@crediolabs/policy-builder-cli 0.1.7 → 0.1.8

package/dist/bin/policy-builder.js

@@ -14,6 +14,7 @@
 //                              [--oracle-max-staleness <s>] [--oracle-max-deviation <bps>]
 //                              [--window-seconds <n>] [--valid-until <ledger>]
 //                              [--limit-amount <i128str>] [--invocation-limit <n>]
+//                              [--recipient <C...|G...>]...
 //                              [--json] [--quiet] [--out <path>]
 //
 // The router is hand-rolled (no commander / yargs dep). It splits argv into
@@ -73,6 +74,7 @@ Usage:
                             [--oracle-max-staleness <s>] [--oracle-max-deviation <bps>]
                             [--window-seconds <n>] [--valid-until <ledger>]
                             [--limit-amount <i128str>] [--invocation-limit <n>]
+                            [--recipient <C...|G...>]...
                             [--json] [--quiet] [--out <path>]
 
 Flags:
@@ -108,6 +110,10 @@ Flags:
                             from --responses
   --invocation-limit        per-field override of userResponses.invocationLimit;
                             overrides the same field from --responses
+  --recipient               swap-recipient allowlist entry (C... contract or
+                            G... wallet) for a SoroSwap swap; REPEATABLE. Absent,
+                            the recorded recipient is pinned by default; supplying
+                            --recipient REPLACES that pin with the given set
 `);
 }
 await main();

package/dist/src/commands/synthesize.d.ts

@@ -1,3 +1,3 @@
-import type { ProposedPolicy } from '@crediolabs/policy-synth';
+import { type ProposedPolicy } from '@crediolabs/policy-synth';
 import { type CliFlags } from '../output.ts';
 export declare function runSynthesizeCommand(argv: ReadonlyArray<string>, flags: CliFlags): Promise<ProposedPolicy>;

package/dist/src/commands/synthesize.js

@@ -14,6 +14,7 @@
 // Oracle params (--oracle-max-staleness, --oracle-max-deviation) are part of
 // the interpreter opt-in and are rejected without --smart-account; tighten-only
 // bounds are validated by the core.
+import { isStellarAddress } from '@crediolabs/policy-synth';
 import { runSynthesizePolicy } from '@crediolabs/policy-synth/run';
 import { CliError, formatToolResponse, parsePairs, readJsonFile } from "../output.js";
 // Positive-int flags and i128 amount strings share the same wire shape: a
@@ -91,6 +92,26 @@ export async function runSynthesizeCommand(argv, flags) {
     if (pairs['invocation-limit'] !== undefined) {
         userResponses.invocationLimit = parsePositiveInt(pairs['invocation-limit'], '--invocation-limit');
     }
+    // --recipient <C...|G...> is REPEATABLE (parsePairs collapses duplicate keys,
+    // so it is collected straight from argv). Each value builds the swap-recipient
+    // allowlist; supplying it REPLACES the default pin to the recorded recipient.
+    const recipients = collectRepeated(argv, 'recipient');
+    if (recipients.length > 0) {
+        for (const r of recipients) {
+            // Same validator the run-layer schema applies (SDK StrKey underneath) - a
+            // swap recipient may be a G... wallet or a C... contract. Shared rather
+            // than re-inlined so the CLI and the schema cannot drift apart.
+            if (!isStellarAddress(r)) {
+                throw new CliError({
+                    code: 'CLI_MISSING_ARG',
+                    message: `synthesize: --recipient "${r}" is not a valid Stellar address (expected a G... wallet or C... contract)`,
+                    severity: 'error',
+                    retryable: false,
+                });
+            }
+        }
+        userResponses.swapRecipientAllowlist = recipients;
+    }
     if (Object.keys(userResponses).length > 0) {
         args.userResponses = userResponses;
     }
@@ -234,6 +255,29 @@ function parsePositiveInt(raw, flagName) {
     }
     return n;
 }
+/** Collect ALL values for a repeatable `--<name> <value>` / `--<name>=<value>`
+ *  flag from argv, in order. Unlike `parsePairs` (which keeps only the last
+ *  occurrence of a key), this preserves every occurrence so a flag like
+ *  `--recipient` can be supplied multiple times to build an allowlist. A
+ *  trailing `--<name>` with no value (or another flag next) is skipped. */
+function collectRepeated(argv, name) {
+    const out = [];
+    const eqPrefix = `--${name}=`;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === `--${name}`) {
+            const next = argv[i + 1];
+            if (next !== undefined && !next.startsWith('--')) {
+                out.push(next);
+                i++;
+            }
+        }
+        else if (a?.startsWith(eqPrefix)) {
+            out.push(a.slice(eqPrefix.length));
+        }
+    }
+    return out;
+}
 /** Parse an i128 decimal string (positive, base 10). The synth gate, not the
  *  CLI, decides what to do with negatives - real recordings carry positive
  *  amounts on the wire for `limitAmount`. */

