diff --git a/.changeset/apikey-validate-cache.md b/.changeset/apikey-validate-cache.md
deleted file mode 100644
index 26d3d9a21..000000000
--- a/.changeset/apikey-validate-cache.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-"@executor-js/cloud": patch
----
-
-**API key validation is cached per isolate**
-
-Every MCP request and every API-key-authenticated `/api/*` request used to pay a live WorkOS round trip (~100-150ms) to validate the presented key, on every single request. The JWT bearer path beside it already verified locally against a JWKS cached for an hour; API keys had no cache at all.
-
-Successful validations are now cached in a bounded per-isolate map for 60 seconds, keyed by the SHA-256 digest of the key value (never the raw credential). The MCP handler used to rebuild its whole auth layer (and with it the cache) on every request; it now builds the layer once per isolate, so the cache holds on both the `/api/*` and `/mcp` planes. Invalid keys and upstream failures are never cached, so probing bad keys cannot pollute the map and a freshly created key works immediately. The tradeoff: a revoked key remains usable for up to 60 seconds within an isolate that validated it before revocation — far tighter than the one-hour rotation window the JWT path already accepts.
diff --git a/.changeset/codex-permission-onboarding.md b/.changeset/codex-permission-onboarding.md
deleted file mode 100644
index 02f78be26..000000000
--- a/.changeset/codex-permission-onboarding.md
+++ /dev/null
@@ -1,19 +0,0 @@
----
-"executor": patch
-"@executor-js/plugin-mcp": patch
----
-
-Explain macOS permissions for Codex plugins instead of failing with an opaque
-error. A refused grant used to surface as `Internal tool error [id]` — the
-plugin reports "Unknown error" and only a numeric code says what happened, so
-neither the user nor the model could tell that macOS was the blocker.
-
-The bridge now recognises those codes and answers with the grant to enable and
-where to find it. Each plugin's add screen also states what macOS will ask for
-before anything runs, with a link straight to the right Privacy pane — macOS
-asks once, and a dismissed prompt never returns.
-
-The add screen checks that access when it opens, and holds the Add button
-until the plugin answers. Adding one that macOS is still blocking produced an
-integration that looked connected and failed on its first call, by which point
-the screen explaining the fix was gone.
diff --git a/.changeset/dedupe-result-size-walk.md b/.changeset/dedupe-result-size-walk.md
deleted file mode 100644
index 99f70d6e2..000000000
--- a/.changeset/dedupe-result-size-walk.md
+++ /dev/null
@@ -1,7 +0,0 @@
----
-"@executor-js/execution": patch
----
-
-**Large execute results are measured once, not once per span**
-
-The result-size telemetry probe serializes the whole returned value to count its characters, and that cost grows with the payload. The same result object was walked again every time it was stamped onto another span: an operator-approved run measured it twice (inner and outer span), and every retried `resume` that replayed a settled outcome measured it again. The measurement is now computed once per result object and reused, so a large result pays one size walk no matter how many spans report it. Response text, structured content, and span attribute values are unchanged.
diff --git a/.changeset/oauth-await-longpoll.md b/.changeset/oauth-await-longpoll.md
deleted file mode 100644
index b402e78ab..000000000
--- a/.changeset/oauth-await-longpoll.md
+++ /dev/null
@@ -1,10 +0,0 @@
----
-"@executor-js/local": patch
-"@executor-js/react": patch
----
-
-**Desktop OAuth connects finish the moment the provider redirects**
-
-When the desktop app runs an OAuth flow in the system browser, the app learned about completion by polling the local server once a second. The completed result sat in memory while the user watched the "Connecting…" spinner for up to a second more — about half a second wasted on average, on every connect.
-
-The await endpoint now long-polls: the server holds the request open (up to 25 seconds per hold) and answers the instant the flow completes. The client polls one request at a time and reconnects after each answer, so requests never stack. Mixed versions stay compatible in both directions: an old client still gets its answer within one poll of a new server, and a new client against an old server behaves exactly as before.
diff --git a/apps/cli/CHANGELOG.md b/apps/cli/CHANGELOG.md
index 671a19041..8e118ff82 100644
--- a/apps/cli/CHANGELOG.md
+++ b/apps/cli/CHANGELOG.md
@@ -1,5 +1,30 @@
 # executor
 
+## 1.6.6
+
+### Patch Changes
+
+- [#1869](https://github.com/UsefulSoftwareCo/executor/pull/1869) [`c695970`](https://github.com/UsefulSoftwareCo/executor/commit/c6959702f6459504463fe0e13fa1a576190460ed) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Explain macOS permissions for Codex plugins instead of failing with an opaque
+  error. A refused grant used to surface as `Internal tool error [id]` — the
+  plugin reports "Unknown error" and only a numeric code says what happened, so
+  neither the user nor the model could tell that macOS was the blocker.
+
+  The bridge now recognises those codes and answers with the grant to enable and
+  where to find it. Each plugin's add screen also states what macOS will ask for
+  before anything runs, with a link straight to the right Privacy pane — macOS
+  asks once, and a dismissed prompt never returns.
+
+  The add screen checks that access when it opens, and holds the Add button
+  until the plugin answers. Adding one that macOS is still blocking produced an
+  integration that looked connected and failed on its first call, by which point
+  the screen explaining the fix was gone.
+
+- Updated dependencies [[`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/local@1.6.6
+  - @executor-js/api@1.4.69
+  - @executor-js/sdk@1.6.6
+  - @executor-js/runtime-quickjs@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/apps/cli/package.json b/apps/cli/package.json
index 9c94d93eb..9519ee978 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "executor",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "private": true,
   "bin": {
     "executor": "./bin/executor.ts"
diff --git a/apps/cloud/CHANGELOG.md b/apps/cloud/CHANGELOG.md
index f0a21e019..66e71342d 100644
--- a/apps/cloud/CHANGELOG.md
+++ b/apps/cloud/CHANGELOG.md
@@ -1,5 +1,32 @@
 # @executor-js/cloud
 
