@agenticprimitives/mcp-runtime 0.1.0-alpha.2 → 1.0.0-alpha.4

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { withDelegation, verifyDelegationForResource, McpAuthError, type McpAuthErrorCode, type PrivateAuthFailureContext, } from './with-delegation';
+export { withDelegation, verifyDelegationForResource, McpAuthError, type McpAuthErrorCode, type PrivateAuthFailureContext, type VerifyDelegationForResourceOpts, } from './with-delegation';
 export { declareResource } from './declare-resource';
 export { createMemoryJtiStore, createSqliteJtiStore, createPostgresJtiStore, type MigratableJtiStore, } from './jti-stores';
 export { generateServiceMac, verifyServiceMac, bodyDigestHex, } from './service-mac';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,GAC/B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,OAAO,EACP,GAAG,EACH,MAAM,EACN,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,UAAU,GACX,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,YAAY,EACZ,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,+BAA+B,GACrC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,eAAe,CAAC;AAEvB,YAAY,EACV,OAAO,EACP,GAAG,EACH,MAAM,EACN,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,QAAQ,EACR,kBAAkB,EAClB,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,UAAU,GACX,MAAM,SAAS,CAAC"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,4DAA4D;AAE5D,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,sDAAsD;AACtD,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,YAAY,GAGb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,GACd,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,4DAA4D;AAE5D,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,sDAAsD;AACtD,OAAO,EACL,cAAc,EACd,2BAA2B,EAC3B,YAAY,GAIb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,GACd,MAAM,eAAe,CAAC"}

package/dist/with-delegation.d.ts

@@ -120,13 +120,52 @@ export declare function withDelegation<A extends Record<string, unknown>>(config
 }): (args: A & {
     token: string;
 }) => Promise<unknown>;
+/**
+ * R5.8 / PKG-MCP-RUNTIME-004 — production-grade options for the
+ * resource-level verify helper. Pre-R5.8 the helper accepted only
+ * `{ toolName, timestamp }` and called `verifyDelegationToken` with
+ * none of the policy / audit / threshold inputs, so a consumer could
+ * silently skip the production policy layer that `withDelegation`
+ * enforces (external audit P0-3). Now the opts surface mirrors
+ * `withDelegation` exactly, and the same construction-time gate
+ * fires when classification or auditSink is missing in production.
+ *
+ * Different from `withDelegation`:
+ *   - this is the non-handler-wrapping variant (just verify, return
+ *     the result). Used for MCP resource list/read paths that don't
+ *     have a tool-call shape.
+ *   - returns `{ principal, grants } | { error }` instead of throwing.
+ *     A `'denied'` decision from the threshold-policy / classification
+ *     gate is reported as `{ error }` so callers can map to their own
+ *     MCP error response. Audit emission still happens; the public
+ *     surface is the only thing that differs from `withDelegation`.
+ */
 export interface VerifyDelegationForResourceOpts {
     toolName?: string;
-}
-export declare function verifyDelegationForResource(token: string, config: McpResourceVerifyConfig, ctx?: {
-    toolName?: string;
+    /** Wall-clock at evaluation time (seconds). Optional; defaults to now. */
     timestamp?: number;
-}): Promise<{
+    /**
+     * Same as `withDelegation` opts. See `withDelegation` for the full
+     * semantic — in production both `classification` and `auditSink`
+     * are required and the helper throws at construction time if they
+     * are missing.
+     */
+    classification?: ToolClassification;
+    auditSink?: AuditSink;
+    correlationId?: string;
+    metricsSink?: MetricsSink;
+    traceparent?: string;
+    environment?: 'production' | 'development';
+    developmentMode?: boolean;
+    /**
+     * Audit H3 — when the threshold-policy decision derived from
+     * `classification` requires a quorum caveat, callers must forward
+     * the wallet-supplied quorum proof. Without it, the verifier
+     * rejects.
