@crediolabs/policy-synth 0.1.14 → 0.1.16

package/dist-cjs/run/index.js

@@ -18,7 +18,7 @@
 // No business logic. No retries. No session state. The same call shape can
 // drive the CLI (which calls into the same core directly without MCP).
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.VerifyPolicyInputSchema = exports.ToolErrorSchema = exports.SynthesizePolicyInputSchema = exports.SimulatePolicyInputSchema = exports.RevokePolicyInputSchema = exports.RecordTransactionInputSchema = exports.RecordedTransactionSchema = exports.PredicateNodeSchema = exports.PredicateLeafSchema = exports.PINNED_INTERPRETER_WASM_SHA256 = exports.PINNED_INTERPRETER_TESTNET_ADDRESS = exports.PINNED_INTERPRETER_GRAMMAR_VERSION = exports.OzAdapterConfigSchema = exports.OraclePriceFixtureSchema = exports.NetworkSchema = exports.MandateSpecSchema = exports.InterpreterOptionsSchema = exports.InstallPolicyInputSchema = exports.GetInterpreterInfoInputSchema = exports.ComposeUserResponsesSchema = void 0;
+exports.VerifyPolicyInputSchema = exports.ToolErrorSchema = exports.TESTNET_RPC_URL = exports.SynthesizePolicyInputSchema = exports.SimulatePolicyInputSchema = exports.RPC_URL_BY_NETWORK = exports.RevokePolicyInputSchema = exports.RecordTransactionInputSchema = exports.RecordedTransactionSchema = exports.PredicateNodeSchema = exports.PredicateLeafSchema = exports.PINNED_INTERPRETER_WASM_SHA256 = exports.PINNED_INTERPRETER_TESTNET_ADDRESS = exports.PINNED_INTERPRETER_MAINNET_ADDRESS = exports.PINNED_INTERPRETER_GRAMMAR_VERSION = exports.PINNED_INTERPRETER_ADDRESS_BY_NETWORK = exports.OzAdapterConfigSchema = exports.OraclePriceFixtureSchema = exports.NetworkSchema = exports.MandateSpecSchema = exports.MAINNET_RPC_URL = exports.InterpreterOptionsSchema = exports.InstallPolicyInputSchema = exports.GetInterpreterInfoInputSchema = exports.ComposeUserResponsesSchema = void 0;
 exports.runRecordTransaction = runRecordTransaction;
 exports.runSynthesizePolicy = runSynthesizePolicy;
 exports.runSimulatePolicy = runSimulatePolicy;
@@ -43,11 +43,14 @@ Object.defineProperty(exports, "ComposeUserResponsesSchema", { enumerable: true,
 Object.defineProperty(exports, "GetInterpreterInfoInputSchema", { enumerable: true, get: function () { return schemas_ts_2.GetInterpreterInfoInputSchema; } });
 Object.defineProperty(exports, "InstallPolicyInputSchema", { enumerable: true, get: function () { return schemas_ts_2.InstallPolicyInputSchema; } });
 Object.defineProperty(exports, "InterpreterOptionsSchema", { enumerable: true, get: function () { return schemas_ts_2.InterpreterOptionsSchema; } });
+Object.defineProperty(exports, "MAINNET_RPC_URL", { enumerable: true, get: function () { return schemas_ts_2.MAINNET_RPC_URL; } });
 Object.defineProperty(exports, "MandateSpecSchema", { enumerable: true, get: function () { return schemas_ts_2.MandateSpecSchema; } });
 Object.defineProperty(exports, "NetworkSchema", { enumerable: true, get: function () { return schemas_ts_2.NetworkSchema; } });
 Object.defineProperty(exports, "OraclePriceFixtureSchema", { enumerable: true, get: function () { return schemas_ts_2.OraclePriceFixtureSchema; } });
 Object.defineProperty(exports, "OzAdapterConfigSchema", { enumerable: true, get: function () { return schemas_ts_2.OzAdapterConfigSchema; } });
+Object.defineProperty(exports, "PINNED_INTERPRETER_ADDRESS_BY_NETWORK", { enumerable: true, get: function () { return schemas_ts_2.PINNED_INTERPRETER_ADDRESS_BY_NETWORK; } });
 Object.defineProperty(exports, "PINNED_INTERPRETER_GRAMMAR_VERSION", { enumerable: true, get: function () { return schemas_ts_2.PINNED_INTERPRETER_GRAMMAR_VERSION; } });
+Object.defineProperty(exports, "PINNED_INTERPRETER_MAINNET_ADDRESS", { enumerable: true, get: function () { return schemas_ts_2.PINNED_INTERPRETER_MAINNET_ADDRESS; } });
 Object.defineProperty(exports, "PINNED_INTERPRETER_TESTNET_ADDRESS", { enumerable: true, get: function () { return schemas_ts_2.PINNED_INTERPRETER_TESTNET_ADDRESS; } });
 Object.defineProperty(exports, "PINNED_INTERPRETER_WASM_SHA256", { enumerable: true, get: function () { return schemas_ts_2.PINNED_INTERPRETER_WASM_SHA256; } });
 Object.defineProperty(exports, "PredicateLeafSchema", { enumerable: true, get: function () { return schemas_ts_2.PredicateLeafSchema; } });
@@ -55,8 +58,10 @@ Object.defineProperty(exports, "PredicateNodeSchema", { enumerable: true, get: f
 Object.defineProperty(exports, "RecordedTransactionSchema", { enumerable: true, get: function () { return schemas_ts_2.RecordedTransactionSchema; } });
 Object.defineProperty(exports, "RecordTransactionInputSchema", { enumerable: true, get: function () { return schemas_ts_2.RecordTransactionInputSchema; } });
 Object.defineProperty(exports, "RevokePolicyInputSchema", { enumerable: true, get: function () { return schemas_ts_2.RevokePolicyInputSchema; } });
+Object.defineProperty(exports, "RPC_URL_BY_NETWORK", { enumerable: true, get: function () { return schemas_ts_2.RPC_URL_BY_NETWORK; } });
 Object.defineProperty(exports, "SimulatePolicyInputSchema", { enumerable: true, get: function () { return schemas_ts_2.SimulatePolicyInputSchema; } });
 Object.defineProperty(exports, "SynthesizePolicyInputSchema", { enumerable: true, get: function () { return schemas_ts_2.SynthesizePolicyInputSchema; } });
+Object.defineProperty(exports, "TESTNET_RPC_URL", { enumerable: true, get: function () { return schemas_ts_2.TESTNET_RPC_URL; } });
 Object.defineProperty(exports, "ToolErrorSchema", { enumerable: true, get: function () { return schemas_ts_2.ToolErrorSchema; } });
 Object.defineProperty(exports, "VerifyPolicyInputSchema", { enumerable: true, get: function () { return schemas_ts_2.VerifyPolicyInputSchema; } });
 /** `record_transaction` body - wraps `recordTransaction`. The tool input
@@ -225,15 +230,17 @@ async function runVerifyPolicy(raw) {
  *  Returns the unsigned Soroban transaction envelope (base64 XDR) the
  *  wallet signs. The wallet signature IS the user-confirmation step - no
  *  `action_id` two-call pair (the server is stateless, see server.ts:10-12).
