diff --git a/.changeset/first-party-oauth-listing-policy.md b/.changeset/first-party-oauth-listing-policy.md
deleted file mode 100644
index fe346656f5..0000000000
--- a/.changeset/first-party-oauth-listing-policy.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@executor-js/sdk": patch
----
-
-Allow hosts to control first-party OAuth app listings for each acting user without disrupting existing connections.
diff --git a/.changeset/oauth-client-basic.md b/.changeset/oauth-client-basic.md
deleted file mode 100644
index 4d806f576b..0000000000
--- a/.changeset/oauth-client-basic.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"executor": patch
----
-
-Allow manually registered OAuth apps to use HTTP Basic client authentication for token exchange and refresh.
diff --git a/.changeset/openapi-update-spec-tool.md b/.changeset/openapi-update-spec-tool.md
deleted file mode 100644
index 7275057f3a..0000000000
--- a/.changeset/openapi-update-spec-tool.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@executor-js/plugin-openapi": patch
----
-
-Expose OpenAPI spec updates as an approval-gated Executor tool so agents can refresh URL-backed integrations without removing their connections.
diff --git a/.changeset/raw-oauth-basic.md b/.changeset/raw-oauth-basic.md
deleted file mode 100644
index aacb495754..0000000000
--- a/.changeset/raw-oauth-basic.md
+++ /dev/null
@@ -1,5 +0,0 @@
----
-"@executor-js/sdk": patch
----
-
-Add a raw HTTP Basic compatibility mode for OAuth providers that reject form-encoded client credentials.
diff --git a/.changeset/selfhost-sso-sign-in.md b/.changeset/selfhost-sso-sign-in.md
deleted file mode 100644
index 6cecc2268c..0000000000
--- a/.changeset/selfhost-sso-sign-in.md
+++ /dev/null
@@ -1,9 +0,0 @@
----
-"executor": patch
----
-
-**Self-host: bring-your-own SSO (Google, Okta, any OIDC IdP) with a verified-domain allowlist**
-
-Operators can enable a single OIDC sign-in provider on a self-hosted instance by setting `EXECUTOR_SSO_PROVIDER_ID`, `EXECUTOR_SSO_CLIENT_ID`, `EXECUTOR_SSO_CLIENT_SECRET`, and `EXECUTOR_SSO_ALLOWED_DOMAINS` (comma-separated email domains), plus `EXECUTOR_SSO_DISCOVERY_URL` for providers without a preset (`google` is preset; `EXECUTOR_SSO_PROVIDER_NAME` overrides the button label). The login page renders a "Continue with <provider>" button when configured (discovered through the new unauthenticated `GET /api/auth-config`, which returns provider id + display name only), and the MCP OAuth connect flow's login step gains the same option since it lands on the same page.
-
-The domain allowlist replaces the invite code for SSO sign-ups: a sign-in whose IdP-verified email (`email_verified`) has an allowlisted domain auto-joins the instance organization as a member; unverified emails and any other domain are refused. Enabling the provider without an allowlist is refused at boot, as is a half-configured client id/secret pair, so SSO can never silently become open registration. Email/password sign-in and invite-based signup are unchanged. The end-to-end flow (discovery → redirect → consent → callback → membership) is exercised in tests against an emulated OIDC IdP from `@executor-js/emulate`.
diff --git a/.changeset/workspace-writes-admin-only.md b/.changeset/workspace-writes-admin-only.md
deleted file mode 100644
index cdfe405a1c..0000000000
--- a/.changeset/workspace-writes-admin-only.md
+++ /dev/null
@@ -1,52 +0,0 @@
----
-"@executor-js/sdk": patch
-"@executor-js/api": patch
-"@executor-js/plugin-graphql": patch
-"@executor-js/plugin-mcp": patch
-"@executor-js/plugin-openapi": patch
----
-
-**Workspace writes now require an administrator**
-
-Executor bindings accept `orgWrites: "allowed" | "denied" | "request"`.
-Request-aware hosts use `"request"` and bind `CurrentOrgWriteAccess` from the
-authenticated principal for each request. An approval, decline, cancellation,
-or form response also rebinds the paused execution to the resumer's current
-access. Browser approvals derive access from the authenticated browser user's
-live organization membership when that user posts the decision, rather than
-from the earlier MCP request waiting for it or the user's global role. Self-host
-uses the same Better Auth membership lookup for ordinary requests and browser
-decisions. A demotion before either kind of resume therefore takes effect
-before the paused execution can reach a workspace-write sink.
-
-`Principal` now declares its role model explicitly: organization-backed hosts
-carry `orgRoleModel: "organization"` and an optional normalized admin/member
-role, while hosts without roles carry `orgRoleModel: "none"` and cannot also
-carry an organization role. Missing role data under the organization model
-fails closed, including legacy persisted MCP session metadata. Cloud derives
-roles from WorkOS memberships and self-host derives them from Better Auth.
-
-Members may still read and execute shared workspace resources and perform
-operational maintenance such as token refresh and tool-catalog synchronization.
-User-requested workspace mutations now return `OrgWriteDeniedError` (HTTP 403):
-workspace connections and reconnects, organization OAuth clients and connect
-flows, tool policies, and integration add/update/replace/remove/health-check
-operations. Personal connection management remains available.
-
-Pasted connection credentials, OAuth client secrets, OAuth connection tokens,
-and dependent tool discovery run only after the outermost transaction commits
-their row, including when a plugin wraps creation in `ctx.transaction`. Each
-committed row records unique provider item references owned by that write
-attempt. Reads resolve only those recorded references, so the post-commit
-window fails closed with a retryable incomplete-write error and can never
-resolve a predecessor's credential. A process crash leaves detectable missing
-references; a later executor incarnation can atomically replace and retry a
-stranded pasted connection, while OAuth client and connection retries replace
-their rows through their existing update paths.
-
-If credential persistence fails while the process remains alive, row and
-provider compensation restore the prior state where possible and surface
-incomplete cleanup explicitly. Best-effort cleanup can leave inert orphaned
-attempt items, but an attempt never shares an item reference with a successor,
-eliminating the former successor-clobber interval without requiring provider
-compare-and-set support.
diff --git a/apps/cli/CHANGELOG.md b/apps/cli/CHANGELOG.md
index 331d918d96..cc3911c2fd 100644
--- a/apps/cli/CHANGELOG.md
+++ b/apps/cli/CHANGELOG.md
@@ -1,5 +1,23 @@
 # executor
 
