@kya-os/mcp-i-core 1.1.0 → 1.1.1-canary.0

package/dist/delegation/statuslist-manager.js

@@ -0,0 +1,221 @@
+"use strict";
+/**
+ * StatusList2021 Manager
+ *
+ * Manages StatusList2021 credentials for efficient delegation revocation.
+ * Follows the Python POC design from Delegation-Revocation.md.
+ *
+ * SOLID Principles:
+ * - Single Responsibility: Manages status list allocation and updates
+ * - Open/Closed: Extensible via storage provider interface
+ * - Liskov Substitution: Any storage provider can be used
+ * - Interface Segregation: Minimal storage interface
+ * - Dependency Inversion: Depends on abstractions (storage, signing)
+ *
+ * Related Spec: W3C StatusList2021
+ * Python Reference: Delegation-Revocation.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StatusList2021Manager = void 0;
+exports.createStatusListManager = createStatusListManager;
+const bitstring_1 = require("./bitstring");
+const utils_1 = require("./utils");
+/**
+ * StatusList2021 Manager
+ *
+ * Manages status lists for efficient delegation revocation.
+ * Per Delegation-Revocation.md:
+ * - StatusList2021 for efficient revocation distribution
+ * - Compressed bitstrings for scalability
+ * - Separate lists for revocation vs suspension
+ */
+class StatusList2021Manager {
+    storage;
+    identity;
+    signingFunction;
+    compressor;
+    decompressor;
+    statusListBaseUrl;
+    defaultListSize;
+    constructor(storage, identity, signingFunction, compressor, decompressor, options) {
+        this.storage = storage;
+        this.identity = identity;
+        this.signingFunction = signingFunction;
+        this.compressor = compressor;
+        this.decompressor = decompressor;
+        this.statusListBaseUrl = options?.statusListBaseUrl || 'https://status.example.com';
+        this.defaultListSize = options?.defaultListSize || 131072; // 128K entries (16KB compressed)
+    }
+    /**
+     * Allocate a status entry for a new delegation credential
+     *
+     * Per Delegation-Revocation.md: Each delegation gets a unique status list entry.
+     *
+     * @param purpose - "revocation" or "suspension"
+     * @returns CredentialStatus entry for the delegation VC
+     */
+    async allocateStatusEntry(purpose) {
+        // Determine which status list to use
+        const statusListId = `${this.statusListBaseUrl}/${purpose}/v1`;
+        // Allocate index in the status list (thread-safe)
+        const index = await this.storage.allocateIndex(statusListId);
+        // Ensure the status list exists
+        await this.ensureStatusListExists(statusListId, purpose);
+        // Create the credential status entry
+        const credentialStatus = {
+            id: `${statusListId}#${index}`,
+            type: 'StatusList2021Entry',
+            statusPurpose: purpose,
+            statusListIndex: index.toString(),
+            statusListCredential: statusListId,
+        };
+        return credentialStatus;
+    }
+    /**
+     * Revoke or suspend a delegation by updating its status
+     *
+     * @param credentialStatus - The credential status entry from the VC
+     * @param revoked - true to revoke/suspend, false to restore
+     */
+    async updateStatus(credentialStatus, revoked) {
+        const { statusListCredential, statusListIndex } = credentialStatus;
+        // Get the current status list
+        const statusList = await this.storage.getStatusList(statusListCredential);
+        if (!statusList) {
+            throw new Error(`Status list not found: ${statusListCredential}`);
+        }
+        // Decode the bitstring
+        const manager = await bitstring_1.BitstringManager.decode(statusList.credentialSubject.encodedList, this.compressor, this.decompressor);
+        // Update the bit
+        const index = parseInt(statusListIndex, 10);
+        manager.setBit(index, revoked);
+        // Re-encode
+        const encodedList = await manager.encode();
+        // Update the credential
+        const updatedCredential = {
+            ...statusList,
+            credentialSubject: {
+                ...statusList.credentialSubject,
+                encodedList,
+            },
+        };
+        // Re-sign the credential (proof changes when content changes)
+        const unsignedCredential = { ...updatedCredential };
+        delete unsignedCredential.proof;
+        const canonicalVC = (0, utils_1.canonicalizeJSON)(unsignedCredential);
