@kya-os/mcp-i-core 1.3.13 → 1.3.15

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. package/dist/config/remote-config.js +9 -12
  2. package/dist/runtime/base.d.ts +2 -1
  3. package/dist/runtime/base.js +34 -6
  4. package/dist/services/access-control.service.js +5 -0
  5. package/dist/services/tool-protection.service.js +17 -8
  6. package/package.json +2 -2
  7. package/.turbo/turbo-build.log +0 -4
  8. package/.turbo/turbo-test$colon$coverage.log +0 -4586
  9. package/.turbo/turbo-test.log +0 -4631
  10. package/COMPLIANCE_IMPROVEMENT_REPORT.md +0 -483
  11. package/Composer 3.md +0 -615
  12. package/GPT-5.md +0 -1169
  13. package/OPUS-plan.md +0 -352
  14. package/PHASE_3_AND_4.1_SUMMARY.md +0 -585
  15. package/PHASE_3_SUMMARY.md +0 -317
  16. package/PHASE_4.1.3_SUMMARY.md +0 -428
  17. package/PHASE_4.1_COMPLETE.md +0 -525
  18. package/PHASE_4_USER_DID_IDENTITY_LINKING_PLAN.md +0 -1240
  19. package/SCHEMA_COMPLIANCE_REPORT.md +0 -275
  20. package/TEST_PLAN.md +0 -571
  21. package/coverage/coverage-final.json +0 -60
  22. package/dist/cache/oauth-config-cache.d.ts.map +0 -1
  23. package/dist/cache/oauth-config-cache.js.map +0 -1
  24. package/dist/cache/tool-protection-cache.d.ts.map +0 -1
  25. package/dist/cache/tool-protection-cache.js.map +0 -1
  26. package/dist/compliance/index.d.ts.map +0 -1
  27. package/dist/compliance/index.js.map +0 -1
  28. package/dist/compliance/schema-registry.d.ts.map +0 -1
  29. package/dist/compliance/schema-registry.js.map +0 -1
  30. package/dist/compliance/schema-verifier.d.ts.map +0 -1
  31. package/dist/compliance/schema-verifier.js.map +0 -1
  32. package/dist/config/remote-config.d.ts.map +0 -1
  33. package/dist/config/remote-config.js.map +0 -1
  34. package/dist/config.d.ts.map +0 -1
  35. package/dist/config.js.map +0 -1
  36. package/dist/delegation/audience-validator.d.ts.map +0 -1
  37. package/dist/delegation/audience-validator.js.map +0 -1
  38. package/dist/delegation/bitstring.d.ts.map +0 -1
  39. package/dist/delegation/bitstring.js.map +0 -1
  40. package/dist/delegation/cascading-revocation.d.ts.map +0 -1
  41. package/dist/delegation/cascading-revocation.js.map +0 -1
  42. package/dist/delegation/delegation-graph.d.ts.map +0 -1
  43. package/dist/delegation/delegation-graph.js.map +0 -1
  44. package/dist/delegation/did-key-resolver.d.ts.map +0 -1
  45. package/dist/delegation/did-key-resolver.js.map +0 -1
  46. package/dist/delegation/index.d.ts.map +0 -1
  47. package/dist/delegation/index.js.map +0 -1
  48. package/dist/delegation/statuslist-manager.d.ts.map +0 -1
  49. package/dist/delegation/statuslist-manager.js.map +0 -1
  50. package/dist/delegation/storage/index.d.ts.map +0 -1
  51. package/dist/delegation/storage/index.js.map +0 -1
  52. package/dist/delegation/storage/memory-graph-storage.d.ts.map +0 -1
  53. package/dist/delegation/storage/memory-graph-storage.js.map +0 -1
  54. package/dist/delegation/storage/memory-statuslist-storage.d.ts.map +0 -1
  55. package/dist/delegation/storage/memory-statuslist-storage.js.map +0 -1
  56. package/dist/delegation/utils.d.ts.map +0 -1
  57. package/dist/delegation/utils.js.map +0 -1
  58. package/dist/delegation/vc-issuer.d.ts.map +0 -1
  59. package/dist/delegation/vc-issuer.js.map +0 -1
  60. package/dist/delegation/vc-verifier.d.ts.map +0 -1
  61. package/dist/delegation/vc-verifier.js.map +0 -1
  62. package/dist/identity/idp-token-resolver.d.ts.map +0 -1
  63. package/dist/identity/idp-token-resolver.js.map +0 -1
  64. package/dist/identity/idp-token-storage.interface.d.ts.map +0 -1
  65. package/dist/identity/idp-token-storage.interface.js.map +0 -1
  66. package/dist/identity/user-did-manager.d.ts.map +0 -1
  67. package/dist/identity/user-did-manager.js.map +0 -1
  68. package/dist/index.d.ts.map +0 -1
  69. package/dist/index.js.map +0 -1
  70. package/dist/providers/base.d.ts.map +0 -1
  71. package/dist/providers/base.js.map +0 -1
  72. package/dist/providers/memory.d.ts.map +0 -1
  73. package/dist/providers/memory.js.map +0 -1
  74. package/dist/runtime/audit-logger.d.ts.map +0 -1
