@stigmer/server 3.15.3-dev.20260916211208 → 3.16.1-dev.20260917224426

package/dist/runnerauth/runner-subject-verifier.js

@@ -0,0 +1,115 @@
+/**
+ * The runner-subject identity verifier — the third open-source entry on
+ * the chassis's verifier chain, composed under the built-in authorization
+ * posture ONLY (boot/compose.ts; authorization/posture.ts), between
+ * `apikey` and `oidc`. It admits the bearer of an execution-scoped runner
+ * token AS THE HUMAN WHO ASKED: for a run, the person the execution row's
+ * creator stamp names, for as long as that run lives; for an MCP
+ * connect, the person who asked for the connect, whose stamp the
+ * connect's ExecutionContext row carries for as long as that row exists
+ * — in the `runner` caller class either way (runnerauth.ts header: the
+ * lane the token gains under this posture; bound-execution.ts: the three
+ * bindings and what "lives" means for each).
+ *
+ * Why a verifier reads the store: the token is a capability for one
+ * execution, not an identity assertion. Its claims name only the
+ * binding; the server resolves the person from the row the way the
+ * schedule fire caller resolves a schedule's creator (`accountForStamp`:
+ * the account id stamped since 3.15.0, the raw issuer subject the 3.14.x
+ * verifiers stamped) and mints the account acting as itself
+ * (`accountAsRunnerCaller`), so the audit actor on every row the runner
+ * writes carries the person's email and display name that no token
+ * could. The API-key verifier is the precedent for a store-reading
+ * verifier (domain/apikey/verifier.ts: the key row, then the owner's
+ * account); this one pays the same two reads. No cache: a run that ends,
+ * or a connect that settles, stops admitting on the very next request.
+ *
+ * A token with no `exp` is a RUN credential and may bind only a run
+ * (`bindsARun`): no mint produces a clockless connect token, so one that
+ * arrives is refused as the credential it is not — the same predicate
+ * the decrypt lane falls closed on, one rule in one home.
+ *
+ * The execution's creator IS the session's owner on every path open
+ * source has today. `agent_execution.can_edit` derives from the SESSION's
+ * owner, not the execution's stamp, so the person this verifier admits
+ * must be the session's owner for the runner to report at all. They
+ * coincide because a session's `can_create_execution_in` is its viewers,
+ * and in open source a session has no viewer but its owner: the contract
+ * lists `viewer` as grantable on a session, but open source's grant scope
+ * is organization-only (domain/iampolicy/grant-scope.ts) and the session
+ * model derives no organization-wide viewer. A scheduled run is created
+ * as the schedule's creator, who owns the session the fire creates. The
+ * verifier test pins the grant-scope fact by name; an edition that grants
+ * `viewer` on sessions (the cloud does) has the cloud's own credential
+ * story, and a change to open source's scope must revisit this sentence.
+ *
+ * Claim rule: exactly `token_type === "execution_scoped"`, read from the
+ * UNTRUSTED payload (`peekTokenType`). Everything else passes — the
+ * API-key lane's `stk_`, the OIDC verifier's JWTs, garbage. The ORDER on
+ * the chain is the contract, not a detail: the OIDC verifier claims any
+ * JWT-shaped token and throws when it cannot verify one, and the server's
+ * own HS256 token is JWT-shaped, so composed after `oidc` this verifier
+ * would never see its own token; that is precisely what a 3.15.x
+ * self-host with sign-in on did (stigmer#1137: every agent execution
+ * failed INTERNAL). A token that names our type and fails the HMAC is
+ * CLAIMED and refused, never passed to a laxer verifier (the identity.ts
+ * contract); an OIDC-issued JWT never carries the claim, so there is no
+ * downgrade path.
+ *
+ * Refusals are UNAUTHENTICATED with exactly two sentences (constants.ts):
+ * the token sentence for anything wrong with the credential itself — the
+ * HMAC, a present `exp` in the past, a binding that names no kind or no
+ * row (the run is not the caller's to learn about, so never NOT_FOUND),
+ * a clockless token bound to a connect — and the liveness sentence for a
+ * genuine credential whose run is over or was created by nobody this
+ * server recognizes. A store fault propagates as the fault it is: the
+ * chassis maps it INTERNAL (pipeline/interceptors/auth.ts), so an outage
+ * never reads as a bad credential.
+ */
+import { Code, ConnectError } from "@connectrpc/connect";
+import { accountAsRunnerCaller } from "../domain/identityaccount/actor.js";
+import { accountForStamp } from "../domain/identityaccount/resolve.js";
+import { bindsARun, loadBoundExecution } from "./bound-execution.js";
+import { RUNNER_CREDENTIAL_INVALID_MESSAGE, RUNNER_CREDENTIAL_NOT_LIVE_MESSAGE, RUNNER_VERIFIER_NAME, } from "./constants.js";
+import { isClockedToken, peekTokenType, TOKEN_TYPE_EXECUTION_SCOPED, } from "./runnerauth.js";
+export function newRunnerSubjectIdentityVerifier(deps) {
+    return {
+        name: RUNNER_VERIFIER_NAME,
+        async verify(token) {
+            if (peekTokenType(token) !== TOKEN_TYPE_EXECUTION_SCOPED) {
+                return null;
+            }
+            let executionId;
+            try {
+                executionId = deps.credentials.verify(TOKEN_TYPE_EXECUTION_SCOPED, token);
+            }
+            catch {
+                // Every verify failure is the one InvalidTokenError by contract;
+                // the sentence on the wire is ours, not the service's.
+                throw invalidCredential();
+            }
+            const execution = await loadBoundExecution(deps.store, executionId);
+            if (execution === undefined) {
+                throw invalidCredential();
+            }
+            if (!isClockedToken(token) && !bindsARun(execution.kind)) {
+                throw invalidCredential();
+            }
+            if (!execution.live) {
+                throw notLive();
+            }
+            const account = await accountForStamp(deps.accounts, execution.createdBy);
+            if (account === undefined) {
+                throw notLive();
+            }
+            return accountAsRunnerCaller(account, token);
+        },
+    };
+}
+function invalidCredential() {
+    return new ConnectError(RUNNER_CREDENTIAL_INVALID_MESSAGE, Code.Unauthenticated);
+}
+function notLive() {
+    return new ConnectError(RUNNER_CREDENTIAL_NOT_LIVE_MESSAGE, Code.Unauthenticated);
+}
+//# sourceMappingURL=runner-subject-verifier.js.map

