poe-code 17.0.39 → 17.0.40

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (54) hide show
  1. package/README.md +1 -1
  2. package/dist/agent.js +0 -3
  3. package/dist/{chunk-SGMFFL57.js → chunk-2GGWYM5C.js} +5 -5
  4. package/dist/{chunk-NBD2QUZU.js → chunk-4DP4GOVF.js} +9 -1
  5. package/dist/{chunk-MP2ZN45M.js → chunk-4ZBE6ANW.js} +6 -6
  6. package/dist/{chunk-ESDPNFK7.js → chunk-7T6WKXT5.js} +6 -6
  7. package/dist/{chunk-5LEKGHKB.js → chunk-BN5KYLDI.js} +3 -3
  8. package/dist/{chunk-UKB4PH3Q.js → chunk-HKQ7ZHZA.js} +2 -2
  9. package/dist/{chunk-7LYL6372.js → chunk-IDRDSIOP.js} +3 -3
  10. package/dist/{chunk-JRZIA6G4.js → chunk-JVMHBAZW.js} +2 -2
  11. package/dist/{chunk-ROLXI55L.js → chunk-K4MLQWL6.js} +3 -3
  12. package/dist/{chunk-OIIB3M4A.js → chunk-NT4FTHR4.js} +3 -3
  13. package/dist/{chunk-AARUTDF3.js → chunk-OY52WCN2.js} +19 -18
  14. package/dist/{chunk-CKB7K5UU.js → chunk-QVJA76GB.js} +2 -2
  15. package/dist/{chunk-Q5UFHZBH.js → chunk-VNSPEKB3.js} +4 -4
  16. package/dist/{chunk-C5DKZUMH.js → chunk-WGSSARPT.js} +5 -5
  17. package/dist/{chunk-VPER5WBJ.js → chunk-Z2WKAT24.js} +4 -4
  18. package/dist/cli-entry.js +1 -1
  19. package/dist/{core-E763OJ6K.js → core-IC47O6D5.js} +5 -5
  20. package/dist/{ensure-isolated-config-XXVV7SPC.js → ensure-isolated-config-DP3OWAO5.js} +5 -5
  21. package/dist/{gh-TBXFLS7Q.js → gh-4NV3GGL7.js} +2 -2
  22. package/dist/index.js +8 -8
  23. package/dist/metafile.json +1 -1
  24. package/dist/{node-PE54ZYII.js → node-KLOI6VAC.js} +4 -4
  25. package/dist/{poe-agent-VQTC5F2H.js → poe-agent-3TNLVOGW.js} +4 -4
  26. package/dist/{program-7KSXQLUA.js → program-FEKNPTII.js} +11 -11
  27. package/dist/providers/poe-agent.js +28 -19
  28. package/dist/safe-bash-worker-entry.js +3 -3
  29. package/dist/safe-bash.js +6 -6
  30. package/dist/{search-DRUQQER6.js → search-QRQVPOLJ.js} +3 -3
  31. package/dist/shared/safe-js/chunks/{chunk-T76YLX4V.js → chunk-CATT3NXL.js} +2 -2
  32. package/dist/shared/safe-js/chunks/{chunk-IMBIHHDW.js → chunk-L3QK6FH4.js} +19 -18
  33. package/dist/shared/safe-js/chunks/{cli-runtime-7QFSS3VJ.js → cli-runtime-UGTDRU7A.js} +3 -3
  34. package/dist/shared/safe-js/chunks/{mcp-Q7KNMDFG.js → mcp-MZNG3TYT.js} +3 -3
  35. package/dist/shared/safe-js/cli.js +2 -2
  36. package/dist/shared/safe-js/index.js +2 -2
  37. package/dist/{spawn-ESHW36HT.js → spawn-JVTZA4J2.js} +5 -5
  38. package/dist/{src-U6FPUTZY.js → src-KFIZ3ZHC.js} +7 -7
  39. package/dist/{src-O7RLS5KL.js → src-SMC2KSW6.js} +3 -3
  40. package/package.json +1 -1
  41. package/packages/mcp-oauth/dist/client/authorization-error.js +16 -0
  42. package/packages/mcp-oauth/dist/client/loopback-authorization.js +2 -16
  43. package/packages/mcp-oauth/dist/index.browser.js +18 -0
  44. package/packages/safe-bash/dist/chunks/{chunk-FVAPSB7V.js → chunk-6YWMJV24.js} +9 -1
  45. package/packages/safe-bash/dist/chunks/{chunk-QCD3LTEK.js → chunk-BK5SQPI2.js} +2 -2
  46. package/packages/safe-bash/dist/chunks/{chunk-5OOPK32K.js → chunk-MH6MCUVD.js} +2 -2
  47. package/packages/safe-bash/dist/chunks/{chunk-N2T46LIN.js → chunk-TJVZY5W4.js} +2 -2
  48. package/packages/safe-bash/dist/chunks/{gh-VURXZAIJ.js → gh-JPPD7RUG.js} +3 -3
  49. package/packages/safe-bash/dist/commands/xml/index.browser.js +2 -2
  50. package/packages/safe-bash/dist/commands/yq/index.browser.js +3 -3
  51. package/packages/safe-bash/dist/core.browser.js +5 -5
  52. package/packages/superintendent/dist/mcp.js +31 -22
  53. package/packages/tiny-mcp-client/dist/index.browser.js +6689 -0
  54. package/packages/tiny-mcp-client/dist/index.js +18 -17
package/README.md CHANGED
@@ -164,7 +164,7 @@ poe-code models --search claude
164
164
 