  75. package/dist/runtime/audit-logger.js.map +0 -1
  76. package/dist/runtime/base.d.ts.map +0 -1
  77. package/dist/runtime/base.js.map +0 -1
  78. package/dist/services/access-control.service.d.ts.map +0 -1
  79. package/dist/services/access-control.service.js.map +0 -1
  80. package/dist/services/authorization/authorization-registry.d.ts.map +0 -1
  81. package/dist/services/authorization/authorization-registry.js.map +0 -1
  82. package/dist/services/authorization/types.d.ts.map +0 -1
  83. package/dist/services/authorization/types.js.map +0 -1
  84. package/dist/services/batch-delegation.service.d.ts.map +0 -1
  85. package/dist/services/batch-delegation.service.js.map +0 -1
  86. package/dist/services/crypto.service.d.ts.map +0 -1
  87. package/dist/services/crypto.service.js.map +0 -1
  88. package/dist/services/errors.d.ts.map +0 -1
  89. package/dist/services/errors.js.map +0 -1
  90. package/dist/services/index.d.ts.map +0 -1
  91. package/dist/services/index.js.map +0 -1
  92. package/dist/services/oauth-config.service.d.ts.map +0 -1
  93. package/dist/services/oauth-config.service.js.map +0 -1
  94. package/dist/services/oauth-provider-registry.d.ts.map +0 -1
  95. package/dist/services/oauth-provider-registry.js.map +0 -1
  96. package/dist/services/oauth-service.d.ts.map +0 -1
  97. package/dist/services/oauth-service.js.map +0 -1
  98. package/dist/services/oauth-token-retrieval.service.d.ts.map +0 -1
  99. package/dist/services/oauth-token-retrieval.service.js.map +0 -1
  100. package/dist/services/proof-verifier.d.ts.map +0 -1
  101. package/dist/services/proof-verifier.js.map +0 -1
  102. package/dist/services/provider-resolver.d.ts.map +0 -1
  103. package/dist/services/provider-resolver.js.map +0 -1
  104. package/dist/services/provider-validator.d.ts.map +0 -1
  105. package/dist/services/provider-validator.js.map +0 -1
  106. package/dist/services/session-registration.service.d.ts.map +0 -1
  107. package/dist/services/session-registration.service.js.map +0 -1
  108. package/dist/services/storage.service.d.ts.map +0 -1
  109. package/dist/services/storage.service.js.map +0 -1
  110. package/dist/services/tool-context-builder.d.ts.map +0 -1
  111. package/dist/services/tool-context-builder.js.map +0 -1
  112. package/dist/services/tool-protection.service.d.ts.map +0 -1
  113. package/dist/services/tool-protection.service.js.map +0 -1
  114. package/dist/types/oauth-required-error.d.ts.map +0 -1
  115. package/dist/types/oauth-required-error.js.map +0 -1
  116. package/dist/types/tool-protection.d.ts.map +0 -1
  117. package/dist/types/tool-protection.js.map +0 -1
  118. package/dist/utils/base58.d.ts.map +0 -1
  119. package/dist/utils/base58.js.map +0 -1
  120. package/dist/utils/base64.d.ts.map +0 -1
  121. package/dist/utils/base64.js.map +0 -1
  122. package/dist/utils/cors.d.ts.map +0 -1
  123. package/dist/utils/cors.js.map +0 -1
  124. package/dist/utils/did-helpers.d.ts.map +0 -1
  125. package/dist/utils/did-helpers.js.map +0 -1
  126. package/dist/utils/index.d.ts.map +0 -1
  127. package/dist/utils/index.js.map +0 -1
  128. package/dist/utils/storage-keys.d.ts.map +0 -1
  129. package/dist/utils/storage-keys.js.map +0 -1
  130. package/docs/API_REFERENCE.md +0 -1362
  131. package/docs/COMPLIANCE_MATRIX.md +0 -691
  132. package/docs/STATUSLIST2021_GUIDE.md +0 -696
  133. package/docs/W3C_VC_DELEGATION_GUIDE.md +0 -710
  134. package/src/__tests__/cache/tool-protection-cache.test.ts +0 -640
  135. package/src/__tests__/config/provider-runtime-config.test.ts +0 -309
  136. package/src/__tests__/delegation-e2e.test.ts +0 -690
  137. package/src/__tests__/identity/user-did-manager.test.ts +0 -232
  138. package/src/__tests__/index.test.ts +0 -56
  139. package/src/__tests__/integration/full-flow.test.ts +0 -789
  140. package/src/__tests__/integration.test.ts +0 -281
  141. package/src/__tests__/providers/base.test.ts +0 -173
  142. package/src/__tests__/providers/memory.test.ts +0 -319
  143. package/src/__tests__/regression/phase2-regression.test.ts +0 -429
  144. package/src/__tests__/runtime/audit-logger.test.ts +0 -154
