feat: Support built-in authentication in the Cloudflare host #5344

@executor-js/plugin-openapi#test: command (/home/runner/_work/executor/executor/packages/plugins/openapi) /home/runner/.bun/bin/bun run test exited (1)

src/sdk/response-headers-timeout.test.ts > OpenAPI response headers timeout > does not apply the headers timeout after streaming response headers arrive: packages/plugins/openapi/src/sdk/invoke.ts#L1222

OpenApiInvocationError: Upstream returned no response headers within 100ms. The endpoint may be a live stream with no data to send (for example, runtime logs of an idle deployment); the request was aborted. Retry when the resource has activity, or use a non-streaming endpoint. ❯ src/sdk/invoke.ts:1222:19 ❯ next ../../../node_modules/.bun/effect@4.0.0-beta.59/node_modules/effect/src/internal/effect.ts:1276:25 ❯ Object.~effect/Effect/evaluate ../../../node_modules/.bun/effect@4.0.0-beta.59/node_modules/effect/src/internal/core.ts:531:30 ❯ FiberImpl.runLoop ../../../node_modules/.bun/effect@4.0.0-beta.59/node_modules/effect/src/internal/effect.ts:633:39 ❯ runLoop ../../../node_modules/.bun/effect@4.0.0-beta.59/node_modules/effect/src/internal/effect.ts:593:22 ❯ evaluate ../../../node_modules/.bun/effect@4.0.0-beta.59/node_modules/effect/src/internal/effect.ts:1030:14 ❯ Timeout._onTimeout src/sdk/invoke.ts:1212:7 ⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯ Serialized Error: { statusCode: { _id: 'Option', _tag: 'None' }, reason: 'response_headers_timeout', _tag: 'OpenApiInvocationError' }

E2E (cloud 4of16)

Process completed with exit code 1.

[cloud] scenarios/google-health-checks.test.ts > Google · OAuth catalog connection without a health check is healthy from the grant: e2e/src/surfaces/browser.ts#L149

TimeoutError: locator.click: Timeout 30000ms exceeded. Call log: - waiting for getByRole('button', { name: /Connect/ }).first() ❯ clickToReveal src/surfaces/browser.ts:149:19 ❯ scenarios/google-health-checks.test.ts:92:13 ❯ step src/surfaces/browser.ts:276:15 ❯ scenarios/google-health-checks.test.ts:89:5 ❯ src/surfaces/browser.ts:288:13

[cloud] scenarios/google-health-checks.test.ts > Google · Calendar and Gmail catalog health checks run against the emulator: e2e/src/surfaces/browser.ts#L149

E2E (cloud 9of16)

Process completed with exit code 1.

[cloud] scenarios/openapi-multi-key-auth-ui.test.ts > OpenAPI · the Cloudflare email and key auth method shows separate credential fields: e2e/scenarios/openapi-multi-key-auth-ui.test.ts#L66

TimeoutError: locator.waitFor: Timeout 30000ms exceeded. Call log: - waiting for getByText('Connections').first() to be visible ❯ scenarios/openapi-multi-key-auth-ui.test.ts:66:57 ❯ step src/surfaces/browser.ts:276:15 ❯ scenarios/openapi-multi-key-auth-ui.test.ts:64:11 ❯ src/surfaces/browser.ts:288:13

[cloud] cloud/member-invite-seat-limit.test.ts > Billing · a free org fills its 3 member seats, then invites are blocked with a reason: e2e/cloud/member-invite-seat-limit.test.ts#L50

TimeoutError: page.waitForURL: Timeout 30000ms exceeded. =========================== logs =========================== waiting for navigation until "load" ============================================================ ❯ cloud/member-invite-seat-limit.test.ts:50:20 ❯ step src/surfaces/browser.ts:276:15 ❯ cloud/member-invite-seat-limit.test.ts:48:7 ❯ src/surfaces/browser.ts:288:13

E2E (cloud 13of16)

Process completed with exit code 1.

