@kya-os/mcp-i-core 1.3.12 → 1.3.14

package/src/index.ts

@@ -1,310 +0,0 @@
-/**
- * @kya-os/mcp-i-core
- *
- * Core provider-based architecture for MCP-I framework.
- * Platform-agnostic runtime that can be extended for any environment.
- */
-
-// Base providers
-export {
-  CryptoProvider,
-  ClockProvider,
-  FetchProvider,
-  StorageProvider,
-  NonceCacheProvider,
-  IdentityProvider,
-  type AgentIdentity,
-} from "./providers/base";
-
-// Memory providers
-export {
-  MemoryStorageProvider,
-  MemoryNonceCacheProvider,
-  MemoryIdentityProvider,
-} from "./providers/memory";
-
-// Runtime
-export { MCPIRuntimeBase } from "./runtime/base";
-export type { RuntimeWithAccessControl } from "./runtime/base";
-
-// Audit Logger Interface
-export type { IAuditLogger } from "./runtime/audit-logger";
-
-// Utilities
-export * from "./utils";
-// Tool Protection
-export { ToolProtectionService } from "./services/tool-protection.service";
-
-// Crypto Service
-export { CryptoService } from "./services/crypto.service";
-
-export type { Ed25519JWK, ParsedJWS } from "./services/crypto.service";
-
-// Proof Verifier Service
-export { ProofVerifier } from "./services/proof-verifier";
-
-export type {
-  ProofVerificationResult,
-  ProofVerifierConfig,
-} from "./services/proof-verifier";
-
-// Access Control API Service (stub for Phase 3)
-export { AccessControlApiService } from "./services/access-control.service";
-
-export type {
-  AccessControlApiServiceConfig,
-  AccessControlApiServiceMetrics,
-} from "./services/access-control.service";
-
-// Session Registration Service
-export {
-  SessionRegistrationService,
-  createSessionRegistrationService,
-} from "./services/session-registration.service";
-
-export type {
-  SessionRegistrationServiceConfig,
-  SessionRegistrationResult,
-} from "./services/session-registration.service";
-
-// OAuth Config Service (Phase 1)
-export { OAuthConfigService } from "./services/oauth-config.service";
-
-export type { OAuthConfigServiceConfig } from "./services/oauth-config.service";
-
-// OAuth Service (Phase 1)
-export { OAuthService } from "./services/oauth-service";
-
-export type { OAuthServiceConfig } from "./services/oauth-service";
-
-// Tool Context Builder (Phase 1)
-export { ToolContextBuilder } from "./services/tool-context-builder";
-
-export type { ToolContextBuilderConfig } from "./services/tool-context-builder";
-
-// OAuth Provider Registry (Phase 2)
-export { OAuthProviderRegistry } from "./services/oauth-provider-registry";
-
-// Provider Resolver (Phase 2)
-export { ProviderResolver } from "./services/provider-resolver";
-
-// Provider Validator (Phase 3)
-export { ProviderValidator, ProviderValidationError } from "./services/provider-validator";
-
-// OAuth Token Retrieval Service (Phase 3)
-export { OAuthTokenRetrievalService } from "./services/oauth-token-retrieval.service";
-export type { OAuthTokenRetrievalServiceConfig } from "./services/oauth-token-retrieval.service";
-
-// Batch Delegation Service (Phase 2)
-export { BatchDelegationService } from "./services/batch-delegation.service";
-export type { ToolGroup } from "./services/batch-delegation.service";
-
-// OAuth Config Cache
-export {
-  InMemoryOAuthConfigCache,
-  NoOpOAuthConfigCache,
-} from "./cache/oauth-config-cache";
-
-export type { OAuthConfigCache } from "./cache/oauth-config-cache";
-
-// Storage Service Factory
-export {
-  createStorageProviders,
-  StorageKeyHelpers,
-  migrateLegacyKeys,
-} from "./services/storage.service";
-
-export type {
-  StorageServiceConfig,
-  StorageProviders,
-} from "./services/storage.service";
-
-// Proof Verification Errors
-export {
-  ProofVerificationError,
-  PROOF_VERIFICATION_ERROR_CODES,
-  createProofVerificationError,
-} from "./services/errors";
-
-export type { ProofVerificationErrorCode } from "./services/errors";
-
-export {
-  ToolProtectionCache,
-  InMemoryToolProtectionCache,
-  NoOpToolProtectionCache,
-} from "./cache/tool-protection-cache";
-
-export type {
-  ToolProtection,
-  ToolProtectionConfig,
-  ToolProtectionServiceConfig,
-} from "./types/tool-protection";
-
-export { DelegationRequiredError } from "./types/tool-protection";
