Registry Token Service (pointer)

Verified against commit 942a18727c (2026-09-26, DOC-2 of SPRINT_20260926_001). Re-verify against src/Registry/StellaOps.Registry.TokenService/Program.cs and devops/release/bundle/docker-compose.yml.

Service wiring (image, database and role, compose profile, bundle presence) is generated in the service inventory; this dossier does not restate it.

This directory holds only the generated OpenAPI reference. The dossier for this service is registry/: registry/architecture.md(design, token-exchange flow, plan evaluation, persistence, Evidence) and registry/README.md(endpoints, configuration, operations).

registry-token is the Registry Token Service (src/Registry/StellaOps.Registry.TokenService): it exchanges an Authority-issued access token for a short-lived Docker-registry bearer JWT after enforcing plan and licence constraints, and hosts the plan-administration API.

It is one of the two roles of the Stella Registry family. The OCI data plane that accepts its tokens is registry-web (src/Registry/StellaOps.Registry.WebService); the token service itself does not store or serve images.

Docs in this directory

• api-reference.md + openapi/ — generated wire shape (tools/scripts/docs/regen-from-openapi.ps1 -Service registry-token). Not a dossier; do not hand-edit.