@kya-os/mcp-i-core 1.3.12 → 1.3.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (254) hide show
  1. package/dist/config/remote-config.js +9 -12
  2. package/dist/runtime/base.js +11 -0
  3. package/dist/services/access-control.service.js +5 -0
  4. package/dist/services/tool-protection.service.js +17 -8
  5. package/package.json +2 -2
  6. package/.turbo/turbo-build.log +0 -4
  7. package/.turbo/turbo-test$colon$coverage.log +0 -4586
  8. package/.turbo/turbo-test.log +0 -3169
  9. package/COMPLIANCE_IMPROVEMENT_REPORT.md +0 -483
  10. package/Composer 3.md +0 -615
  11. package/GPT-5.md +0 -1169
  12. package/OPUS-plan.md +0 -352
  13. package/PHASE_3_AND_4.1_SUMMARY.md +0 -585
  14. package/PHASE_3_SUMMARY.md +0 -317
  15. package/PHASE_4.1.3_SUMMARY.md +0 -428
  16. package/PHASE_4.1_COMPLETE.md +0 -525
  17. package/PHASE_4_USER_DID_IDENTITY_LINKING_PLAN.md +0 -1240
  18. package/SCHEMA_COMPLIANCE_REPORT.md +0 -275
  19. package/TEST_PLAN.md +0 -571
  20. package/coverage/coverage-final.json +0 -60
  21. package/dist/cache/oauth-config-cache.d.ts.map +0 -1
  22. package/dist/cache/oauth-config-cache.js.map +0 -1
  23. package/dist/cache/tool-protection-cache.d.ts.map +0 -1
  24. package/dist/cache/tool-protection-cache.js.map +0 -1
  25. package/dist/compliance/index.d.ts.map +0 -1
  26. package/dist/compliance/index.js.map +0 -1
  27. package/dist/compliance/schema-registry.d.ts.map +0 -1
  28. package/dist/compliance/schema-registry.js.map +0 -1
  29. package/dist/compliance/schema-verifier.d.ts.map +0 -1
  30. package/dist/compliance/schema-verifier.js.map +0 -1
  31. package/dist/config/remote-config.d.ts.map +0 -1
  32. package/dist/config/remote-config.js.map +0 -1
  33. package/dist/config.d.ts.map +0 -1
  34. package/dist/config.js.map +0 -1
  35. package/dist/delegation/audience-validator.d.ts.map +0 -1
  36. package/dist/delegation/audience-validator.js.map +0 -1
  37. package/dist/delegation/bitstring.d.ts.map +0 -1
  38. package/dist/delegation/bitstring.js.map +0 -1
  39. package/dist/delegation/cascading-revocation.d.ts.map +0 -1
  40. package/dist/delegation/cascading-revocation.js.map +0 -1
  41. package/dist/delegation/delegation-graph.d.ts.map +0 -1
  42. package/dist/delegation/delegation-graph.js.map +0 -1
  43. package/dist/delegation/did-key-resolver.d.ts.map +0 -1
  44. package/dist/delegation/did-key-resolver.js.map +0 -1
  45. package/dist/delegation/index.d.ts.map +0 -1
  46. package/dist/delegation/index.js.map +0 -1
  47. package/dist/delegation/statuslist-manager.d.ts.map +0 -1
  48. package/dist/delegation/statuslist-manager.js.map +0 -1
  49. package/dist/delegation/storage/index.d.ts.map +0 -1
  50. package/dist/delegation/storage/index.js.map +0 -1
  51. package/dist/delegation/storage/memory-graph-storage.d.ts.map +0 -1
  52. package/dist/delegation/storage/memory-graph-storage.js.map +0 -1
  53. package/dist/delegation/storage/memory-statuslist-storage.d.ts.map +0 -1
  54. package/dist/delegation/storage/memory-statuslist-storage.js.map +0 -1
  55. package/dist/delegation/utils.d.ts.map +0 -1
  56. package/dist/delegation/utils.js.map +0 -1
  57. package/dist/delegation/vc-issuer.d.ts.map +0 -1
  58. package/dist/delegation/vc-issuer.js.map +0 -1
  59. package/dist/delegation/vc-verifier.d.ts.map +0 -1
  60. package/dist/delegation/vc-verifier.js.map +0 -1
  61. package/dist/identity/idp-token-resolver.d.ts.map +0 -1
  62. package/dist/identity/idp-token-resolver.js.map +0 -1
  63. package/dist/identity/idp-token-storage.interface.d.ts.map +0 -1