+## 1.4.67
+
+### Patch Changes
+
+- [#1864](https://github.com/UsefulSoftwareCo/executor/pull/1864) [`fad3650`](https://github.com/UsefulSoftwareCo/executor/commit/fad36504439a07e6080beba243b24b73cd1b9741) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **API key validation is cached per isolate**
+
+  Every MCP request and every API-key-authenticated `/api/*` request used to pay a live WorkOS round trip (~100-150ms) to validate the presented key, on every single request. The JWT bearer path beside it already verified locally against a JWKS cached for an hour; API keys had no cache at all.
+
+  Successful validations are now cached in a bounded per-isolate map for 60 seconds, keyed by the SHA-256 digest of the key value (never the raw credential). The MCP handler used to rebuild its whole auth layer (and with it the cache) on every request; it now builds the layer once per isolate, so the cache holds on both the `/api/*` and `/mcp` planes. Invalid keys and upstream failures are never cached, so probing bad keys cannot pollute the map and a freshly created key works immediately. The tradeoff: a revoked key remains usable for up to 60 seconds within an isolate that validated it before revocation — far tighter than the one-hour rotation window the JWT path already accepts.
+
+- Updated dependencies [[`c695970`](https://github.com/UsefulSoftwareCo/executor/commit/c6959702f6459504463fe0e13fa1a576190460ed), [`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d), [`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/plugin-mcp@1.6.6
+  - @executor-js/execution@1.6.6
+  - @executor-js/react@1.4.69
+  - @executor-js/api@1.4.69
+  - @executor-js/cloudflare@0.0.48
+  - @executor-js/host-mcp@1.4.4
+  - @executor-js/mcp-apps-shell@1.4.17
+  - @executor-js/runtime-dynamic-worker@1.4.4
+  - @executor-js/plugin-graphql@1.6.6
+  - @executor-js/plugin-openapi@1.6.6
+  - @executor-js/plugin-toolkits@1.5.41
+  - @executor-js/plugin-workos-vault@0.0.2
+  - @executor-js/sdk@1.6.6
+  - @executor-js/runtime-quickjs@1.6.6
+  - @executor-js/vite-plugin@0.0.66
+
 ## 1.4.66
 
 ### Patch Changes
diff --git a/apps/cloud/package.json b/apps/cloud/package.json
index c50932b90..1c962d2b0 100644
--- a/apps/cloud/package.json
+++ b/apps/cloud/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/cloud",
-  "version": "1.4.66",
+  "version": "1.4.67",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/apps/desktop/CHANGELOG.md b/apps/desktop/CHANGELOG.md
index f5fb32a15..fc1f6c374 100644
--- a/apps/desktop/CHANGELOG.md
+++ b/apps/desktop/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @executor-js/desktop
 
+## 1.6.6
+
 ## 1.6.5
 
 ## 1.6.4
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index dc6c7fb54..4c11656ed 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/desktop",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "private": true,
   "homepage": "https://github.com/UsefulSoftwareCo/executor",
   "license": "MIT",
diff --git a/apps/host-selfhost/CHANGELOG.md b/apps/host-selfhost/CHANGELOG.md
index e7afc2e81..eddbb0d1e 100644
--- a/apps/host-selfhost/CHANGELOG.md
+++ b/apps/host-selfhost/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @executor-js/host-selfhost
 
+## 0.0.48
+
+### Patch Changes
+
+- Updated dependencies [[`c695970`](https://github.com/UsefulSoftwareCo/executor/commit/c6959702f6459504463fe0e13fa1a576190460ed), [`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d), [`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/plugin-mcp@1.6.6
+  - @executor-js/execution@1.6.6
+  - @executor-js/react@1.4.69
+  - @executor-js/analytics@0.1.13
+  - @executor-js/api@1.4.69
+  - @executor-js/host-mcp@1.4.4
+  - @executor-js/mcp-apps-shell@1.4.17
+  - @executor-js/app@1.4.4
+  - @executor-js/plugin-graphql@1.6.6
+  - @executor-js/plugin-openapi@1.6.6
+  - @executor-js/plugin-toolkits@1.5.41
+  - @executor-js/plugin-provider-service-split@0.0.20
+  - @executor-js/sdk@1.6.6
+  - @executor-js/runtime-quickjs@1.6.6
+  - @executor-js/plugin-encrypted-secrets@0.0.48
+
 ## 0.0.47
 
 ### Patch Changes
diff --git a/apps/host-selfhost/package.json b/apps/host-selfhost/package.json
index 6f3c63a13..e998bd4dd 100644
--- a/apps/host-selfhost/package.json
+++ b/apps/host-selfhost/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/host-selfhost",
-  "version": "0.0.47",
+  "version": "0.0.48",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/apps/local/CHANGELOG.md b/apps/local/CHANGELOG.md
index f55695c0f..c77278cef 100644
--- a/apps/local/CHANGELOG.md
+++ b/apps/local/CHANGELOG.md
@@ -1,5 +1,38 @@
 # @executor-js/local
 
