@kya-os/mcp-i 1.2.1 → 1.2.3

package/dist/test/__tests__/nonce-cache-integration.test.js

@@ -1,116 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const index_js_1 = require("../../cache/index.js");
-/**
- * Integration tests showing how nonce cache would be used in session management
- */
-(0, vitest_1.describe)("Nonce Cache Integration", () => {
-    let cache;
-    (0, vitest_1.beforeEach)(async () => {
-        cache = await (0, index_js_1.createNonceCache)();
-    });
-    (0, vitest_1.describe)("Session Management Integration", () => {
-        class MockSessionManager {
-            nonceCache;
-            constructor(nonceCache) {
-                this.nonceCache = nonceCache;
-            }
-            async validateHandshake(nonce, sessionTtl) {
-                // Check for replay attack
-                if (await this.nonceCache.has(nonce)) {
-                    throw new Error("XMCP_I_EHANDSHAKE: Nonce already used - potential replay attack");
-                }
-                // Add nonce with session TTL to prevent replay
-                await this.nonceCache.add(nonce, sessionTtl);
-            }
-            async isNonceUsed(nonce) {
-                return await this.nonceCache.has(nonce);
-            }
-            async cleanup() {
-                await this.nonceCache.cleanup();
-            }
-        }
-        (0, vitest_1.it)("should prevent replay attacks in session management", async () => {
-            const sessionManager = new MockSessionManager(cache);
-            const nonce = "test-nonce-123";
-            const sessionTtl = 1800; // 30 minutes
-            // First handshake should succeed
-            await (0, vitest_1.expect)(sessionManager.validateHandshake(nonce, sessionTtl)).resolves.not.toThrow();
-            // Verify nonce is now marked as used
-            (0, vitest_1.expect)(await sessionManager.isNonceUsed(nonce)).toBe(true);
-            // Second handshake with same nonce should fail (replay attack)
-            await (0, vitest_1.expect)(sessionManager.validateHandshake(nonce, sessionTtl)).rejects.toThrow("potential replay attack");
-        });
-        (0, vitest_1.it)("should handle sequential nonce validation attempts", async () => {
-            const sessionManager = new MockSessionManager(cache);
-            const nonce = "sequential-nonce";
-            const sessionTtl = 1800;
-            // First attempt should succeed
-            await (0, vitest_1.expect)(sessionManager.validateHandshake(nonce, sessionTtl)).resolves.not.toThrow();
-            // Subsequent attempts should fail (replay attack)
-            await (0, vitest_1.expect)(sessionManager.validateHandshake(nonce, sessionTtl)).rejects.toThrow("potential replay attack");
-            await (0, vitest_1.expect)(sessionManager.validateHandshake(nonce, sessionTtl)).rejects.toThrow("potential replay attack");
-        });
-        (0, vitest_1.it)("should allow different nonces in the same session window", async () => {
-            const sessionManager = new MockSessionManager(cache);
-            const sessionTtl = 1800;
-            // Different nonces should all be allowed
-            const nonces = ["nonce-1", "nonce-2", "nonce-3"];
-            for (const nonce of nonces) {
-                await (0, vitest_1.expect)(sessionManager.validateHandshake(nonce, sessionTtl)).resolves.not.toThrow();
-            }
-            // All nonces should be marked as used
-            for (const nonce of nonces) {
-                (0, vitest_1.expect)(await sessionManager.isNonceUsed(nonce)).toBe(true);
-            }
-        });
-        (0, vitest_1.it)("should handle nonce expiry correctly", async () => {
-            const sessionManager = new MockSessionManager(cache);
-            const nonce = "expiring-nonce";
-            const shortTtl = 0.1; // 0.1 seconds
-            // Add nonce with short TTL
-            await sessionManager.validateHandshake(nonce, shortTtl);
-            // Should be marked as used immediately
-            (0, vitest_1.expect)(await sessionManager.isNonceUsed(nonce)).toBe(true);
-            // Wait for expiry
-            await new Promise((resolve) => setTimeout(resolve, 150));
-            // Should no longer be marked as used after expiry
-            (0, vitest_1.expect)(await sessionManager.isNonceUsed(nonce)).toBe(false);
