+    throw error40;
+  }
+}
+var WEB_FETCH_PERMANENT_FAILURE_POLICY;
+var init_permanentFailureCircuit = __esm(() => {
+  init_state();
+  init_repeatedFailureGuard();
+  init_utils11();
+  WEB_FETCH_PERMANENT_FAILURE_POLICY = {
+    enabled: true,
+    limit: 1,
+    abortAfter: 2
+  };
+});
+
+// src/tools/WebFetchTool/UI.tsx
+function renderToolUseMessage15({
+  url: url3,
+  prompt
+}, {
+  verbose
+}) {
+  if (!url3) {
+    return null;
+  }
+  if (verbose) {
+    return `url: "${url3}"${verbose && prompt ? `, prompt: "${prompt}"` : ""}`;
+  }
+  return url3;
+}
+function renderToolUseProgressMessage8() {
+  return /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(MessageResponse, {
+    height: 1,
+    children: /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
+      dimColor: true,
+      children: "Fetching\u2026"
+    }, undefined, false, undefined, this)
+  }, undefined, false, undefined, this);
+}
+function renderToolResultMessage14({
+  bytes,
+  code,
+  codeText,
+  result
+}, _progressMessagesForMessage, {
+  verbose
+}) {
+  const formattedSize = formatFileSize(bytes);
+  if (verbose) {
+    return /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedBox_default, {
+      flexDirection: "column",
+      children: [
+        /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(MessageResponse, {
+          height: 1,
+          children: /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
+            children: [
+              "Received ",
+              /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
+                bold: true,
+                children: formattedSize
+              }, undefined, false, undefined, this),
+              " (",
+              code,
+              " ",
+              codeText,
+              ")"
+            ]
+          }, undefined, true, undefined, this)
+        }, undefined, false, undefined, this),
+        /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedBox_default, {
+          flexDirection: "column",
+          children: /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
+            children: result
+          }, undefined, false, undefined, this)
+        }, undefined, false, undefined, this)
+      ]
+    }, undefined, true, undefined, this);
+  }
+  return /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(MessageResponse, {
+    height: 1,
+    children: /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
+      children: [
+        "Received ",
+        /* @__PURE__ */ jsx_dev_runtime140.jsxDEV(ThemedText, {
+          bold: true,
+          children: formattedSize
+        }, undefined, false, undefined, this),
+        " (",
+        code,
+        " ",
+        codeText,
+        ")"
+      ]
+    }, undefined, true, undefined, this)
+  }, undefined, false, undefined, this);
+}
+function getToolUseSummary6(input) {
+  if (!input?.url) {
+    return null;
+  }
+  return truncate3(input.url, TOOL_SUMMARY_MAX_LENGTH);
+}
+var jsx_dev_runtime140;
+var init_UI14 = __esm(() => {
+  init_MessageResponse();
+  init_toolLimits();
+  init_ink2();
+  init_format2();
+  jsx_dev_runtime140 = __toESM(require_jsx_dev_runtime(), 1);
+});
+
 // src/tools/WebFetchTool/WebFetchTool.ts
 function webFetchToolInputToPermissionRuleContent(input) {
   try {
@@ -392488,6 +392849,7 @@ var init_WebFetchTool = __esm(() => {
   init_format2();
   init_permissions2();
   init_preapproved();
+  init_permanentFailureCircuit();
   init_UI14();
   init_utils11();
   inputSchema18 = lazySchema(() => exports_external.strictObject({
@@ -392618,9 +392980,10 @@ ${DESCRIPTION5}`;
     renderToolUseMessage: renderToolUseMessage15,
     renderToolUseProgressMessage: renderToolUseProgressMessage8,
     renderToolResultMessage: renderToolResultMessage14,
-    async call({ url: url3, prompt }, { abortController, options: { isNonInteractiveSession } }) {
+    async call({ url: url3, prompt }, context5) {
       const start = Date.now();
-      const response = await getURLMarkdownContent(url3, abortController);
+      const { abortController, options: { isNonInteractiveSession } } = context5;
+      const response = await withWebFetchPermanentFailureCircuit(url3, webFetchPermanentFailureScope(context5), () => getURLMarkdownContent(url3, abortController));
       if ("type" in response && response.type === "redirect") {
         const statusText = response.statusCode === 301 ? "Moved Permanently" : response.statusCode === 308 ? "Permanent Redirect" : response.statusCode === 307 ? "Temporary Redirect" : "Found";
         const message = `REDIRECT DETECTED: The URL redirects to a different host.
@@ -396801,7 +397164,7 @@ var init_embeddings = __esm(() => {
 });
 
 // src/utils/codeIndex/store.ts
-import { createHash as createHash30 } from "crypto";
+import { createHash as createHash31 } from "crypto";
 import { mkdir as mkdir22, readFile as readFile26, writeFile as writeFile22 } from "fs/promises";
 import { dirname as dirname49, join as join113 } from "path";
 function codeIndexDir(root2) {
@@ -396811,7 +397174,7 @@ function indexPath(root2) {
   return join113(codeIndexDir(root2), "index.json");
 }
 function sha1(content) {
-  return createHash30("sha1").update(content).digest("hex");
+  return createHash31("sha1").update(content).digest("hex");
 }
 function cosineSimilarity(a2, b) {
   if (a2.length === 0 || a2.length !== b.length) {
@@ -397360,11 +397723,11 @@ var init_graph = __esm(() => {
 });
 
 // src/utils/codeIndex/repoIndex.ts
-import { createHash as createHash31 } from "crypto";
+import { createHash as createHash32 } from "crypto";
 import { existsSync as existsSync29, mkdirSync as mkdirSync19, readFileSync as readFileSync34, writeFileSync as writeFileSync22 } from "fs";
 import { join as join115, posix as posix8 } from "path";
 function sha12(content) {
-  return createHash31("sha1").update(content).digest("hex");
+  return createHash32("sha1").update(content).digest("hex");
 }
 function posixExt(file2) {
   const dot = file2.lastIndexOf(".");
@@ -399602,7 +399965,8 @@ In plan mode, you'll:
 3. Design an implementation approach
 4. Present your plan to the user for approval
 5. Use ${ASK_USER_QUESTION_TOOL_NAME} if you need to clarify approaches
-6. Exit plan mode with ExitPlanMode when ready to implement
+6. Create the visible implementation tasks with TaskCreate when that tool is available; updating a plan is not a substitute for the task list
+7. Exit plan mode with ExitPlanMode when ready to implement
 
 `;
 });
@@ -399721,7 +400085,7 @@ var init_EnterPlanModeTool = __esm(() => {
       }));
       return {
         data: {
-          message: "Entered plan mode. You should now focus on exploring the codebase and designing an implementation approach."
+          message: "Entered plan mode. Explore the codebase, design the approach, and create the visible implementation tasks with TaskCreate before attempting any workspace changes."
         }
       };
     },
@@ -399736,7 +400100,8 @@ In plan mode, you should:
 3. Consider multiple approaches and their trade-offs
 4. Use AskUserQuestion if you need to clarify the approach
 5. Design a concrete implementation strategy
-6. When ready, use ExitPlanMode to present your plan for approval
+6. If TaskCreate is available, create the visible implementation tasks before ExitPlanMode; updating a plan does not create the task list
+7. When ready, use ExitPlanMode to present your plan for approval
 
 Remember: DO NOT write or edit any files yet. This is a read-only exploration and planning phase.`;
       return {
@@ -402049,11 +402414,6 @@ var init_ConfigTool = __esm(() => {
   });
 });
 
-// src/utils/messagePredicates.ts
-function isHumanTurn(m) {
-  return m.type === "user" && !m.isMeta && m.toolUseResult === undefined;
-}
-
 // src/utils/taskListRunContext.ts
 import { AsyncLocalStorage as AsyncLocalStorage5 } from "async_hooks";
 import { randomUUID as randomUUID40 } from "crypto";
@@ -402101,6 +402461,52 @@ function requestsRevisionOfCurrentTaskList(input) {
 function shouldKeepCurrentTaskList(input) {
   return requestsAppendToCurrentTaskList(input) || requestsContinueCurrentTaskList(input) || requestsRevisionOfCurrentTaskList(input);
 }
+function withoutCode(input) {
+  return input.replace(/```[\s\S]*?```/gu, " ").replace(/`[^`\n]*`/gu, " ");
+}
+function proseOnly(input) {
+  return withoutCode(input).replace(/\s+/gu, " ").trim();
+}
+function taskListRequirementReason(input) {
+  const text2 = proseOnly(input);
+  if (!text2)
+    return;
+  const optsOut = /\b(?:do not|don't)\s+(?:(?:create|make|maintain|show|start|use)\s+)?(?:a\s+)?(?:task|todo)(?:\s+(?:list|board))?\b/iu.test(text2) || /\bwithout\s+(?:(?:creating|making|maintaining|showing|starting|using)\s+)?(?:a\s+)?(?:task|todo)(?:\s+(?:list|board))?\b/iu.test(text2) || /\b(?:skip|no)\s+(?:the\s+|a\s+)?(?:task|todo)(?:\s+(?:list|board))?\b/iu.test(text2);
+  if (optsOut)
+    return;
+  if (/\b(?:create|make|maintain|show|start|use|keep|track|add|append|put|queue)\b[^.!?]{0,100}\b(?:task|todo)\s+(?:list|board)\b/iu.test(text2) || /\b(?:add|append|put|queue)\s+(?:this|it)?\s*(?:to|on)?\s*(?:my|the|your)?\s*(?:tasks?|todos?)\b/iu.test(text2) || /\b(?:add|append|put|queue)\s+(?:this|it)\s+(?:to|on)\s+(?:the\s+|your\s+|my\s+)?(?:current|existing)\s+list\b/iu.test(text2) || /\b(?:create|make|use|track)\s+(?:the\s+|a\s+|your\s+)?(?:tasks?|todos?)\b/iu.test(text2) || /\b(?:tasks?|todos?)\s+first\b/iu.test(text2)) {
+    return "explicit task tracking request";
+  }
+  if (/^\/plan(?:\s|$)/iu.test(text2) || /\b(?:enter|start|use|switch\s+to)\s+plan\s+mode\b/iu.test(text2) || /\bplan\s+(?:this|the\s+work|first)\b/iu.test(text2)) {
+    return "planning workflow";
+  }
+  if (/\b(?:delegate|delegation|sub[ -]?agents?|parallel\s+agents?|agent\s+team|team\s+of\s+agents?|fan[ -]?out)\b/iu.test(text2)) {
+    return "delegation or parallel agent work";
+  }
+  const hasAction = new RegExp(String.raw`\b${ACTION_WORD}\b`, "iu").test(text2);
+  if (hasAction && /\b(?:publish|release|deploy|production|migrat(?:e|ion)|database\s+schema|credentials?|secrets?|permissions?|sandbox|security|authentication|authorization|payments?|billing|version\s+bump|git\s+tag)\b/iu.test(text2)) {
+    return "release, security, migration, or production risk";
+  }
+  const structuralText = withoutCode(input);
+  const enumeratedItems = structuralText.match(/(?:^|\n)\s*(?:[-*+]\s+|\d+[.)]\s+)\S/gu);
+  const actionLines = structuralText.split(/\r?\n/gu).filter((line) => new RegExp(String.raw`\b${ACTION_WORD}\b`, "iu").test(line));
+  if ((enumeratedItems?.length ?? 0) >= 2 || actionLines.length >= 2 || SEQUENCED_ACTION_RE.test(text2)) {
+    return "multiple requested outcomes";
+  }
+  const targetList = new RegExp(String.raw`\b${ACTION_WORD}\b[^.!?]{0,120}\b(?:docs?|tests?|code|implementation|configuration|config|workflow|release notes?|technical docs?|readme|ui|api|cli|database|schema|sandbox|permissions?)\b[^.!?]{0,80}(?:,|\band\b|\bplus\b)[^.!?]{0,80}\b(?:docs?|tests?|code|implementation|configuration|config|workflow|release notes?|technical docs?|readme|ui|api|cli|database|schema|sandbox|permissions?)\b`, "iu");
+  if (targetList.test(text2))
+    return "multiple requested outcomes";
+  const projectScope = /\b(?:app|application|agent|system|platform|website|dashboard|service|integration|workflow|codebase|project|plugin|extension|3d\s+(?:scene|design|pipeline))\b/iu;
+  const projectAction = /\b(?:build(?:ing|s)?|built|creat(?:e|ed|es|ing)|design(?:ed|ing|s)?|implement(?:ed|ing|s)?|integrat(?:e|ed|es|ing)|refactor(?:ed|ing|s)?|rewrit(?:e|ing|ten)|overhaul(?:ed|ing|s)?|audit(?:ed|ing|s)?|research(?:ed|es|ing)?)\b/iu;
+  if (projectScope.test(text2) && projectAction.test(text2)) {
+    return "large project scope";
+  }
+  ACTION_RE.lastIndex = 0;
+  if (text2.length >= 600 && ACTION_RE.test(text2)) {
+    return "detailed multi-step request";
+  }
+  return;
+}
 function getTaskListRunForCommand(command, options2 = {}) {
   if (!command || command.mode !== "prompt" || command.isMeta)
     return;
@@ -402108,9 +402514,12 @@ function getTaskListRunForCommand(command, options2 = {}) {
   if (!options2.allowSlashCommand && !command.skipSlashCommands && text2.trimStart().startsWith("/")) {
     return;
   }
+  const requirementReason = taskListRequirementReason(text2);
   return {
     generationId: String(command.uuid ?? randomUUID40()),
-    appendToCurrent: shouldKeepCurrentTaskList(text2)
+    appendToCurrent: shouldKeepCurrentTaskList(text2),
+    requiresTaskList: requirementReason !== undefined,
+    ...requirementReason ? { requirementReason } : {}
   };
 }
 function getTaskListRunFromMessages(messages) {
@@ -402118,14 +402527,21 @@ function getTaskListRunFromMessages(messages) {
   if (!message || typeof message.uuid !== "string" || !message.uuid) {
     return;
   }
+  const text2 = textFromMessage(message);
+  const requirementReason = taskListRequirementReason(text2);
   return {
     generationId: message.uuid,
-    appendToCurrent: shouldKeepCurrentTaskList(textFromMessage(message))
+    appendToCurrent: shouldKeepCurrentTaskList(text2),
+    requiresTaskList: requirementReason !== undefined,
+    ...requirementReason ? { requirementReason } : {}
   };
 }
-var taskListRunStorage;
+var taskListRunStorage, ACTION_WORD, ACTION_RE, SEQUENCED_ACTION_RE;
 var init_taskListRunContext = __esm(() => {
   taskListRunStorage = new AsyncLocalStorage5;
+  ACTION_WORD = String.raw`(?:add(?:ed|ing|s)?|audit(?:ed|ing|s)?|build(?:ing|s)?|built|bump(?:ed|ing|s)?|chang(?:e|ed|es|ing)|clean(?:ed|ing|s)?|creat(?:e|ed|es|ing)|debug(?:ged|ging|s)?|delet(?:e|ed|es|ing)|deploy(?:ed|ing|s)?|design(?:ed|ing|s)?|document(?:ed|ing|s)?|fix(?:ed|es|ing)?|implement(?:ed|ing|s)?|integrat(?:e|ed|es|ing)|migrat(?:e|ed|es|ing)|publish(?:ed|es|ing)?|push(?:ed|es|ing)?|refactor(?:ed|ing|s)?|releas(?:e|ed|es|ing)|remov(?:e|ed|es|ing)|renam(?:e|ed|es|ing)|repair(?:ed|ing|s)?|research(?:ed|es|ing)?|review(?:ed|ing|s)?|secur(?:e|ed|es|ing)|test(?:ed|ing|s)?|updat(?:e|ed|es|ing)|upgrad(?:e|ed|es|ing)|verif(?:y|ied|ies|ying)|writ(?:e|es|ing)|wrote)`;
+  ACTION_RE = new RegExp(String.raw`\b${ACTION_WORD}\b`, "giu");
+  SEQUENCED_ACTION_RE = new RegExp(String.raw`\b${ACTION_WORD}\b[^.!?\n]{0,180}(?:\band\b|\bthen\b|\balso\b|\bplus\b|;|\n)[^.!?\n]{0,100}\b${ACTION_WORD}\b`, "iu");
 });
 
