DevelopmentCallerResolver

The host's callers in a development profile (a profile of wow.dev-profiles), when the application has no CallerResolver and CoSec is off: the caller the request's identity headers (DevelopmentHeaders) name, so a service runs and is tried out at every caller level without an identity provider. Any client sets these headers, so the host wires it only when a development profile is active: outside one, it never does.

• USER: the caller's subject. Without it, the request is the anonymous caller of defaultTenant, and the other identity headers are ignored but APP.

• OWNER: the owner of its scope, an owner-level caller that reads and writes its own aggregates alone; without it, a tenant-level caller. The owner is never the user unless the header says so.

• ROLES: its roles, comma-separated, the attribute ROLES_ATTRIBUTE as CoSec's resolver names it.

• TENANT: its tenant; defaultTenant (wow.tenant.default) without it.

• APP: the application it calls in, its standard attribute Caller.APP, which the edge records as each command's request fact app_id; CoSec's resolver takes the one CoSec authorized instead. The anonymous caller keeps it too.

A client writes a caller as these headers with its development credential (UserCredential.DEVELOPMENT of wow-client), as a test server's typed clients do.