@kya-os/mcp-i-core 1.3.13 → 1.3.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. package/dist/config/remote-config.js +9 -12
  2. package/dist/runtime/base.d.ts +2 -1
  3. package/dist/runtime/base.js +34 -6
  4. package/dist/services/access-control.service.js +5 -0
  5. package/dist/services/tool-protection.service.js +17 -8
  6. package/package.json +2 -2
  7. package/.turbo/turbo-build.log +0 -4
  8. package/.turbo/turbo-test$colon$coverage.log +0 -4586
  9. package/.turbo/turbo-test.log +0 -4631
  10. package/COMPLIANCE_IMPROVEMENT_REPORT.md +0 -483
  11. package/Composer 3.md +0 -615
  12. package/GPT-5.md +0 -1169
  13. package/OPUS-plan.md +0 -352
  14. package/PHASE_3_AND_4.1_SUMMARY.md +0 -585
  15. package/PHASE_3_SUMMARY.md +0 -317
  16. package/PHASE_4.1.3_SUMMARY.md +0 -428
  17. package/PHASE_4.1_COMPLETE.md +0 -525
  18. package/PHASE_4_USER_DID_IDENTITY_LINKING_PLAN.md +0 -1240
  19. package/SCHEMA_COMPLIANCE_REPORT.md +0 -275
  20. package/TEST_PLAN.md +0 -571
  21. package/coverage/coverage-final.json +0 -60
  22. package/dist/cache/oauth-config-cache.d.ts.map +0 -1
  23. package/dist/cache/oauth-config-cache.js.map +0 -1
  24. package/dist/cache/tool-protection-cache.d.ts.map +0 -1
  25. package/dist/cache/tool-protection-cache.js.map +0 -1
  26. package/dist/compliance/index.d.ts.map +0 -1
  27. package/dist/compliance/index.js.map +0 -1
  28. package/dist/compliance/schema-registry.d.ts.map +0 -1
  29. package/dist/compliance/schema-registry.js.map +0 -1
  30. package/dist/compliance/schema-verifier.d.ts.map +0 -1
  31. package/dist/compliance/schema-verifier.js.map +0 -1
  32. package/dist/config/remote-config.d.ts.map +0 -1
  33. package/dist/config/remote-config.js.map +0 -1
  34. package/dist/config.d.ts.map +0 -1
  35. package/dist/config.js.map +0 -1
  36. package/dist/delegation/audience-validator.d.ts.map +0 -1
  37. package/dist/delegation/audience-validator.js.map +0 -1
  38. package/dist/delegation/bitstring.d.ts.map +0 -1
  39. package/dist/delegation/bitstring.js.map +0 -1
  40. package/dist/delegation/cascading-revocation.d.ts.map +0 -1
  41. package/dist/delegation/cascading-revocation.js.map +0 -1
  42. package/dist/delegation/delegation-graph.d.ts.map +0 -1
  43. package/dist/delegation/delegation-graph.js.map +0 -1
  44. package/dist/delegation/did-key-resolver.d.ts.map +0 -1
  45. package/dist/delegation/did-key-resolver.js.map +0 -1
  46. package/dist/delegation/index.d.ts.map +0 -1
  47. package/dist/delegation/index.js.map +0 -1
  48. package/dist/delegation/statuslist-manager.d.ts.map +0 -1
  49. package/dist/delegation/statuslist-manager.js.map +0 -1
  50. package/dist/delegation/storage/index.d.ts.map +0 -1
  51. package/dist/delegation/storage/index.js.map +0 -1
  52. package/dist/delegation/storage/memory-graph-storage.d.ts.map +0 -1
  53. package/dist/delegation/storage/memory-graph-storage.js.map +0 -1
  54. package/dist/delegation/storage/memory-statuslist-storage.d.ts.map +0 -1
  55. package/dist/delegation/storage/memory-statuslist-storage.js.map +0 -1
  56. package/dist/delegation/utils.d.ts.map +0 -1
  57. package/dist/delegation/utils.js.map +0 -1
  58. package/dist/delegation/vc-issuer.d.ts.map +0 -1
  59. package/dist/delegation/vc-issuer.js.map +0 -1
  60. package/dist/delegation/vc-verifier.d.ts.map +0 -1
  61. package/dist/delegation/vc-verifier.js.map +0 -1
  62. package/dist/identity/idp-token-resolver.d.ts.map +0 -1
  63. package/dist/identity/idp-token-resolver.js.map +0 -1
  64. package/dist/identity/idp-token-storage.interface.d.ts.map +0 -1
  65. package/dist/identity/idp-token-storage.interface.js.map +0 -1
  66. package/dist/identity/user-did-manager.d.ts.map +0 -1
  67. package/dist/identity/user-did-manager.js.map +0 -1
