feat(auth): one token per profile, bot-token flow, generated scopes#43

Merged

howar31 merged 18 commits into

mainfrom

feat/auth-bot-flow

May 24, 2026

Commits on May 24, 2026

docs: add auth redesign design + implementation plan

howar31
and
claude
committed
feat(auth): add TokenScope prefix-to-scope helper

howar31
and
claude
committed
refactor(auth): one token per profile; ResolveToken asserts scope

howar31
and
claude
committed
feat(auth): single-token set-token, status [scope]+json, login bot mint

howar31
and
claude
committed
refactor(commands): --as defaults to empty (assertion is opt-in)

howar31
and
claude
committed
feat(auth): refuse user-only verbs under a bot token (exit 3)

howar31
and
claude
committed
test(commands): expect empty --as default (assertion opt-in)

howar31
and
claude
committed
feat(scopes): annotate commands with user/bot scopes; scopeUnion + 37/35 oracle

howar31
and
claude
committed
feat(auth): auth login default scopes generated from the command tree

howar31
and
claude
committed
feat(scopes): generate README manifest user/bot scopes with a CI guard

howar31
and
claude
committed
docs: document bot-mode capability boundary and token acquisition

howar31
and
claude
committed
refactor(commands): remove unused newMsgWriteCommand; gofmt-align annotations

howar31
and
claude
committed
docs: add Bot mode entry to README contents

howar31
and
claude
committed
chore(skills): regenerate after auth surface changes

howar31
and
claude
committed
refactor(auth): structured encryption {backend,status} in status --format json

howar31
and
claude
committed
test(auth): guard legacy dual-token config is ignored

howar31
and
claude
committed
docs: sync CLAUDE/SPEC/README with the auth redesign

howar31
and
claude
committed
fix(auth): emit full status json schema when no profiles configured

howar31
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(auth): one token per profile, bot-token flow, generated scopes#43

feat(auth): one token per profile, bot-token flow, generated scopes#43
howar31 merged 18 commits into
mainfrom
feat/auth-bot-flow

Commits on May 24, 2026

docs: add auth redesign design + implementation plan

feat(auth): add TokenScope prefix-to-scope helper

refactor(auth): one token per profile; ResolveToken asserts scope

feat(auth): single-token set-token, status [scope]+json, login bot mint

refactor(commands): --as defaults to empty (assertion is opt-in)

feat(auth): refuse user-only verbs under a bot token (exit 3)

test(commands): expect empty --as default (assertion opt-in)

feat(scopes): annotate commands with user/bot scopes; scopeUnion + 37/35 oracle

feat(auth): auth login default scopes generated from the command tree

feat(scopes): generate README manifest user/bot scopes with a CI guard

docs: document bot-mode capability boundary and token acquisition

refactor(commands): remove unused newMsgWriteCommand; gofmt-align annotations

docs: add Bot mode entry to README contents

chore(skills): regenerate after auth surface changes

refactor(auth): structured encryption {backend,status} in status --format json

test(auth): guard legacy dual-token config is ignored

docs: sync CLAUDE/SPEC/README with the auth redesign

fix(auth): emit full status json schema when no profiles configured