@kya-os/mcp-i-core 1.3.12 → 1.3.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (254) hide show
  1. package/dist/config/remote-config.js +9 -12
  2. package/dist/runtime/base.js +11 -0
  3. package/dist/services/access-control.service.js +5 -0
  4. package/dist/services/tool-protection.service.js +17 -8
  5. package/package.json +2 -2
  6. package/.turbo/turbo-build.log +0 -4
  7. package/.turbo/turbo-test$colon$coverage.log +0 -4586
  8. package/.turbo/turbo-test.log +0 -3169
  9. package/COMPLIANCE_IMPROVEMENT_REPORT.md +0 -483
  10. package/Composer 3.md +0 -615
  11. package/GPT-5.md +0 -1169
  12. package/OPUS-plan.md +0 -352
  13. package/PHASE_3_AND_4.1_SUMMARY.md +0 -585
  14. package/PHASE_3_SUMMARY.md +0 -317
  15. package/PHASE_4.1.3_SUMMARY.md +0 -428
  16. package/PHASE_4.1_COMPLETE.md +0 -525
  17. package/PHASE_4_USER_DID_IDENTITY_LINKING_PLAN.md +0 -1240
  18. package/SCHEMA_COMPLIANCE_REPORT.md +0 -275
  19. package/TEST_PLAN.md +0 -571
  20. package/coverage/coverage-final.json +0 -60
  21. package/dist/cache/oauth-config-cache.d.ts.map +0 -1
  22. package/dist/cache/oauth-config-cache.js.map +0 -1
  23. package/dist/cache/tool-protection-cache.d.ts.map +0 -1
  24. package/dist/cache/tool-protection-cache.js.map +0 -1
  25. package/dist/compliance/index.d.ts.map +0 -1
  26. package/dist/compliance/index.js.map +0 -1
  27. package/dist/compliance/schema-registry.d.ts.map +0 -1
  28. package/dist/compliance/schema-registry.js.map +0 -1
  29. package/dist/compliance/schema-verifier.d.ts.map +0 -1
  30. package/dist/compliance/schema-verifier.js.map +0 -1
  31. package/dist/config/remote-config.d.ts.map +0 -1
  32. package/dist/config/remote-config.js.map +0 -1
  33. package/dist/config.d.ts.map +0 -1
  34. package/dist/config.js.map +0 -1
  35. package/dist/delegation/audience-validator.d.ts.map +0 -1
  36. package/dist/delegation/audience-validator.js.map +0 -1
  37. package/dist/delegation/bitstring.d.ts.map +0 -1
  38. package/dist/delegation/bitstring.js.map +0 -1
  39. package/dist/delegation/cascading-revocation.d.ts.map +0 -1
  40. package/dist/delegation/cascading-revocation.js.map +0 -1
  41. package/dist/delegation/delegation-graph.d.ts.map +0 -1
  42. package/dist/delegation/delegation-graph.js.map +0 -1
  43. package/dist/delegation/did-key-resolver.d.ts.map +0 -1
  44. package/dist/delegation/did-key-resolver.js.map +0 -1
  45. package/dist/delegation/index.d.ts.map +0 -1
  46. package/dist/delegation/index.js.map +0 -1
  47. package/dist/delegation/statuslist-manager.d.ts.map +0 -1
  48. package/dist/delegation/statuslist-manager.js.map +0 -1
  49. package/dist/delegation/storage/index.d.ts.map +0 -1
  50. package/dist/delegation/storage/index.js.map +0 -1
  51. package/dist/delegation/storage/memory-graph-storage.d.ts.map +0 -1
  52. package/dist/delegation/storage/memory-graph-storage.js.map +0 -1
  53. package/dist/delegation/storage/memory-statuslist-storage.d.ts.map +0 -1
  54. package/dist/delegation/storage/memory-statuslist-storage.js.map +0 -1
  55. package/dist/delegation/utils.d.ts.map +0 -1
  56. package/dist/delegation/utils.js.map +0 -1
  57. package/dist/delegation/vc-issuer.d.ts.map +0 -1
  58. package/dist/delegation/vc-issuer.js.map +0 -1
  59. package/dist/delegation/vc-verifier.d.ts.map +0 -1
  60. package/dist/delegation/vc-verifier.js.map +0 -1
  61. package/dist/identity/idp-token-resolver.d.ts.map +0 -1
  62. package/dist/identity/idp-token-resolver.js.map +0 -1
  63. package/dist/identity/idp-token-storage.interface.d.ts.map +0 -1
  64. package/dist/identity/idp-token-storage.interface.js.map +0 -1
  65. package/dist/identity/user-did-manager.d.ts.map +0 -1
  66. package/dist/identity/user-did-manager.js.map +0 -1
