@owlmeans/oidc 0.1.18-rc.29 → 0.1.18-rc.30

package/README.md

@@ -1,6 +1,6 @@
 # @owlmeans/oidc
 
-Shared OIDC protocol abstractions — guard/gate aliases, models, and entrypoint declarations used by both server and browser OIDC packages.
+Shared OIDC protocol abstractions — guard/gate aliases, models, and immutable protocol declarations used by both server and browser OIDC packages.
 
 ## Overview
 
@@ -12,7 +12,7 @@ Shared OIDC protocol abstractions — guard/gate aliases, models, and entrypoint
 ## Installation
 
 ```bash
-bun add @owlmeans/oidc@^0.1.18-rc.24
+bun add @owlmeans/oidc@^0.1.18-rc.30
 ```
 
 ## Usage
@@ -74,9 +74,11 @@ import { OIDC_GUARD } from '@owlmeans/oidc'
 - `GOOGLE_CLIENT_AUTH` identifies the browser Google auth plugin registered by `@owlmeans/web-oidc-rp/auth/plugins`.
 - `OIDC_GATE` is for OIDC-backed authorization. Apps that only use Google/OIDC for login and authorize against local identity records should define their own product gate alias.
 
-### `entrypoints`
+### `oidcProtocols`
 
-Array of dispatcher entrypoint declarations: `POST /authenticate/oidc/init` and `POST /authenticate/oidc/process`.
+Immutable dispatcher declaration tree: `POST /authenticate/oidc/init` and
+`POST /authenticate/oidc/process`. The relying-party packages bind these exact protocol objects
+locally; do not recreate them or consume an alias-addressed compatibility list.
 
 ## Related Packages
 
@@ -93,7 +95,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.20
+npx @owlmeans/agent-skills@^0.1.18-rc.21
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/oidc",
-  "version": "0.1.18-rc.29",
-  "generatedAt": "2026-09-12T14:18:54.789Z",
+  "version": "0.1.18-rc.30",
+  "generatedAt": "2026-09-15T12:21:31.917Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/oidc/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/oidc
 
 **Layer:** Core
-**Install:** `"@owlmeans/oidc": "^0.1.18-rc.29"` in `dependencies`
+**Install:** `"@owlmeans/oidc": "^0.1.18-rc.30"` in `dependencies`
 
 The shared half of the OIDC stack: no transport, no library. It owns the names, the shapes and the
 guard that the server relying party (`@owlmeans/server-oidc-rp`), the browser relying party

package/build/advertise.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=advertise.d.ts.map

package/build/advertise.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advertise.d.ts","sourceRoot":"","sources":["../src/advertise.ts"],"names":[],"mappings":""}

package/build/advertise.js

@@ -0,0 +1,28 @@
+import { apiConfigPlugin, every } from '@owlmeans/api-config';
+apiConfigPlugin({
+    allow: {
+        oidc: {
+            clientCookie: true,
+            restrictedProviders: true,
+            providers: every({
+                entityId: true,
+                service: true,
+                discoveryUrl: true,
+                basePath: true,
+                clientId: true,
+                redirectUri: true,
+                extraScopes: true,
+                authEndpoint: true,
+                tokenEndpoint: true,
+                userinfoEndpoint: true,
+                idOverride: true,
+                def: true,
+                label: true,
+                icon: true,
+                order: true,
+                hidden: true,
+            }, value => value != null && typeof value === 'object' && value.internal !== true),
+        },
+    },
+});
+//# sourceMappingURL=advertise.js.map

package/build/advertise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advertise.js","sourceRoot":"","sources":["../src/advertise.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE7D,eAAe,CAAC;IACd,KAAK,EAAE;QACL,IAAI,EAAE;YACJ,YAAY,EAAE,IAAI;YAClB,mBAAmB,EAAE,IAAI;YACzB,SAAS,EAAE,KAAK,CAAC;gBACf,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,IAAI;gBAClB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,IAAI;gBAClB,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,UAAU,EAAE,IAAI;gBAChB,GAAG,EAAE,IAAI;gBACT,KAAK,EAAE,IAAI;gBACX,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,IAAI;aACb,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,KAAgC,CAAC,QAAQ,KAAK,IAAI,CAAC;SAC/G;KACF;CACF,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/oidc",
-  "version": "0.1.18-rc.29",
+  "version": "0.1.18-rc.30",
   "license": "MIT",
   "type": "module",
   "scripts": {
@@ -21,14 +21,14 @@
     }
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.18-rc.17",
-    "@owlmeans/auth-common": "^0.1.18-rc.21",
-    "@owlmeans/basic-envelope": "^0.1.18-rc.20",
-    "@owlmeans/config": "^0.1.18-rc.20",
-    "@owlmeans/context": "^0.1.18-rc.16",
-    "@owlmeans/entrypoint": "^0.1.18-rc.19",
-    "@owlmeans/resource": "^0.1.18-rc.17",
-    "@owlmeans/route": "^0.1.18-rc.17"
+    "@owlmeans/auth": "^0.1.18-rc.18",
+    "@owlmeans/auth-common": "^0.1.18-rc.22",
+    "@owlmeans/basic-envelope": "^0.1.18-rc.21",
+    "@owlmeans/config": "^0.1.18-rc.21",
+    "@owlmeans/context": "^0.1.18-rc.17",
+    "@owlmeans/entrypoint": "^0.1.18-rc.20",
+    "@owlmeans/resource": "^0.1.18-rc.18",
+    "@owlmeans/route": "^0.1.18-rc.18"
   },
   "peerDependencies": {
     "ajv": "*"