@crediolabs/policy-synth 0.2.0 → 0.3.1

package/dist/adapters/interpreter/adapter.js

@@ -1,16 +1,10 @@
 // src/adapters/interpreter/adapter.ts - the interpreter-policy CustodyAdapter.
 //
 // Compiles a PolicyIR to a single interpreter `PolicyDocument` + `PolicyRef`
-// carrying the canonical predicate encoding from `predicate/encode.ts`. Second
-// backend (the OZ built-in adapter is the first); the compose step (P3) routes
-// IR constructs between them.
+// carrying the canonical predicate encoding from `predicate/encode.ts`. This is
+// the only backend; the compose step lowers every constraint to it.
 //
 // Three fail-closed enforcement gates (per spec):
-//   - oracle_price leaves MUST sit directly under the top-level `and`; nesting
-//     under `not` / `or` / inside `in` throws ORACLE_LEAF_INVALID_POSITION.
-//   - oracleParams overrides may only TIGHTEN vs wasm defaults
-//     (maxStalenessSeconds <= 600, maxDeviationBps <= 200); a widening value
-//     throws ORACLE_PARAMS_OUT_OF_RANGE at compile time.
 //   - an `in` allowlist (or a `compare eq` vs an address, or any value in an
 //     `eq_seq`) that targets the smart account's own address throws
 //     SCOPE_SELF_CALL.
@@ -18,27 +12,12 @@
 // Anything the adapter genuinely cannot express (EVM calldata / value, unix
 // expiry, etc.) is named in `uncovered` rather than silently dropped.
 import { encodePredicate } from "../../predicate/encode.js";
+import { GRAMMAR_VERSION, } from "../../types.js";
 /** [VERIFY] NOT a real deployed address. The interpreter is a per-network
  *  deploy artifact we do not have yet; install is a later phase. */
 export const PLACEHOLDER_INTERPRETER_ADDRESS = 'VERIFY-interpreter-address';
-/** Wasm-level oracle defaults (mirrors the interpreter's `OracleParams`).
- *  Per-policy overrides may TIGHTEN only - they may never exceed these. */
-export const ORACLE_DEFAULTS = {
-    maxStalenessSeconds: 600,
-    maxDeviationBps: 200,
-};
-const CAPABILITIES = {
-    supportsSpendWindow: true,
-    supportsThreshold: false, // thresholds are the OZ adapter's job
-    // Expiry is via the context rule's validUntilLedger, not a predicate - the
-    // interpreter refuses a `valid_until` leaf at install.
-    supportsTimeExpiry: false,
-    supportsOraclePrice: true,
-    supportsInvocationCount: true,
-    supportsGeneralPredicate: true,
-};
-/** Parse confidence for a deterministic (non-decoded) input: full (1.0). A
- *  mandate needs no decoding, so the gate is not applicable. */
+/** Parse confidence for a deterministic (non-decoded) input: full (1.0). An
+ *  input that needs no decoding has nothing for the gate to judge. */
 const FULL_PARSE_CONFIDENCE = {
     overall: 1,
     knownContracts: [],
@@ -46,53 +25,26 @@ const FULL_PARSE_CONFIDENCE = {
     opaqueScVals: [],
     thresholdUsed: 1,
 };
-export function createInterpreterAdapter(config) {
-    return {
-        name: 'interpreter',
-        mode: 'enforce',
-        capabilities: () => ({ ...CAPABILITIES }),
-        compile: (ir) => compile(ir, config),
-        simulate: () => simulateStub(),
-        export: (ir) => canonicalStringify(ir),
-    };
-}
-/** Lower a single IR rule to the canonical pre-encoding `PredicateNode`. The
- *  orchestrator uses this to wire the self-verify + minimise pipeline: after
- *  `compile(ir)` succeeds it re-derives the PredicateNode via this helper to
- *  drive `minimize` and `runHarness` on the SAME shape the encoder saw. Pure
- *  and deterministic: same `rule + config` -> byte-identical PredicateNode.
