Browser approval
Device codes keep credentials out of terminals while users inspect requested scopes.
Potion + Clawk
Authorize once in the browser, resolve only entitled artifacts, and install against signed checksums.
Device codes keep credentials out of terminals while users inspect requested scopes.
Free and entitled premium artifacts share one versioned contract; unauthorized source stays private.
Receive manifests, dependencies, permissions, adapters, archive URLs, and checksums together.