Support secrets.defaults.store in executor.jsonc

.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets).
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md).

.changeset/config.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@3.1.3/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": []
+}

.executor/executor.jsonc

@@ -0,0 +1,64 @@
+{
+  "sources": {
+    "github": {
+      "kind": "openapi",
+      "name": "GitHub",
+      "connection": {
+        "endpoint": "https://api.github.com"
+      },
+      "binding": {
+        "specUrl": "https://example.com/github-openapi.yaml",
+        "defaultHeaders": null
+      }
+    },
+    "google-gmail": {
+      "name": "Gmail",
+      "namespace": "google.gmail",
+      "connection": {
+        "endpoint": "https://www.googleapis.com/discovery/v1/apis/gmail/v1/rest"
+      },
+      "kind": "google_discovery",
+      "binding": {
+        "service": "gmail",
+        "version": "v1",
+        "discoveryUrl": "https://www.googleapis.com/discovery/v1/apis/gmail/v1/rest",
+        "defaultHeaders": null,
+        "scopes": [
+          "scope:gmail.readonly"
+        ]
+      }
+    },
+    "google-calendar": {
+      "name": "Google Calendar",
+      "namespace": "google.calendar",
+      "connection": {
+        "endpoint": "https://calendar-json.googleapis.com/$discovery/rest?version=v3"
+      },
+      "kind": "google_discovery",
+      "binding": {
+        "service": "calendar",
+        "version": "v3",
+        "discoveryUrl": "https://calendar-json.googleapis.com/$discovery/rest?version=v3",
+        "defaultHeaders": null,
+        "scopes": [
+          "scope:calendar.readonly"
+        ]
+      }
+    },
+    "google-drive": {
+      "name": "Drive",
+      "namespace": "google.drive",
+      "connection": {
+        "endpoint": "https://www.googleapis.com/discovery/v1/apis/drive/v3/rest"
+      },
+      "kind": "google_discovery",
+      "binding": {
+        "service": "drive",
+        "version": "v3",
+        "discoveryUrl": "https://www.googleapis.com/discovery/v1/apis/drive/v3/rest",
+        "defaultHeaders": null,
+        "scopes": []
+      }
+    }
+  }
+}

.github/workflows/publish-executor-package.yml

@@ -0,0 +1,68 @@
+name: Publish Executor
+run-name: "${{ format('publish executor {0}', github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name) }}"
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: Git tag to publish
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  id-token: write
+
+concurrency:
+  group: publish-executor-package-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/tags/{0}', inputs.tag) || github.ref }}
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          registry-url: https://registry.npmjs.org
+
+      - name: Update npm for trusted publishing
+        run: |
+          npm install -g npm@latest
+          npm --version
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Run executor checks
+        run: |
+          bun run --cwd apps/executor typecheck
+          bun run --cwd apps/executor test
+
+      - name: Publish package and create release
+        env:
+          GH_TOKEN: ${{ github.token }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+          RELEASE_TAG: ${{ github.event_name == 'workflow_dispatch' && inputs.tag || github.ref_name }}
+        run: |
+          export GITHUB_REF_TYPE=tag
+          export GITHUB_REF_NAME="$RELEASE_TAG"
+          export GITHUB_REF="refs/tags/$RELEASE_TAG"
+          if [ -n "${NPM_TOKEN:-}" ]; then
+            export NODE_AUTH_TOKEN="$NPM_TOKEN"
+          fi
+          bun run --cwd apps/executor release:publish

