Add public admin users API and org API keys

[RhysSullivan]

Stacked on #1465. Public admin surface on the platform view, mounted like the Account API with per-host auth: GET /admin/users, GET /admin/users/with-connections, GET /admin/users/:externalId/connections — credential fields excluded by projection (direct assertion, mutation-tested). Gated by org-scoped API key (cloud, minted via POST /api/account/org-api-keys, admin-only) or admin membership (cloud admin role / self-host Better Auth owner-admin). Platform executors skip touchSubject so org keys never appear as users. Known gap: the WorkOS emulator lacks org-key minting, so e2e drives the admin-session path; org keys covered at unit level (upstream emulate change filed as follow-up).

Stack

1. Add tenant-scoped subject table to core schema #1463
2. Populate subject table at request seam and connection create #1464
3. Add tenant-reach platform view with internal admin reads #1465
4. Add /connect/:integrationSlug deep links #1466
5. Add public admin users API and org API keys #1467 👈 current
6. Add admin Users console page #1469

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	2d8a15b	Commit Preview URL Branch Preview URL	Jul 28 2026, 08:42 AM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
🔵 In progress View logs	executor-cloud	9a5776a	Jul 29 2026, 02:59 AM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1467

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1467

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1467

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1467

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1467

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1467

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1467

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1467

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1467

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1467

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1467

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1467

executor

npm i https://pkg.pr.new/executor@1467

commit: b115ba0

[RhysSullivan]

Consolidated into #1469.