… API
The shape behind a private design-to-build skill, sanitized: one long-lived
broker over streamable HTTP instead of a browser per stdio session; tabs as
a cache, closed freely outside a turn and never during one; turn state read
from the app's own traffic with a silence failsafe; headless Chrome caught
by what it says (UA, client-hint brand, screen) rather than what it lacks;
a dead session reported to the agent rather than a phone; headersHelper to
keep the token out of the MCP config; and the in-session `claude mcp add`
trap.
The skill itself stays in the private setup: it names machines.
Co-Authored-By: Claude Opus 5.5 <[email protected]>
