@agenticprimitives/delegation 1.0.0-alpha.46 → 1.0.0-alpha.48

package/README.md

@@ -66,8 +66,10 @@ The closest neighbors are MetaMask's Delegation Toolkit and the session-key feat
 
 A person's credential is presented by her agent, never held by it. She signs one standing `credential.present` wire
 (`PRESENTATION_CAPABILITY`) naming the audiences, predicate programs and issuer facets it covers;
-`createPresentationRelease` derives the child mandate for one statement and judges it inside the device key's signing
-callback — a statement for another venue signs nothing. `createEs256EvidenceMinter` and `boundEvidenceFrom` turn that
+`deriveFromStanding` gives the child mandate for one statement, and `createPresentationRelease` — given the credential
+**holder's** address and the presented **chain** (both required) — judges it inside the device key's signing callback:
+her wire is verified on every signature (signed by her, unrevoked, in window), and a statement for another venue, a
+mandate that does not descend from her wire, or a child of a wire she has revoked signs nothing. `createEs256EvidenceMinter` and `boundEvidenceFrom` turn that
 judgement into the bound evidence the key service requires before a P-256 device key signs: the judge attests what it
 judged. The same minter serves an issuing runtime, whose issuance evidence names the digest, the facet and the type.
 
@@ -79,9 +81,9 @@ judged. The same minter serves an issuing runtime, whose issuance evidence names
 record/op matcher), `buildDelegateBindingCaveat`, `buildQuorumCaveat`, `encodeTimestampTerms`, `encodeValueTerms`,
 `encodeAllowedTargetsTerms`, `encodeAllowedMethodsTerms`, `encodeCallDataHashTerms`. Hashing: `hashDelegation`,
 `hashCaveats`, `evaluateCaveats`. Browser: `DelegationClient`. Sessions: `SessionManager`, `SessionStore`. Token:
-`mintDelegationToken`, `verifyDelegationToken` (with `requireQuorumForTier`). On chain: `isRevoked`, `revokeDelegation`.
+`mintDelegationToken`, `verifyDelegationToken` (with `requireQuorumCaveat` + `quorumProof`; an off-chain quorum signs the ACTION — `computeOffChainQuorumPayloadHash`, spec 445). On chain: `isRevoked`, `revokeDelegation`.
 Method authorization: `authorizeMethodDelegation`, `methodSelector`. Mandates: `intentDigest`, `deriveMandate`,
-`readMandate`, `verifyMandateForStep`, `registerSubsetHandler`, `registerDefaultSubsetHandlers`,
+`readMandate`, `verifyMandateForStep`, `assembleAuthorityChain`, `verifyAuthorityChain`, `judgeLinkForStep`, `registerSubsetHandler`, `registerDefaultSubsetHandlers`,
 `buildDigestBindingCaveat`, `readDigestBindings`. Presentation: `PRESENTATION_RAR_TYPE`, `presentationHandler`,
 `buildStandingWire`, `deriveFromStanding`, `presentationIntent`, `createPresentationRelease`,
 `parseAudienceBoundChallenge`, `createEs256EvidenceMinter`, `boundEvidenceFrom`. Types: `Delegation`, `Caveat`,
@@ -91,13 +93,25 @@ Method authorization: `authorizeMethodDelegation`, `methodSelector`. Mandates: `
 **Mandates (spec 350 §2, spec 336 E4).** A mandate is a delegation with a reason: a `DigestBindingEnforcer` caveat binding it
 to an intent digest (JCS, then keccak). `MandateRequirementV1` is RAR-shaped; subset handlers are registered per `type`
 (RFC 9396 defines no universal "narrower than"); `deriveMandate` makes a chain (the child's `authority` is the parent's
-hash); `verifyMandateForStep` is the per-step check, never once at admission. `src/mandate-handlers.ts` ships the
-capability and payment handlers.
+hash); `verifyMandateForStep` is the per-step check of ONE link, never once at admission. `src/mandate-handlers.ts` ships
+the capability and payment handlers.
+
+**The chain is judged whole (spec 383, spec 445 §1.1 / §3.1).** `deriveMandate`'s subset check is the honest minter's early
+refusal; the holder of a parent's delegate key can sign a child without it. So `verifyAuthorityChain({ leaf, presented,
+step, requirementType, principal, … })` judges the same step against **every** link: the shape is the contract's (one
+root, and it is last — `assembleAuthorityChain`, `presentedAs: 'chain'` for an ordered array bound for the chain); the
+root delegator is `principal`, the party whose authority the step needs (`chain-root-not-principal`); each child is ⊆ its
+parent by the type's handler (`chain-not-attenuated`); each parent's caveats admit the step, strictly — a caveat nobody
+can judge off chain refuses a step that does not redeem (`chain-link-denies-step`); every parent is live
+(`chain-link-dead`). Run it WITH `verifyMandateForStep`; a child judged alone has only been asked what it allows itself.
