@kya-os/mcp-i-core 1.3.13 → 1.3.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. package/dist/config/remote-config.js +9 -12
  2. package/dist/runtime/base.d.ts +2 -1
  3. package/dist/runtime/base.js +34 -6
  4. package/dist/services/access-control.service.js +5 -0
  5. package/dist/services/tool-protection.service.js +17 -8
  6. package/package.json +2 -2
  7. package/.turbo/turbo-build.log +0 -4
  8. package/.turbo/turbo-test$colon$coverage.log +0 -4586
  9. package/.turbo/turbo-test.log +0 -4631
  10. package/COMPLIANCE_IMPROVEMENT_REPORT.md +0 -483
  11. package/Composer 3.md +0 -615
  12. package/GPT-5.md +0 -1169
  13. package/OPUS-plan.md +0 -352
  14. package/PHASE_3_AND_4.1_SUMMARY.md +0 -585
  15. package/PHASE_3_SUMMARY.md +0 -317
  16. package/PHASE_4.1.3_SUMMARY.md +0 -428
  17. package/PHASE_4.1_COMPLETE.md +0 -525
  18. package/PHASE_4_USER_DID_IDENTITY_LINKING_PLAN.md +0 -1240
  19. package/SCHEMA_COMPLIANCE_REPORT.md +0 -275
  20. package/TEST_PLAN.md +0 -571
  21. package/coverage/coverage-final.json +0 -60
  22. package/dist/cache/oauth-config-cache.d.ts.map +0 -1
  23. package/dist/cache/oauth-config-cache.js.map +0 -1
  24. package/dist/cache/tool-protection-cache.d.ts.map +0 -1
  25. package/dist/cache/tool-protection-cache.js.map +0 -1
  26. package/dist/compliance/index.d.ts.map +0 -1
  27. package/dist/compliance/index.js.map +0 -1
  28. package/dist/compliance/schema-registry.d.ts.map +0 -1
  29. package/dist/compliance/schema-registry.js.map +0 -1
  30. package/dist/compliance/schema-verifier.d.ts.map +0 -1
  31. package/dist/compliance/schema-verifier.js.map +0 -1
  32. package/dist/config/remote-config.d.ts.map +0 -1
  33. package/dist/config/remote-config.js.map +0 -1
  34. package/dist/config.d.ts.map +0 -1
  35. package/dist/config.js.map +0 -1
  36. package/dist/delegation/audience-validator.d.ts.map +0 -1
  37. package/dist/delegation/audience-validator.js.map +0 -1
  38. package/dist/delegation/bitstring.d.ts.map +0 -1
  39. package/dist/delegation/bitstring.js.map +0 -1
  40. package/dist/delegation/cascading-revocation.d.ts.map +0 -1
  41. package/dist/delegation/cascading-revocation.js.map +0 -1
  42. package/dist/delegation/delegation-graph.d.ts.map +0 -1
  43. package/dist/delegation/delegation-graph.js.map +0 -1
  44. package/dist/delegation/did-key-resolver.d.ts.map +0 -1
  45. package/dist/delegation/did-key-resolver.js.map +0 -1
  46. package/dist/delegation/index.d.ts.map +0 -1
  47. package/dist/delegation/index.js.map +0 -1
  48. package/dist/delegation/statuslist-manager.d.ts.map +0 -1
  49. package/dist/delegation/statuslist-manager.js.map +0 -1
  50. package/dist/delegation/storage/index.d.ts.map +0 -1
  51. package/dist/delegation/storage/index.js.map +0 -1
  52. package/dist/delegation/storage/memory-graph-storage.d.ts.map +0 -1
  53. package/dist/delegation/storage/memory-graph-storage.js.map +0 -1
  54. package/dist/delegation/storage/memory-statuslist-storage.d.ts.map +0 -1
  55. package/dist/delegation/storage/memory-statuslist-storage.js.map +0 -1
  56. package/dist/delegation/utils.d.ts.map +0 -1
  57. package/dist/delegation/utils.js.map +0 -1
  58. package/dist/delegation/vc-issuer.d.ts.map +0 -1
  59. package/dist/delegation/vc-issuer.js.map +0 -1
  60. package/dist/delegation/vc-verifier.d.ts.map +0 -1
  61. package/dist/delegation/vc-verifier.js.map +0 -1
  62. package/dist/identity/idp-token-resolver.d.ts.map +0 -1
  63. package/dist/identity/idp-token-resolver.js.map +0 -1
  64. package/dist/identity/idp-token-storage.interface.d.ts.map +0 -1
  65. package/dist/identity/idp-token-storage.interface.js.map +0 -1
  66. package/dist/identity/user-did-manager.d.ts.map +0 -1
  67. package/dist/identity/user-did-manager.js.map +0 -1
  68. package/dist/index.d.ts.map +0 -1
  69. package/dist/index.js.map +0 -1
  70. package/dist/providers/base.d.ts.map +0 -1
  71. package/dist/providers/base.js.map +0 -1
  72. package/dist/providers/memory.d.ts.map +0 -1
  73. package/dist/providers/memory.js.map +0 -1
  74. package/dist/runtime/audit-logger.d.ts.map +0 -1
  75. package/dist/runtime/audit-logger.js.map +0 -1
  76. package/dist/runtime/base.d.ts.map +0 -1
