@kya-os/mcp-i-core 1.2.3-canary.6 → 1.3.0-canary.clientinfo.20251126003544

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (239) hide show
  1. package/.turbo/turbo-build.log +4 -0
  2. package/.turbo/turbo-test$colon$coverage.log +4239 -0
  3. package/.turbo/turbo-test.log +2973 -0
  4. package/COMPLIANCE_IMPROVEMENT_REPORT.md +483 -0
  5. package/Composer 3.md +615 -0
  6. package/GPT-5.md +1169 -0
  7. package/OPUS-plan.md +352 -0
  8. package/PHASE_3_AND_4.1_SUMMARY.md +585 -0
  9. package/PHASE_3_SUMMARY.md +317 -0
  10. package/PHASE_4.1.3_SUMMARY.md +428 -0
  11. package/PHASE_4.1_COMPLETE.md +525 -0
  12. package/PHASE_4_USER_DID_IDENTITY_LINKING_PLAN.md +1240 -0
  13. package/SCHEMA_COMPLIANCE_REPORT.md +275 -0
  14. package/TEST_PLAN.md +571 -0
  15. package/coverage/coverage-final.json +57 -0
  16. package/dist/__tests__/utils/mock-providers.d.ts +1 -2
  17. package/dist/__tests__/utils/mock-providers.d.ts.map +1 -1
  18. package/dist/__tests__/utils/mock-providers.js.map +1 -1
  19. package/dist/cache/oauth-config-cache.d.ts +69 -0
  20. package/dist/cache/oauth-config-cache.d.ts.map +1 -0
  21. package/dist/cache/oauth-config-cache.js +76 -0
  22. package/dist/cache/oauth-config-cache.js.map +1 -0
  23. package/dist/identity/idp-token-resolver.d.ts +53 -0
  24. package/dist/identity/idp-token-resolver.d.ts.map +1 -0
  25. package/dist/identity/idp-token-resolver.js +108 -0
  26. package/dist/identity/idp-token-resolver.js.map +1 -0
  27. package/dist/identity/idp-token-storage.interface.d.ts +42 -0
  28. package/dist/identity/idp-token-storage.interface.d.ts.map +1 -0
  29. package/dist/identity/idp-token-storage.interface.js +12 -0
  30. package/dist/identity/idp-token-storage.interface.js.map +1 -0
  31. package/dist/identity/user-did-manager.d.ts +39 -1
  32. package/dist/identity/user-did-manager.d.ts.map +1 -1
  33. package/dist/identity/user-did-manager.js +69 -3
  34. package/dist/identity/user-did-manager.js.map +1 -1
  35. package/dist/index.d.ts +24 -0
  36. package/dist/index.d.ts.map +1 -1
  37. package/dist/index.js +43 -1
  38. package/dist/index.js.map +1 -1
  39. package/dist/runtime/audit-logger.d.ts +37 -0
  40. package/dist/runtime/audit-logger.d.ts.map +1 -0
  41. package/dist/runtime/audit-logger.js +9 -0
  42. package/dist/runtime/audit-logger.js.map +1 -0
  43. package/dist/runtime/base.d.ts +58 -2
  44. package/dist/runtime/base.d.ts.map +1 -1
  45. package/dist/runtime/base.js +266 -11
  46. package/dist/runtime/base.js.map +1 -1
  47. package/dist/services/access-control.service.d.ts.map +1 -1
  48. package/dist/services/access-control.service.js +200 -35
  49. package/dist/services/access-control.service.js.map +1 -1
  50. package/dist/services/authorization/authorization-registry.d.ts +29 -0
  51. package/dist/services/authorization/authorization-registry.d.ts.map +1 -0
  52. package/dist/services/authorization/authorization-registry.js +57 -0
  53. package/dist/services/authorization/authorization-registry.js.map +1 -0
  54. package/dist/services/authorization/types.d.ts +53 -0
  55. package/dist/services/authorization/types.d.ts.map +1 -0
  56. package/dist/services/authorization/types.js +10 -0
  57. package/dist/services/authorization/types.js.map +1 -0
  58. package/dist/services/batch-delegation.service.d.ts +53 -0
  59. package/dist/services/batch-delegation.service.d.ts.map +1 -0
  60. package/dist/services/batch-delegation.service.js +95 -0
  61. package/dist/services/batch-delegation.service.js.map +1 -0
  62. package/dist/services/index.d.ts +2 -0
  63. package/dist/services/index.d.ts.map +1 -1
  64. package/dist/services/index.js +4 -1
  65. package/dist/services/index.js.map +1 -1
  66. package/dist/services/oauth-config.service.d.ts +53 -0
  67. package/dist/services/oauth-config.service.d.ts.map +1 -0
  68. package/dist/services/oauth-config.service.js +117 -0
  69. package/dist/services/oauth-config.service.js.map +1 -0
  70. package/dist/services/oauth-provider-registry.d.ts +77 -0
  71. package/dist/services/oauth-provider-registry.d.ts.map +1 -0
  72. package/dist/services/oauth-provider-registry.js +112 -0
  73. package/dist/services/oauth-provider-registry.js.map +1 -0