-            // Should be able to use the same nonce again after expiry
-            await (0, vitest_1.expect)(sessionManager.validateHandshake(nonce, shortTtl)).resolves.not.toThrow();
-        });
-        (0, vitest_1.it)("should handle cleanup operations safely", async () => {
-            const sessionManager = new MockSessionManager(cache);
-            // Add some nonces with different TTLs
-            await sessionManager.validateHandshake("long-lived", 3600);
-            await sessionManager.validateHandshake("short-lived", 0.1);
-            // Wait for short-lived to expire
-            await new Promise((resolve) => setTimeout(resolve, 150));
-            // Cleanup should not throw
-            await (0, vitest_1.expect)(sessionManager.cleanup()).resolves.not.toThrow();
-            // Long-lived should still exist, short-lived should be gone
-            (0, vitest_1.expect)(await sessionManager.isNonceUsed("long-lived")).toBe(true);
-            (0, vitest_1.expect)(await sessionManager.isNonceUsed("short-lived")).toBe(false);
-        });
-    });
-    (0, vitest_1.describe)("Error Handling Integration", () => {
-        (0, vitest_1.it)("should provide structured error messages for replay attacks", async () => {
-            const nonce = "error-test-nonce";
-            await cache.add(nonce, 60);
-            try {
-                await cache.add(nonce, 60);
-                vitest_1.expect.fail("Should have thrown an error");
-            }
-            catch (error) {
-                (0, vitest_1.expect)(error.message).toContain("Nonce error-test-nonce already exists");
-                (0, vitest_1.expect)(error.message).toContain("potential replay attack");
-            }
-        });
-        (0, vitest_1.it)("should handle cache backend failures gracefully", async () => {
-            // This test verifies that the factory falls back to memory cache
-            // when other backends fail (already tested in the factory tests)
-            (0, vitest_1.expect)(cache).toBeInstanceOf(index_js_1.MemoryNonceCache);
-        });
-    });
-});

package/dist/test/__tests__/nonce-cache.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/test/__tests__/nonce-cache.test.js

@@ -1,122 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const memory_nonce_cache_js_1 = require("../../cache/memory-nonce-cache.js");
-const nonce_cache_factory_js_1 = require("../../cache/nonce-cache-factory.js");
-(0, vitest_1.describe)("NonceCache", () => {
-    (0, vitest_1.describe)("MemoryNonceCache", () => {
-        let cache;
-        (0, vitest_1.beforeEach)(() => {
-            cache = new memory_nonce_cache_js_1.MemoryNonceCache();
-        });
-        (0, vitest_1.it)("should not find non-existent nonce", async () => {
-            const exists = await cache.has("non-existent-nonce");
-            (0, vitest_1.expect)(exists).toBe(false);
-        });
-        (0, vitest_1.it)("should add and find nonce", async () => {
-            const nonce = "test-nonce-123";
-            await cache.add(nonce, 60); // 60 seconds TTL
-            const exists = await cache.has(nonce);
-            (0, vitest_1.expect)(exists).toBe(true);
-        });
-        (0, vitest_1.it)("should prevent replay attacks by rejecting duplicate nonces", async () => {
-            const nonce = "duplicate-nonce";
-            await cache.add(nonce, 60);
-            await (0, vitest_1.expect)(cache.add(nonce, 60)).rejects.toThrow("Nonce duplicate-nonce already exists - potential replay attack");
-        });
-        (0, vitest_1.it)("should expire nonces after TTL", async () => {
-            const nonce = "expiring-nonce";
-            await cache.add(nonce, 0.1); // 0.1 seconds TTL
-            // Should exist immediately
-            (0, vitest_1.expect)(await cache.has(nonce)).toBe(true);
-            // Wait for expiry
-            await new Promise((resolve) => setTimeout(resolve, 150));
-            // Should be expired
-            (0, vitest_1.expect)(await cache.has(nonce)).toBe(false);
-        });
-        (0, vitest_1.it)("should clean up expired entries", async () => {
-            const nonce1 = "nonce-1";
-            const nonce2 = "nonce-2";
-            await cache.add(nonce1, 0.1); // Short TTL
