Module auth 

Auth plumbing for the registry commands.

Token resolution (first hit wins) — the policy is centralised in resolve_token so publish, install (future auth), and login all read from the same ladder.

Modules

credentials

Persistent credential store for the memstead CLI.

device_flow

GitHub OAuth Device Flow client.

domain_key

Local store for the ed25519 keys that authorise domain-scoped publishing.

Structs

ResolvedToken

Enums

TokenSource

Outcome of resolving a token for a given registry host. Source is tracked for future telemetry / “logged in via X” UX; callers today only read token.

Functions

resolve_token

Resolve a token without prompting. Returns Ok(None) when no token is available — the caller decides whether to trigger device flow, fail, or proceed without auth (install doesn’t need one).