  74. package/dist/services/oauth-service.d.ts +77 -0
  75. package/dist/services/oauth-service.d.ts.map +1 -0
  76. package/dist/services/oauth-service.js +348 -0
  77. package/dist/services/oauth-service.js.map +1 -0
  78. package/dist/services/oauth-token-retrieval.service.d.ts +49 -0
  79. package/dist/services/oauth-token-retrieval.service.d.ts.map +1 -0
  80. package/dist/services/oauth-token-retrieval.service.js +150 -0
  81. package/dist/services/oauth-token-retrieval.service.js.map +1 -0
  82. package/dist/services/provider-resolver.d.ts +48 -0
  83. package/dist/services/provider-resolver.d.ts.map +1 -0
  84. package/dist/services/provider-resolver.js +120 -0
  85. package/dist/services/provider-resolver.js.map +1 -0
  86. package/dist/services/provider-validator.d.ts +55 -0
  87. package/dist/services/provider-validator.d.ts.map +1 -0
  88. package/dist/services/provider-validator.js +135 -0
  89. package/dist/services/provider-validator.js.map +1 -0
  90. package/dist/services/session-registration.service.d.ts +80 -0
  91. package/dist/services/session-registration.service.d.ts.map +1 -0
  92. package/dist/services/session-registration.service.js +172 -0
  93. package/dist/services/session-registration.service.js.map +1 -0
  94. package/dist/services/tool-context-builder.d.ts +57 -0
  95. package/dist/services/tool-context-builder.d.ts.map +1 -0
  96. package/dist/services/tool-context-builder.js +125 -0
  97. package/dist/services/tool-context-builder.js.map +1 -0
  98. package/dist/services/tool-protection.service.d.ts +87 -10
  99. package/dist/services/tool-protection.service.d.ts.map +1 -1
  100. package/dist/services/tool-protection.service.js +282 -112
  101. package/dist/services/tool-protection.service.js.map +1 -1
  102. package/dist/types/oauth-required-error.d.ts +40 -0
  103. package/dist/types/oauth-required-error.d.ts.map +1 -0
  104. package/dist/types/oauth-required-error.js +40 -0
  105. package/dist/types/oauth-required-error.js.map +1 -0
  106. package/dist/utils/did-helpers.d.ts +33 -0
  107. package/dist/utils/did-helpers.d.ts.map +1 -1
  108. package/dist/utils/did-helpers.js +40 -0
  109. package/dist/utils/did-helpers.js.map +1 -1
  110. package/dist/utils/index.d.ts +1 -0
  111. package/dist/utils/index.d.ts.map +1 -1
  112. package/dist/utils/index.js +1 -0
  113. package/dist/utils/index.js.map +1 -1
  114. package/docs/API_REFERENCE.md +1362 -0
  115. package/docs/COMPLIANCE_MATRIX.md +691 -0
  116. package/docs/STATUSLIST2021_GUIDE.md +696 -0
  117. package/docs/W3C_VC_DELEGATION_GUIDE.md +710 -0
  118. package/package.json +24 -50
  119. package/scripts/audit-compliance.ts +724 -0
  120. package/src/__tests__/cache/tool-protection-cache.test.ts +640 -0
  121. package/src/__tests__/config/provider-runtime-config.test.ts +309 -0
  122. package/src/__tests__/delegation-e2e.test.ts +690 -0
  123. package/src/__tests__/identity/user-did-manager.test.ts +213 -0
  124. package/src/__tests__/index.test.ts +56 -0
  125. package/src/__tests__/integration/full-flow.test.ts +776 -0
  126. package/src/__tests__/integration.test.ts +281 -0
  127. package/src/__tests__/providers/base.test.ts +173 -0
  128. package/src/__tests__/providers/memory.test.ts +319 -0
  129. package/src/__tests__/regression/phase2-regression.test.ts +427 -0
  130. package/src/__tests__/runtime/audit-logger.test.ts +154 -0
  131. package/src/__tests__/runtime/base-extensions.test.ts +593 -0
  132. package/src/__tests__/runtime/base.test.ts +869 -0
  133. package/src/__tests__/runtime/delegation-flow.test.ts +164 -0
  134. package/src/__tests__/runtime/proof-client-did.test.ts +375 -0
  135. package/src/__tests__/runtime/route-interception.test.ts +686 -0
  136. package/src/__tests__/runtime/tool-protection-enforcement.test.ts +908 -0
  137. package/src/__tests__/services/agentshield-integration.test.ts +784 -0
  138. package/src/__tests__/services/provider-resolver-edge-cases.test.ts +487 -0
  139. package/src/__tests__/services/tool-protection-oauth-provider.test.ts +480 -0
  140. package/src/__tests__/services/tool-protection.service.test.ts +1366 -0
  141. package/src/__tests__/utils/mock-providers.ts +340 -0