+## 1.6.8
+
+### Patch Changes
+
+- [#1904](https://github.com/UsefulSoftwareCo/executor/pull/1904) [`c27436d`](https://github.com/UsefulSoftwareCo/executor/commit/c27436dd9280eb77114e2d637c7b4c77cf2d6a2b) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Allow manually registered OAuth apps to use HTTP Basic client authentication for token exchange and refresh.
+
+- [#1834](https://github.com/UsefulSoftwareCo/executor/pull/1834) [`b22d536`](https://github.com/UsefulSoftwareCo/executor/commit/b22d53641d9689d6919a468f148137acceaafca8) Thanks [@charliemeyer2000](https://github.com/charliemeyer2000)! - **Self-host: bring-your-own SSO (Google, Okta, any OIDC IdP) with a verified-domain allowlist**
+
+  Operators can enable a single OIDC sign-in provider on a self-hosted instance by setting `EXECUTOR_SSO_PROVIDER_ID`, `EXECUTOR_SSO_CLIENT_ID`, `EXECUTOR_SSO_CLIENT_SECRET`, and `EXECUTOR_SSO_ALLOWED_DOMAINS` (comma-separated email domains), plus `EXECUTOR_SSO_DISCOVERY_URL` for providers without a preset (`google` is preset; `EXECUTOR_SSO_PROVIDER_NAME` overrides the button label). The login page renders a "Continue with <provider>" button when configured (discovered through the new unauthenticated `GET /api/auth-config`, which returns provider id + display name only), and the MCP OAuth connect flow's login step gains the same option since it lands on the same page.
+
+  The domain allowlist replaces the invite code for SSO sign-ups: a sign-in whose IdP-verified email (`email_verified`) has an allowlisted domain auto-joins the instance organization as a member; unverified emails and any other domain are refused. Enabling the provider without an allowlist is refused at boot, as is a half-configured client id/secret pair, so SSO can never silently become open registration. Email/password sign-in and invite-based signup are unchanged. The end-to-end flow (discovery → redirect → consent → callback → membership) is exercised in tests against an emulated OIDC IdP from `@executor-js/emulate`.
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/local@1.6.8
+  - @executor-js/runtime-quickjs@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/apps/cli/package.json b/apps/cli/package.json
index 860507a264..c43d00c22c 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "executor",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "private": true,
   "bin": {
     "executor": "./bin/executor.ts"
diff --git a/apps/cloud/CHANGELOG.md b/apps/cloud/CHANGELOG.md
index 037c50c93a..09491854a2 100644
--- a/apps/cloud/CHANGELOG.md
+++ b/apps/cloud/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @executor-js/cloud
 
+## 1.4.69
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/plugin-openapi@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/plugin-graphql@1.6.8
+  - @executor-js/plugin-mcp@1.6.8
+  - @executor-js/execution@1.6.8
+  - @executor-js/vite-plugin@0.0.68
+  - @executor-js/cloudflare@0.0.50
+  - @executor-js/host-mcp@1.4.4
+  - @executor-js/mcp-apps-shell@1.4.19
+  - @executor-js/runtime-dynamic-worker@1.4.4
+  - @executor-js/plugin-toolkits@1.5.43
+  - @executor-js/plugin-workos-vault@0.0.2
+  - @executor-js/react@1.4.71
+  - @executor-js/runtime-quickjs@1.6.8
+
 ## 1.4.68
 
 ### Patch Changes
diff --git a/apps/cloud/package.json b/apps/cloud/package.json
index 75fd2c7d7c..b40e06e5e5 100644
--- a/apps/cloud/package.json
+++ b/apps/cloud/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/cloud",
-  "version": "1.4.68",
+  "version": "1.4.69",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/apps/desktop/CHANGELOG.md b/apps/desktop/CHANGELOG.md
index 49ac57e36b..db3943d6aa 100644
--- a/apps/desktop/CHANGELOG.md
+++ b/apps/desktop/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @executor-js/desktop
 
+## 1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index af7491b2b9..568cf95112 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/desktop",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "private": true,
   "homepage": "https://github.com/UsefulSoftwareCo/executor",
   "license": "MIT",
diff --git a/apps/host-selfhost/CHANGELOG.md b/apps/host-selfhost/CHANGELOG.md
index ad348e72c0..e953f5d3c0 100644
--- a/apps/host-selfhost/CHANGELOG.md
+++ b/apps/host-selfhost/CHANGELOG.md
@@ -1,5 +1,26 @@
 # @executor-js/host-selfhost
 
+## 0.0.50
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/plugin-openapi@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/plugin-graphql@1.6.8
+  - @executor-js/plugin-mcp@1.6.8
+  - @executor-js/app@1.4.4
+  - @executor-js/analytics@0.1.15
+  - @executor-js/execution@1.6.8
+  - @executor-js/host-mcp@1.4.4
+  - @executor-js/mcp-apps-shell@1.4.19
+  - @executor-js/plugin-encrypted-secrets@0.0.50
+  - @executor-js/plugin-provider-service-split@0.0.22
+  - @executor-js/plugin-toolkits@1.5.43
+  - @executor-js/react@1.4.71
+  - @executor-js/runtime-quickjs@1.6.8
+
 ## 0.0.49
 