- *  The `uncovered` list is NOT re-derived - callers needing it must use
- *  `compile(ir)`. */
+/** Lower a single rule to the canonical pre-encoding `PredicateNode`. The
+ *  orchestrator re-derives the PredicateNode through this helper so it holds the
+ *  SAME shape the encoder saw. Pure and deterministic: same `rule + config` ->
+ *  byte-identical PredicateNode. The `uncovered` list is NOT re-derived -
+ *  callers needing it must use `compileInterpreterPolicy(rule, config)`. */
 export function lowerRuleToPredicate(rule, config) {
     return lowerRule(rule, config).predicate;
 }
-function compile(ir, config) {
-    // Tighten-only oracle-params gate (config-time). Widening -> throw at compile
-    // time before any lowering happens, so a misuse fails closed loudly.
-    assertOracleParamsTighten(config.oracleParams);
-    const firstRule = ir.rules[0];
-    if (!firstRule) {
-        return { covered: false, uncovered: ['empty PolicyIR (no rules to compile)'] };
-    }
-    if (ir.rules.length > 1) {
-        return {
-            covered: false,
-            uncovered: [
-                `multi-rule PolicyIR: ${ir.rules.length - 1} rule(s) beyond the first are not compiled (the interpreter adapter handles one rule per document in this slice)`,
-            ],
-        };
-    }
-    const lowered = lowerRule(firstRule, config);
+/** Compile a composed rule to an installable interpreter policy. */
+export function compileInterpreterPolicy(rule, config) {
+    const lowered = lowerRule(rule, config);
     if (lowered.uncovered.length > 0) {
         return { covered: false, uncovered: lowered.uncovered };
     }
     const { encodedPredicate, predicateHash } = encodePredicate(lowered.predicate);
     const policyDocument = {
-        grammarVersion: 1,
+        grammarVersion: GRAMMAR_VERSION,
         installNonce: config.installNonce,
         encodedPredicate,
         predicateHash,
-        ...(config.oracleParams ? { oracleParams: config.oracleParams } : {}),
     };
     const policyRef = {
         kind: 'interpreter',
@@ -113,56 +65,18 @@ function lowerRule(rule, config) {
     const uncovered = [];
     // scope -> context rule + sibling predicates. contract/method each become
     // their own `eq` leaf and are merged into the top-level `and` alongside the
-    // constraints. The top-level MUST be `and` so oracle leaves sit directly
-    // under it (mandatory per the oracle position rule + canonical hash stability).
+    // constraints. The top-level MUST be `and` for canonical hash stability.
     const scopeContract = rule.scope.contract;
     const scopeMethod = rule.scope.method;
-    if (rule.scope.chainId !== undefined) {
-        uncovered.push(`chainId \`${rule.scope.chainId}\` not bindable by the interpreter adapter (network is per-context, not per-rule)`);
-    }
-    if (rule.roles.length > 0) {
-        uncovered.push(`roles [${rule.roles.join(', ')}] dropped (role-to-signer mapping is a later phase; interpreter policies reference addresses, not role names)`);
-    }
-    if (rule.guard) {
-        uncovered.push(`guard: ${describeCondition(rule.guard)} (interpreter adapter currently treats guards as uncovered)`);
-    }
-    // expiry -> context rule validUntilLedger only. Unix-timestamp expiry is
-    // honoured by the interpreter (the `valid_until` selector), but we surface
-    // it here as Path-B because the IR contract already says "OZ context rules
-    // expire by ledger sequence" and we keep one expiry model for both adapters.
-    let validUntilLedger = null;
-    if (rule.expiry) {
-        if (rule.expiry.validUntilLedger !== undefined) {
-            validUntilLedger = rule.expiry.validUntilLedger;
-        }
-        else if (rule.expiry.validUntilUnixSeconds !== undefined) {
-            uncovered.push('time expiry given as a unix timestamp (interpreter adapter currently lowers expiry only via the OZ context-rule validUntilLedger; supply expiry.validUntilLedger)');
-        }
-    }
-    // approval is the OZ adapter's job (it lowers to simple_threshold /
-    // weighted_threshold primitives). Surface it here so a caller that drops it
-    // through to the interpreter adapter sees an explicit uncovered entry
-    // instead of a silently-dropped M-of-N gate.
-    if (rule.approval) {
-        uncovered.push(`approval threshold ${rule.approval.threshold} not emitted by the interpreter adapter (thresholds lower to OZ built-in primitives in the OZ adapter)`);
-    }
+    // expiry -> the context rule's own validUntilLedger. The interpreter has no
+    // expiry selector; a policy's lifetime is the OZ context rule's lifetime.