  142. package/src/cache/oauth-config-cache.d.ts +69 -0
  143. package/src/cache/oauth-config-cache.d.ts.map +1 -0
  144. package/src/cache/oauth-config-cache.js +71 -0
  145. package/src/cache/oauth-config-cache.js.map +1 -0
  146. package/src/cache/oauth-config-cache.ts +123 -0
  147. package/src/cache/tool-protection-cache.ts +171 -0
  148. package/src/compliance/EXAMPLE.md +412 -0
  149. package/src/compliance/__tests__/schema-verifier.test.ts +797 -0
  150. package/src/compliance/index.ts +8 -0
  151. package/src/compliance/schema-registry.ts +460 -0
  152. package/src/compliance/schema-verifier.ts +708 -0
  153. package/src/config/__tests__/remote-config.spec.ts +268 -0
  154. package/src/config/remote-config.ts +174 -0
  155. package/src/config.ts +309 -0
  156. package/src/delegation/__tests__/audience-validator.test.ts +112 -0
  157. package/src/delegation/__tests__/bitstring.test.ts +346 -0
  158. package/src/delegation/__tests__/cascading-revocation.test.ts +628 -0
  159. package/src/delegation/__tests__/delegation-graph.test.ts +584 -0
  160. package/src/delegation/__tests__/utils.test.ts +152 -0
  161. package/src/delegation/__tests__/vc-issuer.test.ts +442 -0
  162. package/src/delegation/__tests__/vc-verifier.test.ts +922 -0
  163. package/src/delegation/audience-validator.ts +52 -0
  164. package/src/delegation/bitstring.ts +278 -0
  165. package/src/delegation/cascading-revocation.ts +370 -0
  166. package/src/delegation/delegation-graph.ts +299 -0
  167. package/src/delegation/index.ts +14 -0
  168. package/src/delegation/statuslist-manager.ts +353 -0
  169. package/src/delegation/storage/__tests__/memory-graph-storage.test.ts +366 -0
  170. package/src/delegation/storage/__tests__/memory-statuslist-storage.test.ts +228 -0
  171. package/src/delegation/storage/index.ts +9 -0
  172. package/src/delegation/storage/memory-graph-storage.ts +178 -0
  173. package/src/delegation/storage/memory-statuslist-storage.ts +77 -0
  174. package/src/delegation/utils.ts +42 -0
  175. package/src/delegation/vc-issuer.ts +232 -0
  176. package/src/delegation/vc-verifier.ts +568 -0
  177. package/src/identity/idp-token-resolver.ts +147 -0
  178. package/src/identity/idp-token-storage.interface.ts +59 -0
  179. package/src/identity/user-did-manager.ts +370 -0
  180. package/src/index.ts +271 -0
  181. package/src/providers/base.d.ts +91 -0
  182. package/src/providers/base.d.ts.map +1 -0
  183. package/src/providers/base.js +38 -0
  184. package/src/providers/base.js.map +1 -0
  185. package/src/providers/base.ts +96 -0
  186. package/src/providers/memory.ts +142 -0
  187. package/src/runtime/audit-logger.ts +39 -0
  188. package/src/runtime/base.ts +1329 -0
  189. package/src/services/__tests__/access-control.integration.test.ts +443 -0
  190. package/src/services/__tests__/access-control.proof-response-validation.test.ts +578 -0
  191. package/src/services/__tests__/access-control.service.test.ts +970 -0
  192. package/src/services/__tests__/batch-delegation.service.test.ts +351 -0
  193. package/src/services/__tests__/crypto.service.test.ts +531 -0
  194. package/src/services/__tests__/oauth-provider-registry.test.ts +142 -0
  195. package/src/services/__tests__/proof-verifier.integration.test.ts +485 -0
  196. package/src/services/__tests__/proof-verifier.test.ts +489 -0
  197. package/src/services/__tests__/provider-resolution.integration.test.ts +198 -0
  198. package/src/services/__tests__/provider-resolver.test.ts +217 -0
  199. package/src/services/__tests__/storage.service.test.ts +358 -0
  200. package/src/services/access-control.service.ts +990 -0
  201. package/src/services/authorization/authorization-registry.ts +66 -0
  202. package/src/services/authorization/types.ts +71 -0
  203. package/src/services/batch-delegation.service.ts +137 -0
  204. package/src/services/crypto.service.ts +302 -0
  205. package/src/services/errors.ts +76 -0
  206. package/src/services/index.ts +18 -0
  207. package/src/services/oauth-config.service.d.ts +53 -0
  208. package/src/services/oauth-config.service.d.ts.map +1 -0
  209. package/src/services/oauth-config.service.js +113 -0
  210. package/src/services/oauth-config.service.js.map +1 -0
