agent-auth-proxy · packages

Two typed HTTP clients for the agent-auth-proxy server: `AgentClient` exchanges an API key for a JWT and makes proxied requests to third-party APIs on behalf of a user, while `AdminClient` manages users, agents, grants, and tokens. Both decode server errors into typed error classes (`AuthError`, `ScopeError`, `ValidationError`, `UpstreamError`, `AppError`).

Shared Zod schemas, error classes, and TypeScript types for OAuth2 proxy request validation, scope management, and error handling, exported as framework-agnostic primitives that only depend on `zod`.

Fastify plugin and CLI that implements an identity-aware proxy server for agent-to-service communication, handling API key auth, OAuth2 with PKCE, JWT issuance, scope enforcement, credential injection, and audit logging. Exports `buildApp()` and `start()` functions, requires a PostgreSQL database and pairs with `@reaatech/agent-auth-proxy-core` for shared schemas.