+## 1.6.6
+
+### Patch Changes
+
+- [#1865](https://github.com/UsefulSoftwareCo/executor/pull/1865) [`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **Desktop OAuth connects finish the moment the provider redirects**
+
+  When the desktop app runs an OAuth flow in the system browser, the app learned about completion by polling the local server once a second. The completed result sat in memory while the user watched the "Connecting…" spinner for up to a second more — about half a second wasted on average, on every connect.
+
+  The await endpoint now long-polls: the server holds the request open (up to 25 seconds per hold) and answers the instant the flow completes. The client polls one request at a time and reconnects after each answer, so requests never stack. Mixed versions stay compatible in both directions: an old client still gets its answer within one poll of a new server, and a new client against an old server behaves exactly as before.
+
+- Updated dependencies [[`c695970`](https://github.com/UsefulSoftwareCo/executor/commit/c6959702f6459504463fe0e13fa1a576190460ed), [`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d), [`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/plugin-mcp@1.6.6
+  - @executor-js/execution@1.6.6
+  - @executor-js/react@1.4.69
+  - @executor-js/analytics@0.1.13
+  - @executor-js/api@1.4.69
+  - @executor-js/host-mcp@1.4.4
+  - @executor-js/mcp-apps-shell@1.4.17
+  - @executor-js/app@1.4.4
+  - @executor-js/plugin-graphql@1.6.6
+  - @executor-js/plugin-onepassword@1.6.6
+  - @executor-js/plugin-openapi@1.6.6
+  - @executor-js/plugin-toolkits@1.5.41
+  - @executor-js/plugin-provider-service-split@0.0.20
+  - @executor-js/sdk@1.6.6
+  - @executor-js/runtime-quickjs@1.6.6
+  - @executor-js/config@1.6.6
+  - @executor-js/plugin-file-secrets@1.6.6
+  - @executor-js/plugin-keychain@1.6.6
+  - @executor-js/plugin-example@1.6.6
+  - @executor-js/plugin-desktop-settings@1.6.6
+  - @executor-js/vite-plugin@0.0.66
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/apps/local/package.json b/apps/local/package.json
index f59c1b68b..e00df7674 100644
--- a/apps/local/package.json
+++ b/apps/local/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/local",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/bun.lock b/bun.lock
index 9dd49221f..d27d08dc9 100644
--- a/bun.lock
+++ b/bun.lock
@@ -31,7 +31,7 @@
     },
     "apps/cli": {
       "name": "executor",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "bin": {
         "executor": "./bin/executor.ts",
       },
@@ -60,7 +60,7 @@
     },
     "apps/cloud": {
       "name": "@executor-js/cloud",
-      "version": "1.4.66",
+      "version": "1.4.67",
       "dependencies": {
         "@cloudflare/vite-plugin": "^1.31.1",
         "@effect/atom-react": "catalog:",
@@ -133,7 +133,7 @@
     },
     "apps/desktop": {
       "name": "@executor-js/desktop",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@sentry/bun": "^10.57.0",
         "@sentry/electron": "^7.13.0",
@@ -220,7 +220,7 @@
     },
     "apps/host-selfhost": {
       "name": "@executor-js/host-selfhost",
-      "version": "0.0.47",
+      "version": "0.0.48",
       "dependencies": {
         "@better-auth/api-key": "^1.6.11",
         "@cloudflare/worker-bundler": "0.2.1",
@@ -272,7 +272,7 @@
     },
     "apps/local": {
       "name": "@executor-js/local",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@effect/atom-react": "catalog:",
         "@effect/platform-node": "catalog:",
@@ -352,7 +352,7 @@
     },
     "e2e": {
       "name": "@executor-js/e2e",
-      "version": "0.0.45",
+      "version": "0.0.46",
       "dependencies": {
         "@executor-js/api": "workspace:*",
         "@executor-js/emulate": "^0.14.1",
@@ -387,7 +387,7 @@
     },
     "examples/all-plugins": {
       "name": "@executor-js/example-all-plugins",
-      "version": "0.0.66",
+      "version": "0.0.67",
       "dependencies": {
         "@executor-js/plugin-file-secrets": "workspace:*",
         "@executor-js/plugin-graphql": "workspace:*",
@@ -406,7 +406,7 @@
     },
     "examples/docs-sdk-quickstart": {
       "name": "@executor-js/example-docs-sdk-quickstart",
-      "version": "0.0.51",
+      "version": "0.0.52",
       "dependencies": {
         "@executor-js/plugin-openapi": "workspace:*",
         "@executor-js/sdk": "workspace:*",
@@ -463,7 +463,7 @@
     },
     "packages/core/analytics": {
       "name": "@executor-js/analytics",
-      "version": "0.1.12",
+      "version": "0.1.13",
       "dependencies": {
         "@effect/platform-node": "catalog:",
         "@executor-js/execution": "workspace:*",
@@ -479,7 +479,7 @@
     },
     "packages/core/api": {
       "name": "@executor-js/api",
-      "version": "1.4.68",
+      "version": "1.4.69",
       "dependencies": {
         "@executor-js/execution": "workspace:*",
         "@executor-js/host-mcp": "workspace:*",
@@ -496,7 +496,7 @@
     },
     "packages/core/cli": {
       "name": "@executor-js/cli",
-      "version": "0.2.55",
+      "version": "0.2.56",
       "bin": {
         "executor-sdk": "./dist/index.js",
       },
@@ -517,7 +517,7 @@
     },
     "packages/core/config": {
       "name": "@executor-js/config",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "jiti": "^2.6.1",
@@ -538,7 +538,7 @@
     },
