@stigmer/server 3.15.3-dev.20260914121148 → 3.16.0

package/dist/runnerauth/runnerauth.js

@@ -1,34 +1,67 @@
 /**
  * Execution-scoped runner tokens — ports pkg/runnerauth/runnerauth.go
- * (oss#535), the lane that gates the ExecutionContext decrypt path.
+ * (oss#535): one HS256 token type, bound to ONE execution, serving two
+ * lanes that the server's posture decides between.
  *
  * WHY: since oss#535 the EC read RPCs redact is_secret values for every
  * caller — the same contract the cloud edition enforces — but the runner
  * still needs the real values to serve executions. Cloud distinguishes the
- * runner by the token_type claim of its platform-minted credential; OSS
- * ships no token VERIFIERS on its identity chassis (O2, 20260827.01 — the
- * verifier chain exists but resolves every request to the trusted-local
- * identity until O3 lands the first verifiers), so this module supplies
- * the minimal equivalent: the platform exchange mints a short-lived token
- * bound to ONE execution, and the EC handler decrypts only for a token
- * whose binding matches the requested ExecutionContext.
+ * runner by the token_type claim of its platform-minted credential; this
+ * module is the open-source equivalent: a token whose binding names the
+ * execution it serves, and the EC handler decrypts only for a token whose
+ * binding matches the requested ExecutionContext.
  *
- * A LANE DISCRIMINATOR, NOT A TRUST BOUNDARY (DD-004): in the trusted-local
- * posture anyone who can reach the server can mint. What the token buys is
- * the redaction-by-default read contract converging with cloud, on top of
- * oss#405's encryption at rest. It is deliberately NOT an IdentityVerifier
- * on the chassis: presenting it must never change the caller's identity
- * (the Q6 fall-through keeps the runner's Bearer-on-every-RPC behavior
- * byte-identical), only unlock this one decrypt lane.
+ * THE TWO LANES, BY POSTURE. Until 2026-09-16 this header stated the
+ * token was "deliberately NOT an IdentityVerifier on the chassis:
+ * presenting it must never change the caller's identity". That sentence
+ * described a server that did not enforce authorization: with the
+ * permissive Authorizer, the runner's operator key could do everything,
+ * so the token only needed to unlock one decrypt lane. Under the built-in
+ * authorization posture (an OIDC self-host; authorization/posture.ts) the
+ * server enforces the cloud's model, and a runner keyed with one
+ * operator's API key could report on nobody's run but the operator's.
+ * So under that posture the SAME token is also an identity
+ * (runner-subject-verifier.ts): it admits its bearer as the human whose
+ * run it is, the person the execution row's creator stamp names, for as
+ * long as that run lives. The runner acts as the run's human, which is
+ * what the cloud's managed sandbox has always done. Under trusted-local
+ * no verifier is composed and the token stays the decrypt-lane
+ * discriminator it was: anyone who can reach that server can mint one,
+ * and there is one person to be.
  *
  * Token shape (field names are wire contract — the runner's
  * token-claims.ts reads token_type by name):
  *   {"token_type":"execution_scoped","execution_id":"<id>","iat":…,"exp":…}
  *
- * Consumers arrive with their own domains: the platform exchange RPC
- * (mint) and the executioncontext resolve step (verify). This module lands
- * with the encryption sub-project because its signing key rides the shared
- * key ladder and its boot posture is a ratified cross-domain invariant
+ * Two mints, one shape:
+ *   - `mint(executionId, ttl)` — the CLOCKED token: the trusted-local
+ *     exchange and the connect and sandbox lanes, whose one unit of work
+ *     has a bounded lifetime. `exp` is present and enforced. The connect
+ *     lane's token binds no execution row but the connect's own
+ *     ExecutionContext (domain/mcpserver/connect-execution-id.ts), and
+ *     under the built-in posture it too is an identity: its bearer acts
+ *     as the person who asked for the connect, whom that row was created
+ *     by (bound-execution.ts, the `mcp-connect` binding).
