@kya-os/mcp-i-cloudflare 1.0.0

package/dist/providers/crypto.js

@@ -0,0 +1,132 @@
+/**
+ * Web Crypto Provider for Cloudflare Workers
+ *
+ * Implements CryptoProvider using the Web Crypto API available in Workers.
+ */
+import { CryptoProvider } from '@kya-os/mcp-i-core';
+export class WebCryptoProvider extends CryptoProvider {
+    /**
+     * Sign data using Ed25519
+     */
+    async sign(data, privateKeyBase64) {
+        const privateKeyBytes = this.base64ToBytes(privateKeyBase64);
+        // Convert raw Ed25519 key to PKCS8 format for Web Crypto
+        const pkcs8 = this.wrapPrivateKeyPKCS8(privateKeyBytes);
+        const cryptoKey = await crypto.subtle.importKey('pkcs8', pkcs8.buffer.slice(pkcs8.byteOffset, pkcs8.byteOffset + pkcs8.byteLength), {
+            name: 'Ed25519',
+            namedCurve: 'Ed25519'
+        }, false, ['sign']);
+        const signature = await crypto.subtle.sign('Ed25519', cryptoKey, data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
+        return new Uint8Array(signature);
+    }
+    /**
+     * Verify Ed25519 signature
+     */
+    async verify(data, signature, publicKeyBase64) {
+        try {
+            const publicKeyBytes = this.base64ToBytes(publicKeyBase64);
+            // Convert raw Ed25519 key to SubjectPublicKeyInfo format
+            const spki = this.wrapPublicKeySPKI(publicKeyBytes);
+            const cryptoKey = await crypto.subtle.importKey('spki', spki.buffer.slice(spki.byteOffset, spki.byteOffset + spki.byteLength), {
+                name: 'Ed25519',
+                namedCurve: 'Ed25519'
+            }, false, ['verify']);
+            return await crypto.subtle.verify('Ed25519', cryptoKey, signature.buffer.slice(signature.byteOffset, signature.byteOffset + signature.byteLength), data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Generate Ed25519 key pair
+     */
+    async generateKeyPair() {
+        const keyPair = await crypto.subtle.generateKey({
+            name: 'Ed25519',
+            namedCurve: 'Ed25519'
+        }, true, ['sign', 'verify']);
+        // Export private key as PKCS8
+        const privateKeyPKCS8 = await crypto.subtle.exportKey('pkcs8', keyPair.privateKey);
+        const privateKeyBytes = this.extractRawPrivateKey(new Uint8Array(privateKeyPKCS8));
+        // Export public key as SPKI
+        const publicKeySPKI = await crypto.subtle.exportKey('spki', keyPair.publicKey);
+        const publicKeyBytes = this.extractRawPublicKey(new Uint8Array(publicKeySPKI));
+        return {
+            privateKey: this.bytesToBase64(privateKeyBytes),
+            publicKey: this.bytesToBase64(publicKeyBytes)
+        };
+    }
+    /**
+     * Calculate SHA-256 hash
+     */
+    async hash(data) {
+        const hashBuffer = await crypto.subtle.digest('SHA-256', data.buffer.slice(data.byteOffset, data.byteOffset + data.byteLength));
+        return new Uint8Array(hashBuffer);
+    }
+    /**
+     * Generate random bytes
+     */
+    async randomBytes(length) {
+        const buffer = new Uint8Array(length);
+        crypto.getRandomValues(buffer);
+        return buffer;
+    }
+    // Helper methods for key format conversion
+    wrapPrivateKeyPKCS8(rawKey) {
+        // PKCS8 wrapper for Ed25519 private key
+        const pkcs8Header = new Uint8Array([
+            0x30, 0x2e, // SEQUENCE (46 bytes)
+            0x02, 0x01, 0x00, // INTEGER version 0
+            0x30, 0x05, // SEQUENCE (5 bytes) - Algorithm
+            0x06, 0x03, 0x2b, 0x65, 0x70, // OID for Ed25519
+            0x04, 0x22, // OCTET STRING (34 bytes)
+            0x04, 0x20 // OCTET STRING (32 bytes) - the actual key
+        ]);
+        // Handle both 32-byte and 64-byte keys
+        const keyBytes = rawKey.length === 64 ? rawKey.slice(0, 32) : rawKey;
+        const result = new Uint8Array(pkcs8Header.length + keyBytes.length);
+        result.set(pkcs8Header);
+        result.set(keyBytes, pkcs8Header.length);
+        return result;
+    }
+    wrapPublicKeySPKI(rawKey) {
+        // SubjectPublicKeyInfo wrapper for Ed25519 public key
+        const spkiHeader = new Uint8Array([
+            0x30, 0x2a, // SEQUENCE (42 bytes)
+            0x30, 0x05, // SEQUENCE (5 bytes) - Algorithm
+            0x06, 0x03, 0x2b, 0x65, 0x70, // OID for Ed25519
+            0x03, 0x21, // BIT STRING (33 bytes)