+    const validUntilLedger = rule.expiry?.validUntilLedger ?? null;
     // Pre-scan constraints: anything the interpreter adapter cannot express is
     // named in `uncovered` and skipped from the predicate lowering. We surface
     // these BEFORE lowering so the predicate is built from only the
     // expressible subset.
-    const expressibleConstraints = [];
-    for (const c of rule.constraints) {
-        const unsupp = unsupportedConstruct(c);
-        if (unsupp !== null) {
-            uncovered.push(unsupp);
-        }
-        else {
-            expressibleConstraints.push(c);
-        }
-    }
     // Build the top-level `and` of scope + expressible constraints. The
-    // top-level MUST be `and` so oracle leaves sit directly under it - the
-    // position rule is enforced inside `lowerCondition`.
+    // top-level MUST be `and` for canonical hash stability.
     const topChildren = [];
     if (scopeContract !== undefined) {
         topChildren.push({
@@ -178,14 +92,23 @@ function lowerRule(rule, config) {
             right: { kind: 'literal_symbol', value: scopeMethod },
         });
     }
-    for (const c of expressibleConstraints) {
-        topChildren.push(lowerCondition(c, config));
+    topChildren.push(...rule.constraints);
+    // One walk over the whole tree rejects any literal naming the smart account
+    // itself. Previously three separate call sites did this per construct, which
+    // meant a new construct could be added without one.
+    for (const node of topChildren) {
+        assertNoSelfCall(node, config);
     }
     const predicate = topChildren.length === 1 && topChildren[0] !== undefined
         ? topChildren[0]
         : { op: 'and', children: topChildren };
+    // Scope the context rule to the contract when the rule names one, matching
+    // what OZ's CallContract scoping did. A `default` rule would route EVERY
+    // call through this policy instead of only calls to the scoped contract.
     const contextRule = {
-        contextRuleType: { kind: 'default' },
+        contextRuleType: scopeContract !== undefined
+            ? { kind: 'call_contract', contract: scopeContract }
+            : { kind: 'default' },
         name: 'interpreter',
         validUntilLedger,
         signers: [],
@@ -193,392 +116,36 @@ function lowerRule(rule, config) {
     };
     return { predicate, contextRule, uncovered };
 }
-/** Detect IR constructs the interpreter adapter cannot express; return a
- *  human-readable descriptor (or null if the construct IS expressible). Used
- *  by `lowerRule` to populate `uncovered` before lowering. */
-function unsupportedConstruct(cond) {
-    switch (cond.op) {
-        // Expressible: `call_arg_scaled` is exactly this construct.
-        case 'slippage_floor':
-            return null;
-        case 'in':
-            // The oracle position rule is a hard error and must be raised before a
-            // construct can be written off as uncovered - otherwise a subtree that
-            // is BOTH misplaced-oracle and unsourceable would be silently dropped
-            // instead of rejected.
-            assertNoOracleDescendants(cond);
-            return (unsourceableSelector(cond.selector) ??
-                (cond.selector.kind === 'calldata' || cond.selector.kind === 'value'
-                    ? `EVM \`${cond.selector.kind}\` selector on allowlist (predicate DSL)`
-                    : null));
-        case 'eq_seq':
-            return (unsourceableSelector(cond.selector) ??
-                (cond.selector.kind === 'calldata' || cond.selector.kind === 'value'
-                    ? `EVM \`${cond.selector.kind}\` selector on ordered-sequence equality (predicate DSL)`
-                    : null));
-        case 'compare': {
-            const s = cond.compare.selector;
-            if (s.kind === 'calldata')
-                return 'EVM calldata comparison (predicate DSL)';
-            if (s.kind === 'value')
-                return 'tx.value comparison (predicate DSL)';
-            // The on-chain interpreter sees ONE authorized call - no
-            // `Context.sub_invocations` in v1 - so it cannot observe token
-            // movements. `amount` has no value to read, and `window_spent`
-            // accumulates BY that amount, so its counter would never move.
-            // Deriving either from the call payload would quietly swap "value
-            // actually moved" for "value the caller declared" - a weaker guarantee
-            // than the review card would be claiming.
-            //
-            // Rolling spend caps belong to the OZ `spending_limit` primitive (already
-            // audited, emitted by the OZ adapter). A per-call cap is expressible here
-            // as `arg_field`; bounding it with `invocation_count` gives an enforceable
-            // ceiling per window.