+ *   - `mintRunCredential(executionId)` — the RUN credential: the two
+ *     execution engines put it on every dispatch's workflow input
+ *     (dispatch-credential.ts), and under the built-in posture the
+ *     exchange mints it too, for the run's own person only
+ *     (built-in-runner-credential-provider.ts). NO `exp`. A run waits on
+ *     humans with no timeout and outlives any clock; its credential's
+ *     validity is the ROW's — the execution is live, or ended within a
+ *     short grace (bound-execution.ts) — read by both lanes that accept
+ *     the token, because a plaintext token in Temporal history must not
+ *     decrypt a finished run's secrets, and the clock that prevented that
+ *     is gone.
+ * `verify` enforces `exp` when present and accepts its absence; it never
+ * decides liveness, which needs the store.
+ *
+ * Consumers arrive with their own domains, through the provider seam
+ * (runner-credential-provider.ts): the platform exchange RPC and the two
+ * engine clients (mint), the executioncontext resolve step and the
+ * runner-subject verifier (verify). This module lands with the
+ * encryption sub-project because its signing key rides the shared key
+ * ladder and its boot posture is a ratified cross-domain invariant
  * (fatal — see compose.ts).
  */
 import { createHmac, timingSafeEqual } from "node:crypto";
@@ -105,10 +138,10 @@ export class RunnerAuthService {
     /**
      * Go NewServiceFromEnv: key via the shared ladder (env var → key file →
      * auto-generate). Errors only on unusable explicit configuration; the
-     * composition root maps that to the BOOT-FATAL posture (the ratified D2
-     * asymmetry: a server that cannot mint runner tokens would hand every
-     * execution redaction markers instead of its secrets — the silent-junk
-     * failure the oss#405 fail-loud doctrine forbids).
+     * composition root maps that to the BOOT-FATAL posture: a server that
+     * cannot mint runner tokens would hand every execution redaction markers
+     * instead of its secrets — the silent-junk failure the encryption work
+     * (stigmer#405) made fail-loud.
      */
     static fromEnv(options = {}) {
         const key = getOrCreateNamedKey(RUNNER_TOKEN_KEY_ENV_VAR, RUNNER_TOKEN_KEY_FILE_NAME, options);
@@ -123,25 +156,43 @@ export class RunnerAuthService {
      * (DEFAULT_TTL_SECONDS when <= 0).
      */
     mint(executionId, ttlSeconds = 0) {
+        const ttl = ttlSeconds > 0 ? ttlSeconds : DEFAULT_TTL_SECONDS;
+        const nowSeconds = Math.floor(Date.now() / 1000);
+        return {
+            token: this.signClaims(executionId, {
+                iat: nowSeconds,
+                exp: nowSeconds + ttl,
+            }),
+            ttlSeconds: ttl,
+        };
+    }
+    /**
+     * The run credential: bound to `executionId`, with NO `exp` (see the
+     * header — a run outlives any clock; the row decides). The dispatch
+     * path mints it into the workflow input; only the string travels, since
+     * there is no lifetime to report.
+     */
+    mintRunCredential(executionId) {
+        return this.signClaims(executionId, {
+            iat: Math.floor(Date.now() / 1000),
+        });
+    }
+    signClaims(executionId, clock) {
         if (this.key === undefined) {
             throw new MintingDisabledError();
         }
         if (executionId === "") {
             throw new Error("execution id is required to mint a runner token");
         }
-        const ttl = ttlSeconds > 0 ? ttlSeconds : DEFAULT_TTL_SECONDS;
-        const nowSeconds = Math.floor(Date.now() / 1000);
         const claims = {
             token_type: TOKEN_TYPE_EXECUTION_SCOPED,
             execution_id: executionId,
-            iat: nowSeconds,
-            exp: nowSeconds + ttl,
-        };
-        const signingInput = JWT_HEADER + "." + Buffer.from(JSON.stringify(claims)).toString("base64url");
-        return {
-            token: signingInput + "." + this.sign(signingInput),
-            ttlSeconds: ttl,
+            ...clock,
         };
+        const signingInput = JWT_HEADER +
+            "." +
+            Buffer.from(JSON.stringify(claims)).toString("base64url");
+        return signingInput + "." + this.sign(signingInput);
     }
     /**
      * Go Verify: checks signature, algorithm, expiry, and token type, and
@@ -152,6 +203,8 @@ export class RunnerAuthService {
      * Check order mirrors Go: enabled → three parts → exact encoded-header
      * compare → constant-time HMAC → payload decode → claims. The expiry
      * boundary is `now >= exp` (a token in its expiring second is invalid).
