aaronrene / knowtation public
feat BREAKING delegation feat/agent-delegation-store #1 / 1
aaronrene · 32 days ago · Jun 23, 2026 · Diff

feat(delegation): implement 7C-6 agent identity/delegation store and surfaces

Wire lib/agent/delegation.mjs with gated handlers (default DELEGATION_ENABLED off), SD-4 proposal hooks, Hub REST, MCP, CLI, OpenAPI, and seven-tier tests per spec §3–§5.

sha256:0279cd72f3b5db53d740fb647a4b0bf68d2c327a0d05cbcb6234c2b128d57c11 sha
sha256:b60e798d72630d27bf17ec4a705329371c13312d5fd1cd39a1b9c6e33c0b4b68 parent
+52 ~3 symbols
15 changed · 978 in snapshot files
sha256:8dc4f218f8562739415efc9d9b943513e5ec6ec2c2c5de7b5e938336b180cc0d snapshot
+52
symbols added
~3
symbols modified
15
files changed
978
files in snapshot
0
dead code introduced
Semantic Changes 55 symbols
+ lib/agent/
+ test/fixtures/agent/
~ lib/agent/delegation.mjs .mjs 47 symbols added
+ allowlistPermits function function allowlistPermits L538–541
+ applyDelegationProposalToIndex function function applyDelegationProposalToIndex L876–890
+ checkDelegationGate function function checkDelegationGate L523–531
+ effectiveScope function function effectiveScope L164–166
+ envTriState function function envTriState L64–68
+ getAgentIdentity function function getAgentIdentity L476–481
+ getConsent function function getConsent L489–494
+ getDelegationEnabled function function getDelegationEnabled L90–99
+ getDelegationPolicyForbidden function function getDelegationPolicyForbidden L105–114
+ getGrant function function getGrant L502–507
+ grantForClient function function grantForClient L357–360
+ handleAgentIdentityListRequest function function handleAgentIdentityListRequest L895–918
+ handleAgentIdentityRegisterProposeRequest function function handleAgentIdentityRegisterProposeRequest L663–734
+ handleDelegationAuditAppendRequest function function handleDelegationAuditAppendRequest L1152–1221
+ handleDelegationConsentProposeRequest function function handleDelegationConsentProposeRequest L751–822
+ handleDelegationConsentRevokeRequest function function handleDelegationConsentRevokeRequest L1101–1133
+ handleDelegationGrantListRequest function function handleDelegationGrantListRequest L1074–1096
+ handleDelegationGrantMintRequest function function handleDelegationGrantMintRequest L934–1037
+ handleDelegationGrantRevokeRequest function function handleDelegationGrantRevokeRequest L1042–1069
+ hashGrantBearer function function hashGrantBearer L172–174
+ hashPrincipalRef function function hashPrincipalRef L140–144
+ intersectScope function function intersectScope L151–157
+ isValidId function function isValidId L195–199
+ isValidOwnerRef function function isValidOwnerRef L205–214
+ loadAuditStore function function loadAuditStore L454–460
+ loadConsentsStore function function loadConsentsStore L414–420
+ loadGrantsStore function function loadGrantsStore L434–440
+ loadIdentitiesStore function function loadIdentitiesStore L394–400
+ loadVaultStore function function loadVaultStore L367–377
+ precheckApprovedDelegationProposal function function precheckApprovedDelegationProposal L829–870
+ randomToken function function randomToken L181–188
+ readDelegationPolicyFile function function readDelegationPolicyFile L74–84
+ readVaultDelegationPolicy function function readVaultDelegationPolicy L120–132
+ refuse function function refuse L513–515
+ resolveConsentStatus function function resolveConsentStatus L324–331
+ resolveGrantStatus function function resolveGrantStatus L337–349
+ saveAuditStore function function saveAuditStore L466–468
+ saveConsentsStore function function saveConsentsStore L426–428
+ saveGrantsStore function function saveGrantsStore L446–448
+ saveIdentitiesStore function function saveIdentitiesStore L406–408
+ saveVaultStore function function saveVaultStore L384–388
+ seedDelegationFixtures function function seedDelegationFixtures L1231–1242
+ validateAgentIdentityRecord function function validateAgentIdentityRecord L220–235
+ validateAuditRecord function function validateAuditRecord L299–318
+ validateChain function function validateChain L560–648
+ validateConsentRecord function function validateConsentRecord L241–263
+ validateGrantRecord function function validateGrantRecord L269–293
~ mcp/tools/agent-delegation.mjs .mjs 1 symbol added
+ registerAgentDelegationTools function function registerAgentDelegationTools L26–299
+ test/agent-delegation-data-integrity.test.mjs .mjs
+ test/agent-delegation-e2e.test.mjs .mjs
~ test/agent-delegation-parity-integration.test.mjs .mjs 1 symbol added
+ stripVolatileMint function function stripVolatileMint L25–35
+ test/agent-delegation-performance.test.mjs .mjs
+ test/agent-delegation-security.test.mjs .mjs
+ test/agent-delegation-stress.test.mjs .mjs
+ test/agent-delegation-unit.test.mjs .mjs
~ test/fixtures/agent/delegation-helpers.mjs .mjs 3 symbols added
+ makeAgentIdentity function function makeAgentIdentity L38–52
+ makeDelegationConsent function function makeDelegationConsent L57–73
+ writeDelegationPolicy function function writeDelegationPolicy L20–33
~ cli/index.mjs .mjs 1 symbol modified
~ main
~ docs/openapi.yaml .yaml
~ hub/proposals-store.mjs .mjs 1 symbol modified
~ createProposal
~ hub/server.mjs .mjs
~ mcp/create-server.mjs .mjs 1 symbol modified
~ mountKnowtationMcp
Files Changed
+10 ~5
978 in snapshot
+ lib/agent/delegation.mjs .mjs
+ mcp/tools/agent-delegation.mjs .mjs
+ test/agent-delegation-data-integrity.test.mjs .mjs
+ test/agent-delegation-e2e.test.mjs .mjs
+ test/agent-delegation-parity-integration.test.mjs .mjs
+ test/agent-delegation-performance.test.mjs .mjs
+ test/agent-delegation-security.test.mjs .mjs
+ test/agent-delegation-stress.test.mjs .mjs
+ test/agent-delegation-unit.test.mjs .mjs
+ test/fixtures/agent/delegation-helpers.mjs .mjs
~ cli/index.mjs .mjs
~ docs/openapi.yaml .yaml
~ hub/proposals-store.mjs .mjs
~ hub/server.mjs .mjs
~ mcp/create-server.mjs .mjs
← Older Oldest on feat/agent-delegation-store
All commits
Newer → Latest on feat/agent-delegation-store

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:0279cd72f3b5db53d740fb647a4b0bf68d2c327a0d05cbcb6234c2b128d57c11 --body "your comment"