ur-agent 1.80.8 → 1.80.9

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## 1.80.9
+
+- Fixed the remaining provider-independent `TaskListRequired` failure for
+  research fan-out. Some models preserved the research/report-only brief but
+  dropped the caller's explicit “read-only” wording while still selecting
+  `general-purpose`. UR now recognizes that constrained shape and reduces it
+  to the mechanically read-only shipped `Explore` worker before task gating.
+- Kept the boundary fail-closed for any prompt that directs implementation,
+  building, file changes, command execution, testing, installation, commits,
+  deployment, or other mutation. Custom definitions, nested workers,
+  names/teams, worktrees, and cwd overrides remain excluded. Approve All is
+  unchanged.
+
 ## 1.80.8
 
 - Fixed provider-independent failed-first research delegation. Several model

package/dist/cli.js

@@ -107788,7 +107788,7 @@ var init_auth = __esm(() => {
 
 // src/utils/userAgent.ts
 function getURCodeUserAgent() {
-  return `ur/${"1.80.8"}`;
+  return `ur/${"1.80.9"}`;
 }
 
 // src/utils/workloadContext.ts
@@ -107810,7 +107810,7 @@ function getUserAgent() {
   const clientApp = process.env.UR_AGENT_SDK_CLIENT_APP ? `, client-app/${process.env.UR_AGENT_SDK_CLIENT_APP}` : "";
   const workload = getWorkload();
   const workloadSuffix = workload ? `, workload/${workload}` : "";
-  return `ur-cli/${"1.80.8"} (${process.env.USER_TYPE}, ${process.env.UR_CODE_ENTRYPOINT ?? "cli"}${agentSdkVersion}${clientApp}${workloadSuffix})`;
+  return `ur-cli/${"1.80.9"} (${process.env.USER_TYPE}, ${process.env.UR_CODE_ENTRYPOINT ?? "cli"}${agentSdkVersion}${clientApp}${workloadSuffix})`;
 }
 function getMCPUserAgent() {
   const parts = [];
@@ -107824,7 +107824,7 @@ function getMCPUserAgent() {
     parts.push(`client-app/${process.env.UR_AGENT_SDK_CLIENT_APP}`);
   }
   const suffix = parts.length > 0 ? ` (${parts.join(", ")})` : "";
-  return `ur/${"1.80.8"}${suffix}`;
+  return `ur/${"1.80.9"}${suffix}`;
 }
 function getWebFetchUserAgent() {
   return `UR-User (${getURCodeUserAgent()})`;
@@ -107962,7 +107962,7 @@ var init_user = __esm(() => {
       deviceId,
       sessionId: getSessionId(),
       email: getEmail(),
-      appVersion: "1.80.8",
+      appVersion: "1.80.9",
       platform: getHostPlatformForAnalytics(),
       organizationUuid,
       accountUuid,
@@ -115849,7 +115849,7 @@ var init_metadata = __esm(() => {
   COMPOUND_OPERATOR_REGEX = /\s*(?:&&|\|\||[;|])\s*/;
   WHITESPACE_REGEX = /\s+/;
   getVersionBase = memoize_default(() => {
-    const match = "1.80.8".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
+    const match = "1.80.9".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
     return match ? match[0] : undefined;
   });
   buildEnvContext = memoize_default(async () => {
@@ -115889,7 +115889,7 @@ var init_metadata = __esm(() => {
       isGithubAction: isEnvTruthy(process.env.GITHUB_ACTIONS),
       isURCodeAction: isEnvTruthy(process.env.UR_CODE_ACTION),
       isURAiAuth: isURAISubscriber(),
-      version: "1.80.8",
+      version: "1.80.9",
       versionBase: getVersionBase(),
       buildTime: "",
       deploymentEnvironment: env2.detectDeploymentEnvironment(),
@@ -116559,7 +116559,7 @@ function initialize1PEventLogging() {
   const platform2 = getPlatform();
   const attributes = {
     [import_semantic_conventions4.ATTR_SERVICE_NAME]: "ur",
-    [import_semantic_conventions4.ATTR_SERVICE_VERSION]: "1.80.8"
+    [import_semantic_conventions4.ATTR_SERVICE_VERSION]: "1.80.9"
   };
   if (platform2 === "wsl") {
     const wslVersion = getWslVersion();
@@ -116587,7 +116587,7 @@ function initialize1PEventLogging() {
       })
     ]
   });
-  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.urhq.ur.events", "1.80.8");
+  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.urhq.ur.events", "1.80.9");
 }
 async function reinitialize1PEventLoggingIfConfigChanged() {
   if (!is1PEventLoggingEnabled() || !firstPartyEventLoggerProvider) {
@@ -126550,7 +126550,7 @@ function formatA2AAgentCard(options = {}, pretty = true) {
 function formatA2AV1AgentCard(options = {}, pretty = true) {
   return JSON.stringify(buildA2AV1AgentCard(options), null, pretty ? 2 : 0);
 }
-var urVersion = "1.80.8", researchSnapshotDate = "2026-08-10", coverage, priorityRoadmap;
+var urVersion = "1.80.9", researchSnapshotDate = "2026-08-10", coverage, priorityRoadmap;
 var init_trends = __esm(() => {
   init_a2aCardSignature();
   coverage = [
@@ -129440,7 +129440,7 @@ function getAttributionHeader(fingerprint) {
   if (!isAttributionHeaderEnabled()) {
     return "";
   }
-  const version2 = `${"1.80.8"}.${fingerprint}`;
+  const version2 = `${"1.80.9"}.${fingerprint}`;
   const entrypoint = process.env.UR_CODE_ENTRYPOINT ?? "unknown";
   const cch = "";
   const workload = getWorkload();
@@ -184636,7 +184636,7 @@ var init_projectSafety = __esm(() => {
 function getInstruments() {
   if (instruments)
     return instruments;
-  const meter = import_api10.metrics.getMeter("ur-agent.gen_ai", "1.80.8");
+  const meter = import_api10.metrics.getMeter("ur-agent.gen_ai", "1.80.9");
   instruments = {
     operationDuration: meter.createHistogram("gen_ai.client.operation.duration", {
       description: "GenAI operation duration.",
@@ -184734,7 +184734,7 @@ function genAiAgentAttributes() {
     "gen_ai.operation.name": GEN_AI_OPERATION_INVOKE_AGENT,
     "gen_ai.provider.name": "ur",
     "gen_ai.agent.name": "UR-Nexus",
-    "gen_ai.agent.version": "1.80.8"
+    "gen_ai.agent.version": "1.80.9"
