electric-sql · icehaunter · May 19, 2026 · May 19, 2026
diff --git a/.changeset/cloud-agents-service-query.md b/.changeset/cloud-agents-service-query.md
diff --git a/.changeset/desktop-local-fetch.md b/.changeset/desktop-local-fetch.md
diff --git a/.changeset/fix-array-cast-type-wrapper.md b/.changeset/fix-array-cast-type-wrapper.md
diff --git a/.changeset/harden-pull-wake-runner.md b/.changeset/harden-pull-wake-runner.md
diff --git a/.changeset/little-pigs-complain.md b/.changeset/little-pigs-complain.md
diff --git a/.changeset/local-desktop-principal.md b/.changeset/local-desktop-principal.md
diff --git a/.changeset/pull-wake-health-diagnostics.md b/.changeset/pull-wake-health-diagnostics.md
diff --git a/.changeset/pull-wake-session-startup-ui.md b/.changeset/pull-wake-session-startup-ui.md
diff --git a/.changeset/telemetry-poller-safe-invoke.md b/.changeset/telemetry-poller-safe-invoke.md
diff --git a/examples/deep-survey/CHANGELOG.md b/examples/deep-survey/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @electric-ax/example-deep-survey
 
+## 0.1.10
+
+### Patch Changes
+
+- Updated dependencies [e126eba]
+- Updated dependencies [e126eba]
+  - @electric-ax/agents-runtime@0.2.2
+
 ## 0.1.9
 
 ### Patch Changes

diff --git a/examples/deep-survey/package.json b/examples/deep-survey/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@electric-ax/example-deep-survey",
   "private": true,
-  "version": "0.1.9",
+  "version": "0.1.10",
   "type": "module",
   "scripts": {
     "dev": "pnpm run --parallel \"/^dev:/\"",

diff --git a/packages/agents-desktop/CHANGELOG.md b/packages/agents-desktop/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @electric-ax/agents-desktop
 
+## 0.1.4
+
+### Patch Changes
+
+- e4acb1d: Use the Electric Cloud `service` query parameter for tenant-specific agents URLs so desktop cloud requests target the root agents endpoint while preserving tenant auth routing.
+- e126eba: Route local desktop mutating agents-server requests through the Electron main process so CORS preflights cannot stall behind renderer connection limits.
+- e126eba: Default unauthenticated local desktop sessions to the `system:dev-local` principal and resolve optimistic send principals at mutation time so pending messages do not render as `unknown`.
+- e126eba: Add pull-wake runner health check endpoint and rename `owner_user_id` to `owner_principal` across the runners system. The `GET /_electric/runners/:id/health` endpoint returns comprehensive diagnostics including runner state, client-reported stream/heartbeat/claim metrics, active claims, and dispatch stats with a derived health status (healthy/degraded/unhealthy). The `PullWakeRunner` now tracks internal diagnostics and reports them to the server via heartbeats, stored in a separate `runner_runtime_diagnostics` table so the main `runners` shape stays stable for normal UI sync. The `owner_user_id` → `owner_principal` rename stores canonical principal URLs instead of keys, with strict validation and canonicalization at route boundaries. The migration expires active runner claims and deletes existing runner rows as part of the principal rewrite. This is a breaking change with no backward compatibility — all callers must send principal URLs.
+
 ## 0.1.3
 
 ### Patch Changes

diff --git a/packages/agents-desktop/package.json b/packages/agents-desktop/package.json
@@ -2,7 +2,7 @@
   "name": "@electric-ax/agents-desktop",
   "productName": "Electric Agents",
   "private": true,
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Desktop app for Electric Agents",
   "author": "ElectricSQL <info@electric-sql.com>",
   "homepage": "https://electric-sql.com",

diff --git a/packages/agents-runtime/CHANGELOG.md b/packages/agents-runtime/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @electric-ax/agents-runtime
 