+     * A token with no `exp` is a run credential and passes this check; a
+     * present `exp` that is not a number is a malformed clock and refuses.
      */
     verify(token) {
         if (this.key === undefined) {
@@ -183,9 +236,12 @@ export class RunnerAuthService {
         }
         if (claims.token_type !== TOKEN_TYPE_EXECUTION_SCOPED ||
             typeof claims.execution_id !== "string" ||
-            claims.execution_id === "" ||
-            typeof claims.exp !== "number" ||
-            Math.floor(Date.now() / 1000) >= claims.exp) {
+            claims.execution_id === "") {
+            throw new InvalidTokenError();
+        }
+        if (claims.exp !== undefined &&
+            (typeof claims.exp !== "number" ||
+                Math.floor(Date.now() / 1000) >= claims.exp)) {
             throw new InvalidTokenError();
         }
         return claims.execution_id;
@@ -200,4 +256,44 @@ export class RunnerAuthService {
             .digest("base64url");
     }
 }
+/**
+ * The `token_type` claim read off an UNVERIFIED token, or undefined for
+ * anything that is not a three-segment token with a JSON payload naming
+ * one. This is the runner-subject verifier's claim rule (the chassis
+ * contract: decide "is this ours?" before trusting anything), so it must
+ * never throw and must trust nothing it reads — `verify` runs afterwards
+ * on a claimed token. It is NOT a shortcut for reading claims a caller
+ * intends to act on.
+ */
+export function peekTokenType(token) {
+    const claims = decodePayload(token);
+    const type = claims?.["token_type"];
+    return typeof type === "string" && type !== "" ? type : undefined;
+}
+/**
+ * Whether a token this module has ALREADY verified carries a clock. The
+ * decrypt lane reads it to know which validity rule applies (a clocked
+ * token's clock was enforced by `verify`; a run credential's validity is
+ * the row's). Reading the payload of a verified token is a read of
+ * trusted state, the GuardMemoryCapture precedent; on anything `verify`
+ * has not accepted the answer is meaningless, so callers verify first.
+ */
+export function isClockedToken(verifiedToken) {
+    return typeof decodePayload(verifiedToken)?.["exp"] === "number";
+}
+function decodePayload(token) {
+    const segments = token.split(".");
+    if (segments.length !== 3) {
+        return undefined;
+    }
+    try {
+        const decoded = JSON.parse(Buffer.from(segments[1] ?? "", "base64url").toString("utf8"));
+        return typeof decoded === "object" && decoded !== null
+            ? decoded
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 //# sourceMappingURL=runnerauth.js.map

package/dist/runnerauth/runnerauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"runnerauth.js","sourceRoot":"","sources":["../../src/runnerauth/runnerauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAE9D,gEAAgE;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,iEAAiE;AACjE,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CACpE,WAAW,CACZ,CAAC;AAgBF;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACX,GAAG,CAAqB;IAEzC,YAAoB,GAAuB;QACzC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAuB;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QAC3C,MAAM,GAAG,GAAG,mBAAmB,CAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,OAAO,CACR,CAAC;QACF,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,6DAA6D;IAC7D,SAAS;QACP,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,WAAmB,EAAE,aAAqB,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAE9D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAgB;YAC1B,UAAU,EAAE,2BAA2B;YACvC,YAAY,EAAE,WAAW;YACzB,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,UAAU,GAAG,GAAG;SACtB,CAAC;QACF,MAAM,YAAY,GAChB,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/E,OAAO;YACL,KAAK,EAAE,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YACnD,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAa;QAClB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;QACjD,2DAA2D;QAC3D,qEAAqE;QACrE,iEAAiE;QACjE,IACE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/C,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IACE,MAAM,CAAC,UAAU,KAAK,2BAA2B;YACjD,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,MAAM,CAAC,YAAY,KAAK,EAAE;YAC1B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,EAC3C,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,8DAA8D;IACtD,IAAI,CAAC,YAAoB;QAC/B,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;aAClC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"runnerauth.js","sourceRoot":"","sources":["../../src/runnerauth/runnerauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAE9D,gEAAgE;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,iEAAiE;AACjE,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CACpE,WAAW,CACZ,CAAC;AAoBF;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACX,GAAG,CAAqB;IAEzC,YAAoB,GAAuB;QACzC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAuB;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QAC3C,MAAM,GAAG,GAAG,mBAAmB,CAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,OAAO,CACR,CAAC;QACF,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,6DAA6D;IAC7D,SAAS;QACP,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,WAAmB,EAAE,aAAqB,CAAC;QAC9C,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACjD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;gBAClC,GAAG,EAAE,UAAU;gBACf,GAAG,EAAE,UAAU,GAAG,GAAG;aACtB,CAAC;YACF,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,WAAmB;QACnC,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;YAClC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAChB,WAAmB,EACnB,KAAuC;QAEvC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,MAAM,GAAgB;YAC1B,UAAU,EAAE,2BAA2B;YACvC,YAAY,EAAE,WAAW;YACzB,GAAG,KAAK;SACT,CAAC;QACF,MAAM,YAAY,GAChB,UAAU;YACV,GAAG;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5D,OAAO,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAa;QAClB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;QACjD,2DAA2D;QAC3D,qEAAqE;QACrE,iEAAiE;QACjE,IACE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/C,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IACE,MAAM,CAAC,UAAU,KAAK,2BAA2B;YACjD,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,MAAM,CAAC,YAAY,KAAK,EAAE,EAC1B,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IACE,MAAM,CAAC,GAAG,KAAK,SAAS;YACxB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,EAC9C,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,8DAA8D;IACtD,IAAI,CAAC,YAAoB;QAC/B,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;aAClC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;IACpC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,aAAqB;IAClD,OAAO,OAAO,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC7D,CAAC;QACF,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YACpD,CAAC,CAAE,OAAmC;YACtC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/temporal/agentexecution/engine-client.d.ts

@@ -19,18 +19,30 @@
  * engine per client instance — a new engine object per RPC would be
  * garbage for no behavior.
  *
+ * The run credential rides the input (2026-09-16): every dispatch — a
+ * fresh start and a recovery alike, both through startInvokeWorkflow —
+ * asks the composed credential provider for the run's credential
+ * (runnerauth/dispatch-credential.ts) and carries it as
+ * `execution_context_token`, the connect lane's shape. Minting here, in
+ * the one place that builds the input, is what keeps the create step and
+ * the recover path ignorant of credentials; a provider without the
+ * capability (an edition credentialed another way) leaves the key off.
+ *
  * Proven by the agentexecution suites on local-execution.
  */
 import type { Client } from "@temporalio/client";
 import type { Logger } from "../../boot/logger.js";
 import { type ConnectedExecutionEngine, type ExecutionEngineStateProvider, type StartInvokeWorkflowInput } from "../../domain/agentexecution/engine.js";
 import type { AgentExecutionTemporalConfig } from "../../domain/agentexecution/temporal/config.js";
+import type { RunCredentialMint } from "../../runnerauth/dispatch-credential.js";
 import type { Store } from "../../store/interface.js";
 import type { TemporalManager } from "../manager.js";
 export interface TemporalExecutionEngineDeps {
     readonly client: Client;
     readonly config: AgentExecutionTemporalConfig;
     readonly store: Store;
+    /** The composed credential provider — the dispatch reads its run-credential capability (module header). */
+    readonly runnerCredentials: RunCredentialMint;
     readonly logger: Logger;
 }
 export declare class TemporalExecutionEngine implements ConnectedExecutionEngine {
@@ -48,6 +60,7 @@ export interface EngineStateProviderDeps {
     readonly manager: TemporalManager;
     readonly config: AgentExecutionTemporalConfig;
     readonly store: Store;
+    readonly runnerCredentials: RunCredentialMint;
     readonly logger: Logger;
 }
 /**

package/dist/temporal/agentexecution/engine-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-client.d.ts","sourceRoot":"","sources":["../../../src/temporal/agentexecution/engine-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAIL,KAAK,wBAAwB,EAE7B,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC9B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AACnG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAYrD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,uBAAwB,YAAW,wBAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,2BAA2B;IAExD,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IA6DnE,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/D,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlD,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAW7D,MAAM;CAcrB;AAcD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,uBAAuB,GAC5B,4BAA4B,CAuB9B"}
