Unlist the built-in Google OAuth app from connect pickers

[RhysSullivan]

Stops offering the Executor-owned Google OAuth app for new connections, without disturbing the connections already using it.

How

FirstPartyOAuthClientConfig gains an unlisted flag, and cloud sets it on the Google entry. listClients withholds unlisted apps — that is the only behavioural change, and it is the right single chokepoint, because listing is what offers an app for a new connection:

• the connect picker reads listClients, so the "Built-in / no setup needed" Google row disappears; Google now needs a BYO app
• the agent-facing oauth.clients.list tool stops advertising the slug too

Existing connections are untouched

Start, completion, refresh and reconnect all resolve the app by slug through loadClient/the host config map, never through the list. The config entry deliberately stays declared: dropping it, or unsetting the env vars, is what would strand existing connections on a client the host can no longer resolve. Reconnect replays the connection's stored oauthClient verbatim, so it keeps working from the UI as well.

Testing

New e2e-shaped scenario in oauth-first-party.test.ts: an unlisted app is absent from listClients, yet still starts, completes, executes, and refreshes after a forced token expiry. Full packages/core/sdk suite (699) and the React picker suite green.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	76296e6	Commit Preview URL Branch Preview URL	Aug 28 2026, 01:48 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	76296e6	Aug 28 2026, 01:48 AM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1795

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1795

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1795

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1795

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1795

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1795

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1795

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1795

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1795

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1795

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1795

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1795

executor

npm i https://pkg.pr.new/executor@1795

commit: 76296e6