poe-code 17.0.38 → 17.0.40

package/packages/safe-bash/dist/chunks/{chunk-QCD3LTEK.js → chunk-BK5SQPI2.js}

@@ -1,7 +1,7 @@
 import {
   YqValueFailure,
   createYqQuerySession
-} from "./chunk-N2T46LIN.js";
+} from "./chunk-TJVZY5W4.js";
 import {
   YqError,
   YqLedger,
@@ -2683,4 +2683,4 @@ export {
   evalSyncYqPrep,
   formatSyncYqYamlLines
 };
-//# sourceMappingURL=chunk-QCD3LTEK.js.map
+//# sourceMappingURL=chunk-BK5SQPI2.js.map

package/packages/safe-bash/dist/chunks/{chunk-5OOPK32K.js → chunk-MH6MCUVD.js}

@@ -11,7 +11,7 @@ import {
   tryProcessFlatJsonChunkSync,
   tryProcessFlatSelectProjectChunkSync,
   tryWriteCompactSync
-} from "./chunk-FVAPSB7V.js";
+} from "./chunk-6YWMJV24.js";
 import {
   Budget,
   JqError,
@@ -3090,4 +3090,4 @@ export {
   createXmlCommands,
   xmlCommands
 };
-//# sourceMappingURL=chunk-5OOPK32K.js.map
+//# sourceMappingURL=chunk-MH6MCUVD.js.map

package/packages/safe-bash/dist/chunks/{chunk-N2T46LIN.js → chunk-TJVZY5W4.js}

@@ -1,7 +1,7 @@
 import {
   Interpreter,
   parse
-} from "./chunk-FVAPSB7V.js";
+} from "./chunk-6YWMJV24.js";
 import {
   Budget,
   Decimal,
@@ -598,4 +598,4 @@ export {
   YqValueFailure,
   createYqQuerySession
 };
-//# sourceMappingURL=chunk-N2T46LIN.js.map
+//# sourceMappingURL=chunk-TJVZY5W4.js.map

package/packages/safe-bash/dist/chunks/{gh-VURXZAIJ.js → gh-JPPD7RUG.js}

@@ -3,8 +3,8 @@ import {
 } from "./chunk-N2BYL2R2.js";
 import {
   createYqQuerySession
-} from "./chunk-N2T46LIN.js";
-import "./chunk-FVAPSB7V.js";
+} from "./chunk-TJVZY5W4.js";
+import "./chunk-6YWMJV24.js";
 import "./chunk-CEWCRI6H.js";
 import "./chunk-44WUNUPV.js";
 import {
@@ -9880,4 +9880,4 @@ export {
   parseRepoSpec,
   settings
 };
-//# sourceMappingURL=gh-VURXZAIJ.js.map
+//# sourceMappingURL=gh-JPPD7RUG.js.map

package/packages/safe-bash/dist/commands/xml/index.browser.js

@@ -7,8 +7,8 @@ import {
   evalSyncXq,
   xmlCommands,
   xmllintCommands
-} from "../../chunks/chunk-5OOPK32K.js";
-import "../../chunks/chunk-FVAPSB7V.js";
+} from "../../chunks/chunk-MH6MCUVD.js";
+import "../../chunks/chunk-6YWMJV24.js";
 import "../../chunks/chunk-CEWCRI6H.js";
 import "../../chunks/chunk-44WUNUPV.js";
 import "../../chunks/chunk-ZGNLZYQ4.js";

package/packages/safe-bash/dist/commands/yq/index.browser.js

@@ -4,10 +4,10 @@ import {
   evalSyncYqPrep,
   formatSyncYqYamlLines,
   yqCommands
-} from "../../chunks/chunk-QCD3LTEK.js";
-import "../../chunks/chunk-N2T46LIN.js";
+} from "../../chunks/chunk-BK5SQPI2.js";
+import "../../chunks/chunk-TJVZY5W4.js";
 import "../../chunks/chunk-4QTSSQKP.js";
-import "../../chunks/chunk-FVAPSB7V.js";
+import "../../chunks/chunk-6YWMJV24.js";
 import "../../chunks/chunk-CEWCRI6H.js";
 import "../../chunks/chunk-44WUNUPV.js";
 import "../../chunks/chunk-LLWAJOZH.js";