 ### Patch Changes
diff --git a/apps/host-selfhost/package.json b/apps/host-selfhost/package.json
index 1ae303fd9b..9d4da00172 100644
--- a/apps/host-selfhost/package.json
+++ b/apps/host-selfhost/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/host-selfhost",
-  "version": "0.0.49",
+  "version": "0.0.50",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/apps/local/CHANGELOG.md b/apps/local/CHANGELOG.md
index dc730e6ff3..ffcb425ada 100644
--- a/apps/local/CHANGELOG.md
+++ b/apps/local/CHANGELOG.md
@@ -1,5 +1,32 @@
 # @executor-js/local
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/plugin-openapi@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/plugin-graphql@1.6.8
+  - @executor-js/plugin-mcp@1.6.8
+  - @executor-js/app@1.4.4
+  - @executor-js/analytics@0.1.15
+  - @executor-js/config@1.6.8
+  - @executor-js/execution@1.6.8
+  - @executor-js/vite-plugin@0.0.68
+  - @executor-js/host-mcp@1.4.4
+  - @executor-js/mcp-apps-shell@1.4.19
+  - @executor-js/plugin-desktop-settings@1.6.8
+  - @executor-js/plugin-example@1.6.8
+  - @executor-js/plugin-file-secrets@1.6.8
+  - @executor-js/plugin-keychain@1.6.8
+  - @executor-js/plugin-onepassword@1.6.8
+  - @executor-js/plugin-provider-service-split@0.0.22
+  - @executor-js/plugin-toolkits@1.5.43
+  - @executor-js/react@1.4.71
+  - @executor-js/runtime-quickjs@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/apps/local/package.json b/apps/local/package.json
index ae2b4bb12f..79bebeef85 100644
--- a/apps/local/package.json
+++ b/apps/local/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/local",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/bun.lock b/bun.lock
index d6959334af..473028d7be 100644
--- a/bun.lock
+++ b/bun.lock
@@ -31,7 +31,7 @@
     },
     "apps/cli": {
       "name": "executor",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "bin": {
         "executor": "./bin/executor.ts",
       },
@@ -60,7 +60,7 @@
     },
     "apps/cloud": {
       "name": "@executor-js/cloud",
-      "version": "1.4.68",
+      "version": "1.4.69",
       "dependencies": {
         "@cloudflare/vite-plugin": "^1.31.1",
         "@effect/atom-react": "catalog:",
@@ -133,7 +133,7 @@
     },
     "apps/desktop": {
       "name": "@executor-js/desktop",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@sentry/bun": "^10.57.0",
         "@sentry/electron": "^7.13.0",
@@ -220,7 +220,7 @@
     },
     "apps/host-selfhost": {
       "name": "@executor-js/host-selfhost",
-      "version": "0.0.49",
+      "version": "0.0.50",
       "dependencies": {
         "@better-auth/api-key": "^1.6.11",
         "@cloudflare/worker-bundler": "0.2.1",
@@ -273,7 +273,7 @@
     },
     "apps/local": {
       "name": "@executor-js/local",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@effect/atom-react": "catalog:",
         "@effect/platform-node": "catalog:",
@@ -353,7 +353,7 @@
     },
     "e2e": {
       "name": "@executor-js/e2e",
-      "version": "0.0.47",
+      "version": "0.0.48",
       "dependencies": {
         "@executor-js/api": "workspace:*",
         "@executor-js/emulate": "^0.14.1",
@@ -388,7 +388,7 @@
     },
     "examples/all-plugins": {
       "name": "@executor-js/example-all-plugins",
-      "version": "0.0.68",
+      "version": "0.0.69",
       "dependencies": {
         "@executor-js/plugin-file-secrets": "workspace:*",
         "@executor-js/plugin-graphql": "workspace:*",
@@ -407,7 +407,7 @@
     },
     "examples/docs-sdk-quickstart": {
       "name": "@executor-js/example-docs-sdk-quickstart",
-      "version": "0.0.53",
+      "version": "0.0.54",
       "dependencies": {
         "@executor-js/plugin-openapi": "workspace:*",
         "@executor-js/sdk": "workspace:*",
@@ -464,7 +464,7 @@
     },
     "packages/core/analytics": {
       "name": "@executor-js/analytics",
-      "version": "0.1.14",
+      "version": "0.1.15",
       "dependencies": {
         "@effect/platform-node": "catalog:",
         "@executor-js/execution": "workspace:*",
@@ -480,7 +480,7 @@
     },
     "packages/core/api": {
       "name": "@executor-js/api",
-      "version": "1.4.70",
+      "version": "1.4.71",
       "dependencies": {
         "@executor-js/execution": "workspace:*",
         "@executor-js/host-mcp": "workspace:*",
@@ -497,7 +497,7 @@
     },
     "packages/core/cli": {
       "name": "@executor-js/cli",
-      "version": "0.2.57",
+      "version": "0.2.58",
       "bin": {
         "executor-sdk": "./dist/index.js",
       },
@@ -518,7 +518,7 @@
     },
     "packages/core/config": {
       "name": "@executor-js/config",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "jiti": "^2.6.1",
@@ -539,7 +539,7 @@
     },
     "packages/core/execution": {
       "name": "@executor-js/execution",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@executor-js/codemode-core": "workspace:*",
         "@executor-js/sdk": "workspace:*",
@@ -605,7 +605,7 @@
     },
     "packages/core/sdk": {
       "name": "@executor-js/sdk",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@executor-js/fumadb": "workspace:*",
         "@standard-schema/spec": "^1.1.0",
@@ -658,7 +658,7 @@
     },
     "packages/core/vite-plugin": {
       "name": "@executor-js/vite-plugin",
-      "version": "0.0.67",
+      "version": "0.0.68",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "jiti": "^2.6.1",
@@ -678,7 +678,7 @@
     },
     "packages/hosts/cloudflare": {
       "name": "@executor-js/cloudflare",
-      "version": "0.0.49",
+      "version": "0.0.50",
       "dependencies": {
         "@executor-js/api": "workspace:*",
         "@executor-js/execution": "workspace:*",
@@ -719,7 +719,7 @@
     },
     "packages/hosts/mcp-apps-shell": {
       "name": "@executor-js/mcp-apps-shell",
-      "version": "1.4.18",
+      "version": "1.4.19",
       "dependencies": {
         "@executor-js/react": "workspace:*",
         "@executor-js/runtime-quickjs": "workspace:*",
@@ -757,7 +757,7 @@
     },
     "packages/kernel/core": {
       "name": "@executor-js/codemode-core",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@babel/parser": "^7.29.2",
         "@standard-schema/spec": "^1.0.0",
@@ -830,7 +830,7 @@
     },
     "packages/kernel/runtime-quickjs": {
       "name": "@executor-js/runtime-quickjs",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@executor-js/codemode-core": "workspace:*",
         "quickjs-emscripten": "catalog:",
@@ -850,7 +850,7 @@
     },
     "packages/kernel/runtime-workerd-subprocess": {
       "name": "@executor-js/runtime-workerd-subprocess",
-      "version": "0.0.22",
+      "version": "0.0.23",
       "dependencies": {
         "@executor-js/codemode-core": "workspace:*",
         "effect": "catalog:",
@@ -865,7 +865,7 @@
     },
     "packages/onboarding-demo": {
       "name": "@executor-js/onboarding-demo",
-      "version": "0.0.2",
+      "version": "0.0.3",
       "dependencies": {
         "@executor-js/plugin-mcp": "workspace:*",
         "@executor-js/plugin-openapi": "workspace:*",
@@ -889,7 +889,7 @@
     },
     "packages/plugins/desktop-settings": {
       "name": "@executor-js/plugin-desktop-settings",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "react": "catalog:",
@@ -902,7 +902,7 @@
     },
     "packages/plugins/encrypted-secrets": {
       "name": "@executor-js/plugin-encrypted-secrets",
-      "version": "0.0.49",
+      "version": "0.0.50",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "effect": "catalog:",
@@ -917,7 +917,7 @@
     },
     "packages/plugins/example": {
       "name": "@executor-js/plugin-example",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
       },
@@ -940,7 +940,7 @@
     },
     "packages/plugins/file-secrets": {
       "name": "@executor-js/plugin-file-secrets",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
       },
@@ -957,7 +957,7 @@
     },
     "packages/plugins/graphql": {
       "name": "@executor-js/plugin-graphql",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@effect/platform-node": "catalog:",
         "@executor-js/config": "workspace:*",
@@ -996,7 +996,7 @@
     },
     "packages/plugins/keychain": {
       "name": "@executor-js/plugin-keychain",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
         "@napi-rs/keyring": "^1.2.0",
@@ -1015,7 +1015,7 @@
     },
     "packages/plugins/mcp": {
       "name": "@executor-js/plugin-mcp",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@cfworker/json-schema": "^4.1.1",
         "@effect/platform-node": "catalog:",
@@ -1059,7 +1059,7 @@
     },
     "packages/plugins/onepassword": {
       "name": "@executor-js/plugin-onepassword",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@1password/sdk": "^0.4.1-beta.1",
         "@effect/atom-react": "catalog:",
@@ -1092,7 +1092,7 @@
     },
     "packages/plugins/openapi": {
       "name": "@executor-js/plugin-openapi",
-      "version": "1.6.7",
+      "version": "1.6.8",
       "dependencies": {
         "@effect/platform-node": "catalog:",
         "@executor-js/config": "workspace:*",
@@ -1133,7 +1133,7 @@
     },
     "packages/plugins/provider-service-split": {
       "name": "@executor-js/plugin-provider-service-split",
-      "version": "0.0.21",
+      "version": "0.0.22",
       "dependencies": {
         "@executor-js/plugin-openapi": "workspace:*",
         "@executor-js/sdk": "workspace:*",
@@ -1150,7 +1150,7 @@
     },
     "packages/plugins/toolkits": {
       "name": "@executor-js/plugin-toolkits",
-      "version": "1.5.42",
+      "version": "1.5.43",
       "dependencies": {
         "@executor-js/sdk": "workspace:*",
       },
@@ -1219,7 +1219,7 @@
     },
     "packages/react": {
       "name": "@executor-js/react",
-      "version": "1.4.70",
+      "version": "1.4.71",
       "dependencies": {
         "@base-ui/react": "^1.3.0",
         "@effect/atom-react": "catalog:",
diff --git a/e2e/CHANGELOG.md b/e2e/CHANGELOG.md
index a361a6dc8e..3050deeac5 100644
--- a/e2e/CHANGELOG.md
+++ b/e2e/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @executor-js/e2e
 