-            return unsourceableSelector(s);
-        }
-        // Recurse: a nested `and`/`or`/`not` must not smuggle a selector past the
-        // pre-scan, which only sees top-level constraints.
-        case 'and':
-            return cond.children.map(unsupportedConstruct).find((u) => u !== null) ?? null;
-        case 'or':
-            assertNoOracleDescendants(cond);
-            return cond.children.map(unsupportedConstruct).find((u) => u !== null) ?? null;
-        case 'not':
-            assertNoOracleDescendants(cond);
-            return unsupportedConstruct(cond.child);
-    }
-}
-/** Selectors whose value the on-chain interpreter has no way to obtain. */
-function unsourceableSelector(s) {
-    if (s.kind === 'amount') {
-        return `per-call amount comparison on ${s.token} - the interpreter cannot observe token movements; express a per-call cap with arg_field, or a rolling cap with the OZ spending_limit primitive`;
-    }
-    if (s.kind === 'window_spent') {
-        return `rolling spend cap on ${s.token} over ${s.windowSeconds}s - not enforceable by the interpreter; use the OZ spending_limit primitive, or bound per-call value with arg_field plus invocation_count`;
-    }
-    return null;
-}
-/** Lower one IR condition to a PredicateNode. Enforces the oracle position
- *  rule (oracle_price leaves must sit directly under the top-level `and`) and
- *  the self-call rule (`in` allowlist / `compare eq` vs the smart account
- *  address -> SCOPE_SELF_CALL). */
-function lowerCondition(cond, config) {
-    switch (cond.op) {
-        // `out >= in * num/den`. The contract refuses den == 0 or a non-positive
-        // ratio at install, so a malformed floor fails loudly rather than
-        // silently inverting the comparison.
-        case 'slippage_floor':
-            return {
-                op: 'gte',
-                left: { kind: 'call_arg', index: cond.outArgIndex },
-                right: {
-                    kind: 'call_arg_scaled',
-                    index: cond.inArgIndex,
-                    num: cond.num,
-                    den: cond.den,
-                },
-            };
-        case 'and':
-            return { op: 'and', children: cond.children.map((c) => lowerCondition(c, config)) };
-        case 'or':
-            // `or` at this depth: oracle_price anywhere inside is invalid (would
-            // not be a direct child of the top-level `and`).
-            assertNoOracleDescendants(cond);
-            return { op: 'or', children: cond.children.map((c) => lowerCondition(c, config)) };
-        case 'not':
-            // `not` at this depth: oracle_price anywhere inside is invalid.
-            assertNoOracleDescendants(cond);
-            return { op: 'not', child: lowerCondition(cond.child, config) };
-        case 'in': {
-            assertNoOracleDescendants(cond);
-            for (const v of cond.values) {
-                assertNotSelfCallAddress(v, config);
-            }
-            // `in` is PURE set membership; the encoder sorts the haystack. An exact
-            // ordered sequence (e.g. swap hop path) is expressed as `eq_seq` and
-            // lowers to `eq(selector, literal_vec)` instead - never to `in` with an
-            // `ordered` flag.
-            return {
-                op: 'in',
-                needle: lowerSelector(cond.selector),
-                haystack: cond.values.map((v) => literalFromScalar(v, selectorScalarType(cond.selector))),
-            };
-        }
-        case 'eq_seq': {
-            assertNoOracleDescendants(cond);
-            for (const v of cond.values) {
-                assertNotSelfCallAddress(v, config);
-            }
-            // Exact ordered sequence equality: the right-hand side is a literal_vec
-            // whose element order is preserved verbatim by the encoder. `eq` does
-            // deep equality at evaluate time - this is the ONLY way to express an
-            // exact ordered sequence in the predicate grammar (the path of a swap).
-            return {
-                op: 'eq',
-                left: lowerSelector(cond.selector),
-                right: {
-                    kind: 'literal_vec',
-                    elements: cond.values.map((v) => literalFromScalar(v, selectorScalarType(cond.selector))),
-                },
-            };
-        }
-        case 'compare': {
-            // Self-call on an address eq.
