@crediolabs/policy-synth 0.2.0 → 0.3.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -4
- package/dist/adapters/interpreter/adapter.d.ts +19 -25
- package/dist/adapters/interpreter/adapter.js +54 -487
- package/dist/errors.d.ts +1 -1
- package/dist/index.d.ts +1 -4
- package/dist/index.js +1 -4
- package/dist/install/build-add-context-rule.d.ts +3 -19
- package/dist/install/build-add-context-rule.js +3 -98
- package/dist/install/build-install-policy.d.ts +4 -53
- package/dist/install/build-install-policy.js +44 -123
- package/dist/install/index.d.ts +0 -2
- package/dist/install/index.js +0 -7
- package/dist/predicate/decode.d.ts +1 -1
- package/dist/predicate/decode.js +2 -70
- package/dist/predicate/encode.js +45 -229
- package/dist/predicate/from-json.js +1 -42
- package/dist/record/decode.js +3 -8
- package/dist/record/freshness.d.ts +17 -11
- package/dist/record/freshness.js +28 -18
- package/dist/review-card/builder.d.ts +4 -3
- package/dist/review-card/builder.js +18 -162
- package/dist/review-card/cross-check.js +2 -105
- package/dist/review-card/render-leaf.d.ts +4 -0
- package/dist/review-card/render-leaf.js +47 -0
- package/dist/run/index.d.ts +36 -139
- package/dist/run/index.js +125 -437
- package/dist/run/schemas.d.ts +168 -1929
- package/dist/run/schemas.js +40 -269
- package/dist/{synth → simulate}/deny-cases.d.ts +4 -8
- package/dist/simulate/deny-cases.js +282 -0
- package/dist/simulate/evaluate.d.ts +18 -0
- package/dist/simulate/evaluate.js +271 -0
- package/dist/simulate/index.d.ts +4 -0
- package/dist/simulate/index.js +8 -0
- package/dist/synth/compose-from-recording.d.ts +24 -51
- package/dist/synth/compose-from-recording.js +120 -282
- package/dist/synth/index.d.ts +0 -5
- package/dist/synth/index.js +0 -5
- package/dist/synth/synthesize-from-recording.d.ts +1 -29
- package/dist/synth/synthesize-from-recording.js +41 -356
- package/dist/types.d.ts +8 -60
- package/dist/types.js +5 -2
- package/dist-cjs/adapters/interpreter/adapter.d.ts +19 -25
- package/dist-cjs/adapters/interpreter/adapter.js +56 -489
- package/dist-cjs/errors.d.ts +1 -1
- package/dist-cjs/index.d.ts +1 -4
- package/dist-cjs/index.js +1 -4
- package/dist-cjs/install/build-add-context-rule.d.ts +3 -19
- package/dist-cjs/install/build-add-context-rule.js +1 -97
- package/dist-cjs/install/build-install-policy.d.ts +4 -53
- package/dist-cjs/install/build-install-policy.js +44 -122
- package/dist-cjs/install/index.d.ts +0 -2
- package/dist-cjs/install/index.js +2 -23
- package/dist-cjs/predicate/decode.d.ts +1 -1
- package/dist-cjs/predicate/decode.js +2 -70
- package/dist-cjs/predicate/encode.js +45 -229
- package/dist-cjs/predicate/from-json.js +1 -42
- package/dist-cjs/record/decode.js +3 -8
- package/dist-cjs/record/freshness.d.ts +17 -11
- package/dist-cjs/record/freshness.js +28 -18
- package/dist-cjs/review-card/builder.d.ts +4 -3
- package/dist-cjs/review-card/builder.js +23 -167
- package/dist-cjs/review-card/cross-check.js +7 -110
- package/dist-cjs/review-card/render-leaf.d.ts +4 -0
- package/dist-cjs/review-card/render-leaf.js +52 -0
- package/dist-cjs/run/index.d.ts +36 -139
- package/dist-cjs/run/index.js +125 -444
