A single user-chosen file: a capability token (redeemed to import it) and its display name — never a path.
Display name of the chosen file.
Single-use, short-lived grant for the chosen file.
A single user-chosen file: a capability token (redeemed to import it) and its display name — never a path.