@stigmer/server 3.15.3-dev.20260916211208 → 3.16.1-dev.20260917224426

package/dist/domain/executioncontext/resolve-values-for-caller.d.ts

@@ -14,21 +14,37 @@
  * distinguishes itself with an execution-scoped token minted by
  * getRunnerScopedToken and presented as a Bearer authorization header
  * (the same header shape a cloud runner uses for its sandbox credential).
- * Decrypt requires the FULL binding: a valid, unexpired token whose
- * execution_id claim equals this EC's spec.execution_id. Everything else
- * — no header, malformed or expired token, or a token minted for a
- * different execution — falls closed to the same redaction
- * get/getByReference apply, as a SUCCESSFUL response, not an error.
+ * Decrypt requires the FULL binding: a valid token whose execution_id
+ * claim equals this EC's spec.execution_id, and — for a RUN credential,
+ * the no-`exp` token the dispatch path hands the runner — a bound
+ * execution that is still live (runnerauth/bound-execution.ts: not
+ * terminal, or ended within the grace). Everything else — no header, a
+ * malformed or expired token, a token minted for a different execution,
+ * a run credential whose run is over — falls closed to the same
+ * redaction get/getByReference apply, as a SUCCESSFUL response, not an
+ * error.
  *
- * Token verification lives HERE, in the domain, not on the identity
- * chassis (O2, 20260827.01): the runner token is a lane discriminator,
- * not a caller identity — the chassis deliberately lets it fall through
- * to the trusted-local identity (ruling Q6), and this is the one RPC
- * that reads the raw header — exactly the consumer the runnerauth module
- * header reserves ("the executioncontext resolve step"). The
- * redaction-as-success contract is pinned by the conformance suites and
- * must survive every future verifier: a runner token is NEVER an
- * authentication credential.
+ * The decrypt decision lives HERE, in the domain, whatever the identity
+ * chassis makes of the token. Under trusted-local no verifier claims it
+ * and this is the one RPC that reads the raw header (the consumer the
+ * runnerauth module header reserves, "the executioncontext resolve
+ * step"). Under the built-in authorization posture the runner-subject
+ * verifier ALSO admits the same token as the run's human at position 1
+ * (runnerauth.ts header, 2026-09-16) — that decides WHO is calling and
+ * whether they may read the row; whether the row's secrets are decrypted
+ * for them is still this lane's binding check, so a person who can view
+ * an execution's context never receives its plaintext by holding a
+ * credential for a different one. The redaction-as-success contract is
+ * pinned by the conformance suites and holds on every arm.
+ *
+ * Why liveness is read only for a no-`exp` token: a clocked token's
+ * validity was decided by `verify` (its clock) and its binding, and the
+ * ExecutionContext it opens need not name an execution row at all — the
+ * connect lane's token opens an EC for an MCP discovery, and the rosters
+ * pin a clocked token decrypting an EC whose execution id names no row.
+ * A run credential has no clock; the row is the only thing that can end
+ * it, and a plaintext token in Temporal history must not decrypt a
+ * finished run's secrets for good.
  *
  * # Decrypt error doctrine (the oss#405 runtime-resolution doctrine,
  * # arms per the two-armed taxonomy in encryption/errors.ts)
@@ -51,11 +67,14 @@ import type { HandlerContext } from "@connectrpc/connect";
 import type { ExecutionContext } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/api_pb";
 import type { Logger } from "../../boot/logger.js";
 import type { SecretService } from "../../encryption/encryption.js";
+import type { BoundExecutionStore } from "../../runnerauth/bound-execution.js";
 import type { RunnerCredentialProvider } from "../../runnerauth/runner-credential-provider.js";
 export interface ResolveValuesDeps {
     readonly logger: Logger;
     readonly secretService: SecretService;
     readonly runnerAuthService: RunnerCredentialProvider;
+    /** Where the bound execution lives — read for a run credential's liveness only. */
+    readonly store: BoundExecutionStore;
 }
 /**
  * Applies the credential-dispatched transform in place: decrypt for a

package/dist/domain/executioncontext/resolve-values-for-caller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-values-for-caller.d.ts","sourceRoot":"","sources":["../../../src/domain/executioncontext/resolve-values-for-caller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+DAA+D,CAAC;AAEtG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAGpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAK/F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;CACtD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,gBAAgB,GACnB,OAAO,CAAC,IAAI,CAAC,CAMf"}
+{"version":3,"file":"resolve-values-for-caller.d.ts","sourceRoot":"","sources":["../../../src/domain/executioncontext/resolve-values-for-caller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgEG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+DAA+D,CAAC;AAEtG,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAOpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAQ/F,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;IACrD,mFAAmF;IACnF,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,iBAAiB,EACvB,GAAG,EAAE,cAAc,EACnB,EAAE,EAAE,gBAAgB,GACnB,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/domain/executioncontext/resolve-values-for-caller.js