   };
 }
 function genAiWorkflowAttributes(workflowName, workflowRunId) {
@@ -184755,7 +184755,7 @@ function genAiWorkflowAttributes(workflowName, workflowRunId) {
 function startGenAiWorkflowSpan(workflowName, workflowRunId) {
   const attributes = genAiWorkflowAttributes(workflowName, workflowRunId);
   const name = typeof attributes["gen_ai.workflow.name"] === "string" ? `invoke_workflow ${attributes["gen_ai.workflow.name"]}` : GEN_AI_OPERATION_INVOKE_WORKFLOW;
-  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.80.8").startSpan(name, { kind: import_api10.SpanKind.INTERNAL, attributes });
+  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.80.9").startSpan(name, { kind: import_api10.SpanKind.INTERNAL, attributes });
 }
 function endGenAiWorkflowSpan(span, options2 = {}) {
   try {
@@ -184793,7 +184793,7 @@ function startGenAiMemorySpan(operation, options2 = {}) {
   if (options2.recordCount !== undefined && Number.isInteger(options2.recordCount) && options2.recordCount >= 0) {
     attributes["gen_ai.memory.record.count"] = options2.recordCount;
   }
-  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.80.8").startSpan(operation, { kind: import_api10.SpanKind.INTERNAL, attributes });
+  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.80.9").startSpan(operation, { kind: import_api10.SpanKind.INTERNAL, attributes });
 }
 function endGenAiMemorySpan(span, options2 = {}) {
   try {
@@ -278508,7 +278508,7 @@ function getTelemetryAttributes() {
     attributes["session.id"] = sessionId;
   }
   if (shouldIncludeAttribute("OTEL_METRICS_INCLUDE_VERSION")) {
-    attributes["app.version"] = "1.80.8";
+    attributes["app.version"] = "1.80.9";
   }
   const oauthAccount = getOauthAccountInfo();
   if (oauthAccount) {
@@ -319499,7 +319499,7 @@ function getInstallationEnv() {
   return;
 }
 function getURCodeVersion() {
-  return "1.80.8";
+  return "1.80.9";
 }
 async function getInstalledVSCodeExtensionVersion(command) {
   const { stdout } = await execFileNoThrow(command, ["--list-extensions", "--show-versions"], {
@@ -326869,7 +326869,7 @@ async function setupSdkMcpClients(sdkMcpConfigs, sendMcpMessage) {
     const client2 = new Client({
       name: "ur",
       title: "UR",
-      version: "1.80.8",
+      version: "1.80.9",
       description: "UR-Nexus autonomous engineering workflow engine",
       websiteUrl: PRODUCT_URL
     }, {
@@ -327230,7 +327230,7 @@ var init_client5 = __esm(() => {
       const client2 = new Client({
         name: "ur",
         title: "UR",
-        version: "1.80.8",
+        version: "1.80.9",
         description: "UR-Nexus autonomous engineering workflow engine",
         websiteUrl: PRODUCT_URL
       }, {
@@ -329251,7 +329251,7 @@ function isShippedReadOnlyAgentDefinition(agent) {
   return SHIPPED_READ_ONLY_AGENT_TYPES.has(agent.agentType) && agent.source === "built-in" && agent.permissionMode === "plan";
 }
 function normalizeReadOnlyResearchDelegation(input, activeAgents, isNestedAgent) {
-  if (isNestedAgent || input.subagent_type !== "general-purpose" || input.name !== undefined || input.team_name !== undefined || input.isolation !== undefined || input.cwd !== undefined || typeof input.prompt !== "string" || !READ_ONLY_RESEARCH_MARKER.test(input.prompt) || !RESEARCH_INTENT_MARKER.test(input.prompt)) {
+  if (isNestedAgent || input.subagent_type !== "general-purpose" || input.name !== undefined || input.team_name !== undefined || input.isolation !== undefined || input.cwd !== undefined || typeof input.prompt !== "string" || !RESEARCH_INTENT_MARKER.test(input.prompt) || !READ_ONLY_RESEARCH_MARKER.test(input.prompt) && MUTATING_DELEGATION_MARKER.test(input.prompt)) {
     return input;
   }
   const exploreAgent = activeAgents.find((agent) => agent.agentType === "Explore" && isShippedReadOnlyAgentDefinition(agent));
@@ -329266,7 +329266,7 @@ function shouldApplyAgentDefinitionPermissionMode(agent, parentMode, transcriptC
     return true;
   return parentMode !== "bypassPermissions" && parentMode !== "acceptEdits" && !(transcriptClassifierEnabled && parentMode === "auto");
 }
-var SHIPPED_READ_ONLY_AGENT_TYPES, READ_ONLY_RESEARCH_MARKER, RESEARCH_INTENT_MARKER;
+var SHIPPED_READ_ONLY_AGENT_TYPES, READ_ONLY_RESEARCH_MARKER, RESEARCH_INTENT_MARKER, MUTATING_ACTION = "(?:implement(?:s|ed|ing)?|build(?:s|ing)?|built|create(?:s|d|ing)?|modif(?:y|ies|ied|ying)|edit(?:s|ed|ing)?|writ(?:e|es|ten|ing)|fix(?:es|ed|ing)?|refactor(?:s|ed|ing)?|update(?:s|d|ing)?|delete(?:s|d|ing)?|remove(?:s|d|ing)?|add(?:s|ed|ing)?|install(?:s|ed|ing)?|execute(?:s|d|ing)?|run(?:s|ning)?|commit(?:s|ted|ting)?|push(?:es|ed|ing)?|deploy(?:s|ed|ing)?|generate(?:s|d|ing)?|scaffold(?:s|ed|ing)?|author(?:s|ed|ing)?|change(?:s|d|ing)?)", MUTATING_DELEGATION_MARKER;
 var init_readOnlyAgents = __esm(() => {
   SHIPPED_READ_ONLY_AGENT_TYPES = new Set([
     "Explore",
@@ -329274,6 +329274,11 @@ var init_readOnlyAgents = __esm(() => {
   ]);
   READ_ONLY_RESEARCH_MARKER = /\bread[\s-]?only\b|\b(?:do not|don't|must not|never)\s+(?:modify|write|edit|create|change)\s+(?:any\s+)?(?:code\s+)?files?\b|\bno\s+(?:file|workspace)\s+(?:changes|modifications)\b/i;
   RESEARCH_INTENT_MARKER = /\b(?:research|investigat\w*|explor\w*|analy[sz]\w*|audit\w*)\b/i;
+  MUTATING_DELEGATION_MARKER = new RegExp([
+    `\\b(?:and|then|also)\\s+${MUTATING_ACTION}\\b`,
+    `\\b(?:please|must|should|need(?:s)?\\s+to|you(?:'ll|\\s+will|\\s+must|\\s+should))\\s+${MUTATING_ACTION}\\b`,
+    `(?:^|[\\n.;:!?]\\s*|[-*]\\s+)${MUTATING_ACTION}\\b`
+  ].join("|"), "i");
 });
 