 // src/tools/TaskCreateTool/prompt.ts
@@ -402141,9 +402557,11 @@ It also helps the user understand the progress of the task and overall progress
 
 Use this tool proactively in these scenarios:
 
-- Complex multi-step tasks - When a request requires 3 or more distinct steps or actions
+- Multi-outcome work - When a request has 2 or more distinct requested outcomes, deliverables, or sequenced actions
 - Non-trivial and complex tasks - Tasks that require careful planning or multiple operations${teammateContext}
 - Multiple independently verifiable outcomes, dependency ordering, delegation, or parallel work
+- High-risk lifecycle work - Releases, publishing, deployment, migrations, security, credentials, permissions, sandboxing, or production changes
+- Project-sized builds, integrations, workflows, refactors, and audits
 - Plan mode - When using plan mode, create a task list to track the work
 - User explicitly requests todo list - When the user directly asks you to use the todo list
 - User asks to queue work - When the user says "add to your tasks", "add this to your task list", "put this on the list", "queue this up", or anything similar, IMMEDIATELY call this tool with that request \u2014 even if you are in the middle of other work and even if the item sounds small. The user is watching the live task panel and expects the item to appear there right away. Acknowledge briefly and continue what you were doing unless asked to switch.
@@ -402154,7 +402572,7 @@ Use this tool proactively in these scenarios:
 
 Skip using this tool when:
 - The task is purely conversational or informational
-- The request is one direct, low-risk action that can be completed and verified as one operation
+- The request is one genuinely atomic, low-risk action with one outcome that can be completed and verified directly
 - The user sends a short acknowledgement, correction, or clarification that does not add a distinct outcome to an existing board
 
 Do not create a task merely because a user sent a message or because the request is actionable. Task subjects must describe concrete outcomes chosen after understanding the work; never copy the raw prompt into a task title.
@@ -412082,7 +412500,7 @@ var init_stream3 = __esm(() => {
 });
 
 // src/utils/telemetry/betaSessionTracing.ts
-import { createHash as createHash32 } from "crypto";
+import { createHash as createHash33 } from "crypto";
 function clearBetaTracingState() {
   seenHashes.clear();
   lastReportedMessageHash.clear();
@@ -412109,7 +412527,7 @@ function truncateContent(content, maxSize = MAX_CONTENT_SIZE) {
   };
 }
 function shortHash(content) {
-  return createHash32("sha256").update(content).digest("hex").slice(0, 12);
+  return createHash33("sha256").update(content).digest("hex").slice(0, 12);
 }
 function hashSystemPrompt(systemPrompt) {
   return `sp_${shortHash(systemPrompt)}`;
@@ -412385,7 +412803,7 @@ function isAnyTracingEnabled() {
   return isTelemetryEnabled() || isEnhancedTelemetryEnabled() || isBetaTracingEnabled();
 }
 function getTracer() {
-  return import_api39.trace.getTracer("ur-agent.gen_ai", "1.80.2");
+  return import_api39.trace.getTracer("ur-agent.gen_ai", "1.80.4");
 }
 function createSpanAttributes(spanType, customAttributes = {}) {
   const baseAttributes = getTelemetryAttributes();
@@ -413066,6 +413484,8 @@ function checkTaskListGate(input) {
   const config3 = input.config ?? getTaskListGateConfig();
   if (!config3.enabled)
     return { allowed: true };
+  if (input.taskListWriterAvailable === false)
+    return { allowed: true };
   if (isTaskListGateExempt(input.toolName))
     return { allowed: true };
   const isMutating = input.isMutating ?? isMutatingTool2(input.toolName);
@@ -413074,23 +413494,30 @@ function checkTaskListGate(input) {
   if (input.taskCount !== null && input.taskCount > 0) {
     return { allowed: true };
   }
+  const inherentlyRequiresTaskList = input.isSubagent || ALWAYS_REQUIRE_PLAN_TOOLS.has(input.toolName);
+  const classifiedRequirement = input.requiresTaskList === true;
+  const forceEveryMutation = config3.freeReads === 0;
+  const unclassifiedAllowanceExpired = input.requiresTaskList === undefined && input.readsSoFar >= config3.freeReads;
+  const gateRequired = inherentlyRequiresTaskList || classifiedRequirement || forceEveryMutation || unclassifiedAllowanceExpired;
+  const requirementContext = input.requirementReason ? ` This turn requires task tracking because it contains ${input.requirementReason}.` : "";
+  const planningRecovery = input.requirementReason === "planning workflow" ? " EnterPlanMode and plan updates do not create the visible task list." : "";
   if (input.taskCount === null) {
     return {
       allowed: false,
-      reason: `The task list could not be read, so ${input.toolName} was not allowed ` + `to change state without a verifiable plan. Retry TaskList or ` + `TaskCreate, then retry this call. Disable with ` + `tasks.requireBeforeChanges.enabled=false in settings.`
+      reason: `The task list could not be read, so ${input.toolName} was not allowed ` + `to change state without a verifiable plan.${requirementContext}${planningRecovery} Retry TaskList or ` + `TaskCreate, then retry this call. Disable with ` + `tasks.requireBeforeChanges.enabled=false in settings.`
     };
   }
-  if (input.isSubagent || ALWAYS_REQUIRE_PLAN_TOOLS.has(input.toolName)) {
+  if (!gateRequired)
+    return { allowed: true };
+  if (inherentlyRequiresTaskList) {
     return {
       allowed: false,
       reason: `No actionable parent task exists for ${input.toolName}. Call ` + `TaskCreate before delegating or changing state, then retry this call. ` + `Disable with tasks.requireBeforeChanges.enabled=false in settings.`
     };
   }
-  if (input.readsSoFar < config3.freeReads)
-    return { allowed: true };
   return {
     allowed: false,
-    reason: `No task list exists, and ${input.toolName} changes the workspace. ` + `Call TaskCreate first with the steps you intend to take, then retry ` + `this call. Reads are unrestricted, so investigate as much as you need ` + `before writing the list. ` + `Disable with tasks.requireBeforeChanges.enabled=false in settings.`
+    reason: `No task list exists, and ${input.toolName} changes the workspace. ` + `${requirementContext.trim()}${requirementContext ? " " : ""}` + `${planningRecovery.trim()}${planningRecovery ? " " : ""}` + `Call TaskCreate first with the steps you intend to take, then retry ` + `this call. Reads are unrestricted, so investigate as much as you need ` + `before writing the list. ` + `Disable with tasks.requireBeforeChanges.enabled=false in settings.`
   };
 }
 var TASK_LIST_GATE_DEFAULTS, KNOWN_MUTATING_TOOLS, GATE_EXEMPT_TOOLS, ALWAYS_REQUIRE_PLAN_TOOLS;
@@ -413098,7 +413525,7 @@ var init_taskListGate = __esm(() => {
   init_settings2();
   init_tasks();
   TASK_LIST_GATE_DEFAULTS = {
-    enabled: false,
+    enabled: true,
     freeReads: 3
   };
   KNOWN_MUTATING_TOOLS = new Set([
@@ -413127,278 +413554,6 @@ var init_taskListGate = __esm(() => {
   ]);
 });
 