+{"version":3,"file":"engine-client.d.ts","sourceRoot":"","sources":["../../../src/temporal/agentexecution/engine-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAIL,KAAK,wBAAwB,EAE7B,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC9B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAEnG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAYrD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,2GAA2G;IAC3G,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,uBAAwB,YAAW,wBAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,2BAA2B;IAExD,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuEnE,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/D,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlD,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAW7D,MAAM;CAcrB;AAcD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,uBAAuB,GAC5B,4BAA4B,CAwB9B"}

package/dist/temporal/agentexecution/engine-client.js

@@ -1,5 +1,6 @@
 import { WorkflowNotFoundError } from "@temporalio/common";
 import { ENGINE_DISCONNECTED, EngineDispatchError, EngineWorkflowNotFoundError, } from "../../domain/agentexecution/engine.js";
+import { runCredentialForDispatch } from "../../runnerauth/dispatch-credential.js";
 import { resolveActivityTaskQueue } from "./dispatch.js";
 import { INVOKE_AGENT_EXECUTION_WORKFLOW_NAME, invokeWorkflowIdFor, MEMO_ACTIVITY_TASK_QUEUE, SIGNAL_APPROVAL_GATE_RESOLVED, SIGNAL_PAUSE, SIGNAL_RESUME, } from "./names.js";
 export class TemporalExecutionEngine {
@@ -8,7 +9,7 @@ export class TemporalExecutionEngine {
         this.deps = deps;
     }
     async startInvokeWorkflow(input) {
-        const { client, config, store, logger } = this.deps;
+        const { client, config, store, runnerCredentials, logger } = this.deps;
         let dispatch;
         try {
             dispatch = await resolveActivityTaskQueue(store, input.sessionId, config, input.activityTaskQueueOverride, logger);
@@ -19,6 +20,7 @@ export class TemporalExecutionEngine {
             throw new EngineDispatchError(error instanceof Error ? error.message : String(error));
         }
         const workflowId = invokeWorkflowIdFor(input.executionId);
+        const runCredential = runCredentialForDispatch(runnerCredentials, input.executionId, logger);
         // Slim input with Go's omitempty shape (workflow-input.ts): zero-value
         // fields are omitted so TS- and Go-authored histories carry the same
         // keys. callback_token is base64 — Go's []byte JSON rendering.
@@ -27,7 +29,9 @@ export class TemporalExecutionEngine {
             session_id: input.sessionId,
             agent_id: input.agentId,
             ...(input.callbackToken.length > 0
-                ? { callback_token: Buffer.from(input.callbackToken).toString("base64") }
+                ? {
+                    callback_token: Buffer.from(input.callbackToken).toString("base64"),
+                }
                 : {}),
             ...(input.autoApproveAll ? { auto_approve_all: true } : {}),
             ...(input.parentWorkflowId !== ""
@@ -37,6 +41,9 @@ export class TemporalExecutionEngine {
             ...(dispatch.executionTarget !== 0
                 ? { execution_target: dispatch.executionTarget }
                 : {}),
+            ...(runCredential !== ""
+                ? { execution_context_token: runCredential }
+                : {}),
         };
         // NOTE deliberately NO workflowRunTimeout: HITL approval can block for
         // minutes, hours, or days — a finite timeout would contradict the
@@ -133,6 +140,7 @@ export function newExecutionEngineStateProvider(deps) {
                         client,
                         config: deps.config,
                         store: deps.store,
+                        runnerCredentials: deps.runnerCredentials,
                         logger: deps.logger,
                     }),
                 },

package/dist/temporal/agentexecution/engine-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine-client.js","sourceRoot":"","sources":["../../../src/temporal/agentexecution/engine-client.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,GAK5B,MAAM,uCAAuC,CAAC;AAI/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EACL,oCAAoC,EACpC,mBAAmB,EACnB,wBAAwB,EACxB,6BAA6B,EAC7B,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AAUpB,MAAM,OAAO,uBAAuB;IACL;IAA7B,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAElE,KAAK,CAAC,mBAAmB,CAAC,KAA+B;QACvD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAEpD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,wBAAwB,CACvC,KAAK,EACL,KAAK,CAAC,SAAS,EACf,MAAM,EACN,KAAK,CAAC,yBAAyB,EAC/B,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,IAAI,mBAAmB,CAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE1D,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,aAAa,GAAsC;YACvD,