  77. package/dist/runtime/base.js.map +0 -1
  78. package/dist/services/access-control.service.d.ts.map +0 -1
  79. package/dist/services/access-control.service.js.map +0 -1
  80. package/dist/services/authorization/authorization-registry.d.ts.map +0 -1
  81. package/dist/services/authorization/authorization-registry.js.map +0 -1
  82. package/dist/services/authorization/types.d.ts.map +0 -1
  83. package/dist/services/authorization/types.js.map +0 -1
  84. package/dist/services/batch-delegation.service.d.ts.map +0 -1
  85. package/dist/services/batch-delegation.service.js.map +0 -1
  86. package/dist/services/crypto.service.d.ts.map +0 -1
  87. package/dist/services/crypto.service.js.map +0 -1
  88. package/dist/services/errors.d.ts.map +0 -1
  89. package/dist/services/errors.js.map +0 -1
  90. package/dist/services/index.d.ts.map +0 -1
  91. package/dist/services/index.js.map +0 -1
  92. package/dist/services/oauth-config.service.d.ts.map +0 -1
  93. package/dist/services/oauth-config.service.js.map +0 -1
  94. package/dist/services/oauth-provider-registry.d.ts.map +0 -1
  95. package/dist/services/oauth-provider-registry.js.map +0 -1
  96. package/dist/services/oauth-service.d.ts.map +0 -1
  97. package/dist/services/oauth-service.js.map +0 -1
  98. package/dist/services/oauth-token-retrieval.service.d.ts.map +0 -1
  99. package/dist/services/oauth-token-retrieval.service.js.map +0 -1
  100. package/dist/services/proof-verifier.d.ts.map +0 -1
  101. package/dist/services/proof-verifier.js.map +0 -1
  102. package/dist/services/provider-resolver.d.ts.map +0 -1
  103. package/dist/services/provider-resolver.js.map +0 -1
  104. package/dist/services/provider-validator.d.ts.map +0 -1
  105. package/dist/services/provider-validator.js.map +0 -1
  106. package/dist/services/session-registration.service.d.ts.map +0 -1
  107. package/dist/services/session-registration.service.js.map +0 -1
  108. package/dist/services/storage.service.d.ts.map +0 -1
  109. package/dist/services/storage.service.js.map +0 -1
  110. package/dist/services/tool-context-builder.d.ts.map +0 -1
  111. package/dist/services/tool-context-builder.js.map +0 -1
  112. package/dist/services/tool-protection.service.d.ts.map +0 -1
  113. package/dist/services/tool-protection.service.js.map +0 -1
  114. package/dist/types/oauth-required-error.d.ts.map +0 -1
  115. package/dist/types/oauth-required-error.js.map +0 -1
  116. package/dist/types/tool-protection.d.ts.map +0 -1
  117. package/dist/types/tool-protection.js.map +0 -1
  118. package/dist/utils/base58.d.ts.map +0 -1
  119. package/dist/utils/base58.js.map +0 -1
  120. package/dist/utils/base64.d.ts.map +0 -1
  121. package/dist/utils/base64.js.map +0 -1
  122. package/dist/utils/cors.d.ts.map +0 -1
  123. package/dist/utils/cors.js.map +0 -1
  124. package/dist/utils/did-helpers.d.ts.map +0 -1
  125. package/dist/utils/did-helpers.js.map +0 -1
  126. package/dist/utils/index.d.ts.map +0 -1
  127. package/dist/utils/index.js.map +0 -1
  128. package/dist/utils/storage-keys.d.ts.map +0 -1
  129. package/dist/utils/storage-keys.js.map +0 -1
  130. package/docs/API_REFERENCE.md +0 -1362
  131. package/docs/COMPLIANCE_MATRIX.md +0 -691
  132. package/docs/STATUSLIST2021_GUIDE.md +0 -696
  133. package/docs/W3C_VC_DELEGATION_GUIDE.md +0 -710
  134. package/src/__tests__/cache/tool-protection-cache.test.ts +0 -640
  135. package/src/__tests__/config/provider-runtime-config.test.ts +0 -309
  136. package/src/__tests__/delegation-e2e.test.ts +0 -690
  137. package/src/__tests__/identity/user-did-manager.test.ts +0 -232
  138. package/src/__tests__/index.test.ts +0 -56
  139. package/src/__tests__/integration/full-flow.test.ts +0 -789
  140. package/src/__tests__/integration.test.ts +0 -281
  141. package/src/__tests__/providers/base.test.ts +0 -173
  142. package/src/__tests__/providers/memory.test.ts +0 -319
  143. package/src/__tests__/regression/phase2-regression.test.ts +0 -429
  144. package/src/__tests__/runtime/audit-logger.test.ts +0 -154
  145. package/src/__tests__/runtime/base-extensions.test.ts +0 -595
  146. package/src/__tests__/runtime/base.test.ts +0 -869