package/dist/runnerauth/runner-subject-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-subject-verifier.js","sourceRoot":"","sources":["../../src/runnerauth/runner-subject-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmEG;AACH,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAMvE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAErE,OAAO,EACL,iCAAiC,EACjC,kCAAkC,EAClC,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,cAAc,EACd,aAAa,EACb,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AAWzB,MAAM,UAAU,gCAAgC,CAC9C,IAA+B;IAE/B,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK,CAAC,MAAM,CAAC,KAAa;YACxB,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,2BAA2B,EAAE,CAAC;gBACzD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,WAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CACnC,2BAA2B,EAC3B,KAAK,CACN,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;gBACjE,uDAAuD;gBACvD,MAAM,iBAAiB,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACpE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,iBAAiB,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,iBAAiB,EAAE,CAAC;YAC5B,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;gBACpB,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAC1E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YACD,OAAO,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,YAAY,CACrB,iCAAiC,EACjC,IAAI,CAAC,eAAe,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO;IACd,OAAO,IAAI,YAAY,CACrB,kCAAkC,EAClC,IAAI,CAAC,eAAe,CACrB,CAAC;AACJ,CAAC"}

package/dist/runnerauth/runnerauth.d.ts

@@ -57,10 +57,10 @@ export declare class RunnerAuthService {
     /**
      * Go NewServiceFromEnv: key via the shared ladder (env var → key file →
      * auto-generate). Errors only on unusable explicit configuration; the
-     * composition root maps that to the BOOT-FATAL posture (the ratified D2
-     * asymmetry: a server that cannot mint runner tokens would hand every
-     * execution redaction markers instead of its secrets — the silent-junk
-     * failure the oss#405 fail-loud doctrine forbids).
+     * composition root maps that to the BOOT-FATAL posture: a server that
+     * cannot mint runner tokens would hand every execution redaction markers
+     * instead of its secrets — the silent-junk failure the encryption work
+     * (stigmer#405) made fail-loud.
      */
     static fromEnv(options?: KeyLoaderOptions): RunnerAuthService;
     /** Go IsEnabled: whether the service holds a signing key. */
@@ -70,6 +70,14 @@ export declare class RunnerAuthService {
      * (DEFAULT_TTL_SECONDS when <= 0).
      */
     mint(executionId: string, ttlSeconds?: number): MintedToken;
+    /**
+     * The run credential: bound to `executionId`, with NO `exp` (see the
+     * header — a run outlives any clock; the row decides). The dispatch
+     * path mints it into the workflow input; only the string travels, since
+     * there is no lifetime to report.
+     */
+    mintRunCredential(executionId: string): string;
+    private signClaims;
     /**
      * Go Verify: checks signature, algorithm, expiry, and token type, and
      * returns the execution id the token is bound to. Any failure throws the
@@ -79,9 +87,30 @@ export declare class RunnerAuthService {
      * Check order mirrors Go: enabled → three parts → exact encoded-header
      * compare → constant-time HMAC → payload decode → claims. The expiry
      * boundary is `now >= exp` (a token in its expiring second is invalid).
+     * A token with no `exp` is a run credential and passes this check; a
+     * present `exp` that is not a number is a malformed clock and refuses.
      */
     verify(token: string): string;
     /** base64url HMAC-SHA256 of the signing input — Go sign(). */
     private sign;
 }
+/**
+ * The `token_type` claim read off an UNVERIFIED token, or undefined for
+ * anything that is not a three-segment token with a JSON payload naming
+ * one. This is the runner-subject verifier's claim rule (the chassis
+ * contract: decide "is this ours?" before trusting anything), so it must
+ * never throw and must trust nothing it reads — `verify` runs afterwards
+ * on a claimed token. It is NOT a shortcut for reading claims a caller
+ * intends to act on.
+ */
+export declare function peekTokenType(token: string): string | undefined;
+/**
+ * Whether a token this module has ALREADY verified carries a clock. The
+ * decrypt lane reads it to know which validity rule applies (a clocked
+ * token's clock was enforced by `verify`; a run credential's validity is
+ * the row's). Reading the payload of a verified token is a read of
+ * trusted state, the GuardMemoryCapture precedent; on anything `verify`
+ * has not accepted the answer is meaningless, so callers verify first.
+ */
+export declare function isClockedToken(verifiedToken: string): boolean;
 //# sourceMappingURL=runnerauth.d.ts.map

