@crediolabs/policy-synth 0.1.8 → 0.1.10

package/src/types.ts

@@ -145,6 +145,16 @@ export type PredicateLeaf =
   | { kind: 'call_contract' }
   | { kind: 'call_fn' }
   | { kind: 'call_arg'; index: number }
+  // Length of a vec-typed argument as a u32. Binds the OUTER vec length so
+  // a caller cannot append a new element to defeat a per-element pin.
+  // Paired with `call_arg_field` per element - pinning only the field leaves
+  // an element-append vulnerability; this leaf closes it.
+  | { kind: 'call_arg_len'; index: number }
+  // Value of `field` in the map at `element` of the vec at argument `index`.
+  // Fixed-arity: index, element, field. The leaf is resolved against the
+  // recorded ScVal type. A non-vec arg, missing element, missing field, or
+  // type mismatch all DENY (fail-closed).
+  | { kind: 'call_arg_field'; index: number; element: number; field: string }
   // `call_sub_invocation[i]` is NOT in v1 grammar. OZ `Policy::enforce`
   // receives one `Context`, not a sub-invocation tree; sub-invocations live under
   // `InvokerContractAuthEntry::Contract(SubContractInvocation)`, not in the