agent-protocols 0.8.0 → 0.9.0

package/README.md

@@ -4,12 +4,12 @@ TypeScript SDK for the draft Agent Identity, Agent Profile, Agent Delegation, an
 
 ## Modules
 
-- `identity`: `did:agent:` encoding, JCS canonicalization, event hashes, Ed25519 signing and verification, live-write nonce checks, request JWT helpers.
-- `profile`: `profile.update` payloads, Profile documents, delegation discovery hints, validation, materialization.
-- `delegation`: Agent Delegation principal documents and alias resolution, grant/revoke payloads, credential documents, status/query shapes, validation, and materialization.
-- `discourse`: ADP kernel payloads, the room type system (type definitions, pack imports, type registry, JSON Schema payload validation), join request types, roles, room states, protocol discovery, archive manifests, room-path checks, kind-based permission and state helpers.
-- `http-client`: fetch-based Profile, Delegation, and Discourse clients.
-- `local-connector`: Local Agent Protocols MCP connector tool names, resource URIs, structured view types, and timeline/sync helpers.
+- `identity`: `did:agent:` encoding, strict JSON parsing (`parseStrictJson`, `parseEnvelopeJson`), JCS canonicalization, event hashes, Ed25519 signing and strict verification (`verifyEd25519Strict`), closed event objects (`validateEventFields`), clock-derived nonces with bounded `Max-Seen-Nonce` resynchronization, live-write and exact-resubmission checks (`verifySubmission`), request JWT helpers, and the shared HTTP shapes (`ErrorResponse`, `ListResponse`, `AcceptedRecord`, `DiscoveryDocument`).
+- `profile`: `profile.update` payloads, Profile documents, delegation discovery hints, validation, succession checks, materialization.
+- `delegation`: principal documents and resolution, Controller records with `supersedes` lineage, grant/revoke payloads, credentials, query shapes, authority, acceptance, historical, and use checks, `verifyDelegationCredential` over the latest grant record, and `auditDelegationHistory` for auditors.
+- `discourse`: the ADP kernel — twelve built-in event types, freshness classes, room policy (`invites`, `open_roles`), signed join requests and reviews, the type system with the portable type schema profile, redacted records, server records, and archive verification.
+- `http-client`: fetch-based Profile, Delegation, and Discourse clients. Lists use `{ result, next_cursor }`; non-2xx responses throw `HttpResponseError` with the protocol `code`, `data`, and `Max-Seen-Nonce`.
+- `local-connector`: the Local Agent Protocols MCP connector: 23 standard tools, resource URIs, structured views, and the connector engine.
 
 ## Example
 
@@ -18,7 +18,8 @@ import { AgentSigner, ClientNonceManager, materializeProfile, profileUpdateEvent
 
 const signer = AgentSigner.generate();
 const nonces = new ClientNonceManager();
-const event = profileUpdateEvent(signer.agentId(), Date.now(), nonces.nextNonce(), {
+const createdAt = Date.now();
+const event = profileUpdateEvent(signer.agentId(), createdAt, nonces.nextNonce(createdAt), {
   id: signer.agentId(),
   name: "ResearchAgent-v3",
 });
@@ -26,30 +27,34 @@ const envelope = signer.signEvent(event);
 const profile = materializeProfile(envelope);
 ```
 
-Agent Profile has no `username` field: the Agent ID is the identity key, and the latest profile is the accepted `profile.update` with the greatest `nonce`.
+`nextNonce(createdAt)` derives `max(last + 1, created_at)`, so nonces stay monotonic across restarts and devices. Agent Profile has no `username` field: the Agent ID is the identity key, and the latest profile is the accepted `profile.update` with the greatest `nonce`.
 
-ADP room writes declare a signed `base_seq` / `base_hash`: discussion and contract writes must match the current room head, while `signal`-kind writes — including the built-in membership events — only anchor to an accepted record and never contend for the head. Use `discourseEvent` or `typeDefineEvent` with `baseSeq` and `baseHash`, or let a local connector derive them from `SyncState`. Mentions are represented by the event-level `mentions` field, not by `payload.extra`.
+ADP room writes carry a signed `base_seq` / `base_hash`. Message and control writes — `message.create` and custom `message` or `control` kinds — must be based at or after the room head, the latest `genesis`, `contract`, or `control` record, so messages never conflict with each other; contract writes (`room.update`, `room.close`, `room.cancel`, `type.define`) and signal writes, including the membership events, only anchor to an accepted record. Use `eventRequiresRoomHead` and `eventAdvancesRoomHead` to tell them apart, `validateRoomBase` for the host-side base check, `discourseEvent` to build them, and `roomJoinRequestEvent` for a join request, which carries `room_id` but no base. Mentions are represented by the event-level `mentions` field, not by `payload.extra`.
