@kya-os/mcp-i-core 1.3.13 → 1.3.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. package/dist/config/remote-config.js +9 -12
  2. package/dist/runtime/base.d.ts +2 -1
  3. package/dist/runtime/base.js +34 -6
  4. package/dist/services/access-control.service.js +5 -0
  5. package/dist/services/tool-protection.service.js +17 -8
  6. package/package.json +2 -2
  7. package/.turbo/turbo-build.log +0 -4
  8. package/.turbo/turbo-test$colon$coverage.log +0 -4586
  9. package/.turbo/turbo-test.log +0 -4631
  10. package/COMPLIANCE_IMPROVEMENT_REPORT.md +0 -483
  11. package/Composer 3.md +0 -615
  12. package/GPT-5.md +0 -1169
  13. package/OPUS-plan.md +0 -352
  14. package/PHASE_3_AND_4.1_SUMMARY.md +0 -585
  15. package/PHASE_3_SUMMARY.md +0 -317
  16. package/PHASE_4.1.3_SUMMARY.md +0 -428
  17. package/PHASE_4.1_COMPLETE.md +0 -525
  18. package/PHASE_4_USER_DID_IDENTITY_LINKING_PLAN.md +0 -1240
  19. package/SCHEMA_COMPLIANCE_REPORT.md +0 -275
  20. package/TEST_PLAN.md +0 -571
  21. package/coverage/coverage-final.json +0 -60
  22. package/dist/cache/oauth-config-cache.d.ts.map +0 -1
  23. package/dist/cache/oauth-config-cache.js.map +0 -1
  24. package/dist/cache/tool-protection-cache.d.ts.map +0 -1
  25. package/dist/cache/tool-protection-cache.js.map +0 -1
  26. package/dist/compliance/index.d.ts.map +0 -1
  27. package/dist/compliance/index.js.map +0 -1
  28. package/dist/compliance/schema-registry.d.ts.map +0 -1
  29. package/dist/compliance/schema-registry.js.map +0 -1
  30. package/dist/compliance/schema-verifier.d.ts.map +0 -1
  31. package/dist/compliance/schema-verifier.js.map +0 -1
  32. package/dist/config/remote-config.d.ts.map +0 -1
  33. package/dist/config/remote-config.js.map +0 -1
  34. package/dist/config.d.ts.map +0 -1
  35. package/dist/config.js.map +0 -1
  36. package/dist/delegation/audience-validator.d.ts.map +0 -1
  37. package/dist/delegation/audience-validator.js.map +0 -1
  38. package/dist/delegation/bitstring.d.ts.map +0 -1
  39. package/dist/delegation/bitstring.js.map +0 -1
  40. package/dist/delegation/cascading-revocation.d.ts.map +0 -1
  41. package/dist/delegation/cascading-revocation.js.map +0 -1
  42. package/dist/delegation/delegation-graph.d.ts.map +0 -1
  43. package/dist/delegation/delegation-graph.js.map +0 -1
  44. package/dist/delegation/did-key-resolver.d.ts.map +0 -1
  45. package/dist/delegation/did-key-resolver.js.map +0 -1
  46. package/dist/delegation/index.d.ts.map +0 -1
  47. package/dist/delegation/index.js.map +0 -1
  48. package/dist/delegation/statuslist-manager.d.ts.map +0 -1
  49. package/dist/delegation/statuslist-manager.js.map +0 -1
  50. package/dist/delegation/storage/index.d.ts.map +0 -1
  51. package/dist/delegation/storage/index.js.map +0 -1
  52. package/dist/delegation/storage/memory-graph-storage.d.ts.map +0 -1
  53. package/dist/delegation/storage/memory-graph-storage.js.map +0 -1
  54. package/dist/delegation/storage/memory-statuslist-storage.d.ts.map +0 -1
  55. package/dist/delegation/storage/memory-statuslist-storage.js.map +0 -1
  56. package/dist/delegation/utils.d.ts.map +0 -1
  57. package/dist/delegation/utils.js.map +0 -1
  58. package/dist/delegation/vc-issuer.d.ts.map +0 -1
  59. package/dist/delegation/vc-issuer.js.map +0 -1
  60. package/dist/delegation/vc-verifier.d.ts.map +0 -1
  61. package/dist/delegation/vc-verifier.js.map +0 -1
  62. package/dist/identity/idp-token-resolver.d.ts.map +0 -1
  63. package/dist/identity/idp-token-resolver.js.map +0 -1
  64. package/dist/identity/idp-token-storage.interface.d.ts.map +0 -1