  64. package/dist/identity/idp-token-storage.interface.js.map +0 -1
  65. package/dist/identity/user-did-manager.d.ts.map +0 -1
  66. package/dist/identity/user-did-manager.js.map +0 -1
  67. package/dist/index.d.ts.map +0 -1
  68. package/dist/index.js.map +0 -1
  69. package/dist/providers/base.d.ts.map +0 -1
  70. package/dist/providers/base.js.map +0 -1
  71. package/dist/providers/memory.d.ts.map +0 -1
  72. package/dist/providers/memory.js.map +0 -1
  73. package/dist/runtime/audit-logger.d.ts.map +0 -1
  74. package/dist/runtime/audit-logger.js.map +0 -1
  75. package/dist/runtime/base.d.ts.map +0 -1
  76. package/dist/runtime/base.js.map +0 -1
  77. package/dist/services/access-control.service.d.ts.map +0 -1
  78. package/dist/services/access-control.service.js.map +0 -1
  79. package/dist/services/authorization/authorization-registry.d.ts.map +0 -1
  80. package/dist/services/authorization/authorization-registry.js.map +0 -1
  81. package/dist/services/authorization/types.d.ts.map +0 -1
  82. package/dist/services/authorization/types.js.map +0 -1
  83. package/dist/services/batch-delegation.service.d.ts.map +0 -1
  84. package/dist/services/batch-delegation.service.js.map +0 -1
  85. package/dist/services/crypto.service.d.ts.map +0 -1
  86. package/dist/services/crypto.service.js.map +0 -1
  87. package/dist/services/errors.d.ts.map +0 -1
  88. package/dist/services/errors.js.map +0 -1
  89. package/dist/services/index.d.ts.map +0 -1
  90. package/dist/services/index.js.map +0 -1
  91. package/dist/services/oauth-config.service.d.ts.map +0 -1
  92. package/dist/services/oauth-config.service.js.map +0 -1
  93. package/dist/services/oauth-provider-registry.d.ts.map +0 -1
  94. package/dist/services/oauth-provider-registry.js.map +0 -1
  95. package/dist/services/oauth-service.d.ts.map +0 -1
  96. package/dist/services/oauth-service.js.map +0 -1
  97. package/dist/services/oauth-token-retrieval.service.d.ts.map +0 -1
  98. package/dist/services/oauth-token-retrieval.service.js.map +0 -1
  99. package/dist/services/proof-verifier.d.ts.map +0 -1
  100. package/dist/services/proof-verifier.js.map +0 -1
  101. package/dist/services/provider-resolver.d.ts.map +0 -1
  102. package/dist/services/provider-resolver.js.map +0 -1
  103. package/dist/services/provider-validator.d.ts.map +0 -1
  104. package/dist/services/provider-validator.js.map +0 -1
  105. package/dist/services/session-registration.service.d.ts.map +0 -1
  106. package/dist/services/session-registration.service.js.map +0 -1
  107. package/dist/services/storage.service.d.ts.map +0 -1
  108. package/dist/services/storage.service.js.map +0 -1
  109. package/dist/services/tool-context-builder.d.ts.map +0 -1
  110. package/dist/services/tool-context-builder.js.map +0 -1
  111. package/dist/services/tool-protection.service.d.ts.map +0 -1
  112. package/dist/services/tool-protection.service.js.map +0 -1
  113. package/dist/types/oauth-required-error.d.ts.map +0 -1
  114. package/dist/types/oauth-required-error.js.map +0 -1
  115. package/dist/types/tool-protection.d.ts.map +0 -1
  116. package/dist/types/tool-protection.js.map +0 -1
  117. package/dist/utils/base58.d.ts.map +0 -1
  118. package/dist/utils/base58.js.map +0 -1
  119. package/dist/utils/base64.d.ts.map +0 -1
  120. package/dist/utils/base64.js.map +0 -1
  121. package/dist/utils/cors.d.ts.map +0 -1
  122. package/dist/utils/cors.js.map +0 -1
  123. package/dist/utils/did-helpers.d.ts.map +0 -1
  124. package/dist/utils/did-helpers.js.map +0 -1
  125. package/dist/utils/index.d.ts.map +0 -1