  147. package/src/__tests__/runtime/delegation-flow.test.ts +0 -164
  148. package/src/__tests__/runtime/proof-client-did.test.ts +0 -376
  149. package/src/__tests__/runtime/route-interception.test.ts +0 -686
  150. package/src/__tests__/runtime/tool-protection-enforcement.test.ts +0 -908
  151. package/src/__tests__/services/agentshield-integration.test.ts +0 -791
  152. package/src/__tests__/services/cache-busting.test.ts +0 -125
  153. package/src/__tests__/services/oauth-service-pkce.test.ts +0 -556
  154. package/src/__tests__/services/provider-resolver-edge-cases.test.ts +0 -591
  155. package/src/__tests__/services/tool-protection-merged-config.test.ts +0 -485
  156. package/src/__tests__/services/tool-protection-oauth-provider.test.ts +0 -480
  157. package/src/__tests__/services/tool-protection.service.test.ts +0 -1373
  158. package/src/__tests__/utils/mock-providers.ts +0 -340
  159. package/src/cache/oauth-config-cache.d.ts +0 -69
  160. package/src/cache/oauth-config-cache.d.ts.map +0 -1
  161. package/src/cache/oauth-config-cache.js.map +0 -1
  162. package/src/cache/oauth-config-cache.ts +0 -123
  163. package/src/cache/tool-protection-cache.ts +0 -171
  164. package/src/compliance/EXAMPLE.md +0 -412
  165. package/src/compliance/__tests__/schema-verifier.test.ts +0 -797
  166. package/src/compliance/index.ts +0 -8
  167. package/src/compliance/schema-registry.ts +0 -460
  168. package/src/compliance/schema-verifier.ts +0 -708
  169. package/src/config/__tests__/merged-config.spec.ts +0 -445
  170. package/src/config/__tests__/remote-config.spec.ts +0 -268
  171. package/src/config/remote-config.ts +0 -264
  172. package/src/config.ts +0 -312
  173. package/src/delegation/__tests__/audience-validator.test.ts +0 -112
  174. package/src/delegation/__tests__/bitstring.test.ts +0 -346
  175. package/src/delegation/__tests__/cascading-revocation.test.ts +0 -628
  176. package/src/delegation/__tests__/delegation-graph.test.ts +0 -584
  177. package/src/delegation/__tests__/did-key-resolver.test.ts +0 -265
  178. package/src/delegation/__tests__/utils.test.ts +0 -152
  179. package/src/delegation/__tests__/vc-issuer.test.ts +0 -442
  180. package/src/delegation/__tests__/vc-verifier.test.ts +0 -922
  181. package/src/delegation/audience-validator.ts +0 -52
  182. package/src/delegation/bitstring.ts +0 -278
  183. package/src/delegation/cascading-revocation.ts +0 -370
  184. package/src/delegation/delegation-graph.ts +0 -299
  185. package/src/delegation/did-key-resolver.ts +0 -179
  186. package/src/delegation/index.ts +0 -14
  187. package/src/delegation/statuslist-manager.ts +0 -353
  188. package/src/delegation/storage/__tests__/memory-graph-storage.test.ts +0 -366
  189. package/src/delegation/storage/__tests__/memory-statuslist-storage.test.ts +0 -228
  190. package/src/delegation/storage/index.ts +0 -9
  191. package/src/delegation/storage/memory-graph-storage.ts +0 -178
  192. package/src/delegation/storage/memory-statuslist-storage.ts +0 -77
  193. package/src/delegation/utils.ts +0 -221
  194. package/src/delegation/vc-issuer.ts +0 -232
  195. package/src/delegation/vc-verifier.ts +0 -568
  196. package/src/identity/idp-token-resolver.ts +0 -181
  197. package/src/identity/idp-token-storage.interface.ts +0 -94
  198. package/src/identity/user-did-manager.ts +0 -526
  199. package/src/index.ts +0 -310
  200. package/src/providers/base.d.ts +0 -91
  201. package/src/providers/base.d.ts.map +0 -1
  202. package/src/providers/base.js.map +0 -1
  203. package/src/providers/base.ts +0 -96
  204. package/src/providers/memory.ts +0 -142
  205. package/src/runtime/audit-logger.ts +0 -39
  206. package/src/runtime/base.ts +0 -1392
  207. package/src/services/__tests__/access-control.integration.test.ts +0 -443
  208. package/src/services/__tests__/access-control.proof-response-validation.test.ts +0 -578
  209. package/src/services/__tests__/access-control.service.test.ts +0 -970
  210. package/src/services/__tests__/batch-delegation.service.test.ts +0 -351
  211. package/src/services/__tests__/crypto.service.test.ts +0 -531
  212. package/src/services/__tests__/oauth-provider-registry.test.ts +0 -142