-export { OAuthRequiredError } from "./types/oauth-required-error";
-export type { OAuthRequiredErrorOptions } from "./types/oauth-required-error";
-
-// Delegation (W3C VC-based)
-export {
-  DelegationCredentialIssuer,
-  createDelegationIssuer,
-  type IssueDelegationOptions,
-  type VCSigningFunction,
-  type IdentityProvider as DelegationIdentityProvider,
-} from "./delegation/vc-issuer";
-
-export {
-  DelegationCredentialVerifier,
-  createDelegationVerifier,
-  type DelegationVCVerificationResult,
-  type VerifyDelegationVCOptions,
-  type DIDResolver,
-  type DIDDocument,
-  type VerificationMethod,
-  type StatusListResolver,
-  type SignatureVerificationFunction,
-} from "./delegation/vc-verifier";
-
-// StatusList2021
-export {
-  StatusList2021Manager,
-  createStatusListManager,
-  type StatusListStorageProvider,
-  type StatusListIdentityProvider,
-} from "./delegation/statuslist-manager";
-
-export {
-  BitstringManager,
-  isIndexSet,
-  type CompressionFunction,
-  type DecompressionFunction,
-} from "./delegation/bitstring";
-
-// Delegation Graph & Cascading Revocation
-export {
-  DelegationGraphManager,
-  createDelegationGraph,
-  type DelegationNode,
-  type DelegationGraphStorageProvider,
-} from "./delegation/delegation-graph";
-
-export {
-  CascadingRevocationManager,
-  createCascadingRevocationManager,
-  type RevocationEvent,
-  type RevocationHook,
-  type CascadingRevocationOptions,
-} from "./delegation/cascading-revocation";
-
-// Storage Implementations (for testing and examples)
-export { MemoryStatusListStorage } from "./delegation/storage/memory-statuslist-storage";
-
-export { MemoryDelegationGraphStorage } from "./delegation/storage/memory-graph-storage";
-
-// DID:key Resolver (Phase 3 VC Verification)
-export {
-  createDidKeyResolver,
-  isEd25519DidKey,
-  extractPublicKeyFromDidKey,
-  publicKeyToJwk,
-  resolveDidKeySync,
-} from "./delegation/did-key-resolver";
-
-// Base58 Utilities (for did:key encoding/decoding)
-export {
-  base58Encode,
-  base58Decode,
-  isValidBase58,
-} from "./utils/base58";
-
-// Compliance Verification (with JSON Schema draft-07 support)
-export {
-  SchemaVerifier,
-  createSchemaVerifier,
-  type SchemaMetadata,
-  type FieldComplianceResult,
-  type SchemaComplianceReport,
-  type FullComplianceReport,
-} from "./compliance/schema-verifier";
-
-export {
-  SCHEMA_REGISTRY,
-  getAllSchemas,
-  getSchemasByCategory,
-  getSchemaById,
-  getCriticalSchemas,
-  getSchemaStats,
-} from "./compliance/schema-registry";
-
-export {
-  canonicalizeJSON,
-  createUnsignedVCJWT,
-  completeVCJWT,
-  parseVCJWT,
-  type VCJWTHeader,
-  type VCJWTPayload,
-  type EncodeVCAsJWTOptions,
-} from "./delegation/utils";
-
-// Base64 utilities for VC JWT encoding
-export {
-  base64urlEncodeFromBytes,
-  base64urlEncodeFromString,
-  base64urlDecodeToBytes,
-  base64urlDecodeToString,
-  bytesToBase64,
-} from "./utils/base64";
-
-// Re-export commonly used types from contracts
-// Note: @kya-os/contracts exports are at the root level
-import type {
-  HandshakeRequest,
-  SessionContext,
-  NonceCache,
-  NonceCacheEntry,
-  NonceCacheConfig,
-  ProofMeta,
-  DetachedProof,
-  CanonicalHashes,
-  AuditRecord,
-} from "@kya-os/contracts";
-
-export type {
-  HandshakeRequest,
-  SessionContext,
-  NonceCache,
-  NonceCacheEntry,
-  NonceCacheConfig,
-  ProofMeta,
-  DetachedProof,
-  CanonicalHashes,
-  AuditRecord,
-};
-
-// Configuration types and utilities
-export * from "./config";
-
-// Remote configuration fetching
-export {
-  fetchRemoteConfig,
-  type RemoteConfigCache,
-  type RemoteConfigOptions,
-} from "./config/remote-config";
-
-// User DID Manager (Phase 4)
-export { UserDidManager } from "./identity/user-did-manager";
-export type {
-  UserDidStorage,
-  UserDidManagerConfig,
-  UserKeyPair,
-  OAuthIdentity,
-} from "./identity/user-did-manager";
-
-// IDP Token Resolver (Phase 1 - MH-7, updated for CRED-003)
-export { IdpTokenResolver } from "./identity/idp-token-resolver";
-export type { IdpTokenResolverConfig } from "./identity/idp-token-resolver";
-export type {
-  IIdpTokenStorage,
-  TokenUsageMetadata,
-  IdpTokensWithMetadata,
-} from "./identity/idp-token-storage.interface";

