Share HTTP credential handling for source plugins

[RhysSullivan]

Summary

• Add a core http-credentials helper for HTTP-style plugins to prepare direct secret inputs into configured binding slots, resolve configured header/query-param values, and write/replace prepared bindings through the core credential binding facade.
• Move GraphQL backend header/query-param credential preparation and resolution onto the shared helper.
• Move OpenAPI backend header/query-param/spec-fetch credential preparation and resolution onto the shared helper.
• Move MCP backend header/query-param credential preparation and resolution onto the shared helper.
• Keep plugin source configuration and slot naming local to each plugin, so core remains plugin-type agnostic.

Not Included

• Google Discovery is intentionally left unchanged in this PR. It may be replaced by an OpenAPI conversion path instead of being migrated onto this helper.

Validation

• bun run format:check
• bun run lint
• bun run typecheck
• bun run test
• bun run test -- src/http-credentials.test.ts in packages/core/sdk
• bun run test -- src/sdk/plugin.test.ts in packages/plugins/graphql
• bun run test -- src/sdk/plugin.test.ts src/sdk/multi-scope-bearer.test.ts src/sdk/multi-scope-oauth.test.ts src/sdk/client-credentials-oauth.test.ts src/sdk/oauth-refresh.test.ts in packages/plugins/openapi
• bun run test -- src/sdk/plugin.test.ts src/sdk/per-user-auth-isolation.test.ts src/sdk/connection-pool.test.ts in packages/plugins/mcp

Stack

1. Standardize source credential binding API #810
2. Share HTTP credential handling for source plugins #813 👈 current
3. Refactor HTTP credential UI composition #815
4. Share HTTP source credential editor #816

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	ff26f97	May 14 2026, 05:41 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	ff26f97	Commit Preview URL Branch Preview URL	May 14 2026, 05:42 AM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@813

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@813

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@813

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@813

@executor-js/storage-core

npm i https://pkg.pr.new/@executor-js/storage-core@813

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@813

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@813

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@813

@executor-js/plugin-google-discovery

npm i https://pkg.pr.new/@executor-js/plugin-google-discovery@813

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@813

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@813

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@813

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@813

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@813

executor

npm i https://pkg.pr.new/executor@813

commit: ff26f97