 
 **Delegated presentation (spec 305 W2, zkID Z2).** `credential.present` bounds which verifiers, which predicate programs (by
 digest) and which issuer facets a delegate key may cause the person's P-256 device key to sign a `Show` challenge for, through
 the `PRESENTATION_SCOPE_ENFORCER` sentinel judged off chain. `deriveFromStanding` gives the child for one statement;
-`createPresentationRelease` is the only road to the device signature: it runs `verifyMandateForStep` per signature, requires
+`createPresentationRelease` is the only road to the device signature. Per signature, with nothing cached, it runs
+`verifyAuthorityChain` over the presented chain — the root granted by the credential's `holder`, signed by her, unrevoked, in
+window; the audience, predicate program and issuer facet within EVERY link's scope; a link with no presentation scope
+refused — then `verifyMandateForStep` on the mandate (spec 445 §3.2). It requires
 the challenge (`<scheme>:<audience>:<nonce>`) to be bound to the audience the mandate covers, and with an `evidence` port
 attests what it judged (digest · venue · predicate program · actor) as the key's sign context. Issuance evidence (spec 444)
 is minted by the issuing runtime's own key with the same minter. The port of smart-agent's `SessionGrantV1` +

package/dist/authority-chain.d.ts

@@ -1,7 +1,7 @@
 import type { Address, Hex } from 'viem';
 import { type Delegation } from './types.js';
 import { type MethodAuthorizationChecks } from './method-authorization.js';
-import type { EnforcerAddresses } from './mandate.js';
+import { type EnforcerAddresses, type MandateStep, type SubsetHandlers, type VersionBindingV1 } from './mandate.js';
 export interface AuthorityChainLinkV1 {
     /** The link's delegation digest (`hashDelegation`) — the receipt's reference for it. */
     ref: Hex;
@@ -22,9 +22,20 @@ export interface AuthorityChainV1 {
     /** keccak over the link refs, leaf → root: one digest a reader can cite for the whole chain. */
     chainDigest: Hex;
 }
+export type AuthorityChainFailureCode = 'chain-empty' | 'chain-parent-missing' | 'chain-broken' | 'chain-cycle' | 'chain-too-deep' | 'chain-link-dead'
+/** Spec 445 §1.1 — a ROOT_AUTHORITY link somewhere other than the end of an ordered chain (the H-1 splice). */
+ | 'chain-root-not-terminal'
+/** Spec 445 §3.1 — a child is not ⊆ its parent (the type's own `isSubset`), or carries no readable bound where its parent does. */
+ | 'chain-not-attenuated'
+/** Spec 445 §3.1 — the step is outside a PARENT link: one of its caveats denies it, or no off-chain judge can answer it. */
+ | 'chain-link-denies-step'
+/** Spec 445 §3.1 (AUTH-3) — the chain's root delegator is not the party whose authority the step needs. */
+ | 'chain-root-not-principal'
+/** Spec 445 / generation 4 / DLG-2 — the step's call target is the chain's ROOT delegator (`SelfTargetedRedemption`). */
+ | 'self-target';
 export type AuthorityChainFailure = {
     ok: false;
-    code: 'chain-parent-missing' | 'chain-broken' | 'chain-cycle' | 'chain-too-deep' | 'chain-link-dead';
+    code: AuthorityChainFailureCode;
     reason: string;
 };
 export type AssembleAuthorityChainResult = {
@@ -33,7 +44,26 @@ export type AssembleAuthorityChainResult = {
     delegations: Delegation[];
 } | AuthorityChainFailure;
 export declare const AUTHORITY_CHAIN_MAX_DEPTH = 4;
-/** Assemble the chain from the leaf up through what was presented. Structural only — no chain reads. */
+/**
+ * Assemble the chain from the leaf up through what was presented. Structural only — no chain reads.
+ *
+ * THE SHAPE (spec 445 §1.1, the off-chain half of H-1) is the one the amended
+ * `DelegationManager._validateDelegation` accepts, and no other: every link except the last names the NEXT
+ * link's hash as its `authority`; the LAST link's `authority` is `ROOT_AUTHORITY`; a root anywhere else, a
+ * chain that stops short of a root, and a cycle are refused.
+ *
+ * `presented` is read one of two ways, and the caller says which:
+ *   • `'bag'` (default) — every wire a run presented, in no order. The chain is WALKED from the leaf by hash,
+ *     so the result is linked hash-to-hash and ends in the first root reached, by construction; wires that are
+ *     not on that walk are not part of the chain and lend it nothing. The H-1 splice presented as a bag
+ *     (`[M→T root, Alice→M root]`, leaf `M→T`) assembles to a chain of ONE whose root is M — never Alice — and
+ *     `delegations` is that one link.
+ *   • `'chain'` — `presented` IS the ordered array as it would be handed to `redeemDelegations` (leaf first,
+ *     root last). Then every element must be a link, in position: the splice is refused
+ *     (`chain-root-not-terminal`), because the contract before generation 4 would run it against the LAST
+ *     element's delegator. ANY CALLER THAT FORWARDS A PRESENTED ARRAY TO THE CHAIN uses this mode, or redeems
+ *     the `delegations` this returns — never the array it was handed.