+     */
+    quorumProof?: import('@agenticprimitives/delegation').VerifyOptsExt['quorumProof'];
+}
+export declare function verifyDelegationForResource(token: string, config: McpResourceVerifyConfig, opts?: VerifyDelegationForResourceOpts): Promise<{
     principal: Address;
     grants?: DataScopeGrant[];
 } | {

package/dist/with-delegation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"with-delegation.d.ts","sourceRoot":"","sources":["../src/with-delegation.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAO,MAAM,0BAA0B,CAAC;AAG7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAc,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AA4BvE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,oBAAoB,GACpB,aAAa,CAAC;AAElB,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBACnB,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM;CAM1D;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,6DAA6D;IAC7D,aAAa,EAAE,MAAM,CAAC;IACtB,8BAA8B;IAC9B,IAAI,EAAE,gBAAgB,CAAC;IACvB;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9D,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;CAAE,KAAK,OAAO,CAAC,OAAO,CAAC,EAC1F,IAAI,CAAC,EAAE;IACL,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC;IAC3C;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GACA,CAAC,IAAI,EAAE,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAgNnD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,uBAAuB,EAC/B,GAAG,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAYhF"}
+{"version":3,"file":"with-delegation.d.ts","sourceRoot":"","sources":["../src/with-delegation.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAO,MAAM,0BAA0B,CAAC;AAG7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAc,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACxF,OAAO,KAAK,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AA4BvE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,oBAAoB,GACpB,aAAa,CAAC;AAElB,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;gBACnB,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM;CAM1D;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,6DAA6D;IAC7D,aAAa,EAAE,MAAM,CAAC;IACtB,8BAA8B;IAC9B,IAAI,EAAE,gBAAgB,CAAC;IACvB;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9D,MAAM,EAAE,uBAAuB,EAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;CAAE,KAAK,OAAO,CAAC,OAAO,CAAC,EAC1F,IAAI,CAAC,EAAE;IACL,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC;IAC3C;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GACA,CAAC,IAAI,EAAE,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAgNnD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,YAAY,GAAG,aAAa,CAAC;IAC3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,+BAA+B,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;CACpF;AAED,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,uBAAuB,EAC/B,IAAI,CAAC,EAAE,+BAA+B,GACrC,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,cAAc,EAAE,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA8IhF"}

package/dist/with-delegation.js

@@ -244,18 +244,135 @@ export function withDelegation(config, handler, opts) {
         return handler({ ...rest, principal: result.principal, grants: result.grants });
     };
 }
-export async function verifyDelegationForResource(token, config, ctx) {
-    return verifyDelegationToken(token, {
+export async function verifyDelegationForResource(token, config, opts) {
+    // R5.8 / P0-3: identical production gate to `withDelegation`. A
+    // consumer that uses this helper instead of the wrapper does not
+    // get a policy-bypass discount.
+    const env = inferEnvironment(opts);
+    if (env === 'production') {
+        if (!opts?.classification) {
+            throw new Error('[mcp-runtime] verifyDelegationForResource requires `classification` in production. ' +
+                'The policy engine (tool-policy.evaluateThresholdPolicy) MUST run; an unclassified ' +
+                'resource is a security regression. Pass `opts.classification = declareResource(...)`. ' +
+                'For tests, pass `developmentMode: true` to opt out of the strict gate.');
+        }
+        if (!opts?.auditSink) {
+            throw new Error('[mcp-runtime] verifyDelegationForResource requires `auditSink` in production. ' +
+                'Audit emission is the only forensic trail for resource accept/reject; ' +
+                'production deployments MUST persist these. Pass a durable sink (D1, ' +
+                'Cloud Logging, etc.) — wrap with composeSinks(durable, console) if you ' +
+                'still want a tail-friendly mirror.');
+        }
+    }
+    const toolName = opts?.toolName ?? 'unknown';
+    const correlationId = opts?.correlationId ??