165
165
  Safe Bash hosts can use `onSnapshot` to inspect navigation response headers and recapture browser snapshots before output, with page URL and title refreshed afterward. See the [snapshot hook contract](packages/safe-bash/src/contracts/playwright-snapshot.md).
166
166
 
167
- Workspace safe-bash browser snapshots have no byte limit; legacy `maxSnapshotBytes` settings are ignored. Command workspaces consistently expose `<name>Commands()`, `create<Name>Commands()`, `create<Name>Command()`, and `<Name>CommandsOptions`, with optional configuration. Shell `maxOutputBytes` limits cover command file writes as well as standard output. Workspace Git accepts piped or redirected input for `mktree`, `mktag`, `stripspace`, `hash-object --stdin`, `apply`, and `commit -F -`, preserves stdin for other invocations, honors request-scoped Git environment overrides, and supports quiet init/commit output.
167
+ The Safe Bash MCP export selects remote-only discovery, commands and resources in Workers and browser bundlers; hosts supply fetch/auth, and Workers enable `nodejs_compat`. Workspace safe-bash browser snapshots have no byte limit; legacy `maxSnapshotBytes` settings are ignored. Command workspaces consistently expose `<name>Commands()`, `create<Name>Commands()`, `create<Name>Command()`, and `<Name>CommandsOptions`, with optional configuration. Shell `maxOutputBytes` limits cover command file writes as well as standard output. Workspace Git accepts piped or redirected input for `mktree`, `mktag`, `stripspace`, `hash-object --stdin`, `apply`, and `commit -F -`, preserves stdin for other invocations, honors request-scoped Git environment overrides, and supports quiet init/commit output.
168
168
 
169
169
  SafeJS, safe-bash, the SafeJS harness, PowerPoint, and Pandoc are workspace tools and are not included in the published `poe-code` package. Workspace SafeJS budgets are unlimited unless explicitly configured. Workspace ssconvert `createEngine()` accepts omitted or partial options with built-in formats, locale `C` and timezone `UTC`, with injected `en_US` and UTF-8 locale variants also supported; formula and record budgets are unlimited by default; public `recalculateWorkbook` is asynchronous, and recalculation and solver work yield so timer-driven cancellation can run. The `bash` and `harness` commands, SafeJS binaries, sandbox SDK subpaths, `poe-code/pptx`, and `poe-code/pandoc` are unavailable in `poe-code`. Terminal automation is available through the separate `terminal-pilot` and `terminal-pilot-mcp` packages. Workspace safe-bash core and shell imports install a portable `Buffer` when the host has none, including Workers without Node compatibility. Workspace safe-bash exposes portable `ffmpeg` and `ffprobe` through its explicit `commands/ffmpeg` plugin. All private command plugins and their command factories are also exported from portable safe-bash `core`; optional spreadsheet, PDF, media, office and Git implementations load on first execution, with explicit command/family selection and a full optional profile. Workspace safe-bash includes `fd` for virtual file discovery with regex/glob patterns, metadata filters, ignore files, and literal command execution. Its opt-in `commands/git` plugin runs the Rust Git engine against safe-fs, including Workers without Node compatibility. Workspace safe-bash arithmetic supports array element reads and writes in expansions, commands, C-style loops, and `let`. Workspace safe-bash text, search, structured-query, directory, calendar, system-information, substitution, table/stream, browser policy/structure, and MCP resource budgets are unlimited unless explicitly configured. MCP artifacts use Web Crypto for integrity checks; parsing them requires `await parseRemoteMcpArtifact(value)`. Its Node Shell supports worker-backed `timeout -k` / `--kill-after` escalation for default agent commands; custom worker factories and finite shared interpreter quotas have explicit admission requirements. Its `mdq` command extracts Markdown sections and elements through shell pipelines with a bounded mdq v0.10.0 profile. The YAML/TOML `yq` reader defaults source-line, alias-reference, expanded-node, value-byte, and work budgets to `Infinity`; hosts can configure finite quotas before query selection. Its `diff` reads top-level character/FIFO inputs to EOF, supports `/dev/null` creation/deletion patches, accepts `--color`, and preserves explicit context widths across bare format selectors; conflicting explicit widths are rejected. Its `uniq` refuses aliased input/output files, `cut` preserves delimiters between adjacent ranges, and `chmod -r` removes read permissions. Its `printf` returns status 1 for invalid formats and options while retaining partial output. Its `awk` splits default fields on space, tab, and newline, preserving carriage returns in CRLF input. Its opt-in Worker preset also bounds archive input and ZIP input memory. Its `mkdir -m` accepts octal and symbolic permission modes. Its `diff` compares binary files, preserves non-UTF-8 text bytes, and follows symlinks unless `--no-dereference` selects link-target comparison. Its `patch` command requires a filesystem with atomic ancestry verification for mutation; dry-run remains available on other adapters. Named compression requires atomic identity- and ancestry-bound source removal unless `--keep` or stdout output is selected. Its `[[ … ]]` supports file identity, age, special-file, mode and nameref predicates; ownership checks in `[[ … ]]`, `test` and `[` accept explicit `capabilities.predicateIdentity` (`effectiveUid`, `effectiveGid`). Workspace Pandoc can execute trusted local Lua `Str` filters through an explicitly configured reader and its JavaScript Lua VM, including inline constructors and replacement lists. Safe Bash exposes `pandocCommands()` for document conversion through its main, core, and command entrypoints. Pandoc supports the `markdown` alias, XLSX headers and formulas, styled PDF text and aligned tables, with opt-in resource limits.
170
170
 
package/dist/agent.js CHANGED
@@ -189229,9 +189229,6 @@ import {
189229
189229
  jwtVerify
189230
189230
  } from "jose";
189231
189231
 