 
-## Delegation draft revision
+The conformance vectors in `docs/protocols/*/1.0.vectors.json` are part of the test suite.
 
-Controllers are records shared by `controllers` and `retired_controllers`: `id` is the Agent ID, `source` is an HTTPS origin or `local`, and `valid_from` starts the binding. Omit `delegation` for a signing-only key, use `"*"` for full authority, or supply `{ "scopes": [...], "audiences": [...] }` for restricted authority. Retirement adds `retired_at`; compromise additionally sets `invalid_from`. Keys cannot be reused within one principal.
+## Delegation
 
-Grant payloads now require `audiences`. Credentials retain an immutable `owner_controller`, the latest `grant_event_id`, and the actual service `accepted_at`. Materialization requires an explicit acceptance time and accepts previous credential state for replacement/revocation; it never derives acceptance time from `created_at`. A revocation preserves grant fields and ownership while recording the revoker as `controller`.
+Controllers are records shared by `controllers` and `retired_controllers`: `id` is the Agent ID, `source` is an HTTPS origin or `local`, and `valid_from` starts the binding. Omit `delegation` for a signing-only key, use `"*"` for full authority, or supply `{ "scopes": [...], "audiences": [...] }` for restricted authority. `supersedes` lets a successor key manage its predecessors' credentials. Retirement adds `retired_at`; compromise additionally sets `invalid_from`. A principal that grants delegations publishes `delegation_query_url`.
+
+Grants name the canonical `principal_id`. Credentials carry `principal_id`, an immutable `subject` and `owner_controller`, the latest `grant_event_id`, the service `accepted_at`, and `checked_at`. Materialization requires an explicit acceptance time and trusted previous state; it never derives acceptance time from `created_at`.
 
 The validation layers have different responsibilities:
 
-- Envelope validation checks cryptography and payload shape, not principal authority.
-- Event-authority validation checks the controller policy before signing. Acceptance validation also checks the envelope and authoritative-resolution URL.
-- Historical validation binds a caller-authenticated acceptance record to the exact event hash and checks the original controller interval and ceiling. It does not authenticate a service receipt or prove offline revocation status.
+- Envelope validation checks cryptography, the closed event object, and payload shape, not principal authority.
+- Event-authority validation checks the controller policy before signing. Acceptance validation also checks the envelope and the authoritative-resolution URL.
+- Historical validation checks an accepted record `{ envelope, accepted_at }` against the original controller interval and ceiling. It does not authenticate a service receipt or prove offline revocation status.
 - Use validation checks audience, status, and validity. Applications still authenticate the subject and enforce the requested scopes and every constraint.
 
-Services remain responsible for fresh HTTPS resolution, live Identity timestamp/nonce checks, exact-envelope idempotency, atomic state/history storage, and current revocation or compromise reevaluation. Pass only authoritative documents, authenticated acceptance evidence, and trusted previous state. These are SDK building blocks, not a hosted delegation service.
-
 ```ts
 // principal was freshly resolved over HTTPS; previous is trusted service state.
 validateDelegationAcceptance(envelope, principal, resolvedUrl, acceptedAt, previous);
 const credential = materializeDelegationCredential(envelope, { acceptedAt, previous });
-validateDelegationUse(credential, "https://dmsg.net", now);
+
+// A relying party checks the credential's latest grant record.
+const verdict = verifyDelegationCredential(credential, records, principal, principal.id, "https://dmsg.net", Date.now());
 ```
 
-Use `validateController`, `validateControllerEnumeration`, and `validateHistoricalDelegation` for record, private-listing, and archival checks. The local connector requires grant audiences and checks policy, service binding, and credential ownership before signing. Its write client currently uses the standard `/v1/delegations` paths; a nonstandard query path is rejected rather than treated as authority for an arbitrary service URL.
+Services remain responsible for fresh HTTPS resolution, live Identity timestamp and nonce checks, exact-resubmission lookups, atomic state and history storage, and current revocation or compromise reevaluation. These are SDK building blocks, not a hosted delegation service.
+
+The local connector derives the delegation service from the principal's `delegation_query_url` and its discovery document, and checks policy and credential ownership before signing a grant or revocation.