-// src/services/tools/repeatedFailureGuard.ts
-import { createHash as createHash33 } from "crypto";
-function writeFramedText(hash3, value) {
-  hash3.update(`${value.length}:`);
-  for (let offset = 0;offset < value.length; ) {
-    const end = Math.min(offset + HASH_CHUNK_CODE_UNITS, value.length);
-    hash3.update(value.slice(offset, end), "utf16le");
-    offset = end;
-  }
-}
-function writeToken(hash3, kind, value = "") {
-  writeFramedText(hash3, kind);
-  writeFramedText(hash3, value);
-}
-function visitCanonical(value, state, depth) {
-  state.nodesVisited++;
-  if (state.nodesVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalNodes || depth > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalDepth) {
-    throw new CanonicalTraversalLimitError;
-  }
-  if (value === null) {
-    writeToken(state.hash, "null");
-    return;
-  }
-  switch (typeof value) {
-    case "string":
-      state.textCodeUnitsVisited += value.length;
-      if (state.textCodeUnitsVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalTextCodeUnits) {
-        throw new CanonicalTraversalLimitError;
-      }
-      writeToken(state.hash, "string", value);
-      return;
-    case "number":
-      writeToken(state.hash, "number", Object.is(value, -0) ? "-0" : String(value));
-      return;
-    case "boolean":
-      writeToken(state.hash, "boolean", String(value));
-      return;
-    case "undefined":
-      writeToken(state.hash, "undefined");
-      return;
-    case "bigint":
-      writeToken(state.hash, "bigint", value.toString());
-      return;
-    case "symbol": {
-      const description = String(value.description ?? "");
-      state.textCodeUnitsVisited += description.length;
-      if (state.textCodeUnitsVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalTextCodeUnits) {
-        throw new CanonicalTraversalLimitError;
-      }
-      writeToken(state.hash, "symbol", description);
-      return;
-    }
-    case "function": {
-      const name = value.name || "<anonymous>";
-      state.textCodeUnitsVisited += name.length;
-      if (state.textCodeUnitsVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalTextCodeUnits) {
-        throw new CanonicalTraversalLimitError;
-      }
-      writeToken(state.hash, "function", name);
-      return;
-    }
-    case "object": {
-      const object4 = value;
-      const existingReference = state.seen.get(object4);
-      if (existingReference !== undefined) {
-        writeToken(state.hash, "reference", String(existingReference));
-        return;
-      }
-      const reference = state.nextReference++;
-      state.seen.set(object4, reference);
-      if (Array.isArray(value)) {
-        if (value.length + state.nodesVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalNodes) {
-          throw new CanonicalTraversalLimitError;
-        }
-        writeToken(state.hash, "array", String(value.length));
-        for (let index2 = 0;index2 < value.length; index2++) {
-          if (!(index2 in value)) {
-            writeToken(state.hash, "hole");
-            continue;
-          }
-          visitCanonical(value[index2], state, depth + 1);
-        }
-        return;
-      }
-      const record3 = value;
-      const keys2 = Object.keys(record3);
-      if (keys2.length + state.nodesVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalNodes) {
-        throw new CanonicalTraversalLimitError;
-      }
-      keys2.sort();
-      writeToken(state.hash, "object", String(keys2.length));
-      for (const key of keys2) {
-        state.textCodeUnitsVisited += key.length;
-        if (state.textCodeUnitsVisited > REPEATED_FAILURE_GUARD_LIMITS.maxCanonicalTextCodeUnits) {
-          throw new CanonicalTraversalLimitError;
-        }
-        writeToken(state.hash, "key", key);
-        visitCanonical(record3[key], state, depth + 1);
-      }
-      return;
-    }
-  }
-}
-function digestText(domain2, value) {
-  const hash3 = createHash33("sha256");
-  writeToken(hash3, "domain", domain2);
-  writeToken(hash3, "value", value);
-  return hash3.digest("hex");
-}
-function canonicalInputDigest(input) {
-  const hash3 = createHash33("sha256");
-  writeToken(hash3, "domain", "repeated-failure-input-v2");
-  visitCanonical(input, {
-    hash: hash3,
-    nextReference: 0,
-    nodesVisited: 0,
-    textCodeUnitsVisited: 0,
-    seen: new WeakMap
-  }, 0);
-  return hash3.digest("hex");
-}
-function uniqueSerializationFailureDigest() {
-  serializationFailureNonce++;
-  return digestText("repeated-failure-unserializable-v2", serializationFailureNonce.toString());
-}
-function scopeDigest(scope) {
-  return scope ? digestText("repeated-failure-scope-v2", scope) : UNSCOPED_DIGEST;
-}
-function callSignature(toolName, input, scope) {
-  let inputDigest;
-  try {
-    inputDigest = canonicalInputDigest(input);
-  } catch {
-    inputDigest = uniqueSerializationFailureDigest();
-  }
-  return [
-    SIGNATURE_VERSION,
-    scopeDigest(scope),
-    digestText("repeated-failure-tool-v2", toolName),
-    inputDigest
-  ].join(":");
-}
-function isSha256Digest(value) {
-  return value?.length === SHA256_HEX_LENGTH && /^[0-9a-f]+$/.test(value);
-}
-function signatureStorageIdentity(signature) {
-  if (signature.length === UNSCOPED_SIGNATURE_LENGTH || signature.length === SCOPED_SIGNATURE_LENGTH) {
-    const parts = signature.split(":");
-    if (parts.length === 4 && parts[0] === SIGNATURE_VERSION && (parts[1] === UNSCOPED_DIGEST || isSha256Digest(parts[1])) && isSha256Digest(parts[2]) && isSha256Digest(parts[3])) {
-      return { key: signature, scope: parts[1] };
-    }
-  }
-  return {
-    key: `${SIGNATURE_VERSION}:legacy:${digestText("repeated-failure-legacy-signature-v2", signature)}`,
-    scope: UNSCOPED_DIGEST
-  };
-}
-function pruneExpiredFailures(now5) {
-  for (const [signature, record3] of failureCounts) {
-    if (now5 >= record3.lastFailureAt && now5 - record3.lastFailureAt >= REPEATED_FAILURE_GUARD_LIMITS.entryTtlMs) {
-      failureCounts.delete(signature);
-    }
-  }
-}
-function enforceFailureBounds(scope) {
-  let entriesInScope = 0;
-  for (const record3 of failureCounts.values()) {
-    if (record3.scopeDigest === scope)
-      entriesInScope++;
-  }
-  let scopeOverflow = entriesInScope - REPEATED_FAILURE_GUARD_LIMITS.maxEntriesPerScope;
-  if (scopeOverflow > 0) {
-    for (const [signature, record3] of failureCounts) {
-      if (record3.scopeDigest !== scope)
-        continue;
-      failureCounts.delete(signature);
-      scopeOverflow--;
-      if (scopeOverflow === 0)
-        break;
-    }
-  }
-  while (failureCounts.size > REPEATED_FAILURE_GUARD_LIMITS.maxEntries) {
-    const oldest = failureCounts.keys().next().value;
-    if (oldest === undefined)
-      break;
-    failureCounts.delete(oldest);
-  }
-}
-function recordCallFailure(signature) {
-  const now5 = repeatedFailureNow();
-  pruneExpiredFailures(now5);
-  const identity5 = signatureStorageIdentity(signature);
-  const existing2 = failureCounts.get(identity5.key);
-  const next = (existing2?.failures ?? 0) + 1;
-  const signatureScope = existing2?.scopeDigest ?? identity5.scope;
-  failureCounts.delete(identity5.key);
-  failureCounts.set(identity5.key, {
-    failures: next,
-    lastFailureAt: now5,
-    scopeDigest: signatureScope
-  });
-  enforceFailureBounds(signatureScope);
-  return next;
-}
-function recordCallSuccess(signature) {
-  failureCounts.delete(signatureStorageIdentity(signature).key);
-}
-function clearRepeatedFailuresForScope(scope) {
-  const target = scopeDigest(scope);
-  let cleared = 0;
-  for (const [signature, record3] of failureCounts) {
-    if (record3.scopeDigest !== target)
-      continue;
-    failureCounts.delete(signature);
-    cleared++;
-  }
-  return cleared;
-}
-function clearRepeatedFailuresForQuery(queryChainId) {
-  return clearRepeatedFailuresForScope(`query:${queryChainId}`);
-}
-function checkRepeatedFailure(signature, config3 = REPEATED_FAILURE_DEFAULTS) {
-  if (!config3.enabled)
-    return { action: "allow" };
-  const now5 = repeatedFailureNow();
-  pruneExpiredFailures(now5);
-  const failures = failureCounts.get(signatureStorageIdentity(signature).key)?.failures ?? 0;
-  if (failures >= config3.abortAfter) {
-    return {
-      action: "abort",
-      reason: `This exact call has failed ${failures} times and is still being ` + `repeated. Stopping the turn rather than continuing to loop.`
-    };
-  }
-  if (failures >= config3.limit) {
-    return {
-      action: "refuse",
-      reason: `This exact call has already failed ${failures} times with the same ` + `arguments, so it will fail again. Do not retry it unchanged. Either ` + `fix the arguments, use a different tool, or tell the user what is ` + `blocking you and stop.`
-    };
-  }
-  return { action: "allow" };
-}
-var REPEATED_FAILURE_DEFAULTS, REPEATED_FAILURE_GUARD_LIMITS, SIGNATURE_VERSION = "rf2", UNSCOPED_DIGEST = "-", SHA256_HEX_LENGTH = 64, HASH_CHUNK_CODE_UNITS, UNSCOPED_SIGNATURE_LENGTH, SCOPED_SIGNATURE_LENGTH, failureCounts, serializationFailureNonce = 0n, repeatedFailureNow, CanonicalTraversalLimitError, RepeatedToolFailureAbort;
-var init_repeatedFailureGuard = __esm(() => {
-  REPEATED_FAILURE_DEFAULTS = {
-    enabled: false,
-    limit: 3,
-    abortAfter: 6
-  };
-  REPEATED_FAILURE_GUARD_LIMITS = {
-    maxEntries: 2048,
-    maxEntriesPerScope: 256,
-    entryTtlMs: 30 * 60 * 1000,
-    maxCanonicalNodes: 50000,
-    maxCanonicalDepth: 128,
-    maxCanonicalTextCodeUnits: 1e6
-  };
-  HASH_CHUNK_CODE_UNITS = 16 * 1024;
-  UNSCOPED_SIGNATURE_LENGTH = SIGNATURE_VERSION.length + 3 + 1 + SHA256_HEX_LENGTH * 2;
-  SCOPED_SIGNATURE_LENGTH = SIGNATURE_VERSION.length + 3 + SHA256_HEX_LENGTH * 3;
-  failureCounts = new Map;
-  repeatedFailureNow = Date.now;
-  CanonicalTraversalLimitError = class CanonicalTraversalLimitError extends Error {
-  };
-  RepeatedToolFailureAbort = class RepeatedToolFailureAbort extends Error {
-    constructor(message) {
-      super(message);
-      this.name = "RepeatedToolFailureAbort";
-      Object.setPrototypeOf(this, new.target.prototype);
-    }
-  };
-});
-
 // src/stability/types.ts
 var DEFAULT_LIMITS;
 var init_types12 = __esm(() => {
@@ -414638,12 +414793,16 @@ async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContex
   } catch {
     isMutating = true;
   }
+  const taskListRun = getTaskListRunContext() ?? (toolUseContext.agentId ? undefined : getTaskListRunFromMessages(toolUseContext.messages ?? []));
   const gate = checkTaskListGate({
     toolName: tool.name,
     taskCount: await countTasksForGate(),
     readsSoFar: countToolCallsBeforeCurrent(toolUseContext.messages, assistantMessage, toolUseID),
     isSubagent: Boolean(toolUseContext.agentId),
-    isMutating
+    isMutating,
+    requiresTaskList: taskListRun?.requiresTaskList,
+    requirementReason: taskListRun?.requirementReason,
+    taskListWriterAvailable: toolUseContext.options.tools.some((candidate) => candidate.name === "TaskCreate")
   });
   if (gate.allowed === false) {
     recordCallFailure(callSig);
@@ -415000,7 +415159,10 @@ async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContex
       taskCount: await countTasksForGate(),
       readsSoFar: countToolCallsBeforeCurrent(toolUseContext.messages, assistantMessage, toolUseID),
       isSubagent: Boolean(toolUseContext.agentId),
-      isMutating: finalIsMutating
+      isMutating: finalIsMutating,
+      requiresTaskList: taskListRun?.requiresTaskList,
+      requirementReason: taskListRun?.requirementReason,
+      taskListWriterAvailable: toolUseContext.options.tools.some((candidate) => candidate.name === "TaskCreate")
     });
     if (finalGate.allowed === false) {
       recordCallFailure(callSig);
@@ -415287,6 +415449,8 @@ async function checkPermissionsAndCallTool(tool, toolUseID, input, toolUseContex
       error: errorMessage2(error40)
     });
     endToolSpan();
+    if (error40 instanceof RepeatedToolFailureAbort)
+      throw error40;
     if (error40 instanceof McpAuthError) {
       toolUseContext.setAppState((prevState) => {
         const serverName = error40.serverName;
@@ -415438,6 +415602,7 @@ var init_toolExecution = __esm(() => {
   init_genAiSemantics();
   init_toolErrors();
   init_toolResultStorage();
+  init_taskListRunContext();
   init_toolSearch();
   init_taskListGate();
   init_repeatedFailureGuard();
@@ -442817,7 +442982,7 @@ function Feedback({
       platform: env2.platform,
       gitRepo: envInfo.isGit,
       terminal: env2.terminal,
-      version: "1.80.2",
+      version: "1.80.4",
       transcript: normalizeMessagesForAPI(messages),
       errors: sanitizedErrors,
       lastApiRequest: getLastAPIRequest(),
@@ -443009,7 +443174,7 @@ function Feedback({
                       ", ",
                       env2.terminal,
                       ", v",
-                      "1.80.2"
+                      "1.80.4"
                     ]
                   }, undefined, true, undefined, this)
                 ]
@@ -443115,7 +443280,7 @@ ${sanitizedDescription}
 ` + `**Environment Info**
 ` + `- Platform: ${env2.platform}
 ` + `- Terminal: ${env2.terminal}
-` + `- Version: ${"1.80.2"}
+` + `- Version: ${"1.80.4"}
 ` + `- Feedback ID: ${feedbackId}
 ` + `
 **Errors**
@@ -446225,7 +446390,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "1.80.2"
+    value: "1.80.4"
   }, {
     label: "Session name",
     value: nameValue
@@ -449607,7 +449772,7 @@ function Config({
         }
       }, undefined, false, undefined, this)
     }, undefined, false, undefined, this) : showSubmenu === "ChannelDowngrade" ? /* @__PURE__ */ jsx_dev_runtime179.jsxDEV(ChannelDowngradeDialog, {
-      currentVersion: "1.80.2",
+      currentVersion: "1.80.4",
       onChoice: (choice) => {
         setShowSubmenu(null);
         setTabsHidden(false);
@@ -449619,7 +449784,7 @@ function Config({
           autoUpdatesChannel: "stable"
         };
         if (choice === "stay") {
-          newSettings.minimumVersion = "1.80.2";
+          newSettings.minimumVersion = "1.80.4";
         }
         updateSettingsForSource("userSettings", newSettings);
         setSettingsData((prev_27) => ({
@@ -450796,6 +450961,9 @@ var init_Settings = __esm(() => {
 });
 
