@kya-os/mcp-i-core 1.1.10 → 1.1.11

package/dist/config/remote-config.js

@@ -0,0 +1,107 @@
+"use strict";
+/**
+ * Remote Configuration Fetching
+ *
+ * Service for fetching configuration from remote APIs (AgentShield dashboard)
+ * with caching support for performance optimization.
+ *
+ * @module @kya-os/mcp-i-core/config/remote-config
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchRemoteConfig = fetchRemoteConfig;
+const agentshield_api_1 = require("@kya-os/contracts/agentshield-api");
+/**
+ * Fetch configuration from remote API (AgentShield dashboard)
+ *
+ * Attempts to fetch configuration from the AgentShield API with caching support.
+ * Falls back gracefully if remote fetch fails.
+ *
+ * @param options - Remote config options
+ * @param cache - Optional cache implementation
+ * @returns Configuration object or null if fetch fails
+ */
+async function fetchRemoteConfig(options, cache) {
+    const { apiUrl, apiKey, projectId, agentDid, cacheTtl = 300000, fetchProvider } = options;
+    // Generate cache key
+    const cacheKey = projectId
+        ? `config:project:${projectId}`
+        : agentDid
+            ? `config:agent:${agentDid}`
+            : null;
+    // Try cache first
+    if (cache && cacheKey) {
+        try {
+            const cached = await cache.get(cacheKey);
+            if (cached) {
+                try {
+                    const parsed = JSON.parse(cached);
+                    if (parsed.expiresAt > Date.now()) {
+                        return parsed.config;
+                    }
+                }
+                catch {
+                    // Invalid cache entry, continue to fetch
+                }
+            }
+        }
+        catch (error) {
+            // Cache read failed, continue to fetch
+            console.warn('[RemoteConfig] Cache read failed:', error);
+        }
+    }
+    // Fetch from API
+    try {
+        // Build API URL
+        let url;
+        if (projectId) {
+            // Use project-scoped endpoint (preferred)
+            url = `${apiUrl}${agentshield_api_1.AGENTSHIELD_ENDPOINTS.CONFIG(projectId)}`;
+        }
+        else if (agentDid) {
+            // Use agent-scoped endpoint
+            url = `${apiUrl}/api/v1/bouncer/config?agent_did=${encodeURIComponent(agentDid)}`;
+        }
+        else {
+            console.warn('[RemoteConfig] Neither projectId nor agentDid provided');
+            return null;
+        }
+        const response = await fetchProvider(url, {
+            headers: {
+                'Authorization': `Bearer ${apiKey}`,
+                'Content-Type': 'application/json'
+            }
+        });
+        if (!response.ok) {
+            console.warn(`[RemoteConfig] API returned ${response.status}: ${response.statusText}`);
+            return null;
+        }
+        const data = await response.json();
+        // Extract config from API response
+        // API response format: { success: boolean, data: { config: MCPIConfig } }
+        const responseData = data;
+        const config = responseData.config || responseData.data?.config || (responseData.success ? responseData.data : null);
+        if (!config) {
+            console.warn('[RemoteConfig] No config found in API response');
+            return null;
+        }
+        // Cache the result
+        if (cache && cacheKey) {
+            try {
+                await cache.set(cacheKey, JSON.stringify({
+                    config,
+                    expiresAt: Date.now() + cacheTtl
+                }), cacheTtl);
+            }
+            catch (error) {
+                // Cache write failed, but we got the config so continue
+                console.warn('[RemoteConfig] Cache write failed:', error);
+            }
+        }
+        return config;
+    }
+    catch (error) {
+        console.warn('[RemoteConfig] Failed to fetch config:', error);
+        return null;
+    }
+}
+//# sourceMappingURL=remote-config.js.map