  145. package/src/__tests__/runtime/base-extensions.test.ts +0 -595
  146. package/src/__tests__/runtime/base.test.ts +0 -869
  147. package/src/__tests__/runtime/delegation-flow.test.ts +0 -164
  148. package/src/__tests__/runtime/proof-client-did.test.ts +0 -376
  149. package/src/__tests__/runtime/route-interception.test.ts +0 -686
  150. package/src/__tests__/runtime/tool-protection-enforcement.test.ts +0 -908
  151. package/src/__tests__/services/agentshield-integration.test.ts +0 -791
  152. package/src/__tests__/services/cache-busting.test.ts +0 -125
  153. package/src/__tests__/services/oauth-service-pkce.test.ts +0 -556
  154. package/src/__tests__/services/provider-resolver-edge-cases.test.ts +0 -591
  155. package/src/__tests__/services/tool-protection-merged-config.test.ts +0 -485
  156. package/src/__tests__/services/tool-protection-oauth-provider.test.ts +0 -480
  157. package/src/__tests__/services/tool-protection.service.test.ts +0 -1373
  158. package/src/__tests__/utils/mock-providers.ts +0 -340
  159. package/src/cache/oauth-config-cache.d.ts +0 -69
  160. package/src/cache/oauth-config-cache.d.ts.map +0 -1
  161. package/src/cache/oauth-config-cache.js.map +0 -1
  162. package/src/cache/oauth-config-cache.ts +0 -123
  163. package/src/cache/tool-protection-cache.ts +0 -171
  164. package/src/compliance/EXAMPLE.md +0 -412
  165. package/src/compliance/__tests__/schema-verifier.test.ts +0 -797
  166. package/src/compliance/index.ts +0 -8
  167. package/src/compliance/schema-registry.ts +0 -460
  168. package/src/compliance/schema-verifier.ts +0 -708
  169. package/src/config/__tests__/merged-config.spec.ts +0 -445
  170. package/src/config/__tests__/remote-config.spec.ts +0 -268
  171. package/src/config/remote-config.ts +0 -264
  172. package/src/config.ts +0 -312
  173. package/src/delegation/__tests__/audience-validator.test.ts +0 -112
  174. package/src/delegation/__tests__/bitstring.test.ts +0 -346
  175. package/src/delegation/__tests__/cascading-revocation.test.ts +0 -628
  176. package/src/delegation/__tests__/delegation-graph.test.ts +0 -584
  177. package/src/delegation/__tests__/did-key-resolver.test.ts +0 -265
  178. package/src/delegation/__tests__/utils.test.ts +0 -152
  179. package/src/delegation/__tests__/vc-issuer.test.ts +0 -442
  180. package/src/delegation/__tests__/vc-verifier.test.ts +0 -922
  181. package/src/delegation/audience-validator.ts +0 -52
  182. package/src/delegation/bitstring.ts +0 -278
  183. package/src/delegation/cascading-revocation.ts +0 -370
  184. package/src/delegation/delegation-graph.ts +0 -299
  185. package/src/delegation/did-key-resolver.ts +0 -179
  186. package/src/delegation/index.ts +0 -14
  187. package/src/delegation/statuslist-manager.ts +0 -353
  188. package/src/delegation/storage/__tests__/memory-graph-storage.test.ts +0 -366
  189. package/src/delegation/storage/__tests__/memory-statuslist-storage.test.ts +0 -228
  190. package/src/delegation/storage/index.ts +0 -9
  191. package/src/delegation/storage/memory-graph-storage.ts +0 -178
  192. package/src/delegation/storage/memory-statuslist-storage.ts +0 -77
  193. package/src/delegation/utils.ts +0 -221
  194. package/src/delegation/vc-issuer.ts +0 -232
  195. package/src/delegation/vc-verifier.ts +0 -568
  196. package/src/identity/idp-token-resolver.ts +0 -181
  197. package/src/identity/idp-token-storage.interface.ts +0 -94
  198. package/src/identity/user-did-manager.ts +0 -526
  199. package/src/index.ts +0 -310
  200. package/src/providers/base.d.ts +0 -91
  201. package/src/providers/base.d.ts.map +0 -1
  202. package/src/providers/base.js.map +0 -1
  203. package/src/providers/base.ts +0 -96
  204. package/src/providers/memory.ts +0 -142
  205. package/src/runtime/audit-logger.ts +0 -39
  206. package/src/runtime/base.ts +0 -1392
  207. package/src/services/__tests__/access-control.integration.test.ts +0 -443
  208. package/src/services/__tests__/access-control.proof-response-validation.test.ts +0 -578
  209. package/src/services/__tests__/access-control.service.test.ts +0 -970
  210. package/src/services/__tests__/batch-delegation.service.test.ts +0 -351