+## 0.2.2
+
+### Patch Changes
+
+- e126eba: Harden pull-wake runner lifecycle with a state machine, heartbeat-driven stream resets, and exponential reconnect backoff (1s-30s). Add granular `status` field to `PullWakeRunnerHealth` (`stopped | starting | connecting | streaming | reconnecting | stopping`). The `onError` callback is now reporting-only (`(Error) => void`) - it can no longer control runner lifecycle. `stop()` rethrows `drainWakes` errors so callers observe wake handler failures. Event-driven heartbeat throttling avoids stale diagnostics between fixed-interval heartbeats. Durable Streams clients now append stream and `__ds` subscription control paths to the configured backend URL prefix without inferring a `/v1/stream` layout, so pull-wake subscriptions work behind arbitrary DS backend prefixes. Remove the stale `StreamClient.getConsumerState()` helper for the old Durable Streams `/consumers` endpoint.
+- e126eba: Add pull-wake runner health check endpoint and rename `owner_user_id` to `owner_principal` across the runners system. The `GET /_electric/runners/:id/health` endpoint returns comprehensive diagnostics including runner state, client-reported stream/heartbeat/claim metrics, active claims, and dispatch stats with a derived health status (healthy/degraded/unhealthy). The `PullWakeRunner` now tracks internal diagnostics and reports them to the server via heartbeats, stored in a separate `runner_runtime_diagnostics` table so the main `runners` shape stays stable for normal UI sync. The `owner_user_id` → `owner_principal` rename stores canonical principal URLs instead of keys, with strict validation and canonicalization at route boundaries. The migration expires active runner claims and deletes existing runner rows as part of the principal rewrite. This is a breaking change with no backward compatibility — all callers must send principal URLs.
+
 ## 0.2.1
 
 ### Patch Changes

diff --git a/packages/agents-runtime/package.json b/packages/agents-runtime/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@electric-ax/agents-runtime",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Electric agent runtime — behavioral stack for agent entities over durable streams",
   "keywords": [
     "tanstack-intent"

diff --git a/packages/agents-server-ui/CHANGELOG.md b/packages/agents-server-ui/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @electric-ax/agents-server-ui
 
+## 0.4.4
+
+### Patch Changes
+
+- e126eba: Route local desktop mutating agents-server requests through the Electron main process so CORS preflights cannot stall behind renderer connection limits.
+- e126eba: Default unauthenticated local desktop sessions to the `system:dev-local` principal and resolve optimistic send principals at mutation time so pending messages do not render as `unknown`.
+- e126eba: Send new-session initial messages through the spawn request so pull-wake sessions can start without waiting for the UI to preload the entity stream.
+- Updated dependencies [e126eba]
+- Updated dependencies [e126eba]
+  - @electric-ax/agents-runtime@0.2.2
+
 ## 0.4.3
 
 ### Patch Changes

diff --git a/packages/agents-server-ui/package.json b/packages/agents-server-ui/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@electric-ax/agents-server-ui",
   "private": true,
-  "version": "0.4.3",
+  "version": "0.4.4",
   "type": "module",
   "scripts": {
     "build": "vite build",

diff --git a/packages/agents-server/CHANGELOG.md b/packages/agents-server/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @electric-ax/agents-server
 
+## 0.4.4
+
+### Patch Changes
+
+- e126eba: Harden pull-wake runner lifecycle with a state machine, heartbeat-driven stream resets, and exponential reconnect backoff (1s-30s). Add granular `status` field to `PullWakeRunnerHealth` (`stopped | starting | connecting | streaming | reconnecting | stopping`). The `onError` callback is now reporting-only (`(Error) => void`) - it can no longer control runner lifecycle. `stop()` rethrows `drainWakes` errors so callers observe wake handler failures. Event-driven heartbeat throttling avoids stale diagnostics between fixed-interval heartbeats. Durable Streams clients now append stream and `__ds` subscription control paths to the configured backend URL prefix without inferring a `/v1/stream` layout, so pull-wake subscriptions work behind arbitrary DS backend prefixes. Remove the stale `StreamClient.getConsumerState()` helper for the old Durable Streams `/consumers` endpoint.
+- e126eba: Add pull-wake runner health check endpoint and rename `owner_user_id` to `owner_principal` across the runners system. The `GET /_electric/runners/:id/health` endpoint returns comprehensive diagnostics including runner state, client-reported stream/heartbeat/claim metrics, active claims, and dispatch stats with a derived health status (healthy/degraded/unhealthy). The `PullWakeRunner` now tracks internal diagnostics and reports them to the server via heartbeats, stored in a separate `runner_runtime_diagnostics` table so the main `runners` shape stays stable for normal UI sync. The `owner_user_id` → `owner_principal` rename stores canonical principal URLs instead of keys, with strict validation and canonicalization at route boundaries. The migration expires active runner claims and deletes existing runner rows as part of the principal rewrite. This is a breaking change with no backward compatibility — all callers must send principal URLs.
+- Updated dependencies [e126eba]
+- Updated dependencies [e126eba]
+  - @electric-ax/agents-runtime@0.2.2
+
 ## 0.4.3
 