- *  Per design decision 4, only CALL 1 (account.add_context_rule) is
- *  emitted; CALL 2 (interpreter.install) requires the rule id the account
- *  assigns in call 1 and is documented under `followUp` in the response.
+ *  One call installs the policy outright: `add_context_rule` carries the
+ *  predicate to the interpreter in its `policies` install_param, so no
+ *  separate `interpreter.install` call is needed or possible.
  *
  *  Default-deny: an interpreter policy address other than the pinned
- *  testnet interpreter is REFUSED (the smart account would delegate to
- *  an interpreter the caller controls); the same applies to a non-pinned
- *  RPC URL (the auth nonce the wallet signs comes from the RPC). Both
- *  gates accept an explicit opt-in flag. */
+ *  interpreter for the selected network is REFUSED (the smart account
+ *  would delegate to an interpreter the caller controls); the same
+ *  applies to a non-pinned RPC URL (the auth nonce the wallet signs
+ *  comes from the RPC). Both gates accept an explicit opt-in flag.
+ *  Pin selection follows `input.network` (defaults to `testnet` so the
+ *  pre-mainnet callers keep working unchanged). */
 async function runInstallPolicy(raw) {
     const parsed = schemas_ts_1.InstallPolicyInputSchema.safeParse(raw);
     if (!parsed.success) {
@@ -243,17 +250,20 @@ async function runInstallPolicy(raw) {
         };
     }
     const input = parsed.data;
+    const network = input.network ?? 'testnet';
     // ---- Pinning gates (default-deny) ----
-    const pinningError = enforceInterpreterPin(input.rule.policies, input.allowUnpinnedInterpreter);
+    const expectedInterpreter = schemas_ts_1.PINNED_INTERPRETER_ADDRESS_BY_NETWORK[network];
+    const expectedRpc = schemas_ts_1.RPC_URL_BY_NETWORK[network];
+    const pinningError = enforceInterpreterPin(input.rule.policies, input.allowUnpinnedInterpreter, expectedInterpreter);
     if (pinningError) {
         return { ok: false, error: pinningError };
     }
-    if (input.rpcUrl && input.rpcUrl !== schemas_ts_1.TESTNET_RPC_URL && input.allowUnpinnedRpcUrl !== true) {
+    if (input.rpcUrl && input.rpcUrl !== expectedRpc && input.allowUnpinnedRpcUrl !== true) {
         return {
             ok: false,
             error: {
                 code: 'INSTALL_BUILD_FAILED',
-                message: `install_policy: rpcUrl must equal the pinned TESTNET_RPC_URL; set allowUnpinnedRpcUrl: true to opt in to a custom endpoint`,
+                message: `install_policy: rpcUrl must equal the pinned ${expectedRpc} (${network}); set allowUnpinnedRpcUrl: true to opt in to a custom endpoint`,
                 severity: 'error',
                 retryable: false,
                 remediation: { toolCall: { name: 'install_policy', args: {} } },
@@ -262,7 +272,7 @@ async function runInstallPolicy(raw) {
     }
     let rpcClient;
     try {
-        rpcClient = buildRpcClientFromInput(input.rpcUrl);
+        rpcClient = buildRpcClientFromInput(input.rpcUrl, network);
     }
     catch (e) {
         return {
@@ -279,7 +289,7 @@ async function runInstallPolicy(raw) {
         const result = await (0, build_install_policy_ts_1.buildInstallPolicyXdr)({
             smartAccount: input.smartAccount,
             sourceAccount: input.sourceAccount,
-            networkPassphrase: schemas_ts_1.NETWORK_PASSPHRASES.testnet,
+            networkPassphrase: schemas_ts_1.NETWORK_PASSPHRASES[network],
             rule: input.rule,
             installNonce: input.installNonce,
             encodedPredicate,
@@ -303,7 +313,8 @@ async function runInstallPolicy(raw) {
  *
  *  Same RPC pin as install: a non-pinned `rpcUrl` is refused unless
  *  `allowUnpinnedRpcUrl: true`. Revoke does not carry an interpreter
- *  policy payload, so the interpreter pin is not re-checked here. */
+ *  policy payload, so the interpreter pin is not re-checked here.