  67. package/dist/index.d.ts.map +0 -1
  68. package/dist/index.js.map +0 -1
  69. package/dist/providers/base.d.ts.map +0 -1
  70. package/dist/providers/base.js.map +0 -1
  71. package/dist/providers/memory.d.ts.map +0 -1
  72. package/dist/providers/memory.js.map +0 -1
  73. package/dist/runtime/audit-logger.d.ts.map +0 -1
  74. package/dist/runtime/audit-logger.js.map +0 -1
  75. package/dist/runtime/base.d.ts.map +0 -1
  76. package/dist/runtime/base.js.map +0 -1
  77. package/dist/services/access-control.service.d.ts.map +0 -1
  78. package/dist/services/access-control.service.js.map +0 -1
  79. package/dist/services/authorization/authorization-registry.d.ts.map +0 -1
  80. package/dist/services/authorization/authorization-registry.js.map +0 -1
  81. package/dist/services/authorization/types.d.ts.map +0 -1
  82. package/dist/services/authorization/types.js.map +0 -1
  83. package/dist/services/batch-delegation.service.d.ts.map +0 -1
  84. package/dist/services/batch-delegation.service.js.map +0 -1
  85. package/dist/services/crypto.service.d.ts.map +0 -1
  86. package/dist/services/crypto.service.js.map +0 -1
  87. package/dist/services/errors.d.ts.map +0 -1
  88. package/dist/services/errors.js.map +0 -1
  89. package/dist/services/index.d.ts.map +0 -1
  90. package/dist/services/index.js.map +0 -1
  91. package/dist/services/oauth-config.service.d.ts.map +0 -1
  92. package/dist/services/oauth-config.service.js.map +0 -1
  93. package/dist/services/oauth-provider-registry.d.ts.map +0 -1
  94. package/dist/services/oauth-provider-registry.js.map +0 -1
  95. package/dist/services/oauth-service.d.ts.map +0 -1
  96. package/dist/services/oauth-service.js.map +0 -1
  97. package/dist/services/oauth-token-retrieval.service.d.ts.map +0 -1
  98. package/dist/services/oauth-token-retrieval.service.js.map +0 -1
  99. package/dist/services/proof-verifier.d.ts.map +0 -1
  100. package/dist/services/proof-verifier.js.map +0 -1
  101. package/dist/services/provider-resolver.d.ts.map +0 -1
  102. package/dist/services/provider-resolver.js.map +0 -1
  103. package/dist/services/provider-validator.d.ts.map +0 -1
  104. package/dist/services/provider-validator.js.map +0 -1
  105. package/dist/services/session-registration.service.d.ts.map +0 -1
  106. package/dist/services/session-registration.service.js.map +0 -1
  107. package/dist/services/storage.service.d.ts.map +0 -1
  108. package/dist/services/storage.service.js.map +0 -1
  109. package/dist/services/tool-context-builder.d.ts.map +0 -1
  110. package/dist/services/tool-context-builder.js.map +0 -1
  111. package/dist/services/tool-protection.service.d.ts.map +0 -1
  112. package/dist/services/tool-protection.service.js.map +0 -1
  113. package/dist/types/oauth-required-error.d.ts.map +0 -1
  114. package/dist/types/oauth-required-error.js.map +0 -1
  115. package/dist/types/tool-protection.d.ts.map +0 -1
  116. package/dist/types/tool-protection.js.map +0 -1
  117. package/dist/utils/base58.d.ts.map +0 -1
  118. package/dist/utils/base58.js.map +0 -1
  119. package/dist/utils/base64.d.ts.map +0 -1
  120. package/dist/utils/base64.js.map +0 -1
  121. package/dist/utils/cors.d.ts.map +0 -1
  122. package/dist/utils/cors.js.map +0 -1
  123. package/dist/utils/did-helpers.d.ts.map +0 -1
  124. package/dist/utils/did-helpers.js.map +0 -1
  125. package/dist/utils/index.d.ts.map +0 -1
  126. package/dist/utils/index.js.map +0 -1
  127. package/dist/utils/storage-keys.d.ts.map +0 -1
  128. package/dist/utils/storage-keys.js.map +0 -1
  129. package/docs/API_REFERENCE.md +0 -1362
  130. package/docs/COMPLIANCE_MATRIX.md +0 -691
  131. package/docs/STATUSLIST2021_GUIDE.md +0 -696
  132. package/docs/W3C_VC_DELEGATION_GUIDE.md +0 -710