+            0x00 // No unused bits
+        ]);
+        const result = new Uint8Array(spkiHeader.length + rawKey.length);
+        result.set(spkiHeader);
+        result.set(rawKey, spkiHeader.length);
+        return result;
+    }
+    extractRawPrivateKey(pkcs8) {
+        // Extract the raw 32-byte key from PKCS8 format
+        // The key starts at offset 16 (after headers)
+        return pkcs8.slice(16, 48);
+    }
+    extractRawPublicKey(spki) {
+        // Extract the raw 32-byte key from SPKI format
+        // The key starts at offset 12 (after headers)
+        return spki.slice(12, 44);
+    }
+    base64ToBytes(base64) {
+        const binaryString = atob(base64);
+        const bytes = new Uint8Array(binaryString.length);
+        for (let i = 0; i < binaryString.length; i++) {
+            bytes[i] = binaryString.charCodeAt(i);
+        }
+        return bytes;
+    }
+    bytesToBase64(bytes) {
+        let binaryString = '';
+        for (let i = 0; i < bytes.length; i++) {
+            binaryString += String.fromCharCode(bytes[i]);
+        }
+        return btoa(binaryString);
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/providers/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/providers/crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEpD,MAAM,OAAO,iBAAkB,SAAQ,cAAc;IACnD;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,IAAgB,EAAE,gBAAwB;QACnD,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC;QAE7D,yDAAyD;QACzD,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,OAAO,EACP,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAA2B,EACnG;YACE,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,SAAS;SACtB,EACD,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,SAAS,EACT,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAA2B,CAChG,CAAC;QAEF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CACV,IAAgB,EAChB,SAAqB,EACrB,eAAuB;QAEvB,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;YAE3D,yDAAyD;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YAEpD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAA2B,EAC/F;gBACE,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,SAAS;aACtB,EACD,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,SAAS,EACT,SAAS,EACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAA2B,EACnH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAA2B,CAChG,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAC7C;YACE,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,SAAS;SACtB,EACD,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;QAEF,8BAA8B;QAC9B,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACnF,MAAM,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC;QAEnF,4BAA4B;QAC5B,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/E,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QAE/E,OAAO;YACL,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC;YAC/C,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,IAAgB;QACzB,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAA2B,CAAC,CAAC;QAC1J,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,2CAA2C;IAEnC,mBAAmB,CAAC,MAAkB;QAC5C,wCAAwC;QACxC,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC;YACjC,IAAI,EAAE,IAAI,EAAE,sBAAsB;YAClC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB;YACtC,IAAI,EAAE,IAAI,EAAE,iCAAiC;YAC7C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB;YAChD,IAAI,EAAE,IAAI,EAAE,0BAA0B;YACtC,IAAI,EAAE,IAAI,CAAE,2CAA2C;SACxD,CAAC,CAAC;QAEH,uCAAuC;QACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAErE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,iBAAiB,CAAC,MAAkB;QAC1C,sDAAsD;QACtD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;YAChC,IAAI,EAAE,IAAI,EAAE,sBAAsB;YAClC,IAAI,EAAE,IAAI,EAAE,iCAAiC;YAC7C,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB;YAChD,IAAI,EAAE,IAAI,EAAE,wBAAwB;YACpC,IAAI,CAAC,iBAAiB;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,oBAAoB,CAAC,KAAiB;QAC5C,gDAAgD;QAChD,8CAA8C;QAC9C,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC;IAEO,mBAAmB,CAAC,IAAgB;QAC1C,+CAA+C;QAC/C,8CAA8C;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,KAAK,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,aAAa,CAAC,KAAiB;QACrC,IAAI,YAAY,GAAG,EAAE,CAAC;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;CACF"}

