OptionalapiSHA-256 hash of the caller's MJ API key when invoked via mj_sk_* API key / MCP.
OptionalclientCaller's network IP address (req.ip) when invoked over HTTP/GraphQL. Suitable for abuse
rate-limiting and forensic audit logging; never use as an identity check.
Emits a streaming progress update for LongRunning operations (no-op for Sync).
OptionalhandleOpaque handle for the backing run (e.g. a ProcessRunID), when one has been created.
The provider that owns this execution (use this for data access — never new Metadata()).
OptionalrequestNormalized HTTP Origin header (scheme://host[:port], lowercased, no trailing slash)
when the operation arrived over HTTP/GraphQL. Undefined for in-process calls or requests
lacking an Origin header — origin allowlist checks must fail closed on undefined.
OptionalsessionCaller's authenticated session ID when available from the server transport.
The resolved acting user for permission-scoped data work.
Server-side execution context handed to BaseRemotableOperation.ExecuteServer (and through it to
AuthorizeandInternalExecute) when a Remote Operation runs in-process on the server. It carries everything a server implementation needs without coupling the operation to any transport.