  68. package/dist/index.d.ts.map +0 -1
  69. package/dist/index.js.map +0 -1
  70. package/dist/providers/base.d.ts.map +0 -1
  71. package/dist/providers/base.js.map +0 -1
  72. package/dist/providers/memory.d.ts.map +0 -1
  73. package/dist/providers/memory.js.map +0 -1
  74. package/dist/runtime/audit-logger.d.ts.map +0 -1
  75. package/dist/runtime/audit-logger.js.map +0 -1
  76. package/dist/runtime/base.d.ts.map +0 -1
  77. package/dist/runtime/base.js.map +0 -1
  78. package/dist/services/access-control.service.d.ts.map +0 -1
  79. package/dist/services/access-control.service.js.map +0 -1
  80. package/dist/services/authorization/authorization-registry.d.ts.map +0 -1
  81. package/dist/services/authorization/authorization-registry.js.map +0 -1
  82. package/dist/services/authorization/types.d.ts.map +0 -1
  83. package/dist/services/authorization/types.js.map +0 -1
  84. package/dist/services/batch-delegation.service.d.ts.map +0 -1
  85. package/dist/services/batch-delegation.service.js.map +0 -1
  86. package/dist/services/crypto.service.d.ts.map +0 -1
  87. package/dist/services/crypto.service.js.map +0 -1
  88. package/dist/services/errors.d.ts.map +0 -1
  89. package/dist/services/errors.js.map +0 -1
  90. package/dist/services/index.d.ts.map +0 -1
  91. package/dist/services/index.js.map +0 -1
  92. package/dist/services/oauth-config.service.d.ts.map +0 -1
  93. package/dist/services/oauth-config.service.js.map +0 -1
  94. package/dist/services/oauth-provider-registry.d.ts.map +0 -1
  95. package/dist/services/oauth-provider-registry.js.map +0 -1
  96. package/dist/services/oauth-service.d.ts.map +0 -1
  97. package/dist/services/oauth-service.js.map +0 -1
  98. package/dist/services/oauth-token-retrieval.service.d.ts.map +0 -1
  99. package/dist/services/oauth-token-retrieval.service.js.map +0 -1
  100. package/dist/services/proof-verifier.d.ts.map +0 -1
  101. package/dist/services/proof-verifier.js.map +0 -1
  102. package/dist/services/provider-resolver.d.ts.map +0 -1
  103. package/dist/services/provider-resolver.js.map +0 -1
  104. package/dist/services/provider-validator.d.ts.map +0 -1
  105. package/dist/services/provider-validator.js.map +0 -1
  106. package/dist/services/session-registration.service.d.ts.map +0 -1
  107. package/dist/services/session-registration.service.js.map +0 -1
  108. package/dist/services/storage.service.d.ts.map +0 -1
  109. package/dist/services/storage.service.js.map +0 -1
  110. package/dist/services/tool-context-builder.d.ts.map +0 -1
  111. package/dist/services/tool-context-builder.js.map +0 -1
  112. package/dist/services/tool-protection.service.d.ts.map +0 -1
  113. package/dist/services/tool-protection.service.js.map +0 -1
  114. package/dist/types/oauth-required-error.d.ts.map +0 -1
  115. package/dist/types/oauth-required-error.js.map +0 -1
  116. package/dist/types/tool-protection.d.ts.map +0 -1
  117. package/dist/types/tool-protection.js.map +0 -1
  118. package/dist/utils/base58.d.ts.map +0 -1
  119. package/dist/utils/base58.js.map +0 -1
  120. package/dist/utils/base64.d.ts.map +0 -1
  121. package/dist/utils/base64.js.map +0 -1
  122. package/dist/utils/cors.d.ts.map +0 -1
  123. package/dist/utils/cors.js.map +0 -1
  124. package/dist/utils/did-helpers.d.ts.map +0 -1
  125. package/dist/utils/did-helpers.js.map +0 -1
  126. package/dist/utils/index.d.ts.map +0 -1
  127. package/dist/utils/index.js.map +0 -1
  128. package/dist/utils/storage-keys.d.ts.map +0 -1
  129. package/dist/utils/storage-keys.js.map +0 -1
  130. package/docs/API_REFERENCE.md +0 -1362
  131. package/docs/COMPLIANCE_MATRIX.md +0 -691
  132. package/docs/STATUSLIST2021_GUIDE.md +0 -696
  133. package/docs/W3C_VC_DELEGATION_GUIDE.md +0 -710