package/dist/runnerauth/runnerauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runnerauth.d.ts","sourceRoot":"","sources":["../../src/runnerauth/runnerauth.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,qBAAqB,CAAC;AAE9D,gEAAgE;AAChE,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE,iEAAiE;AACjE,eAAO,MAAM,0BAA0B,qBAAqB,CAAC;AAE7D;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C;AAmBD,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IAEzC,OAAO;IAIP;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB;IAOzD;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,OAAO,GAAE,gBAAqB,GAAG,iBAAiB;IASjE,6DAA6D;IAC7D,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACH,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,GAAE,MAAU,GAAG,WAAW;IAwB9D;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAgD7B,8DAA8D;IAC9D,OAAO,CAAC,IAAI;CAQb"}
+{"version":3,"file":"runnerauth.d.ts","sourceRoot":"","sources":["../../src/runnerauth/runnerauth.ts"],"names":[],"mappings":"AAqEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,qBAAqB,CAAC;AAE9D,gEAAgE;AAChE,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE,iEAAiE;AACjE,eAAO,MAAM,0BAA0B,qBAAqB,CAAC;AAE7D;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C;AAuBD,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IAEzC,OAAO;IAIP;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB;IAOzD;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,OAAO,GAAE,gBAAqB,GAAG,iBAAiB;IASjE,6DAA6D;IAC7D,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACH,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,GAAE,MAAU,GAAG,WAAW;IAY9D;;;;;OAKG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM;IAM9C,OAAO,CAAC,UAAU;IAsBlB;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAqD7B,8DAA8D;IAC9D,OAAO,CAAC,IAAI;CAQb;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI/D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAE7D"}