+ */
 export declare function assembleAuthorityChain(input: {
     leaf: Delegation;
     /** Every wire the caller presented (the leaf may be among them). */
@@ -42,17 +72,57 @@ export declare function assembleAuthorityChain(input: {
      *  function, so assembly and verification never disagree on what a link is called. */
     digestOf: (d: Delegation) => Hex;
     maxDepth?: number;
+    /** How `presented` is read — see above. Default `'bag'`. */
+    presentedAs?: 'bag' | 'chain';
 }): AssembleAuthorityChainResult;
-/** Assemble AND verify every PARENT link as live — signed by its delegator, unrevoked, in window. The leaf
- *  is the mandate `verifyMandateForStep` judges in full; this proves the authority it claims to descend from. */
-export declare function verifyAuthorityChain(input: {
+export interface VerifyAuthorityChainInput {
     leaf: Delegation;
     presented: readonly Delegation[];
+    /** How `presented` is read (`assembleAuthorityChain`). Default `'bag'`. */
+    presentedAs?: 'bag' | 'chain';
     enforcers: EnforcerAddresses;
     checks: MethodAuthorizationChecks;
     now: number;
     maxDepth?: number;
-}): Promise<{
+    /** Spec 445 §3.1 — THE STEP every link is judged against: the same one `verifyMandateForStep` judges the leaf against. */
+    step: MandateStep;
+    /** The RAR type the step requires — selects the handler that compares child to parent and the step to each. */
+    requirementType: string;
+    /** Spec 445 §3.1 (AUTH-3) — THE PARTY WHOSE AUTHORITY THE STEP NEEDS (the payer, the organization acted for,
+     *  the credential's holder). The chain's ROOT delegator must be this address. Required: a verifier that is
+     *  not told whose authority is needed can only answer "somebody signed", which is not the question. */
+    principal: Address;
+    /** The handler set to consult. Defaults to the ambient registry — pass it explicitly in a bundle. */
+    handlers?: SubsetHandlers;
+    /** Spec 410 §5 — the versions the verifier runs with; the intent digest every link is compared to is recomputed under them. */
+    currentVersions?: VersionBindingV1;
+    /** Refuse unless EVERY link decodes as `requirementType`. For a use whose scope must be stated by every
+     *  grantor (a presentation: every link names its audiences), where "this link says nothing" is not "this
+     *  link allows anything". Default false: a link of another shape is still judged strictly, caveat by caveat. */
+    requireEveryLinkTyped?: boolean;
+}
+/**
+ * Assemble the chain and judge it WHOLE (spec 383, amended by spec 445 §3.1). In order, cheapest first, so a
+ * chain that is refused on its face costs no chain read:
+ *
+ *   1. SHAPE — `assembleAuthorityChain`.
+ *   2. THE ROOT IS THE PRINCIPAL — the root delegator equals `principal`, else `chain-root-not-principal`.
+ *   3. ATTENUATION — for each adjacent pair that carries the step's requirement type,
+ *      `handler.isSubset(child, parent)`, else `chain-not-attenuated`. A standing parent binds no intent, so
+ *      any reason is within it; a child that carries no readable bound under a parent that does is not within it.
+ *   4. THE STEP AGAINST EVERY PARENT — each parent's caveats, STRICTLY, in the same context the leaf is judged
+ *      in (capability selector, target, value, intent / offer / projection / plan digests, payload classes),
+ *      then the handler's limits (amount, payee; audience, predicate, issuer), else `chain-link-denies-step`.
+ *      A caveat no off-chain judge can answer is a refusal — unless the step redeems on chain, where the
+ *      DelegationManager runs that parent's enforcer itself.
+ *   5. LIVENESS — every parent signed by its delegator, unrevoked, in window, else `chain-link-dead`.
+ *
+ * The LEAF's own liveness, intent binding and limits are `verifyMandateForStep`'s; the two are run together
+ * (the harness composition, the presentation release). Before spec 445 only (1) and (5) existed: a parent was
+ * read with a timestamp-only context, which made every scoping caveat on it inert, and nothing compared a
+ * child to its parent after mint (audit H-7 / AUTH-1).
+ */
+export declare function verifyAuthorityChain(input: VerifyAuthorityChainInput): Promise<{
     ok: true;
     chain: AuthorityChainV1;
 } | AuthorityChainFailure>;

package/dist/authority-chain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authority-chain.d.ts","sourceRoot":"","sources":["../src/authority-chain.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEzC,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAwB,KAAK,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACjG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,GAAG,EAAE,GAAG,CAAC;IACT,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,8CAA8C;IAC9C,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC;CACvB;AAED,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,uGAAuG;IACvG,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wDAAwD;IACxD,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,WAAW,EAAE,GAAG,CAAC;CAClB;AAED,MAAM,MAAM,qBAAqB,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,sBAAsB,GAAG,cAAc,GAAG,aAAa,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACxK,MAAM,MAAM,4BAA4B,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,GAAG,qBAAqB,CAAC;AAGpI,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,wGAAwG;AACxG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,UAAU,CAAC;IACjB,oEAAoE;IACpE,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC;0FACsF;IACtF,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,GAAG,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,4BAA4B,CAwC/B;AAED;iHACiH;AACjH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE;IAChD,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,EAAE,yBAAyB,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,qBAAqB,CAAC,CAczE"}