 // src/components/AgentProgressLine.tsx
@@ -339998,7 +340003,7 @@ async function createRuntime() {
   bootstrapTelemetry();
   const resource = defaultResource().merge(detectResources({ detectors: [envDetector] })).merge(resourceFromAttributes({
     [import_semantic_conventions7.ATTR_SERVICE_NAME]: "ur-agent",
-    [import_semantic_conventions7.ATTR_SERVICE_VERSION]: "1.80.8"
+    [import_semantic_conventions7.ATTR_SERVICE_VERSION]: "1.80.9"
   }));
   const tracerProvider = exporters.traces.length > 0 ? new BasicTracerProvider({
     resource,
@@ -340031,11 +340036,11 @@ async function createRuntime() {
   setMeterProvider(meterProvider);
   setLoggerProvider(loggerProvider);
   if (meterProvider) {
-    const meter = meterProvider.getMeter("ur-agent", "1.80.8");
+    const meter = meterProvider.getMeter("ur-agent", "1.80.9");
     setMeter(meter, (name, options2) => meter.createCounter(name, options2));
   }
   if (loggerProvider) {
-    setEventLogger(loggerProvider.getLogger("ur-agent.events", "1.80.8"));
+    setEventLogger(loggerProvider.getLogger("ur-agent.events", "1.80.9"));
   }
   if (!cleanupRegistered3) {
     cleanupRegistered3 = true;
@@ -340697,9 +340702,9 @@ async function assertMinVersion() {
   if (false) {}
   try {
     const versionConfig = await getDynamicConfig_BLOCKS_ON_INIT("tengu_version_config", { minVersion: "0.0.0" });
-    if (versionConfig.minVersion && lt("1.80.8", versionConfig.minVersion)) {
+    if (versionConfig.minVersion && lt("1.80.9", versionConfig.minVersion)) {
       console.error(`
-It looks like your version of UR (${"1.80.8"}) needs an update.
+It looks like your version of UR (${"1.80.9"}) needs an update.
 A newer version (${versionConfig.minVersion} or higher) is required to continue.
 
