poe-code 17.0.38 → 17.0.40

package/dist/{node-PE54ZYII.js → node-KLOI6VAC.js}

@@ -1,11 +1,11 @@
 import {
   Shell
-} from "./chunk-CKB7K5UU.js";
+} from "./chunk-QVJA76GB.js";
 import "./chunk-IK3EFB2F.js";
 import "./chunk-EKKIZII7.js";
-import "./chunk-UKB4PH3Q.js";
+import "./chunk-HKQ7ZHZA.js";
 import "./chunk-SGBTWSJI.js";
-import "./chunk-NBD2QUZU.js";
+import "./chunk-4DP4GOVF.js";
 import "./chunk-ZRTXOGMR.js";
 import "./chunk-BJFELBZS.js";
 import "./chunk-YEPD65CG.js";
@@ -18,4 +18,4 @@ import "./chunk-EF3O5H2F.js";
 export {
   Shell
 };
-//# sourceMappingURL=node-PE54ZYII.js.map
+//# sourceMappingURL=node-KLOI6VAC.js.map

package/dist/{poe-agent-VQTC5F2H.js → poe-agent-3TNLVOGW.js}

@@ -2,9 +2,9 @@ import {
   poeAgentService,
   provider,
   spawnPoeAgentWithAcp
-} from "./chunk-C5DKZUMH.js";
-import "./chunk-OIIB3M4A.js";
-import "./chunk-AARUTDF3.js";
+} from "./chunk-WGSSARPT.js";
+import "./chunk-NT4FTHR4.js";
+import "./chunk-OY52WCN2.js";
 import "./chunk-YBCIRQCC.js";
 import "./chunk-EVMLCUGX.js";
 import "./chunk-EF3O5H2F.js";
@@ -13,4 +13,4 @@ export {
   provider,
   spawnPoeAgentWithAcp
 };
-//# sourceMappingURL=poe-agent-VQTC5F2H.js.map
+//# sourceMappingURL=poe-agent-3TNLVOGW.js.map

package/dist/{program-7KSXQLUA.js → program-FEKNPTII.js}

@@ -1,11 +1,11 @@
 import {
   spawnPoeAgentWithAcp
-} from "./chunk-C5DKZUMH.js";
+} from "./chunk-WGSSARPT.js";
 import {
   combineMutationObservers,
   createConfigurePayload,
   createMutationReporter
-} from "./chunk-5LEKGHKB.js";
+} from "./chunk-BN5KYLDI.js";
 import {
   GASLIGHT_CONFIG_EXAMPLE,
   appendExperimentJournalEntry,
@@ -78,7 +78,7 @@ import {
   traceReaders,
   validateResolvedPromptVars,
   writeFrontmatter
-} from "./chunk-ESDPNFK7.js";
+} from "./chunk-7T6WKXT5.js";
 import {
   checkAuth,
   createCliEnvironment,
@@ -100,7 +100,7 @@ import {
   spawn as spawn2,
   spawnAutonomous,
   usesLegacyPoeCredentialMirror
-} from "./chunk-SGMFFL57.js";
+} from "./chunk-2GGWYM5C.js";
 import {
   announceAssumedScope,
   apiKeyFlagDescription,
@@ -133,7 +133,7 @@ import {
   resolveSpawnTarget,
   shlexQuote,
   warnApiKeyFlag
-} from "./chunk-7LYL6372.js";
+} from "./chunk-IDRDSIOP.js";
 import {
   ApprovalDeclinedError,
   LOG_LEVELS,
@@ -179,7 +179,7 @@ import {
   throwValidationErrors,
   validateServices,
   writeErrorReport
-} from "./chunk-OIIB3M4A.js";
+} from "./chunk-NT4FTHR4.js";
 import {
   ErrorLogger
 } from "./chunk-NO7WNABG.js";
@@ -290,7 +290,7 @@ import {
   validate,
   verifyGhProject,
   writeScope
-} from "./chunk-AARUTDF3.js";
+} from "./chunk-OY52WCN2.js";
 import {
   UserError as UserError2,
   isUserError as isUserError2
@@ -7636,7 +7636,7 @@ function registerAgentCommand(program, container) {
       }
       const requestedModel = model;
       await assertModelIsInCatalog(container, requestedModel, apiKey);
-      const { createAgentSession } = await import("./src-O7RLS5KL.js");
+      const { createAgentSession } = await import("./src-SMC2KSW6.js");
       session = await createAgentSession({
         model: requestedModel,
         apiKey,
@@ -7760,7 +7760,7 @@ function registerBashCommand(program) {
     });
     try {
       if (ui) await once(ui, "open");
-      const { MemoryFileSystem, RealFileSystem } = await import("./src-U6FPUTZY.js");
+      const { MemoryFileSystem, RealFileSystem } = await import("./src-KFIZ3ZHC.js");
       const totals = { upload: 0, download: 0 };
       const result = await runBash({
         ...dryRun ? { dryRun: true } : {},
@@ -10069,7 +10069,7 @@ async function executeTest(program, container, service, options = {}) {
     return runtimeEnvPromise;
   } : void 0;
   if (useIsolated) {
-    const { ensureIsolatedConfigForService } = await import("./ensure-isolated-config-XXVV7SPC.js");
+    const { ensureIsolatedConfigForService } = await import("./ensure-isolated-config-DP3OWAO5.js");
     await ensureIsolatedConfigForService({
       container,
       adapter,
@@ -24070,4 +24070,4 @@ function suppressCommanderOutput(command) {
 export {
   createProgram
 };
-//# sourceMappingURL=program-7KSXQLUA.js.map
+//# sourceMappingURL=program-FEKNPTII.js.map