  65. package/dist/identity/idp-token-storage.interface.js.map +0 -1
  66. package/dist/identity/user-did-manager.d.ts.map +0 -1
  67. package/dist/identity/user-did-manager.js.map +0 -1
  68. package/dist/index.d.ts.map +0 -1
  69. package/dist/index.js.map +0 -1
  70. package/dist/providers/base.d.ts.map +0 -1
  71. package/dist/providers/base.js.map +0 -1
  72. package/dist/providers/memory.d.ts.map +0 -1
  73. package/dist/providers/memory.js.map +0 -1
  74. package/dist/runtime/audit-logger.d.ts.map +0 -1
  75. package/dist/runtime/audit-logger.js.map +0 -1
  76. package/dist/runtime/base.d.ts.map +0 -1
  77. package/dist/runtime/base.js.map +0 -1
  78. package/dist/services/access-control.service.d.ts.map +0 -1
  79. package/dist/services/access-control.service.js.map +0 -1
  80. package/dist/services/authorization/authorization-registry.d.ts.map +0 -1
  81. package/dist/services/authorization/authorization-registry.js.map +0 -1
  82. package/dist/services/authorization/types.d.ts.map +0 -1
  83. package/dist/services/authorization/types.js.map +0 -1
  84. package/dist/services/batch-delegation.service.d.ts.map +0 -1
  85. package/dist/services/batch-delegation.service.js.map +0 -1
  86. package/dist/services/crypto.service.d.ts.map +0 -1
  87. package/dist/services/crypto.service.js.map +0 -1
  88. package/dist/services/errors.d.ts.map +0 -1
  89. package/dist/services/errors.js.map +0 -1
  90. package/dist/services/index.d.ts.map +0 -1
  91. package/dist/services/index.js.map +0 -1
  92. package/dist/services/oauth-config.service.d.ts.map +0 -1
  93. package/dist/services/oauth-config.service.js.map +0 -1
  94. package/dist/services/oauth-provider-registry.d.ts.map +0 -1
  95. package/dist/services/oauth-provider-registry.js.map +0 -1
  96. package/dist/services/oauth-service.d.ts.map +0 -1
  97. package/dist/services/oauth-service.js.map +0 -1
  98. package/dist/services/oauth-token-retrieval.service.d.ts.map +0 -1
  99. package/dist/services/oauth-token-retrieval.service.js.map +0 -1
  100. package/dist/services/proof-verifier.d.ts.map +0 -1
  101. package/dist/services/proof-verifier.js.map +0 -1
  102. package/dist/services/provider-resolver.d.ts.map +0 -1
  103. package/dist/services/provider-resolver.js.map +0 -1
  104. package/dist/services/provider-validator.d.ts.map +0 -1
  105. package/dist/services/provider-validator.js.map +0 -1
  106. package/dist/services/session-registration.service.d.ts.map +0 -1
  107. package/dist/services/session-registration.service.js.map +0 -1
  108. package/dist/services/storage.service.d.ts.map +0 -1
  109. package/dist/services/storage.service.js.map +0 -1
  110. package/dist/services/tool-context-builder.d.ts.map +0 -1
  111. package/dist/services/tool-context-builder.js.map +0 -1
  112. package/dist/services/tool-protection.service.d.ts.map +0 -1
  113. package/dist/services/tool-protection.service.js.map +0 -1
  114. package/dist/types/oauth-required-error.d.ts.map +0 -1
  115. package/dist/types/oauth-required-error.js.map +0 -1
  116. package/dist/types/tool-protection.d.ts.map +0 -1
  117. package/dist/types/tool-protection.js.map +0 -1
  118. package/dist/utils/base58.d.ts.map +0 -1
  119. package/dist/utils/base58.js.map +0 -1
  120. package/dist/utils/base64.d.ts.map +0 -1
  121. package/dist/utils/base64.js.map +0 -1
  122. package/dist/utils/cors.d.ts.map +0 -1
  123. package/dist/utils/cors.js.map +0 -1
  124. package/dist/utils/did-helpers.d.ts.map +0 -1
  125. package/dist/utils/did-helpers.js.map +0 -1
  126. package/dist/utils/index.d.ts.map +0 -1
