@kya-os/mcp-i-core 1.3.12 → 1.3.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (254) hide show
  1. package/dist/config/remote-config.js +9 -12
  2. package/dist/runtime/base.js +11 -0
  3. package/dist/services/access-control.service.js +5 -0
  4. package/dist/services/tool-protection.service.js +17 -8
  5. package/package.json +2 -2
  6. package/.turbo/turbo-build.log +0 -4
  7. package/.turbo/turbo-test$colon$coverage.log +0 -4586
  8. package/.turbo/turbo-test.log +0 -3169
  9. package/COMPLIANCE_IMPROVEMENT_REPORT.md +0 -483
  10. package/Composer 3.md +0 -615
  11. package/GPT-5.md +0 -1169
  12. package/OPUS-plan.md +0 -352
  13. package/PHASE_3_AND_4.1_SUMMARY.md +0 -585
  14. package/PHASE_3_SUMMARY.md +0 -317
  15. package/PHASE_4.1.3_SUMMARY.md +0 -428
  16. package/PHASE_4.1_COMPLETE.md +0 -525
  17. package/PHASE_4_USER_DID_IDENTITY_LINKING_PLAN.md +0 -1240
  18. package/SCHEMA_COMPLIANCE_REPORT.md +0 -275
  19. package/TEST_PLAN.md +0 -571
  20. package/coverage/coverage-final.json +0 -60
  21. package/dist/cache/oauth-config-cache.d.ts.map +0 -1
  22. package/dist/cache/oauth-config-cache.js.map +0 -1
  23. package/dist/cache/tool-protection-cache.d.ts.map +0 -1
  24. package/dist/cache/tool-protection-cache.js.map +0 -1
  25. package/dist/compliance/index.d.ts.map +0 -1
  26. package/dist/compliance/index.js.map +0 -1
  27. package/dist/compliance/schema-registry.d.ts.map +0 -1
  28. package/dist/compliance/schema-registry.js.map +0 -1
  29. package/dist/compliance/schema-verifier.d.ts.map +0 -1
  30. package/dist/compliance/schema-verifier.js.map +0 -1
  31. package/dist/config/remote-config.d.ts.map +0 -1
  32. package/dist/config/remote-config.js.map +0 -1
  33. package/dist/config.d.ts.map +0 -1
  34. package/dist/config.js.map +0 -1
  35. package/dist/delegation/audience-validator.d.ts.map +0 -1
  36. package/dist/delegation/audience-validator.js.map +0 -1
  37. package/dist/delegation/bitstring.d.ts.map +0 -1
  38. package/dist/delegation/bitstring.js.map +0 -1
  39. package/dist/delegation/cascading-revocation.d.ts.map +0 -1
  40. package/dist/delegation/cascading-revocation.js.map +0 -1
  41. package/dist/delegation/delegation-graph.d.ts.map +0 -1
  42. package/dist/delegation/delegation-graph.js.map +0 -1
  43. package/dist/delegation/did-key-resolver.d.ts.map +0 -1
  44. package/dist/delegation/did-key-resolver.js.map +0 -1
  45. package/dist/delegation/index.d.ts.map +0 -1
  46. package/dist/delegation/index.js.map +0 -1
  47. package/dist/delegation/statuslist-manager.d.ts.map +0 -1
  48. package/dist/delegation/statuslist-manager.js.map +0 -1
  49. package/dist/delegation/storage/index.d.ts.map +0 -1
  50. package/dist/delegation/storage/index.js.map +0 -1
  51. package/dist/delegation/storage/memory-graph-storage.d.ts.map +0 -1
  52. package/dist/delegation/storage/memory-graph-storage.js.map +0 -1
  53. package/dist/delegation/storage/memory-statuslist-storage.d.ts.map +0 -1
  54. package/dist/delegation/storage/memory-statuslist-storage.js.map +0 -1
  55. package/dist/delegation/utils.d.ts.map +0 -1
  56. package/dist/delegation/utils.js.map +0 -1
  57. package/dist/delegation/vc-issuer.d.ts.map +0 -1
  58. package/dist/delegation/vc-issuer.js.map +0 -1
  59. package/dist/delegation/vc-verifier.d.ts.map +0 -1
  60. package/dist/delegation/vc-verifier.js.map +0 -1
  61. package/dist/identity/idp-token-resolver.d.ts.map +0 -1
  62. package/dist/identity/idp-token-resolver.js.map +0 -1
  63. package/dist/identity/idp-token-storage.interface.d.ts.map +0 -1
  64. package/dist/identity/idp-token-storage.interface.js.map +0 -1
  65. package/dist/identity/user-did-manager.d.ts.map +0 -1
  66. package/dist/identity/user-did-manager.js.map +0 -1
  67. package/dist/index.d.ts.map +0 -1
  68. package/dist/index.js.map +0 -1
  69. package/dist/providers/base.d.ts.map +0 -1
  70. package/dist/providers/base.js.map +0 -1
  71. package/dist/providers/memory.d.ts.map +0 -1
  72. package/dist/providers/memory.js.map +0 -1
  73. package/dist/runtime/audit-logger.d.ts.map +0 -1
  74. package/dist/runtime/audit-logger.js.map +0 -1