package/dist/runnerauth/runnerauth.js

@@ -1,34 +1,67 @@
 /**
  * Execution-scoped runner tokens — ports pkg/runnerauth/runnerauth.go
- * (oss#535), the lane that gates the ExecutionContext decrypt path.
+ * (oss#535): one HS256 token type, bound to ONE execution, serving two
+ * lanes that the server's posture decides between.
  *
  * WHY: since oss#535 the EC read RPCs redact is_secret values for every
  * caller — the same contract the cloud edition enforces — but the runner
  * still needs the real values to serve executions. Cloud distinguishes the
- * runner by the token_type claim of its platform-minted credential; OSS
- * ships no token VERIFIERS on its identity chassis (O2, 20260827.01 — the
- * verifier chain exists but resolves every request to the trusted-local
- * identity until O3 lands the first verifiers), so this module supplies
- * the minimal equivalent: the platform exchange mints a short-lived token
- * bound to ONE execution, and the EC handler decrypts only for a token
- * whose binding matches the requested ExecutionContext.
+ * runner by the token_type claim of its platform-minted credential; this
+ * module is the open-source equivalent: a token whose binding names the
+ * execution it serves, and the EC handler decrypts only for a token whose
+ * binding matches the requested ExecutionContext.
  *
- * A LANE DISCRIMINATOR, NOT A TRUST BOUNDARY (DD-004): in the trusted-local
- * posture anyone who can reach the server can mint. What the token buys is
- * the redaction-by-default read contract converging with cloud, on top of
- * oss#405's encryption at rest. It is deliberately NOT an IdentityVerifier
- * on the chassis: presenting it must never change the caller's identity
- * (the Q6 fall-through keeps the runner's Bearer-on-every-RPC behavior
- * byte-identical), only unlock this one decrypt lane.
+ * THE TWO LANES, BY POSTURE. Until 2026-09-16 this header stated the
+ * token was "deliberately NOT an IdentityVerifier on the chassis:
+ * presenting it must never change the caller's identity". That sentence
+ * described a server that did not enforce authorization: with the
+ * permissive Authorizer, the runner's operator key could do everything,
+ * so the token only needed to unlock one decrypt lane. Under the built-in
+ * authorization posture (an OIDC self-host; authorization/posture.ts) the
+ * server enforces the cloud's model, and a runner keyed with one
+ * operator's API key could report on nobody's run but the operator's.
+ * So under that posture the SAME token is also an identity
+ * (runner-subject-verifier.ts): it admits its bearer as the human whose
+ * run it is, the person the execution row's creator stamp names, for as
+ * long as that run lives. The runner acts as the run's human, which is
+ * what the cloud's managed sandbox has always done. Under trusted-local
+ * no verifier is composed and the token stays the decrypt-lane
+ * discriminator it was: anyone who can reach that server can mint one,
+ * and there is one person to be.
  *
  * Token shape (field names are wire contract — the runner's
  * token-claims.ts reads token_type by name):
  *   {"token_type":"execution_scoped","execution_id":"<id>","iat":…,"exp":…}
  *
- * Consumers arrive with their own domains: the platform exchange RPC
- * (mint) and the executioncontext resolve step (verify). This module lands
- * with the encryption sub-project because its signing key rides the shared
- * key ladder and its boot posture is a ratified cross-domain invariant
+ * Two mints, one shape:
+ *   - `mint(executionId, ttl)` — the CLOCKED token: the trusted-local
+ *     exchange and the connect and sandbox lanes, whose one unit of work
+ *     has a bounded lifetime. `exp` is present and enforced. The connect
+ *     lane's token binds no execution row but the connect's own
+ *     ExecutionContext (domain/mcpserver/connect-execution-id.ts), and
+ *     under the built-in posture it too is an identity: its bearer acts
+ *     as the person who asked for the connect, whom that row was created
+ *     by (bound-execution.ts, the `mcp-connect` binding).
+ *   - `mintRunCredential(executionId)` — the RUN credential: the two
+ *     execution engines put it on every dispatch's workflow input
+ *     (dispatch-credential.ts), and under the built-in posture the
+ *     exchange mints it too, for the run's own person only
+ *     (built-in-runner-credential-provider.ts). NO `exp`. A run waits on
+ *     humans with no timeout and outlives any clock; its credential's
+ *     validity is the ROW's — the execution is live, or ended within a
+ *     short grace (bound-execution.ts) — read by both lanes that accept
+ *     the token, because a plaintext token in Temporal history must not
+ *     decrypt a finished run's secrets, and the clock that prevented that
+ *     is gone.
+ * `verify` enforces `exp` when present and accepts its absence; it never
+ * decides liveness, which needs the store.
+ *
+ * Consumers arrive with their own domains, through the provider seam
+ * (runner-credential-provider.ts): the platform exchange RPC and the two
+ * engine clients (mint), the executioncontext resolve step and the
+ * runner-subject verifier (verify). This module lands with the
+ * encryption sub-project because its signing key rides the shared key
+ * ladder and its boot posture is a ratified cross-domain invariant
  * (fatal — see compose.ts).
  */
 import { createHmac, timingSafeEqual } from "node:crypto";
@@ -105,10 +138,10 @@ export class RunnerAuthService {
     /**
      * Go NewServiceFromEnv: key via the shared ladder (env var → key file →
      * auto-generate). Errors only on unusable explicit configuration; the
-     * composition root maps that to the BOOT-FATAL posture (the ratified D2
-     * asymmetry: a server that cannot mint runner tokens would hand every
-     * execution redaction markers instead of its secrets — the silent-junk
-     * failure the oss#405 fail-loud doctrine forbids).
+     * composition root maps that to the BOOT-FATAL posture: a server that
+     * cannot mint runner tokens would hand every execution redaction markers
+     * instead of its secrets — the silent-junk failure the encryption work
+     * (stigmer#405) made fail-loud.
      */
     static fromEnv(options = {}) {
         const key = getOrCreateNamedKey(RUNNER_TOKEN_KEY_ENV_VAR, RUNNER_TOKEN_KEY_FILE_NAME, options);
@@ -123,25 +156,43 @@ export class RunnerAuthService {
      * (DEFAULT_TTL_SECONDS when <= 0).
      */
     mint(executionId, ttlSeconds = 0) {
+        const ttl = ttlSeconds > 0 ? ttlSeconds : DEFAULT_TTL_SECONDS;
+        const nowSeconds = Math.floor(Date.now() / 1000);
+        return {
+            token: this.signClaims(executionId, {
+                iat: nowSeconds,
+                exp: nowSeconds + ttl,
+            }),
+            ttlSeconds: ttl,
+        };
+    }
+    /**
+     * The run credential: bound to `executionId`, with NO `exp` (see the
+     * header — a run outlives any clock; the row decides). The dispatch
+     * path mints it into the workflow input; only the string travels, since
+     * there is no lifetime to report.
+     */
+    mintRunCredential(executionId) {
+        return this.signClaims(executionId, {
+            iat: Math.floor(Date.now() / 1000),
+        });
+    }
+    signClaims(executionId, clock) {
         if (this.key === undefined) {
             throw new MintingDisabledError();
         }
         if (executionId === "") {
             throw new Error("execution id is required to mint a runner token");
         }
-        const ttl = ttlSeconds > 0 ? ttlSeconds : DEFAULT_TTL_SECONDS;
-        const nowSeconds = Math.floor(Date.now() / 1000);
         const claims = {
             token_type: TOKEN_TYPE_EXECUTION_SCOPED,
             execution_id: executionId,
-            iat: nowSeconds,
-            exp: nowSeconds + ttl,
-        };
-        const signingInput = JWT_HEADER + "." + Buffer.from(JSON.stringify(claims)).toString("base64url");
-        return {
-            token: signingInput + "." + this.sign(signingInput),
-            ttlSeconds: ttl,
+            ...clock,
         };
+        const signingInput = JWT_HEADER +
+            "." +
+            Buffer.from(JSON.stringify(claims)).toString("base64url");
+        return signingInput + "." + this.sign(signingInput);
     }
     /**
      * Go Verify: checks signature, algorithm, expiry, and token type, and
@@ -152,6 +203,8 @@ export class RunnerAuthService {
      * Check order mirrors Go: enabled → three parts → exact encoded-header
      * compare → constant-time HMAC → payload decode → claims. The expiry
      * boundary is `now >= exp` (a token in its expiring second is invalid).
+     * A token with no `exp` is a run credential and passes this check; a
+     * present `exp` that is not a number is a malformed clock and refuses.
      */
     verify(token) {
         if (this.key === undefined) {
@@ -183,9 +236,12 @@ export class RunnerAuthService {
         }
         if (claims.token_type !== TOKEN_TYPE_EXECUTION_SCOPED ||
             typeof claims.execution_id !== "string" ||
-            claims.execution_id === "" ||
-            typeof claims.exp !== "number" ||
-            Math.floor(Date.now() / 1000) >= claims.exp) {
+            claims.execution_id === "") {
+            throw new InvalidTokenError();
+        }
+        if (claims.exp !== undefined &&
+            (typeof claims.exp !== "number" ||
+                Math.floor(Date.now() / 1000) >= claims.exp)) {
             throw new InvalidTokenError();
         }
         return claims.execution_id;
@@ -200,4 +256,44 @@ export class RunnerAuthService {
             .digest("base64url");
     }
 }
+/**
+ * The `token_type` claim read off an UNVERIFIED token, or undefined for
+ * anything that is not a three-segment token with a JSON payload naming
+ * one. This is the runner-subject verifier's claim rule (the chassis
+ * contract: decide "is this ours?" before trusting anything), so it must
+ * never throw and must trust nothing it reads — `verify` runs afterwards
+ * on a claimed token. It is NOT a shortcut for reading claims a caller
+ * intends to act on.
+ */
+export function peekTokenType(token) {
+    const claims = decodePayload(token);
+    const type = claims?.["token_type"];
+    return typeof type === "string" && type !== "" ? type : undefined;
+}
+/**
+ * Whether a token this module has ALREADY verified carries a clock. The
+ * decrypt lane reads it to know which validity rule applies (a clocked
+ * token's clock was enforced by `verify`; a run credential's validity is
+ * the row's). Reading the payload of a verified token is a read of
+ * trusted state, the GuardMemoryCapture precedent; on anything `verify`
+ * has not accepted the answer is meaningless, so callers verify first.
+ */
+export function isClockedToken(verifiedToken) {
+    return typeof decodePayload(verifiedToken)?.["exp"] === "number";
+}
+function decodePayload(token) {
+    const segments = token.split(".");
+    if (segments.length !== 3) {
+        return undefined;
+    }
+    try {
+        const decoded = JSON.parse(Buffer.from(segments[1] ?? "", "base64url").toString("utf8"));
+        return typeof decoded === "object" && decoded !== null
+            ? decoded
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 //# sourceMappingURL=runnerauth.js.map