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACzE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,EAAE;gBAC/B,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,CAAC;gBAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oCAAoC,EAAE;YAChE,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,YAAY;YAC9B,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE;YACxD,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;YAClD,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,cAAc,EAAE,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,WAAmB;QAClD,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;YACvE,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,MAAc;QACnD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,MAAc;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,WAAmB,EACnB,UAAkB,EAClB,GAAG,IAAe;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAc,EAAE,WAAmB;IACtD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,OAAO,IAAI,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAA6B;IAE7B,IAAI,IAAiE,CAAC;IACtE,OAAO,GAAG,EAAE;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjD,IAAI,GAAG;gBACL,MAAM;gBACN,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,IAAI,uBAAuB,CAAC;wBAClC,MAAM;wBACN,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC;iBACH;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"engine-client.js","sourceRoot":"","sources":["../../../src/temporal/agentexecution/engine-client.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,GAK5B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAInF,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EACL,oCAAoC,EACpC,mBAAmB,EACnB,wBAAwB,EACxB,6BAA6B,EAC7B,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AAYpB,MAAM,OAAO,uBAAuB;IACL;IAA7B,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAElE,KAAK,CAAC,mBAAmB,CAAC,KAA+B;QACvD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAEvE,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,wBAAwB,CACvC,KAAK,EACL,KAAK,CAAC,SAAS,EACf,MAAM,EACN,KAAK,CAAC,yBAAyB,EAC/B,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,IAAI,mBAAmB,CAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,wBAAwB,CAC5C,iBAAiB,EACjB,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CAAC;QAEF,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,aAAa,GAAsC;YACvD,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC;oBACE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBACpE;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,EAAE;gBAC/B,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,CAAC;gBAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,aAAa,KAAK,EAAE;gBACtB,CAAC,CAAC,EAAE,uBAAuB,EAAE,aAAa,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oCAAoC,EAAE;YAChE,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,YAAY;YAC9B,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE;YACxD,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;YAClD,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,cAAc,EAAE,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,WAAmB;QAClD,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;YACvE,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,MAAc;QACnD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,MAAc;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,WAAmB,EACnB,UAAkB,EAClB,GAAG,IAAe;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAc,EAAE,WAAmB;IACtD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,OAAO,IAAI,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAA6B;IAE7B,IAAI,IAAiE,CAAC;IACtE,OAAO,GAAG,EAAE;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjD,IAAI,GAAG;gBACL,MAAM;gBACN,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,IAAI,uBAAuB,CAAC;wBAClC,MAAM;wBACN,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;wBACzC,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC;iBACH;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}

package/dist/temporal/agentexecution/workflow-input.d.ts

@@ -25,6 +25,19 @@ export interface InvokeAgentExecutionWorkflowInput {
     readonly auto_approve_all?: boolean;
     readonly parent_workflow_id?: string;
     readonly invoker_identity_account_id?: string;
+    /**
+     * The run credential (runnerauth: a clockless execution-scoped token
+     * bound to this execution), minted by the engine client at dispatch
+     * when the composed credential provider defines `mintRunCredential`
+     * and omitted otherwise. The connect lane's key for the same token
+     * type (domain/mcpserver/engine.ts). The workflow hands it to the
+     * runner's activities, which present it on the run's own RPCs: under
+     * the built-in authorization posture it admits the runner as the
+     * human whose run this is, for as long as the run lives. Like the
+     * connect lane's, it sits in Temporal history in the clear — history
+     * is operator-only, and the operator holds the signing key already.