 To update, please run:
@@ -340915,7 +340920,7 @@ async function installGlobalPackage(specificVersion) {
     logError2(new AutoUpdaterError("Another process is currently installing an update"));
     logEvent("tengu_auto_updater_lock_contention", {
       pid: process.pid,
-      currentVersion: "1.80.8"
+      currentVersion: "1.80.9"
     });
     return "in_progress";
   }
@@ -340924,7 +340929,7 @@ async function installGlobalPackage(specificVersion) {
     if (!env2.isRunningWithBun() && env2.isNpmFromWindowsPath()) {
       logError2(new Error("Windows NPM detected in WSL environment"));
       logEvent("tengu_auto_updater_windows_npm_in_wsl", {
-        currentVersion: "1.80.8"
+        currentVersion: "1.80.9"
       });
       console.error(`
 Error: Windows NPM detected in WSL
@@ -341459,7 +341464,7 @@ function detectLinuxGlobPatternWarnings() {
 }
 async function getDoctorDiagnostic() {
   const installationType = await getCurrentInstallationType();
-  const version2 = typeof MACRO !== "undefined" ? "1.80.8" : "unknown";
+  const version2 = typeof MACRO !== "undefined" ? "1.80.9" : "unknown";
   const installationPath = await getInstallationPath();
   const invokedBinary = getInvokedBinary();
   const multipleInstallations = await detectMultipleInstallations();
@@ -342394,8 +342399,8 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
     const maxVersion = await getMaxVersion();
     if (maxVersion && gt(version2, maxVersion)) {
       logForDebugging(`Native installer: maxVersion ${maxVersion} is set, capping update from ${version2} to ${maxVersion}`);
-      if (gte("1.80.8", maxVersion)) {
-        logForDebugging(`Native installer: current version ${"1.80.8"} is already at or above maxVersion ${maxVersion}, skipping update`);
+      if (gte("1.80.9", maxVersion)) {
+        logForDebugging(`Native installer: current version ${"1.80.9"} is already at or above maxVersion ${maxVersion}, skipping update`);
         logEvent("tengu_native_update_skipped_max_version", {
           latency_ms: Date.now() - startTime,
           max_version: maxVersion,
@@ -342406,7 +342411,7 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
       version2 = maxVersion;
     }
   }
-  if (!forceReinstall && version2 === "1.80.8" && await versionIsAvailable(version2) && await isPossibleURBinary(executablePath)) {
+  if (!forceReinstall && version2 === "1.80.9" && await versionIsAvailable(version2) && await isPossibleURBinary(executablePath)) {
     logForDebugging(`Found ${version2} at ${executablePath}, skipping install`);
     logEvent("tengu_native_update_complete", {
       latency_ms: Date.now() - startTime,
@@ -413062,7 +413067,7 @@ function isAnyTracingEnabled() {
   return isTelemetryEnabled() || isEnhancedTelemetryEnabled() || isBetaTracingEnabled();
 }
 function getTracer() {
-  return import_api39.trace.getTracer("ur-agent.gen_ai", "1.80.8");
+  return import_api39.trace.getTracer("ur-agent.gen_ai", "1.80.9");
 }
 function createSpanAttributes(spanType, customAttributes = {}) {
   const baseAttributes = getTelemetryAttributes();
@@ -443191,7 +443196,7 @@ function Feedback({
       platform: env2.platform,
       gitRepo: envInfo.isGit,
       terminal: env2.terminal,
-      version: "1.80.8",
+      version: "1.80.9",
       transcript: normalizeMessagesForAPI(messages),
       errors: sanitizedErrors,
       lastApiRequest: getLastAPIRequest(),
@@ -443383,7 +443388,7 @@ function Feedback({
                       ", ",
                       env2.terminal,
                       ", v",
-                      "1.80.8"
+                      "1.80.9"
                     ]
                   }, undefined, true, undefined, this)
                 ]
@@ -443489,7 +443494,7 @@ ${sanitizedDescription}
 ` + `**Environment Info**
 ` + `- Platform: ${env2.platform}
 ` + `- Terminal: ${env2.terminal}
-` + `- Version: ${"1.80.8"}
+` + `- Version: ${"1.80.9"}
 ` + `- Feedback ID: ${feedbackId}
 ` + `
 **Errors**
@@ -446599,7 +446604,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "1.80.8"
+    value: "1.80.9"
   }, {
     label: "Session name",
     value: nameValue
@@ -449981,7 +449986,7 @@ function Config({
         }
       }, undefined, false, undefined, this)
     }, undefined, false, undefined, this) : showSubmenu === "ChannelDowngrade" ? /* @__PURE__ */ jsx_dev_runtime179.jsxDEV(ChannelDowngradeDialog, {
-      currentVersion: "1.80.8",
+      currentVersion: "1.80.9",
       onChoice: (choice) => {
         setShowSubmenu(null);
         setTabsHidden(false);
@@ -449993,7 +449998,7 @@ function Config({
           autoUpdatesChannel: "stable"
         };
         if (choice === "stay") {
-          newSettings.minimumVersion = "1.80.8";
+          newSettings.minimumVersion = "1.80.9";
         }
         updateSettingsForSource("userSettings", newSettings);
         setSettingsData((prev_27) => ({
@@ -458302,7 +458307,7 @@ function HelpV2(t0) {
   let t6;
   if ($2[31] !== tabs) {
     t6 = /* @__PURE__ */ jsx_dev_runtime206.jsxDEV(Tabs, {
-      title: `UR v${"1.80.8"}`,
+      title: `UR v${"1.80.9"}`,
       color: "professionalBlue",
       defaultTab: "general",
       children: tabs
@@ -459235,7 +459240,7 @@ function buildToolUseContext(tools, readFileStateCache, toolPermissionContext, a
