Version Packages (#1832)

Rhys Sullivan committed 2 months agov1.6.4

Commit 5c0fa881 parent 2cad77474 files · +481 −166Browse files

Unified · Split

74 files

.changeset/codex-plugins-as-integrations.md +0 −25
.changeset/connection-create-conflict.md +0 −11
.changeset/dcr-reconnect-through-registration.md +0 −9
.changeset/fix-plugin-sdk-root-imports.md +0 −6
.changeset/health-verdict-revalidate.md +0 −11
.changeset/mcp-oauth-refresh-reauthorization.md +0 −12
.changeset/olive-moons-shake.md +0 −10
.changeset/onepassword-multiple-accounts.md +0 −5
.changeset/tidy-onepassword-latency.md +0 −13
apps/cli/CHANGELOG.md +39 −0
apps/cli/package.json +1 −1
apps/cloud/CHANGELOG.md +21 −0
apps/cloud/package.json +1 −1
apps/desktop/CHANGELOG.md +2 −0
apps/desktop/package.json +1 −1
apps/host-selfhost/CHANGELOG.md +21 −0
apps/host-selfhost/package.json +1 −1
apps/local/CHANGELOG.md +27 −0
apps/local/package.json +1 −1
bun.lock +32 −32
e2e/CHANGELOG.md +12 −0
e2e/package.json +1 −1
examples/all-plugins/CHANGELOG.md +14 −0
examples/all-plugins/package.json +1 −1
examples/docs-sdk-quickstart/CHANGELOG.md +8 −0
examples/docs-sdk-quickstart/package.json +1 −1
packages/core/analytics/CHANGELOG.md +7 −0
packages/core/analytics/package.json +1 −1
packages/core/api/CHANGELOG.md +9 −0
packages/core/api/package.json +1 −1
packages/core/cli/CHANGELOG.md +7 −0
packages/core/cli/package.json +1 −1
packages/core/config/CHANGELOG.md +7 −0
packages/core/config/package.json +1 −1
packages/core/execution/CHANGELOG.md +8 −0
packages/core/execution/package.json +1 −1
packages/core/sdk/CHANGELOG.md +48 −0
packages/core/sdk/package.json +1 −1
packages/core/vite-plugin/CHANGELOG.md +7 −0
packages/core/vite-plugin/package.json +1 −1
packages/hosts/cloudflare/CHANGELOG.md +10 −0
packages/hosts/cloudflare/package.json +1 −1
packages/hosts/mcp-apps-shell/CHANGELOG.md +8 −0
packages/hosts/mcp-apps-shell/package.json +1 −1
packages/kernel/core/CHANGELOG.md +2 −0
packages/kernel/core/package.json +1 −1
packages/kernel/runtime-quickjs/CHANGELOG.md +7 −0
packages/kernel/runtime-quickjs/package.json +1 −1
packages/kernel/runtime-workerd-subprocess/CHANGELOG.md +7 −0
packages/kernel/runtime-workerd-subprocess/package.json +1 −1
packages/plugins/desktop-settings/CHANGELOG.md +7 −0
packages/plugins/desktop-settings/package.json +1 −1
packages/plugins/encrypted-secrets/CHANGELOG.md +7 −0
packages/plugins/encrypted-secrets/package.json +1 −1
packages/plugins/example/CHANGELOG.md +7 −0
packages/plugins/example/package.json +1 −1
packages/plugins/file-secrets/CHANGELOG.md +9 −0
packages/plugins/file-secrets/package.json +1 −1
packages/plugins/graphql/CHANGELOG.md +10 −0
packages/plugins/graphql/package.json +1 −1
packages/plugins/keychain/CHANGELOG.md +9 −0
packages/plugins/keychain/package.json +1 −1
packages/plugins/mcp/CHANGELOG.md +38 −0
packages/plugins/mcp/package.json +1 −1
packages/plugins/onepassword/CHANGELOG.md +18 −0
packages/plugins/onepassword/package.json +1 −1
packages/plugins/openapi/CHANGELOG.md +10 −0
packages/plugins/openapi/package.json +1 −1
packages/plugins/provider-service-split/CHANGELOG.md +8 −0
packages/plugins/provider-service-split/package.json +1 −1
packages/plugins/toolkits/CHANGELOG.md +9 −0
packages/plugins/toolkits/package.json +1 −1
packages/react/CHANGELOG.md +14 −0
packages/react/package.json +1 −1

.changeset/codex-plugins-as-integrations.md+0−25

@@ -1,25 +0,0 @@
1		−---
2		−"executor": patch
3		−"@executor-js/plugin-mcp": patch
4		−"@executor-js/sdk": patch
5		−---
6		−
7		−Add locally installed OpenAI Codex plugins as one-click integrations: Messages
8		−(iMessage/SMS), Chrome, Computer Use, Computer History, and OpenAI Developer
9		−Docs. They appear in the connect dialog with their own icons, and a card that
10		−cannot run yet says what to install and links to it.
11		−
12		−Tool calls reach the plugins through `codex app-server` rather than a plugin's
13		−own MCP server, because their services only honour calls from a Codex host
14		−session. Computer Use and Chrome ship no MCP server at all, so their APIs are
15		−projected as typed tools — `list_apps`, `click`, `read_page`, `navigate` — that
16		−compile to a single call each. No model turn is involved; nothing is bundled or
17		−downloaded, and a machine without Codex simply sees the setup steps.
18		−
19		−A plugin's own approval prompt now reaches the caller, and states the terms it
20		−carries: a browser prompt that persists for a site says so. Approvals are asked
21		−once per session rather than per call.
22		−
23		−Elicitation requests can carry implementation-defined metadata through
24		−`FormElicitation` / `UrlElicitation`, and a paused execution reports it. Both
25		−fields are optional and additive.

.changeset/connection-create-conflict.md+0−11

@@ -1,11 +0,0 @@
1		−---
2		−"@executor-js/sdk": patch
3		−---
4		−
5		−Creating a connection over an existing one is rejected instead of silently overwriting it
6		−
7		−`connections.create` used to upsert: a create with the same (owner, integration, name) replaced the saved connection and, for a pasted value, overwrote the stored secret itself. It now fails with the new `ConnectionAlreadyExistsError` and leaves the existing connection untouched. Remove the connection first, or pick a different name.
8		−
9		−This adds one error to the wire contract: the `POST /connections` endpoint can answer HTTP 409 with tag `ConnectionAlreadyExistsError`, and the `connections.create` core tool resolves the same case as `{ ok: false, error: { code: "connection_already_exists" } }`. The core tool now also resolves the other expected input failures the same way instead of as opaque internal errors: `integration_not_found` for an unknown integration and `invalid_connection_input` for an invalid input. The change is additive — no existing status, field, or success shape moves.
10		−
11		−OAuth is unaffected. Fresh OAuth connects already resolve a taken name to the next free suffix through `newConnection`, and reconnect still re-mints the same connection on purpose.

