OptionalrolesOptional roles attached to the active identity.
Runner does not interpret these automatically unless a task identity gate
or middleware.task.identityChecker explicitly requests them. If your app
models inherited roles, expand the effective role set before binding the
identity so the gate sees the right access surface.
OptionaltenantStable tenant identifier used to partition tenant-aware framework state when present.
OptionaluserStable authenticated user identifier used by user-aware identity scopes when present.
Value carried by
asyncContexts.identity.This built-in context is the default runtime identity grouper. Apps can also define their own
r.asyncContext(...).configSchema(...)accessor and pass it torun(..., { identity })when they want a custom runtime identity source.