     "packages/core/execution": {
       "name": "@executor-js/execution",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@executor-js/codemode-core": "workspace:*",
         "@executor-js/sdk": "workspace:*",
@@ -604,7 +604,7 @@
     },
     "packages/core/sdk": {
       "name": "@executor-js/sdk",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@executor-js/fumadb": "workspace:*",
         "@standard-schema/spec": "^1.1.0",
@@ -657,7 +657,7 @@
     },
     "packages/core/vite-plugin": {
       "name": "@executor-js/vite-plugin",
-      "version": "0.0.65",
+      "version": "0.0.66",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "jiti": "^2.6.1",
@@ -677,7 +677,7 @@
     },
     "packages/hosts/cloudflare": {
       "name": "@executor-js/cloudflare",
-      "version": "0.0.47",
+      "version": "0.0.48",
       "dependencies": {
         "@executor-js/api": "workspace:*",
         "@executor-js/execution": "workspace:*",
@@ -718,7 +718,7 @@
     },
     "packages/hosts/mcp-apps-shell": {
       "name": "@executor-js/mcp-apps-shell",
-      "version": "1.4.16",
+      "version": "1.4.17",
       "dependencies": {
         "@executor-js/react": "workspace:*",
         "@executor-js/runtime-quickjs": "workspace:*",
@@ -756,7 +756,7 @@
     },
     "packages/kernel/core": {
       "name": "@executor-js/codemode-core",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@babel/parser": "^7.29.2",
         "@standard-schema/spec": "^1.0.0",
@@ -829,7 +829,7 @@
     },
     "packages/kernel/runtime-quickjs": {
       "name": "@executor-js/runtime-quickjs",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@executor-js/codemode-core": "workspace:*",
         "quickjs-emscripten": "catalog:",
@@ -849,7 +849,7 @@
     },
     "packages/kernel/runtime-workerd-subprocess": {
       "name": "@executor-js/runtime-workerd-subprocess",
-      "version": "0.0.20",
+      "version": "0.0.21",
       "dependencies": {
         "@executor-js/codemode-core": "workspace:*",
         "effect": "catalog:",
@@ -864,7 +864,7 @@
     },
     "packages/onboarding-demo": {
       "name": "@executor-js/onboarding-demo",
-      "version": "0.0.0",
+      "version": "0.0.1",
       "dependencies": {
         "@executor-js/plugin-mcp": "workspace:*",
         "@executor-js/plugin-openapi": "workspace:*",
@@ -888,7 +888,7 @@
     },
     "packages/plugins/desktop-settings": {
       "name": "@executor-js/plugin-desktop-settings",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "react": "catalog:",
@@ -901,7 +901,7 @@
     },
     "packages/plugins/encrypted-secrets": {
       "name": "@executor-js/plugin-encrypted-secrets",
-      "version": "0.0.47",
+      "version": "0.0.48",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "effect": "catalog:",
@@ -916,7 +916,7 @@
     },
     "packages/plugins/example": {
       "name": "@executor-js/plugin-example",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
       },
@@ -939,7 +939,7 @@
     },
     "packages/plugins/file-secrets": {
       "name": "@executor-js/plugin-file-secrets",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
       },
@@ -956,7 +956,7 @@
     },
     "packages/plugins/graphql": {
       "name": "@executor-js/plugin-graphql",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@effect/platform-node": "catalog:",
         "@executor-js/config": "workspace:*",
@@ -995,7 +995,7 @@
     },
     "packages/plugins/keychain": {
       "name": "@executor-js/plugin-keychain",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "@napi-rs/keyring": "^1.2.0",
@@ -1014,7 +1014,7 @@
     },
     "packages/plugins/mcp": {
       "name": "@executor-js/plugin-mcp",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@cfworker/json-schema": "^4.1.1",
         "@effect/platform-node": "catalog:",
@@ -1058,7 +1058,7 @@
     },
     "packages/plugins/onepassword": {
       "name": "@executor-js/plugin-onepassword",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@1password/sdk": "^0.4.1-beta.1",
         "@effect/atom-react": "catalog:",
@@ -1091,7 +1091,7 @@
     },
     "packages/plugins/openapi": {
       "name": "@executor-js/plugin-openapi",
-      "version": "1.6.5",
+      "version": "1.6.6",
       "dependencies": {
         "@effect/platform-node": "catalog:",
         "@executor-js/config": "workspace:*",
@@ -1132,7 +1132,7 @@
     },
     "packages/plugins/provider-service-split": {
       "name": "@executor-js/plugin-provider-service-split",
-      "version": "0.0.19",
+      "version": "0.0.20",
       "dependencies": {
         "@executor-js/plugin-openapi": "workspace:*",
         "@executor-js/sdk": "workspace:*",
@@ -1149,7 +1149,7 @@
     },
     "packages/plugins/toolkits": {
       "name": "@executor-js/plugin-toolkits",
-      "version": "1.5.40",
+      "version": "1.5.41",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
       },
@@ -1218,7 +1218,7 @@
     },
     "packages/react": {
       "name": "@executor-js/react",
-      "version": "1.4.68",
+      "version": "1.4.69",
       "dependencies": {
         "@base-ui/react": "^1.3.0",
         "@effect/atom-react": "catalog:",
diff --git a/e2e/CHANGELOG.md b/e2e/CHANGELOG.md
index 502138c00..b2e22bc80 100644
--- a/e2e/CHANGELOG.md
+++ b/e2e/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @executor-js/e2e
 