-            await cache.add(nonce2, 60); // Long TTL
-            // Wait for first nonce to expire
-            await new Promise((resolve) => setTimeout(resolve, 150));
-            await cache.cleanup();
-            (0, vitest_1.expect)(await cache.has(nonce1)).toBe(false);
-            (0, vitest_1.expect)(await cache.has(nonce2)).toBe(true);
-        });
-        (0, vitest_1.it)("should handle atomic add-if-absent semantics", async () => {
-            const nonce = "atomic-test";
-            // First add should succeed
-            await (0, vitest_1.expect)(cache.add(nonce, 60)).resolves.not.toThrow();
-            // Second add should fail
-            await (0, vitest_1.expect)(cache.add(nonce, 60)).rejects.toThrow("potential replay attack");
-        });
-    });
-    (0, vitest_1.describe)("Cache Type Detection", () => {
-        (0, vitest_1.beforeEach)(() => {
-            // Clear environment variables
-            delete process.env.mcpi_NONCE_CACHE_TYPE;
-            delete process.env.REDIS_URL;
-            delete process.env.mcpi_REDIS_URL;
-            delete process.env.AWS_REGION;
-            delete process.env.mcpi_DYNAMODB_TABLE;
-        });
-        (0, vitest_1.it)("should detect memory cache by default", () => {
-            const type = (0, nonce_cache_factory_js_1.detectCacheType)();
-            (0, vitest_1.expect)(type).toBe("memory");
-        });
-        (0, vitest_1.it)("should detect redis when REDIS_URL is set", () => {
-            process.env.REDIS_URL = "redis://localhost:6379";
-            const type = (0, nonce_cache_factory_js_1.detectCacheType)();
-            (0, vitest_1.expect)(type).toBe("redis");
-        });
-        (0, vitest_1.it)("should detect dynamodb when AWS_REGION is set", () => {
-            process.env.AWS_REGION = "us-east-1";
-            const type = (0, nonce_cache_factory_js_1.detectCacheType)();
-            (0, vitest_1.expect)(type).toBe("dynamodb");
-        });
-        (0, vitest_1.it)("should respect explicit cache type configuration", () => {
-            process.env.REDIS_URL = "redis://localhost:6379"; // This would normally trigger redis
-            process.env.mcpi_NONCE_CACHE_TYPE = "memory";
-            const type = (0, nonce_cache_factory_js_1.detectCacheType)();
-            (0, vitest_1.expect)(type).toBe("memory");
-        });
-    });
-    (0, vitest_1.describe)("Cache Factory", () => {
-        (0, vitest_1.it)("should create memory cache by default", async () => {
-            const cache = await (0, nonce_cache_factory_js_1.createNonceCache)();
-            (0, vitest_1.expect)(cache).toBeInstanceOf(memory_nonce_cache_js_1.MemoryNonceCache);
-        });
-        (0, vitest_1.it)("should create memory cache when redis connection fails", async () => {
-            // Mock console.warn to avoid noise in tests
-            const warnSpy = vitest_1.vi.spyOn(console, "warn").mockImplementation(() => { });
-            const cache = await (0, nonce_cache_factory_js_1.createNonceCache)({
-                type: "redis",
-                redis: { url: "redis://invalid-host:6379", keyPrefix: "test:" },
-            });
-            (0, vitest_1.expect)(cache).toBeInstanceOf(memory_nonce_cache_js_1.MemoryNonceCache);
-            // Check that we got a warning about Redis failure (the exact message may vary)
-            (0, vitest_1.expect)(warnSpy).toHaveBeenCalledWith(vitest_1.expect.stringContaining("Failed to"), vitest_1.expect.anything());
-            warnSpy.mockRestore();
-        });
-        (0, vitest_1.it)("should handle missing configuration gracefully", async () => {
-            const warnSpy = vitest_1.vi.spyOn(console, "warn").mockImplementation(() => { });
-            const cache = await (0, nonce_cache_factory_js_1.createNonceCache)({
-                type: "dynamodb",
-                // Missing tableName
-            });
-            (0, vitest_1.expect)(cache).toBeInstanceOf(memory_nonce_cache_js_1.MemoryNonceCache);
-            (0, vitest_1.expect)(warnSpy).toHaveBeenCalledWith(vitest_1.expect.stringContaining("DynamoDB table name not found"));
-            warnSpy.mockRestore();
-        });
-    });
-    (0, vitest_1.describe)("Multi-instance Warning", () => {
-        (0, vitest_1.it)("should warn about multi-instance limitations for memory cache", () => {