  211. package/src/services/__tests__/crypto.service.test.ts +0 -531
  212. package/src/services/__tests__/oauth-provider-registry.test.ts +0 -142
  213. package/src/services/__tests__/proof-verifier.integration.test.ts +0 -485
  214. package/src/services/__tests__/proof-verifier.test.ts +0 -489
  215. package/src/services/__tests__/provider-resolution.integration.test.ts +0 -202
  216. package/src/services/__tests__/provider-resolver.test.ts +0 -213
  217. package/src/services/__tests__/storage.service.test.ts +0 -358
  218. package/src/services/access-control.service.ts +0 -990
  219. package/src/services/authorization/authorization-registry.ts +0 -66
  220. package/src/services/authorization/types.ts +0 -71
  221. package/src/services/batch-delegation.service.ts +0 -137
  222. package/src/services/crypto.service.ts +0 -302
  223. package/src/services/errors.ts +0 -76
  224. package/src/services/index.ts +0 -18
  225. package/src/services/oauth-config.service.d.ts +0 -53
  226. package/src/services/oauth-config.service.d.ts.map +0 -1
  227. package/src/services/oauth-config.service.js.map +0 -1
  228. package/src/services/oauth-config.service.ts +0 -192
  229. package/src/services/oauth-provider-registry.d.ts +0 -57
  230. package/src/services/oauth-provider-registry.d.ts.map +0 -1
  231. package/src/services/oauth-provider-registry.js.map +0 -1
  232. package/src/services/oauth-provider-registry.ts +0 -141
  233. package/src/services/oauth-service.ts +0 -544
  234. package/src/services/oauth-token-retrieval.service.ts +0 -245
  235. package/src/services/proof-verifier.ts +0 -478
  236. package/src/services/provider-resolver.d.ts +0 -48
  237. package/src/services/provider-resolver.d.ts.map +0 -1
  238. package/src/services/provider-resolver.js.map +0 -1
  239. package/src/services/provider-resolver.ts +0 -146
  240. package/src/services/provider-validator.ts +0 -170
  241. package/src/services/session-registration.service.ts +0 -251
  242. package/src/services/storage.service.ts +0 -566
  243. package/src/services/tool-context-builder.ts +0 -237
  244. package/src/services/tool-protection.service.ts +0 -1070
  245. package/src/types/oauth-required-error.ts +0 -63
  246. package/src/types/tool-protection.ts +0 -155
  247. package/src/utils/__tests__/did-helpers.test.ts +0 -156
  248. package/src/utils/base58.ts +0 -109
  249. package/src/utils/base64.ts +0 -148
  250. package/src/utils/cors.ts +0 -83
  251. package/src/utils/did-helpers.ts +0 -210
  252. package/src/utils/index.ts +0 -8
  253. package/src/utils/storage-keys.ts +0 -278
  254. package/tsconfig.json +0 -21
  255. package/vitest.config.ts +0 -56
@@ -1,213 +0,0 @@
1
- /**
2
- * Provider Resolver Tests
3
- *
4
- * @package @kya-os/mcp-i-core
5
- */
6
-
7
- import { describe, it, expect, beforeEach, vi } from "vitest";
8
- import { ProviderResolver } from "../provider-resolver.js";
9
- import { OAuthProviderRegistry } from "../oauth-provider-registry.js";
10
- import { OAuthConfigService } from "../oauth-config.service.js";
11
- import type { ToolProtection } from "@kya-os/contracts/tool-protection";
12
- import type { OAuthConfig } from "@kya-os/contracts/config";
13
-
14
- describe("ProviderResolver", () => {
15
- let mockConfigService: OAuthConfigService;
16
- let mockRegistry: OAuthProviderRegistry;
17
- let resolver: ProviderResolver;
18
-
19
- const mockOAuthConfig: OAuthConfig = {
20
- providers: {
21
- github: {
22
- clientId: "github_client_id",
23
- authorizationUrl: "https://github.com/login/oauth/authorize",
24
- tokenUrl: "https://github.com/login/oauth/access_token",
25
- supportsPKCE: true,
26
- requiresClientSecret: false,
27
- },
28
- google: {
29
- clientId: "google_client_id",
30
- authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
31
- tokenUrl: "https://oauth2.googleapis.com/token",
32
- supportsPKCE: true,
33
- requiresClientSecret: false,
34
- },
35
- },
36
- };
37
-
38
- beforeEach(() => {
39
- mockConfigService = {
40
- getOAuthConfig: vi.fn().mockResolvedValue(mockOAuthConfig),
41
- } as any;
42
-
43
- mockRegistry = {
44
