Merge main and restore artifact source coverage

Author: RhysSullivan

.changeset/artifact-delete-navigation.md

@@ -0,0 +1,5 @@
+---
+"executor": patch
+---
+
+Prevent deleted artifacts from briefly reappearing after returning to the artifact gallery.

.changeset/artifact-external-links.md

@@ -0,0 +1,5 @@
+---
+"executor": patch
+---
+
+**Fix: links in generated artifacts (`<a target="_blank">`) did nothing when clicked.** The sandbox iframe deliberately has no `allow-popups`, so the browser blocked the new browsing context and the click went nowhere. A trusted user click is now relayed across the frame boundary to the host's `openLink` capability — guarded by a per-render nonce so generated code cannot forge or observe it — and the host opens only `http`/`https` URLs.

.changeset/artifact-hyphenated-tool-paths.md

@@ -0,0 +1,5 @@
+---
+"executor": patch
+---
+
+Render artifacts that call integrations or tools with hyphenated slugs.

.changeset/cimd-refresh-token.md

@@ -0,0 +1,10 @@
+---
+"@executor-js/api": patch
+---
+
+Advertise refresh-token support in OAuth client ID metadata documents.
+
+OAuth providers may reject the `offline_access` scope when the client's
+metadata declares only the authorization-code grant. Hosted and local client
+metadata now declare both `authorization_code` and `refresh_token`, matching
+Executor's dynamic client registration behavior.

.changeset/cli-approval-public-origin.md

@@ -0,0 +1,5 @@
+---
+"executor": patch
+---
+
+Pin CLI browser approval links to `EXECUTOR_WEB_BASE_URL` so a TLS reverse proxy no longer returns an unreachable `http://` URL.

.changeset/completed-mcp-tool-name.md

@@ -0,0 +1,5 @@
+---
+"@executor-js/execution": patch
+---
+
+Completed MCP execute results now include `toolName` when a script successfully uses exactly one connected tool. Executions that use distinct tools remain unlabeled, and internal call provenance is not exposed in the MCP response.

.changeset/describe-tool-annotations.md

@@ -0,0 +1,5 @@
+---
+"executor": patch
+---
+
+Return a tool's declared annotations from `tools.schema` and `describe.tool`. Code inside `execute` can now read `requiresApproval`, `approvalDescription` and `mayElicit` without parsing the tool's prose description.

.changeset/great-hoops-repeat.md

@@ -0,0 +1,9 @@
+---
+"@executor-js/plugin-openapi": patch
+---
+
+Fetch Google Analytics Data (`analyticsdata`) Discovery from the service's own
+host. The central directory does not list the GA4 Data API, so the canonical
+`https://www.googleapis.com/discovery/v1/apis/analyticsdata/v1beta/rest` answers
+404 and the source fails to import. Same treatment `forms`, `keep` and
+`photospicker` already get.

.changeset/hubspot-workspace-optional-scopes.md

@@ -0,0 +1,5 @@
+---
+"@executor-js/sdk": patch
+---
+
+Send HubSpot optional permissions in `optional_scope` for workspace OAuth clients so accounts can connect without optional product features.

.changeset/mcp-elicitation-active-deadline.md

@@ -0,0 +1,5 @@
+---
+"@executor-js/plugin-mcp": patch
+---
+
+Exclude time spent waiting for elicitation from the MCP tool invocation deadline.