@ponythewhite/base-context 1.0.2 → 1.0.5

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [1.0.5] - 2026-09-18
+
+- Displayed the built-in theme as Synerise without changing saved theme IDs, and branded the tmux startup notice as base-context.
+- Replaced the upstream startup artwork with a Synerise ASCII wordmark and base-context label.
+
+## [1.0.4] - 2026-09-17
+
+- Fixed first-time Python setup failing to find its newly installed uv when XDG data paths are configured.
+
+## [1.0.3] - 2026-09-17
+
+- Fixed late OAuth and API-key logins overwriting a newer login or undoing logout.
+- Fixed configured MCP environment-token authentication falling back to stored credentials.
+- Fixed MCP tool discovery to retrieve paginated inventories without partial results and protect cached schemas from caller edits.
+- Masked API-key prompts and pasted sign-in codes and callback values while keeping browser sign-in links readable.
+- Fixed provider logout reporting success when saved credentials could not be removed.
+- Fixed shutdown admission loss after slow process scans or transient registry errors while the shutdown process still owns its record.
+- Fixed source builds including the development Python virtual environment in release packages.
+
 ## [1.0.2] - 2026-09-17
 
 - Fixed RPC requests waiting for a timeout after the agent process exits, and removed the shutdown delay for an already-exited process.

package/dist/base-context-runtime/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "base-context-runtime"
-version = "1.0.2"
+version = "1.0.5"
 description = "Kernel-side runtime shim for Base Context recursion"
 license = "MIT"
 license-files = ["LICENSE", "NOTICE"]

package/dist/base-context-runtime/src/rlm/mcp.py

@@ -10,6 +10,7 @@ import re
 import threading
 import time
 from contextlib import AsyncExitStack
+from copy import deepcopy
 from collections.abc import Awaitable, Callable
 from typing import Any, TypeVar
 
@@ -20,6 +21,7 @@ __all__ = ["McpStartupError", "call_tool", "close", "list_tools", "reload"]
 
 _DEFAULT_STARTUP_TIMEOUT = 20.0
 _DEFAULT_CALL_TIMEOUT = 60.0
+_MAX_TOOL_LIST_PAGES = 100
 # Must stay strictly below the host's KERNEL_SHUTDOWN_TIMEOUT_MS (5s) kill deadline.
 _SHUTDOWN_TIMEOUT = 2.5
 _T = TypeVar("_T")
@@ -259,21 +261,41 @@ class _Generation:
         return await self.stack.enter_async_context(stdio_client(params, errlog=self._stderr))
 
     async def discover(self) -> None:
-        response = await self.session.list_tools()
+        from mcp.types import PaginatedRequestParams
+
         tools: dict[str, dict[str, Any]] = {}
-        for tool in response.tools:
-            name = getattr(tool, "name", None)
-            if not isinstance(name, str):
-                continue
-            schema = getattr(tool, "input_schema", None)
-            if schema is None:
-                schema = getattr(tool, "inputSchema", None)
-            tools[name] = {
-                "name": name,
-                "description": getattr(tool, "description", "") or "",
-                "inputSchema": schema if isinstance(schema, dict) else {},
-            }
-        self.tools = tools
+        cursor: str | None = None
+        seen_cursors: set[str] = set()
+        for _ in range(_MAX_TOOL_LIST_PAGES):
+            response = (
+                await self.session.list_tools()
+                if cursor is None
+                else await self.session.list_tools(params=PaginatedRequestParams(cursor=cursor))
+            )
+            for tool in response.tools:
+                name = getattr(tool, "name", None)
+                if not isinstance(name, str):
+                    continue
+                schema = getattr(tool, "input_schema", None)
+                if schema is None:
+                    schema = getattr(tool, "inputSchema", None)
+                tools[name] = {
+                    "name": name,
+                    "description": getattr(tool, "description", "") or "",
+                    "inputSchema": schema if isinstance(schema, dict) else {},
+                }
+            cursor = getattr(response, "next_cursor", None)
+            if cursor is None:
+                cursor = getattr(response, "nextCursor", None)
+            if cursor is None:
+                self.tools = tools
+                return
+            if not isinstance(cursor, str):
+                raise RuntimeError(f"MCP server '{self.server}' returned an invalid tools/list cursor")
+            if cursor in seen_cursors:
+                raise RuntimeError(f"MCP server '{self.server}' repeated a tools/list cursor")
+            seen_cursors.add(cursor)
+        raise RuntimeError(f"MCP server '{self.server}' exceeded the tools/list page limit")
 