.github/workflows/release.yml

@@ -0,0 +1,95 @@
+name: Release
+run-name: "prepare release"
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  actions: write
+  contents: write
+  id-token: write
+  pull-requests: write
+
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 24
+
+      - name: Install dependencies
+        run: bun install --frozen-lockfile
+
+      - name: Create or update release pull request
+        id: changesets
+        uses: changesets/action@v1
+        with:
+          version: bun run changeset:version
+          commit: Version Packages
+          title: Version Packages
+          createGithubReleases: false
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Detect release version change
+        if: steps.changesets.outputs.hasChangesets == 'false'
+        id: detect_release
+        run: |
+          before="${{ github.event.before }}"
+          if [ "$before" = "0000000000000000000000000000000000000000" ]; then
+            before="$(git rev-list --max-count=1 HEAD^ 2>/dev/null || true)"
+          fi
+
+          version="$(node -e "console.log(JSON.parse(require('fs').readFileSync('apps/executor/package.json', 'utf8')).version)")"
+          if [ -n "$before" ] && git cat-file -e "$before:apps/executor/package.json" 2>/dev/null; then
+            previous_version="$(git show "$before:apps/executor/package.json" | node -e "let data = ''; process.stdin.setEncoding('utf8'); process.stdin.on('data', (chunk) => { data += chunk; }); process.stdin.on('end', () => { console.log(JSON.parse(data).version ?? ''); });")"
+          else
+            previous_version=""
+          fi
+
+          if [ -n "$previous_version" ] && [ "$previous_version" != "$version" ]; then
+            echo "changed=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "changed=false" >> "$GITHUB_OUTPUT"
+          fi
+
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+
+      - name: Create and push release tag
+        if: steps.changesets.outputs.hasChangesets == 'false' && steps.detect_release.outputs.changed == 'true'
+        run: |
+          tag="v${{ steps.detect_release.outputs.version }}"
+          if git ls-remote --exit-code --tags origin "refs/tags/$tag" >/dev/null 2>&1; then
+            echo "Tag $tag already exists."
+            exit 0
+          fi
+
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git tag "$tag"
+          git push origin "$tag"
+
+      - name: Trigger publish workflow
+        if: steps.changesets.outputs.hasChangesets == 'false' && steps.detect_release.outputs.changed == 'true'
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          tag="v${{ steps.detect_release.outputs.version }}"
+          gh workflow run publish-executor-package.yml --ref "$tag" -f tag="$tag"

.gitignore

@@ -1,43 +1,86 @@
-# dependencies (bun install)
-node_modules
+# Environment variables
+.env
+.env.*
+!.env.example
+.env*.local
+
+# Vercel
+.vercel
+
+# Next.js
+.next/
+
+# Turbo
+.turbo/
+.turbo-prune-check/
+
+# Executor
+.executor-v2/
+.executor/*
+!.executor/executor.json
+!.executor/executor.jsonc
+.executor/artifacts/
+.executor/state/
+.executor/types/
+
+# Cloudflare Workers local state
+**/.wrangler/
+**/.dev.vars
+
+# Dependencies
+**/node_modules/
+
+# TypeScript build info
+*.tsbuildinfo
 
-# output
+# Output / build artifacts
 out
 dist
 *.tgz
 
-# code coverage
+# Rust / Cargo build artifacts
+**/target/
+tools/openapi-extractor-rs/pkg-*/
+
+# Code coverage
 coverage
 *.lcov
 
-# logs
+# Logs
 logs
 *.log
 report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
 
-# dotenv environment variable files
-.env
-.env.production
-.env.development.local
-.env.test.local
-.env.production.local
-.env.local
-
-# caches
+# Caches
 .eslintcache
 .cache
-*.tsbuildinfo
-.reference/
 
 # IntelliJ based IDEs
 .idea
 
-# Finder (MacOS) folder config
+# Finder (macOS)
 .DS_Store
 
 # Convex local backend state
 convex_local_backend.sqlite3
 convex_local_storage/
 
-# Generated push env file
+# Local OpenAPI sources service state
+sources/data/*.sqlite
+sources/data/*.sqlite-shm
+sources/data/*.sqlite-wal
+
+# Composio toolkit scrape outputs
+sources/composio-scrape/data/
+
+# Dev runner PID file
+.dev.pids
+
+# Misc
+*.har
+.chat-links.json
+.reference/
+personal-notes/
+.tmp/
 executor/.env.executor-push
+ignored/