+     */
+    readonly execution_context_token?: string;
     /**
      * Session harness as the proto enum numeric value (0=UNSPECIFIED treated
      * as NATIVE, 1=NATIVE, 2=CURSOR) — selects ExecuteDeepAgent vs

package/dist/temporal/agentexecution/workflow-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-input.d.ts","sourceRoot":"","sources":["../../../src/temporal/agentexecution/workflow-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC"}
+{"version":3,"file":"workflow-input.d.ts","sourceRoot":"","sources":["../../../src/temporal/agentexecution/workflow-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAC9C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC"}

package/dist/temporal/agentexecution/workflows/invoke-agent-execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke-agent-execution.d.ts","sourceRoot":"","sources":["../../../../src/temporal/agentexecution/workflows/invoke-agent-execution.ts"],"names":[],"mappings":"AA+GA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAmL9E,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,IAAI,CAAC,CA8Kf"}
+{"version":3,"file":"invoke-agent-execution.d.ts","sourceRoot":"","sources":["../../../../src/temporal/agentexecution/workflows/invoke-agent-execution.ts"],"names":[],"mappings":"AA+GA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAoO9E,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,IAAI,CAAC,CA8Kf"}

package/dist/temporal/agentexecution/workflows/invoke-agent-execution.js

@@ -91,6 +91,22 @@ function recoveryBackoffMs(cycle) {
 const pauseSignal = defineSignal(SIGNAL_PAUSE);
 const resumeSignal = defineSignal(SIGNAL_RESUME);
 const approvalGateResolvedSignal = defineSignal(SIGNAL_APPROVAL_GATE_RESOLVED);
+/**
+ * The ONE builder of an Execute* input for both harness flows and both
+ * invocations (first turn and every HITL re-invocation): the run's
+ * coordinates from the workflow input, the harness thread and the turn
+ * from the caller.
+ */
+function executeActivityInput(input, threadId, turnSeq) {
+    const runCredential = input.execution_context_token ?? "";
+    return {
+        execution_id: input.execution_id,
+        thread_id: threadId,
+        invoker_identity_account_id: input.invoker_identity_account_id ?? "",
+        turn_seq: turnSeq,
+        ...(runCredential !== "" ? { execution_context_token: runCredential } : {}),
+    };
+}
 function newEnsureThreadProxy(taskQueue) {
     return proxyActivities({
         taskQueue,
@@ -337,7 +353,6 @@ function installSignalBuffers() {
 async function executeDeepAgentFlow(input, activityTaskQueue, signals, isWorkflowCancelled) {
     const executionId = input.execution_id;
     const sessionId = input.session_id;
-    const invoker = input.invoker_identity_account_id ?? "";
     log.info("Step 1: Ensuring thread", { sessionId, agentId: input.agent_id });
     const ensureThread = newEnsureThreadProxy(activityTaskQueue);
     let threadId;
@@ -348,7 +363,7 @@ async function executeDeepAgentFlow(input, activityTaskQueue, signals, isWorkflo
         throw wrapActivityError("EnsureThread", error);
     }
     log.info("Thread ensured", { threadId });
-    fireGenerateSessionSubject(activityTaskQueue, executionId);
+    fireGenerateSessionSubject(activityTaskQueue, input);
     log.info("Step 2: Executing deep agent", { executionId, threadId });
     const agentProxy = newExecuteAgentProxy(activityTaskQueue);
     return runWithPauseAndRecovery({
@@ -360,19 +375,9 @@ async function executeDeepAgentFlow(input, activityTaskQueue, signals, isWorkflo
             executionId,
             signals,
             parentWorkflowId: input.parent_workflow_id ?? "",
-            firstInvoke: () => agentProxy[EXECUTE_DEEP_AGENT_ACTIVITY_NAME]({
-                execution_id: executionId,
-                thread_id: threadId,
-                invoker_identity_account_id: invoker,
-                turn_seq: 0,
-            }),
+            firstInvoke: () => agentProxy[EXECUTE_DEEP_AGENT_ACTIVITY_NAME](executeActivityInput(input, threadId, 0)),
             // The LangGraph thread id is stable — re-invocations reuse it.