  126. package/dist/utils/index.js.map +0 -1
  127. package/dist/utils/storage-keys.d.ts.map +0 -1
  128. package/dist/utils/storage-keys.js.map +0 -1
  129. package/docs/API_REFERENCE.md +0 -1362
  130. package/docs/COMPLIANCE_MATRIX.md +0 -691
  131. package/docs/STATUSLIST2021_GUIDE.md +0 -696
  132. package/docs/W3C_VC_DELEGATION_GUIDE.md +0 -710
  133. package/src/__tests__/cache/tool-protection-cache.test.ts +0 -640
  134. package/src/__tests__/config/provider-runtime-config.test.ts +0 -309
  135. package/src/__tests__/delegation-e2e.test.ts +0 -690
  136. package/src/__tests__/identity/user-did-manager.test.ts +0 -232
  137. package/src/__tests__/index.test.ts +0 -56
  138. package/src/__tests__/integration/full-flow.test.ts +0 -789
  139. package/src/__tests__/integration.test.ts +0 -281
  140. package/src/__tests__/providers/base.test.ts +0 -173
  141. package/src/__tests__/providers/memory.test.ts +0 -319
  142. package/src/__tests__/regression/phase2-regression.test.ts +0 -429
  143. package/src/__tests__/runtime/audit-logger.test.ts +0 -154
  144. package/src/__tests__/runtime/base-extensions.test.ts +0 -595
  145. package/src/__tests__/runtime/base.test.ts +0 -869
  146. package/src/__tests__/runtime/delegation-flow.test.ts +0 -164
  147. package/src/__tests__/runtime/proof-client-did.test.ts +0 -376
  148. package/src/__tests__/runtime/route-interception.test.ts +0 -686
  149. package/src/__tests__/runtime/tool-protection-enforcement.test.ts +0 -908
  150. package/src/__tests__/services/agentshield-integration.test.ts +0 -791
  151. package/src/__tests__/services/cache-busting.test.ts +0 -125
  152. package/src/__tests__/services/oauth-service-pkce.test.ts +0 -556
  153. package/src/__tests__/services/provider-resolver-edge-cases.test.ts +0 -591
  154. package/src/__tests__/services/tool-protection-merged-config.test.ts +0 -485
  155. package/src/__tests__/services/tool-protection-oauth-provider.test.ts +0 -480
  156. package/src/__tests__/services/tool-protection.service.test.ts +0 -1373
  157. package/src/__tests__/utils/mock-providers.ts +0 -340
  158. package/src/cache/oauth-config-cache.d.ts +0 -69
  159. package/src/cache/oauth-config-cache.d.ts.map +0 -1
  160. package/src/cache/oauth-config-cache.js.map +0 -1
  161. package/src/cache/oauth-config-cache.ts +0 -123
  162. package/src/cache/tool-protection-cache.ts +0 -171
  163. package/src/compliance/EXAMPLE.md +0 -412
  164. package/src/compliance/__tests__/schema-verifier.test.ts +0 -797
  165. package/src/compliance/index.ts +0 -8
  166. package/src/compliance/schema-registry.ts +0 -460
  167. package/src/compliance/schema-verifier.ts +0 -708
  168. package/src/config/__tests__/merged-config.spec.ts +0 -445
  169. package/src/config/__tests__/remote-config.spec.ts +0 -268
  170. package/src/config/remote-config.ts +0 -264
  171. package/src/config.ts +0 -312
  172. package/src/delegation/__tests__/audience-validator.test.ts +0 -112
  173. package/src/delegation/__tests__/bitstring.test.ts +0 -346
  174. package/src/delegation/__tests__/cascading-revocation.test.ts +0 -628
  175. package/src/delegation/__tests__/delegation-graph.test.ts +0 -584
  176. package/src/delegation/__tests__/did-key-resolver.test.ts +0 -265
  177. package/src/delegation/__tests__/utils.test.ts +0 -152
  178. package/src/delegation/__tests__/vc-issuer.test.ts +0 -442
  179. package/src/delegation/__tests__/vc-verifier.test.ts +0 -922
  180. package/src/delegation/audience-validator.ts +0 -52
  181. package/src/delegation/bitstring.ts +0 -278