  75. package/dist/runtime/base.d.ts.map +0 -1
  76. package/dist/runtime/base.js.map +0 -1
  77. package/dist/services/access-control.service.d.ts.map +0 -1
  78. package/dist/services/access-control.service.js.map +0 -1
  79. package/dist/services/authorization/authorization-registry.d.ts.map +0 -1
  80. package/dist/services/authorization/authorization-registry.js.map +0 -1
  81. package/dist/services/authorization/types.d.ts.map +0 -1
  82. package/dist/services/authorization/types.js.map +0 -1
  83. package/dist/services/batch-delegation.service.d.ts.map +0 -1
  84. package/dist/services/batch-delegation.service.js.map +0 -1
  85. package/dist/services/crypto.service.d.ts.map +0 -1
  86. package/dist/services/crypto.service.js.map +0 -1
  87. package/dist/services/errors.d.ts.map +0 -1
  88. package/dist/services/errors.js.map +0 -1
  89. package/dist/services/index.d.ts.map +0 -1
  90. package/dist/services/index.js.map +0 -1
  91. package/dist/services/oauth-config.service.d.ts.map +0 -1
  92. package/dist/services/oauth-config.service.js.map +0 -1
  93. package/dist/services/oauth-provider-registry.d.ts.map +0 -1
  94. package/dist/services/oauth-provider-registry.js.map +0 -1
  95. package/dist/services/oauth-service.d.ts.map +0 -1
  96. package/dist/services/oauth-service.js.map +0 -1
  97. package/dist/services/oauth-token-retrieval.service.d.ts.map +0 -1
  98. package/dist/services/oauth-token-retrieval.service.js.map +0 -1
  99. package/dist/services/proof-verifier.d.ts.map +0 -1
  100. package/dist/services/proof-verifier.js.map +0 -1
  101. package/dist/services/provider-resolver.d.ts.map +0 -1
  102. package/dist/services/provider-resolver.js.map +0 -1
  103. package/dist/services/provider-validator.d.ts.map +0 -1
  104. package/dist/services/provider-validator.js.map +0 -1
  105. package/dist/services/session-registration.service.d.ts.map +0 -1
  106. package/dist/services/session-registration.service.js.map +0 -1
  107. package/dist/services/storage.service.d.ts.map +0 -1
  108. package/dist/services/storage.service.js.map +0 -1
  109. package/dist/services/tool-context-builder.d.ts.map +0 -1
  110. package/dist/services/tool-context-builder.js.map +0 -1
  111. package/dist/services/tool-protection.service.d.ts.map +0 -1
  112. package/dist/services/tool-protection.service.js.map +0 -1
  113. package/dist/types/oauth-required-error.d.ts.map +0 -1
  114. package/dist/types/oauth-required-error.js.map +0 -1
  115. package/dist/types/tool-protection.d.ts.map +0 -1
  116. package/dist/types/tool-protection.js.map +0 -1
  117. package/dist/utils/base58.d.ts.map +0 -1
  118. package/dist/utils/base58.js.map +0 -1
  119. package/dist/utils/base64.d.ts.map +0 -1
  120. package/dist/utils/base64.js.map +0 -1
  121. package/dist/utils/cors.d.ts.map +0 -1
  122. package/dist/utils/cors.js.map +0 -1
  123. package/dist/utils/did-helpers.d.ts.map +0 -1
  124. package/dist/utils/did-helpers.js.map +0 -1
  125. package/dist/utils/index.d.ts.map +0 -1
  126. package/dist/utils/index.js.map +0 -1
  127. package/dist/utils/storage-keys.d.ts.map +0 -1
  128. package/dist/utils/storage-keys.js.map +0 -1
  129. package/docs/API_REFERENCE.md +0 -1362
  130. package/docs/COMPLIANCE_MATRIX.md +0 -691
  131. package/docs/STATUSLIST2021_GUIDE.md +0 -696
  132. package/docs/W3C_VC_DELEGATION_GUIDE.md +0 -710
  133. package/src/__tests__/cache/tool-protection-cache.test.ts +0 -640
  134. package/src/__tests__/config/provider-runtime-config.test.ts +0 -309
  135. package/src/__tests__/delegation-e2e.test.ts +0 -690
  136. package/src/__tests__/identity/user-did-manager.test.ts +0 -232
  137. package/src/__tests__/index.test.ts +0 -56
  138. package/src/__tests__/integration/full-flow.test.ts +0 -789
  139. package/src/__tests__/integration.test.ts +0 -281
  140. package/src/__tests__/providers/base.test.ts +0 -173
  141. package/src/__tests__/providers/memory.test.ts +0 -319
  142. package/src/__tests__/regression/phase2-regression.test.ts +0 -429
  143. package/src/__tests__/runtime/audit-logger.test.ts +0 -154