-            if (cond.compare.operator === 'eq' &&
-                cond.compare.selector.kind === 'arg' &&
-                cond.compare.selector.scalarType === 'address') {
-                assertNotSelfCallAddress(cond.compare.value, config);
-            }
-            return {
-                op: cond.compare.operator,
-                left: lowerSelector(cond.compare.selector),
-                right: literalFromIRCompare(cond.compare),
-            };
+/** Reject a value that targets the smart account's own address (a self-call
+ *  is a structural privilege-escalation hole the interpreter forbids). */
+/** Reject any address literal anywhere in the predicate that names the smart
+ *  account itself: a policy permitting the account to call itself would let an
+ *  agent re-enter the guarded account and escape the scope the rule pins. */
+function assertNoSelfCall(node, config) {
+    const checkLeaf = (leaf) => {
+        if (leaf.kind === 'literal_vec') {
+            for (const e of leaf.elements)
+                checkLeaf(e);
+            return;
         }
-    }
-}
-/** Lower an IR selector to the matching PredicateLeaf. */
-function lowerSelector(s) {
-    switch (s.kind) {
-        case 'arg':
-            return { kind: 'call_arg', index: s.argIndex };
-        case 'arg_len':
-            return { kind: 'call_arg_len', index: s.argIndex };
-        case 'arg_field':
-            return { kind: 'call_arg_field', index: s.argIndex, element: s.element, field: s.field };
-        // `amount` / `window_spent` are filtered out by `unsupportedConstruct`
-        // before lowering - the interpreter cannot source either on chain.
-        // Reaching here means the pre-scan was bypassed; fail loudly rather than
-        // emit a leaf the contract will refuse.
-        case 'amount':
-        case 'window_spent':
-            throw new Error(`interpreter adapter cannot lower \`${s.kind}\`: it should have been reported as uncovered`);
-        case 'invocation_count':
-            return { kind: 'invocation_count_in_window', windowSecs: s.windowSeconds };
-        case 'now':
-            return { kind: 'now' };
-        case 'valid_until':
-            return { kind: 'valid_until' };
-        case 'oracle_price':
-            return { kind: 'oracle_price', asset: s.asset };
-        case 'calldata':
-        case 'value':
-            // Unreachable: the caller flagged these as Path-B before reaching here.
-            throw toolError('SYNTHESIS_ERROR', `selector kind \`${s.kind}\` is not lowerable to a predicate leaf`);
-    }
-}
-/** Build a literal leaf from the right-hand side of an IRCompare, mapping the
- *  selector kind to the matching `literal_*` kind. The IR compare value is a
- *  raw string (i128-safe); the selector kind fixes the canonical wire type:
- *    - arg       -> IR scalarType (set by the recorder/parser)
- *    - arg_len   -> u32 (vec length is a small non-negative integer)
- *    - arg_field -> IR scalarType (the field's recorded type)
- *    - amount    -> i128 (canonical Stellar token amount encoding)
- *    - window_spent -> i128 (canonical amount encoding)
- *    - oracle_price  -> i128 (canonical price encoding)
- *    - invocation_count -> u32 (counts are small non-negative integers)
- *    - now / valid_until -> u64 (unix timestamps in seconds) */
-function literalFromIRCompare(c) {
-    // An oracle comparand is not a bare literal: the interpreter refuses one,
-    // because assuming it shares the normalised 9-dp basis is what made a raw
-    // 14-dp threshold permit everything it was written to deny.
-    if (c.selector.kind === 'oracle_price') {
-        if (c.valueDecimals === undefined) {
-            throw toolError('ORACLE_THRESHOLD_BASIS_REQUIRED', 'An oracle price bound must declare the decimal basis of its threshold ' +
-                '(oracle prices normalise to 9 decimals).');
+        if (leaf.kind === 'literal_address' && leaf.value === config.smartAccountAddress) {
+            throw toolError('SCOPE_SELF_CALL', `value \`${leaf.value}\` is the smart account's own address (self-call in an allowlist / compare is rejected)`);
         }
-        return { kind: 'oracle_threshold', value: c.value, decimals: c.valueDecimals };
-    }
-    const scalarType = selectorScalarType(c.selector);
-    return literalFromScalar(c.value, scalarType);
-}
-function literalScalarForSelector(kind) {
-    switch (kind) {
-        case 'amount':
-        case 'window_spent':
-        case 'oracle_price':
-            return 'i128';
-        case 'invocation_count':
-        case 'arg_len':
-            return 'u32';
-        case 'now':
-        case 'valid_until':
-            return 'u64';
-        case 'arg':
-        case 'arg_field':
-        case 'calldata':
-        case 'value':
-            // arg / arg_field -> caller handles scalarType; calldata/value -> unreachable (Path-B).