+ *  Pin selection follows `input.network` (defaults to `testnet`). */
 async function runRevokePolicy(raw) {
     const parsed = schemas_ts_1.RevokePolicyInputSchema.safeParse(raw);
     if (!parsed.success) {
@@ -313,12 +324,14 @@ async function runRevokePolicy(raw) {
         };
     }
     const input = parsed.data;
-    if (input.rpcUrl && input.rpcUrl !== schemas_ts_1.TESTNET_RPC_URL && input.allowUnpinnedRpcUrl !== true) {
+    const network = input.network ?? 'testnet';
+    const expectedRpc = schemas_ts_1.RPC_URL_BY_NETWORK[network];
+    if (input.rpcUrl && input.rpcUrl !== expectedRpc && input.allowUnpinnedRpcUrl !== true) {
         return {
             ok: false,
             error: {
                 code: 'REVOKE_BUILD_FAILED',
-                message: `revoke_policy: rpcUrl must equal the pinned TESTNET_RPC_URL; set allowUnpinnedRpcUrl: true to opt in to a custom endpoint`,
+                message: `revoke_policy: rpcUrl must equal the pinned ${expectedRpc} (${network}); set allowUnpinnedRpcUrl: true to opt in to a custom endpoint`,
                 severity: 'error',
                 retryable: false,
                 remediation: { toolCall: { name: 'revoke_policy', args: {} } },
@@ -327,7 +340,7 @@ async function runRevokePolicy(raw) {
     }
     let rpcClient;
     try {
-        rpcClient = buildRpcClientFromInput(input.rpcUrl);
+        rpcClient = buildRpcClientFromInput(input.rpcUrl, network);
     }
     catch (e) {
         return {
@@ -340,7 +353,7 @@ async function runRevokePolicy(raw) {
             smartAccount: input.smartAccount,
             sourceAccount: input.sourceAccount,
             ruleId: input.ruleId,
-            networkPassphrase: schemas_ts_1.NETWORK_PASSPHRASES.testnet,
+            networkPassphrase: schemas_ts_1.NETWORK_PASSPHRASES[network],
             rpc: rpcClient,
             ...(input.baseFee !== undefined ? { baseFee: input.baseFee } : {}),
         });
@@ -358,7 +371,15 @@ async function runRevokePolicy(raw) {
  *  `grammar_version()` comparison. The audit field is deliberately
  *  OMITTED (phase-04's "audit #44" has no source of truth in the repo -
  *  fabricating it would be a lie on a security surface; the live
- *  mismatch check is worth MORE). */
+ *  mismatch check is worth MORE).
+ *
+ *  Network-aware: `input.network` selects which interpreter pin and RPC
+ *  to use. Mainnet was rolled out 2026-08-04 - the same wasm hash was
+ *  uploaded to mainnet as was exercised on testnet, so a single
+ *  `PINNED_INTERPRETER_WASM_SHA256` constant backs both networks
+ *  (DEPLOYMENTS.md:25-27). The address differs because instance ids are
+ *  network-scoped. UNAUDITED at the time of writing - see
+ *  DEPLOYMENTS.md:29-32 for what is still pending. */
 async function runGetInterpreterInfo(raw) {
     const parsed = schemas_ts_1.GetInterpreterInfoInputSchema.safeParse(raw);
     if (!parsed.success) {
@@ -369,34 +390,15 @@ async function runGetInterpreterInfo(raw) {
     }
     const input = parsed.data;
     const network = input.network ?? 'testnet';
-    // Asking about mainnet used to return the TESTNET pin with `network:
-    // 'mainnet'` stamped on it. DEPLOYMENTS.md:3 says plainly "Testnet only.
-    // Nothing is deployed to mainnet yet", so that answer described a contract
-    // that does not exist at an address that is not on that network. This tool
-    // exists to tell a caller what they are installing against; inventing a
-    // mainnet deployment is the same failure as inventing an audit reference.
-    if (network === 'mainnet') {
-        return {
-            ok: false,
-            error: {
-                code: 'RECORDING_FAILED',
-                message: 'get_interpreter_info: no interpreter is deployed to mainnet. The pinned address and wasm hash are testnet-only; mainnet deployment is gated on the interpreter audit.',
-                severity: 'error',
-                retryable: false,
-                remediation: {
-                    toolCall: { name: 'get_interpreter_info', args: { network: 'testnet' } },
-                },
-            },
-        };
-    }
+    const pinnedAddress = schemas_ts_1.PINNED_INTERPRETER_ADDRESS_BY_NETWORK[network];
     try {
         let deployedGrammarVersion;
         if (input.verifyLive === true) {
-            const rpcClient = buildRpcClientFromInput(input.rpcUrl);
-            deployedGrammarVersion = await rpcClient.getContractVersion(schemas_ts_1.PINNED_INTERPRETER_TESTNET_ADDRESS);
+            const rpcClient = buildRpcClientFromInput(input.rpcUrl, network);
+            deployedGrammarVersion = await rpcClient.getContractVersion(pinnedAddress);
         }
         const info = (0, get_interpreter_info_ts_1.getInterpreterInfo)({
-            pinnedAddress: schemas_ts_1.PINNED_INTERPRETER_TESTNET_ADDRESS,
+            pinnedAddress,
             pinnedGrammarVersion: schemas_ts_1.PINNED_INTERPRETER_GRAMMAR_VERSION,
             pinnedWasmHash: schemas_ts_1.PINNED_INTERPRETER_WASM_SHA256,
             network,
@@ -411,41 +413,40 @@ async function runGetInterpreterInfo(raw) {
         };
     }
 }
-/** Build an InstallRpcClient from an optional URL override, falling back
- *  to the public testnet RPC (matching the design-decision rule that we
- *  reuse `record/rpc.ts` and never hard-code a different RPC client). */
-function buildRpcClientFromInput(urlOverride) {
-    if (urlOverride) {
-        return (0, build_install_policy_ts_1.rpcClientFromServer)(new stellar_sdk_1.rpc.Server(urlOverride, { allowHttp: false }), schemas_ts_1.NETWORK_PASSPHRASES.testnet);
-    }
-    // Default: public testnet RPC. Matches the brief; the mainnet pin would
-    // need a separate deploy and is out of scope for this tool.
