Module invocation 

Sealed-invocation plaintext body schemas and the basil content-type registry.

Envelope canonicalization moved to the basil-cose strict COSE profile; this module owns what stays basil-specific: the registered COSE content types (RFC 9052 protected header 3) that select a plaintext body schema, the deterministic CBOR body codecs, and InvocationStatus.

Structs

InvocationStatus

Status carried inside encrypted invocation response bodies.

MintJwtInvocationRequest

CBOR body selected by CONTENT_TYPE_MINT_JWT_REQUEST.

MintJwtInvocationResponse

CBOR body selected by CONTENT_TYPE_MINT_JWT_RESPONSE.

MintNatsUserInvocationRequest

CBOR body selected by CONTENT_TYPE_MINT_NATS_USER_REQUEST.

MintNatsUserInvocationResponse

CBOR body selected by CONTENT_TYPE_MINT_NATS_USER_RESPONSE.

SignInvocationRequest

CBOR body selected by CONTENT_TYPE_SIGN_REQUEST.

SignInvocationResponse

CBOR body selected by CONTENT_TYPE_SIGN_RESPONSE.

Enums

InvocationError

Errors returned while validating or canonicalizing sealed invocation data.

InvocationStatusCode

Status code carried inside encrypted invocation response bodies.

Constants

CONTENT_TYPE_MINT_JWT_REQUEST

COSE content type for MintJwtInvocationRequest plaintext bodies.

CONTENT_TYPE_MINT_JWT_RESPONSE

COSE content type for MintJwtInvocationResponse plaintext bodies.

CONTENT_TYPE_MINT_NATS_USER_REQUEST

COSE content type for MintNatsUserInvocationRequest plaintext bodies.

CONTENT_TYPE_MINT_NATS_USER_RESPONSE

COSE content type for MintNatsUserInvocationResponse plaintext bodies.

CONTENT_TYPE_SIGN_REQUEST

COSE content type for SignInvocationRequest plaintext bodies.

CONTENT_TYPE_SIGN_RESPONSE

COSE content type for SignInvocationResponse plaintext bodies.

DEFAULT_EXPIRES_AFTER_SECS

Default signed request TTL when expires_at_unix is absent.

INVOCATION_CONTENT_TYPES

Every registered basil invocation content type, request/response pairs in registry order. Only the sign pair is executable today; the mint pairs are reserved wire-format contracts pinned by fixtures.

SECURE_MESSAGE_VERSION

The only supported sealed-invocation envelope version.