package/dist/providers/identity.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Cloudflare Workers identity provider using KV or environment variables
+ */
+import { IdentityProvider } from "@kya-os/mcp-i-core/dist/types/providers";
+import { AgentIdentity } from "@kya-os/contracts/handshake";
+export interface CloudflareEnv {
+    MCP_IDENTITY_DID?: string;
+    MCP_IDENTITY_KEY_ID?: string;
+    MCP_IDENTITY_PRIVATE_KEY?: string;
+    MCP_IDENTITY_PUBLIC_KEY?: string;
+    IDENTITY_KV?: KVNamespace;
+}
+export declare class WorkerIdentityProvider extends IdentityProvider {
+    private env;
+    constructor(env: CloudflareEnv);
+    /**
+     * Load identity from environment variables or KV
+     */
+    loadIdentity(): Promise<AgentIdentity | null>;
+    /**
+     * Store identity in KV (if available)
+     */
+    storeIdentity(identity: AgentIdentity): Promise<void>;
+    /**
+     * Check if identity exists
+     */
+    hasIdentity(): Promise<boolean>;
+    /**
+     * Delete identity from KV
+     */
+    deleteIdentity(): Promise<void>;
+}
+//# sourceMappingURL=identity.d.ts.map

package/dist/providers/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/providers/identity.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,MAAM,WAAW,aAAa;IAE5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAGjC,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,qBAAa,sBAAuB,SAAQ,gBAAgB;IAC9C,OAAO,CAAC,GAAG;gBAAH,GAAG,EAAE,aAAa;IAItC;;OAEG;IACG,YAAY,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAuBnD;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3D;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAKrC;;OAEG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;CAKtC"}

package/dist/providers/identity.js

@@ -0,0 +1,62 @@
+/**
+ * Cloudflare Workers identity provider using KV or environment variables
+ */
+import { IdentityProvider } from "@kya-os/mcp-i-core/dist/types/providers";
+export class WorkerIdentityProvider extends IdentityProvider {
+    env;
+    constructor(env) {
+        super();
+        this.env = env;
+    }
+    /**
+     * Load identity from environment variables or KV
+     */
+    async loadIdentity() {
+        // First, try environment variables (for production)
+        if (this.env.MCP_IDENTITY_DID && this.env.MCP_IDENTITY_PRIVATE_KEY) {
+            return {
+                did: this.env.MCP_IDENTITY_DID,
+                keyId: this.env.MCP_IDENTITY_KEY_ID || `${this.env.MCP_IDENTITY_DID}#key-1`,
+                privateKey: this.env.MCP_IDENTITY_PRIVATE_KEY,
+                publicKey: this.env.MCP_IDENTITY_PUBLIC_KEY,
+                createdAt: new Date().toISOString() // We don't have the original timestamp
+            };
+        }
+        // Then try KV storage (for development/dynamic)
+        if (this.env.IDENTITY_KV) {
+            const identityJson = await this.env.IDENTITY_KV.get('identity');
+            if (identityJson) {
+                return JSON.parse(identityJson);
+            }
+        }
+        return null;
+    }
+    /**
+     * Store identity in KV (if available)
+     */
+    async storeIdentity(identity) {
+        if (this.env.IDENTITY_KV) {
+            await this.env.IDENTITY_KV.put('identity', JSON.stringify(identity));
+        }
+        else {
+            // In production, identities should be set via environment variables
+            console.warn('No KV namespace available for identity storage. Set identity via environment variables.');
+        }
+    }
+    /**
+     * Check if identity exists
+     */
+    async hasIdentity() {
+        const identity = await this.loadIdentity();
+        return identity !== null;
+    }
+    /**
+     * Delete identity from KV
+     */
+    async deleteIdentity() {
+        if (this.env.IDENTITY_KV) {
+            await this.env.IDENTITY_KV.delete('identity');
+        }
+    }
+}
+//# sourceMappingURL=identity.js.map

