@agenticprimitives/delegation 1.0.0-alpha.25 → 1.0.0-alpha.27

package/dist/session-delegation.js

@@ -1,5 +1,5 @@
 import { ROOT_AUTHORITY } from './types.js';
-import { buildCaveat, encodeTimestampTerms, encodeValueTerms } from './caveats.js';
+import { buildCaveat, buildSessionAudienceCaveat, encodeTimestampTerms, encodeValueTerms } from './caveats.js';
 import { hashDelegation } from './hash.js';
 function randomSalt() {
     const b = new Uint8Array(16);
@@ -11,7 +11,7 @@ function randomSalt() {
 }
 /**
  * Build the session-delegation leaf `delegator (principal SA) → sessionKey`, with a timestamp (TTL) +
- * value-0 caveat, UNSIGNED. Returns `{ leaf, digest }`; the caller signs `digest` with the member's live
+ * value-0 + session-audience caveat (spec 408 §2.1), UNSIGNED. Returns `{ leaf, digest }`; the caller signs `digest` with the member's live
  * credential and sets `leaf.signature`. v4 binds to the DELEGATOR (the principal's canonical identity), so
  * the same credential that signs the `member→relying` delegation at connect also authorizes the session key.
  */
@@ -23,6 +23,7 @@ export function buildSessionDelegation(p) {
         caveats: [
             buildCaveat(p.enforcers.timestamp, encodeTimestampTerms(0, p.validUntil)),
             buildCaveat(p.enforcers.value, encodeValueTerms(0n)),
+            buildSessionAudienceCaveat(p.presentsTo),
         ],
         salt: p.salt ?? randomSalt(),
         signature: '0x',

package/dist/session-delegation.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-delegation.js","sourceRoot":"","sources":["../src/session-delegation.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAiB3C,SAAS,UAAU;IACjB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,CAA0B;IAC/D,MAAM,IAAI,GAAe;QACvB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,iBAAiB;QAC7B,SAAS,EAAE,cAAc;QACzB,OAAO,EAAE;YACP,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YACzE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;SACrD;QACD,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,UAAU,EAAE;QAC5B,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;AAChF,CAAC"}
+{"version":3,"file":"session-delegation.js","sourceRoot":"","sources":["../src/session-delegation.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC/G,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAqB3C,SAAS,UAAU;IACjB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,CAA0B;IAC/D,MAAM,IAAI,GAAe;QACvB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,iBAAiB;QAC7B,SAAS,EAAE,cAAc;QACzB,OAAO,EAAE;YACP,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;YACzE,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACpD,0BAA0B,CAAC,CAAC,CAAC,UAAU,CAAC;SACzC;QACD,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,UAAU,EAAE;QAC5B,SAAS,EAAE,IAAI;KAChB,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;AAChF,CAAC"}

package/dist/standing.d.ts

@@ -0,0 +1,93 @@
+import { type Address, type Hex } from 'viem';
+import { type Delegation } from './types.js';
+import { type EnforcerAddresses, type MandateRequirementV1, type SubsetHandlers } from './mandate.js';
+/** The wire as it travels (salt as a decimal string), beside what it allows and where it is hashed. */
+export interface StandingWireV1 {
+    v: 1;
+    /** The template that minted it (`act-as-me`), for the surface that lists it. */
+    template: string;
+    /** The ONE capability it covers. */
+    capability: string;
+    /** The standing delegation: principal → delegate key. Wire-shaped. */
+    wire: Record<string, unknown>;
+    /** Its EIP-712 digest on `chainId` / `delegationManager`. */
+    ref: Hex;
+    /** What it allows, as the capability's handler reads it — the parent requirement a child is bounded by. */
+    requirement: Omit<MandateRequirementV1, 'intentDigest'>;
+    enforcers: EnforcerAddresses;
+    chainId: number;
+    delegationManager: Address;
+    grantedAt: string;
+}
+export interface BuildStandingWireInput {
+    template: string;
+    /** The principal whose authority this is: the person (a capability), or her TREASURY (a payment — assets live only in treasuries). */
+    delegator: Address;
+    /** The delegate KEY (a Worker's custody key, a runtime's key) — never the person, never a session. */
+    delegate: Address;
+    capability: string;
+    /** A payment's bounds. Required for `treasury.payment.execute`; refused for anything else. */
+    payment?: {
+        payee: Address;
+        asset: Address;
+        maxAmount: bigint;
+        maxAggregate?: bigint;
+        maxRedemptionsPerWindow?: number;
+        windowSeconds?: number;
+    };
+    validForSeconds: number;
+    enforcers: EnforcerAddresses;
+    chainId: number;
+    delegationManager: Address;
+    /** Random 128-bit salt; injected so a test can be deterministic. */
+    salt?: bigint;
+    handlers?: SubsetHandlers;
+}
+/** The RAR type a capability is bounded by — the verifier's own map. */
+export declare const standingRequirementType: (capability: string) => string;
+/**
+ * The UNSIGNED standing wire and its digest. The caller signs `ref` with the delegator's custodian (an off-chain
+ * signature, or the approved-digest sentinel after a batch approval) and sets `wire.signature`.