+## 0.0.46
+
+### Patch Changes
+
+- Updated dependencies [[`c695970`](https://github.com/UsefulSoftwareCo/executor/commit/c6959702f6459504463fe0e13fa1a576190460ed)]:
+  - @executor-js/plugin-mcp@1.6.6
+  - @executor-js/api@1.4.69
+  - @executor-js/plugin-graphql@1.6.6
+  - @executor-js/plugin-openapi@1.6.6
+  - @executor-js/plugin-toolkits@1.5.41
+  - @executor-js/sdk@1.6.6
+
 ## 0.0.45
 
 ### Patch Changes
diff --git a/e2e/package.json b/e2e/package.json
index 74c0a1074..c0ecbcc4c 100644
--- a/e2e/package.json
+++ b/e2e/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/e2e",
-  "version": "0.0.45",
+  "version": "0.0.46",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/examples/all-plugins/CHANGELOG.md b/examples/all-plugins/CHANGELOG.md
index 4084c685b..2d654c0fb 100644
--- a/examples/all-plugins/CHANGELOG.md
+++ b/examples/all-plugins/CHANGELOG.md
@@ -1,5 +1,19 @@
 # @executor-js/example-all-plugins
 
+## 0.0.67
+
+### Patch Changes
+
+- Updated dependencies [[`c695970`](https://github.com/UsefulSoftwareCo/executor/commit/c6959702f6459504463fe0e13fa1a576190460ed)]:
+  - @executor-js/plugin-mcp@1.6.6
+  - @executor-js/plugin-graphql@1.6.6
+  - @executor-js/plugin-onepassword@1.6.6
+  - @executor-js/plugin-openapi@1.6.6
+  - @executor-js/plugin-workos-vault@0.0.2
+  - @executor-js/sdk@1.6.6
+  - @executor-js/plugin-file-secrets@1.6.6
+  - @executor-js/plugin-keychain@1.6.6
+
 ## 0.0.66
 
 ### Patch Changes
diff --git a/examples/all-plugins/package.json b/examples/all-plugins/package.json
index 8b0cf0629..9bdfe36e9 100644
--- a/examples/all-plugins/package.json
+++ b/examples/all-plugins/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/example-all-plugins",
-  "version": "0.0.66",
+  "version": "0.0.67",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/examples/docs-sdk-quickstart/CHANGELOG.md b/examples/docs-sdk-quickstart/CHANGELOG.md
index e7a7212c6..0378e1c98 100644
--- a/examples/docs-sdk-quickstart/CHANGELOG.md
+++ b/examples/docs-sdk-quickstart/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @executor-js/example-docs-sdk-quickstart
 
+## 0.0.52
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/plugin-openapi@1.6.6
+  - @executor-js/sdk@1.6.6
+
 ## 0.0.51
 
 ### Patch Changes
diff --git a/examples/docs-sdk-quickstart/package.json b/examples/docs-sdk-quickstart/package.json
index 6b46e4ea2..167c65bca 100644
--- a/examples/docs-sdk-quickstart/package.json
+++ b/examples/docs-sdk-quickstart/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/example-docs-sdk-quickstart",
-  "version": "0.0.51",
+  "version": "0.0.52",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/packages/core/analytics/CHANGELOG.md b/packages/core/analytics/CHANGELOG.md
index be8b6d6c0..5fdaff9dc 100644
--- a/packages/core/analytics/CHANGELOG.md
+++ b/packages/core/analytics/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/analytics
 
+## 0.1.13
+
+### Patch Changes
+
+- Updated dependencies [[`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d)]:
+  - @executor-js/execution@1.6.6
+
 ## 0.1.12
 
 ### Patch Changes
diff --git a/packages/core/analytics/package.json b/packages/core/analytics/package.json
index 9f92516a3..79fe4e032 100644
--- a/packages/core/analytics/package.json
+++ b/packages/core/analytics/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/analytics",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "private": true,
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/analytics",
   "bugs": {
diff --git a/packages/core/api/CHANGELOG.md b/packages/core/api/CHANGELOG.md
index 4ff8ca725..e5dee5bde 100644
--- a/packages/core/api/CHANGELOG.md
+++ b/packages/core/api/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @executor-js/api
 
+## 1.4.69
+
+### Patch Changes
+
+- Updated dependencies [[`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d)]:
+  - @executor-js/execution@1.6.6
+  - @executor-js/host-mcp@1.4.4
+  - @executor-js/sdk@1.6.6
+
 ## 1.4.68
 
 ### Patch Changes
diff --git a/packages/core/api/package.json b/packages/core/api/package.json
index f8933a2f9..e768ec809 100644
--- a/packages/core/api/package.json
+++ b/packages/core/api/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/api",
-  "version": "1.4.68",
+  "version": "1.4.69",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/core/cli/CHANGELOG.md b/packages/core/cli/CHANGELOG.md
index 92e0e67b6..d4154b656 100644
--- a/packages/core/cli/CHANGELOG.md
+++ b/packages/core/cli/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/cli
 
+## 0.2.56
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+
 ## 0.2.55
 
 ### Patch Changes
diff --git a/packages/core/cli/package.json b/packages/core/cli/package.json
index e1e48a363..710702539 100644
--- a/packages/core/cli/package.json
+++ b/packages/core/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/cli",
-  "version": "0.2.55",
+  "version": "0.2.56",
   "description": "CLI for the executor SDK — schema generation, migrations",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/cli",
   "bugs": {
diff --git a/packages/core/config/CHANGELOG.md b/packages/core/config/CHANGELOG.md
index 7ad421b49..bfbb8e881 100644
--- a/packages/core/config/CHANGELOG.md
+++ b/packages/core/config/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/config
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/core/config/package.json b/packages/core/config/package.json
index 30e27bd04..c5660fa61 100644
--- a/packages/core/config/package.json
+++ b/packages/core/config/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/config",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/config",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/core/execution/CHANGELOG.md b/packages/core/execution/CHANGELOG.md
index 459e4ef99..a22045cb1 100644
--- a/packages/core/execution/CHANGELOG.md
+++ b/packages/core/execution/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @executor-js/execution
 