@@ -1,7 +1,8 @@
 import { EncryptionUnavailableError } from "../../encryption/encryption.js";
 import { internalError } from "../../pipeline/errors.js";
 import { parseBearerToken } from "../../pipeline/interceptors/auth.js";
-import { TOKEN_TYPE_EXECUTION_SCOPED } from "../../runnerauth/runnerauth.js";
+import { bindsARun, loadBoundExecution, } from "../../runnerauth/bound-execution.js";
+import { isClockedToken, TOKEN_TYPE_EXECUTION_SCOPED, } from "../../runnerauth/runnerauth.js";
 import { encryptionKeyMissingMessage } from "./constants.js";
 import { redactExecutionContextSecrets } from "./redact.js";
 /**
@@ -45,12 +46,17 @@ async function runnerMayDecrypt(deps, ctx, ec) {
             return false;
         }
     }
-    const executionId = verifyRunnerToken(deps, ctx, ec);
-    if (executionId !== undefined) {
-        deps.logger.debug("Scope-bound runner token presented - decrypting execution context secrets", { executionId });
-        return true;
+    const token = bearerToken(ctx);
+    const executionId = verifyRunnerToken(deps, token, ec);
+    if (executionId === undefined) {
+        return false;
+    }
+    if (!isClockedToken(token) && !(await runIsLive(deps, executionId))) {
+        deps.logger.debug("Run credential presented for a run that is over - redacting execution context secrets", { executionId });
+        return false;
     }
-    return false;
+    deps.logger.debug("Scope-bound runner token presented - decrypting execution context secrets", { executionId });
+    return true;
 }
 /**
  * Go verifyRunnerToken: the execution id the token is bound to when the
@@ -64,8 +70,7 @@ async function runnerMayDecrypt(deps, ctx, ec) {
  * accepts exactly the execution_scoped credential lane — the caller-side
  * trust statement the provider contract requires.
  */
-function verifyRunnerToken(deps, ctx, ec) {
-    const token = bearerToken(ctx);
+function verifyRunnerToken(deps, token, ec) {
     if (token === "") {
         return undefined;
     }
@@ -86,6 +91,25 @@ function verifyRunnerToken(deps, ctx, ec) {
     }
     return tokenExecutionId;
 }
+/**
+ * A run credential's liveness: the bound execution exists, IS a run
+ * (`bindsARun` — a clockless token bound to a connect is a shape no mint
+ * produces, refused here and by the verifier through the one predicate)
+ * and is live (runnerauth/bound-execution.ts). A missing row is "not
+ * live" — the credential opens nothing. A store fault is an
+ * infrastructure fault, sanitized here as every direct handler does (the
+ * store-fault doctrine): an outage must not read as a redaction decision,
+ * and the same store just served the row this read is for.
+ */
+async function runIsLive(deps, executionId) {
+    try {
+        const execution = await loadBoundExecution(deps.store, executionId);
+        return (execution !== undefined && bindsARun(execution.kind) && execution.live);
+    }
+    catch (error) {
+        throw internalError(error, "failed to load the run credential's execution");
+    }
+}
 /**
  * The Bearer credential from the request's authorization header; empty
  * when absent or differently shaped. The parsing shape (Go's exact

