Delegation System

The VibeFactory implements a ProxyAdmin-based delegation system that allows RTA creators to authorize others to manage their vibestreams without transferring NFT ownership.

Overview

Delegation enables creators to grant management permissions for specific RTAs to trusted parties while retaining ownership of the underlying NFT. This is useful for:

Management Services: Hiring third parties to manage vibestreams
Team Collaboration: Allowing team members to operate vibestreams
Automation: Delegating to smart contracts or bots
Temporary Access: Granting time-limited management rights

Permission Hierarchy

The delegation system implements a multi-level permission hierarchy:

graph TD A[Contract Owner] —> B[ProxyAdmin] A —> C[Authorized Addresses] B —> D[Per-RTA Delegates] C —> D E[RTA Creator] —> Dstyle A fill:#ff9999 style B fill:#99ccff style C fill:#99ff99 style D fill:#ffcc99 style E fill:#cc99ff

1. Contract Owner

Full administrative control
Can set ProxyAdmin address
Can manage authorized addresses
Emergency controls

2. ProxyAdmin

Can set/remove delegates for any RTA
Manages global delegation operations
Typically a multisig or governance contract

3. Authorized Addresses

Global whitelist of trusted addresses
Can perform delegation operations across all RTAs
Managed by owner or ProxyAdmin

4. RTA Creator

Can manage their own RTAs through authorized addresses
Retains NFT ownership
Can request delegation during RTA creation

5. Delegates

Authorized to manage specific RTAs
Can update metadata and finalize RTAs
Cannot transfer ownership

Core Functions

Setting Delegates

Direct Delegation (ProxyAdmin Only)

function setDelegate(uint256 vibeId, address delegatee) external

Sets a delegate for a specific RTA. Only callable by ProxyAdmin or ProxyAdmin owner.

Delegation During Creation

function createVibestreamWithDelegate(
    string calldata mode,
    bool storeToFilecoin,
    uint256 distance,
    string calldata metadataURI,
    uint256 ticketsAmount,
    uint256 ticketPrice,
    bool payPerStream,
    uint256 streamPrice,
    address delegatee
) external returns (uint256 vibeId)

Creates an RTA and sets up delegation in a single transaction.

Removing Delegates

function removeDelegate(uint256 vibeId) external

Removes the current delegate for an RTA.

Authorization Management

Adding Authorized Addresses

function addAuthorizedAddress(address _address) external

Adds an address to the global authorized list. Callable by ProxyAdmin or owner.

Removing Authorized Addresses

function removeAuthorizedAddress(address _address) external

Removes an address from the global authorized list.

Access Control Implementation

Permission Checking

The canModifyVibestream modifier implements comprehensive permission checking:

modifier canModifyVibestream(uint256 vibeId) {
    bool isCreator = vibestreams[vibeId].creator == msg.sender;
    bool isAuthorizedAddress = authorizedAddresses[msg.sender];
    bool isProxyAdmin = msg.sender == proxyAdmin;
    bool isDelegated = vibeDelegates[vibeId] == msg.sender;
    
    require(
        isCreator || isAuthorizedAddress || isProxyAdmin || isDelegated, 
        "Not authorized to modify vibestream"
    );
    _;
}

ProxyAdmin Validation

ProxyAdmin permissions are validated through multiple pathways:

modifier onlyProxyAdmin() {
    bool isProxyAdmin = msg.sender == proxyAdmin;
    bool isProxyAdminOwner = proxyAdmin != address(0) && 
                            ProxyAdmin(proxyAdmin).owner() == msg.sender;
    require(
        isProxyAdmin || isProxyAdminOwner, 
        "Only ProxyAdmin or ProxyAdmin owner can call this"
    );
    _;
}

Delegated Operations

Delegates can perform the following operations on assigned RTAs:

Metadata Management

function setMetadataURI(uint256 vibeId, string calldata newMetadataURI) 
    external canModifyVibestream(vibeId)

Updates the metadata URI for an RTA.

Finalization

function setFinalized(uint256 vibeId) 
    external canModifyVibestream(vibeId)

Marks an RTA as finalized (irreversible operation).

State Tracking

Delegation Mappings

mapping(uint256 => address) public vibeDelegates; // vibeId => delegatee
mapping(address => bool) public authorizedAddresses; // Global authorized addresses

View Functions

function getDelegate(uint256 vibeId) external view returns (address)
function isAuthorized(address _address) external view returns (bool)

Events

Delegation Events

event DelegateSet(uint256 indexed vibeId, address indexed delegatee);
event AuthorizedAddressAdded(address indexed newAddress);
event AuthorizedAddressRemoved(address indexed removedAddress);
event ProxyAdminUpdated(address indexed newProxyAdmin);

Security Considerations

Delegation Isolation

Each delegation is isolated to a specific RTA:

// Delegate for RTA #123 cannot modify RTA #456
vibeDelegates[123] = delegateA;
vibeDelegates[456] = delegateB;

Owner Protection

RTA creators retain ultimate control:

NFT ownership cannot be transferred by delegates
Only specific management functions are delegated
Creators can work through authorized addresses to manage delegation