 async function handleInitialize(options2) {
   return {
     name: "UR",
-    version: "1.80.8",
+    version: "1.80.9",
     protocolVersion: "0.1.0",
     workspaceRoot: options2.cwd,
     capabilities: {
@@ -476343,7 +476348,7 @@ function getAllReleaseNotes(changelogContent = getStoredChangelogFromMemory()) {
     return [];
   }
 }
-async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.80.8") {
+async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.80.9") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -476370,7 +476375,7 @@ async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.80.8")
     releaseNotes
   };
 }
-function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.80.8") {
+function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.80.9") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -479275,7 +479280,7 @@ function getRecentActivitySync() {
   return cachedActivity;
 }
 function getLogoDisplayData() {
-  const version2 = process.env.DEMO_VERSION ?? "1.80.8";
+  const version2 = process.env.DEMO_VERSION ?? "1.80.9";
   const serverUrl = getDirectConnectServerUrl();
   const displayPath = process.env.DEMO_VERSION ? "/code/ur" : getDisplayPath(getCwd());
   const cwd2 = serverUrl ? `${displayPath} in ${serverUrl.replace(/^https?:\/\//, "")}` : displayPath;
@@ -480143,7 +480148,7 @@ function LogoV2() {
   if ($2[2] === Symbol.for("react.memo_cache_sentinel")) {
     t2 = () => {
       const currentConfig = getGlobalConfig();
-      if (currentConfig.lastReleaseNotesSeen === "1.80.8") {
+      if (currentConfig.lastReleaseNotesSeen === "1.80.9") {
         return;
       }
       saveGlobalConfig(_temp325);
@@ -480828,12 +480833,12 @@ function LogoV2() {
   return t41;
 }
 function _temp325(current) {
-  if (current.lastReleaseNotesSeen === "1.80.8") {
+  if (current.lastReleaseNotesSeen === "1.80.9") {
     return current;
   }
   return {
     ...current,
-    lastReleaseNotesSeen: "1.80.8"
+    lastReleaseNotesSeen: "1.80.9"
   };
 }
 function _temp241(s_0) {
@@ -496925,7 +496930,7 @@ function compileAgenticCiWorkflow(specName = "default", options2 = {}) {
   if (spec.name !== specName) {
     throw new Error("Agentic CI workflow spec name does not match");
   }
-  const packageVersion = options2.packageVersion ?? (typeof MACRO !== "undefined" ? "1.80.8" : "1.80.8");
+  const packageVersion = options2.packageVersion ?? (typeof MACRO !== "undefined" ? "1.80.9" : "1.80.9");
   if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(packageVersion)) {
     throw new Error("invalid ur-agent package version");
   }
@@ -497918,7 +497923,7 @@ runner; \`ur trigger\` is the inbound parser that decides what to run.
       path: ".github/workflows/ur.yml",
       root: "project",
       content: compileAgenticCiWorkflow("default", {
-        packageVersion: typeof MACRO !== "undefined" ? "1.80.8" : "1.80.8"
+        packageVersion: typeof MACRO !== "undefined" ? "1.80.9" : "1.80.9"
       })
     },
     {
@@ -497981,7 +497986,7 @@ function value(tokens, flag) {
   return index2 >= 0 ? tokens[index2 + 1] : undefined;
 }
 function cliVersion() {
-  return typeof MACRO !== "undefined" ? "1.80.8" : "1.80.8";
+  return typeof MACRO !== "undefined" ? "1.80.9" : "1.80.9";
 }
 function workflowPath(cwd2) {
   return join168(cwd2, ".github", "workflows", "ur-agentic-ci.yml");
@@ -503837,7 +503842,7 @@ function createAcpStdioApp(deps) {
       }
     },
     authMethods: [],
-    agentInfo: { name: "UR-Nexus", version: "1.80.8" }
+    agentInfo: { name: "UR-Nexus", version: "1.80.9" }
   })).onRequest("authenticate", () => ({})).onRequest("session/new", async (context6) => {
     const result = runtime2.newSession(context6.params.cwd, context6.params.mcpServers, context6.params.additionalDirectories);
     await runtime2.announce({
@@ -503934,7 +503939,7 @@ function createAcpStdioAgent(deps) {
               }
             },
             authMethods: [],
-            agentInfo: { name: "UR-Nexus", version: "1.80.8" }
+            agentInfo: { name: "UR-Nexus", version: "1.80.9" }
           });
           return;
         case "authenticate":
@@ -715160,7 +715165,7 @@ async function captureMemoryDiagnostics(trigger2, dumpNumber = 0) {
     smapsRollup,
     platform: process.platform,
     nodeVersion: process.version,
-    ccVersion: "1.80.8"
+    ccVersion: "1.80.9"
   };
 }
 async function performHeapDump(trigger2 = "manual", dumpNumber = 0) {
@@ -715749,7 +715754,7 @@ var init_bridge_kick = __esm(() => {
 var call154 = async () => {
   return {
     type: "text",
-    value: "1.80.8"
+    value: "1.80.9"
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -726992,7 +726997,7 @@ function generateHtmlReport(data, insights) {
 </html>`;
 }
 function buildExportData(data, insights, facets, remoteStats) {
-  const version3 = typeof MACRO !== "undefined" ? "1.80.8" : "unknown";
+  const version3 = typeof MACRO !== "undefined" ? "1.80.9" : "unknown";
   const remote_hosts_collected = remoteStats?.hosts.filter((h2) => h2.sessionCount > 0).map((h2) => h2.name);
   const facets_summary = {
     total: facets.size,
@@ -731305,7 +731310,7 @@ var init_sessionStorage = __esm(() => {
   init_settings2();
   init_slowOperations();
   init_uuid();