  144. package/src/__tests__/runtime/base-extensions.test.ts +0 -595
  145. package/src/__tests__/runtime/base.test.ts +0 -869
  146. package/src/__tests__/runtime/delegation-flow.test.ts +0 -164
  147. package/src/__tests__/runtime/proof-client-did.test.ts +0 -376
  148. package/src/__tests__/runtime/route-interception.test.ts +0 -686
  149. package/src/__tests__/runtime/tool-protection-enforcement.test.ts +0 -908
  150. package/src/__tests__/services/agentshield-integration.test.ts +0 -791
  151. package/src/__tests__/services/cache-busting.test.ts +0 -125
  152. package/src/__tests__/services/oauth-service-pkce.test.ts +0 -556
  153. package/src/__tests__/services/provider-resolver-edge-cases.test.ts +0 -591
  154. package/src/__tests__/services/tool-protection-merged-config.test.ts +0 -485
  155. package/src/__tests__/services/tool-protection-oauth-provider.test.ts +0 -480
  156. package/src/__tests__/services/tool-protection.service.test.ts +0 -1373
  157. package/src/__tests__/utils/mock-providers.ts +0 -340
  158. package/src/cache/oauth-config-cache.d.ts +0 -69
  159. package/src/cache/oauth-config-cache.d.ts.map +0 -1
  160. package/src/cache/oauth-config-cache.js.map +0 -1
  161. package/src/cache/oauth-config-cache.ts +0 -123
  162. package/src/cache/tool-protection-cache.ts +0 -171
  163. package/src/compliance/EXAMPLE.md +0 -412
  164. package/src/compliance/__tests__/schema-verifier.test.ts +0 -797
  165. package/src/compliance/index.ts +0 -8
  166. package/src/compliance/schema-registry.ts +0 -460
  167. package/src/compliance/schema-verifier.ts +0 -708
  168. package/src/config/__tests__/merged-config.spec.ts +0 -445
  169. package/src/config/__tests__/remote-config.spec.ts +0 -268
  170. package/src/config/remote-config.ts +0 -264
  171. package/src/config.ts +0 -312
  172. package/src/delegation/__tests__/audience-validator.test.ts +0 -112
  173. package/src/delegation/__tests__/bitstring.test.ts +0 -346
  174. package/src/delegation/__tests__/cascading-revocation.test.ts +0 -628
  175. package/src/delegation/__tests__/delegation-graph.test.ts +0 -584
  176. package/src/delegation/__tests__/did-key-resolver.test.ts +0 -265
  177. package/src/delegation/__tests__/utils.test.ts +0 -152
  178. package/src/delegation/__tests__/vc-issuer.test.ts +0 -442
  179. package/src/delegation/__tests__/vc-verifier.test.ts +0 -922
  180. package/src/delegation/audience-validator.ts +0 -52
  181. package/src/delegation/bitstring.ts +0 -278
  182. package/src/delegation/cascading-revocation.ts +0 -370
  183. package/src/delegation/delegation-graph.ts +0 -299
  184. package/src/delegation/did-key-resolver.ts +0 -179
  185. package/src/delegation/index.ts +0 -14
  186. package/src/delegation/statuslist-manager.ts +0 -353
  187. package/src/delegation/storage/__tests__/memory-graph-storage.test.ts +0 -366
  188. package/src/delegation/storage/__tests__/memory-statuslist-storage.test.ts +0 -228
  189. package/src/delegation/storage/index.ts +0 -9
  190. package/src/delegation/storage/memory-graph-storage.ts +0 -178
  191. package/src/delegation/storage/memory-statuslist-storage.ts +0 -77
  192. package/src/delegation/utils.ts +0 -221
  193. package/src/delegation/vc-issuer.ts +0 -232
  194. package/src/delegation/vc-verifier.ts +0 -568
  195. package/src/identity/idp-token-resolver.ts +0 -181
  196. package/src/identity/idp-token-storage.interface.ts +0 -94
  197. package/src/identity/user-did-manager.ts +0 -526
  198. package/src/index.ts +0 -310
  199. package/src/providers/base.d.ts +0 -91
  200. package/src/providers/base.d.ts.map +0 -1
  201. package/src/providers/base.js.map +0 -1
  202. package/src/providers/base.ts +0 -96
  203. package/src/providers/memory.ts +0 -142
  204. package/src/runtime/audit-logger.ts +0 -39
  205. package/src/runtime/base.ts +0 -1392
  206. package/src/services/__tests__/access-control.integration.test.ts +0 -443
  207. package/src/services/__tests__/access-control.proof-response-validation.test.ts +0 -578
  208. package/src/services/__tests__/access-control.service.test.ts +0 -970
  209. package/src/services/__tests__/batch-delegation.service.test.ts +0 -351