.changeset/dcr-reconnect-through-registration.md+0−9

@@ -1,9 +0,0 @@
1		−---
2		−"@executor-js/react": patch
3		−---
4		−
5		−Reconnecting a DCR connection now re-registers instead of reusing a stranded client
6		−
7		−A dynamically registered OAuth client is bound to the redirect URI it registered with. Once the app's callback origin changed (127.0.0.1 to localhost), Reconnect still started the flow against the stored client, and the authorization server rejected it — leaving no way to repair the connection.
8		−
9		−Reconnect now takes the same probe → CIMD-or-register → start route as the initial connect, so the registration gateway replaces the stranded client against the current redirect URI. Methods with a fixed, hand-registered app are unaffected and keep using their stored client.

.changeset/fix-plugin-sdk-root-imports.md+0−6

@@ -1,6 +0,0 @@
1		−---
2		−"@executor-js/plugin-file-secrets": patch
3		−"@executor-js/plugin-keychain": patch
4		−---
5		−
6		−Import plugin-authoring symbols from `@executor-js/sdk/core` instead of the package root. The published root is the Promise surface and does not export `StorageError`, `definePlugin`, `PluginCtx`, or `Plugin`, so both packages failed to load when installed from npm.

.changeset/health-verdict-revalidate.md+0−11

@@ -1,11 +0,0 @@
1		−---
2		−"@executor-js/sdk": patch
3		−---
4		−
5		−Stale "unhealthy" verdicts no longer wait for a manual "Check now"
6		−
7		−A connection's persisted health verdict was only ever re-checked from the web UI, so after one bad probe (a transient upstream error, a refresh that failed once) agents reading `connections.list` kept reporting "unhealthy, reconnect" for a connection that worked fine — invocation auto-refreshes OAuth tokens — until a human opened the page and clicked "Check now".
8		−
9		−Two repair paths make the verdict track reality on its own. The agent-facing `connections.list` now re-runs the same probe as "Check now" before reporting a non-healthy verdict older than a minute, so recovery shows on the next read while repeated lists collapse to one probe per window. And a successful tool invocation through a connection wearing a non-healthy verdict flips it back to healthy — real traffic is stronger evidence than any probe. Tool-sync failure verdicts and grants the authorization server has rejected as `invalid_grant` are deliberately left alone: the first is cleared only by a successful sync, and the second genuinely requires a reconnect. A call whose credential no longer resolves is left alone too — a rendered request omits the missing placement, so an upstream that answers unauthenticated proves nothing about a credential that is gone.
10		−
11		−`PluginCtx.connections` gains `checkHealth`, the same probe-with-freshness-window the executor surface already exposed.

.changeset/mcp-oauth-refresh-reauthorization.md+0−12

@@ -1,12 +0,0 @@
1		−---
2		−"@executor-js/sdk": patch
3		−"@executor-js/plugin-mcp": patch
4		−---
5		−
6		−Rejected MCP OAuth grants now request reconnect without registering a disposable client
7		−
8		−Remote MCP catalog discovery used the MCP SDK's interactive OAuth fallback when an upstream rejected Executor's stored bearer with `401`. A background refresh cannot finish that browser authorization, but the SDK first fetched OAuth metadata and dynamically registered another client. Executor then preserved the old catalog under a generic degraded health verdict, so clients saw zero or stale tools without a reliable reconnect signal.
9		−
10		−Executor now stops at the authenticated HTTP boundary for OAuth-backed MCP transports. A rejected stored bearer becomes a structured reauthorization result before OAuth discovery or Dynamic Client Registration runs. Catalog refresh still preserves the last authoritative tools, but records the connection as expired with a reconnect-required detail so the UI and API can direct the user through authorization again.
11		−
12		−API-key and unauthenticated MCP transports keep their existing `401` behavior, and ordinary incomplete discovery results remain degraded.

.changeset/olive-moons-shake.md+0−10

@@ -1,10 +0,0 @@
1		−---
2		−"executor": patch
3		−---
4		−
5		−Stop exporting credential-bearing URLs in telemetry. Every query parameter
6		−value, URL fragment, and userinfo component is stripped from exported span
7		−URLs — no parameter name is trusted — on every exporter path: the cloud span
8		−processors, the self-host OTLP exporter, the browser client's OTLP exporter,
9		−and the forwarded browser trace batches. User-supplied MCP endpoints are
10		−sanitized before being stamped onto spans.

.changeset/onepassword-multiple-accounts.md+0−5

@@ -1,5 +0,0 @@
1		−---
2		−"executor": patch
3		−---
4		−
5		−1Password: multiple named accounts. The provider now holds any number of named accounts — a work account next to a personal one, or a service-account token next to desktop-app biometrics — each scoping its own set of vaults. The settings card lists every account with independent edit and disconnect, existing single-account configs upgrade in place, and `op://` refs keep their vault-first addressing: a vault name that exists in more than one account is an explicit ambiguity error, never a silent pick.

.changeset/tidy-onepassword-latency.md+0−13

@@ -1,13 +0,0 @@
1		−---
2		−"@executor-js/plugin-onepassword": patch
3		−---
4		−
5		−1Password-backed connections no longer pay a 1Password read on every tool call
6		−
7		−Each tool call resolves its connection's credential, and for 1Password-backed connections every resolution shelled out to the `op` CLI — roughly a second per call under desktop-app auth, multiplying the latency of every call several times over. The spawn was also synchronous, so one slow resolution (for example `op` waiting on a 1Password approval prompt) blocked the whole local server for every other request, with no timeout on that path.
8		−
9		−Three changes:
10		−
11		−- Successful resolutions are now served from memory for a short TTL (default 60s, `secretCacheTtlMs`). The cache keys by a fingerprint of the provider config, so editing or removing an account drops all cached secrets at once; not-found, ambiguity, and failure outcomes are never retained. Concurrent resolutions of the same ref share one backend read even with the TTL set to `0`.
12		−- The `op` CLI now runs as an asynchronous spawn with a hard deadline (the plugin's existing `timeoutMs`), so a stuck `op` fails with the troubleshooting message instead of freezing the server. Auth reaches the child per spawn (service-account token via the environment, desktop account via `--account`) instead of through the previous backend's process-global token state.
13		−- Services are memoized per auth identity, so the SDK fallback reuses one authenticated client instead of re-authenticating per resolution.