-            const warnSpy = vitest_1.vi.spyOn(console, "warn").mockImplementation(() => { });
-            new memory_nonce_cache_js_1.MemoryNonceCache();
-            (0, vitest_1.expect)(warnSpy).toHaveBeenCalledWith(vitest_1.expect.stringContaining("not suitable for multi-instance deployments"));
-            warnSpy.mockRestore();
-        });
-    });
-});

package/dist/test/__tests__/runtime-integration.test.d.ts

@@ -1,4 +0,0 @@
-/**
- * Runtime integration tests
- */
-export {};

package/dist/test/__tests__/runtime-integration.test.js

@@ -1,192 +0,0 @@
-"use strict";
-/**
- * Runtime integration tests
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const test_environment_js_1 = require("../test-environment.js");
-const mock_identity_provider_js_1 = require("../mock-identity-provider.js");
-const runtime_integration_js_1 = require("../runtime-integration.js");
-const test_1 = require("@kya-os/contracts/test");
-(0, vitest_1.describe)("Runtime Integration", () => {
-    (0, vitest_1.beforeEach)(() => {
-        (0, test_environment_js_1.configureTestEnvironment)({ seed: "runtime-test" });
-        (0, mock_identity_provider_js_1.resetMockIdentityProvider)();
-    });
-    (0, vitest_1.describe)("Test Runtime Configuration", () => {
-        (0, vitest_1.it)("should provide test runtime config in test mode", () => {
-            const config = (0, runtime_integration_js_1.getTestRuntimeConfig)();
-            (0, vitest_1.expect)(config).toBeDefined();
-            (0, vitest_1.expect)(config?.skipKTACalls).toBe(true);
-            (0, vitest_1.expect)(config?.useMockIdentities).toBe(true);
-            (0, vitest_1.expect)(config?.deterministicKeys).toBe(true);
-            (0, vitest_1.expect)(config?.mockKTAResponses).toBe(true);
-        });
-        (0, vitest_1.it)("should return null config outside test mode", () => {
-            // Temporarily disable test mode
-            const originalEnv = process.env.XMCP_ENV;
-            process.env.XMCP_ENV = "production";
-            const config = (0, runtime_integration_js_1.getTestRuntimeConfig)();
-            (0, vitest_1.expect)(config).toBeNull();
-            // Restore test mode
-            process.env.XMCP_ENV = originalEnv;
-        });
-    });
-    (0, vitest_1.describe)("KTA Call Interception", () => {
-        (0, vitest_1.it)("should intercept register calls", async () => {
-            const result = await (0, runtime_integration_js_1.interceptKTACall)("register", async () => {
-                throw new Error("Should not call original");
-            });
-            (0, vitest_1.expect)(result).toMatchObject({
-                success: true,
-                agentURL: vitest_1.expect.stringContaining("test-kta.example.com"),
-                conformanceCapabilities: ["handshake", "signing", "verification"],
-            });
-        });
-        (0, vitest_1.it)("should intercept delegation checks", async () => {
-            const result = await (0, runtime_integration_js_1.interceptKTACall)("checkDelegation", async () => {
-                throw new Error("Should not call original");
-            });
-            (0, vitest_1.expect)(result).toMatchObject({
-                status: "active",
-                valid: true,
-            });
-        });
-        (0, vitest_1.it)("should intercept claim calls", async () => {
-            const result = await (0, runtime_integration_js_1.interceptKTACall)("claim", async () => {
-                throw new Error("Should not call original");
-            });
-            (0, vitest_1.expect)(result).toMatchObject({
-                success: true,
-                claimed: true,
-                agentURL: vitest_1.expect.stringContaining("test-kta.example.com"),
-            });
-        });
-        (0, vitest_1.it)("should use custom mock response when provided", async () => {
-            const customResponse = { custom: "response" };
-            const result = await (0, runtime_integration_js_1.interceptKTACall)("register", async () => {
-                throw new Error("Should not call original");
-            }, async () => customResponse);
-            (0, vitest_1.expect)(result).toEqual(customResponse);
-        });
-        (0, vitest_1.it)("should call original function when not in test mode", async () => {