+## 0.0.48
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/plugin-openapi@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/plugin-graphql@1.6.8
+  - @executor-js/plugin-mcp@1.6.8
+  - @executor-js/plugin-toolkits@1.5.43
+
 ## 0.0.47
 
 ### Patch Changes
diff --git a/e2e/package.json b/e2e/package.json
index 5a8666f5e2..6ddd66d3f3 100644
--- a/e2e/package.json
+++ b/e2e/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/e2e",
-  "version": "0.0.47",
+  "version": "0.0.48",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/examples/all-plugins/CHANGELOG.md b/examples/all-plugins/CHANGELOG.md
index 07878fe6fe..ea34eec8bb 100644
--- a/examples/all-plugins/CHANGELOG.md
+++ b/examples/all-plugins/CHANGELOG.md
@@ -1,5 +1,19 @@
 # @executor-js/example-all-plugins
 
+## 0.0.69
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/plugin-openapi@1.6.8
+  - @executor-js/plugin-graphql@1.6.8
+  - @executor-js/plugin-mcp@1.6.8
+  - @executor-js/plugin-file-secrets@1.6.8
+  - @executor-js/plugin-keychain@1.6.8
+  - @executor-js/plugin-onepassword@1.6.8
+  - @executor-js/plugin-workos-vault@0.0.2
+
 ## 0.0.68
 
 ### Patch Changes
diff --git a/examples/all-plugins/package.json b/examples/all-plugins/package.json
index 85d3e49fa9..5fbf3eda2b 100644
--- a/examples/all-plugins/package.json
+++ b/examples/all-plugins/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/example-all-plugins",
-  "version": "0.0.68",
+  "version": "0.0.69",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/examples/docs-sdk-quickstart/CHANGELOG.md b/examples/docs-sdk-quickstart/CHANGELOG.md
index e1c12df2af..25d71bbeb5 100644
--- a/examples/docs-sdk-quickstart/CHANGELOG.md
+++ b/examples/docs-sdk-quickstart/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @executor-js/example-docs-sdk-quickstart
 
+## 0.0.54
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/plugin-openapi@1.6.8
+
 ## 0.0.53
 
 ### Patch Changes
diff --git a/examples/docs-sdk-quickstart/package.json b/examples/docs-sdk-quickstart/package.json
index aed10bcfa6..60147d100c 100644
--- a/examples/docs-sdk-quickstart/package.json
+++ b/examples/docs-sdk-quickstart/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/example-docs-sdk-quickstart",
-  "version": "0.0.53",
+  "version": "0.0.54",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/packages/core/analytics/CHANGELOG.md b/packages/core/analytics/CHANGELOG.md
index 5812736983..a1344d6a94 100644
--- a/packages/core/analytics/CHANGELOG.md
+++ b/packages/core/analytics/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/analytics
 
+## 0.1.15
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/execution@1.6.8
+
 ## 0.1.14
 
 ### Patch Changes
diff --git a/packages/core/analytics/package.json b/packages/core/analytics/package.json
index 47da131d8d..ce2ba75668 100644
--- a/packages/core/analytics/package.json
+++ b/packages/core/analytics/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/analytics",
-  "version": "0.1.14",
+  "version": "0.1.15",
   "private": true,
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/analytics",
   "bugs": {
diff --git a/packages/core/api/CHANGELOG.md b/packages/core/api/CHANGELOG.md
index ef1eec98d9..15730394d3 100644
--- a/packages/core/api/CHANGELOG.md
+++ b/packages/core/api/CHANGELOG.md
@@ -1,5 +1,59 @@
 # @executor-js/api
 
+## 1.4.71
+
+### Patch Changes
+
+- [#1919](https://github.com/UsefulSoftwareCo/executor/pull/1919) [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **Workspace writes now require an administrator**
+
+  Executor bindings accept `orgWrites: "allowed" | "denied" | "request"`.
+  Request-aware hosts use `"request"` and bind `CurrentOrgWriteAccess` from the
+  authenticated principal for each request. An approval, decline, cancellation,
+  or form response also rebinds the paused execution to the resumer's current
+  access. Browser approvals derive access from the authenticated browser user's
+  live organization membership when that user posts the decision, rather than
+  from the earlier MCP request waiting for it or the user's global role. Self-host
+  uses the same Better Auth membership lookup for ordinary requests and browser
+  decisions. A demotion before either kind of resume therefore takes effect
+  before the paused execution can reach a workspace-write sink.
+
+  `Principal` now declares its role model explicitly: organization-backed hosts
+  carry `orgRoleModel: "organization"` and an optional normalized admin/member
+  role, while hosts without roles carry `orgRoleModel: "none"` and cannot also
+  carry an organization role. Missing role data under the organization model
+  fails closed, including legacy persisted MCP session metadata. Cloud derives
+  roles from WorkOS memberships and self-host derives them from Better Auth.
+
+  Members may still read and execute shared workspace resources and perform
+  operational maintenance such as token refresh and tool-catalog synchronization.
+  User-requested workspace mutations now return `OrgWriteDeniedError` (HTTP 403):
+  workspace connections and reconnects, organization OAuth clients and connect
+  flows, tool policies, and integration add/update/replace/remove/health-check
+  operations. Personal connection management remains available.
+
+  Pasted connection credentials, OAuth client secrets, OAuth connection tokens,
+  and dependent tool discovery run only after the outermost transaction commits
+  their row, including when a plugin wraps creation in `ctx.transaction`. Each
+  committed row records unique provider item references owned by that write
+  attempt. Reads resolve only those recorded references, so the post-commit
+  window fails closed with a retryable incomplete-write error and can never
+  resolve a predecessor's credential. A process crash leaves detectable missing
+  references; a later executor incarnation can atomically replace and retry a
+  stranded pasted connection, while OAuth client and connection retries replace
+  their rows through their existing update paths.
+
+  If credential persistence fails while the process remains alive, row and
+  provider compensation restore the prior state where possible and surface
+  incomplete cleanup explicitly. Best-effort cleanup can leave inert orphaned
+  attempt items, but an attempt never shares an item reference with a successor,
+  eliminating the former successor-clobber interval without requiring provider
+  compare-and-set support.
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/execution@1.6.8
+  - @executor-js/host-mcp@1.4.4
+
 ## 1.4.70
 