  134. package/src/__tests__/cache/tool-protection-cache.test.ts +0 -640
  135. package/src/__tests__/config/provider-runtime-config.test.ts +0 -309
  136. package/src/__tests__/delegation-e2e.test.ts +0 -690
  137. package/src/__tests__/identity/user-did-manager.test.ts +0 -232
  138. package/src/__tests__/index.test.ts +0 -56
  139. package/src/__tests__/integration/full-flow.test.ts +0 -789
  140. package/src/__tests__/integration.test.ts +0 -281
  141. package/src/__tests__/providers/base.test.ts +0 -173
  142. package/src/__tests__/providers/memory.test.ts +0 -319
  143. package/src/__tests__/regression/phase2-regression.test.ts +0 -429
  144. package/src/__tests__/runtime/audit-logger.test.ts +0 -154
  145. package/src/__tests__/runtime/base-extensions.test.ts +0 -595
  146. package/src/__tests__/runtime/base.test.ts +0 -869
  147. package/src/__tests__/runtime/delegation-flow.test.ts +0 -164
  148. package/src/__tests__/runtime/proof-client-did.test.ts +0 -376
  149. package/src/__tests__/runtime/route-interception.test.ts +0 -686
  150. package/src/__tests__/runtime/tool-protection-enforcement.test.ts +0 -908
  151. package/src/__tests__/services/agentshield-integration.test.ts +0 -791
  152. package/src/__tests__/services/cache-busting.test.ts +0 -125
  153. package/src/__tests__/services/oauth-service-pkce.test.ts +0 -556
  154. package/src/__tests__/services/provider-resolver-edge-cases.test.ts +0 -591
  155. package/src/__tests__/services/tool-protection-merged-config.test.ts +0 -485
  156. package/src/__tests__/services/tool-protection-oauth-provider.test.ts +0 -480
  157. package/src/__tests__/services/tool-protection.service.test.ts +0 -1373
  158. package/src/__tests__/utils/mock-providers.ts +0 -340
  159. package/src/cache/oauth-config-cache.d.ts +0 -69
  160. package/src/cache/oauth-config-cache.d.ts.map +0 -1
  161. package/src/cache/oauth-config-cache.js.map +0 -1
  162. package/src/cache/oauth-config-cache.ts +0 -123
  163. package/src/cache/tool-protection-cache.ts +0 -171
  164. package/src/compliance/EXAMPLE.md +0 -412
  165. package/src/compliance/__tests__/schema-verifier.test.ts +0 -797
  166. package/src/compliance/index.ts +0 -8
  167. package/src/compliance/schema-registry.ts +0 -460
  168. package/src/compliance/schema-verifier.ts +0 -708
  169. package/src/config/__tests__/merged-config.spec.ts +0 -445
  170. package/src/config/__tests__/remote-config.spec.ts +0 -268
  171. package/src/config/remote-config.ts +0 -264
  172. package/src/config.ts +0 -312
  173. package/src/delegation/__tests__/audience-validator.test.ts +0 -112
  174. package/src/delegation/__tests__/bitstring.test.ts +0 -346
  175. package/src/delegation/__tests__/cascading-revocation.test.ts +0 -628
  176. package/src/delegation/__tests__/delegation-graph.test.ts +0 -584
  177. package/src/delegation/__tests__/did-key-resolver.test.ts +0 -265
  178. package/src/delegation/__tests__/utils.test.ts +0 -152
  179. package/src/delegation/__tests__/vc-issuer.test.ts +0 -442
  180. package/src/delegation/__tests__/vc-verifier.test.ts +0 -922
  181. package/src/delegation/audience-validator.ts +0 -52
  182. package/src/delegation/bitstring.ts +0 -278
  183. package/src/delegation/cascading-revocation.ts +0 -370
  184. package/src/delegation/delegation-graph.ts +0 -299
  185. package/src/delegation/did-key-resolver.ts +0 -179
  186. package/src/delegation/index.ts +0 -14
  187. package/src/delegation/statuslist-manager.ts +0 -353
  188. package/src/delegation/storage/__tests__/memory-graph-storage.test.ts +0 -366
  189. package/src/delegation/storage/__tests__/memory-statuslist-storage.test.ts +0 -228
  190. package/src/delegation/storage/index.ts +0 -9