package/dist/providers/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/providers/identity.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAc3E,MAAM,OAAO,sBAAuB,SAAQ,gBAAgB;IACtC;IAApB,YAAoB,GAAkB;QACpC,KAAK,EAAE,CAAC;QADU,QAAG,GAAH,GAAG,CAAe;IAEtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY;QAChB,oDAAoD;QACpD,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;YACnE,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB;gBAC9B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,QAAQ;gBAC3E,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,wBAAwB;gBAC7C,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,uBAAwB;gBAC5C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,uCAAuC;aAC5E,CAAC;QACJ,CAAC;QAED,gDAAgD;QAChD,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAChE,IAAI,YAAY,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAkB,CAAC;YACnD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAuB;QACzC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,OAAO,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,QAAQ,KAAK,IAAI,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF"}

package/dist/providers/nonce-cache.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Cloudflare KV-based nonce cache provider
+ */
+import { NonceCacheProvider } from "@kya-os/mcp-i-core/dist/types/providers";
+export declare class CloudflareKVNonceCache extends NonceCacheProvider {
+    private kv;
+    private keyPrefix;
+    constructor(kv: KVNamespace, keyPrefix?: string);
+    private getKey;
+    has(nonce: string): Promise<boolean>;
+    add(nonce: string, ttl: number): Promise<void>;
+    /**
+     * Cleanup is handled automatically by KV TTL
+     */
+    cleanup(): Promise<void>;
+}
+//# sourceMappingURL=nonce-cache.d.ts.map

package/dist/providers/nonce-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-cache.d.ts","sourceRoot":"","sources":["../../src/providers/nonce-cache.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAE7E,qBAAa,sBAAuB,SAAQ,kBAAkB;IAGhD,OAAO,CAAC,EAAE;IAFtB,OAAO,CAAC,SAAS,CAAS;gBAEN,EAAE,EAAE,WAAW,EAAE,SAAS,SAAW;IAKzD,OAAO,CAAC,MAAM;IAIR,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwBpC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBpD;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B"}

package/dist/providers/nonce-cache.js

@@ -0,0 +1,58 @@
+/**
+ * Cloudflare KV-based nonce cache provider
+ */
+import { NonceCacheProvider } from "@kya-os/mcp-i-core/dist/types/providers";
+export class CloudflareKVNonceCache extends NonceCacheProvider {
+    kv;
+    keyPrefix;
+    constructor(kv, keyPrefix = 'nonce:') {
+        super();
+        this.kv = kv;
+        this.keyPrefix = keyPrefix;
+    }
+    getKey(nonce) {
+        return `${this.keyPrefix}${nonce}`;
+    }
+    async has(nonce) {
+        const key = this.getKey(nonce);
+        const value = await this.kv.get(key);
+        if (!value) {
+            return false;
+        }
+        // Parse the stored data to check expiry
+        try {
+            const data = JSON.parse(value);
+            if (Date.now() > data.expiresAt) {
+                // Clean up expired entry
+                await this.kv.delete(key);
+                return false;
+            }
+            return true;
+        }
+        catch {
+            // If we can't parse, assume expired and clean up
+            await this.kv.delete(key);
+            return false;
+        }
+    }
+    async add(nonce, ttl) {
+        const key = this.getKey(nonce);
+        const expiresAt = Date.now() + ttl * 1000;
+        const data = {
+            nonce,
+            expiresAt,
+            createdAt: Date.now()
+        };
+        // Store with KV TTL for automatic cleanup
+        await this.kv.put(key, JSON.stringify(data), {
+            expirationTtl: ttl // TTL in seconds
+        });
+    }
+    /**
+     * Cleanup is handled automatically by KV TTL
+     */
+    async cleanup() {
+        // No-op: Cloudflare KV handles expiration automatically
+    }
+}
+//# sourceMappingURL=nonce-cache.js.map