package/dist/config/remote-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-config.js","sourceRoot":"","sources":["../../src/config/remote-config.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAuEH,8CA8FC;AAlKD,uEAA0E;AA0D1E;;;;;;;;;GASG;AACI,KAAK,UAAU,iBAAiB,CACrC,OAA4B,EAC5B,KAAyB;IAEzB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,GAAG,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC;IAE1F,qBAAqB;IACrB,MAAM,QAAQ,GAAG,SAAS;QACxB,CAAC,CAAC,kBAAkB,SAAS,EAAE;QAC/B,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,gBAAgB,QAAQ,EAAE;YAC5B,CAAC,CAAC,IAAI,CAAC;IAET,kBAAkB;IAClB,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA8C,CAAC;oBAC/E,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBAClC,OAAO,MAAM,CAAC,MAAM,CAAC;oBACvB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yCAAyC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uCAAuC;YACvC,OAAO,CAAC,IAAI,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC;QACH,gBAAgB;QAChB,IAAI,GAAW,CAAC;QAChB,IAAI,SAAS,EAAE,CAAC;YACd,0CAA0C;YAC1C,GAAG,GAAG,GAAG,MAAM,GAAG,uCAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,CAAC;aAAM,IAAI,QAAQ,EAAE,CAAC;YACpB,4BAA4B;YAC5B,GAAG,GAAG,GAAG,MAAM,oCAAoC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;YACxC,OAAO,EAAE;gBACP,eAAe,EAAE,UAAU,MAAM,EAAE;gBACnC,cAAc,EAAE,kBAAkB;aACnC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,+BAA+B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,mCAAmC;QACnC,0EAA0E;QAC1E,MAAM,YAAY,GAAG,IAAkF,CAAC;QACxG,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAyB,CAAC,CAAC,CAAC,IAAI,CAAsB,CAAC;QAE/J,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mBAAmB;QACnB,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,CACb,QAAQ,EACR,IAAI,CAAC,SAAS,CAAC;oBACb,MAAM;oBACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;iBACjC,CAAC,EACF,QAAQ,CACT,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,wDAAwD;gBACxD,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,OAAO,MAAoB,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,182 @@
+/**
+ * Provider-based Runtime Configuration
+ *
+ * Core configuration for MCP-I runtime using the provider pattern.
+ * This is the foundation for all platform-specific implementations.
+ *
+ * @module @kya-os/mcp-i-core/config
+ */
+import type { MCPIBaseConfig, RuntimeIdentityConfig, ProofingConfig, DelegationConfig, ToolProtectionSourceConfig } from '@kya-os/contracts/config';
+import type { CryptoProvider, ClockProvider, FetchProvider, StorageProvider, NonceCacheProvider, IdentityProvider } from './providers/base';
+import type { ToolProtectionService } from './services/tool-protection.service';
+/**
+ * Provider-based runtime configuration
+ *
+ * This configuration is used internally by MCPIRuntimeBase and provides
+ * the foundation for all platform-specific implementations. It uses the
+ * provider pattern for platform abstraction, allowing different implementations
+ * for Node.js, Cloudflare Workers, and other environments.
+ */
+export interface ProviderRuntimeConfig extends MCPIBaseConfig {
+    /**
+     * Cryptographic operations provider
+     * Handles signing, verification, and key generation
+     */
+    cryptoProvider: CryptoProvider;
+    /**
+     * Time operations provider
+     * Provides current time and timestamp generation
+     */
+    clockProvider: ClockProvider;
+    /**
+     * HTTP fetch operations provider
+     * Handles external API calls
+     */
+    fetchProvider: FetchProvider;
+    /**
+     * Storage operations provider
+     * Handles persistent data storage
+     */
+    storageProvider: StorageProvider;
+    /**
+     * Nonce cache provider
+     * Handles replay prevention
+     */
+    nonceCacheProvider: NonceCacheProvider;
+    /**
+     * Identity management provider
+     * Handles agent identity and DID operations
+     */
+    identityProvider: IdentityProvider;
+    /**
+     * Session configuration
+     * Controls session handling and timeouts
+     */
+    session?: {
+        /**
+         * Allowed timestamp skew in seconds
+         * @default 120
+         */
+        timestampSkewSeconds?: number;
+        /**
+         * Session TTL in minutes
+         * @default 30
+         */
+        ttlMinutes?: number;
+    };