package/packages/safe-bash/dist/core.browser.js

@@ -118,17 +118,17 @@ import {
   sedRequirements,
   xmlCommands,
   xmllintCommands
-} from "./chunks/chunk-5OOPK32K.js";
+} from "./chunks/chunk-MH6MCUVD.js";
 import {
   createYqCommand,
   createYqCommands,
   evalSyncYqPrep,
   formatSyncYqYamlLines,
   yqCommands
-} from "./chunks/chunk-QCD3LTEK.js";
-import "./chunks/chunk-N2T46LIN.js";
+} from "./chunks/chunk-BK5SQPI2.js";
+import "./chunks/chunk-TJVZY5W4.js";
 import "./chunks/chunk-4QTSSQKP.js";
-import "./chunks/chunk-FVAPSB7V.js";
+import "./chunks/chunk-6YWMJV24.js";
 import {
   Budget,
   Pattern,
@@ -1353,7 +1353,7 @@ function lazyCommandPlugin(name2, commands, replace = false) {
 }
 
 // packages/safe-bash/src/lazy-gh.ts
-var loadgh = createLazyCommandLoader(() => import("./chunks/gh-VURXZAIJ.js"));
+var loadgh = createLazyCommandLoader(() => import("./chunks/gh-JPPD7RUG.js"));
 var ghMetadata = [
   { name: "gh", description: "Work seamlessly with GitHub from the command line" }
 ];

package/packages/safe-bash/dist/playwright/capability-events.js

@@ -34,8 +34,18 @@ export function observePlaywrightCapabilities(context, registerCleanup, limits)
         history.set(record, { bytes: size, evict });
         if (size > state.maxBytes)
             forget(record);
-        while (history.size > (limits.maxEventEntries ?? Infinity) || bytes > state.maxBytes)
-            forget(history.keys().next().value);
+        while (history.size > (limits.maxEventEntries ?? Infinity) || bytes > state.maxBytes) {
+            // Preserve active navigation metadata ahead of rolling diagnostics, while
+            // still applying the configured byte and entry budgets to every record.
+            let diagnostic;
+            for (const record of history.keys()) {
+                if (!('mainFrameNavigation' in record) || !record.mainFrameNavigation) {
+                    diagnostic = record;
+                    break;
+                }
+            }
+            forget(diagnostic ?? history.keys().next().value);
+        }
     };
     const byteLength = (text) => new TextEncoder().encode(text).byteLength;
     const pageEvents = (page) => {