package/src/providers/base.d.ts

@@ -1,91 +0,0 @@
-/**
- * Base Provider Classes
- *
- * Abstract classes that define the provider interfaces for
- * platform-specific implementations.
- */
-/**
- * Cryptographic operations provider
- */
-export declare abstract class CryptoProvider {
-    abstract sign(data: Uint8Array, privateKey: string): Promise<Uint8Array>;
-    abstract verify(data: Uint8Array, signature: Uint8Array, publicKey: string): Promise<boolean>;
-    abstract generateKeyPair(): Promise<{
-        privateKey: string;
-        publicKey: string;
-    }>;
-    abstract hash(data: Uint8Array): Promise<Uint8Array>;
-    abstract randomBytes(length: number): Promise<Uint8Array>;
-}
-/**
- * Clock/timing operations provider
- */
-export declare abstract class ClockProvider {
-    abstract now(): number;
-    abstract isWithinSkew(timestamp: number, skewSeconds: number): boolean;
-    abstract hasExpired(expiresAt: number): boolean;
-    abstract calculateExpiry(ttlSeconds: number): number;
-    abstract format(timestamp: number): string;
-}
-/**
- * Network fetch operations provider
- */
-export declare abstract class FetchProvider {
-    abstract resolveDID(did: string): Promise<any>;
-    abstract fetchStatusList(url: string): Promise<any>;
-    abstract fetchDelegationChain(id: string): Promise<any[]>;
-    abstract fetch(url: string, options?: any): Promise<Response>;
-}
-/**
- * Storage operations provider
- */
-export declare abstract class StorageProvider {
-    abstract get(key: string): Promise<string | null>;
-    abstract set(key: string, value: string): Promise<void>;
-    abstract delete(key: string): Promise<void>;
-    abstract exists(key: string): Promise<boolean>;
-    abstract list(prefix?: string): Promise<string[]>;
-}
-/**
- * Nonce cache provider
- * Handles replay prevention
- *
- * Nonces should be scoped per agent to prevent cross-agent replay attacks.
- * When agentDid is provided, implementations should use agent-scoped keys.
- */
-export declare abstract class NonceCacheProvider {
-    /**
-     * Check if a nonce has been used
-     * @param nonce - The nonce to check
-     * @param agentDid - Optional agent DID for scoping (prevents cross-agent replay attacks)
-     */
-    abstract has(nonce: string, agentDid?: string): Promise<boolean>;
-    /**
-     * Add a nonce to the cache
-     * @param nonce - The nonce to cache
-     * @param ttlSeconds - Time to live in seconds (callers now pass TTL, not absolute timestamp)
-     * @param agentDid - Optional agent DID for scoping (prevents cross-agent replay attacks)
-     */
-    abstract add(nonce: string, ttlSeconds: number, agentDid?: string): Promise<void>;
-    abstract cleanup(): Promise<void>;
-    abstract destroy(): Promise<void>;
-}
-/**
- * Identity provider for managing agent identities
- */
-export interface AgentIdentity {
-    did: string;
-    kid: string;
-    privateKey: string;
-    publicKey: string;
-    createdAt: string;
-    type: 'development' | 'production';
-    metadata?: Record<string, any>;
-}
-export declare abstract class IdentityProvider {
-    abstract getIdentity(): Promise<AgentIdentity>;
-    abstract saveIdentity(identity: AgentIdentity): Promise<void>;
-    abstract rotateKeys(): Promise<AgentIdentity>;
-    abstract deleteIdentity(): Promise<void>;
-}
-//# sourceMappingURL=base.d.ts.map