package/dist/domain/executioncontext/resolve-values-for-caller.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-values-for-caller.js","sourceRoot":"","sources":["../../../src/domain/executioncontext/resolve-values-for-caller.ts"],"names":[],"mappings":"AAsDA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAE5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAEvE,OAAO,EAAE,2BAA2B,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAQ5D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAuB,EACvB,GAAmB,EACnB,EAAoB;IAEpB,IAAI,MAAM,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1C,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,6BAA6B,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,gBAAgB,CAC7B,IAAuB,EACvB,GAAmB,EACnB,EAAoB;IAEpB,MAAM,aAAa,GACjB,IAAI,CAAC,iBAAiB,CAAC,6BAA6B,EAAE,IAAI,CACxD,IAAI,CAAC,iBAAiB,CACvB,CAAC;IACJ,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,EAChE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2EAA2E,EAC3E,EAAE,WAAW,EAAE,CAChB,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CACxB,IAAuB,EACvB,GAAmB,EACnB,EAAoB;IAEpB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,gBAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAC9C,2BAA2B,EAC3B,KAAK,CACN,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,kFAAkF,CACnF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+EAA+E,EAC/E;YACE,gBAAgB;YAChB,WAAW,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;SACxC,CACF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAmB;IACtC,OAAO,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAuB,EACvB,EAAoB;IAEpB,MAAM,WAAW,GAAG,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;IACjC,mEAAmE;IACnE,iEAAiE;IACjE,yBAAyB;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBAChD,MAAM,aAAa,CACjB,KAAK,EACL,2BAA2B,CAAC,WAAW,EAAE,GAAG,CAAC,CAC9C,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0FAA0F,EAC1F;gBACE,GAAG;gBACH,WAAW;gBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CACF,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"resolve-values-for-caller.js","sourceRoot":"","sources":["../../../src/domain/executioncontext/resolve-values-for-caller.ts"],"names":[],"mappings":"AAsEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAE5E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AACvE,OAAO,EACL,SAAS,EACT,kBAAkB,GACnB,MAAM,qCAAqC,CAAC;AAG7C,OAAO,EACL,cAAc,EACd,2BAA2B,GAC5B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAU5D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAuB,EACvB,GAAmB,EACnB,EAAoB;IAEpB,IAAI,MAAM,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1C,MAAM,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACpC,OAAO;IACT,CAAC;IACD,6BAA6B,CAAC,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,gBAAgB,CAC7B,IAAuB,EACvB,GAAmB,EACnB,EAAoB;IAEpB,MAAM,aAAa,GACjB,IAAI,CAAC,iBAAiB,CAAC,6BAA6B,EAAE,IAAI,CACxD,IAAI,CAAC,iBAAiB,CACvB,CAAC;IACJ,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gEAAgE,EAChE,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,uFAAuF,EACvF,EAAE,WAAW,EAAE,CAChB,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,2EAA2E,EAC3E,EAAE,WAAW,EAAE,CAChB,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,iBAAiB,CACxB,IAAuB,EACvB,KAAa,EACb,EAAoB;IAEpB,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,gBAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,gBAAgB,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAC9C,2BAA2B,EAC3B,KAAK,CACN,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,kFAAkF,CACnF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,gBAAgB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,+EAA+E,EAC/E;YACE,gBAAgB;YAChB,WAAW,EAAE,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE;SACxC,CACF,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,SAAS,CACtB,IAAuB,EACvB,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACpE,OAAO,CACL,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CACvE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,+CAA+C,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAmB;IACtC,OAAO,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAuB,EACvB,EAAoB;IAEpB,MAAM,WAAW,GAAG,EAAE,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;IACjC,mEAAmE;IACnE,iEAAiE;IACjE,yBAAyB;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACpE,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,0BAA0B,EAAE,CAAC;gBAChD,MAAM,aAAa,CACjB,KAAK,EACL,2BAA2B,CAAC,WAAW,EAAE,GAAG,CAAC,CAC9C,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,0FAA0F,EAC1F;gBACE,GAAG;gBACH,WAAW;gBACX,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CACF,CAAC;YACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/domain/identityaccount/actor.d.ts

@@ -1,26 +1,41 @@
 /**
- * An account acting as itself — the ONE construction of the caller
- * identity server code stamps when it acts on a person's behalf without
- * a token in hand. The shape is the trusted-local identity's
- * (pipeline/interceptors/auth.ts trustedLocalIdentityFor: no issuer, no
- * token; email and display name only when known) with the account id as
- * the principal, so the audit actor on every write it makes is the
- * account, named the way every other write names it.
+ * An account acting as itself — the ONE place server code builds the
+ * caller identity for a person it has resolved from a row rather than
+ * from the token that person presented. Two constructions, one shape:
+ * the account id is the principal, so the audit actor on every write
+ * names the account the way every other write names it, and email and
+ * display name ride along when the row knows them (the trusted-local
+ * identity's shape, pipeline/interceptors/auth.ts).
  *
- * Two lanes build it: the trusted-local boot ensure, which grants the
- * operator ownership AS their account (domain/iampolicy/membership.ts),
- * and the built-in schedule fire caller, which makes a fire act as the
- * schedule's creator (authorization/schedule-fire-caller.ts). Both ride
- * the in-process transport, whose interceptor stamps `origin:
- * "in-process"` on top — the transport-trust marker is never set here.
+ * `accountAsCaller(account)` — the IN-PROCESS lane: no issuer, no token,
+ * class `user`. Two consumers: the trusted-local boot ensure, which
+ * grants the operator ownership AS their account
+ * (domain/iampolicy/membership.ts), and the built-in schedule fire
+ * caller, which makes a fire act as the schedule's creator
+ * (authorization/schedule-fire-caller.ts). Both ride the in-process
+ * transport, whose interceptor stamps `origin: "in-process"` on top —
+ * the transport-trust marker is never set here.
  *
- * Why not a token: open source mints no credential for a person the
- * server is composing a request for; the identity is what the
- * propagation header carries, and every consumer that reads a subject off
- * the raw token (`idpIdOf`) is reached only through `accountForCaller`,
- * which resolves this identity by its id first and never asks the token.
+ * `accountAsRunnerCaller(account, rawToken)` — the WIRE lane: the
+ * runner-subject verifier (runnerauth/runner-subject-verifier.ts) admits
+ * the bearer of a run credential as the human whose run it is. Class
+ * `runner`, because the Authorizer's lane admission and the memory
+ * capture gate must tell a runner acting as a person from the person
+ * (extensions/identity.ts names the class for exactly this), and the
+ * verified token carried, because the provider's capabilities re-read the
+ * binding off `rawToken` (the cloud's own pattern) — one HMAC, no store
+ * read. No issuer: the server signed it.
+ *
+ * Why not a token for the in-process lane: open source mints no
+ * credential for a person the server is composing a request for; the
+ * identity is what the propagation header carries, and every consumer
+ * that reads a subject off the raw token (`idpIdOf`) is reached only
+ * through `accountForCaller`, which resolves this identity by its id
+ * first and never asks the token. The same holds for the runner lane:
+ * our token carries no `sub`, and nothing downstream needs one.
  */
 import type { IdentityAccount } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/api_pb";
 import type { CallerIdentity } from "../../extensions/identity.js";
 export declare function accountAsCaller(account: IdentityAccount): CallerIdentity;
+export declare function accountAsRunnerCaller(account: IdentityAccount, rawToken: string): CallerIdentity;
 //# sourceMappingURL=actor.d.ts.map

