Metadata-Version: 2.4
Name: tba-capability-token-exchange
Version: 0.4.0.dev2
Summary: Composable protocol-neutral security-token exchange capability.
License-Expression: Apache-2.0
Requires-Python: >=3.10,<3.15
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Requires-Dist: tba-concrete-capability (==0.4.0.dev2)
Requires-Dist: tba-contracts-identity (==0.4.0.dev2)
Description-Content-Type: text/markdown

# tba-capability-token-exchange

Layer-40 protocol-neutral orchestration for security-token exchange.

## Injected dependencies

A required exchange implementation receives a normalized exchange request and
trusted execution context. Runtime composition supplies verification, issuance,
durable lineage, and audit collaborators behind that implementation.

## Operations and readiness

The required operation is `exchange_token`. Construction fails when its target
is absent, so the bound required-operation set determines readiness.

## Protocol consumers

The layer-50 OAuth package maps RFC 8693 request/response fields and errors to
this capability. Other profiles must reuse the typed exchange operation rather
than fork its semantic identity.

## Non-goals

This package does not own RFC wire names, HTTP, deployment settings,
persistence, token signing, key/trust policy, or grant authorization.