  133. package/src/__tests__/cache/tool-protection-cache.test.ts +0 -640
  134. package/src/__tests__/config/provider-runtime-config.test.ts +0 -309
  135. package/src/__tests__/delegation-e2e.test.ts +0 -690
  136. package/src/__tests__/identity/user-did-manager.test.ts +0 -232
  137. package/src/__tests__/index.test.ts +0 -56
  138. package/src/__tests__/integration/full-flow.test.ts +0 -789
  139. package/src/__tests__/integration.test.ts +0 -281
  140. package/src/__tests__/providers/base.test.ts +0 -173
  141. package/src/__tests__/providers/memory.test.ts +0 -319
  142. package/src/__tests__/regression/phase2-regression.test.ts +0 -429
  143. package/src/__tests__/runtime/audit-logger.test.ts +0 -154
  144. package/src/__tests__/runtime/base-extensions.test.ts +0 -595
  145. package/src/__tests__/runtime/base.test.ts +0 -869
  146. package/src/__tests__/runtime/delegation-flow.test.ts +0 -164
  147. package/src/__tests__/runtime/proof-client-did.test.ts +0 -376
  148. package/src/__tests__/runtime/route-interception.test.ts +0 -686
  149. package/src/__tests__/runtime/tool-protection-enforcement.test.ts +0 -908
  150. package/src/__tests__/services/agentshield-integration.test.ts +0 -791
  151. package/src/__tests__/services/cache-busting.test.ts +0 -125
  152. package/src/__tests__/services/oauth-service-pkce.test.ts +0 -556
  153. package/src/__tests__/services/provider-resolver-edge-cases.test.ts +0 -591
  154. package/src/__tests__/services/tool-protection-merged-config.test.ts +0 -485
  155. package/src/__tests__/services/tool-protection-oauth-provider.test.ts +0 -480
  156. package/src/__tests__/services/tool-protection.service.test.ts +0 -1373
  157. package/src/__tests__/utils/mock-providers.ts +0 -340
  158. package/src/cache/oauth-config-cache.d.ts +0 -69
  159. package/src/cache/oauth-config-cache.d.ts.map +0 -1
  160. package/src/cache/oauth-config-cache.js.map +0 -1
  161. package/src/cache/oauth-config-cache.ts +0 -123
  162. package/src/cache/tool-protection-cache.ts +0 -171
  163. package/src/compliance/EXAMPLE.md +0 -412
  164. package/src/compliance/__tests__/schema-verifier.test.ts +0 -797
  165. package/src/compliance/index.ts +0 -8
  166. package/src/compliance/schema-registry.ts +0 -460
  167. package/src/compliance/schema-verifier.ts +0 -708
  168. package/src/config/__tests__/merged-config.spec.ts +0 -445
  169. package/src/config/__tests__/remote-config.spec.ts +0 -268
  170. package/src/config/remote-config.ts +0 -264
  171. package/src/config.ts +0 -312
  172. package/src/delegation/__tests__/audience-validator.test.ts +0 -112
  173. package/src/delegation/__tests__/bitstring.test.ts +0 -346
  174. package/src/delegation/__tests__/cascading-revocation.test.ts +0 -628
  175. package/src/delegation/__tests__/delegation-graph.test.ts +0 -584
  176. package/src/delegation/__tests__/did-key-resolver.test.ts +0 -265
  177. package/src/delegation/__tests__/utils.test.ts +0 -152
  178. package/src/delegation/__tests__/vc-issuer.test.ts +0 -442
  179. package/src/delegation/__tests__/vc-verifier.test.ts +0 -922
  180. package/src/delegation/audience-validator.ts +0 -52
  181. package/src/delegation/bitstring.ts +0 -278
  182. package/src/delegation/cascading-revocation.ts +0 -370
  183. package/src/delegation/delegation-graph.ts +0 -299
  184. package/src/delegation/did-key-resolver.ts +0 -179
  185. package/src/delegation/index.ts +0 -14
  186. package/src/delegation/statuslist-manager.ts +0 -353
  187. package/src/delegation/storage/__tests__/memory-graph-storage.test.ts +0 -366
  188. package/src/delegation/storage/__tests__/memory-statuslist-storage.test.ts +0 -228
  189. package/src/delegation/storage/index.ts +0 -9