package/dist/providers/nonce-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce-cache.js","sourceRoot":"","sources":["../../src/providers/nonce-cache.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAE7E,MAAM,OAAO,sBAAuB,SAAQ,kBAAkB;IAGxC;IAFZ,SAAS,CAAS;IAE1B,YAAoB,EAAe,EAAE,SAAS,GAAG,QAAQ;QACvD,KAAK,EAAE,CAAC;QADU,OAAE,GAAF,EAAE,CAAa;QAEjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAEO,MAAM,CAAC,KAAa;QAC1B,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QAED,wCAAwC;QACxC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChC,yBAAyB;gBACzB,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC1B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;YACjD,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAW;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC;QAE1C,MAAM,IAAI,GAAG;YACX,KAAK;YACL,SAAS;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,0CAA0C;QAC1C,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB;YACE,aAAa,EAAE,GAAG,CAAC,iBAAiB;SACrC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,wDAAwD;IAC1D,CAAC;CACF"}

package/dist/providers/storage.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Cloudflare KV Storage Provider
+ *
+ * Implements StorageProvider and NonceCacheProvider using Cloudflare KV.
+ */
+import { StorageProvider, NonceCacheProvider, ClockProvider, FetchProvider, IdentityProvider, AgentIdentity } from '@kya-os/mcp-i-core';
+/**
+ * KV storage provider for Cloudflare Workers
+ */
+export declare class KVStorageProvider extends StorageProvider {
+    private kv;
+    constructor(kv: KVNamespace);
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+    exists(key: string): Promise<boolean>;
+    list(prefix?: string): Promise<string[]>;
+}
+/**
+ * KV nonce cache provider for Cloudflare Workers
+ */
+export declare class KVNonceCacheProvider extends NonceCacheProvider {
+    private kv;
+    constructor(kv: KVNamespace);
+    has(nonce: string): Promise<boolean>;
+    add(nonce: string, expiresAt: number): Promise<void>;
+    cleanup(): Promise<void>;
+    destroy(): Promise<void>;
+}
+/**
+ * Workers Clock Provider
+ */
+export declare class WorkersClockProvider extends ClockProvider {
+    now(): number;
+    isWithinSkew(timestamp: number, skewSeconds: number): boolean;
+    hasExpired(expiresAt: number): boolean;
+    calculateExpiry(ttlSeconds: number): number;
+    format(timestamp: number): string;
+}
+/**
+ * Workers Fetch Provider
+ */
+export declare class WorkersFetchProvider extends FetchProvider {
+    resolveDID(did: string): Promise<any>;
+    fetchStatusList(url: string): Promise<any>;
+    fetchDelegationChain(id: string): Promise<any[]>;
+    fetch(url: string, options?: RequestInit): Promise<Response>;
+}
+/**
+ * Workers Identity Provider using environment variables
+ */
+export declare class WorkersIdentityProvider extends IdentityProvider {
+    private env;
+    private cryptoProvider?;
+    constructor(env: any, cryptoProvider?: any | undefined);
+    getIdentity(): Promise<AgentIdentity>;
+    saveIdentity(identity: AgentIdentity): Promise<void>;
+    rotateKeys(): Promise<AgentIdentity>;
+    deleteIdentity(): Promise<void>;
+    private generateDIDFromPublicKey;
+}
+//# sourceMappingURL=storage.d.ts.map

package/dist/providers/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../src/providers/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExI;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,eAAe;IACxC,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,WAAW;IAI7B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKrC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAI/C;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,kBAAkB;IAC9C,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,WAAW;IAI7B,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKpC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOpD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAIxB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAG/B;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,GAAG,IAAI,MAAM;IAIb,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO;IAO7D,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAItC,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAI3C,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAGlC;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IAC/C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAiCrC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAU1C,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAKhD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;CAGnE;AAED;;GAEG;AACH,qBAAa,uBAAwB,SAAQ,gBAAgB;IAEzD,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,cAAc,CAAC;gBADf,GAAG,EAAE,GAAG,EACR,cAAc,CAAC,EAAE,GAAG,YAAA;IAKxB,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC;IA+BrC,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpD,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC;IAkBpC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrC,OAAO,CAAC,wBAAwB;CASjC"}