  127. package/dist/utils/index.js.map +0 -1
  128. package/dist/utils/storage-keys.d.ts.map +0 -1
  129. package/dist/utils/storage-keys.js.map +0 -1
  130. package/docs/API_REFERENCE.md +0 -1362
  131. package/docs/COMPLIANCE_MATRIX.md +0 -691
  132. package/docs/STATUSLIST2021_GUIDE.md +0 -696
  133. package/docs/W3C_VC_DELEGATION_GUIDE.md +0 -710
  134. package/src/__tests__/cache/tool-protection-cache.test.ts +0 -640
  135. package/src/__tests__/config/provider-runtime-config.test.ts +0 -309
  136. package/src/__tests__/delegation-e2e.test.ts +0 -690
  137. package/src/__tests__/identity/user-did-manager.test.ts +0 -232
  138. package/src/__tests__/index.test.ts +0 -56
  139. package/src/__tests__/integration/full-flow.test.ts +0 -789
  140. package/src/__tests__/integration.test.ts +0 -281
  141. package/src/__tests__/providers/base.test.ts +0 -173
  142. package/src/__tests__/providers/memory.test.ts +0 -319
  143. package/src/__tests__/regression/phase2-regression.test.ts +0 -429
  144. package/src/__tests__/runtime/audit-logger.test.ts +0 -154
  145. package/src/__tests__/runtime/base-extensions.test.ts +0 -595
  146. package/src/__tests__/runtime/base.test.ts +0 -869
  147. package/src/__tests__/runtime/delegation-flow.test.ts +0 -164
  148. package/src/__tests__/runtime/proof-client-did.test.ts +0 -376
  149. package/src/__tests__/runtime/route-interception.test.ts +0 -686
  150. package/src/__tests__/runtime/tool-protection-enforcement.test.ts +0 -908
  151. package/src/__tests__/services/agentshield-integration.test.ts +0 -791
  152. package/src/__tests__/services/cache-busting.test.ts +0 -125
  153. package/src/__tests__/services/oauth-service-pkce.test.ts +0 -556
  154. package/src/__tests__/services/provider-resolver-edge-cases.test.ts +0 -591
  155. package/src/__tests__/services/tool-protection-merged-config.test.ts +0 -485
  156. package/src/__tests__/services/tool-protection-oauth-provider.test.ts +0 -480
  157. package/src/__tests__/services/tool-protection.service.test.ts +0 -1373
  158. package/src/__tests__/utils/mock-providers.ts +0 -340
  159. package/src/cache/oauth-config-cache.d.ts +0 -69
  160. package/src/cache/oauth-config-cache.d.ts.map +0 -1
  161. package/src/cache/oauth-config-cache.js.map +0 -1
  162. package/src/cache/oauth-config-cache.ts +0 -123
  163. package/src/cache/tool-protection-cache.ts +0 -171
  164. package/src/compliance/EXAMPLE.md +0 -412
  165. package/src/compliance/__tests__/schema-verifier.test.ts +0 -797
  166. package/src/compliance/index.ts +0 -8
  167. package/src/compliance/schema-registry.ts +0 -460
  168. package/src/compliance/schema-verifier.ts +0 -708
  169. package/src/config/__tests__/merged-config.spec.ts +0 -445
  170. package/src/config/__tests__/remote-config.spec.ts +0 -268
  171. package/src/config/remote-config.ts +0 -264
  172. package/src/config.ts +0 -312
  173. package/src/delegation/__tests__/audience-validator.test.ts +0 -112
  174. package/src/delegation/__tests__/bitstring.test.ts +0 -346
  175. package/src/delegation/__tests__/cascading-revocation.test.ts +0 -628
  176. package/src/delegation/__tests__/delegation-graph.test.ts +0 -584
  177. package/src/delegation/__tests__/did-key-resolver.test.ts +0 -265
  178. package/src/delegation/__tests__/utils.test.ts +0 -152
  179. package/src/delegation/__tests__/vc-issuer.test.ts +0 -442
  180. package/src/delegation/__tests__/vc-verifier.test.ts +0 -922
  181. package/src/delegation/audience-validator.ts +0 -52
  182. package/src/delegation/bitstring.ts +0 -278