-            // Temporarily disable test mode
-            const originalEnv = process.env.XMCP_ENV;
-            process.env.XMCP_ENV = "production";
-            let originalCalled = false;
-            await (0, runtime_integration_js_1.interceptKTACall)("register", async () => {
-                originalCalled = true;
-                return { called: true };
-            });
-            (0, vitest_1.expect)(originalCalled).toBe(true);
-            // Restore test mode
-            process.env.XMCP_ENV = originalEnv;
-        });
-        (0, vitest_1.it)("should throw error for unknown operations", async () => {
-            await (0, vitest_1.expect)((0, runtime_integration_js_1.interceptKTACall)("unknownOperation", async () => ({ success: true }))).rejects.toThrow(test_1.TEST_ERROR_CODES.INVALID_TEST_CONFIGURATION);
-        });
-    });
-    (0, vitest_1.describe)("Test Identity for Runtime", () => {
-        (0, vitest_1.it)("should get test identity for runtime", () => {
-            const identity = (0, runtime_integration_js_1.getTestIdentityForRuntime)("agent1");
-            (0, vitest_1.expect)(identity).toBeDefined();
-            (0, vitest_1.expect)(identity.did).toBeDefined();
-            (0, vitest_1.expect)(identity.keyId).toBeDefined();
-            (0, vitest_1.expect)(identity.privateKey).toBeDefined();
-            (0, vitest_1.expect)(identity.publicKey).toBeDefined();
-        });
-        (0, vitest_1.it)("should throw error for non-existent identity", () => {
-            (0, vitest_1.expect)(() => {
-                (0, runtime_integration_js_1.getTestIdentityForRuntime)("nonexistent");
-            }).toThrow(test_1.TEST_ERROR_CODES.INVALID_TEST_CONFIGURATION);
-        });
-        (0, vitest_1.it)("should throw error outside test mode", () => {
-            // Temporarily disable test mode
-            const originalEnv = process.env.XMCP_ENV;
-            process.env.XMCP_ENV = "production";
-            (0, vitest_1.expect)(() => {
-                (0, runtime_integration_js_1.getTestIdentityForRuntime)("agent1");
-            }).toThrow(test_1.TEST_ERROR_CODES.INVALID_TEST_CONFIGURATION);
-            // Restore test mode
-            process.env.XMCP_ENV = originalEnv;
-        });
-    });
-    (0, vitest_1.describe)("Test Session Context", () => {
-        (0, vitest_1.it)("should create test session context with defaults", () => {
-            const context = (0, runtime_integration_js_1.createTestSessionContext)();
-            (0, vitest_1.expect)(context).toMatchObject({
-                sessionId: "sess_test_default",
-                audience: "test.example.com",
-                nonce: "test_nonce_123",
-                timestamp: vitest_1.expect.any(Number),
-                createdAt: vitest_1.expect.any(Number),
-                lastActivity: vitest_1.expect.any(Number),
-                ttlMinutes: 30,
-            });
-        });
-        (0, vitest_1.it)("should create test session context with custom options", () => {
-            const options = {
-                sessionId: "custom_session",
-                audience: "custom.example.com",
-                nonce: "custom_nonce",
-                timestamp: 1234567890,
-            };
-            const context = (0, runtime_integration_js_1.createTestSessionContext)(options);
-            (0, vitest_1.expect)(context).toMatchObject({
-                sessionId: "custom_session",
-                audience: "custom.example.com",
-                nonce: "custom_nonce",
-                timestamp: 1234567890,
-                ttlMinutes: 30,
-            });
-        });
-        (0, vitest_1.it)("should throw error outside test mode", () => {
-            // Temporarily disable test mode
-            const originalEnv = process.env.XMCP_ENV;
-            process.env.XMCP_ENV = "production";
-            (0, vitest_1.expect)(() => {
-                (0, runtime_integration_js_1.createTestSessionContext)();
-            }).toThrow(test_1.TEST_ERROR_CODES.INVALID_TEST_CONFIGURATION);
-            // Restore test mode
-            process.env.XMCP_ENV = originalEnv;
-        });
-    });
-    (0, vitest_1.describe)("Test Environment Validation", () => {
-        (0, vitest_1.it)("should validate test environment successfully", () => {
