@crediolabs/policy-synth 0.2.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -4
- package/dist/adapters/interpreter/adapter.d.ts +19 -25
- package/dist/adapters/interpreter/adapter.js +54 -487
- package/dist/adapters/interpreter/index.d.ts +1 -1
- package/dist/adapters/interpreter/index.js +1 -1
- package/dist/adapters/oz/adapter.js +1 -15
- package/dist/errors.d.ts +1 -1
- package/dist/index.d.ts +1 -4
- package/dist/index.js +1 -4
- package/dist/install/build-add-context-rule.d.ts +3 -19
- package/dist/install/build-add-context-rule.js +3 -98
- package/dist/install/build-install-policy.d.ts +4 -53
- package/dist/install/build-install-policy.js +44 -123
- package/dist/install/index.d.ts +0 -2
- package/dist/install/index.js +0 -7
- package/dist/ir/index.d.ts +1 -1
- package/dist/ir/types.d.ts +7 -76
- package/dist/ir/types.js +0 -2
- package/dist/predicate/decode.d.ts +1 -1
- package/dist/predicate/decode.js +2 -70
- package/dist/predicate/encode.js +45 -229
- package/dist/predicate/from-json.js +1 -42
- package/dist/record/decode.js +3 -8
- package/dist/review-card/builder.d.ts +4 -3
- package/dist/review-card/builder.js +18 -162
- package/dist/review-card/cross-check.js +2 -105
- package/dist/review-card/render-leaf.d.ts +4 -0
- package/dist/review-card/render-leaf.js +47 -0
- package/dist/run/index.d.ts +36 -139
- package/dist/run/index.js +125 -437
- package/dist/run/schemas.d.ts +168 -1929
- package/dist/run/schemas.js +40 -269
- package/dist/seams/types.d.ts +0 -2
- package/dist/simulate/deny-cases.d.ts +26 -0
- package/dist/simulate/deny-cases.js +282 -0
- package/dist/simulate/evaluate.d.ts +18 -0
- package/dist/simulate/evaluate.js +271 -0
- package/dist/simulate/index.d.ts +4 -0
- package/dist/simulate/index.js +8 -0
- package/dist/synth/compose-from-recording.d.ts +24 -51
- package/dist/synth/compose-from-recording.js +120 -282
- package/dist/synth/deny-cases.d.ts +5 -7
- package/dist/synth/deny-cases.js +23 -373
- package/dist/synth/evaluate.d.ts +0 -21
- package/dist/synth/evaluate.js +56 -336
- package/dist/synth/index.d.ts +0 -5
- package/dist/synth/index.js +0 -5
- package/dist/synth/permit-context.d.ts +2 -9
- package/dist/synth/permit-context.js +1 -82
- package/dist/synth/synthesize-from-recording.d.ts +1 -29
- package/dist/synth/synthesize-from-recording.js +41 -356
- package/dist/types.d.ts +8 -60
- package/dist/types.js +5 -2
- package/dist/verify/simulate.d.ts +1 -14
- package/dist/verify/simulate.js +2 -88
- package/dist/verify/verify.d.ts +1 -7
- package/dist/verify/verify.js +0 -8
- package/dist-cjs/adapters/interpreter/adapter.d.ts +19 -25
- package/dist-cjs/adapters/interpreter/adapter.js +56 -489
- package/dist-cjs/adapters/interpreter/index.d.ts +1 -1
- package/dist-cjs/adapters/interpreter/index.js +1 -2
- package/dist-cjs/adapters/oz/adapter.js +1 -15
- package/dist-cjs/errors.d.ts +1 -1
- package/dist-cjs/index.d.ts +1 -4
- package/dist-cjs/index.js +1 -4
- package/dist-cjs/install/build-add-context-rule.d.ts +3 -19
- package/dist-cjs/install/build-add-context-rule.js +1 -97