+        const proof = await this.signingFunction(canonicalVC, this.identity.getDid(), this.identity.getKeyId());
+        const signedCredential = {
+            ...updatedCredential,
+            proof,
+        };
+        // Save the updated status list
+        await this.storage.setStatusList(statusListCredential, signedCredential);
+    }
+    /**
+     * Check if a credential is revoked
+     *
+     * @param credentialStatus - The credential status entry
+     * @returns true if revoked/suspended, false otherwise
+     */
+    async checkStatus(credentialStatus) {
+        const { statusListCredential, statusListIndex } = credentialStatus;
+        // Get the status list
+        const statusList = await this.storage.getStatusList(statusListCredential);
+        if (!statusList) {
+            // Status list doesn't exist = not revoked
+            return false;
+        }
+        // Decode and check the bit
+        const manager = await bitstring_1.BitstringManager.decode(statusList.credentialSubject.encodedList, this.compressor, this.decompressor);
+        const index = parseInt(statusListIndex, 10);
+        return manager.getBit(index);
+    }
+    /**
+     * Get all revoked indices in a status list
+     *
+     * Useful for debugging or auditing.
+     *
+     * @param statusListId - The status list URL
+     * @returns Array of revoked indices
+     */
+    async getRevokedIndices(statusListId) {
+        const statusList = await this.storage.getStatusList(statusListId);
+        if (!statusList) {
+            return [];
+        }
+        const manager = await bitstring_1.BitstringManager.decode(statusList.credentialSubject.encodedList, this.compressor, this.decompressor);
+        return manager.getSetBits();
+    }
+    /**
+     * Ensure a status list exists, creating it if needed
+     *
+     * @param statusListId - The status list URL
+     * @param purpose - "revocation" or "suspension"
+     */
+    async ensureStatusListExists(statusListId, purpose) {
+        // Check if it already exists
+        const existing = await this.storage.getStatusList(statusListId);
+        if (existing) {
+            return;
+        }
+        // Create a new status list
+        const manager = new bitstring_1.BitstringManager(this.defaultListSize, this.compressor, this.decompressor);
+        const encodedList = await manager.encode();
+        // Create the unsigned credential
+        const unsignedCredential = {
+            '@context': [
+                'https://www.w3.org/2018/credentials/v1',
+                'https://w3id.org/vc/status-list/2021/v1',
+            ],
+            id: statusListId,
+            type: ['VerifiableCredential', 'StatusList2021Credential'],
+            issuer: this.identity.getDid(),
+            issuanceDate: new Date().toISOString(),
+            credentialSubject: {
+                id: `${statusListId}#list`,
+                type: 'StatusList2021',
+                statusPurpose: purpose,
+                encodedList,
+            },
+        };
+        // Sign it
+        const canonicalVC = (0, utils_1.canonicalizeJSON)(unsignedCredential);
+        const proof = await this.signingFunction(canonicalVC, this.identity.getDid(), this.identity.getKeyId());
+        const signedCredential = {
+            ...unsignedCredential,
+            proof,
+        };
+        // Store it
+        await this.storage.setStatusList(statusListId, signedCredential);
+    }
+    /**
+     * Get the status list base URL
+     */
+    getStatusListBaseUrl() {
+        return this.statusListBaseUrl;
+    }
+    /**
+     * Get the default list size
+     */
+    getDefaultListSize() {
+        return this.defaultListSize;
+    }
+}
+exports.StatusList2021Manager = StatusList2021Manager;
+/**
+ * Create a StatusList2021 manager
+ *
+ * Convenience factory function.
+ *
+ * @param storage - Storage provider
+ * @param identity - Identity provider
+ * @param signingFunction - VC signing function
+ * @param compressor - Compression function
+ * @param decompressor - Decompression function
+ * @param options - Manager options
+ * @returns StatusList2021Manager instance
+ */
+function createStatusListManager(storage, identity, signingFunction, compressor, decompressor, options) {
+    return new StatusList2021Manager(storage, identity, signingFunction, compressor, decompressor, options);
+}
+//# sourceMappingURL=statuslist-manager.js.map