-            const validation = (0, runtime_integration_js_1.validateTestEnvironment)();
-            (0, vitest_1.expect)(validation.valid).toBe(true);
-            (0, vitest_1.expect)(validation.errors).toHaveLength(0);
-        });
-        (0, vitest_1.it)("should detect invalid test environment", () => {
-            // Temporarily disable test mode
-            const originalEnv = process.env.XMCP_ENV;
-            process.env.XMCP_ENV = "production";
-            const validation = (0, runtime_integration_js_1.validateTestEnvironment)();
-            (0, vitest_1.expect)(validation.valid).toBe(false);
-            (0, vitest_1.expect)(validation.errors).toContain("XMCP_ENV is not set to 'test'");
-            // Restore test mode
-            process.env.XMCP_ENV = originalEnv;
-        });
-    });
-    (0, vitest_1.describe)("Test Mode Guard", () => {
-        (0, vitest_1.it)("should allow function execution in test mode", () => {
-            const testFunction = (0, runtime_integration_js_1.testModeOnly)(() => "test result");
-            (0, vitest_1.expect)(testFunction()).toBe("test result");
-        });
-        (0, vitest_1.it)("should prevent function execution outside test mode", () => {
-            // Temporarily disable test mode
-            const originalEnv = process.env.XMCP_ENV;
-            process.env.XMCP_ENV = "production";
-            const testFunction = (0, runtime_integration_js_1.testModeOnly)(() => "test result");
-            (0, vitest_1.expect)(() => {
-                testFunction();
-            }).toThrow(test_1.TEST_ERROR_CODES.INVALID_TEST_CONFIGURATION);
-            // Restore test mode
-            process.env.XMCP_ENV = originalEnv;
-        });
-        (0, vitest_1.it)("should preserve function arguments and return types", () => {
-            const testFunction = (0, runtime_integration_js_1.testModeOnly)((a, b) => `${a}-${b}`);
-            (0, vitest_1.expect)(testFunction(42, "test")).toBe("42-test");
-        });
-    });
-});

package/dist/test/__tests__/test-infrastructure.test.d.ts

@@ -1,4 +0,0 @@
-/**
- * Test infrastructure validation tests
- */
-export {};

package/dist/test/__tests__/test-infrastructure.test.js

@@ -1,178 +0,0 @@
-"use strict";
-/**
- * Test infrastructure validation tests
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-const vitest_1 = require("vitest");
-const test_environment_js_1 = require("../test-environment.js");
-const deterministic_keys_js_1 = require("../deterministic-keys.js");
-const mock_identity_provider_js_1 = require("../mock-identity-provider.js");
-const local_verification_js_1 = require("../local-verification.js");
-const test_1 = require("@kya-os/contracts/test");
-(0, vitest_1.describe)("Test Infrastructure", () => {
-    (0, vitest_1.beforeEach)(() => {
-        // Configure test environment
-        (0, test_environment_js_1.configureTestEnvironment)({ seed: "test-seed" });
-        (0, mock_identity_provider_js_1.resetMockIdentityProvider)();
-    });
-    (0, vitest_1.describe)("Test Environment", () => {
-        (0, vitest_1.it)("should detect test mode", () => {
-            (0, vitest_1.expect)((0, test_environment_js_1.isTestMode)()).toBe(true);
-        });
-        (0, vitest_1.it)("should skip KTA calls in test mode", () => {
-            (0, vitest_1.expect)((0, test_environment_js_1.shouldSkipKTACalls)()).toBe(true);
-        });
-        (0, vitest_1.it)("should configure test environment", () => {
-            (0, test_environment_js_1.configureTestEnvironment)({
-                seed: "custom-seed",
-                skipKTACalls: true,
-            });
-            (0, vitest_1.expect)(process.env.XMCP_TEST_SEED).toBe("custom-seed");
-            (0, vitest_1.expect)(process.env.XMCP_SKIP_KTA_CALLS).toBe("true");
-            (0, vitest_1.expect)(process.env.XMCP_ENV).toBe("test");
-        });
-    });
-    (0, vitest_1.describe)("Deterministic Keys", () => {
-        (0, vitest_1.it)("should generate deterministic key pairs", () => {
-            const keys1 = (0, deterministic_keys_js_1.generateDeterministicKeyPair)("test-seed-1");
-            const keys2 = (0, deterministic_keys_js_1.generateDeterministicKeyPair)("test-seed-1");
-            const keys3 = (0, deterministic_keys_js_1.generateDeterministicKeyPair)("test-seed-2");
-            // Same seed should produce same keys