  213. package/src/services/__tests__/proof-verifier.integration.test.ts +0 -485
  214. package/src/services/__tests__/proof-verifier.test.ts +0 -489
  215. package/src/services/__tests__/provider-resolution.integration.test.ts +0 -202
  216. package/src/services/__tests__/provider-resolver.test.ts +0 -213
  217. package/src/services/__tests__/storage.service.test.ts +0 -358
  218. package/src/services/access-control.service.ts +0 -990
  219. package/src/services/authorization/authorization-registry.ts +0 -66
  220. package/src/services/authorization/types.ts +0 -71
  221. package/src/services/batch-delegation.service.ts +0 -137
  222. package/src/services/crypto.service.ts +0 -302
  223. package/src/services/errors.ts +0 -76
  224. package/src/services/index.ts +0 -18
  225. package/src/services/oauth-config.service.d.ts +0 -53
  226. package/src/services/oauth-config.service.d.ts.map +0 -1
  227. package/src/services/oauth-config.service.js.map +0 -1
  228. package/src/services/oauth-config.service.ts +0 -192
  229. package/src/services/oauth-provider-registry.d.ts +0 -57
  230. package/src/services/oauth-provider-registry.d.ts.map +0 -1
  231. package/src/services/oauth-provider-registry.js.map +0 -1
  232. package/src/services/oauth-provider-registry.ts +0 -141
  233. package/src/services/oauth-service.ts +0 -544
  234. package/src/services/oauth-token-retrieval.service.ts +0 -245
  235. package/src/services/proof-verifier.ts +0 -478
  236. package/src/services/provider-resolver.d.ts +0 -48
  237. package/src/services/provider-resolver.d.ts.map +0 -1
  238. package/src/services/provider-resolver.js.map +0 -1
  239. package/src/services/provider-resolver.ts +0 -146
  240. package/src/services/provider-validator.ts +0 -170
  241. package/src/services/session-registration.service.ts +0 -251
  242. package/src/services/storage.service.ts +0 -566
  243. package/src/services/tool-context-builder.ts +0 -237
  244. package/src/services/tool-protection.service.ts +0 -1070
  245. package/src/types/oauth-required-error.ts +0 -63
  246. package/src/types/tool-protection.ts +0 -155
  247. package/src/utils/__tests__/did-helpers.test.ts +0 -156
  248. package/src/utils/base58.ts +0 -109
  249. package/src/utils/base64.ts +0 -148
  250. package/src/utils/cors.ts +0 -83
  251. package/src/utils/did-helpers.ts +0 -210
  252. package/src/utils/index.ts +0 -8
  253. package/src/utils/storage-keys.ts +0 -278
  254. package/tsconfig.json +0 -21
  255. package/vitest.config.ts +0 -56
@@ -1,584 +0,0 @@
1
- import { describe, it, expect, beforeEach, vi } from "vitest";
2
- import {
3
- DelegationGraphManager,
4
- createDelegationGraph,
5
- type DelegationNode,
6
- type DelegationGraphStorageProvider,
7
- } from "../delegation-graph.js";
8
-
9
- describe("DelegationGraphManager", () => {
10
- let storage: DelegationGraphStorageProvider;
11
- let graph: DelegationGraphManager;
12
-
13
- // Simple in-memory storage for testing
14
- const createMockStorage = (): DelegationGraphStorageProvider => {
15
- const nodes = new Map<string, DelegationNode>();
16
-
17
- return {
18
- getNode: vi.fn(async (id: string) => {
19
- return nodes.get(id) || null;
20
- }),
21
- setNode: vi.fn(async (node: DelegationNode) => {
22
- nodes.set(node.id, { ...node });
23
- }),
24
- getChildren: vi.fn(async (id: string) => {
25
- const node = nodes.get(id);
26
- if (!node) return [];
27
- return node.children
28
- .map((childId) => nodes.get(childId))
29
- .filter((n): n is DelegationNode => n !== undefined);
30
- }),
31
- getChain: vi.fn(async (id: string) => {
32
- const chain: DelegationNode[] = [];
33
- let currentId: string | null = id;
34
-
35
- while (currentId) {
36
- const node = nodes.get(currentId);
37
- if (!node) break;
38
- chain.unshift(node);
39
- currentId = node.parentId;
40
- }
41
-
42
- return chain;
43
- }),
44
- getDescendants: vi.fn(async (id: string) => {
45
- const descendants: DelegationNode[] = [];
46
- const queue: string[] = [id];
47
-
48
- while (queue.length > 0) {
49
- const currentId = queue.shift()!;
50
- const node = nodes.get(currentId);
51
- if (!node) continue;
52
-
53
- for (const childId of node.children) {