+        `vr-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+    const startedAt = Date.now();
+    const metric = opts?.metricsSink;
+    const emit = async (outcome, reason, principal) => {
+        if (metric) {
+            const tags = {
+                tool: toolName,
+                audience: config.audience ?? 'unknown',
+                outcome: outcome === 'success' ? 'accept' : 'reject',
+            };
+            try {
+                metric.increment('mcp_runtime.verify_resource.calls', 1, tags);
+            }
+            catch { /* fail-soft */ }
+            try {
+                metric.observe('mcp_runtime.verify_resource.duration_ms', Date.now() - startedAt, tags);
+            }
+            catch { /* fail-soft */ }
+        }
+        if (!opts?.auditSink)
+            return;
+        try {
+            await opts.auditSink.write(buildEvent({
+                action: outcome === 'success'
+                    ? 'mcp-runtime.verify-resource.accept'
+                    : 'mcp-runtime.verify-resource.reject',
+                outcome,
+                correlationId,
+                actor: principal ? { type: 'user', id: principal } : { type: 'unknown' },
+                subject: { type: 'tool', id: toolName },
+                audience: config.audience,
+                chainId: config.chainId,
+                reason,
+                context: opts?.traceparent ? { traceparent: opts.traceparent } : undefined,
+            }));
+        }
+        catch {
+            // Fail-soft: audit emission must never break the auth flow.
+        }
+    };
+    // Threshold-policy decision → derive verifier gates (mirrors withDelegation).
+    let requireQuorumCaveat;
+    let requireAcceptedOnChain;
+    if (opts?.classification) {
+        const thrDecision = evaluateThresholdPolicy(opts.classification);
+        if (thrDecision.requiresQuorum) {
+            if (!config.quorumEnforcer) {
+                const detail = 'resource requires quorum caveat but mcp-runtime has no quorumEnforcer configured';
+                console.error('[mcp-runtime] auth misconfigured:', detail);
+                await emit('denied', detail, undefined);
+                return { error: 'auth-misconfigured' };
+            }
+            requireQuorumCaveat = { enforcer: config.quorumEnforcer };
+        }
+        if (thrDecision.requiresAcceptedOnChain) {
+            requireAcceptedOnChain = true;
+        }
+    }
+    const result = await verifyDelegationToken(token, {
         audience: config.audience,
         chainId: config.chainId,
         rpcUrl: config.rpcUrl,
         delegationManager: config.delegationManager,
         enforcerMap: config.enforcerMap,
         jtiStore: config.jtiStore,
-        toolName: ctx?.toolName,
+        toolName: opts?.toolName,
         requireDeployed: config.requireDeployed,
-        now: ctx?.timestamp ? () => ctx.timestamp * 1000 : undefined,
+        auditSink: opts?.auditSink,
+        correlationId,
+        requireQuorumCaveat,
+        requireAcceptedOnChain,
+        quorumProof: opts?.quorumProof,
+        now: opts?.timestamp ? () => opts.timestamp * 1000 : undefined,
     });
+    if ('error' in result) {
+        await emit('denied', result.error, undefined);
+        // Public surface: opaque error string per the H7-F.1 info-leak rule.
+        // Audit sink already carries the private reason.
+        return { error: 'auth-failed' };
+    }
+    // Classification policy enforcement (mirrors withDelegation).
