The signed-in immediately.run user, as seen by the sandbox (no token, ever).
Identity is gated by the auth:identity capability (elevated): the host
redacts user to null for any frame not holding it, while the baseline
auth:status still reports whether a session exists. A stage app therefore
sees { status: 'signed-in', user: null } unless it declares auth:identity
under immediately.run.capabilities in its package.json and the user
consents once (a durable per-(app, user) grant). First-party / elevated
frames receive it via their region binding.
The signed-in immediately.run user, as seen by the sandbox (no token, ever).
Identity is gated by the
auth:identitycapability (elevated): the host redactsusertonullfor any frame not holding it, while the baselineauth:statusstill reports whether a session exists. A stage app therefore sees{ status: 'signed-in', user: null }unless it declaresauth:identityunderimmediately.run.capabilitiesin itspackage.jsonand the user consents once (a durable per-(app, user) grant). First-party / elevated frames receive it via their region binding.