package/dist/delegation.d.ts

@@ -1,7 +1,11 @@
-import { AgentId, Envelope, Event } from "./identity.js";
+import { AcceptedRecord, AgentId, Envelope, Event, ListResponse } from "./identity.js";
 export declare const DELEGATION_PROTOCOL = "agent-delegation/1.0";
 export declare const DELEGATION_GRANT = "delegation.grant";
 export declare const DELEGATION_REVOKE = "delegation.revoke";
+/** Delegation IDs are unreserved URL characters: no percent-encoding, no look-alikes. */
+export declare const DELEGATION_ID_PATTERN: RegExp;
+/** Delegation-specific error codes (Agent Delegation Section 9.7). */
+export declare const DELEGATION_ERROR_CODES: readonly string[];
 export type DelegationEventType = typeof DELEGATION_GRANT | typeof DELEGATION_REVOKE;
 export type DelegationStatus = "active" | "suspended" | "expired" | "revoked";
 export interface PrincipalLink {
@@ -9,6 +13,7 @@ export interface PrincipalLink {
     url: string;
     rel: string;
 }
+/** Display descriptor of a principal, used by Agent Profile delegation hints. */
 export interface PrincipalDescriptor {
     id: string;
     type?: string;
@@ -24,13 +29,11 @@ export interface Controller {
         scopes: string[];
         audiences: string[];
     };
+    /** Earlier controllers of this principal whose credentials this key may manage. */
+    supersedes?: AgentId[];
     retired_at?: number;
     invalid_from?: number;
 }
-export interface DelegationAcceptance {
-    event_id: string;
-    accepted_at: number;
-}
 export interface PrincipalDocument extends PrincipalDescriptor {
     description?: string;
     avatar_url?: string;
@@ -40,14 +43,14 @@ export interface PrincipalDocument extends PrincipalDescriptor {
     protocol: typeof DELEGATION_PROTOCOL;
     controllers: Controller[];
     retired_controllers?: Controller[];
-    /** Delegation query endpoint for this principal; answers existence checks. */
+    /** Delegation query endpoint; required when any controller carries `delegation`. */
     delegation_query_url?: string;
     updated_at: number;
     extra?: Record<string, unknown>;
 }
 export interface DelegationGrantPayload {
     id: string;
-    principal: PrincipalDescriptor;
+    principal_id: string;
     subject: AgentId;
     relationship?: string;
     scopes: string[];
@@ -65,11 +68,7 @@ export type DelegationPayload = DelegationGrantPayload | DelegationRevokePayload
 export interface DelegationCredential {
     id: string;
     protocol: typeof DELEGATION_PROTOCOL;
-    principal: PrincipalDescriptor;
-    controller: AgentId;
-    owner_controller: AgentId;
-    grant_event_id: string;
-    accepted_at: number;
+    principal_id: string;
     subject: AgentId;
     relationship?: string;
     scopes: string[];
@@ -78,19 +77,14 @@ export interface DelegationCredential {
     not_before?: number;
     expires_at?: number;
     status: DelegationStatus;
-    updated_at: number;
-    event_id: string;
-}
-export interface DelegationStatusDocument {
-    protocol: typeof DELEGATION_PROTOCOL;
+    controller: AgentId;
+    owner_controller: AgentId;
     grant_event_id: string;
+    event_id: string;
     accepted_at: number;
-    id: string;
-    status: DelegationStatus;
     checked_at: number;
-    expires_at?: number;
-    event_id: string;
 }
+export type DelegationRecord = AcceptedRecord<DelegationPayload>;
 export interface DelegationServiceEndpoints {
     delegations: string;
     query?: string;
@@ -107,20 +101,21 @@ export interface DelegationQueryRequest {
     id?: string;
     status?: DelegationStatus;
     limit?: number;
+    cursor?: string;
 }
-export interface DelegationSummary {
-    id: string;
-    subject: AgentId;
-    principal: PrincipalDescriptor;
-    scopes: string[];
-    status: DelegationStatus;
-}
-export interface DelegationQueryResponse {
-    result: DelegationSummary[];
-}
-export interface DelegationEventsResponse {
-    result: Envelope<DelegationPayload>[];
-    acceptances: DelegationAcceptance[];
+/** Agent Identity list of full credentials. */
+export type DelegationQueryResponse = ListResponse<DelegationCredential>;
+/** Agent Identity list of accepted records in service acceptance order. */
+export type DelegationEventsResponse = ListResponse<DelegationRecord>;
+/** Result of {@link verifyDelegationCredential}. */
+export interface DelegationVerdict {
+    credential: DelegationCredential;
+    /** Latest-grant signature, controller, ceiling, and consistency checks passed. */
+    verified: boolean;
+    /** Verified, and usable for the audience now: active, in its window, audience listed. */
+    usable: boolean;
+    /** Every failed check. */
+    reasons: string[];
 }
 export declare function delegationGrantEvent(actor: AgentId, createdAt: number, nonce: number, payload: DelegationGrantPayload): Event<DelegationGrantPayload>;
 export declare function delegationRevokeEvent(actor: AgentId, createdAt: number, nonce: number, payload: DelegationRevokePayload): Event<DelegationRevokePayload>;
@@ -139,6 +134,12 @@ export declare function validatePrincipalResolution(document: PrincipalDocument,
  * name for the principal unless it is listed here.