+    /**
+     * Identity configuration (optional)
+     * When provided, enables identity features
+     */
+    identity?: RuntimeIdentityConfig;
+    /**
+     * Proofing configuration (optional)
+     * When provided, enables proof generation
+     */
+    proofing?: ProofingConfig;
+    /**
+     * Delegation configuration (optional)
+     * When provided, enables delegation verification
+     */
+    delegation?: DelegationConfig;
+    /**
+     * Tool protection service (optional)
+     * When provided, enables runtime tool protection
+     * Note: This is different from tool registry which is compile-time
+     */
+    toolProtectionService?: ToolProtectionService;
+    /**
+     * Tool protection source configuration (optional)
+     * Alternative to toolProtectionService for configuration-based setup
+     */
+    toolProtection?: ToolProtectionSourceConfig;
+}
+/**
+ * Builder for provider runtime configuration
+ * Helps create valid configurations with proper defaults
+ */
+export declare class ProviderRuntimeConfigBuilder {
+    private config;
+    /**
+     * Set the providers (required)
+     */
+    withProviders(providers: {
+        cryptoProvider: CryptoProvider;
+        clockProvider: ClockProvider;
+        fetchProvider: FetchProvider;
+        storageProvider: StorageProvider;
+        nonceCacheProvider: NonceCacheProvider;
+        identityProvider: IdentityProvider;
+    }): this;
+    /**
+     * Set the environment
+     */
+    withEnvironment(env: 'development' | 'production'): this;
+    /**
+     * Configure session handling
+     */
+    withSession(session: {
+        timestampSkewSeconds?: number;
+        ttlMinutes?: number;
+    }): this;
+    /**
+     * Enable identity features
+     */
+    withIdentity(identity: RuntimeIdentityConfig): this;
+    /**
+     * Enable proofing features
+     */
+    withProofing(proofing: ProofingConfig): this;
+    /**
+     * Enable delegation features
+     */
+    withDelegation(delegation: DelegationConfig): this;
+    /**
+     * Set tool protection service
+     */
+    withToolProtectionService(service: ToolProtectionService): this;
+    /**
+     * Set tool protection configuration
+     */
+    withToolProtection(config: ToolProtectionSourceConfig): this;
+    /**
+     * Enable audit features
+     */
+    withAudit(audit: {
+        enabled: boolean;
+        includeProofHashes?: boolean;
+    }): this;
+    /**
+     * Enable well-known endpoints
+     */
+    withWellKnown(wellKnown: {
+        enabled: boolean;
+        serviceName?: string;
+    }): this;
+    /**
+     * Build the configuration
+     * Validates that all required providers are set
+     */
+    build(): ProviderRuntimeConfig;
+}
+/**
+ * Re-export base types for convenience
+ */
+export type { MCPIBaseConfig, RuntimeIdentityConfig as BaseIdentityConfig, ProofingConfig, DelegationConfig, ToolProtectionSourceConfig } from '@kya-os/contracts/config';
+/**
+ * Re-export remote config utilities
+ */
+export { fetchRemoteConfig, type RemoteConfigOptions, type RemoteConfigCache } from './config/remote-config';
+/**
+ * Create a provider runtime configuration
+ * Convenience function for creating configurations
+ */
+export declare function createProviderRuntimeConfig(providers: {
+    cryptoProvider: CryptoProvider;
+    clockProvider: ClockProvider;
+    fetchProvider: FetchProvider;
+    storageProvider: StorageProvider;
+    nonceCacheProvider: NonceCacheProvider;
+    identityProvider: IdentityProvider;