+## 1.6.6
+
+### Patch Changes
+
+- [#1866](https://github.com/UsefulSoftwareCo/executor/pull/1866) [`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **Large execute results are measured once, not once per span**
+
+  The result-size telemetry probe serializes the whole returned value to count its characters, and that cost grows with the payload. The same result object was walked again every time it was stamped onto another span: an operator-approved run measured it twice (inner and outer span), and every retried `resume` that replayed a settled outcome measured it again. The measurement is now computed once per result object and reused, so a large result pays one size walk no matter how many spans report it. Response text, structured content, and span attribute values are unchanged.
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+  - @executor-js/codemode-core@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/core/execution/package.json b/packages/core/execution/package.json
index 21bb8812f..7054b8c8b 100644
--- a/packages/core/execution/package.json
+++ b/packages/core/execution/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/execution",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/execution",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/core/sdk/CHANGELOG.md b/packages/core/sdk/CHANGELOG.md
index 7dec11aaa..06de2ecdb 100644
--- a/packages/core/sdk/CHANGELOG.md
+++ b/packages/core/sdk/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @executor-js/sdk
 
+## 1.6.6
+
 ## 1.6.5
 
 ## 1.6.4
diff --git a/packages/core/sdk/package.json b/packages/core/sdk/package.json
index 4aeaca71c..727fabece 100644
--- a/packages/core/sdk/package.json
+++ b/packages/core/sdk/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/sdk",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/sdk",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/core/vite-plugin/CHANGELOG.md b/packages/core/vite-plugin/CHANGELOG.md
index 1911071b2..e7453c5f6 100644
--- a/packages/core/vite-plugin/CHANGELOG.md
+++ b/packages/core/vite-plugin/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/vite-plugin
 
+## 0.0.66
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+
 ## 0.0.65
 
 ### Patch Changes
diff --git a/packages/core/vite-plugin/package.json b/packages/core/vite-plugin/package.json
index db8059fd7..68aae81bd 100644
--- a/packages/core/vite-plugin/package.json
+++ b/packages/core/vite-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/vite-plugin",
-  "version": "0.0.65",
+  "version": "0.0.66",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/vite-plugin",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/hosts/cloudflare/CHANGELOG.md b/packages/hosts/cloudflare/CHANGELOG.md
index 6df0db939..7038d836c 100644
--- a/packages/hosts/cloudflare/CHANGELOG.md
+++ b/packages/hosts/cloudflare/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @executor-js/cloudflare
 
+## 0.0.48
+
+### Patch Changes
+
+- Updated dependencies [[`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d)]:
+  - @executor-js/execution@1.6.6
+  - @executor-js/api@1.4.69
+  - @executor-js/host-mcp@1.4.4
+  - @executor-js/sdk@1.6.6
+
 ## 0.0.47
 
 ### Patch Changes
diff --git a/packages/hosts/cloudflare/package.json b/packages/hosts/cloudflare/package.json
index d0e0b776a..0f798fb76 100644
--- a/packages/hosts/cloudflare/package.json
+++ b/packages/hosts/cloudflare/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/cloudflare",
-  "version": "0.0.47",
+  "version": "0.0.48",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/hosts/mcp-apps-shell/CHANGELOG.md b/packages/hosts/mcp-apps-shell/CHANGELOG.md
index d422724c9..fb20259d3 100644
--- a/packages/hosts/mcp-apps-shell/CHANGELOG.md
+++ b/packages/hosts/mcp-apps-shell/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @executor-js/mcp-apps-shell
 
+## 1.4.17
+
+### Patch Changes
+
+- Updated dependencies [[`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/react@1.4.69
+  - @executor-js/runtime-quickjs@1.6.6
+
 ## 1.4.16
 
 ### Patch Changes
diff --git a/packages/hosts/mcp-apps-shell/package.json b/packages/hosts/mcp-apps-shell/package.json
index 699a08fe3..7808f04a4 100644
--- a/packages/hosts/mcp-apps-shell/package.json
+++ b/packages/hosts/mcp-apps-shell/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/mcp-apps-shell",
-  "version": "1.4.16",
+  "version": "1.4.17",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/kernel/core/CHANGELOG.md b/packages/kernel/core/CHANGELOG.md
index 1bcf2d790..4c315aa17 100644
--- a/packages/kernel/core/CHANGELOG.md
+++ b/packages/kernel/core/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @executor-js/codemode-core
 
+## 1.6.6
+
 ## 1.6.5
 
 ## 1.6.4
diff --git a/packages/kernel/core/package.json b/packages/kernel/core/package.json
index e35bc13c9..3e5e42e1e 100644
--- a/packages/kernel/core/package.json
+++ b/packages/kernel/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/codemode-core",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/kernel/core",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/kernel/runtime-quickjs/CHANGELOG.md b/packages/kernel/runtime-quickjs/CHANGELOG.md
index a378ef47b..b81918b95 100644
--- a/packages/kernel/runtime-quickjs/CHANGELOG.md
+++ b/packages/kernel/runtime-quickjs/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/runtime-quickjs
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/codemode-core@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/kernel/runtime-quickjs/package.json b/packages/kernel/runtime-quickjs/package.json
index 7219d2309..9105e827a 100644
--- a/packages/kernel/runtime-quickjs/package.json
+++ b/packages/kernel/runtime-quickjs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/runtime-quickjs",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/kernel/runtime-quickjs",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/kernel/runtime-workerd-subprocess/CHANGELOG.md b/packages/kernel/runtime-workerd-subprocess/CHANGELOG.md
index a155d164a..23fc8a140 100644
--- a/packages/kernel/runtime-workerd-subprocess/CHANGELOG.md
+++ b/packages/kernel/runtime-workerd-subprocess/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/runtime-workerd-subprocess
 
+## 0.0.21
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/codemode-core@1.6.6
+
 ## 0.0.20
 
