ur-agent 1.81.0 → 1.81.1

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 1.81.1
+
+- Preflighted UR task tracking in `/reverse-skills:start` and every bundled
+  reverse-security skill before mutating, multi-outcome workflows. The plugin
+  now creates and advances an actionable task board instead of first tripping
+  `TaskListRequired`, while keeping `tasks.requireBeforeChanges` enabled.
+- Made verifier and command-registry tests independent of globally installed
+  plugins, so release checks remain reproducible when marketplace validators
+  and namespaced commands are enabled on the developer machine.
+
 ## 1.81.0
 
 - Added `/mode redteam`, a warning-gated, session-only UR policy mode for

package/dist/cli.js

@@ -107788,7 +107788,7 @@ var init_auth = __esm(() => {
 
 // src/utils/userAgent.ts
 function getURCodeUserAgent() {
-  return `ur/${"1.81.0"}`;
+  return `ur/${"1.81.1"}`;
 }
 
 // src/utils/workloadContext.ts
@@ -107810,7 +107810,7 @@ function getUserAgent() {
   const clientApp = process.env.UR_AGENT_SDK_CLIENT_APP ? `, client-app/${process.env.UR_AGENT_SDK_CLIENT_APP}` : "";
   const workload = getWorkload();
   const workloadSuffix = workload ? `, workload/${workload}` : "";
-  return `ur-cli/${"1.81.0"} (${process.env.USER_TYPE}, ${process.env.UR_CODE_ENTRYPOINT ?? "cli"}${agentSdkVersion}${clientApp}${workloadSuffix})`;
+  return `ur-cli/${"1.81.1"} (${process.env.USER_TYPE}, ${process.env.UR_CODE_ENTRYPOINT ?? "cli"}${agentSdkVersion}${clientApp}${workloadSuffix})`;
 }
 function getMCPUserAgent() {
   const parts = [];
@@ -107824,7 +107824,7 @@ function getMCPUserAgent() {
     parts.push(`client-app/${process.env.UR_AGENT_SDK_CLIENT_APP}`);
   }
   const suffix = parts.length > 0 ? ` (${parts.join(", ")})` : "";
-  return `ur/${"1.81.0"}${suffix}`;
+  return `ur/${"1.81.1"}${suffix}`;
 }
 function getWebFetchUserAgent() {
   return `UR-User (${getURCodeUserAgent()})`;
@@ -107962,7 +107962,7 @@ var init_user = __esm(() => {
       deviceId,
       sessionId: getSessionId(),
       email: getEmail(),
-      appVersion: "1.81.0",
+      appVersion: "1.81.1",
       platform: getHostPlatformForAnalytics(),
       organizationUuid,
       accountUuid,
@@ -115849,7 +115849,7 @@ var init_metadata = __esm(() => {
   COMPOUND_OPERATOR_REGEX = /\s*(?:&&|\|\||[;|])\s*/;
   WHITESPACE_REGEX = /\s+/;
   getVersionBase = memoize_default(() => {
-    const match = "1.81.0".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
+    const match = "1.81.1".match(/^\d+\.\d+\.\d+(?:-[a-z]+)?/);
     return match ? match[0] : undefined;
   });
   buildEnvContext = memoize_default(async () => {
@@ -115889,7 +115889,7 @@ var init_metadata = __esm(() => {
       isGithubAction: isEnvTruthy(process.env.GITHUB_ACTIONS),
       isURCodeAction: isEnvTruthy(process.env.UR_CODE_ACTION),
       isURAiAuth: isURAISubscriber(),
-      version: "1.81.0",
+      version: "1.81.1",
       versionBase: getVersionBase(),
       buildTime: "",
       deploymentEnvironment: env2.detectDeploymentEnvironment(),
@@ -116559,7 +116559,7 @@ function initialize1PEventLogging() {
   const platform2 = getPlatform();
   const attributes = {
     [import_semantic_conventions4.ATTR_SERVICE_NAME]: "ur",
-    [import_semantic_conventions4.ATTR_SERVICE_VERSION]: "1.81.0"
+    [import_semantic_conventions4.ATTR_SERVICE_VERSION]: "1.81.1"
   };
   if (platform2 === "wsl") {
     const wslVersion = getWslVersion();
@@ -116587,7 +116587,7 @@ function initialize1PEventLogging() {
       })
     ]
   });
-  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.urhq.ur.events", "1.81.0");
+  firstPartyEventLogger = firstPartyEventLoggerProvider.getLogger("com.urhq.ur.events", "1.81.1");
 }
 async function reinitialize1PEventLoggingIfConfigChanged() {
   if (!is1PEventLoggingEnabled() || !firstPartyEventLoggerProvider) {
@@ -126553,7 +126553,7 @@ function formatA2AAgentCard(options = {}, pretty = true) {
 function formatA2AV1AgentCard(options = {}, pretty = true) {
   return JSON.stringify(buildA2AV1AgentCard(options), null, pretty ? 2 : 0);
 }
-var urVersion = "1.81.0", researchSnapshotDate = "2026-08-10", coverage, priorityRoadmap;
+var urVersion = "1.81.1", researchSnapshotDate = "2026-08-10", coverage, priorityRoadmap;
 var init_trends = __esm(() => {
   init_a2aCardSignature();
   coverage = [
@@ -129443,7 +129443,7 @@ function getAttributionHeader(fingerprint) {
   if (!isAttributionHeaderEnabled()) {
     return "";
   }
-  const version2 = `${"1.81.0"}.${fingerprint}`;
+  const version2 = `${"1.81.1"}.${fingerprint}`;
   const entrypoint = process.env.UR_CODE_ENTRYPOINT ?? "unknown";
   const cch = "";
   const workload = getWorkload();
@@ -184643,7 +184643,7 @@ var init_projectSafety = __esm(() => {
 function getInstruments() {
   if (instruments)
     return instruments;
-  const meter = import_api10.metrics.getMeter("ur-agent.gen_ai", "1.81.0");
+  const meter = import_api10.metrics.getMeter("ur-agent.gen_ai", "1.81.1");
   instruments = {
     operationDuration: meter.createHistogram("gen_ai.client.operation.duration", {
       description: "GenAI operation duration.",