+}, options?: Partial<Omit<ProviderRuntimeConfig, keyof typeof providers>>): ProviderRuntimeConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EACV,cAAc,EACd,aAAa,EACb,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EACjB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D;;;OAGG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;;OAGG;IACH,aAAa,EAAE,aAAa,CAAC;IAE7B;;;OAGG;IACH,aAAa,EAAE,aAAa,CAAC;IAE7B;;;OAGG;IACH,eAAe,EAAE,eAAe,CAAC;IAEjC;;;OAGG;IACH,kBAAkB,EAAE,kBAAkB,CAAC;IAEvC;;;OAGG;IACH,gBAAgB,EAAE,gBAAgB,CAAC;IAEnC;;;OAGG;IACH,OAAO,CAAC,EAAE;QACR;;;WAGG;QACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAE9B;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IAEF;;;OAGG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IAEjC;;;OAGG;IACH,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAE9B;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAE9C;;;OAGG;IACH,cAAc,CAAC,EAAE,0BAA0B,CAAC;CAC7C;AAED;;;GAGG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,MAAM,CAEZ;IAEF;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE;QACvB,cAAc,EAAE,cAAc,CAAC;QAC/B,aAAa,EAAE,aAAa,CAAC;QAC7B,aAAa,EAAE,aAAa,CAAC;QAC7B,eAAe,EAAE,eAAe,CAAC;QACjC,kBAAkB,EAAE,kBAAkB,CAAC;QACvC,gBAAgB,EAAE,gBAAgB,CAAC;KACpC,GAAG,IAAI;IAKR;;OAEG;IACH,eAAe,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,GAAG,IAAI;IAKxD;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE;QACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,GAAG,IAAI;IAKR;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,qBAAqB,GAAG,IAAI;IAKnD;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI;IAK5C;;OAEG;IACH,cAAc,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI;IAKlD;;OAEG;IACH,yBAAyB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAK/D;;OAEG;IACH,kBAAkB,CAAC,MAAM,EAAE,0BAA0B,GAAG,IAAI;IAK5D;;OAEG;IACH,SAAS,CAAC,KAAK,EAAE;QACf,OAAO,EAAE,OAAO,CAAC;QACjB,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,GAAG,IAAI;IAKR;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE;QACvB,OAAO,EAAE,OAAO,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,IAAI;IAKR;;;OAGG;IACH,KAAK,IAAI,qBAAqB;CA0B/B;AAED;;GAEG;AACH,YAAY,EACV,cAAc,EACd,qBAAqB,IAAI,kBAAkB,EAC3C,cAAc,EACd,gBAAgB,EAChB,0BAA0B,EAC3B,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,OAAO,EACL,iBAAiB,EACjB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,wBAAwB,CAAC;AAEhC;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,SAAS,EAAE;IACT,cAAc,EAAE,cAAc,CAAC;IAC/B,aAAa,EAAE,aAAa,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,eAAe,EAAE,eAAe,CAAC;IACjC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,gBAAgB,EAAE,gBAAgB,CAAC;CACpC,EACD,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,MAAM,OAAO,SAAS,CAAC,CAAC,GACrE,qBAAqB,CAcvB"}

package/dist/config.js

@@ -0,0 +1,145 @@
+"use strict";
+/**
+ * Provider-based Runtime Configuration
+ *
+ * Core configuration for MCP-I runtime using the provider pattern.
+ * This is the foundation for all platform-specific implementations.
+ *
+ * @module @kya-os/mcp-i-core/config
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchRemoteConfig = exports.ProviderRuntimeConfigBuilder = void 0;
+exports.createProviderRuntimeConfig = createProviderRuntimeConfig;
+/**
+ * Builder for provider runtime configuration
+ * Helps create valid configurations with proper defaults
+ */
+class ProviderRuntimeConfigBuilder {
+    config = {
+        environment: 'development'
+    };
+    /**
+     * Set the providers (required)
+     */
+    withProviders(providers) {
+        Object.assign(this.config, providers);
+        return this;
+    }
+    /**
+     * Set the environment
+     */
+    withEnvironment(env) {
+        this.config.environment = env;
+        return this;
+    }
+    /**
+     * Configure session handling
+     */
+    withSession(session) {
+        this.config.session = session;
+        return this;
+    }
+    /**
+     * Enable identity features
+     */
+    withIdentity(identity) {
+        this.config.identity = identity;
+        return this;
+    }
+    /**
+     * Enable proofing features
+     */
+    withProofing(proofing) {
+        this.config.proofing = proofing;
+        return this;
+    }
+    /**
+     * Enable delegation features
+     */
+    withDelegation(delegation) {
+        this.config.delegation = delegation;
+        return this;
+    }
+    /**
+     * Set tool protection service
+     */
+    withToolProtectionService(service) {
+        this.config.toolProtectionService = service;
+        return this;
+    }
+    /**
+     * Set tool protection configuration
+     */
+    withToolProtection(config) {
+        this.config.toolProtection = config;
+        return this;
+    }
+    /**