+ */
+export declare function buildStandingWire(i: BuildStandingWireInput): {
+    standing: StandingWireV1;
+    delegation: Delegation;
+};
+/** Attach the signature the custodian produced over `ref` (or the approved-digest sentinel). */
+export declare function signedStandingWire(s: StandingWireV1, signature: Hex): StandingWireV1;
+/** What a parked run said it needs — the `authority_required` reply's three fields. */
+export interface ParkedNeedV1 {
+    requirement: MandateRequirementV1;
+    delegator: Address;
+    delegate: Address;
+}
+export declare function parkedNeedOf(data: unknown): ParkedNeedV1 | null;
+/** Does this standing wire cover the capability a step needs? Type and capability, not yet the bounds. */
+export declare function standingCovers(s: StandingWireV1, capabilityId: string): boolean;
+/** Pick the standing wire for a parked need: the one whose capability matches AND whose principal is the need's delegator. */
+export declare function standingFor(set: readonly StandingWireV1[], need: ParkedNeedV1, capabilityId: string): StandingWireV1 | null;
+export type DerivedChain = {
+    ok: true;
+    presented: Array<Record<string, unknown>>;
+    childRef: Hex;
+    parentRef: Hex;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * The child for THIS intent, from the standing wire, signed with the delegate key — or why not. The need must be an
+ * act OF the wire's principal and ⊆ the wire (the capability's handler judges: for a payment, the amount against
+ * the cap, the payee and the asset against the wire's); its window is clamped into the wire's. Anything else stays
+ * parked for the person — the surface's `grant_link` still works.
+ */
+export declare function deriveFromStanding(s: StandingWireV1, need: ParkedNeedV1, sign: (digest: Hex) => Promise<Hex>, handlers?: SubsetHandlers): Promise<DerivedChain>;
+/** Is this wire STANDING — no intent binding among its caveats? (A mandate always carries one.) */
+export declare function isStandingWire(wire: {
+    caveats?: ReadonlyArray<{
+        enforcer: string;
+        terms: string;
+        args?: string;
+    }>;
+}, digestBindingEnforcer: Address): boolean;
+//# sourceMappingURL=standing.d.ts.map

package/dist/standing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standing.d.ts","sourceRoot":"","sources":["../src/standing.ts"],"names":[],"mappings":"AAeA,OAAO,EAAS,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7D,OAAO,EAAmC,KAAK,iBAAiB,EAAE,KAAK,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAGvI,uGAAuG;AACvG,MAAM,WAAW,cAAc;IAC7B,CAAC,EAAE,CAAC,CAAC;IACL,gFAAgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,6DAA6D;IAC7D,GAAG,EAAE,GAAG,CAAC;IACT,2GAA2G;IAC3G,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IACxD,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,sIAAsI;IACtI,SAAS,EAAE,OAAO,CAAC;IACnB,sGAAsG;IACtG,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjJ,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,eAAgB,MAAM,KAAG,MAA8F,CAAC;AAE5J;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,sBAAsB,GAAG;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,CA+BjH;AAED,gGAAgG;AAChG,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,GAAG,cAAc,CAEpF;AAED,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAAG,WAAW,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AAE1G,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CAK/D;AAED,0GAA0G;AAC1G,wBAAgB,cAAc,CAAC,CAAC,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAE/E;AAED,8HAA8H;AAC9H,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,cAAc,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAG3H;AAED,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,QAAQ,EAAE,GAAG,CAAC;IAAC,SAAS,EAAE,GAAG,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElJ;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAE,cAAwC,GAAG,OAAO,CAAC,YAAY,CAAC,CAoB9L;AAED,mGAAmG;AACnG,wBAAgB,cAAc,CAAC,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,EAAE,qBAAqB,EAAE,OAAO,GAAG,OAAO,CAG7J"}

package/dist/standing.js

@@ -0,0 +1,122 @@
+// STANDING WIRES — one capability, decided once (spec 397 `act-as-me`; the shape spec 400 W2a opened for a runtime's
+// standing grant). A standing wire is a delegation from a principal (a person, or her treasury for a payment) to a
+// DELEGATE KEY, caveated to ONE capability selector and a window — and, for a payment, to one payee, one asset and
+// a cap — with NO intent binding. That absence is what makes it standing: it is a capability, not a mandate
+// (`verifyMandateForStep` refuses it alone, `not-a-mandate`), and nothing acts on it directly.
+//
+// When a run parks `authority_required`, the holder of the delegate key DERIVES the mandate the run asked for: a
+// child of the standing wire bound to exactly that intent (`deriveMandate`, subset-checked by the capability's own
+// handler), signs it with the delegate key, and presents the chain [child, standing]. The harness verifies every
+// link — the standing wire's signature against the principal (ERC-1271 / approved digest), its revocation on chain,
+// the child ⊆ parent, the intent and plan binding — before the step acts. Revoke the standing wire on chain and the
+// next derivation is refused everywhere.