package/dist/providers/storage.js

@@ -0,0 +1,201 @@
+/**
+ * Cloudflare KV Storage Provider
+ *
+ * Implements StorageProvider and NonceCacheProvider using Cloudflare KV.
+ */
+import { StorageProvider, NonceCacheProvider, ClockProvider, FetchProvider, IdentityProvider } from '@kya-os/mcp-i-core';
+/**
+ * KV storage provider for Cloudflare Workers
+ */
+export class KVStorageProvider extends StorageProvider {
+    kv;
+    constructor(kv) {
+        super();
+        this.kv = kv;
+    }
+    async get(key) {
+        return await this.kv.get(key);
+    }
+    async set(key, value) {
+        await this.kv.put(key, value);
+    }
+    async delete(key) {
+        await this.kv.delete(key);
+    }
+    async exists(key) {
+        const value = await this.kv.get(key);
+        return value !== null;
+    }
+    async list(prefix) {
+        const result = await this.kv.list({ prefix });
+        return result.keys.map(k => k.name);
+    }
+}
+/**
+ * KV nonce cache provider for Cloudflare Workers
+ */
+export class KVNonceCacheProvider extends NonceCacheProvider {
+    kv;
+    constructor(kv) {
+        super();
+        this.kv = kv;
+    }
+    async has(nonce) {
+        const value = await this.kv.get(`nonce:${nonce}`);
+        return value !== null;
+    }
+    async add(nonce, expiresAt) {
+        const ttl = Math.max(1, Math.floor((expiresAt - Date.now()) / 1000));
+        await this.kv.put(`nonce:${nonce}`, '1', {
+            expirationTtl: ttl
+        });
+    }
+    async cleanup() {
+        // KV handles expiration automatically
+    }
+    async destroy() {
+        // No cleanup needed
+    }
+}
+/**
+ * Workers Clock Provider
+ */
+export class WorkersClockProvider extends ClockProvider {
+    now() {
+        return Date.now();
+    }
+    isWithinSkew(timestamp, skewSeconds) {
+        const now = this.now();
+        const skewMs = skewSeconds * 1000;
+        const diff = Math.abs(now - timestamp);
+        return diff <= skewMs;
+    }
+    hasExpired(expiresAt) {
+        return this.now() > expiresAt;
+    }
+    calculateExpiry(ttlSeconds) {
+        return this.now() + (ttlSeconds * 1000);
+    }
+    format(timestamp) {
+        return new Date(timestamp).toISOString();
+    }
+}
+/**
+ * Workers Fetch Provider
+ */
+export class WorkersFetchProvider extends FetchProvider {
+    async resolveDID(did) {
+        if (did.startsWith('did:key:')) {
+            // Offline resolution for did:key
+            const publicKeyMultibase = did.slice('did:key:'.length);
+            return {
+                '@context': ['https://www.w3.org/ns/did/v1'],
+                id: did,
+                verificationMethod: [{
+                        id: `${did}#key-1`,
+                        type: 'Ed25519VerificationKey2020',
+                        controller: did,
+                        publicKeyMultibase
+                    }],
+                authentication: [`${did}#key-1`],
+                assertionMethod: [`${did}#key-1`]
+            };
+        }
+        if (did.startsWith('did:web:')) {
+            const domain = did.slice('did:web:'.length).replace(/:/g, '/');
+            const url = `https://${domain}/.well-known/did.json`;
+            const response = await fetch(url);
+            if (!response.ok) {
+                throw new Error(`Failed to resolve ${did}: ${response.statusText}`);
+            }
+            return await response.json();
+        }
+        throw new Error(`Unsupported DID method: ${did}`);
+    }
+    async fetchStatusList(url) {
+        const response = await fetch(url);
+        if (!response.ok) {
+            throw new Error(`Failed to fetch status list: ${response.statusText}`);
+        }
+        return await response.json();
+    }
+    async fetchDelegationChain(id) {
+        // Would fetch from a delegation registry
+        return [];
+    }
+    async fetch(url, options) {
+        return await fetch(url, options);
+    }
+}
+/**
+ * Workers Identity Provider using environment variables
+ */
+export class WorkersIdentityProvider extends IdentityProvider {
+    env;
+    cryptoProvider;
+    constructor(env, cryptoProvider) {
+        super();
+        this.env = env;
+        this.cryptoProvider = cryptoProvider;
+    }
+    async getIdentity() {
+        // Check if identity exists in environment variables
+        if (this.env.MCP_IDENTITY_PRIVATE_KEY && this.env.MCP_IDENTITY_PUBLIC_KEY && this.env.MCP_IDENTITY_AGENT_DID) {
+            return {
+                did: this.env.MCP_IDENTITY_AGENT_DID,
+                keyId: `${this.env.MCP_IDENTITY_AGENT_DID}#key-1`,
+                privateKey: this.env.MCP_IDENTITY_PRIVATE_KEY,
+                publicKey: this.env.MCP_IDENTITY_PUBLIC_KEY,
+                createdAt: new Date().toISOString(),
+                type: 'production'
+            };
+        }
+        // Generate new identity if not found
+        if (!this.cryptoProvider) {
+            throw new Error('No identity found and crypto provider not available for generation');
+        }
+        const keyPair = await this.cryptoProvider.generateKeyPair();
+        const did = this.generateDIDFromPublicKey(keyPair.publicKey);
+        return {
+            did,
