v0.45.0

Tools

• bash: async handoff instead of kill. A command still running at its deadline (or background=true) moves into a bg job with its partial output and job id; the turn continues and a completion note is injected once before the next model request. Config shell_timeout_handoff (default on). New max_output_length arg; output is bounded head+tail with a blob spill for the rest.
• grep / glob rewrite. Cached ripgrep discovery, nested excludes, fixed_strings, glob, type, context, multiline, max_matches, deterministic sort, truncation markers, rg errors surfaced, Windows path-safe line splitting, and a fallback walker with the same semantics.
• browser captures are cancellable; the loopback check is an exact host match.

Images

Media-priced token estimates in preflight and recovery, recovery never excerpts base64 as text, the compaction summarizer strips images, Gemini inlineData, placeholders for agent-CLI transports, Anthropic media_type gate, mime sniffing and downscale before upload.

Jev / TypeSafe

• The decision engine auto-resolves from a running local bridge, SUBQ_API_KEY or OPENROUTER_API_KEY when no TypeSafe key is set; the catalog grows to 133 engines with key_env / credential_provider slots.
• /auth and /login: the pinned TypeSafe · Jev row shows the engine in use and where its key lives. Selecting it opens the Jev engines panel: one row per slot (TypeSafe hosted, local bridge, SubQ Snap, OpenRouter Decisions, selected catalog engine), ● on the slot in use, the key's residence (env / saved key / config.toml / file / loopback), and [✕] buttons that remove only Nur-owned copies. Enter saves a key under that slot's own id.

Providers

Liquid Inference and Factory Droid (droid exec transport) added; Meta lineup re-verified; 67 providers.

Tests

1128 unit tests, E2E 28/28 (scenario 20 updated, scenario 28 added).