Add shared WorkOS Vault test client

[RhysSullivan]

Summary

• add a shared @executor/plugin-workos-vault/testing export with an Effect-native in-memory Vault client
• replace the plugin-local and cloud harness Vault fakes with the shared test client
• include the testing subpath in the WorkOS Vault package build and publish exports
• add an opt-in WorkOS dev Vault contract test using FastCheck-generated object names

Validation

• bun run lint from the top of the stack
• bun run --cwd packages/plugins/workos-vault typecheck
• bun run --cwd apps/cloud typecheck
• bunx vitest run src/sdk/secret-store.test.ts from packages/plugins/workos-vault
• bunx vitest run src/mcp-session.e2e.node.test.ts --config vitest.node.config.ts from apps/cloud
• bun run --cwd packages/plugins/workos-vault build
• bunx vitest run src/sdk/workos-vault.contract.test.ts --reporter=verbose from packages/plugins/workos-vault to verify the contract test skips without the explicit flag
• WORKOS_VAULT_CONTRACT_RUNS=10 op run --env-file=/home/rhys/executor/apps/cloud/.env.op -- bun run --cwd packages/plugins/workos-vault test:contract:workos-vault -- --reporter=verbose

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	08a9f35	Apr 28 2026, 05:29 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	08a9f35	Commit Preview URL Branch Preview URL	Apr 28 2026, 05:29 AM

[pkg-pr-new]

Open in StackBlitz

@executor/sdk

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/sdk@424

@executor/plugin-file-secrets

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-file-secrets@424

@executor/plugin-google-discovery

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-google-discovery@424

@executor/plugin-graphql

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-graphql@424

@executor/plugin-keychain

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-keychain@424

@executor/plugin-mcp

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-mcp@424

@executor/plugin-oauth2

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-oauth2@424

@executor/plugin-onepassword

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-onepassword@424

@executor/plugin-openapi

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-openapi@424

@executor/plugin-workos-vault

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-workos-vault@424

executor

npm i https://pkg.pr.new/RhysSullivan/executor@424

commit: 08a9f35

[RhysSullivan]

• Enforce WorkOS Vault style rules with oxlint #425
• Add shared WorkOS Vault test client #424 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.