Extract SDK executor secrets facade

[RhysSullivan]

Summary

Move SDK executor secret routing, listing, status, deletion, and usage visibility into executor-secrets.ts.

This keeps behavior unchanged while making the remaining executor orchestration smaller.

Validation

• bun run format:check
• bun run lint
• bun run typecheck
• bun run test

Stack

• Split SDK executor surface modules #832
• Extract SDK executor secrets facade #833 👈 current
• Extract SDK executor connections facade #834
• Extract SDK executor plugin runtime wiring #835
• Extract SDK executor public types #836

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	d2e5676	May 16 2026, 06:27 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	d2e5676	Commit Preview URL Branch Preview URL	May 16 2026, 06:28 PM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@833

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@833

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@833

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@833

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@833

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@833

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@833

@executor-js/plugin-google-discovery

npm i https://pkg.pr.new/@executor-js/plugin-google-discovery@833

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@833

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@833

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@833

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@833

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@833

executor

npm i https://pkg.pr.new/executor@833

commit: d2e5676

[RhysSullivan]

Closing this draft stack for now; the executor refactor approach is being reconsidered before review.