@@ -184741,7 +184741,7 @@ function genAiAgentAttributes() {
     "gen_ai.operation.name": GEN_AI_OPERATION_INVOKE_AGENT,
     "gen_ai.provider.name": "ur",
     "gen_ai.agent.name": "UR-Nexus",
-    "gen_ai.agent.version": "1.81.0"
+    "gen_ai.agent.version": "1.81.1"
   };
 }
 function genAiWorkflowAttributes(workflowName, workflowRunId) {
@@ -184762,7 +184762,7 @@ function genAiWorkflowAttributes(workflowName, workflowRunId) {
 function startGenAiWorkflowSpan(workflowName, workflowRunId) {
   const attributes = genAiWorkflowAttributes(workflowName, workflowRunId);
   const name = typeof attributes["gen_ai.workflow.name"] === "string" ? `invoke_workflow ${attributes["gen_ai.workflow.name"]}` : GEN_AI_OPERATION_INVOKE_WORKFLOW;
-  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.81.0").startSpan(name, { kind: import_api10.SpanKind.INTERNAL, attributes });
+  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.81.1").startSpan(name, { kind: import_api10.SpanKind.INTERNAL, attributes });
 }
 function endGenAiWorkflowSpan(span, options2 = {}) {
   try {
@@ -184800,7 +184800,7 @@ function startGenAiMemorySpan(operation, options2 = {}) {
   if (options2.recordCount !== undefined && Number.isInteger(options2.recordCount) && options2.recordCount >= 0) {
     attributes["gen_ai.memory.record.count"] = options2.recordCount;
   }
-  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.81.0").startSpan(operation, { kind: import_api10.SpanKind.INTERNAL, attributes });
+  return import_api10.trace.getTracer("ur-agent.gen_ai", "1.81.1").startSpan(operation, { kind: import_api10.SpanKind.INTERNAL, attributes });
 }
 function endGenAiMemorySpan(span, options2 = {}) {
   try {
@@ -187876,7 +187876,7 @@ class Verifier {
     this.maxRejections = options2.maxRejectionsPerTurn ?? DEFAULT_MAX_REJECTIONS_PER_TURN;
     this.loops = new LoopDetector(options2.repeatThreshold);
     this.configPromise = loadVerifyConfig(options2.cwd);
-    this.pluginValidatorsPromise = loadPluginValidators();
+    this.pluginValidatorsPromise = options2.pluginValidators === undefined ? loadPluginValidators() : Promise.resolve(options2.pluginValidators);
     this.mode = resolveMode(options2.mode);
     this.askBeforeGatesOverride = options2.askBeforeGates;
     this.getActionableTasks = options2.getActionableTasks ?? (async () => {
@@ -278515,7 +278515,7 @@ function getTelemetryAttributes() {
     attributes["session.id"] = sessionId;
   }
   if (shouldIncludeAttribute("OTEL_METRICS_INCLUDE_VERSION")) {
-    attributes["app.version"] = "1.81.0";
+    attributes["app.version"] = "1.81.1";
   }
   const oauthAccount = getOauthAccountInfo();
   if (oauthAccount) {
@@ -319919,7 +319919,7 @@ function getInstallationEnv() {
   return;
 }
 function getURCodeVersion() {
-  return "1.81.0";
+  return "1.81.1";
 }
 async function getInstalledVSCodeExtensionVersion(command) {
   const { stdout } = await execFileNoThrow(command, ["--list-extensions", "--show-versions"], {
@@ -327289,7 +327289,7 @@ async function setupSdkMcpClients(sdkMcpConfigs, sendMcpMessage) {
     const client2 = new Client({
       name: "ur",
       title: "UR",
-      version: "1.81.0",
+      version: "1.81.1",
       description: "UR-Nexus autonomous engineering workflow engine",
       websiteUrl: PRODUCT_URL
     }, {
@@ -327650,7 +327650,7 @@ var init_client5 = __esm(() => {
       const client2 = new Client({
         name: "ur",
         title: "UR",
-        version: "1.81.0",
+        version: "1.81.1",
         description: "UR-Nexus autonomous engineering workflow engine",
         websiteUrl: PRODUCT_URL
       }, {
@@ -340423,7 +340423,7 @@ async function createRuntime() {
   bootstrapTelemetry();
   const resource = defaultResource().merge(detectResources({ detectors: [envDetector] })).merge(resourceFromAttributes({
     [import_semantic_conventions7.ATTR_SERVICE_NAME]: "ur-agent",
-    [import_semantic_conventions7.ATTR_SERVICE_VERSION]: "1.81.0"
+    [import_semantic_conventions7.ATTR_SERVICE_VERSION]: "1.81.1"
   }));
   const tracerProvider = exporters.traces.length > 0 ? new BasicTracerProvider({
     resource,
@@ -340456,11 +340456,11 @@ async function createRuntime() {
   setMeterProvider(meterProvider);
   setLoggerProvider(loggerProvider);
   if (meterProvider) {
-    const meter = meterProvider.getMeter("ur-agent", "1.81.0");
+    const meter = meterProvider.getMeter("ur-agent", "1.81.1");
     setMeter(meter, (name, options2) => meter.createCounter(name, options2));
   }
   if (loggerProvider) {
-    setEventLogger(loggerProvider.getLogger("ur-agent.events", "1.81.0"));
+    setEventLogger(loggerProvider.getLogger("ur-agent.events", "1.81.1"));
   }
   if (!cleanupRegistered3) {
     cleanupRegistered3 = true;
@@ -341122,9 +341122,9 @@ async function assertMinVersion() {
   if (false) {}
   try {
     const versionConfig = await getDynamicConfig_BLOCKS_ON_INIT("tengu_version_config", { minVersion: "0.0.0" });
-    if (versionConfig.minVersion && lt("1.81.0", versionConfig.minVersion)) {
+    if (versionConfig.minVersion && lt("1.81.1", versionConfig.minVersion)) {
       console.error(`
-It looks like your version of UR (${"1.81.0"}) needs an update.