package/dist/domain/identityaccount/actor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../../../src/domain/identityaccount/actor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAEhG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,cAAc,CAiBxE"}
+{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../../../src/domain/identityaccount/actor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAEhG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,GAAG,cAAc,CAOxE;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,MAAM,GACf,cAAc,CAYhB"}

package/dist/domain/identityaccount/actor.js

@@ -1,4 +1,24 @@
 export function accountAsCaller(account) {
+    return {
+        ...principalOf(account),
+        callerClass: "user",
+        issuer: "",
+        rawToken: "",
+    };
+}
+export function accountAsRunnerCaller(account, rawToken) {
+    if (rawToken === "") {
+        throw new Error("a runner caller carries the credential it presented — refusing to build one with none");
+    }
+    return {
+        ...principalOf(account),
+        callerClass: "runner",
+        issuer: "",
+        rawToken,
+    };
+}
+/** The account id as principal, with the display identity the row knows. */
+function principalOf(account) {
     const accountId = account.metadata?.id ?? "";
     if (accountId === "") {
         throw new Error("identity account carries no id — refusing to build a caller for an empty principal");
@@ -7,9 +27,6 @@ export function accountAsCaller(account) {
     const displayName = account.metadata?.name ?? "";
     return {
         identityId: accountId,
-        callerClass: "user",
-        issuer: "",
-        rawToken: "",
         ...(email !== "" ? { email } : {}),
         ...(displayName !== "" ? { displayName } : {}),
     };

package/dist/domain/identityaccount/actor.js.map

@@ -1 +1 @@
-{"version":3,"file":"actor.js","sourceRoot":"","sources":["../../../src/domain/identityaccount/actor.ts"],"names":[],"mappings":"AA0BA,MAAM,UAAU,eAAe,CAAC,OAAwB;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IACjD,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;QACZ,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"actor.js","sourceRoot":"","sources":["../../../src/domain/identityaccount/actor.ts"],"names":[],"mappings":"AAwCA,MAAM,UAAU,eAAe,CAAC,OAAwB;IACtD,OAAO;QACL,GAAG,WAAW,CAAC,OAAO,CAAC;QACvB,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,EAAE;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAwB,EACxB,QAAgB;IAEhB,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,GAAG,WAAW,CAAC,OAAO,CAAC;QACvB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,EAAE;QACV,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,WAAW,CAClB,OAAwB;IAExB,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IAC7C,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC;IACjD,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/C,CAAC;AACJ,CAAC"}

