v1.5.32

Patch Changes

• #1395 d90d8be Thanks @RhysSullivan! - Policy create now defaults a new rule's position below any more-specific existing rule on the server, so a broad rule written without an explicit position (stale UI, API, agent tool) cannot shadow an existing narrower rule.

• #1394 1ca5111 Thanks @RhysSullivan! - Ship the platform workerd binary in the self-host Docker runtime; without it custom app tools failed to sync or invoke with "workerd is unavailable on this platform".

• Updated dependencies []:

  • @executor-js/sdk@1.5.32
  • @executor-js/runtime-quickjs@1.5.32
  • @executor-js/local@1.4.4
  • @executor-js/api@1.4.52

v1.5.31

Patch Changes

• #1390 d95e63c Thanks @RhysSullivan! - Ship @cloudflare/worker-bundler in the self-host Docker runtime so the server starts; it was resolved at runtime since the dynamic Worker bundler change but never copied into the image.

• Updated dependencies []:

  • @executor-js/local@1.4.4
  • @executor-js/sdk@1.5.31
  • @executor-js/runtime-quickjs@1.5.31
  • @executor-js/api@1.4.51

v1.5.30

Patch Changes

• #1371 262fc3e Thanks @RhysSullivan! - Explain 401s from a hosted server as a sign-in problem with the exact executor login command to run, instead of surfacing a raw decode error. executor login now defaults to https://executor.sh when no server is specified, and profile plumbing stays out of messages unless you address servers by name.

• #1375 0f81165 Thanks @RhysSullivan! - Run cloud custom tool bundling in a dynamically loaded Worker so dependency installation and bundling do not share the serving request isolate.

• #1349 a7e3091 Thanks @RhysSullivan! - Back-stop code execution with a host-side timeout so a wedged sandbox delivers a descriptive error instead of hanging silently.

• #1351 93b000a Thanks @RhysSullivan! - Let stock MCP clients auto-reconnect and recover a tool result when a POST stream drops mid-call.

• #1345 c46730b Thanks @RhysSullivan! - Preserve MCP tool results across dropped streamable HTTP SSE connections.

• #1357 4c319ee Thanks @RhysSullivan! - Throw a guidance error when sandbox code enumerates the tools proxy (Object.keys, spread, for...in) instead of returning an empty list, pointing agents at tools.search().

• #1352 8bdf315 Thanks @RhysSullivan! - Treat a transient WorkOS outage during the MCP live-membership check as a retryable 503 instead of a Forbidden that destroys the session.

• Updated dependencies []:

  • @executor-js/sdk@1.5.30
  • @executor-js/runtime-quickjs@1.5.30
  • @executor-js/local@1.4.4
  • @executor-js/api@1.4.50

v1.5.29

Patch Changes

• #1341 5656c3e Thanks @RhysSullivan! - Fix 1Password desktop-app connections failing with "undefined is not a constructor (evaluating 'new n.DesktopAuth(...)')" in packaged builds. The compiled binary now bundles the 1Password SDK's wasm core correctly and falls back to a copy shipped next to the binary, so vault listing and secret resolution work without the op CLI installed.

• Updated dependencies []:

  • @executor-js/sdk@1.5.29
  • @executor-js/runtime-quickjs@1.5.29
  • @executor-js/local@1.4.4
  • @executor-js/api@1.4.49

v1.5.28

Patch Changes

• Updated dependencies [1c48182]:
  • @executor-js/sdk@1.5.28
  • @executor-js/local@1.4.4
  • @executor-js/api@1.4.48
  • @executor-js/runtime-quickjs@1.5.28

v1.5.27

Patch Changes

• Updated dependencies [c7ab1e2]:
  • @executor-js/api@1.4.47
  • @executor-js/local@1.4.4
  • @executor-js/sdk@1.5.27
  • @executor-js/runtime-quickjs@1.5.27

v1.5.26

Patch Changes

• #1221 3606317 Thanks @RhysSullivan! - Send correct Cache-Control headers for the self-hosted web app. The SPA shell (index.html) and its client-route fallbacks are now served with no-cache, so a new deploy is picked up on the next visit instead of the browser rendering a stale UI from cache until a hard refresh. Content-hashed /assets/* are served immutable and cached long-term.

• Updated dependencies []:

  • @executor-js/sdk@1.5.26
  • @executor-js/runtime-quickjs@1.5.26
  • @executor-js/local@1.4.4
  • @executor-js/api@1.4.46

v1.5.25

Patch Changes

• Updated dependencies []:
  • @executor-js/local@1.4.4
  • @executor-js/sdk@1.5.25
  • @executor-js/runtime-quickjs@1.5.25
  • @executor-js/api@1.4.45

v1.5.24

Patch Changes

• #1207 c8d9b9d Thanks @RhysSullivan! - Polish the app's title bar. The release tag beside the executor wordmark is now quiet muted-mono metadata instead of a filled pill, matching the registry-minimal design language, and the wordmark is shared across the desktop and dashboard shells so the brand reads identically everywhere. The macOS traffic-light offset is also applied to the mobile sidebar overlay and the collapsed top bar, so the native window controls never sit on top of the wordmark when the window is narrow.

• #1204 9394217 Thanks @RhysSullivan! - Fix the self-host and Cloudflare web dashboards showing "update available" even on the latest version. The builds baked a placeholder version (0.0.0-selfhost / 0.0.0-cloudflare) into the shell, so the update check always compared as behind. They now bake the real release version, and the sidebar footer shows the running version so you can see what you are on.

• #1209 ffa4f70 Thanks @RhysSullivan! - Fix the desktop and CLI daemon crashing on first launch on Windows when a v1 local database is present. The v1 to v2 data migration performed file operations (fsync, rename, remove) on libSQL SQLite files whose native OS handles linger after close() on Windows, surfacing as a fatal "Unknown error" (EPERM on fsync of a read-only handle, EBUSY on rename/remove of just-closed files). POSIX is unaffected, so this only reproduced on Windows. The migration now opens files read-write for fsync (treating it as best-effort), retries removes the same way renames were already retried, and forces a GC pass on each retry so libSQL's native finalizer releases the handle before the next attempt. Fixes the v1.5.23 Windows startup regression.

• Updated dependencies []:

  • @executor-js/sdk@1.5.24
  • @executor-js/runtime-quickjs@1.5.24
  • @executor-js/local@1.4.4
  • @executor-js/api@1.4.44

v1.5.22

Patch Changes

• #1167 add2e40 Thanks @RhysSullivan! - Fix the desktop app's main-area title-bar strip pushing page content down so page headers no longer lined up with the sidebar header. The drag strip now overlays the top of the main area (behind page content) instead of reserving its own row, and the Toolkits header uses a fixed title-bar height so its bottom border aligns with the sidebar header again.

• Updated dependencies []:

  • @executor-js/local@1.4.4
  • @executor-js/sdk@1.5.22
  • @executor-js/runtime-quickjs@1.5.22
  • @executor-js/api@1.4.42