+//
+// What a standing wire is NOT: a session, a bearer, a wildcard (never `A2A_ANY_SKILL`), or a pre-approval of
+// anything but the named capability within the window and the cap. One wire, one capability selector.
+import { toHex } from 'viem';
+import { ROOT_AUTHORITY } from './types.js';
+import { hashDelegation } from './hash.js';
+import { readDigestBindings } from './caveats.js';
+import { deriveMandate, subsetHandlerFor } from './mandate.js';
+import { CAPABILITY_RAR_TYPE, DEFAULT_SUBSET_HANDLERS, PAYMENT_RAR_TYPE } from './mandate-handlers.js';
+/** The RAR type a capability is bounded by — the verifier's own map. */
+export const standingRequirementType = (capability) => (capability === 'treasury.payment.execute' ? PAYMENT_RAR_TYPE : CAPABILITY_RAR_TYPE);
+/**
+ * The UNSIGNED standing wire and its digest. The caller signs `ref` with the delegator's custodian (an off-chain
+ * signature, or the approved-digest sentinel after a batch approval) and sets `wire.signature`.
+ */
+export function buildStandingWire(i) {
+    if (!i.capability.trim())
+        throw new Error('a standing wire names one capability');
+    const type = standingRequirementType(i.capability);
+    if (type === PAYMENT_RAR_TYPE && !i.payment)
+        throw new Error('a standing payment wire needs its bounds: payee, asset, maxAmount');
+    if (type !== PAYMENT_RAR_TYPE && i.payment)
+        throw new Error(`${i.capability} is not a payment — it takes no cap`);
+    if (i.payment && i.payment.maxAmount <= 0n)
+        throw new Error('the cap must be above zero');
+    const h = subsetHandlerFor(type, i.handlers ?? DEFAULT_SUBSET_HANDLERS);
+    if (!h)
+        throw new Error(`no subset handler for ${type}`);
+    const now = Math.floor(Date.now() / 1000);
+    const requirement = {
+        type,
+        // A payment need arrives from the harness with `actions: [capability]` and `locations: [asset]` (the step's
+        // shape), and from a read-back wire as `actions: ['execute']` (the handler's shape). The parent names both, so
+        // `isSubset` holds for either child; the on-chain selectors are the handler's and do not depend on this list.
+        actions: type === PAYMENT_RAR_TYPE ? ['execute', i.capability] : [i.capability],
+        validAfter: now - 60,
+        validUntil: now + i.validForSeconds,
+        ...(i.payment ? { locations: [i.payment.asset.toLowerCase()], limits: {
+                payee: i.payment.payee.toLowerCase(), asset: i.payment.asset.toLowerCase(),
+                maxAmount: i.payment.maxAmount.toString(), maxAggregate: (i.payment.maxAggregate ?? i.payment.maxAmount).toString(),
+                maxRedemptionsPerWindow: i.payment.maxRedemptionsPerWindow ?? 1, windowSeconds: i.payment.windowSeconds ?? 86_400,
+            } } : {}),
+    };
+    const caveats = h.toCaveats(requirement, i.enforcers);
+    const salt = i.salt ?? BigInt(toHex(crypto.getRandomValues(new Uint8Array(16))));
+    const delegation = { delegator: i.delegator, delegate: i.delegate, authority: ROOT_AUTHORITY, caveats, salt, signature: '0x' };
+    const ref = hashDelegation(delegation, i.chainId, i.delegationManager);
+    return {
+        delegation,
+        standing: { v: 1, template: i.template, capability: i.capability, wire: { ...delegation, salt: salt.toString() }, ref, requirement, enforcers: i.enforcers, chainId: i.chainId, delegationManager: i.delegationManager, grantedAt: new Date().toISOString() },
+    };
+}
+/** Attach the signature the custodian produced over `ref` (or the approved-digest sentinel). */
+export function signedStandingWire(s, signature) {
+    return { ...s, wire: { ...s.wire, signature } };
+}
+export function parkedNeedOf(data) {
+    const d = data;
+    if (!d?.requirement || typeof d.requirement !== 'object' || !d.delegator || !d.delegate)
+        return null;
+    if (typeof d.requirement.intentDigest !== 'string' || !Array.isArray(d.requirement.actions))
+        return null;
+    return { requirement: d.requirement, delegator: d.delegator, delegate: d.delegate };
+}
+/** Does this standing wire cover the capability a step needs? Type and capability, not yet the bounds. */
+export function standingCovers(s, capabilityId) {
+    return s.capability === capabilityId && s.requirement.type === standingRequirementType(capabilityId);
+}
+/** Pick the standing wire for a parked need: the one whose capability matches AND whose principal is the need's delegator. */
+export function standingFor(set, need, capabilityId) {
+    const want = need.delegator.toLowerCase();
+    return set.find((s) => standingCovers(s, capabilityId) && String(s.wire.delegator ?? '').toLowerCase() === want && s.requirement.type === need.requirement.type) ?? null;
+}
+/**
+ * The child for THIS intent, from the standing wire, signed with the delegate key — or why not. The need must be an
+ * act OF the wire's principal and ⊆ the wire (the capability's handler judges: for a payment, the amount against
+ * the cap, the payee and the asset against the wire's); its window is clamped into the wire's. Anything else stays
+ * parked for the person — the surface's `grant_link` still works.