- package/dist-cjs/run/schemas.d.ts +168 -1929
- package/dist-cjs/run/schemas.js +41 -270
- package/dist-cjs/{synth → simulate}/deny-cases.d.ts +4 -8
- package/dist-cjs/simulate/deny-cases.js +286 -0
- package/dist-cjs/simulate/evaluate.d.ts +18 -0
- package/dist-cjs/simulate/evaluate.js +274 -0
- package/dist-cjs/simulate/index.d.ts +4 -0
- package/dist-cjs/simulate/index.js +13 -0
- package/dist-cjs/synth/compose-from-recording.d.ts +24 -51
- package/dist-cjs/synth/compose-from-recording.js +120 -282
- package/dist-cjs/synth/index.d.ts +0 -5
- package/dist-cjs/synth/index.js +1 -11
- package/dist-cjs/synth/synthesize-from-recording.d.ts +1 -29
- package/dist-cjs/synth/synthesize-from-recording.js +39 -354
- package/dist-cjs/types.d.ts +8 -60
- package/dist-cjs/types.js +6 -3
- package/package.json +5 -5
- package/src/adapters/interpreter/adapter.ts +76 -572
- package/src/errors.ts +0 -19
- package/src/index.ts +1 -4
- package/src/install/build-add-context-rule.ts +5 -139
- package/src/install/build-install-policy.ts +93 -214
- package/src/install/index.ts +0 -34
- package/src/predicate/decode.ts +2 -70
- package/src/predicate/encode.ts +49 -261
- package/src/predicate/from-json.ts +1 -43
- package/src/record/decode.ts +3 -8
- package/src/record/freshness.ts +29 -18
- package/src/review-card/builder.ts +19 -168
- package/src/review-card/cross-check.ts +3 -105
- package/src/review-card/render-leaf.ts +48 -0
- package/src/run/index.ts +144 -572
- package/src/run/schemas.ts +42 -291
- package/src/simulate/deny-cases.ts +334 -0
- package/src/simulate/evaluate.ts +284 -0
- package/src/simulate/index.ts +11 -0
- package/src/synth/compose-from-recording.ts +148 -347
- package/src/synth/index.ts +0 -13
- package/src/synth/synthesize-from-recording.ts +43 -456
- package/src/types.ts +13 -49
- package/dist/adapters/interpreter/index.d.ts +0 -1
- package/dist/adapters/interpreter/index.js +0 -2
- package/dist/adapters/oz/adapter.d.ts +0 -20
- package/dist/adapters/oz/adapter.js +0 -295
- package/dist/adapters/oz/index.d.ts +0 -1
- package/dist/adapters/oz/index.js +0 -2
- package/dist/codegen/compile-gate.d.ts +0 -33
- package/dist/codegen/compile-gate.js +0 -124
- package/dist/codegen/index.d.ts +0 -2
- package/dist/codegen/index.js +0 -8
- package/dist/codegen/template.d.ts +0 -18
- package/dist/codegen/template.js +0 -148
- package/dist/install/authority-overlap.d.ts +0 -134
- package/dist/install/authority-overlap.js +0 -0
- package/dist/install/build-install-predicate.d.ts +0 -96
- package/dist/install/build-install-predicate.js +0 -444
- package/dist/install/build-merge-policy.d.ts +0 -70
- package/dist/install/build-merge-policy.js +0 -130
- package/dist/install/plan-merge-policy.d.ts +0 -49
- package/dist/install/plan-merge-policy.js +0 -86
- package/dist/install/read-account-rules.d.ts +0 -100
- package/dist/install/read-account-rules.js +0 -283
- package/dist/ir/index.d.ts +0 -1
- package/dist/ir/index.js +0 -2
- package/dist/ir/types.d.ts +0 -140
- package/dist/ir/types.js +0 -11
- package/dist/mandate/index.d.ts +0 -2
- package/dist/mandate/index.js +0 -2
- package/dist/mandate/to-ir.d.ts +0 -3
- package/dist/mandate/to-ir.js +0 -60
