@kya-os/mcp-i-core 1.3.17 → 1.3.19-canary.0

package/dist/runtime/base.d.ts

@@ -116,6 +116,7 @@ export declare class MCPIRuntimeBase {
      * - session_id (not sessionId)
      * - agent_did (not agentDid)
      * - resume_token (not resumeToken)
+     * - agent_name (human-readable agent name for dashboard display)
      *
      * @param toolName - Tool that requires delegation
      * @param scopes - Required scopes for the tool

package/dist/runtime/base.js

@@ -393,9 +393,20 @@ class MCPIRuntimeBase {
                         // This ensures delegations are user-specific and prevents user isolation bypass
                         const credential = verificationResult.data.credential;
                         const delegationUserIdentifier = credential?.user_identifier;
+                        // Also check for user_id field (AgentShield may return DID or ID directly)
+                        const delegationUserId = credential?.user_id;
                         const sessionUserDid = session?.userDid;
                         if (delegationUserIdentifier && sessionUserDid) {
-                            if (delegationUserIdentifier !== sessionUserDid) {
+                            // Check if identifiers match (direct match or via user_id field)
+                            const identifiersMatch = delegationUserIdentifier === sessionUserDid ||
+                                delegationUserId === sessionUserDid;
+                            // Special case: If delegationUserIdentifier is NOT a DID (e.g., email),
+                            // but AgentShield verified the delegation, trust it.
+                            // AgentShield internally links email → DID, so the verification is valid.
+                            // Only fail if BOTH are DIDs and they don't match.
+                            const isDelegationIdentifierDid = delegationUserIdentifier.startsWith("did:");
+                            const shouldEnforceMatch = isDelegationIdentifierDid || delegationUserId;
+                            if (shouldEnforceMatch && !identifiersMatch) {
                                 // User identifier mismatch - potential security issue
                                 const securityError = `Delegation user_identifier mismatch: delegation has "${delegationUserIdentifier.substring(0, 20)}..." but session has "${sessionUserDid.substring(0, 20)}..."`;
                                 if (this.config.audit?.enabled) {
@@ -403,6 +414,9 @@ class MCPIRuntimeBase {
                                         tool: toolName,
                                         agentDid: identity.did.slice(0, 20) + "...",
                                         delegationUserIdentifier: delegationUserIdentifier.substring(0, 20) + "...",
+                                        delegationUserId: delegationUserId
+                                            ? delegationUserId.substring(0, 20) + "..."
+                                            : "N/A",
                                         sessionUserDid: sessionUserDid.substring(0, 20) + "...",
                                         sessionId: session?.id?.substring(0, 20) + "...",
                                         reason: "user_identifier_mismatch",
@@ -425,13 +439,19 @@ class MCPIRuntimeBase {
                                 this.cleanupExpiredInterceptedCalls();
                                 throw new tool_protection_js_1.DelegationRequiredError(toolName, protection.requiredScopes, consentUrl, interceptedCall, resumeToken);
                             }
-                            // User identifier matches - log success for audit
+                            // User identifier validation passed (direct match or trusted AgentShield verification)
                             if (this.config.audit?.enabled) {
                                 console.log("[MCP-I] ✅ User identifier validation PASSED", {
                                     tool: toolName,
                                     agentDid: identity.did.slice(0, 20) + "...",
                                     userDid: sessionUserDid.substring(0, 20) + "...",
                                     sessionId: session?.id?.substring(0, 20) + "...",
+                                    matchType: identifiersMatch
+                                        ? "direct"
+                                        : "trusted_agentshield_verification",
+                                    delegationIdentifierFormat: isDelegationIdentifierDid
+                                        ? "did"
+                                        : "email_or_other",
                                 });
                             }
                         }
@@ -621,6 +641,7 @@ class MCPIRuntimeBase {
      * - session_id (not sessionId)
      * - agent_did (not agentDid)
      * - resume_token (not resumeToken)
+     * - agent_name (human-readable agent name for dashboard display)
      *
      * @param toolName - Tool that requires delegation
      * @param scopes - Required scopes for the tool
@@ -640,6 +661,12 @@ class MCPIRuntimeBase {
             session_id: session?.id || "",
             agent_did: session?.agentDid || "",
         });
+        // Add agent_name for AgentShield dashboard display
+        // Priority: session.agentName > "Unknown Agent"
+        const agentName = session?.agentName;
+        if (agentName) {
+            params.set("agent_name", agentName);
+        }
         // Add project_id if provided (required for AgentShield consent endpoint)
         if (projectId) {
             params.set("project_id", projectId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i-core",
-  "version": "1.3.17",
+  "version": "1.3.19-canary.0",
   "description": "Core runtime and types for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,7 +28,7 @@
     "prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-no-workspace.js"
   },
   "dependencies": {
-    "@kya-os/contracts": "^1.6.10",
+    "@kya-os/contracts": "^1.6.12",
     "jose": "^5.6.3",
     "json-canonicalize": "^2.0.0",
     "zod": "^3.25.76"