+It looks like your version of UR (${"1.81.1"}) needs an update.
 A newer version (${versionConfig.minVersion} or higher) is required to continue.
 
 To update, please run:
@@ -341340,7 +341340,7 @@ async function installGlobalPackage(specificVersion) {
     logError2(new AutoUpdaterError("Another process is currently installing an update"));
     logEvent("tengu_auto_updater_lock_contention", {
       pid: process.pid,
-      currentVersion: "1.81.0"
+      currentVersion: "1.81.1"
     });
     return "in_progress";
   }
@@ -341349,7 +341349,7 @@ async function installGlobalPackage(specificVersion) {
     if (!env2.isRunningWithBun() && env2.isNpmFromWindowsPath()) {
       logError2(new Error("Windows NPM detected in WSL environment"));
       logEvent("tengu_auto_updater_windows_npm_in_wsl", {
-        currentVersion: "1.81.0"
+        currentVersion: "1.81.1"
       });
       console.error(`
 Error: Windows NPM detected in WSL
@@ -341884,7 +341884,7 @@ function detectLinuxGlobPatternWarnings() {
 }
 async function getDoctorDiagnostic() {
   const installationType = await getCurrentInstallationType();
-  const version2 = typeof MACRO !== "undefined" ? "1.81.0" : "unknown";
+  const version2 = typeof MACRO !== "undefined" ? "1.81.1" : "unknown";
   const installationPath = await getInstallationPath();
   const invokedBinary = getInvokedBinary();
   const multipleInstallations = await detectMultipleInstallations();
@@ -342819,8 +342819,8 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
     const maxVersion = await getMaxVersion();
     if (maxVersion && gt(version2, maxVersion)) {
       logForDebugging(`Native installer: maxVersion ${maxVersion} is set, capping update from ${version2} to ${maxVersion}`);
-      if (gte("1.81.0", maxVersion)) {
-        logForDebugging(`Native installer: current version ${"1.81.0"} is already at or above maxVersion ${maxVersion}, skipping update`);
+      if (gte("1.81.1", maxVersion)) {
+        logForDebugging(`Native installer: current version ${"1.81.1"} is already at or above maxVersion ${maxVersion}, skipping update`);
         logEvent("tengu_native_update_skipped_max_version", {
           latency_ms: Date.now() - startTime,
           max_version: maxVersion,
@@ -342831,7 +342831,7 @@ async function updateLatest(channelOrVersion, forceReinstall = false) {
       version2 = maxVersion;
     }
   }
-  if (!forceReinstall && version2 === "1.81.0" && await versionIsAvailable(version2) && await isPossibleURBinary(executablePath)) {
+  if (!forceReinstall && version2 === "1.81.1" && await versionIsAvailable(version2) && await isPossibleURBinary(executablePath)) {
     logForDebugging(`Found ${version2} at ${executablePath}, skipping install`);
     logEvent("tengu_native_update_complete", {
       latency_ms: Date.now() - startTime,
@@ -413507,7 +413507,7 @@ function isAnyTracingEnabled() {
   return isTelemetryEnabled() || isEnhancedTelemetryEnabled() || isBetaTracingEnabled();
 }
 function getTracer() {
-  return import_api39.trace.getTracer("ur-agent.gen_ai", "1.81.0");
+  return import_api39.trace.getTracer("ur-agent.gen_ai", "1.81.1");
 }
 function createSpanAttributes(spanType, customAttributes = {}) {
   const baseAttributes = getTelemetryAttributes();
@@ -443655,7 +443655,7 @@ function Feedback({
       platform: env2.platform,
       gitRepo: envInfo.isGit,
       terminal: env2.terminal,
-      version: "1.81.0",
+      version: "1.81.1",
       transcript: normalizeMessagesForAPI(messages),
       errors: sanitizedErrors,
       lastApiRequest: getLastAPIRequest(),
@@ -443847,7 +443847,7 @@ function Feedback({
                       ", ",
                       env2.terminal,
                       ", v",
-                      "1.81.0"
+                      "1.81.1"
                     ]
                   }, undefined, true, undefined, this)
                 ]
@@ -443953,7 +443953,7 @@ ${sanitizedDescription}
 ` + `**Environment Info**
 ` + `- Platform: ${env2.platform}
 ` + `- Terminal: ${env2.terminal}
-` + `- Version: ${"1.81.0"}
+` + `- Version: ${"1.81.1"}
 ` + `- Feedback ID: ${feedbackId}
 ` + `
 **Errors**
@@ -447063,7 +447063,7 @@ function buildPrimarySection() {
   }, undefined, false, undefined, this);
   return [{
     label: "Version",
-    value: "1.81.0"
+    value: "1.81.1"
   }, {
     label: "Session name",
     value: nameValue
@@ -450445,7 +450445,7 @@ function Config({
         }
       }, undefined, false, undefined, this)
     }, undefined, false, undefined, this) : showSubmenu === "ChannelDowngrade" ? /* @__PURE__ */ jsx_dev_runtime179.jsxDEV(ChannelDowngradeDialog, {
-      currentVersion: "1.81.0",
+      currentVersion: "1.81.1",
       onChoice: (choice) => {
         setShowSubmenu(null);
         setTabsHidden(false);
@@ -450457,7 +450457,7 @@ function Config({
           autoUpdatesChannel: "stable"
         };
         if (choice === "stay") {
-          newSettings.minimumVersion = "1.81.0";
+          newSettings.minimumVersion = "1.81.1";
         }
         updateSettingsForSource("userSettings", newSettings);
         setSettingsData((prev_27) => ({
@@ -458766,7 +458766,7 @@ function HelpV2(t0) {
   let t6;
   if ($2[31] !== tabs) {
     t6 = /* @__PURE__ */ jsx_dev_runtime206.jsxDEV(Tabs, {
-      title: `UR v${"1.81.0"}`,
+      title: `UR v${"1.81.1"}`,
       color: "professionalBlue",
       defaultTab: "general",
       children: tabs
@@ -459699,7 +459699,7 @@ function buildToolUseContext(tools, readFileStateCache, toolPermissionContext, a
 async function handleInitialize(options2) {
   return {
     name: "UR",
-    version: "1.81.0",