  211. package/src/services/oauth-config.service.ts +166 -0
  212. package/src/services/oauth-provider-registry.d.ts +57 -0
  213. package/src/services/oauth-provider-registry.d.ts.map +1 -0
  214. package/src/services/oauth-provider-registry.js +73 -0
  215. package/src/services/oauth-provider-registry.js.map +1 -0
  216. package/src/services/oauth-provider-registry.ts +123 -0
  217. package/src/services/oauth-service.ts +510 -0
  218. package/src/services/oauth-token-retrieval.service.ts +245 -0
  219. package/src/services/proof-verifier.ts +478 -0
  220. package/src/services/provider-resolver.d.ts +48 -0
  221. package/src/services/provider-resolver.d.ts.map +1 -0
  222. package/src/services/provider-resolver.js +106 -0
  223. package/src/services/provider-resolver.js.map +1 -0
  224. package/src/services/provider-resolver.ts +144 -0
  225. package/src/services/provider-validator.ts +170 -0
  226. package/src/services/session-registration.service.ts +251 -0
  227. package/src/services/storage.service.ts +566 -0
  228. package/src/services/tool-context-builder.ts +172 -0
  229. package/src/services/tool-protection.service.ts +958 -0
  230. package/src/types/oauth-required-error.ts +63 -0
  231. package/src/types/tool-protection.ts +155 -0
  232. package/src/utils/__tests__/did-helpers.test.ts +101 -0
  233. package/src/utils/base64.ts +148 -0
  234. package/src/utils/cors.ts +83 -0
  235. package/src/utils/did-helpers.ts +150 -0
  236. package/src/utils/index.ts +8 -0
  237. package/src/utils/storage-keys.ts +278 -0
  238. package/tsconfig.json +21 -0
  239. package/vitest.config.ts +56 -0
@@ -0,0 +1,640 @@
1
+ /**
2
+ * Tool Protection Cache Tests
3
+ *
4
+ * Tests for tool protection cache implementations:
5
+ * - InMemoryToolProtectionCache
6
+ * - NoOpToolProtectionCache
7
+ * - Cache interface compliance
8
+ */
9
+
10
+ import { describe, test, expect, beforeEach, vi } from 'vitest';
11
+ import {
12
+ InMemoryToolProtectionCache,
13
+ NoOpToolProtectionCache,
14
+ type ToolProtectionCache,
15
+ } from '../../cache/tool-protection-cache';
16
+ import type { ToolProtectionConfig } from '../../types/tool-protection';
17
+
18
+ describe('ToolProtectionCache Interface', () => {
19
+ describe('InMemoryToolProtectionCache', () => {
20
+ let cache: InMemoryToolProtectionCache;
21
+ const testConfig: ToolProtectionConfig = {
22
+ toolProtections: {
23
+ tool1: {
24
+ requiresDelegation: true,
25
+ requiredScopes: ['scope1'],
26
+ },
27
+ tool2: {
28
+ requiresDelegation: false,
29
+ requiredScopes: [],
30
+ },
31
+ },
32
+ };
33
+
34
+ beforeEach(() => {
35
+ cache = new InMemoryToolProtectionCache();
36
+ });
37
+
38
+ describe('get', () => {
39
+ test('should return null for non-existent key', async () => {
40
+ const result = await cache.get('non-existent');
41
+ expect(result).toBeNull();
42
+ });
43
+
44
+ test('should return cached value when present', async () => {
45
+ await cache.set('key1', testConfig, 300000);
46
+
47
+ const result = await cache.get('key1');
48
+
49
+ expect(result).toEqual(testConfig);
50
+ });
51
+
52
+ test('should return null for expired entry', async () => {
53
+ // Set with very short TTL
54
+ await cache.set('key1', testConfig, 100);
55
+
56
+ // Wait for expiration
57
+ await new Promise((resolve) => setTimeout(resolve, 150));
58
+
59
+ const result = await cache.get('key1');
60
+
61
+ expect(result).toBeNull();
62
+ });
63
+
64
+ test('should return null for entry that expired during get', async () => {
65
+ // Manually create expired entry
66
+ const now = Date.now();
67
+ vi.spyOn(Date, 'now').mockReturnValue(now);
68
+ await cache.set('key1', testConfig, 1000);
69
+
70
+ // Advance time past expiration
71
+ vi.spyOn(Date, 'now').mockReturnValue(now + 2000);
72
+
73
+ const result = await cache.get('key1');
74
+
75
+ expect(result).toBeNull();
76
+ vi.restoreAllMocks();
77
+ });
78
+
79
+ test('should handle multiple keys independently', async () => {
80
+ const config1: ToolProtectionConfig = {
81
+ toolProtections: {
82
+ tool1: {
83
+ requiresDelegation: true,
84
+ requiredScopes: ['scope1'],
85
+ },
86
+ },
87
+ };
88
+
89
+ const config2: ToolProtectionConfig = {
90