-            return 'i128';
-    }
-}
-/** Build a literal leaf from a raw string value + an IRScalarType hint. */
-function literalFromScalar(value, scalarType) {
-    switch (scalarType) {
-        case 'address':
-            return { kind: 'literal_address', value };
-        case 'i128':
-        case 'u128':
-            return { kind: 'literal_i128', value };
-        case 'u32':
-            return { kind: 'literal_u32', value: Number.parseInt(value, 10) };
-        case 'u64':
-        case 'i64':
-            return { kind: 'literal_u64', value };
-        case 'symbol':
-            return { kind: 'literal_symbol', value };
-        case 'bytes':
-            return { kind: 'literal_bytes', value };
-        case 'bool':
-            throw toolError('MALFORMED_PREDICATE', `boolean literal not supported in v1 predicate grammar`);
-    }
-}
-/** Scalar type of an IRSelector for the purpose of building literal leaves
- *  (the right-hand side of `eq` / elements of an `in` haystack / elements of
- *  a `literal_vec`). Mirrors `literalScalarForSelector` for OZ extensions and
- *  uses the selector's own `scalarType` for `arg` and `arg_field` selectors. */
-function selectorScalarType(selector) {
-    if (selector.kind === 'arg')
-        return selector.scalarType;
-    if (selector.kind === 'arg_field')
-        return selector.scalarType;
-    return literalScalarForSelector(selector.kind);
-}
-/** Walk a condition tree and throw if any oracle_price leaf is found anywhere
- *  inside. Used by `lowerCondition` for `not`, `or`, and `in` - the three
- *  positions where oracle leaves would not be direct children of the
- *  top-level `and`. */
-function assertNoOracleDescendants(node) {
-    if (containsOracle(node)) {
-        throw toolError('ORACLE_LEAF_INVALID_POSITION', 'oracle_price leaves must sit directly under the top-level `and`');
-    }
-}
-function containsOracle(node) {
+    };
     switch (node.op) {
-        case 'slippage_floor':
-            return false;
-        case 'compare':
-            return node.compare.selector.kind === 'oracle_price';
-        case 'in':
-            return node.selector.kind === 'oracle_price';
-        case 'eq_seq':
-            return node.selector.kind === 'oracle_price';
-        case 'not':
-            return containsOracle(node.child);
         case 'and':
-        case 'or':
-            return node.children.some(containsOracle);
-    }
-}
-/** Reject a value that targets the smart account's own address (a self-call
- *  is a structural privilege-escalation hole the interpreter forbids). */
-function assertNotSelfCallAddress(value, config) {
-    if (value === config.smartAccountAddress) {
-        throw toolError('SCOPE_SELF_CALL', `value \`${value}\` is the smart account's own address (self-call in an allowlist / compare is rejected)`);
-    }
-}
-/** Tighten-only oracle-params gate. Any widening value (above the wasm-level
- *  defaults) throws ORACLE_PARAMS_OUT_OF_RANGE at compile time. */
-function assertOracleParamsTighten(params) {
-    if (!params)
-        return;
-    if (params.maxStalenessSeconds !== undefined &&
-        params.maxStalenessSeconds > ORACLE_DEFAULTS.maxStalenessSeconds) {
-        throw toolError('ORACLE_PARAMS_OUT_OF_RANGE', `maxStalenessSeconds ${params.maxStalenessSeconds} exceeds default ${ORACLE_DEFAULTS.maxStalenessSeconds}`);
-    }
-    if (params.maxDeviationBps !== undefined &&
-        params.maxDeviationBps > ORACLE_DEFAULTS.maxDeviationBps) {
-        throw toolError('ORACLE_PARAMS_OUT_OF_RANGE', `maxDeviationBps ${params.maxDeviationBps} exceeds default ${ORACLE_DEFAULTS.maxDeviationBps}`);