+    version: "1.81.1",
     protocolVersion: "0.1.0",
     workspaceRoot: options2.cwd,
     capabilities: {
@@ -476807,7 +476807,7 @@ function getAllReleaseNotes(changelogContent = getStoredChangelogFromMemory()) {
     return [];
   }
 }
-async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.81.0") {
+async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.81.1") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -476834,7 +476834,7 @@ async function checkForReleaseNotes(lastSeenVersion, currentVersion = "1.81.0")
     releaseNotes
   };
 }
-function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.81.0") {
+function checkForReleaseNotesSync(lastSeenVersion, currentVersion = "1.81.1") {
   if (process.env.USER_TYPE === "ant") {
     const changelog = "";
     if (changelog) {
@@ -479739,7 +479739,7 @@ function getRecentActivitySync() {
   return cachedActivity;
 }
 function getLogoDisplayData() {
-  const version2 = process.env.DEMO_VERSION ?? "1.81.0";
+  const version2 = process.env.DEMO_VERSION ?? "1.81.1";
   const serverUrl = getDirectConnectServerUrl();
   const displayPath = process.env.DEMO_VERSION ? "/code/ur" : getDisplayPath(getCwd());
   const cwd2 = serverUrl ? `${displayPath} in ${serverUrl.replace(/^https?:\/\//, "")}` : displayPath;
@@ -480607,7 +480607,7 @@ function LogoV2() {
   if ($2[2] === Symbol.for("react.memo_cache_sentinel")) {
     t2 = () => {
       const currentConfig = getGlobalConfig();
-      if (currentConfig.lastReleaseNotesSeen === "1.81.0") {
+      if (currentConfig.lastReleaseNotesSeen === "1.81.1") {
         return;
       }
       saveGlobalConfig(_temp325);
@@ -481292,12 +481292,12 @@ function LogoV2() {
   return t41;
 }
 function _temp325(current) {
-  if (current.lastReleaseNotesSeen === "1.81.0") {
+  if (current.lastReleaseNotesSeen === "1.81.1") {
     return current;
   }
   return {
     ...current,
-    lastReleaseNotesSeen: "1.81.0"
+    lastReleaseNotesSeen: "1.81.1"
   };
 }
 function _temp241(s_0) {
@@ -497247,7 +497247,7 @@ function compileAgenticCiWorkflow(specName = "default", options2 = {}) {
   if (spec.name !== specName) {
     throw new Error("Agentic CI workflow spec name does not match");
   }
-  const packageVersion = options2.packageVersion ?? (typeof MACRO !== "undefined" ? "1.81.0" : "1.81.0");
+  const packageVersion = options2.packageVersion ?? (typeof MACRO !== "undefined" ? "1.81.1" : "1.81.1");
   if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(packageVersion)) {
     throw new Error("invalid ur-agent package version");
   }
@@ -498240,7 +498240,7 @@ runner; \`ur trigger\` is the inbound parser that decides what to run.
       path: ".github/workflows/ur.yml",
       root: "project",
       content: compileAgenticCiWorkflow("default", {
-        packageVersion: typeof MACRO !== "undefined" ? "1.81.0" : "1.81.0"
+        packageVersion: typeof MACRO !== "undefined" ? "1.81.1" : "1.81.1"
       })
     },
     {
@@ -498303,7 +498303,7 @@ function value(tokens, flag) {
   return index2 >= 0 ? tokens[index2 + 1] : undefined;
 }
 function cliVersion() {
-  return typeof MACRO !== "undefined" ? "1.81.0" : "1.81.0";
+  return typeof MACRO !== "undefined" ? "1.81.1" : "1.81.1";
 }
 function workflowPath(cwd2) {
   return join168(cwd2, ".github", "workflows", "ur-agentic-ci.yml");
@@ -504159,7 +504159,7 @@ function createAcpStdioApp(deps) {
       }
     },
     authMethods: [],
-    agentInfo: { name: "UR-Nexus", version: "1.81.0" }
+    agentInfo: { name: "UR-Nexus", version: "1.81.1" }
   })).onRequest("authenticate", () => ({})).onRequest("session/new", async (context6) => {
     const result = runtime2.newSession(context6.params.cwd, context6.params.mcpServers, context6.params.additionalDirectories);
     await runtime2.announce({
@@ -504256,7 +504256,7 @@ function createAcpStdioAgent(deps) {
               }
             },
             authMethods: [],
-            agentInfo: { name: "UR-Nexus", version: "1.81.0" }
+            agentInfo: { name: "UR-Nexus", version: "1.81.1" }
           });
           return;
         case "authenticate":
@@ -715508,7 +715508,7 @@ async function captureMemoryDiagnostics(trigger2, dumpNumber = 0) {
     smapsRollup,
     platform: process.platform,
     nodeVersion: process.version,
-    ccVersion: "1.81.0"
+    ccVersion: "1.81.1"
   };
 }
 async function performHeapDump(trigger2 = "manual", dumpNumber = 0) {
@@ -716097,7 +716097,7 @@ var init_bridge_kick = __esm(() => {
 var call154 = async () => {
   return {
     type: "text",
-    value: "1.81.0"
+    value: "1.81.1"
   };
 }, version2, version_default;
 var init_version = __esm(() => {
@@ -727340,7 +727340,7 @@ function generateHtmlReport(data, insights) {
 </html>`;
 }
 function buildExportData(data, insights, facets, remoteStats) {
-  const version3 = typeof MACRO !== "undefined" ? "1.81.0" : "unknown";
+  const version3 = typeof MACRO !== "undefined" ? "1.81.1" : "unknown";
   const remote_hosts_collected = remoteStats?.hosts.filter((h2) => h2.sessionCount > 0).map((h2) => h2.name);
   const facets_summary = {
     total: facets.size,
@@ -731653,7 +731653,7 @@ var init_sessionStorage = __esm(() => {
   init_settings2();
   init_slowOperations();
   init_uuid();
-  VERSION7 = typeof MACRO !== "undefined" ? "1.81.0" : "unknown";
+  VERSION7 = typeof MACRO !== "undefined" ? "1.81.1" : "unknown";
   MAX_TOMBSTONE_REWRITE_BYTES = 50 * 1024 * 1024;
   SKIP_FIRST_PROMPT_PATTERN = /^(?:\s*<[a-z][\w-]*[\s>]|\[Request interrupted by user[^\]]*\])/;
   EPHEMERAL_PROGRESS_TYPES = new Set([
@@ -732868,7 +732868,7 @@ var init_filesystem = __esm(() => {
   });