 ### Patch Changes

diff --git a/packages/agents-server/package.json b/packages/agents-server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@electric-ax/agents-server",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "Electric Agents entity runtime server",
   "author": "Durable Stream contributors",
   "bin": {

diff --git a/packages/agents/CHANGELOG.md b/packages/agents/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @electric-ax/agents
 
+## 0.4.3
+
+### Patch Changes
+
+- e126eba: Harden pull-wake runner lifecycle with a state machine, heartbeat-driven stream resets, and exponential reconnect backoff (1s-30s). Add granular `status` field to `PullWakeRunnerHealth` (`stopped | starting | connecting | streaming | reconnecting | stopping`). The `onError` callback is now reporting-only (`(Error) => void`) - it can no longer control runner lifecycle. `stop()` rethrows `drainWakes` errors so callers observe wake handler failures. Event-driven heartbeat throttling avoids stale diagnostics between fixed-interval heartbeats. Durable Streams clients now append stream and `__ds` subscription control paths to the configured backend URL prefix without inferring a `/v1/stream` layout, so pull-wake subscriptions work behind arbitrary DS backend prefixes. Remove the stale `StreamClient.getConsumerState()` helper for the old Durable Streams `/consumers` endpoint.
+- e126eba: Add pull-wake runner health check endpoint and rename `owner_user_id` to `owner_principal` across the runners system. The `GET /_electric/runners/:id/health` endpoint returns comprehensive diagnostics including runner state, client-reported stream/heartbeat/claim metrics, active claims, and dispatch stats with a derived health status (healthy/degraded/unhealthy). The `PullWakeRunner` now tracks internal diagnostics and reports them to the server via heartbeats, stored in a separate `runner_runtime_diagnostics` table so the main `runners` shape stays stable for normal UI sync. The `owner_user_id` → `owner_principal` rename stores canonical principal URLs instead of keys, with strict validation and canonicalization at route boundaries. The migration expires active runner claims and deletes existing runner rows as part of the principal rewrite. This is a breaking change with no backward compatibility — all callers must send principal URLs.
+- Updated dependencies [e126eba]
+- Updated dependencies [e126eba]
+  - @electric-ax/agents-runtime@0.2.2
+
 ## 0.4.2
 
 ### Patch Changes

diff --git a/packages/agents/package.json b/packages/agents/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@electric-ax/agents",
-  "version": "0.4.2",
+  "version": "0.4.3",
   "description": "Built-in Electric Agents runtimes such as Horton and worker",
   "repository": {
     "type": "git",

diff --git a/packages/electric-ax/CHANGELOG.md b/packages/electric-ax/CHANGELOG.md
@@ -1,5 +1,15 @@
 # electric-ax
 
+## 0.2.3
+
+### Patch Changes
+
+- e126eba: Add pull-wake runner health check endpoint and rename `owner_user_id` to `owner_principal` across the runners system. The `GET /_electric/runners/:id/health` endpoint returns comprehensive diagnostics including runner state, client-reported stream/heartbeat/claim metrics, active claims, and dispatch stats with a derived health status (healthy/degraded/unhealthy). The `PullWakeRunner` now tracks internal diagnostics and reports them to the server via heartbeats, stored in a separate `runner_runtime_diagnostics` table so the main `runners` shape stays stable for normal UI sync. The `owner_user_id` → `owner_principal` rename stores canonical principal URLs instead of keys, with strict validation and canonicalization at route boundaries. The migration expires active runner claims and deletes existing runner rows as part of the principal rewrite. This is a breaking change with no backward compatibility — all callers must send principal URLs.
+- Updated dependencies [e126eba]
+- Updated dependencies [e126eba]
+  - @electric-ax/agents-runtime@0.2.2
+  - @electric-ax/agents@0.4.3
+
 ## 0.2.2
 