189232
- // packages/tiny-mcp-client/src/oauth-discovery.ts
189233
- import { isIP as isIP3 } from "node:net";
189234
-
189235
189232
  // packages/tiny-mcp-client/src/internal.ts
189236
189233
  function isValidParamsMetadata(params) {
189237
189234
  const property2 = isObjectRecord6(params) ? Object.getOwnPropertyDescriptor(params, "_meta") : void 0;
@@ -5,14 +5,14 @@ import {
5
5
  resolveActiveProviderForService,
6
6
  resolveIsolatedEnvDetails,
7
7
  resolveMergedDocument
8
- } from "./chunk-7LYL6372.js";
8
+ } from "./chunk-IDRDSIOP.js";
9
9
  import {
10
10
  createWorktree,
11
11
  listWorktrees,
12
12
  reconcileWorktree,
13
13
  removeWorktree,
14
14
  updateWorktreeEntry
15
- } from "./chunk-OIIB3M4A.js";
15
+ } from "./chunk-NT4FTHR4.js";
16
16
  import {
17
17
  ErrorLogger
18
18
  } from "./chunk-NO7WNABG.js";
@@ -52,7 +52,7 @@ import {
52
52
  spawnLog,
53
53
  spawnStreaming,
54
54
  usageCapture
55
- } from "./chunk-AARUTDF3.js";
55
+ } from "./chunk-OY52WCN2.js";
56
56
  import {
57
57
  UserError
58
58
  } from "./chunk-YBCIRQCC.js";
@@ -2784,7 +2784,7 @@ function createNodeWorktreeDeps() {
2784
2784
  };
2785
2785
  }
2786
2786
  async function defaultSpawnAgent(service, options) {
2787
- const { spawn: spawn3 } = await import("./spawn-ESHW36HT.js");
2787
+ const { spawn: spawn3 } = await import("./spawn-JVTZA4J2.js");
2788
2788
  return await spawn3(service, options).result;
2789
2789
  }
2790
2790
 
@@ -3357,4 +3357,4 @@ export {
3357
3357
  removeManagedWorktree,
3358
3358
  spawn2 as spawn
3359
3359
  };
3360
- //# sourceMappingURL=chunk-SGMFFL57.js.map
3360
+ //# sourceMappingURL=chunk-2GGWYM5C.js.map
@@ -1413,6 +1413,10 @@ async function* readChunks(source, budget) {
1413
1413
  const _p = budget.tickSync();
1414
1414
  if (_p) await _p;
1415
1415
  }
1416
+ if (chunk.byteLength === 0) {
1417
+ const pending = budget.ensureFreshWindow();
1418
+ if (pending) await pending;
1419
+ }
1416
1420
  budget.inputBytes += chunk.byteLength;
1417
1421
  if (budget.inputBytes > budget.limits.maxInputBytes) throw new JqLimitError("maxInputBytes");
1418
1422
  let offset = 0;
@@ -1764,6 +1768,10 @@ async function* jsonValues(source, budget, options = {}) {
1764
1768
  break;
1765
1769
  }
1766
1770
  const rawChunk = res.value;
1771
+ if (rawChunk.byteLength === 0) {
1772
+ const pending = budget.ensureFreshWindow();
1773
+ if (pending) await pending;
1774
+ }
1767
1775
  const pt = budget.tickSync();
1768
1776
  if (pt) await pt;
1769
1777
  budget.inputBytes += rawChunk.byteLength;
@@ -9083,4 +9091,4 @@ export {
9083
9091
  YqValueFailure,
9084
9092
  createYqQuerySession
9085
9093
  };
9086
- //# sourceMappingURL=chunk-NBD2QUZU.js.map
9094
+ //# sourceMappingURL=chunk-4DP4GOVF.js.map
@@ -174,10 +174,10 @@ import {
174
174
  withSignal,
175
175
  wkhtmltopdfCommands,
176
176
  xzCommands
177
- } from "./chunk-VPER5WBJ.js";
177
+ } from "./chunk-Z2WKAT24.js";
178
178
  import {
179
179
  Shell
180
- } from "./chunk-CKB7K5UU.js";
180
+ } from "./chunk-QVJA76GB.js";
181
181
  import {
182
182
  agentCommands,
183
183
  applyPatchCommands,
@@ -240,7 +240,7 @@ import {
240
240
  tsortCommands,
241
241
  xxdCommands,
242
242
  yesCommands
243
- } from "./chunk-Q5UFHZBH.js";
243
+ } from "./chunk-VNSPEKB3.js";
244
244
  import {
245
245
  DEFAULT_ARCHIVE_LIMITS,
246
246
  EreLedger,
@@ -425,10 +425,10 @@ import {
425
425
  xmllintCommands,
426
426
  yield_exports,
427
427
  yqCommands
428
- } from "./chunk-UKB4PH3Q.js";
428
+ } from "./chunk-HKQ7ZHZA.js";
429
429
  import {
430
430
  defaultJqLimits
431
- } from "./chunk-NBD2QUZU.js";
431
+ } from "./chunk-4DP4GOVF.js";
432
432
  import {
433
433
  contracts_exports,
434
434
  errors_exports
@@ -3252,4 +3252,4 @@ export {
3252
3252
  createNodeFsBridge,
3253
3253
  src_exports
3254
3254
  };
3255
- //# sourceMappingURL=chunk-MP2ZN45M.js.map
3255
+ //# sourceMappingURL=chunk-4ZBE6ANW.js.map
@@ -3,14 +3,14 @@ import {
3
3
  resolveWorkspace,
4
4
  runWithOptionalWorktree,
5
5
  spawn as spawn2
6
- } from "./chunk-SGMFFL57.js";
6
+ } from "./chunk-2GGWYM5C.js";
7
7
  import {
8
8
  announceAssumedScope,
9
9
  createExecutionResources,
10
10
  requireInteractiveStdin,
11
11
  resolveAssumedDefaultAgent,
12
12
  resolveCommandFlags
13
- } from "./chunk-7LYL6372.js";
13
+ } from "./chunk-IDRDSIOP.js";
14
14
  import {
15
15
  UserError,
16
16
  defineCommand,
@@ -20,7 +20,7 @@ import {
20
20
  runLoop,
21
21
  runMCP,
22
22
  suggest
23
- } from "./chunk-OIIB3M4A.js";
23
+ } from "./chunk-NT4FTHR4.js";
24
24
  import {
25
25
  OperationCancelledError,
26
26
  SilentError,
@@ -68,7 +68,7 @@ import {
68
68
  usageCapture,
69
69
  validate,
70
70
  verifyGhProject
71
- } from "./chunk-AARUTDF3.js";
71
+ } from "./chunk-OY52WCN2.js";
72
72
  import {
73
73
  UserError as UserError2
74
74
  } from "./chunk-YBCIRQCC.js";
@@ -13927,7 +13927,7 @@ function createBashRunner(loadHost) {
13927
13927
 
