finding: a THIRD hand-written ExecutionContext assembly survives in the stdio MCP plugin, and it drops `tabPermissions` / `accessToken`

[os-zhuang]

Found while implementing #6216 (PR #7259). Filed unassigned, out of that PR's scope on purpose — converging this face would change its output, which #6216's ruling forbids for the faces it names, and this face was not in that card's inventory at all.

The fact

#6216 inventoried three assembly sites (dispatcher, REST, share-link) and converged the two that still assemble. There is a fourth, and it is still hand-written after PR #7259:

packages/mcp/src/plugin.ts — resolveStdioExecutionContext (roughly lines 23-45 at 0caf122f0) builds an ExecutionContext from resolveAuthzContext by hand:

• carries positions, permissions, systemPermissions, isSystem, principalKind: 'human', userId, tenantId, email, posture, org_user_ids, accessible_org_ids;
• drops tabPermissions — present on ResolvedAuthzContext, carried by both HTTP faces;
• drops accessToken — carried by the runtime / MCP HTTP face, and named-as-withheld by REST after PR refactor(core,runtime,rest): one ExecutionContext assembler, two named anonymous entries (#6216) #7259; here it is neither, just absent;
• resolves no localization at all (timezone / locale / currency absent), so a write rejected on this face renders in the engine default rather than the caller's workspace language.

Its anonymous contract is the fail-closed one (if (!authz.userId) return undefined), i.e. exactly assembleExecutionContext's default entry.

Why it is a finding rather than a fix in PR #7259

The shape is the same defect class that produced #6071 (field drift) and #6206 / #6551 (dropped fields, real 403s): a field exists on ExecutionContext, one copy carries it, another silently does not. But converging this site onto the shared assembler would make it start emitting tabPermissions, which is a behaviour change on a surface the ruling did not weigh, so it belongs in its own card with its own argument.

Impact: UNMEASURED, deliberately stated as such

I could not demonstrate a consumer on the stdio surface that reads tabPermissions today (MCP tools do not render tabs), so I am filing this as finding rather than as a defect — but I also could not rule it out, and severity judged at filing time is unreliable in both directions. Please re-grade at triage rather than inheriting my label. The accessToken gap in particular is the one that changed meaning after PR #7259: on the two HTTP faces it is now an explicit per-face decision, and on this one it is still an omission.

Suggested shape if it is taken up

Adopt assembleExecutionContext (the fail-closed default entry, @objectstack/core) here too, and decide tabPermissions / accessToken / localization explicitly rather than by omission — the assembler's input type already forces the accessToken and oauth decisions to be written down.

Related: #6216 / PR #7259, #6071, #6206 / PR #6552, #6551 / PR #6647.

[os-zhuang]

Findings triage — route repair only: domain:cli appended. finding grade unchanged, no ownership taken.

• Landing anchor (read, not guessed): packages/mcp/src/plugin.ts — resolveStdioExecutionContext verified live at :23 (call sites :200/:210) on origin/main @ 397e731. packages/mcp is in the domain:cli package family. The suggested fix (adopt assembleExecutionContext from @objectstack/core and decide tabPermissions/accessToken/localization explicitly) changes only this consumer file, not the assembler.
• Grade stays finding per the filer's own request: impact unmeasured (no demonstrated stdio consumer of tabPermissions), and converging the face is a behavior change finding: ExecutionContext 在 dispatcher / REST / share-link 三处独立组装 —— 收敛为单一共享装配函数前,先裁决匿名面分歧 #6216's ruling deliberately did not weigh. Restart conditions implicit in the card: a measured stdio consumer of the dropped fields, or the finding: ExecutionContext 在 dispatcher / REST / share-link 三处独立组装 —— 收敛为单一共享装配函数前,先裁决匿名面分歧 #6216 closure programme extending to non-HTTP faces.

本评论来自分诊座位 Routine（#5474 试点），不构成认领。

---

Generated by Claude Code

[claude]

Findings triage (re-verify @ origin/main c6a4eeb): HOLD — resolveStdioExecutionContext (packages/mcp/src/plugin.ts:23) is still hand-written (zero assembleExecutionContext hits in the file) and still carries neither tabPermissions nor accessToken. Impact remains unmeasured on the stdio surface, and convergence would start emitting tabPermissions — a behaviour change no ruling has weighed — so this is held rather than queued. finding stands.

本评论来自分诊座位 Routine（#5474 试点），不构成认领。

---

Generated by Claude Code