Version Packages (#1200)

* Version Packages

* Skip @executor-js/cli 0.2.29 (republish-locked), release 0.2.30

0.2.29 was published then unpublished during the 2.0.0 rollback, so npm
blocks republishing that exact version for 24h. Bump @executor-js/cli to
0.2.30 so the patch release publishes cleanly.

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: RhysSullivan

.changeset/cimd-org-redirect-uri.md

@@ -1,5 +1,21 @@
 # executor
 
+## 1.5.23
+
+### Patch Changes
+
+- [#1199](https://github.com/RhysSullivan/executor/pull/1199) [`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Add a test seam to skip the first-run "keep Executor running in the background?" consent dialog under automation, matching the existing `confirmResetState` seam. Set `EXECUTOR_TEST_AUTO_CONFIRM_BACKGROUND_SERVICE=1` to keep the background service or any other value to decline. When the variable is unset the dialog is shown exactly as before. Native dialogs cannot be answered from CDP or Playwright, so a packaged first-run boot under automation previously blocked at this prompt with no way to proceed.
+
+- [#1199](https://github.com/RhysSullivan/executor/pull/1199) [`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Fix the desktop app failing to start its local server when the generated auth token begins with a dash. The token is `randomBytes(32).toString("base64url")`, which can start with "-", and the packaged app passed it to the bundled CLI as a separate argument (`--auth-token`, then the token). The CLI then read the leading-dash token as an unknown flag, printed its help, and exited, so the desktop showed a fatal "local Executor server crashed during startup" dialog. This was persistent (the token is saved) and cross-platform, affecting roughly 1 in 64 fresh installs. The token is now passed in the combined `--auth-token=<value>` form so a leading dash is treated as the value.
+
+- [#1199](https://github.com/RhysSullivan/executor/pull/1199) [`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Notify when a newer Executor is published. The CLI now prints an "update available" line under its ready banner, and the web shell's sidebar update card works for real (a new `/v1/app/npm/dist-tags` endpoint backs it). In the desktop app the card shows a native "Restart to update" action wired to the in-app updater instead of the npm command. The check is best-effort and offline-safe, and can be disabled with `EXECUTOR_DISABLE_UPDATE_CHECK`.
+
+- Updated dependencies [[`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a), [`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a)]:
+  - @executor-js/api@1.4.43
+  - @executor-js/local@1.4.4
+  - @executor-js/sdk@1.5.23
+  - @executor-js/runtime-quickjs@1.5.23
+
 ## 1.5.22
 
 ### Patch Changes

.changeset/desktop-background-service-consent-seam.md

@@ -1,6 +1,6 @@
 {
   "name": "executor",
-  "version": "1.5.22",
+  "version": "1.5.23",
   "private": true,
   "bin": {
     "executor": "./bin/executor.ts"

.changeset/desktop-sidecar-auth-token-dash.md

@@ -1,5 +1,27 @@
 # @executor-js/cloud
 
+## 1.4.41
+
+### Patch Changes
+
+- Updated dependencies [[`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a), [`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a), [`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a)]:
+  - @executor-js/api@1.4.43
+  - @executor-js/plugin-graphql@1.5.23
+  - @executor-js/react@1.4.43
+  - @executor-js/cloudflare@0.0.22
+  - @executor-js/plugin-google@1.5.22
+  - @executor-js/plugin-mcp@1.5.23
+  - @executor-js/plugin-microsoft@1.5.22
+  - @executor-js/plugin-openapi@1.5.23
+  - @executor-js/plugin-toolkits@1.5.15
+  - @executor-js/plugin-workos-vault@0.0.2
+  - @executor-js/runtime-dynamic-worker@1.4.4
+  - @executor-js/sdk@1.5.23
+  - @executor-js/runtime-quickjs@1.5.23
+  - @executor-js/execution@1.5.23
+  - @executor-js/vite-plugin@0.0.40
+  - @executor-js/host-mcp@1.4.4
+
 ## 1.4.40
 
 ### Patch Changes

.changeset/graphql-valid-selections.md

@@ -1,6 +1,6 @@
 {
   "name": "@executor-js/cloud",
-  "version": "1.4.40",
+  "version": "1.4.41",
   "private": true,
   "type": "module",
   "scripts": {

.changeset/update-available-notifications.md

@@ -1,5 +1,11 @@
 # @executor-js/desktop
 
+## 1.5.23
+
+### Patch Changes
+
+- [#1199](https://github.com/RhysSullivan/executor/pull/1199) [`29936d5`](https://github.com/RhysSullivan/executor/commit/29936d5981256f8f953797d9ce8ce073ac6a0b6a) Thanks [@RhysSullivan](https://github.com/RhysSullivan)! - Notify when a newer Executor is published. The CLI now prints an "update available" line under its ready banner, and the web shell's sidebar update card works for real (a new `/v1/app/npm/dist-tags` endpoint backs it). In the desktop app the card shows a native "Restart to update" action wired to the in-app updater instead of the npm command. The check is best-effort and offline-safe, and can be disabled with `EXECUTOR_DISABLE_UPDATE_CHECK`.
+
 ## 1.5.22
 
 ## 1.5.21