 // src/commands/config/configAssignments.ts
+function resolveConfigAssignmentKey(rawKey) {
+  return KEY_ALIASES[rawKey.replaceAll("-", "").toLowerCase()];
+}
 function booleanValue(value) {
   if (value === "true" || value === "on" || value === "enabled")
     return true;
@@ -450811,9 +450979,9 @@ function parseConfigAssignments(input) {
     if (separator <= 0 || separator === token.length - 1) {
       return { error: `Invalid assignment '${token}'. Expected key=value.` };
     }
-    const rawKey = token.slice(0, separator).replaceAll("-", "").toLowerCase();
+    const rawKey = token.slice(0, separator);
     const rawValue = token.slice(separator + 1).toLowerCase();
-    const key = KEY_ALIASES[rawKey];
+    const key = resolveConfigAssignmentKey(rawKey);
     if (!key)
       return { error: `Unknown setting '${token.slice(0, separator)}'.` };
     if (key === "editor") {
@@ -450841,10 +451009,115 @@ function parseConfigAssignments(input) {
   }
   return { assignments };
 }
+function applyConfigAssignments(assignments, effects2 = {}) {
+  const applied = [];
+  for (const assignment of assignments) {
+    switch (assignment.key) {
+      case "thinking": {
+        const value = assignment.value;
+        const result = updateSettingsForSource("userSettings", {
+          alwaysThinkingEnabled: value ? undefined : false
+        });
+        if (result.error) {
+          return { error: `Could not update thinking: ${result.error.message}` };
+        }
+        effects2.thinking?.(value);
+        applied.push(`thinking=${value}`);
+        break;
+      }
+      case "screenReader": {
+        const value = assignment.value;
+        const result = updateSettingsForSource("localSettings", {
+          screenReaderMode: value
+        });
+        if (result.error) {
+          return {
+            error: `Could not update screen reader mode: ${result.error.message}`
+          };
+        }
+        effects2.screenReader?.(value);
+        applied.push(`screenReader=${value}`);
+        break;
+      }
+      case "reducedMotion": {
+        const value = assignment.value;
+        const result = updateSettingsForSource("localSettings", {
+          prefersReducedMotion: value
+        });
+        if (result.error) {
+          return {
+            error: `Could not update reduced motion: ${result.error.message}`
+          };
+        }
+        effects2.reducedMotion?.(value);
+        applied.push(`reducedMotion=${value}`);
+        break;
+      }
+      case "verbose": {
+        const value = assignment.value;
+        const result = updateSettingsForSource("userSettings", {
+          verbose: value
+        });
+        if (result.error) {
+          return {
+            error: `Could not update verbose output: ${result.error.message}`
+          };
+        }
+        effects2.verbose?.(value);
+        applied.push(`verbose=${value}`);
+        break;
+      }
+      case "autoCompact": {
+        const value = assignment.value;
+        saveGlobalConfig((previous) => ({
+          ...previous,
+          autoCompactEnabled: value
+        }));
+        applied.push(`autoCompact=${value}`);
+        break;
+      }
+      case "editor": {
+        const value = assignment.value;
+        saveGlobalConfig((previous) => ({ ...previous, editorMode: value }));
+        applied.push(`editor=${value}`);
+        break;
+      }
+      case "vimEscape": {
+        const value = assignment.value;
+        saveGlobalConfig((previous) => ({
+          ...previous,
+          vimInsertModeEscapeSequence: value || undefined
+        }));
+        applied.push(`vimEscape=${value || "off"}`);
+        break;
+      }
+    }
+  }
+  return { applied };
+}
+function getConfigAssignmentValues() {
+  const settings = getInitialSettings();
+  const global3 = getGlobalConfig();
+  return [
+    { key: "thinking", value: settings.alwaysThinkingEnabled !== false },
+    { key: "screenReader", value: settings.screenReaderMode === true },
+    { key: "reducedMotion", value: settings.prefersReducedMotion === true },
+    { key: "verbose", value: settings.verbose === true },
+    { key: "autoCompact", value: global3.autoCompactEnabled },
+    { key: "editor", value: global3.editorMode ?? "normal" },
+    {
+      key: "vimEscape",
+      value: global3.vimInsertModeEscapeSequence || "off"
+    }
+  ];
+}
 var CONFIG_ASSIGNMENT_HELP, KEY_ALIASES;
 var init_configAssignments = __esm(() => {
+  init_config();
+  init_settings2();
   CONFIG_ASSIGNMENT_HELP = [
     "Usage: /config <key>=<value> [key=value ...]",
+    "CLI:   ur config set <key> <value>",
     "",
     "Supported settings:",
     "  thinking=true|false       Enable or disable model thinking",
@@ -450906,90 +451179,35 @@ ${CONFIG_ASSIGNMENT_HELP}`,
       onDone
     }, undefined, false, undefined, this);
   }
-  const applied = [];
-  for (const assignment of parsed.assignments) {
-    switch (assignment.key) {
-      case "thinking": {
-        const value = assignment.value;
-        const result = updateSettingsForSource("userSettings", { alwaysThinkingEnabled: value ? undefined : false });
-        if (result.error)
-          return /* @__PURE__ */ jsx_dev_runtime183.jsxDEV(ConfigResult, {
-            message: `Could not update thinking: ${result.error.message}`,
-            onDone
-          }, undefined, false, undefined, this);
-        context5.setAppState((previous) => ({ ...previous, thinkingEnabled: value }));
-        applied.push(`thinking=${value}`);
-        break;
-      }
-      case "screenReader": {
-        const value = assignment.value;
-        const result = updateSettingsForSource("localSettings", { screenReaderMode: value });
-        if (result.error)
-          return /* @__PURE__ */ jsx_dev_runtime183.jsxDEV(ConfigResult, {
-            message: `Could not update screen reader mode: ${result.error.message}`,
-            onDone
-          }, undefined, false, undefined, this);
-        if (value)
-          enableScreenReaderMode();
-        else
-          disableScreenReaderMode();
-        setScreenReaderRendering(value);
-        context5.setAppState((previous) => ({
-          ...previous,
-          settings: { ...previous.settings, screenReaderMode: value }
-        }));
-        applied.push(`screenReader=${value}`);
-        break;
-      }
-      case "reducedMotion": {
-        const value = assignment.value;
-        const result = updateSettingsForSource("localSettings", { prefersReducedMotion: value });
-        if (result.error)
-          return /* @__PURE__ */ jsx_dev_runtime183.jsxDEV(ConfigResult, {
-            message: `Could not update reduced motion: ${result.error.message}`,
-            onDone
-          }, undefined, false, undefined, this);
-        context5.setAppState((previous) => ({ ...previous, settings: { ...previous.settings, prefersReducedMotion: value } }));
-        applied.push(`reducedMotion=${value}`);
-        break;
-      }
-      case "verbose": {
-        const value = assignment.value;
-        const result = updateSettingsForSource("userSettings", { verbose: value });
-        if (result.error)
-          return /* @__PURE__ */ jsx_dev_runtime183.jsxDEV(ConfigResult, {
-            message: `Could not update verbose output: ${result.error.message}`,
-            onDone
-          }, undefined, false, undefined, this);
-        context5.setAppState((previous) => ({ ...previous, verbose: value }));
-        applied.push(`verbose=${value}`);
-        break;
-      }
-      case "autoCompact": {
-        const value = assignment.value;
-        saveGlobalConfig((previous) => ({ ...previous, autoCompactEnabled: value }));
-        applied.push(`autoCompact=${value}`);
-        break;
-      }
-      case "editor": {
-        const value = assignment.value;
-        saveGlobalConfig((previous) => ({ ...previous, editorMode: value }));
-        applied.push(`editor=${value}`);
-        break;
-      }
-      case "vimEscape": {
-        const value = assignment.value;
-        saveGlobalConfig((previous) => ({
-          ...previous,
-          vimInsertModeEscapeSequence: value || undefined
-        }));
-        applied.push(`vimEscape=${value || "off"}`);
-        break;
-      }
+  const result = applyConfigAssignments(parsed.assignments, {
+    thinking(value) {
+      context5.setAppState((previous) => ({ ...previous, thinkingEnabled: value }));
+    },
+    screenReader(value) {
+      if (value)
+        enableScreenReaderMode();
+      else
+        disableScreenReaderMode();
+      setScreenReaderRendering(value);
+      context5.setAppState((previous) => ({
+        ...previous,
+        settings: { ...previous.settings, screenReaderMode: value }
+      }));
+    },
+    reducedMotion(value) {
+      context5.setAppState((previous) => ({ ...previous, settings: { ...previous.settings, prefersReducedMotion: value } }));
+    },
+    verbose(value) {
+      context5.setAppState((previous) => ({ ...previous, verbose: value }));
     }
-  }
+  });
+  if (result.error)
+    return /* @__PURE__ */ jsx_dev_runtime183.jsxDEV(ConfigResult, {
+      message: result.error,
+      onDone
+    }, undefined, false, undefined, this);
   return /* @__PURE__ */ jsx_dev_runtime183.jsxDEV(ConfigResult, {
-    message: `Updated ${applied.join(", ")}.`,
+    message: `Updated ${result.applied.join(", ")}.`,
     onDone
   }, undefined, false, undefined, this);
 };
@@ -450997,9 +451215,7 @@ var init_config8 = __esm(() => {
   init_Settings();
   init_ink2();
   init_root();
-  init_config();
   init_screenReader();
-  init_settings2();
   init_configAssignments();
   import_react110 = __toESM(require_react(), 1);
   jsx_dev_runtime183 = __toESM(require_jsx_dev_runtime(), 1);
@@ -457877,7 +458093,7 @@ function HelpV2(t0) {
   let t6;
   if ($2[31] !== tabs) {
     t6 = /* @__PURE__ */ jsx_dev_runtime206.jsxDEV(Tabs, {
-      title: `UR v${"1.80.2"}`,
+      title: `UR v${"1.80.4"}`,
       color: "professionalBlue",
       defaultTab: "general",
       children: tabs
@@ -458810,7 +459026,7 @@ function buildToolUseContext(tools, readFileStateCache, toolPermissionContext, a
 async function handleInitialize(options2) {
   return {
     name: "UR",
-    version: "1.80.2",
+    version: "1.80.4",
     protocolVersion: "0.1.0",
     workspaceRoot: options2.cwd,
     capabilities: {
@@ -475918,7 +476134,7 @@ function getAllReleaseNotes(changelogContent = getStoredChangelogFromMemory()) {
     return [];
   }
 }
-async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.80.2") {
+async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.80.4") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -475945,7 +476161,7 @@ async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.80.2")
     releaseNotes
   };
 }
-function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.80.2") {
+function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.80.4") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -478850,7 +479066,7 @@ function getRecentActivitySync() {
   return cachedActivity;
 }
 function getLogoDisplayData() {
-  const version2 = process.env.DEMO_VERSION ?? "1.80.2";
+  const version2 = process.env.DEMO_VERSION ?? "1.80.4";
   const serverUrl = getDirectConnectServerUrl();
   const displayPath = process.env.DEMO_VERSION ? "/code/ur" : getDisplayPath(getCwd());
   const cwd2 = serverUrl ? `${displayPath} in ${serverUrl.replace(/^https?:\/\//, "")}` : displayPath;
@@ -479718,7 +479934,7 @@ function LogoV2() {
   if ($2[2] === Symbol.for("react.memo_cache_sentinel")) {
     t2 = () => {
       const currentConfig = getGlobalConfig();
-      if (currentConfig.lastReleaseNotesSeen === "1.80.2") {
+      if (currentConfig.lastReleaseNotesSeen === "1.80.4") {
         return;
       }
       saveGlobalConfig(_temp325);
@@ -480403,12 +480619,12 @@ function LogoV2() {
   return t41;
 }
 function _temp325(current) {
-  if (current.lastReleaseNotesSeen === "1.80.2") {
+  if (current.lastReleaseNotesSeen === "1.80.4") {
     return current;
   }
   return {
     ...current,
-    lastReleaseNotesSeen: "1.80.2"
+    lastReleaseNotesSeen: "1.80.4"
   };
 }
 function _temp241(s_0) {
@@ -491857,7 +492073,7 @@ function ShellDetailDialog(t0) {
   const isMonitor = shell.kind === "monitor";
   let t8;
   if ($2[17] !== shell.command) {
-    t8 = truncateToWidth(shell.command, 280);
+    t8 = truncateToWidth(formatCommandForDisplay(shell.command), 280);
     $2[17] = shell.command;
     $2[18] = t8;
   } else {
@@ -496500,7 +496716,7 @@ function compileAgenticCiWorkflow(specName = "default", options2 = {}) {
   if (spec.name !== specName) {
     throw new Error("Agentic CI workflow spec name does not match");
   }
-  const packageVersion = options2.packageVersion ?? (typeof MACRO !== "undefined" ? "1.80.2" : "1.80.2");
+  const packageVersion = options2.packageVersion ?? (typeof MACRO !== "undefined" ? "1.80.4" : "1.80.4");
   if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(packageVersion)) {
     throw new Error("invalid ur-agent package version");
   }
@@ -497493,7 +497709,7 @@ runner; \`ur trigger\` is the inbound parser that decides what to run.
       path: ".github/workflows/ur.yml",
       root: "project",
       content: compileAgenticCiWorkflow("default", {
-        packageVersion: typeof MACRO !== "undefined" ? "1.80.2" : "1.80.2"
+        packageVersion: typeof MACRO !== "undefined" ? "1.80.4" : "1.80.4"
       })
     },
     {
@@ -497556,7 +497772,7 @@ function value(tokens, flag) {
   return index2 >= 0 ? tokens[index2 + 1] : undefined;
 }
 function cliVersion() {
-  return typeof MACRO !== "undefined" ? "1.80.2" : "1.80.2";
+  return typeof MACRO !== "undefined" ? "1.80.4" : "1.80.4";
 }
 function workflowPath(cwd2) {
   return join168(cwd2, ".github", "workflows", "ur-agentic-ci.yml");
@@ -503412,7 +503628,7 @@ function createAcpStdioApp(deps) {
       }
     },
     authMethods: [],
-    agentInfo: { name: "UR-Nexus", version: "1.80.2" }
+    agentInfo: { name: "UR-Nexus", version: "1.80.4" }
   })).onRequest("authenticate", () => ({})).onRequest("session/new", async (context6) => {
     const result = runtime2.newSession(context6.params.cwd, context6.params.mcpServers, context6.params.additionalDirectories);
     await runtime2.announce({
@@ -503509,7 +503725,7 @@ function createAcpStdioAgent(deps) {
               }
             },
             authMethods: [],
-            agentInfo: { name: "UR-Nexus", version: "1.80.2" }
+            agentInfo: { name: "UR-Nexus", version: "1.80.4" }
           });
           return;
         case "authenticate":
@@ -714735,7 +714951,7 @@ async function captureMemoryDiagnostics(trigger2, dumpNumber = 0) {
     smapsRollup,
     platform: process.platform,
     nodeVersion: process.version,
-    ccVersion: "1.80.2"
+    ccVersion: "1.80.4"
   };
 }
 async function performHeapDump(trigger2 = "manual", dumpNumber = 0) {
@@ -715324,7 +715540,7 @@ var init_bridge_kick = __esm(() => {
 var call154 = async () => {
   return {
