@executor/plugin-onepassword

1Password integration for the executor. Provides a secret source that resolves values from a 1Password vault, backed by either the desktop app (connect.sock) or a service account token.

Install

bun add @executor/sdk @executor/plugin-onepassword
# or
npm install @executor/sdk @executor/plugin-onepassword

Usage

import { createExecutor } from "@executor/sdk";
import { onepasswordPlugin } from "@executor/plugin-onepassword";

const executor = await createExecutor({
  scope: { name: "my-app" },
  plugins: [onepasswordPlugin()] as const,
});

// Point the plugin at your account
await executor.onepassword.configure({
  auth: { kind: "desktop-app", accountName: "my-account" },
});

// Inspect connection / list vaults
const status = await executor.onepassword.status();
const vaults = await executor.onepassword.listVaults({
  kind: "desktop-app",
  accountName: "my-account",
});

For CI and headless environments, use a service-account token instead of the desktop app:

await executor.onepassword.configure({
  auth: { kind: "service-account", token: process.env.OP_SERVICE_ACCOUNT_TOKEN! },
});

Using with Effect

If you're building on @executor/sdk (the raw Effect entry), import this plugin from its /core subpath instead:

import { onepasswordPlugin } from "@executor/plugin-onepassword";

Status

Pre-1.0. APIs may still change between beta releases. Part of the executor monorepo.

License

MIT