v17.0.0

17.0.0 (2026-09-18)

• refactor!: remove sandbox runtimes and SafeJS harness from poe-code (defaf7e)
• refactor!: remove terminal automation and PowerPoint payload from poe-code (4480c15)

Bug Fixes

• build: restore portable Safe Bash publication artifacts (ce544a1)
• design: keep pipeline output and input visible in short terminals (766b0f6)
• design: preserve pipeline output beside multiline drafts (0c4a959)
• package-lint: skip native assets outside the published bundle (9e96fda)
• packaging: include user error runtime and omit unused op declarations (fe9b9eb)
• playground: preserve canonical workspace filesystem identity (41c6b1c)
• release: prepare standalone safe package runtimes (654eabf)
• release: preserve canonical browser filesystem identity (9b244d1)
• release: rewrite only root-owned published declarations (aea9775)
• safe-bash: bound configurable browser protocol messages (f7751b3)
• safe-bash: keep regex worker diagnostics independent of root facades (eb8f973)
• safe-bash: mediate every browser redirect through host policy (16fa962)
• safe-bash: preserve filesystem identity in browser bundles (e63cc14)
• safe-bash: publish ZIPs atomically in immutable flat stores (17d1659)
• safe-bash: resolve private runtimes through workspace packages (8d4c78e)
• safe-bash: retain host responses until browser delivery settles (05e901c)
• safe-bash: select install input capabilities by path (90aa226)
• safe-bash: support explicit HTTP browser network policies (3b3e9ac)
• safe-fs: preserve implicit parent creation in device views (0bafd4f)
• safe-fs: support portable null device descriptors (f21f327)
• safe-js: align segment lookup with iterator boundaries (3b05997)
• safe-js: clarify Symbol construction diagnostic (1d06f92)
• safe-js: invoke created regular expression symbol hooks (8de95b6)
• safe-js: preserve async generator return rejection ownership (b9a5e22)
• safe-js: preserve suppressed error property order (d39ac9c)
• safe-js: read host error diagnostics without invoking accessors (22f1455)
• safe-js: wait for durable async cleanup checkpoints (e831b3f)

Features

• safe-bash: isolate Python in resource-limited containers (3f52a16)
• safe-fs: add transactional S3 namespace for Python cleanup (979e315)
• safe-js: execute Test262 modules and owned worker agents (04d6434)

BREAKING CHANGES

• poe-code/pptx and the bundled PowerPoint SDK are removed. Terminal automation is available through its separate terminal-pilot packages.
• Sandbox SDK exports, SafeJS binaries, bash and harness commands are no longer shipped in poe-code. Sandbox and harness implementations remain private workspace packages.