 ### Patch Changes
diff --git a/packages/core/api/package.json b/packages/core/api/package.json
index 5035661de6..ae47232599 100644
--- a/packages/core/api/package.json
+++ b/packages/core/api/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/api",
-  "version": "1.4.70",
+  "version": "1.4.71",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/core/cli/CHANGELOG.md b/packages/core/cli/CHANGELOG.md
index 6e44d7a522..d16e731974 100644
--- a/packages/core/cli/CHANGELOG.md
+++ b/packages/core/cli/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/cli
 
+## 0.2.58
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+
 ## 0.2.57
 
 ### Patch Changes
diff --git a/packages/core/cli/package.json b/packages/core/cli/package.json
index d91e556277..a93dbad7db 100644
--- a/packages/core/cli/package.json
+++ b/packages/core/cli/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/cli",
-  "version": "0.2.57",
+  "version": "0.2.58",
   "description": "CLI for the executor SDK — schema generation, migrations",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/cli",
   "bugs": {
diff --git a/packages/core/config/CHANGELOG.md b/packages/core/config/CHANGELOG.md
index f049e62e67..27183622f3 100644
--- a/packages/core/config/CHANGELOG.md
+++ b/packages/core/config/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/config
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/core/config/package.json b/packages/core/config/package.json
index 7afad86a26..76156bea13 100644
--- a/packages/core/config/package.json
+++ b/packages/core/config/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/config",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/config",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/core/execution/CHANGELOG.md b/packages/core/execution/CHANGELOG.md
index e0c20504e1..2d48c42691 100644
--- a/packages/core/execution/CHANGELOG.md
+++ b/packages/core/execution/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @executor-js/execution
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/codemode-core@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/core/execution/package.json b/packages/core/execution/package.json
index 77bb8de17b..c5c21f5e57 100644
--- a/packages/core/execution/package.json
+++ b/packages/core/execution/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/execution",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/execution",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/core/sdk/CHANGELOG.md b/packages/core/sdk/CHANGELOG.md
index e95639ce47..f8f07862de 100644
--- a/packages/core/sdk/CHANGELOG.md
+++ b/packages/core/sdk/CHANGELOG.md
@@ -1,5 +1,58 @@
 # @executor-js/sdk
 
+## 1.6.8
+
+### Patch Changes
+
+- [#1947](https://github.com/UsefulSoftwareCo/executor/pull/1947) [`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Allow hosts to control first-party OAuth app listings for each acting user without disrupting existing connections.
+
+- [#1907](https://github.com/UsefulSoftwareCo/executor/pull/1907) [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Add a raw HTTP Basic compatibility mode for OAuth providers that reject form-encoded client credentials.
+
+- [#1919](https://github.com/UsefulSoftwareCo/executor/pull/1919) [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **Workspace writes now require an administrator**
+
+  Executor bindings accept `orgWrites: "allowed" | "denied" | "request"`.
+  Request-aware hosts use `"request"` and bind `CurrentOrgWriteAccess` from the
+  authenticated principal for each request. An approval, decline, cancellation,
+  or form response also rebinds the paused execution to the resumer's current
+  access. Browser approvals derive access from the authenticated browser user's
+  live organization membership when that user posts the decision, rather than
+  from the earlier MCP request waiting for it or the user's global role. Self-host
+  uses the same Better Auth membership lookup for ordinary requests and browser
+  decisions. A demotion before either kind of resume therefore takes effect
+  before the paused execution can reach a workspace-write sink.
+
+  `Principal` now declares its role model explicitly: organization-backed hosts
+  carry `orgRoleModel: "organization"` and an optional normalized admin/member
+  role, while hosts without roles carry `orgRoleModel: "none"` and cannot also
+  carry an organization role. Missing role data under the organization model
+  fails closed, including legacy persisted MCP session metadata. Cloud derives
+  roles from WorkOS memberships and self-host derives them from Better Auth.
+
+  Members may still read and execute shared workspace resources and perform
+  operational maintenance such as token refresh and tool-catalog synchronization.
+  User-requested workspace mutations now return `OrgWriteDeniedError` (HTTP 403):
+  workspace connections and reconnects, organization OAuth clients and connect
+  flows, tool policies, and integration add/update/replace/remove/health-check
+  operations. Personal connection management remains available.
+
+  Pasted connection credentials, OAuth client secrets, OAuth connection tokens,
+  and dependent tool discovery run only after the outermost transaction commits
+  their row, including when a plugin wraps creation in `ctx.transaction`. Each
+  committed row records unique provider item references owned by that write
+  attempt. Reads resolve only those recorded references, so the post-commit
+  window fails closed with a retryable incomplete-write error and can never
+  resolve a predecessor's credential. A process crash leaves detectable missing
+  references; a later executor incarnation can atomically replace and retry a
+  stranded pasted connection, while OAuth client and connection retries replace
+  their rows through their existing update paths.
+
+  If credential persistence fails while the process remains alive, row and
+  provider compensation restore the prior state where possible and surface
+  incomplete cleanup explicitly. Best-effort cleanup can leave inert orphaned
+  attempt items, but an attempt never shares an item reference with a successor,
+  eliminating the former successor-clobber interval without requiring provider
+  compare-and-set support.
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/core/sdk/package.json b/packages/core/sdk/package.json
index 8d3f9354b2..52f5ebced7 100644
--- a/packages/core/sdk/package.json
+++ b/packages/core/sdk/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/sdk",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/sdk",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/core/vite-plugin/CHANGELOG.md b/packages/core/vite-plugin/CHANGELOG.md
index e57dea08e0..7f0075f53a 100644
--- a/packages/core/vite-plugin/CHANGELOG.md
+++ b/packages/core/vite-plugin/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/vite-plugin
 
+## 0.0.68
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+
 ## 0.0.67
 
 ### Patch Changes
diff --git a/packages/core/vite-plugin/package.json b/packages/core/vite-plugin/package.json
index de7d6d85c5..626833e99f 100644
--- a/packages/core/vite-plugin/package.json
+++ b/packages/core/vite-plugin/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/vite-plugin",
-  "version": "0.0.67",
+  "version": "0.0.68",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/core/vite-plugin",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/hosts/cloudflare/CHANGELOG.md b/packages/hosts/cloudflare/CHANGELOG.md
index 9bec56ea39..7ebbda17f9 100644
--- a/packages/hosts/cloudflare/CHANGELOG.md
+++ b/packages/hosts/cloudflare/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @executor-js/cloudflare
 
+## 0.0.50
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/execution@1.6.8
+  - @executor-js/host-mcp@1.4.4
+
 ## 0.0.49
 