  190. package/src/delegation/storage/memory-graph-storage.ts +0 -178
  191. package/src/delegation/storage/memory-statuslist-storage.ts +0 -77
  192. package/src/delegation/utils.ts +0 -221
  193. package/src/delegation/vc-issuer.ts +0 -232
  194. package/src/delegation/vc-verifier.ts +0 -568
  195. package/src/identity/idp-token-resolver.ts +0 -181
  196. package/src/identity/idp-token-storage.interface.ts +0 -94
  197. package/src/identity/user-did-manager.ts +0 -526
  198. package/src/index.ts +0 -310
  199. package/src/providers/base.d.ts +0 -91
  200. package/src/providers/base.d.ts.map +0 -1
  201. package/src/providers/base.js.map +0 -1
  202. package/src/providers/base.ts +0 -96
  203. package/src/providers/memory.ts +0 -142
  204. package/src/runtime/audit-logger.ts +0 -39
  205. package/src/runtime/base.ts +0 -1392
  206. package/src/services/__tests__/access-control.integration.test.ts +0 -443
  207. package/src/services/__tests__/access-control.proof-response-validation.test.ts +0 -578
  208. package/src/services/__tests__/access-control.service.test.ts +0 -970
  209. package/src/services/__tests__/batch-delegation.service.test.ts +0 -351
  210. package/src/services/__tests__/crypto.service.test.ts +0 -531
  211. package/src/services/__tests__/oauth-provider-registry.test.ts +0 -142
  212. package/src/services/__tests__/proof-verifier.integration.test.ts +0 -485
  213. package/src/services/__tests__/proof-verifier.test.ts +0 -489
  214. package/src/services/__tests__/provider-resolution.integration.test.ts +0 -202
  215. package/src/services/__tests__/provider-resolver.test.ts +0 -213
  216. package/src/services/__tests__/storage.service.test.ts +0 -358
  217. package/src/services/access-control.service.ts +0 -990
  218. package/src/services/authorization/authorization-registry.ts +0 -66
  219. package/src/services/authorization/types.ts +0 -71
  220. package/src/services/batch-delegation.service.ts +0 -137
  221. package/src/services/crypto.service.ts +0 -302
  222. package/src/services/errors.ts +0 -76
  223. package/src/services/index.ts +0 -18
  224. package/src/services/oauth-config.service.d.ts +0 -53
  225. package/src/services/oauth-config.service.d.ts.map +0 -1
  226. package/src/services/oauth-config.service.js.map +0 -1
  227. package/src/services/oauth-config.service.ts +0 -192
  228. package/src/services/oauth-provider-registry.d.ts +0 -57
  229. package/src/services/oauth-provider-registry.d.ts.map +0 -1
  230. package/src/services/oauth-provider-registry.js.map +0 -1
  231. package/src/services/oauth-provider-registry.ts +0 -141
  232. package/src/services/oauth-service.ts +0 -544
  233. package/src/services/oauth-token-retrieval.service.ts +0 -245
  234. package/src/services/proof-verifier.ts +0 -478
  235. package/src/services/provider-resolver.d.ts +0 -48
  236. package/src/services/provider-resolver.d.ts.map +0 -1
  237. package/src/services/provider-resolver.js.map +0 -1
  238. package/src/services/provider-resolver.ts +0 -146
  239. package/src/services/provider-validator.ts +0 -170
  240. package/src/services/session-registration.service.ts +0 -251
  241. package/src/services/storage.service.ts +0 -566
  242. package/src/services/tool-context-builder.ts +0 -237
  243. package/src/services/tool-protection.service.ts +0 -1070
  244. package/src/types/oauth-required-error.ts +0 -63
  245. package/src/types/tool-protection.ts +0 -155
  246. package/src/utils/__tests__/did-helpers.test.ts +0 -156
  247. package/src/utils/base58.ts +0 -109
  248. package/src/utils/base64.ts +0 -148
  249. package/src/utils/cors.ts +0 -83
  250. package/src/utils/did-helpers.ts +0 -210
  251. package/src/utils/index.ts +0 -8
  252. package/src/utils/storage-keys.ts +0 -278