+     * Enable audit features
+     */
+    withAudit(audit) {
+        this.config.audit = audit;
+        return this;
+    }
+    /**
+     * Enable well-known endpoints
+     */
+    withWellKnown(wellKnown) {
+        this.config.wellKnown = wellKnown;
+        return this;
+    }
+    /**
+     * Build the configuration
+     * Validates that all required providers are set
+     */
+    build() {
+        const required = [
+            'cryptoProvider',
+            'clockProvider',
+            'fetchProvider',
+            'storageProvider',
+            'nonceCacheProvider',
+            'identityProvider'
+        ];
+        for (const field of required) {
+            if (!(field in this.config)) {
+                throw new Error(`Missing required provider: ${field}`);
+            }
+        }
+        // Apply defaults
+        return {
+            environment: 'development',
+            session: {
+                timestampSkewSeconds: 120,
+                ttlMinutes: 30
+            },
+            ...this.config
+        };
+    }
+}
+exports.ProviderRuntimeConfigBuilder = ProviderRuntimeConfigBuilder;
+/**
+ * Re-export remote config utilities
+ */
+var remote_config_1 = require("./config/remote-config");
+Object.defineProperty(exports, "fetchRemoteConfig", { enumerable: true, get: function () { return remote_config_1.fetchRemoteConfig; } });
+/**
+ * Create a provider runtime configuration
+ * Convenience function for creating configurations
+ */
+function createProviderRuntimeConfig(providers, options) {
+    return new ProviderRuntimeConfigBuilder()
+        .withProviders(providers)
+        .withEnvironment(options?.environment || 'development')
+        .withSession(options?.session || {})
+        .withIdentity(options?.identity || { enabled: false, environment: 'development' })
+        .withProofing(options?.proofing || { enabled: false })
+        .withDelegation(options?.delegation || {
+        enabled: false,
+        verifier: { type: 'memory' }
+    })
+        .withAudit(options?.audit || { enabled: false })
+        .withWellKnown(options?.wellKnown || { enabled: true })
+        .build();
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAqRH,kEAwBC;AAzLD;;;GAGG;AACH,MAAa,4BAA4B;IAC/B,MAAM,GAAmC;QAC/C,WAAW,EAAE,aAAa;KAC3B,CAAC;IAEF;;OAEG;IACH,aAAa,CAAC,SAOb;QACC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,GAAiC;QAC/C,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,OAGX;QACC,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAA+B;QAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,QAAwB;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,UAA4B;QACzC,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,yBAAyB,CAAC,OAA8B;QACtD,IAAI,CAAC,MAAM,CAAC,qBAAqB,GAAG,OAAO,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,MAAkC;QACnD,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,KAGT;QACC,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,SAGb;QACC,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK;QACH,MAAM,QAAQ,GAAG;YACf,gBAAgB;YAChB,eAAe;YACf,eAAe;YACf,iBAAiB;YACjB,oBAAoB;YACpB,kBAAkB;SACnB,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QAED,iBAAiB;QACjB,OAAO;YACL,WAAW,EAAE,aAAa;YAC1B,OAAO,EAAE;gBACP,oBAAoB,EAAE,GAAG;gBACzB,UAAU,EAAE,EAAE;aACf;YACD,GAAG,IAAI,CAAC,MAAM;SACU,CAAC;IAC7B,CAAC;CACF;AAnID,oEAmIC;AAaD;;GAEG;AACH,wDAIgC;AAH9B,kHAAA,iBAAiB,OAAA;AAKnB;;;GAGG;AACH,SAAgB,2BAA2B,CACzC,SAOC,EACD,OAAsE;IAEtE,OAAO,IAAI,4BAA4B,EAAE;SACtC,aAAa,CAAC,SAAS,CAAC;SACxB,eAAe,CAAC,OAAO,EAAE,WAAW,IAAI,aAAa,CAAC;SACtD,WAAW,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;SACnC,YAAY,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;SACjF,YAAY,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SACrD,cAAc,CAAC,OAAO,EAAE,UAAU,IAAI;QACrC,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC7B,CAAC;SACD,SAAS,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;SAC/C,aAAa,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;SACtD,KAAK,EAAE,CAAC;AACb,CAAC"}

package/dist/did/resolver.d.ts

@@ -0,0 +1,92 @@
+/**
+ * DID Resolver plugin system