[cloud] scenarios/org-slug-routing.test.ts > Org URLs · console paths carry the organization slug: e2e/scenarios/org-slug-routing.test.ts#L52

TimeoutError: page.waitForURL: Timeout 30000ms exceeded. =========================== logs =========================== waiting for navigation until "load" ============================================================ ❯ scenarios/org-slug-routing.test.ts:52:20 ❯ step src/surfaces/browser.ts:276:15 ❯ scenarios/org-slug-routing.test.ts:50:7 ❯ src/surfaces/browser.ts:288:13

[cloud] scenarios/connection-health-verdict.test.ts > Health checks (UI) · every surface showing a broken connection paints a verdict, and probes exactly once: e2e/scenarios/connection-health-verdict.test.ts#L445

TimeoutError: page.waitForResponse: Timeout 30000ms exceeded while waiting for event "response" ❯ scenarios/connection-health-verdict.test.ts:445:32 ❯ step src/surfaces/browser.ts:276:21 ❯ scenarios/connection-health-verdict.test.ts:444:9 ❯ src/surfaces/browser.ts:288:13

E2E (cloud 8of16)

Process completed with exit code 1.

[cloud] scenarios/connect-handoff.test.ts > Connect · the agentic handoff URL opens this deployment's add-account flow and the pasted key works: e2e/scenarios/connect-handoff.test.ts#L222

TimeoutError: locator.waitFor: Timeout 15000ms exceeded. Call log: - waiting for getByRole('heading', { name: /Add connection/ }) to be visible ❯ scenarios/connect-handoff.test.ts:222:69 ❯ step src/surfaces/browser.ts:276:21 ❯ scenarios/connect-handoff.test.ts:221:7 ❯ src/surfaces/browser.ts:288:13

[cloud] cloud/oauth-callback-unauthenticated.test.ts > OAuth callback · a signed-out callback uses login returnTo and resumes the connection: e2e/cloud/oauth-callback-unauthenticated.test.ts#L120

TimeoutError: locator.waitFor: Timeout 30000ms exceeded. Call log: - waiting for getByText('Sign in to manage your tools and integrations') to be visible ❯ cloud/oauth-callback-unauthenticated.test.ts:120:79 ❯ step src/surfaces/browser.ts:276:15 ❯ cloud/oauth-callback-unauthenticated.test.ts:117:7 ❯ src/surfaces/browser.ts:288:13

[cloud] cloud/admin-users-console.test.ts > Admin · the Users page shows every member and what each has connected, and refuses a plain member: e2e/cloud/admin-users-console.test.ts#L131

TimeoutError: page.waitForURL: Timeout 30000ms exceeded. =========================== logs =========================== waiting for navigation until "load" ============================================================ ❯ cloud/admin-users-console.test.ts:131:24 ❯ step src/surfaces/browser.ts:276:15 ❯ cloud/admin-users-console.test.ts:129:11 ❯ src/surfaces/browser.ts:288:13

E2E (cloud 11of16)

Process completed with exit code 1.

[cloud] scenarios/first-party-oauth.test.ts > First-party OAuth · unlisted Google still authorizes its bundle and refuses admin scopes: e2e/src/surfaces/browser.ts#L149

TimeoutError: locator.click: Timeout 30000ms exceeded. Call log: - waiting for getByRole('button', { name: /Connect/ }).first() ❯ clickToReveal src/surfaces/browser.ts:149:19 ❯ scenarios/first-party-oauth.test.ts:187:17 ❯ step src/surfaces/browser.ts:276:15 ❯ scenarios/first-party-oauth.test.ts:184:9 ❯ src/surfaces/browser.ts:288:13

[cloud] scenarios/artifact-loading-surface.test.ts > Artifacts · opening an artifact shows one loading surface, not three: e2e/scenarios/artifact-loading-surface.test.ts#L237