 ### Patch Changes
diff --git a/packages/hosts/cloudflare/package.json b/packages/hosts/cloudflare/package.json
index cc5eb7aba8..b5856dc12c 100644
--- a/packages/hosts/cloudflare/package.json
+++ b/packages/hosts/cloudflare/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/cloudflare",
-  "version": "0.0.49",
+  "version": "0.0.50",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/hosts/mcp-apps-shell/CHANGELOG.md b/packages/hosts/mcp-apps-shell/CHANGELOG.md
index a01fcab7b9..59690c13dc 100644
--- a/packages/hosts/mcp-apps-shell/CHANGELOG.md
+++ b/packages/hosts/mcp-apps-shell/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @executor-js/mcp-apps-shell
 
+## 1.4.19
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/react@1.4.71
+  - @executor-js/runtime-quickjs@1.6.8
+
 ## 1.4.18
 
 ### Patch Changes
diff --git a/packages/hosts/mcp-apps-shell/package.json b/packages/hosts/mcp-apps-shell/package.json
index ab6a24d7c7..8bc62bb65e 100644
--- a/packages/hosts/mcp-apps-shell/package.json
+++ b/packages/hosts/mcp-apps-shell/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/mcp-apps-shell",
-  "version": "1.4.18",
+  "version": "1.4.19",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/kernel/core/CHANGELOG.md b/packages/kernel/core/CHANGELOG.md
index 6befae0653..2db3b212cd 100644
--- a/packages/kernel/core/CHANGELOG.md
+++ b/packages/kernel/core/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @executor-js/codemode-core
 
+## 1.6.8
+
 ## 1.6.7
 
 ## 1.6.6
diff --git a/packages/kernel/core/package.json b/packages/kernel/core/package.json
index fe943e434e..f0d482a042 100644
--- a/packages/kernel/core/package.json
+++ b/packages/kernel/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/codemode-core",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/kernel/core",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/kernel/runtime-quickjs/CHANGELOG.md b/packages/kernel/runtime-quickjs/CHANGELOG.md
index 1b4e823a47..d814456f7e 100644
--- a/packages/kernel/runtime-quickjs/CHANGELOG.md
+++ b/packages/kernel/runtime-quickjs/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/runtime-quickjs
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/codemode-core@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/kernel/runtime-quickjs/package.json b/packages/kernel/runtime-quickjs/package.json
index 0733acacd4..44fa56433b 100644
--- a/packages/kernel/runtime-quickjs/package.json
+++ b/packages/kernel/runtime-quickjs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/runtime-quickjs",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/kernel/runtime-quickjs",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/kernel/runtime-workerd-subprocess/CHANGELOG.md b/packages/kernel/runtime-workerd-subprocess/CHANGELOG.md
index d003fbe550..1a8afce102 100644
--- a/packages/kernel/runtime-workerd-subprocess/CHANGELOG.md
+++ b/packages/kernel/runtime-workerd-subprocess/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/runtime-workerd-subprocess
 
+## 0.0.23
+
+### Patch Changes
+
+- Updated dependencies []:
+  - @executor-js/codemode-core@1.6.8
+
 ## 0.0.22
 
 ### Patch Changes
diff --git a/packages/kernel/runtime-workerd-subprocess/package.json b/packages/kernel/runtime-workerd-subprocess/package.json
index 648824e4c9..28ef9ae214 100644
--- a/packages/kernel/runtime-workerd-subprocess/package.json
+++ b/packages/kernel/runtime-workerd-subprocess/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/runtime-workerd-subprocess",
-  "version": "0.0.22",
+  "version": "0.0.23",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/onboarding-demo/CHANGELOG.md b/packages/onboarding-demo/CHANGELOG.md
index d048f72d5f..e653ccd022 100644
--- a/packages/onboarding-demo/CHANGELOG.md
+++ b/packages/onboarding-demo/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @executor-js/onboarding-demo
 
+## 0.0.3
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/plugin-openapi@1.6.8
+  - @executor-js/plugin-mcp@1.6.8
+  - @executor-js/react@1.4.71
+
 ## 0.0.2
 
 ### Patch Changes
diff --git a/packages/onboarding-demo/package.json b/packages/onboarding-demo/package.json
index 317ad19597..9656473764 100644
--- a/packages/onboarding-demo/package.json
+++ b/packages/onboarding-demo/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/onboarding-demo",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/packages/plugins/desktop-settings/CHANGELOG.md b/packages/plugins/desktop-settings/CHANGELOG.md
index 17b48cb132..324508ab5d 100644
--- a/packages/plugins/desktop-settings/CHANGELOG.md
+++ b/packages/plugins/desktop-settings/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-desktop-settings
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/plugins/desktop-settings/package.json b/packages/plugins/desktop-settings/package.json
index 6a9e82220a..cb8af09f23 100644
--- a/packages/plugins/desktop-settings/package.json
+++ b/packages/plugins/desktop-settings/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-desktop-settings",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/desktop-settings",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/encrypted-secrets/CHANGELOG.md b/packages/plugins/encrypted-secrets/CHANGELOG.md
index d37f680765..f4e8607a74 100644
--- a/packages/plugins/encrypted-secrets/CHANGELOG.md
+++ b/packages/plugins/encrypted-secrets/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-encrypted-secrets
 
+## 0.0.50
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+
 ## 0.0.49
 
 ### Patch Changes
diff --git a/packages/plugins/encrypted-secrets/package.json b/packages/plugins/encrypted-secrets/package.json
index 203369c9f3..3bc9fb1f10 100644
--- a/packages/plugins/encrypted-secrets/package.json
+++ b/packages/plugins/encrypted-secrets/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-encrypted-secrets",
-  "version": "0.0.49",
+  "version": "0.0.50",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/plugins/example/CHANGELOG.md b/packages/plugins/example/CHANGELOG.md
index 5df3a8d7dc..3d4746cba0 100644
--- a/packages/plugins/example/CHANGELOG.md
+++ b/packages/plugins/example/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-example
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/plugins/example/package.json b/packages/plugins/example/package.json
index 01c9e75825..c4b80de977 100644
--- a/packages/plugins/example/package.json
+++ b/packages/plugins/example/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-example",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/example",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/file-secrets/CHANGELOG.md b/packages/plugins/file-secrets/CHANGELOG.md
index 44ac373d55..78b2cdc608 100644
--- a/packages/plugins/file-secrets/CHANGELOG.md
+++ b/packages/plugins/file-secrets/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-file-secrets
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/plugins/file-secrets/package.json b/packages/plugins/file-secrets/package.json
index ed4d1ae568..b12a393017 100644
--- a/packages/plugins/file-secrets/package.json
+++ b/packages/plugins/file-secrets/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-file-secrets",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/file-secrets",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/graphql/CHANGELOG.md b/packages/plugins/graphql/CHANGELOG.md
index 5688b83169..393faa3aaf 100644
--- a/packages/plugins/graphql/CHANGELOG.md
+++ b/packages/plugins/graphql/CHANGELOG.md
@@ -1,5 +1,60 @@
 # @executor-js/plugin-graphql
 