13928
13928
  // packages/safe-bash/src/execution.node.ts
13929
13929
  var runBash = createBashRunner(async () => {
13930
- const [core, node] = await Promise.all([import("./core-E763OJ6K.js"), import("./node-PE54ZYII.js")]);
13930
+ const [core, node] = await Promise.all([import("./core-IC47O6D5.js"), import("./node-KLOI6VAC.js")]);
13931
13931
  return { ...core, Shell: node.Shell };
13932
13932
  });
13933
13933
 
@@ -22703,4 +22703,4 @@ export {
22703
22703
  runGaslightDaemon2 as runGaslightDaemon,
22704
22704
  runGaslight2 as runGaslight
22705
22705
  };
22706
- //# sourceMappingURL=chunk-ESDPNFK7.js.map
22706
+ //# sourceMappingURL=chunk-7T6WKXT5.js.map
@@ -3,13 +3,13 @@ import {
3
3
  parseProviderShapeBaseUrls,
4
4
  resolveAgentDefinition,
5
5
  resolveNonEmpty
6
- } from "./chunk-7LYL6372.js";
6
+ } from "./chunk-IDRDSIOP.js";
7
7
  import {
8
8
  ValidationError
9
9
  } from "./chunk-OADWN624.js";
10
10
  import {
11
11
  POE_PROVIDER_ID
12
- } from "./chunk-AARUTDF3.js";
12
+ } from "./chunk-OY52WCN2.js";
13
13
 
