Garry Tan 8d7fcd44c2 feat(skill-token): mint scoped tokens per skill spawn ...

Wraps token-registry.createToken/revokeToken with skill-specific
clientId encoding (skill:<name>:<spawn-id>) and read+write defaults.
Skill scripts get a per-spawn capability token bound to browser-driving
commands; the daemon root token never leaves the harness.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-26 04:49:34 -07:00

6.1 KiB

Raw Blame History

View Raw