Expand agent-facing Executor configuration tools#841
Draft
RhysSullivan wants to merge 15 commits into
Draft
Conversation
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
executor-marketing | dcdde22 | Commit Preview URL Branch Preview URL |
May 19 2026, 08:15 AM |
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ✅ Deployment successful! View logs |
executor-cloud | dcdde22 | May 19 2026, 08:16 AM |
This was referenced May 17, 2026
@executor-js/cli
@executor-js/config
@executor-js/execution
@executor-js/sdk
@executor-js/codemode-core
@executor-js/runtime-quickjs
@executor-js/plugin-file-secrets
@executor-js/plugin-google-discovery
@executor-js/plugin-graphql
@executor-js/plugin-keychain
@executor-js/plugin-mcp
@executor-js/plugin-onepassword
@executor-js/plugin-openapi
executor
commit: |
953dd3c to
4a8ced1
Compare
08ead90 to
02ab416
Compare
9638dc8 to
dddf5f4
Compare
Introduces `coreToolsPlugin` in @executor-js/sdk exposing three static
tools agents can call directly:
- `scopes.list` — enumerate visible scopes by name; agents pick a scope
by asking the user, not by guessing or defaulting.
- `secrets.list` — visible secrets as `{id, name, provider}`; values
never cross the agent boundary.
- `secrets.create` — pre-allocates a secret id and returns a URL to the
existing /secrets web form, pre-filled with name + id. The user enters
the value in the browser; the agent confirms by re-listing.
The plugin auto-registers when `coreTools: { webBaseUrl }` is set on
ExecutorConfig, so hosts opt in with one line. apps/local wires it to
the daemon's own port — same host as the API, no separate UI server.
The /secrets web side reads the prefill params via TanStack Router
`validateSearch`, opens the add modal pre-filled, and locks the id via
a new `initialIdOverride` prop on SecretForm. URL prefilling works
fully through the dev:cli vite proxy.
dddf5f4 to
eb898c7
Compare
02ab416 to
f586acb
Compare
ab24eac to
3881485
Compare
3881485 to
879bf93
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds the foundational agent-facing Executor configuration surface so sources, secrets, policies, connections, and first-party plugin setup flows can be driven through Executor tools.
Key changes:
executor.coreToolssurface for scopes, secrets, source configuration, credential bindings, policies, connections, and OAuth browser handoff.dev:cli mcp.apps/local/.executor-dev.Validation
bun run --cwd packages/core/sdk test -- src/executor.test.tsbun run --cwd apps/cli typecheckbunx oxfmt --check packages/core/sdk/src/core-tools.ts packages/core/sdk/src/executor.test.ts apps/cli/src/main.tsNotes
This PR is draft because it intentionally groups the foundational core tools and several provider flow descriptions; it likely still needs review for stack splitting and final UX decisions around source credential bindings.
Stack