+ toolProtections: {
91
+ tool2: {
92
+ requiresDelegation: false,
93
+ requiredScopes: [],
94
+ },
95
+ },
96
+ };
97
+
98
+ await cache.set('key1', config1, 300000);
99
+ await cache.set('key2', config2, 300000);
100
+
101
+ const result1 = await cache.get('key1');
102
+ const result2 = await cache.get('key2');
103
+
104
+ expect(result1).toEqual(config1);
105
+ expect(result2).toEqual(config2);
106
+ });
107
+
108
+ test('should handle empty config', async () => {
109
+ const emptyConfig: ToolProtectionConfig = {
110
+ toolProtections: {},
111
+ };
112
+
113
+ await cache.set('empty', emptyConfig, 300000);
114
+
115
+ const result = await cache.get('empty');
116
+
117
+ expect(result).toEqual(emptyConfig);
118
+ });
119
+
120
+ test('should handle large config objects', async () => {
121
+ const largeConfig: ToolProtectionConfig = {
122
+ toolProtections: {},
123
+ };
124
+
125
+ // Create config with many tools
126
+ for (let i = 0; i < 1000; i++) {
127
+ largeConfig.toolProtections[`tool${i}`] = {
128
+ requiresDelegation: i % 2 === 0,
129
+ requiredScopes: [`scope${i}`],
130
+ };
131
+ }
132
+
133
+ await cache.set('large', largeConfig, 300000);
134
+
135
+ const result = await cache.get('large');
136
+
137
+ expect(result).toEqual(largeConfig);
138
+ expect(Object.keys(result!.toolProtections)).toHaveLength(1000);
139
+ });
140
+ });
141
+
142
+ describe('set', () => {
143
+ test('should store config with TTL', async () => {
144
+ await cache.set('key1', testConfig, 300000);
145
+
146
+ const result = await cache.get('key1');
147
+
148
+ expect(result).toEqual(testConfig);
149
+ });
150
+
151
+ test('should overwrite existing entry', async () => {
152
+ const config1: ToolProtectionConfig = {
153
+ toolProtections: {
154
+ tool1: {
155
+ requiresDelegation: false,
156
+ requiredScopes: [],
157
+ },
158
+ },
159
+ };
160
+
161
+ const config2: ToolProtectionConfig = {
162
+ toolProtections: {
163
+ tool2: {
164
+ requiresDelegation: true,
165
+ requiredScopes: ['scope1'],
166
+ },
167
+ },
168
+ };
169
+
170
+ await cache.set('key1', config1, 300000);
171
+ await cache.set('key1', config2, 300000);
172
+
173
+ const result = await cache.get('key1');
174
+
175
+ expect(result).toEqual(config2);
176
+ });
177
+
178
+ test('should handle zero TTL', async () => {
179
+ await cache.set('key1', testConfig, 0);
180
+
181
+ // Entry should be immediately expired
182
+ const result = await cache.get('key1');
183
+
184
+ expect(result).toBeNull();
185
+ });
186
+
187
+ test('should handle negative TTL', async () => {
188
+ await cache.set('key1', testConfig, -1000);
189
+
190
+ // Entry should be immediately expired
191
+ const result = await cache.get('key1');
192
+
193
+ expect(result).toBeNull();
194
+ });
195
+
196
+ test('should handle very large TTL', async () => {
197
+ await cache.set('key1', testConfig, Number.MAX_SAFE_INTEGER);
198
+
199
+ const result = await cache.get('key1');
200
+
201
+ expect(result).toEqual(testConfig);
202
+ });
203
+
204
+ test('should store different configs for different keys', async () => {
205
+ const config1: ToolProtectionConfig = {
206
+ toolProtections: {
207
+ tool1: {
208
+ requiresDelegation: true,
209
+ requiredScopes: ['scope1'],
210
+ },
211
+ },
212
+ };
213
+
214
+ const config2: ToolProtectionConfig = {
215
+ toolProtections: {
216
+ tool2: {
217
+ requiresDelegation: false,
218
+ requiredScopes: [],
219
+ },
220
+ },
221
+ };
222
+
223
+ await cache.set('key1', config1, 300000);
224
+ await cache.set('key2', config2, 300000);
225
+
226
+ expect(await cache.get('key1')).toEqual(config1);
227
+ expect(await cache.get('key2')).toEqual(config2);
228
+ });
229
+ });
230
+
231
+ describe('delete', () => {
232
+ test('should remove cached entry', async () => {
233
+ await cache.set('key1', testConfig, 300000);
234
+
235
+ await cache.delete('key1');
236
+
237
+ const result = await cache.get('key1');
238
+ expect(result).toBeNull();
239
+ });
240
+
241
+ test('should handle deleting non-existent key', async () => {
242
+ await expect(cache.delete('non-existent')).resolves.not.toThrow();
243
+ });
244
+
245
+ test('should handle deleting multiple keys', async () => {
246