   getBundledSkillsRoot = memoize_default(function getBundledSkillsRoot2() {
     const nonce = randomBytes24(16).toString("hex");
-    return join243(getURTempDir(), "bundled-skills", "1.81.0", nonce);
+    return join243(getURTempDir(), "bundled-skills", "1.81.1", nonce);
   });
   getResolvedWorkingDirPaths = memoize_default(getPathsForPermissionCheck);
 });
@@ -739268,7 +739268,7 @@ function computeFingerprint(messageText2, version3) {
 }
 function computeFingerprintFromMessages(messages) {
   const firstMessageText = extractFirstMessageText(messages);
-  return computeFingerprint(firstMessageText, "1.81.0");
+  return computeFingerprint(firstMessageText, "1.81.1");
 }
 var FINGERPRINT_SALT = "59cf53e54c78";
 var init_fingerprint = () => {};
@@ -741193,7 +741193,7 @@ async function sideQuery(opts) {
     betas.push(STRUCTURED_OUTPUTS_BETA_HEADER);
   }
   const messageText2 = extractFirstUserMessageText(messages);
-  const fingerprint2 = computeFingerprint(messageText2, "1.81.0");
+  const fingerprint2 = computeFingerprint(messageText2, "1.81.1");
   const attributionHeader = getAttributionHeader(fingerprint2);
   const systemBlocks = [
     attributionHeader ? { type: "text", text: attributionHeader } : null,
@@ -746027,7 +746027,7 @@ function buildSystemInitMessage(inputs) {
     slash_commands: inputs.commands.filter((c4) => c4.userInvocable !== false).map((c4) => c4.name),
     apiKeySource: getURHQApiKeyWithSource().source,
     betas: getSdkBetas(),
-    ur_version: "1.81.0",
+    ur_version: "1.81.1",
     output_style: outputStyle,
     agents: inputs.agents.map((agent2) => agent2.agentType),
     skills: inputs.skills.filter((s) => s.userInvocable !== false).map((skill2) => skill2.name),
@@ -759863,7 +759863,7 @@ var init_useVoiceEnabled = __esm(() => {
 function getSemverPart(version3) {
   return `${import_semver13.major(version3, { loose: true })}.${import_semver13.minor(version3, { loose: true })}.${import_semver13.patch(version3, { loose: true })}`;
 }
-function useUpdateNotification(updatedVersion, initialVersion = "1.81.0") {
+function useUpdateNotification(updatedVersion, initialVersion = "1.81.1") {
   const [lastNotifiedSemver, setLastNotifiedSemver] = import_react225.useState(() => getSemverPart(initialVersion));
   if (!updatedVersion) {
     return null;
@@ -759912,7 +759912,7 @@ function AutoUpdater({
       return;
     }
     if (false) {}
-    const currentVersion = "1.81.0";
+    const currentVersion = "1.81.1";
     const channel = getInitialSettings()?.autoUpdatesChannel ?? "latest";
     let latestVersion = await getLatestVersion(channel);
     const isDisabled = isAutoUpdaterDisabled();
@@ -760141,12 +760141,12 @@ function NativeAutoUpdater({
     logEvent("tengu_native_auto_updater_start", {});
     try {
       const maxVersion = await getMaxVersion();
-      if (maxVersion && gt("1.81.0", maxVersion)) {
+      if (maxVersion && gt("1.81.1", maxVersion)) {
         const msg = await getMaxVersionMessage();
         setMaxVersionIssue(msg ?? "affects your version");
       }
       const result = await installLatest(channel);
-      const currentVersion = "1.81.0";
+      const currentVersion = "1.81.1";
       const latencyMs = Date.now() - startTime;
       if (result.lockFailed) {
         logEvent("tengu_native_auto_updater_lock_contention", {
@@ -760283,17 +760283,17 @@ function PackageManagerAutoUpdater(t0) {
       const maxVersion = await getMaxVersion();
       if (maxVersion && latest && gt(latest, maxVersion)) {
         logForDebugging(`PackageManagerAutoUpdater: maxVersion ${maxVersion} is set, capping update from ${latest} to ${maxVersion}`);
-        if (gte("1.81.0", maxVersion)) {
-          logForDebugging(`PackageManagerAutoUpdater: current version ${"1.81.0"} is already at or above maxVersion ${maxVersion}, skipping update`);
+        if (gte("1.81.1", maxVersion)) {
+          logForDebugging(`PackageManagerAutoUpdater: current version ${"1.81.1"} is already at or above maxVersion ${maxVersion}, skipping update`);
           setUpdateAvailable(false);
           return;
         }
         latest = maxVersion;
       }
-      const hasUpdate = latest && !gte("1.81.0", latest) && !shouldSkipVersion(latest);
+      const hasUpdate = latest && !gte("1.81.1", latest) && !shouldSkipVersion(latest);
       setUpdateAvailable(!!hasUpdate);
       if (hasUpdate) {
-        logForDebugging(`PackageManagerAutoUpdater: Update available ${"1.81.0"} -> ${latest}`);
+        logForDebugging(`PackageManagerAutoUpdater: Update available ${"1.81.1"} -> ${latest}`);
       }
     };
     $2[0] = t1;
@@ -760327,7 +760327,7 @@ function PackageManagerAutoUpdater(t0) {
       wrap: "truncate",
       children: [
         "currentVersion: ",
-        "1.81.0"
+        "1.81.1"
       ]
     }, undefined, true, undefined, this);
     $2[3] = verbose;
@@ -771180,7 +771180,7 @@ function buildStatusLineCommandInput(permissionMode, exceeds200kTokens, settings
       project_dir: getOriginalCwd(),
       added_dirs: addedDirs
     },
-    version: "1.81.0",
+    version: "1.81.1",
     output_style: {
       name: outputStyleName
     },
@@ -771315,7 +771315,7 @@ function StatusLineInner({
   const attention = customStatusError ?? taskAttention;
   const terminalSize = React133.useContext(TerminalSizeContext);
   const defaultStatusLineText = buildDefaultStatusBar({
-    version: "1.81.0",
+    version: "1.81.1",
     providerLabel: providerRuntime.providerLabel,
     authMode: providerRuntime.authLabel,
     model: renderModelName(mainLoopModel) || providerRuntime.model || "",
@@ -783570,7 +783570,7 @@ async function submitTranscriptShare(messages, trigger2, appearanceId) {
