Toolport

A robustness release: the gateway, app, and Teams client now recover cleanly from failure modes that used to fail silently, plus a batch of Teams polish for this week's Toolport for Teams launch.

Highlights

• Crashed servers heal themselves. A stdio server that dies mid-session is re-spawned by the per-server circuit breaker's probe instead of staying dead until you restart your client.
• Teams stays in sync on its own. Your team's shared server set and safety policy now refresh automatically (on launch and on an interval), so an admin's change reaches every member without anyone clicking "Sync now".
• Synced team servers can't hide. Servers your team shares now split into Needs review (top, awaiting your enable) and Active, so a fresh sync is impossible to miss.
• A mis-shaped config just works. A server whose command is one unsplit string ("npx -y some-server" with no args array) now runs instead of failing with os error 3.
• Playground: cancel a stuck call. A hanging tool call shows a live timer and a Cancel button instead of spinning forever.

Teams fixes

• Restricted members get 304 Not Modified config responses again (the app now echoes the server's exact ETag).
• "Push my setup" no longer pushes the gateway itself as if it were one of your team's servers.
• The invite-code field no longer implies a ci_ prefix that codes don't have.
• Removed or demoted members are cut off cleanly: the app disconnects the team locally and refreshes the role on sync.

App and gateway

• Lazy-discovery search ranks the exactly-named tool first on near-ties, so the on-the-nose match wins over a chattier description.
• Confirm-before-delete on saved credentials, matching every other destructive action.
• Catalog search failures are distinguishable from "no results", with a retry.
• Onboarding's final step surfaces a failed health probe instead of finishing green over a server that never started.
• Settings security panels distinguish a failed poll from genuinely empty.
• Teams and Playground polish: sorted shared-server list, the invoke panel hoisted above the fold, clear-filter affordances, proper empty/auth states.
• Catalog: removed the dead Railway entry (its MCP endpoint 404s).
• Under-the-hood hardening: time-boxed embeddings endpoint (hung model falls back to lexical search), size-bounded stdio reads, versioned tool cache.

Full details in CHANGELOG.md. Installers below are code-signed on Windows and macOS (macOS notarized); existing installs auto-update.