package/dist/providers/poe-agent.js

@@ -220703,6 +220703,30 @@ var init_authorization_state = __esm({
   }
 });
 
+// packages/mcp-oauth/src/client/authorization-error.ts
+var authorizationErrorBrand, OAuthAuthorizationError;
+var init_authorization_error = __esm({
+  "packages/mcp-oauth/src/client/authorization-error.ts"() {
+    "use strict";
+    authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+    OAuthAuthorizationError = class extends Error {
+      constructor(error2, errorDescription) {
+        super(`OAuth authorization failed: ${error2} \u2014 ${errorDescription}`);
+        this.error = error2;
+        this.errorDescription = errorDescription;
+        this.name = "OAuthAuthorizationError";
+        Object.defineProperty(this, authorizationErrorBrand, { value: true });
+      }
+      error;
+      errorDescription;
+      /** Recognize errors from separately bundled copies of this package. */
+      static is(value2) {
+        return value2 instanceof Error && Object.getOwnPropertyDescriptor(value2, authorizationErrorBrand)?.value === true;
+      }
+    };
+  }
+});
+
 // packages/mcp-oauth/src/client/loopback-authorization.ts
 import http from "node:http";
 function snapshotLoopbackAuthorizationOptions(options3) {
@@ -220968,28 +220992,14 @@ function buildSuccessPage(landingPage) {
     "</div></body></html>"
   ].join("");
 }
-var authorizationErrorBrand, oauthCallbackParameters, OAuthAuthorizationError;
+var oauthCallbackParameters;
 var init_loopback_authorization = __esm({
   "packages/mcp-oauth/src/client/loopback-authorization.ts"() {
     "use strict";
     init_authorization_state();
-    authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+    init_authorization_error();
+    init_authorization_error();
     oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
-    OAuthAuthorizationError = class extends Error {
-      constructor(error2, errorDescription) {
-        super(`OAuth authorization failed: ${error2} \u2014 ${errorDescription}`);
-        this.error = error2;
-        this.errorDescription = errorDescription;
-        this.name = "OAuthAuthorizationError";
-        Object.defineProperty(this, authorizationErrorBrand, { value: true });
-      }
-      error;
-      errorDescription;
-      /** Recognize errors from separately bundled copies of this package. */
-      static is(value2) {
-        return value2 instanceof Error && Object.getOwnPropertyDescriptor(value2, authorizationErrorBrand)?.value === true;
-      }
-    };
   }
 });
 
@@ -222949,7 +222959,6 @@ var init_headers = __esm({
 });
 
