@kya-os/mcp-i 1.7.6 → 1.7.8

package/dist/runtime/auth-handshake.d.ts

@@ -77,9 +77,13 @@ export interface VerifyOrHintsResult {
         user_did: string;
         scopes: string[];
         authorization: {
-            type: "oauth" | "credential" | "none";
+            type: "oauth" | "oauth2" | "password" | "credential" | "webauthn" | "siwe" | "none";
             provider?: string;
             credentialType?: string;
+            rpId?: string;
+            userVerification?: "required" | "preferred" | "discouraged";
+            chainId?: number;
+            domain?: string;
         };
         [key: string]: unknown;
     };

package/dist/runtime/delegation/vc-verifier.d.ts

@@ -11,7 +11,7 @@
  * Related Spec: MCP-I §4.3, W3C VC Data Model 1.1
  * Python Reference: Edge-Delegation-Verification.md
  */
-import { JWK } from 'jose';
+import type { JWK } from 'jose';
 import { DelegationCredential } from '@kya-os/contracts/delegation';
 import { CredentialStatus } from '@kya-os/contracts/vc';
 /**

package/dist/runtime/delegation/vc-verifier.js

@@ -15,7 +15,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DelegationCredentialVerifier = void 0;
 exports.createDelegationVerifier = createDelegationVerifier;
-const jose_1 = require("jose");
 const crypto_1 = require("crypto");
 const json_canonicalize_1 = require("json-canonicalize");
 const delegation_1 = require("@kya-os/contracts/delegation");
@@ -239,15 +238,14 @@ class DelegationCredentialVerifier {
                     durationMs: Date.now() - startTime,
                 };
             }
-            // Verify signature using jose
-            // The signature is over the canonical VC (without proof)
+            // Verify Ed25519 signature
+            // For Ed25519Signature2020:
+            // 1. The signing input is the canonicalized VC (without proofValue)
+            // 2. The proofValue is the base64url-encoded Ed25519 signature
             const vcWithoutProof = { ...vc };
             delete vcWithoutProof.proof;
-            const canonicalVC = (0, json_canonicalize_1.canonicalize)(vcWithoutProof);
-            // Create a hash of the canonical VC (what was actually signed)
-            const digest = (0, crypto_1.createHash)('sha256').update(canonicalVC, 'utf8').digest();
-            // The proof.proofValue is a base64url-encoded signature
-            // We need to verify it
+            // The proof.proofValue is base64url-encoded Ed25519 signature
+            // The proof.jws is an alternative JWS-based signature format
             const proofValue = vc.proof?.proofValue || vc.proof?.jws;
             if (!proofValue) {
                 return {
@@ -256,17 +254,37 @@ class DelegationCredentialVerifier {
                     durationMs: Date.now() - startTime,
                 };
             }
-            // For Ed25519Signature2020, the proofValue is the raw signature
-            // We'll verify it by creating a JWT with the digest and checking the signature
             try {
-                const publicKey = await (0, jose_1.importJWK)(publicKeyJwk, 'EdDSA');
-                // Create a minimal JWT to verify
-                // Note: This is a simplified verification - proper implementation
-                // would verify the exact signature format
-                // For now, we'll just validate the proof structure is correct
-                // A full implementation would:
-                // 1. Reconstruct the signing input
-                // 2. Verify the signature using the public key
+                // For Ed25519Signature2020, we need to:
+                // 1. Canonicalize the VC without proofValue
+                // 2. Canonicalize the proof options
+                // 3. Hash both and concatenate
+                // 4. Verify the signature
+                // Construct proof options (everything in proof except proofValue)
+                const proofOptions = { ...vc.proof };
+                delete proofOptions.proofValue;
+                delete proofOptions.jws;
+                delete proofOptions.signatureValue;
+                // Create signing input: hash(canonicalize(document)) + hash(canonicalize(proofOptions))
+                const canonicalDoc = (0, json_canonicalize_1.canonicalize)(vcWithoutProof);
+                const canonicalProof = (0, json_canonicalize_1.canonicalize)(proofOptions);
+                // For Ed25519Signature2020, signing input is:
+                // SHA-256(canonicalize(proofOptions)) || SHA-256(canonicalize(document))
+                const docHash = (0, crypto_1.createHash)('sha256').update(canonicalDoc, 'utf8').digest();
+                const proofHash = (0, crypto_1.createHash)('sha256').update(canonicalProof, 'utf8').digest();
+                const signingInput = Buffer.concat([proofHash, docHash]);
+                // Decode the base64url signature
+                const signatureBytes = Buffer.from(proofValue, 'base64url');
+                // Use subtle crypto for Ed25519 verification
+                const cryptoKey = await globalThis.crypto.subtle.importKey('jwk', publicKeyJwk, { name: 'Ed25519' }, false, ['verify']);
+                const isValid = await globalThis.crypto.subtle.verify({ name: 'Ed25519' }, cryptoKey, signatureBytes, signingInput);
+                if (!isValid) {
+                    return {
+                        valid: false,
+                        reason: 'Ed25519 signature verification failed',
+                        durationMs: Date.now() - startTime,
+                    };
+                }
                 return {
                     valid: true,
                     durationMs: Date.now() - startTime,

package/dist/runtime/delegation-verifier.d.ts

@@ -27,9 +27,13 @@ export interface VerifyDelegationResult {
         user_did: string;
         scopes: string[];
         authorization: {
-            type: 'oauth' | 'credential' | 'none';
+            type: 'oauth' | 'oauth2' | 'password' | 'credential' | 'webauthn' | 'siwe' | 'none';
             provider?: string;
             credentialType?: string;
+            rpId?: string;
+            userVerification?: 'required' | 'preferred' | 'discouraged';
+            chainId?: number;
+            domain?: string;
         };
         [key: string]: unknown;
     };

package/dist/runtime/tool-protection.d.ts

@@ -23,9 +23,13 @@ export interface ToolProtectionConfig {
     authorizationUrl?: string;
     /** Authorization method required for this tool */
     authorization?: {
-        type: 'oauth' | 'credential' | 'none';
+        type: 'oauth' | 'oauth2' | 'password' | 'credential' | 'webauthn' | 'siwe' | 'none';
         provider?: string;
         credentialType?: string;
+        rpId?: string;
+        userVerification?: 'required' | 'preferred' | 'discouraged';
+        chainId?: number;
+        domain?: string;
     };
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/mcp-i",
-  "version": "1.7.6",
+  "version": "1.7.8",
   "description": "The TypeScript MCP framework with identity features built-in",
   "type": "commonjs",
   "main": "dist/index.js",
@@ -63,8 +63,8 @@
     "model-context-protocol"
   ],
   "dependencies": {
-    "@kya-os/contracts": "^1.7.11",
-    "@kya-os/mcp-i-core": "^1.4.7",
+    "@kya-os/contracts": "^1.7.12",
+    "@kya-os/mcp-i-core": "^1.4.8",
     "@modelcontextprotocol/sdk": "^1.11.4",
     "@swc/core": "^1.11.24",
     "@types/express": "^5.0.1",