+## 1.6.8
+
+### Patch Changes
+
+- [#1919](https://github.com/UsefulSoftwareCo/executor/pull/1919) [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **Workspace writes now require an administrator**
+
+  Executor bindings accept `orgWrites: "allowed" | "denied" | "request"`.
+  Request-aware hosts use `"request"` and bind `CurrentOrgWriteAccess` from the
+  authenticated principal for each request. An approval, decline, cancellation,
+  or form response also rebinds the paused execution to the resumer's current
+  access. Browser approvals derive access from the authenticated browser user's
+  live organization membership when that user posts the decision, rather than
+  from the earlier MCP request waiting for it or the user's global role. Self-host
+  uses the same Better Auth membership lookup for ordinary requests and browser
+  decisions. A demotion before either kind of resume therefore takes effect
+  before the paused execution can reach a workspace-write sink.
+
+  `Principal` now declares its role model explicitly: organization-backed hosts
+  carry `orgRoleModel: "organization"` and an optional normalized admin/member
+  role, while hosts without roles carry `orgRoleModel: "none"` and cannot also
+  carry an organization role. Missing role data under the organization model
+  fails closed, including legacy persisted MCP session metadata. Cloud derives
+  roles from WorkOS memberships and self-host derives them from Better Auth.
+
+  Members may still read and execute shared workspace resources and perform
+  operational maintenance such as token refresh and tool-catalog synchronization.
+  User-requested workspace mutations now return `OrgWriteDeniedError` (HTTP 403):
+  workspace connections and reconnects, organization OAuth clients and connect
+  flows, tool policies, and integration add/update/replace/remove/health-check
+  operations. Personal connection management remains available.
+
+  Pasted connection credentials, OAuth client secrets, OAuth connection tokens,
+  and dependent tool discovery run only after the outermost transaction commits
+  their row, including when a plugin wraps creation in `ctx.transaction`. Each
+  committed row records unique provider item references owned by that write
+  attempt. Reads resolve only those recorded references, so the post-commit
+  window fails closed with a retryable incomplete-write error and can never
+  resolve a predecessor's credential. A process crash leaves detectable missing
+  references; a later executor incarnation can atomically replace and retry a
+  stranded pasted connection, while OAuth client and connection retries replace
+  their rows through their existing update paths.
+
+  If credential persistence fails while the process remains alive, row and
+  provider compensation restore the prior state where possible and surface
+  incomplete cleanup explicitly. Best-effort cleanup can leave inert orphaned
+  attempt items, but an attempt never shares an item reference with a successor,
+  eliminating the former successor-clobber interval without requiring provider
+  compare-and-set support.
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/config@1.6.8
+  - @executor-js/react@1.4.71
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/plugins/graphql/package.json b/packages/plugins/graphql/package.json
index 3771e79ac9..e08e541116 100644
--- a/packages/plugins/graphql/package.json
+++ b/packages/plugins/graphql/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-graphql",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/graphql",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/keychain/CHANGELOG.md b/packages/plugins/keychain/CHANGELOG.md
index 667de9f70c..ce95d64212 100644
--- a/packages/plugins/keychain/CHANGELOG.md
+++ b/packages/plugins/keychain/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @executor-js/plugin-keychain
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/plugins/keychain/package.json b/packages/plugins/keychain/package.json
index 57b720efd8..3b59251b97 100644
--- a/packages/plugins/keychain/package.json
+++ b/packages/plugins/keychain/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-keychain",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/keychain",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/mcp/CHANGELOG.md b/packages/plugins/mcp/CHANGELOG.md
index 51ee3dbf37..37f06fb09c 100644
--- a/packages/plugins/mcp/CHANGELOG.md
+++ b/packages/plugins/mcp/CHANGELOG.md
@@ -1,5 +1,60 @@
 # @executor-js/plugin-mcp
 
+## 1.6.8
+
+### Patch Changes
+
+- [#1919](https://github.com/UsefulSoftwareCo/executor/pull/1919) [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **Workspace writes now require an administrator**
+
+  Executor bindings accept `orgWrites: "allowed" | "denied" | "request"`.
+  Request-aware hosts use `"request"` and bind `CurrentOrgWriteAccess` from the
+  authenticated principal for each request. An approval, decline, cancellation,
+  or form response also rebinds the paused execution to the resumer's current
+  access. Browser approvals derive access from the authenticated browser user's
+  live organization membership when that user posts the decision, rather than
+  from the earlier MCP request waiting for it or the user's global role. Self-host
+  uses the same Better Auth membership lookup for ordinary requests and browser
+  decisions. A demotion before either kind of resume therefore takes effect
+  before the paused execution can reach a workspace-write sink.
+
+  `Principal` now declares its role model explicitly: organization-backed hosts
+  carry `orgRoleModel: "organization"` and an optional normalized admin/member
+  role, while hosts without roles carry `orgRoleModel: "none"` and cannot also
+  carry an organization role. Missing role data under the organization model
+  fails closed, including legacy persisted MCP session metadata. Cloud derives
+  roles from WorkOS memberships and self-host derives them from Better Auth.
+
+  Members may still read and execute shared workspace resources and perform
+  operational maintenance such as token refresh and tool-catalog synchronization.
+  User-requested workspace mutations now return `OrgWriteDeniedError` (HTTP 403):
+  workspace connections and reconnects, organization OAuth clients and connect
+  flows, tool policies, and integration add/update/replace/remove/health-check
+  operations. Personal connection management remains available.
+
+  Pasted connection credentials, OAuth client secrets, OAuth connection tokens,
+  and dependent tool discovery run only after the outermost transaction commits
+  their row, including when a plugin wraps creation in `ctx.transaction`. Each
+  committed row records unique provider item references owned by that write
+  attempt. Reads resolve only those recorded references, so the post-commit
+  window fails closed with a retryable incomplete-write error and can never
+  resolve a predecessor's credential. A process crash leaves detectable missing
+  references; a later executor incarnation can atomically replace and retry a
+  stranded pasted connection, while OAuth client and connection retries replace
+  their rows through their existing update paths.
+
+  If credential persistence fails while the process remains alive, row and
+  provider compensation restore the prior state where possible and surface
+  incomplete cleanup explicitly. Best-effort cleanup can leave inert orphaned
+  attempt items, but an attempt never shares an item reference with a successor,
+  eliminating the former successor-clobber interval without requiring provider
+  compare-and-set support.
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/config@1.6.8
+  - @executor-js/react@1.4.71
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/plugins/mcp/package.json b/packages/plugins/mcp/package.json
index 3032b3a1ec..6671783b79 100644
--- a/packages/plugins/mcp/package.json
+++ b/packages/plugins/mcp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-mcp",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/mcp",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/onepassword/CHANGELOG.md b/packages/plugins/onepassword/CHANGELOG.md
index 7509df15cd..71f0314120 100644
--- a/packages/plugins/onepassword/CHANGELOG.md
+++ b/packages/plugins/onepassword/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @executor-js/plugin-onepassword
 