  182. package/src/delegation/cascading-revocation.ts +0 -370
  183. package/src/delegation/delegation-graph.ts +0 -299
  184. package/src/delegation/did-key-resolver.ts +0 -179
  185. package/src/delegation/index.ts +0 -14
  186. package/src/delegation/statuslist-manager.ts +0 -353
  187. package/src/delegation/storage/__tests__/memory-graph-storage.test.ts +0 -366
  188. package/src/delegation/storage/__tests__/memory-statuslist-storage.test.ts +0 -228
  189. package/src/delegation/storage/index.ts +0 -9
  190. package/src/delegation/storage/memory-graph-storage.ts +0 -178
  191. package/src/delegation/storage/memory-statuslist-storage.ts +0 -77
  192. package/src/delegation/utils.ts +0 -221
  193. package/src/delegation/vc-issuer.ts +0 -232
  194. package/src/delegation/vc-verifier.ts +0 -568
  195. package/src/identity/idp-token-resolver.ts +0 -181
  196. package/src/identity/idp-token-storage.interface.ts +0 -94
  197. package/src/identity/user-did-manager.ts +0 -526
  198. package/src/index.ts +0 -310
  199. package/src/providers/base.d.ts +0 -91
  200. package/src/providers/base.d.ts.map +0 -1
  201. package/src/providers/base.js.map +0 -1
  202. package/src/providers/base.ts +0 -96
  203. package/src/providers/memory.ts +0 -142
  204. package/src/runtime/audit-logger.ts +0 -39
  205. package/src/runtime/base.ts +0 -1392
  206. package/src/services/__tests__/access-control.integration.test.ts +0 -443
  207. package/src/services/__tests__/access-control.proof-response-validation.test.ts +0 -578
  208. package/src/services/__tests__/access-control.service.test.ts +0 -970
  209. package/src/services/__tests__/batch-delegation.service.test.ts +0 -351
  210. package/src/services/__tests__/crypto.service.test.ts +0 -531
  211. package/src/services/__tests__/oauth-provider-registry.test.ts +0 -142
  212. package/src/services/__tests__/proof-verifier.integration.test.ts +0 -485
  213. package/src/services/__tests__/proof-verifier.test.ts +0 -489
  214. package/src/services/__tests__/provider-resolution.integration.test.ts +0 -202
  215. package/src/services/__tests__/provider-resolver.test.ts +0 -213
  216. package/src/services/__tests__/storage.service.test.ts +0 -358
  217. package/src/services/access-control.service.ts +0 -990
  218. package/src/services/authorization/authorization-registry.ts +0 -66
  219. package/src/services/authorization/types.ts +0 -71
  220. package/src/services/batch-delegation.service.ts +0 -137
  221. package/src/services/crypto.service.ts +0 -302
  222. package/src/services/errors.ts +0 -76
  223. package/src/services/index.ts +0 -18
  224. package/src/services/oauth-config.service.d.ts +0 -53
  225. package/src/services/oauth-config.service.d.ts.map +0 -1
  226. package/src/services/oauth-config.service.js.map +0 -1
  227. package/src/services/oauth-config.service.ts +0 -192
  228. package/src/services/oauth-provider-registry.d.ts +0 -57
  229. package/src/services/oauth-provider-registry.d.ts.map +0 -1
  230. package/src/services/oauth-provider-registry.js.map +0 -1
  231. package/src/services/oauth-provider-registry.ts +0 -141
  232. package/src/services/oauth-service.ts +0 -544
  233. package/src/services/oauth-token-retrieval.service.ts +0 -245
  234. package/src/services/proof-verifier.ts +0 -478
  235. package/src/services/provider-resolver.d.ts +0 -48
  236. package/src/services/provider-resolver.d.ts.map +0 -1
  237. package/src/services/provider-resolver.js.map +0 -1
  238. package/src/services/provider-resolver.ts +0 -146
  239. package/src/services/provider-validator.ts +0 -170