     type: "text",
-    value: "1.80.2"
+    value: "1.80.4"
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -726567,7 +726783,7 @@ function generateHtmlReport(data, insights) {
 </html>`;
 }
 function buildExportData(data, insights, facets, remoteStats) {
-  const version3 = typeof MACRO !== "undefined" ? "1.80.2" : "unknown";
+  const version3 = typeof MACRO !== "undefined" ? "1.80.4" : "unknown";
   const remote_hosts_collected = remoteStats?.hosts.filter((h2) => h2.sessionCount > 0).map((h2) => h2.name);
   const facets_summary = {
     total: facets.size,
@@ -730880,7 +731096,7 @@ var init_sessionStorage = __esm(() => {
   init_settings2();
   init_slowOperations();
   init_uuid();
-  VERSION7 = typeof MACRO !== "undefined" ? "1.80.2" : "unknown";
+  VERSION7 = typeof MACRO !== "undefined" ? "1.80.4" : "unknown";
   MAX_TOMBSTONE_REWRITE_BYTES = 50 * 1024 * 1024;
   SKIP_FIRST_PROMPT_PATTERN = /^(?:\s*<[a-z][\w-]*[\s>]|\[Request interrupted by user[^\]]*\])/;
   EPHEMERAL_PROGRESS_TYPES = new Set([
@@ -732095,7 +732311,7 @@ var init_filesystem = __esm(() => {
   });
   getBundledSkillsRoot = memoize_default(function getBundledSkillsRoot2() {
     const nonce = randomBytes24(16).toString("hex");
-    return join243(getURTempDir(), "bundled-skills", "1.80.2", nonce);
+    return join243(getURTempDir(), "bundled-skills", "1.80.4", nonce);
   });
   getResolvedWorkingDirPaths = memoize_default(getPathsForPermissionCheck);
 });
@@ -737551,13 +737767,13 @@ function getTaskToolGuidance(enabledTools) {
   const canUpdate = enabledTools.has(TASK_UPDATE_TOOL_NAME);
   const canList = enabledTools.has(TASK_LIST_TOOL_NAME);
   if (canCreate && canUpdate) {
-    return `For a request with 3+ distinct steps, multiple independently verifiable outcomes, delegation, dependency ordering, or an explicit user request for a task list, you MUST use ${TASK_CREATE_TOOL_NAME} to maintain the visible task list. Do not create a task merely because a message is actionable: a direct one-step change, informational answer, acknowledgement, or small correction can proceed without a board. Decompose a large request into 2-8 bounded outcomes (never more than 12), each with one observable result, likely file scope, and acceptance evidence; never copy the raw user prompt as a task title. Create tasks first without guessed or forward dependency IDs. After each real ID is returned, use ${TASK_UPDATE_TOOL_NAME} to add dependencies only to tasks that already exist; never reference a future task, and never create a self-dependency. Keep the final graph dependency-ordered; independent branches stay dependency-free. If the user interrupts while tasks are pending or in progress, inspect the active list, preserve still-relevant work, update the affected task, add a task only for a genuinely distinct new outcome, and mark superseded work skipped rather than starting from an empty list. Mark each unblocked task in_progress when work starts and completed immediately after implementation and relevant verification succeed; use failed for attempted work that did not finish, skipped only for explicitly inapplicable work, and leave dependency-blocked work open with its blocker recorded.${canList ? ` Use ${TASK_LIST_TOOL_NAME} after every interruption and to select the next unblocked task; when all work succeeds, show the final list with every task completed before finishing.` : ""}`;
+    return `UR uses a strict-hybrid task policy. Before the first mutation, you MUST use ${TASK_CREATE_TOOL_NAME} for 2+ distinct requested outcomes, enumerated or sequenced work, multiple independently verifiable deliverables, plan-mode implementation, delegation or parallel agents, dependency ordering, project-sized builds/refactors, and release, publishing, deployment, migration, security, credential, permission, sandbox, production, or other high-risk work. An explicit user request for tasks always wins. Only a genuinely atomic, low-risk change with one outcome may proceed directly; informational answers, acknowledgements, and small corrections need no board. Read-only investigation is always allowed before planning. Decompose tracked work into 2-8 bounded outcomes (never more than 12), each with one observable result, likely file scope, and acceptance evidence; never copy the raw user prompt as a task title. Create tasks first without guessed or forward dependency IDs. After each real ID is returned, use ${TASK_UPDATE_TOOL_NAME} to add dependencies only to tasks that already exist; never reference a future task, and never create a self-dependency. Keep the final graph dependency-ordered; independent branches stay dependency-free. If the user interrupts while tasks are pending or in progress, inspect the active list, preserve still-relevant work, update the affected task, add a task only for a genuinely distinct new outcome, and mark superseded work skipped rather than starting from an empty list. Mark each unblocked task in_progress when work starts and completed immediately after implementation and relevant verification succeed; use failed for attempted work that did not finish, skipped only for explicitly inapplicable work, and leave dependency-blocked work open with its blocker recorded.${canList ? ` Use ${TASK_LIST_TOOL_NAME} after every interruption and to select the next unblocked task; when all work succeeds, show the final list with every task completed before finishing.` : ""}`;
   }
   if (canUpdate) {
     return `Keep assigned tasks current with ${TASK_UPDATE_TOOL_NAME}: mark the task in_progress when starting, completed only after implementation and relevant verification succeed, and leave blocked or partial work open with its blocker recorded.${canList ? ` Use ${TASK_LIST_TOOL_NAME} to select the next unblocked task.` : ""}`;
   }
   if (canCreate) {
-    return `Use ${TASK_CREATE_TOOL_NAME} for 3+ distinct steps, multiple independently verifiable outcomes, delegation, dependency ordering, or an explicit user request for a task list. A large request should have 2-8 bounded outcomes (never more than 12). Do not create a task merely because a message is actionable; skip a board for direct one-step work, informational answers, acknowledgements, and small corrections. Never copy the raw prompt as a task title. Create tasks without guessed or forward IDs; dependencies may name only tasks whose real IDs have already been returned. Preserve pending or in-progress work after an interruption, update affected work, and add only genuinely distinct new outcomes.`;
+    return `Use ${TASK_CREATE_TOOL_NAME} before mutation for 2+ distinct outcomes, sequenced work, project-sized changes, delegation, dependencies, releases/deployments/migrations, security-sensitive work, or an explicit task-list request. Only a genuinely atomic low-risk change may proceed directly. A tracked request should have 2-8 bounded outcomes (never more than 12). Never copy the raw prompt as a task title. Create tasks without guessed or forward IDs; dependencies may name only tasks whose real IDs have already been returned. Preserve pending or in-progress work after an interruption, update affected work, and add only genuinely distinct new outcomes.`;
   }
   if (enabledTools.has(TODO_WRITE_TOOL_NAME)) {
     return `Track multi-step work with ${TODO_WRITE_TOOL_NAME}. Keep items dependency-ordered and mark each item completed immediately after its implementation and relevant verification succeed.`;
@@ -738484,7 +738700,7 @@ function computeFingerprint(messageText2, version3) {
 }
 function computeFingerprintFromMessages(messages) {
   const firstMessageText = extractFirstMessageText(messages);
-  return computeFingerprint(firstMessageText, "1.80.2");
+  return computeFingerprint(firstMessageText, "1.80.4");
 }
 var FINGERPRINT_SALT = "59cf53e54c78";
 var init_fingerprint = () => {};
@@ -740409,7 +740625,7 @@ async function sideQuery(opts) {
     betas.push(STRUCTURED_OUTPUTS_BETA_HEADER);
   }
   const messageText2 = extractFirstUserMessageText(messages);
-  const fingerprint2 = computeFingerprint(messageText2, "1.80.2");
+  const fingerprint2 = computeFingerprint(messageText2, "1.80.4");
   const attributionHeader = getAttributionHeader(fingerprint2);
   const systemBlocks = [
     attributionHeader ? { type: "text", text: attributionHeader } : null,
@@ -745243,7 +745459,7 @@ function buildSystemInitMessage(inputs) {
     slash_commands: inputs.commands.filter((c4) => c4.userInvocable !== false).map((c4) => c4.name),
     apiKeySource: getURHQApiKeyWithSource().source,
     betas: getSdkBetas(),
-    ur_version: "1.80.2",
+    ur_version: "1.80.4",
     output_style: outputStyle,
     agents: inputs.agents.map((agent2) => agent2.agentType),
     skills: inputs.skills.filter((s) => s.userInvocable !== false).map((skill2) => skill2.name),
@@ -759079,7 +759295,7 @@ var init_useVoiceEnabled = __esm(() => {
 function getSemverPart(version3) {
   return `${import_semver13.major(version3, { loose: true })}.${import_semver13.minor(version3, { loose: true })}.${import_semver13.patch(version3, { loose: true })}`;
 }
-function useUpdateNotification(updatedVersion, initialVersion = "1.80.2") {
+function useUpdateNotification(updatedVersion, initialVersion = "1.80.4") {
   const [lastNotifiedSemver, setLastNotifiedSemver] = import_react225.useState(() => getSemverPart(initialVersion));
   if (!updatedVersion) {
     return null;
@@ -759128,7 +759344,7 @@ function AutoUpdater({
       return;
     }
     if (false) {}
-    const currentVersion = "1.80.2";
+    const currentVersion = "1.80.4";
     const channel = getInitialSettings()?.autoUpdatesChannel ?? "latest";
     let latestVersion = await getLatestVersion(channel);
     const isDisabled = isAutoUpdaterDisabled();
@@ -759357,12 +759573,12 @@ function NativeAutoUpdater({
     logEvent("tengu_native_auto_updater_start", {});
     try {
       const maxVersion = await getMaxVersion();
-      if (maxVersion && gt("1.80.2", maxVersion)) {
+      if (maxVersion && gt("1.80.4", maxVersion)) {
         const msg = await getMaxVersionMessage();
         setMaxVersionIssue(msg ?? "affects your version");
       }
       const result = await installLatest(channel);
-      const currentVersion = "1.80.2";
+      const currentVersion = "1.80.4";
       const latencyMs = Date.now() - startTime;
       if (result.lockFailed) {
         logEvent("tengu_native_auto_updater_lock_contention", {
@@ -759499,17 +759715,17 @@ function PackageManagerAutoUpdater(t0) {
       const maxVersion = await getMaxVersion();
       if (maxVersion && latest && gt(latest, maxVersion)) {
         logForDebugging(`PackageManagerAutoUpdater: maxVersion ${maxVersion} is set, capping update from ${latest} to ${maxVersion}`);
-        if (gte("1.80.2", maxVersion)) {
-          logForDebugging(`PackageManagerAutoUpdater: current version ${"1.80.2"} is already at or above maxVersion ${maxVersion}, skipping update`);
+        if (gte("1.80.4", maxVersion)) {
+          logForDebugging(`PackageManagerAutoUpdater: current version ${"1.80.4"} is already at or above maxVersion ${maxVersion}, skipping update`);
           setUpdateAvailable(false);
           return;
         }
         latest = maxVersion;
       }
-      const hasUpdate = latest && !gte("1.80.2", latest) && !shouldSkipVersion(latest);
+      const hasUpdate = latest && !gte("1.80.4", latest) && !shouldSkipVersion(latest);
       setUpdateAvailable(!!hasUpdate);
       if (hasUpdate) {
-        logForDebugging(`PackageManagerAutoUpdater: Update available ${"1.80.2"} -> ${latest}`);
+        logForDebugging(`PackageManagerAutoUpdater: Update available ${"1.80.4"} -> ${latest}`);
       }
     };
     $2[0] = t1;
@@ -759543,7 +759759,7 @@ function PackageManagerAutoUpdater(t0) {
       wrap: "truncate",
       children: [
         "currentVersion: ",
-        "1.80.2"
+        "1.80.4"
       ]
     }, undefined, true, undefined, this);
     $2[3] = verbose;
@@ -770396,7 +770612,7 @@ function buildStatusLineCommandInput(permissionMode, exceeds200kTokens, settings
       project_dir: getOriginalCwd(),
       added_dirs: addedDirs
     },
-    version: "1.80.2",
+    version: "1.80.4",
     output_style: {
       name: outputStyleName
     },
@@ -770531,7 +770747,7 @@ function StatusLineInner({
   const attention = customStatusError ?? taskAttention;
   const terminalSize = React133.useContext(TerminalSizeContext);
   const defaultStatusLineText = buildDefaultStatusBar({
-    version: "1.80.2",
+    version: "1.80.4",
     providerLabel: providerRuntime.providerLabel,
     authMode: providerRuntime.authLabel,
     model: renderModelName(mainLoopModel) || providerRuntime.model || "",
@@ -782786,7 +783002,7 @@ async function submitTranscriptShare(messages, trigger2, appearanceId) {
     } catch {}
     const data = {
       trigger: trigger2,
-      version: "1.80.2",
+      version: "1.80.4",
       platform: process.platform,
       transcript,
       subagentTranscripts: Object.keys(subagentTranscripts).length > 0 ? subagentTranscripts : undefined,
@@ -795155,7 +795371,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "1.80.2"
+              "1.80.4"
             ]
           }, undefined, true, undefined, this)
         ]
@@ -796415,7 +796631,7 @@ function completeOnboarding() {
   saveGlobalConfig((current) => ({
     ...current,
     hasCompletedOnboarding: true,
-    lastOnboardingVersion: "1.80.2"
+    lastOnboardingVersion: "1.80.4"
   }));
 }
 function showDialog(root2, renderer) {
@@ -801561,7 +801777,7 @@ function appendToLog(path28, message) {
     cwd: getFsImplementation().cwd(),
     userType: process.env.USER_TYPE,
     sessionId: getSessionId(),
-    version: "1.80.2"
+    version: "1.80.4"
   };
   getLogWriter(path28).write(messageWithTimestamp);
 }
@@ -805725,8 +805941,8 @@ async function getEnvLessBridgeConfig() {
 }
 async function checkEnvLessBridgeMinVersion() {
   const cfg = await getEnvLessBridgeConfig();
-  if (cfg.min_version && lt("1.80.2", cfg.min_version)) {
-    return `Your version of UR (${"1.80.2"}) is too old for Remote Control.
+  if (cfg.min_version && lt("1.80.4", cfg.min_version)) {
+    return `Your version of UR (${"1.80.4"}) is too old for Remote Control.
 Version ${cfg.min_version} or higher is required. Run \`ur update\` to update.`;
   }
   return null;
@@ -806200,7 +806416,7 @@ async function initBridgeCore(params) {
   const rawApi = createBridgeApiClient({
     baseUrl,
     getAccessToken,
-    runnerVersion: "1.80.2",
+    runnerVersion: "1.80.4",
     onDebug: logForDebugging,
     onAuth401,
     getTrustedDeviceToken
@@ -815673,7 +815889,7 @@ function getAgUiCapabilities() {
       name: "UR-Nexus",
       type: "ur-nexus",
       description: "Provider-flexible, local-first autonomous engineering workflow agent.",
-      version: "1.80.2",
+      version: "1.80.4",
       provider: "UR",
       documentationUrl: "https://github.com/Maitham16/UR/blob/master/docs/AG_UI.md"
     },
@@ -816110,6 +816326,102 @@ var init_agUi3 = __esm(() => {
   init_errors();
 });
 