+{"version":3,"file":"authority-chain.d.ts","sourceRoot":"","sources":["../src/authority-chain.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEzC,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAwB,KAAK,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AACjG,OAAO,EAEL,KAAK,iBAAiB,EAA6B,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAChH,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,oBAAoB;IACnC,wFAAwF;IACxF,GAAG,EAAE,GAAG,CAAC;IACT,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,8CAA8C;IAC9C,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC;CACvB;AAED,+FAA+F;AAC/F,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAC9B,uGAAuG;IACvG,kBAAkB,EAAE,OAAO,CAAC;IAC5B,wDAAwD;IACxD,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,WAAW,EAAE,GAAG,CAAC;CAClB;AAED,MAAM,MAAM,yBAAyB,GACjC,aAAa,GAAG,sBAAsB,GAAG,cAAc,GAAG,aAAa,GAAG,gBAAgB,GAAG,iBAAiB;AAChH,+GAA+G;GAC7G,yBAAyB;AAC3B,mIAAmI;GACjI,sBAAsB;AACxB,4HAA4H;GAC1H,wBAAwB;AAC1B,2GAA2G;GACzG,0BAA0B;AAC5B,yHAAyH;GACvH,aAAa,CAAC;AAClB,MAAM,MAAM,qBAAqB,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,yBAAyB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACnG,MAAM,MAAM,4BAA4B,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,GAAG,qBAAqB,CAAC;AAKpI,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,UAAU,CAAC;IACjB,oEAAoE;IACpE,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC;0FACsF;IACtF,QAAQ,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,GAAG,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;CAC/B,GAAG,4BAA4B,CAiE/B;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;IACjC,2EAA2E;IAC3E,WAAW,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;IAC9B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,EAAE,yBAAyB,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0HAA0H;IAC1H,IAAI,EAAE,WAAW,CAAC;IAClB,+GAA+G;IAC/G,eAAe,EAAE,MAAM,CAAC;IACxB;;2GAEuG;IACvG,SAAS,EAAE,OAAO,CAAC;IACnB,qGAAqG;IACrG,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,+HAA+H;IAC/H,eAAe,CAAC,EAAE,gBAAgB,CAAC;IACnC;;oHAEgH;IAChH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAA;CAAE,GAAG,qBAAqB,CAAC,CA0DnJ"}

package/dist/authority-chain.js

@@ -1,12 +1,65 @@
 import { keccak256, toBytes } from 'viem';
 import { ROOT_AUTHORITY } from './types.js';
 import { verifyLiveDelegation } from './method-authorization.js';
+import { judgeLinkForStep, readGrant, stepIntentDigest, stepTarget, subsetHandlerFor, isSelfTargetedRedemption, } from './mandate.js';
 const lc = (s) => s.toLowerCase();
+const short = (h) => `${h.slice(0, 12)}…`;
+const isRoot = (d) => lc(String(d.authority)) === lc(ROOT_AUTHORITY);
 export const AUTHORITY_CHAIN_MAX_DEPTH = 4;
-/** Assemble the chain from the leaf up through what was presented. Structural only — no chain reads. */
+/**
+ * Assemble the chain from the leaf up through what was presented. Structural only — no chain reads.
+ *
+ * THE SHAPE (spec 445 §1.1, the off-chain half of H-1) is the one the amended
+ * `DelegationManager._validateDelegation` accepts, and no other: every link except the last names the NEXT
+ * link's hash as its `authority`; the LAST link's `authority` is `ROOT_AUTHORITY`; a root anywhere else, a
+ * chain that stops short of a root, and a cycle are refused.
+ *
+ * `presented` is read one of two ways, and the caller says which:
+ *   • `'bag'` (default) — every wire a run presented, in no order. The chain is WALKED from the leaf by hash,
+ *     so the result is linked hash-to-hash and ends in the first root reached, by construction; wires that are
+ *     not on that walk are not part of the chain and lend it nothing. The H-1 splice presented as a bag
+ *     (`[M→T root, Alice→M root]`, leaf `M→T`) assembles to a chain of ONE whose root is M — never Alice — and
+ *     `delegations` is that one link.
+ *   • `'chain'` — `presented` IS the ordered array as it would be handed to `redeemDelegations` (leaf first,
+ *     root last). Then every element must be a link, in position: the splice is refused
+ *     (`chain-root-not-terminal`), because the contract before generation 4 would run it against the LAST
+ *     element's delegator. ANY CALLER THAT FORWARDS A PRESENTED ARRAY TO THE CHAIN uses this mode, or redeems
+ *     the `delegations` this returns — never the array it was handed.
+ */
 export function assembleAuthorityChain(input) {
     const maxDepth = input.maxDepth ?? AUTHORITY_CHAIN_MAX_DEPTH;
     const digestOf = input.digestOf;
+    if (input.presentedAs === 'chain') {
+        // POSITIONAL, like the contract: link i's authority is hash(link i+1); the last is root.
+        const arr = input.presented;
+        if (arr.length === 0)
+            return { ok: false, code: 'chain-empty', reason: 'an empty chain is not authority' };
+        if (lc(digestOf(arr[0])) !== lc(digestOf(input.leaf)))
+            return { ok: false, code: 'chain-broken', reason: 'the first link of an ordered chain is its leaf, and the leaf named is another wire' };
+        if (arr.length > maxDepth)
+            return { ok: false, code: 'chain-too-deep', reason: `the chain is deeper than ${maxDepth} links` };
+        const seenAt = new Set();
+        for (let i = 0; i < arr.length; i++) {
+            const d = arr[i];
+            const ref = digestOf(d);
+            const last = i === arr.length - 1;
+            if (seenAt.has(lc(ref)))
+                return { ok: false, code: 'chain-cycle', reason: `the chain cycles at ${short(ref)}` };
+            seenAt.add(lc(ref));
+            if (last) {
+                if (!isRoot(d)) {
+                    return seenAt.has(lc(String(d.authority)))
+                        ? { ok: false, code: 'chain-cycle', reason: `the chain cycles: its last link ${short(ref)} names a link below it as its parent` }
+                        : { ok: false, code: 'chain-parent-missing', reason: `the chain stops at ${short(ref)}, which names a parent ${short(String(d.authority))} that was not presented — a chain ends in a root or it is not a chain` };
+                }
+                break;
+            }
+            if (isRoot(d))
+                return { ok: false, code: 'chain-root-not-terminal', reason: `link ${i + 1} of ${arr.length} (${short(ref)}) is a ROOT grant followed by another link — two grants nobody linked are not a chain (spec 445 §1.1); a root is the last link or the only one` };
+            if (lc(String(d.authority)) !== lc(digestOf(arr[i + 1])))
+                return { ok: false, code: 'chain-broken', reason: `link ${i + 1} of ${arr.length} (${short(ref)}) does not name the next link's hash as its authority` };
+        }
+    }
     const byRef = new Map();
     for (const d of input.presented)
         byRef.set(lc(digestOf(d)), d);
@@ -17,23 +70,25 @@ export function assembleAuthorityChain(input) {
     for (;;) {
         const ref = digestOf(cur);
         if (seen.has(lc(ref)))
-            return { ok: false, code: 'chain-cycle', reason: `the chain cycles at ${ref.slice(0, 12)}…` };
+            return { ok: false, code: 'chain-cycle', reason: `the chain cycles at ${short(ref)}` };
         seen.add(lc(ref));
         if (links.length >= maxDepth)
             return { ok: false, code: 'chain-too-deep', reason: `the chain is deeper than ${maxDepth} links` };
-        const isRoot = lc(String(cur.authority)) === lc(ROOT_AUTHORITY);
-        links.push({ ref, delegator: cur.delegator, delegate: cur.delegate, parentRef: isRoot ? null : cur.authority });
+        const root = isRoot(cur);
+        links.push({ ref, delegator: cur.delegator, delegate: cur.delegate, parentRef: root ? null : cur.authority });
         delegations.push(cur);
-        if (isRoot)
+        // A root ENDS the chain: nothing above it is consulted, so a root can never sit in a non-terminal position
+        // of what this returns.