-  VERSION7 = typeof MACRO !== "undefined" ? "1.80.8" : "unknown";
+  VERSION7 = typeof MACRO !== "undefined" ? "1.80.9" : "unknown";
   MAX_TOMBSTONE_REWRITE_BYTES = 50 * 1024 * 1024;
   SKIP_FIRST_PROMPT_PATTERN = /^(?:\s*<[a-z][\w-]*[\s>]|\[Request interrupted by user[^\]]*\])/;
   EPHEMERAL_PROGRESS_TYPES = new Set([
@@ -732520,7 +732525,7 @@ var init_filesystem = __esm(() => {
   });
   getBundledSkillsRoot = memoize_default(function getBundledSkillsRoot2() {
     const nonce = randomBytes24(16).toString("hex");
-    return join243(getURTempDir(), "bundled-skills", "1.80.8", nonce);
+    return join243(getURTempDir(), "bundled-skills", "1.80.9", nonce);
   });
   getResolvedWorkingDirPaths = memoize_default(getPathsForPermissionCheck);
 });
@@ -738910,7 +738915,7 @@ function computeFingerprint(messageText2, version3) {
 }
 function computeFingerprintFromMessages(messages) {
   const firstMessageText = extractFirstMessageText(messages);
-  return computeFingerprint(firstMessageText, "1.80.8");
+  return computeFingerprint(firstMessageText, "1.80.9");
 }
 var FINGERPRINT_SALT = "59cf53e54c78";
 var init_fingerprint = () => {};
@@ -740835,7 +740840,7 @@ async function sideQuery(opts) {
     betas.push(STRUCTURED_OUTPUTS_BETA_HEADER);
   }
   const messageText2 = extractFirstUserMessageText(messages);
-  const fingerprint2 = computeFingerprint(messageText2, "1.80.8");
+  const fingerprint2 = computeFingerprint(messageText2, "1.80.9");
   const attributionHeader = getAttributionHeader(fingerprint2);
   const systemBlocks = [
     attributionHeader ? { type: "text", text: attributionHeader } : null,
@@ -745669,7 +745674,7 @@ function buildSystemInitMessage(inputs) {
     slash_commands: inputs.commands.filter((c4) => c4.userInvocable !== false).map((c4) => c4.name),
     apiKeySource: getURHQApiKeyWithSource().source,
     betas: getSdkBetas(),
-    ur_version: "1.80.8",
+    ur_version: "1.80.9",
     output_style: outputStyle,
     agents: inputs.agents.map((agent2) => agent2.agentType),
     skills: inputs.skills.filter((s) => s.userInvocable !== false).map((skill2) => skill2.name),
@@ -759505,7 +759510,7 @@ var init_useVoiceEnabled = __esm(() => {
 function getSemverPart(version3) {
   return `${import_semver13.major(version3, { loose: true })}.${import_semver13.minor(version3, { loose: true })}.${import_semver13.patch(version3, { loose: true })}`;
 }
-function useUpdateNotification(updatedVersion, initialVersion = "1.80.8") {
+function useUpdateNotification(updatedVersion, initialVersion = "1.80.9") {
   const [lastNotifiedSemver, setLastNotifiedSemver] = import_react225.useState(() => getSemverPart(initialVersion));
   if (!updatedVersion) {
     return null;
@@ -759554,7 +759559,7 @@ function AutoUpdater({
       return;
     }
     if (false) {}
-    const currentVersion = "1.80.8";
+    const currentVersion = "1.80.9";
     const channel = getInitialSettings()?.autoUpdatesChannel ?? "latest";
     let latestVersion = await getLatestVersion(channel);
     const isDisabled = isAutoUpdaterDisabled();
@@ -759783,12 +759788,12 @@ function NativeAutoUpdater({
     logEvent("tengu_native_auto_updater_start", {});
     try {
       const maxVersion = await getMaxVersion();
-      if (maxVersion && gt("1.80.8", maxVersion)) {
+      if (maxVersion && gt("1.80.9", maxVersion)) {
         const msg = await getMaxVersionMessage();
         setMaxVersionIssue(msg ?? "affects your version");
       }
       const result = await installLatest(channel);
-      const currentVersion = "1.80.8";
+      const currentVersion = "1.80.9";
       const latencyMs = Date.now() - startTime;
       if (result.lockFailed) {
         logEvent("tengu_native_auto_updater_lock_contention", {
@@ -759925,17 +759930,17 @@ function PackageManagerAutoUpdater(t0) {
       const maxVersion = await getMaxVersion();
       if (maxVersion && latest && gt(latest, maxVersion)) {
         logForDebugging(`PackageManagerAutoUpdater: maxVersion ${maxVersion} is set, capping update from ${latest} to ${maxVersion}`);
-        if (gte("1.80.8", maxVersion)) {
-          logForDebugging(`PackageManagerAutoUpdater: current version ${"1.80.8"} is already at or above maxVersion ${maxVersion}, skipping update`);
+        if (gte("1.80.9", maxVersion)) {
+          logForDebugging(`PackageManagerAutoUpdater: current version ${"1.80.9"} is already at or above maxVersion ${maxVersion}, skipping update`);
           setUpdateAvailable(false);
           return;
         }
         latest = maxVersion;
       }
-      const hasUpdate = latest && !gte("1.80.8", latest) && !shouldSkipVersion(latest);
+      const hasUpdate = latest && !gte("1.80.9", latest) && !shouldSkipVersion(latest);
       setUpdateAvailable(!!hasUpdate);
       if (hasUpdate) {
-        logForDebugging(`PackageManagerAutoUpdater: Update available ${"1.80.8"} -> ${latest}`);
+        logForDebugging(`PackageManagerAutoUpdater: Update available ${"1.80.9"} -> ${latest}`);
       }
     };
     $2[0] = t1;
@@ -759969,7 +759974,7 @@ function PackageManagerAutoUpdater(t0) {
       wrap: "truncate",
       children: [
         "currentVersion: ",
-        "1.80.8"
+        "1.80.9"
       ]
     }, undefined, true, undefined, this);
     $2[3] = verbose;