+// src/cli/handlers/session.ts
+var exports_session2 = {};
+__export(exports_session2, {
+  sessionStatusHandler: () => sessionStatusHandler,
+  selectCliSessionStatus: () => selectCliSessionStatus
+});
+import { writeSync as writeSync6 } from "fs";
+import { join as join261, resolve as resolve79 } from "path";
+function activeStatus(log2) {
+  const sessionId = getSessionIdFromLog(log2);
+  if (!sessionId || !log2.projectPath || !log2.fullPath)
+    return;
+  return {
+    sessionId,
+    status: "resumable",
+    title: log2.customTitle || log2.summary || log2.firstPrompt || null,
+    projectPath: log2.projectPath,
+    storagePath: null,
+    transcriptPath: log2.fullPath,
+    createdAt: log2.created.toISOString(),
+    modifiedAt: log2.modified.toISOString(),
+    archivedAt: null
+  };
+}
+function archivedStatus(session2) {
+  return {
+    sessionId: session2.sessionId,
+    status: "archived",
+    title: null,
+    projectPath: null,
+    storagePath: join261(session2.projectDir, ".session-archive", session2.sessionId),
+    transcriptPath: join261(session2.projectDir, ".session-archive", session2.sessionId, "transcript.jsonl"),
+    createdAt: null,
+    modifiedAt: null,
+    archivedAt: session2.archivedAt
+  };
+}
+function selectCliSessionStatus(active3, archived, sessionId, cwd4) {
+  if (sessionId) {
+    const activeMatch = active3.find((log2) => getSessionIdFromLog(log2) === sessionId);
+    if (activeMatch)
+      return activeStatus(activeMatch);
+    const archivedMatch = archived.find((item) => item.sessionId === sessionId);
+    return archivedMatch ? archivedStatus(archivedMatch) : undefined;
+  }
+  const projectRoot2 = resolve79(cwd4);
+  const latest = active3.find((log2) => log2.projectPath && resolve79(log2.projectPath) === projectRoot2);
+  return latest ? activeStatus(latest) : undefined;
+}
+function writeOutput(text2) {
+  writeSync6(1, text2.endsWith(`
+`) ? text2 : `${text2}
+`);
+}
+function writeError(text2) {
+  writeSync6(2, text2.endsWith(`
+`) ? text2 : `${text2}
+`);
+}
+function formatSessionStatus(status2) {
+  const lines = [
+    `Session: ${status2.sessionId}`,
+    `Status: ${status2.status}`
+  ];
+  if (status2.projectPath)
+    lines.push(`Project: ${status2.projectPath}`);
+  if (status2.storagePath)
+    lines.push(`Archive storage: ${status2.storagePath}`);
+  lines.push(`Transcript: ${status2.transcriptPath}`);
+  if (status2.title)
+    lines.push(`Title: ${status2.title.replace(/\s+/gu, " ").slice(0, 120)}`);
+  if (status2.modifiedAt)
+    lines.push(`Last updated: ${status2.modifiedAt}`);
+  if (status2.archivedAt)
+    lines.push(`Archived: ${status2.archivedAt}`);
+  return lines.join(`
+`);
+}
+async function sessionStatusHandler(sessionId, options5 = {}) {
+  const [active3, archived] = await Promise.all([
+    loadAllProjectsMessageLogs(),
+    listArchivedSessions()
+  ]);
+  const status2 = selectCliSessionStatus(active3, archived, sessionId, process.cwd());
+  if (!status2) {
+    writeError(sessionId ? `Session ${sessionId} was not found.` : 'No resumable session was found for the current project. Run "ur session list" to inspect all sessions.');
+    process.exit(1);
+  }
+  writeOutput(options5.json ? JSON.stringify(status2, null, 2) : formatSessionStatus(status2));
+  process.exit(0);
+}
+var init_session3 = __esm(() => {
+  init_sessionArchive();
+  init_sessionStorage();
+});
+
 // src/components/MCPServerDesktopImportDialog.tsx
 function MCPServerDesktopImportDialog(t0) {
   const $2 = import_compiler_runtime359.c(36);
@@ -816804,7 +817116,7 @@ function createMCPServer(cwd4, debug2, verbose) {
   };
   const server2 = new Server({
     name: "ur-nexus",
-    version: "1.80.2"
+    version: "1.80.4"
   }, {
     capabilities: {
       tools: {}
@@ -816964,7 +817276,7 @@ import {
   unlinkSync as unlinkSync17,
   writeFileSync as writeFileSync75
 } from "fs";
-import { join as join261 } from "path";
+import { join as join262 } from "path";
 function isRecord8(value2) {
   return Boolean(value2) && typeof value2 === "object" && !Array.isArray(value2);
 }
@@ -816997,7 +817309,7 @@ function isTask2(value2) {
   return typeof value2.taskId === "string" && ["working", "input_required", "completed", "failed", "cancelled"].includes(String(value2.status)) && typeof value2.createdAt === "string" && typeof value2.lastUpdatedAt === "string" && Number.isFinite(createdAt) && Number.isFinite(lastUpdatedAt) && (value2.ttlMs === null || typeof value2.ttlMs === "number" && Number.isSafeInteger(value2.ttlMs) && value2.ttlMs >= 0);
 }
 function taskManifestPath(cwd4) {
-  return join261(cwd4, ".ur", "mcp-2026", "tasks.json");
+  return join262(cwd4, ".ur", "mcp-2026", "tasks.json");
 }
 function quarantineTaskManifest(path28) {
   const destination = `${path28}.corrupt.${new Date().toISOString().replaceAll(/[:.]/g, "-")}.${randomUUID96()}`;
@@ -817011,8 +817323,8 @@ function assertNotSymlink(path28) {
   }
 }
 function prepareTaskDirectory(cwd4) {
-  const urDir = join261(cwd4, ".ur");
-  const mcpDir = join261(urDir, "mcp-2026");
+  const urDir = join262(cwd4, ".ur");
+  const mcpDir = join262(urDir, "mcp-2026");
   assertNotSymlink(urDir);
   mkdirSync73(urDir, { recursive: true, mode: 448 });
   assertNotSymlink(urDir);
@@ -817140,8 +817452,8 @@ class DurableMcp2026TaskStore {
   async#mutate(operation) {
     const previous = this.#mutationTail;
     let release4;
-    this.#mutationTail = new Promise((resolve79) => {
-      release4 = resolve79;
+    this.#mutationTail = new Promise((resolve80) => {
+      release4 = resolve80;
     });
     await previous;
     try {
@@ -818008,7 +818320,7 @@ function thrownResponse(error40) {
 }
 async function createUrMcp2026Runtime(options5) {
   const server2 = createMCPServer(options5.cwd, options5.debug === true, options5.verbose === true);
-  const client2 = new Client({ name: "ur-mcp-2026-adapter", version: "1.80.2" }, { capabilities: {} });
+  const client2 = new Client({ name: "ur-mcp-2026-adapter", version: "1.80.4" }, { capabilities: {} });
   const [clientTransport, serverTransport] = createLinkedTransportPair();
   try {
     await server2.connect(serverTransport);
@@ -818019,7 +818331,7 @@ async function createUrMcp2026Runtime(options5) {
   }
   const runtime2 = new Mcp2026Runtime({
     cwd: options5.cwd,
-    version: "1.80.2",
+    version: "1.80.4",
     backend: {
       listTools: async () => {
         const listed = await client2.listTools();
@@ -818175,10 +818487,10 @@ async function serveMcp2026(options5) {
       fetch: handler
     });
     console.log(`MCP ${MCP_2026_PROTOCOL_VERSION} server listening on http://${options5.host}:${server2.port}/mcp`);
-    await new Promise((resolve79) => {
-      shutdown = resolve79;
+    await new Promise((resolve80) => {
+      shutdown = resolve80;
       for (const signal of signals2)
-        process.once(signal, resolve79);
+        process.once(signal, resolve80);
     });
   } finally {
     if (shutdown) {
@@ -818206,14 +818518,14 @@ __export(exports_urDesktop, {
 });
 import { readdir as readdir34, readFile as readFile60, stat as stat54 } from "fs/promises";
 import { homedir as homedir45 } from "os";
-import { join as join262 } from "path";
+import { join as join263 } from "path";
 async function getURDesktopConfigPath() {
   const platform7 = getPlatform();
   if (!SUPPORTED_PLATFORMS.includes(platform7)) {
     throw new Error(`Unsupported platform: ${platform7} - UR Desktop integration only works on macOS and WSL.`);
   }
   if (platform7 === "macos") {
-    return join262(homedir45(), "Library", "Application Support", "UR", "ur_desktop_config.json");
+    return join263(homedir45(), "Library", "Application Support", "UR", "ur_desktop_config.json");
   }
   const windowsHome = process.env.USERPROFILE ? process.env.USERPROFILE.replace(/\\/g, "/") : null;
   if (windowsHome) {
@@ -818232,7 +818544,7 @@ async function getURDesktopConfigPath() {
         if (user.name === "Public" || user.name === "Default" || user.name === "Default User" || user.name === "All Users") {
           continue;
         }
-        const potentialConfigPath = join262(usersDir, user.name, "AppData", "Roaming", "UR", "ur_desktop_config.json");
+        const potentialConfigPath = join263(usersDir, user.name, "AppData", "Roaming", "UR", "ur_desktop_config.json");
         try {
           await stat54(potentialConfigPath);
           return potentialConfigPath;
@@ -818658,29 +818970,30 @@ __export(exports_providers, {
   providerModelsHandler: () => providerModelsHandler,
   providerListHandler: () => providerListHandler,
   providerDoctorHandler: () => providerDoctorHandler,
+  providerConfigSetHandler: () => providerConfigSetHandler,
   providerAuthHandler: () => providerAuthHandler,
-  configSetHandler: () => configSetHandler
+  PROVIDER_CONFIG_KEYS: () => PROVIDER_CONFIG_KEYS
 });
-import { writeSync as writeSync6 } from "fs";
-function writeOutput(text2) {
-  writeSync6(1, text2.endsWith(`
+import { writeSync as writeSync7 } from "fs";
+function writeOutput2(text2) {
+  writeSync7(1, text2.endsWith(`
 `) ? text2 : `${text2}
 `);
 }
-function writeError(text2) {
-  writeSync6(2, text2.endsWith(`
+function writeError2(text2) {
+  writeSync7(2, text2.endsWith(`
 `) ? text2 : `${text2}
 `);
 }
 async function providerListHandler(options5 = {}) {
-  writeOutput(formatProviderList(Boolean(options5.json)));
+  writeOutput2(formatProviderList(Boolean(options5.json)));
   process.exit(0);
 }
 async function providerStatusHandler(options5 = {}) {
   const settings = getInitialSettings();
   const active3 = getActiveProviderSettings(settings).active ?? "ollama";
   const result = await doctorProvider(active3, { settings });
-  writeOutput(formatProviderStatus(result, Boolean(options5.json)));
+  writeOutput2(formatProviderStatus(result, Boolean(options5.json)));
   process.exit(result.ok ? 0 : 1);
 }
 async function providerDoctorHandler(providerArg, options5 = {}) {
@@ -818688,7 +819001,7 @@ async function providerDoctorHandler(providerArg, options5 = {}) {