package/dist/domain/identityaccount/resolve.d.ts

@@ -41,6 +41,19 @@
  * cannot answer the same question two ways. A credential naming no
  * subject is `undefined` with no second read: the store is never asked
  * about "".
+ *
+ * The third reading is a ROW's creator stamp, `accountForStamp`: the
+ * account a `created_by.id` names, read the two ways a stamp has been
+ * written — as an account id (rows stamped since 3.15.0) and as the raw
+ * issuer subject (rows the 3.14.x verifiers stamped) — in
+ * `accountForCaller`'s order. Two lanes make the server act as the
+ * person a row names: the built-in schedule fire caller (a fire acts as
+ * the schedule's creator) and the runner-subject verifier (a run
+ * credential admits its bearer as the execution's creator). Stated here
+ * so they cannot resolve one stamp two ways; each decides for itself
+ * what "nobody" means (the fire caller's deterministic refusal, the
+ * verifier's liveness sentence), so this function answers `undefined`
+ * and never throws for it. The empty stamp is `undefined` with no read.
  */
 import type { IdentityAccount } from "@stigmer/protos/ai/stigmer/iam/identityaccount/v1/api_pb";
 import type { CallerIdentity } from "../../extensions/identity.js";
@@ -56,4 +69,10 @@ export declare function identityIdForSubject(accounts: AccountsBySubject, subjec
  * Faults propagate as they are — the caller decides the wire shape.
  */
 export declare function accountForCaller(accounts: AccountsByCaller, caller: CallerIdentity): Promise<IdentityAccount | undefined>;
+/**
+ * The account a row's creator stamp names, or `undefined` when it names
+ * nobody (the laptop's `"system"`, a trusted-local email, a deleted
+ * account, the empty stamp). Faults propagate as they are.
+ */
+export declare function accountForStamp(accounts: AccountsByCaller, stamp: string): Promise<IdentityAccount | undefined>;
 //# sourceMappingURL=resolve.d.ts.map

package/dist/domain/identityaccount/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/domain/identityaccount/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAEhG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,uFAAuF;AACvF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;AAEhF,mFAAmF;AACnF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,oBAAoB,EACpB,UAAU,GAAG,mBAAmB,CACjC,CAAC;AAEF,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAUtC"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/domain/identityaccount/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0DAA0D,CAAC;AAEhG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,uFAAuF;AACvF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC;AAEhF,mFAAmF;AACnF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,oBAAoB,EACpB,UAAU,GAAG,mBAAmB,CACjC,CAAC;AAEF,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAYjB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAUtC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAQtC"}

package/dist/domain/identityaccount/resolve.js

@@ -26,4 +26,16 @@ export async function accountForCaller(accounts, caller) {
     }
     return accounts.findDirectByIdpId(subject);
 }
+/**
+ * The account a row's creator stamp names, or `undefined` when it names
+ * nobody (the laptop's `"system"`, a trusted-local email, a deleted
+ * account, the empty stamp). Faults propagate as they are.
+ */
+export async function accountForStamp(accounts, stamp) {
+    if (stamp === "") {
+        return undefined;
+    }
+    return ((await accounts.findById(stamp)) ??
+        (await accounts.findDirectByIdpId(stamp)));
+}
 //# sourceMappingURL=resolve.js.map

package/dist/domain/identityaccount/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/domain/identityaccount/resolve.ts"],"names":[],"mappings":"AA+CA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAYzC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAA2B,EAC3B,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,wDAAwD,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA0B,EAC1B,MAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/domain/identityaccount/resolve.ts"],"names":[],"mappings":"AA4DA,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAYzC,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAA2B,EAC3B,OAAe;IAEf,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;IACtC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,iCAAiC,OAAO,wDAAwD,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA0B,EAC1B,MAAsB;IAEtB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAA0B,EAC1B,KAAa;IAEb,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,CACL,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC,MAAM,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAC1C,CAAC;AACJ,CAAC"}

package/dist/domain/mcpserver/connect-execution-id.d.ts

@@ -0,0 +1,5 @@
+/** One connect's execution id: the server it discovers plus eight hex of entropy per attempt. */
+export declare function newConnectExecutionId(mcpServerId: string): string;
+/** Whether `executionId` is a connect's — the runner-credential lane's recognition of the third binding. */
+export declare function isConnectExecutionId(executionId: string): boolean;
+//# sourceMappingURL=connect-execution-id.d.ts.map

package/dist/domain/mcpserver/connect-execution-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-execution-id.d.ts","sourceRoot":"","sources":["../../../src/domain/mcpserver/connect-execution-id.ts"],"names":[],"mappings":"AAyBA,iGAAiG;AACjG,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,4GAA4G;AAC5G,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAEjE"}