  253. package/tsconfig.json +0 -21
  254. package/vitest.config.ts +0 -56
@@ -1,351 +0,0 @@
1
- /**
2
- * Batch Delegation Service Tests
3
- *
4
- * @package @kya-os/mcp-i-core
5
- */
6
-
7
- import { describe, it, expect, beforeEach, vi } from "vitest";
8
- import { BatchDelegationService } from "../batch-delegation.service.js";
9
- import { ProviderResolver } from "../provider-resolver.js";
10
- import { ToolProtectionService } from "../tool-protection.service.js";
11
- import type { ToolProtection } from "@kya-os/contracts/tool-protection";
12
-
13
- describe("BatchDelegationService", () => {
14
- let mockProviderResolver: ProviderResolver;
15
- let mockToolProtectionService: ToolProtectionService;
16
- let service: BatchDelegationService;
17
-
18
- beforeEach(() => {
19
- mockProviderResolver = {
20
- resolveProvider: vi.fn(),
21
- } as any;
22
-
23
- mockToolProtectionService = {
24
- checkToolProtection: vi.fn(),
25
- } as any;
26
-
27
- service = new BatchDelegationService(
28
- mockProviderResolver,
29
- mockToolProtectionService
30
- );
31
- });
32
-
33
- describe("groupToolsByProvider", () => {
34
- it("should group tools by provider", async () => {
35
- const toolProtection1: ToolProtection = {
36
- requiresDelegation: true,
37
- requiredScopes: ["github:repo:read"],
38
- oauthProvider: "github",
39
- };
40
-
41
- const toolProtection2: ToolProtection = {
42
- requiresDelegation: true,
43
- requiredScopes: ["github:repo:write"],
44
- oauthProvider: "github",
45
- };
46
-
47
- const toolProtection3: ToolProtection = {
48
- requiresDelegation: true,
49
- requiredScopes: ["google:calendar:read"],
50
- oauthProvider: "google",
51
- };
52
-
53
- (mockToolProtectionService.checkToolProtection as any)
54
- .mockResolvedValueOnce(toolProtection1)
55
- .mockResolvedValueOnce(toolProtection2)
56
- .mockResolvedValueOnce(toolProtection3);
57
-
58
- (mockProviderResolver.resolveProvider as any)
59
- .mockResolvedValueOnce("github")
60
- .mockResolvedValueOnce("github")
61
- .mockResolvedValueOnce("google");
62
-
63
- const groups = await service.groupToolsByProvider(
64
- ["tool1", "tool2", "tool3"],
65
- "test-project",
66
- "did:key:test"
67
- );
68
-
69
- expect(groups.size).toBe(2);
70
- expect(groups.get("github")?.tools).toEqual(["tool1", "tool2"]);
71
- expect(groups.get("google")?.tools).toEqual(["tool3"]);
72
- });
73
-
74
- it("should merge scopes for tools in same group", async () => {
75
- const toolProtection1: ToolProtection = {
76
- requiresDelegation: true,
77
- requiredScopes: ["github:repo:read", "github:user:read"],
78
- oauthProvider: "github",
79
- };
80
-
81
- const toolProtection2: ToolProtection = {
82
- requiresDelegation: true,
83
- requiredScopes: ["github:repo:write"],
84
- oauthProvider: "github",
85
- };
86
-
87
- (mockToolProtectionService.checkToolProtection as any)
88
- .mockResolvedValueOnce(toolProtection1)
89
- .mockResolvedValueOnce(toolProtection2);
90
-
91
- (mockProviderResolver.resolveProvider as any)
92
- .mockResolvedValue("github");
93
-
94
- const groups = await service.groupToolsByProvider(
95
- ["tool1", "tool2"],
96
- "test-project",
97
- "did:key:test"
98
- );
99
-
100
- const githubGroup = groups.get("github");
101
- expect(githubGroup?.scopes).toContain("github:repo:read");
102
- expect(githubGroup?.scopes).toContain("github:user:read");
103
- expect(githubGroup?.scopes).toContain("github:repo:write");
104
- expect(githubGroup?.scopes.length).toBe(3); // No duplicates
105
- });
106
-
107
- it("should use highest risk level in group", async () => {
108
- const toolProtection1: ToolProtection = {
109
- requiresDelegation: true,
110
- requiredScopes: ["github:repo:read"],
111
- oauthProvider: "github",
112
- riskLevel: "low",
