@poe-platform/safe-js 0.1.837 → 0.1.839

package/dist/safe-js/chunks/{chunk-M4V75UAN.js → chunk-OGPSOD3N.js}

@@ -1215,9 +1215,7 @@ var codexSpawnConfig = {
       'approvals_reviewer="auto_review"'
     ],
     edit: ["-s", "workspace-write"],
-    // Landlock and seccomp enforce read-only mode without bubblewrap loopback
-    // setup, which restricted Linux hosts can reject with RTM_NEWADDR EPERM.
-    read: ["-s", "read-only", "--enable", "use_legacy_landlock"]
+    read: ["-s", "read-only"]
   },
   stdinMode: {
     omitPrompt: true,

package/dist/safe-js/chunks/{cli-runtime-YD5QUIAT.js → cli-runtime-UW7SWSSV.js}

@@ -5,7 +5,7 @@ import {
   makeAgentModule,
   maskSource,
   splitFrontmatter
-} from "./chunk-M4V75UAN.js";
+} from "./chunk-OGPSOD3N.js";
 import {
   parseMcpConfig
 } from "./chunk-F2CVFOAU.js";

package/dist/safe-js/cli.js

@@ -13,7 +13,7 @@ import { createHostFileSystem } from "@poe-platform/safe-fs/node";
 import { fileURLToPath } from "node:url";
 async function runCli(argv, options = {}) {
   if (!argv.includes("--help") && !argv.includes("-h")) {
-    const runtime = await import("./chunks/cli-runtime-YD5QUIAT.js");
+    const runtime = await import("./chunks/cli-runtime-UW7SWSSV.js");
     return runtime.runCli(argv, options, createUsage());
   }
   const brokenPipe = createBrokenPipeState();
@@ -32,7 +32,7 @@ async function runCli(argv, options = {}) {
         stderr.write(`${error instanceof Error ? error.message : String(error)}
 `);
         if (brokenPipe.closed) return 0;
-        const { exitCodeForError } = await import("./chunks/cli-runtime-YD5QUIAT.js");
+        const { exitCodeForError } = await import("./chunks/cli-runtime-UW7SWSSV.js");
         return exitCodeForError(error);
       }
     }

package/dist/safe-js/index.js

@@ -21,7 +21,7 @@ import {
   runWithSpawnUsageAccumulator,
   splitFrontmatter,
   supportsSpawnMode
-} from "./chunks/chunk-M4V75UAN.js";
+} from "./chunks/chunk-OGPSOD3N.js";
 import {
   parseMcpConfig
 } from "./chunks/chunk-F2CVFOAU.js";

package/dist/safe-js/workerd.js

@@ -75664,9 +75664,7 @@ var codexSpawnConfig = {
       'approvals_reviewer="auto_review"'
     ],
     edit: ["-s", "workspace-write"],
-    // Landlock and seccomp enforce read-only mode without bubblewrap loopback
-    // setup, which restricted Linux hosts can reject with RTM_NEWADDR EPERM.
-    read: ["-s", "read-only", "--enable", "use_legacy_landlock"]
+    read: ["-s", "read-only"]
   },
   stdinMode: {
     omitPrompt: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@poe-platform/safe-js",
-  "version": "0.1.837",
+  "version": "0.1.839",
   "description": "Budgeted JavaScript interpreter with explicit host capabilities and resumable execution",
   "type": "module",
   "license": "MIT",
@@ -82,7 +82,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@poe-platform/safe-fs": "0.1.837",
+    "@poe-platform/safe-fs": "0.1.839",
     "@petamoriken/float16": "^3.9.3",
     "@noble/hashes": "2.4.0",
     "@formatjs/intl-localematcher": "0.8.13",