1 Commits

Author	SHA1	Message	Date
Garry Tan	8d7fcd44c2	feat(skill-token): mint scoped tokens per skill spawn ... Wraps token-registry.createToken/revokeToken with skill-specific clientId encoding (skill:<name>:<spawn-id>) and read+write defaults. Skill scripts get a per-spawn capability token bound to browser-driving commands; the daemon root token never leaves the harness. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-04-26 04:49:34 -07:00