-    }
-}
-/** Human-readable descriptor for a construct the interpreter adapter cannot
- *  express. Mirrors the OZ adapter's `describeCondition` for parity. */
-function describeCondition(cond) {
-    switch (cond.op) {
-        case 'slippage_floor':
-            return `slippage floor: arg[${cond.outArgIndex}] >= arg[${cond.inArgIndex}] * ${cond.num}/${cond.den}`;
+            for (const c of node.children)
+                assertNoSelfCall(c, config);
+            return;
         case 'in':
-            return `value allowlist on ${describeSelector(cond.selector)} (predicate DSL)`;
-        case 'eq_seq':
-            return `exact ordered sequence on ${describeSelector(cond.selector)} (predicate DSL)`;
-        case 'not':
-            return 'negated condition (predicate DSL)';
-        case 'and':
-        case 'or':
-            return `nested ${cond.op} condition (predicate DSL)`;
-        case 'compare': {
-            const s = cond.compare.selector;
-            switch (s.kind) {
-                case 'oracle_price':
-                    return `oracle price condition on ${s.asset}`;
-                case 'invocation_count':
-                    return `invocation-count window (${s.windowSeconds}s) condition`;
-                case 'window_spent':
-                    return `spend-window comparison with operator '${cond.compare.operator}'`;
-                case 'amount':
-                    return `per-call amount comparison on ${s.token}`;
-                case 'arg':
-                    return `argument comparison on arg ${s.argIndex}`;
-                case 'arg_len':
-                    return `vec length comparison on arg ${s.argIndex}`;
-                case 'arg_field':
-                    return `map field comparison on arg ${s.argIndex}.${s.field}`;
-                case 'calldata':
-                    return 'EVM calldata comparison';
-                case 'value':
-                    return 'tx.value comparison';
-                case 'now':
-                case 'valid_until':
-                    return 'time comparison';
-            }
-        }
-    }
-}
-function describeSelector(s) {
-    switch (s.kind) {
-        case 'arg':
-            return `arg ${s.argIndex}`;
-        case 'arg_len':
-            return `arg_len(${s.argIndex})`;
-        case 'arg_field':
-            return `arg_field(${s.argIndex}, ${s.element}, ${s.field})`;
-        case 'amount':
-            return `amount(${s.token})`;
-        case 'window_spent':
-            return `window_spent(${s.token})`;
-        case 'oracle_price':
-            return `oracle_price(${s.asset})`;
-        case 'invocation_count':
-            return `invocation_count(${s.windowSeconds}s)`;
-        case 'calldata':
-            return `calldata[${s.offset}:${s.offset + s.length}]`;
+            // The needle is a selector; only the haystack carries literals.
+            for (const h of node.haystack)
+                checkLeaf(h);
+            return;
         default:
-            return s.kind;
-    }
-}
-function simulateStub() {
-    return {
-        backend: 'ts-model',
-        permitted: null,
-        evaluations: [],
-        notes: ['stub: real permit/deny semantics wiring is a later phase'],
-    };
-}
-/** Canonical JSON with recursively sorted object keys (stable across runs). */
-function canonicalStringify(value) {
-    return JSON.stringify(sortKeys(value));
-}
-function sortKeys(value) {
-    if (Array.isArray(value))
-        return value.map(sortKeys);
-    if (value && typeof value === 'object') {