package/dist/delegation/statuslist-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statuslist-manager.js","sourceRoot":"","sources":["../../src/delegation/statuslist-manager.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AA8TH,0DAmBC;AA3UD,2CAA2F;AAE3F,mCAA2C;AAkD3C;;;;;;;;GAQG;AACH,MAAa,qBAAqB;IAKtB;IACA;IACA;IACA;IACA;IARF,iBAAiB,CAAS;IAC1B,eAAe,CAAS;IAEhC,YACU,OAAkC,EAClC,QAAoC,EACpC,eAAkC,EAClC,UAA+B,EAC/B,YAAmC,EAC3C,OAKC;QAVO,YAAO,GAAP,OAAO,CAA2B;QAClC,aAAQ,GAAR,QAAQ,CAA4B;QACpC,oBAAe,GAAf,eAAe,CAAmB;QAClC,eAAU,GAAV,UAAU,CAAqB;QAC/B,iBAAY,GAAZ,YAAY,CAAuB;QAQ3C,IAAI,CAAC,iBAAiB,GAAG,OAAO,EAAE,iBAAiB,IAAI,4BAA4B,CAAC;QACpF,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,eAAe,IAAI,MAAM,CAAC,CAAC,iCAAiC;IAC9F,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,mBAAmB,CACvB,OAAoC;QAEpC,qCAAqC;QACrC,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,iBAAiB,IAAI,OAAO,KAAK,CAAC;QAE/D,kDAAkD;QAClD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAE7D,gCAAgC;QAChC,MAAM,IAAI,CAAC,sBAAsB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAEzD,qCAAqC;QACrC,MAAM,gBAAgB,GAAqB;YACzC,EAAE,EAAE,GAAG,YAAY,IAAI,KAAK,EAAE;YAC9B,IAAI,EAAE,qBAAqB;YAC3B,aAAa,EAAE,OAAO;YACtB,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE;YACjC,oBAAoB,EAAE,YAAY;SACnC,CAAC;QAEF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAChB,gBAAkC,EAClC,OAAgB;QAEhB,MAAM,EAAE,oBAAoB,EAAE,eAAe,EAAE,GAAG,gBAAgB,CAAC;QAEnE,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,0BAA0B,oBAAoB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,uBAAuB;QACvB,MAAM,OAAO,GAAG,MAAM,4BAAgB,CAAC,MAAM,CAC3C,UAAU,CAAC,iBAAiB,CAAC,WAAW,EACxC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,iBAAiB;QACjB,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE/B,YAAY;QACZ,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAE3C,wBAAwB;QACxB,MAAM,iBAAiB,GAA6B;YAClD,GAAG,UAAU;YACb,iBAAiB,EAAE;gBACjB,GAAG,UAAU,CAAC,iBAAiB;gBAC/B,WAAW;aACZ;SACF,CAAC;QAEF,8DAA8D;QAC9D,MAAM,kBAAkB,GAAG,EAAE,GAAG,iBAAiB,EAAE,CAAC;QACpD,OAAQ,kBAA0B,CAAC,KAAK,CAAC;QAEzC,MAAM,WAAW,GAAG,IAAA,wBAAgB,EAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CACtC,WAAW,EACX,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EACtB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CACzB,CAAC;QAEF,MAAM,gBAAgB,GAA6B;YACjD,GAAG,iBAAiB;YACpB,KAAK;SACN,CAAC;QAEF,+BAA+B;QAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CAAC,gBAAkC;QAClD,MAAM,EAAE,oBAAoB,EAAE,eAAe,EAAE,GAAG,gBAAgB,CAAC;QAEnE,sBAAsB;QACtB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;QAC1E,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,0CAA0C;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,MAAM,4BAAgB,CAAC,MAAM,CAC3C,UAAU,CAAC,iBAAiB,CAAC,WAAW,EACxC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC5C,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC1C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,4BAAgB,CAAC,MAAM,CAC3C,UAAU,CAAC,iBAAiB,CAAC,WAAW,EACxC,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,YAAY,CAClB,CAAC;QAEF,OAAO,OAAO,CAAC,UAAU,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,sBAAsB,CAClC,YAAoB,EACpB,OAAoC;QAEpC,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAChE,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,IAAI,4BAAgB,CAClC,IAAI,CAAC,eAAe,EACpB,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,YAAY,CAClB,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QAE3C,iCAAiC;QACjC,MAAM,kBAAkB,GAAG;YACzB,UAAU,EAAE;gBACV,wCAAwC;gBACxC,yCAAyC;aACtB;YACrB,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,CAAC,sBAAsB,EAAE,0BAA0B,CAAyD;YAClH,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC9B,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACtC,iBAAiB,EAAE;gBACjB,EAAE,EAAE,GAAG,YAAY,OAAO;gBAC1B,IAAI,EAAE,gBAAyB;gBAC/B,aAAa,EAAE,OAAO;gBACtB,WAAW;aACZ;SACF,CAAC;QAEF,UAAU;QACV,MAAM,WAAW,GAAG,IAAA,wBAAgB,EAAC,kBAAkB,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CACtC,WAAW,EACX,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EACtB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CACzB,CAAC;QAEF,MAAM,gBAAgB,GAA6B;YACjD,GAAG,kBAAkB;YACrB,KAAK;SACN,CAAC;QAEF,WAAW;QACX,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IACnE,CAAC;IAED;;OAEG;IACH,oBAAoB;QAClB,OAAO,IAAI,CAAC,iBAAiB,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;CACF;AA5OD,sDA4OC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,uBAAuB,CACrC,OAAkC,EAClC,QAAoC,EACpC,eAAkC,EAClC,UAA+B,EAC/B,YAAmC,EACnC,OAGC;IAED,OAAO,IAAI,qBAAqB,CAC9B,OAAO,EACP,QAAQ,EACR,eAAe,EACf,UAAU,EACV,YAAY,EACZ,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/delegation/storage/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Storage Implementations
+ *
+ * Example storage providers for testing and development.
+ * Production implementations would use persistent storage (KV, DB, etc.)
+ */
+export * from './memory-statuslist-storage';
+export * from './memory-graph-storage';
+//# sourceMappingURL=index.d.ts.map