package/dist/runnerauth/runnerauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"runnerauth.js","sourceRoot":"","sources":["../../src/runnerauth/runnerauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAE9D,gEAAgE;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,iEAAiE;AACjE,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CACpE,WAAW,CACZ,CAAC;AAgBF;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACX,GAAG,CAAqB;IAEzC,YAAoB,GAAuB;QACzC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAuB;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QAC3C,MAAM,GAAG,GAAG,mBAAmB,CAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,OAAO,CACR,CAAC;QACF,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,6DAA6D;IAC7D,SAAS;QACP,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,WAAmB,EAAE,aAAqB,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAE9D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAgB;YAC1B,UAAU,EAAE,2BAA2B;YACvC,YAAY,EAAE,WAAW;YACzB,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,UAAU,GAAG,GAAG;SACtB,CAAC;QACF,MAAM,YAAY,GAChB,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/E,OAAO;YACL,KAAK,EAAE,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YACnD,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAa;QAClB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;QACjD,2DAA2D;QAC3D,qEAAqE;QACrE,iEAAiE;QACjE,IACE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/C,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IACE,MAAM,CAAC,UAAU,KAAK,2BAA2B;YACjD,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,MAAM,CAAC,YAAY,KAAK,EAAE;YAC1B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,EAC3C,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,8DAA8D;IACtD,IAAI,CAAC,YAAoB;QAC/B,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;aAClC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;CACF"}
+{"version":3,"file":"runnerauth.js","sourceRoot":"","sources":["../../src/runnerauth/runnerauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAE9D,gEAAgE;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,iEAAiE;AACjE,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CACpE,WAAW,CACZ,CAAC;AAoBF;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACX,GAAG,CAAqB;IAEzC,YAAoB,GAAuB;QACzC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAuB;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QAC3C,MAAM,GAAG,GAAG,mBAAmB,CAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,OAAO,CACR,CAAC;QACF,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,6DAA6D;IAC7D,SAAS;QACP,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,WAAmB,EAAE,aAAqB,CAAC;QAC9C,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACjD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;gBAClC,GAAG,EAAE,UAAU;gBACf,GAAG,EAAE,UAAU,GAAG,GAAG;aACtB,CAAC;YACF,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,WAAmB;QACnC,OAAO,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;YAClC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAChB,WAAmB,EACnB,KAAuC;QAEvC,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,MAAM,GAAgB;YAC1B,UAAU,EAAE,2BAA2B;YACvC,YAAY,EAAE,WAAW;YACzB,GAAG,KAAK;SACT,CAAC;QACF,MAAM,YAAY,GAChB,UAAU;YACV,GAAG;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC5D,OAAO,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,KAAa;QAClB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;QACjD,2DAA2D;QAC3D,qEAAqE;QACrE,iEAAiE;QACjE,IACE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/C,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IACE,MAAM,CAAC,UAAU,KAAK,2BAA2B;YACjD,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,MAAM,CAAC,YAAY,KAAK,EAAE,EAC1B,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IACE,MAAM,CAAC,GAAG,KAAK,SAAS;YACxB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;gBAC7B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,EAC9C,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,8DAA8D;IACtD,IAAI,CAAC,YAAoB;QAC/B,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;aAClC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;IACpC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,aAAqB;IAClD,OAAO,OAAO,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,IAAI,CAAC,KAAK,CACjC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC7D,CAAC;QACF,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YACpD,CAAC,CAAE,OAAmC;YACtC,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/temporal/agentexecution/engine-client.d.ts