  191. package/src/delegation/storage/memory-graph-storage.ts +0 -178
  192. package/src/delegation/storage/memory-statuslist-storage.ts +0 -77
  193. package/src/delegation/utils.ts +0 -221
  194. package/src/delegation/vc-issuer.ts +0 -232
  195. package/src/delegation/vc-verifier.ts +0 -568
  196. package/src/identity/idp-token-resolver.ts +0 -181
  197. package/src/identity/idp-token-storage.interface.ts +0 -94
  198. package/src/identity/user-did-manager.ts +0 -526
  199. package/src/index.ts +0 -310
  200. package/src/providers/base.d.ts +0 -91
  201. package/src/providers/base.d.ts.map +0 -1
  202. package/src/providers/base.js.map +0 -1
  203. package/src/providers/base.ts +0 -96
  204. package/src/providers/memory.ts +0 -142
  205. package/src/runtime/audit-logger.ts +0 -39
  206. package/src/runtime/base.ts +0 -1392
  207. package/src/services/__tests__/access-control.integration.test.ts +0 -443
  208. package/src/services/__tests__/access-control.proof-response-validation.test.ts +0 -578
  209. package/src/services/__tests__/access-control.service.test.ts +0 -970
  210. package/src/services/__tests__/batch-delegation.service.test.ts +0 -351
  211. package/src/services/__tests__/crypto.service.test.ts +0 -531
  212. package/src/services/__tests__/oauth-provider-registry.test.ts +0 -142
  213. package/src/services/__tests__/proof-verifier.integration.test.ts +0 -485
  214. package/src/services/__tests__/proof-verifier.test.ts +0 -489
  215. package/src/services/__tests__/provider-resolution.integration.test.ts +0 -202
  216. package/src/services/__tests__/provider-resolver.test.ts +0 -213
  217. package/src/services/__tests__/storage.service.test.ts +0 -358
  218. package/src/services/access-control.service.ts +0 -990
  219. package/src/services/authorization/authorization-registry.ts +0 -66
  220. package/src/services/authorization/types.ts +0 -71
  221. package/src/services/batch-delegation.service.ts +0 -137
  222. package/src/services/crypto.service.ts +0 -302
  223. package/src/services/errors.ts +0 -76
  224. package/src/services/index.ts +0 -18
  225. package/src/services/oauth-config.service.d.ts +0 -53
  226. package/src/services/oauth-config.service.d.ts.map +0 -1
  227. package/src/services/oauth-config.service.js.map +0 -1
  228. package/src/services/oauth-config.service.ts +0 -192
  229. package/src/services/oauth-provider-registry.d.ts +0 -57
  230. package/src/services/oauth-provider-registry.d.ts.map +0 -1
  231. package/src/services/oauth-provider-registry.js.map +0 -1
  232. package/src/services/oauth-provider-registry.ts +0 -141
  233. package/src/services/oauth-service.ts +0 -544
  234. package/src/services/oauth-token-retrieval.service.ts +0 -245
  235. package/src/services/proof-verifier.ts +0 -478
  236. package/src/services/provider-resolver.d.ts +0 -48
  237. package/src/services/provider-resolver.d.ts.map +0 -1
  238. package/src/services/provider-resolver.js.map +0 -1
  239. package/src/services/provider-resolver.ts +0 -146
  240. package/src/services/provider-validator.ts +0 -170
  241. package/src/services/session-registration.service.ts +0 -251
  242. package/src/services/storage.service.ts +0 -566
  243. package/src/services/tool-context-builder.ts +0 -237
  244. package/src/services/tool-protection.service.ts +0 -1070
  245. package/src/types/oauth-required-error.ts +0 -63
  246. package/src/types/tool-protection.ts +0 -155
  247. package/src/utils/__tests__/did-helpers.test.ts +0 -156
  248. package/src/utils/base58.ts +0 -109
  249. package/src/utils/base64.ts +0 -148
  250. package/src/utils/cors.ts +0 -83
  251. package/src/utils/did-helpers.ts +0 -210
  252. package/src/utils/index.ts +0 -8
  253. package/src/utils/storage-keys.ts +0 -278