+ */
+export async function deriveFromStanding(s, need, sign, handlers = DEFAULT_SUBSET_HANDLERS) {
+    if (String(s.wire.delegator ?? '').toLowerCase() !== need.delegator.toLowerCase())
+        return { ok: false, reason: `the run needs an act of ${need.delegator}; this wire is ${String(s.wire.delegator)}'s` };
+    if (need.requirement.type !== s.requirement.type)
+        return { ok: false, reason: `the run needs a ${need.requirement.type} mandate; this wire is ${s.requirement.type}` };
+    const parent = { ...s.wire, salt: BigInt(String(s.wire.salt)) };
+    const now = Math.floor(Date.now() / 1000);
+    const validAfter = Math.max(need.requirement.validAfter ?? 0, s.requirement.validAfter ?? 0);
+    const validUntil = Math.min(need.requirement.validUntil, s.requirement.validUntil);
+    if (validAfter > now || validUntil <= now)
+        return { ok: false, reason: `the standing wire's window (until ${new Date(s.requirement.validUntil * 1000).toISOString().slice(0, 16)}) does not cover now` };
+    const salt = BigInt(toHex(crypto.getRandomValues(new Uint8Array(16))));
+    const out = deriveMandate({
+        parent,
+        parentRequirement: { ...s.requirement, intentDigest: need.requirement.intentDigest },
+        requirement: { ...need.requirement, validAfter, validUntil },
+        grantee: need.delegate,
+        enforcers: s.enforcers, chainId: s.chainId, delegationManager: s.delegationManager, salt, handlers,
+    });
+    if (!out.ok)
+        return { ok: false, reason: out.reason };
+    const signature = await sign(out.digest);
+    const child = { ...out.delegation, signature, salt: salt.toString() };
+    return { ok: true, presented: [child, s.wire], childRef: out.digest, parentRef: s.ref };
+}
+/** Is this wire STANDING — no intent binding among its caveats? (A mandate always carries one.) */
+export function isStandingWire(wire, digestBindingEnforcer) {
+    const caveats = (wire.caveats ?? []).map((c) => ({ enforcer: c.enforcer, terms: c.terms, args: (c.args ?? '0x') }));
+    return !readDigestBindings(caveats, digestBindingEnforcer).intent;
+}
+//# sourceMappingURL=standing.js.map

package/dist/standing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standing.js","sourceRoot":"","sources":["../src/standing.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,mHAAmH;AACnH,mHAAmH;AACnH,4GAA4G;AAC5G,+FAA+F;AAC/F,EAAE;AACF,iHAAiH;AACjH,mHAAmH;AACnH,iHAAiH;AACjH,oHAAoH;AACpH,oHAAoH;AACpH,yCAAyC;AACzC,EAAE;AACF,6GAA6G;AAC7G,sGAAsG;AACtG,OAAO,EAAE,KAAK,EAA0B,MAAM,MAAM,CAAC;AACrD,OAAO,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAA0E,MAAM,cAAc,CAAC;AACvI,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAuCvG,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,UAAkB,EAAU,EAAE,CAAC,CAAC,UAAU,KAAK,0BAA0B,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAE5J;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAyB;IACzD,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IAClI,IAAI,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,qCAAqC,CAAC,CAAC;IAClH,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC1F,MAAM,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,IAAI,uBAAuB,CAAC,CAAC;IACxE,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,WAAW,GAA+C;QAC9D,IAAI;QACJ,4GAA4G;QAC5G,+GAA+G;QAC/G,8GAA8G;QAC9G,OAAO,EAAE,IAAI,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/E,UAAU,EAAE,GAAG,GAAG,EAAE;QACpB,UAAU,EAAE,GAAG,GAAG,CAAC,CAAC,eAAe;QACnC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE;gBACpE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE;gBAC1E,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;gBACnH,uBAAuB,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,MAAM;aAClH,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACV,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,WAAmC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAe,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC3I,MAAM,GAAG,GAAG,cAAc,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC;IACvE,OAAO;QACL,UAAU;QACV,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,GAAG,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;KAC9P,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,kBAAkB,CAAC,CAAiB,EAAE,SAAc;IAClE,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;AAClD,CAAC;AAKD,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,MAAM,CAAC,GAAG,IAAiG,CAAC;IAC5G,IAAI,CAAC,CAAC,EAAE,WAAW,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrG,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzG,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAoB,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAmB,EAAE,CAAC;AAC5G,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,CAAiB,EAAE,YAAoB;IACpE,OAAO,CAAC,CAAC,UAAU,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,uBAAuB,CAAC,YAAY,CAAC,CAAC;AACvG,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,WAAW,CAAC,GAA8B,EAAE,IAAkB,EAAE,YAAoB;IAClG,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;IAC1C,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;AAC3K,CAAC;AAID;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