     def allows(self, tool: str) -> bool:
         enabled = self.config.get("enabledTools")
@@ -379,7 +401,7 @@ class _Registry:
     async def tools(self, server: str) -> list[dict[str, Any]]:
         async def operation() -> list[dict[str, Any]]:
             generation = await self._get(server)
-            return [dict(tool) for name, tool in generation.tools.items() if generation.allows(name)]
+            return [deepcopy(tool) for name, tool in generation.tools.items() if generation.allows(name)]
 
         return await self._tracked(operation)
 
@@ -529,7 +551,7 @@ def _bound_auth(provider: str, config: dict[str, Any]) -> dict[str, Any] | None:
 async def _auth_identity(server: str, config: dict[str, Any]) -> str:
     env_name = config.get("bearerTokenEnvVar")
     token = os.environ.get(env_name, "").strip() if isinstance(env_name, str) else ""
-    if config.get("oauth") is True and not token:
+    if config.get("oauth") is True and not env_name:
         provider = f"mcp:{server}"
         cred = _bound_auth(provider, config)
         expires = (cred or {}).get("expires")
@@ -556,7 +578,7 @@ async def _headers(server: str, config: dict[str, Any]) -> dict[str, str]:
         return headers
     env_name = config.get("bearerTokenEnvVar")
     token = os.environ.get(env_name, "").strip() if isinstance(env_name, str) else ""
-    if config.get("oauth") is True and not token:
+    if config.get("oauth") is True and not env_name:
         cred = _bound_auth(f"mcp:{server}", config)
         token = _resolve_config_value(str((cred or {}).get("access") or (cred or {}).get("key") or ""))
     if token:

package/dist/base-context-runtime/test/test_mcp.py

@@ -15,7 +15,7 @@ from pathlib import Path
 from types import SimpleNamespace
 from unittest import mock
 
-from mcp.types import CallToolResult, TextContent
+from mcp.types import CallToolResult, PaginatedRequestParams, TextContent
 from rlm import McpToolError, mcp
 from rlm.mcp_base import _parse_result
 
@@ -104,6 +104,55 @@ class McpRegistryTest(unittest.TestCase):
         generation = self.generation({"type": "http"}, [tool])
         self.assertEqual(generation.tools["raw.tool/name"]["inputSchema"], schema)
 
+    def test_listing_detaches_nested_cached_schemas(self):
+        schema = {"type": "object", "properties": {"x": {"enum": ["original"]}}}
+        generation = self.generation({"type": "http"}, [SimpleNamespace(name="tool", inputSchema=schema)])
+
+        async def scenario():
+            with mock.patch.object(mcp._registry, "_get_locked", mock.AsyncMock(return_value=generation)):
+                first = await mcp.list_tools("svc")
+                first[0]["inputSchema"]["properties"]["x"]["enum"].append("caller mutation")
+                second = await mcp.list_tools("svc")
+                self.assertEqual(second[0]["inputSchema"], schema)
+                self.assertEqual(schema["properties"]["x"]["enum"], ["original"])
+
+        run(scenario())
+
+    def test_discovers_all_pages_with_sdk_params_and_cursor_aliases(self):
+        generation = mcp._Generation("svc", {"type": "http"})
+        generation.session = SimpleNamespace(list_tools=mock.AsyncMock(side_effect=[
+            SimpleNamespace(tools=[SimpleNamespace(name="first")], next_cursor=""),
+            SimpleNamespace(tools=[SimpleNamespace(name="second")], nextCursor="page-3"),
+            SimpleNamespace(tools=[SimpleNamespace(name="third")], next_cursor=None),
+        ]))
+        run(generation.discover())
+        self.assertEqual(list(generation.tools), ["first", "second", "third"])
+        self.assertEqual(generation.session.list_tools.call_args_list, [
+            mock.call(),
+            mock.call(params=PaginatedRequestParams(cursor="")),
+            mock.call(params=PaginatedRequestParams(cursor="page-3")),
+        ])
+
+    def test_failed_pagination_never_publishes_partial_inventory(self):
+        for case, cursors, message in (
+            ("cycle", ["repeat", "repeat"], "repeated"),
+            ("malformed", [17], "invalid"),
+            ("excessive", ["page-2", "page-3"], "page limit"),
+        ):
+            with self.subTest(case=case):
+                generation = self.generation({"type": "http"}, [SimpleNamespace(name="previous")])
+                previous = generation.tools
+                generation.session = SimpleNamespace(list_tools=mock.AsyncMock(side_effect=[
+                    SimpleNamespace(tools=[SimpleNamespace(name="partial")], next_cursor=cursor)
+                    for cursor in cursors
+                ]))
+                with mock.patch.object(mcp, "_MAX_TOOL_LIST_PAGES", 2):
+                    with self.assertRaisesRegex(RuntimeError, message):
+                        run(generation.discover())
+                self.assertIs(generation.tools, previous)
+                self.assertNotIn("partial", generation.tools)
+                self.assertLessEqual(generation.session.list_tools.call_count, 2)
+
     def test_sdk_result_aliases_preserve_structured_output_and_errors(self):
         structured = CallToolResult(content=[], structuredContent={})
         self.assertEqual(_parse_result(structured), {})
@@ -317,6 +366,43 @@ class McpRegistryTest(unittest.TestCase):
             env = mcp._stdio_env({"credentialSource": "acp", "env": {"TOKEN": "task-secret"}})
         self.assertEqual(env, {"PATH": "/bin", "TOKEN": "task-secret"})
 