-            (0, vitest_1.expect)(keys1.privateKey).toBe(keys2.privateKey);
-            (0, vitest_1.expect)(keys1.publicKey).toBe(keys2.publicKey);
-            // Different seed should produce different keys
-            (0, vitest_1.expect)(keys1.privateKey).not.toBe(keys3.privateKey);
-            (0, vitest_1.expect)(keys1.publicKey).not.toBe(keys3.publicKey);
-        });
-        (0, vitest_1.it)("should generate test identities", () => {
-            const identity = (0, deterministic_keys_js_1.generateTestIdentity)("test-identity", {
-                did: test_1.TEST_DIDS.AGENT_1,
-                keyId: test_1.TEST_KEY_IDS.KEY_TEST_1,
-            });
-            (0, vitest_1.expect)(identity.did).toBe(test_1.TEST_DIDS.AGENT_1);
-            (0, vitest_1.expect)(identity.keyId).toBe(test_1.TEST_KEY_IDS.KEY_TEST_1);
-            (0, vitest_1.expect)(identity.privateKey).toBeDefined();
-            (0, vitest_1.expect)(identity.publicKey).toBeDefined();
-            (0, vitest_1.expect)(identity.createdAt).toBeDefined();
-            (0, vitest_1.expect)(identity.lastRotated).toBeDefined();
-        });
-        (0, vitest_1.it)("should provide predefined test identities", () => {
-            const identities = (0, deterministic_keys_js_1.getPredefinedTestIdentities)();
-            (0, vitest_1.expect)(identities.agent1).toBeDefined();
-            (0, vitest_1.expect)(identities.agent2).toBeDefined();
-            (0, vitest_1.expect)(identities.verifier1).toBeDefined();
-            (0, vitest_1.expect)(identities.agent1.did).toBe(test_1.TEST_DIDS.AGENT_1);
-            (0, vitest_1.expect)(identities.agent2.did).toBe(test_1.TEST_DIDS.AGENT_2);
-            (0, vitest_1.expect)(identities.verifier1.did).toBe(test_1.TEST_DIDS.VERIFIER_1);
-        });
-        (0, vitest_1.it)("should generate deterministic nonces", () => {
-            const nonce1 = (0, deterministic_keys_js_1.generateTestNonce)("seed1");
-            const nonce2 = (0, deterministic_keys_js_1.generateTestNonce)("seed1");
-            const nonce3 = (0, deterministic_keys_js_1.generateTestNonce)("seed2");
-            (0, vitest_1.expect)(nonce1).toBe(nonce2);
-            (0, vitest_1.expect)(nonce1).not.toBe(nonce3);
-        });
-        (0, vitest_1.it)("should generate deterministic session IDs", () => {
-            const sessionId1 = (0, deterministic_keys_js_1.generateTestSessionId)("seed1");
-            const sessionId2 = (0, deterministic_keys_js_1.generateTestSessionId)("seed1");
-            const sessionId3 = (0, deterministic_keys_js_1.generateTestSessionId)("seed2");
-            (0, vitest_1.expect)(sessionId1).toBe(sessionId2);
-            (0, vitest_1.expect)(sessionId1).not.toBe(sessionId3);
-            (0, vitest_1.expect)(sessionId1).toMatch(/^sess_test_/);
-        });
-    });
-    (0, vitest_1.describe)("Mock Identity Provider", () => {
-        (0, vitest_1.it)("should create mock identity provider", () => {
-            const provider = new mock_identity_provider_js_1.MockIdentityProvider();
-            const identities = provider.getAllIdentities();
-            (0, vitest_1.expect)(Object.keys(identities)).toContain("agent1");
-            (0, vitest_1.expect)(Object.keys(identities)).toContain("agent2");
-            (0, vitest_1.expect)(Object.keys(identities)).toContain("verifier1");
-        });
-        (0, vitest_1.it)("should manage identities", () => {
-            const provider = new mock_identity_provider_js_1.MockIdentityProvider();
-            const testIdentity = (0, deterministic_keys_js_1.generateTestIdentity)("custom-test");
-            provider.setIdentity("custom", testIdentity);
-            const retrieved = provider.getIdentity("custom");
-            (0, vitest_1.expect)(retrieved).toEqual(testIdentity);
-        });
-        (0, vitest_1.it)("should manage delegation status", () => {
-            const provider = new mock_identity_provider_js_1.MockIdentityProvider();
-            provider.setDelegation("did:test:agent-1:key-test-1", "active");
-            (0, vitest_1.expect)(provider.getDelegationStatus("did:test:agent-1", "key-test-1")).toBe("active");
-            provider.setDelegation("did:test:agent-1:key-test-1", "revoked");
-            (0, vitest_1.expect)(provider.getDelegationStatus("did:test:agent-1", "key-test-1")).toBe("revoked");