+    if (opts?.classification) {
+        const decision = evaluatePolicy({
+            toolName,
+            classification: opts.classification,
+            callerKind: 'user-session',
+            delegation: {
+                delegator: result.principal,
+                delegate: result.principal,
+                caveats: [],
+            },
+        });
+        if (decision.decision !== 'allow') {
+            const thrDec = evaluateThresholdPolicy(opts.classification);
+            const satisfiedByOnChainBlessing = decision.decision === 'requires-consent' && thrDec.requiresAcceptedOnChain;
+            if (!satisfiedByOnChainBlessing) {
+                const detail = decision.decision === 'deny'
+                    ? `policy deny: ${decision.reason}`
+                    : `policy requires-consent (${decision.promptId}); runtime does not host consent loop`;
+                console.error('[mcp-runtime] auth failed:', detail);
+                await emit('denied', detail, result.principal);
+                return { error: 'auth-failed' };
+            }
+        }
+    }
+    await emit('success', undefined, result.principal);
+    return result;
 }
 // H7-B.8 (XPKG-002 / EXT-024 closure) — `withCrossDelegation` +
 // `verifyCrossDelegationForResource` were public symbols that

package/dist/with-delegation.js.map

@@ -1 +1 @@
-{"version":3,"file":"with-delegation.js","sourceRoot":"","sources":["../src/with-delegation.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,8BAA8B;AAC9B,+BAA+B;AAC/B,wEAAwE;AACxE,iEAAiE;AACjE,mEAAmE;AACnE,uBAAuB;AACvB,iEAAiE;AACjE,EAAE;AACF,wEAAwE;AACxE,gEAAgE;AAChE,6BAA6B;AAG7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzF,OAAO,EAAE,UAAU,EAAoC,MAAM,0BAA0B,CAAC;AAGxF;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,IAGzB;IACC,IAAI,IAAI,EAAE,WAAW;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC/C,IAAI,IAAI,EAAE,eAAe,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IACzD,IAAI,CAAC;QACH,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;YAC5D,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;QAC9E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AA6BD,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,aAAa,CAAS;IAC/B,YAAY,IAAsB,EAAE,aAAqB;QACvD,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;CACF;AAuBD,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,OAA0F,EAC1F,IAgEC;IAED,iEAAiE;IACjE,kEAAkE;IAClE,yBAAyB;IACzB,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACtE,gFAAgF;gBAChF,2EAA2E;gBAC3E,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,mEAAmE;gBACjE,0EAA0E;gBAC1E,sEAAsE;gBACtE,yEAAyE;gBACzE,oCAAoC,CACvC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,kEAAkE;QAClE,iEAAiE;QACjE,8DAA8D;QAC9D,yDAAyD;QACzD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GACnC,IAAiH,CAAC;QACpH,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,SAAS,CAAC;QAC7C,qEAAqE;QACrE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,aAAa,GACjB,IAAI,EAAE,aAAa;YACnB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,CAAC;QAEjC,MAAM,IAAI,GAAG,KAAK,EAChB,OAAuC,EACvC,MAA0B,EAC1B,SAA8B,EAC9B,EAAE;YACF,4DAA4D;YAC5D,gEAAgE;YAChE,2DAA2D;YAC3D,uDAAuD;YACvD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG;oBACX,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;oBACtC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;iBACrD,CAAC;gBACF,IAAI,CAAC;oBAAC,MAAM,CAAC,SAAS,CAAC,mCAAmC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;gBACjG,IAAI,CAAC;oBAAC,MAAM,CAAC,OAAO,CAAC,yCAAyC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC5H,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