     } catch {}
     const data = {
       trigger: trigger2,
-      version: "1.81.0",
+      version: "1.81.1",
       platform: process.platform,
       transcript,
       subagentTranscripts: Object.keys(subagentTranscripts).length > 0 ? subagentTranscripts : undefined,
@@ -795939,7 +795939,7 @@ function WelcomeV2() {
             dimColor: true,
             children: [
               "v",
-              "1.81.0"
+              "1.81.1"
             ]
           }, undefined, true, undefined, this)
         ]
@@ -797199,7 +797199,7 @@ function completeOnboarding() {
   saveGlobalConfig((current) => ({
     ...current,
     hasCompletedOnboarding: true,
-    lastOnboardingVersion: "1.81.0"
+    lastOnboardingVersion: "1.81.1"
   }));
 }
 function showDialog(root2, renderer) {
@@ -802345,7 +802345,7 @@ function appendToLog(path28, message) {
     cwd: getFsImplementation().cwd(),
     userType: process.env.USER_TYPE,
     sessionId: getSessionId(),
-    version: "1.81.0"
+    version: "1.81.1"
   };
   getLogWriter(path28).write(messageWithTimestamp);
 }
@@ -806509,8 +806509,8 @@ async function getEnvLessBridgeConfig() {
 }
 async function checkEnvLessBridgeMinVersion() {
   const cfg = await getEnvLessBridgeConfig();
-  if (cfg.min_version && lt("1.81.0", cfg.min_version)) {
-    return `Your version of UR (${"1.81.0"}) is too old for Remote Control.
+  if (cfg.min_version && lt("1.81.1", cfg.min_version)) {
+    return `Your version of UR (${"1.81.1"}) is too old for Remote Control.
 Version ${cfg.min_version} or higher is required. Run \`ur update\` to update.`;
   }
   return null;
@@ -806984,7 +806984,7 @@ async function initBridgeCore(params) {
   const rawApi = createBridgeApiClient({
     baseUrl,
     getAccessToken,
-    runnerVersion: "1.81.0",
+    runnerVersion: "1.81.1",
     onDebug: logForDebugging,
     onAuth401,
     getTrustedDeviceToken
@@ -816457,7 +816457,7 @@ function getAgUiCapabilities() {
       name: "UR-Nexus",
       type: "ur-nexus",
       description: "Provider-flexible, local-first autonomous engineering workflow agent.",
-      version: "1.81.0",
+      version: "1.81.1",
       provider: "UR",
       documentationUrl: "https://github.com/Maitham16/UR/blob/master/docs/AG_UI.md"
     },
@@ -817684,7 +817684,7 @@ function createMCPServer(cwd4, debug2, verbose) {
   };
   const server2 = new Server({
     name: "ur-nexus",
-    version: "1.81.0"
+    version: "1.81.1"
   }, {
     capabilities: {
       tools: {}
@@ -818888,7 +818888,7 @@ function thrownResponse(error40) {
 }
 async function createUrMcp2026Runtime(options5) {
   const server2 = createMCPServer(options5.cwd, options5.debug === true, options5.verbose === true);
-  const client2 = new Client({ name: "ur-mcp-2026-adapter", version: "1.81.0" }, { capabilities: {} });
+  const client2 = new Client({ name: "ur-mcp-2026-adapter", version: "1.81.1" }, { capabilities: {} });
   const [clientTransport, serverTransport] = createLinkedTransportPair();
   try {
     await server2.connect(serverTransport);
@@ -818899,7 +818899,7 @@ async function createUrMcp2026Runtime(options5) {
   }
   const runtime2 = new Mcp2026Runtime({
     cwd: options5.cwd,
-    version: "1.81.0",
+    version: "1.81.1",
     backend: {
       listTools: async () => {
         const listed = await client2.listTools();
@@ -821634,7 +821634,7 @@ async function update() {
   logEvent("tengu_update_check", {});
   const diagnostic2 = await getDoctorDiagnostic();
   const result = await checkUpgradeStatus({
-    currentVersion: "1.81.0",
+    currentVersion: "1.81.1",
     packageName: UR_AGENT_PACKAGE_NAME,
     installationType: diagnostic2.installationType,
     latestVersion: () => getLatestNpmPackageVersion(UR_AGENT_PACKAGE_NAME)
@@ -822962,7 +822962,7 @@ ${customInstructions}` : customInstructions;
       }
     }
     logForDiagnosticsNoPII("info", "started", {
-      version: "1.81.0",
+      version: "1.81.1",
       is_native_binary: isInBundledMode()
     });
     registerCleanup(async () => {
@@ -823749,7 +823749,7 @@ Usage: ur --remote "your task description"`, () => gracefulShutdown(1));
         pendingHookMessages
       }, renderAndRun);
     }
-  }).version("1.81.0 (UR-Nexus)", "-v, --version", "Output the version number");
+  }).version("1.81.1 (UR-Nexus)", "-v, --version", "Output the version number");
   program2.option("-w, --worktree [name]", "Create a new git worktree for this session (optionally specify a name)");
   program2.option("--tmux", "Create a tmux session for the worktree (requires --worktree). Uses iTerm2 native panes when available; use --tmux=classic for traditional tmux.");
   if (canUserConfigureAdvisor()) {
@@ -824876,7 +824876,7 @@ if (false) {}
 async function main2() {
   const args = process.argv.slice(2);
   if (args.length === 1 && (args[0] === "--version" || args[0] === "-v" || args[0] === "-V")) {
-    console.log(`${"1.81.0"} (UR-Nexus)`);
+    console.log(`${"1.81.1"} (UR-Nexus)`);
     return;
   }
   if (args[0] === "a2a" && args[1] === "serve" && !args.includes("--help") && !args.includes("-h")) {

package/docs/REDTEAM.md

@@ -61,4 +61,10 @@ Install/enable it from the official marketplace if it is not already enabled, ac
 /reverse-skills:start <research task>
 ```
 
+The command preflights UR's visible task lifecycle for multi-outcome or
+workspace-changing work. It creates an actionable board before Bash, edits,
+writes, or delegation, so `tasks.requireBeforeChanges` remains enabled without
+surfacing a failed-first `TaskListRequired` tool call. Direct specialist-skill
+invocations follow the same contract.