  210. package/src/services/__tests__/crypto.service.test.ts +0 -531
  211. package/src/services/__tests__/oauth-provider-registry.test.ts +0 -142
  212. package/src/services/__tests__/proof-verifier.integration.test.ts +0 -485
  213. package/src/services/__tests__/proof-verifier.test.ts +0 -489
  214. package/src/services/__tests__/provider-resolution.integration.test.ts +0 -202
  215. package/src/services/__tests__/provider-resolver.test.ts +0 -213
  216. package/src/services/__tests__/storage.service.test.ts +0 -358
  217. package/src/services/access-control.service.ts +0 -990
  218. package/src/services/authorization/authorization-registry.ts +0 -66
  219. package/src/services/authorization/types.ts +0 -71
  220. package/src/services/batch-delegation.service.ts +0 -137
  221. package/src/services/crypto.service.ts +0 -302
  222. package/src/services/errors.ts +0 -76
  223. package/src/services/index.ts +0 -18
  224. package/src/services/oauth-config.service.d.ts +0 -53
  225. package/src/services/oauth-config.service.d.ts.map +0 -1
  226. package/src/services/oauth-config.service.js.map +0 -1
  227. package/src/services/oauth-config.service.ts +0 -192
  228. package/src/services/oauth-provider-registry.d.ts +0 -57
  229. package/src/services/oauth-provider-registry.d.ts.map +0 -1
  230. package/src/services/oauth-provider-registry.js.map +0 -1
  231. package/src/services/oauth-provider-registry.ts +0 -141
  232. package/src/services/oauth-service.ts +0 -544
  233. package/src/services/oauth-token-retrieval.service.ts +0 -245
  234. package/src/services/proof-verifier.ts +0 -478
  235. package/src/services/provider-resolver.d.ts +0 -48
  236. package/src/services/provider-resolver.d.ts.map +0 -1
  237. package/src/services/provider-resolver.js.map +0 -1
  238. package/src/services/provider-resolver.ts +0 -146
  239. package/src/services/provider-validator.ts +0 -170
  240. package/src/services/session-registration.service.ts +0 -251
  241. package/src/services/storage.service.ts +0 -566
  242. package/src/services/tool-context-builder.ts +0 -237
  243. package/src/services/tool-protection.service.ts +0 -1070
  244. package/src/types/oauth-required-error.ts +0 -63
  245. package/src/types/tool-protection.ts +0 -155
  246. package/src/utils/__tests__/did-helpers.test.ts +0 -156
  247. package/src/utils/base58.ts +0 -109
  248. package/src/utils/base64.ts +0 -148
  249. package/src/utils/cors.ts +0 -83
  250. package/src/utils/did-helpers.ts +0 -210
  251. package/src/utils/index.ts +0 -8
  252. package/src/utils/storage-keys.ts +0 -278
  253. package/tsconfig.json +0 -21
  254. package/vitest.config.ts +0 -56
@@ -1,213 +0,0 @@
1
- /**
2
- * Provider Resolver Tests
3
- *
4
- * @package @kya-os/mcp-i-core
5
- */
6
-
7
- import { describe, it, expect, beforeEach, vi } from "vitest";
8
- import { ProviderResolver } from "../provider-resolver.js";
9
- import { OAuthProviderRegistry } from "../oauth-provider-registry.js";
10
- import { OAuthConfigService } from "../oauth-config.service.js";
11
- import type { ToolProtection } from "@kya-os/contracts/tool-protection";
12
- import type { OAuthConfig } from "@kya-os/contracts/config";
13
-
14
- describe("ProviderResolver", () => {
15
- let mockConfigService: OAuthConfigService;
16
- let mockRegistry: OAuthProviderRegistry;
17
- let resolver: ProviderResolver;
18
-
19
- const mockOAuthConfig: OAuthConfig = {
20
- providers: {
21
- github: {
22
- clientId: "github_client_id",
23
- authorizationUrl: "https://github.com/login/oauth/authorize",
24
- tokenUrl: "https://github.com/login/oauth/access_token",
25
- supportsPKCE: true,
26
- requiresClientSecret: false,
27
- },
28
- google: {
29
- clientId: "google_client_id",
30
- authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
31
- tokenUrl: "https://oauth2.googleapis.com/token",
32
- supportsPKCE: true,
33
- requiresClientSecret: false,
34
- },
35
- },
36
- };
37
-
38
- beforeEach(() => {
39
- mockConfigService = {
40
- getOAuthConfig: vi.fn().mockResolvedValue(mockOAuthConfig),
41
- } as any;
42
-
43
- mockRegistry = {
44