54
- const child = nodes.get(childId);
55
- if (child) {
56
- descendants.push(child);
57
- queue.push(childId);
58
- }
59
- }
60
- }
61
-
62
- return descendants;
63
- }),
64
- deleteNode: vi.fn(async (id: string) => {
65
- nodes.delete(id);
66
- }),
67
- };
68
- };
69
-
70
- beforeEach(() => {
71
- storage = createMockStorage();
72
- graph = new DelegationGraphManager(storage);
73
- });
74
-
75
- describe("constructor", () => {
76
- it("should create graph manager with storage", () => {
77
- const manager = new DelegationGraphManager(storage);
78
- expect(manager).toBeInstanceOf(DelegationGraphManager);
79
- });
80
- });
81
-
82
- describe("createDelegationGraph", () => {
83
- it("should create a graph manager instance", () => {
84
- const manager = createDelegationGraph(storage);
85
- expect(manager).toBeInstanceOf(DelegationGraphManager);
86
- });
87
- });
88
-
89
- describe("registerDelegation", () => {
90
- it("should register a root delegation (no parent)", async () => {
91
- const node = await graph.registerDelegation({
92
- id: "del-001",
93
- parentId: null,
94
- issuerDid: "did:web:example.com:issuer",
95
- subjectDid: "did:web:example.com:subject",
96
- });
97
-
98
- expect(node.id).toBe("del-001");
99
- expect(node.parentId).toBeNull();
100
- expect(node.children).toEqual([]);
101
- expect(node.issuerDid).toBe("did:web:example.com:issuer");
102
- expect(node.subjectDid).toBe("did:web:example.com:subject");
103
- expect(storage.setNode).toHaveBeenCalled();
104
- });
105
-
106
- it("should register a child delegation and link to parent", async () => {
107
- // Register parent first
108
- await graph.registerDelegation({
109
- id: "del-parent",
110
- parentId: null,
111
- issuerDid: "did:web:example.com:issuer",
112
- subjectDid: "did:web:example.com:subject",
113
- });
114
-
115
- // Clear call count
116
- vi.clearAllMocks();
117
-
118
- // Register child
119
- const childNode = await graph.registerDelegation({
120
- id: "del-child",
121
- parentId: "del-parent",
122
- issuerDid: "did:web:example.com:subject",
123
- subjectDid: "did:web:example.com:subject2",
124
- });
125
-
126
- expect(childNode.parentId).toBe("del-parent");
127
- // setNode is called: 1) for child, 2) for parent (to add child to children list)
128
- expect(storage.setNode).toHaveBeenCalledTimes(2);
129
- });
130
-
131
- it("should include credentialStatusId if provided", async () => {
132
- const node = await graph.registerDelegation({
133
- id: "del-001",
134
- parentId: null,
135
- issuerDid: "did:web:example.com:issuer",
136
- subjectDid: "did:web:example.com:subject",
137
- credentialStatusId: "https://example.com/status#123",
138
- });
139
-
140
- expect(node.credentialStatusId).toBe("https://example.com/status#123");
141
- });
142
- });
143
-
144
- describe("getNode", () => {
145
- it("should return node if exists", async () => {
146
- await graph.registerDelegation({
147
- id: "del-001",
148
- parentId: null,
149
- issuerDid: "did:web:example.com:issuer",
150
- subjectDid: "did:web:example.com:subject",
151
- });
152
-
153
- const node = await graph.getNode("del-001");
154
- expect(node).not.toBeNull();
155
- expect(node?.id).toBe("del-001");
156
- });
157
-
158
- it("should return null if node does not exist", async () => {
159
- const node = await graph.getNode("non-existent");
160
- expect(node).toBeNull();
161
- });
162
- });
163
-
164
- describe("getChildren", () => {
165
- it("should return empty array for node with no children", async () => {
166
- await graph.registerDelegation({
167
- id: "del-001",
168
- parentId: null,
169
- issuerDid: "did:web:example.com:issuer",
170
- subjectDid: "did:web:example.com:subject",
171
- });
172
-
173
- const children = await graph.getChildren("del-001");
174
- expect(children).toEqual([]);
175
- });
176
-
177
- it("should return all direct children", async () => {
178
- // Register parent
179
- await graph.registerDelegation({
180
- id: "del-parent",
181
- parentId: null,
182
- issuerDid: "did:web:example.com:issuer",
183
- subjectDid: "did:web:example.com:subject",
184
- });
185
-
186
- // Register children
187
- await graph.registerDelegation({
188
- id: "del-child1",
189