+ await cache.set('key1', testConfig, 300000);
247
+ await cache.set('key2', testConfig, 300000);
248
+ await cache.set('key3', testConfig, 300000);
249
+
250
+ await cache.delete('key1');
251
+ await cache.delete('key3');
252
+
253
+ expect(await cache.get('key1')).toBeNull();
254
+ expect(await cache.get('key2')).toEqual(testConfig);
255
+ expect(await cache.get('key3')).toBeNull();
256
+ });
257
+ });
258
+
259
+ describe('clear', () => {
260
+ test('should remove all cached entries', async () => {
261
+ await cache.set('key1', testConfig, 300000);
262
+ await cache.set('key2', testConfig, 300000);
263
+ await cache.set('key3', testConfig, 300000);
264
+
265
+ await cache.clear();
266
+
267
+ expect(await cache.get('key1')).toBeNull();
268
+ expect(await cache.get('key2')).toBeNull();
269
+ expect(await cache.get('key3')).toBeNull();
270
+ });
271
+
272
+ test('should handle clearing empty cache', async () => {
273
+ await expect(cache.clear()).resolves.not.toThrow();
274
+ });
275
+
276
+ test('should allow adding entries after clear', async () => {
277
+ await cache.set('key1', testConfig, 300000);
278
+ await cache.clear();
279
+
280
+ await cache.set('key2', testConfig, 300000);
281
+
282
+ expect(await cache.get('key2')).toEqual(testConfig);
283
+ });
284
+ });
285
+
286
+ describe('cleanup', () => {
287
+ test('should remove expired entries', async () => {
288
+ const now = Date.now();
289
+ vi.spyOn(Date, 'now').mockReturnValue(now);
290
+
291
+ await cache.set('expired1', testConfig, 100);
292
+ await cache.set('expired2', testConfig, 100);
293
+ await cache.set('valid', testConfig, 300000);
294
+
295
+ // Advance time
296
+ vi.spyOn(Date, 'now').mockReturnValue(now + 200);
297
+
298
+ cache.cleanup();
299
+
300
+ expect(await cache.get('expired1')).toBeNull();
301
+ expect(await cache.get('expired2')).toBeNull();
302
+ expect(await cache.get('valid')).toEqual(testConfig);
303
+
304
+ vi.restoreAllMocks();
305
+ });
306
+
307
+ test('should handle cleanup with no expired entries', async () => {
308
+ await cache.set('key1', testConfig, 300000);
309
+ await cache.set('key2', testConfig, 300000);
310
+
311
+ cache.cleanup();
312
+
313
+ expect(await cache.get('key1')).toEqual(testConfig);
314
+ expect(await cache.get('key2')).toEqual(testConfig);
315
+ });
316
+
317
+ test('should handle cleanup with empty cache', async () => {
318
+ expect(() => cache.cleanup()).not.toThrow();
319
+ });
320
+
321
+ test('should handle cleanup with partially expired entries', async () => {
322
+ const now = Date.now();
323
+ vi.spyOn(Date, 'now').mockReturnValue(now);
324
+
325
+ await cache.set('expired', testConfig, 100);
326
+ await cache.set('valid1', testConfig, 300000);
327
+ await cache.set('valid2', testConfig, 300000);
328
+
329
+ // Advance time
330
+ vi.spyOn(Date, 'now').mockReturnValue(now + 200);
331
+
332
+ cache.cleanup();
333
+
334
+ expect(await cache.get('expired')).toBeNull();
335
+ expect(await cache.get('valid1')).toEqual(testConfig);
336
+ expect(await cache.get('valid2')).toEqual(testConfig);
337
+
338
+ vi.restoreAllMocks();
339
+ });
340
+ });
341
+
342
+ describe('getStale', () => {
343
+ test('should return stale (expired) cache entry', async () => {
344
+ const now = Date.now();
345
+ vi.spyOn(Date, 'now').mockReturnValue(now);
346
+
347
+ await cache.set('key1', testConfig, 100);
348
+
349
+ // Advance time past expiration
350
+ vi.spyOn(Date, 'now').mockReturnValue(now + 200);
351
+
352
+ // getStale() should return the expired entry BEFORE get() deletes it
353
+ const stale = cache.getStale('key1');
354
+ expect(stale).toEqual(testConfig);
355
+
356
+ // Now get() should return null (expired and might be deleted)
357
+ // But getStale should still work if entry still exists in map
358
+ const afterGet = await cache.get('key1');
359
+ expect(afterGet).toBeNull();
360
+
361
+ // After get() deletes expired entry, getStale should also return null
362
+ const staleAfterGet = cache.getStale('key1');
363
+ expect(staleAfterGet).toBeNull();
364
+
365
+ vi.restoreAllMocks();
366
+ });
367
+
368
+ test('should return null for non-existent key', () => {
369
+ expect(cache.getStale('non-existent')).toBeNull();
370
+ });
371
+
372
