isVercelOidcIssuer (shared/vercel-project.ts)

* Claims eve reads from a Vercel OIDC token payload. Decoded locally without signature verification: callers use the values as stable identifiers (sandbox key derivation, credential routing), never to make authentication decisions. /

// Source: https://github.com/smixs/iva-agent | License: MIT | Copyright 2026 smixs
// Provided via justclaw.it.com; keep this notice with the code.
/**
 * Claims eve reads from a Vercel OIDC token payload.
 *
 * Decoded locally without signature verification: callers use the values
 * as stable identifiers (sandbox key derivation, credential routing),
 * never to make authentication decisions.
 */
export interface VercelOidcTokenClaims {
  readonly ownerId: string | undefined;
  readonly projectId: string | undefined;
}

const EMPTY_CLAIMS: VercelOidcTokenClaims = { ownerId: undefined, projectId: undefined };
const VERCEL_OIDC_ISSUER = "https://oidc.vercel.com";

export function isVercelOidcIssuer(issuer: string | undefined): boolean {
  return issuer === VERCEL_OIDC_ISSUER || issuer?.sta

... (truncated -- full source via MCP)