,CAAiB,EAAE,IAAkB,EAAE,IAAmC,EAAE,WAA2B,uBAAuB;IACrK,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,IAAI,CAAC,SAAS,kBAAkB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACzM,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,IAAI,CAAC,WAAW,CAAC,IAAI,0BAA0B,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;IACvK,MAAM,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAA2B,CAAC;IACzF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACnF,IAAI,UAAU,GAAG,GAAG,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qCAAqC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,EAAE,CAAC;IACzM,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,aAAa,CAAC;QACxB,MAAM;QACN,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY,EAA0B;QAC5G,WAAW,EAAE,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE;QAC5D,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,EAAE,IAAI,EAAE,QAAQ;KACnG,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,EAAE,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;IACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,KAA2C,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;AAChI,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,cAAc,CAAC,IAAqF,EAAE,qBAA8B;IAClJ,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAmB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAQ,EAAE,CAAC,CAAC,CAAC;IAC7I,OAAO,CAAC,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,MAAM,CAAC;AACpE,CAAC"}

package/dist/token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAgBA,OAAO,EAA4B,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AACxE,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACrB,WAAW,EACX,UAAU,EACV,cAAc,EACd,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAMpB,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAkDtE;;;;;;;gBAOgB;AAChB,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAqCpD;AAiDD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EAClG,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,EAC1C,IAAI,CAAC,EAAE;IACL,iEAAiE;IACjE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GACA,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA8EzC;AA0DD,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IACvC;;;;;;;;;OASG;IACH,qBAAqB,CAAC,EAAE;QACtB,mBAAmB,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC9F,CAAC;IACF;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE;QACtB,2BAA2B,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC;YAAE,QAAQ,EAAE,OAAO,CAAC;YAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC3H,CAAC;IACF;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE;QACrB,yBAAyB,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,GAAG,CAAC;YAAC,SAAS,EAAE,GAAG,CAAA;SAAE,GAAG,OAAO,CAAC;YAC1F,KAAK,EAAE,OAAO,CAAC;YACf,QAAQ,EAAE,OAAO,CAAC;YAClB,QAAQ,CAAC,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;SAC/B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IASvB;;;;;;;;;;;;;;OAcG;IACH,mBAAmB,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,WAAW,CAAC,EACR;QAAE,IAAI,EAAE,mBAAmB,CAAA;KAAE,GAC7B;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC;QAAC,gBAAgB,EAAE,GAAG,CAAA;KAAE,CAAC;IAEnE;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAElC;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AA+BD;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,UAAU,GAAG,SAAS,EACzC,iBAAiB,EAAE,OAAO,GACzB,MAAM,GAAG,IAAI,CASf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,GAClB,OAAO,CACN;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,cAAc,CAAA;CAAE,GAClK,WAAW,CACd,CA8fA"}
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../src/token.ts"],"names":[],"mappings":"AAgBA,OAAO,EAA4B,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AACxE,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACrB,WAAW,EACX,UAAU,EACV,cAAc,EACd,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAMpB,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAkDtE;;;;;;;gBAOgB;AAChB,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAqCpD;AAiDD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EAClG,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,EAC1C,IAAI,CAAC,EAAE;IACL,iEAAiE;IACjE,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GACA,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA8EzC;AA0DD,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;;;;OAYG;IACH,kBAAkB,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IACvC;;;;;;;;;OASG;IACH,qBAAqB,CAAC,EAAE;QACtB,mBAAmB,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC9F,CAAC;IACF;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE;QACtB,2BAA2B,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC;YAAE,QAAQ,EAAE,OAAO,CAAC;YAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;KAC3H,CAAC;IACF;;;;;;;;;;;;;OAaG;IACH,oBAAoB,CAAC,EAAE;QACrB,yBAAyB,CAAC,KAAK,EAAE;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,MAAM,EAAE,GAAG,CAAC;YAAC,SAAS,EAAE,GAAG,CAAA;SAAE,GAAG,OAAO,CAAC;YAC1F,KAAK,EAAE,OAAO,CAAC;YACf,QAAQ,EAAE,OAAO,CAAC;YAClB,QAAQ,CAAC,EAAE;gBAAE,MAAM,EAAE,MAAM,CAAA;aAAE,CAAC;SAC/B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