package/src/providers/base.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["base.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,8BAAsB,cAAc;IAClC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IACxE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC7F,QAAQ,CAAC,eAAe,IAAI,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAC1D;AAED;;GAEG;AACH,8BAAsB,aAAa;IACjC,QAAQ,CAAC,GAAG,IAAI,MAAM;IACtB,QAAQ,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO;IACtE,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAC/C,QAAQ,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IACpD,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;CAC3C;AAED;;GAEG;AACH,8BAAsB,aAAa;IACjC,QAAQ,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAC9C,QAAQ,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IACnD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACzD,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;CAC9D;AAED;;GAEG;AACH,8BAAsB,eAAe;IACnC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IACvD,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9C,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAClD;AAED;;;;;;GAMG;AACH,8BAAsB,kBAAkB;IACtC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhE;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAEjF,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IACjC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,8BAAsB,gBAAgB;IACpC,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7D,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC,aAAa,CAAC;IAC7C,QAAQ,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;CACzC"}

package/src/providers/base.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"base.js","sourceRoot":"","sources":["base.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,OAAgB,cAAc;CAMnC;AAED;;GAEG;AACH,MAAM,OAAgB,aAAa;CAMlC;AAED;;GAEG;AACH,MAAM,OAAgB,aAAa;CAKlC;AAED;;GAEG;AACH,MAAM,OAAgB,eAAe;CAMpC;AAED;;;;;;GAMG;AACH,MAAM,OAAgB,kBAAkB;CAkBvC;AAeD,MAAM,OAAgB,gBAAgB;CAKrC"}