@@ -770822,7 +770827,7 @@ function buildStatusLineCommandInput(permissionMode, exceeds200kTokens, settings
       project_dir: getOriginalCwd(),
       added_dirs: addedDirs
     },
-    version: "1.80.8",
+    version: "1.80.9",
     output_style: {
       name: outputStyleName
     },
@@ -770957,7 +770962,7 @@ function StatusLineInner({
   const attention = customStatusError ?? taskAttention;
   const terminalSize = React133.useContext(TerminalSizeContext);
   const defaultStatusLineText = buildDefaultStatusBar({
-    version: "1.80.8",
+    version: "1.80.9",
     providerLabel: providerRuntime.providerLabel,
     authMode: providerRuntime.authLabel,
     model: renderModelName(mainLoopModel) || providerRuntime.model || "",
@@ -783212,7 +783217,7 @@ async function submitTranscriptShare(messages, trigger2, appearanceId) {
     } catch {}
     const data = {
       trigger: trigger2,
-      version: "1.80.8",
+      version: "1.80.9",
       platform: process.platform,
       transcript,
       subagentTranscripts: Object.keys(subagentTranscripts).length > 0 ? subagentTranscripts : undefined,
@@ -795581,7 +795586,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "1.80.8"
+              "1.80.9"
             ]
           }, undefined, true, undefined, this)
         ]
@@ -796841,7 +796846,7 @@ function completeOnboarding() {
   saveGlobalConfig((current) => ({
     ...current,
     hasCompletedOnboarding: true,
-    lastOnboardingVersion: "1.80.8"
+    lastOnboardingVersion: "1.80.9"
   }));
 }
 function showDialog(root2, renderer) {
@@ -801987,7 +801992,7 @@ function appendToLog(path28, message) {
     cwd: getFsImplementation().cwd(),
     userType: process.env.USER_TYPE,
     sessionId: getSessionId(),
-    version: "1.80.8"
+    version: "1.80.9"
   };
   getLogWriter(path28).write(messageWithTimestamp);
 }
@@ -806151,8 +806156,8 @@ async function getEnvLessBridgeConfig() {
 }
 async function checkEnvLessBridgeMinVersion() {
   const cfg = await getEnvLessBridgeConfig();
-  if (cfg.min_version && lt("1.80.8", cfg.min_version)) {
-    return `Your version of UR (${"1.80.8"}) is too old for Remote Control.
+  if (cfg.min_version && lt("1.80.9", cfg.min_version)) {
+    return `Your version of UR (${"1.80.9"}) is too old for Remote Control.
 Version ${cfg.min_version} or higher is required. Run \`ur update\` to update.`;
   }
   return null;
@@ -806626,7 +806631,7 @@ async function initBridgeCore(params) {
   const rawApi = createBridgeApiClient({
     baseUrl,
     getAccessToken,
-    runnerVersion: "1.80.8",
+    runnerVersion: "1.80.9",
     onDebug: logForDebugging,
     onAuth401,
     getTrustedDeviceToken
@@ -816099,7 +816104,7 @@ function getAgUiCapabilities() {
       name: "UR-Nexus",
       type: "ur-nexus",
       description: "Provider-flexible, local-first autonomous engineering workflow agent.",
-      version: "1.80.8",
+      version: "1.80.9",
       provider: "UR",
       documentationUrl: "https://github.com/Maitham16/UR/blob/master/docs/AG_UI.md"
     },
@@ -817326,7 +817331,7 @@ function createMCPServer(cwd4, debug2, verbose) {
   };
   const server2 = new Server({
     name: "ur-nexus",
-    version: "1.80.8"
+    version: "1.80.9"
   }, {
     capabilities: {
       tools: {}
@@ -818530,7 +818535,7 @@ function thrownResponse(error40) {
 }
 async function createUrMcp2026Runtime(options5) {
   const server2 = createMCPServer(options5.cwd, options5.debug === true, options5.verbose === true);
-  const client2 = new Client({ name: "ur-mcp-2026-adapter", version: "1.80.8" }, { capabilities: {} });
+  const client2 = new Client({ name: "ur-mcp-2026-adapter", version: "1.80.9" }, { capabilities: {} });
   const [clientTransport, serverTransport] = createLinkedTransportPair();
   try {
     await server2.connect(serverTransport);
@@ -818541,7 +818546,7 @@ async function createUrMcp2026Runtime(options5) {
   }
   const runtime2 = new Mcp2026Runtime({
     cwd: options5.cwd,
-    version: "1.80.8",
+    version: "1.80.9",
     backend: {
       listTools: async () => {
         const listed = await client2.listTools();
@@ -821276,7 +821281,7 @@ async function update() {
   logEvent("tengu_update_check", {});
   const diagnostic2 = await getDoctorDiagnostic();
   const result = await checkUpgradeStatus({
-    currentVersion: "1.80.8",
+    currentVersion: "1.80.9",
     packageName: UR_AGENT_PACKAGE_NAME,
     installationType: diagnostic2.installationType,
     latestVersion: () => getLatestNpmPackageVersion(UR_AGENT_PACKAGE_NAME)
@@ -822604,7 +822609,7 @@ ${customInstructions}` : customInstructions;
       }
     }
     logForDiagnosticsNoPII("info", "started", {
-      version: "1.80.8",
+      version: "1.80.9",
       is_native_binary: isInBundledMode()
     });
     registerCleanup(async () => {
@@ -823391,7 +823396,7 @@ Usage: ur --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("1.80.8 (UR-Nexus)", "-v, --version", "Output the version number");
+  }).version("1.80.9 (UR-Nexus)", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -824518,7 +824523,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"1.80.8"} (UR-Nexus)`);
+    console.log(`${"1.80.9"} (UR-Nexus)`);
     return;
   }
   if (args[0] === "a2a" && args[1] === "serve" && !args.includes("--help") && !args.includes("-h")) {