package/dist-cjs/src/commands/synthesize.d.ts

@@ -1,3 +1,3 @@
-import type { ProposedPolicy } from '@crediolabs/policy-synth';
+import { type ProposedPolicy } from '@crediolabs/policy-synth';
 import { type CliFlags } from '../output.ts';
 export declare function runSynthesizeCommand(argv: ReadonlyArray<string>, flags: CliFlags): Promise<ProposedPolicy>;

package/dist-cjs/src/commands/synthesize.js

@@ -17,6 +17,7 @@
 // bounds are validated by the core.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runSynthesizeCommand = runSynthesizeCommand;
+const policy_synth_1 = require("@crediolabs/policy-synth");
 const run_1 = require("@crediolabs/policy-synth/run");
 const output_ts_1 = require("../output.js");
 // Positive-int flags and i128 amount strings share the same wire shape: a
@@ -94,6 +95,26 @@ async function runSynthesizeCommand(argv, flags) {
     if (pairs['invocation-limit'] !== undefined) {
         userResponses.invocationLimit = parsePositiveInt(pairs['invocation-limit'], '--invocation-limit');
     }
+    // --recipient <C...|G...> is REPEATABLE (parsePairs collapses duplicate keys,
+    // so it is collected straight from argv). Each value builds the swap-recipient
+    // allowlist; supplying it REPLACES the default pin to the recorded recipient.
+    const recipients = collectRepeated(argv, 'recipient');
+    if (recipients.length > 0) {
+        for (const r of recipients) {
+            // Same validator the run-layer schema applies (SDK StrKey underneath) - a
+            // swap recipient may be a G... wallet or a C... contract. Shared rather
+            // than re-inlined so the CLI and the schema cannot drift apart.
+            if (!(0, policy_synth_1.isStellarAddress)(r)) {
+                throw new output_ts_1.CliError({
+                    code: 'CLI_MISSING_ARG',
+                    message: `synthesize: --recipient "${r}" is not a valid Stellar address (expected a G... wallet or C... contract)`,
+                    severity: 'error',
+                    retryable: false,
+                });
+            }
+        }
+        userResponses.swapRecipientAllowlist = recipients;
+    }
     if (Object.keys(userResponses).length > 0) {
         args.userResponses = userResponses;
     }
@@ -237,6 +258,29 @@ function parsePositiveInt(raw, flagName) {
     }
     return n;
 }
+/** Collect ALL values for a repeatable `--<name> <value>` / `--<name>=<value>`
+ *  flag from argv, in order. Unlike `parsePairs` (which keeps only the last
+ *  occurrence of a key), this preserves every occurrence so a flag like
+ *  `--recipient` can be supplied multiple times to build an allowlist. A
+ *  trailing `--<name>` with no value (or another flag next) is skipped. */
+function collectRepeated(argv, name) {
+    const out = [];
+    const eqPrefix = `--${name}=`;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === `--${name}`) {
+            const next = argv[i + 1];
+            if (next !== undefined && !next.startsWith('--')) {
+                out.push(next);
+                i++;
+            }
+        }
+        else if (a?.startsWith(eqPrefix)) {
+            out.push(a.slice(eqPrefix.length));
+        }
+    }
+    return out;
+}
 /** Parse an i128 decimal string (positive, base 10). The synth gate, not the
  *  CLI, decides what to do with negatives - real recordings carry positive
  *  amounts on the wire for `limitAmount`. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crediolabs/policy-builder-cli",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "license": "MIT",
   "description": "CLI wrapper around the OZ policy-synth core (record + synthesize) for solo-dev and CI workflows.",
   "type": "module",
@@ -63,7 +63,7 @@
     "prepack": "bun run build"
   },
   "dependencies": {
-    "@crediolabs/policy-synth": "0.1.5",
+    "@crediolabs/policy-synth": "0.1.6",
     "zod": "3.25.76"
   },
   "devDependencies": {

package/src/commands/synthesize.ts

@@ -15,7 +15,7 @@
 // the interpreter opt-in and are rejected without --smart-account; tighten-only
 // bounds are validated by the core.
 
-import type { ProposedPolicy } from '@crediolabs/policy-synth'
+import { isStellarAddress, type ProposedPolicy } from '@crediolabs/policy-synth'
 import { runSynthesizePolicy } from '@crediolabs/policy-synth/run'
 import { CliError, type CliFlags, formatToolResponse, parsePairs, readJsonFile } from '../output.ts'
 
@@ -110,6 +110,26 @@ export async function runSynthesizeCommand(
       '--invocation-limit'
     )
   }
+  // --recipient <C...|G...> is REPEATABLE (parsePairs collapses duplicate keys,
+  // so it is collected straight from argv). Each value builds the swap-recipient
+  // allowlist; supplying it REPLACES the default pin to the recorded recipient.
+  const recipients = collectRepeated(argv, 'recipient')
+  if (recipients.length > 0) {
+    for (const r of recipients) {
+      // Same validator the run-layer schema applies (SDK StrKey underneath) - a
+      // swap recipient may be a G... wallet or a C... contract. Shared rather
+      // than re-inlined so the CLI and the schema cannot drift apart.
+      if (!isStellarAddress(r)) {
+        throw new CliError({
+          code: 'CLI_MISSING_ARG',
+          message: `synthesize: --recipient "${r}" is not a valid Stellar address (expected a G... wallet or C... contract)`,
+          severity: 'error',
+          retryable: false,
+        })
+      }
+    }
+    userResponses.swapRecipientAllowlist = recipients
+  }
   if (Object.keys(userResponses).length > 0) {
     args.userResponses = userResponses
   }
@@ -269,6 +289,29 @@ function parsePositiveInt(raw: string, flagName: string): number {
   return n
 }
 
+/** Collect ALL values for a repeatable `--<name> <value>` / `--<name>=<value>`
+ *  flag from argv, in order. Unlike `parsePairs` (which keeps only the last
+ *  occurrence of a key), this preserves every occurrence so a flag like
+ *  `--recipient` can be supplied multiple times to build an allowlist. A
+ *  trailing `--<name>` with no value (or another flag next) is skipped. */
+function collectRepeated(argv: ReadonlyArray<string>, name: string): string[] {
+  const out: string[] = []
+  const eqPrefix = `--${name}=`
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i]
+    if (a === `--${name}`) {
+      const next = argv[i + 1]
+      if (next !== undefined && !next.startsWith('--')) {
+        out.push(next)
+        i++
+      }
+    } else if (a?.startsWith(eqPrefix)) {
+      out.push(a.slice(eqPrefix.length))
+    }
+  }
+  return out
+}
+
 /** Parse an i128 decimal string (positive, base 10). The synth gate, not the
  *  CLI, decides what to do with negatives - real recordings carry positive
  *  amounts on the wire for `limitAmount`. */