- package/dist-cjs/install/build-install-policy.d.ts +4 -53
- package/dist-cjs/install/build-install-policy.js +44 -122
- package/dist-cjs/install/index.d.ts +0 -2
- package/dist-cjs/install/index.js +2 -23
- package/dist-cjs/ir/index.d.ts +1 -1
- package/dist-cjs/ir/types.d.ts +7 -76
- package/dist-cjs/ir/types.js +0 -2
- package/dist-cjs/predicate/decode.d.ts +1 -1
- package/dist-cjs/predicate/decode.js +2 -70
- package/dist-cjs/predicate/encode.js +45 -229
- package/dist-cjs/predicate/from-json.js +1 -42
- package/dist-cjs/record/decode.js +3 -8
- package/dist-cjs/review-card/builder.d.ts +4 -3
- package/dist-cjs/review-card/builder.js +23 -167
- package/dist-cjs/review-card/cross-check.js +7 -110
- package/dist-cjs/review-card/render-leaf.d.ts +4 -0
- package/dist-cjs/review-card/render-leaf.js +52 -0
- package/dist-cjs/run/index.d.ts +36 -139
- package/dist-cjs/run/index.js +125 -444
- package/dist-cjs/run/schemas.d.ts +168 -1929
- package/dist-cjs/run/schemas.js +41 -270
- package/dist-cjs/seams/types.d.ts +0 -2
- package/dist-cjs/simulate/deny-cases.d.ts +26 -0
- package/dist-cjs/simulate/deny-cases.js +286 -0
- package/dist-cjs/simulate/evaluate.d.ts +18 -0
- package/dist-cjs/simulate/evaluate.js +274 -0
- package/dist-cjs/simulate/index.d.ts +4 -0
- package/dist-cjs/simulate/index.js +13 -0
- package/dist-cjs/synth/compose-from-recording.d.ts +24 -51
- package/dist-cjs/synth/compose-from-recording.js +120 -282
- package/dist-cjs/synth/deny-cases.d.ts +5 -7
- package/dist-cjs/synth/deny-cases.js +23 -374
- package/dist-cjs/synth/evaluate.d.ts +0 -21
- package/dist-cjs/synth/evaluate.js +57 -337
- package/dist-cjs/synth/index.d.ts +0 -5
- package/dist-cjs/synth/index.js +1 -11
- package/dist-cjs/synth/permit-context.d.ts +2 -9
- package/dist-cjs/synth/permit-context.js +1 -82
- package/dist-cjs/synth/synthesize-from-recording.d.ts +1 -29
- package/dist-cjs/synth/synthesize-from-recording.js +39 -354
- package/dist-cjs/types.d.ts +8 -60
- package/dist-cjs/types.js +6 -3
- package/dist-cjs/verify/simulate.d.ts +1 -14
- package/dist-cjs/verify/simulate.js +2 -88
- package/dist-cjs/verify/verify.d.ts +1 -7
- package/dist-cjs/verify/verify.js +0 -8
- package/package.json +4 -4
- package/src/adapters/interpreter/adapter.ts +76 -572
- package/src/errors.ts +0 -19
- package/src/index.ts +1 -4
- package/src/install/build-add-context-rule.ts +5 -139
- package/src/install/build-install-policy.ts +93 -214
- package/src/install/index.ts +0 -34
- package/src/predicate/decode.ts +2 -70
- package/src/predicate/encode.ts +49 -261
- package/src/predicate/from-json.ts +1 -43
- package/src/record/decode.ts +3 -8
- package/src/review-card/builder.ts +19 -168
- package/src/review-card/cross-check.ts +3 -105
- package/src/review-card/render-leaf.ts +48 -0
- package/src/run/index.ts +144 -572
- package/src/run/schemas.ts +42 -291
- package/src/simulate/deny-cases.ts +334 -0
- package/src/simulate/evaluate.ts +284 -0
- package/src/simulate/index.ts +11 -0
- package/src/synth/compose-from-recording.ts +148 -347
- package/src/synth/index.ts +0 -13
- package/src/synth/synthesize-from-recording.ts +43 -456