package/dist/domain/mcpserver/connect-execution-id.js

@@ -0,0 +1,32 @@
+/**
+ * The synthetic execution id of an MCP connect — the ONE home for its
+ * shape, built here by the connect lane and recognized here by the
+ * runner-credential lane, so the two can never drift apart.
+ *
+ * A connect is not an execution: it has no AgentExecution or
+ * WorkflowExecution row. What it has is an ephemeral ExecutionContext
+ * (connect.ts `createConnectExecutionContext`) whose `spec.execution_id`
+ * must name SOMETHING for the decrypt lane's binding check
+ * (executioncontext/resolve-values-for-caller.ts: the token's
+ * `execution_id` claim must equal the EC's), and this id is that
+ * something — an id that names no resource kind, so the contract's
+ * `kind_meta` prefix table (pipeline/apiresource-meta.ts) cannot mistake
+ * it for a row. The runner-credential lane reads it the other way round
+ * (runnerauth/bound-execution.ts `boundExecutionKindOf`): an id this
+ * predicate recognizes is a connect binding, resolved through the EC row
+ * whose `spec.execution_id` it is. Keep the builder and the predicate
+ * together; a second copy of the prefix anywhere would be the drift this
+ * module exists to prevent.
+ */
+import { randomUUID } from "node:crypto";
+/** The prefix every connect execution id carries — no resource kind's id starts with it. */
+const CONNECT_EXECUTION_ID_PREFIX = "connect-";
+/** One connect's execution id: the server it discovers plus eight hex of entropy per attempt. */
+export function newConnectExecutionId(mcpServerId) {
+    return `${CONNECT_EXECUTION_ID_PREFIX}${mcpServerId}-${randomUUID().slice(0, 8)}`;
+}
+/** Whether `executionId` is a connect's — the runner-credential lane's recognition of the third binding. */
+export function isConnectExecutionId(executionId) {
+    return executionId.startsWith(CONNECT_EXECUTION_ID_PREFIX);
+}
+//# sourceMappingURL=connect-execution-id.js.map

package/dist/domain/mcpserver/connect-execution-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-execution-id.js","sourceRoot":"","sources":["../../../src/domain/mcpserver/connect-execution-id.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,4FAA4F;AAC5F,MAAM,2BAA2B,GAAG,UAAU,CAAC;AAE/C,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,OAAO,GAAG,2BAA2B,GAAG,WAAW,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,oBAAoB,CAAC,WAAmB;IACtD,OAAO,WAAW,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;AAC7D,CAAC"}

package/dist/domain/mcpserver/connect.d.ts

@@ -89,9 +89,19 @@ export interface ConnectEnvironmentReader {
 /**
  * The ExecutionContext lifecycle surface for the ephemeral connect EC —
  * Go's downstream executioncontext client (create + delete).
+ *
+ * `create` takes the connecting caller and the composition creates the
+ * row AS THAT PERSON (boot/inprocess.ts, the `asCaller` lane of ruling
+ * R5), never under the internal class: the row's creator stamp is what
+ * the runner-subject verifier resolves the connect's person from when
+ * the runner presents the connect token under the built-in posture
+ * (runnerauth/bound-execution.ts, the `mcp-connect` binding). A row
+ * stamped `internal` would name nobody, and the credentialed connect
+ * would be refused at identity on every enforcing self-host. `delete`
+ * stays the server's own act: the row is the lane's, whoever asked.
  */
 export interface ConnectExecutionContextClient {
-    create(executionContext: MessageInitShape<typeof ExecutionContextSchema>): Promise<ExecutionContext>;
+    create(executionContext: MessageInitShape<typeof ExecutionContextSchema>, caller: CallerIdentity): Promise<ExecutionContext>;
     delete(input: MessageInitShape<typeof ApiResourceDeleteInputSchema>): Promise<ExecutionContext>;
 }
 /**
@@ -156,8 +166,24 @@ export declare function connect(deps: McpServerConnectDeps, input: ConnectInput,
  * read the caller's grant and secrets, which a background task has no
  * request context to do (the same constraint that scopes
  * startBestEffortConnect to env-less servers).
+ *
+ * A connect's discovery runs on the runner with TWO credentials, and the
+ * split is deliberate. The runner's own process credential reads the
+ * McpServer's metadata — under the built-in posture that credential is
+ * the operator's API key, and the operator is an organization admin
+ * (deploy/helm/stigmer: the signed-in operator mints the runner's key),
+ * whom the model makes an owner of every McpServer in the organization
+ * (authorization/model/mcp_server.ts), so a member's private server is
+ * readable. The connect token minted below reads the SECRETS: it is
+ * bound to this connect's ExecutionContext, and under the built-in
+ * posture the runner-subject verifier resolves its bearer to the person
+ * that row was created by — which is why the row is created as `identity`
+ * and not as the server. The end state where every RPC of a discovery
+ * acts as the person (the cloud's connect-sandbox shape) needs a row an
+ * env-less connect would also create; it creates none today, so that is
+ * a design act of its own, not a widening to make here.
  */
-export declare function prepareConnect(deps: McpServerConnectDeps, mcpServer: McpServer, input: ConnectInput): Promise<PreparedConnect>;
+export declare function prepareConnect(deps: McpServerConnectDeps, mcpServer: McpServer, input: ConnectInput, identity: CallerIdentity): Promise<PreparedConnect>;
 /**
  * Removes the ephemeral ExecutionContext after the connect workflow
  * completes (Go deleteConnectExecutionContext). Failures are logged but