+ * Supports did:key and did:web out of the box, extensible for other methods
+ */
+import { FetchProvider } from "../types/providers";
+/**
+ * DID Document structure
+ */
+export interface DIDDocument {
+    '@context': string[];
+    id: string;
+    verificationMethod?: VerificationMethod[];
+    authentication?: (string | VerificationMethod)[];
+    assertionMethod?: (string | VerificationMethod)[];
+    keyAgreement?: (string | VerificationMethod)[];
+    capabilityInvocation?: (string | VerificationMethod)[];
+    capabilityDelegation?: (string | VerificationMethod)[];
+}
+export interface VerificationMethod {
+    id: string;
+    type: string;
+    controller: string;
+    publicKeyBase58?: string;
+    publicKeyJwk?: any;
+    publicKeyMultibase?: string;
+}
+/**
+ * DID resolver interface
+ */
+export interface DIDResolver {
+    /**
+     * Check if this resolver can handle the given DID method
+     */
+    canResolve(did: string): boolean;
+    /**
+     * Resolve a DID to its document
+     */
+    resolve(did: string): Promise<DIDDocument>;
+}
+/**
+ * did:key resolver (built-in)
+ */
+export declare class DIDKeyResolver implements DIDResolver {
+    canResolve(did: string): boolean;
+    resolve(did: string): Promise<DIDDocument>;
+    private decodeMultibase;
+}
+/**
+ * did:web resolver (built-in)
+ */
+export declare class DIDWebResolver implements DIDResolver {
+    private fetchProvider;
+    constructor(fetchProvider: FetchProvider);
+    canResolve(did: string): boolean;
+    resolve(did: string): Promise<DIDDocument>;
+}
+/**
+ * Universal DID resolver with plugin support
+ */
+export declare class UniversalDIDResolver {
+    private resolvers;
+    constructor(fetchProvider?: FetchProvider);
+    /**
+     * Register a DID resolver
+     */
+    registerResolver(resolver: DIDResolver): void;
+    /**
+     * Resolve a DID using the appropriate resolver
+     */
+    resolve(did: string): Promise<DIDDocument>;
+    /**
+     * Extract public key from DID document
+     */
+    getPublicKey(did: string, keyId?: string): Promise<string>;
+    private decodePublicKey;
+}
+/**
+ * Lean DID resolver for edge environments
+ */
+export declare class EdgeDIDResolver extends UniversalDIDResolver {
+    private cache;
+    constructor(cache?: Map<string, DIDDocument>);
+    /**
+     * Resolve with caching
+     */
+    resolve(did: string): Promise<DIDDocument>;
+    /**
+     * Pre-populate cache for known DIDs
+     */
+    preloadCache(documents: DIDDocument[]): void;
+}
+//# sourceMappingURL=resolver.d.ts.map

package/dist/did/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../src/did/resolver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC1C,cAAc,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IACjD,eAAe,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IAClD,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IAC/C,oBAAoB,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;IACvD,oBAAoB,CAAC,EAAE,CAAC,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,GAAG,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAEjC;;OAEG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC5C;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,WAAW;IAChD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI1B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAoChD,OAAO,CAAC,eAAe;CAYxB;AAED;;GAEG;AACH,qBAAa,cAAe,YAAW,WAAW;IACpC,OAAO,CAAC,aAAa;gBAAb,aAAa,EAAE,aAAa;IAEhD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI1B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CA2BjD;AAED;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,SAAS,CAAqB;gBAE1B,aAAa,CAAC,EAAE,aAAa;IASzC;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI;IAI7C;;OAEG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAWhD;;OAEG;IACG,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgChE,OAAO,CAAC,eAAe;CAUxB;AAED;;GAEG;AACH,qBAAa,eAAgB,SAAQ,oBAAoB;IAC3C,OAAO,CAAC,KAAK;gBAAL,KAAK,GAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAa;IAI/D;;OAEG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAmBhD;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI;CAK7C"}