  183. package/src/delegation/cascading-revocation.ts +0 -370
  184. package/src/delegation/delegation-graph.ts +0 -299
  185. package/src/delegation/did-key-resolver.ts +0 -179
  186. package/src/delegation/index.ts +0 -14
  187. package/src/delegation/statuslist-manager.ts +0 -353
  188. package/src/delegation/storage/__tests__/memory-graph-storage.test.ts +0 -366
  189. package/src/delegation/storage/__tests__/memory-statuslist-storage.test.ts +0 -228
  190. package/src/delegation/storage/index.ts +0 -9
  191. package/src/delegation/storage/memory-graph-storage.ts +0 -178
  192. package/src/delegation/storage/memory-statuslist-storage.ts +0 -77
  193. package/src/delegation/utils.ts +0 -221
  194. package/src/delegation/vc-issuer.ts +0 -232
  195. package/src/delegation/vc-verifier.ts +0 -568
  196. package/src/identity/idp-token-resolver.ts +0 -181
  197. package/src/identity/idp-token-storage.interface.ts +0 -94
  198. package/src/identity/user-did-manager.ts +0 -526
  199. package/src/index.ts +0 -310
  200. package/src/providers/base.d.ts +0 -91
  201. package/src/providers/base.d.ts.map +0 -1
  202. package/src/providers/base.js.map +0 -1
  203. package/src/providers/base.ts +0 -96
  204. package/src/providers/memory.ts +0 -142
  205. package/src/runtime/audit-logger.ts +0 -39
  206. package/src/runtime/base.ts +0 -1392
  207. package/src/services/__tests__/access-control.integration.test.ts +0 -443
  208. package/src/services/__tests__/access-control.proof-response-validation.test.ts +0 -578
  209. package/src/services/__tests__/access-control.service.test.ts +0 -970
  210. package/src/services/__tests__/batch-delegation.service.test.ts +0 -351
  211. package/src/services/__tests__/crypto.service.test.ts +0 -531
  212. package/src/services/__tests__/oauth-provider-registry.test.ts +0 -142
  213. package/src/services/__tests__/proof-verifier.integration.test.ts +0 -485
  214. package/src/services/__tests__/proof-verifier.test.ts +0 -489
  215. package/src/services/__tests__/provider-resolution.integration.test.ts +0 -202
  216. package/src/services/__tests__/provider-resolver.test.ts +0 -213
  217. package/src/services/__tests__/storage.service.test.ts +0 -358
  218. package/src/services/access-control.service.ts +0 -990
  219. package/src/services/authorization/authorization-registry.ts +0 -66
  220. package/src/services/authorization/types.ts +0 -71
  221. package/src/services/batch-delegation.service.ts +0 -137
  222. package/src/services/crypto.service.ts +0 -302
  223. package/src/services/errors.ts +0 -76
  224. package/src/services/index.ts +0 -18
  225. package/src/services/oauth-config.service.d.ts +0 -53
  226. package/src/services/oauth-config.service.d.ts.map +0 -1
  227. package/src/services/oauth-config.service.js.map +0 -1
  228. package/src/services/oauth-config.service.ts +0 -192
  229. package/src/services/oauth-provider-registry.d.ts +0 -57
  230. package/src/services/oauth-provider-registry.d.ts.map +0 -1
  231. package/src/services/oauth-provider-registry.js.map +0 -1
  232. package/src/services/oauth-provider-registry.ts +0 -141
  233. package/src/services/oauth-service.ts +0 -544
  234. package/src/services/oauth-token-retrieval.service.ts +0 -245
  235. package/src/services/proof-verifier.ts +0 -478
  236. package/src/services/provider-resolver.d.ts +0 -48
  237. package/src/services/provider-resolver.d.ts.map +0 -1
  238. package/src/services/provider-resolver.js.map +0 -1
  239. package/src/services/provider-resolver.ts +0 -146
  240. package/src/services/provider-validator.ts +0 -170