-        });
-        (0, vitest_1.it)("should simulate KTA failures", () => {
-            const provider = new mock_identity_provider_js_1.MockIdentityProvider();
-            provider.simulateKTAFailure("network");
-            (0, vitest_1.expect)(provider.shouldSimulateKTAFailure("network")).toBe(true);
-            (0, vitest_1.expect)(provider.shouldSimulateKTAFailure("auth")).toBe(false);
-            provider.clearKTAFailure("network");
-            (0, vitest_1.expect)(provider.shouldSimulateKTAFailure("network")).toBe(false);
-        });
-        (0, vitest_1.it)("should mock registration calls", async () => {
-            const provider = new mock_identity_provider_js_1.MockIdentityProvider();
-            // Success case
-            const result = await provider.mockRegister("did:test:agent-1", "key-test-1");
-            (0, vitest_1.expect)(result.success).toBe(true);
-            (0, vitest_1.expect)(result.agentURL).toContain("agent-1");
-            // Failure case
-            provider.simulateKTAFailure("auth");
-            const failResult = await provider.mockRegister("did:test:agent-1", "key-test-1");
-            (0, vitest_1.expect)(failResult.success).toBe(false);
-            (0, vitest_1.expect)(failResult.error).toBeDefined();
-        });
-        (0, vitest_1.it)("should use global provider", () => {
-            const provider1 = (0, mock_identity_provider_js_1.getMockIdentityProvider)();
-            const provider2 = (0, mock_identity_provider_js_1.getMockIdentityProvider)();
-            (0, vitest_1.expect)(provider1).toBe(provider2);
-            provider1.setIdentity("test", (0, deterministic_keys_js_1.generateTestIdentity)("test"));
-            (0, vitest_1.expect)(provider2.getIdentity("test")).toBeDefined();
-        });
-    });
-    (0, vitest_1.describe)("Local Verification", () => {
-        (0, vitest_1.it)("should verify mock proofs locally", async () => {
-            const mockProof = (0, local_verification_js_1.createMockProof)({
-                did: test_1.TEST_DIDS.AGENT_1,
-                keyId: test_1.TEST_KEY_IDS.KEY_TEST_1,
-            });
-            const result = await (0, local_verification_js_1.verifyProofLocally)(mockProof);
-            (0, vitest_1.expect)(result.valid).toBe(true);
-            (0, vitest_1.expect)(result.did).toBe(test_1.TEST_DIDS.AGENT_1);
-            (0, vitest_1.expect)(result.keyId).toBe(test_1.TEST_KEY_IDS.KEY_TEST_1);
-            (0, vitest_1.expect)(result.signature.valid).toBe(true);
-            (0, vitest_1.expect)(result.proof.valid).toBe(true);
-            (0, vitest_1.expect)(result.session.valid).toBe(true);
-        });
-        (0, vitest_1.it)("should detect invalid proofs", async () => {
-            const invalidProof = {
-                jws: "invalid-signature",
-                meta: {
-                    did: "invalid-did",
-                    kid: "invalid-key",
-                    ts: Date.now() / 1000,
-                    nonce: "test-nonce",
-                    audience: "test.example.com",
-                    sessionId: "sess_test",
-                    requestHash: "sha256:invalid",
-                    responseHash: "sha256:invalid",
-                },
-            };
-            const result = await (0, local_verification_js_1.verifyProofLocally)(invalidProof);
-            (0, vitest_1.expect)(result.valid).toBe(false);
-            (0, vitest_1.expect)(result.errors.length).toBeGreaterThan(0);
-        });
-        (0, vitest_1.it)("should verify DID documents locally", async () => {
-            const result = await (0, local_verification_js_1.verifyDIDDocumentLocally)(test_1.TEST_DIDS.AGENT_1);
-            (0, vitest_1.expect)(result.valid).toBe(true);
-            (0, vitest_1.expect)(result.document).toBeDefined();
-            (0, vitest_1.expect)(result.document.id).toBe(test_1.TEST_DIDS.AGENT_1);
-        });
-        (0, vitest_1.it)("should handle missing DID documents", async () => {
-            const result = await (0, local_verification_js_1.verifyDIDDocumentLocally)("did:test:nonexistent");
-            (0, vitest_1.expect)(result.valid).toBe(false);
-            (0, vitest_1.expect)(result.error).toContain("No identity found");
-        });
-    });
-});