​

Delegation System

​

Overview

• Management Services: Hiring third parties to manage vibestreams
• Team Collaboration: Allowing team members to operate vibestreams
• Automation: Delegating to smart contracts or bots
• Temporary Access: Granting time-limited management rights

​

Permission Hierarchy

​

1. Contract Owner

• Full administrative control
• Can set ProxyAdmin address
• Can manage authorized addresses
• Emergency controls

​

2. ProxyAdmin

• Can set/remove delegates for any RTA
• Manages global delegation operations
• Typically a multisig or governance contract

​

3. Authorized Addresses

• Global whitelist of trusted addresses
• Can perform delegation operations across all RTAs
• Managed by owner or ProxyAdmin

​

4. RTA Creator

• Can manage their own RTAs through authorized addresses
• Retains NFT ownership
• Can request delegation during RTA creation

​

5. Delegates

• Authorized to manage specific RTAs
• Can update metadata and finalize RTAs
• Cannot transfer ownership

​

Core Functions

​

Setting Delegates

​

Direct Delegation (ProxyAdmin Only)

function setDelegate(uint256 vibeId, address delegatee) external

​

Delegation During Creation

function createVibestreamWithDelegate(
    string calldata mode,
    bool storeToFilecoin,
    uint256 distance,
    string calldata metadataURI,
    uint256 ticketsAmount,
    uint256 ticketPrice,
    bool payPerStream,
    uint256 streamPrice,
    address delegatee
) external returns (uint256 vibeId)

​

Removing Delegates

function removeDelegate(uint256 vibeId) external

​

Authorization Management

​

Adding Authorized Addresses

function addAuthorizedAddress(address _address) external

​

Removing Authorized Addresses

function removeAuthorizedAddress(address _address) external

​

Access Control Implementation

​

Permission Checking

modifier canModifyVibestream(uint256 vibeId) {
    bool isCreator = vibestreams[vibeId].creator == msg.sender;
    bool isAuthorizedAddress = authorizedAddresses[msg.sender];
    bool isProxyAdmin = msg.sender == proxyAdmin;
    bool isDelegated = vibeDelegates[vibeId] == msg.sender;
    
    require(
        isCreator || isAuthorizedAddress || isProxyAdmin || isDelegated, 
        "Not authorized to modify vibestream"
    );
    _;
}

​

ProxyAdmin Validation

modifier onlyProxyAdmin() {
    bool isProxyAdmin = msg.sender == proxyAdmin;
    bool isProxyAdminOwner = proxyAdmin != address(0) && 
                            ProxyAdmin(proxyAdmin).owner() == msg.sender;
    require(
        isProxyAdmin || isProxyAdminOwner, 
        "Only ProxyAdmin or ProxyAdmin owner can call this"
    );
    _;
}

​

Delegated Operations

​

Metadata Management

function setMetadataURI(uint256 vibeId, string calldata newMetadataURI) 
    external canModifyVibestream(vibeId)

​

Finalization

function setFinalized(uint256 vibeId) 
    external canModifyVibestream(vibeId)

​

State Tracking

​

Delegation Mappings

mapping(uint256 => address) public vibeDelegates; // vibeId => delegatee
mapping(address => bool) public authorizedAddresses; // Global authorized addresses

​

View Functions

function getDelegate(uint256 vibeId) external view returns (address)
function isAuthorized(address _address) external view returns (bool)

​

Events

​

Delegation Events

event DelegateSet(uint256 indexed vibeId, address indexed delegatee);
event AuthorizedAddressAdded(address indexed newAddress);
event AuthorizedAddressRemoved(address indexed removedAddress);
event ProxyAdminUpdated(address indexed newProxyAdmin);

​

Security Considerations

​

Delegation Isolation

// Delegate for RTA #123 cannot modify RTA #456
vibeDelegates[123] = delegateA;
vibeDelegates[456] = delegateB;

​

Owner Protection

• NFT ownership cannot be transferred by delegates
• Only specific management functions are delegated
• Creators can work through authorized addresses to manage delegation

​

Emergency Controls

• Can update ProxyAdmin address
• Can modify authorized address list
• Can pause contract operations if needed

​

Usage Examples

​

Creating RTA with Delegation

// Create RTA and delegate to management service
uint256 vibeId = vibeFactory.createVibestreamWithDelegate(
    "live",
    true,
    1000,
    "ipfs://metadata",
    100,
    0.1 ether,
    true,
    0.01 ether,
    managementServiceAddress
);

​

Setting Delegate After Creation

// ProxyAdmin sets delegate for existing RTA
vibeFactory.setDelegate(123, newDelegateAddress);

​

Delegate Operations

// Delegate updates metadata
vibeFactory.setMetadataURI(123, "ipfs://updated-metadata");

// Delegate finalizes RTA
vibeFactory.setFinalized(123);

​

Authorization Management

// Add management service to authorized addresses
vibeFactory.addAuthorizedAddress(managementServiceAddress);

// Remove compromised address
vibeFactory.removeAuthorizedAddress(compromisedAddress);

​

Integration Patterns

​

Management Services

1. Creator creates RTA with delegation to service
2. Service manages day-to-day operations
3. Creator retains ownership and ultimate control
4. Revenue flows directly to creator

​

Team Collaboration

1. Add team members to authorized addresses
2. Team members can delegate specific RTAs
3. Distributed management with centralized oversight

​

Automated Management

1. Deploy management contract with specific logic
2. Delegate RTAs to management contract
3. Automated operations based on predefined rules

​

Delegation Flow Diagram

​

Best Practices

​

For Creators

1. Verify Delegates: Only delegate to trusted addresses
2. Monitor Activity: Track delegate actions through events
3. Use Authorized Services: Work with established management services
4. Retain Control: Keep ultimate oversight through ownership

​

For Delegates

1. Respect Boundaries: Only perform authorized operations
2. Communicate Changes: Inform creators of significant actions
3. Maintain Security: Protect delegate private keys
4. Follow Guidelines: Adhere to creator’s management preferences

​

For ProxyAdmin

1. Governance: Implement proper governance for delegation decisions
2. Transparency: Make delegation operations visible
3. Security: Use multisig or timelock for ProxyAdmin operations
4. Documentation: Maintain clear delegation policies

​

Next Steps