 // packages/tiny-mcp-client/src/oauth-discovery.ts
-import { isIP as isIP3 } from "node:net";
 function defaultOAuthMetadataFetch(input2, init) {
   return fetch(input2, init);
 }
@@ -222964,7 +222973,7 @@ function normalizeHostname2(hostname2) {
 }
 function isLoopbackHostname2(hostname2) {
   const normalizedHostname = normalizeHostname2(hostname2);
-  return normalizedHostname === "localhost" || normalizedHostname === "::1" || normalizedHostname === "[::1]" || isIP3(normalizedHostname) === 4 && normalizedHostname.startsWith("127.");
+  return normalizedHostname === "localhost" || normalizedHostname === "::1" || normalizedHostname === "[::1]" || normalizedHostname.startsWith("127.") && normalizedHostname.split(".").length === 4 && normalizedHostname.split(".").every((part) => part.length > 0 && [...part].every((char) => char >= "0" && char <= "9") && Number(part) <= 255);
 }
 function assertSecureUrl2(url, label) {
   if (url.username !== "" || url.password !== "" || url.href.includes("#")) {

package/dist/safe-bash-worker-entry.js

@@ -1,6 +1,6 @@
 import {
   createAgentCommands
-} from "./chunk-Q5UFHZBH.js";
+} from "./chunk-VNSPEKB3.js";
 import {
   filesystemOptionsIndex
 } from "./chunk-IK3EFB2F.js";
@@ -9,9 +9,9 @@ import {
   Shell,
   portableTrapExtension,
   value_exports
-} from "./chunk-UKB4PH3Q.js";
+} from "./chunk-HKQ7ZHZA.js";
 import "./chunk-SGBTWSJI.js";
-import "./chunk-NBD2QUZU.js";
+import "./chunk-4DP4GOVF.js";
 import {
   command_exports,
   contracts_exports

package/dist/safe-bash.js

@@ -19,7 +19,7 @@ import {
   nodeCommands,
   nodeLimits,
   src_exports
-} from "./chunk-MP2ZN45M.js";
+} from "./chunk-4ZBE6ANW.js";
 import {
   CurlError,
   MountFileSystem,
@@ -190,10 +190,10 @@ import {
   validatePath,
   wkhtmltopdfCommands,
   xzCommands
-} from "./chunk-VPER5WBJ.js";
+} from "./chunk-Z2WKAT24.js";
 import {
   Shell
-} from "./chunk-CKB7K5UU.js";
+} from "./chunk-QVJA76GB.js";
 import "./chunk-2GUQP2P5.js";
 import "./chunk-AQYHOUEH.js";
 import {
@@ -258,7 +258,7 @@ import {
   tsortCommands,
   xxdCommands,
   yesCommands
-} from "./chunk-Q5UFHZBH.js";
+} from "./chunk-VNSPEKB3.js";
 import "./chunk-IK3EFB2F.js";
 import "./chunk-EKKIZII7.js";
 import {
@@ -443,11 +443,11 @@ import {
   xmlCommands,
   xmllintCommands,
   yqCommands
-} from "./chunk-UKB4PH3Q.js";
+} from "./chunk-HKQ7ZHZA.js";
 import "./chunk-SGBTWSJI.js";
 import {
   defaultJqLimits
-} from "./chunk-NBD2QUZU.js";
+} from "./chunk-4DP4GOVF.js";
 import "./chunk-ZRTXOGMR.js";
 import "./chunk-BJFELBZS.js";
 import "./chunk-YEPD65CG.js";

package/dist/{search-DRUQQER6.js → search-QRQVPOLJ.js}

@@ -2,9 +2,9 @@ import {
   Shell,
   createBoundedRegexProvider,
   createSearchCommands
-} from "./chunk-UKB4PH3Q.js";
+} from "./chunk-HKQ7ZHZA.js";
 import "./chunk-SGBTWSJI.js";
-import "./chunk-NBD2QUZU.js";
+import "./chunk-4DP4GOVF.js";
 import "./chunk-ZRTXOGMR.js";
 import "./chunk-BJFELBZS.js";
 import "./chunk-YEPD65CG.js";
@@ -18,4 +18,4 @@ export {
   createBoundedRegexProvider,
   createSearchCommands
 };
-//# sourceMappingURL=search-DRUQQER6.js.map
+//# sourceMappingURL=search-QRQVPOLJ.js.map