apps/cli/CHANGELOG.md+39−0

@@ -1,5 +1,44 @@
1	1	# executor
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- [#1858](https://github.com/UsefulSoftwareCo/executor/pull/1858) [`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Add locally installed OpenAI Codex plugins as one-click integrations: Messages
	8	+ (iMessage/SMS), Chrome, Computer Use, Computer History, and OpenAI Developer
	9	+ Docs. They appear in the connect dialog with their own icons, and a card that
	10	+ cannot run yet says what to install and links to it.
	11	+
	12	+ Tool calls reach the plugins through `codex app-server` rather than a plugin's
	13	+ own MCP server, because their services only honour calls from a Codex host
	14	+ session. Computer Use and Chrome ship no MCP server at all, so their APIs are
	15	+ projected as typed tools — `list_apps`, `click`, `read_page`, `navigate` — that
	16	+ compile to a single call each. No model turn is involved; nothing is bundled or
	17	+ downloaded, and a machine without Codex simply sees the setup steps.
	18	+
	19	+ A plugin's own approval prompt now reaches the caller, and states the terms it
	20	+ carries: a browser prompt that persists for a site says so. Approvals are asked
	21	+ once per session rather than per call.
	22	+
	23	+ Elicitation requests can carry implementation-defined metadata through
	24	+ `FormElicitation` / `UrlElicitation`, and a paused execution reports it. Both
	25	+ fields are optional and additive.
	26	+
	27	+- [#1477](https://github.com/UsefulSoftwareCo/executor/pull/1477) [`c0c7a0d`](https://github.com/UsefulSoftwareCo/executor/commit/c0c7a0db41623077ba8b7d09de5ef8ee8e6a99e3) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Stop exporting credential-bearing URLs in telemetry. Every query parameter
	28	+ value, URL fragment, and userinfo component is stripped from exported span
	29	+ URLs — no parameter name is trusted — on every exporter path: the cloud span
	30	+ processors, the self-host OTLP exporter, the browser client's OTLP exporter,
	31	+ and the forwarded browser trace batches. User-supplied MCP endpoints are
	32	+ sanitized before being stamped onto spans.
	33	+
	34	+- [#1841](https://github.com/UsefulSoftwareCo/executor/pull/1841) [`d13151a`](https://github.com/UsefulSoftwareCo/executor/commit/d13151ac19453f11b40c7f49303a10854c66e464) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - 1Password: multiple named accounts. The provider now holds any number of named accounts — a work account next to a personal one, or a service-account token next to desktop-app biometrics — each scoping its own set of vaults. The settings card lists every account with independent edit and disconnect, existing single-account configs upgrade in place, and `op://` refs keep their vault-first addressing: a vault name that exists in more than one account is an explicit ambiguity error, never a silent pick.
	35	+
	36	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	37	+ - @executor-js/sdk@1.6.4
	38	+ - @executor-js/local@1.6.4
	39	+ - @executor-js/api@1.4.67
	40	+ - @executor-js/runtime-quickjs@1.6.4
	41	+
3	42	## 1.6.3
4	43
5	44	### Patch Changes

apps/cli/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "executor",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"private": true,
5	5	"bin": {
6	6	"executor": "./bin/executor.ts"

apps/cloud/CHANGELOG.md+21−0

@@ -1,5 +1,26 @@
1	1	# @executor-js/cloud
2	2
	3	+## 1.4.65
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/plugin-mcp@1.6.4
	9	+ - @executor-js/sdk@1.6.4
	10	+ - @executor-js/react@1.4.67
	11	+ - @executor-js/api@1.4.67
	12	+ - @executor-js/execution@1.6.4
	13	+ - @executor-js/vite-plugin@0.0.64
	14	+ - @executor-js/cloudflare@0.0.46
	15	+ - @executor-js/host-mcp@1.4.4
	16	+ - @executor-js/mcp-apps-shell@1.4.15
	17	+ - @executor-js/runtime-dynamic-worker@1.4.4
	18	+ - @executor-js/plugin-graphql@1.6.4
	19	+ - @executor-js/plugin-openapi@1.6.4
	20	+ - @executor-js/plugin-toolkits@1.5.39
	21	+ - @executor-js/plugin-workos-vault@0.0.2
	22	+ - @executor-js/runtime-quickjs@1.6.4
	23	+
3	24	## 1.4.64
4	25
5	26	### Patch Changes

apps/cloud/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/cloud",
3		− "version": "1.4.64",
	3	+ "version": "1.4.65",
4	4	"private": true,
5	5	"type": "module",
6	6	"scripts": {

apps/desktop/CHANGELOG.md+2−0

@@ -1,5 +1,7 @@
1	1	# @executor-js/desktop
2	2
	3	+## 1.6.4
	4	+
3	5	## 1.6.3
4	6
5	7	## 1.6.2

apps/desktop/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/desktop",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"private": true,
5	5	"homepage": "https://github.com/UsefulSoftwareCo/executor",
6	6	"license": "MIT",

apps/host-selfhost/CHANGELOG.md+21−0

@@ -1,5 +1,26 @@
1	1	# @executor-js/host-selfhost
2	2
	3	+## 0.0.46
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/plugin-mcp@1.6.4
	9	+ - @executor-js/sdk@1.6.4
	10	+ - @executor-js/react@1.4.67
	11	+ - @executor-js/app@1.4.4
	12	+ - @executor-js/analytics@0.1.11
	13	+ - @executor-js/api@1.4.67
	14	+ - @executor-js/execution@1.6.4
	15	+ - @executor-js/host-mcp@1.4.4
	16	+ - @executor-js/mcp-apps-shell@1.4.15
	17	+ - @executor-js/plugin-encrypted-secrets@0.0.46
	18	+ - @executor-js/plugin-graphql@1.6.4
	19	+ - @executor-js/plugin-openapi@1.6.4
	20	+ - @executor-js/plugin-provider-service-split@0.0.18
	21	+ - @executor-js/plugin-toolkits@1.5.39
	22	+ - @executor-js/runtime-quickjs@1.6.4
	23	+
3	24	## 0.0.45
4	25
5	26	### Patch Changes

apps/host-selfhost/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/host-selfhost",
3		− "version": "0.0.45",
	3	+ "version": "0.0.46",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {

apps/local/CHANGELOG.md+27−0

@@ -1,5 +1,32 @@
1	1	# @executor-js/local
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562), [`939b96f`](https://github.com/UsefulSoftwareCo/executor/commit/939b96f694a420cd6151c4e402cff7f1ab4b327a), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84), [`2cad774`](https://github.com/UsefulSoftwareCo/executor/commit/2cad7745dea1afb9282c3888f4e9c59ce6fe4332)]:
	8	+ - @executor-js/plugin-mcp@1.6.4
	9	+ - @executor-js/sdk@1.6.4
	10	+ - @executor-js/react@1.4.67
	11	+ - @executor-js/plugin-file-secrets@1.6.4
	12	+ - @executor-js/plugin-keychain@1.6.4
	13	+ - @executor-js/plugin-onepassword@1.6.4
	14	+ - @executor-js/app@1.4.4
	15	+ - @executor-js/analytics@0.1.11
	16	+ - @executor-js/api@1.4.67
	17	+ - @executor-js/config@1.6.4
	18	+ - @executor-js/execution@1.6.4
	19	+ - @executor-js/vite-plugin@0.0.64
	20	+ - @executor-js/host-mcp@1.4.4
	21	+ - @executor-js/mcp-apps-shell@1.4.15
	22	+ - @executor-js/plugin-desktop-settings@1.6.4
	23	+ - @executor-js/plugin-example@1.6.4
	24	+ - @executor-js/plugin-graphql@1.6.4
	25	+ - @executor-js/plugin-openapi@1.6.4
	26	+ - @executor-js/plugin-provider-service-split@0.0.18
	27	+ - @executor-js/plugin-toolkits@1.5.39
	28	+ - @executor-js/runtime-quickjs@1.6.4
	29	+
3	30	## 1.6.3
4	31
5	32	### Patch Changes

apps/local/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/local",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {

bun.lock+32−32

@@ -31,7 +31,7 @@ · 30 unmodified lines
31	31	},
32	32	"apps/cli": {
33	33	"name": "executor",
34		− "version": "1.6.3",
	34	+ "version": "1.6.4",
35	35	"bin": {
36	36	"executor": "./bin/executor.ts",
37	37	},
@@ -60,7 +60,7 @@ · 22 unmodified lines
60	60	},
61	61	"apps/cloud": {
62	62	"name": "@executor-js/cloud",
63		− "version": "1.4.64",
	63	+ "version": "1.4.65",
64	64	"dependencies": {
65	65	"@cloudflare/vite-plugin": "^1.31.1",
66	66	"@effect/atom-react": "catalog:",
@@ -133,7 +133,7 @@ · 66 unmodified lines
133	133	},
134	134	"apps/desktop": {
135	135	"name": "@executor-js/desktop",
136		− "version": "1.6.3",
	136	+ "version": "1.6.4",
137	137	"dependencies": {
138	138	"@sentry/bun": "^10.57.0",
139	139	"@sentry/electron": "^7.13.0",
@@ -220,7 +220,7 @@ · 80 unmodified lines
220	220	},
221	221	"apps/host-selfhost": {
222	222	"name": "@executor-js/host-selfhost",
223		− "version": "0.0.45",
	223	+ "version": "0.0.46",
224	224	"dependencies": {
225	225	"@better-auth/api-key": "^1.6.11",
226	226	"@cloudflare/worker-bundler": "0.2.1",
@@ -272,7 +272,7 @@ · 45 unmodified lines
272	272	},
273	273	"apps/local": {
274	274	"name": "@executor-js/local",
275		− "version": "1.6.3",
	275	+ "version": "1.6.4",
276	276	"dependencies": {
277	277	"@effect/atom-react": "catalog:",
278	278	"@effect/platform-node": "catalog:",
@@ -352,7 +352,7 @@ · 73 unmodified lines
352	352	},
353	353	"e2e": {
354	354	"name": "@executor-js/e2e",
355		− "version": "0.0.43",
	355	+ "version": "0.0.44",
356	356	"dependencies": {
357	357	"@executor-js/api": "workspace:*",
358	358	"@executor-js/emulate": "^0.14.1",
@@ -387,7 +387,7 @@ · 28 unmodified lines
387	387	},
388	388	"examples/all-plugins": {
389	389	"name": "@executor-js/example-all-plugins",
390		− "version": "0.0.64",
	390	+ "version": "0.0.65",
391	391	"dependencies": {
392	392	"@executor-js/plugin-file-secrets": "workspace:*",
393	393	"@executor-js/plugin-graphql": "workspace:*",
@@ -406,7 +406,7 @@ · 12 unmodified lines
406	406	},
407	407	"examples/docs-sdk-quickstart": {
408	408	"name": "@executor-js/example-docs-sdk-quickstart",
409		− "version": "0.0.49",
	409	+ "version": "0.0.50",
410	410	"dependencies": {
411	411	"@executor-js/plugin-openapi": "workspace:*",
412	412	"@executor-js/sdk": "workspace:*",
@@ -463,7 +463,7 @@ · 50 unmodified lines
463	463	},
464	464	"packages/core/analytics": {
465	465	"name": "@executor-js/analytics",
466		− "version": "0.1.10",
	466	+ "version": "0.1.11",
467	467	"dependencies": {
468	468	"@effect/platform-node": "catalog:",
469	469	"@executor-js/execution": "workspace:*",
@@ -479,7 +479,7 @@ · 9 unmodified lines
479	479	},
480	480	"packages/core/api": {
481	481	"name": "@executor-js/api",
482		− "version": "1.4.66",
	482	+ "version": "1.4.67",
483	483	"dependencies": {
484	484	"@executor-js/execution": "workspace:*",
485	485	"@executor-js/host-mcp": "workspace:*",
@@ -496,7 +496,7 @@ · 10 unmodified lines
496	496	},
497	497	"packages/core/cli": {
498	498	"name": "@executor-js/cli",
499		− "version": "0.2.53",
	499	+ "version": "0.2.54",
500	500	"bin": {
501	501	"executor-sdk": "./dist/index.js",
502	502	},
@@ -517,7 +517,7 @@ · 14 unmodified lines
517	517	},
518	518	"packages/core/config": {
519	519	"name": "@executor-js/config",
520		− "version": "1.6.3",
	520	+ "version": "1.6.4",
521	521	"dependencies": {
522	522	"@executor-js/sdk": "workspace:*",
523	523	"jiti": "^2.6.1",
@@ -538,7 +538,7 @@ · 14 unmodified lines
538	538	},
539	539	"packages/core/execution": {
540	540	"name": "@executor-js/execution",
541		− "version": "1.6.3",
	541	+ "version": "1.6.4",
542	542	"dependencies": {
543	543	"@executor-js/codemode-core": "workspace:*",
544	544	"@executor-js/sdk": "workspace:*",
@@ -604,7 +604,7 @@ · 59 unmodified lines
604	604	},
605	605	"packages/core/sdk": {
606	606	"name": "@executor-js/sdk",
607		− "version": "1.6.3",
	607	+ "version": "1.6.4",
608	608	"dependencies": {
609	609	"@executor-js/fumadb": "workspace:*",
610	610	"@standard-schema/spec": "^1.1.0",
@@ -657,7 +657,7 @@ · 46 unmodified lines
657	657	},
658	658	"packages/core/vite-plugin": {
659	659	"name": "@executor-js/vite-plugin",
660		− "version": "0.0.63",
	660	+ "version": "0.0.64",
661	661	"dependencies": {
662	662	"@executor-js/sdk": "workspace:*",
663	663	"jiti": "^2.6.1",
@@ -677,7 +677,7 @@ · 13 unmodified lines
677	677	},
678	678	"packages/hosts/cloudflare": {
679	679	"name": "@executor-js/cloudflare",
680		− "version": "0.0.45",
	680	+ "version": "0.0.46",
681	681	"dependencies": {
682	682	"@executor-js/api": "workspace:*",
683	683	"@executor-js/execution": "workspace:*",
@@ -718,7 +718,7 @@ · 34 unmodified lines
718	718	},
719	719	"packages/hosts/mcp-apps-shell": {
720	720	"name": "@executor-js/mcp-apps-shell",
721		− "version": "1.4.14",
	721	+ "version": "1.4.15",
722	722	"dependencies": {
723	723	"@executor-js/react": "workspace:*",
724	724	"@executor-js/runtime-quickjs": "workspace:*",
@@ -756,7 +756,7 @@ · 31 unmodified lines
756	756	},
757	757	"packages/kernel/core": {
758	758	"name": "@executor-js/codemode-core",
759		− "version": "1.6.3",
	759	+ "version": "1.6.4",
760	760	"dependencies": {
761	761	"@babel/parser": "^7.29.2",
762	762	"@standard-schema/spec": "^1.0.0",
@@ -829,7 +829,7 @@ · 66 unmodified lines
829	829	},
830	830	"packages/kernel/runtime-quickjs": {
831	831	"name": "@executor-js/runtime-quickjs",
832		− "version": "1.6.3",
	832	+ "version": "1.6.4",
833	833	"dependencies": {
834	834	"@executor-js/codemode-core": "workspace:*",
835	835	"quickjs-emscripten": "catalog:",
@@ -849,7 +849,7 @@ · 13 unmodified lines
849	849	},
850	850	"packages/kernel/runtime-workerd-subprocess": {
851	851	"name": "@executor-js/runtime-workerd-subprocess",
852		− "version": "0.0.18",
	852	+ "version": "0.0.19",
853	853	"dependencies": {
854	854	"@executor-js/codemode-core": "workspace:*",
855	855	"effect": "catalog:",
@@ -864,7 +864,7 @@ · 8 unmodified lines
864	864	},
865	865	"packages/plugins/desktop-settings": {
866	866	"name": "@executor-js/plugin-desktop-settings",
867		− "version": "1.6.3",
	867	+ "version": "1.6.4",
868	868	"dependencies": {
869	869	"@executor-js/sdk": "workspace:*",
870	870	"react": "catalog:",
@@ -877,7 +877,7 @@ · 6 unmodified lines
877	877	},
878	878	"packages/plugins/encrypted-secrets": {
879	879	"name": "@executor-js/plugin-encrypted-secrets",
880		− "version": "0.0.45",
	880	+ "version": "0.0.46",
881	881	"dependencies": {
882	882	"@executor-js/sdk": "workspace:*",
883	883	"effect": "catalog:",
@@ -892,7 +892,7 @@ · 8 unmodified lines
892	892	},
893	893	"packages/plugins/example": {
894	894	"name": "@executor-js/plugin-example",
895		− "version": "1.6.3",
	895	+ "version": "1.6.4",
896	896	"dependencies": {
897	897	"@executor-js/sdk": "workspace:*",
898	898	},
@@ -915,7 +915,7 @@ · 16 unmodified lines
915	915	},
916	916	"packages/plugins/file-secrets": {
917	917	"name": "@executor-js/plugin-file-secrets",
918		− "version": "1.6.3",
	918	+ "version": "1.6.4",
919	919	"dependencies": {
920	920	"@executor-js/sdk": "workspace:*",
921	921	},
@@ -932,7 +932,7 @@ · 10 unmodified lines
932	932	},
933	933	"packages/plugins/graphql": {
934	934	"name": "@executor-js/plugin-graphql",
935		− "version": "1.6.3",
	935	+ "version": "1.6.4",
936	936	"dependencies": {
937	937	"@effect/platform-node": "catalog:",
938	938	"@executor-js/config": "workspace:*",
@@ -971,7 +971,7 @@ · 32 unmodified lines
971	971	},
972	972	"packages/plugins/keychain": {
973	973	"name": "@executor-js/plugin-keychain",
974		− "version": "1.6.3",
	974	+ "version": "1.6.4",
975	975	"dependencies": {
976	976	"@executor-js/sdk": "workspace:*",
977	977	"@napi-rs/keyring": "^1.2.0",
@@ -990,7 +990,7 @@ · 12 unmodified lines
990	990	},
991	991	"packages/plugins/mcp": {
992	992	"name": "@executor-js/plugin-mcp",
993		− "version": "1.6.3",
	993	+ "version": "1.6.4",
994	994	"dependencies": {
995	995	"@cfworker/json-schema": "^4.1.1",
996	996	"@effect/platform-node": "catalog:",
@@ -1034,7 +1034,7 @@ · 37 unmodified lines
1034	1034	},
1035	1035	"packages/plugins/onepassword": {
1036	1036	"name": "@executor-js/plugin-onepassword",
1037		− "version": "1.6.3",
	1037	+ "version": "1.6.4",
1038	1038	"dependencies": {
1039	1039	"@1password/sdk": "^0.4.1-beta.1",
1040	1040	"@effect/atom-react": "catalog:",
@@ -1067,7 +1067,7 @@ · 26 unmodified lines
1067	1067	},
1068	1068	"packages/plugins/openapi": {
1069	1069	"name": "@executor-js/plugin-openapi",
1070		− "version": "1.6.3",
	1070	+ "version": "1.6.4",
1071	1071	"dependencies": {
1072	1072	"@effect/platform-node": "catalog:",
1073	1073	"@executor-js/config": "workspace:*",
@@ -1108,7 +1108,7 @@ · 34 unmodified lines
1108	1108	},
1109	1109	"packages/plugins/provider-service-split": {
1110	1110	"name": "@executor-js/plugin-provider-service-split",
1111		− "version": "0.0.17",
	1111	+ "version": "0.0.18",
1112	1112	"dependencies": {
1113	1113	"@executor-js/plugin-openapi": "workspace:*",
1114	1114	"@executor-js/sdk": "workspace:*",
@@ -1125,7 +1125,7 @@ · 10 unmodified lines
1125	1125	},
1126	1126	"packages/plugins/toolkits": {
1127	1127	"name": "@executor-js/plugin-toolkits",
1128		− "version": "1.5.38",
	1128	+ "version": "1.5.39",
1129	1129	"dependencies": {
1130	1130	"@executor-js/sdk": "workspace:*",
1131	1131	},
@@ -1194,7 +1194,7 @@ · 62 unmodified lines
1194	1194	},
1195	1195	"packages/react": {
1196	1196	"name": "@executor-js/react",
1197		− "version": "1.4.66",
	1197	+ "version": "1.4.67",
1198	1198	"dependencies": {
1199	1199	"@base-ui/react": "^1.3.0",
1200	1200	"@effect/atom-react": "catalog:",