+    def test_selected_environment_token_refuses_missing_values_before_connection(self):
+        config = {
+            "type": "http", "url": "https://srv.example/mcp", "oauth": True,
+            "bearerTokenEnvVar": "SELECTED_MCP_TOKEN",
+            "headers": {"Authorization": "Bearer configured-header"},
+        }
+        for token in (None, "", "  "):
+            with self.subTest(token=token), mock.patch.dict(
+                os.environ, {} if token is None else {"SELECTED_MCP_TOKEN": token}, clear=True
+            ), mock.patch.object(mcp, "host_request", new=mock.AsyncMock(return_value=config)) as request, mock.patch.object(
+                mcp, "_read_auth", side_effect=AssertionError("must not read stored OAuth")
+            ), mock.patch.object(mcp._Generation, "_open_http", new=mock.AsyncMock()) as connect:
+                with self.assertRaisesRegex(RuntimeError, "credentials.*not available"):
+                    run(mcp.list_tools("remote"))
+                with self.assertRaisesRegex(RuntimeError, "credentials.*not available"):
+                    run(mcp._headers("remote", config))
+                request.assert_awaited_once_with("mcp.config", {"server": "remote"})
+                connect.assert_not_called()
+                self.assertEqual(mcp._registry._generations, {})
+                mcp._registry = mcp._Registry()
+
+    def test_selected_environment_token_is_the_only_auth_source(self):
+        config = {
+            "oauth": True, "url": "https://srv.example/mcp", "bearerTokenEnvVar": "SELECTED_MCP_TOKEN",
+            "headers": {"Authorization": "Bearer configured-header", "X-Other": "keep"},
+        }
+        with mock.patch.dict(os.environ, {"SELECTED_MCP_TOKEN": "  selected-token  "}), mock.patch.object(
+            mcp, "_read_auth", side_effect=AssertionError("must not read stored OAuth")
+        ), mock.patch.object(mcp, "host_request", new=mock.AsyncMock()) as request:
+            identity = run(mcp._auth_identity("remote", config))
+            self.assertNotEqual(identity, "anonymous")
+            self.assertNotIn("selected-token", identity)
+            self.assertEqual(run(mcp._headers("remote", config)), {
+                "Authorization": "Bearer selected-token", "X-Other": "keep",
+            })
+            request.assert_not_called()
+
     def test_endpoint_bound_credential_never_attaches_to_another_url(self):
         cred = {"access": "old-token", "endpoint": "https://old.example/mcp"}
         config = {"oauth": True, "url": "https://new.example/mcp"}

package/dist/base-context-runtime/uv.lock

@@ -367,7 +367,7 @@ wheels = [
 
 [[package]]
 name = "base-context-runtime"
-version = "1.0.2"
+version = "1.0.5"
 source = { editable = "." }
 dependencies = [
     { name = "mcp" },

