[codex] refactor plugin catalogs and registration

[RhysSullivan]

What changed

This refactors plugin composition so hosts register first-party plugins in one place instead of repeating the same lists across runtime setup, API wiring, routes, and shell components.

It introduces a shared @executor/host-plugins package for first-party source plugin metadata and server-side plugin wiring, plus a React-side plugin catalog provider so source and secret-provider plugins are registered once at the app root.

Why this changed

The plugin system had good runtime primitives, but the host integration points were still hand-assembled in multiple files. That made it easy for runtime, API, and UI plugin registration to drift apart and added a lot of boilerplate whenever a plugin changed.

User and developer impact

Hosts now define plugin participation once at the root/provider and once in the server registry layer.

This reduces repeated wiring in local and cloud, removes plugin catalog prop plumbing from page and shell components, and makes the remaining plugin registration points much clearer.

Root cause

The architecture separated runtime plugins, API groups, and React source/secret-provider plugins, but the host apps were manually stitching those pieces together in parallel instead of consuming a shared manifest.

Validation

• bun install
• bunx tsc --noEmit -p packages/hosts/plugins/tsconfig.json
• bunx tsc --noEmit -p apps/cloud/tsconfig.json
• bunx tsc --noEmit -p apps/local/tsconfig.json still stops on the pre-existing warning in packages/core/storage-file/src/tool-registry.ts:122

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	3f22368	Commit Preview URL Branch Preview URL	Apr 12 2026, 10:59 PM

[pkg-pr-new]

Open in StackBlitz

@executor/sdk

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/sdk@214

@executor/plugin-file-secrets

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-file-secrets@214

@executor/plugin-google-discovery

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-google-discovery@214

@executor/plugin-graphql

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-graphql@214

@executor/plugin-keychain

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-keychain@214

@executor/plugin-mcp

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-mcp@214

@executor/plugin-onepassword

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-onepassword@214

@executor/plugin-openapi

npm i https://pkg.pr.new/RhysSullivan/executor/@executor/plugin-openapi@214

commit: 3f22368