14
14
  // src/services/mutation-events.ts
15
15
  function createMutationReporter(logger) {
@@ -152,4 +152,4 @@ export {
152
152
  combineMutationObservers,
153
153
  createConfigurePayload
154
154
  };
155
- //# sourceMappingURL=chunk-5LEKGHKB.js.map
155
+ //# sourceMappingURL=chunk-BN5KYLDI.js.map
@@ -45,7 +45,7 @@ import {
45
45
  tryWriteCompactSync,
46
46
  utf8ByteLength as utf8ByteLength2,
47
47
  wellFormed
48
- } from "./chunk-NBD2QUZU.js";
48
+ } from "./chunk-4DP4GOVF.js";
49
49
  import {
50
50
  basename,
51
51
  command_exports,
@@ -152472,4 +152472,4 @@ export {
152472
152472
  * This data is free software under GNU LGPL version 2.1 or later.
152473
152473
  * Distributed without any warranty; see COPYING.LESSER and README.
152474
152474
  */
152475
- //# sourceMappingURL=chunk-UKB4PH3Q.js.map
152475
+ //# sourceMappingURL=chunk-HKQ7ZHZA.js.map
@@ -1,6 +1,6 @@
1
1
  import {
2
2
  knownConfigScopes
3
- } from "./chunk-OIIB3M4A.js";
3
+ } from "./chunk-NT4FTHR4.js";
4
4
  import {
5
5
  OperationCancelledError,
6
6
  ValidationError
@@ -23,7 +23,7 @@ import {
23
23
  resolveAgentId,
24
24
  resolveApiShape,
25
25
  resolveSpawnableAgent
26
- } from "./chunk-AARUTDF3.js";
26
+ } from "./chunk-OY52WCN2.js";
27
27
  import {
28
28
  UserError
29
29
  } from "./chunk-YBCIRQCC.js";
@@ -1447,4 +1447,4 @@ export {
1447
1447
  announceAssumedScope,
1448
1448
  shlexQuote
1449
1449
  };
1450
- //# sourceMappingURL=chunk-7LYL6372.js.map
1450
+ //# sourceMappingURL=chunk-IDRDSIOP.js.map
@@ -14,7 +14,7 @@ function applyPoeTheme() {
14
14
  // src/cli-entry.ts
15
15
  async function main() {
16
16
  const [{ createProgram }, { createCliMain }] = await Promise.all([
17
- import("./program-7KSXQLUA.js"),
17
+ import("./program-FEKNPTII.js"),
18
18
  import("./bootstrap-FLTAN3OR.js")
19
19
  ]);
20
20
  applyPoeTheme();
@@ -42,4 +42,4 @@ export {
42
42
  main,
43
43
  isCliInvocation
44
44
  };
45
- //# sourceMappingURL=chunk-JRZIA6G4.js.map
45
+ //# sourceMappingURL=chunk-JVMHBAZW.js.map
@@ -7,7 +7,7 @@ import {
7
7
  discoverSkillsAsync,
8
8
  parsePluginConfigEntries,
9
9
  runCommand
10
- } from "./chunk-AARUTDF3.js";
10
+ } from "./chunk-OY52WCN2.js";
11
11
  import {
12
12
  UserError
13
13
  } from "./chunk-YBCIRQCC.js";
@@ -1808,7 +1808,7 @@ async function globFileSystem(options, fs) {
1808
1808
  }
1809
1809
  async function searchFileSystem(options, fs) {
1810
1810
  options.signal.throwIfAborted();
1811
- const { Shell, createSearchCommands, createBoundedRegexProvider } = await import("./search-DRUQQER6.js");
1811
+ const { Shell, createSearchCommands, createBoundedRegexProvider } = await import("./search-QRQVPOLJ.js");
1812
1812
  const provider = createBoundedRegexProvider();
1813
1813
  const stat = await fs.stat(options.path, { signal: options.signal });
1814
1814
  const cwd = stat.type === "directory" ? options.path : path3.posix.dirname(options.path);
@@ -7821,4 +7821,4 @@ export {
7821
7821
  poe_agent_plugin_skills_default,
7822
7822
  poe_agent_plugin_spawn_default
7823
7823
  };
7824
- //# sourceMappingURL=chunk-ROLXI55L.js.map
7824
+ //# sourceMappingURL=chunk-K4MLQWL6.js.map
@@ -61,7 +61,7 @@ import {
61
61
  validate,
62
62
  validateParameterHeaders,
63
63
  withJsonSchema
64
- } from "./chunk-AARUTDF3.js";
64
+ } from "./chunk-OY52WCN2.js";
65
65
  import {
66
66
  UserError
67
67
  } from "./chunk-YBCIRQCC.js";
@@ -4419,7 +4419,7 @@ async function executePoeAgent(agentSpec, input, createAgent) {
4419
4419
  skillsPlugin,
4420
4420
  systemPromptPlugin,
4421
4421
  webPlugin
4422
- } = await import("./src-O7RLS5KL.js");
4422
+ } = await import("./src-SMC2KSW6.js");
4423
4423
  return (createAgent ?? agent)().model(model).use(openaiResponsesPlugin()).use(openaiChatCompletionsPlugin()).use(systemPromptPlugin()).use(environmentPlugin(input.cwd)).use(filesPlugin({ cwd: input.cwd })).use(shellPlugin({ cwd: input.cwd })).use(webPlugin()).use(compactionPlugin()).use(skillsPlugin({ definitions: {} })).use(policyPlugin({ mode: readPolicyMode(input.mode) })).mcp(input.mcpServers ?? {}).run(input.prompt, {
4424
4424
  cwd: input.cwd,
4425
4425
  signal: input.signal,
@@ -16416,4 +16416,4 @@ export {
16416
16416
  knownConfigScopes,
16417
16417
  deleteConfig
16418
16418
  };
16419
- //# sourceMappingURL=chunk-OIIB3M4A.js.map
16419
+ //# sourceMappingURL=chunk-NT4FTHR4.js.map
@@ -26312,22 +26312,8 @@ function getOwnEntry14(record2, key2) {
26312
26312
  return Object.prototype.hasOwnProperty.call(record2, key2) ? record2[key2] : void 0;
26313
26313
  }
26314
26314
 