+        if (root)
             break;
         const parent = byRef.get(lc(String(cur.authority)));
         if (!parent) {
-            return { ok: false, code: 'chain-parent-missing', reason: `${ref.slice(0, 12)}… is a child whose parent ${String(cur.authority).slice(0, 12)}… was not presented — a child alone is not authority; the chain is verified whole or not at all` };
+            return { ok: false, code: 'chain-parent-missing', reason: `${short(ref)} is a child whose parent ${short(String(cur.authority))} was not presented — a child alone is not authority; the chain is verified whole or not at all` };
         }
         // CONTINUITY: a child is minted by the party the parent was granted TO. Anything else is two grants
         // that happen to reference each other, not a chain of attenuation.
         if (lc(parent.delegate) !== lc(cur.delegator)) {
-            return { ok: false, code: 'chain-broken', reason: `${ref.slice(0, 12)}… was minted by ${cur.delegator}, but its parent was granted to ${parent.delegate}` };
+            return { ok: false, code: 'chain-broken', reason: `${short(ref)} was minted by ${cur.delegator}, but its parent was granted to ${parent.delegate}` };
         }
         cur = parent;
     }
@@ -49,22 +104,93 @@ export function assembleAuthorityChain(input) {
         delegations,
     };
 }
-/** Assemble AND verify every PARENT link as live — signed by its delegator, unrevoked, in window. The leaf
- *  is the mandate `verifyMandateForStep` judges in full; this proves the authority it claims to descend from. */
+/**
+ * Assemble the chain and judge it WHOLE (spec 383, amended by spec 445 §3.1). In order, cheapest first, so a
+ * chain that is refused on its face costs no chain read:
+ *
+ *   1. SHAPE — `assembleAuthorityChain`.
+ *   2. THE ROOT IS THE PRINCIPAL — the root delegator equals `principal`, else `chain-root-not-principal`.
+ *   3. ATTENUATION — for each adjacent pair that carries the step's requirement type,
+ *      `handler.isSubset(child, parent)`, else `chain-not-attenuated`. A standing parent binds no intent, so
+ *      any reason is within it; a child that carries no readable bound under a parent that does is not within it.
+ *   4. THE STEP AGAINST EVERY PARENT — each parent's caveats, STRICTLY, in the same context the leaf is judged
+ *      in (capability selector, target, value, intent / offer / projection / plan digests, payload classes),
+ *      then the handler's limits (amount, payee; audience, predicate, issuer), else `chain-link-denies-step`.
+ *      A caveat no off-chain judge can answer is a refusal — unless the step redeems on chain, where the
+ *      DelegationManager runs that parent's enforcer itself.
+ *   5. LIVENESS — every parent signed by its delegator, unrevoked, in window, else `chain-link-dead`.
+ *
+ * The LEAF's own liveness, intent binding and limits are `verifyMandateForStep`'s; the two are run together
+ * (the harness composition, the presentation release). Before spec 445 only (1) and (5) existed: a parent was
+ * read with a timestamp-only context, which made every scoping caveat on it inert, and nothing compared a
+ * child to its parent after mint (audit H-7 / AUTH-1).
+ */
 export async function verifyAuthorityChain(input) {
-    const assembled = assembleAuthorityChain({ leaf: input.leaf, presented: input.presented, digestOf: input.checks.delegationDigest, maxDepth: input.maxDepth });
+    const assembled = assembleAuthorityChain({ leaf: input.leaf, presented: input.presented, digestOf: input.checks.delegationDigest, maxDepth: input.maxDepth, presentedAs: input.presentedAs });
     if (!assembled.ok)
         return assembled;
-    for (let i = 1; i < assembled.delegations.length; i++) {
-        const link = assembled.delegations[i];
-        const child = assembled.delegations[i - 1];
+    const { delegations, chain } = assembled;
+    const n = delegations.length;
+    const where = (i) => `link ${i + 1} of ${n} (${short(chain.links[i].ref)})`;
+    // 2. the root is the principal
+    if (lc(chain.accountabilityRoot) !== lc(input.principal)) {
+        return { ok: false, code: 'chain-root-not-principal', reason: `the step needs the authority of ${input.principal}, and this chain's root was granted by ${chain.accountabilityRoot} — a grant by another party is not that authority, whatever it names` };
+    }
+    // 2b. Spec 445 / DLG-2 — the manager refuses a redemption whose call target is the root delegator; so do we.