package/dist/delegation/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/delegation/storage/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC"}

package/dist/delegation/storage/index.js

@@ -0,0 +1,25 @@
+"use strict";
+/**
+ * Storage Implementations
+ *
+ * Example storage providers for testing and development.
+ * Production implementations would use persistent storage (KV, DB, etc.)
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./memory-statuslist-storage"), exports);
+__exportStar(require("./memory-graph-storage"), exports);
+//# sourceMappingURL=index.js.map

package/dist/delegation/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/delegation/storage/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;;;;;;;;;;;;;;AAEH,8DAA4C;AAC5C,yDAAuC"}

package/dist/delegation/storage/memory-graph-storage.d.ts

@@ -0,0 +1,70 @@
+/**
+ * In-Memory Delegation Graph Storage Provider
+ *
+ * Memory-based implementation for testing and development.
+ * NOT suitable for production (no persistence).
+ *
+ * SOLID: Implements DelegationGraphStorageProvider interface
+ */
+import type { DelegationGraphStorageProvider, DelegationNode } from '../delegation-graph';
+/**
+ * Memory-based Delegation Graph storage
+ *
+ * Stores delegation nodes in memory with efficient graph queries.
+ * Useful for:
+ * - Unit tests
+ * - Integration tests
+ * - Development/debugging
+ * - Examples
+ */
+export declare class MemoryDelegationGraphStorage implements DelegationGraphStorageProvider {
+    private nodes;
+    /**
+     * Get a delegation node by ID
+     */
+    getNode(delegationId: string): Promise<DelegationNode | null>;
+    /**
+     * Save a delegation node
+     */
+    setNode(node: DelegationNode): Promise<void>;
+    /**
+     * Get all children of a delegation
+     */
+    getChildren(delegationId: string): Promise<DelegationNode[]>;
+    /**
+     * Get the full chain from root to this delegation
+     */
+    getChain(delegationId: string): Promise<DelegationNode[]>;
+    /**
+     * Get all descendants (children, grandchildren, etc.)
+     *
+     * Uses BFS for efficiency.
+     */
+    getDescendants(delegationId: string): Promise<DelegationNode[]>;
+    /**
+     * Delete a node
+     */
+    deleteNode(delegationId: string): Promise<void>;
+    /**
+     * Clear all data (for testing)
+     */
+    clear(): void;
+    /**
+     * Get all node IDs (for testing)
+     */
+    getAllNodeIds(): string[];
+    /**
+     * Get graph statistics (for testing/debugging)
+     */
+    getStats(): {
+        totalNodes: number;
+        rootNodes: number;
+        leafNodes: number;
+        maxDepth: number;
+    };
+    /**
+     * Synchronous chain retrieval (for stats)
+     */
+    private getChainSync;
+}
+//# sourceMappingURL=memory-graph-storage.d.ts.map