@@ -19,18 +19,30 @@
  * engine per client instance — a new engine object per RPC would be
  * garbage for no behavior.
  *
+ * The run credential rides the input (2026-09-16): every dispatch — a
+ * fresh start and a recovery alike, both through startInvokeWorkflow —
+ * asks the composed credential provider for the run's credential
+ * (runnerauth/dispatch-credential.ts) and carries it as
+ * `execution_context_token`, the connect lane's shape. Minting here, in
+ * the one place that builds the input, is what keeps the create step and
+ * the recover path ignorant of credentials; a provider without the
+ * capability (an edition credentialed another way) leaves the key off.
+ *
  * Proven by the agentexecution suites on local-execution.
  */
 import type { Client } from "@temporalio/client";
 import type { Logger } from "../../boot/logger.js";
 import { type ConnectedExecutionEngine, type ExecutionEngineStateProvider, type StartInvokeWorkflowInput } from "../../domain/agentexecution/engine.js";
 import type { AgentExecutionTemporalConfig } from "../../domain/agentexecution/temporal/config.js";
+import type { RunCredentialMint } from "../../runnerauth/dispatch-credential.js";
 import type { Store } from "../../store/interface.js";
 import type { TemporalManager } from "../manager.js";
 export interface TemporalExecutionEngineDeps {
     readonly client: Client;
     readonly config: AgentExecutionTemporalConfig;
     readonly store: Store;
+    /** The composed credential provider — the dispatch reads its run-credential capability (module header). */
+    readonly runnerCredentials: RunCredentialMint;
     readonly logger: Logger;
 }
 export declare class TemporalExecutionEngine implements ConnectedExecutionEngine {
@@ -48,6 +60,7 @@ export interface EngineStateProviderDeps {
     readonly manager: TemporalManager;
     readonly config: AgentExecutionTemporalConfig;
     readonly store: Store;
+    readonly runnerCredentials: RunCredentialMint;
     readonly logger: Logger;
 }
 /**

package/dist/temporal/agentexecution/engine-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-client.d.ts","sourceRoot":"","sources":["../../../src/temporal/agentexecution/engine-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAIL,KAAK,wBAAwB,EAE7B,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC9B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AACnG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAYrD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,uBAAwB,YAAW,wBAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,2BAA2B;IAExD,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IA6DnE,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/D,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlD,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAW7D,MAAM;CAcrB;AAcD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,uBAAuB,GAC5B,4BAA4B,CAuB9B"}
+{"version":3,"file":"engine-client.d.ts","sourceRoot":"","sources":["../../../src/temporal/agentexecution/engine-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAGjD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAIL,KAAK,wBAAwB,EAE7B,KAAK,4BAA4B,EACjC,KAAK,wBAAwB,EAC9B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAEnG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAYrD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,2GAA2G;IAC3G,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,uBAAwB,YAAW,wBAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,2BAA2B;IAExD,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAuEnE,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/D,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhD,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlD,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAW7D,MAAM;CAcrB;AAcD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,uBAAuB,GAC5B,4BAA4B,CAwB9B"}