26315
- // packages/mcp-oauth/src/client/loopback-authorization.ts
26315
+ // packages/mcp-oauth/src/client/authorization-error.ts
26316
26316
  var authorizationErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.mcp-oauth.OAuthAuthorizationError");
26317
- var oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
26318
- function snapshotLoopbackAuthorizationOptions(options) {
26319
- return {
26320
- ...options,
26321
- openBrowser: options.openBrowser?.bind(options),
26322
- readLine: options.readLine?.bind(options),
26323
- createServer: options.createServer?.bind(options),
26324
- callbackPath: options.callbackPath,
26325
- redirectUri: options.redirectUri,
26326
- signal: options.signal,
26327
- timeoutMs: options.timeoutMs,
26328
- landingPage: options.landingPage === void 0 ? void 0 : { ...options.landingPage, title: options.landingPage.title, body: options.landingPage.body }
26329
- };
26330
- }
26331
26317
  var OAuthAuthorizationError = class extends Error {
26332
26318
  constructor(error, errorDescription) {
26333
26319
  super(`OAuth authorization failed: ${error} \u2014 ${errorDescription}`);
@@ -26343,6 +26329,22 @@ var OAuthAuthorizationError = class extends Error {
26343
26329
  return value instanceof Error && Object.getOwnPropertyDescriptor(value, authorizationErrorBrand)?.value === true;
26344
26330
  }
26345
26331
  };
26332
+
26333
+ // packages/mcp-oauth/src/client/loopback-authorization.ts
26334
+ var oauthCallbackParameters = ["code", "state", "iss", "error", "error_description", "error_uri"];
26335
+ function snapshotLoopbackAuthorizationOptions(options) {
26336
+ return {
26337
+ ...options,
26338
+ openBrowser: options.openBrowser?.bind(options),
26339
+ readLine: options.readLine?.bind(options),
26340
+ createServer: options.createServer?.bind(options),
26341
+ callbackPath: options.callbackPath,
26342
+ redirectUri: options.redirectUri,
26343
+ signal: options.signal,
26344
+ timeoutMs: options.timeoutMs,
26345
+ landingPage: options.landingPage === void 0 ? void 0 : { ...options.landingPage, title: options.landingPage.title, body: options.landingPage.body }
26346
+ };
26347
+ }
26346
26348
  async function createLoopbackAuthorizationSession(options = {}) {
26347
26349
  options = snapshotLoopbackAuthorizationOptions(options);
26348
26350
  options.signal?.throwIfAborted();
@@ -28421,7 +28423,6 @@ function validateParameterHeaders(definitions, argumentsValue, headers) {
28421
28423
  }
28422
28424
 
28423
28425
  // packages/tiny-mcp-client/src/oauth-discovery.ts
28424
- import { isIP as isIP2 } from "node:net";
28425
28426
  var metadataErrorBrand = /* @__PURE__ */ Symbol.for("poe-platform.tiny-mcp-client.OAuthMetadataError");
28426
28427
  var OAuthMetadataError = class extends Error {
28427
28428
  constructor(phase, message, status) {
@@ -28451,7 +28452,7 @@ function normalizeHostname2(hostname2) {
28451
28452
  }
28452
28453
  function isLoopbackHostname2(hostname2) {
28453
28454
  const normalizedHostname = normalizeHostname2(hostname2);
28454
- return normalizedHostname === "localhost" || normalizedHostname === "::1" || normalizedHostname === "[::1]" || isIP2(normalizedHostname) === 4 && normalizedHostname.startsWith("127.");
28455
+ return normalizedHostname === "localhost" || normalizedHostname === "::1" || normalizedHostname === "[::1]" || normalizedHostname.startsWith("127.") && normalizedHostname.split(".").length === 4 && normalizedHostname.split(".").every((part) => part.length > 0 && [...part].every((char) => char >= "0" && char <= "9") && Number(part) <= 255);
28455
28456
  }
28456
28457
  function assertSecureUrl2(url, label) {
28457
28458
  if (url.username !== "" || url.password !== "" || url.href.includes("#")) {
@@ -31695,4 +31696,4 @@ CC-BY-4.0. See https://creativecommons.org/licenses/by/4.0/legalcode for
31695
31696
  the full license text.
31696
31697
 
31697
31698
  */
31698
- //# sourceMappingURL=chunk-AARUTDF3.js.map
31699
+ //# sourceMappingURL=chunk-OY52WCN2.js.map
@@ -10,7 +10,7 @@ import {
10
10
  shellDescriptorAdmissions,
11
11
  signalName,
12
12
  workerRuntimeContexts
13
- } from "./chunk-UKB4PH3Q.js";
13
+ } from "./chunk-HKQ7ZHZA.js";
14
14
  import {
15
15
  contracts_exports
16
16
  } from "./chunk-ZRTXOGMR.js";
@@ -315,4 +315,4 @@ var Shell2 = class extends Shell {
315
315
  export {
316
316
  Shell2 as Shell
317
317
  };
318
- //# sourceMappingURL=chunk-CKB7K5UU.js.map
318
+ //# sourceMappingURL=chunk-QVJA76GB.js.map
@@ -111,7 +111,7 @@ import {
111
111
  withRegexSession,
112
112
  write,
113
113
  yield_exports
114
- } from "./chunk-UKB4PH3Q.js";
114
+ } from "./chunk-HKQ7ZHZA.js";
115
115
  import {
116
116
  Budget,
117
117
  Pattern,
@@ -121,7 +121,7 @@ import {
121
121
  trySubstitutePairSync,
122
122
  trySubstitutePairToBufferSync,
123
123
  trySubstituteSync
124
- } from "./chunk-NBD2QUZU.js";
124
+ } from "./chunk-4DP4GOVF.js";
125
125
  import {
126
126
  command_exports,
127
127
  command_requirements_exports,
@@ -229,7 +229,7 @@ function lazyCommandPlugin(name, commands, replace = false) {
229
229
  }
230
230
 