- hasProvider: vi.fn(),
45
- getAllProviders: vi.fn().mockReturnValue([]),
46
- getProviderNames: vi.fn().mockReturnValue([]),
47
- loadFromAgentShield: vi.fn().mockResolvedValue(undefined),
48
- getConfiguredProvider: vi.fn().mockReturnValue(null), // New method for configuredProvider
49
- } as any;
50
-
51
- resolver = new ProviderResolver(mockRegistry, mockConfigService);
52
- });
53
-
54
- describe("resolveProvider - Priority 1: Tool-specific provider", () => {
55
- it("should return tool-specific oauthProvider when specified", async () => {
56
- const toolProtection: ToolProtection = {
57
- requiresDelegation: true,
58
- requiredScopes: ["repo:read"],
59
- oauthProvider: "github",
60
- };
61
-
62
- (mockRegistry.hasProvider as any).mockReturnValue(true);
63
-
64
- const provider = await resolver.resolveProvider(
65
- toolProtection,
66
- "test-project"
67
- );
68
-
69
- expect(provider).toBe("github");
70
- expect(mockRegistry.hasProvider).toHaveBeenCalledWith("github");
71
- });
72
-
73
- it("should throw error if tool-specific provider not configured", async () => {
74
- const toolProtection: ToolProtection = {
75
- requiresDelegation: true,
76
- requiredScopes: ["repo:read"],
77
- oauthProvider: "nonexistent",
78
- };
79
-
80
- (mockRegistry.hasProvider as any).mockReturnValue(false);
81
-
82
- await expect(
83
- resolver.resolveProvider(toolProtection, "test-project")
84
- ).rejects.toThrow(/not configured for project/);
85
- });
86
- });
87
-
88
- describe("resolveProvider - Priority 2: Scope inference", () => {
89
- it("should infer provider from github scope prefix", async () => {
90
- const toolProtection: ToolProtection = {
91
- requiresDelegation: true,
92
- requiredScopes: ["github:repo:read"],
93
- };
94
-
95
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => {
96
- return name === "github";
97
- });
98
-
99
- const provider = await resolver.resolveProvider(
100
- toolProtection,
101
- "test-project"
102
- );
103
-
104
- expect(provider).toBe("github");
105
- });
106
-
107
- it("should infer provider from gmail scope prefix (maps to google)", async () => {
108
- const toolProtection: ToolProtection = {
109
- requiresDelegation: true,
110
- requiredScopes: ["gmail:read"],
111
- };
112
-
113
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => {
114
- return name === "google";
115
- });
116
-
117
- const provider = await resolver.resolveProvider(
118
- toolProtection,
119
- "test-project"
120
- );
121
-
122
- expect(provider).toBe("google");
123
- });
124
-
125
- it("should fall back to configuredProvider for ambiguous scopes", async () => {
126
- const toolProtection: ToolProtection = {
127
- requiresDelegation: true,
128
- requiredScopes: ["github:read", "google:read"],
129
- };
130
-
131
- // Ambiguous scopes - both infer different providers
132
- // Should fall through to Priority 3 (configuredProvider)
133
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => name === "github");
134
- (mockRegistry.getConfiguredProvider as any).mockReturnValue("github");
135
-
136
- const provider = await resolver.resolveProvider(
137
- toolProtection,
138
- "test-project"
139
- );
140
-
141
- // Falls back to configuredProvider
142
- expect(provider).toBe("github");
143
- });
144
- });
145
-
146
- describe("resolveProvider - Priority 3: Project-configured provider", () => {
147
- it("should use configuredProvider as fallback", async () => {
148
- const toolProtection: ToolProtection = {
149
- requiresDelegation: true,
150
- requiredScopes: ["custom:scope"],
151
- };
152
-
153
- // configuredProvider is github
154
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => name === "github");
155
- (mockRegistry.getConfiguredProvider as any).mockReturnValue("github");
156
-
157
- const consoleSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
158
-
159
- const provider = await resolver.resolveProvider(
160
- toolProtection,
161
- "test-project"
162
- );
163
-
164
- expect(provider).toBe("github");
165
- expect(consoleSpy).toHaveBeenCalledWith(
166
- expect.stringContaining("project-configured provider")
167
- );
168
-
169
- consoleSpy.mockRestore();