,SAAS;gBAAE,OAAO;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CACxB,UAAU,CAAC;oBACT,MAAM,EACJ,OAAO,KAAK,SAAS;wBACnB,CAAC,CAAC,oCAAoC;wBACtC,CAAC,CAAC,oCAAoC;oBAC1C,OAAO;oBACP,aAAa;oBACb,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;oBACxE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE;oBACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM;oBACN,wDAAwD;oBACxD,0DAA0D;oBAC1D,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;iBAC3E,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;gBAC5D,iEAAiE;YACnE,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,iEAAiE;YACjE,MAAM,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YACjD,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;QACD,gEAAgE;QAChE,yDAAyD;QACzD,iEAAiE;QACjE,iEAAiE;QACjE,0BAA0B;QAC1B,IAAI,mBAAsD,CAAC;QAC3D,IAAI,sBAA2C,CAAC;QAChD,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACjE,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3B,sDAAsD;oBACtD,uDAAuD;oBACvD,uDAAuD;oBACvD,4DAA4D;oBAC5D,MAAM,MAAM,GACV,8EAA8E,CAAC;oBACjF,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;oBAC3D,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;oBACxC,0DAA0D;oBAC1D,+DAA+D;oBAC/D,kCAAkC;oBAClC,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;gBAC9D,CAAC;gBACD,mBAAmB,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,WAAW,CAAC,uBAAuB,EAAE,CAAC;gBACxC,sBAAsB,GAAG,IAAI,CAAC;YAChC,CAAC;YACD,8DAA8D;YAC9D,iEAAiE;YACjE,gEAAgE;YAChE,yDAAyD;YACzD,oDAAoD;YACpD,kCAAkC;QACpC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE;YAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,EAAE,QAAQ;YACxB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,4DAA4D;YAC5D,+DAA+D;YAC/D,yDAAyD;YACzD,SAAS,EAAE,IAAI,EAAE,SAAS;YAC1B,aAAa;YACb,gEAAgE;YAChE,4DAA4D;YAC5D,kCAAkC;YAClC,mBAAmB;YACnB,sBAAsB;YACtB,iEAAiE;YACjE,+DAA+D;YAC/D,kEAAkE;YAClE,gEAAgE;YAChE,oBAAoB;YACpB,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,gEAAgE;YAChE,8DAA8D;YAC9D,oEAAoE;YACpE,gDAAgD;YAChD,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;QAED,yEAAyE;QACzE,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,cAAc,CAAC;gBAC9B,QAAQ;gBACR,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,UAAU,EAAE,cAAc;gBAC1B,UAAU,EAAE;oBACV,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,OAAO,EAAE,EAAE;iBACZ;aACF,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,iEAAiE;gBACjE,gEAAgE;gBAChE,gEAAgE;gBAChE,6DAA6D;gBAC7D,8DAA8D;gBAC9D,6DAA6D;gBAC7D,0DAA0D;gBAC1D,sDAAsD;gBACtD,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC5D,MAAM,0BAA0B,GAC9B,QAAQ,CAAC,QAAQ,KAAK,kBAAkB,IAAI,MAAM,CAAC,uBAAuB,CAAC;gBAC7E,IAAI,CAAC,0BAA0B,EAAE,CAAC;oBAChC,MAAM,MAAM,GACV,QAAQ,CAAC,QAAQ,KAAK,MAAM;wBAC1B,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE;wBACnC,CAAC,CAAC,4BAA4B,QAAQ,CAAC,QAAQ,uCAAuC,CAAC;oBAC3F,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;oBACpD,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC/C,mDAAmD;oBACnD,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,+DAA+D;gBAC7D,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC,EAAE,GAAI,IAAqB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC;AACJ,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAa,EACb,MAA+B,EAC/B,GAA+C;IAE/C,OAAO,qBAAqB,CAAC,KAAK,EAAE;QAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,GAAG,EAAE,QAAQ;QACvB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,GAAG,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,SAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;KAC9D,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,8DAA8D;AAC9D,uEAAuE;AACvE,yEAAyE;AACzE,sCAAsC;AACtC,kEAAkE"}