- hasProvider: vi.fn(),
45
- getAllProviders: vi.fn().mockReturnValue([]),
46
- getProviderNames: vi.fn().mockReturnValue([]),
47
- loadFromAgentShield: vi.fn().mockResolvedValue(undefined),
48
- getConfiguredProvider: vi.fn().mockReturnValue(null), // New method for configuredProvider
49
- } as any;
50
-
51
- resolver = new ProviderResolver(mockRegistry, mockConfigService);
52
- });
53
-
54
- describe("resolveProvider - Priority 1: Tool-specific provider", () => {
55
- it("should return tool-specific oauthProvider when specified", async () => {
56
- const toolProtection: ToolProtection = {
57
- requiresDelegation: true,
58
- requiredScopes: ["repo:read"],
59
- oauthProvider: "github",
60
- };
61
-
62
- (mockRegistry.hasProvider as any).mockReturnValue(true);
63
-
64
- const provider = await resolver.resolveProvider(
65
- toolProtection,
66
- "test-project"
67
- );
68
-
69
- expect(provider).toBe("github");
70
- expect(mockRegistry.hasProvider).toHaveBeenCalledWith("github");
71
- });
72
-
73
- it("should throw error if tool-specific provider not configured", async () => {
74
- const toolProtection: ToolProtection = {
75
- requiresDelegation: true,
76
- requiredScopes: ["repo:read"],
77
- oauthProvider: "nonexistent",
78
- };
79
-
80
- (mockRegistry.hasProvider as any).mockReturnValue(false);
81
-
82
- await expect(
83
- resolver.resolveProvider(toolProtection, "test-project")
84
- ).rejects.toThrow(/not configured for project/);
85
- });
86
- });
87
-
88
- describe("resolveProvider - Priority 2: Scope inference", () => {
89
- it("should infer provider from github scope prefix", async () => {
90
- const toolProtection: ToolProtection = {
91
- requiresDelegation: true,
92
- requiredScopes: ["github:repo:read"],
93
- };
94
-
95
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => {
96
- return name === "github";
97
- });
98
-
99
- const provider = await resolver.resolveProvider(
100
- toolProtection,
101
- "test-project"
102
- );
103
-
104
- expect(provider).toBe("github");
105
- });
106
-
107
- it("should infer provider from gmail scope prefix (maps to google)", async () => {
108
- const toolProtection: ToolProtection = {
109
- requiresDelegation: true,
110
- requiredScopes: ["gmail:read"],
111
- };
112
-
113
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => {
114
- return name === "google";
115
- });
116
-
117
- const provider = await resolver.resolveProvider(
118
- toolProtection,
119
- "test-project"
120
- );
121
-
122
- expect(provider).toBe("google");
123
- });
124
-
125
- it("should fall back to configuredProvider for ambiguous scopes", async () => {
126
- const toolProtection: ToolProtection = {
127
- requiresDelegation: true,
128
- requiredScopes: ["github:read", "google:read"],
129
- };
130
-
131
- // Ambiguous scopes - both infer different providers
132
- // Should fall through to Priority 3 (configuredProvider)
133
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => name === "github");
134
- (mockRegistry.getConfiguredProvider as any).mockReturnValue("github");
135
-
136
- const provider = await resolver.resolveProvider(
137
- toolProtection,
138
- "test-project"
139
- );
140
-
141
- // Falls back to configuredProvider
142
- expect(provider).toBe("github");
143
- });
144
- });
145
-
146
- describe("resolveProvider - Priority 3: Project-configured provider", () => {
147
- it("should use configuredProvider as fallback", async () => {
148
- const toolProtection: ToolProtection = {
149
- requiresDelegation: true,
150
- requiredScopes: ["custom:scope"],
151
- };
152
-
153
- // configuredProvider is github
154
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => name === "github");
155
- (mockRegistry.getConfiguredProvider as any).mockReturnValue("github");
156
-
157
- const consoleSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
158
-
159
- const provider = await resolver.resolveProvider(
160
- toolProtection,
161
- "test-project"
162
- );
163
-
164
- expect(provider).toBe("github");
165
- expect(consoleSpy).toHaveBeenCalledWith(
166
- expect.stringContaining("project-configured provider")
167
- );
168
-
169
- consoleSpy.mockRestore();