package/src/providers/base.ts

@@ -1,96 +0,0 @@
-/**
- * Base Provider Classes
- *
- * Abstract classes that define the provider interfaces for
- * platform-specific implementations.
- */
-
-/**
- * Cryptographic operations provider
- */
-export abstract class CryptoProvider {
-  abstract sign(data: Uint8Array, privateKey: string): Promise<Uint8Array>;
-  abstract verify(data: Uint8Array, signature: Uint8Array, publicKey: string): Promise<boolean>;
-  abstract generateKeyPair(): Promise<{ privateKey: string; publicKey: string }>;
-  abstract hash(data: Uint8Array): Promise<Uint8Array>;
-  abstract randomBytes(length: number): Promise<Uint8Array>;
-}
-
-/**
- * Clock/timing operations provider
- */
-export abstract class ClockProvider {
-  abstract now(): number;
-  abstract isWithinSkew(timestamp: number, skewSeconds: number): boolean;
-  abstract hasExpired(expiresAt: number): boolean;
-  abstract calculateExpiry(ttlSeconds: number): number;
-  abstract format(timestamp: number): string;
-}
-
-/**
- * Network fetch operations provider
- */
-export abstract class FetchProvider {
-  abstract resolveDID(did: string): Promise<any>;
-  abstract fetchStatusList(url: string): Promise<any>;
-  abstract fetchDelegationChain(id: string): Promise<any[]>;
-  abstract fetch(url: string, options?: any): Promise<Response>;
-}
-
-/**
- * Storage operations provider
- */
-export abstract class StorageProvider {
-  abstract get(key: string): Promise<string | null>;
-  abstract set(key: string, value: string): Promise<void>;
-  abstract delete(key: string): Promise<void>;
-  abstract exists(key: string): Promise<boolean>;
-  abstract list(prefix?: string): Promise<string[]>;
-}
-
-/**
- * Nonce cache provider
- * Handles replay prevention
- * 
- * Nonces should be scoped per agent to prevent cross-agent replay attacks.
- * When agentDid is provided, implementations should use agent-scoped keys.
- */
-export abstract class NonceCacheProvider {
-  /**
-   * Check if a nonce has been used
-   * @param nonce - The nonce to check
-   * @param agentDid - Optional agent DID for scoping (prevents cross-agent replay attacks)
-   */
-  abstract has(nonce: string, agentDid?: string): Promise<boolean>;
-  
-  /**
-   * Add a nonce to the cache
-   * @param nonce - The nonce to cache
-   * @param ttlSeconds - Time to live in seconds (callers now pass TTL, not absolute timestamp)
-   * @param agentDid - Optional agent DID for scoping (prevents cross-agent replay attacks)
-   */
-  abstract add(nonce: string, ttlSeconds: number, agentDid?: string): Promise<void>;
-  
-  abstract cleanup(): Promise<void>;
-  abstract destroy(): Promise<void>;
-}
-
-/**
- * Identity provider for managing agent identities
- */
-export interface AgentIdentity {
-  did: string;
-  kid: string;
-  privateKey: string;
-  publicKey: string;
-  createdAt: string;
-  type: 'development' | 'production';
-  metadata?: Record<string, any>;
-}
-
-export abstract class IdentityProvider {
-  abstract getIdentity(): Promise<AgentIdentity>;
-  abstract saveIdentity(identity: AgentIdentity): Promise<void>;
-  abstract rotateKeys(): Promise<AgentIdentity>;
-  abstract deleteIdentity(): Promise<void>;
-}