- parentId: "del-parent",
190
- issuerDid: "did:web:example.com:subject",
191
- subjectDid: "did:web:example.com:subject2",
192
- });
193
-
194
- await graph.registerDelegation({
195
- id: "del-child2",
196
- parentId: "del-parent",
197
- issuerDid: "did:web:example.com:subject",
198
- subjectDid: "did:web:example.com:subject3",
199
- });
200
-
201
- const children = await graph.getChildren("del-parent");
202
- expect(children.length).toBe(2);
203
- expect(children.map((c) => c.id)).toContain("del-child1");
204
- expect(children.map((c) => c.id)).toContain("del-child2");
205
- });
206
- });
207
-
208
- describe("getDescendants", () => {
209
- it("should return all descendants recursively", async () => {
210
- // Create a tree: parent -> child1 -> grandchild
211
- await graph.registerDelegation({
212
- id: "del-parent",
213
- parentId: null,
214
- issuerDid: "did:web:example.com:issuer",
215
- subjectDid: "did:web:example.com:subject",
216
- });
217
-
218
- await graph.registerDelegation({
219
- id: "del-child1",
220
- parentId: "del-parent",
221
- issuerDid: "did:web:example.com:subject",
222
- subjectDid: "did:web:example.com:subject2",
223
- });
224
-
225
- await graph.registerDelegation({
226
- id: "del-grandchild",
227
- parentId: "del-child1",
228
- issuerDid: "did:web:example.com:subject2",
229
- subjectDid: "did:web:example.com:subject3",
230
- });
231
-
232
- const descendants = await graph.getDescendants("del-parent");
233
- expect(descendants.length).toBe(2);
234
- expect(descendants.map((d) => d.id)).toContain("del-child1");
235
- expect(descendants.map((d) => d.id)).toContain("del-grandchild");
236
- });
237
-
238
- it("should return empty array for node with no descendants", async () => {
239
- await graph.registerDelegation({
240
- id: "del-001",
241
- parentId: null,
242
- issuerDid: "did:web:example.com:issuer",
243
- subjectDid: "did:web:example.com:subject",
244
- });
245
-
246
- const descendants = await graph.getDescendants("del-001");
247
- expect(descendants).toEqual([]);
248
- });
249
- });
250
-
251
- describe("getChain", () => {
252
- it("should return chain from root to node", async () => {
253
- // Create chain: root -> child -> grandchild
254
- await graph.registerDelegation({
255
- id: "del-root",
256
- parentId: null,
257
- issuerDid: "did:web:example.com:issuer",
258
- subjectDid: "did:web:example.com:subject",
259
- });
260
-
261
- await graph.registerDelegation({
262
- id: "del-child",
263
- parentId: "del-root",
264
- issuerDid: "did:web:example.com:subject",
265
- subjectDid: "did:web:example.com:subject2",
266
- });
267
-
268
- await graph.registerDelegation({
269
- id: "del-grandchild",
270
- parentId: "del-child",
271
- issuerDid: "did:web:example.com:subject2",
272
- subjectDid: "did:web:example.com:subject3",
273
- });
274
-
275
- const chain = await graph.getChain("del-grandchild");
276
- expect(chain.length).toBe(3);
277
- expect(chain[0].id).toBe("del-root");
278
- expect(chain[1].id).toBe("del-child");
279
- expect(chain[2].id).toBe("del-grandchild");
280
- });
281
-
282
- it("should return single node for root", async () => {
283
- await graph.registerDelegation({
284
- id: "del-root",
285
- parentId: null,
286
- issuerDid: "did:web:example.com:issuer",
287
- subjectDid: "did:web:example.com:subject",
288
- });
289
-
290
- const chain = await graph.getChain("del-root");
291
- expect(chain.length).toBe(1);
292
- expect(chain[0].id).toBe("del-root");
293
- });
294
- });
295
-
296
- describe("isAncestor", () => {
297
- it("should return true if ancestor is parent", async () => {
298
- await graph.registerDelegation({
299
- id: "del-parent",
300
- parentId: null,
301
- issuerDid: "did:web:example.com:issuer",
302
- subjectDid: "did:web:example.com:subject",
303
- });
304
-
305
- await graph.registerDelegation({
306
- id: "del-child",
307
- parentId: "del-parent",
308
- issuerDid: "did:web:example.com:subject",
309
- subjectDid: "did:web:example.com:subject2",
310
- });
311
-
312
- const isAncestor = await graph.isAncestor("del-parent", "del-child");
313
- expect(isAncestor).toBe(true);
314
- });
315
-
316
- it("should return true if ancestor is grandparent", async () => {
