Metadata-Version: 2.4
Name: tba-capability-token-issuance
Version: 0.4.0.dev2
Summary: Composable protocol-neutral token-pair issuance and refresh rotation capability.
License-Expression: Apache-2.0
Requires-Python: >=3.10,<3.15
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Requires-Dist: tba-concrete-capability (==0.4.0.dev2)
Requires-Dist: tba-contracts-identity (==0.4.0.dev2)
Description-Content-Type: text/markdown

# tba-capability-token-issuance

Layer-40 orchestration for token-pair issuance and refresh rotation.

## Injected dependencies

Required callables issue a token pair and redeem/rotate a refresh token. An
optional audit callable records lifecycle events. Runtime composition supplies
signing providers and durable layer-30 state behind these callables.

## Operations and readiness

Required operations are `issue_token_pair` and `redeem_refresh_token`; optional
`record_audit_event` reports unavailable when unbound. Readiness requires both
issuance targets.

## Protocol consumers

Layer-50 OAuth grant/token bindings and OIDC token flows consume these
operations with explicit token profiles.

## Non-goals

This package does not parse requests, authenticate clients, select grants,
sign tokens, choose token profiles, open sessions, or own lifecycle state.