package/dist/temporal/agentexecution/engine-client.js

@@ -1,5 +1,6 @@
 import { WorkflowNotFoundError } from "@temporalio/common";
 import { ENGINE_DISCONNECTED, EngineDispatchError, EngineWorkflowNotFoundError, } from "../../domain/agentexecution/engine.js";
+import { runCredentialForDispatch } from "../../runnerauth/dispatch-credential.js";
 import { resolveActivityTaskQueue } from "./dispatch.js";
 import { INVOKE_AGENT_EXECUTION_WORKFLOW_NAME, invokeWorkflowIdFor, MEMO_ACTIVITY_TASK_QUEUE, SIGNAL_APPROVAL_GATE_RESOLVED, SIGNAL_PAUSE, SIGNAL_RESUME, } from "./names.js";
 export class TemporalExecutionEngine {
@@ -8,7 +9,7 @@ export class TemporalExecutionEngine {
         this.deps = deps;
     }
     async startInvokeWorkflow(input) {
-        const { client, config, store, logger } = this.deps;
+        const { client, config, store, runnerCredentials, logger } = this.deps;
         let dispatch;
         try {
             dispatch = await resolveActivityTaskQueue(store, input.sessionId, config, input.activityTaskQueueOverride, logger);
@@ -19,6 +20,7 @@ export class TemporalExecutionEngine {
             throw new EngineDispatchError(error instanceof Error ? error.message : String(error));
         }
         const workflowId = invokeWorkflowIdFor(input.executionId);
+        const runCredential = runCredentialForDispatch(runnerCredentials, input.executionId, logger);
         // Slim input with Go's omitempty shape (workflow-input.ts): zero-value
         // fields are omitted so TS- and Go-authored histories carry the same
         // keys. callback_token is base64 — Go's []byte JSON rendering.
@@ -27,7 +29,9 @@ export class TemporalExecutionEngine {
             session_id: input.sessionId,
             agent_id: input.agentId,
             ...(input.callbackToken.length > 0
-                ? { callback_token: Buffer.from(input.callbackToken).toString("base64") }
+                ? {
+                    callback_token: Buffer.from(input.callbackToken).toString("base64"),
+                }
                 : {}),
             ...(input.autoApproveAll ? { auto_approve_all: true } : {}),
             ...(input.parentWorkflowId !== ""
@@ -37,6 +41,9 @@ export class TemporalExecutionEngine {
             ...(dispatch.executionTarget !== 0
                 ? { execution_target: dispatch.executionTarget }
                 : {}),
+            ...(runCredential !== ""
+                ? { execution_context_token: runCredential }
+                : {}),
         };
         // NOTE deliberately NO workflowRunTimeout: HITL approval can block for
         // minutes, hours, or days — a finite timeout would contradict the
@@ -133,6 +140,7 @@ export function newExecutionEngineStateProvider(deps) {
                         client,
                         config: deps.config,
                         store: deps.store,
+                        runnerCredentials: deps.runnerCredentials,
                         logger: deps.logger,
                     }),
                 },

