Skip to content

Commit 3738d12

Browse files
Version Packages
1 parent fad3650 commit 3738d12

70 files changed

Lines changed: 393 additions & 92 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.changeset/apikey-validate-cache.md

Lines changed: 0 additions & 9 deletions
This file was deleted.

.changeset/dedupe-result-size-walk.md

Lines changed: 0 additions & 7 deletions
This file was deleted.

.changeset/oauth-await-longpoll.md

Lines changed: 0 additions & 10 deletions
This file was deleted.

apps/cli/CHANGELOG.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,15 @@
11
# executor
22

3+
## 1.6.6
4+
5+
### Patch Changes
6+
7+
- Updated dependencies [[`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
8+
- @executor-js/local@1.6.6
9+
- @executor-js/api@1.4.69
10+
- @executor-js/sdk@1.6.6
11+
- @executor-js/runtime-quickjs@1.6.6
12+
313
## 1.6.5
414

515
### Patch Changes

apps/cli/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "executor",
3-
"version": "1.6.5",
3+
"version": "1.6.6",
44
"private": true,
55
"bin": {
66
"executor": "./bin/executor.ts"

apps/cloud/CHANGELOG.md

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,32 @@
11
# @executor-js/cloud
22

3+
## 1.4.67
4+
5+
### Patch Changes
6+
7+
- [#1864](https://github.com/UsefulSoftwareCo/executor/pull/1864) [`fad3650`](https://github.com/UsefulSoftwareCo/executor/commit/fad36504439a07e6080beba243b24b73cd1b9741) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **API key validation is cached per isolate**
8+
9+
Every MCP request and every API-key-authenticated `/api/*` request used to pay a live WorkOS round trip (~100-150ms) to validate the presented key, on every single request. The JWT bearer path beside it already verified locally against a JWKS cached for an hour; API keys had no cache at all.
10+
11+
Successful validations are now cached in a bounded per-isolate map for 60 seconds, keyed by the SHA-256 digest of the key value (never the raw credential). The MCP handler used to rebuild its whole auth layer (and with it the cache) on every request; it now builds the layer once per isolate, so the cache holds on both the `/api/*` and `/mcp` planes. Invalid keys and upstream failures are never cached, so probing bad keys cannot pollute the map and a freshly created key works immediately. The tradeoff: a revoked key remains usable for up to 60 seconds within an isolate that validated it before revocation — far tighter than the one-hour rotation window the JWT path already accepts.
12+
13+
- Updated dependencies [[`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d), [`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
14+
- @executor-js/execution@1.6.6
15+
- @executor-js/react@1.4.69
16+
- @executor-js/api@1.4.69
17+
- @executor-js/cloudflare@0.0.48
18+
- @executor-js/host-mcp@1.4.4
19+
- @executor-js/mcp-apps-shell@1.4.17
20+
- @executor-js/runtime-dynamic-worker@1.4.4
21+
- @executor-js/plugin-graphql@1.6.6
22+
- @executor-js/plugin-mcp@1.6.6
23+
- @executor-js/plugin-openapi@1.6.6
24+
- @executor-js/plugin-toolkits@1.5.41
25+
- @executor-js/plugin-workos-vault@0.0.2
26+
- @executor-js/sdk@1.6.6
27+
- @executor-js/runtime-quickjs@1.6.6
28+
- @executor-js/vite-plugin@0.0.66
29+
330
## 1.4.66
431

532
### Patch Changes

apps/cloud/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@executor-js/cloud",
3-
"version": "1.4.66",
3+
"version": "1.4.67",
44
"private": true,
55
"type": "module",
66
"scripts": {

apps/desktop/CHANGELOG.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
# @executor-js/desktop
22

3+
## 1.6.6
4+
35
## 1.6.5
46

57
## 1.6.4

apps/desktop/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@executor-js/desktop",
3-
"version": "1.6.5",
3+
"version": "1.6.6",
44
"private": true,
55
"homepage": "https://github.com/UsefulSoftwareCo/executor",
66
"license": "MIT",

apps/host-selfhost/CHANGELOG.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,26 @@
11
# @executor-js/host-selfhost
22

3+
## 0.0.48
4+
5+
### Patch Changes
6+
7+
- Updated dependencies [[`21119da`](https://github.com/UsefulSoftwareCo/executor/commit/21119da662d2d225b033b3532e1f17d97311a39d), [`9a1fbd5`](https://github.com/UsefulSoftwareCo/executor/commit/9a1fbd5f0de25f622f303c76f998443c1bb72063)]:
8+
- @executor-js/execution@1.6.6
9+
- @executor-js/react@1.4.69
10+
- @executor-js/analytics@0.1.13
11+
- @executor-js/api@1.4.69
12+
- @executor-js/host-mcp@1.4.4
13+
- @executor-js/mcp-apps-shell@1.4.17
14+
- @executor-js/app@1.4.4
15+
- @executor-js/plugin-graphql@1.6.6
16+
- @executor-js/plugin-mcp@1.6.6
17+
- @executor-js/plugin-openapi@1.6.6
18+
- @executor-js/plugin-toolkits@1.5.41
19+
- @executor-js/plugin-provider-service-split@0.0.20
20+
- @executor-js/sdk@1.6.6
21+
- @executor-js/runtime-quickjs@1.6.6
22+
- @executor-js/plugin-encrypted-secrets@0.0.48
23+
324
## 0.0.47
425

526
### Patch Changes

0 commit comments

Comments
 (0)