  240. package/src/services/session-registration.service.ts +0 -251
  241. package/src/services/storage.service.ts +0 -566
  242. package/src/services/tool-context-builder.ts +0 -237
  243. package/src/services/tool-protection.service.ts +0 -1070
  244. package/src/types/oauth-required-error.ts +0 -63
  245. package/src/types/tool-protection.ts +0 -155
  246. package/src/utils/__tests__/did-helpers.test.ts +0 -156
  247. package/src/utils/base58.ts +0 -109
  248. package/src/utils/base64.ts +0 -148
  249. package/src/utils/cors.ts +0 -83
  250. package/src/utils/did-helpers.ts +0 -210
  251. package/src/utils/index.ts +0 -8
  252. package/src/utils/storage-keys.ts +0 -278
  253. package/tsconfig.json +0 -21
  254. package/vitest.config.ts +0 -56
@@ -1,442 +0,0 @@
1
- import { describe, it, expect, beforeEach, vi, Mock } from "vitest";
2
- import {
3
- DelegationCredentialIssuer,
4
- createDelegationIssuer,
5
- type VCSigningFunction,
6
- type IdentityProvider,
7
- type IssueDelegationOptions,
8
- } from "../vc-issuer.js";
9
- import type {
10
- DelegationRecord,
11
- DelegationCredential,
12
- Proof,
13
- } from "@kya-os/contracts";
14
-
15
- // Mock the contracts functions
16
- vi.mock("@kya-os/contracts", () => ({
17
- wrapDelegationAsVC: vi.fn(),
18
- }));
19
-
20
- vi.mock("../utils", () => ({
21
- canonicalizeJSON: vi.fn(),
22
- }));
23
-
24
- describe("DelegationCredentialIssuer", () => {
25
- let mockIdentity: IdentityProvider;
26
- let mockSigningFunction: Mock<VCSigningFunction>;
27
- let issuer: DelegationCredentialIssuer;
28
-
29
- const mockDelegationRecord: DelegationRecord = {
30
- id: "del-001",
31
- issuerDid: "did:web:example.com:issuer",
32
- subjectDid: "did:web:example.com:subject",
33
- vcId: "urn:uuid:del-001",
34
- parentId: undefined,
35
- constraints: {
36
- scopes: ["read:profile"],
37
- },
38
- signature: "vc-jwt-signed", // Placeholder - actual signature is in the VC-JWT
39
- status: "active",
40
- createdAt: Date.now(),
41
- };
42
-
43
- const mockProof: Proof = {
44
- type: "Ed25519Signature2020",
45
- created: "2024-01-01T00:00:00Z",
46
- verificationMethod: "did:web:example.com:issuer#key-1",
47
- proofPurpose: "assertionMethod",
48
- proofValue: "mock-proof-value",
49
- };
50
-
51
- beforeEach(async () => {
52
- vi.clearAllMocks();
53
-
54
- mockIdentity = {
55
- getDid: vi.fn().mockReturnValue("did:web:example.com:issuer"),
56
- getKeyId: vi.fn().mockReturnValue("key-123"),
57
- getPrivateKey: vi.fn().mockReturnValue("mock-private-key"),
58
- };
59
-
60
- mockSigningFunction = vi.fn().mockResolvedValue(mockProof);
61
-
62
- issuer = new DelegationCredentialIssuer(mockIdentity, mockSigningFunction);
63
-
64
- // Setup default mocks
65
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
66
- const { canonicalizeJSON } = await import("../utils.js");
67
-
68
- vi.mocked(wrapDelegationAsVC).mockReturnValue({
69
- "@context": ["https://www.w3.org/2018/credentials/v1"],
70
- id: "urn:uuid:del-001",
71
- type: ["VerifiableCredential", "DelegationCredential"],
72
- issuer: "did:web:example.com:issuer",
73
- issuanceDate: "2024-01-01T00:00:00Z",
74
- credentialSubject: {
75
- id: "did:web:example.com:subject",
76
- delegation: {
77
- id: "del-001",
78
- issuerDid: "did:web:example.com:issuer",
79
- subjectDid: "did:web:example.com:subject",
80
- scopes: ["read:profile"],
81
- status: "active",
82
- },
83
- },
84
- } as any);
85
-
86
- vi.mocked(canonicalizeJSON).mockReturnValue('{"canonical":"json"}');
87
- });
88
-
89
- describe("constructor", () => {
90
- it("should create issuer with identity and signing function", () => {