package/dist/shared/safe-js/chunks/{chunk-T76YLX4V.js → chunk-CATT3NXL.js}

@@ -2,7 +2,7 @@ import {
   McpError,
   connectMcpTransport,
   normalizeMcpOptions
-} from "./chunk-IMBIHHDW.js";
+} from "./chunk-L3QK6FH4.js";
 import {
   declareHostOperation,
   runResources
@@ -402,4 +402,4 @@ function isPlainObjectRecord(value) {
 export {
   makeMcpModule
 };
-//# sourceMappingURL=chunk-T76YLX4V.js.map
+//# sourceMappingURL=chunk-CATT3NXL.js.map

package/dist/shared/safe-js/chunks/{chunk-IMBIHHDW.js → chunk-L3QK6FH4.js}

@@ -3728,22 +3728,8 @@ function getOwnEntry(record2, key2) {
   return Object.prototype.hasOwnProperty.call(record2, key2) ? record2[key2] : void 0;
 }
 
-// packages/mcp-oauth/src/client/loopback-authorization.ts
+// packages/mcp-oauth/src/client/authorization-error.ts
 var authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
-var oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
-function snapshotLoopbackAuthorizationOptions(options) {
-  return {
-    ...options,
-    openBrowser: options.openBrowser?.bind(options),
-    readLine: options.readLine?.bind(options),
-    createServer: options.createServer?.bind(options),
-    callbackPath: options.callbackPath,
-    redirectUri: options.redirectUri,
-    signal: options.signal,
-    timeoutMs: options.timeoutMs,
-    landingPage: options.landingPage === void 0 ? void 0 : { ...options.landingPage, title: options.landingPage.title, body: options.landingPage.body }
-  };
-}
 var OAuthAuthorizationError = class extends Error {
   constructor(error, errorDescription) {
     super(`OAuth authorization failed: ${error} \u2014 ${errorDescription}`);
@@ -3759,6 +3745,22 @@ var OAuthAuthorizationError = class extends Error {
     return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
   }
 };
+
+// packages/mcp-oauth/src/client/loopback-authorization.ts
+var oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
+function snapshotLoopbackAuthorizationOptions(options) {
+  return {
+    ...options,
+    openBrowser: options.openBrowser?.bind(options),
+    readLine: options.readLine?.bind(options),
+    createServer: options.createServer?.bind(options),
+    callbackPath: options.callbackPath,
+    redirectUri: options.redirectUri,
+    signal: options.signal,
+    timeoutMs: options.timeoutMs,
+    landingPage: options.landingPage === void 0 ? void 0 : { ...options.landingPage, title: options.landingPage.title, body: options.landingPage.body }
+  };
+}
 async function createLoopbackAuthorizationSession(options = {}) {
   options = snapshotLoopbackAuthorizationOptions(options);
   options.signal?.throwIfAborted();
@@ -6465,7 +6467,6 @@ function createParameterHeaders(definitions, argumentsValue) {
 }
 
 // packages/tiny-mcp-client/src/oauth-discovery.ts
-import { isIP as isIP2 } from "node:net";
 var metadataErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.tiny-mcp-client.OAuthMetadataError");
 var OAuthMetadataError = class extends Error {
   constructor(phase, message, status) {
@@ -6495,7 +6496,7 @@ function normalizeHostname2(hostname2) {
 }
 function isLoopbackHostname2(hostname2) {
   const normalizedHostname = normalizeHostname2(hostname2);
-  return normalizedHostname === "localhost" || normalizedHostname === "::1" || normalizedHostname === "[::1]" || isIP2(normalizedHostname) === 4 && normalizedHostname.startsWith("127.");
+  return normalizedHostname === "localhost" || normalizedHostname === "::1" || normalizedHostname === "[::1]" || normalizedHostname.startsWith("127.") && normalizedHostname.split(".").length === 4 && normalizedHostname.split(".").every((part) => part.length > 0 && [...part].every((char) => char >= "0" && char <= "9") && Number(part) <= 255);
 }
 function assertSecureUrl2(url, label) {
   if (url.username !== "" || url.password !== "" || url.href.includes("#")) {
@@ -9835,4 +9836,4 @@ CC-BY-4.0. See https://creativecommons.org/licenses/by/4.0/legalcode for
 the full license text.
 