170
- });
171
-
172
- it("should log warning when using configuredProvider fallback", async () => {
173
- const toolProtection: ToolProtection = {
174
- requiresDelegation: true,
175
- requiredScopes: [],
176
- };
177
-
178
- // configuredProvider is github
179
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => name === "github");
180
- (mockRegistry.getConfiguredProvider as any).mockReturnValue("github");
181
-
182
- const consoleSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
183
-
184
- await resolver.resolveProvider(toolProtection, "test-project");
185
-
186
- expect(consoleSpy).toHaveBeenCalledWith(
187
- expect.stringContaining("Consider explicitly setting oauthProvider")
188
- );
189
-
190
- consoleSpy.mockRestore();
191
- });
192
- });
193
-
194
- describe("resolveProvider - Priority 4: Error if no provider", () => {
195
- it("should throw error if no provider is configured", async () => {
196
- const toolProtection: ToolProtection = {
197
- requiresDelegation: true,
198
- requiredScopes: [],
199
- };
200
-
201
- // No configuredProvider set
202
- (mockRegistry.hasProvider as any).mockReturnValue(false);
203
- (mockRegistry.getConfiguredProvider as any).mockReturnValue(null);
204
- (mockRegistry.getAllProviders as any).mockReturnValue([]);
205
- (mockRegistry.getProviderNames as any).mockReturnValue([]);
206
-
207
- await expect(
208
- resolver.resolveProvider(toolProtection, "test-project")
209
- ).rejects.toThrow(/no provider is configured/);
210
- });
211
- });
212
- });
213
-
@@ -1,358 +0,0 @@
1
- /**
2
- * Unit Tests for StorageService
3
- *
4
- * Comprehensive test coverage for storage service factory and key helpers.
5
- * Tests provider selection, key formatting, and migration utilities.
6
- */
7
-
8
- import { describe, it, expect, vi } from 'vitest';
9
- import {
10
- createStorageProviders,
11
- StorageKeyHelpers,
12
- migrateLegacyKeys,
13
- type StorageServiceConfig,
14
- } from '../storage.service.js';
15
- import {
16
- MemoryStorageProvider,
17
- MemoryNonceCacheProvider,
18
- } from '../../providers/memory.js';
19
-
20
- describe('StorageService', () => {
21
- describe('createStorageProviders', () => {
22
- it('should use memory provider when no external storage configured', async () => {
23
- const config: StorageServiceConfig = {
24
- fallbackToMemory: true,
25
- };
26
-
27
- const providers = await createStorageProviders(config);
28
-
29
- expect(providers.storageProvider).toBeInstanceOf(MemoryStorageProvider);
30
- expect(providers.nonceCacheProvider).toBeInstanceOf(
31
- MemoryNonceCacheProvider
32
- );
33
- });
34
-
35
- it('should throw error when fallbackToMemory is false and no storage configured', async () => {
36
- const config: StorageServiceConfig = {
37
- fallbackToMemory: false,
38
- };
39
-
40
- await expect(createStorageProviders(config)).rejects.toThrow(
41
- 'No storage provider configured'
42
- );
43
- });
44
-
45
- it('should prefer Redis over KV when both are configured', async () => {
46
- const mockRedisClient = {
47
- connect: vi.fn().mockResolvedValue(undefined),
48
- ping: vi.fn().mockResolvedValue('PONG'),
49
- get: vi.fn(),
50
- set: vi.fn(),
51
- setEx: vi.fn(),
52
- del: vi.fn(),
53
- exists: vi.fn(),
54
- keys: vi.fn().mockResolvedValue([]),
55
- };
56
-
57
- // Mock redis import
58
- vi.mock('redis', () => ({
59
- createClient: vi.fn().mockReturnValue(mockRedisClient),
60
- }));
61
-
62
- const config: StorageServiceConfig = {
63
- redisUrl: 'redis://localhost:6379',
64
- kvNamespace: {
65
- get: vi.fn(),
66
- put: vi.fn(),
67
- delete: vi.fn(),
68
- list: vi.fn().mockResolvedValue({ keys: [] }),
69
- },
70
- };
71
-
72
- // Note: This test would require actual Redis connection or better mocking
73
- // For now, we'll test the fallback behavior
74
- try {
75
- const providers = await createStorageProviders(config);
76
- expect(providers.storageProvider).toBeDefined();
77
- } catch (error) {
78
- // If Redis connection fails, should fall back to KV or memory
79
- expect(error).toBeDefined();
80
- }
81
- });
82
-
83
- it('should fall back to memory when Redis connection fails', async () => {