package/packages/safe-bash/dist/playwright/controller.js

@@ -969,12 +969,7 @@ export function createPlaywrightController(options = {}) {
                 return { sections };
             }
             sections.push(...await downloadSections(session));
-            if (invocation.writeArtifact) {
-                const consoleLink = await flushPlaywrightConsole(session.lease.context, page, { ...(session.configuration ? { configuration: session.configuration } : {}), writeArtifact });
-                if (consoleLink)
-                    sections.push({ title: 'Events', content: `- New console entries: ${consoleLink}` });
-            }
-            const pageSectionIndex = sections.length;
+            let pageSectionIndex = sections.length;
             if (snapshot !== 'none' && (page.frames || page.ariaSnapshot || page._snapshotForAI || page.ariaSnapshotJSON || session.lease?.captureSnapshotJSON)) {
                 const snapshotOptions = { timeout: sessionSnapshotTimeout(session), ...(session.configuration?.snapshot?.boxes === undefined ? {} : { boxes: session.configuration.snapshot.boxes }), ...(session.lease?.captureSnapshotReferences ? { captureReferences: session.lease.captureSnapshotReferences } : {}) };
                 if (parsed.command === 'snapshot') {
@@ -986,18 +981,24 @@ export function createPlaywrightController(options = {}) {
                     }
                     if (parsed.options.boxes)
                         snapshotOptions.boxes = true;
-                    if (parsed.args[0])
-                        snapshotOptions.root = await resolveTarget(session, parsed.args[0]);
                 }
                 const captureWithHook = async (format, capture) => {
                     let active = true;
-                    const recapture = async () => {
+                    let pending = Promise.resolve();
+                    const recapture = () => {
                         if (!active)
-                            throw new Error('Playwright snapshot hook has completed');
-                        check();
-                        const value = await capture();
-                        check();
-                        return value;
+                            return Promise.reject(new Error('Playwright snapshot hook has completed'));
+                        const operation = pending.then(async () => {
+                            check();
+                            if (parsed.command === 'snapshot' && parsed.args[0])
+                                snapshotOptions.root = await resolveTarget(session, parsed.args[0]);
+                            const value = await capture();
+                            check();
+                            return value;
+                        });
+                        // Observe failures immediately, and serialize all admitted captures.
+                        pending = operation.then(() => { }, () => { });
+                        return operation;
                     };
                     try {
                         const initial = await recapture();
@@ -1011,6 +1012,7 @@ export function createPlaywrightController(options = {}) {
                     }
                     finally {
                         active = false;
+                        await pending;
                     }
                 };
                 retained = false;
@@ -1019,24 +1021,30 @@ export function createPlaywrightController(options = {}) {
                     check();
                     retained = parsed.command === 'snapshot';
                     sections.push({ title: 'Snapshot', content: { json: tree }, codeframe: 'json' });
-                    return { sections };
                 }
-                retained = false;
-                const text = await captureWithHook('yaml', () => session.snapshot.capture(page, local.signal, snapshotOptions));
-                check();
-                retained = parsed.command === 'snapshot';
-                if (filename !== undefined || snapshot === 'file' && invocation.writeArtifact) {
-                    const target = filename ?? capabilityArtifactName('page', 'yml', session.configuration);
-                    const bytes = new TextEncoder().encode(text);
-                    if (bytes.byteLength > maxArtifactBytes)
-                        throw new PlaywrightResourceLimitError('Artifact byte limit exceeded');
-                    if (!invocation.writeArtifact)
-                        throw new Error('Artifact byte destination unsupported');
-                    await writeArtifact(bytes, target);
-                    sections.push({ title: 'Snapshot', content: `- [Snapshot](${target})` });
+                else {
+                    retained = false;
+                    const text = await captureWithHook('yaml', () => session.snapshot.capture(page, local.signal, snapshotOptions));
+                    check();
+                    retained = parsed.command === 'snapshot';
+                    if (filename !== undefined || snapshot === 'file' && invocation.writeArtifact) {
+                        const target = filename ?? capabilityArtifactName('page', 'yml', session.configuration);
+                        const bytes = new TextEncoder().encode(text);
+                        if (bytes.byteLength > maxArtifactBytes)
+                            throw new PlaywrightResourceLimitError('Artifact byte limit exceeded');
+                        if (!invocation.writeArtifact)
+                            throw new Error('Artifact byte destination unsupported');
+                        await writeArtifact(bytes, target);
+                        sections.push({ title: 'Snapshot', content: `- [Snapshot](${target})` });
+                    }
+                    else
+                        sections.push({ title: 'Snapshot', content: text.trimEnd(), codeframe: 'yaml' });
                 }
-                else
-                    sections.push({ title: 'Snapshot', content: text.trimEnd(), codeframe: 'yaml' });
+            }
+            if (invocation.writeArtifact) {
+                const consoleLink = await flushPlaywrightConsole(session.lease.context, page, { ...(session.configuration ? { configuration: session.configuration } : {}), writeArtifact });
+                if (consoleLink)
+                    sections.splice(pageSectionIndex++, 0, { title: 'Events', content: `- New console entries: ${consoleLink}` });
             }
             if (parsed.command !== 'snapshot' || !parsed.json) {
                 const title = await page.title?.();

package/packages/superintendent/dist/mcp.js

@@ -17109,6 +17109,30 @@ var init_authorization_state = __esm({
   }
 });
 