+## 1.6.8
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/react@1.4.71
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/plugins/onepassword/package.json b/packages/plugins/onepassword/package.json
index 91e9043636..5cfeb0e0fa 100644
--- a/packages/plugins/onepassword/package.json
+++ b/packages/plugins/onepassword/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-onepassword",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/onepassword",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/openapi/CHANGELOG.md b/packages/plugins/openapi/CHANGELOG.md
index 6ad7f1424c..561c9d6f81 100644
--- a/packages/plugins/openapi/CHANGELOG.md
+++ b/packages/plugins/openapi/CHANGELOG.md
@@ -1,5 +1,62 @@
 # @executor-js/plugin-openapi
 
+## 1.6.8
+
+### Patch Changes
+
+- [#1913](https://github.com/UsefulSoftwareCo/executor/pull/1913) [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Expose OpenAPI spec updates as an approval-gated Executor tool so agents can refresh URL-backed integrations without removing their connections.
+
+- [#1919](https://github.com/UsefulSoftwareCo/executor/pull/1919) [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - **Workspace writes now require an administrator**
+
+  Executor bindings accept `orgWrites: "allowed" | "denied" | "request"`.
+  Request-aware hosts use `"request"` and bind `CurrentOrgWriteAccess` from the
+  authenticated principal for each request. An approval, decline, cancellation,
+  or form response also rebinds the paused execution to the resumer's current
+  access. Browser approvals derive access from the authenticated browser user's
+  live organization membership when that user posts the decision, rather than
+  from the earlier MCP request waiting for it or the user's global role. Self-host
+  uses the same Better Auth membership lookup for ordinary requests and browser
+  decisions. A demotion before either kind of resume therefore takes effect
+  before the paused execution can reach a workspace-write sink.
+
+  `Principal` now declares its role model explicitly: organization-backed hosts
+  carry `orgRoleModel: "organization"` and an optional normalized admin/member
+  role, while hosts without roles carry `orgRoleModel: "none"` and cannot also
+  carry an organization role. Missing role data under the organization model
+  fails closed, including legacy persisted MCP session metadata. Cloud derives
+  roles from WorkOS memberships and self-host derives them from Better Auth.
+
+  Members may still read and execute shared workspace resources and perform
+  operational maintenance such as token refresh and tool-catalog synchronization.
+  User-requested workspace mutations now return `OrgWriteDeniedError` (HTTP 403):
+  workspace connections and reconnects, organization OAuth clients and connect
+  flows, tool policies, and integration add/update/replace/remove/health-check
+  operations. Personal connection management remains available.
+
+  Pasted connection credentials, OAuth client secrets, OAuth connection tokens,
+  and dependent tool discovery run only after the outermost transaction commits
+  their row, including when a plugin wraps creation in `ctx.transaction`. Each
+  committed row records unique provider item references owned by that write
+  attempt. Reads resolve only those recorded references, so the post-commit
+  window fails closed with a retryable incomplete-write error and can never
+  resolve a predecessor's credential. A process crash leaves detectable missing
+  references; a later executor incarnation can atomically replace and retry a
+  stranded pasted connection, while OAuth client and connection retries replace
+  their rows through their existing update paths.
+
+  If credential persistence fails while the process remains alive, row and
+  provider compensation restore the prior state where possible and surface
+  incomplete cleanup explicitly. Best-effort cleanup can leave inert orphaned
+  attempt items, but an attempt never shares an item reference with a successor,
+  eliminating the former successor-clobber interval without requiring provider
+  compare-and-set support.
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/config@1.6.8
+  - @executor-js/react@1.4.71
+
 ## 1.6.7
 
 ### Patch Changes
diff --git a/packages/plugins/openapi/package.json b/packages/plugins/openapi/package.json
index 5a1a417b93..07605bd9c8 100644
--- a/packages/plugins/openapi/package.json
+++ b/packages/plugins/openapi/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-openapi",
-  "version": "1.6.7",
+  "version": "1.6.8",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/openapi",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/plugins/provider-service-split/CHANGELOG.md b/packages/plugins/provider-service-split/CHANGELOG.md
index cb6202b62e..41eb4bfaa5 100644
--- a/packages/plugins/provider-service-split/CHANGELOG.md
+++ b/packages/plugins/provider-service-split/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @executor-js/plugin-provider-service-split
 
+## 0.0.22
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`6d1f670`](https://github.com/UsefulSoftwareCo/executor/commit/6d1f670ce400ba2a516744a921996f2d1c7dcb68), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/plugin-openapi@1.6.8
+
 ## 0.0.21
 
 ### Patch Changes
diff --git a/packages/plugins/provider-service-split/package.json b/packages/plugins/provider-service-split/package.json
index 3c3a143c5e..b318801355 100644
--- a/packages/plugins/provider-service-split/package.json
+++ b/packages/plugins/provider-service-split/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-provider-service-split",
-  "version": "0.0.21",
+  "version": "0.0.22",
   "private": true,
   "type": "module",
   "exports": {
diff --git a/packages/plugins/toolkits/CHANGELOG.md b/packages/plugins/toolkits/CHANGELOG.md
index b486df493c..4f8b5cce7e 100644
--- a/packages/plugins/toolkits/CHANGELOG.md
+++ b/packages/plugins/toolkits/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @executor-js/plugin-toolkits
 
+## 1.5.43
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/api@1.4.71
+  - @executor-js/react@1.4.71
+
 ## 1.5.42
 
 ### Patch Changes
diff --git a/packages/plugins/toolkits/package.json b/packages/plugins/toolkits/package.json
index deb994e08e..72a85a9c75 100644
--- a/packages/plugins/toolkits/package.json
+++ b/packages/plugins/toolkits/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/plugin-toolkits",
-  "version": "1.5.42",
+  "version": "1.5.43",
   "homepage": "https://github.com/UsefulSoftwareCo/executor/tree/main/packages/plugins/toolkits",
   "bugs": {
     "url": "https://github.com/UsefulSoftwareCo/executor/issues"
diff --git a/packages/react/CHANGELOG.md b/packages/react/CHANGELOG.md
index 4da9750cad..d6a61c0911 100644
--- a/packages/react/CHANGELOG.md
+++ b/packages/react/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @executor-js/react
 
+## 1.4.71
+
+### Patch Changes
+
+- Updated dependencies [[`31a8042`](https://github.com/UsefulSoftwareCo/executor/commit/31a8042450475fd86ea580f4dbd5dcc3c290c008), [`b5271a6`](https://github.com/UsefulSoftwareCo/executor/commit/b5271a6f0cb6d0c42a6b9fbcdffe70fc2aad8bc6), [`caa0391`](https://github.com/UsefulSoftwareCo/executor/commit/caa03919a8f2a5c82ed13bc4ea9060e964af3a79)]:
+  - @executor-js/sdk@1.6.8
+  - @executor-js/api@1.4.71
+
 ## 1.4.70
 
 ### Patch Changes
diff --git a/packages/react/package.json b/packages/react/package.json
index 7d79ac8c27..916b0cf410 100644
--- a/packages/react/package.json
+++ b/packages/react/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/react",
-  "version": "1.4.70",
+  "version": "1.4.71",
   "private": true,
   "type": "module",
   "exports": {