v1.5.39-durable.9

Redact static header/query/env values from agent-facing get tools (#15); per-call MCP header context (#14).

v1.5.39-durable.8

Per-call header context for MCP static headers: hosts can fill {{name}} placeholders in an integration's static headers per execute call via _meta["executor/header-context"].

v1.5.39-durable.7

Encrypt auth.json at rest (EXECUTOR_SECRETS_FILE_KEY_FILE) and rotate the mirror token from a file.

v1.5.39-durable.6

Local app honours EXECUTOR_ALLOW_STDIO_MCP=false (#12)

v1.5.39-durable.5

Connection sign-out (RFC 7009 revocation) and oauth/start prompt passthrough.

v1.5.39-durable.5-rc.1

Pre-release: connection sign-out (RFC 7009) and oauth/start prompt.

v1.5.39-durable.4

Durable HTTP mirror for the file credential provider (#10). linux-x64 asset for Keiki executor daemons.

v1.5.39-durable.3

Build of main at 258e4fa: per-run execute integration scope (#8) and retryable upstream failures (#9). linux-x64 only.

v1.5.39-durable.2

Build of main at 60cc507: tool descriptions keep the input TypeScript preview when only the output schema fails to compile (and vice versa), instead of reporting both sides as unknown. linux-x64 only.

v1.5.39-durable.1

Build of main at f565120: a 200 text/event-stream handshake whose JSON-RPC envelope carries an authorization error is now classified as an MCP endpoint that requires auth, instead of a healthy unauthenticated endpoint. linux-x64 only.