fix: harden authentication and shutdown for 1.0.3

Author: ponythewhite

package-lock.json

@@ -49,10 +49,10 @@
 	"engines": {
 		"node": "^22.12.0 || >=23.3.0"
 	},
-	"version": "1.0.2",
+	"version": "1.0.3",
 	"dependencies": {
 		"get-east-asian-width": "^1.6.0",
-		"@ponythewhite/base-context": "1.0.2"
+		"@ponythewhite/base-context": "1.0.3"
 	},
 	"overrides": {
 		"rimraf": "6.1.2",

package.json

@@ -1,5 +1,9 @@
 # Changelog
 
+## [1.0.3] - 2026-09-17
+
+- Updated internal package dependencies to 1.0.3.
+
 ## [1.0.1] - 2026-09-15
 
 - Required a selected model before starting provider requests instead of exposing a fabricated placeholder model.

packages/agent/CHANGELOG.md

@@ -1,6 +1,6 @@
 {
 	"name": "@ponythewhite/base-context-agent",
-	"version": "1.0.2",
+	"version": "1.0.3",
 	"description": "Synerise base-context agent runtime with context management and native recovery",
 	"type": "module",
 	"main": "./dist/index.js",
@@ -19,7 +19,7 @@
 		"prepublishOnly": "npm --prefix ../.. run build:source"
 	},
 	"dependencies": {
-		"@ponythewhite/base-context-ai": "1.0.2",
+		"@ponythewhite/base-context-ai": "1.0.3",
 		"typebox": "^1.3.9"
 	},
 	"keywords": [

packages/agent/package.json

@@ -1,5 +1,10 @@
 # Changelog
 
+## [1.0.3] - 2026-09-17
+
+- Fixed MCP OAuth cancellation, request deadlines, and response size limits during discovery, registration, and token exchange.
+- Fixed MCP OAuth scope selection to prefer configured scopes, then resource-specific scopes, rather than all authorization-server scopes.
+
 ## [1.0.1] - 2026-09-16
 
 - Removed the Prime Inference provider, model catalog entries, and Prime credential environment integration.

packages/ai/CHANGELOG.md

@@ -1,6 +1,6 @@
 {
 	"name": "@ponythewhite/base-context-ai",
-	"version": "1.0.2",
+	"version": "1.0.3",
 	"description": "Synerise base-context unified LLM API and provider configuration",
 	"type": "module",
 	"main": "./dist/index.js",