- package/src/types.ts +13 -49
- package/dist/install/authority-overlap.d.ts +0 -134
- package/dist/install/authority-overlap.js +0 -0
- package/dist/install/build-install-predicate.d.ts +0 -96
- package/dist/install/build-install-predicate.js +0 -444
- package/dist/install/build-merge-policy.d.ts +0 -70
- package/dist/install/build-merge-policy.js +0 -130
- package/dist/install/plan-merge-policy.d.ts +0 -49
- package/dist/install/plan-merge-policy.js +0 -86
- package/dist/install/read-account-rules.d.ts +0 -100
- package/dist/install/read-account-rules.js +0 -283
- package/dist-cjs/install/authority-overlap.d.ts +0 -134
- package/dist-cjs/install/authority-overlap.js +0 -0
- package/dist-cjs/install/build-install-predicate.d.ts +0 -96
- package/dist-cjs/install/build-install-predicate.js +0 -479
- package/dist-cjs/install/build-merge-policy.d.ts +0 -70
- package/dist-cjs/install/build-merge-policy.js +0 -134
- package/dist-cjs/install/plan-merge-policy.d.ts +0 -49
- package/dist-cjs/install/plan-merge-policy.js +0 -90
- package/dist-cjs/install/read-account-rules.d.ts +0 -100
- package/dist-cjs/install/read-account-rules.js +0 -296
- package/src/adapters/interpreter/index.ts +0 -8
- package/src/adapters/oz/adapter.ts +0 -376
- package/src/adapters/oz/index.ts +0 -9
- package/src/codegen/compile-gate.ts +0 -167
- package/src/codegen/index.ts +0 -17
- package/src/codegen/template.ts +0 -165
- package/src/install/authority-overlap.ts +0 -0
- package/src/install/build-merge-policy.ts +0 -219
- package/src/install/plan-merge-policy.ts +0 -133
- package/src/install/read-account-rules.ts +0 -376
- package/src/ir/index.ts +0 -13
- package/src/ir/types.ts +0 -132
- package/src/mandate/index.ts +0 -4
- package/src/mandate/to-ir.ts +0 -71
- package/src/mandate/types.ts +0 -21
- package/src/seams/index.ts +0 -11
- package/src/seams/types.ts +0 -81
- package/src/synth/deny-cases.ts +0 -663
- package/src/synth/evaluate.ts +0 -613
- package/src/synth/harness.ts +0 -68
- package/src/synth/minimize.ts +0 -48
- package/src/synth/permit-context.ts +0 -136
- package/src/synth/predicate-literals.ts +0 -27
- package/src/synth/synthesize-from-mandate.ts +0 -82
- package/src/verify/envelope.ts +0 -28
- package/src/verify/index.ts +0 -5
- package/src/verify/simulate.ts +0 -311
- package/src/verify/verify.ts +0 -243
package/src/seams/types.ts
DELETED
|
@@ -1,81 +0,0 @@
|
|
|
1
|
-
// src/seams/types.ts - the three custody seams (contracts, not implementations).
|
|
2
|
-
//
|
|
3
|
-
// The synthesizer is decoupled from its edges by three seams:
|
|
4
|
-
// - PolicySource (INPUT): produces a normalized RecordedTransaction. The
|
|
5
|
-
// recorder is the reference source; a MandateSpec
|
|
6
|
-
// lowering is a second, deterministic source.
|
|
7
|
-
// - ChainDecoder (DECODE): chain-specific call data -> normalized facts.
|
|
8
|
-
// - CustodyAdapter (OUTPUT): compile a PolicyIR to a backend-native policy +
|
|
9
|
-
// verify/export it (OZ is the first adapter).
|
|
10
|
-
// These are INTERFACES only. Implementations live in their own modules.