91
- const newIssuer = new DelegationCredentialIssuer(
92
- mockIdentity,
93
- mockSigningFunction
94
- );
95
- expect(newIssuer).toBeInstanceOf(DelegationCredentialIssuer);
96
- });
97
- });
98
-
99
- describe("createDelegationIssuer", () => {
100
- it("should create an issuer instance", () => {
101
- const newIssuer = createDelegationIssuer(
102
- mockIdentity,
103
- mockSigningFunction
104
- );
105
- expect(newIssuer).toBeInstanceOf(DelegationCredentialIssuer);
106
- });
107
- });
108
-
109
- describe("issueDelegationCredential", () => {
110
- it("should issue a signed delegation credential", async () => {
111
- const result =
112
- await issuer.issueDelegationCredential(mockDelegationRecord);
113
-
114
- expect(result).toBeDefined();
115
- expect(result.proof).toEqual(mockProof);
116
- expect(mockSigningFunction).toHaveBeenCalled();
117
- });
118
-
119
- it("should call wrapDelegationAsVC with delegation record", async () => {
120
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
121
-
122
- await issuer.issueDelegationCredential(mockDelegationRecord);
123
-
124
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
125
- mockDelegationRecord,
126
- expect.objectContaining({
127
- id: undefined,
128
- issuanceDate: undefined,
129
- expirationDate: undefined,
130
- credentialStatus: undefined,
131
- })
132
- );
133
- });
134
-
135
- it("should pass options to wrapDelegationAsVC", async () => {
136
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
137
- const options: IssueDelegationOptions = {
138
- id: "custom-vc-id",
139
- issuanceDate: "2024-01-01T00:00:00Z",
140
- expirationDate: "2025-01-01T00:00:00Z",
141
- };
142
-
143
- await issuer.issueDelegationCredential(mockDelegationRecord, options);
144
-
145
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
146
- mockDelegationRecord,
147
- expect.objectContaining({
148
- id: "custom-vc-id",
149
- issuanceDate: "2024-01-01T00:00:00Z",
150
- expirationDate: "2025-01-01T00:00:00Z",
151
- })
152
- );
153
- });
154
-
155
- it("should add additional contexts if provided", async () => {
156
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
157
- const { canonicalizeJSON } = await import("../utils.js");
158
-
159
- const mockVC = {
160
- "@context": ["https://www.w3.org/2018/credentials/v1"],
161
- id: "urn:uuid:del-001",
162
- type: ["VerifiableCredential"],
163
- issuer: "did:web:example.com:issuer",
164
- issuanceDate: "2024-01-01T00:00:00Z",
165
- credentialSubject: {},
166
- };
167
-
168
- vi.mocked(wrapDelegationAsVC).mockReturnValue(mockVC as any);
169
-
170
- const options: IssueDelegationOptions = {
171
- additionalContexts: ["https://example.com/context"],
172
- };
173
-
174
- const result = await issuer.issueDelegationCredential(
175
- mockDelegationRecord,
176
- options
177
- );
178
-
179
- expect(result["@context"]).toContain("https://example.com/context");
180
- });
181
-
182
- it("should canonicalize VC before signing", async () => {
183
- const { canonicalizeJSON } = await import("../utils.js");
184
-
185
- await issuer.issueDelegationCredential(mockDelegationRecord);
186
-
187
- expect(canonicalizeJSON).toHaveBeenCalled();
188
- });
189
-
190
- it("should call signing function with canonical VC, DID, and key ID", async () => {
191
- const { canonicalizeJSON } = await import("../utils.js");
192
- vi.mocked(canonicalizeJSON).mockReturnValue("canonical-json-string");
193
-
194
- await issuer.issueDelegationCredential(mockDelegationRecord);
195
-
196
- expect(mockSigningFunction).toHaveBeenCalledWith(