170
- });
171
-
172
- it("should log warning when using configuredProvider fallback", async () => {
173
- const toolProtection: ToolProtection = {
174
- requiresDelegation: true,
175
- requiredScopes: [],
176
- };
177
-
178
- // configuredProvider is github
179
- (mockRegistry.hasProvider as any).mockImplementation((name: string) => name === "github");
180
- (mockRegistry.getConfiguredProvider as any).mockReturnValue("github");
181
-
182
- const consoleSpy = vi.spyOn(console, "warn").mockImplementation(() => {});
183
-
184
- await resolver.resolveProvider(toolProtection, "test-project");
185
-
186
- expect(consoleSpy).toHaveBeenCalledWith(
187
- expect.stringContaining("Consider explicitly setting oauthProvider")
188
- );
189
-
190
- consoleSpy.mockRestore();
191
- });
192
- });
193
-
194
- describe("resolveProvider - Priority 4: Error if no provider", () => {
195
- it("should throw error if no provider is configured", async () => {
196
- const toolProtection: ToolProtection = {
197
- requiresDelegation: true,
198
- requiredScopes: [],
199
- };
200
-
201
- // No configuredProvider set
202
- (mockRegistry.hasProvider as any).mockReturnValue(false);
203
- (mockRegistry.getConfiguredProvider as any).mockReturnValue(null);
204
- (mockRegistry.getAllProviders as any).mockReturnValue([]);
205
- (mockRegistry.getProviderNames as any).mockReturnValue([]);
206
-
207
- await expect(
208
- resolver.resolveProvider(toolProtection, "test-project")
209
- ).rejects.toThrow(/no provider is configured/);
210
- });
211
- });
212
- });
213
-
@@ -1,358 +0,0 @@
1
- /**
2
- * Unit Tests for StorageService
3
- *
4
- * Comprehensive test coverage for storage service factory and key helpers.
5
- * Tests provider selection, key formatting, and migration utilities.
6
- */
7
-
8
- import { describe, it, expect, vi } from 'vitest';
9
- import {
10
- createStorageProviders,
11
- StorageKeyHelpers,
12
- migrateLegacyKeys,
13
- type StorageServiceConfig,
14
- } from '../storage.service.js';
15
- import {
16
- MemoryStorageProvider,
17
- MemoryNonceCacheProvider,
18
- } from '../../providers/memory.js';
19
-
20
- describe('StorageService', () => {
21
- describe('createStorageProviders', () => {
22
- it('should use memory provider when no external storage configured', async () => {
23
- const config: StorageServiceConfig = {
24
- fallbackToMemory: true,
25
- };
26
-
27
- const providers = await createStorageProviders(config);
28
-
29
- expect(providers.storageProvider).toBeInstanceOf(MemoryStorageProvider);
30
- expect(providers.nonceCacheProvider).toBeInstanceOf(
31
- MemoryNonceCacheProvider
32
- );
33
- });
34
-
35
- it('should throw error when fallbackToMemory is false and no storage configured', async () => {
36
- const config: StorageServiceConfig = {
37
- fallbackToMemory: false,
38
- };
39
-
40
- await expect(createStorageProviders(config)).rejects.toThrow(
41
- 'No storage provider configured'
42
- );
43
- });
44
-
45
- it('should prefer Redis over KV when both are configured', async () => {
46
- const mockRedisClient = {
47
- connect: vi.fn().mockResolvedValue(undefined),
48
- ping: vi.fn().mockResolvedValue('PONG'),
49
- get: vi.fn(),
50
- set: vi.fn(),
51
- setEx: vi.fn(),
52
- del: vi.fn(),
53
- exists: vi.fn(),
54
- keys: vi.fn().mockResolvedValue([]),
55
- };
56
-
57
- // Mock redis import
58
- vi.mock('redis', () => ({
59
- createClient: vi.fn().mockReturnValue(mockRedisClient),
60
- }));
61
-
62
- const config: StorageServiceConfig = {
63
- redisUrl: 'redis://localhost:6379',
64
- kvNamespace: {
65
- get: vi.fn(),
66
- put: vi.fn(),
67
- delete: vi.fn(),
68
- list: vi.fn().mockResolvedValue({ keys: [] }),
69
- },
70
- };
71
-
72
- // Note: This test would require actual Redis connection or better mocking
73
- // For now, we'll test the fallback behavior
74
- try {
75
- const providers = await createStorageProviders(config);
76
- expect(providers.storageProvider).toBeDefined();
77
- } catch (error) {
78
- // If Redis connection fails, should fall back to KV or memory
79
- expect(error).toBeDefined();
80
- }
81
- });
82
-
83