  241. package/src/services/session-registration.service.ts +0 -251
  242. package/src/services/storage.service.ts +0 -566
  243. package/src/services/tool-context-builder.ts +0 -237
  244. package/src/services/tool-protection.service.ts +0 -1070
  245. package/src/types/oauth-required-error.ts +0 -63
  246. package/src/types/tool-protection.ts +0 -155
  247. package/src/utils/__tests__/did-helpers.test.ts +0 -156
  248. package/src/utils/base58.ts +0 -109
  249. package/src/utils/base64.ts +0 -148
  250. package/src/utils/cors.ts +0 -83
  251. package/src/utils/did-helpers.ts +0 -210
  252. package/src/utils/index.ts +0 -8
  253. package/src/utils/storage-keys.ts +0 -278
  254. package/tsconfig.json +0 -21
  255. package/vitest.config.ts +0 -56
@@ -1,442 +0,0 @@
1
- import { describe, it, expect, beforeEach, vi, Mock } from "vitest";
2
- import {
3
- DelegationCredentialIssuer,
4
- createDelegationIssuer,
5
- type VCSigningFunction,
6
- type IdentityProvider,
7
- type IssueDelegationOptions,
8
- } from "../vc-issuer.js";
9
- import type {
10
- DelegationRecord,
11
- DelegationCredential,
12
- Proof,
13
- } from "@kya-os/contracts";
14
-
15
- // Mock the contracts functions
16
- vi.mock("@kya-os/contracts", () => ({
17
- wrapDelegationAsVC: vi.fn(),
18
- }));
19
-
20
- vi.mock("../utils", () => ({
21
- canonicalizeJSON: vi.fn(),
22
- }));
23
-
24
- describe("DelegationCredentialIssuer", () => {
25
- let mockIdentity: IdentityProvider;
26
- let mockSigningFunction: Mock<VCSigningFunction>;
27
- let issuer: DelegationCredentialIssuer;
28
-
29
- const mockDelegationRecord: DelegationRecord = {
30
- id: "del-001",
31
- issuerDid: "did:web:example.com:issuer",
32
- subjectDid: "did:web:example.com:subject",
33
- vcId: "urn:uuid:del-001",
34
- parentId: undefined,
35
- constraints: {
36
- scopes: ["read:profile"],
37
- },
38
- signature: "vc-jwt-signed", // Placeholder - actual signature is in the VC-JWT
39
- status: "active",
40
- createdAt: Date.now(),
41
- };
42
-
43
- const mockProof: Proof = {
44
- type: "Ed25519Signature2020",
45
- created: "2024-01-01T00:00:00Z",
46
- verificationMethod: "did:web:example.com:issuer#key-1",
47
- proofPurpose: "assertionMethod",
48
- proofValue: "mock-proof-value",
49
- };
50
-
51
- beforeEach(async () => {
52
- vi.clearAllMocks();
53
-
54
- mockIdentity = {
55
- getDid: vi.fn().mockReturnValue("did:web:example.com:issuer"),
56
- getKeyId: vi.fn().mockReturnValue("key-123"),
57
- getPrivateKey: vi.fn().mockReturnValue("mock-private-key"),
58
- };
59
-
60
- mockSigningFunction = vi.fn().mockResolvedValue(mockProof);
61
-
62
- issuer = new DelegationCredentialIssuer(mockIdentity, mockSigningFunction);
63
-
64
- // Setup default mocks
65
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
66
- const { canonicalizeJSON } = await import("../utils.js");
67
-
68
- vi.mocked(wrapDelegationAsVC).mockReturnValue({
69
- "@context": ["https://www.w3.org/2018/credentials/v1"],
70
- id: "urn:uuid:del-001",
71
- type: ["VerifiableCredential", "DelegationCredential"],
72
- issuer: "did:web:example.com:issuer",
73
- issuanceDate: "2024-01-01T00:00:00Z",
74
- credentialSubject: {
75
- id: "did:web:example.com:subject",
76
- delegation: {
77
- id: "del-001",
78
- issuerDid: "did:web:example.com:issuer",
79
- subjectDid: "did:web:example.com:subject",
80
- scopes: ["read:profile"],
81
- status: "active",
82
- },
83
- },
84
- } as any);
85
-
86
- vi.mocked(canonicalizeJSON).mockReturnValue('{"canonical":"json"}');
87
- });
88
-
89
- describe("constructor", () => {
90