+{"version":3,"file":"with-delegation.js","sourceRoot":"","sources":["../src/with-delegation.ts"],"names":[],"mappings":"AAAA,yCAAyC;AACzC,EAAE;AACF,8BAA8B;AAC9B,+BAA+B;AAC/B,wEAAwE;AACxE,iEAAiE;AACjE,mEAAmE;AACnE,uBAAuB;AACvB,iEAAiE;AACjE,EAAE;AACF,wEAAwE;AACxE,gEAAgE;AAChE,6BAA6B;AAG7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzF,OAAO,EAAE,UAAU,EAAoC,MAAM,0BAA0B,CAAC;AAGxF;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,IAGzB;IACC,IAAI,IAAI,EAAE,WAAW;QAAE,OAAO,IAAI,CAAC,WAAW,CAAC;IAC/C,IAAI,IAAI,EAAE,eAAe,KAAK,IAAI;QAAE,OAAO,aAAa,CAAC;IACzD,IAAI,CAAC;QACH,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;YAC5D,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;QAC9E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AA6BD,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAmB;IACvB,aAAa,CAAS;IAC/B,YAAY,IAAsB,EAAE,aAAqB;QACvD,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;CACF;AAuBD,MAAM,UAAU,cAAc,CAC5B,MAA+B,EAC/B,OAA0F,EAC1F,IAgEC;IAED,iEAAiE;IACjE,kEAAkE;IAClE,yBAAyB;IACzB,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACtE,gFAAgF;gBAChF,2EAA2E;gBAC3E,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,mEAAmE;gBACjE,0EAA0E;gBAC1E,sEAAsE;gBACtE,yEAAyE;gBACzE,oCAAoC,CACvC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QACpB,kEAAkE;QAClE,iEAAiE;QACjE,8DAA8D;QAC9D,yDAAyD;QACzD,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GACnC,IAAiH,CAAC;QACpH,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,SAAS,CAAC;QAC7C,qEAAqE;QACrE,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,aAAa,GACjB,IAAI,EAAE,aAAa;YACnB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,CAAC;QAEjC,MAAM,IAAI,GAAG,KAAK,EAChB,OAAuC,EACvC,MAA0B,EAC1B,SAA8B,EAC9B,EAAE;YACF,4DAA4D;YAC5D,gEAAgE;YAChE,2DAA2D;YAC3D,uDAAuD;YACvD,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,IAAI,GAAG;oBACX,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;oBACtC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;iBACrD,CAAC;gBACF,IAAI,CAAC;oBAAC,MAAM,CAAC,SAAS,CAAC,mCAAmC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;gBACjG,IAAI,CAAC;oBAAC,MAAM,CAAC,OAAO,CAAC,yCAAyC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC5H,CAAC;YACD,IAAI,CAAC,IAAI,EAAE,SAAS;gBAAE,OAAO;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CACxB,UAAU,CAAC;oBACT,MAAM,EACJ,OAAO,KAAK,SAAS;wBACnB,CAAC,CAAC,oCAAoC;wBACtC,CAAC,CAAC,oCAAoC;oBAC1C,OAAO;oBACP,aAAa;oBACb,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;oBACxE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE;oBACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM;oBACN,wDAAwD;oBACxD,0DAA0D;oBAC1D,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;iBAC3E,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;gBAC5D,iEAAiE;YACnE,CAAC;QACH,CAAC,CAAC;QAEF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,iEAAiE;YACjE,MAAM,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;YACjD,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;QACD,gEAAgE;QAChE,yDAAyD;QACzD,iEAAiE;QACjE,iEAAiE;QACjE,0BAA0B;QAC1B,IAAI,mBAAsD,CAAC;QAC3D,IAAI,sBAA2C,CAAC;QAChD,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACjE,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC3B,sDAAsD;oBACtD,uDAAuD;oBACvD,uDAAuD;oBACvD,4DAA4D;oBAC5D,MAAM,MAAM,GACV,8EAA8E,CAAC;oBACjF,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;oBAC3D,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;oBACxC,0DAA0D;oBAC1D,+DAA+D;oBAC/D,kCAAkC;oBAClC,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,aAAa,CAAC,CAAC;gBAC9D,CAAC;gBACD,mBAAmB,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,WAAW,CAAC,uBAAuB,EAAE,CAAC;gBACxC,sBAAsB,GAAG,IAAI,CAAC;YAChC,CAAC;YACD,8DAA8D;YAC9D,iEAAiE;YACjE,gEAAgE;YAChE,yDAAyD;YACzD,oDAAoD;YACpD,kCAAkC;QACpC,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE;YAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,EAAE,QAAQ;YACxB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,4DAA4D;YAC5D,+DAA+D;YAC/D,yDAAyD;YACzD,SAAS,EAAE,IAAI,EAAE,SAAS;YAC1B,aAAa;YACb,gEAAgE;YAChE,4DAA4D;YAC5D,kCAAkC;YAClC,mBAAmB;YACnB,sBAAsB;YACtB,iEAAiE;YACjE,+DAA+D;YAC/D,kEAAkE;YAClE,gEAAgE;YAChE,oBAAoB;YACpB,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;YACtB,gEAAgE;YAChE,8DAA8D;YAC9D,oEAAoE;YACpE,gDAAgD;YAChD,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC9C,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QACvD,CAAC;QAED,yEAAyE;QACzE,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,cAAc,CAAC;gBAC9B,QAAQ;gBACR,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,UAAU,EAAE,cAAc;gBAC1B,UAAU,EAAE;oBACV,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,SAAS;oBAC1B,OAAO,EAAE,EAAE;iBACZ;aACF,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAClC,iEAAiE;gBACjE,gEAAgE;gBAChE,gEAAgE;gBAChE,6DAA6D;gBAC7D,8DAA8D;gBAC9D,6DAA6D;gBAC7D,0DAA0D;gBAC1D,sDAAsD;gBACtD,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC5D,MAAM,0BAA0B,GAC9B,QAAQ,CAAC,QAAQ,KAAK,kBAAkB,IAAI,MAAM,CAAC,uBAAuB,CAAC;gBAC7E,IAAI,CAAC,0BAA0B,EAAE,CAAC;oBAChC,MAAM,MAAM,GACV,QAAQ,CAAC,QAAQ,KAAK,MAAM;wBAC1B,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE;wBACnC,CAAC,CAAC,4BAA4B,QAAQ,CAAC,QAAQ,uCAAuC,CAAC;oBAC3F,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;oBACpD,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC/C,mDAAmD;oBACnD,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CACV,+DAA+D;gBAC7D,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,OAAO,CAAC,EAAE,GAAI,IAAqB,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC;AACJ,CAAC;AAgDD,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,KAAa,EACb,MAA+B,EAC/B,IAAsC;IAEtC,gEAAgE;IAChE,iEAAiE;IACjE,gCAAgC;IAChC,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,qFAAqF;gBACnF,oFAAoF;gBACpF,wFAAwF;gBACxF,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,gFAAgF;gBAC9E,wEAAwE;gBACxE,sEAAsE;gBACtE,yEAAyE;gBACzE,oCAAoC,CACvC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,EAAE,QAAQ,IAAI,SAAS,CAAC;IAC7C,MAAM,aAAa,GACjB,IAAI,EAAE,aAAa;QACnB,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,EAAE,WAAW,CAAC;IAEjC,MAAM,IAAI,GAAG,KAAK,EAChB,OAA6B,EAC7B,MAA0B,EAC1B,SAA8B,EAC9B,EAAE;QACF,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;gBACtC,OAAO,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;aACrD,CAAC;YACF,IAAI,CAAC;gBAAC,MAAM,CAAC,SAAS,CAAC,mCAAmC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YACjG,IAAI,CAAC;gBAAC,MAAM,CAAC,OAAO,CAAC,yCAAyC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;QAC5H,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,SAAS;YAAE,OAAO;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CACxB,UAAU,CAAC;gBACT,MAAM,EACJ,OAAO,KAAK,SAAS;oBACnB,CAAC,CAAC,oCAAoC;oBACtC,CAAC,CAAC,oCAAoC;gBAC1C,OAAO;gBACP,aAAa;gBACb,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;gBACxE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE;gBACvC,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM;gBACN,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;aAC3E,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,4DAA4D;QAC9D,CAAC;IACH,CAAC,CAAC;IAEF,8EAA8E;IAC9E,IAAI,mBAAsD,CAAC;IAC3D,IAAI,sBAA2C,CAAC;IAChD,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACjE,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAC3B,MAAM,MAAM,GACV,kFAAkF,CAAC;gBACrF,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,MAAM,CAAC,CAAC;gBAC3D,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBACxC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YACzC,CAAC;YACD,mBAAmB,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;QAC5D,CAAC;QACD,IAAI,WAAW,CAAC,uBAAuB,EAAE,CAAC;YACxC,sBAAsB,GAAG,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE;QAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,IAAI,EAAE,QAAQ;QACxB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,SAAS,EAAE,IAAI,EAAE,SAAS;QAC1B,aAAa;QACb,mBAAmB;QACnB,sBAAsB;QACtB,WAAW,EAAE,IAAI,EAAE,WAAW;QAC9B,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAU,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;KAChE,CAAC,CAAC;IACH,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC9C,qEAAqE;QACrE,iDAAiD;QACjD,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClC,CAAC;IAED,8DAA8D;IAC9D,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,cAAc,CAAC;YAC9B,QAAQ;YACR,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,UAAU,EAAE,cAAc;YAC1B,UAAU,EAAE;gBACV,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,SAAS;gBAC1B,OAAO,EAAE,EAAE;aACZ;SACF,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAClC,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC5D,MAAM,0BAA0B,GAC9B,QAAQ,CAAC,QAAQ,KAAK,kBAAkB,IAAI,MAAM,CAAC,uBAAuB,CAAC;YAC7E,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBAChC,MAAM,MAAM,GACV,QAAQ,CAAC,QAAQ,KAAK,MAAM;oBAC1B,CAAC,CAAC,gBAAgB,QAAQ,CAAC,MAAM,EAAE;oBACnC,CAAC,CAAC,4BAA4B,QAAQ,CAAC,QAAQ,uCAAuC,CAAC;gBAC3F,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;gBACpD,MAAM,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC/C,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gEAAgE;AAChE,8DAA8D;AAC9D,uEAAuE;AACvE,yEAAyE;AACzE,sCAAsC;AACtC,kEAAkE"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticprimitives/mcp-runtime",
-  "version": "0.1.0-alpha.2",
+  "version": "1.0.0-alpha.4",
   "description": "Delegation-aware authorization middleware around the official MCP TypeScript SDK. The decision layer, not the SDK.",
   "license": "MIT",
   "repository": {
@@ -35,26 +35,17 @@
     "spec.md",
     "README.md"
   ],
-  "scripts": {
-    "build": "tsc -p tsconfig.build.json",
-    "typecheck": "tsc -p tsconfig.json --noEmit",
-    "test": "vitest run",
-    "test:unit": "vitest run test/unit",
-    "test:integration": "vitest run test/integration --passWithNoTests",
-    "test:watch": "vitest",
-    "clean": "rm -rf dist"
-  },
   "publishConfig": {
     "access": "public"
   },
   "peerDependencies": {
-    "@agenticprimitives/audit": "workspace:*",
-    "@agenticprimitives/delegation": "workspace:*",
-    "@agenticprimitives/key-custody": "workspace:*",
-    "@agenticprimitives/tool-policy": "workspace:*",
-    "@agenticprimitives/types": "workspace:*",
     "@modelcontextprotocol/sdk": ">=1.29.0 <2",
-    "viem": "^2.50.0"
+    "viem": "^2.50.0",
+    "@agenticprimitives/key-custody": "1.0.0-alpha.4",
+    "@agenticprimitives/audit": "1.0.0-alpha.4",
+    "@agenticprimitives/tool-policy": "1.0.0-alpha.4",
+    "@agenticprimitives/delegation": "1.0.0-alpha.4",
+    "@agenticprimitives/types": "1.0.0-alpha.4"
   },
   "devDependencies": {
     "@types/node": "^22.7.0",
@@ -66,5 +57,14 @@
     "delegation",
     "authorization",
     "agentic"
-  ]
-}
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "test:unit": "vitest run test/unit",
+    "test:integration": "vitest run test/integration --passWithNoTests",
+    "test:watch": "vitest",
+    "clean": "rm -rf dist"
+  }
+}