## kentcdodds/kody — v2026.10.01…v2026.10.02

_31 commits._

### Features
- **feat(open-api): MCP session → CLI credential bootstrap (ADR 0056) (#2818)** (277f089)
- **feat(open-api): accept CLI MCP OAuth on local-execute HTTP (#2815)** (6f80e79)
- **feat(open-api): bind local auth-fetch / packageSecrets / packageStorage for --local (#2810) (#2813)** (c1cbe50)
- **feat(webhooks): generic subscription-challenge (no vendor forks) (#2816)** (bf5ebd8)
- **feat(webhooks): add strava-hub subscription challenge type (#2814)** (3b17b61)
- **feat(open-api): package-graph download for CLI execute --local (#2808)** (0b03c72)
- **feat(runs): attribute execute Activity rows with workerId + invoke|code (#2798)** (761edaa)

### Fixes
- **fix(startup): defer local-execute rewrite off platform entry (#2831)** (9cceb02)
- **fix(open-api): multi-facade packageId remap + default-export bindings (#2832)** (0676433)
- **fix(open-api): local --local runtime binding audit + inlined CAF rewrite (#2830)** (c23c7ff)
- **fix(open-api): Devin follow-up for CapabilityProxy telemetry and opt-in (#2827)** (0800baa)
- **fix: drop Remix reconcile Sentry noise without sourcemap stacks (#2794)** (9bf100c)
- **fix: distinguish Artifacts lookup timeouts and opaque object errors (#2826)** (aad7053)
- **fix(open-api): resolve kody:runtime from nested local-execute package modules (#2823)** (9cb3e7f)
- **fix: surface dual-export execute bundle hangs with a run record (#2800)** (38848b5)
- **fix: restore secret-authority grants across sandbox→host MCP RPC (#2801)** (a72bfda)
- **fix: drop opaque Artifacts internal errors from Sentry (KODY-8F) (#2796)** (eed5461)
- **fix: mcpServerLock allows approved package exports via execute (#2791) (#2792)** (eb402ad)

### Backend
- **Drop leftover copy pins, helper echo, and extra test leftovers (#2835)** (cb994ce)
- **Shrink Worker startup by trimming unused Zod locale barrels (#2828)** (b9eeb73)
- **Upgrade remix to 3.0.0 (#2825)** (b750915)
- **Refresh Slack tokens on ok:false auth errors in createAuthenticatedFetch (#2803)** (69b4061)
- **Use a small icon for docs code block copy (#2799)** (1581789)
- **Enable Durable Object pending-I/O keep-alive (Birthday Week 2026-10-01) (#2795)** (383df8f)

### Docs
- **docs(open-api): require kody:runtime import in --local examples (#2824)** (a33b472)
- **docs: ban hosted MCP execute in prefer-local guidance (#2820)** (661785e)
- **docs: teach execute --local kody:@ via CapabilityProxy (#2805)** (3d0c233)
- **docs: add Connect Figma provider guide (#2804)** (a126b1f)
- **docs(agents): prefer @kodycodes/cli execute --local (#2786)** (b922dd8)
- **docs: say packageSave and git-remote need a PR preview (#2789)** (8978a3a)

### Chore
- **chore(deps): upgrade msw to v3 (#2785)** (086d163)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/kentcdodds/kody?utm_source=github-action)._