+    if (input.step.callTarget && isSelfTargetedRedemption(delegations, input.step.callTarget)) {
+        return { ok: false, code: 'self-target', reason: `the redemption would make the root delegator ${chain.accountabilityRoot} call itself — the DelegationManager refuses a self-targeted redemption (SelfTargetedRedemption)` };
+    }
+    // 3. attenuation, pair by pair
+    const h = subsetHandlerFor(input.requirementType, input.handlers);
+    if (!h)
+        return { ok: false, code: 'chain-not-attenuated', reason: `no subset handler for ${input.requirementType} — a chain nobody can bound is not attenuated` };
+    const grants = delegations.map((d) => readGrant(d, input.requirementType, input.enforcers, input.handlers));
+    if (input.requireEveryLinkTyped) {
+        const untyped = grants.findIndex((g) => g === null);
+        if (untyped >= 0)
+            return { ok: false, code: 'chain-not-attenuated', reason: `${where(untyped)} does not decode as a ${input.requirementType} grant — every link of this chain must state its own scope` };
+    }
+    const NO_REASON = `0x${'00'.repeat(32)}`;
+    for (let i = 1; i < n; i++) {
+        const parent = grants[i];
+        const child = grants[i - 1];
+        if (!parent)
+            continue; // another shape of wire: judged strictly, caveat by caveat, in (4)
+        if (!child)
+            return { ok: false, code: 'chain-not-attenuated', reason: `${where(i - 1)} carries no readable ${input.requirementType} bound, and its parent does — a child that states no bound is not within one` };
+        // A standing parent binds no intent, so the child's reason is within it. A parent that binds one must be
+        // matched exactly (`baseIsSubset`); a child with no reason under a parent with one is wider, and refused.
+        const childReq = { ...child, intentDigest: child.intentDigest ?? NO_REASON };
+        const parentReq = { ...parent, intentDigest: parent.intentDigest ?? childReq.intentDigest };
+        let within = false;
+        try {
+            within = h.isSubset(childReq, parentReq);
+        }
+        catch {
+            within = false;
+        } // unreadable limits bound nothing: refuse
+        if (!within)
+            return { ok: false, code: 'chain-not-attenuated', reason: `${where(i - 1)} is not within its parent ${short(chain.links[i].ref)} (${h.type}) — a delegate cannot grant onward more than it was granted` };
+    }
+    // 4. the step against every parent
+    const target = stepTarget(input.step, input.leaf);
+    const digestOfIntent = stepIntentDigest(input.step, input.currentVersions);
+    for (let i = 1; i < n; i++) {
+        const judged = judgeLinkForStep({
+            link: delegations[i], requirementType: input.requirementType, step: input.step, target, digestOfIntent,
+            enforcers: input.enforcers, now: input.now, handlers: input.handlers, mustBeMandate: false,
+        });
+        if (judged.denial)
+            return { ok: false, code: 'chain-link-denies-step', reason: `${where(i)} does not cover this step: ${judged.denial.code}: ${judged.denial.message}` };
+    }
+    // 5. liveness — the chain reads, last
+    for (let i = 1; i < n; i++) {
         const live = await verifyLiveDelegation({
-            delegation: link, expectedDelegate: child.delegator, enforcers: input.enforcers, checks: input.checks, now: input.now,
+            delegation: delegations[i], expectedDelegate: delegations[i - 1].delegator, enforcers: input.enforcers, checks: input.checks, now: input.now,
         });
-        if (!live.ok) {
-            return { ok: false, code: 'chain-link-dead', reason: `link ${i + 1} of ${assembled.delegations.length} (${assembled.chain.links[i].ref.slice(0, 12)}…) is not live: ${live.reason}` };
-        }
+        if (!live.ok)
+            return { ok: false, code: 'chain-link-dead', reason: `${where(i)} is not live: ${live.reason}` };
     }
-    return { ok: true, chain: assembled.chain };
+    return { ok: true, chain };
 }
 //# sourceMappingURL=authority-chain.js.map

package/dist/authority-chain.js.map

@@ -1 +1 @@
-{"version":3,"file":"authority-chain.js","sourceRoot":"","sources":["../src/authority-chain.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAkC,MAAM,2BAA2B,CAAC;AA4BjG,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C,wGAAwG;AACxG,MAAM,UAAU,sBAAsB,CAAC,KAQtC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,yBAAyB,CAAC;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;IACrB,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,uBAAuB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;QACrH,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClB,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,QAAQ,QAAQ,EAAE,CAAC;QACjI,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC;QAChE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,CAAC,SAAiB,EAAE,CAAC,CAAC;QACzH,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,MAAM;YAAE,MAAM;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iGAAiG,EAAE,CAAC;QAClP,CAAC;QACD,oGAAoG;QACpG,mEAAmE;QACnE,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,GAAG,CAAC,SAAS,mCAAmC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC9J,CAAC;QACD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,OAAO,EAAE,cAAc,EAAE,KAAK;YAC9B,kBAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAY;YACrE,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAY;YAC9C,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW;SACjC;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED;iHACiH;AACjH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAO1C;IACC,MAAM,SAAS,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9J,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC;QACvC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;YACtC,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG;SACtH,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,SAAS,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACzL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"authority-chain.js","sourceRoot":"","sources":["../src/authority-chain.