Metadata-Version: 2.4
Name: tba-capability-token-revocation
Version: 0.4.0.dev2
Summary: Composable protocol-neutral token revocation capability for TBA.
License-Expression: Apache-2.0
Requires-Python: >=3.10,<3.15
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.10
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Requires-Dist: tba-concrete-capability (==0.4.0.dev2)
Requires-Dist: tba-contracts-identity (==0.4.0.dev2)
Description-Content-Type: text/markdown

# tba-capability-token-revocation

Layer-40 orchestration for protocol-neutral durable token revocation.

## Injected dependencies

A required revocation callable mutates durable token state; an optional audit
callable records the lifecycle event. Both may be synchronous or asynchronous.

## Operations and readiness

`revoke_token` is required and `record_audit_event` is optional. Readiness
follows the revocation binding, while the report separately exposes audit
availability.

## Protocol consumers

The layer-50 OAuth package maps RFC 7009 behavior to this capability. Other
protocol profiles reuse the normalized revocation result where applicable.

## Non-goals

This package does not parse HTTP, authenticate callers, select RFC responses,
open sessions, resolve token profiles, or own revocation storage.