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "sourceCommit": "4192025d919683d61a402b666b4790e26118df53",
+  "sourceCommit": "79e825d437ae8d67768558cf2a51976cd4434616",
   "sourceDirty": false,
   "buildHost": {
     "platform": "linux",

package/dist/bundle/amazon-bedrock.js

@@ -1,8 +1,8 @@
 import { createRequire as __piBundleCreateRequire } from 'node:module'; const require = __piBundleCreateRequire(import.meta.url);
 import {
   writeFileLogEntry
-} from "./chunk-HKINIBP4.js";
-import "./chunk-27QCJ2AZ.js";
+} from "./chunk-LFPWHI42.js";
+import "./chunk-UPVDERMD.js";
 import "./chunk-5QCJ5DQU.js";
 import "./chunk-CRBVRZBV.js";
 import "./chunk-GRJFXLBM.js";

package/dist/bundle/{bundled-modules-PWOGKUQQ.js → bundled-modules-UVCJPNFC.js}

@@ -51,7 +51,7 @@ import {
   oauth_exports,
   runPrintMode,
   runRpcMode
-} from "./chunk-44PEHPOG.js";
+} from "./chunk-WFJRFQGG.js";
 import {
   AgentSession,
   CURRENT_SESSION_VERSION,
@@ -143,15 +143,15 @@ import {
   withFileMutationQueue,
   wrapRegisteredTool,
   wrapRegisteredTools
-} from "./chunk-IADCPVEI.js";
+} from "./chunk-6FZM46AU.js";
 import "./chunk-CFNASUYO.js";
-import "./chunk-HKINIBP4.js";
+import "./chunk-LFPWHI42.js";
 import {
   VERSION,
   build_exports,
   getAgentDir,
   src_exports
-} from "./chunk-27QCJ2AZ.js";
+} from "./chunk-UPVDERMD.js";
 import "./chunk-5QCJ5DQU.js";
 import {
   compile_exports,