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAmB,MAAM,YAAY,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAkC,MAAM,2BAA2B,CAAC;AACjG,OAAO,EACL,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,UAAU,EAAE,gBAAgB,EAAE,wBAAwB,GAEtG,MAAM,cAAc,CAAC;AAuCtB,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AAC1C,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC;AAClD,MAAM,MAAM,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAUtC;IACC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,yBAAyB,CAAC;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,EAAE,CAAC;QAClC,yFAAyF;QACzF,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QAC3G,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,oFAAoF,EAAE,CAAC;QACjM,IAAI,GAAG,CAAC,MAAM,GAAG,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,QAAQ,QAAQ,EAAE,CAAC;QAC9H,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;YAAC,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAC9E,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,uBAAuB,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YAChH,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACpB,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;oBACf,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;wBACxC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,mCAAmC,KAAK,CAAC,GAAG,CAAC,sCAAsC,EAAE;wBACjI,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,sBAAsB,KAAK,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,uEAAuE,EAAE,CAAC;gBACvN,CAAC;gBACD,MAAM;YACR,CAAC;YACD,IAAI,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,GAAG,CAAC,gJAAgJ,EAAE,CAAC;YAC5Q,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,GAAG,CAAC,uDAAuD,EAAE,CAAC;QACtN,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,WAAW,GAAiB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC;IACrB,SAAS,CAAC;QACR,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,uBAAuB,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QAC9G,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAClB,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,4BAA4B,QAAQ,QAAQ,EAAE,CAAC;QACjI,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,GAAG,CAAC,SAAiB,EAAE,CAAC,CAAC;QACvH,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,2GAA2G;QAC3G,wBAAwB;QACxB,IAAI,IAAI;YAAE,MAAM;QAChB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,4BAA4B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,gGAAgG,EAAE,CAAC;QACpO,CAAC;QACD,oGAAoG;QACpG,mEAAmE;QACnE,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,GAAG,CAAC,SAAS,mCAAmC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACvJ,CAAC;QACD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,OAAO,EAAE,cAAc,EAAE,KAAK;YAC9B,kBAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,SAAS,CAAY;YACrE,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAY;YAC9C,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW;SACjC;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AA6BD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAAgC;IACzE,MAAM,SAAS,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9L,IAAI,CAAC,SAAS,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,SAAS,CAAC;IACzC,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,GAAG,CAAC;IAErF,+BAA+B;IAC/B,IAAI,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,mCAAmC,KAAK,CAAC,SAAS,0CAA0C,KAAK,CAAC,kBAAkB,sEAAsE,EAAE,CAAC;IAC7P,CAAC;IAED,6GAA6G;IAC7G,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,wBAAwB,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,gDAAgD,KAAK,CAAC,kBAAkB,kGAAkG,EAAE,CAAC;IAChO,CAAC;IAED,+BAA+B;IAC/B,MAAM,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,yBAAyB,KAAK,CAAC,eAAe,+CAA+C,EAAE,CAAC;IAClK,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5G,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACpD,IAAI,OAAO,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,yBAAyB,KAAK,CAAC,eAAe,4DAA4D,EAAE,CAAC;IAC5M,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAS,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,SAAS,CAAG,mEAAmE;QAC5F,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,wBAAwB,KAAK,CAAC,eAAe,8EAA8E,EAAE,CAAC;QACnN,yGAAyG;QACzG,0GAA0G;QAC1G,MAAM,QAAQ,GAAG,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,SAAS,EAA0B,CAAC;QACrG,MAAM,SAAS,GAAG,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,QAAQ,CAAC,YAAY,EAA0B,CAAC;QACpH,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC,CAAG,0CAA0C;QACxH,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,6BAA6B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,6DAA6D,EAAE,CAAC;IAC1N,CAAC;IAED,mCAAmC;IACnC,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAC3E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,gBAAgB,CAAC;YAC9B,IAAI,EAAE,WAAW,CAAC,CAAC,CAAE,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc;YACvG,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK;SAC3F,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,8BAA8B,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3K,CAAC;IAED,sCAAsC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC;YACtC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAE,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG;SAC/I,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACjH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/dist/caveats.d.ts

@@ -205,10 +205,19 @@ export type DigestBindingKind = 'intent' | 'projection' | 'offer' | 'plan';
 export declare const DIGEST_BINDING_KIND: Record<DigestBindingKind, Hex>;
 /** Reverse map for decoders (lowercased kind hash → name). */
 export declare const DIGEST_KIND_NAMES: ReadonlyMap<string, DigestBindingKind>;
-export declare function encodeDigestBindingTerms(kind: DigestBindingKind, digest: Hex): Hex;
+/** Spec 445 / generation 4 / B1 (audit DLG-3) — THE USE BOUND IS IN THE SIGNED TERMS. On chain
+ *  `DigestBindingEnforcer.decodeTerms` reads 64 bytes `(kind, digest)` as exactly ONE redemption and 96 bytes
+ *  `(kind, digest, uint256 maxUses)` as at most `maxUses` (≥ 1); any other length reverts `BadTermsLength`, a zero
+ *  count `ZeroMaxUses`. Omit `maxUses` ⇒ the 64-byte single-use form. A count is never inferred: the caller that
+ *  knows how many on-chain calls the mandate covers states it. (A generation ≤ 3 enforcer reads only the first two
+ *  words and bounds nothing by count — pass `maxUses` only to a generation-4 estate.) */