231
231
  // packages/safe-bash/src/lazy-gh.ts
232
- var loadgh = createLazyCommandLoader(() => import("./gh-TBXFLS7Q.js"));
232
+ var loadgh = createLazyCommandLoader(() => import("./gh-4NV3GGL7.js"));
233
233
  var ghMetadata = [
234
234
  { name: "gh", description: "Work seamlessly with GitHub from the command line" }
235
235
  ];
@@ -27833,4 +27833,4 @@ export {
27833
27833
  createAgentCommands,
27834
27834
  agentCommands
27835
27835
  };
27836
- //# sourceMappingURL=chunk-Q5UFHZBH.js.map
27836
+ //# sourceMappingURL=chunk-VNSPEKB3.js.map
@@ -1,6 +1,6 @@
1
1
  import {
2
2
  agentConfigScope
3
- } from "./chunk-OIIB3M4A.js";
3
+ } from "./chunk-NT4FTHR4.js";
4
4
  import {
5
5
  AcpClient,
6
6
  createConfigStore,
@@ -8,7 +8,7 @@ import {
8
8
  resolveConfigPath,
9
9
  resolveProjectConfigPath,
10
10
  runMutations
11
- } from "./chunk-AARUTDF3.js";
11
+ } from "./chunk-OY52WCN2.js";
12
12
 