113
- };
114
-
115
- const toolProtection2: ToolProtection = {
116
- requiresDelegation: true,
117
- requiredScopes: ["github:repo:write"],
118
- oauthProvider: "github",
119
- riskLevel: "high",
120
- };
121
-
122
- (mockToolProtectionService.checkToolProtection as any)
123
- .mockResolvedValueOnce(toolProtection1)
124
- .mockResolvedValueOnce(toolProtection2);
125
-
126
- (mockProviderResolver.resolveProvider as any)
127
- .mockResolvedValue("github");
128
-
129
- const groups = await service.groupToolsByProvider(
130
- ["tool1", "tool2"],
131
- "test-project",
132
- "did:key:test"
133
- );
134
-
135
- expect(groups.get("github")?.riskLevel).toBe("high");
136
- });
137
-
138
- it("should skip tools that don't require delegation", async () => {
139
- const toolProtection1: ToolProtection = {
140
- requiresDelegation: true,
141
- requiredScopes: ["github:repo:read"],
142
- oauthProvider: "github",
143
- };
144
-
145
- const toolProtection2: ToolProtection = {
146
- requiresDelegation: false,
147
- requiredScopes: [],
148
- };
149
-
150
- (mockToolProtectionService.checkToolProtection as any)
151
- .mockResolvedValueOnce(toolProtection1)
152
- .mockResolvedValueOnce(toolProtection2);
153
-
154
- (mockProviderResolver.resolveProvider as any).mockResolvedValue("github");
155
-
156
- const groups = await service.groupToolsByProvider(
157
- ["tool1", "tool2"],
158
- "test-project",
159
- "did:key:test"
160
- );
161
-
162
- expect(groups.get("github")?.tools).toEqual(["tool1"]);
163
- expect(groups.get("github")?.tools).not.toContain("tool2");
164
- });
165
-
166
- it("should handle tools with provider resolution errors gracefully", async () => {
167
- const toolProtection: ToolProtection = {
168
- requiresDelegation: true,
169
- requiredScopes: ["github:repo:read"],
170
- oauthProvider: "github",
171
- };
172
-
173
- (mockToolProtectionService.checkToolProtection as any).mockResolvedValue(
174
- toolProtection
175
- );
176
-
177
- (mockProviderResolver.resolveProvider as any).mockRejectedValue(
178
- new Error("Provider not found")
179
- );
180
-
181
- const consoleSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
182
-
183
- const groups = await service.groupToolsByProvider(
184
- ["tool1"],
185
- "test-project",
186
- "did:key:test"
187
- );
188
-
189
- expect(groups.size).toBe(0);
190
- expect(consoleSpy).toHaveBeenCalled();
191
-
192
- consoleSpy.mockRestore();
193
- });
194
-
195
- it("should return empty map when no tools require delegation", async () => {
196
- const toolProtection: ToolProtection = {
197
- requiresDelegation: false,
198
- requiredScopes: [],
199
- };
200
-
201
- (mockToolProtectionService.checkToolProtection as any).mockResolvedValue(
202
- toolProtection
203
- );
204
-
205
- const groups = await service.groupToolsByProvider(
206
- ["tool1"],
207
- "test-project",
208
- "did:key:test"
209
- );
210
-
211
- expect(groups.size).toBe(0);
212
- });
213
-
214
- it("should group tools with oauthProvider field specified", async () => {
215
- const toolProtection1: ToolProtection = {
216
- requiresDelegation: true,
217
- requiredScopes: ["repo:read"],
218
- oauthProvider: "github", // Explicit provider
219
- };
220
-
221
- const toolProtection2: ToolProtection = {
222
- requiresDelegation: true,
223
- requiredScopes: ["repo:write"],
224
- oauthProvider: "github", // Same explicit provider
225
- };
226
-
227
- (mockToolProtectionService.checkToolProtection as any)
228
- .mockResolvedValueOnce(toolProtection1)
229
- .mockResolvedValueOnce(toolProtection2);
230
-
231
- (mockProviderResolver.resolveProvider as any)
232
- .mockResolvedValueOnce("github")
233
- .mockResolvedValueOnce("github");
234
-
235
- const groups = await service.groupToolsByProvider(
236