+
 Review [the plugin README](../plugins/core/reverse-skills/README.md) for its capability map and provenance.

package/docs/VALIDATION.md

@@ -19,7 +19,7 @@ You need:
 
 ```sh
 ur --version
-# expected for this release: "1.81.0 (UR-Nexus)"
+# expected for this release: "1.81.1 (UR-Nexus)"
 ```
 
 ### 0.0 Redteam mode and Reverse Skills (1.81.0)

package/documentation/index.html

@@ -45,7 +45,7 @@
     <main id="content" class="content">
       <header class="topbar">
         <div>
-          <p class="eyebrow">Version 1.81.0</p>
+          <p class="eyebrow">Version 1.81.1</p>
           <h1>UR-Nexus Documentation</h1>
           <p class="lead">A practical, tutorial-style reference for installing, configuring, automating, extending, and operating UR-Nexus.</p>
         </div>

package/extensions/jetbrains-ur/build.gradle.kts

@@ -7,7 +7,7 @@ plugins {
 }
 
 group = "dev.urnexus"
-version = "1.81.0"
+version = "1.81.1"
 
 repositories {
     mavenCentral()

package/extensions/vscode-ur-inline-diffs/package.json

@@ -2,7 +2,7 @@
   "name": "ur-inline-diffs",
   "displayName": "UR Inline Diffs",
   "description": "Review, apply, and reject UR inline diff bundles from .ur/ide/diffs inside VS Code.",
-  "version": "1.81.0",
+  "version": "1.81.1",
   "publisher": "ur-nexus",
   "engines": {
     "vscode": "^1.92.0"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ur-agent",
-  "version": "1.81.0",
+  "version": "1.81.1",
   "description": "UR-Nexus — autonomous engineering workflow engine (plan, execute, test, verify, document, benchmark, reproduce)",
   "type": "module",
   "packageManager": "bun@1.3.14",

package/plugins/core/reverse-skills/.ur-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "reverse-skills",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "UR-native reverse engineering and red-team research workflows, available exclusively in UR redteam mode.",
   "author": {
     "name": "UR maintainers",

package/plugins/core/reverse-skills/README.md

@@ -12,6 +12,12 @@ The integration is UR-only:
 
 Start with `/reverse-skills:start <task>` (or invoke the `reverse-skills:reverse-skill-router` skill directly). The router selects one or more specialist skills covering binary reverse engineering, exploitation, application testing, malware/EDR research, platform and radio security, forensics, LLM security, and evidence/reporting.
 
+For multi-outcome or workspace-changing research, the command and every
+specialist skill expose UR's task tools and require an actionable task board
+before Bash, edits, writes, or delegation. This keeps the normal
+`tasks.requireBeforeChanges` protection enabled without a failed-first
+`TaskListRequired` retry.
+
 ## Provenance
 
 The adaptation is based on upstream commit `289c24b1617411a16b1e8d3032cce0f2fe52911d` (MIT). UR excludes the upstream GPL CTF orchestrator, external AGPL services, client-specific bootstrap scripts, field journals, and machine-specific configuration. See `NOTICE` and `UPSTREAM-LICENSE`.

package/plugins/core/reverse-skills/UR-INTEGRATION.md

@@ -3,13 +3,14 @@
 These rules apply to every skill in this plugin.
 
 1. Confirm UR redteam mode is active. Plugin gating normally guarantees this; never suggest bypassing the gate.
-2. Separate offline research from target operations. Reading, decompiling, documenting, and authoring local research artifacts may proceed under normal file/tool permissions.
-3. Before network access, sample execution, exploitation, credential testing, radio transmission, device mutation, or any other target operation, inspect `/scope show`. Require a scope approved in the current UR session. Mode activation and warning acceptance are not target authorization.
-4. Use only the hosts, ports, tools, and intensity recorded in scope. Stop when a discovered pivot or target is outside it; ask the user to update and reapprove scope.
-5. Continue to honor UR permission prompts, sandboxing, secrets handling, and action-specific confirmations. Never weaken these controls or silently elevate privileges.
-6. Prefer reproducible case directories, hashes, timestamps, commands, raw evidence, and findings that distinguish observation from inference.
-7. Do not auto-install tools or alter another AI client's configuration. If a dependency is absent, report it and propose an UR-native installation or MCP setup for explicit approval.
-8. The selected model/provider is independent. If it declines a request, state that accurately; do not imply UR redteam mode can override provider policy.
+2. Keep UR's task lifecycle ahead of mutations. Read-only inspection may happen first. If the request has multiple outcomes, sequencing, verification/reporting deliverables, or any workspace-changing action, call `TaskList` and create 2–8 concrete outcome tasks with `TaskCreate` when no actionable board exists. Mark the active task `in_progress` before Bash/Edit/Write or delegation, and update every task through completion, failure, or an explicit skip. Never wait for a `TaskListRequired` rejection and never disable the task gate as a workflow shortcut.
+3. Separate offline research from target operations. Reading, decompiling, documenting, and authoring local research artifacts may proceed under normal file/tool permissions.
+4. Before network access, sample execution, exploitation, credential testing, radio transmission, device mutation, or any other target operation, inspect `/scope show`. Require a scope approved in the current UR session. Mode activation and warning acceptance are not target authorization.