+// packages/mcp-oauth/src/client/authorization-error.ts
+var authorizationErrorBrand, OAuthAuthorizationError;
+var init_authorization_error = __esm({
+  "packages/mcp-oauth/src/client/authorization-error.ts"() {
+    "use strict";
+    authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+    OAuthAuthorizationError = class extends Error {
+      constructor(error2, errorDescription) {
+        super(`OAuth authorization failed: ${error2} \u2014 ${errorDescription}`);
+        this.error = error2;
+        this.errorDescription = errorDescription;
+        this.name = "OAuthAuthorizationError";
+        Object.defineProperty(this, authorizationErrorBrand, { value: true });
+      }
+      error;
+      errorDescription;
+      /** Recognize errors from separately bundled copies of this package. */
+      static is(value2) {
+        return value2 instanceof Error && Object.getOwnPropertyDescriptor(value2, authorizationErrorBrand)?.value === true;
+      }
+    };
+  }
+});
+
 // packages/mcp-oauth/src/client/loopback-authorization.ts
 import http from "node:http";
 function snapshotLoopbackAuthorizationOptions(options3) {
@@ -17374,28 +17398,14 @@ function buildSuccessPage(landingPage) {
     "</div></body></html>"
   ].join("");
 }
-var authorizationErrorBrand, oauthCallbackParameters, OAuthAuthorizationError;
+var oauthCallbackParameters;
 var init_loopback_authorization = __esm({
   "packages/mcp-oauth/src/client/loopback-authorization.ts"() {
     "use strict";
     init_authorization_state();
-    authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
+    init_authorization_error();
+    init_authorization_error();
     oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
-    OAuthAuthorizationError = class extends Error {
-      constructor(error2, errorDescription) {
-        super(`OAuth authorization failed: ${error2} \u2014 ${errorDescription}`);
-        this.error = error2;
-        this.errorDescription = errorDescription;
-        this.name = "OAuthAuthorizationError";
-        Object.defineProperty(this, authorizationErrorBrand, { value: true });
-      }
-      error;
-      errorDescription;
-      /** Recognize errors from separately bundled copies of this package. */
-      static is(value2) {
-        return value2 instanceof Error && Object.getOwnPropertyDescriptor(value2, authorizationErrorBrand)?.value === true;
-      }
-    };
   }
 });
 
@@ -19907,7 +19917,6 @@ var init_http_response2 = __esm({
 });
 
 // packages/tiny-mcp-client/src/oauth-discovery.ts
-import { isIP as isIP2 } from "node:net";
 function defaultOAuthMetadataFetch(input2, init) {
   return fetch(input2, init);
 }
@@ -19922,7 +19931,7 @@ function normalizeHostname2(hostname2) {
 }
 function isLoopbackHostname2(hostname2) {
   const normalizedHostname = normalizeHostname2(hostname2);
-  return normalizedHostname === "localhost" || normalizedHostname === "::1" || normalizedHostname === "[::1]" || isIP2(normalizedHostname) === 4 && normalizedHostname.startsWith("127.");
+  return normalizedHostname === "localhost" || normalizedHostname === "::1" || normalizedHostname === "[::1]" || normalizedHostname.startsWith("127.") && normalizedHostname.split(".").length === 4 && normalizedHostname.split(".").every((part) => part.length > 0 && [...part].every((char) => char >= "0" && char <= "9") && Number(part) <= 255);
 }
 function assertSecureUrl2(url, label) {
   if (url.username !== "" || url.password !== "" || url.href.includes("#")) {
@@ -223060,7 +223069,7 @@ var init_poe_agent_plugin_system_prompt = __esm({
 });
 
 // packages/poe-agent/src/plugins/poe-agent-plugin-web.ts
-import { isIP as isIP3 } from "node:net";
+import { isIP as isIP2 } from "node:net";
 import TurndownService from "turndown";
 async function defaultSearchWeb(query, fetchFn, signal) {
   const url = new URL("https://api.duckduckgo.com/");
@@ -223142,10 +223151,10 @@ function isNonPublicHost(hostname2) {
   if (host2 === "localhost" || host2.endsWith(".localhost")) {
     return true;
   }
-  if (isIP3(host2) === 4) {
+  if (isIP2(host2) === 4) {
     return isNonPublicIpv4(host2);
   }
-  if (isIP3(host2) === 6) {
+  if (isIP2(host2) === 6) {
     return isNonPublicIpv6(host2);
   }
   return false;