e2e/CHANGELOG.md+12−0

@@ -1,5 +1,17 @@
1	1	# @executor-js/e2e
2	2
	3	+## 0.0.44
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/plugin-mcp@1.6.4
	9	+ - @executor-js/sdk@1.6.4
	10	+ - @executor-js/api@1.4.67
	11	+ - @executor-js/plugin-graphql@1.6.4
	12	+ - @executor-js/plugin-openapi@1.6.4
	13	+ - @executor-js/plugin-toolkits@1.5.39
	14	+
3	15	## 0.0.43
4	16
5	17	### Patch Changes

e2e/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/e2e",
3		− "version": "0.0.43",
	3	+ "version": "0.0.44",
4	4	"private": true,
5	5	"type": "module",
6	6	"scripts": {

examples/all-plugins/CHANGELOG.md+14−0

@@ -1,5 +1,19 @@
1	1	# @executor-js/example-all-plugins
2	2
	3	+## 0.0.65
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`939b96f`](https://github.com/UsefulSoftwareCo/executor/commit/939b96f694a420cd6151c4e402cff7f1ab4b327a), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84), [`2cad774`](https://github.com/UsefulSoftwareCo/executor/commit/2cad7745dea1afb9282c3888f4e9c59ce6fe4332)]:
	8	+ - @executor-js/plugin-mcp@1.6.4
	9	+ - @executor-js/sdk@1.6.4
	10	+ - @executor-js/plugin-file-secrets@1.6.4
	11	+ - @executor-js/plugin-keychain@1.6.4
	12	+ - @executor-js/plugin-onepassword@1.6.4
	13	+ - @executor-js/plugin-graphql@1.6.4
	14	+ - @executor-js/plugin-openapi@1.6.4
	15	+ - @executor-js/plugin-workos-vault@0.0.2
	16	+
3	17	## 0.0.64
4	18
5	19	### Patch Changes

examples/all-plugins/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/example-all-plugins",
3		− "version": "0.0.64",
	3	+ "version": "0.0.65",
4	4	"private": true,
5	5	"type": "module",
6	6	"scripts": {