197
- "canonical-json-string",
198
- "did:web:example.com:issuer",
199
- "key-123"
200
- );
201
- });
202
-
203
- it("should include proof in returned credential", async () => {
204
- const result =
205
- await issuer.issueDelegationCredential(mockDelegationRecord);
206
-
207
- expect(result.proof).toBeDefined();
208
- expect(result.proof).toEqual(mockProof);
209
- });
210
-
211
- it("should handle credential status option", async () => {
212
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
213
- const credentialStatus = {
214
- id: "https://example.com/status#123",
215
- type: "StatusList2021Entry" as const,
216
- statusPurpose: "revocation" as const,
217
- statusListIndex: "123",
218
- statusListCredential: "https://example.com/status",
219
- };
220
-
221
- const options: IssueDelegationOptions = {
222
- credentialStatus,
223
- };
224
-
225
- await issuer.issueDelegationCredential(mockDelegationRecord, options);
226
-
227
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
228
- mockDelegationRecord,
229
- expect.objectContaining({
230
- credentialStatus,
231
- })
232
- );
233
- });
234
- });
235
-
236
- describe("createAndIssueDelegation", () => {
237
- it("should create delegation record and issue as VC", async () => {
238
- const result = await issuer.createAndIssueDelegation({
239
- id: "del-new",
240
- issuerDid: "did:web:example.com:issuer",
241
- subjectDid: "did:web:example.com:subject",
242
- constraints: {
243
- scopes: ["read:profile"],
244
- },
245
- });
246
-
247
- expect(result).toBeDefined();
248
- expect(result.proof).toEqual(mockProof);
249
- });
250
-
251
- it("should use provided vcId or generate one", async () => {
252
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
253
-
254
- // Without custom ID
255
- await issuer.createAndIssueDelegation({
256
- id: "del-new",
257
- issuerDid: "did:web:example.com:issuer",
258
- subjectDid: "did:web:example.com:subject",
259
- constraints: {
260
- scopes: ["read:profile"],
261
- },
262
- });
263
-
264
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
265
- expect.objectContaining({
266
- vcId: "urn:uuid:del-new",
267
- }),
268
- expect.any(Object)
269
- );
270
-
271
- // With custom ID
272
- vi.clearAllMocks();
273
- await issuer.createAndIssueDelegation(
274
- {
275
- id: "del-new",
276
- issuerDid: "did:web:example.com:issuer",
277
- subjectDid: "did:web:example.com:subject",
278
- constraints: {
279
- scopes: ["read:profile"],
280
- },
281
- },
282
- { id: "custom-vc-id" }
283
- );
284
-
285
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
286
- expect.objectContaining({
287
- vcId: "custom-vc-id",
288
- }),
289
- expect.any(Object)
290
- );
291
- });
292
-
293
- it("should set default status to active", async () => {
294
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
295
-
296
- await issuer.createAndIssueDelegation({
297
- id: "del-new",
298
- issuerDid: "did:web:example.com:issuer",
299
- subjectDid: "did:web:example.com:subject",
300
- constraints: {
301
- scopes: ["read:profile"],
302
- },
303
- });
304
-
305
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
306
- expect.objectContaining({
307
- status: "active",
308
- }),
309
- expect.any(Object)
310
- );
311
- });
312
-
313
- it("should use provided status if given", async () => {
314
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
315
-
316
- await issuer.createAndIssueDelegation({
317
- id: "del-new",
318
- issuerDid: "did:web:example.com:issuer",
319
- subjectDid: "did:web:example.com:subject",
320
- constraints: {
321
- scopes: ["read:profile"],