-    //
+/** Build an InstallRpcClient from an optional URL override + selected
+ *  network, falling back to the pinned RPC for the network. The caller
+ *  has already been gated against the pinned URL elsewhere, so the
+ *  fallback here only ever picks from a finite, audited pair. */
+function buildRpcClientFromInput(urlOverride, network) {
+    const url = urlOverride ?? schemas_ts_1.RPC_URL_BY_NETWORK[network];
+    const passphrase = schemas_ts_1.NETWORK_PASSPHRASES[network];
     // NOT `createRpcServer` - that returns an RpcFetcher, a bare
     // `(hash) => Promise<SorobanTxResponse|null>` for the RECORDER. Passing it
     // here produced a client whose `getAccount` was undefined, so every live
     // call died with "server.getAccount is not a function". The install path
     // needs the full Server surface.
-    return (0, build_install_policy_ts_1.rpcClientFromServer)(new stellar_sdk_1.rpc.Server(schemas_ts_1.TESTNET_RPC_URL, { allowHttp: false }), schemas_ts_1.NETWORK_PASSPHRASES.testnet);
+    return (0, build_install_policy_ts_1.rpcClientFromServer)(new stellar_sdk_1.rpc.Server(url, { allowHttp: false }), passphrase);
 }
 /** Default-deny: refuse any interpreter policy whose address differs from
- *  the pinned testnet interpreter. An interpreter the caller controls
- *  can permit anything, so the smart account's authorization must bind
- *  to the pinned contract unless the caller explicitly opts in via
- *  `allowUnpinnedInterpreter`. OZ built-in policies are not interpreters
- *  and pass through unchanged. Returns a ToolError to surface through
- *  the run-layer envelope, or null when the policies are all pinned. */
-function enforceInterpreterPin(policies, allowUnpinned) {
+ *  the pinned interpreter for the selected network. An interpreter the
+ *  caller controls can permit anything, so the smart account's
+ *  authorization must bind to the pinned contract unless the caller
+ *  explicitly opts in via `allowUnpinnedInterpreter`. OZ built-in
+ *  policies are not interpreters and pass through unchanged. Returns a
+ *  ToolError to surface through the run-layer envelope, or null when the
+ *  policies are all pinned. The caller resolves the expected pin per
+ *  network; this function stays pure so it is easy to test. */
+function enforceInterpreterPin(policies, allowUnpinned, expectedInterpreterAddress) {
     for (const p of policies) {
         if (p.kind !== 'interpreter')
             continue;
-        if (p.interpreterAddress === schemas_ts_1.PINNED_INTERPRETER_TESTNET_ADDRESS)
+        if (p.interpreterAddress === expectedInterpreterAddress)
             continue;
         if (allowUnpinned === true)
             continue;
         return {
             code: 'INSTALL_BUILD_FAILED',
-            message: `install_policy: interpreter policy address ${p.interpreterAddress} != pinned ${schemas_ts_1.PINNED_INTERPRETER_TESTNET_ADDRESS}; set allowUnpinnedInterpreter: true to opt in to a non-pinned interpreter`,
+            message: `install_policy: interpreter policy address ${p.interpreterAddress} != pinned ${expectedInterpreterAddress}; set allowUnpinnedInterpreter: true to opt in to a non-pinned interpreter`,
             severity: 'error',
             retryable: false,
             remediation: { toolCall: { name: 'install_policy', args: {} } },

package/dist-cjs/run/schemas.d.ts

@@ -2641,9 +2641,16 @@ export declare const VerifyPolicyInputSchema: z.ZodObject<{
     }> | undefined;
 }>;
 export type VerifyPolicyInput = z.infer<typeof VerifyPolicyInputSchema>;
-/** Pinned interpreter address (testnet). Mirrors DEPLOYMENTS.md:156-157.
+/** Pinned interpreter address (testnet). Mirrors DEPLOYMENTS.md:128.