IASvB;;;;;;;;;;;;;;OAcG;IACH,mBAAmB,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAE5C;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACH,WAAW,CAAC,EACR;QAAE,IAAI,EAAE,mBAAmB,CAAA;KAAE,GAC7B;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,WAAW,EAAE,GAAG,CAAC;QAAC,gBAAgB,EAAE,GAAG,CAAA;KAAE,CAAC;IAEnE;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;IAElC;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AA+BD;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,UAAU,GAAG,SAAS,EACzC,iBAAiB,EAAE,OAAO,GACzB,MAAM,GAAG,IAAI,CAiBf;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,aAAa,GAClB,OAAO,CACN;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,iBAAiB,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,YAAY,EAAE,cAAc,CAAA;CAAE,GAClK,WAAW,CACd,CAggBA"}

package/dist/token.js

@@ -16,7 +16,7 @@ import { keccak_256 } from '@noble/hashes/sha3.js';
 import { createPublicClient, http } from 'viem';
 import { hashDelegation } from './hash.js';
 import { evaluateCaveats } from './evaluator.js';
-import { DATA_SCOPE_ENFORCER, decodeDataScopeTerms, VAULT_RECORD_SCOPE_ENFORCER, decodeVaultRecordScopeTerms } from './caveats.js';
+import { DATA_SCOPE_ENFORCER, decodeDataScopeTerms, VAULT_RECORD_SCOPE_ENFORCER, decodeVaultRecordScopeTerms, readSessionAudience } from './caveats.js';
 import { verifyUniversalSignature } from './onchain.js';
 import { verifyOffChainQuorum } from './quorum.js';
 import { buildEvent } from '@agenticprimitives/audit';
@@ -323,6 +323,15 @@ export function sessionDelegateBindingError(delegation, sessionDelegation, sessi
     if (sessionDelegation.delegate.toLowerCase() !== sessionKeyAddress.toLowerCase()) {
         return 'session key is not the session-delegation delegate (DEL-001)';
     }
+    // Spec 408 §2.1 (R917-P-2) — THE ROOT'S DELEGATE IS BOUND. The leaf names the delegates this session key
+    // may present the principal's delegations to; a delegation to anyone else is refused, however valid it
+    // is on its own. A leaf that names nobody is refused outright: no knob re-admits the old shape.
+    const audience = readSessionAudience(sessionDelegation.caveats);
+    if (!audience)
+        return 'session-delegation names no audience — a leaf must say which delegates it may present to (spec 408 §2.1)';
+    if (!audience.includes(delegation.delegate.toLowerCase())) {
+        return `session-delegation does not admit presenting to ${delegation.delegate} — the leaf was issued for other delegates (spec 408 §2.1)`;
+    }
     return null;
 }
 /**
@@ -477,66 +486,46 @@ export async function verifyDelegationToken(token, opts) {
                 : null;
         }
     };
-    {
-        // Root delegation revocation (unchanged semantics).
-        const rootReason = await revocationRejection(eip712Hash);
-        if (rootReason)
-            return rejectWith(rootReason, claims.delegation.delegator, eip712Hash);
-        // DEL-002: the session-delegation LEAF (DEL-001 session-key binding) is separately revocable on-chain
-        // (revokeDelegation(leafHash)), but was NEVER checked — so revoking the session-key binding did not
-        // invalidate the token until the ROOT was also revoked. Check the leaf with the SAME fail-closed model
-        // so a revoked (e.g. compromised) session key is rejected as tightly as a revoked root.
-        if (claims.sessionDelegation) {
-            const leafHash = hashDelegation(claims.sessionDelegation, opts.chainId, opts.delegationManager);
-            const leafReason = await revocationRejection(leafHash);
-            if (leafReason)
-                return rejectWith(`session-delegation leaf: ${leafReason}`, claims.delegation.delegator, leafHash);
+    // THE ROOT'S SIGNATURE — one of three surfaces, the same policy. Returns a rejection reason or null.
+    const rootSignatureRejection = async () => {
+        if (opts.chainSignatureReader) {
+            // spec 289 §5 (W3) — main delegator signature through the resilient port.
+            return validateSaSigViaReader(claims.delegation.delegator, eip712Hash, claims.delegation.signature);
         }
-    }
-    if (opts.chainSignatureReader) {
-        // spec 289 §5 (W3) — main delegator signature through the resilient port.
-        const reason = await validateSaSigViaReader(claims.delegation.delegator, eip712Hash, claims.delegation.signature);
-        if (reason)
-            return rejectWith(reason, claims.delegation.delegator, eip712Hash);
-    }
-    else if (validateSaSig) {
-        // spec 270 v4 — one connection-agnostic surface; counterfactual delegators verify via ERC-6492, so
-        // no requireDeployed hard-reject.
-        try {
-            if (!(await validateSaSig(claims.delegation.delegator, eip712Hash, claims.delegation.signature))) {
-                return rejectWith('signature validation failed', claims.delegation.delegator, eip712Hash);
+        if (validateSaSig) {
+            // spec 270 v4 — one connection-agnostic surface; counterfactual delegators verify via ERC-6492, so
+            // no requireDeployed hard-reject.