 */
-//# sourceMappingURL=chunk-IMBIHHDW.js.map
+//# sourceMappingURL=chunk-L3QK6FH4.js.map

package/dist/shared/safe-js/chunks/{cli-runtime-7QFSS3VJ.js → cli-runtime-UGTDRU7A.js}

@@ -15,7 +15,7 @@ import {
 } from "./chunk-H3BR7NX5.js";
 import {
   parseMcpConfig
-} from "./chunk-IMBIHHDW.js";
+} from "./chunk-L3QK6FH4.js";
 import {
   lint
 } from "./chunk-DWPZ5JJ6.js";
@@ -303,7 +303,7 @@ async function runScriptFile(filepath, parsed, options) {
     import("./dump-4UZZPTQQ.js"),
     import("./runtime-modules-AN5YUL5L.js"),
     import("./fs-OOT33KEV.js"),
-    import("./mcp-Q7KNMDFG.js")
+    import("./mcp-MZNG3TYT.js")
   ]);
   const loaded = loadExecutableSource(filepath, await options.readFile(filepath, "utf8"));
   const meta = {
@@ -732,4 +732,4 @@ export {
   exitCodeForError,
   runCli
 };
-//# sourceMappingURL=cli-runtime-7QFSS3VJ.js.map
+//# sourceMappingURL=cli-runtime-UGTDRU7A.js.map

package/dist/shared/safe-js/chunks/{mcp-Q7KNMDFG.js → mcp-MZNG3TYT.js}

@@ -1,7 +1,7 @@
 import {
   makeMcpModule
-} from "./chunk-T76YLX4V.js";
-import "./chunk-IMBIHHDW.js";
+} from "./chunk-CATT3NXL.js";
+import "./chunk-L3QK6FH4.js";
 import "./chunk-WRXXCOTK.js";
 import "./chunk-C4SONX4C.js";
 import "./chunk-CLHORQQR.js";
@@ -9,4 +9,4 @@ import "./chunk-4YIDX44G.js";
 export {
   makeMcpModule
 };
-//# sourceMappingURL=mcp-Q7KNMDFG.js.map
+//# sourceMappingURL=mcp-MZNG3TYT.js.map

package/dist/shared/safe-js/cli.js

@@ -13,7 +13,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 async function runCli(argv, options = {}) {
   if (!argv.includes("--help") && !argv.includes("-h")) {
-    const runtime = await import("./chunks/cli-runtime-7QFSS3VJ.js");
+    const runtime = await import("./chunks/cli-runtime-UGTDRU7A.js");
     return runtime.runCli(argv, options, createUsage());
   }
   const brokenPipe = createBrokenPipeState();
@@ -32,7 +32,7 @@ async function runCli(argv, options = {}) {
         stderr.write(`${error instanceof Error ? error.message : String(error)}
 `);
         if (brokenPipe.closed) return 0;
-        const { exitCodeForError } = await import("./chunks/cli-runtime-7QFSS3VJ.js");
+        const { exitCodeForError } = await import("./chunks/cli-runtime-UGTDRU7A.js");
         return exitCodeForError(error);
       }
     }

package/dist/shared/safe-js/index.js

@@ -1,6 +1,6 @@
 import {
   makeMcpModule
-} from "./chunks/chunk-T76YLX4V.js";
+} from "./chunks/chunk-CATT3NXL.js";
 import {
   AgentSpawnError,
   EnvAccessError,
@@ -24,7 +24,7 @@ import {
 } from "./chunks/chunk-H3BR7NX5.js";
 import {
   parseMcpConfig
-} from "./chunks/chunk-IMBIHHDW.js";
+} from "./chunks/chunk-L3QK6FH4.js";
 import {
   inspectSnapshotMigration,
   migrateSnapshot,