+ test('should return valid (non-expired) cache entry', async () => {
373
+ await cache.set('key1', testConfig, 300000);
374
+
375
+ const stale = cache.getStale('key1');
376
+ expect(stale).toEqual(testConfig);
377
+ });
378
+ });
379
+
380
+ describe('getExpiresAt', () => {
381
+ test('should return expiration timestamp for existing entry', async () => {
382
+ const now = Date.now();
383
+ vi.spyOn(Date, 'now').mockReturnValue(now);
384
+
385
+ await cache.set('key1', testConfig, 5000);
386
+
387
+ const expiresAt = cache.getExpiresAt('key1');
388
+ expect(expiresAt).toBe(now + 5000);
389
+
390
+ vi.restoreAllMocks();
391
+ });
392
+
393
+ test('should return null for non-existent key', () => {
394
+ expect(cache.getExpiresAt('non-existent')).toBeNull();
395
+ });
396
+
397
+ test('should return expiration timestamp for expired entry', async () => {
398
+ const now = Date.now();
399
+ vi.spyOn(Date, 'now').mockReturnValue(now);
400
+
401
+ await cache.set('key1', testConfig, 100);
402
+
403
+ // Advance time past expiration
404
+ vi.spyOn(Date, 'now').mockReturnValue(now + 200);
405
+
406
+ // Entry is expired but getExpiresAt should still return the timestamp
407
+ const expiresAt = cache.getExpiresAt('key1');
408
+ expect(expiresAt).toBe(now + 100);
409
+
410
+ vi.restoreAllMocks();
411
+ });
412
+ });
413
+
414
+ describe('edge cases', () => {
415
+ test('should handle special characters in keys', async () => {
416
+ const specialKeys = [
417
+ 'key-with-dashes',
418
+ 'key_with_underscores',
419
+ 'key.with.dots',
420
+ 'key/with/slashes',
421
+ 'key:with:colons',
422
+ 'key with spaces',
423
+ 'key@with#special$chars',
424
+ ];
425
+
426
+ for (const key of specialKeys) {
427
+ await cache.set(key, testConfig, 300000);
428
+ expect(await cache.get(key)).toEqual(testConfig);
429
+ }
430
+ });
431
+
432
+ test('should handle very long keys', async () => {
433
+ const longKey = 'a'.repeat(10000);
434
+ await cache.set(longKey, testConfig, 300000);
435
+
436
+ expect(await cache.get(longKey)).toEqual(testConfig);
437
+ });
438
+
439
+ test('should handle empty key', async () => {
440
+ await cache.set('', testConfig, 300000);
441
+ expect(await cache.get('')).toEqual(testConfig);
442
+ });
443
+
444
+ test('should handle concurrent get and set operations', async () => {
445
+ const promises = [];
446
+
447
+ // Concurrent sets
448
+ for (let i = 0; i < 10; i++) {
449
+ promises.push(cache.set(`key${i}`, testConfig, 300000));
450
+ }
451
+
452
+ await Promise.all(promises);
453
+
454
+ // Concurrent gets
455
+ const getPromises = [];
456
+ for (let i = 0; i < 10; i++) {
457
+ getPromises.push(cache.get(`key${i}`));
458
+ }
459
+
460
+ const results = await Promise.all(getPromises);
461
+
462
+ results.forEach((result) => {
463
+ expect(result).toEqual(testConfig);
464
+ });
465
+ });
466
+
467
+ test('should handle rapid set/get/delete cycles', async () => {
468
+ for (let i = 0; i < 100; i++) {
469
+ await cache.set('key1', testConfig, 300000);
470
+ await cache.get('key1');
471
+ await cache.delete('key1');
472
+ }
473
+
474
+ expect(await cache.get('key1')).toBeNull();
475
+ });
476
+ });
477
+ });
478
+
479
+ describe('NoOpToolProtectionCache', () => {
480
+ let cache: NoOpToolProtectionCache;
481
+ const testConfig: ToolProtectionConfig = {
482
+ toolProtections: {
483
+ tool1: {
484
+ requiresDelegation: true,
485
+ requiredScopes: ['scope1'],
486
+ },
487
+ },
488
+ };
489
+
490
+ beforeEach(() => {
491
+ cache = new NoOpToolProtectionCache();
492
+ });
493
+
494
+ describe('get', () => {
495
+ test('should always return null', async () => {
496
+ const result = await cache.get('any-key');
497
+ expect(result).toBeNull();
498
+ });
499
+
500
+ test('should return null even after set', async () => {
501
+ await cache.set('key1', testConfig, 300000);
502
+
503
+ const result = await cache.get('key1');
504
+
505
+ expect(result).toBeNull();
506
+ });
507
+
508
+ test('should return null for any key', async () => {
509
+ expect(await cache.get('key1')).toBeNull();
510
+ expect(await cache.get('key2')).toBeNull();
511
+ expect(await cache.get('')).toBeNull();
512
+ });
513
+ });
514
+
515
+ describe('set', () => {
516