package/dist/delegation/storage/memory-graph-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-graph-storage.d.ts","sourceRoot":"","sources":["../../../src/delegation/storage/memory-graph-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,8BAA8B,EAC9B,cAAc,EACf,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;GASG;AACH,qBAAa,4BACX,YAAW,8BAA8B;IAEzC,OAAO,CAAC,KAAK,CAAqC;IAElD;;OAEG;IACG,OAAO,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAInE;;OAEG;IACG,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD;;OAEG;IACG,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IASlE;;OAEG;IACG,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAgB/D;;;;OAIG;IACG,cAAc,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IA+BrE;;OAEG;IACG,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;OAEG;IACH,aAAa,IAAI,MAAM,EAAE;IAIzB;;OAEG;IACH,QAAQ,IAAI;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;KAClB;IAqBD;;OAEG;IACH,OAAO,CAAC,YAAY;CAcrB"}

package/dist/delegation/storage/memory-graph-storage.js

@@ -0,0 +1,149 @@
+"use strict";
+/**
+ * In-Memory Delegation Graph Storage Provider
+ *
+ * Memory-based implementation for testing and development.
+ * NOT suitable for production (no persistence).
+ *
+ * SOLID: Implements DelegationGraphStorageProvider interface
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryDelegationGraphStorage = void 0;
+/**
+ * Memory-based Delegation Graph storage
+ *
+ * Stores delegation nodes in memory with efficient graph queries.
+ * Useful for:
+ * - Unit tests
+ * - Integration tests
+ * - Development/debugging
+ * - Examples
+ */
+class MemoryDelegationGraphStorage {
+    nodes = new Map();
+    /**
+     * Get a delegation node by ID
+     */
+    async getNode(delegationId) {
+        return this.nodes.get(delegationId) || null;
+    }
+    /**
+     * Save a delegation node
+     */
+    async setNode(node) {
+        this.nodes.set(node.id, node);
+    }
+    /**
+     * Get all children of a delegation
+     */
+    async getChildren(delegationId) {
+        const parent = this.nodes.get(delegationId);
+        if (!parent)
+            return [];
+        return parent.children
+            .map((childId) => this.nodes.get(childId))
+            .filter((node) => node !== undefined);
+    }
+    /**
+     * Get the full chain from root to this delegation
+     */
+    async getChain(delegationId) {
+        const chain = [];
+        let currentId = delegationId;
+        // Walk up the tree to root
+        while (currentId) {
+            const node = this.nodes.get(currentId);
+            if (!node)
+                break;
+            chain.unshift(node); // Add to front (root first)
+            currentId = node.parentId;
+        }
+        return chain;
+    }
+    /**
+     * Get all descendants (children, grandchildren, etc.)
+     *
+     * Uses BFS for efficiency.
+     */
+    async getDescendants(delegationId) {
+        const descendants = [];
+        const queue = [delegationId];
+        const visited = new Set();
+        while (queue.length > 0) {
+            const currentId = queue.shift();
+            // Skip if already visited (prevent infinite loops)
+            if (visited.has(currentId))
+                continue;
+            visited.add(currentId);
+            const node = this.nodes.get(currentId);
+            if (!node)
+                continue;
+            // Add children to queue
+            for (const childId of node.children) {
+                if (!visited.has(childId)) {
+                    queue.push(childId);
+                    const childNode = this.nodes.get(childId);
+                    if (childNode) {
+                        descendants.push(childNode);
+                    }
+                }
+            }
+        }
+        return descendants;
+    }
+    /**
+     * Delete a node
+     */
+    async deleteNode(delegationId) {
+        this.nodes.delete(delegationId);
+    }
+    /**
+     * Clear all data (for testing)
+     */
+    clear() {
+        this.nodes.clear();
+    }
+    /**
+     * Get all node IDs (for testing)
+     */
+    getAllNodeIds() {
+        return Array.from(this.nodes.keys());
+    }
+    /**
+     * Get graph statistics (for testing/debugging)
+     */
+    getStats() {
+        const nodes = Array.from(this.nodes.values());
+        const rootNodes = nodes.filter((n) => n.parentId === null).length;
+        const leafNodes = nodes.filter((n) => n.children.length === 0).length;
+        // Calculate max depth
+        let maxDepth = 0;
+        for (const node of nodes) {
+            const chain = this.getChainSync(node.id);
+            maxDepth = Math.max(maxDepth, chain.length - 1);
+        }
+        return {
+            totalNodes: nodes.length,
+            rootNodes,
+            leafNodes,
+            maxDepth,
+        };
+    }
+    /**
+     * Synchronous chain retrieval (for stats)
+     */
+    getChainSync(delegationId) {
+        const chain = [];
+        let currentId = delegationId;
+        while (currentId) {
+            const node = this.nodes.get(currentId);
+            if (!node)
+                break;
+            chain.unshift(node);
+            currentId = node.parentId;
+        }
+        return chain;
+    }
+}
+exports.MemoryDelegationGraphStorage = MemoryDelegationGraphStorage;
+//# sourceMappingURL=memory-graph-storage.js.map