package/dist/{spawn-ESHW36HT.js → spawn-JVTZA4J2.js}

@@ -1,15 +1,15 @@
 import {
   spawn
-} from "./chunk-SGMFFL57.js";
-import "./chunk-7LYL6372.js";
-import "./chunk-OIIB3M4A.js";
+} from "./chunk-2GGWYM5C.js";
+import "./chunk-IDRDSIOP.js";
+import "./chunk-NT4FTHR4.js";
 import "./chunk-NO7WNABG.js";
 import "./chunk-OADWN624.js";
-import "./chunk-AARUTDF3.js";
+import "./chunk-OY52WCN2.js";
 import "./chunk-YBCIRQCC.js";
 import "./chunk-EVMLCUGX.js";
 import "./chunk-EF3O5H2F.js";
 export {
   spawn
 };
-//# sourceMappingURL=spawn-ESHW36HT.js.map
+//# sourceMappingURL=spawn-JVTZA4J2.js.map

package/dist/{src-U6FPUTZY.js → src-KFIZ3ZHC.js}

@@ -18,7 +18,7 @@ import {
   encodeCopySource,
   nodeCommands,
   nodeLimits
-} from "./chunk-MP2ZN45M.js";
+} from "./chunk-4ZBE6ANW.js";
 import {
   CurlError,
   MountFileSystem,
@@ -189,10 +189,10 @@ import {
   validatePath,
   wkhtmltopdfCommands,
   xzCommands
-} from "./chunk-VPER5WBJ.js";
+} from "./chunk-Z2WKAT24.js";
 import {
   Shell
-} from "./chunk-CKB7K5UU.js";
+} from "./chunk-QVJA76GB.js";
 import "./chunk-2GUQP2P5.js";
 import "./chunk-AQYHOUEH.js";
 import {
@@ -257,7 +257,7 @@ import {
   tsortCommands,
   xxdCommands,
   yesCommands
-} from "./chunk-Q5UFHZBH.js";
+} from "./chunk-VNSPEKB3.js";
 import "./chunk-IK3EFB2F.js";
 import "./chunk-EKKIZII7.js";
 import {
@@ -442,11 +442,11 @@ import {
   xmlCommands,
   xmllintCommands,
   yqCommands
-} from "./chunk-UKB4PH3Q.js";
+} from "./chunk-HKQ7ZHZA.js";
 import "./chunk-SGBTWSJI.js";
 import {
   defaultJqLimits
-} from "./chunk-NBD2QUZU.js";
+} from "./chunk-4DP4GOVF.js";
 import "./chunk-ZRTXOGMR.js";
 import "./chunk-BJFELBZS.js";
 import "./chunk-YEPD65CG.js";
@@ -892,4 +892,4 @@ export {
   yesCommands,
   yqCommands
 };
-//# sourceMappingURL=src-U6FPUTZY.js.map
+//# sourceMappingURL=src-KFIZ3ZHC.js.map

package/dist/{src-O7RLS5KL.js → src-SMC2KSW6.js}

@@ -33,13 +33,13 @@ import {
   resolvePluginsFromConfig,
   resolveProvider,
   searchFileSystem
-} from "./chunk-ROLXI55L.js";
+} from "./chunk-K4MLQWL6.js";
 import {
   PluginConfigError,
   parseNullablePluginConfigEntries,
   parsePluginConfigEntries,
   parsePluginConfigEntry
-} from "./chunk-AARUTDF3.js";
+} from "./chunk-OY52WCN2.js";
 import "./chunk-YBCIRQCC.js";
 import "./chunk-EVMLCUGX.js";
 import "./chunk-EF3O5H2F.js";
@@ -83,4 +83,4 @@ export {
   poe_agent_plugin_system_prompt_default as systemPromptPlugin,
   poe_agent_plugin_web_default as webPlugin
 };
-//# sourceMappingURL=src-O7RLS5KL.js.map
+//# sourceMappingURL=src-SMC2KSW6.js.map

package/package.json

@@ -584,7 +584,7 @@
     "@poe-code/xlsx-ast": "0.0.1",
     "@poe-code/spreadsheet-format-dbf": "0.0.1"
   },
-  "version": "17.0.38",
+  "version": "17.0.40",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/poe-platform/poe-code.git"

