@crediolabs/policy-builder-mcp 1.1.0 → 1.2.0

package/dist/src/schemas.d.ts

@@ -976,6 +976,7 @@ export declare const InstallPolicyToolShape: {
         } | undefined;
     }>>;
     readonly installNonce: z.ZodOptional<z.ZodNumber>;
+    readonly outPath: z.ZodOptional<z.ZodString>;
     readonly spendingLimit: z.ZodOptional<z.ZodObject<{
         amount: z.ZodString;
         periodLedgers: z.ZodNumber;
@@ -987,6 +988,7 @@ export declare const InstallPolicyToolShape: {
         periodLedgers: number;
     }>>;
     readonly allowUnboundedAmount: z.ZodOptional<z.ZodBoolean>;
+    readonly allowAuthorityOverlap: z.ZodOptional<z.ZodBoolean>;
     readonly interpreterAddress: z.ZodOptional<z.ZodString>;
     readonly smartAccount: z.ZodOptional<z.ZodString>;
     readonly sourceAccount: z.ZodOptional<z.ZodString>;

package/dist/src/schemas.js

@@ -172,6 +172,10 @@ export const InstallPolicyToolShape = {
     })
         .optional(),
     installNonce: z.number().int().positive().optional(),
+    // Absolute path for the server to write the unsigned envelope to. Without it
+    // the caller has to carry a multi-kilobyte string to disk itself, which
+    // mangles it - a file of the right length whose bytes no longer parse.
+    outPath: z.string().optional(),
     // A ROLLING TOTAL beside the per-call predicate, as an OpenZeppelin
     // spending_limit on the same rule. Both must permit. This is the only way to
     // express "N per day": the interpreter is handed one call and keeps no state.
@@ -185,6 +189,10 @@ export const InstallPolicyToolShape = {
     // a spend. Default-deny: such a rule installs and verifies cleanly and caps
     // nothing.
     allowUnboundedAmount: z.boolean().optional(),
+    // Opt-in to installing a rule the cross-rule scan PROVES cannot bind: a
+    // shared signer also sits on a neighbouring rule carrying no policy, so it
+    // names that rule and this predicate never runs. Default-deny.
+    allowAuthorityOverlap: z.boolean().optional(),
     interpreterAddress: z.string().optional(),
 };
 /** Flat ZodRawShape for `revoke_policy`. */

package/dist/src/server.js

@@ -26,7 +26,7 @@ export function createMcpServer() {
     // Kept in step with package.json by `server-version.test.ts`. It was
     // hardcoded once already and reported 0.0.0 to every client; a literal is
     // fine, a literal nothing checks is not.
-    { name: 'policy-builder-mcp', version: '1.1.0' }, { capabilities: { tools: {} } });
+    { name: 'policy-builder-mcp', version: '1.2.0' }, { capabilities: { tools: {} } });
     registerTools(server);
     return server;
 }

package/dist-cjs/src/schemas.d.ts

@@ -976,6 +976,7 @@ export declare const InstallPolicyToolShape: {
         } | undefined;
     }>>;
     readonly installNonce: z.ZodOptional<z.ZodNumber>;
+    readonly outPath: z.ZodOptional<z.ZodString>;
     readonly spendingLimit: z.ZodOptional<z.ZodObject<{
         amount: z.ZodString;
         periodLedgers: z.ZodNumber;
@@ -987,6 +988,7 @@ export declare const InstallPolicyToolShape: {
         periodLedgers: number;
     }>>;
     readonly allowUnboundedAmount: z.ZodOptional<z.ZodBoolean>;
+    readonly allowAuthorityOverlap: z.ZodOptional<z.ZodBoolean>;
     readonly interpreterAddress: z.ZodOptional<z.ZodString>;
     readonly smartAccount: z.ZodOptional<z.ZodString>;
     readonly sourceAccount: z.ZodOptional<z.ZodString>;

