Carry OAuth scopes through extraction to the invocation credential

[RhysSullivan]

Tool catalogs are compiled with no notion of scope: an operation's security declaration never survives extraction, and the credential built for dispatch never carries what the connection's grant covers.

This extracts per-operation security scopes into ExtractedOperation and OperationBinding (all three compile paths; optional so stored bindings keep decoding), adds grantedScopes to ToolInvocationCredential sourced from the connection row's oauth_scope, and uses both to annotate scope-insufficient 403s with the exact required and granted scopes.

Advisory-only by design: scope-string containment needs provider semantics (a broad Google scope does not textually contain a narrow one), so nothing is blocked locally and unknown grants fail open. Catalog projection by scope can build on this plumbing as a follow-up.

Refs #1384. Stacked on #1385.

Stack

1. Classify scope-insufficient 403s as oauth_scope_insufficient #1385
2. Carry OAuth scopes through extraction to the invocation credential #1386 👈 current

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	90c9a56	Commit Preview URL Branch Preview URL	Jul 10 2026, 09:35 AM

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	executor-cloud	90c9a56	Jul 10 2026, 09:36 AM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1386

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1386

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1386

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1386

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1386

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1386

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1386

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1386

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1386

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1386

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1386

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1386

executor

npm i https://pkg.pr.new/executor@1386

commit: 90c9a56