From 7a8b149bf53ee610f5d05e32540a5c0f3737f838 Mon Sep 17 00:00:00 2001
From: Rhys Sullivan <39114868+RhysSullivan@users.noreply.github.com>
Date: Fri, 18 Sep 2026 01:25:13 -0700
Subject: [PATCH 1/2] Drop ignored host-mcp package from two changesets

---
 .changeset/computer-use-remembered-approvals.md | 1 -
 .changeset/mcp-session-executor-leak.md         | 1 -
 2 files changed, 2 deletions(-)

diff --git a/.changeset/computer-use-remembered-approvals.md b/.changeset/computer-use-remembered-approvals.md
index 50ab5b6d7..126dc9811 100644
--- a/.changeset/computer-use-remembered-approvals.md
+++ b/.changeset/computer-use-remembered-approvals.md
@@ -4,7 +4,6 @@
 "@executor-js/plugin-mcp": patch
 "@executor-js/api": patch
 "@executor-js/react": patch
-"@executor-js/host-mcp": patch
 "@executor-js/cloudflare": patch
 "executor": patch
 ---
diff --git a/.changeset/mcp-session-executor-leak.md b/.changeset/mcp-session-executor-leak.md
index e8419ec35..ea54575e2 100644
--- a/.changeset/mcp-session-executor-leak.md
+++ b/.changeset/mcp-session-executor-leak.md
@@ -1,5 +1,4 @@
 ---
-"@executor-js/host-mcp": patch
 "@executor-js/api": patch
 "executor": patch
 ---

From 9404ef28a4ba31e71c232b625cb723c751bc5bdb Mon Sep 17 00:00:00 2001
From: Rhys Sullivan <39114868+RhysSullivan@users.noreply.github.com>
Date: Fri, 18 Sep 2026 02:50:39 -0700
Subject: [PATCH 2/2] Release MCP passthrough mode as a patch

---
 .changeset/mcp-passthrough-mode.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.changeset/mcp-passthrough-mode.md b/.changeset/mcp-passthrough-mode.md
index 9008960f3..53b72ebaf 100644
--- a/.changeset/mcp-passthrough-mode.md
+++ b/.changeset/mcp-passthrough-mode.md
@@ -1,7 +1,7 @@
 ---
-"@executor-js/sdk": minor
-"@executor-js/execution": minor
-"executor": minor
+"@executor-js/sdk": patch
+"@executor-js/execution": patch
+"executor": patch
 ---
 
 Add a search and invoke MCP mode (`?mode=passthrough`, `executor mcp --mode passthrough`). Search returns bounded pages of matching tool IDs and input schemas. Invoke validates arguments and runs the selected tool, with native client approval and workspace blocks enforced. The MCP catalog stays at two tools regardless of integration count.