+export declare function encodeDigestBindingTerms(kind: DigestBindingKind, digest: Hex, maxUses?: number): Hex;
+/** The exact mirror of `DigestBindingEnforcer.decodeTerms`: 64 bytes ⇒ `maxUses: 1`; 96 bytes ⇒ the signed count
+ *  (zero refused); any other length refused — a two-word decode would silently ignore a third word. */
 export declare function decodeDigestBindingTerms(terms: Hex): {
     kind: DigestBindingKind;
     digest: Hex;
+    maxUses: number;
 };
 /** The `args` a redeemer supplies at redemption: the digest it is acting under AND the step's nonce
  *  (abi-encoded `(bytes32 presented, bytes32 stepNonce)`). Supplying the digest is the on-chain commitment;
@@ -218,7 +227,7 @@ export declare function decodeDigestBindingTerms(terms: Hex): {
 export type DigestBindingArgsScheme = {
     generation: 1;
 } | {
-    generation: 2;
+    generation: 2 | 3 | 4;
     stepNonce: Hex;
 };
 export declare function encodeDigestBindingArgs(digest: Hex, scheme: DigestBindingArgsScheme): Hex;
@@ -234,7 +243,161 @@ export declare function decodePayloadClassesTerms(terms: Hex): string[];
 export declare function buildPayloadClassesCaveat(enforcer: Address, classIris: readonly string[]): Caveat;
 /** One digest-binding caveat. Args are NOT pre-filled: they are the redeemer's per-step commitment
  *  (`encodeDigestBindingArgs`), set at redemption — a pre-filled value would be one nonce for every step. */
-export declare function buildDigestBindingCaveat(enforcer: Address, kind: DigestBindingKind, digest: Hex): Caveat;
+export declare function buildDigestBindingCaveat(enforcer: Address, kind: DigestBindingKind, digest: Hex, maxUses?: number): Caveat;
+/** Every digest binding's signed use bound, by kind (64-byte terms ⇒ 1). Spec 445 / generation 4 / DLG-3. */
+export declare function readDigestBindingUses(caveats: readonly Caveat[], enforcer: Address): Partial<Record<DigestBindingKind, number>>;
+/** Hand-maintained ABI for the generation-4 `DigestBindingEnforcer` readers + errors (spec 445 / B1, DLG-3):
+ *  `isUsed` takes the REDEEMER (the step nonce is recorded per redeemer); `usesOf` is the spent count. */
+export declare const digestBindingEnforcerAbi: readonly [{
+    readonly type: "function";
+    readonly name: "isUsed";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [{
+        readonly name: "delegator";
+        readonly type: "address";
+    }, {
+        readonly name: "delegationHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "kind";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "redeemer";
+        readonly type: "address";
+    }, {
+        readonly name: "stepNonce";
+        readonly type: "bytes32";
+    }];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "bool";
+    }];
+}, {
+    readonly type: "function";
+    readonly name: "usesOf";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [{
+        readonly name: "delegator";
+        readonly type: "address";
+    }, {
+        readonly name: "delegationHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "kind";
+        readonly type: "bytes32";
+    }];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "uint256";
+    }];
+}, {
+    readonly type: "function";
+    readonly name: "decodeTerms";
+    readonly stateMutability: "pure";
+    readonly inputs: readonly [{
+        readonly name: "terms";
+        readonly type: "bytes";
+    }];
+    readonly outputs: readonly [{
+        readonly name: "kind";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "digest";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "maxUses";
+        readonly type: "uint256";
+    }];
+}, {
+    readonly type: "event";
+    readonly name: "DigestBindingRedeemed";
+    readonly anonymous: false;
+    readonly inputs: readonly [{
+        readonly name: "delegator";
+        readonly type: "address";
+        readonly indexed: true;
+    }, {
+        readonly name: "delegationHash";
+        readonly type: "bytes32";
+        readonly indexed: true;
+    }, {
+        readonly name: "kind";
+        readonly type: "bytes32";
+        readonly indexed: true;
+    }, {
+        readonly name: "presented";
+        readonly type: "bytes32";
+        readonly indexed: false;
+    }, {
+        readonly name: "stepNonce";
+        readonly type: "bytes32";
+        readonly indexed: false;
+    }, {
+        readonly name: "redeemer";
+        readonly type: "address";
+        readonly indexed: false;
+    }, {
+        readonly name: "use";
+        readonly type: "uint256";
+        readonly indexed: false;
+    }, {
+        readonly name: "maxUses";
+        readonly type: "uint256";
+        readonly indexed: false;
+    }];
+}, {
+    readonly type: "error";
+    readonly name: "BadTermsLength";
+    readonly inputs: readonly [];
+}, {
+    readonly type: "error";
+    readonly name: "BadArgsLength";
+    readonly inputs: readonly [];
+}, {
+    readonly type: "error";
+    readonly name: "ZeroMaxUses";
+    readonly inputs: readonly [];
+}, {
+    readonly type: "error";
+    readonly name: "DigestMismatch";
+    readonly inputs: readonly [{
+        readonly name: "kind";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "bound";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "presented";
+        readonly type: "bytes32";
+    }];
+}, {
+    readonly type: "error";
+    readonly name: "StepNonceReused";
+    readonly inputs: readonly [{
+        readonly name: "kind";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "stepNonce";
+        readonly type: "bytes32";
+    }];
+}, {
+    readonly type: "error";
+    readonly name: "UsesExhausted";
+    readonly inputs: readonly [{
+        readonly name: "kind";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "maxUses";
+        readonly type: "uint256";
+    }];
+}, {
+    readonly type: "error";
+    readonly name: "NotDelegationManager";
+    readonly inputs: readonly [{
+        readonly name: "caller";
+        readonly type: "address";
+    }];
+}];
 /** Every digest binding a delegation carries, by kind. Empty ⇒ a standing capability, not a mandate. */
 export declare function readDigestBindings(caveats: readonly Caveat[], enforcer: Address): Partial<Record<DigestBindingKind, Hex>>;
 export declare function encodeSessionAudienceTerms(delegates: readonly Address[]): Hex;