package/dist/delegation/storage/memory-graph-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-graph-storage.js","sourceRoot":"","sources":["../../../src/delegation/storage/memory-graph-storage.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAOH;;;;;;;;;GASG;AACH,MAAa,4BAA4B;IAG/B,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,YAAoB;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,IAAoB;QAChC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,YAAoB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,CAAC;QAEvB,OAAO,MAAM,CAAC,QAAQ;aACnB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;aACzC,MAAM,CAAC,CAAC,IAAI,EAA0B,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,YAAoB;QACjC,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,IAAI,SAAS,GAAkB,YAAY,CAAC;QAE5C,2BAA2B;QAC3B,OAAO,SAAS,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI;gBAAE,MAAM;YAEjB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B;YACjD,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,YAAoB;QACvC,MAAM,WAAW,GAAqB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAa,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAElC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;YAEjC,mDAAmD;YACnD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YACrC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAEvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,wBAAwB;YACxB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBAC1C,IAAI,SAAS,EAAE,CAAC;wBACd,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC9B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,YAAoB;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAE9C,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QAClE,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAEtE,sBAAsB;QACtB,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzC,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;QAED,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,MAAM;YACxB,SAAS;YACT,SAAS;YACT,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,YAAoB;QACvC,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,IAAI,SAAS,GAAkB,YAAY,CAAC;QAE5C,OAAO,SAAS,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI;gBAAE,MAAM;YAEjB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACpB,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAzJD,oEAyJC"}

package/dist/delegation/storage/memory-statuslist-storage.d.ts

@@ -0,0 +1,49 @@
+/**
+ * In-Memory StatusList Storage Provider
+ *
+ * Memory-based implementation for testing and development.
+ * NOT suitable for production (no persistence).
+ *
+ * SOLID: Implements StatusListStorageProvider interface
+ */
+import type { StatusList2021Credential } from '@kya-os/contracts';
+import type { StatusListStorageProvider } from '../statuslist-manager';
+/**
+ * Memory-based StatusList storage
+ *
+ * Stores status lists in memory. Thread-safe index allocation.
+ * Useful for:
+ * - Unit tests
+ * - Integration tests
+ * - Development/debugging
+ * - Examples
+ */
+export declare class MemoryStatusListStorage implements StatusListStorageProvider {
+    private statusLists;
+    private indexCounters;
+    /**
+     * Get a status list credential by ID
+     */
+    getStatusList(statusListId: string): Promise<StatusList2021Credential | null>;
+    /**
+     * Save a status list credential
+     */
+    setStatusList(statusListId: string, credential: StatusList2021Credential): Promise<void>;
+    /**
+     * Allocate a new index (thread-safe)
+     */
+    allocateIndex(statusListId: string): Promise<number>;
+    /**
+     * Get current index count (for testing)
+     */
+    getIndexCount(statusListId: string): number;
+    /**
+     * Clear all data (for testing)
+     */
+    clear(): void;
+    /**
+     * Get all status list IDs (for testing)
+     */
+    getAllStatusListIds(): string[];
+}
+//# sourceMappingURL=memory-statuslist-storage.d.ts.map