examples/docs-sdk-quickstart/CHANGELOG.md+8−0

@@ -1,5 +1,13 @@
1	1	# @executor-js/example-docs-sdk-quickstart
2	2
	3	+## 0.0.50
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+ - @executor-js/plugin-openapi@1.6.4
	10	+
3	11	## 0.0.49
4	12
5	13	### Patch Changes

examples/docs-sdk-quickstart/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/example-docs-sdk-quickstart",
3		− "version": "0.0.49",
	3	+ "version": "0.0.50",
4	4	"private": true,
5	5	"type": "module",
6	6	"scripts": {

packages/core/analytics/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/analytics
2	2
	3	+## 0.1.11
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies []:
	8	+ - @executor-js/execution@1.6.4
	9	+
3	10	## 0.1.10
4	11
5	12	### Patch Changes

packages/core/analytics/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/analytics",
3		− "version": "0.1.10",
	3	+ "version": "0.1.11",
4	4	"private": true,
5	5	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/analytics",
6	6	"bugs": {

packages/core/api/CHANGELOG.md+9−0

@@ -1,5 +1,14 @@
1	1	# @executor-js/api
2	2
	3	+## 1.4.67
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+ - @executor-js/execution@1.6.4
	10	+ - @executor-js/host-mcp@1.4.4
	11	+
3	12	## 1.4.66
4	13
5	14	### Patch Changes

packages/core/api/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/api",
3		− "version": "1.4.66",
	3	+ "version": "1.4.67",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {

packages/core/cli/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/cli
2	2
	3	+## 0.2.54
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+
3	10	## 0.2.53
4	11
5	12	### Patch Changes

packages/core/cli/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/cli",
3		− "version": "0.2.53",
	3	+ "version": "0.2.54",
4	4	"description": "CLI for the executor SDK — schema generation, migrations",
5	5	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/cli",
6	6	"bugs": {

packages/core/config/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/config
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+
3	10	## 1.6.3
4	11
5	12	### Patch Changes

packages/core/config/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/config",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/config",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/core/execution/CHANGELOG.md+8−0

@@ -1,5 +1,13 @@
1	1	# @executor-js/execution
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+ - @executor-js/codemode-core@1.6.4
	10	+
3	11	## 1.6.3
4	12
5	13	### Patch Changes

packages/core/execution/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/execution",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/execution",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/core/sdk/CHANGELOG.md+48−0

@@ -1,5 +1,53 @@
1	1	# @executor-js/sdk
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- [#1858](https://github.com/UsefulSoftwareCo/executor/pull/1858) [`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Add locally installed OpenAI Codex plugins as one-click integrations: Messages
	8	+ (iMessage/SMS), Chrome, Computer Use, Computer History, and OpenAI Developer
	9	+ Docs. They appear in the connect dialog with their own icons, and a card that
	10	+ cannot run yet says what to install and links to it.
	11	+
	12	+ Tool calls reach the plugins through `codex app-server` rather than a plugin's
	13	+ own MCP server, because their services only honour calls from a Codex host
	14	+ session. Computer Use and Chrome ship no MCP server at all, so their APIs are
	15	+ projected as typed tools — `list_apps`, `click`, `read_page`, `navigate` — that
	16	+ compile to a single call each. No model turn is involved; nothing is bundled or
	17	+ downloaded, and a machine without Codex simply sees the setup steps.
	18	+
	19	+ A plugin's own approval prompt now reaches the caller, and states the terms it
	20	+ carries: a browser prompt that persists for a site says so. Approvals are asked
	21	+ once per session rather than per call.
	22	+
	23	+ Elicitation requests can carry implementation-defined metadata through
	24	+ `FormElicitation` / `UrlElicitation`, and a paused execution reports it. Both
	25	+ fields are optional and additive.
	26	+
	27	+- [#1346](https://github.com/UsefulSoftwareCo/executor/pull/1346) [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Creating a connection over an existing one is rejected instead of silently overwriting it
	28	+
	29	+ `connections.create` used to upsert: a create with the same (owner, integration, name) replaced the saved connection and, for a pasted value, overwrote the stored secret itself. It now fails with the new `ConnectionAlreadyExistsError` and leaves the existing connection untouched. Remove the connection first, or pick a different name.
	30	+
	31	+ This adds one error to the wire contract: the `POST /connections` endpoint can answer HTTP 409 with tag `ConnectionAlreadyExistsError`, and the `connections.create` core tool resolves the same case as `{ ok: false, error: { code: "connection_already_exists" } }`. The core tool now also resolves the other expected input failures the same way instead of as opaque internal errors: `integration_not_found` for an unknown integration and `invalid_connection_input` for an invalid input. The change is additive — no existing status, field, or success shape moves.
	32	+
	33	+ OAuth is unaffected. Fresh OAuth connects already resolve a taken name to the next free suffix through `newConnection`, and reconnect still re-mints the same connection on purpose.
	34	+
	35	+- [#1708](https://github.com/UsefulSoftwareCo/executor/pull/1708) [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Stale "unhealthy" verdicts no longer wait for a manual "Check now"
	36	+
	37	+ A connection's persisted health verdict was only ever re-checked from the web UI, so after one bad probe (a transient upstream error, a refresh that failed once) agents reading `connections.list` kept reporting "unhealthy, reconnect" for a connection that worked fine — invocation auto-refreshes OAuth tokens — until a human opened the page and clicked "Check now".
	38	+
	39	+ Two repair paths make the verdict track reality on its own. The agent-facing `connections.list` now re-runs the same probe as "Check now" before reporting a non-healthy verdict older than a minute, so recovery shows on the next read while repeated lists collapse to one probe per window. And a successful tool invocation through a connection wearing a non-healthy verdict flips it back to healthy — real traffic is stronger evidence than any probe. Tool-sync failure verdicts and grants the authorization server has rejected as `invalid_grant` are deliberately left alone: the first is cleared only by a successful sync, and the second genuinely requires a reconnect. A call whose credential no longer resolves is left alone too — a rendered request omits the missing placement, so an upstream that answers unauthenticated proves nothing about a credential that is gone.
	40	+
	41	+ `PluginCtx.connections` gains `checkHealth`, the same probe-with-freshness-window the executor surface already exposed.
	42	+
	43	+- [#1818](https://github.com/UsefulSoftwareCo/executor/pull/1818) [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84) Thanks [@ramarivera](https://github.com/ramarivera)! - Rejected MCP OAuth grants now request reconnect without registering a disposable client
	44	+
	45	+ Remote MCP catalog discovery used the MCP SDK's interactive OAuth fallback when an upstream rejected Executor's stored bearer with `401`. A background refresh cannot finish that browser authorization, but the SDK first fetched OAuth metadata and dynamically registered another client. Executor then preserved the old catalog under a generic degraded health verdict, so clients saw zero or stale tools without a reliable reconnect signal.
	46	+
	47	+ Executor now stops at the authenticated HTTP boundary for OAuth-backed MCP transports. A rejected stored bearer becomes a structured reauthorization result before OAuth discovery or Dynamic Client Registration runs. Catalog refresh still preserves the last authoritative tools, but records the connection as expired with a reconnect-required detail so the UI and API can direct the user through authorization again.
	48	+
	49	+ API-key and unauthenticated MCP transports keep their existing `401` behavior, and ordinary incomplete discovery results remain degraded.
	50	+
3	51	## 1.6.3
4	52
5	53	### Patch Changes

packages/core/sdk/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/sdk",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/sdk",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/core/vite-plugin/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/vite-plugin
2	2
	3	+## 0.0.64
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+
3	10	## 0.0.63
4	11
5	12	### Patch Changes

packages/core/vite-plugin/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/vite-plugin",
3		− "version": "0.0.63",
	3	+ "version": "0.0.64",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/vite-plugin",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/hosts/cloudflare/CHANGELOG.md+10−0