|
|
11
|
-
|
|
12
|
-
import type { ToolResponse } from '../errors.ts'
|
|
13
|
-
import type { PolicyIR } from '../ir/types.ts'
|
|
14
|
-
import type { Network, ProposedPolicy, RecordedTransaction, ScVal } from '../types.ts'
|
|
15
|
-
|
|
16
|
-
/** INPUT: something that produces a normalized RecordedTransaction. */
|
|
17
|
-
export interface PolicySource {
|
|
18
|
-
readonly name: string
|
|
19
|
-
capture(input: {
|
|
20
|
-
hash?: string
|
|
21
|
-
xdr?: string
|
|
22
|
-
network: Network
|
|
23
|
-
}): Promise<ToolResponse<RecordedTransaction>>
|
|
24
|
-
}
|
|
25
|
-
|
|
26
|
-
/** DECODE: chain-specific call data -> the normalized facts the synth reasons
|
|
27
|
-
* over. */
|
|
28
|
-
export interface ChainDecoder {
|
|
29
|
-
readonly chain: 'stellar' | 'evm'
|
|
30
|
-
decodeInvocation(tx: RecordedTransaction): { contract: string; method: string; args: ScVal[] }
|
|
31
|
-
}
|
|
32
|
-
|
|
33
|
-
/** OZ = enforce; `log_only` is reserved for shadow mode (out of scope). */
|
|
34
|
-
export type CustodyMode = 'enforce' | 'log_only'
|
|
35
|
-
|
|
36
|
-
/** What a backend can express. A construct needing a false flag is flagged
|
|
37
|
-
* `uncovered` by the adapter, never silently dropped. */
|
|
38
|
-
export interface CustodyCapabilities {
|
|
39
|
-
supportsOraclePrice: boolean
|
|
40
|
-
supportsSpendWindow: boolean
|
|
41
|
-
supportsInvocationCount: boolean
|
|
42
|
-
supportsTimeExpiry: boolean
|
|
43
|
-
supportsThreshold: boolean
|
|
44
|
-
supportsGeneralPredicate: boolean
|
|
45
|
-
}
|
|
46
|
-
|
|
47
|
-
/** The result of compiling a PolicyIR for one backend. */
|
|
48
|
-
export interface CompileResult {
|
|
49
|
-
/** false => some IR construct this backend cannot express (see `uncovered`). */
|
|
50
|
-
covered: boolean
|
|
51
|
-
/** Human-readable list of unsupported constructs. */
|
|
52
|
-
uncovered: string[]
|
|
53
|
-
/** The backend-native installable policy, assembled when a rule lowered. */
|
|
54
|
-
proposed?: ProposedPolicy
|
|
55
|
-
}
|
|
56
|
-
|
|
57
|
-
/** Result of a simulate() dry-run. `ts-model` is the off-chain TS evaluator.
|
|
58
|
-
* Real permit/deny semantics wiring is a later phase; week-1 returns a
|
|
59
|
-
* clearly-marked stub (empty `evaluations`, `permitted: null`). */
|
|
60
|
-
export interface SimulationResult {
|
|
61
|
-
backend: 'ts-model'
|
|
62
|
-
/** Whether the permit tx would be allowed; null until real semantics land. */
|
|
63
|
-
permitted: boolean | null
|
|
64
|
-
/** Per-construct evaluation trace; empty placeholder in this slice. */
|
|
65
|
-
evaluations: unknown[]
|
|
66
|
-
/** Diagnostics; marks the stub explicitly. */
|
|
67
|
-
notes: string[]
|
|
68
|
-
}
|
|
69
|
-
|
|
70
|
-
/** OUTPUT: compile a PolicyIR to a backend-specific installable policy. */
|
|
71
|
-
export interface CustodyAdapter {
|
|
72
|
-
readonly name: string
|
|
73
|
-
readonly mode: CustodyMode
|
|
74
|
-
capabilities(): CustodyCapabilities
|
|
75
|
-
compile(ir: PolicyIR): CompileResult
|
|
76
|
-
/** Phase-03 wiring; a clearly-marked stub in week-1. */
|
|
77
|
-
simulate(ir: PolicyIR, permitTx: RecordedTransaction): SimulationResult
|
|
78
|
-
/** Canonical JSON of the IR (portability / audit). */
|
|
79
|
-
export(ir: PolicyIR): string
|
|
80
|
-
// install(...) lands with a later phase; not part of this slice.
|
|
81
|
-
}
|