+            try {
+                if (!(await validateSaSig(claims.delegation.delegator, eip712Hash, claims.delegation.signature))) {
+                    return 'signature validation failed';
+                }
+                return null;
+            }
+            catch (e) {
+                return `signature validation reverted: ${e instanceof Error ? e.message : e}`;
             }
         }
-        catch (e) {
-            return rejectWith(`signature validation reverted: ${e instanceof Error ? e.message : e}`, claims.delegation.delegator, eip712Hash);
-        }
-    }
-    else {
         try {
             const code = await publicClient.getCode({ address: claims.delegation.delegator });
             const isDeployed = !!(code && code !== '0x' && code.length > 2);
             if (!isDeployed) {
                 if (requireDeployed) {
-                    return rejectWith(`delegator smart account ${claims.delegation.delegator} is not deployed — cannot verify ERC-1271. Set verifyDelegationToken opt requireDeployed=false only for explicit counterfactual-demo use cases.`, claims.delegation.delegator, eip712Hash);
-                }
-                // Tolerated: caller opted into the undeployed path explicitly.
-            }
-            else {
-                const magic = (await publicClient.readContract({
-                    address: claims.delegation.delegator,
-                    abi: ACCOUNT_ABI_ERC1271,
-                    functionName: 'isValidSignature',
-                    args: [eip712Hash, claims.delegation.signature],
-                }));
-                if (magic.toLowerCase() !== ERC1271_MAGIC) {
-                    return rejectWith('erc1271 validation failed', claims.delegation.delegator, eip712Hash);
+                    return `delegator smart account ${claims.delegation.delegator} is not deployed — cannot verify ERC-1271. Set verifyDelegationToken opt requireDeployed=false only for explicit counterfactual-demo use cases.`;
                 }
+                return null; // Tolerated: caller opted into the undeployed path explicitly.
             }
+            const magic = (await publicClient.readContract({
+                address: claims.delegation.delegator,
+                abi: ACCOUNT_ABI_ERC1271,
+                functionName: 'isValidSignature',
+                args: [eip712Hash, claims.delegation.signature],
+            }));
+            return magic.toLowerCase() !== ERC1271_MAGIC ? 'erc1271 validation failed' : null;
         }
         catch (e) {
-            return rejectWith(`erc1271 call reverted: ${e instanceof Error ? e.message : e}`, claims.delegation.delegator, eip712Hash);
+            return `erc1271 call reverted: ${e instanceof Error ? e.message : e}`;
         }
-    }
+    };
     // 3.5. DEL-001 (spec 270 v4) — session-key↔identity binding.
     //
     // The full signed `delegation` travels in cleartext inside every token, so a verifier that only
@@ -548,51 +537,78 @@ export async function verifyDelegationToken(token, opts) {
     // an attacker can't forge the SA's authorization of THEIR key. `principal` stays `delegation.delegator`.
     // DEL-001 (ADR-0036): binding is ENFORCED BY DEFAULT — fail-closed. Only an explicit
     // `allowUnboundSessionToken: true` (legacy / non-client-minted path) skips it.
-    if (!opts.allowUnboundSessionToken) {
-        // Chain-free checks: leaf present, delegator-link, delegate === presenting session key.
-        const bindErr = sessionDelegateBindingError(claims.delegation, claims.sessionDelegation, recovered);
-        if (bindErr)
-            return rejectWith(bindErr, claims.delegation.delegator, eip712Hash);
-        const sd = claims.sessionDelegation;
-        // The delegator SA (the principal's canonical identity) actually authorized THIS session key. Validated
-        // via the UniversalSignatureValidator when configured (v4 — connection-agnostic: every credential
-        // strategy passes through one surface), else legacy deployed-ERC-1271.
-        const sdHash = hashDelegation(sd, opts.chainId, opts.delegationManager);
+    //
+    // The chain-free binding checks (leaf present, delegator-link, delegate === presenting session key) are
+    // computed now and JUDGED after the root signature, where they always were; a leaf that fails them has
+    // no signature worth reading.
+    const bindErr = !opts.allowUnboundSessionToken ? sessionDelegateBindingError(claims.delegation, claims.sessionDelegation, recovered) : null;
+    const sd = !opts.allowUnboundSessionToken && !bindErr ? claims.sessionDelegation : null;
+    const sdHash = sd ? hashDelegation(sd, opts.chainId, opts.delegationManager) : null;
+    // The leaf's signature — the delegator SA (the principal's canonical identity) actually authorized THIS
+    // session key. Validated via the UniversalSignatureValidator when configured (v4 — connection-agnostic:
+    // every credential strategy passes through one surface), else legacy deployed-ERC-1271.