- it('should fall back to memory when Redis connection fails', async () => {
84
- const config: StorageServiceConfig = {
85
- redisUrl: 'redis://invalid:6379',
86
- fallbackToMemory: true,
87
- };
88
-
89
- const providers = await createStorageProviders(config);
90
-
91
- // Should fall back to memory
92
- expect(providers.storageProvider).toBeInstanceOf(MemoryStorageProvider);
93
- });
94
-
95
- it('should use KV namespace when provided', async () => {
96
- const mockKV = {
97
- get: vi.fn().mockResolvedValue(null),
98
- put: vi.fn().mockResolvedValue(undefined),
99
- delete: vi.fn().mockResolvedValue(undefined),
100
- list: vi.fn().mockResolvedValue({ keys: [] }),
101
- };
102
-
103
- const config: StorageServiceConfig = {
104
- kvNamespace: mockKV as any,
105
- };
106
-
107
- const providers = await createStorageProviders(config);
108
-
109
- expect(providers.storageProvider).toBeDefined();
110
- expect(providers.nonceCacheProvider).toBeDefined();
111
- });
112
-
113
- it('should use Durable Object state when provided', async () => {
114
- const mockDOState = {
115
- storage: {
116
- get: vi.fn().mockResolvedValue(undefined),
117
- put: vi.fn().mockResolvedValue(undefined),
118
- delete: vi.fn().mockResolvedValue(undefined),
119
- list: vi.fn().mockResolvedValue(new Map()),
120
- },
121
- };
122
-
123
- const config: StorageServiceConfig = {
124
- durableObjectState: mockDOState as any,
125
- };
126
-
127
- const providers = await createStorageProviders(config);
128
-
129
- expect(providers.storageProvider).toBeDefined();
130
- expect(providers.nonceCacheProvider).toBeDefined();
131
- });
132
- });
133
-
134
- describe('StorageKeyHelpers', () => {
135
- describe('buildDelegationKey', () => {
136
- it('should build delegation key with composite format', () => {
137
- const key = StorageKeyHelpers.buildDelegationKey(
138
- 'did:key:user123',
139
- 'did:key:agent456',
140
- 'project-789'
141
- );
142
-
143
- expect(key).toBe('delegation:did:key:user123:did:key:agent456:project-789');
144
- });
145
-
146
- it('should handle special characters in DIDs', () => {
147
- const key = StorageKeyHelpers.buildDelegationKey(
148
- 'did:web:example.com:user',
149
- 'did:key:z123',
150
- 'project-abc'
151
- );
152
-
153
- expect(key).toBe(
154
- 'delegation:did:web:example.com:user:did:key:z123:project-abc'
155
- );
156
- });
157
- });
158
-
159
- describe('buildSessionKey', () => {
160
- it('should build session key', () => {
161
- const key = StorageKeyHelpers.buildSessionKey('session-123');
162
-
163
- expect(key).toBe('session:session-123');
164
- });
165
- });
166
-
167
- describe('buildNonceKey', () => {
168
- it('should build nonce key', () => {
169
- const key = StorageKeyHelpers.buildNonceKey(
170
- 'did:key:z123',
171
- 'nonce-abc'
172
- );
173
-
174
- expect(key).toBe('nonce:did:key:z123:nonce-abc');
175
- });
176
- });
177
-
178
- describe('parseDelegationKey', () => {
179
- it('should parse valid delegation key', () => {
180
- const key = 'delegation:did:key:user123:did:key:agent456:project-789';
181
- const parsed = StorageKeyHelpers.parseDelegationKey(key);
182
-
183
- expect(parsed).toEqual({
184
- userDid: 'did:key:user123',
185
- agentDid: 'did:key:agent456',
186
- projectId: 'project-789',
187
- });
188
- });
189
-
190
- it('should return null for invalid key format', () => {
191
- const invalidKeys = [
192
- 'invalid-key',
193
- 'delegation:incomplete',
194
- 'session:session-123',
195
- 'delegation:one:two', // Not enough parts
196
- ];
197
-
198
- for (const key of invalidKeys) {
199
- expect(StorageKeyHelpers.parseDelegationKey(key)).toBeNull();
200
- }
201
- });
202
-
203
- it('should handle keys with extra colons in DIDs', () => {
204
- const key =
205
- 'delegation:did:web:example.com:user:did:key:z123:project-abc';
206
- const parsed = StorageKeyHelpers.parseDelegationKey(key);
207
-
208
- expect(parsed).toEqual({
209
- userDid: 'did:web:example.com:user',
210
- agentDid: 'did:key:z123',
211
- projectId: 'project-abc',
212
- });
213
- });
214
- });
215
- });
216
-
217
- describe('migrateLegacyKeys', () => {
218
- it('should migrate legacy keys to new format', async () => {