   if (providerArg) {
     const resolved = resolveProviderId(providerArg);
     if (!resolved) {
-      writeError(`Unknown provider "${providerArg}". Run: ur provider list`);
+      writeError2(`Unknown provider "${providerArg}". Run: ur provider list`);
       process.exit(1);
     }
     provider = resolved;
@@ -818696,7 +819009,7 @@ async function providerDoctorHandler(providerArg, options5 = {}) {
   const settings = getInitialSettings();
   const active3 = getActiveProviderSettings(settings).active ?? "ollama";
   const result = await doctorProvider(provider ?? active3, { settings });
-  writeOutput(formatProviderDoctor(result, Boolean(options5.json)));
+  writeOutput2(formatProviderDoctor(result, Boolean(options5.json)));
   process.exit(result.ok ? 0 : 1);
 }
 async function providerModelsHandler(providerArg, options5 = {}) {
@@ -818704,7 +819017,7 @@ async function providerModelsHandler(providerArg, options5 = {}) {
   const active3 = getActiveProviderSettings(settings).active ?? "ollama";
   const provider = providerArg ? resolveProviderId(providerArg) : active3;
   if (!provider) {
-    writeError(`Unknown provider "${providerArg}". Run: ur provider list`);
+    writeError2(`Unknown provider "${providerArg}". Run: ur provider list`);
     process.exit(1);
   }
   const result = await listModelsForProviderWithSource(provider, { settings });
@@ -818717,10 +819030,10 @@ async function providerModelsHandler(providerArg, options5 = {}) {
     models: result.models
   };
   if (options5.json) {
-    writeOutput(JSON.stringify(payload, null, 2));
+    writeOutput2(JSON.stringify(payload, null, 2));
   } else {
     const warning = result.warning ? [`Warning: ${result.warning}`] : [];
-    writeOutput([
+    writeOutput2([
       `Provider: ${definition.displayName} (${provider})`,
       `Model source: ${result.source}`,
       ...warning,
@@ -818736,9 +819049,9 @@ async function providerSelectModelHandler(providerArg, values2, options5 = {}) {
   if (!provider) {
     const message = `Unknown provider "${providerArg}". Run: ur provider list`;
     if (options5.json)
-      writeOutput(JSON.stringify({ ok: false, message }, null, 2));
+      writeOutput2(JSON.stringify({ ok: false, message }, null, 2));
     else
-      writeError(message);
+      writeError2(message);
     process.exit(1);
   }
   const settings = getInitialSettings();
@@ -818748,16 +819061,16 @@ async function providerSelectModelHandler(providerArg, values2, options5 = {}) {
     modelSource: discovered.source
   });
   if (options5.json) {
-    writeOutput(JSON.stringify({
+    writeOutput2(JSON.stringify({
       ...result,
       warning: discovered.warning
     }, null, 2));
   } else if (result.ok) {
-    writeOutput(result.message);
+    writeOutput2(result.message);
     if (discovered.warning)
-      writeError(`Warning: ${discovered.warning}`);
+      writeError2(`Warning: ${discovered.warning}`);
   } else {
-    writeError(result.message);
+    writeError2(result.message);
   }
   process.exit(result.ok ? 0 : 1);
 }
@@ -818767,18 +819080,18 @@ async function providerAuthHandler(alias2, options5 = {}) {
     dryRun: options5.dryRun
   });
   if (options5.json) {
-    writeOutput(JSON.stringify(result, null, 2));
+    writeOutput2(JSON.stringify(result, null, 2));
   } else if (result.ok) {
-    writeOutput(result.message);
+    writeOutput2(result.message);
   } else {
-    writeError(result.message);
+    writeError2(result.message);
   }
   process.exit(result.ok ? 0 : 1);
 }
-async function configSetHandler(key, values2) {
+async function providerConfigSetHandler(key, values2) {
   const value2 = Array.isArray(values2) ? values2.join(" ") : values2;
-  if (key !== "provider" && key !== "provider.fallback" && key !== "provider.command_path" && key !== "openai_transport" && key !== "responses.store" && key !== "responses.compact_threshold" && key !== "responses.tool_search" && key !== "model" && key !== "base_url") {
-    writeError(`Unsupported config key "${key}". Supported: provider, provider.fallback, provider.command_path, openai_transport, responses.store, responses.compact_threshold, responses.tool_search, model, base_url`);
+  if (!PROVIDER_CONFIG_KEYS.includes(key)) {
+    writeError2(`Unsupported provider config key "${key}". Supported: ${PROVIDER_CONFIG_KEYS.join(", ")}`);
     process.exit(1);
   }
   if (key === "model") {
@@ -818790,7 +819103,7 @@ async function configSetHandler(key, values2) {
       settings
     });
     if (validation.valid === false) {
-      writeError(`Invalid model for current provider:
+      writeError2(`Invalid model for current provider:
   Selected provider: ${currentProvider}
   Selected model: ${value2}
   Valid models for ${currentProvider}: ${validation.validModels.join(", ") || "(no models discovered)"}
@@ -818813,7 +819126,7 @@ async function configSetHandler(key, values2) {
         if (validation.valid === false) {
           const validModelsStr = validation.validModels.join(", ") || "(uses dynamic discovery)";
           const suggestedModel = validation.suggestedModel ?? "<model-name>";
-          writeError(`Warning: Current model "${currentModel}" is not available for provider "${newProvider}" and will be cleared.
+          writeError2(`Warning: Current model "${currentModel}" is not available for provider "${newProvider}" and will be cleared.
   Valid models for ${newProvider}: ${validModelsStr}
   After changing provider, run /model or: ur config set model ${suggestedModel}`);
         }
@@ -818822,15 +819135,147 @@ async function configSetHandler(key, values2) {
   }
   const result = setSafeProviderConfig(key, value2);
   if (result.ok) {
-    writeOutput(result.message);
+    writeOutput2(result.message);
     process.exit(0);
   }
-  writeError(result.message);
+  writeError2(result.message);
   process.exit(1);
 }
+var PROVIDER_CONFIG_KEYS;
 var init_providers2 = __esm(() => {
   init_providerRegistry();
   init_settings2();
+  PROVIDER_CONFIG_KEYS = [
+    "provider",
+    "provider.fallback",
+    "provider.command_path",
+    "openai_transport",
+    "responses.store",
+    "responses.compact_threshold",
+    "responses.tool_search",
+    "model",
+    "base_url"
+  ];
+});
+
+// src/cli/handlers/config.ts
+var exports_config3 = {};
+__export(exports_config3, {
+  listCliConfigEntries: () => listCliConfigEntries,
+  configSetHandler: () => configSetHandler,
+  configListHandler: () => configListHandler,
+  configGetHandler: () => configGetHandler
+});
+import { writeSync as writeSync8 } from "fs";
+function writeOutput3(text2) {
+  writeSync8(1, text2.endsWith(`
+`) ? text2 : `${text2}
+`);
+}
+function writeError3(text2) {
+  writeSync8(2, text2.endsWith(`
+`) ? text2 : `${text2}
+`);
+}
+function providerConfigEntries() {
+  const settings = getInitialSettings();
+  const active3 = getActiveProviderSettings(settings);
+  const configured = settings.provider ?? {};
+  return [
+    { key: "provider", value: active3.active ?? "ollama", category: "provider" },
+    {
+      key: "provider.fallback",
+      value: active3.fallback ?? null,
+      category: "provider"
+    },
+    {
+      key: "provider.command_path",
+      value: active3.commandPath ?? null,
+      category: "provider"
+    },
+    {
+      key: "openai_transport",
+      value: configured.openaiTransport ?? null,
+      category: "provider"
+    },
+    {
+      key: "responses.store",
+      value: configured.responses?.store ?? null,
+      category: "provider"
+    },
+    {
+      key: "responses.compact_threshold",
+      value: configured.responses?.compactThreshold ?? null,
+      category: "provider"
+    },
+    {
+      key: "responses.tool_search",
+      value: configured.responses?.toolSearch ?? null,
+      category: "provider"
+    },
+    { key: "model", value: active3.model ?? null, category: "provider" },
+    { key: "base_url", value: active3.baseUrl ?? null, category: "provider" }
+  ];
+}
+function listCliConfigEntries() {
+  return [
+    ...getConfigAssignmentValues().map((entry) => ({
+      ...entry,
+      category: "agent"
+    })),
+    ...providerConfigEntries()
+  ];
+}
+function textValue(value2) {
+  return value2 === null ? "(not set)" : String(value2);
+}
+function findEntry(key) {
+  const assignmentKey = resolveConfigAssignmentKey(key);
+  const canonical = assignmentKey ?? key.toLowerCase();
+  return listCliConfigEntries().find((entry) => entry.key === canonical);
+}
+async function configSetHandler(key, values2) {
+  const value2 = Array.isArray(values2) ? values2.join(" ") : values2;
+  if (resolveConfigAssignmentKey(key)) {
+    const parsed = parseConfigAssignments(`${key}=${value2}`);
+    if (parsed.error) {
+      writeError3(parsed.error);
+      process.exit(1);
+    }
+    const result = applyConfigAssignments(parsed.assignments);
+    if (result.error) {
+      writeError3(result.error);
+      process.exit(1);
+    }
+    writeOutput3(`Updated ${result.applied.join(", ")}.`);
+    process.exit(0);
+  }
+  if (!PROVIDER_CONFIG_KEYS.includes(key)) {
+    writeError3(`Unsupported config key "${key}". Run "ur config list" to see supported settings.`);
+    process.exit(1);
+  }
+  await providerConfigSetHandler(key, value2);
+}
+function configGetHandler(key, options5 = {}) {
+  const entry = findEntry(key);
+  if (!entry) {
+    writeError3(`Unknown config key "${key}". Run "ur config list" to see supported settings.`);
+    process.exit(1);
+  }
+  writeOutput3(options5.json ? JSON.stringify(entry, null, 2) : `${entry.key}=${textValue(entry.value)}`);
+  process.exit(0);
+}
+function configListHandler(options5 = {}) {
+  const entries = listCliConfigEntries();
+  writeOutput3(options5.json ? JSON.stringify(entries, null, 2) : entries.map((entry) => `${entry.key}=${textValue(entry.value)}`).join(`
+`));
+  process.exit(0);
+}
+var init_config11 = __esm(() => {
+  init_configAssignments();
+  init_providerRegistry();
+  init_settings2();
+  init_providers2();
 });
 
