Module credentials 

Structs

CredentialDto

The credential object attached to a task.

DelegatedCredential

credential.delegated — built from RawDelegatedToken, for token_delegate.

InboundCredential

credential.inbound — built from RawInboundToken, for identity_resolve.

Constants

CAP_READ_DELEGATED

Capability a plugin declares to receive a delegated token.

CAP_READ_INBOUND

Capability a plugin declares to receive the inbound credential.

CREDENTIAL_FIELD

Task field the DTO rides on. Contract with worker.py’s CREDENTIAL_FIELD; both sides must agree verbatim.

Functions

attach_credential

Attach the credential object to a task, when the hook and the plugin’s declared capabilities both call for it.