+ test('should not throw when setting', async () => {
517
+ await expect(cache.set('key1', testConfig, 300000)).resolves.not.toThrow();
518
+ });
519
+
520
+ test('should not store anything', async () => {
521
+ await cache.set('key1', testConfig, 300000);
522
+
523
+ const result = await cache.get('key1');
524
+ expect(result).toBeNull();
525
+ });
526
+
527
+ test('should handle any TTL value', async () => {
528
+ await expect(cache.set('key1', testConfig, 0)).resolves.not.toThrow();
529
+ await expect(cache.set('key1', testConfig, -1000)).resolves.not.toThrow();
530
+ await expect(cache.set('key1', testConfig, Number.MAX_SAFE_INTEGER)).resolves.not.toThrow();
531
+ });
532
+ });
533
+
534
+ describe('delete', () => {
535
+ test('should not throw when deleting', async () => {
536
+ await expect(cache.delete('key1')).resolves.not.toThrow();
537
+ });
538
+
539
+ test('should not throw even if key was never set', async () => {
540
+ await expect(cache.delete('non-existent')).resolves.not.toThrow();
541
+ });
542
+ });
543
+
544
+ describe('clear', () => {
545
+ test('should not throw when clearing', async () => {
546
+ await expect(cache.clear()).resolves.not.toThrow();
547
+ });
548
+
549
+ test('should not throw even after sets', async () => {
550
+ await cache.set('key1', testConfig, 300000);
551
+ await cache.set('key2', testConfig, 300000);
552
+
553
+ await expect(cache.clear()).resolves.not.toThrow();
554
+ });
555
+ });
556
+
557
+ describe('use cases', () => {
558
+ test('should be useful for testing scenarios requiring fresh data', async () => {
559
+ // Simulate always fetching from API (no cache)
560
+ let fetchCount = 0;
561
+ const mockFetch = async () => {
562
+ fetchCount++;
563
+ return testConfig;
564
+ };
565
+
566
+ // First "fetch"
567
+ await mockFetch();
568
+ await cache.set('key1', testConfig, 300000);
569
+
570
+ // Second "fetch" - cache returns null, so would fetch again
571
+ const cached = await cache.get('key1');
572
+ if (!cached) {
573
+ await mockFetch();
574
+ }
575
+
576
+ expect(fetchCount).toBe(2);
577
+ });
578
+
579
+ test('should allow disabling caching entirely', async () => {
580
+ // Set multiple times
581
+ await cache.set('key1', testConfig, 300000);
582
+ await cache.set('key1', testConfig, 300000);
583
+ await cache.set('key1', testConfig, 300000);
584
+
585
+ // Still returns null
586
+ expect(await cache.get('key1')).toBeNull();
587
+ });
588
+ });
589
+ });
590
+
591
+ describe('Cache Interface Compliance', () => {
592
+ test('InMemoryToolProtectionCache should implement ToolProtectionCache interface', () => {
593
+ const cache: ToolProtectionCache = new InMemoryToolProtectionCache();
594
+
595
+ expect(cache).toBeDefined();
596
+ expect(typeof cache.get).toBe('function');
597
+ expect(typeof cache.set).toBe('function');
598
+ expect(typeof cache.delete).toBe('function');
599
+ expect(typeof cache.clear).toBe('function');
600
+ });
601
+
602
+ test('NoOpToolProtectionCache should implement ToolProtectionCache interface', () => {
603
+ const cache: ToolProtectionCache = new NoOpToolProtectionCache();
604
+
605
+ expect(cache).toBeDefined();
606
+ expect(typeof cache.get).toBe('function');
607
+ expect(typeof cache.set).toBe('function');
608
+ expect(typeof cache.delete).toBe('function');
609
+ expect(typeof cache.clear).toBe('function');
610
+ });
611
+
612
+ test('both cache implementations should handle same interface methods', async () => {
613
+ const inMemoryCache = new InMemoryToolProtectionCache();
614
+ const noOpCache = new NoOpToolProtectionCache();
615
+
616
+ const testConfig: ToolProtectionConfig = {
617
+ toolProtections: {
618
+ tool1: {
619
+ requiresDelegation: true,
620
+ requiredScopes: ['scope1'],
621
+ },
622
+ },
623
+ };
624
+
625
+ // Both should accept same method signatures
626
+ await inMemoryCache.set('key1', testConfig, 300000);
627
+ await noOpCache.set('key1', testConfig, 300000);
628
+
629
+ await inMemoryCache.get('key1');
630
+ await noOpCache.get('key1');
631
+
632
+ await inMemoryCache.delete('key1');
633
+ await noOpCache.delete('key1');
634
+
635
+ await inMemoryCache.clear();
636
+ await noOpCache.clear();
637
+ });
638
+ });
639
+ });
640
+