package/docs/AGENT_FEATURES.md

@@ -9,6 +9,12 @@ reproducible autonomous software engineering agent: every substantial task can
 be driven as `spec -> plan -> patch -> test -> report -> rollback`, with the
 spec as the durable source of truth and command evidence as the success gate.
 
+## v1.80.9 Addition
+
+| Addition | Surface | What it adds |
+| --- | --- | --- |
+| Research-only intent recovery | Shared Agent execution gate | Handles providers that retain a pure research/report brief but omit the caller's “read-only” wording. The call is reduced to shipped Explore capabilities; any implementation or mutation directive remains task-gated. |
+
 ## v1.80.8 Addition
 
 | Addition | Surface | What it adds |

package/docs/CONFIGURATION.md

@@ -61,9 +61,11 @@ launch UR's shipped `Explore` and `Plan` agents before a task exists in any
 permission mode. These exact built-in definitions are forced read-only; custom,
 write-capable, nested, named/team, and worktree delegation still requires an
 actionable parent task. As provider-independent compatibility, an unnamed
-main-session `general-purpose` call whose own prompt explicitly declares both
-research intent and no file writes is reduced to the shipped Explore definition
-before the gate. It never receives general-purpose tools through this path.
+main-session `general-purpose` call is reduced to the shipped Explore definition
+when its brief is explicitly read-only research or is unambiguously limited to
+research and reporting. Any implementation, test, command-execution,
+installation, or workspace-mutation directive keeps the call gated. It never
+receives general-purpose tools through this path.
 
 ## Model Providers
 

package/docs/TROUBLESHOOTING.md

@@ -108,6 +108,11 @@ ur provider status
   UR 1.80.8 routes that narrow contract to the protected Explore worker before
   the gate. A real general-purpose or implementation worker is still expected
   to require a task.
+- If the model preserved only the research/report instructions and omitted the
+  words “read-only,” upgrade to 1.80.9. UR recognizes that remaining provider
+  shape without relying on a specific model name. Prompts that also direct
+  implementation, testing, command execution, or file changes remain blocked
+  until an actionable task exists.
 
 ### Ollama stops with `unavailable tool "WebSearch"`
 

package/docs/USAGE.md

@@ -475,10 +475,12 @@ research to UR's shipped `Explore` and `Plan` agents before tasks exist. Those
 two definitions are mechanically forced into plan permission mode even when
 the parent is in Accept Edits or Approve All. Models are instructed to select
 `subagent_type="Explore"` for this work. If a provider still labels an explicit
-read-only research brief `general-purpose`, UR reduces that main-session call
-to the shipped Explore definition before gating. Ordinary general-purpose
-work, custom overrides, nested agents, named/team workers, worktrees, and cwd
-overrides still require an actionable parent task. When the user approves the plan,
+read-only brief—or an unambiguous research-and-report-only brief—
+`general-purpose`, UR reduces that main-session call to the shipped Explore
+definition before gating. A brief that also directs implementation, testing,
+command execution, or workspace changes remains task-gated. Ordinary
+general-purpose work, custom overrides, nested agents, named/team workers,
+worktrees, and cwd overrides still require an actionable parent task. When the user approves the plan,
 `ExitPlanMode` preserves any existing actionable board or creates a bounded set
 of professional, deduplicated implementation tasks plus a verification task
 that depends on them. Implementation therefore starts with visible tracking

package/docs/VALIDATION.md

@@ -19,10 +19,10 @@ You need:
 
 ```sh
 ur --version
-# expected for this release: "1.80.8 (UR-Nexus)"
+# expected for this release: "1.80.9 (UR-Nexus)"
 ```
 
-### 0.0 Read-only research delegation starts cleanly (1.80.8)
+### 0.0 Read-only research delegation starts cleanly (1.80.9)
 
 Start an interactive session with task enforcement enabled and ask UR to
 research a change, both normally and from Plan Mode. Before any task exists,
@@ -33,10 +33,10 @@ should remain blocked until they have an actionable parent task.
 
 Repeat with multiple available model families. A model may correctly emit
 `subagent_type: "Explore"`; if it instead emits `general-purpose` with an
-explicit read-only research/no-file-write brief, UR must safely reduce it to
-Explore and start without a failed `TaskListRequired` attempt. A
-general-purpose implementation brief must remain blocked. The deterministic
-regressions are:
+explicit read-only brief or a pure research/report-only brief, UR must safely
+reduce it to Explore and start without a failed `TaskListRequired` attempt. A
+brief that also requests implementation, tests, command execution, or file
+changes must remain blocked. The deterministic regressions are:
 
 ```sh
 bun test test/taskListGate.test.ts test/toolExecutionFinalInput.test.ts

package/documentation/index.html

@@ -45,7 +45,7 @@
     <main id="content" class="content">
       <header class="topbar">
         <div>
-          <p class="eyebrow">Version 1.80.8</p>
+          <p class="eyebrow">Version 1.80.9</p>
           <h1>UR-Nexus Documentation</h1>
           <p class="lead">A practical, tutorial-style reference for installing, configuring, automating, extending, and operating UR-Nexus.</p>
         </div>

package/extensions/jetbrains-ur/build.gradle.kts

@@ -7,7 +7,7 @@ plugins {
 }
 
 group = "dev.urnexus"
-version = "1.80.8"
+version = "1.80.9"
 
 repositories {
     mavenCentral()

package/extensions/vscode-ur-inline-diffs/package.json

@@ -2,7 +2,7 @@
   "name": "ur-inline-diffs",
   "displayName": "UR Inline Diffs",
   "description": "Review, apply, and reject UR inline diff bundles from .ur/ide/diffs inside VS Code.",
-  "version": "1.80.8",
+  "version": "1.80.9",
   "publisher": "ur-nexus",
   "engines": {
     "vscode": "^1.92.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ur-agent",
-  "version": "1.80.8",
+  "version": "1.80.9",
   "description": "UR-Nexus — autonomous engineering workflow engine (plan, execute, test, verify, document, benchmark, reproduce)",
   "type": "module",
   "packageManager": "bun@1.3.14",