  254. package/tsconfig.json +0 -21
  255. package/vitest.config.ts +0 -56
@@ -1,351 +0,0 @@
1
- /**
2
- * Batch Delegation Service Tests
3
- *
4
- * @package @kya-os/mcp-i-core
5
- */
6
-
7
- import { describe, it, expect, beforeEach, vi } from "vitest";
8
- import { BatchDelegationService } from "../batch-delegation.service.js";
9
- import { ProviderResolver } from "../provider-resolver.js";
10
- import { ToolProtectionService } from "../tool-protection.service.js";
11
- import type { ToolProtection } from "@kya-os/contracts/tool-protection";
12
-
13
- describe("BatchDelegationService", () => {
14
- let mockProviderResolver: ProviderResolver;
15
- let mockToolProtectionService: ToolProtectionService;
16
- let service: BatchDelegationService;
17
-
18
- beforeEach(() => {
19
- mockProviderResolver = {
20
- resolveProvider: vi.fn(),
21
- } as any;
22
-
23
- mockToolProtectionService = {
24
- checkToolProtection: vi.fn(),
25
- } as any;
26
-
27
- service = new BatchDelegationService(
28
- mockProviderResolver,
29
- mockToolProtectionService
30
- );
31
- });
32
-
33
- describe("groupToolsByProvider", () => {
34
- it("should group tools by provider", async () => {
35
- const toolProtection1: ToolProtection = {
36
- requiresDelegation: true,
37
- requiredScopes: ["github:repo:read"],
38
- oauthProvider: "github",
39
- };
40
-
41
- const toolProtection2: ToolProtection = {
42
- requiresDelegation: true,
43
- requiredScopes: ["github:repo:write"],
44
- oauthProvider: "github",
45
- };
46
-
47
- const toolProtection3: ToolProtection = {
48
- requiresDelegation: true,
49
- requiredScopes: ["google:calendar:read"],
50
- oauthProvider: "google",
51
- };
52
-
53
- (mockToolProtectionService.checkToolProtection as any)
54
- .mockResolvedValueOnce(toolProtection1)
55
- .mockResolvedValueOnce(toolProtection2)
56
- .mockResolvedValueOnce(toolProtection3);
57
-
58
- (mockProviderResolver.resolveProvider as any)
59
- .mockResolvedValueOnce("github")
60
- .mockResolvedValueOnce("github")
61
- .mockResolvedValueOnce("google");
62
-
63
- const groups = await service.groupToolsByProvider(
64
- ["tool1", "tool2", "tool3"],
65
- "test-project",
66
- "did:key:test"
67
- );
68
-
69
- expect(groups.size).toBe(2);
70
- expect(groups.get("github")?.tools).toEqual(["tool1", "tool2"]);
71
- expect(groups.get("google")?.tools).toEqual(["tool3"]);
72
- });
73
-
74
- it("should merge scopes for tools in same group", async () => {
75
- const toolProtection1: ToolProtection = {
76
- requiresDelegation: true,
77
- requiredScopes: ["github:repo:read", "github:user:read"],
78
- oauthProvider: "github",
79
- };
80
-
81
- const toolProtection2: ToolProtection = {
82
- requiresDelegation: true,
83
- requiredScopes: ["github:repo:write"],
84
- oauthProvider: "github",
85
- };
86
-
87
- (mockToolProtectionService.checkToolProtection as any)
88
- .mockResolvedValueOnce(toolProtection1)
89
- .mockResolvedValueOnce(toolProtection2);
90
-
91
- (mockProviderResolver.resolveProvider as any)
92
- .mockResolvedValue("github");
93
-
94
- const groups = await service.groupToolsByProvider(
95
- ["tool1", "tool2"],
96
- "test-project",
97
- "did:key:test"
98
- );
99
-
100
- const githubGroup = groups.get("github");
101
- expect(githubGroup?.scopes).toContain("github:repo:read");
102
- expect(githubGroup?.scopes).toContain("github:user:read");
103
- expect(githubGroup?.scopes).toContain("github:repo:write");
104
- expect(githubGroup?.scopes.length).toBe(3); // No duplicates
105
- });
106
-
107
- it("should use highest risk level in group", async () => {
108
- const toolProtection1: ToolProtection = {
109
- requiresDelegation: true,
110
- requiredScopes: ["github:repo:read"],
111
- oauthProvider: "github",
112
- riskLevel: "low",
