chore: import upstream snapshot with attribution

tests/unit/executor-poe-web.test.ts

@@ -0,0 +1,32 @@
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+
+const mod = await import("../../open-sse/executors/poe-web.ts");
+
+describe("PoeWebExecutor", () => {
+  it("can be instantiated", () => {
+    const executor = new mod.PoeWebExecutor();
+    assert.ok(executor);
+  });
+
+  it("execute returns error on fetch failure", async () => {
+    const executor = new mod.PoeWebExecutor();
+    try {
+      const result = await executor.execute({
+        model: "poe-default",
+        body: { messages: [{ role: "user", content: "hi" }] },
+        stream: false,
+        credentials: { apiKey: "" },
+        signal: null,
+      });
+      assert.ok(result.response instanceof Response);
+      // Parse the host instead of substring-matching the URL: a bare
+      // `.includes("poe.com")` would also accept hostile URLs like
+      // `https://evil.com/?x=poe.com` (CodeQL js/incomplete-url-substring-sanitization).
+      const host = new URL(result.url).hostname;
+      assert.ok(host === "poe.com" || host.endsWith(".poe.com"), `unexpected host: ${host}`);
+    } catch {
+      // Network error expected
+    }
+  });
+});