+            keyId: `${did}#key-1`,
+            privateKey: keyPair.privateKey,
+            publicKey: keyPair.publicKey,
+            createdAt: new Date().toISOString(),
+            type: 'development'
+        };
+    }
+    async saveIdentity(identity) {
+        // In Workers, identity is managed through environment variables
+        // This would typically be set via wrangler secrets
+        console.warn('Identity saving not supported in Workers runtime. Use wrangler secrets instead.');
+    }
+    async rotateKeys() {
+        if (!this.cryptoProvider) {
+            throw new Error('Crypto provider required for key rotation');
+        }
+        const keyPair = await this.cryptoProvider.generateKeyPair();
+        const did = this.generateDIDFromPublicKey(keyPair.publicKey);
+        return {
+            did,
+            keyId: `${did}#key-1`,
+            privateKey: keyPair.privateKey,
+            publicKey: keyPair.publicKey,
+            createdAt: new Date().toISOString(),
+            type: 'production'
+        };
+    }
+    async deleteIdentity() {
+        console.warn('Identity deletion not supported in Workers runtime');
+    }
+    generateDIDFromPublicKey(publicKey) {
+        // Simplified DID generation
+        const keyHash = btoa(publicKey)
+            .replace(/\+/g, '-')
+            .replace(/\//g, '_')
+            .replace(/=/g, '')
+            .substring(0, 32);
+        return `did:key:z${keyHash}`;
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/providers/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/providers/storage.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAiB,MAAM,oBAAoB,CAAC;AAExI;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,eAAe;IAChC;IAApB,YAAoB,EAAe;QACjC,KAAK,EAAE,CAAC;QADU,OAAE,GAAF,EAAE,CAAa;IAEnC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAe;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,kBAAkB;IACtC;IAApB,YAAoB,EAAe;QACjC,KAAK,EAAE,CAAC;QADU,OAAE,GAAF,EAAE,CAAa;IAEnC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa;QACrB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC;QAClD,OAAO,KAAK,KAAK,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,SAAiB;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QACrE,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,KAAK,EAAE,EAAE,GAAG,EAAE;YACvC,aAAa,EAAE,GAAG;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO;QACX,sCAAsC;IACxC,CAAC;IAED,KAAK,CAAC,OAAO;QACX,oBAAoB;IACtB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IACrD,GAAG;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAED,YAAY,CAAC,SAAiB,EAAE,WAAmB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC;QACvC,OAAO,IAAI,IAAI,MAAM,CAAC;IACxB,CAAC;IAED,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAChC,CAAC;IAED,eAAe,CAAC,UAAkB;QAChC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3C,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IACrD,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,iCAAiC;YACjC,MAAM,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACxD,OAAO;gBACL,UAAU,EAAE,CAAC,8BAA8B,CAAC;gBAC5C,EAAE,EAAE,GAAG;gBACP,kBAAkB,EAAE,CAAC;wBACnB,EAAE,EAAE,GAAG,GAAG,QAAQ;wBAClB,IAAI,EAAE,4BAA4B;wBAClC,UAAU,EAAE,GAAG;wBACf,kBAAkB;qBACnB,CAAC;gBACF,cAAc,EAAE,CAAC,GAAG,GAAG,QAAQ,CAAC;gBAChC,eAAe,EAAE,CAAC,GAAG,GAAG,QAAQ,CAAC;aAClC,CAAC;QACJ,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,WAAW,MAAM,uBAAuB,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAElC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACtE,CAAC;YAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAAW;QAC/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,EAAU;QACnC,yCAAyC;QACzC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,OAAqB;QAC5C,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,uBAAwB,SAAQ,gBAAgB;IAEjD;IACA;IAFV,YACU,GAAQ,EACR,cAAoB;QAE5B,KAAK,EAAE,CAAC;QAHA,QAAG,GAAH,GAAG,CAAK;QACR,mBAAc,GAAd,cAAc,CAAM;IAG9B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,oDAAoD;QACpD,IAAI,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,IAAI,CAAC,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,CAAC;YAC7G,OAAO;gBACL,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB;gBACpC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,sBAAsB,QAAQ;gBACjD,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,wBAAwB;gBAC7C,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,uBAAuB;gBAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,YAAY;aACnB,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7D,OAAO;YACL,GAAG;YACH,KAAK,EAAE,GAAG,GAAG,QAAQ;YACrB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,aAAa;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAuB;QACxC,gEAAgE;QAChE,mDAAmD;QACnD,OAAO,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAE7D,OAAO;YACL,GAAG;YACH,KAAK,EAAE,GAAG,GAAG,QAAQ;YACrB,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,YAAY;SACnB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACrE,CAAC;IAEO,wBAAwB,CAAC,SAAiB;QAChD,4BAA4B;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;aAC5B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;aACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;aACjB,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpB,OAAO,YAAY,OAAO,EAAE,CAAC;IAC/B,CAAC;CACF"}

