@kya-os/mcp-i-core 1.3.21 → 1.3.23

package/dist/runtime/base.js

@@ -10,6 +10,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.MCPIRuntimeBase = void 0;
 const tool_protection_js_1 = require("../types/tool-protection.js");
 const crypto_service_js_1 = require("../services/crypto.service.js");
+const access_control_service_js_1 = require("../services/access-control.service.js");
 const agentshield_api_1 = require("@kya-os/contracts/agentshield-api");
 const user_did_manager_1 = require("../identity/user-did-manager");
 class MCPIRuntimeBase {
@@ -466,6 +467,64 @@ class MCPIRuntimeBase {
                                 });
                             }
                         }
+                        // ✅ SECURITY: Validate authorization method matches tool requirements
+                        // This prevents stale delegations from working after tool auth method changes
+                        // Only validates when:
+                        // 1. Tool has authorization requirement defined
+                        // 2. Credential contains authorization data (AgentShield API verifier)
+                        const toolAuth = protection.authorization;
+                        const delegationAuth = credential?.authorization;
+                        if (toolAuth && delegationAuth) {
+                            // Both tool and delegation have authorization - compare them
+                            if (!(0, access_control_service_js_1.authorizationMatches)(delegationAuth, toolAuth)) {
+                                const authMismatchReason = `Authorization method mismatch: delegation has ${delegationAuth.type}${delegationAuth.provider ? `:${delegationAuth.provider}` : ""}${delegationAuth.credentialType ? `:${delegationAuth.credentialType}` : ""} but tool requires ${toolAuth.type}${toolAuth.provider ? `:${toolAuth.provider}` : ""}${toolAuth.credentialType ? `:${toolAuth.credentialType}` : ""}`;
+                                if (this.config.audit?.enabled) {
+                                    console.error("[MCP-I] ❌ Authorization method validation FAILED", {
+                                        tool: toolName,
+                                        agentDid: identity.did.slice(0, 20) + "...",
+                                        reason: authMismatchReason,
+                                        delegationAuth,
+                                        toolAuth,
+                                    });
+                                }
+                                // Throw DelegationRequiredError to force re-authorization with correct method
+                                const interceptedCall = {
+                                    toolName,
+                                    args,
+                                    sessionId: session?.id || "unknown",
+                                    timestamp: this.clock.now(),
+                                    expiresAt: this.clock.calculateExpiry(1800),
+                                };
+                                const resumeToken = this.generateResumeToken(interceptedCall);
+                                const consentUrl = this.buildConsentUrl(toolName, protection.requiredScopes, session, resumeToken, undefined, protection.oauthProvider);
+                                this.interceptedCalls.set(resumeToken, interceptedCall);
+                                this.cleanupExpiredInterceptedCalls();
+                                throw new tool_protection_js_1.DelegationRequiredError(toolName, protection.requiredScopes, consentUrl, interceptedCall, resumeToken);
+                            }
+                            // Authorization method validation passed
+                            if (this.config.audit?.enabled) {
+                                console.log("[MCP-I] ✅ Authorization method validation PASSED", {
+                                    tool: toolName,
+                                    agentDid: identity.did.slice(0, 20) + "...",
+                                    authType: delegationAuth.type,
+                                    provider: delegationAuth.provider || "N/A",
+                                });
+                            }
+                        }
+                        else if (toolAuth && !delegationAuth) {
+                            // Tool requires authorization but credential doesn't have auth data
+                            // This can happen with legacy delegations or incomplete credential data
+                            if (this.config.audit?.enabled) {
+                                console.warn("[MCP-I] ⚠️ Tool requires authorization but credential missing auth data", {
+                                    tool: toolName,
+                                    agentDid: identity.did.slice(0, 20) + "...",
+                                    toolAuth,
+                                    note: "Allowing execution - legacy delegation or incomplete data",
+                                });
+                            }
+                            // Allow execution for backward compatibility with legacy delegations
+                            // New delegations from AgentShield will always have authorization data
+                        }
                         // Verification succeeded
                         if (this.config.audit?.enabled) {
                             console.log("[MCP-I] ✅ Delegation verification SUCCEEDED", {

package/dist/services/access-control.service.js

@@ -688,12 +688,18 @@ function authorizationMatches(delegationAuth, toolAuth) {
     // Compare type
     if (delegationAuth.type !== toolAuth.type)
         return false;
-    // For OAuth, compare provider
+    // For OAuth, compare provider (undefined in toolAuth means "any provider is acceptable")
     if (delegationAuth.type === 'oauth') {
+        // If tool doesn't specify a provider, any provider is acceptable
+        if (!toolAuth.provider)
+            return true;
         return delegationAuth.provider === toolAuth.provider;
     }
-    // For credential, compare credentialType
+    // For credential, compare credentialType (undefined in toolAuth means "any type is acceptable")
     if (delegationAuth.type === 'credential') {
+        // If tool doesn't specify a credential type, any type is acceptable
+        if (!toolAuth.credentialType)
+            return true;
         return delegationAuth.credentialType === toolAuth.credentialType;
     }
     // For 'none' type, they match if both are 'none'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i-core",
-  "version": "1.3.21",
+  "version": "1.3.23",
   "description": "Core runtime and types for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -28,7 +28,7 @@
     "prepublishOnly": "npm run build && node ../create-mcpi-app/scripts/validate-no-workspace.js"
   },
   "dependencies": {
-    "@kya-os/contracts": "^1.6.14",
+    "@kya-os/contracts": "^1.6.16",
     "jose": "^5.6.3",
     "json-canonicalize": "^2.0.0",
     "zod": "^3.25.76"