322
- },
323
- status: "active",
324
- });
325
-
326
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
327
- expect.objectContaining({
328
- status: "active",
329
- }),
330
- expect.any(Object)
331
- );
332
- });
333
-
334
- it("should include parentId if provided", async () => {
335
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
336
-
337
- await issuer.createAndIssueDelegation({
338
- id: "del-child",
339
- issuerDid: "did:web:example.com:issuer",
340
- subjectDid: "did:web:example.com:subject",
341
- parentId: "del-parent",
342
- constraints: {
343
- scopes: ["read:profile"],
344
- },
345
- });
346
-
347
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
348
- expect.objectContaining({
349
- parentId: "del-parent",
350
- }),
351
- expect.any(Object)
352
- );
353
- });
354
-
355
- it("should include metadata if provided", async () => {
356
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
357
- const metadata = { custom: "value" };
358
-
359
- await issuer.createAndIssueDelegation({
360
- id: "del-new",
361
- issuerDid: "did:web:example.com:issuer",
362
- subjectDid: "did:web:example.com:subject",
363
- constraints: {
364
- scopes: ["read:profile"],
365
- },
366
- metadata,
367
- });
368
-
369
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
370
- expect.objectContaining({
371
- metadata,
372
- }),
373
- expect.any(Object)
374
- );
375
- });
376
-
377
- it("should set createdAt timestamp", async () => {
378
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
379
- const beforeTime = Date.now();
380
-
381
- await issuer.createAndIssueDelegation({
382
- id: "del-new",
383
- issuerDid: "did:web:example.com:issuer",
384
- subjectDid: "did:web:example.com:subject",
385
- constraints: {
386
- scopes: ["read:profile"],
387
- },
388
- });
389
-
390
- const afterTime = Date.now();
391
-
392
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
393
- expect.objectContaining({
394
- createdAt: expect.any(Number),
395
- }),
396
- expect.any(Object)
397
- );
398
-
399
- const callArgs = vi.mocked(wrapDelegationAsVC).mock
400
- .calls[0][0] as DelegationRecord;
401
- expect(callArgs.createdAt).toBeGreaterThanOrEqual(beforeTime);
402
- expect(callArgs.createdAt).toBeLessThanOrEqual(afterTime);
403
- });
404
- });
405
-
406
- describe("getIssuerDid", () => {
407
- it("should return issuer DID from identity provider", () => {
408
- const did = issuer.getIssuerDid();
409
- expect(did).toBe("did:web:example.com:issuer");
410
- expect(mockIdentity.getDid).toHaveBeenCalled();
411
- });
412
- });
413
-
414
- describe("getIssuerKeyId", () => {
415
- it("should return key ID from identity provider", () => {
416
- const keyId = issuer.getIssuerKeyId();
417
- expect(keyId).toBe("key-123");
418
- expect(mockIdentity.getKeyId).toHaveBeenCalled();
419
- });
420
- });
421
-
422
- describe("error handling", () => {
423
- it("should propagate errors from signing function", async () => {
424
- mockSigningFunction.mockRejectedValue(new Error("Signing failed"));
425
-
426
- await expect(
427
- issuer.issueDelegationCredential(mockDelegationRecord)
428
- ).rejects.toThrow("Signing failed");
429
- });
430
-
431
- it("should propagate errors from wrapDelegationAsVC", async () => {
432
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
433
- vi.mocked(wrapDelegationAsVC).mockImplementation(() => {
434
- throw new Error("VC wrapping failed");
435
- });
436
-
437
- await expect(
438
- issuer.issueDelegationCredential(mockDelegationRecord)
439
- ).rejects.toThrow("VC wrapping failed");
440
- });
441
- });
442
- });