  *  Single source for the MCP layer; do not embed elsewhere. */
 export declare const PINNED_INTERPRETER_TESTNET_ADDRESS = "CDR4NLV22STCXFGZPNKDQTEANWLF7LZ6AJLY6B7CLJXKHDZGYJWIOKGP";
+/** Pinned interpreter address (mainnet). Mirrors DEPLOYMENTS.md:18. Mainnet
+ *  has now been deployed (2026-08-04); the mainnet interpreter IS the binary
+ *  that was exercised on testnet (same wasm sha256, see
+ *  PINNED_INTERPRETER_WASM_SHA256). The address differs because instance
+ *  ids are network-scoped. UNAUDITED at the time of writing - see
+ *  DEPLOYMENTS.md:29-32 for the recorded decision and what is still pending. */
+export declare const PINNED_INTERPRETER_MAINNET_ADDRESS = "CALZAMUPREIRY4TULBEXIK77AUTOEJG63XLCPUWEHHQDOVK6ZVVS7VQ2";
 /** Pinned interpreter wasm sha256 (hex). Mirrors DEPLOYMENTS.md:156-157. */
 export declare const PINNED_INTERPRETER_WASM_SHA256 = "6e6c13d93e197aa380303a42cd120f5ddb080dd36ef2a343ee1dbd04ca52a443";
 /** The grammar version the interpreter enforces (matches SELF_VERSION in
@@ -2654,6 +2661,17 @@ export declare const PINNED_INTERPRETER_GRAMMAR_VERSION = 1;
  *  than a Server; the two are deliberately different surfaces, so this is
  *  pinned beside the addresses it is used with rather than shared. */
 export declare const TESTNET_RPC_URL = "https://soroban-testnet.stellar.org";
+/** Mainnet Soroban RPC. Pinned beside MAINNET counterparts so the install
+ *  and get_interpreter_info gates compare against the matching network's
+ *  RPC rather than always testnet. Public mainnet endpoint, the same one
+ *  the deploy script hit during the 2026-08-04 mainnet rollout. */
+export declare const MAINNET_RPC_URL = "https://mainnet.sorobanrpc.com";
+/** Pin + RPC lookup for the gate enforcement. The interpreters' wasm sha256
+ *  is identical across both networks (the same binary was uploaded both
+ *  places; DEPLOYMENTS.md:25-27), so `PINNED_INTERPRETER_WASM_SHA256` stays
+ *  a single constant - only the addresses and RPCs are network-scoped. */
+export declare const PINNED_INTERPRETER_ADDRESS_BY_NETWORK: Record<Network, string>;
+export declare const RPC_URL_BY_NETWORK: Record<Network, string>;
 /** Soroban `valid_until` window (ledgers) added to the latest ledger when
  *  building the auth entry. ~25 minutes at 5s/ledger. */
 export declare const DEFAULT_AUTH_VALID_UNTIL_LEDGERS = 300;
@@ -2667,6 +2685,14 @@ export declare const InstallPolicyInputSchema: z.ZodEffects<z.ZodObject<{
     /** The signer that authorises the install (G... wallet). Used only for
      *  sequence number + auth nonce simulation; never persisted, never signed. */
     sourceAccount: z.ZodString;
+    /** Target network for the install. Selects which interpreter pin and
+     *  which RPC URL are valid by default. Defaults to `testnet` so the
+     *  pre-mainnet callers keep working: they were always pointing at
+     *  the testnet pin, so defaulting testnet here is the conservative
+     *  continuation, NOT a silent fall-through that bypasses the gate.
+     *  A caller that targets mainnet MUST set this to `mainnet` (the
+     *  pin and RPC pin do not move by themselves). */
+    network: z.ZodOptional<z.ZodEnum<["mainnet", "testnet"]>>;
     /** The proposed rule draft. Mirrors the core `ContextRuleDraft` shape. */
     rule: z.ZodEffects<z.ZodObject<{
         contextRuleType: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
@@ -3121,18 +3147,22 @@ export declare const InstallPolicyInputSchema: z.ZodEffects<z.ZodObject<{
     }, z.ZodTypeAny, "passthrough">>;
     /** Per-rule install nonce; 1 for a fresh install. */
     installNonce: z.ZodNumber;
-    /** Optional RPC URL override. Defaults to the public testnet endpoint
-     *  (`TESTNET_RPC_URL`); the override is refused unless
+    /** Optional RPC URL override. Defaults to the pinned RPC for the
+     *  selected `network` (testnet by default, mainnet when
+     *  `network: 'mainnet'`); the override is refused unless
      *  `allowUnpinnedRpcUrl: true`, because the auth nonce and
      *  rootInvocation in the response come from whichever RPC answered. */
     rpcUrl: z.ZodOptional<z.ZodString>;
     /** Opt-in to using a non-pinned RPC URL. Without this flag the tool
-     *  refuses any `rpcUrl` other than `TESTNET_RPC_URL` because the
-     *  caller's auth-digest binds to whatever the RPC returned. */
+     *  refuses any `rpcUrl` other than the pinned RPC for the selected
+     *  network because the caller's auth-digest binds to whatever the
+     *  RPC returned. */
     allowUnpinnedRpcUrl: z.ZodOptional<z.ZodBoolean>;
     /** Opt-in to pointing the rule's interpreter policy at any address
-     *  other than the pinned testnet interpreter. Default-deny: a caller
-     *  that controls the interpreter can permit everything. */
+     *  other than the pinned interpreter for the selected network.