  */
 export declare function isPrincipalAlias(document: PrincipalDocument, url: string): boolean;
+/**
+ * The lineage of a controller (Section 5.1): its own ID plus, transitively,
+ * every record it supersedes. A restricted controller owns a credential whose
+ * `owner_controller` is in its lineage.
+ */
+export declare function controllerLineage(document: PrincipalDocument, controllerId: AgentId): Set<AgentId>;
 export declare function validateDelegationGrantPayload(payload: DelegationGrantPayload, createdAt?: number): void;
 /**
  * A public delegation query is an existence check and MUST include both
@@ -159,7 +160,7 @@ export declare function materializeDelegationCredential(envelope: Envelope<Deleg
     acceptedAt: number;
     previous?: DelegationCredential;
     status?: DelegationStatus;
-    updatedAt?: number;
+    checkedAt?: number;
 }): DelegationCredential;
 /** Pre-signing authority check. Input previous state and document must be trusted.
  * This does not verify signatures, fetch HTTPS, check cache age, or enforce nonce/time windows. */
@@ -169,10 +170,30 @@ export declare function validateDelegationEventAuthority(event: Event<Delegation
 export declare function validateDelegationAcceptance(envelope: Envelope<DelegationPayload>, document: PrincipalDocument, resolvedUrl: string, acceptedAt: number, previous?: DelegationCredential): void;
 /** Uses caller-trusted acceptance evidence, never an event's self-reported time as proof.
  * Current status, evidence authenticity and application constraints are separate checks. */
-export declare function validateHistoricalDelegation(envelope: Envelope<DelegationPayload>, acceptance: DelegationAcceptance, document: PrincipalDocument, resolvedUrl: string, previous?: DelegationCredential): void;
+export declare function validateHistoricalDelegation(record: DelegationRecord, document: PrincipalDocument, resolvedUrl: string, previous?: DelegationCredential): void;
 /** Per-result enumeration check; the caller authenticates actor and resolves the document. */
 export declare function validateControllerEnumeration(document: PrincipalDocument, actor: AgentId, now: number, owner: AgentId): void;
 /** Checks audience/status/time only, after cryptographic and historical verification.
  * The application still authenticates the subject and enforces scopes and constraints. */
 export declare function validateDelegationUse(credential: DelegationCredential, audience: string, now: number): void;
+/**
+ * Verifies a credential under Agent Delegation Section 8 with the online
+ * service-trusting evidence policy: checks the accepted record of its latest
+ * grant — signature, Controller binding, ceiling, and authority interval —
+ * confirms that the grant matches the credential, and then checks use for
+ * `audience` at `now`. Ownership and `supersedes` lineage govern management,
+ * which the service enforced at acceptance; auditors replay them with
+ * {@link auditDelegationHistory}. Relying parties still enforce scopes and
+ * constraints and authenticate the subject.
+ */
+export declare function verifyDelegationCredential(credential: DelegationCredential, records: readonly DelegationRecord[], document: PrincipalDocument, resolvedUrl: string, audience: string, now: number): DelegationVerdict;
+/**
+ * Auditor check (Section 8): replays every accepted record of a credential
+ * against the authoritative principal document — signatures, controller
+ * intervals, ceilings, and ownership lineage — and confirms that the replay
+ * matches the credential. Relying parties use {@link verifyDelegationCredential}.