317
- await graph.registerDelegation({
318
- id: "del-grandparent",
319
- parentId: null,
320
- issuerDid: "did:web:example.com:issuer",
321
- subjectDid: "did:web:example.com:subject",
322
- });
323
-
324
- await graph.registerDelegation({
325
- id: "del-parent",
326
- parentId: "del-grandparent",
327
- issuerDid: "did:web:example.com:subject",
328
- subjectDid: "did:web:example.com:subject2",
329
- });
330
-
331
- await graph.registerDelegation({
332
- id: "del-child",
333
- parentId: "del-parent",
334
- issuerDid: "did:web:example.com:subject2",
335
- subjectDid: "did:web:example.com:subject3",
336
- });
337
-
338
- const isAncestor = await graph.isAncestor("del-grandparent", "del-child");
339
- expect(isAncestor).toBe(true);
340
- });
341
-
342
- it("should return false if not ancestor", async () => {
343
- await graph.registerDelegation({
344
- id: "del-1",
345
- parentId: null,
346
- issuerDid: "did:web:example.com:issuer",
347
- subjectDid: "did:web:example.com:subject",
348
- });
349
-
350
- await graph.registerDelegation({
351
- id: "del-2",
352
- parentId: null,
353
- issuerDid: "did:web:example.com:issuer2",
354
- subjectDid: "did:web:example.com:subject2",
355
- });
356
-
357
- const isAncestor = await graph.isAncestor("del-1", "del-2");
358
- expect(isAncestor).toBe(false);
359
- });
360
-
361
- it("should return false if nodes are reversed", async () => {
362
- await graph.registerDelegation({
363
- id: "del-parent",
364
- parentId: null,
365
- issuerDid: "did:web:example.com:issuer",
366
- subjectDid: "did:web:example.com:subject",
367
- });
368
-
369
- await graph.registerDelegation({
370
- id: "del-child",
371
- parentId: "del-parent",
372
- issuerDid: "did:web:example.com:subject",
373
- subjectDid: "did:web:example.com:subject2",
374
- });
375
-
376
- const isAncestor = await graph.isAncestor("del-child", "del-parent");
377
- expect(isAncestor).toBe(false);
378
- });
379
- });
380
-
381
- describe("getDepth", () => {
382
- it("should return 0 for root node", async () => {
383
- await graph.registerDelegation({
384
- id: "del-root",
385
- parentId: null,
386
- issuerDid: "did:web:example.com:issuer",
387
- subjectDid: "did:web:example.com:subject",
388
- });
389
-
390
- const depth = await graph.getDepth("del-root");
391
- expect(depth).toBe(0);
392
- });
393
-
394
- it("should return 1 for immediate child", async () => {
395
- await graph.registerDelegation({
396
- id: "del-root",
397
- parentId: null,
398
- issuerDid: "did:web:example.com:issuer",
399
- subjectDid: "did:web:example.com:subject",
400
- });
401
-
402
- await graph.registerDelegation({
403
- id: "del-child",
404
- parentId: "del-root",
405
- issuerDid: "did:web:example.com:subject",
406
- subjectDid: "did:web:example.com:subject2",
407
- });
408
-
409
- const depth = await graph.getDepth("del-child");
410
- expect(depth).toBe(1);
411
- });
412
-
413
- it("should return correct depth for nested nodes", async () => {
414
- await graph.registerDelegation({
415
- id: "del-root",
416
- parentId: null,
417
- issuerDid: "did:web:example.com:issuer",
418
- subjectDid: "did:web:example.com:subject",
419
- });
420
-
421
- await graph.registerDelegation({
422
- id: "del-child",
423
- parentId: "del-root",
424
- issuerDid: "did:web:example.com:subject",
425
- subjectDid: "did:web:example.com:subject2",
426
- });
427
-
428
- await graph.registerDelegation({
429
- id: "del-grandchild",
430
- parentId: "del-child",
431
- issuerDid: "did:web:example.com:subject2",
432
- subjectDid: "did:web:example.com:subject3",
433
- });
434
-
435
- const depth = await graph.getDepth("del-grandchild");
436
- expect(depth).toBe(2);
437
- });
438
- });
439
-
440
- describe("validateChain", () => {
441
- it("should validate correct chain", async () => {
442
- await graph.registerDelegation({
443
- id: "del-root",
444
- parentId: null,
445
- issuerDid: "did:web:example.com:issuer",
446
- subjectDid: "did:web:example.com:subject",
447
- });
448
-
449
- await graph.registerDelegation({
450
- id: "del-child",
451
- parentId: "del-root",
452
- issuerDid: "did:web:example.com:subject", // Child's issuer = parent's subject
453