 ### Patch Changes

diff --git a/packages/electric-ax/package.json b/packages/electric-ax/package.json
@@ -1,6 +1,6 @@
 {
   "name": "electric-ax",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "CLI for Electric Agents",
   "author": "ElectricSQL team and contributors",
   "license": "Apache-2.0",

diff --git a/packages/electric-telemetry/CHANGELOG.md b/packages/electric-telemetry/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @core/electric-telemetry
 
+## 0.2.7
+
+### Patch Changes
+
+- eac6dea: Wrap telemetry-poller MFAs in `ElectricTelemetry.Poller.safe_invoke/3` so that transient collector failures (`:noproc`, `:timeout`, `:shutdown`/`:normal` exits, `ArgumentError` from not-yet-created ETS tables) no longer cause `:telemetry_poller` to permanently remove the measurement from its polling list. Unexpected errors are now logged as warnings with the offending MFA and the collector keeps being polled on subsequent ticks. Strips now-redundant defensive `try/catch` / `with`-fallthrough code from individual collectors.
+
+  Note: user-supplied periodic measurement functions no longer have exceptions propagated up to `:telemetry_poller`'s own error logger — they are caught and logged via `ElectricTelemetry.Poller` instead.
+
 ## 0.2.6
 
 ### Patch Changes

diff --git a/packages/electric-telemetry/package.json b/packages/electric-telemetry/package.json
@@ -1,5 +1,5 @@
 {
   "name": "@core/electric-telemetry",
   "private": true,
-  "version": "0.2.6"
+  "version": "0.2.7"
 }
diff --git a/packages/sync-service/CHANGELOG.md b/packages/sync-service/CHANGELOG.md
@@ -1,5 +1,15 @@
 # @core/sync-service
 
+## 1.6.6
+
+### Patch Changes
+
+- 8a94d7f: Fix `@>` (and other array operators) returning 400 when the right-hand side uses a non-foldable `ARRAY[...]::T[]` outer cast, e.g. `"organization_ids" @> ARRAY[$1]::uuid[]` with a column or parameter inside the constructor. The where-clause parser was assigning the element type (`:uuid`) instead of the array type (`{:array, :uuid}`) to array-cast and array-implicit-cast functions, which made the `@>` operator overload lookup fail with `Could not select an operator overload`.
+- 4590862: Remove the single-function PartialMode module by moving its query_subset() function into SnapshotQuery, so that its implementation could sit close to SnapshotQuery.execute_for_shape().
+- eac6dea: Wrap telemetry-poller MFAs in `ElectricTelemetry.Poller.safe_invoke/3` so that transient collector failures (`:noproc`, `:timeout`, `:shutdown`/`:normal` exits, `ArgumentError` from not-yet-created ETS tables) no longer cause `:telemetry_poller` to permanently remove the measurement from its polling list. Unexpected errors are now logged as warnings with the offending MFA and the collector keeps being polled on subsequent ticks. Strips now-redundant defensive `try/catch` / `with`-fallthrough code from individual collectors.
+
+  Note: user-supplied periodic measurement functions no longer have exceptions propagated up to `:telemetry_poller`'s own error logger — they are caught and logged via `ElectricTelemetry.Poller` instead.
+
 ## 1.6.5
 
 ### Patch Changes

diff --git a/packages/sync-service/package.json b/packages/sync-service/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@core/sync-service",
   "private": true,
-  "version": "1.6.5",
+  "version": "1.6.6",
   "scripts": {
     "publish:hex": "../../scripts/publish_hex.sh electric",
     "changeset": "pushd ../..; pnpm changeset; popd"