+     *  Default-deny: a caller that controls the interpreter can permit
+     *  everything. Selecting `network: 'mainnet'` is NOT an opt-in -
+     *  the mainnet pin is its own deny-by-default anchor. */
     allowUnpinnedInterpreter: z.ZodOptional<z.ZodBoolean>;
     /** Base fee in stroops; defaults to BASE_FEE (100). */
     baseFee: z.ZodOptional<z.ZodNumber>;
@@ -3175,6 +3205,7 @@ export declare const InstallPolicyInputSchema: z.ZodEffects<z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    network?: "mainnet" | "testnet" | undefined;
     rpcUrl?: string | undefined;
     allowUnpinnedRpcUrl?: boolean | undefined;
     allowUnpinnedInterpreter?: boolean | undefined;
@@ -3218,6 +3249,7 @@ export declare const InstallPolicyInputSchema: z.ZodEffects<z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    network?: "mainnet" | "testnet" | undefined;
     rpcUrl?: string | undefined;
     allowUnpinnedRpcUrl?: boolean | undefined;
     allowUnpinnedInterpreter?: boolean | undefined;
@@ -3261,6 +3293,7 @@ export declare const InstallPolicyInputSchema: z.ZodEffects<z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    network?: "mainnet" | "testnet" | undefined;
     rpcUrl?: string | undefined;
     allowUnpinnedRpcUrl?: boolean | undefined;
     allowUnpinnedInterpreter?: boolean | undefined;
@@ -3304,6 +3337,7 @@ export declare const InstallPolicyInputSchema: z.ZodEffects<z.ZodObject<{
     } & {
         [k: string]: unknown;
     };
+    network?: "mainnet" | "testnet" | undefined;
     rpcUrl?: string | undefined;
     allowUnpinnedRpcUrl?: boolean | undefined;
     allowUnpinnedInterpreter?: boolean | undefined;
@@ -3318,9 +3352,12 @@ export declare const RevokePolicyInputSchema: z.ZodEffects<z.ZodObject<{
      *  verify, since the account's source is not in this repo. Proven on
      *  testnet: the account's deployer can revoke. */
     sourceAccount: z.ZodString;
+    /** Target network for the revoke. Same `testnet`-default as install,
+     *  so pre-mainnet callers keep working without an explicit flag. */
+    network: z.ZodOptional<z.ZodEnum<["mainnet", "testnet"]>>;
     /** The rule id to remove from the smart account + interpreter. */
     ruleId: z.ZodNumber;
-    /** Optional RPC URL override; same pin as install. */
+    /** Optional RPC URL override; same per-network pin as install. */
     rpcUrl: z.ZodOptional<z.ZodString>;
     /** Opt-in to using a non-pinned RPC URL. Same semantics as install. */
     allowUnpinnedRpcUrl: z.ZodOptional<z.ZodBoolean>;
@@ -3330,6 +3367,7 @@ export declare const RevokePolicyInputSchema: z.ZodEffects<z.ZodObject<{
     smartAccount: string;
     sourceAccount: string;
     ruleId: number;
+    network?: "mainnet" | "testnet" | undefined;
     rpcUrl?: string | undefined;
     allowUnpinnedRpcUrl?: boolean | undefined;
     baseFee?: number | undefined;
@@ -3337,6 +3375,7 @@ export declare const RevokePolicyInputSchema: z.ZodEffects<z.ZodObject<{
     smartAccount: string;
     sourceAccount: string;
     ruleId: number;
+    network?: "mainnet" | "testnet" | undefined;
     rpcUrl?: string | undefined;
     allowUnpinnedRpcUrl?: boolean | undefined;
     baseFee?: number | undefined;
@@ -3344,6 +3383,7 @@ export declare const RevokePolicyInputSchema: z.ZodEffects<z.ZodObject<{
     smartAccount: string;
     sourceAccount: string;
     ruleId: number;
+    network?: "mainnet" | "testnet" | undefined;
     rpcUrl?: string | undefined;
     allowUnpinnedRpcUrl?: boolean | undefined;
     baseFee?: number | undefined;
@@ -3351,6 +3391,7 @@ export declare const RevokePolicyInputSchema: z.ZodEffects<z.ZodObject<{
     smartAccount: string;
     sourceAccount: string;
     ruleId: number;
+    network?: "mainnet" | "testnet" | undefined;
     rpcUrl?: string | undefined;
     allowUnpinnedRpcUrl?: boolean | undefined;
     baseFee?: number | undefined;

package/dist-cjs/run/schemas.js

@@ -16,7 +16,7 @@
 // imports them here so its tool-shape bindings stay in step; the CLI imports
 // them here so it can build the same args envelope the MCP transport builds.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ToolErrorSchema = exports.GetInterpreterInfoInputSchema = exports.RevokePolicyInputSchema = exports.InstallPolicyInputSchema = exports.NETWORK_PASSPHRASES = exports.DEFAULT_AUTH_VALID_UNTIL_LEDGERS = exports.TESTNET_RPC_URL = exports.PINNED_INTERPRETER_GRAMMAR_VERSION = exports.PINNED_INTERPRETER_WASM_SHA256 = exports.PINNED_INTERPRETER_TESTNET_ADDRESS = exports.VerifyPolicyInputSchema = exports.SimulatePolicyInputSchema = exports.OraclePriceFixtureSchema = exports.PredicateNodeSchema = exports.PredicateLeafSchema = exports.SynthesizePolicyInputSchema = exports.SynthesizePolicyRecordingInputSchema = exports.InterpreterOptionsSchema = exports.SynthesizePolicyMandateInputSchema = exports.RecordTransactionInputSchema = exports.OzAdapterConfigSchema = exports.ComposeUserResponsesSchema = exports.MandateSpecSchema = exports.RecordedTransactionSchema = exports.ParseConfidenceSchema = exports.OnChainEventSchema = exports.TokenMovementSchema = exports.ContractInvocationSchema = exports.ScValSchema = exports.NetworkSchema = void 0;
+exports.ToolErrorSchema = exports.GetInterpreterInfoInputSchema = exports.RevokePolicyInputSchema = exports.InstallPolicyInputSchema = exports.NETWORK_PASSPHRASES = exports.DEFAULT_AUTH_VALID_UNTIL_LEDGERS = exports.RPC_URL_BY_NETWORK = exports.PINNED_INTERPRETER_ADDRESS_BY_NETWORK = exports.MAINNET_RPC_URL = exports.TESTNET_RPC_URL = exports.PINNED_INTERPRETER_GRAMMAR_VERSION = exports.PINNED_INTERPRETER_WASM_SHA256 = exports.PINNED_INTERPRETER_MAINNET_ADDRESS = exports.PINNED_INTERPRETER_TESTNET_ADDRESS = exports.VerifyPolicyInputSchema = exports.SimulatePolicyInputSchema = exports.OraclePriceFixtureSchema = exports.PredicateNodeSchema = exports.PredicateLeafSchema = exports.SynthesizePolicyInputSchema = exports.SynthesizePolicyRecordingInputSchema = exports.InterpreterOptionsSchema = exports.SynthesizePolicyMandateInputSchema = exports.RecordTransactionInputSchema = exports.OzAdapterConfigSchema = exports.ComposeUserResponsesSchema = exports.MandateSpecSchema = exports.RecordedTransactionSchema = exports.ParseConfidenceSchema = exports.OnChainEventSchema = exports.TokenMovementSchema = exports.ContractInvocationSchema = exports.ScValSchema = exports.NetworkSchema = void 0;
 const zod_1 = require("zod");
 const address_ts_1 = require("../synth/address.js");
 /** Soroban `valid_until` is a u32 ledger sequence; a value above this cannot be
@@ -427,9 +427,16 @@ const MandateSpecSchemaForRule = zod_1.z
 // install/revoke/get_info schemas live HERE (after the helper) so the const
 // reference resolves at module init. They are the new tools on top of the
 // existing four.