Emergency Controls

Contract owner maintains emergency capabilities:

Can update ProxyAdmin address
Can modify authorized address list
Can pause contract operations if needed

Usage Examples

Creating RTA with Delegation

// Create RTA and delegate to management service
uint256 vibeId = vibeFactory.createVibestreamWithDelegate(
    "live",
    true,
    1000,
    "ipfs://metadata",
    100,
    0.1 ether,
    true,
    0.01 ether,
    managementServiceAddress
);

Setting Delegate After Creation

// ProxyAdmin sets delegate for existing RTA
vibeFactory.setDelegate(123, newDelegateAddress);

Delegate Operations

// Delegate updates metadata
vibeFactory.setMetadataURI(123, "ipfs://updated-metadata");

// Delegate finalizes RTA
vibeFactory.setFinalized(123);

Authorization Management

// Add management service to authorized addresses
vibeFactory.addAuthorizedAddress(managementServiceAddress);

// Remove compromised address
vibeFactory.removeAuthorizedAddress(compromisedAddress);

Integration Patterns

Management Services

Delegation enables professional management services:

Creator creates RTA with delegation to service
Service manages day-to-day operations
Creator retains ownership and ultimate control
Revenue flows directly to creator

Team Collaboration

Teams can collaborate on vibestream management:

Add team members to authorized addresses
Team members can delegate specific RTAs
Distributed management with centralized oversight

Automated Management

Smart contracts can be delegated for automation:

Deploy management contract with specific logic
Delegate RTAs to management contract
Automated operations based on predefined rules

Delegation Flow Diagram

sequenceDiagram participant Creator participant VibeFactory participant ProxyAdmin participant DelegateCreator->>VibeFactory: createVibestreamWithDelegate() VibeFactory->>VibeFactory: mint RTA NFT VibeFactory->>VibeFactory: set delegate mapping VibeFactory—>>Creator: vibeIdNote over Delegate: Can now manage RTADelegate->>VibeFactory: setMetadataURI() VibeFactory->>VibeFactory: check canModifyVibestream VibeFactory—>>Delegate: successProxyAdmin->>VibeFactory: removeDelegate() VibeFactory->>VibeFactory: clear delegate mapping VibeFactory—>>ProxyAdmin: successNote over Delegate: No longer has access

Best Practices

For Creators

Verify Delegates: Only delegate to trusted addresses
Monitor Activity: Track delegate actions through events
Use Authorized Services: Work with established management services
Retain Control: Keep ultimate oversight through ownership

For Delegates

Respect Boundaries: Only perform authorized operations
Communicate Changes: Inform creators of significant actions
Maintain Security: Protect delegate private keys
Follow Guidelines: Adhere to creator’s management preferences

For ProxyAdmin

Governance: Implement proper governance for delegation decisions
Transparency: Make delegation operations visible
Security: Use multisig or timelock for ProxyAdmin operations
Documentation: Maintain clear delegation policies

Next Steps

Contract Flows

See complete interaction diagrams

Deployed Contracts

View contract addresses and setup

​Delegation System

​Overview

​Permission Hierarchy

​1. Contract Owner

​2. ProxyAdmin

​3. Authorized Addresses

​4. RTA Creator

​5. Delegates

​Core Functions

​Setting Delegates

​Direct Delegation (ProxyAdmin Only)

​Delegation During Creation

​Removing Delegates

​Authorization Management

​Adding Authorized Addresses

​Removing Authorized Addresses

​Access Control Implementation

​Permission Checking

​ProxyAdmin Validation

​Delegated Operations

​Metadata Management

​Finalization

​State Tracking

​Delegation Mappings

​View Functions

​Events

​Delegation Events

​Security Considerations

​Delegation Isolation

​Owner Protection

​Emergency Controls

​Usage Examples

​Creating RTA with Delegation

​Setting Delegate After Creation

​Delegate Operations

​Authorization Management

​Integration Patterns

​Management Services

​Team Collaboration

​Automated Management

​Delegation Flow Diagram

​Best Practices

​For Creators

​For Delegates

​For ProxyAdmin

​Next Steps

Contract Flows

Deployed Contracts

Delegation System

Overview

Permission Hierarchy

1. Contract Owner

2. ProxyAdmin

3. Authorized Addresses

4. RTA Creator

5. Delegates

Core Functions

Setting Delegates

Direct Delegation (ProxyAdmin Only)

Delegation During Creation

Removing Delegates

Authorization Management

Adding Authorized Addresses

Removing Authorized Addresses

Access Control Implementation

Permission Checking

ProxyAdmin Validation

Delegated Operations

Metadata Management

Finalization

State Tracking

Delegation Mappings

View Functions

Events

Delegation Events

Security Considerations

Delegation Isolation

Owner Protection

Emergency Controls

Usage Examples

Creating RTA with Delegation

Setting Delegate After Creation

Delegate Operations

Authorization Management

Integration Patterns

Management Services

Team Collaboration

Automated Management

Delegation Flow Diagram

Best Practices

For Creators

For Delegates

For ProxyAdmin

Next Steps