@kya-os/mcp-i-core 1.3.18 → 1.3.19

package/dist/runtime/base.js

@@ -393,9 +393,20 @@ class MCPIRuntimeBase {
                         // This ensures delegations are user-specific and prevents user isolation bypass
                         const credential = verificationResult.data.credential;
                         const delegationUserIdentifier = credential?.user_identifier;
+                        // Also check for user_id field (AgentShield may return DID or ID directly)
+                        const delegationUserId = credential?.user_id;
                         const sessionUserDid = session?.userDid;
                         if (delegationUserIdentifier && sessionUserDid) {
-                            if (delegationUserIdentifier !== sessionUserDid) {
+                            // Check if identifiers match (direct match or via user_id field)
+                            const identifiersMatch = delegationUserIdentifier === sessionUserDid ||
+                                delegationUserId === sessionUserDid;
+                            // Special case: If delegationUserIdentifier is NOT a DID (e.g., email),
+                            // but AgentShield verified the delegation, trust it.
+                            // AgentShield internally links email → DID, so the verification is valid.
+                            // Only fail if BOTH are DIDs and they don't match.
+                            const isDelegationIdentifierDid = delegationUserIdentifier.startsWith("did:");
+                            const shouldEnforceMatch = isDelegationIdentifierDid || delegationUserId;
+                            if (shouldEnforceMatch && !identifiersMatch) {
                                 // User identifier mismatch - potential security issue
                                 const securityError = `Delegation user_identifier mismatch: delegation has "${delegationUserIdentifier.substring(0, 20)}..." but session has "${sessionUserDid.substring(0, 20)}..."`;
                                 if (this.config.audit?.enabled) {
@@ -403,6 +414,9 @@ class MCPIRuntimeBase {
                                         tool: toolName,
                                         agentDid: identity.did.slice(0, 20) + "...",
                                         delegationUserIdentifier: delegationUserIdentifier.substring(0, 20) + "...",
+                                        delegationUserId: delegationUserId
+                                            ? delegationUserId.substring(0, 20) + "..."
+                                            : "N/A",
                                         sessionUserDid: sessionUserDid.substring(0, 20) + "...",
                                         sessionId: session?.id?.substring(0, 20) + "...",
                                         reason: "user_identifier_mismatch",
@@ -425,13 +439,19 @@ class MCPIRuntimeBase {
                                 this.cleanupExpiredInterceptedCalls();
                                 throw new tool_protection_js_1.DelegationRequiredError(toolName, protection.requiredScopes, consentUrl, interceptedCall, resumeToken);
                             }
-                            // User identifier matches - log success for audit
+                            // User identifier validation passed (direct match or trusted AgentShield verification)
                             if (this.config.audit?.enabled) {
                                 console.log("[MCP-I] ✅ User identifier validation PASSED", {
                                     tool: toolName,
                                     agentDid: identity.did.slice(0, 20) + "...",
                                     userDid: sessionUserDid.substring(0, 20) + "...",
                                     sessionId: session?.id?.substring(0, 20) + "...",
+                                    matchType: identifiersMatch
+                                        ? "direct"
+                                        : "trusted_agentshield_verification",
+                                    delegationIdentifierFormat: isDelegationIdentifierDid
+                                        ? "did"
+                                        : "email_or_other",
                                 });
                             }
                         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i-core",
-  "version": "1.3.18",
+  "version": "1.3.19",
   "description": "Core runtime and types for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",