package/dist/runtime/index.d.ts

@@ -0,0 +1,31 @@
+/**
+ * MCP-I Runtime for Cloudflare Workers
+ */
+import { MCPIRuntimeBase } from "@kya-os/mcp-i-core/dist/runtime/base";
+import { CloudflareEnv } from "../providers/identity";
+/**
+ * Cloudflare Workers environment with required bindings
+ */
+export interface MCPICloudflareEnv extends CloudflareEnv {
+    NONCE_CACHE: KVNamespace;
+    STORAGE_KV?: KVNamespace;
+}
+/**
+ * MCP-I Runtime for Cloudflare Workers
+ */
+export declare class MCPICloudflareRuntime extends MCPIRuntimeBase {
+    constructor(env: MCPICloudflareEnv);
+    /**
+     * Override session ID generation to use Web Crypto
+     */
+    protected generateSessionId(): Promise<string>;
+    /**
+     * Override nonce generation to use Web Crypto
+     */
+    protected generateNonce(): Promise<string>;
+}
+/**
+ * Create MCP-I server for Cloudflare Workers
+ */
+export declare function createMCPIServer(env: MCPICloudflareEnv): MCPICloudflareRuntime;
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AAGvE,OAAO,EAA0B,aAAa,EAAE,MAAM,uBAAuB,CAAC;AA8B9E;;GAEG;AACH,MAAM,WAAW,iBAAkB,SAAQ,aAAa;IAEtD,WAAW,EAAE,WAAW,CAAC;IACzB,UAAU,CAAC,EAAE,WAAW,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,eAAe;gBAC5C,GAAG,EAAE,iBAAiB;IAgBlC;;OAEG;cACa,iBAAiB,IAAI,OAAO,CAAC,MAAM,CAAC;IAKpD;;OAEG;cACa,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;CAIjD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,iBAAiB,yBAEtD"}