package/dist/domain/mcpserver/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../../src/domain/mcpserver/connect.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAQ,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,KAAK,EACV,eAAe,EACf,iCAAiC,EACjC,6BAA6B,EAC9B,MAAM,yDAAyD,CAAC;AACjE,OAAO,KAAK,EACV,gBAAgB,IAAI,oBAAoB,EAEzC,MAAM,2DAA2D,CAAC;AAEnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+DAA+D,CAAC;AACtG,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAGvG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wDAAwD,CAAC;AAGxF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,sDAAsD,CAAC;AAEzG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAE7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAQpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAE/F,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,KAAK,EACN,MAAM,0BAA0B,CAAC;AAQlC,OAAO,KAAK,EAEV,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,aAAa,CAAC;AAMrB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,eAAe,EAAE,aAG7B,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,qBAAqB,EAAE,aAGnC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,QAAS,CAAC;AAExD,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAExD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,CACF,OAAO,EAAE,gBAAgB,CAAC,OAAO,6BAA6B,CAAC,GAC9D,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,cAAc,CACZ,KAAK,EAAE,gBAAgB,CAAC,OAAO,iCAAiC,CAAC,GAChE,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CACJ,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,sBAAsB,CAAC,GAChE,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,MAAM,CACJ,KAAK,EAAE,gBAAgB,CAAC,OAAO,4BAA4B,CAAC,GAC3D,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;GAGG;AACH,UAAU,eAAe;IACvB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAC3B,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAyIpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,oBAAoB,EAC1B,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,eAAe,CAAC,CA+D1B;AAgSD;;;;GAIG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,oBAAoB,EAC1B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,aAAa,GACpB,YAAY,CAgDd;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,MAAM,GACZ,MAAM,CAwBR;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,oBAAoB,EAC1B,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAkIf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,oBAAoB,EAC1B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CA2B5D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAKR;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,oBAAoB,EAC1B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,IAAI,CAAC,CAmHf"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../../src/domain/mcpserver/connect.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAQ,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EACV,eAAe,EACf,iCAAiC,EACjC,6BAA6B,EAC9B,MAAM,yDAAyD,CAAC;AACjE,OAAO,KAAK,EACV,gBAAgB,IAAI,oBAAoB,EAEzC,MAAM,2DAA2D,CAAC;AAEnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+DAA+D,CAAC;AACtG,OAAO,EAAE,sBAAsB,EAAE,MAAM,+DAA+D,CAAC;AAGvG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wDAAwD,CAAC;AAGxF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uDAAuD,CAAC;AAC1F,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,sDAAsD,CAAC;AAEzG,OAAO,EAAE,uBAAuB,EAAE,MAAM,oDAAoD,CAAC;AAE7F,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAQpE,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAE/F,OAAO,KAAK,EACV,eAAe,EACf,sBAAsB,EACtB,KAAK,EACN,MAAM,0BAA0B,CAAC;AASlC,OAAO,KAAK,EAEV,iBAAiB,EACjB,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,aAAa,CAAC;AAMrB,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAExE;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,eAAe,EAAE,aAG7B,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,qBAAqB,EAAE,aAGnC,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,QAAS,CAAC;AAExD,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAExD;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,IAAI,CACF,OAAO,EAAE,gBAAgB,CAAC,OAAO,6BAA6B,CAAC,GAC9D,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,cAAc,CACZ,KAAK,EAAE,gBAAgB,CAAC,OAAO,iCAAiC,CAAC,GAChE,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,6BAA6B;IAC5C,MAAM,CACJ,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,sBAAsB,CAAC,EACjE,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B,MAAM,CACJ,KAAK,EAAE,gBAAgB,CAAC,OAAO,4BAA4B,CAAC,GAC3D,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC9B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;IACrD,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,sBAAsB,CAAC;IACpD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;GAGG;AACH,UAAU,eAAe;IACvB,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,OAAO,CAC3B,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,SAAS,CAAC,CAyIpB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,oBAAoB,EAC1B,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,eAAe,CAAC,CAgE1B;AAsSD;;;;GAIG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,oBAAoB,EAC1B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,aAAa,GACpB,YAAY,CAgDd;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,SAAS,EACpB,KAAK,EAAE,MAAM,GACZ,MAAM,CAwBR;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,oBAAoB,EAC1B,SAAS,EAAE,SAAS,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAkIf;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,oBAAoB,EAC1B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CA2B5D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAKR;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,oBAAoB,EAC1B,SAAS,EAAE,SAAS,GACnB,OAAO,CAAC,IAAI,CAAC,CAmHf"}

