Per-run editor login and role, deleted only when this run created them (and refused when they exist); the allowed-roles option is deleted again when it was absent; the run-token fallback covers pages too; readOnlyHint must be false, not just missing. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>