113
- };
114
-
115
- const toolProtection2: ToolProtection = {
116
- requiresDelegation: true,
117
- requiredScopes: ["github:repo:write"],
118
- oauthProvider: "github",
119
- riskLevel: "high",
120
- };
121
-
122
- (mockToolProtectionService.checkToolProtection as any)
123
- .mockResolvedValueOnce(toolProtection1)
124
- .mockResolvedValueOnce(toolProtection2);
125
-
126
- (mockProviderResolver.resolveProvider as any)
127
- .mockResolvedValue("github");
128
-
129
- const groups = await service.groupToolsByProvider(
130
- ["tool1", "tool2"],
131
- "test-project",
132
- "did:key:test"
133
- );
134
-
135
- expect(groups.get("github")?.riskLevel).toBe("high");
136
- });
137
-
138
- it("should skip tools that don't require delegation", async () => {
139
- const toolProtection1: ToolProtection = {
140
- requiresDelegation: true,
141
- requiredScopes: ["github:repo:read"],
142
- oauthProvider: "github",
143
- };
144
-
145
- const toolProtection2: ToolProtection = {
146
- requiresDelegation: false,
147
- requiredScopes: [],
148
- };
149
-
150
- (mockToolProtectionService.checkToolProtection as any)
151
- .mockResolvedValueOnce(toolProtection1)
152
- .mockResolvedValueOnce(toolProtection2);
153
-
154
- (mockProviderResolver.resolveProvider as any).mockResolvedValue("github");
155
-
156
- const groups = await service.groupToolsByProvider(
157
- ["tool1", "tool2"],
158
- "test-project",
159
- "did:key:test"
160
- );
161
-
162
- expect(groups.get("github")?.tools).toEqual(["tool1"]);
163
- expect(groups.get("github")?.tools).not.toContain("tool2");
164
- });
165
-
166
- it("should handle tools with provider resolution errors gracefully", async () => {
167
- const toolProtection: ToolProtection = {
168
- requiresDelegation: true,
169
- requiredScopes: ["github:repo:read"],
170
- oauthProvider: "github",
171
- };
172
-
173
- (mockToolProtectionService.checkToolProtection as any).mockResolvedValue(
174
- toolProtection
175
- );
176
-
177
- (mockProviderResolver.resolveProvider as any).mockRejectedValue(
178
- new Error("Provider not found")
179
- );
180
-
181
- const consoleSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
182
-
183
- const groups = await service.groupToolsByProvider(
184
- ["tool1"],
185
- "test-project",
186
- "did:key:test"
187
- );
188
-
189
- expect(groups.size).toBe(0);
190
- expect(consoleSpy).toHaveBeenCalled();
191
-
192
- consoleSpy.mockRestore();
193
- });
194
-
195
- it("should return empty map when no tools require delegation", async () => {
196
- const toolProtection: ToolProtection = {
197
- requiresDelegation: false,
198
- requiredScopes: [],
199
- };
200
-
201
- (mockToolProtectionService.checkToolProtection as any).mockResolvedValue(
202
- toolProtection
203
- );
204
-
205
- const groups = await service.groupToolsByProvider(
206
- ["tool1"],
207
- "test-project",
208
- "did:key:test"
209
- );
210
-
211
- expect(groups.size).toBe(0);
212
- });
213
-
214
- it("should group tools with oauthProvider field specified", async () => {
215
- const toolProtection1: ToolProtection = {
216
- requiresDelegation: true,
217
- requiredScopes: ["repo:read"],
218
- oauthProvider: "github", // Explicit provider
219
- };
220
-
221
- const toolProtection2: ToolProtection = {
222
- requiresDelegation: true,
223
- requiredScopes: ["repo:write"],
224
- oauthProvider: "github", // Same explicit provider
225
- };
226
-
227
- (mockToolProtectionService.checkToolProtection as any)
228
- .mockResolvedValueOnce(toolProtection1)
229
- .mockResolvedValueOnce(toolProtection2);
230
-
231
- (mockProviderResolver.resolveProvider as any)
232
- .mockResolvedValueOnce("github")
233
- .mockResolvedValueOnce("github");
234
-
235
- const groups = await service.groupToolsByProvider(