 ### Patch Changes
diff --git a/packages/kernel/runtime-workerd-subprocess/package.json b/packages/kernel/runtime-workerd-subprocess/package.json
index 18d5dfefb..578c6ee0d 100644
--- a/packages/kernel/runtime-workerd-subprocess/package.json
+++ b/packages/kernel/runtime-workerd-subprocess/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/runtime-workerd-subprocess",
-  "version": "0.0.20",
+  "version": "0.0.21",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/onboarding-demo/CHANGELOG.md b/packages/onboarding-demo/CHANGELOG.md
index acec5c16d..70c23dbd5 100644
--- a/packages/onboarding-demo/CHANGELOG.md
+++ b/packages/onboarding-demo/CHANGELOG.md
@@ -1 +1,11 @@
 # @executor-js/onboarding-demo
+
+## 0.0.1
+
+### Patch Changes
+
+- Updated dependencies [[`c695970`](https://github.com/UsefulSoftwareCo/executor/commit/c6959702f6459504463fe0e13fa1a576190460ed), [`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/plugin-mcp@1.6.6
+  - @executor-js/react@1.4.69
+  - @executor-js/plugin-openapi@1.6.6
+  - @executor-js/sdk@1.6.6
diff --git a/packages/onboarding-demo/package.json b/packages/onboarding-demo/package.json
index 39179d3a5..18b86c2c1 100644
--- a/packages/onboarding-demo/package.json
+++ b/packages/onboarding-demo/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/onboarding-demo",
-  "version": "0.0.0",
+  "version": "0.0.1",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/packages/plugins/desktop-settings/CHANGELOG.md b/packages/plugins/desktop-settings/CHANGELOG.md
index 214521d31..29c119c04 100644
--- a/packages/plugins/desktop-settings/CHANGELOG.md
+++ b/packages/plugins/desktop-settings/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-desktop-settings
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/plugins/desktop-settings/package.json b/packages/plugins/desktop-settings/package.json
index 083301262..79860f79c 100644
--- a/packages/plugins/desktop-settings/package.json
+++ b/packages/plugins/desktop-settings/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-desktop-settings",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/desktop-settings",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/encrypted-secrets/CHANGELOG.md b/packages/plugins/encrypted-secrets/CHANGELOG.md
index 2af8fde44..b296426fd 100644
--- a/packages/plugins/encrypted-secrets/CHANGELOG.md
+++ b/packages/plugins/encrypted-secrets/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-encrypted-secrets
 
+## 0.0.48
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+
 ## 0.0.47
 
 ### Patch Changes
diff --git a/packages/plugins/encrypted-secrets/package.json b/packages/plugins/encrypted-secrets/package.json
index 8be5b892b..d59679c8f 100644
--- a/packages/plugins/encrypted-secrets/package.json
+++ b/packages/plugins/encrypted-secrets/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-encrypted-secrets",
-  "version": "0.0.47",
+  "version": "0.0.48",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/plugins/example/CHANGELOG.md b/packages/plugins/example/CHANGELOG.md
index fc437594f..d4fd879e7 100644
--- a/packages/plugins/example/CHANGELOG.md
+++ b/packages/plugins/example/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-example
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/plugins/example/package.json b/packages/plugins/example/package.json
index 849a4e452..b7b415b5d 100644
--- a/packages/plugins/example/package.json
+++ b/packages/plugins/example/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-example",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/example",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/file-secrets/CHANGELOG.md b/packages/plugins/file-secrets/CHANGELOG.md
index 6841a2c01..384b1fc91 100644
--- a/packages/plugins/file-secrets/CHANGELOG.md
+++ b/packages/plugins/file-secrets/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-file-secrets
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/plugins/file-secrets/package.json b/packages/plugins/file-secrets/package.json
index 1cc309bd4..a3f75b161 100644
--- a/packages/plugins/file-secrets/package.json
+++ b/packages/plugins/file-secrets/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-file-secrets",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/file-secrets",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/graphql/CHANGELOG.md b/packages/plugins/graphql/CHANGELOG.md
index 07ed6db88..247942b42 100644
--- a/packages/plugins/graphql/CHANGELOG.md
+++ b/packages/plugins/graphql/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @executor-js/plugin-graphql
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies [[`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/react@1.4.69
+  - @executor-js/api@1.4.69
+  - @executor-js/sdk@1.6.6
+  - @executor-js/config@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/plugins/graphql/package.json b/packages/plugins/graphql/package.json
index f0303e50b..5b27a1b14 100644
--- a/packages/plugins/graphql/package.json
+++ b/packages/plugins/graphql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-graphql",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/graphql",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/keychain/CHANGELOG.md b/packages/plugins/keychain/CHANGELOG.md
index 12b5778fb..90a8a6878 100644
--- a/packages/plugins/keychain/CHANGELOG.md
+++ b/packages/plugins/keychain/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-keychain
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/sdk@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/plugins/keychain/package.json b/packages/plugins/keychain/package.json
index 9cd00ed76..2be8461a9 100644
--- a/packages/plugins/keychain/package.json
+++ b/packages/plugins/keychain/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-keychain",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/keychain",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/mcp/CHANGELOG.md b/packages/plugins/mcp/CHANGELOG.md
index f9e9b2368..96518f30d 100644
--- a/packages/plugins/mcp/CHANGELOG.md
+++ b/packages/plugins/mcp/CHANGELOG.md
@@ -1,5 +1,30 @@
 # @executor-js/plugin-mcp
 
