Overview
Interchangeable, security-profiled providers for @absolutejs/agent-exchange.
Agent Exchange Providers
@absolutejs/agent-exchange-providersworkspacealphaAIInterchangeable, security-profiled providers for @absolutejs/agent-exchange.
#Installation
BASH
# Workspace project: ~/abs/agent-exchange-providers#Capabilities
Overview
Interchangeable, security-profiled providers for @absolutejs/agent-exchange.
@absolutejs/agent-exchange-webauthn verifies a request-bound,
user-verified WebAuthn approval.
Show 10 more
@absolutejs/agent-exchange-oauth implements a hardened OAuth grant
handoff using PAR, PKCE, issuer identification, resource indicators, RAR, and DPoP.
@absolutejs/agent-exchange-oauth-webcrypto supplies a
non-exportable ES256 DPoP signer.
@absolutejs/agent-exchange-oauth-stores supplies one-time
memory, Redis, and PostgreSQL authorization-session stores.
@absolutejs/agent-exchange-provider-conformance evaluates
provider security capabilities, verifies DPoP proofs, and actively tests A2A sandboxes for negotiation, preparation, credential separation, replay safety, and task/receipt redaction.
@absolutejs/agent-exchange-broker confines an upstream bearer
token to one tenant, exchange, provider, purpose, and deterministic operation.
Repository composition
21 public packages and 0 private workspace projects are versioned and developed together.
Outcomes
What you can build
Hardening checklist
Production guidance
OverviewInterchangeable, security-profiled providers for @absolutejs/agent-exchange.
Follow in order
Troubleshooting path
1
Trace from the first failed boundary
Reproduce the smallest canonical @absolutejs/agent-exchange-providers example, confirm the supported entry point and version in the API explorer, then inspect the first boundary that did not produce its documented result.
#Workspace contents
21 public packages and 0 private workspace projects are maintained in this repository.
@absolutejs/agent-exchange-a2av0.3.0
Public package — Negotiated, authenticated A2A client and server adapters for model-blind AbsoluteJS Agent Exchange.
@absolutejs/agent-exchange-brokerv0.3.0
Public package — Tenant-fenced, one-time token-confined broker contracts for AbsoluteJS Agent Exchange.
@absolutejs/agent-exchange-browserv0.3.0
Public package — Session-bound, model-blind browser verification destinations for Agent Exchange.
@absolutejs/agent-exchange-destinationsv0.3.1
Public package — Interchangeable, deterministic destination adapter contract for Agent Exchange.
@absolutejs/agent-exchange-discoveryv0.1.0
Public package — Owner-reviewable verification-service discovery with authenticated email evidence.
@absolutejs/agent-exchange-googlev0.2.0
Public package — Capability-declared BYO Google Gmail OAuth adapter for Agent Exchange.
@absolutejs/agent-exchange-http-destinationv0.3.0
Public package — Fixed-endpoint HTTPS verification-code destination adapter for Agent Exchange.
@absolutejs/agent-exchange-localv0.1.1
Public package — Model-blind local encrypted code delivery and expiring private clipboard adapters.
@absolutejs/agent-exchange-mandate-storesv0.2.1
Public package — Atomic PostgreSQL and Redis stores for Agent Exchange standing mandates.
@absolutejs/agent-exchange-mandate-webcryptov0.2.0
Public package — Non-exportable WebCrypto ES256 JWS provider for Agent Exchange standing mandates.
@absolutejs/agent-exchange-microsoftv0.2.0
Public package — Capability-declared BYO Microsoft Graph OAuth adapter for Agent Exchange.
@absolutejs/agent-exchange-oauthv0.3.0
Public package — Hardened OAuth grant exchange using PAR, PKCE, RAR, resource indicators, issuer validation, and DPoP.
@absolutejs/agent-exchange-oauth-storesv0.2.0
Public package — Memory, Redis, and PostgreSQL one-time OAuth session stores for Agent Exchange.
@absolutejs/agent-exchange-oauth-webcryptov0.2.1
Public package — Non-exportable WebCrypto ES256 DPoP signer for Agent Exchange OAuth.
@absolutejs/agent-exchange-permissionsv0.2.0
Public package — Service profiles and owner-approved reusable permissions for secure Agent Exchange.
@absolutejs/agent-exchange-postgresv0.1.0
Public package — Durable tenant-scoped Agent Exchange requests, replay protection and broker claims for PostgreSQL.
@absolutejs/agent-exchange-provider-conformancev0.3.1
Public package — OAuth, DPoP, and black-box A2A security conformance checks for Agent Exchange providers.
@absolutejs/agent-exchange-secure-messagingv0.1.0
Public package — Strict-E2EE request and receipt transport for model-blind AbsoluteJS Agent Exchange.
@absolutejs/agent-exchange-secure-messaging-storesv0.0.1
Public package — Tenant-scoped atomic memory, Redis, and PostgreSQL receipt stores for Agent Exchange secure messaging.
@absolutejs/agent-exchange-webauthnv0.5.0
Public package — Request-bound, user-verified WebAuthn approvals for @absolutejs/agent-exchange.
@absolutejs/browser-sessionv0.2.1
Public package — Owner-bound expiring browser sessions for human handoff and protected agent destinations.
#Package commands
Scripts declared by this project’s package manifest.
bun run buildbun run --cwd conformance build && bun run --cwd destinations build && bun run --cwd oauth build && bun run --cwd broker build && bun run --cwd a2a build && bun run --cwd webauthn build && bun run --cwd oauth-webcrypto build && bun run --cwd oauth-stores build && bun run --cwd mandate-webcrypto build && bun run --cwd mandate-stores build && bun run --cwd google build && bun run --cwd microsoft build && bun run --cwd http-destination build && bun run --cwd secure-messaging build && bun run --cwd secure-messaging-stores build && bun run --cwd postgres build && bun run --cwd permissions build && bun run --cwd browser build
bun run check:packagebun run format:check && bun run typecheck && bun run test && bun run build
bun run formatprettier --write "./**/*.{ts,json,md}"
bun run format:checkprettier --check "./**/*.{ts,json,md}"
bun run testbun run --filter './*' test
bun run typecheckbun run --filter './*' typecheck
Workspace project
This workspace project is not published as a standalone npm package. Use its repository and the accurately labeled public or private workspace contents below.