package/dist-cjs/src/schemas.js

@@ -180,6 +180,10 @@ exports.InstallPolicyToolShape = {
     })
         .optional(),
     installNonce: zod_1.z.number().int().positive().optional(),
+    // Absolute path for the server to write the unsigned envelope to. Without it
+    // the caller has to carry a multi-kilobyte string to disk itself, which
+    // mangles it - a file of the right length whose bytes no longer parse.
+    outPath: zod_1.z.string().optional(),
     // A ROLLING TOTAL beside the per-call predicate, as an OpenZeppelin
     // spending_limit on the same rule. Both must permit. This is the only way to
     // express "N per day": the interpreter is handed one call and keeps no state.
@@ -193,6 +197,10 @@ exports.InstallPolicyToolShape = {
     // a spend. Default-deny: such a rule installs and verifies cleanly and caps
     // nothing.
     allowUnboundedAmount: zod_1.z.boolean().optional(),
+    // Opt-in to installing a rule the cross-rule scan PROVES cannot bind: a
+    // shared signer also sits on a neighbouring rule carrying no policy, so it
+    // names that rule and this predicate never runs. Default-deny.
+    allowAuthorityOverlap: zod_1.z.boolean().optional(),
     interpreterAddress: zod_1.z.string().optional(),
 };
 /** Flat ZodRawShape for `revoke_policy`. */

package/dist-cjs/src/server.js

@@ -30,7 +30,7 @@ function createMcpServer() {
     // Kept in step with package.json by `server-version.test.ts`. It was
     // hardcoded once already and reported 0.0.0 to every client; a literal is
     // fine, a literal nothing checks is not.
-    { name: 'policy-builder-mcp', version: '1.1.0' }, { capabilities: { tools: {} } });
+    { name: 'policy-builder-mcp', version: '1.2.0' }, { capabilities: { tools: {} } });
     registerTools(server);
     return server;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crediolabs/policy-builder-mcp",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "license": "MIT",
   "description": "MCP server exposing the OZ policy-synth core (record_transaction + synthesize_policy) over stdio and Streamable HTTP transports.",
   "type": "module",
@@ -63,7 +63,7 @@
     "prepack": "bun run build"
   },
   "dependencies": {
-    "@crediolabs/policy-synth": "1.1.0",
+    "@crediolabs/policy-synth": "1.2.0",
     "@modelcontextprotocol/sdk": "1.30.0",
     "@stellar/stellar-sdk": "14.4.0",
     "zod": "3.25.76"

package/src/schemas.ts

@@ -213,6 +213,10 @@ export const InstallPolicyToolShape = {
     })
     .optional(),
   installNonce: z.number().int().positive().optional(),
+  // Absolute path for the server to write the unsigned envelope to. Without it
+  // the caller has to carry a multi-kilobyte string to disk itself, which
+  // mangles it - a file of the right length whose bytes no longer parse.
+  outPath: z.string().optional(),
   // A ROLLING TOTAL beside the per-call predicate, as an OpenZeppelin
   // spending_limit on the same rule. Both must permit. This is the only way to
   // express "N per day": the interpreter is handed one call and keeps no state.
@@ -226,6 +230,10 @@ export const InstallPolicyToolShape = {
   // a spend. Default-deny: such a rule installs and verifies cleanly and caps
   // nothing.
   allowUnboundedAmount: z.boolean().optional(),
+  // Opt-in to installing a rule the cross-rule scan PROVES cannot bind: a
+  // shared signer also sits on a neighbouring rule carrying no policy, so it
+  // names that rule and this predicate never runs. Default-deny.
+  allowAuthorityOverlap: z.boolean().optional(),
   interpreterAddress: z.string().optional(),
 } as const
 

package/src/server.ts

@@ -51,7 +51,7 @@ export function createMcpServer(): McpServer {
     // Kept in step with package.json by `server-version.test.ts`. It was
     // hardcoded once already and reported 0.0.0 to every client; a literal is
     // fine, a literal nothing checks is not.
-    { name: 'policy-builder-mcp', version: '1.1.0' },
+    { name: 'policy-builder-mcp', version: '1.2.0' },
     { capabilities: { tools: {} } }
   )
   registerTools(server)