@@ -1,5 +1,15 @@
1	1	# @executor-js/cloudflare
2	2
	3	+## 0.0.46
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+ - @executor-js/api@1.4.67
	10	+ - @executor-js/execution@1.6.4
	11	+ - @executor-js/host-mcp@1.4.4
	12	+
3	13	## 0.0.45
4	14
5	15	### Patch Changes

packages/hosts/cloudflare/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/cloudflare",
3		− "version": "0.0.45",
	3	+ "version": "0.0.46",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {

packages/hosts/mcp-apps-shell/CHANGELOG.md+8−0

@@ -1,5 +1,13 @@
1	1	# @executor-js/mcp-apps-shell
2	2
	3	+## 1.4.15
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562)]:
	8	+ - @executor-js/react@1.4.67
	9	+ - @executor-js/runtime-quickjs@1.6.4
	10	+
3	11	## 1.4.14
4	12
5	13	### Patch Changes

packages/hosts/mcp-apps-shell/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/mcp-apps-shell",
3		− "version": "1.4.14",
	3	+ "version": "1.4.15",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {

packages/kernel/core/CHANGELOG.md+2−0

@@ -1,5 +1,7 @@
1	1	# @executor-js/codemode-core
2	2
	3	+## 1.6.4
	4	+
3	5	## 1.6.3
4	6
5	7	## 1.6.2

packages/kernel/core/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/codemode-core",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/kernel/core",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/kernel/runtime-quickjs/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/runtime-quickjs
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies []:
	8	+ - @executor-js/codemode-core@1.6.4
	9	+
3	10	## 1.6.3
4	11
5	12	### Patch Changes

packages/kernel/runtime-quickjs/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/runtime-quickjs",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/kernel/runtime-quickjs",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/kernel/runtime-workerd-subprocess/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/runtime-workerd-subprocess
2	2
	3	+## 0.0.19
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies []:
	8	+ - @executor-js/codemode-core@1.6.4
	9	+
3	10	## 0.0.18
4	11
5	12	### Patch Changes

packages/kernel/runtime-workerd-subprocess/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/runtime-workerd-subprocess",
3		− "version": "0.0.18",
	3	+ "version": "0.0.19",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {

packages/plugins/desktop-settings/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/plugin-desktop-settings
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+
3	10	## 1.6.3
4	11
5	12	### Patch Changes

packages/plugins/desktop-settings/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-desktop-settings",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/desktop-settings",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/plugins/encrypted-secrets/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/plugin-encrypted-secrets
2	2
	3	+## 0.0.46
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+
3	10	## 0.0.45
4	11
5	12	### Patch Changes

packages/plugins/encrypted-secrets/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-encrypted-secrets",
3		− "version": "0.0.45",
	3	+ "version": "0.0.46",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {

packages/plugins/example/CHANGELOG.md+7−0

@@ -1,5 +1,12 @@
1	1	# @executor-js/plugin-example
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+
3	10	## 1.6.3
4	11
5	12	### Patch Changes

packages/plugins/example/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-example",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/example",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/plugins/file-secrets/CHANGELOG.md+9−0

@@ -1,5 +1,14 @@
1	1	# @executor-js/plugin-file-secrets
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- [#1838](https://github.com/UsefulSoftwareCo/executor/pull/1838) [`939b96f`](https://github.com/UsefulSoftwareCo/executor/commit/939b96f694a420cd6151c4e402cff7f1ab4b327a) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Import plugin-authoring symbols from `@executor-js/sdk/core` instead of the package root. The published root is the Promise surface and does not export `StorageError`, `definePlugin`, `PluginCtx`, or `Plugin`, so both packages failed to load when installed from npm.
	8	+
	9	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	10	+ - @executor-js/sdk@1.6.4
	11	+
3	12	## 1.6.3
4	13
5	14	### Patch Changes

packages/plugins/file-secrets/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-file-secrets",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/file-secrets",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/plugins/graphql/CHANGELOG.md+10−0

@@ -1,5 +1,15 @@
1	1	# @executor-js/plugin-graphql
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+ - @executor-js/react@1.4.67
	10	+ - @executor-js/api@1.4.67
	11	+ - @executor-js/config@1.6.4
	12	+
3	13	## 1.6.3
4	14
5	15	### Patch Changes

packages/plugins/graphql/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-graphql",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/graphql",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/plugins/keychain/CHANGELOG.md+9−0

@@ -1,5 +1,14 @@
1	1	# @executor-js/plugin-keychain
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- [#1838](https://github.com/UsefulSoftwareCo/executor/pull/1838) [`939b96f`](https://github.com/UsefulSoftwareCo/executor/commit/939b96f694a420cd6151c4e402cff7f1ab4b327a) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Import plugin-authoring symbols from `@executor-js/sdk/core` instead of the package root. The published root is the Promise surface and does not export `StorageError`, `definePlugin`, `PluginCtx`, or `Plugin`, so both packages failed to load when installed from npm.
	8	+
	9	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	10	+ - @executor-js/sdk@1.6.4
	11	+
3	12	## 1.6.3
4	13
5	14	### Patch Changes

packages/plugins/keychain/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-keychain",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/keychain",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/plugins/mcp/CHANGELOG.md+38−0

@@ -1,5 +1,43 @@
1	1	# @executor-js/plugin-mcp
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- [#1858](https://github.com/UsefulSoftwareCo/executor/pull/1858) [`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Add locally installed OpenAI Codex plugins as one-click integrations: Messages
	8	+ (iMessage/SMS), Chrome, Computer Use, Computer History, and OpenAI Developer
	9	+ Docs. They appear in the connect dialog with their own icons, and a card that
	10	+ cannot run yet says what to install and links to it.
	11	+
	12	+ Tool calls reach the plugins through `codex app-server` rather than a plugin's
	13	+ own MCP server, because their services only honour calls from a Codex host
	14	+ session. Computer Use and Chrome ship no MCP server at all, so their APIs are
	15	+ projected as typed tools — `list_apps`, `click`, `read_page`, `navigate` — that
	16	+ compile to a single call each. No model turn is involved; nothing is bundled or
	17	+ downloaded, and a machine without Codex simply sees the setup steps.
	18	+
	19	+ A plugin's own approval prompt now reaches the caller, and states the terms it
	20	+ carries: a browser prompt that persists for a site says so. Approvals are asked
	21	+ once per session rather than per call.
	22	+
	23	+ Elicitation requests can carry implementation-defined metadata through
	24	+ `FormElicitation` / `UrlElicitation`, and a paused execution reports it. Both
	25	+ fields are optional and additive.
	26	+
	27	+- [#1818](https://github.com/UsefulSoftwareCo/executor/pull/1818) [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84) Thanks [@ramarivera](https://github.com/ramarivera)! - Rejected MCP OAuth grants now request reconnect without registering a disposable client
	28	+
	29	+ Remote MCP catalog discovery used the MCP SDK's interactive OAuth fallback when an upstream rejected Executor's stored bearer with `401`. A background refresh cannot finish that browser authorization, but the SDK first fetched OAuth metadata and dynamically registered another client. Executor then preserved the old catalog under a generic degraded health verdict, so clients saw zero or stale tools without a reliable reconnect signal.
	30	+
	31	+ Executor now stops at the authenticated HTTP boundary for OAuth-backed MCP transports. A rejected stored bearer becomes a structured reauthorization result before OAuth discovery or Dynamic Client Registration runs. Catalog refresh still preserves the last authoritative tools, but records the connection as expired with a reconnect-required detail so the UI and API can direct the user through authorization again.
	32	+
	33	+ API-key and unauthenticated MCP transports keep their existing `401` behavior, and ordinary incomplete discovery results remain degraded.
	34	+
	35	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	36	+ - @executor-js/sdk@1.6.4
	37	+ - @executor-js/react@1.4.67
	38	+ - @executor-js/api@1.4.67
	39	+ - @executor-js/config@1.6.4
	40	+
3	41	## 1.6.3
4	42
5	43	### Patch Changes