+ */
+export declare function auditDelegationHistory(credential: DelegationCredential, records: readonly DelegationRecord[], document: PrincipalDocument, resolvedUrl: string): void;
+/** A relying-party audience (Section 5): an origin for a relying application, or an Agent ID for a relying agent. */
+export declare function validateAudience(value: unknown): void;
 //# sourceMappingURL=delegation.d.ts.map

package/dist/delegation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AACA,OAAO,EACL,OAAO,EACP,QAAQ,EACR,KAAK,EAIN,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,MAAM,MAAM,mBAAmB,GAC3B,OAAO,gBAAgB,GACvB,OAAO,iBAAiB,CAAC;AAE7B,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,WAAW,GACX,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uEAAuE;AACvE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,GAAG,GAAG;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,QAAQ,EAAE,OAAO,mBAAmB,CAAC;IACrC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC;IACnC,8EAA8E;IAC9E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,mBAAmB,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GACzB,sBAAsB,GACtB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,mBAAmB,CAAC;IACrC,SAAS,EAAE,mBAAmB,CAAC;IAC/B,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,OAAO,mBAAmB,CAAC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,OAAO,mBAAmB,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,0BAA0B,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,iBAAiB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;IACtC,WAAW,EAAE,oBAAoB,EAAE,CAAC;CACrC;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,sBAAsB,GAC9B,KAAK,CAAC,sBAAsB,CAAC,CAS/B;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,uBAAuB,GAC/B,KAAK,CAAC,uBAAuB,CAAC,CAShC;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,UAAQ,GAAG,IAAI,CAqBhF;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CAqB3E;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,MAAM,GAClB,IAAI,CAON;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,iBAAiB,EAC3B,GAAG,EAAE,MAAM,GACV,OAAO,CAET;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,sBAAsB,EAC/B,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CA+BN;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,sBAAsB,EAC/B,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C,IAAI,CA6BN;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,uBAAuB,GAC/B,IAAI,CAIN;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAG5E;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,GACpC,IAAI,CAuBN;AAED;oFACoF;AACpF,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EACrC,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9G,oBAAoB,CAqBtB;AAED;mGACmG;AACnG,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAC3G,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAE3D;AAED;mFACmF;AACnF,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAC7G,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAIhF;AAED;4FAC4F;AAC5F,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,oBAAoB,EAClH,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAKzF;AAED,8FAA8F;AAC9F,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAK5H;AAED;0FAC0F;AAC1F,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAM3G"}
+{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,cAAc,EACd,OAAO,EACP,QAAQ,EACR,KAAK,EACL,YAAY,EAMb,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAC1D,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAErD,yFAAyF;AACzF,eAAO,MAAM,qBAAqB,QAA6B,CAAC;AAEhE,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAUnD,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC3B,OAAO,gBAAgB,GACvB,OAAO,iBAAiB,CAAC;AAE7B,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,WAAW,GACX,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uEAAuE;AACvE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,GAAG,GAAG;QAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC7D,mFAAmF;IACnF,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAkB,SAAQ,mBAAmB;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC;IACxB,QAAQ,EAAE,OAAO,mBAAmB,CAAC;IACrC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC;IACnC,oFAAoF;IACpF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GACzB,sBAAsB,GACtB,uBAAuB,CAAC;AAE5B,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,OAAO,mBAAmB,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,gBAAgB,CAAC;IACzB,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,gBAAgB,GAAG,cAAc,CAAC,iBAAiB,CAAC,CAAC;AAEjE,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,OAAO,mBAAmB,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,0BAA0B,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,+CAA+C;AAC/C,MAAM,MAAM,uBAAuB,GAAG,YAAY,CAAC,oBAAoB,CAAC,CAAC;AAEzE,2EAA2E;AAC3E,MAAM,MAAM,wBAAwB,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAEtE,oDAAoD;AACpD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,oBAAoB,CAAC;IACjC,kFAAkF;IAClF,QAAQ,EAAE,OAAO,CAAC;IAClB,yFAAyF;IACzF,MAAM,EAAE,OAAO,CAAC;IAChB,0BAA0B;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,sBAAsB,GAC9B,KAAK,CAAC,sBAAsB,CAAC,CAS/B;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,uBAAuB,GAC/B,KAAK,CAAC,uBAAuB,CAAC,CAShC;AAED,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,UAAQ,GAAG,IAAI,CAyBhF;AAED,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI,CA+B3E;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,MAAM,GAClB,IAAI,CAON;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,iBAAiB,EAC3B,GAAG,EAAE,MAAM,GACV,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAYlG;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,sBAAsB,EAC/B,SAAS,CAAC,EAAE,MAAM,GACjB,IAAI,CA+BN;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,sBAAsB,EAC/B,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC3C,IAAI,CA6BN;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,uBAAuB,GAC/B,IAAI,CAIN;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAI5E;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,GACpC,IAAI,CAyBN;AAED;oFACoF;AACpF,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EACrC,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9G,oBAAoB,CAuBtB;AAED;mGACmG;AACnG,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,KAAK,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAC3G,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAE3D;AAED;mFACmF;AACnF,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAC7G,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAIhF;AAED;4FAC4F;AAC5F,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,gBAAgB,EACnE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAIzF;AAED,8FAA8F;AAC9F,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAQ5H;AAED;0FAC0F;AAC1F,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAM3G;AAQD;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACV,iBAAiB,CA6BnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,oBAAoB,EAChC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EACpC,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,MAAM,GAClB,IAAI,CAgBN;AAED,qHAAqH;AACrH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAMrD"}