Support multiple 1Password vaults

[RhysSullivan]

The 1Password credential provider was bound to exactly one vault. This makes the vault binding a set, with explicit per-vault addressing.

• Config stores a vaults array selected with checkboxes. The old single-vaultId shape is still read and normalizes to a one-vault list; the next save writes the new shape.
• Every picked item stores a vault-qualified op://<vault>/<item> ref, so identically-titled items in different vaults can never collide. There is no precedence order.
• A bare item id or name resolves only when it matches exactly one item across the selected vaults. A name that exists in more than one place fails with an error naming the matching vaults.
• The item picker is now a searchable combobox that shows each item's vault; entries carry a new optional group label on the generic provider-items surface.
• Vault and item listings are served stale-while-revalidate: reopening a picker renders the last-known list instantly and refreshes in the background instead of flashing a loading state.
• status reports vaultNames and flags configured vaults the account can no longer see.

Demo

All data below is synthetic (recorded against a stubbed op CLI).

Vault selection:

Item search with per-vault provenance — the same title in two vaults stays unambiguous:

Testing

Plugin unit suite: config round-trip, legacy-blob upgrade, explicit resolution (qualified refs, unique bare match, cross-vault and same-vault ambiguity, not-found). Verified live against a local 1Password with two vaults: connect, edit, picker search, and instant reopen after the stale-while-revalidate change.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	6e5a704	Aug 28 2026, 08:24 PM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	6e5a704	Commit Preview URL Branch Preview URL	Aug 28 2026, 08:23 PM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1829

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1829

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1829

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1829

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1829

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1829

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1829

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1829

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1829

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1829

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1829

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1829

executor

npm i https://pkg.pr.new/executor@1829

commit: 6e5a704