Overhaul plugin source credential configuration

[RhysSullivan]

Summary

• Consolidate source credential configuration across OpenAPI, GraphQL, and MCP around core source credential bindings.
• Move shared HTTP credential React helpers into @executor-js/plugin-http-source and reuse them from GraphQL/MCP/OpenAPI flows.
• Replace plugin-specific binding wrapper types with core CredentialBindingRef rows and tighten binding refs to slotKey.
• Remove dead HTTP-source request credential helpers and keep OAuth2 source config shared across HTTP-backed plugins.
• Move OpenAPI/GraphQL/MCP source storage into plugin storage with a one-shot cloud migration.
• Improve GraphQL introspection auth/error handling, including upstream error passthrough with token redaction.

Validation

• bun run lint
• bun run format:check
• bun run --filter @executor-js/plugin-graphql typecheck
• bun run --filter @executor-js/plugin-mcp typecheck
• bun run --filter @executor-js/plugin-openapi typecheck
• bun run --filter @executor-js/plugin-http-source typecheck
• bun run --filter @executor-js/react typecheck
• bun run --filter @executor-js/react test -- src/plugins/credential-bindings.test.ts src/plugins/source-credential-status.test.ts src/plugins/source-oauth-connection.test.ts
• bun run --filter @executor-js/plugin-http-source test -- src/react/http-credentials.test.ts
• bun run --filter @executor-js/plugin-graphql test -- src/sdk/plugin.test.ts -t "upstream text|upstream JSON messages|redacts secrets"

Migration Dry Run

Ran pending cloud migration 0017_plugin_storage_sources.sql against production inside BEGIN ... ROLLBACK using the production environment. All 22 statements applied successfully and rollback was confirmed.

Observed migrated row counts before rollback:

• graphql/source: 2
• graphql/operation: 295
• mcp/source: 101
• mcp/binding: 6040
• openapi/source: 111
• openapi/operation: 56328

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	7cbd012	Commit Preview URL Branch Preview URL	May 19 2026, 12:43 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	7cbd012	May 19 2026, 12:43 AM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@844

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@844

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@844

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@844

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@844

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@844

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@844

@executor-js/plugin-google-discovery

npm i https://pkg.pr.new/@executor-js/plugin-google-discovery@844

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@844

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@844

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@844

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@844

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@844

executor

npm i https://pkg.pr.new/executor@844

commit: 0a39af3