- ["tool1", "tool2"],
237
- "test-project",
238
- "did:key:test"
239
- );
240
-
241
- expect(groups.size).toBe(1);
242
- expect(groups.get("github")?.tools).toEqual(["tool1", "tool2"]);
243
- expect(mockProviderResolver.resolveProvider).toHaveBeenCalledTimes(2);
244
- });
245
-
246
- it("should group tools with oauthProvider field missing (fallback behavior)", async () => {
247
- const toolProtection1: ToolProtection = {
248
- requiresDelegation: true,
249
- requiredScopes: ["github:repo:read"],
250
- // No oauthProvider - should use scope inference
251
- };
252
-
253
- const toolProtection2: ToolProtection = {
254
- requiresDelegation: true,
255
- requiredScopes: ["github:repo:write"],
256
- // No oauthProvider - should use scope inference
257
- };
258
-
259
- (mockToolProtectionService.checkToolProtection as any)
260
- .mockResolvedValueOnce(toolProtection1)
261
- .mockResolvedValueOnce(toolProtection2);
262
-
263
- // ProviderResolver should infer from scopes
264
- (mockProviderResolver.resolveProvider as any)
265
- .mockResolvedValueOnce("github")
266
- .mockResolvedValueOnce("github");
267
-
268
- const groups = await service.groupToolsByProvider(
269
- ["tool1", "tool2"],
270
- "test-project",
271
- "did:key:test"
272
- );
273
-
274
- expect(groups.size).toBe(1);
275
- expect(groups.get("github")?.tools).toEqual(["tool1", "tool2"]);
276
- // Should still call resolveProvider (which handles fallback)
277
- expect(mockProviderResolver.resolveProvider).toHaveBeenCalledTimes(2);
278
- });
279
-
280
- it("should handle empty groups when all tools skip delegation", async () => {
281
- const toolProtection1: ToolProtection = {
282
- requiresDelegation: false,
283
- requiredScopes: [],
284
- };
285
-
286
- const toolProtection2: ToolProtection = {
287
- requiresDelegation: false,
288
- requiredScopes: [],
289
- };
290
-
291
- (mockToolProtectionService.checkToolProtection as any)
292
- .mockResolvedValueOnce(toolProtection1)
293
- .mockResolvedValueOnce(toolProtection2);
294
-
295
- const groups = await service.groupToolsByProvider(
296
- ["tool1", "tool2"],
297
- "test-project",
298
- "did:key:test"
299
- );
300
-
301
- expect(groups.size).toBe(0);
302
- // Should not call resolveProvider if no tools require delegation
303
- expect(mockProviderResolver.resolveProvider).not.toHaveBeenCalled();
304
- });
305
-
306
- it("should handle mixed tools with and without oauthProvider", async () => {
307
- const toolProtection1: ToolProtection = {
308
- requiresDelegation: true,
309
- requiredScopes: ["repo:read"],
310
- oauthProvider: "github", // Explicit
311
- };
312
-
313
- const toolProtection2: ToolProtection = {
314
- requiresDelegation: true,
315
- requiredScopes: ["gmail:read"],
316
- // No oauthProvider - should infer google from scope
317
- };
318
-
319
- (mockToolProtectionService.checkToolProtection as any)
320
- .mockResolvedValueOnce(toolProtection1)
321
- .mockResolvedValueOnce(toolProtection2);
322
-
323
- (mockProviderResolver.resolveProvider as any)
324
- .mockResolvedValueOnce("github")
325
- .mockResolvedValueOnce("google");
326
-
327
- const groups = await service.groupToolsByProvider(
328
- ["tool1", "tool2"],
329
- "test-project",
330
- "did:key:test"
331
- );
332
-
333
- expect(groups.size).toBe(2);
334
- expect(groups.get("github")?.tools).toEqual(["tool1"]);
335
- expect(groups.get("google")?.tools).toEqual(["tool2"]);
336
- });
337
- });
338
-
339
- describe("getToolsForProvider", () => {
340
- it("should return empty array (not yet implemented)", async () => {
341
- const tools = await service.getToolsForProvider(
342
- "github",
343
- "test-project",
344
- "did:key:test"
345
- );
346
-
347
- expect(tools).toEqual([]);
348
- });
349
- });
350
- });
351
-