@openagentid/oidc (TypeScript)
OIDC/OAuth2 bridge for OpenAgent SDK — maps between human OIDC tokens and OAS agent DIDs + Arsenal capability tokens.
Purpose
OIDC/OAuth2 bridge for OpenAgent SDK — maps between human OIDC tokens and OAS agent DIDs + Arsenal capability tokens.
Read the identity bridges guide.
Source contract
| Field | Value |
|---|---|
| Package | @openagentid/oidc |
| Version | 0.1.1 |
| Language | TypeScript |
| Runtime floor | {'node': '>=20'} |
| Manifest | openagent-sdk/bridges/oidc/typescript/package.json |
| Distribution | Source package; registry publication not verified |
Manifest SHA-256: 23e5c0df27516de6e99bb7e1b970502ce699d6951a9b1db5c94f8ec8353ce2d1. The recorded Git revision identifies the containing repository; the manifest and entry-point hashes identify this working-tree snapshot.
Integration
Use the package root above from an authorized source checkout. Preserve sibling dependencies and their version/feature requirements. Install the runtime and compile the selected package before using its generated artifacts. The task guide describes configuration, trust boundaries, and error behavior. Test/conformance and deployment packages are supporting tools, not interchangeable production identity providers.
Declared package subpaths
{
".": {
"types": "./dist/index.d.ts",
"import": "./dist/index.js",
"require": "./dist/index.cjs"
}
}Exported entry points
The declarations below are extracted from the named entry files. This is a navigable source reference, not compiler-generated documentation of every transitive module. Feature gates and runtime requirements still apply. Private implementation files are not promoted to public APIs merely because they contain a public declaration.
openagent-sdk/bridges/oidc/typescript/src/index.ts
Source SHA-256: ef63062f0c57544bacfe0196199a7cb142c24aa896c35229cc0b303f9cd8f0ed.
export { OidcBridge } from './bridge.js';
export {
type ProviderConfig,
type OidcConfig,
type SingleProviderInput,
providerConfigSchema,
oidcConfigSchema,
singleProviderConfig,
findProvider,
resolveFetch,
} from './config.js';
export {
type DiscoveryDocument,
DiscoveryClient,
discoveryDocumentSchema,
wellKnownUrl,
} from './discovery.js';
export { OidcBridgeError, type OidcErrorCode } from './errors.js';
export {
type TokenExchangeRequest,
type TokenExchangeResponse,
type TokenExchangeError,
tokenExchangeRequestSchema,
GRANT_TYPE_TOKEN_EXCHANGE,
TOKEN_TYPE_JWT,
TOKEN_TYPE_ACT,
TOKEN_TYPE_ACCESS,
createJwtToActRequest,
validateExchangeRequest,
parseScopes,
successResponse,
exchangeErrors,
} from './exchange.js';
export { JwksClient } from './jwks.js';
export {
type ValidatedClaims,
type ActJwtClaims,
decodeJwtHeader,
extractUnverifiedIssuer,
validateJwt,
buildActClaims,
signActJwt,
} from './jwt.js';
export {
type DerivedAgent,
deriveAgentFromClaims,
hmrIdentifierFromClaims,
mapScopes,
} from './mapping.js';
export const VERSION = '0.1.1';