 // src/utils/plugins/pluginDiscovery.ts
@@ -819193,9 +819638,9 @@ var init_pluginDiscovery = __esm(() => {
 
 // src/utils/plugins/pluginDoctor.ts
 import { existsSync as existsSync105, readdirSync as readdirSync42, readFileSync as readFileSync95, statSync as statSync39 } from "fs";
-import { basename as basename68, join as join263 } from "path";
+import { basename as basename68, join as join264 } from "path";
 function manifestPathFor3(dir) {
-  const p2 = join263(dir, ".ur-plugin", "plugin.json");
+  const p2 = join264(dir, ".ur-plugin", "plugin.json");
   return existsSync105(p2) ? p2 : null;
 }
 function discoverPluginDirs(roots) {
@@ -819221,7 +819666,7 @@ function discoverPluginDirs(roots) {
       continue;
     }
     for (const entry of entries) {
-      const full = join263(root2, entry);
+      const full = join264(root2, entry);
       try {
         if (statSync39(full).isDirectory() && manifestPathFor3(full))
           add(full);
@@ -819354,7 +819799,7 @@ __export(exports_plugins, {
   VALID_UPDATE_SCOPES: () => VALID_UPDATE_SCOPES,
   VALID_INSTALLABLE_SCOPES: () => VALID_INSTALLABLE_SCOPES
 });
-import { basename as basename69, dirname as dirname103, join as join264, resolve as resolve79 } from "path";
+import { basename as basename69, dirname as dirname103, join as join265, resolve as resolve80 } from "path";
 function handleMarketplaceError(error40, action3) {
   logError2(error40);
   cliError(`${figures_default.cross} Failed to ${action3}: ${errorMessage2(error40)}`);
@@ -819435,8 +819880,8 @@ function printValidationResult(result) {
 async function pluginDoctorHandler(options5) {
   const roots = [];
   if (options5.path)
-    roots.push(resolve79(options5.path));
-  roots.push(join264(process.cwd(), ".ur", "plugins"));
+    roots.push(resolve80(options5.path));
+  roots.push(join265(process.cwd(), ".ur", "plugins"));
   try {
     const data = loadInstalledPluginsV2();
     for (const installations of Object.values(data.plugins ?? {})) {
@@ -819985,12 +820430,12 @@ __export(exports_install, {
   install: () => install
 });
 import { homedir as homedir46 } from "os";
-import { join as join265 } from "path";
+import { join as join266 } from "path";
 function getInstallationPath2() {
   const isWindows2 = env2.platform === "win32";
   const homeDir = homedir46();
   if (isWindows2) {
-    const windowsPath = join265(homeDir, ".local", "bin", "ur.exe");
+    const windowsPath = join266(homeDir, ".local", "bin", "ur.exe");
     return windowsPath.replace(/\//g, "\\");
   }
   return "~/.local/bin/ur";
@@ -820351,7 +820796,7 @@ async function setupTokenHandler(root2) {
   const {
     ConsoleOAuthFlow: ConsoleOAuthFlow2
   } = await Promise.resolve().then(() => (init_ConsoleOAuthFlow(), exports_ConsoleOAuthFlow));
-  await new Promise((resolve80) => {
+  await new Promise((resolve81) => {
     root2.render(/* @__PURE__ */ jsx_dev_runtime483.jsxDEV(AppStateProvider, {
       onChangeAppState,
       children: /* @__PURE__ */ jsx_dev_runtime483.jsxDEV(KeybindingSetup, {
@@ -820375,7 +820820,7 @@ async function setupTokenHandler(root2) {
             }, undefined, true, undefined, this),
             /* @__PURE__ */ jsx_dev_runtime483.jsxDEV(ConsoleOAuthFlow2, {
               onDone: () => {
-                resolve80();
+                resolve81();
               },
               mode: "setup-token",
               startingMessage: "This will guide you through long-lived (1-year) auth token setup for your UR account. UR subscription required."
@@ -820411,7 +820856,7 @@ function DoctorWithPlugins(t0) {
 }
 async function doctorHandler(root2) {
   logEvent("tengu_doctor_command", {});
-  await new Promise((resolve80) => {
+  await new Promise((resolve81) => {
     root2.render(/* @__PURE__ */ jsx_dev_runtime483.jsxDEV(AppStateProvider, {
       children: /* @__PURE__ */ jsx_dev_runtime483.jsxDEV(KeybindingSetup, {
         children: /* @__PURE__ */ jsx_dev_runtime483.jsxDEV(MCPConnectionManager, {
@@ -820419,7 +820864,7 @@ async function doctorHandler(root2) {
           isStrictMcpConfig: false,
           children: /* @__PURE__ */ jsx_dev_runtime483.jsxDEV(DoctorWithPlugins, {
             onDone: () => {
-              resolve80();
+              resolve81();
             }
           }, undefined, false, undefined, this)
         }, undefined, false, undefined, this)
@@ -820437,14 +820882,14 @@ async function installHandler(target, options5) {
   const {
     install: install2
   } = await Promise.resolve().then(() => (init_install(), exports_install));
-  await new Promise((resolve80) => {
+  await new Promise((resolve81) => {
     const args = [];
     if (target)
       args.push(target);
     if (options5.force)
       args.push("--force");
     install2.call((result) => {
-      resolve80();
+      resolve81();
       process.exit(result.includes("failed") ? 1 : 0);
     }, {}, args);
   });
@@ -820621,7 +821066,7 @@ async function update() {
   logEvent("tengu_update_check", {});
   const diagnostic2 = await getDoctorDiagnostic();
   const result = await checkUpgradeStatus({
-    currentVersion: "1.80.2",
+    currentVersion: "1.80.4",
     packageName: UR_AGENT_PACKAGE_NAME,
     installationType: diagnostic2.installationType,
     latestVersion: () => getLatestNpmPackageVersion(UR_AGENT_PACKAGE_NAME)
@@ -820649,7 +821094,7 @@ __export(exports_main, {
   main: () => main
 });
 import { readFileSync as readFileSync96 } from "fs";
-import { resolve as resolve80 } from "path";
+import { resolve as resolve81 } from "path";
 function logManagedSettings() {
   try {
     const policySettings = getSettingsForSource("policySettings");
@@ -821228,12 +821673,12 @@ ${getTmuxInstallInstructions2()}
         process.exit(1);
       }
       try {
-        const filePath = resolve80(options5.systemPromptFile);
+        const filePath = resolve81(options5.systemPromptFile);
         systemPrompt = readFileSync96(filePath, "utf8");
       } catch (error40) {
         const code = getErrnoCode(error40);
         if (code === "ENOENT") {
-          process.stderr.write(source_default.red(`Error: System prompt file not found: ${resolve80(options5.systemPromptFile)}
+          process.stderr.write(source_default.red(`Error: System prompt file not found: ${resolve81(options5.systemPromptFile)}
 `));
           process.exit(1);
         }
@@ -821250,12 +821695,12 @@ ${getTmuxInstallInstructions2()}
         process.exit(1);
       }
       try {
-        const filePath = resolve80(options5.appendSystemPromptFile);
+        const filePath = resolve81(options5.appendSystemPromptFile);
         appendSystemPrompt = readFileSync96(filePath, "utf8");
       } catch (error40) {
         const code = getErrnoCode(error40);
         if (code === "ENOENT") {
-          process.stderr.write(source_default.red(`Error: Append system prompt file not found: ${resolve80(options5.appendSystemPromptFile)}
+          process.stderr.write(source_default.red(`Error: Append system prompt file not found: ${resolve81(options5.appendSystemPromptFile)}
 `));
           process.exit(1);
         }
@@ -821301,7 +821746,7 @@ ${addendum}` : addendum;
             errors4 = result.errors;
           }
         } else {
-          const configPath2 = resolve80(configItem);
+          const configPath2 = resolve81(configItem);
           const result = parseMcpConfigFromFilePath({
             filePath: configPath2,
             expandVars: true,
@@ -821949,7 +822394,7 @@ ${customInstructions}` : customInstructions;
       }
     }
     logForDiagnosticsNoPII("info", "started", {
-      version: "1.80.2",
+      version: "1.80.4",
       is_native_binary: isInBundledMode()
     });
     registerCleanup(async () => {
@@ -822154,8 +822599,8 @@ ${customInstructions}` : customInstructions;
         return connectMcpBatch(dedupedURAi, "urai");
       });
       let uraiTimer;
-      const uraiTimedOut = await Promise.race([uraiConnect.then(() => false), new Promise((resolve81) => {
-        uraiTimer = setTimeout((r) => r(true), UR_AI_MCP_TIMEOUT_MS, resolve81);
+      const uraiTimedOut = await Promise.race([uraiConnect.then(() => false), new Promise((resolve82) => {
+        uraiTimer = setTimeout((r) => r(true), UR_AI_MCP_TIMEOUT_MS, resolve82);
       })]);
       if (uraiTimer)
         clearTimeout(uraiTimer);
@@ -822736,7 +823181,7 @@ Usage: ur --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("1.80.2 (UR-Nexus)", "-v, --version", "Output the version number");
+  }).version("1.80.4 (UR-Nexus)", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -822788,7 +823233,13 @@ Usage: ur --remote "your task description"`, () => gracefulShutdown(1));
       permissionMode
     });
   });
-  const sessionCli = program2.command("session").description("List, archive, and restore local conversation sessions").configureHelp(createSortedHelpConfig());
+  const sessionCli = program2.command("session").description("Inspect, list, archive, and restore local conversation sessions").configureHelp(createSortedHelpConfig());
+  sessionCli.command("status [session-id]").description("Show a session, or the latest resumable session for this project").option("--json", "Output structured JSON").action(async (sessionId, options5) => {
+    const {
+      sessionStatusHandler: sessionStatusHandler2
+    } = await Promise.resolve().then(() => (init_session3(), exports_session2));
+    await sessionStatusHandler2(sessionId, options5);
+  });
   sessionCli.command("list").description("List resumable and archived conversations").option("--json", "Output structured JSON").action(async ({
     json: json2
   }) => {
@@ -822987,12 +823438,24 @@ Usage: ur --remote "your task description"`, () => gracefulShutdown(1));
     await providerSelectModelHandler2(providerArg, model, options5);
   });
   const configCmd = program2.command("config").description("Manage safe UR-Nexus settings").configureHelp(createSortedHelpConfig());
-  configCmd.command("set <key> <value...>").description("Set a safe non-secret setting: provider, provider.fallback, provider.command_path, model, or base_url").action(async (key, value2) => {
+  configCmd.command("set <key> <value...>").description("Set a validated agent, accessibility, editor, or provider setting").action(async (key, value2) => {
     const {
       configSetHandler: configSetHandler2
-    } = await Promise.resolve().then(() => (init_providers2(), exports_providers));
+    } = await Promise.resolve().then(() => (init_config11(), exports_config3));
     await configSetHandler2(key, value2);
   });
+  configCmd.command("get <key>").description("Show one effective safe setting").option("--json", "Output structured JSON").action(async (key, options5) => {
+    const {
+      configGetHandler: configGetHandler2
+    } = await Promise.resolve().then(() => (init_config11(), exports_config3));
+    configGetHandler2(key, options5);
+  });
+  configCmd.command("list").description("List effective safe settings and their current values").option("--json", "Output structured JSON").action(async (options5) => {
+    const {
+      configListHandler: configListHandler2
+    } = await Promise.resolve().then(() => (init_config11(), exports_config3));
+    configListHandler2(options5);
+  });
   program2.command("connect [action] [provider]").description("Connect a provider account: subscription login (Codex, Claude, Gemini) or store an API key").option("--key <key>", "API key to store for an API provider").option("--json", "Output as JSON").action(async (action3, providerArg, opts) => {
     const args = [action3 ? quoteLocalCommandArg(action3) : undefined, providerArg ? quoteLocalCommandArg(providerArg) : undefined, opts.key ? `--key ${quoteLocalCommandArg(opts.key)}` : undefined, opts.json ? "--json" : undefined].filter(Boolean).join(" ");
     await runLocalTextCommand(() => Promise.resolve().then(() => (init_connect(), exports_connect)), args);
@@ -823400,11 +823863,12 @@ Usage: ur --remote "your task description"`, () => gracefulShutdown(1));
     await runLocalTextCommand(() => Promise.resolve().then(() => (init_role_mode(), exports_role_mode)), args);
   });
   const a2a = program2.command("a2a").description("Agent-to-Agent interoperability, discovery, and delegation utilities").configureHelp(createSortedHelpConfig());
-  a2a.command("card").description("Print an A2A Agent Card preview").option("--base-url <url>", "Base URL to use for the Agent Card endpoint").option("--compact", "Output compact JSON").action(async (opts) => {
+  a2a.command("card").description("Print an A2A Agent Card preview").option("--base-url <url>", "Base URL to use for the Agent Card endpoint").option("--v1", "Print the current A2A 1.0 Agent Card instead of the legacy 0.3 card").option("--compact", "Output compact JSON").action(async (opts) => {
     const {
-      formatA2AAgentCard: formatA2AAgentCard2
+      formatA2AAgentCard: formatA2AAgentCard2,
+      formatA2AV1AgentCard: formatA2AV1AgentCard2
     } = await Promise.resolve().then(() => (init_trends(), exports_trends));
-    console.log(formatA2AAgentCard2({
+    console.log((opts.v1 ? formatA2AV1AgentCard2 : formatA2AAgentCard2)({
       baseUrl: opts.baseUrl
     }, !opts.compact));
     process.exit(0);
@@ -823844,7 +824308,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"1.80.2"} (UR-Nexus)`);
+    console.log(`${"1.80.4"} (UR-Nexus)`);
     return;
   }
   if (args[0] === "a2a" && args[1] === "serve" && !args.includes("--help") && !args.includes("-h")) {