- subjectDid: "did:web:example.com:subject2",
454
- });
455
-
456
- const result = await graph.validateChain("del-child");
457
- expect(result.valid).toBe(true);
458
- });
459
-
460
- it("should invalidate chain with mismatched issuer/subject", async () => {
461
- await graph.registerDelegation({
462
- id: "del-root",
463
- parentId: null,
464
- issuerDid: "did:web:example.com:issuer",
465
- subjectDid: "did:web:example.com:subject",
466
- });
467
-
468
- await graph.registerDelegation({
469
- id: "del-child",
470
- parentId: "del-root",
471
- issuerDid: "did:web:example.com:wrong-issuer", // Wrong issuer
472
- subjectDid: "did:web:example.com:subject2",
473
- });
474
-
475
- const result = await graph.validateChain("del-child");
476
- expect(result.valid).toBe(false);
477
- expect(result.reason).toContain("Invalid chain");
478
- });
479
-
480
- // Note: parentId mismatch validation is complex - covered by issuer/subject mismatch test above
481
-
482
- it("should return invalid for non-existent delegation", async () => {
483
- const result = await graph.validateChain("non-existent");
484
- expect(result.valid).toBe(false);
485
- expect(result.reason).toBe("Delegation not found");
486
- });
487
- });
488
-
489
- describe("removeDelegation", () => {
490
- it("should remove delegation from graph", async () => {
491
- await graph.registerDelegation({
492
- id: "del-001",
493
- parentId: null,
494
- issuerDid: "did:web:example.com:issuer",
495
- subjectDid: "did:web:example.com:subject",
496
- });
497
-
498
- await graph.removeDelegation("del-001");
499
-
500
- const node = await graph.getNode("del-001");
501
- expect(node).toBeNull();
502
- expect(storage.deleteNode).toHaveBeenCalledWith("del-001");
503
- });
504
-
505
- it("should remove child from parent's children list", async () => {
506
- await graph.registerDelegation({
507
- id: "del-parent",
508
- parentId: null,
509
- issuerDid: "did:web:example.com:issuer",
510
- subjectDid: "did:web:example.com:subject",
511
- });
512
-
513
- await graph.registerDelegation({
514
- id: "del-child",
515
- parentId: "del-parent",
516
- issuerDid: "did:web:example.com:subject",
517
- subjectDid: "did:web:example.com:subject2",
518
- });
519
-
520
- await graph.removeDelegation("del-child");
521
-
522
- const parent = await graph.getNode("del-parent");
523
- expect(parent?.children).not.toContain("del-child");
524
- });
525
-
526
- it("should handle removal of non-existent delegation gracefully", async () => {
527
- await expect(graph.removeDelegation("non-existent")).resolves.not.toThrow();
528
- });
529
- });
530
-
531
- describe("edge cases", () => {
532
- it("should handle multiple children correctly", async () => {
533
- await graph.registerDelegation({
534
- id: "del-parent",
535
- parentId: null,
536
- issuerDid: "did:web:example.com:issuer",
537
- subjectDid: "did:web:example.com:subject",
538
- });
539
-
540
- await graph.registerDelegation({
541
- id: "del-child1",
542
- parentId: "del-parent",
543
- issuerDid: "did:web:example.com:subject",
544
- subjectDid: "did:web:example.com:subject2",
545
- });
546
-
547
- await graph.registerDelegation({
548
- id: "del-child2",
549
- parentId: "del-parent",
550
- issuerDid: "did:web:example.com:subject",
551
- subjectDid: "did:web:example.com:subject3",
552
- });
553
-
554
- await graph.registerDelegation({
555
- id: "del-child3",
556
- parentId: "del-parent",
557
- issuerDid: "did:web:example.com:subject",
558
- subjectDid: "did:web:example.com:subject4",
559
- });
560
-
561
- const children = await graph.getChildren("del-parent");
562
- expect(children.length).toBe(3);
563
- });
564
-
565
- it("should handle deep chains correctly", async () => {
566
- // Create a chain of depth 5
567
- const chain: string[] = [];
568
- for (let i = 0; i < 5; i++) {
569
- const id = `del-${i}`;
570
- chain.push(id);
571
- await graph.registerDelegation({
572
- id,
573
- parentId: i === 0 ? null : chain[i - 1],
574
- issuerDid: `did:web:example.com:issuer${i}`,
575
- subjectDid: `did:web:example.com:subject${i + 1}`,
576
- });
577
- }
578
-
579
- const depth = await graph.getDepth(chain[4]);
580
- expect(depth).toBe(4);
581
- });
582
- });
583
- });
584
-