-/** Pinned interpreter address (testnet). Mirrors DEPLOYMENTS.md:156-157.
+/** Pinned interpreter address (testnet). Mirrors DEPLOYMENTS.md:128.
  *  Single source for the MCP layer; do not embed elsewhere. */
 exports.PINNED_INTERPRETER_TESTNET_ADDRESS = 'CDR4NLV22STCXFGZPNKDQTEANWLF7LZ6AJLY6B7CLJXKHDZGYJWIOKGP';
+/** Pinned interpreter address (mainnet). Mirrors DEPLOYMENTS.md:18. Mainnet
+ *  has now been deployed (2026-08-04); the mainnet interpreter IS the binary
+ *  that was exercised on testnet (same wasm sha256, see
+ *  PINNED_INTERPRETER_WASM_SHA256). The address differs because instance
+ *  ids are network-scoped. UNAUDITED at the time of writing - see
+ *  DEPLOYMENTS.md:29-32 for the recorded decision and what is still pending. */
+exports.PINNED_INTERPRETER_MAINNET_ADDRESS = 'CALZAMUPREIRY4TULBEXIK77AUTOEJG63XLCPUWEHHQDOVK6ZVVS7VQ2';
 /** Pinned interpreter wasm sha256 (hex). Mirrors DEPLOYMENTS.md:156-157. */
 exports.PINNED_INTERPRETER_WASM_SHA256 = '6e6c13d93e197aa380303a42cd120f5ddb080dd36ef2a343ee1dbd04ca52a443';
 /** The grammar version the interpreter enforces (matches SELF_VERSION in
@@ -440,6 +447,23 @@ exports.PINNED_INTERPRETER_GRAMMAR_VERSION = 1;
  *  than a Server; the two are deliberately different surfaces, so this is
  *  pinned beside the addresses it is used with rather than shared. */
 exports.TESTNET_RPC_URL = 'https://soroban-testnet.stellar.org';
+/** Mainnet Soroban RPC. Pinned beside MAINNET counterparts so the install
+ *  and get_interpreter_info gates compare against the matching network's
+ *  RPC rather than always testnet. Public mainnet endpoint, the same one
+ *  the deploy script hit during the 2026-08-04 mainnet rollout. */
+exports.MAINNET_RPC_URL = 'https://mainnet.sorobanrpc.com';
+/** Pin + RPC lookup for the gate enforcement. The interpreters' wasm sha256
+ *  is identical across both networks (the same binary was uploaded both
+ *  places; DEPLOYMENTS.md:25-27), so `PINNED_INTERPRETER_WASM_SHA256` stays
+ *  a single constant - only the addresses and RPCs are network-scoped. */
+exports.PINNED_INTERPRETER_ADDRESS_BY_NETWORK = {
+    testnet: exports.PINNED_INTERPRETER_TESTNET_ADDRESS,
+    mainnet: exports.PINNED_INTERPRETER_MAINNET_ADDRESS,
+};
+exports.RPC_URL_BY_NETWORK = {
+    testnet: exports.TESTNET_RPC_URL,
+    mainnet: exports.MAINNET_RPC_URL,
+};
 /** Soroban `valid_until` window (ledgers) added to the latest ledger when
  *  building the auth entry. ~25 minutes at 5s/ledger. */
 exports.DEFAULT_AUTH_VALID_UNTIL_LEDGERS = 300;
@@ -457,22 +481,34 @@ exports.InstallPolicyInputSchema = zod_1.z
     /** The signer that authorises the install (G... wallet). Used only for
      *  sequence number + auth nonce simulation; never persisted, never signed. */
     sourceAccount: zod_1.z.string(),
+    /** Target network for the install. Selects which interpreter pin and
+     *  which RPC URL are valid by default. Defaults to `testnet` so the
+     *  pre-mainnet callers keep working: they were always pointing at
+     *  the testnet pin, so defaulting testnet here is the conservative
+     *  continuation, NOT a silent fall-through that bypasses the gate.
+     *  A caller that targets mainnet MUST set this to `mainnet` (the
+     *  pin and RPC pin do not move by themselves). */
+    network: exports.NetworkSchema.optional(),
     /** The proposed rule draft. Mirrors the core `ContextRuleDraft` shape. */
     rule: MandateSpecSchemaForRule,
     /** Per-rule install nonce; 1 for a fresh install. */
     installNonce: zod_1.z.number().int().positive(),
-    /** Optional RPC URL override. Defaults to the public testnet endpoint
-     *  (`TESTNET_RPC_URL`); the override is refused unless
+    /** Optional RPC URL override. Defaults to the pinned RPC for the
+     *  selected `network` (testnet by default, mainnet when
+     *  `network: 'mainnet'`); the override is refused unless
      *  `allowUnpinnedRpcUrl: true`, because the auth nonce and
      *  rootInvocation in the response come from whichever RPC answered. */
     rpcUrl: zod_1.z.string().url().optional(),
     /** Opt-in to using a non-pinned RPC URL. Without this flag the tool
-     *  refuses any `rpcUrl` other than `TESTNET_RPC_URL` because the
-     *  caller's auth-digest binds to whatever the RPC returned. */
+     *  refuses any `rpcUrl` other than the pinned RPC for the selected
+     *  network because the caller's auth-digest binds to whatever the
+     *  RPC returned. */
     allowUnpinnedRpcUrl: zod_1.z.boolean().optional(),
     /** Opt-in to pointing the rule's interpreter policy at any address
-     *  other than the pinned testnet interpreter. Default-deny: a caller
-     *  that controls the interpreter can permit everything. */
+     *  other than the pinned interpreter for the selected network.
