Skip to content

Overhaul plugin source credential configuration - #844

Merged
RhysSullivan merged 19 commits into
mainfrom
codex/source-binding-core-api
May 19, 2026
Merged

Overhaul plugin source credential configuration#844
RhysSullivan merged 19 commits into
mainfrom
codex/source-binding-core-api

Conversation

@RhysSullivan

@RhysSullivan RhysSullivan commented May 18, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Consolidate source credential configuration across OpenAPI, GraphQL, and MCP around core source credential bindings.
  • Move shared HTTP credential React helpers into @executor-js/plugin-http-source and reuse them from GraphQL/MCP/OpenAPI flows.
  • Replace plugin-specific binding wrapper types with core CredentialBindingRef rows and tighten binding refs to slotKey.
  • Remove dead HTTP-source request credential helpers and keep OAuth2 source config shared across HTTP-backed plugins.
  • Move OpenAPI/GraphQL/MCP source storage into plugin storage with a one-shot cloud migration.
  • Improve GraphQL introspection auth/error handling, including upstream error passthrough with token redaction.

Validation

  • bun run lint
  • bun run format:check
  • bun run --filter @executor-js/plugin-graphql typecheck
  • bun run --filter @executor-js/plugin-mcp typecheck
  • bun run --filter @executor-js/plugin-openapi typecheck
  • bun run --filter @executor-js/plugin-http-source typecheck
  • bun run --filter @executor-js/react typecheck
  • bun run --filter @executor-js/react test -- src/plugins/credential-bindings.test.ts src/plugins/source-credential-status.test.ts src/plugins/source-oauth-connection.test.ts
  • bun run --filter @executor-js/plugin-http-source test -- src/react/http-credentials.test.ts
  • bun run --filter @executor-js/plugin-graphql test -- src/sdk/plugin.test.ts -t "upstream text|upstream JSON messages|redacts secrets"

Migration Dry Run

Ran pending cloud migration 0017_plugin_storage_sources.sql against production inside BEGIN ... ROLLBACK using the production environment. All 22 statements applied successfully and rollback was confirmed.

Observed migrated row counts before rollback:

  • graphql/source: 2
  • graphql/operation: 295
  • mcp/source: 101
  • mcp/binding: 6040
  • openapi/source: 111
  • openapi/operation: 56328

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented May 18, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
executor-marketing 7cbd012 Commit Preview URL

Branch Preview URL
May 19 2026, 12:43 AM

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented May 18, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Updated (UTC)
✅ Deployment successful!
View logs
executor-cloud 7cbd012 May 19 2026, 12:43 AM

@pkg-pr-new

pkg-pr-new Bot commented May 18, 2026

Copy link
Copy Markdown

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@844

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@844

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@844

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@844

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@844

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@844

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@844

@executor-js/plugin-google-discovery

npm i https://pkg.pr.new/@executor-js/plugin-google-discovery@844

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@844

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@844

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@844

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@844

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@844

executor

npm i https://pkg.pr.new/executor@844

commit: 0a39af3

@RhysSullivan RhysSullivan changed the title [codex] Consolidate OpenAPI source bindings Overhaul plugin source credential configuration May 19, 2026
@RhysSullivan
RhysSullivan marked this pull request as ready for review May 19, 2026 00:28
@RhysSullivan
RhysSullivan force-pushed the codex/source-binding-core-api branch from 809b04c to 0a39af3 Compare May 19, 2026 00:30
@RhysSullivan
RhysSullivan merged commit 0fd4d11 into main May 19, 2026
10 checks passed
RhysSullivan added a commit that referenced this pull request May 31, 2026
* Consolidate OpenAPI source bindings

* Overhaul plugin source configuration

* Restore OpenAPI credential scope selection

* Unify MCP request header inputs

* Use credential scope for inline secret creation

* Scope credential secret pickers

* Use initial credentials during source add

* Show MCP OAuth sign-in for user scope

* Persist OAuth source auth from initial credentials

* Scope OAuth client credential secrets

* Default edit OAuth connections to active scope

* Clean up OpenAPI OAuth edit layout

* Read edit OAuth state from user scope

* Clarify inherited OAuth connection state

* Match OpenAPI edit OAuth credential scope UI

* Accept standard GraphQL introspection type refs

* Surface GraphQL introspection upstream errors

* Overhaul plugin source credential configuration

* Fix GraphQL introspection response decoding
@RhysSullivan
RhysSullivan deleted the codex/source-binding-core-api branch June 11, 2026 08:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant