@crediolabs/policy-builder-mcp 0.1.18 → 0.3.0

package/dist/src/transports/http.js

@@ -2,8 +2,10 @@
 //
 // Streamable HTTP transport (hosted). Uses the Node http module directly so
 // the package stays thin - no express / hono dep. We run in STATELESS mode
-// (sessionIdGenerator: undefined) so each POST /mcp is its own transaction:
-// this matches the brief's "stateless across calls" invariant.
+// (no sessionIdGenerator: the SDK disables session management when it is not
+// provided) so each POST /mcp is its own transaction: this matches the
+// brief's "stateless across calls" invariant. Stateless means a fresh server
+// and transport per request - see the handler for why the SDK requires it.
 //
 // Single endpoint: POST /mcp (the SDK also accepts GET for SSE streaming, but
 // the T1 surface does not emit server-initiated messages so we omit it).
@@ -34,13 +36,6 @@ export async function startHttpServer(opts) {
     if (!LOOPBACK_HOSTS.has(host) && opts.allowExternalHost !== true) {
         throw new Error(`startHttpServer: refusing to bind host ${host}: the MCP surface is unauthenticated, so only loopback (127.0.0.1, ::1, localhost) is permitted by default. Pass \`allowExternalHost: true\` to opt in to a non-loopback bind.`);
     }
-    const server = createMcpServer();
-    // One transport per server (the SDK reuses the transport for every request
-    // in stateless mode). We connect it once at startup and reuse it.
-    const transport = new StreamableHTTPServerTransport({
-        sessionIdGenerator: undefined,
-    });
-    await server.connect(transport);
     const httpServer = createServer(async (req, res) => {
         if (!req.url) {
             sendJson(res, 400, { error: 'missing url' });
@@ -86,7 +81,33 @@ export async function startHttpServer(opts) {
             });
             return;
         }
+        // A stateless transport handles exactly ONE request: the SDK refuses to
+        // reuse one ("Stateless transport cannot be reused across requests"),
+        // because a shared instance would let concurrent clients collide on
+        // JSON-RPC message ids. So the server and its transport are built here,
+        // per request, and torn down when the response closes.
+        // No `sessionIdGenerator`: the SDK disables session management when the
+        // option is absent, which is the stateless mode this surface wants.
+        // Passing an explicit `undefined` means the same thing to the SDK but is
+        // not assignable under `exactOptionalPropertyTypes`, so omission is both
+        // the type-correct and the documented spelling.
+        const server = createMcpServer();
+        const transport = new StreamableHTTPServerTransport();
+        // Registered before dispatch, not after: once the response has closed the
+        // event is gone, so a listener attached afterwards would never fire and
+        // the pair would leak.
+        res.on('close', () => {
+            void transport.close().catch(() => { });
+            void server.close().catch(() => { });
+        });
         try {
+            // The SDK declares `Transport.onclose` as an optional `() => void`, but
+            // exposes it on this class as an accessor pair typed `(() => void) |
+            // undefined`. Those are not assignable under `exactOptionalPropertyTypes`.
+            // The widening is upstream and structural only - the runtime object does
+            // satisfy `Transport` - so the assertion is narrowed to this one call
+            // rather than relaxing the compiler flag for the whole package.
+            await server.connect(transport);
             // `handleRequest` writes the response and returns once the message has
             // been dispatched. No shared state across calls in stateless mode.
             await transport.handleRequest(req, res, body);
@@ -119,10 +140,11 @@ export async function startHttpServer(opts) {
         port: opts.port,
         host,
         path,
+        // Nothing outlives a request, so closing the listener is the whole
+        // shutdown: each request's server and transport are already torn down by
+        // the `close` handler on its own response.
         close: async () => {
             await new Promise((resolve) => httpServer.close(() => resolve()));
-            await transport.close().catch(() => { });
-            await server.close().catch(() => { });
         },
     };
 }

package/dist-cjs/src/schemas.d.ts

@@ -1,6 +1,6 @@
-import { ComposeUserResponsesSchema, GetInterpreterInfoInputSchema, InstallPolicyInputSchema, InterpreterOptionsSchema, MandateSpecSchema, NetworkSchema, OraclePriceFixtureSchema, OzAdapterConfigSchema, PredicateNodeSchema, RecordedTransactionSchema, RecordTransactionInputSchema, RevokePolicyInputSchema, SimulatePolicyInputSchema, SynthesizePolicyInputSchema, ToolErrorSchema, VerifyPolicyInputSchema } from '@crediolabs/policy-synth/run';
+import { ComposeUserResponsesSchema, GetInterpreterInfoInputSchema, InstallPolicyInputSchema, InterpreterOptionsSchema, NetworkSchema, PredicateNodeSchema, RecordedTransactionSchema, RecordTransactionInputSchema, RevokePolicyInputSchema, SynthesizePolicyInputSchema, ToolErrorSchema } from '@crediolabs/policy-synth/run';
 import { z } from 'zod';
-export { ComposeUserResponsesSchema, GetInterpreterInfoInputSchema, InstallPolicyInputSchema, InterpreterOptionsSchema, MandateSpecSchema, NetworkSchema, OraclePriceFixtureSchema, OzAdapterConfigSchema, PredicateNodeSchema, RecordedTransactionSchema, RecordTransactionInputSchema, RevokePolicyInputSchema, SimulatePolicyInputSchema, SynthesizePolicyInputSchema, ToolErrorSchema, VerifyPolicyInputSchema, };
+export { ComposeUserResponsesSchema, GetInterpreterInfoInputSchema, InstallPolicyInputSchema, InterpreterOptionsSchema, NetworkSchema, PredicateNodeSchema, RecordedTransactionSchema, RecordTransactionInputSchema, RevokePolicyInputSchema, SynthesizePolicyInputSchema, ToolErrorSchema, };
 /** Flat ZodRawShape used for the MCP SDK tool registration. The body
  *  re-validates against `RecordTransactionInputSchema` so the mutual-exclusion
  *  rule still fires (the SDK does not invoke `.refine()` at registration time). */
@@ -11,156 +11,10 @@ export declare const RecordTransactionToolShape: {
     readonly confidenceOverride: z.ZodOptional<z.ZodNumber>;
 };
 /** Flat ZodRawShape used for MCP tool registration. Every field is optional
- *  so the JSON-Schema the SDK exposes to clients does not forbid either
- *  front-end; the body re-validates against the discriminated union. */
+ *  so the JSON-Schema the SDK exposes to clients stays permissive; the body
+ *  re-validates against the strict schema. */
 export declare const SynthesizePolicyToolShape: {
-    readonly source: z.ZodOptional<z.ZodEnum<["mandate", "recording"]>>;
-    readonly mandate: z.ZodOptional<z.ZodEffects<z.ZodObject<{
-        chain: z.ZodLiteral<"stellar">;
-        contract: z.ZodString;
-        method: z.ZodOptional<z.ZodString>;
-        spendingLimit: z.ZodOptional<z.ZodObject<{
-            token: z.ZodString;
-            limit: z.ZodString;
-            windowSeconds: z.ZodNumber;
-        }, "strip", z.ZodTypeAny, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }>>;
-        approvalThreshold: z.ZodOptional<z.ZodNumber>;
-        recipients: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        expiry: z.ZodOptional<z.ZodObject<{
-            validUntilLedger: z.ZodOptional<z.ZodNumber>;
-            validUntilUnixSeconds: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }>>;
-    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        chain: z.ZodLiteral<"stellar">;
-        contract: z.ZodString;
-        method: z.ZodOptional<z.ZodString>;
-        spendingLimit: z.ZodOptional<z.ZodObject<{
-            token: z.ZodString;
-            limit: z.ZodString;
-            windowSeconds: z.ZodNumber;
-        }, "strip", z.ZodTypeAny, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }>>;
-        approvalThreshold: z.ZodOptional<z.ZodNumber>;
-        recipients: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        expiry: z.ZodOptional<z.ZodObject<{
-            validUntilLedger: z.ZodOptional<z.ZodNumber>;
-            validUntilUnixSeconds: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }>>;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        chain: z.ZodLiteral<"stellar">;
-        contract: z.ZodString;
-        method: z.ZodOptional<z.ZodString>;
-        spendingLimit: z.ZodOptional<z.ZodObject<{
-            token: z.ZodString;
-            limit: z.ZodString;
-            windowSeconds: z.ZodNumber;
-        }, "strip", z.ZodTypeAny, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }>>;
-        approvalThreshold: z.ZodOptional<z.ZodNumber>;
-        recipients: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        expiry: z.ZodOptional<z.ZodObject<{
-            validUntilLedger: z.ZodOptional<z.ZodNumber>;
-            validUntilUnixSeconds: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }>>;
-    }, z.ZodTypeAny, "passthrough">>, z.objectOutputType<{
-        chain: z.ZodLiteral<"stellar">;
-        contract: z.ZodString;
-        method: z.ZodOptional<z.ZodString>;
-        spendingLimit: z.ZodOptional<z.ZodObject<{
-            token: z.ZodString;
-            limit: z.ZodString;
-            windowSeconds: z.ZodNumber;
-        }, "strip", z.ZodTypeAny, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }>>;
-        approvalThreshold: z.ZodOptional<z.ZodNumber>;
-        recipients: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        expiry: z.ZodOptional<z.ZodObject<{
-            validUntilLedger: z.ZodOptional<z.ZodNumber>;
-            validUntilUnixSeconds: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }>>;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        chain: z.ZodLiteral<"stellar">;
-        contract: z.ZodString;
-        method: z.ZodOptional<z.ZodString>;
-        spendingLimit: z.ZodOptional<z.ZodObject<{
-            token: z.ZodString;
-            limit: z.ZodString;
-            windowSeconds: z.ZodNumber;
-        }, "strip", z.ZodTypeAny, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }, {
-            token: string;
-            limit: string;
-            windowSeconds: number;
-        }>>;
-        approvalThreshold: z.ZodOptional<z.ZodNumber>;
-        recipients: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
-        expiry: z.ZodOptional<z.ZodObject<{
-            validUntilLedger: z.ZodOptional<z.ZodNumber>;
-            validUntilUnixSeconds: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }, {
-            validUntilLedger?: number | undefined;
-            validUntilUnixSeconds?: number | undefined;
-        }>>;
-    }, z.ZodTypeAny, "passthrough">>>;
+    readonly source: z.ZodOptional<z.ZodLiteral<"recording">>;
     readonly recordedTx: z.ZodOptional<z.ZodObject<{
         network: z.ZodEnum<["mainnet", "testnet"]>;
         signers: z.ZodArray<z.ZodString, "many">;
@@ -171,15 +25,15 @@ export declare const SynthesizePolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -257,15 +111,15 @@ export declare const SynthesizePolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -343,15 +197,15 @@ export declare const SynthesizePolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -422,24 +276,18 @@ export declare const SynthesizePolicyToolShape: {
     }, z.ZodTypeAny, "passthrough">>>;
     readonly network: z.ZodOptional<z.ZodEnum<["mainnet", "testnet"]>>;
     readonly userResponses: z.ZodOptional<z.ZodObject<{
-        windowSeconds: z.ZodOptional<z.ZodNumber>;
-        validUntilLedger: z.ZodOptional<z.ZodNumber>;
-        limitAmount: z.ZodOptional<z.ZodString>;
-        invocationLimit: z.ZodOptional<z.ZodNumber>;
-        swapRecipientAllowlist: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
-        windowSeconds: z.ZodOptional<z.ZodNumber>;
         validUntilLedger: z.ZodOptional<z.ZodNumber>;
         limitAmount: z.ZodOptional<z.ZodString>;
-        invocationLimit: z.ZodOptional<z.ZodNumber>;
         swapRecipientAllowlist: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
-        windowSeconds: z.ZodOptional<z.ZodNumber>;
-        validUntilLedger: z.ZodOptional<z.ZodNumber>;
-        limitAmount: z.ZodOptional<z.ZodString>;
-        invocationLimit: z.ZodOptional<z.ZodNumber>;
-        swapRecipientAllowlist: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
-    }, z.ZodTypeAny, "passthrough">>>;
+    }, "strict", z.ZodTypeAny, {
+        limitAmount?: string | undefined;
+        validUntilLedger?: number | undefined;
+        swapRecipientAllowlist?: string[] | undefined;
+    }, {
+        limitAmount?: string | undefined;
+        validUntilLedger?: number | undefined;
+        swapRecipientAllowlist?: string[] | undefined;
+    }>>;
     readonly confidenceOverride: z.ZodOptional<z.ZodObject<{
         threshold: z.ZodNumber;
     }, "strip", z.ZodTypeAny, {
@@ -450,73 +298,17 @@ export declare const SynthesizePolicyToolShape: {
     readonly interpreter: z.ZodOptional<z.ZodObject<{
         smartAccountAddress: z.ZodString;
         installNonce: z.ZodOptional<z.ZodNumber>;
-        oracleParams: z.ZodOptional<z.ZodObject<{
-            maxStalenessSeconds: z.ZodOptional<z.ZodNumber>;
-            maxDeviationBps: z.ZodOptional<z.ZodNumber>;
-        }, "strip", z.ZodTypeAny, {
-            maxStalenessSeconds?: number | undefined;
-            maxDeviationBps?: number | undefined;
-        }, {
-            maxStalenessSeconds?: number | undefined;
-            maxDeviationBps?: number | undefined;
-        }>>;
     }, "strip", z.ZodTypeAny, {
         smartAccountAddress: string;
-        oracleParams?: {
-            maxStalenessSeconds?: number | undefined;
-            maxDeviationBps?: number | undefined;
-        } | undefined;
         installNonce?: number | undefined;
     }, {
         smartAccountAddress: string;
-        oracleParams?: {
-            maxStalenessSeconds?: number | undefined;
-            maxDeviationBps?: number | undefined;
-        } | undefined;
         installNonce?: number | undefined;
     }>>;
-    readonly ozConfig: z.ZodOptional<z.ZodObject<{
-        network: z.ZodEnum<["mainnet", "testnet"]>;
-        instances: z.ZodObject<{
-            spending_limit: z.ZodString;
-            simple_threshold: z.ZodString;
-            weighted_threshold: z.ZodString;
-        }, "strip", z.ZodTypeAny, {
-            spending_limit: string;
-            simple_threshold: string;
-            weighted_threshold: string;
-        }, {
-            spending_limit: string;
-            simple_threshold: string;
-            weighted_threshold: string;
-        }>;
-    }, "strip", z.ZodTypeAny, {
-        network: "mainnet" | "testnet";
-        instances: {
-            spending_limit: string;
-            simple_threshold: string;
-            weighted_threshold: string;
-        };
-    }, {
-        network: "mainnet" | "testnet";
-        instances: {
-            spending_limit: string;
-            simple_threshold: string;
-            weighted_threshold: string;
-        };
-    }>>;
     readonly explain: z.ZodOptional<z.ZodBoolean>;
 };
-/** Flat ZodRawShape for `simulate_policy`. The `predicate` is typed as
- *  `z.unknown()` at the tool boundary because the recursive
- *  `PredicateNodeSchema` is a `z.lazy()` union (the SDK does not accept
- *  unions at the tool-registration boundary); the body re-validates
- *  against `SimulatePolicyInputSchema`, which fails closed on a
- *  malformed predicate. `predicate` is nullable here (vs required for
- *  verify_policy) so the SDK-emitted JSON Schema mirrors the engine's
- *  "OZ-only / no interpreter predicate" contract. */
 export declare const SimulatePolicyToolShape: {
-    readonly predicate: z.ZodOptional<z.ZodNullable<z.ZodUnknown>>;
+    readonly predicate: z.ZodType<unknown, z.ZodTypeDef, unknown>;
     readonly permitTx: z.ZodObject<{
         network: z.ZodEnum<["mainnet", "testnet"]>;
         signers: z.ZodArray<z.ZodString, "many">;
@@ -527,15 +319,15 @@ export declare const SimulatePolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -613,15 +405,15 @@ export declare const SimulatePolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -699,15 +491,15 @@ export declare const SimulatePolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -777,29 +569,9 @@ export declare const SimulatePolicyToolShape: {
         sourceAccount: z.ZodString;
     }, z.ZodTypeAny, "passthrough">>;
     readonly validUntilLedger: z.ZodOptional<z.ZodNumber>;
-    readonly oraclePricesByAsset: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodObject<{
-        price: z.ZodString;
-        timestampSeconds: z.ZodNumber;
-    }, "strip", z.ZodTypeAny, {
-        price: string;
-        timestampSeconds: number;
-    }, {
-        price: string;
-        timestampSeconds: number;
-    }>, z.ZodObject<{
-        error: z.ZodEnum<["stale", "missing", "deviation", "paused", "decimals", "fingerprint"]>;
-    }, "strip", z.ZodTypeAny, {
-        error: "stale" | "missing" | "deviation" | "paused" | "decimals" | "fingerprint";
-    }, {
-        error: "stale" | "missing" | "deviation" | "paused" | "decimals" | "fingerprint";
-    }>]>>>;
 };
-/** Flat ZodRawShape for `verify_policy`. Same `z.unknown()` boundary
- *  trick for `predicate` as `SimulatePolicyToolShape`; `predicate` is
- *  required at the strict-schema level (`VerifyPolicyInputSchema`) so
- *  the body fails closed on a missing predicate. */
 export declare const VerifyPolicyToolShape: {
-    readonly predicate: z.ZodUnknown;
+    readonly predicate: z.ZodType<unknown, z.ZodTypeDef, unknown>;
     readonly permitTx: z.ZodObject<{
         network: z.ZodEnum<["mainnet", "testnet"]>;
         signers: z.ZodArray<z.ZodString, "many">;
@@ -810,15 +582,15 @@ export declare const VerifyPolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -896,15 +668,15 @@ export declare const VerifyPolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -982,15 +754,15 @@ export declare const VerifyPolicyToolShape: {
             to: z.ZodString;
             amount: z.ZodString;
         }, "strip", z.ZodTypeAny, {
-            amount: string;
-            token: string;
             from: string;
             to: string;
-        }, {
             amount: string;
             token: string;
+        }, {
             from: string;
             to: string;
+            amount: string;
+            token: string;
         }>, "many">;
         events: z.ZodArray<z.ZodObject<{
             contract: z.ZodString;
@@ -1060,22 +832,6 @@ export declare const VerifyPolicyToolShape: {
         sourceAccount: z.ZodString;
     }, z.ZodTypeAny, "passthrough">>;
     readonly validUntilLedger: z.ZodOptional<z.ZodNumber>;
-    readonly oraclePricesByAsset: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodObject<{
-        price: z.ZodString;
-        timestampSeconds: z.ZodNumber;
-    }, "strip", z.ZodTypeAny, {
-        price: string;
-        timestampSeconds: number;
-    }, {
-        price: string;
-        timestampSeconds: number;
-    }>, z.ZodObject<{
-        error: z.ZodEnum<["stale", "missing", "deviation", "paused", "decimals", "fingerprint"]>;
-    }, "strip", z.ZodTypeAny, {
-        error: "stale" | "missing" | "deviation" | "paused" | "decimals" | "fingerprint";
-    }, {
-        error: "stale" | "missing" | "deviation" | "paused" | "decimals" | "fingerprint";
-    }>]>>>;
 };
 export type { GetInterpreterInfoInput, InstallPolicyInput, RevokePolicyInput, SimulatePolicyInput, VerifyPolicyInput, } from '@crediolabs/policy-synth/run';
 /** Flat ZodRawShape for `install_policy`. `rule` is typed as `z.unknown()`

package/dist-cjs/src/schemas.js

@@ -22,24 +22,19 @@
 // the strict schemas - a drift in field type or optionality breaks the
 // SDK's emitted JSON Schema.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GetInterpreterInfoToolShape = exports.RevokePolicyToolShape = exports.InstallPolicyToolShape = exports.VerifyPolicyToolShape = exports.SimulatePolicyToolShape = exports.SynthesizePolicyToolShape = exports.RecordTransactionToolShape = exports.VerifyPolicyInputSchema = exports.ToolErrorSchema = exports.SynthesizePolicyInputSchema = exports.SimulatePolicyInputSchema = exports.RevokePolicyInputSchema = exports.RecordTransactionInputSchema = exports.RecordedTransactionSchema = exports.PredicateNodeSchema = exports.OzAdapterConfigSchema = exports.OraclePriceFixtureSchema = exports.NetworkSchema = exports.MandateSpecSchema = exports.InterpreterOptionsSchema = exports.InstallPolicyInputSchema = exports.GetInterpreterInfoInputSchema = exports.ComposeUserResponsesSchema = void 0;
+exports.GetInterpreterInfoToolShape = exports.RevokePolicyToolShape = exports.InstallPolicyToolShape = exports.VerifyPolicyToolShape = exports.SimulatePolicyToolShape = exports.SynthesizePolicyToolShape = exports.RecordTransactionToolShape = exports.ToolErrorSchema = exports.SynthesizePolicyInputSchema = exports.RevokePolicyInputSchema = exports.RecordTransactionInputSchema = exports.RecordedTransactionSchema = exports.PredicateNodeSchema = exports.NetworkSchema = exports.InterpreterOptionsSchema = exports.InstallPolicyInputSchema = exports.GetInterpreterInfoInputSchema = exports.ComposeUserResponsesSchema = void 0;
 const run_1 = require("@crediolabs/policy-synth/run");
 Object.defineProperty(exports, "ComposeUserResponsesSchema", { enumerable: true, get: function () { return run_1.ComposeUserResponsesSchema; } });
 Object.defineProperty(exports, "GetInterpreterInfoInputSchema", { enumerable: true, get: function () { return run_1.GetInterpreterInfoInputSchema; } });
 Object.defineProperty(exports, "InstallPolicyInputSchema", { enumerable: true, get: function () { return run_1.InstallPolicyInputSchema; } });
 Object.defineProperty(exports, "InterpreterOptionsSchema", { enumerable: true, get: function () { return run_1.InterpreterOptionsSchema; } });
-Object.defineProperty(exports, "MandateSpecSchema", { enumerable: true, get: function () { return run_1.MandateSpecSchema; } });
 Object.defineProperty(exports, "NetworkSchema", { enumerable: true, get: function () { return run_1.NetworkSchema; } });
-Object.defineProperty(exports, "OraclePriceFixtureSchema", { enumerable: true, get: function () { return run_1.OraclePriceFixtureSchema; } });
-Object.defineProperty(exports, "OzAdapterConfigSchema", { enumerable: true, get: function () { return run_1.OzAdapterConfigSchema; } });
 Object.defineProperty(exports, "PredicateNodeSchema", { enumerable: true, get: function () { return run_1.PredicateNodeSchema; } });
 Object.defineProperty(exports, "RecordedTransactionSchema", { enumerable: true, get: function () { return run_1.RecordedTransactionSchema; } });
 Object.defineProperty(exports, "RecordTransactionInputSchema", { enumerable: true, get: function () { return run_1.RecordTransactionInputSchema; } });
 Object.defineProperty(exports, "RevokePolicyInputSchema", { enumerable: true, get: function () { return run_1.RevokePolicyInputSchema; } });
-Object.defineProperty(exports, "SimulatePolicyInputSchema", { enumerable: true, get: function () { return run_1.SimulatePolicyInputSchema; } });
 Object.defineProperty(exports, "SynthesizePolicyInputSchema", { enumerable: true, get: function () { return run_1.SynthesizePolicyInputSchema; } });
 Object.defineProperty(exports, "ToolErrorSchema", { enumerable: true, get: function () { return run_1.ToolErrorSchema; } });
-Object.defineProperty(exports, "VerifyPolicyInputSchema", { enumerable: true, get: function () { return run_1.VerifyPolicyInputSchema; } });
 const zod_1 = require("zod");
 /** Flat ZodRawShape used for the MCP SDK tool registration. The body
  *  re-validates against `RecordTransactionInputSchema` so the mutual-exclusion
@@ -51,17 +46,15 @@ exports.RecordTransactionToolShape = {
     confidenceOverride: zod_1.z.number().min(0).max(1).optional(),
 };
 /** Flat ZodRawShape used for MCP tool registration. Every field is optional
- *  so the JSON-Schema the SDK exposes to clients does not forbid either
- *  front-end; the body re-validates against the discriminated union. */
+ *  so the JSON-Schema the SDK exposes to clients stays permissive; the body
+ *  re-validates against the strict schema. */
 exports.SynthesizePolicyToolShape = {
-    source: zod_1.z.enum(['mandate', 'recording']).optional(),
-    mandate: run_1.MandateSpecSchema.optional(),
+    source: zod_1.z.literal('recording').optional(),
     recordedTx: run_1.RecordedTransactionSchema.optional(),
     network: run_1.NetworkSchema.optional(),
     userResponses: run_1.ComposeUserResponsesSchema.optional(),
     confidenceOverride: zod_1.z.object({ threshold: zod_1.z.number().min(0).max(1) }).optional(),
     interpreter: run_1.InterpreterOptionsSchema.optional(),
-    ozConfig: run_1.OzAdapterConfigSchema.optional(),
     // Without this the tool chain has no join. A ProposedPolicy carries
     // `policyDocuments[].encodedPredicate` (canonical ScVal bytes), while
     // `simulate_policy` and `verify_policy` both want the PredicateNode TREE,
@@ -71,30 +64,16 @@ exports.SynthesizePolicyToolShape = {
     // which skips the interpreter predicate entirely.
     explain: zod_1.z.boolean().optional(),
 };
-/** Flat ZodRawShape for `simulate_policy`. The `predicate` is typed as
- *  `z.unknown()` at the tool boundary because the recursive
- *  `PredicateNodeSchema` is a `z.lazy()` union (the SDK does not accept
- *  unions at the tool-registration boundary); the body re-validates
- *  against `SimulatePolicyInputSchema`, which fails closed on a
- *  malformed predicate. `predicate` is nullable here (vs required for
- *  verify_policy) so the SDK-emitted JSON Schema mirrors the engine's
- *  "OZ-only / no interpreter predicate" contract. */
-exports.SimulatePolicyToolShape = {
-    predicate: zod_1.z.unknown().nullable().optional(),
+/** `simulate_policy` and `verify_policy` share their input: the predicate tree
+ *  (from `synthesize_policy` under `explain`) plus the recording it was
+ *  synthesised from. */
+const PolicyCheckToolShape = {
+    predicate: run_1.PredicateNodeSchema,
     permitTx: run_1.RecordedTransactionSchema,
     validUntilLedger: zod_1.z.number().int().positive().optional(),
-    oraclePricesByAsset: zod_1.z.record(zod_1.z.string(), run_1.OraclePriceFixtureSchema).optional(),
-};
-/** Flat ZodRawShape for `verify_policy`. Same `z.unknown()` boundary
- *  trick for `predicate` as `SimulatePolicyToolShape`; `predicate` is
- *  required at the strict-schema level (`VerifyPolicyInputSchema`) so
- *  the body fails closed on a missing predicate. */
-exports.VerifyPolicyToolShape = {
-    predicate: zod_1.z.unknown(),
-    permitTx: run_1.RecordedTransactionSchema,
-    validUntilLedger: zod_1.z.number().int().positive().optional(),
-    oraclePricesByAsset: zod_1.z.record(zod_1.z.string(), run_1.OraclePriceFixtureSchema).optional(),
 };
+exports.SimulatePolicyToolShape = { ...PolicyCheckToolShape };
+exports.VerifyPolicyToolShape = { ...PolicyCheckToolShape };
 /** Common base for `install_policy` and `revoke_policy`: smartAccount,
  *  sourceAccount, optional RPC URL, optional base fee. Both share the
  *  same smart-account context, so the SDK-emitted JSON Schema stays