+5. Use only the hosts, ports, tools, and intensity recorded in scope. Stop when a discovered pivot or target is outside it; ask the user to update and reapprove scope.
+6. Continue to honor UR permission prompts, sandboxing, secrets handling, action-specific confirmations, and task tracking. Never weaken these controls or silently elevate privileges.
+7. Prefer reproducible case directories, hashes, timestamps, commands, raw evidence, and findings that distinguish observation from inference.
+8. Do not auto-install tools or alter another AI client's configuration. If a dependency is absent, report it and propose an UR-native installation or MCP setup for explicit approval.
+9. The selected model/provider is independent. If it declines a request, state that accurately; do not imply UR redteam mode can override provider policy.
 
 Recommended case layout:
 

package/plugins/core/reverse-skills/commands/start.md

@@ -3,8 +3,18 @@ description: "Route an authorized security-research task into the UR-exclusive R
 argument-hint: "<research task>"
 allowed-tools:
   - "Skill"
+  - "TaskCreate"
+  - "TaskList"
+  - "TaskUpdate"
 ---
 
+Before invoking another skill or using Bash, Edit, or Write, inspect the request
+for multiple outcomes, sequencing, verification/reporting deliverables, or any
+workspace-changing action. When any of those apply, call `TaskList`, create
+2–8 concrete outcome tasks with `TaskCreate` if no actionable board exists,
+and mark the first unblocked task in progress with `TaskUpdate`. Do not wait for
+`TaskListRequired`, and do not disable UR's task gate to bypass this preflight.
+
 Invoke the `reverse-skills:reverse-skill-router` skill with the user's arguments.
 Follow its UR redteam execution contract, select the smallest applicable set of
 specialist skills, and begin with local/passive triage. Do not interpret redteam

package/plugins/core/reverse-skills/skills/application-redteam/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: application-redteam
 description: Conduct authorized application and infrastructure research across APIs, source code, web, cloud/Kubernetes, databases, identity federation, email, supply chain, browser automation, and thick clients.
-allowed-tools: Read Grep Glob Bash Edit Write WebFetch WebSearch
+allowed-tools: Read Grep Glob Bash Edit Write WebFetch WebSearch TaskCreate TaskList TaskUpdate
 ---
 
 # Application red-team research

package/plugins/core/reverse-skills/skills/binary-reverse/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: binary-reverse
 description: Reverse compiled, managed, packed, obfuscated, browser, bytecode, VM, or protocol artifacts using static and dynamic analysis. Covers IDA, Ghidra, radare2, .NET, Go/Rust, macOS, JavaScript, browser extensions, binary diffing, and protocol reconstruction.
-allowed-tools: Read Grep Glob Bash Edit Write
+allowed-tools: Read Grep Glob Bash Edit Write TaskCreate TaskList TaskUpdate
 ---
 
 # Binary reverse engineering

package/plugins/core/reverse-skills/skills/exploit-development/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: exploit-development
 description: Turn a known vulnerability into a reproducible PoC or reliable authorized exploit, including stack/heap/kernel pwn, patch-diff analysis, exploit chains, fuzzing, and remote-environment stabilization.
-allowed-tools: Read Grep Glob Bash Edit Write
+allowed-tools: Read Grep Glob Bash Edit Write TaskCreate TaskList TaskUpdate
 ---
 
 # Exploit development

package/plugins/core/reverse-skills/skills/forensics-threat-hunting/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: forensics-threat-hunting
 description: Perform disk, memory, packet, and log forensics; build timelines and IOCs; create YARA/Sigma detections; and conduct evidence-driven threat hunts.
-allowed-tools: Read Grep Glob Bash Edit Write
+allowed-tools: Read Grep Glob Bash Edit Write TaskCreate TaskList TaskUpdate
 ---
 
 # Forensics and threat hunting

package/plugins/core/reverse-skills/skills/llm-agent-security/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: llm-agent-security
 description: Test LLM and agent systems for prompt injection, tool abuse, memory poisoning, data leakage, unsafe autonomy, identity failures, and model or skill supply-chain risks.
-allowed-tools: Read Grep Glob Bash Edit Write WebFetch WebSearch
+allowed-tools: Read Grep Glob Bash Edit Write WebFetch WebSearch TaskCreate TaskList TaskUpdate
 ---
 
 # LLM and agent security

package/plugins/core/reverse-skills/skills/malware-edr-research/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: malware-edr-research
 description: Analyze, modify, build, and test malware-like samples, implants, anti-analysis behavior, and EDR/AV telemetry or evasion in authorized research environments.
-allowed-tools: Read Grep Glob Bash Edit Write
+allowed-tools: Read Grep Glob Bash Edit Write TaskCreate TaskList TaskUpdate
 ---
 
 # Malware and EDR research

package/plugins/core/reverse-skills/skills/platform-radio-security/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: platform-radio-security
 description: Research mobile apps, firmware, embedded hardware, OT/ICS systems, Wi-Fi, wireless, and SDR/radio targets in owned or explicitly authorized labs.
-allowed-tools: Read Grep Glob Bash Edit Write
+allowed-tools: Read Grep Glob Bash Edit Write TaskCreate TaskList TaskUpdate
 ---
 
 # Platform, device, and radio security

package/plugins/core/reverse-skills/skills/research-evidence/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: research-evidence
 description: Establish scope, review case integrity, preserve evidence-to-finding traceability, generate security diagrams, and produce reproducible technical reports.
-allowed-tools: Read Grep Glob Bash Edit Write
+allowed-tools: Read Grep Glob Bash Edit Write TaskCreate TaskList TaskUpdate
 ---
 
 # Research evidence and reporting

package/plugins/core/reverse-skills/skills/reverse-skill-router/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: reverse-skill-router
 description: Route an authorized reverse engineering or red-team research task to the correct UR specialist skill. Use when a task spans domains or its best entrypoint is unclear.
-allowed-tools: Read Grep Glob Bash
+allowed-tools: Read Grep Glob Bash Skill TaskCreate TaskList TaskUpdate
 ---
 
 # Reverse Skills router