Module settings 

App-scoped provisioning in the encrypted vault, separate from each owner account grant.

Functions

callback_url 🔒

Builds a callback from the host-selected route and this browser origin, never a posted redirect URL.

can_setup 🔒

Requires explicit app opt-in and a real administrative capability; ordinary connection rights are insufficient.

load 🔒

Reads owner configuration without borrowing another owner’s registration or returning any secret to the browser.

load_shared 🔒

Restores the shared application registration without exposing its secret through status rendering.

reference 🔒

Derives a private configuration reference from trusted application, namespace, owner and provider bindings.

save 🔒

Installs one immutable app registration; future replacements require an explicit credential-rotation operation.

shared_reference 🔒

Names deployment configuration independently of any local user’s account connection.