236
- ["tool1", "tool2"],
237
- "test-project",
238
- "did:key:test"
239
- );
240
-
241
- expect(groups.size).toBe(1);
242
- expect(groups.get("github")?.tools).toEqual(["tool1", "tool2"]);
243
- expect(mockProviderResolver.resolveProvider).toHaveBeenCalledTimes(2);
244
- });
245
-
246
- it("should group tools with oauthProvider field missing (fallback behavior)", async () => {
247
- const toolProtection1: ToolProtection = {
248
- requiresDelegation: true,
249
- requiredScopes: ["github:repo:read"],
250
- // No oauthProvider - should use scope inference
251
- };
252
-
253
- const toolProtection2: ToolProtection = {
254
- requiresDelegation: true,
255
- requiredScopes: ["github:repo:write"],
256
- // No oauthProvider - should use scope inference
257
- };
258
-
259
- (mockToolProtectionService.checkToolProtection as any)
260
- .mockResolvedValueOnce(toolProtection1)
261
- .mockResolvedValueOnce(toolProtection2);
262
-
263
- // ProviderResolver should infer from scopes
264
- (mockProviderResolver.resolveProvider as any)
265
- .mockResolvedValueOnce("github")
266
- .mockResolvedValueOnce("github");
267
-
268
- const groups = await service.groupToolsByProvider(
269
- ["tool1", "tool2"],
270
- "test-project",
271
- "did:key:test"
272
- );
273
-
274
- expect(groups.size).toBe(1);
275
- expect(groups.get("github")?.tools).toEqual(["tool1", "tool2"]);
276
- // Should still call resolveProvider (which handles fallback)
277
- expect(mockProviderResolver.resolveProvider).toHaveBeenCalledTimes(2);
278
- });
279
-
280
- it("should handle empty groups when all tools skip delegation", async () => {
281
- const toolProtection1: ToolProtection = {
282
- requiresDelegation: false,
283
- requiredScopes: [],
284
- };
285
-
286
- const toolProtection2: ToolProtection = {
287
- requiresDelegation: false,
288
- requiredScopes: [],
289
- };
290
-
291
- (mockToolProtectionService.checkToolProtection as any)
292
- .mockResolvedValueOnce(toolProtection1)
293
- .mockResolvedValueOnce(toolProtection2);
294
-
295
- const groups = await service.groupToolsByProvider(
296
- ["tool1", "tool2"],
297
- "test-project",
298
- "did:key:test"
299
- );
300
-
301
- expect(groups.size).toBe(0);
302
- // Should not call resolveProvider if no tools require delegation
303
- expect(mockProviderResolver.resolveProvider).not.toHaveBeenCalled();
304
- });
305
-
306
- it("should handle mixed tools with and without oauthProvider", async () => {
307
- const toolProtection1: ToolProtection = {
308
- requiresDelegation: true,
309
- requiredScopes: ["repo:read"],
310
- oauthProvider: "github", // Explicit
311
- };
312
-
313
- const toolProtection2: ToolProtection = {
314
- requiresDelegation: true,
315
- requiredScopes: ["gmail:read"],
316
- // No oauthProvider - should infer google from scope
317
- };
318
-
319
- (mockToolProtectionService.checkToolProtection as any)
320
- .mockResolvedValueOnce(toolProtection1)
321
- .mockResolvedValueOnce(toolProtection2);
322
-
323
- (mockProviderResolver.resolveProvider as any)
324
- .mockResolvedValueOnce("github")
325
- .mockResolvedValueOnce("google");
326
-
327
- const groups = await service.groupToolsByProvider(
328
- ["tool1", "tool2"],
329
- "test-project",
330
- "did:key:test"
331
- );
332
-
333
- expect(groups.size).toBe(2);
334
- expect(groups.get("github")?.tools).toEqual(["tool1"]);
335
- expect(groups.get("google")?.tools).toEqual(["tool2"]);
336
- });
337
- });
338
-
339
- describe("getToolsForProvider", () => {
340
- it("should return empty array (not yet implemented)", async () => {
341
- const tools = await service.getToolsForProvider(
342
- "github",
343
- "test-project",
344
- "did:key:test"
345
- );
346
-
347
- expect(tools).toEqual([]);
348
- });
349
- });
350
- });
351
-