+    const leafSignatureRejection = async () => {
+        if (!sd || !sdHash)
+            return null;
         try {
             if (opts.chainSignatureReader) {
                 // spec 289 §5 (W3) — DEL-001 leaf signature through the resilient port.
                 const reason = await validateSaSigViaReader(sd.delegator, sdHash, sd.signature);
-                if (reason)
-                    return rejectWith(`session-delegation ${reason} (DEL-001)`, claims.delegation.delegator, eip712Hash);
+                return reason ? `session-delegation ${reason} (DEL-001)` : null;
             }
-            else if (validateSaSig) {
-                if (!(await validateSaSig(sd.delegator, sdHash, sd.signature))) {
-                    return rejectWith('session-delegation signature validation failed (DEL-001)', claims.delegation.delegator, eip712Hash);
-                }
+            if (validateSaSig) {
+                return (await validateSaSig(sd.delegator, sdHash, sd.signature)) ? null : 'session-delegation signature validation failed (DEL-001)';
             }
-            else {
-                const sdCode = await publicClient.getCode({ address: sd.delegator });
-                if (!sdCode || sdCode === '0x' || sdCode.length <= 2) {
-                    if (requireDeployed) {
-                        return rejectWith('session-delegation delegator SA not deployed — cannot verify ERC-1271 (DEL-001)', claims.delegation.delegator, eip712Hash);
-                    }
-                }
-                else {
-                    const magic = (await publicClient.readContract({
-                        address: sd.delegator,
-                        abi: ACCOUNT_ABI_ERC1271,
-                        functionName: 'isValidSignature',
-                        args: [sdHash, sd.signature],
-                    }));
-                    if (magic.toLowerCase() !== ERC1271_MAGIC) {
-                        return rejectWith('session-delegation erc1271 validation failed (DEL-001)', claims.delegation.delegator, eip712Hash);
-                    }
-                }
+            const sdCode = await publicClient.getCode({ address: sd.delegator });
+            if (!sdCode || sdCode === '0x' || sdCode.length <= 2) {
+                return requireDeployed ? 'session-delegation delegator SA not deployed — cannot verify ERC-1271 (DEL-001)' : null;
             }
+            const magic = (await publicClient.readContract({
+                address: sd.delegator,
+                abi: ACCOUNT_ABI_ERC1271,
+                functionName: 'isValidSignature',
+                args: [sdHash, sd.signature],
+            }));
+            return magic.toLowerCase() !== ERC1271_MAGIC ? 'session-delegation erc1271 validation failed (DEL-001)' : null;
         }
         catch (e) {
-            return rejectWith(`session-delegation signature check reverted: ${e instanceof Error ? e.message : e}`, claims.delegation.delegator, eip712Hash);
+            return `session-delegation signature check reverted: ${e instanceof Error ? e.message : e}`;
         }
+    };
+    // ONE ROUND TRIP, NOT FOUR. Root revocation, leaf revocation (DEL-002: the session-key binding is
+    // separately revocable and was once never checked — a revoked, e.g. compromised, session key is rejected
+    // as tightly as a revoked root), root signature and leaf signature are four independent reads; issued in
+    // series they were the verify's whole latency on every gated tool call — four provider round trips before
+    // a single record byte moved. They are issued together and JUDGED in the order they always were: root
+    // revocation, leaf revocation, root signature, the leaf's binding, leaf signature. A check that is not
+    // first to fail still ran, which it did before too; nothing is skipped and no verdict is weakened.
+    {
+        const leafRevocationHash = claims.sessionDelegation ? hashDelegation(claims.sessionDelegation, opts.chainId, opts.delegationManager) : null;
+        const [rootReason, leafReason, rootSig, leafSig] = await Promise.all([
+            revocationRejection(eip712Hash),
+            leafRevocationHash ? revocationRejection(leafRevocationHash) : Promise.resolve(null),
+            rootSignatureRejection(),
+            leafSignatureRejection(),
+        ]);
+        if (rootReason)
+            return rejectWith(rootReason, claims.delegation.delegator, eip712Hash);
+        if (leafReason)
+            return rejectWith(`session-delegation leaf: ${leafReason}`, claims.delegation.delegator, leafRevocationHash);
+        if (rootSig)
+            return rejectWith(rootSig, claims.delegation.delegator, eip712Hash);
+        if (bindErr)
+            return rejectWith(bindErr, claims.delegation.delegator, eip712Hash);
+        if (leafSig)
+            return rejectWith(leafSig, claims.delegation.delegator, eip712Hash);
+    }
+    if (sd) {
+        // Spec 408 §2.1 — THE LEAF'S OWN CAVEATS ARE JUDGED, strictly: its window (an expired leaf is refused as a
+        // leaf, not discovered as a root), its value (a token presentation moves nothing: 0), its audience
+        // (shape here; membership above). Before this, the leaf's caveats were never read.
+        const leafVerdicts = evaluateCaveats(sd.caveats, { timestamp: now, value: 0n }, opts.enforcerMap, {});
+        const leafDenied = leafVerdicts.find((v) => !v.allowed);
+        if (leafDenied)
+            return rejectWith(`session-delegation caveat denied: ${leafDenied.reason ?? 'denied'} (DEL-001)`, claims.delegation.delegator, eip712Hash);
     }
     // 4. caveat evaluation
     //