package/dist/temporal/agentexecution/engine-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine-client.js","sourceRoot":"","sources":["../../../src/temporal/agentexecution/engine-client.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,GAK5B,MAAM,uCAAuC,CAAC;AAI/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EACL,oCAAoC,EACpC,mBAAmB,EACnB,wBAAwB,EACxB,6BAA6B,EAC7B,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AAUpB,MAAM,OAAO,uBAAuB;IACL;IAA7B,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAElE,KAAK,CAAC,mBAAmB,CAAC,KAA+B;QACvD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAEpD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,wBAAwB,CACvC,KAAK,EACL,KAAK,CAAC,SAAS,EACf,MAAM,EACN,KAAK,CAAC,yBAAyB,EAC/B,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,IAAI,mBAAmB,CAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAE1D,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,aAAa,GAAsC;YACvD,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;gBACzE,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,EAAE;gBAC/B,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,CAAC;gBAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oCAAoC,EAAE;YAChE,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,YAAY;YAC9B,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE;YACxD,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;YAClD,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,cAAc,EAAE,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,WAAmB;QAClD,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;YACvE,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,MAAc;QACnD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,MAAc;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,WAAmB,EACnB,UAAkB,EAClB,GAAG,IAAe;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAc,EAAE,WAAmB;IACtD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,OAAO,IAAI,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAA6B;IAE7B,IAAI,IAAiE,CAAC;IACtE,OAAO,GAAG,EAAE;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjD,IAAI,GAAG;gBACL,MAAM;gBACN,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,IAAI,uBAAuB,CAAC;wBAClC,MAAM;wBACN,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC;iBACH;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"engine-client.js","sourceRoot":"","sources":["../../../src/temporal/agentexecution/engine-client.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,GAK5B,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,yCAAyC,CAAC;AAInF,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EACL,oCAAoC,EACpC,mBAAmB,EACnB,wBAAwB,EACxB,6BAA6B,EAC7B,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AAYpB,MAAM,OAAO,uBAAuB;IACL;IAA7B,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAElE,KAAK,CAAC,mBAAmB,CAAC,KAA+B;QACvD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QAEvE,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,wBAAwB,CACvC,KAAK,EACL,KAAK,CAAC,SAAS,EACf,MAAM,EACN,KAAK,CAAC,yBAAyB,EAC/B,MAAM,CACP,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,IAAI,mBAAmB,CAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,wBAAwB,CAC5C,iBAAiB,EACjB,KAAK,CAAC,WAAW,EACjB,MAAM,CACP,CAAC;QAEF,uEAAuE;QACvE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,aAAa,GAAsC;YACvD,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC;oBACE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBACpE;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,EAAE;gBAC/B,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,QAAQ,CAAC,eAAe,KAAK,CAAC;gBAChC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,eAAe,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,aAAa,KAAK,EAAE;gBACtB,CAAC,CAAC,EAAE,uBAAuB,EAAE,aAAa,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QAEF,uEAAuE;QACvE,kEAAkE;QAClE,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oCAAoC,EAAE;YAChE,UAAU;YACV,SAAS,EAAE,MAAM,CAAC,YAAY;YAC9B,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,EAAE,QAAQ,CAAC,SAAS,EAAE;YACxD,IAAI,EAAE,CAAC,aAAa,CAAC;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;YAClD,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,cAAc,EAAE,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,WAAmB;QAClD,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;YACvE,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,WAAmB,EAAE,MAAc;QACnD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,WAAmB;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACxB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,WAAmB,EAAE,MAAc;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,WAAmB,EACnB,UAAkB,EAClB,GAAG,IAAe;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAChD,mBAAmB,CAAC,WAAW,CAAC,CACjC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,KAAc,EAAE,WAAmB;IACtD,IAAI,KAAK,YAAY,qBAAqB,EAAE,CAAC;QAC3C,OAAO,IAAI,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAUD;;;;;;;;GAQG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAA6B;IAE7B,IAAI,IAAiE,CAAC;IACtE,OAAO,GAAG,EAAE;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,mBAAmB,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjD,IAAI,GAAG;gBACL,MAAM;gBACN,KAAK,EAAE;oBACL,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,IAAI,uBAAuB,CAAC;wBAClC,MAAM;wBACN,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;wBACzC,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC;iBACH;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC,CAAC;AACJ,CAAC"}

package/dist/temporal/agentexecution/workflow-input.d.ts

@@ -25,6 +25,19 @@ export interface InvokeAgentExecutionWorkflowInput {
     readonly auto_approve_all?: boolean;
     readonly parent_workflow_id?: string;
     readonly invoker_identity_account_id?: string;
+    /**
+     * The run credential (runnerauth: a clockless execution-scoped token
+     * bound to this execution), minted by the engine client at dispatch
+     * when the composed credential provider defines `mintRunCredential`
+     * and omitted otherwise. The connect lane's key for the same token
+     * type (domain/mcpserver/engine.ts). The workflow hands it to the
+     * runner's activities, which present it on the run's own RPCs: under
+     * the built-in authorization posture it admits the runner as the
+     * human whose run this is, for as long as the run lives. Like the
+     * connect lane's, it sits in Temporal history in the clear — history
+     * is operator-only, and the operator holds the signing key already.
+     */
+    readonly execution_context_token?: string;
     /**
      * Session harness as the proto enum numeric value (0=UNSPECIFIED treated
      * as NATIVE, 1=NATIVE, 2=CURSOR) — selects ExecuteDeepAgent vs

package/dist/temporal/agentexecution/workflow-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-input.d.ts","sourceRoot":"","sources":["../../../src/temporal/agentexecution/workflow-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC"}
+{"version":3,"file":"workflow-input.d.ts","sourceRoot":"","sources":["../../../src/temporal/agentexecution/workflow-input.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,2BAA2B,CAAC,EAAE,MAAM,CAAC;IAC9C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC"}

package/dist/temporal/agentexecution/workflows/invoke-agent-execution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"invoke-agent-execution.d.ts","sourceRoot":"","sources":["../../../../src/temporal/agentexecution/workflows/invoke-agent-execution.ts"],"names":[],"mappings":"AA+GA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAmL9E,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,IAAI,CAAC,CA8Kf"}
+{"version":3,"file":"invoke-agent-execution.d.ts","sourceRoot":"","sources":["../../../../src/temporal/agentexecution/workflows/invoke-agent-execution.ts"],"names":[],"mappings":"AA+GA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AAoO9E,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,IAAI,CAAC,CA8Kf"}