//! Shared credential-storage primitives for tail-fin.
//!
//! This crate holds the site-agnostic pieces used by every adapter that
//! authenticates against an external service:
//!
//! - [`CredCookie`] — single cookie-jar entry, JSON-serializable.
//! - [`write_owner_only`] — write a file with 0o600 permissions on unix.
//! - [`decode_jwt_sub`] — extract the `sub` (or `user_id`) claim from a JWT.
//!
//! Per-site crates (e.g. `tail-fin-nansen`) wrap these primitives in their
//! own typed credential bundle (`NansenCredentials`, etc.) and bring their
//! own minting / export logic.

mod cookie;
mod jwt;
mod owner_only;

pub use cookie::CredCookie;
pub use jwt::decode_jwt_sub;
pub use owner_only::write_owner_only;