package/src/providers/memory.ts

@@ -1,142 +0,0 @@
-/**
- * Memory-based provider implementations
- *
- * Simple in-memory implementations for development and testing.
- */
-
-import {
-  StorageProvider,
-  NonceCacheProvider,
-  IdentityProvider,
-  AgentIdentity
-} from './base';
-
-/**
- * In-memory storage provider
- */
-export class MemoryStorageProvider extends StorageProvider {
-  private store: Map<string, string> = new Map();
-
-  async get(key: string): Promise<string | null> {
-    return this.store.get(key) ?? null;
-  }
-
-  async set(key: string, value: string): Promise<void> {
-    this.store.set(key, value);
-  }
-
-  async delete(key: string): Promise<void> {
-    this.store.delete(key);
-  }
-
-  async exists(key: string): Promise<boolean> {
-    return this.store.has(key);
-  }
-
-  async list(prefix?: string): Promise<string[]> {
-    const keys = Array.from(this.store.keys());
-    if (prefix) {
-      return keys.filter(k => k.startsWith(prefix));
-    }
-    return keys;
-  }
-}
-
-/**
- * In-memory nonce cache provider
- */
-export class MemoryNonceCacheProvider extends NonceCacheProvider {
-  private nonces: Map<string, number> = new Map();
-
-  async has(nonce: string, agentDid?: string): Promise<boolean> {
-    const key = agentDid ? `nonce:${agentDid}:${nonce}` : `nonce:${nonce}`;
-    const expiry = this.nonces.get(key);
-    if (!expiry) return false;
-
-    if (Date.now() > expiry) {
-      this.nonces.delete(key);
-      return false;
-    }
-
-    return true;
-  }
-
-  async add(nonce: string, ttlSeconds: number, agentDid?: string): Promise<void> {
-    const key = agentDid ? `nonce:${agentDid}:${nonce}` : `nonce:${nonce}`;
-    // Convert TTL seconds to absolute expiration timestamp for storage
-    const expiresAt = Date.now() + (ttlSeconds * 1000);
-    this.nonces.set(key, expiresAt);
-  }
-
-  async cleanup(): Promise<void> {
-    const now = Date.now();
-    for (const [nonce, expiry] of this.nonces) {
-      if (now > expiry) {
-        this.nonces.delete(nonce);
-      }
-    }
-  }
-
-  async destroy(): Promise<void> {
-    this.nonces.clear();
-  }
-}
-
-/**
- * In-memory identity provider
- */
-export class MemoryIdentityProvider extends IdentityProvider {
-  private identity?: AgentIdentity;
-  private cryptoProvider: any;
-
-  constructor(cryptoProvider?: any) {
-    super();
-    this.cryptoProvider = cryptoProvider;
-  }
-
-  async getIdentity(): Promise<AgentIdentity> {
-    if (!this.identity) {
-      this.identity = await this.generateIdentity();
-    }
-    return this.identity;
-  }
-
-  async saveIdentity(identity: AgentIdentity): Promise<void> {
-    this.identity = identity;
-  }
-
-  async rotateKeys(): Promise<AgentIdentity> {
-    this.identity = await this.generateIdentity();
-    return this.identity;
-  }
-
-  async deleteIdentity(): Promise<void> {
-    this.identity = undefined;
-  }
-
-  private async generateIdentity(): Promise<AgentIdentity> {
-    if (!this.cryptoProvider) {
-      throw new Error('Crypto provider required for identity generation');
-    }
-
-    const keyPair = await this.cryptoProvider.generateKeyPair();
-    const did = this.generateDIDFromPublicKey(keyPair.publicKey);
-
-    return {
-      did,
-      kid: `${did}#key-1`,
-      privateKey: keyPair.privateKey,
-      publicKey: keyPair.publicKey,
-      createdAt: new Date().toISOString(),
-      type: 'development'
-    };
-  }
-
-  private generateDIDFromPublicKey(publicKey: string): string {
-    // Simplified DID generation
-    const keyHash = Buffer.from(publicKey, 'base64')
-      .toString('base64url')
-      .substring(0, 32);
-    return `did:key:z${keyHash}`;
-  }
-}

package/src/runtime/audit-logger.ts

@@ -1,39 +0,0 @@
-/**
- * Audit Logger Interface
- *
- * Platform-agnostic interface for audit logging in the MCP-I framework.
- * Implementations should be provided by platform-specific packages.
- */
-
-import type { AuditContext, AuditEventContext } from "@kya-os/contracts/audit";
-
-/**
- * Interface for audit logging implementations
- *
- * This interface is platform-agnostic and can be implemented by:
- * - Node.js implementations (using Node.js crypto)
- * - Cloudflare Workers implementations (using Web Crypto API)
- * - Other platform-specific implementations
- */
-export interface IAuditLogger {
-  /**
-   * Log an audit record (with session deduplication)
-   *
-   * This method logs audit records using the frozen audit.v1 format.
-   * Only the first call per session is logged (deduplication).
-   *
-   * @param context - Audit context with identity, session, hashes, and verification status
-   */
-  logAuditRecord(context: AuditContext): Promise<void>;
-
-  /**
-   * Log an event (without session deduplication)
-   *
-   * This method logs events using the frozen audit.v1 format.
-   * Unlike logAuditRecord(), this always logs the event, allowing
-   * multiple events per session (e.g., consent events).
-   *
-   * @param context - Event context with eventType, identity, session, and optional eventData
-   */
-  logEvent(context: AuditEventContext): Promise<void>;
-}