+## 1.6.6
+
+### Patch Changes
+
+- [#1869](https://github.com/UsefulSoftwareCo/executor/pull/1869) [`c695970`](https://github.com/UsefulSoftwareCo/executor/commit/c6959702f6459504463fe0e13fa1a576190460ed) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Explain macOS permissions for Codex plugins instead of failing with an opaque
+  error. A refused grant used to surface as `Internal tool error [id]` — the
+  plugin reports "Unknown error" and only a numeric code says what happened, so
+  neither the user nor the model could tell that macOS was the blocker.
+
+  The bridge now recognises those codes and answers with the grant to enable and
+  where to find it. Each plugin's add screen also states what macOS will ask for
+  before anything runs, with a link straight to the right Privacy pane — macOS
+  asks once, and a dismissed prompt never returns.
+
+  The add screen checks that access when it opens, and holds the Add button
+  until the plugin answers. Adding one that macOS is still blocking produced an
+  integration that looked connected and failed on its first call, by which point
+  the screen explaining the fix was gone.
+
+- Updated dependencies [[`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/react@1.4.69
+  - @executor-js/api@1.4.69
+  - @executor-js/sdk@1.6.6
+  - @executor-js/config@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/plugins/mcp/package.json b/packages/plugins/mcp/package.json
index 9cfc2346e..5b5b165c7 100644
--- a/packages/plugins/mcp/package.json
+++ b/packages/plugins/mcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-mcp",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/mcp",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/onepassword/CHANGELOG.md b/packages/plugins/onepassword/CHANGELOG.md
index be0bd08a9..f0b19e411 100644
--- a/packages/plugins/onepassword/CHANGELOG.md
+++ b/packages/plugins/onepassword/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @executor-js/plugin-onepassword
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies [[`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/react@1.4.69
+  - @executor-js/api@1.4.69
+  - @executor-js/sdk@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/plugins/onepassword/package.json b/packages/plugins/onepassword/package.json
index e49711e81..b53633a26 100644
--- a/packages/plugins/onepassword/package.json
+++ b/packages/plugins/onepassword/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-onepassword",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/onepassword",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/openapi/CHANGELOG.md b/packages/plugins/openapi/CHANGELOG.md
index a5a3fa3f8..320f8bbd1 100644
--- a/packages/plugins/openapi/CHANGELOG.md
+++ b/packages/plugins/openapi/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @executor-js/plugin-openapi
 
+## 1.6.6
+
+### Patch Changes
+
+- Updated dependencies [[`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/react@1.4.69
+  - @executor-js/api@1.4.69
+  - @executor-js/sdk@1.6.6
+  - @executor-js/config@1.6.6
+
 ## 1.6.5
 
 ### Patch Changes
diff --git a/packages/plugins/openapi/package.json b/packages/plugins/openapi/package.json
index 043cbff60..8c539447f 100644
--- a/packages/plugins/openapi/package.json
+++ b/packages/plugins/openapi/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-openapi",
-  "version": "1.6.5",
+  "version": "1.6.6",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/openapi",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/provider-service-split/CHANGELOG.md b/packages/plugins/provider-service-split/CHANGELOG.md
index d458b3454..323f4361d 100644
--- a/packages/plugins/provider-service-split/CHANGELOG.md
+++ b/packages/plugins/provider-service-split/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @executor-js/plugin-provider-service-split
 
+## 0.0.20
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/plugin-openapi@1.6.6
+  - @executor-js/sdk@1.6.6
+
 ## 0.0.19
 
 ### Patch Changes
diff --git a/packages/plugins/provider-service-split/package.json b/packages/plugins/provider-service-split/package.json
index 707d97328..c6fe407d6 100644
--- a/packages/plugins/provider-service-split/package.json
+++ b/packages/plugins/provider-service-split/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-provider-service-split",
-  "version": "0.0.19",
+  "version": "0.0.20",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/plugins/toolkits/CHANGELOG.md b/packages/plugins/toolkits/CHANGELOG.md
index f26163105..c9128b98e 100644
--- a/packages/plugins/toolkits/CHANGELOG.md
+++ b/packages/plugins/toolkits/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @executor-js/plugin-toolkits
 
+## 1.5.41
+
+### Patch Changes
+
+- Updated dependencies [[`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
+  - @executor-js/react@1.4.69
+  - @executor-js/api@1.4.69
+  - @executor-js/sdk@1.6.6
+
 ## 1.5.40
 
 ### Patch Changes
diff --git a/packages/plugins/toolkits/package.json b/packages/plugins/toolkits/package.json
index 234c817cf..19c29c895 100644
--- a/packages/plugins/toolkits/package.json
+++ b/packages/plugins/toolkits/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-toolkits",
-  "version": "1.5.40",
+  "version": "1.5.41",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/toolkits",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/react/CHANGELOG.md b/packages/react/CHANGELOG.md
index 85b323a92..210ad70b1 100644
--- a/packages/react/CHANGELOG.md
+++ b/packages/react/CHANGELOG.md
@@ -1,5 +1,19 @@
 # @executor-js/react
 
+## 1.4.69
+
+### Patch Changes
+
+- [#1865](https://github.com/UsefulSoftwareCo/executor/pull/1865) [`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **Desktop OAuth connects finish the moment the provider redirects**
+
+  When the desktop app runs an OAuth flow in the system browser, the app learned about completion by polling the local server once a second. The completed result sat in memory while the user watched the "Connecting…" spinner for up to a second more — about half a second wasted on average, on every connect.
+
+  The await endpoint now long-polls: the server holds the request open (up to 25 seconds per hold) and answers the instant the flow completes. The client polls one request at a time and reconnects after each answer, so requests never stack. Mixed versions stay compatible in both directions: an old client still gets its answer within one poll of a new server, and a new client against an old server behaves exactly as before.
+
+- Updated dependencies []:
+  - @executor-js/api@1.4.69
+  - @executor-js/sdk@1.6.6
+
 ## 1.4.68
 
 ### Patch Changes
diff --git a/packages/react/package.json b/packages/react/package.json
index b3176f20a..1069a6641 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/react",
-  "version": "1.4.68",
+  "version": "1.4.69",
   "private": true,
   "type": "module",
   "exports": {