+     *  Default-deny: a caller that controls the interpreter can permit
+     *  everything. Selecting `network: 'mainnet'` is NOT an opt-in -
+     *  the mainnet pin is its own deny-by-default anchor. */
     allowUnpinnedInterpreter: zod_1.z.boolean().optional(),
     /** Base fee in stroops; defaults to BASE_FEE (100). */
     baseFee: zod_1.z.number().int().positive().optional(),
@@ -489,9 +525,12 @@ exports.RevokePolicyInputSchema = zod_1.z
      *  verify, since the account's source is not in this repo. Proven on
      *  testnet: the account's deployer can revoke. */
     sourceAccount: zod_1.z.string(),
+    /** Target network for the revoke. Same `testnet`-default as install,
+     *  so pre-mainnet callers keep working without an explicit flag. */
+    network: exports.NetworkSchema.optional(),
     /** The rule id to remove from the smart account + interpreter. */
     ruleId: zod_1.z.number().int().nonnegative(),
-    /** Optional RPC URL override; same pin as install. */
+    /** Optional RPC URL override; same per-network pin as install. */
     rpcUrl: zod_1.z.string().url().optional(),
     /** Opt-in to using a non-pinned RPC URL. Same semantics as install. */
     allowUnpinnedRpcUrl: zod_1.z.boolean().optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crediolabs/policy-synth",
-  "version": "0.1.14",
+  "version": "0.1.16",
   "license": "MIT",
   "description": "Off-chain TypeScript synthesis core for the OZ Accounts Policy Builder. Records Soroban transactions, synthesises the minimal policy that permits exactly that flow, verifies it, and returns an unsigned install transaction.",
   "type": "module",

package/src/install/build-install-policy.ts

@@ -13,9 +13,12 @@
 // (b) key material the server does not have, so we ship the simpler ONE-CALL
 // shape. The wallet signature covers the change.
 //
-// `buildInstallPolicyXdr` returns CALL 1 ONLY. Call 2 (interpreter.install)
-// needs the rule id the account assigns in call 1, so it cannot be pre-built
-// and is documented in the response envelope under `followUp`.
+// `buildInstallPolicyXdr` installs the policy in ONE call. `add_context_rule`
+// takes `policies` as a `Map<policy_address, install_param>` and the account
+// forwards each install_param to that policy, so the interpreter stores the
+// predicate document as part of this same transaction. Earlier revisions
+// documented a second `interpreter.install` call; that was wrong, and issuing
+// it fails - the account re-enters the interpreter while it is mid-install.
 
 import { createHash } from 'node:crypto'
 import {
@@ -216,19 +219,17 @@ export interface BuildInstallPolicyResult {
   smartAccount: string
   /** Source account (echo) - the address that must sign. */
   sourceAccount: string
-  /** The host-call target + fn name. Call 2 (interpreter.install) is NOT
-   *  emitted here; the account assigns the rule id in call 1 and call 2
-   *  needs that id to bind its `context_rule_ids`. See `followUp` below. */
+  /** The host-call target + fn name. This single call installs the policy
+   *  outright: `add_context_rule` takes `policies` as a
+   *  `Map<policy_address, install_param>`, and the account forwards each
+   *  install_param to that policy. For an interpreter policy the param
+   *  carries the predicate and its hash, so the interpreter stores the
+   *  document as part of this transaction. There is no second call.
+   *
+   *  Verified on testnet 2026-08-01: a rule created by this builder alone
+   *  permits a matching operator call and denies a non-matching one with
+   *  interpreter code #100 - not #206 MissingState. */
   call: { contract: string; fn: 'add_context_rule' }
-  /** The follow-up call the caller MUST issue after this one confirms.
-   *  The rule id the account assigns in call 1 is required to bind the
-   *  interpreter's `install` auth context. */
-  followUp: {
-    contract: 'interpreter'
-    fn: 'install'
-    requiresRuleIdFromCallOne: true
-    hint: string
-  }
   /** Human-readable description of the install call, decoded FROM the
    *  built unsigned XDR (not from the input args). The wallet signature
    *  binds to bytes; the review card has to bind to the same bytes, so
@@ -243,9 +244,6 @@ export interface BuildInstallPolicyResult {
   rootInvocationXdr: string
 }
 
-const FOLLOWUP_HINT =
-  'after this tx confirms, read the rule id via account.get_context_rules_count()-1 (or get the receipt events), then call runInstallPolicy a second time with the interpreter as the target and the rule id in context_rule_ids - OR hand-build the install() call directly with the OZ auth pattern.'
-
 /** Build the unsigned transaction envelope for `account.add_context_rule(...)`.
  *  The output XDR is signed by the wallet, not by us. */
 export async function buildInstallPolicyXdr(
@@ -363,12 +361,6 @@ export async function buildInstallPolicyXdr(
     smartAccount: args.smartAccount,
     sourceAccount: args.sourceAccount,
     call: { contract: args.smartAccount, fn: 'add_context_rule' },
-    followUp: {
-      contract: 'interpreter',
-      fn: 'install',
-      requiresRuleIdFromCallOne: true,
-      hint: FOLLOWUP_HINT,
-    },
     describes,
     authNonce: original.credentials().address().nonce().toString(),
     authValidUntilLedger: validUntilLedger,