package/dist/bundle/{chunk-IADCPVEI.js → chunk-6FZM46AU.js}

@@ -32,7 +32,7 @@ import {
   typebox_exports,
   validateToolArguments,
   waitForChildProcess
-} from "./chunk-27QCJ2AZ.js";
+} from "./chunk-UPVDERMD.js";
 import {
   cleanupSessionResources,
   registerSessionResourceCleanup
@@ -22195,6 +22195,8 @@ var Input = class {
   constructor() {
     this.value = "";
     this.cursor = 0;
+    // Cursor position in the value
+    this.masked = false;
     this.focused = false;
     this.pasteBuffer = "";
     this.isInPaste = false;
@@ -22202,6 +22204,9 @@ var Input = class {
     this.lastAction = null;
     this.undoStack = new UndoStack();
   }
+  setMasked(masked) {
+    this.masked = masked;
+  }
   getValue() {
     return this.value;
   }
@@ -22494,20 +22499,27 @@ var Input = class {
   }
   invalidate() {
   }
+  displayState() {
+    if (!this.masked) return { value: this.value, cursor: this.cursor };
+    const graphemes = [...segmenter2.segment(this.value)];
+    const beforeCursor = [...segmenter2.segment(this.value.slice(0, this.cursor))];
+    return { value: "\u2022".repeat(graphemes.length), cursor: beforeCursor.length };
+  }
   render(width) {
     const prompt = "> ";
     const availableWidth = width - prompt.length;
     if (availableWidth <= 0) {
       return [prompt];
     }
+    const display = this.displayState();
     let visibleText = "";
-    let cursorDisplay = this.cursor;
-    const totalWidth = visibleWidth(this.value);
+    let cursorDisplay = display.cursor;
+    const totalWidth = visibleWidth(display.value);
     if (totalWidth < availableWidth) {
-      visibleText = this.value;
+      visibleText = display.value;
     } else {
-      const scrollWidth = this.cursor === this.value.length ? availableWidth - 1 : availableWidth;
-      const cursorCol = visibleWidth(this.value.slice(0, this.cursor));
+      const scrollWidth = display.cursor === display.value.length ? availableWidth - 1 : availableWidth;
+      const cursorCol = visibleWidth(display.value.slice(0, display.cursor));
       if (scrollWidth > 0) {
         const halfWidth = Math.floor(scrollWidth / 2);
         let startCol = 0;
@@ -22518,8 +22530,8 @@ var Input = class {
         } else {
           startCol = Math.max(0, cursorCol - halfWidth);
         }
-        visibleText = sliceByColumn(this.value, startCol, scrollWidth, true);
-        const beforeCursor2 = sliceByColumn(this.value, startCol, Math.max(0, cursorCol - startCol), true);
+        visibleText = sliceByColumn(display.value, startCol, scrollWidth, true);
+        const beforeCursor2 = sliceByColumn(display.value, startCol, Math.max(0, cursorCol - startCol), true);
         cursorDisplay = beforeCursor2.length;
       } else {
         visibleText = "";
@@ -44713,7 +44725,7 @@ async function loadExtensionModule(extensionPath) {
     // (file-path aliases would load a second, divergent copy of each package).
     // Also disable tryNative so jiti handles ALL imports (not just the entry point)
     // Node/dev must also share the native AI registry and implementation identities.
-    ...isBunBinary || isBundledCli ? { virtualModules: (await import("./bundled-modules-PWOGKUQQ.js")).VIRTUAL_MODULES, tryNative: false } : {
+    ...isBunBinary || isBundledCli ? { virtualModules: (await import("./bundled-modules-UVCJPNFC.js")).VIRTUAL_MODULES, tryNative: false } : {
       alias: getAliases(),
       virtualModules: {
         "@ponythewhite/base-context-ai": src_exports,
@@ -47922,7 +47934,7 @@ async function resolveWritableKernelVenvDir() {
 function run(command, args, options = {}) {
   return new Promise((resolve17, reject) => {
     const child = spawn6(command, args, {
-      env: process.env,
+      env: options.env ?? process.env,
       stdio: options.stdio ?? "ignore"
     });
     child.on("error", reject);
@@ -48056,7 +48068,10 @@ async function ensureUv(options) {
   }
   reportProgress(options, "\u203A installing uv (one-time)\u2026");
   try {
-    await run("sh", ["-c", UV_INSTALL_COMMAND], { stdio: options.onProgress ? "ignore" : "inherit" });
+    await run("sh", ["-c", UV_INSTALL_COMMAND], {
+      stdio: options.onProgress ? "ignore" : "inherit",
+      env: { ...process.env, UV_INSTALL_DIR: path5.dirname(localUv) }
+    });
   } catch (error) {
     throw new Error(`couldn't install uv from astral.sh; install it yourself: ${UV_INSTALL_COMMAND}, then re-run base-context. ${errorMessage2(error)}`);
   }
@@ -68982,7 +68997,7 @@ import { resolve as resolve15 } from "node:path";
 var BASE_CONTEXT_BUILD_ID_ENV = "BASE_CONTEXT_BUILD_ID";
 var BASE_CONTEXT_LAUNCHER_PATH_ENV = "BASE_CONTEXT_LAUNCHER_PATH";
 function bundledBuildId() {
-  return false ? void 0 : "v1.0.2";
+  return false ? void 0 : "v1.0.5";
 }
 function getDaemonRuntimeIdentity(environment = process.env) {
   const entrypoint = process.argv[1];

package/dist/bundle/{chunk-HKINIBP4.js → chunk-LFPWHI42.js}

@@ -2,7 +2,7 @@ import { createRequire as __piBundleCreateRequire } from 'node:module'; const re
 import {
   appendRotatingLog,
   getAgentLogPath
-} from "./chunk-27QCJ2AZ.js";
+} from "./chunk-UPVDERMD.js";
 import {
   setLogSink,
   stringifyLogEntry

package/dist/bundle/{chunk-27QCJ2AZ.js → chunk-UPVDERMD.js}

@@ -826,17 +826,6 @@ function getDocsPath() {
 function getChangelogPath() {
   return resolve3(join2(getPackageDir(), "CHANGELOG.md"));
 }
-function getInteractiveAssetsDir() {
-  if (isBunBinary) {
-    return join2(getPackageDir(), "assets");
-  }
-  const packageDir = getPackageDir();
-  const srcOrDist = existsSync(join2(packageDir, "src")) ? "src" : "dist";
-  return join2(packageDir, srcOrDist, "modes", "interactive", "assets");
-}
-function getBundledInteractiveAssetPath(name) {
-  return join2(getInteractiveAssetsDir(), name);
-}
 function getBundledSkillsDir() {
   if (isBunBinary) {
     return join2(getPackageDir(), "skills");
@@ -2539,7 +2528,6 @@ export {
   getPackageJsonPath,
   getDocsPath,
   getChangelogPath,
-  getBundledInteractiveAssetPath,
   getBundledSkillsDir,
   PACKAGE_NAME,
   APP_NAME,