-            reinvoke: (turnSeq) => agentProxy[EXECUTE_DEEP_AGENT_ACTIVITY_NAME]({
-                execution_id: executionId,
-                thread_id: threadId,
-                invoker_identity_account_id: invoker,
-                turn_seq: turnSeq,
-            }),
+            reinvoke: (turnSeq) => agentProxy[EXECUTE_DEEP_AGENT_ACTIVITY_NAME](executeActivityInput(input, threadId, turnSeq)),
             nullResultMessage: "activity returned null status - this should never happen",
             nullResultAfterApprovalMessage: "activity returned null status after approval - this should never happen",
         }),
@@ -389,8 +394,7 @@ async function executeDeepAgentFlow(input, activityTaskQueue, signals, isWorkflo
 async function executeCursorFlow(input, activityTaskQueue, signals, isWorkflowCancelled) {
     const executionId = input.execution_id;
     const sessionId = input.session_id;
-    const invoker = input.invoker_identity_account_id ?? "";
-    fireGenerateSessionSubject(activityTaskQueue, executionId);
+    fireGenerateSessionSubject(activityTaskQueue, input);
     log.info("Executing Cursor agent", { executionId, sessionId });
     const agentProxy = newExecuteAgentProxy(activityTaskQueue);
     return runWithPauseAndRecovery({
@@ -411,12 +415,7 @@ async function executeCursorFlow(input, activityTaskQueue, signals, isWorkflowCa
                     log.warn("Failed to read session harness_state_id (non-fatal, using empty)", { sessionId, error: errorMessage(error) });
                     harnessStateId = "";
                 }
-                return agentProxy[EXECUTE_CURSOR_ACTIVITY_NAME]({
-                    execution_id: executionId,
-                    thread_id: harnessStateId,
-                    invoker_identity_account_id: invoker,
-                    turn_seq: 0,
-                });
+                return agentProxy[EXECUTE_CURSOR_ACTIVITY_NAME](executeActivityInput(input, harnessStateId, 0));
             },
             reinvoke: async (turnSeq) => {
                 let harnessStateId;
@@ -431,24 +430,29 @@ async function executeCursorFlow(input, activityTaskQueue, signals, isWorkflowCa
                     cycle: turnSeq,
                     harnessStateId,
                 });
-                return agentProxy[EXECUTE_CURSOR_ACTIVITY_NAME]({
-                    execution_id: executionId,
-                    thread_id: harnessStateId,
-                    invoker_identity_account_id: invoker,
-                    turn_seq: turnSeq,
-                });
+                return agentProxy[EXECUTE_CURSOR_ACTIVITY_NAME](executeActivityInput(input, harnessStateId, turnSeq));
             },
             nullResultMessage: "cursor activity returned null status - this should never happen",
             nullResultAfterApprovalMessage: "cursor activity returned null status after approval - this should never happen",
         }),
     });
 }
-/** GenerateSessionSubject: fire-and-forget, non-blocking (issue #665). */
-function fireGenerateSessionSubject(activityTaskQueue, executionId) {
+/**
+ * GenerateSessionSubject: fire-and-forget, non-blocking (issue #665). The
+ * argument shape follows the run credential's presence — see
+ * GenerateSessionSubjectInput for why the credential-less dispatch keeps
+ * the positional string.
+ */
+function fireGenerateSessionSubject(activityTaskQueue, input) {
+    const executionId = input.execution_id;
+    const runCredential = input.execution_context_token ?? "";
+    const argument = runCredential !== ""
+        ? { execution_id: executionId, execution_context_token: runCredential }
+        : executionId;
     const subjectProxy = newSubjectProxy(activityTaskQueue);
     void (async () => {
         try {
-            await subjectProxy[GENERATE_SESSION_SUBJECT_ACTIVITY_NAME](executionId);
+            await subjectProxy[GENERATE_SESSION_SUBJECT_ACTIVITY_NAME](argument);
         }
         catch (error) {
             log.warn("Session subject generation failed (non-critical)", {