packages/plugins/mcp/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-mcp",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/mcp",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/plugins/onepassword/CHANGELOG.md+18−0

@@ -1,5 +1,23 @@
1	1	# @executor-js/plugin-onepassword
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- [#1860](https://github.com/UsefulSoftwareCo/executor/pull/1860) [`2cad774`](https://github.com/UsefulSoftwareCo/executor/commit/2cad7745dea1afb9282c3888f4e9c59ce6fe4332) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - 1Password-backed connections no longer pay a 1Password read on every tool call
	8	+
	9	+ Each tool call resolves its connection's credential, and for 1Password-backed connections every resolution shelled out to the `op` CLI — roughly a second per call under desktop-app auth, multiplying the latency of every call several times over. The spawn was also synchronous, so one slow resolution (for example `op` waiting on a 1Password approval prompt) blocked the whole local server for every other request, with no timeout on that path.
	10	+
	11	+ Three changes:
	12	+ - Successful resolutions are now served from memory for a short TTL (default 60s, `secretCacheTtlMs`). The cache keys by a fingerprint of the provider config, so editing or removing an account drops all cached secrets at once; not-found, ambiguity, and failure outcomes are never retained. Concurrent resolutions of the same ref share one backend read even with the TTL set to `0`.
	13	+ - The `op` CLI now runs as an asynchronous spawn with a hard deadline (the plugin's existing `timeoutMs`), so a stuck `op` fails with the troubleshooting message instead of freezing the server. Auth reaches the child per spawn (service-account token via the environment, desktop account via `--account`) instead of through the previous backend's process-global token state.
	14	+ - Services are memoized per auth identity, so the SDK fallback reuses one authenticated client instead of re-authenticating per resolution.
	15	+
	16	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	17	+ - @executor-js/sdk@1.6.4
	18	+ - @executor-js/react@1.4.67
	19	+ - @executor-js/api@1.4.67
	20	+
3	21	## 1.6.3
4	22
5	23	### Patch Changes

packages/plugins/onepassword/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-onepassword",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/onepassword",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/plugins/openapi/CHANGELOG.md+10−0

@@ -1,5 +1,15 @@
1	1	# @executor-js/plugin-openapi
2	2
	3	+## 1.6.4
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+ - @executor-js/react@1.4.67
	10	+ - @executor-js/api@1.4.67
	11	+ - @executor-js/config@1.6.4
	12	+
3	13	## 1.6.3
4	14
5	15	### Patch Changes

packages/plugins/openapi/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-openapi",
3		− "version": "1.6.3",
	3	+ "version": "1.6.4",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/openapi",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/plugins/provider-service-split/CHANGELOG.md+8−0

@@ -1,5 +1,13 @@
1	1	# @executor-js/plugin-provider-service-split
2	2
	3	+## 0.0.18
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+ - @executor-js/plugin-openapi@1.6.4
	10	+
3	11	## 0.0.17
4	12
5	13	### Patch Changes

packages/plugins/provider-service-split/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-provider-service-split",
3		− "version": "0.0.17",
	3	+ "version": "0.0.18",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {

packages/plugins/toolkits/CHANGELOG.md+9−0

@@ -1,5 +1,14 @@
1	1	# @executor-js/plugin-toolkits
2	2
	3	+## 1.5.39
	4	+
	5	+### Patch Changes
	6	+
	7	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	8	+ - @executor-js/sdk@1.6.4
	9	+ - @executor-js/react@1.4.67
	10	+ - @executor-js/api@1.4.67
	11	+
3	12	## 1.5.38
4	13
5	14	### Patch Changes

packages/plugins/toolkits/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/plugin-toolkits",
3		− "version": "1.5.38",
	3	+ "version": "1.5.39",
4	4	"homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/toolkits",
5	5	"bugs": {
6	6	"url": "https://github.com/UsefulSoftwareCo/executor/issues"

packages/react/CHANGELOG.md+14−0

@@ -1,5 +1,19 @@
1	1	# @executor-js/react
2	2
	3	+## 1.4.67
	4	+
	5	+### Patch Changes
	6	+
	7	+- [#1559](https://github.com/UsefulSoftwareCo/executor/pull/1559) [`9dcfaa5`](https://github.com/UsefulSoftwareCo/executor/commit/9dcfaa5ee8ad2ebc17407caf94d8d4dcf55e3562) Thanks [@Adityakk9031](https://github.com/Adityakk9031)! - Reconnecting a DCR connection now re-registers instead of reusing a stranded client
	8	+
	9	+ A dynamically registered OAuth client is bound to the redirect URI it registered with. Once the app's callback origin changed (127.0.0.1 to localhost), Reconnect still started the flow against the stored client, and the authorization server rejected it — leaving no way to repair the connection.
	10	+
	11	+ Reconnect now takes the same probe → CIMD-or-register → start route as the initial connect, so the registration gateway replaces the stranded client against the current redirect URI. Methods with a fixed, hand-registered app are unaffected and keep using their stored client.
	12	+
	13	+- Updated dependencies [[`ffcfbc0`](https://github.com/UsefulSoftwareCo/executor/commit/ffcfbc0de27d0ae55215839fb70395b0b7d9a65c), [`10e16a5`](https://github.com/UsefulSoftwareCo/executor/commit/10e16a5baa2648657b70038e7d11429c58e4d242), [`515d6aa`](https://github.com/UsefulSoftwareCo/executor/commit/515d6aa391a04a3579a7b10f974ec316a563cf7a), [`06bf742`](https://github.com/UsefulSoftwareCo/executor/commit/06bf74254f3432e8d75fd8b493ef7a435ea4bc84)]:
	14	+ - @executor-js/sdk@1.6.4
	15	+ - @executor-js/api@1.4.67
	16	+
3	17	## 1.4.66
4	18
5	19	### Patch Changes

packages/react/package.json+1−1

@@ -1,6 +1,6 @@
1	1	{
2	2	"name": "@executor-js/react",
3		− "version": "1.4.66",
	3	+ "version": "1.4.67",
4	4	"private": true,
5	5	"type": "module",
6	6	"exports": {