eve
Version:
Filesystem-first framework for durable backend AI agents that run anywhere.
26 lines (25 loc) • 1.1 kB
TypeScript
/**
* Claims eve reads from a Vercel OIDC token payload.
*
* Decoded locally without signature verification: callers use the values
* as stable identifiers (sandbox key derivation, credential routing),
* never to make authentication decisions.
*/
export interface VercelOidcTokenClaims {
readonly ownerId: string | undefined;
readonly projectId: string | undefined;
}
/**
* Decodes the payload claims of a Vercel OIDC token. Values that are not
* decodable JWTs, or that carry no recognized claims, decode to empty
* claims — callers only ever check individual fields.
*/
export declare function decodeVercelOidcTokenClaims(token: string): VercelOidcTokenClaims;
/**
* Resolves the Vercel project id visible to this process: the
* `VERCEL_PROJECT_ID` env var when exposed, otherwise the `project_id`
* claim of `VERCEL_OIDC_TOKEN`. Both sources exist at build time and at
* deployed runtime and name the same project, so identifiers derived
* from this value agree across the two phases.
*/
export declare function resolveVercelProjectIdFromEnvironment(): string | undefined;