- it("should create issuer with identity and signing function", () => {
91
- const newIssuer = new DelegationCredentialIssuer(
92
- mockIdentity,
93
- mockSigningFunction
94
- );
95
- expect(newIssuer).toBeInstanceOf(DelegationCredentialIssuer);
96
- });
97
- });
98
-
99
- describe("createDelegationIssuer", () => {
100
- it("should create an issuer instance", () => {
101
- const newIssuer = createDelegationIssuer(
102
- mockIdentity,
103
- mockSigningFunction
104
- );
105
- expect(newIssuer).toBeInstanceOf(DelegationCredentialIssuer);
106
- });
107
- });
108
-
109
- describe("issueDelegationCredential", () => {
110
- it("should issue a signed delegation credential", async () => {
111
- const result =
112
- await issuer.issueDelegationCredential(mockDelegationRecord);
113
-
114
- expect(result).toBeDefined();
115
- expect(result.proof).toEqual(mockProof);
116
- expect(mockSigningFunction).toHaveBeenCalled();
117
- });
118
-
119
- it("should call wrapDelegationAsVC with delegation record", async () => {
120
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
121
-
122
- await issuer.issueDelegationCredential(mockDelegationRecord);
123
-
124
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
125
- mockDelegationRecord,
126
- expect.objectContaining({
127
- id: undefined,
128
- issuanceDate: undefined,
129
- expirationDate: undefined,
130
- credentialStatus: undefined,
131
- })
132
- );
133
- });
134
-
135
- it("should pass options to wrapDelegationAsVC", async () => {
136
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
137
- const options: IssueDelegationOptions = {
138
- id: "custom-vc-id",
139
- issuanceDate: "2024-01-01T00:00:00Z",
140
- expirationDate: "2025-01-01T00:00:00Z",
141
- };
142
-
143
- await issuer.issueDelegationCredential(mockDelegationRecord, options);
144
-
145
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
146
- mockDelegationRecord,
147
- expect.objectContaining({
148
- id: "custom-vc-id",
149
- issuanceDate: "2024-01-01T00:00:00Z",
150
- expirationDate: "2025-01-01T00:00:00Z",
151
- })
152
- );
153
- });
154
-
155
- it("should add additional contexts if provided", async () => {
156
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
157
- const { canonicalizeJSON } = await import("../utils.js");
158
-
159
- const mockVC = {
160
- "@context": ["https://www.w3.org/2018/credentials/v1"],
161
- id: "urn:uuid:del-001",
162
- type: ["VerifiableCredential"],
163
- issuer: "did:web:example.com:issuer",
164
- issuanceDate: "2024-01-01T00:00:00Z",
165
- credentialSubject: {},
166
- };
167
-
168
- vi.mocked(wrapDelegationAsVC).mockReturnValue(mockVC as any);
169
-
170
- const options: IssueDelegationOptions = {
171
- additionalContexts: ["https://example.com/context"],
172
- };
173
-
174
- const result = await issuer.issueDelegationCredential(
175
- mockDelegationRecord,
176
- options
177
- );
178
-
179
- expect(result["@context"]).toContain("https://example.com/context");
180
- });
181
-
182
- it("should canonicalize VC before signing", async () => {
183
- const { canonicalizeJSON } = await import("../utils.js");
184
-
185
- await issuer.issueDelegationCredential(mockDelegationRecord);
186
-
187
- expect(canonicalizeJSON).toHaveBeenCalled();
188
- });
189
-
190
- it("should call signing function with canonical VC, DID, and key ID", async () => {
191
- const { canonicalizeJSON } = await import("../utils.js");
192
- vi.mocked(canonicalizeJSON).mockReturnValue("canonical-json-string");
193
-
194
- await issuer.issueDelegationCredential(mockDelegationRecord);
195
-
196
- expect(mockSigningFunction).toHaveBeenCalledWith(