package/dist/delegation/storage/memory-statuslist-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-statuslist-storage.d.ts","sourceRoot":"","sources":["../../../src/delegation/storage/memory-statuslist-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAEvE;;;;;;;;;GASG;AACH,qBAAa,uBAAwB,YAAW,yBAAyB;IACvE,OAAO,CAAC,WAAW,CAA+C;IAClE,OAAO,CAAC,aAAa,CAA6B;IAElD;;OAEG;IACG,aAAa,CACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;IAI3C;;OAEG;IACG,aAAa,CACjB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,wBAAwB,GACnC,OAAO,CAAC,IAAI,CAAC;IAIhB;;OAEG;IACG,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAO1D;;OAEG;IACH,aAAa,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;IAI3C;;OAEG;IACH,KAAK,IAAI,IAAI;IAKb;;OAEG;IACH,mBAAmB,IAAI,MAAM,EAAE;CAGhC"}

package/dist/delegation/storage/memory-statuslist-storage.js

@@ -0,0 +1,67 @@
+"use strict";
+/**
+ * In-Memory StatusList Storage Provider
+ *
+ * Memory-based implementation for testing and development.
+ * NOT suitable for production (no persistence).
+ *
+ * SOLID: Implements StatusListStorageProvider interface
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoryStatusListStorage = void 0;
+/**
+ * Memory-based StatusList storage
+ *
+ * Stores status lists in memory. Thread-safe index allocation.
+ * Useful for:
+ * - Unit tests
+ * - Integration tests
+ * - Development/debugging
+ * - Examples
+ */
+class MemoryStatusListStorage {
+    statusLists = new Map();
+    indexCounters = new Map();
+    /**
+     * Get a status list credential by ID
+     */
+    async getStatusList(statusListId) {
+        return this.statusLists.get(statusListId) || null;
+    }
+    /**
+     * Save a status list credential
+     */
+    async setStatusList(statusListId, credential) {
+        this.statusLists.set(statusListId, credential);
+    }
+    /**
+     * Allocate a new index (thread-safe)
+     */
+    async allocateIndex(statusListId) {
+        const current = this.indexCounters.get(statusListId) || 0;
+        const allocated = current;
+        this.indexCounters.set(statusListId, current + 1);
+        return allocated;
+    }
+    /**
+     * Get current index count (for testing)
+     */
+    getIndexCount(statusListId) {
+        return this.indexCounters.get(statusListId) || 0;
+    }
+    /**
+     * Clear all data (for testing)
+     */
+    clear() {
+        this.statusLists.clear();
+        this.indexCounters.clear();
+    }
+    /**
+     * Get all status list IDs (for testing)
+     */
+    getAllStatusListIds() {
+        return Array.from(this.statusLists.keys());
+    }
+}
+exports.MemoryStatusListStorage = MemoryStatusListStorage;
+//# sourceMappingURL=memory-statuslist-storage.js.map

package/dist/delegation/storage/memory-statuslist-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory-statuslist-storage.js","sourceRoot":"","sources":["../../../src/delegation/storage/memory-statuslist-storage.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAKH;;;;;;;;;GASG;AACH,MAAa,uBAAuB;IAC1B,WAAW,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC1D,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,YAAoB;QAEpB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,YAAoB,EACpB,UAAoC;QAEpC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,YAAoB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,OAAO,CAAC;QAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,YAAoB;QAChC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;CACF;AAtDD,0DAsDC"}

package/dist/delegation/utils.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Delegation Utilities
+ *
+ * Shared utility functions for delegation credential operations.
+ * Following DRY (Don't Repeat Yourself) principle.
+ */
+/**
+ * JSON canonicalization (RFC 8785)
+ *
+ * Creates a deterministic representation of JSON for signing.
+ * Per W3C VC spec, canonicalization ensures identical VCs produce identical signatures.
+ *
+ * DRY: Single implementation shared across vc-issuer and statuslist-manager.
+ *
+ * @param obj - The object to canonicalize
+ * @returns Canonical JSON string
+ */
+export declare function canonicalizeJSON(obj: any): string;
+//# sourceMappingURL=utils.d.ts.map

package/dist/delegation/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/delegation/utils.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAuBjD"}