TimeoutError: locator.waitFor: Timeout 30000ms exceeded. Call log: - waiting for getByRole('link', { name: 'Open artifact Loading Surface 8a4d37ef' }) to be visible ❯ scenarios/artifact-loading-surface.test.ts:237:14 ❯ step src/surfaces/browser.ts:276:15 ❯ scenarios/artifact-loading-surface.test.ts:232:9 ❯ src/surfaces/browser.ts:288:13

[cloud] cloud/org-delete.test.ts > Organizations · an admin deletes the organization from settings: e2e/cloud/org-delete.test.ts#L27

TimeoutError: locator.fill: Timeout 30000ms exceeded. Call log: - waiting for getByPlaceholder('Northwind Labs') ❯ cloud/org-delete.test.ts:27:55 ❯ step src/surfaces/browser.ts:276:15 ❯ cloud/org-delete.test.ts:25:7 ❯ src/surfaces/browser.ts:288:13

[cloud] cloud/auth-routing-flow.test.ts > Auth routing · signed out → login → onboarding → dashboard, one browser session: e2e/cloud/auth-routing-flow.test.ts#L45

TimeoutError: locator.waitFor: Timeout 30000ms exceeded. Call log: - waiting for getByText('Sign in to manage your tools and integrations') to be visible ❯ cloud/auth-routing-flow.test.ts:45:79 ❯ step src/surfaces/browser.ts:276:15 ❯ cloud/auth-routing-flow.test.ts:43:7 ❯ src/surfaces/browser.ts:288:13

E2E (cloud 7of16)

Process completed with exit code 1.

[cloud] scenarios/oauth-client-handoff.test.ts > OAuth client · agent hands off, the human enters the secret in the browser, and the app connects: e2e/scenarios/oauth-client-handoff.test.ts#L410

TimeoutError: locator.waitFor: Timeout 20000ms exceeded. Call log: - waiting for getByRole('heading', { name: 'Register OAuth app' }) to be visible ❯ scenarios/oauth-client-handoff.test.ts:410:16 ❯ step src/surfaces/browser.ts:276:21 ❯ scenarios/oauth-client-handoff.test.ts:407:11 ❯ src/surfaces/browser.ts:288:13

[cloud] scenarios/integration-families.test.ts > Integrations · related MCP services collapse into their declared family: e2e/scenarios/integration-families.test.ts#L52

TimeoutError: locator.waitFor: Timeout 30000ms exceeded. Call log: - waiting for getByText('Integrations').first() to be visible ❯ scenarios/integration-families.test.ts:52:58 ❯ step src/surfaces/browser.ts:276:15 ❯ scenarios/integration-families.test.ts:50:11 ❯ src/surfaces/browser.ts:288:13

[cloud] cloud/oauth-callback-org-scope.test.ts > OAuth callback · state-scoped org survives a callback while the session cookie points elsewhere: e2e/cloud/oauth-callback-org-scope.test.ts#L65

TimeoutError: locator.waitFor: Timeout 30000ms exceeded. Call log: - waiting for getByRole('button', { name: /Org user-7b5d7583/ }) to be visible ❯ expectOrgShell cloud/oauth-callback-org-scope.test.ts:65:80 ❯ cloud/oauth-callback-org-scope.test.ts:217:9 ❯ step src/surfaces/browser.ts:276:15 ❯ cloud/oauth-callback-org-scope.test.ts:215:7 ❯ src/surfaces/browser.ts:288:13

[cloud] cloud/connection-modal-oauth-abandon.test.ts > Connections · closing the add-connection modal after abandoning OAuth lets you try again (not stuck on Connecting): e2e/cloud/connection-modal-oauth-abandon.test.ts#L103

TimeoutError: locator.click: Timeout 30000ms exceeded. Call log: - waiting for getByRole('button', { name: 'Add connection', exact: true }) ❯ cloud/connection-modal-oauth-abandon.test.ts:103:31 ❯ step src/surfaces/browser.ts:276:15 ❯ cloud/connection-modal-oauth-abandon.test.ts:101:9 ❯ src/surfaces/browser.ts:288:13

E2E (cloud 5of16)