197
- "canonical-json-string",
198
- "did:web:example.com:issuer",
199
- "key-123"
200
- );
201
- });
202
-
203
- it("should include proof in returned credential", async () => {
204
- const result =
205
- await issuer.issueDelegationCredential(mockDelegationRecord);
206
-
207
- expect(result.proof).toBeDefined();
208
- expect(result.proof).toEqual(mockProof);
209
- });
210
-
211
- it("should handle credential status option", async () => {
212
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
213
- const credentialStatus = {
214
- id: "https://example.com/status#123",
215
- type: "StatusList2021Entry" as const,
216
- statusPurpose: "revocation" as const,
217
- statusListIndex: "123",
218
- statusListCredential: "https://example.com/status",
219
- };
220
-
221
- const options: IssueDelegationOptions = {
222
- credentialStatus,
223
- };
224
-
225
- await issuer.issueDelegationCredential(mockDelegationRecord, options);
226
-
227
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
228
- mockDelegationRecord,
229
- expect.objectContaining({
230
- credentialStatus,
231
- })
232
- );
233
- });
234
- });
235
-
236
- describe("createAndIssueDelegation", () => {
237
- it("should create delegation record and issue as VC", async () => {
238
- const result = await issuer.createAndIssueDelegation({
239
- id: "del-new",
240
- issuerDid: "did:web:example.com:issuer",
241
- subjectDid: "did:web:example.com:subject",
242
- constraints: {
243
- scopes: ["read:profile"],
244
- },
245
- });
246
-
247
- expect(result).toBeDefined();
248
- expect(result.proof).toEqual(mockProof);
249
- });
250
-
251
- it("should use provided vcId or generate one", async () => {
252
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
253
-
254
- // Without custom ID
255
- await issuer.createAndIssueDelegation({
256
- id: "del-new",
257
- issuerDid: "did:web:example.com:issuer",
258
- subjectDid: "did:web:example.com:subject",
259
- constraints: {
260
- scopes: ["read:profile"],
261
- },
262
- });
263
-
264
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
265
- expect.objectContaining({
266
- vcId: "urn:uuid:del-new",
267
- }),
268
- expect.any(Object)
269
- );
270
-
271
- // With custom ID
272
- vi.clearAllMocks();
273
- await issuer.createAndIssueDelegation(
274
- {
275
- id: "del-new",
276
- issuerDid: "did:web:example.com:issuer",
277
- subjectDid: "did:web:example.com:subject",
278
- constraints: {
279
- scopes: ["read:profile"],
280
- },
281
- },
282
- { id: "custom-vc-id" }
283
- );
284
-
285
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
286
- expect.objectContaining({
287
- vcId: "custom-vc-id",
288
- }),
289
- expect.any(Object)
290
- );
291
- });
292
-
293
- it("should set default status to active", async () => {
294
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
295
-
296
- await issuer.createAndIssueDelegation({
297
- id: "del-new",
298
- issuerDid: "did:web:example.com:issuer",
299
- subjectDid: "did:web:example.com:subject",
300
- constraints: {
301
- scopes: ["read:profile"],
302
- },
303
- });
304
-
305
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
306
- expect.objectContaining({
307
- status: "active",
308
- }),
309
- expect.any(Object)
310
- );
311
- });
312
-
313
- it("should use provided status if given", async () => {
314
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
315
-
316
- await issuer.createAndIssueDelegation({
317
- id: "del-new",
318
- issuerDid: "did:web:example.com:issuer",
319
- subjectDid: "did:web:example.com:subject",
320
- constraints: {
321
- scopes: ["read:profile"],
322
