Module provider 

Typed OAuth provider identity, descriptors, registry validation, and dispatch.

This registry is deliberately about authentication policy, not runtime wire routing. CLI aliases are normalized before a value enters this module.

Structs

OAuthProviderDescriptor

OAuthProviderRegistry

ProviderReference

RefreshEndpoints

Overrides for the endpoints a refresh talks to. Empty in production; tests point the Muse key mint and the Anthropic token endpoint at loopback fakes so a broker-level test can never reach the real ones.

Enums

BrokerCredentialStrategy

How a runtime may obtain a usable credential from the broker.

OAuthProviderId

ProviderBehavior

Constants

DESCRIPTORS

Functions

login

Interactive login into the provider’s default slot.

login_into

Interactive login persisting ONLY into the addressed slot. A login into a named account never touches the default slot (or any other).

login_unsaved

Interactive login that returns the credential WITHOUT persisting it, so the caller can run pre-persistence checks (duplicate identity) and then store it with save_credential.

parse_cli_provider

CLI-only normalization. Internal callers must carry the canonical typed ID.

refresh

refresh_via

refresh through endpoints.

registry