package/dist/domain/mcpserver/connect.js

@@ -16,7 +16,6 @@
  */
 import { create } from "@bufbuild/protobuf";
 import { Code, ConnectError } from "@connectrpc/connect";
-import { randomUUID } from "node:crypto";
 import { EnvironmentValueSchema } from "@stigmer/protos/ai/stigmer/agentic/environment/v1/spec_pb";
 import { ExecutionContextSchema } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/api_pb";
 import { ExecutionValueSchema } from "@stigmer/protos/ai/stigmer/agentic/executioncontext/v1/spec_pb";
@@ -29,6 +28,7 @@ import { failedPreconditionError, internalError, notFoundError, invalidArgumentE
 import { TOKEN_TYPE_EXECUTION_SCOPED } from "../../runnerauth/runnerauth.js";
 import { ResourceNotFoundError } from "../../store/interface.js";
 import { resolveOAuthAppRef } from "../oauthapp/refresolution.js";
+import { newConnectExecutionId } from "./connect-execution-id.js";
 import { persistConnectFailure, persistConnectResult, persistConnectStarting, } from "./connect-status.js";
 import { refreshTokenIfExpired } from "./oauth/refresh.js";
 import { TOKEN_AUTH_METHOD_BASIC, TOKEN_AUTH_METHOD_POST, } from "./oauth/token.js";
@@ -125,7 +125,7 @@ export async function connect(deps, input, identity) {
     // McpServerConnectHandler order (load-before-authorize, stigmer#224).
     // C2 Stage 4.
     await authorizeDirect(McpServerCommandController.method.connect, deps.authorizer, identity, input);
-    const prepared = await prepareConnect(deps, mcpServer, input);
+    const prepared = await prepareConnect(deps, mcpServer, input, identity);
     try {
         let run;
         try {
@@ -200,8 +200,24 @@ export async function connect(deps, input, identity) {
  * read the caller's grant and secrets, which a background task has no
  * request context to do (the same constraint that scopes
  * startBestEffortConnect to env-less servers).
+ *
+ * A connect's discovery runs on the runner with TWO credentials, and the
+ * split is deliberate. The runner's own process credential reads the
+ * McpServer's metadata — under the built-in posture that credential is
+ * the operator's API key, and the operator is an organization admin
+ * (deploy/helm/stigmer: the signed-in operator mints the runner's key),
+ * whom the model makes an owner of every McpServer in the organization
+ * (authorization/model/mcp_server.ts), so a member's private server is
+ * readable. The connect token minted below reads the SECRETS: it is
+ * bound to this connect's ExecutionContext, and under the built-in
+ * posture the runner-subject verifier resolves its bearer to the person
+ * that row was created by — which is why the row is created as `identity`
+ * and not as the server. The end state where every RPC of a discovery
+ * acts as the person (the cloud's connect-sandbox shape) needs a row an
+ * env-less connect would also create; it creates none today, so that is
+ * a design act of its own, not a widening to make here.
  */
-export async function prepareConnect(deps, mcpServer, input) {
+export async function prepareConnect(deps, mcpServer, input, identity) {
     const mcpServerId = mcpServer.metadata?.id ?? "";
     const callerOrg = input.org;
     // Pre-flight: refresh expired OAuth tokens before env resolution. Only
@@ -211,8 +227,8 @@ export async function prepareConnect(deps, mcpServer, input) {
     if (Object.keys(input.runtimeEnv).length === 0) {
         await refreshOAuthTokenIfNeeded(deps, mcpServer, callerOrg);
     }
-    const executionId = `connect-${mcpServerId}-${randomUUID().slice(0, 8)}`;
-    const ecResourceId = await createConnectExecutionContext(deps, mcpServer, executionId, callerOrg, input.runtimeEnv);
+    const executionId = newConnectExecutionId(mcpServerId);
+    const ecResourceId = await createConnectExecutionContext(deps, mcpServer, executionId, callerOrg, input.runtimeEnv, identity);
     const workflowInput = {
         mcp_server_id: mcpServerId,
         ...(ecResourceId !== "" ? { execution_context_id: executionId } : {}),
@@ -254,8 +270,12 @@ export async function prepareConnect(deps, mcpServer, input) {
  * sources: OAuth-managed variables from the grant's managed environment,
  * the remainder from the user's personal environment. Returns "" when the
  * MCP server has no env declarations and no runtime_env.
+ *
+ * The row is created as `caller`, the person connecting (see the
+ * ConnectExecutionContextClient doc): its creator stamp is the connect
+ * token's person under the built-in posture.
  */
-async function createConnectExecutionContext(deps, mcpServer, executionId, callerOrg, runtimeEnv) {
+async function createConnectExecutionContext(deps, mcpServer, executionId, callerOrg, runtimeEnv, caller) {
     let ecData;
     if (Object.keys(runtimeEnv).length > 0) {
         ecData = runtimeEnv;
@@ -300,7 +320,7 @@ async function createConnectExecutionContext(deps, mcpServer, executionId, calle
                 executionId,
                 data: ecData,
             },
-        }));
+        }), caller);
     }
     catch (error) {
         throw internalError(error, "failed to create connect ExecutionContext");