package/packages/mcp-oauth/dist/client/authorization-error.js

@@ -0,0 +1,16 @@
+const authorizationErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+export class OAuthAuthorizationError extends Error {
+    error;
+    errorDescription;
+    /** Recognize errors from separately bundled copies of this package. */
+    static is(value) {
+        return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
+    }
+    constructor(error, errorDescription) {
+        super(`OAuth authorization failed: ${error} — ${errorDescription}`);
+        this.error = error;
+        this.errorDescription = errorDescription;
+        this.name = "OAuthAuthorizationError";
+        Object.defineProperty(this, authorizationErrorBrand, { value: true });
+    }
+}

package/packages/mcp-oauth/dist/client/loopback-authorization.js

@@ -1,6 +1,7 @@
 import http from "node:http";
 import { parseAuthorizationState } from "./authorization-state.js";
-const authorizationErrorBrand = Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+import { OAuthAuthorizationError } from "./authorization-error.js";
+export { OAuthAuthorizationError } from "./authorization-error.js";
 const oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
 /** Capture declared configuration regardless of property enumerability. */
 export function snapshotLoopbackAuthorizationOptions(options) {
@@ -9,21 +10,6 @@ export function snapshotLoopbackAuthorizationOptions(options) {
         landingPage: options.landingPage === undefined ? undefined : { ...options.landingPage, title: options.landingPage.title, body: options.landingPage.body } };
 }
 /** Authorization callback denial, retaining the provider diagnostic for host observers. */
-export class OAuthAuthorizationError extends Error {
-    error;
-    errorDescription;
-    /** Recognize errors from separately bundled copies of this package. */
-    static is(value) {
-        return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
-    }
-    constructor(error, errorDescription) {
-        super(`OAuth authorization failed: ${error} — ${errorDescription}`);
-        this.error = error;
-        this.errorDescription = errorDescription;
-        this.name = "OAuthAuthorizationError";
-        Object.defineProperty(this, authorizationErrorBrand, { value: true });
-    }
-}
 export async function createLoopbackAuthorizationSession(options = {}) {
     options = snapshotLoopbackAuthorizationOptions(options);
     options.signal?.throwIfAborted();

package/packages/mcp-oauth/dist/index.browser.js

@@ -0,0 +1,18 @@
+export { snapshotOAuthPersistenceOptions } from "./client/persistence-options.js";
+export { OAuthAuthorizationError } from "./client/authorization-error.js";
+export { OAuthError } from "./client/token-endpoint.js";
+export { canonicalizeResourceIndicator } from "./resource-indicator.js";
+export { readBoundedResponseText } from "./http-response.js";
+export { fetchMcpResponse } from "./http-fetch.js";
+/** Remote hosts own credentials and authorization; desktop defaults are unavailable. */
+export function createOAuthClientProvider(options) {
+    if ("provider" in options && options.provider !== undefined)
+        return options.provider;
+    throw new Error("Worker MCP requires a host-owned OAuth provider or authenticated fetch; desktop OAuth is unavailable");
+}
+export function createDefaultOAuthClientProvider() {
+    throw new Error("Desktop OAuth is unavailable in Worker MCP");
+}
+export function createAuthStoreSessionStore() {
+    throw new Error("Desktop OAuth persistence is unavailable in Worker MCP");
+}

package/packages/safe-bash/dist/chunks/{chunk-FVAPSB7V.js → chunk-6YWMJV24.js}

@@ -704,6 +704,10 @@ async function* readChunks(source, budget) {
       const _p = budget.tickSync();
       if (_p) await _p;
     }
+    if (chunk.byteLength === 0) {
+      const pending = budget.ensureFreshWindow();
+      if (pending) await pending;
+    }
     budget.inputBytes += chunk.byteLength;
     if (budget.inputBytes > budget.limits.maxInputBytes) throw new JqLimitError("maxInputBytes");
     let offset = 0;
@@ -1055,6 +1059,10 @@ async function* jsonValues(source, budget, options = {}) {
         break;
       }
       const rawChunk = res.value;
+      if (rawChunk.byteLength === 0) {
+        const pending = budget.ensureFreshWindow();
+        if (pending) await pending;
+      }
       const pt = budget.tickSync();
       if (pt) await pt;
       budget.inputBytes += rawChunk.byteLength;
@@ -5138,4 +5146,4 @@ export {
   moduleProgram,
   parse
 };
-//# sourceMappingURL=chunk-FVAPSB7V.js.map
+//# sourceMappingURL=chunk-6YWMJV24.js.map