84
- const config: StorageServiceConfig = {
85
- redisUrl: 'redis://invalid:6379',
86
- fallbackToMemory: true,
87
- };
88
-
89
- const providers = await createStorageProviders(config);
90
-
91
- // Should fall back to memory
92
- expect(providers.storageProvider).toBeInstanceOf(MemoryStorageProvider);
93
- });
94
-
95
- it('should use KV namespace when provided', async () => {
96
- const mockKV = {
97
- get: vi.fn().mockResolvedValue(null),
98
- put: vi.fn().mockResolvedValue(undefined),
99
- delete: vi.fn().mockResolvedValue(undefined),
100
- list: vi.fn().mockResolvedValue({ keys: [] }),
101
- };
102
-
103
- const config: StorageServiceConfig = {
104
- kvNamespace: mockKV as any,
105
- };
106
-
107
- const providers = await createStorageProviders(config);
108
-
109
- expect(providers.storageProvider).toBeDefined();
110
- expect(providers.nonceCacheProvider).toBeDefined();
111
- });
112
-
113
- it('should use Durable Object state when provided', async () => {
114
- const mockDOState = {
115
- storage: {
116
- get: vi.fn().mockResolvedValue(undefined),
117
- put: vi.fn().mockResolvedValue(undefined),
118
- delete: vi.fn().mockResolvedValue(undefined),
119
- list: vi.fn().mockResolvedValue(new Map()),
120
- },
121
- };
122
-
123
- const config: StorageServiceConfig = {
124
- durableObjectState: mockDOState as any,
125
- };
126
-
127
- const providers = await createStorageProviders(config);
128
-
129
- expect(providers.storageProvider).toBeDefined();
130
- expect(providers.nonceCacheProvider).toBeDefined();
131
- });
132
- });
133
-
134
- describe('StorageKeyHelpers', () => {
135
- describe('buildDelegationKey', () => {
136
- it('should build delegation key with composite format', () => {
137
- const key = StorageKeyHelpers.buildDelegationKey(
138
- 'did:key:user123',
139
- 'did:key:agent456',
140
- 'project-789'
141
- );
142
-
143
- expect(key).toBe('delegation:did:key:user123:did:key:agent456:project-789');
144
- });
145
-
146
- it('should handle special characters in DIDs', () => {
147
- const key = StorageKeyHelpers.buildDelegationKey(
148
- 'did:web:example.com:user',
149
- 'did:key:z123',
150
- 'project-abc'
151
- );
152
-
153
- expect(key).toBe(
154
- 'delegation:did:web:example.com:user:did:key:z123:project-abc'
155
- );
156
- });
157
- });
158
-
159
- describe('buildSessionKey', () => {
160
- it('should build session key', () => {
161
- const key = StorageKeyHelpers.buildSessionKey('session-123');
162
-
163
- expect(key).toBe('session:session-123');
164
- });
165
- });
166
-
167
- describe('buildNonceKey', () => {
168
- it('should build nonce key', () => {
169
- const key = StorageKeyHelpers.buildNonceKey(
170
- 'did:key:z123',
171
- 'nonce-abc'
172
- );
173
-
174
- expect(key).toBe('nonce:did:key:z123:nonce-abc');
175
- });
176
- });
177
-
178
- describe('parseDelegationKey', () => {
179
- it('should parse valid delegation key', () => {
180
- const key = 'delegation:did:key:user123:did:key:agent456:project-789';
181
- const parsed = StorageKeyHelpers.parseDelegationKey(key);
182
-
183
- expect(parsed).toEqual({
184
- userDid: 'did:key:user123',
185
- agentDid: 'did:key:agent456',
186
- projectId: 'project-789',
187
- });
188
- });
189
-
190
- it('should return null for invalid key format', () => {
191
- const invalidKeys = [
192
- 'invalid-key',
193
- 'delegation:incomplete',
194
- 'session:session-123',
195
- 'delegation:one:two', // Not enough parts
196
- ];
197
-
198
- for (const key of invalidKeys) {
199
- expect(StorageKeyHelpers.parseDelegationKey(key)).toBeNull();
200
- }
201
- });
202
-
203
- it('should handle keys with extra colons in DIDs', () => {
204
- const key =
205
- 'delegation:did:web:example.com:user:did:key:z123:project-abc';
206
- const parsed = StorageKeyHelpers.parseDelegationKey(key);
207
-
208
- expect(parsed).toEqual({
209
- userDid: 'did:web:example.com:user',
210
- agentDid: 'did:key:z123',
211
- projectId: 'project-abc',
212
- });
213
- });
214
- });
215
- });
216
-
217
- describe('migrateLegacyKeys', () => {
218
- it('should migrate legacy keys to new format', async () => {