219
- const storageProvider = new MemoryStorageProvider();
220
-
221
- // Set up old format keys
222
- await storageProvider.set('agent:did:key:z123:delegation', 'old-value-1');
223
- await storageProvider.set('agent:did:key:z456:delegation', 'old-value-2');
224
-
225
- // Migration function: convert old format to new format
226
- const migrationFn = (oldKey: string) => {
227
- const match = oldKey.match(/^agent:(.+):delegation$/);
228
- if (!match) return null;
229
-
230
- const agentDid = match[1];
231
- // Convert to new format: delegation:userDid:agentDid:projectId
232
- // For this test, we'll use a placeholder userDid and projectId
233
- return StorageKeyHelpers.buildDelegationKey(
234
- 'did:key:user',
235
- agentDid,
236
- 'default-project'
237
- );
238
- };
239
-
240
- const migrated = await migrateLegacyKeys(
241
- 'agent:',
242
- migrationFn,
243
- storageProvider,
244
- 10
245
- );
246
-
247
- expect(migrated).toBe(2);
248
-
249
- // Verify new keys exist
250
- const newKey1 = StorageKeyHelpers.buildDelegationKey(
251
- 'did:key:user',
252
- 'did:key:z123',
253
- 'default-project'
254
- );
255
- const newKey2 = StorageKeyHelpers.buildDelegationKey(
256
- 'did:key:user',
257
- 'did:key:z456',
258
- 'default-project'
259
- );
260
-
261
- expect(await storageProvider.get(newKey1)).toBe('old-value-1');
262
- expect(await storageProvider.get(newKey2)).toBe('old-value-2');
263
- });
264
-
265
- it('should skip keys that already exist in new format', async () => {
266
- const storageProvider = new MemoryStorageProvider();
267
-
268
- const oldKey = 'agent:did:key:z123:delegation';
269
- const newKey = StorageKeyHelpers.buildDelegationKey(
270
- 'did:key:user',
271
- 'did:key:z123',
272
- 'default-project'
273
- );
274
-
275
- // Set both old and new keys
276
- await storageProvider.set(oldKey, 'old-value');
277
- await storageProvider.set(newKey, 'new-value');
278
-
279
- const migrationFn = (oldKey: string) => {
280
- const match = oldKey.match(/^agent:(.+):delegation$/);
281
- if (!match) return null;
282
- return StorageKeyHelpers.buildDelegationKey(
283
- 'did:key:user',
284
- match[1],
285
- 'default-project'
286
- );
287
- };
288
-
289
- const migrated = await migrateLegacyKeys(
290
- 'agent:',
291
- migrationFn,
292
- storageProvider
293
- );
294
-
295
- // Should skip since new key already exists
296
- expect(migrated).toBe(0);
297
- // Old value should remain unchanged
298
- expect(await storageProvider.get(newKey)).toBe('new-value');
299
- });
300
-
301
- it('should handle migration function returning null', async () => {
302
- const storageProvider = new MemoryStorageProvider();
303
-
304
- await storageProvider.set('agent:did:key:z123:delegation', 'value');
305
- await storageProvider.set('invalid-key', 'value');
306
-
307
- const migrationFn = (oldKey: string) => {
308
- // Only migrate agent: keys, return null for others
309
- if (oldKey.startsWith('agent:')) {
310
- return StorageKeyHelpers.buildDelegationKey(
311
- 'did:key:user',
312
- 'did:key:z123',
313
- 'default-project'
314
- );
315
- }
316
- return null;
317
- };
318
-
319
- const migrated = await migrateLegacyKeys(
320
- '',
321
- migrationFn,
322
- storageProvider
323
- );
324
-
325
- // Should only migrate valid keys
326
- expect(migrated).toBeGreaterThan(0);
327
- });
328
-
329
- it('should handle batch size limit', async () => {
330
- const storageProvider = new MemoryStorageProvider();
331
-
332
- // Create many old keys
333
- for (let i = 0; i < 50; i++) {
334
- await storageProvider.set(`agent:did:key:z${i}:delegation`, `value-${i}`);
335
- }
336
-
337
- const migrationFn = (oldKey: string) => {
338
- const match = oldKey.match(/^agent:did:key:z(\d+):delegation$/);
339
- if (!match) return null;
340
- return StorageKeyHelpers.buildDelegationKey(
341
- 'did:key:user',
342
- `did:key:z${match[1]}`,
343
- 'default-project'
344
- );
345
- };
346
-
347
- const migrated = await migrateLegacyKeys(
348
- 'agent:',
349
- migrationFn,
350
- storageProvider,
351
- 10 // Small batch size
352
- );
353
-
354
- expect(migrated).toBe(50);
355
- });
356
- });
357
- });
358
-