13
13
  // src/providers/poe-agent.ts
14
14
  import fsPromises from "node:fs/promises";
@@ -561,7 +561,7 @@ function createInMemoryAcpTransport(options) {
561
561
  }
562
562
  if (method === "session/new") {
563
563
  const request = params;
564
- const { createAgentSession } = await import("./src-O7RLS5KL.js");
564
+ const { createAgentSession } = await import("./src-SMC2KSW6.js");
565
565
  const session = await createAgentSession({
566
566
  model: options.model,
567
567
  cwd: request.cwd || options.cwd,
@@ -647,7 +647,7 @@ async function runPoeAgentAcpLifecycle(options) {
647
647
  let sessionId = "";
648
648
  let assistantText = "";
649
649
  const pluginsConfig = await loadConfiguredPlugins(options);
650
- const { createAgentSessionStore } = await import("./src-O7RLS5KL.js");
650
+ const { createAgentSessionStore } = await import("./src-SMC2KSW6.js");
651
651
  const sessionStore = createAgentSessionStore({ homeDir: options.homeDir, fs: options.fs });
652
652
  const persistedSession = options.resumeThreadId ? await sessionStore.load(options.resumeThreadId) : void 0;
653
653
  if (options.resumeThreadId && !persistedSession) {
@@ -756,4 +756,4 @@ export {
756
756
  poeAgentService,
757
757
  provider
758
758
  };
759
- //# sourceMappingURL=chunk-C5DKZUMH.js.map
759
+ //# sourceMappingURL=chunk-WGSSARPT.js.map
@@ -71,7 +71,7 @@ import {
71
71
  tsortCommands,
72
72
  xxdCommands,
73
73
  yesCommands
74
- } from "./chunk-Q5UFHZBH.js";
74
+ } from "./chunk-VNSPEKB3.js";
75
75
  import {
76
76
  DEFAULT_ARCHIVE_LIMITS,
77
77
  DecodedBudget,
@@ -279,10 +279,10 @@ import {
279
279
  xmllintCommands,
280
280
  yield_exports,
281
281
  yqCommands
282
- } from "./chunk-UKB4PH3Q.js";
282
+ } from "./chunk-HKQ7ZHZA.js";
283
283
  import {
284
284
  defaultJqLimits
285
- } from "./chunk-NBD2QUZU.js";
285
+ } from "./chunk-4DP4GOVF.js";
286
286
  import {
287
287
  command_exports,
288
288
  command_requirements_exports,
@@ -29413,4 +29413,4 @@ buffer/index.js:
29413
29413
  * @license MIT
29414
29414
  *)
29415
29415
  */
29416
- //# sourceMappingURL=chunk-VPER5WBJ.js.map
29416
+ //# sourceMappingURL=chunk-Z2WKAT24.js.map
package/dist/cli-entry.js CHANGED
@@ -1,7 +1,7 @@
1
1
  import {
2
2
  isCliInvocation,
3
3
  main
4
- } from "./chunk-JRZIA6G4.js";
4
+ } from "./chunk-JVMHBAZW.js";
5
5
  import "./chunk-EVMLCUGX.js";
6
6
  import "./chunk-EF3O5H2F.js";
7
7
  export {
@@ -168,7 +168,7 @@ import {
168
168
  validatePath,
169
169
  wkhtmltopdfCommands,
170
170
  xzCommands
171
- } from "./chunk-VPER5WBJ.js";
171
+ } from "./chunk-Z2WKAT24.js";
172
172
  import "./chunk-2GUQP2P5.js";
173
173
  import "./chunk-AQYHOUEH.js";
174
174
  import {
@@ -233,7 +233,7 @@ import {
233
233
  tsortCommands,
234
234
  xxdCommands,
235
235
  yesCommands
236
- } from "./chunk-Q5UFHZBH.js";
236
+ } from "./chunk-VNSPEKB3.js";
237
237
  import "./chunk-EKKIZII7.js";
238
238
  import {
239
239
  DEFAULT_ARCHIVE_LIMITS,
@@ -418,11 +418,11 @@ import {
418
418
  xmlCommands,
419
419
  xmllintCommands,
420
420
  yqCommands
421
- } from "./chunk-UKB4PH3Q.js";
421
+ } from "./chunk-HKQ7ZHZA.js";
422
422
  import "./chunk-SGBTWSJI.js";
423
423
  import {
424
424
  defaultJqLimits
425
- } from "./chunk-NBD2QUZU.js";
425
+ } from "./chunk-4DP4GOVF.js";
426
426
  import "./chunk-ZRTXOGMR.js";
427
427
  import "./chunk-BJFELBZS.js";
428
428
  import "./chunk-YEPD65CG.js";
@@ -851,4 +851,4 @@ export {
851
851
  yesCommands,
852
852
  yqCommands
853
853
  };
854
- //# sourceMappingURL=core-E763OJ6K.js.map
854
+ //# sourceMappingURL=core-IC47O6D5.js.map
@@ -1,7 +1,7 @@
1
1
  import {
2
2
  createConfigurePayload,
3
3
  createMutationReporter
4
- } from "./chunk-5LEKGHKB.js";
4
+ } from "./chunk-BN5KYLDI.js";
5
5
  import {
6
6
  applyIsolatedConfiguration,
7
7
  buildProviderContext,
@@ -10,12 +10,12 @@ import {
10
10
  resolveActiveProviderForService,
11
11
  resolveAgentDefinition,
12
12
  resolveIsolatedEnvDetails
13
- } from "./chunk-7LYL6372.js";
14
- import "./chunk-OIIB3M4A.js";
13
+ } from "./chunk-IDRDSIOP.js";
14
+ import "./chunk-NT4FTHR4.js";
15
15
  import "./chunk-OADWN624.js";
16
16
  import {
17
17
  loadConfiguredServices
18
- } from "./chunk-AARUTDF3.js";
18
+ } from "./chunk-OY52WCN2.js";
19
19
  import "./chunk-YBCIRQCC.js";
20
20
  import "./chunk-EVMLCUGX.js";
21
21
  import "./chunk-EF3O5H2F.js";
@@ -150,4 +150,4 @@ async function isProviderAvailable(container, providerId, options) {
150
150
  export {
151
151
  ensureIsolatedConfigForService
152
152
  };
153
- //# sourceMappingURL=ensure-isolated-config-XXVV7SPC.js.map
153
+ //# sourceMappingURL=ensure-isolated-config-DP3OWAO5.js.map
@@ -3,7 +3,7 @@ import {
3
3
  } from "./chunk-ZHC3E64P.js";
4
4
  import {
5
5
  createYqQuerySession
6
- } from "./chunk-NBD2QUZU.js";
6
+ } from "./chunk-4DP4GOVF.js";
7
7
  import {
8
8
  builtInDirectContextExecutors,
9
9
  syncCommandEvaluators
@@ -9850,4 +9850,4 @@ export {
9850
9850
  parseRepoSpec,
9851
9851
  settings
9852
9852
  };
9853
- //# sourceMappingURL=gh-TBXFLS7Q.js.map
9853
+ //# sourceMappingURL=gh-4NV3GGL7.js.map
package/dist/index.js CHANGED
@@ -34,7 +34,7 @@ import {
34
34
  startLaunch,
35
35
  stopLaunch,
36
36
  waitForReady
37
- } from "./chunk-ESDPNFK7.js";
37
+ } from "./chunk-7T6WKXT5.js";
38
38
  import {
39
39
  acpToTrace,
40
40
  createManagedWorktree,
@@ -46,10 +46,10 @@ import {
46
46
  runInWorktree,
47
47
  runWithOptionalWorktree,
48
48
  spawn
49
- } from "./chunk-SGMFFL57.js";
49
+ } from "./chunk-2GGWYM5C.js";
50
50
  import {
51
51
  FEEDBACK_URL
52
- } from "./chunk-7LYL6372.js";
52
+ } from "./chunk-IDRDSIOP.js";
53
53
  import {
54
54
  codeReviewGroup,
55
55
  commitCodeReviewDrafts,
@@ -65,7 +65,7 @@ import {
65
65
  runCodeReview,
66
66
  runCodeReviewAgentMcp,
67
67
  runSuperintendentSequence
68
- } from "./chunk-OIIB3M4A.js";
68
+ } from "./chunk-NT4FTHR4.js";
69
69
  import "./chunk-NO7WNABG.js";
70
70
  import {
71
71
  ApiError,
@@ -78,7 +78,7 @@ import {
78
78
  openaiChatCompletionsPlugin,
79
79
  openaiResponsesPlugin,
80
80
  poe_agent_plugin_system_prompt_default
81
- } from "./chunk-ROLXI55L.js";
81
+ } from "./chunk-K4MLQWL6.js";
82
82
  import {
83
83
  SpawnParallelError,
84
84
  bridgeHooks,
@@ -91,7 +91,7 @@ import {
91
91
  resolveProjectConfigPath,
92
92
  resolvePromptDocument,
93
93
  supportedHookAgents
94
- } from "./chunk-AARUTDF3.js";
94
+ } from "./chunk-OY52WCN2.js";
95
95
  import {
96
96
  UserError,
97
97
  isUserError
@@ -100,7 +100,7 @@ import {
100
100
  applyPoeTheme,
101
101
  isCliInvocation,
102
102
  main
103
- } from "./chunk-JRZIA6G4.js";
103
+ } from "./chunk-JVMHBAZW.js";
104
104
  import {
105
105
  log
106
106
  } from "./chunk-EVMLCUGX.js";
@@ -315,7 +315,7 @@ async function runPoeAgentCommand(options) {
315
315
  if (!promptText) {
316
316
  throw new ValidationError("No prompt provided via argument or stdin");
317
317
  }
318
- const { spawnPoeAgentWithAcp } = await import("./poe-agent-VQTC5F2H.js");
318
+ const { spawnPoeAgentWithAcp } = await import("./poe-agent-3TNLVOGW.js");
319
319
  const { events, done } = spawnPoeAgentWithAcp({
320
320
  prompt: promptText,
321
321
  model,