219
- const storageProvider = new MemoryStorageProvider();
220
-
221
- // Set up old format keys
222
- await storageProvider.set('agent:did:key:z123:delegation', 'old-value-1');
223
- await storageProvider.set('agent:did:key:z456:delegation', 'old-value-2');
224
-
225
- // Migration function: convert old format to new format
226
- const migrationFn = (oldKey: string) => {
227
- const match = oldKey.match(/^agent:(.+):delegation$/);
228
- if (!match) return null;
229
-
230
- const agentDid = match[1];
231
- // Convert to new format: delegation:userDid:agentDid:projectId
232
- // For this test, we'll use a placeholder userDid and projectId
233
- return StorageKeyHelpers.buildDelegationKey(
234
- 'did:key:user',
235
- agentDid,
236
- 'default-project'
237
- );
238
- };
239
-
240
- const migrated = await migrateLegacyKeys(
241
- 'agent:',
242
- migrationFn,
243
- storageProvider,
244
- 10
245
- );
246
-
247
- expect(migrated).toBe(2);
248
-
249
- // Verify new keys exist
250
- const newKey1 = StorageKeyHelpers.buildDelegationKey(
251
- 'did:key:user',
252
- 'did:key:z123',
253
- 'default-project'
254
- );
255
- const newKey2 = StorageKeyHelpers.buildDelegationKey(
256
- 'did:key:user',
257
- 'did:key:z456',
258
- 'default-project'
259
- );
260
-
261
- expect(await storageProvider.get(newKey1)).toBe('old-value-1');
262
- expect(await storageProvider.get(newKey2)).toBe('old-value-2');
263
- });
264
-
265
- it('should skip keys that already exist in new format', async () => {
266
- const storageProvider = new MemoryStorageProvider();
267
-
268
- const oldKey = 'agent:did:key:z123:delegation';
269
- const newKey = StorageKeyHelpers.buildDelegationKey(
270
- 'did:key:user',
271
- 'did:key:z123',
272
- 'default-project'
273
- );
274
-
275
- // Set both old and new keys
276
- await storageProvider.set(oldKey, 'old-value');
277
- await storageProvider.set(newKey, 'new-value');
278
-
279
- const migrationFn = (oldKey: string) => {
280
- const match = oldKey.match(/^agent:(.+):delegation$/);
281
- if (!match) return null;
282
- return StorageKeyHelpers.buildDelegationKey(
283
- 'did:key:user',
284
- match[1],
285
- 'default-project'
286
- );
287
- };
288
-
289
- const migrated = await migrateLegacyKeys(
290
- 'agent:',
291
- migrationFn,
292
- storageProvider
293
- );
294
-
295
- // Should skip since new key already exists
296
- expect(migrated).toBe(0);
297
- // Old value should remain unchanged
298
- expect(await storageProvider.get(newKey)).toBe('new-value');
299
- });
300
-
301
- it('should handle migration function returning null', async () => {
302
- const storageProvider = new MemoryStorageProvider();
303
-
304
- await storageProvider.set('agent:did:key:z123:delegation', 'value');
305
- await storageProvider.set('invalid-key', 'value');
306
-
307
- const migrationFn = (oldKey: string) => {
308
- // Only migrate agent: keys, return null for others
309
- if (oldKey.startsWith('agent:')) {
310
- return StorageKeyHelpers.buildDelegationKey(
311
- 'did:key:user',
312
- 'did:key:z123',
313
- 'default-project'
314
- );
315
- }
316
- return null;
317
- };
318
-
319
- const migrated = await migrateLegacyKeys(
320
- '',
321
- migrationFn,
322
- storageProvider
323
- );
324
-
325
- // Should only migrate valid keys
326
- expect(migrated).toBeGreaterThan(0);
327
- });
328
-
329
- it('should handle batch size limit', async () => {
330
- const storageProvider = new MemoryStorageProvider();
331
-
332
- // Create many old keys
333
- for (let i = 0; i < 50; i++) {
334
- await storageProvider.set(`agent:did:key:z${i}:delegation`, `value-${i}`);
335
- }
336
-
337
- const migrationFn = (oldKey: string) => {
338
- const match = oldKey.match(/^agent:did:key:z(\d+):delegation$/);
339
- if (!match) return null;
340
- return StorageKeyHelpers.buildDelegationKey(
341
- 'did:key:user',
342
- `did:key:z${match[1]}`,
343
- 'default-project'
344
- );
345
- };
346
-
347
- const migrated = await migrateLegacyKeys(
348
- 'agent:',
349
- migrationFn,
350
- storageProvider,
351
- 10 // Small batch size
352
- );
353
-
354
- expect(migrated).toBe(50);
355
- });
356
- });
357
- });
358
-