- },
323
- status: "active",
324
- });
325
-
326
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
327
- expect.objectContaining({
328
- status: "active",
329
- }),
330
- expect.any(Object)
331
- );
332
- });
333
-
334
- it("should include parentId if provided", async () => {
335
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
336
-
337
- await issuer.createAndIssueDelegation({
338
- id: "del-child",
339
- issuerDid: "did:web:example.com:issuer",
340
- subjectDid: "did:web:example.com:subject",
341
- parentId: "del-parent",
342
- constraints: {
343
- scopes: ["read:profile"],
344
- },
345
- });
346
-
347
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
348
- expect.objectContaining({
349
- parentId: "del-parent",
350
- }),
351
- expect.any(Object)
352
- );
353
- });
354
-
355
- it("should include metadata if provided", async () => {
356
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
357
- const metadata = { custom: "value" };
358
-
359
- await issuer.createAndIssueDelegation({
360
- id: "del-new",
361
- issuerDid: "did:web:example.com:issuer",
362
- subjectDid: "did:web:example.com:subject",
363
- constraints: {
364
- scopes: ["read:profile"],
365
- },
366
- metadata,
367
- });
368
-
369
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
370
- expect.objectContaining({
371
- metadata,
372
- }),
373
- expect.any(Object)
374
- );
375
- });
376
-
377
- it("should set createdAt timestamp", async () => {
378
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
379
- const beforeTime = Date.now();
380
-
381
- await issuer.createAndIssueDelegation({
382
- id: "del-new",
383
- issuerDid: "did:web:example.com:issuer",
384
- subjectDid: "did:web:example.com:subject",
385
- constraints: {
386
- scopes: ["read:profile"],
387
- },
388
- });
389
-
390
- const afterTime = Date.now();
391
-
392
- expect(wrapDelegationAsVC).toHaveBeenCalledWith(
393
- expect.objectContaining({
394
- createdAt: expect.any(Number),
395
- }),
396
- expect.any(Object)
397
- );
398
-
399
- const callArgs = vi.mocked(wrapDelegationAsVC).mock
400
- .calls[0][0] as DelegationRecord;
401
- expect(callArgs.createdAt).toBeGreaterThanOrEqual(beforeTime);
402
- expect(callArgs.createdAt).toBeLessThanOrEqual(afterTime);
403
- });
404
- });
405
-
406
- describe("getIssuerDid", () => {
407
- it("should return issuer DID from identity provider", () => {
408
- const did = issuer.getIssuerDid();
409
- expect(did).toBe("did:web:example.com:issuer");
410
- expect(mockIdentity.getDid).toHaveBeenCalled();
411
- });
412
- });
413
-
414
- describe("getIssuerKeyId", () => {
415
- it("should return key ID from identity provider", () => {
416
- const keyId = issuer.getIssuerKeyId();
417
- expect(keyId).toBe("key-123");
418
- expect(mockIdentity.getKeyId).toHaveBeenCalled();
419
- });
420
- });
421
-
422
- describe("error handling", () => {
423
- it("should propagate errors from signing function", async () => {
424
- mockSigningFunction.mockRejectedValue(new Error("Signing failed"));
425
-
426
- await expect(
427
- issuer.issueDelegationCredential(mockDelegationRecord)
428
- ).rejects.toThrow("Signing failed");
429
- });
430
-
431
- it("should propagate errors from wrapDelegationAsVC", async () => {
432
- const { wrapDelegationAsVC } = await import("@kya-os/contracts");
433
- vi.mocked(wrapDelegationAsVC).mockImplementation(() => {
434
- throw new Error("VC wrapping failed");
435
- });
436
-
437
- await expect(
438
- issuer.issueDelegationCredential(mockDelegationRecord)
439
- ).rejects.toThrow("VC wrapping failed");
440
- });
441
- });
442
- });