-        const out = {};
-        for (const key of Object.keys(value).sort()) {
-            out[key] = sortKeys(value[key]);
-        }
-        return out;
+            checkLeaf(node.left);
+            checkLeaf(node.right);
     }
-    return value;
 }
 /** Build a synthetic Error carrying the ToolError code/severity/retryable
  *  fields the existing ToolError shape uses (the encoder pattern). Callers

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-export type ErrorCode = 'RECORDING_FAILED' | 'RECORDING_VALIDATION_FAILED' | 'SCOPE_UNRESOLVED' | 'SYNTHESIS_ERROR' | 'MALFORMED_PREDICATE' | 'SIMULATION_ERROR' | 'VERIFICATION_FAILED' | 'DENY_CASE_FAILURE' | 'PERMIT_CASE_FAILED' | 'SUMMARY_DRIFT' | 'INSTALL_BUILD_FAILED' | 'INSTALL_CONFIRM_MISSING' | 'INSTALL_CONFIRM_EXPIRED' | 'REVOKE_BUILD_FAILED' | 'REVOKE_CONFIRM_MISSING' | 'USER_REJECTED_SIGN' | 'WALLET_TIMEOUT' | 'WALLET_UNAVAILABLE' | 'PREDICATE_TOO_LARGE' | 'PREDICATE_TOO_DEEP' | 'TOO_MANY_LEAVES' | 'IN_OPERAND_LIMIT' | 'PREDICATE_ORACLE_OVER_LIMIT' | 'POLICY_CAP_EXCEEDED' | 'WASM_TOO_LARGE' | 'MASTER_AUTH_REQUIRED' | 'NONCE_REPLAY' | 'VERSION_MISMATCH' | 'ARITHMETIC_OVERFLOW' | 'AMOUNT_OVERFLOW' | 'RULE_SIGNERS_CHANGED' | 'SCOPE_SELF_CALL' | 'ARG_MISMATCH' | 'CONTRACT_SCOPE' | 'UNSUPPORTED_NODE' | 'STATEFUL_BOUND' | 'NOT_IN_ALLOWLIST' | 'FREQUENCY' | 'SLIPPAGE_FLOOR' | 'ORACLE_STALE' | 'ORACLE_MISSING' | 'ORACLE_NO_CONFIRMATION' | 'ORACLE_DEVIATION_EXCEEDED' | 'ORACLE_MALFORMED_HISTORY' | 'ORACLE_FINGERPRINT_DRIFT' | 'ORACLE_PAUSED' | 'ORACLE_LEAF_INVALID_POSITION' | 'ORACLE_PARAMS_OUT_OF_RANGE' | 'ORACLE_DECIMALS_MISMATCH' | 'ORACLE_THRESHOLD_DECIMALS_OUT_OF_RANGE' | 'ORACLE_THRESHOLD_BASIS_REQUIRED' | 'COMPILE_OK' | 'COMPILE_GATE_FAILED';
+export type ErrorCode = 'RECORDING_FAILED' | 'RECORDING_VALIDATION_FAILED' | 'SCOPE_UNRESOLVED' | 'SYNTHESIS_ERROR' | 'MALFORMED_PREDICATE' | 'SIMULATION_ERROR' | 'VERIFICATION_FAILED' | 'DENY_CASE_FAILURE' | 'PERMIT_CASE_FAILED' | 'SUMMARY_DRIFT' | 'INSTALL_BUILD_FAILED' | 'INSTALL_CONFIRM_MISSING' | 'INSTALL_CONFIRM_EXPIRED' | 'REVOKE_BUILD_FAILED' | 'REVOKE_CONFIRM_MISSING' | 'USER_REJECTED_SIGN' | 'WALLET_TIMEOUT' | 'WALLET_UNAVAILABLE' | 'PREDICATE_TOO_LARGE' | 'PREDICATE_TOO_DEEP' | 'TOO_MANY_LEAVES' | 'IN_OPERAND_LIMIT' | 'POLICY_CAP_EXCEEDED' | 'WASM_TOO_LARGE' | 'MASTER_AUTH_REQUIRED' | 'NONCE_REPLAY' | 'VERSION_MISMATCH' | 'ARITHMETIC_OVERFLOW' | 'AMOUNT_OVERFLOW' | 'RULE_SIGNERS_CHANGED' | 'SCOPE_SELF_CALL' | 'ARG_MISMATCH' | 'CONTRACT_SCOPE' | 'UNSUPPORTED_NODE' | 'STATEFUL_BOUND' | 'NOT_IN_ALLOWLIST' | 'COMPILE_OK' | 'COMPILE_GATE_FAILED';
 export interface ToolError {
     code: ErrorCode;
     message: string;

package/dist/index.d.ts

@@ -1,11 +1,8 @@
-export * from './adapters/oz/index.ts';
 export * from './errors.ts';
-export * from './ir/index.ts';
-export * from './mandate/index.ts';
 export * from './predicate/index.ts';
 export * from './record/index.ts';
 export * from './registry/index.ts';
 export * from './review-card/index.ts';
-export * from './seams/index.ts';
+export * from './simulate/index.ts';
 export * from './synth/index.ts';
 export * from './types.ts';

package/dist/index.js

@@ -1,11 +1,8 @@
-export * from "./adapters/oz/index.js";
 export * from "./errors.js";
-export * from "./ir/index.js";
-export * from "./mandate/index.js";
 export * from "./predicate/index.js";
 export * from "./record/index.js";
 export * from "./registry/index.js";
 export * from "./review-card/index.js";
-export * from "./seams/index.js";
+export * from "./simulate/index.js";
 export * from "./synth/index.js";
 export * from "./types.js";