- package/dist/mandate/types.d.ts +0 -20
- package/dist/mandate/types.js +0 -8
- package/dist/seams/index.d.ts +0 -1
- package/dist/seams/index.js +0 -2
- package/dist/seams/types.d.ts +0 -66
- package/dist/seams/types.js +0 -11
- package/dist/synth/deny-cases.js +0 -562
- package/dist/synth/evaluate.d.ts +0 -39
- package/dist/synth/evaluate.js +0 -551
- package/dist/synth/harness.d.ts +0 -28
- package/dist/synth/harness.js +0 -47
- package/dist/synth/minimize.d.ts +0 -4
- package/dist/synth/minimize.js +0 -38
- package/dist/synth/permit-context.d.ts +0 -15
- package/dist/synth/permit-context.js +0 -116
- package/dist/synth/predicate-literals.d.ts +0 -5
- package/dist/synth/predicate-literals.js +0 -25
- package/dist/synth/synthesize-from-mandate.d.ts +0 -20
- package/dist/synth/synthesize-from-mandate.js +0 -59
- package/dist/verify/envelope.d.ts +0 -15
- package/dist/verify/envelope.js +0 -22
- package/dist/verify/index.d.ts +0 -3
- package/dist/verify/index.js +0 -3
- package/dist/verify/simulate.d.ts +0 -31
- package/dist/verify/simulate.js +0 -258
- package/dist/verify/verify.d.ts +0 -21
- package/dist/verify/verify.js +0 -189
- package/dist-cjs/adapters/interpreter/index.d.ts +0 -1
- package/dist-cjs/adapters/interpreter/index.js +0 -8
- package/dist-cjs/adapters/oz/adapter.d.ts +0 -20
- package/dist-cjs/adapters/oz/adapter.js +0 -300
- package/dist-cjs/adapters/oz/index.d.ts +0 -1
- package/dist-cjs/adapters/oz/index.js +0 -8
- package/dist-cjs/codegen/compile-gate.d.ts +0 -33
- package/dist-cjs/codegen/compile-gate.js +0 -128
- package/dist-cjs/codegen/index.d.ts +0 -2
- package/dist-cjs/codegen/index.js +0 -14
- package/dist-cjs/codegen/template.d.ts +0 -18
- package/dist-cjs/codegen/template.js +0 -151
- package/dist-cjs/install/authority-overlap.d.ts +0 -134
- package/dist-cjs/install/authority-overlap.js +0 -0
- package/dist-cjs/install/build-install-predicate.d.ts +0 -96
- package/dist-cjs/install/build-install-predicate.js +0 -479
- package/dist-cjs/install/build-merge-policy.d.ts +0 -70
- package/dist-cjs/install/build-merge-policy.js +0 -134
- package/dist-cjs/install/plan-merge-policy.d.ts +0 -49
- package/dist-cjs/install/plan-merge-policy.js +0 -90
- package/dist-cjs/install/read-account-rules.d.ts +0 -100
- package/dist-cjs/install/read-account-rules.js +0 -296
- package/dist-cjs/ir/index.d.ts +0 -1
- package/dist-cjs/ir/index.js +0 -3
- package/dist-cjs/ir/types.d.ts +0 -140
- package/dist-cjs/ir/types.js +0 -12
- package/dist-cjs/mandate/index.d.ts +0 -2
- package/dist-cjs/mandate/index.js +0 -6
- package/dist-cjs/mandate/to-ir.d.ts +0 -3
- package/dist-cjs/mandate/to-ir.js +0 -63
- package/dist-cjs/mandate/types.d.ts +0 -20
- package/dist-cjs/mandate/types.js +0 -9
- package/dist-cjs/seams/index.d.ts +0 -1
- package/dist-cjs/seams/index.js +0 -3
- package/dist-cjs/seams/types.d.ts +0 -66
- package/dist-cjs/seams/types.js +0 -12
- package/dist-cjs/synth/deny-cases.js +0 -568
- package/dist-cjs/synth/evaluate.d.ts +0 -39
- package/dist-cjs/synth/evaluate.js +0 -554
- package/dist-cjs/synth/harness.d.ts +0 -28
- package/dist-cjs/synth/harness.js +0 -50
- package/dist-cjs/synth/minimize.d.ts +0 -4
- package/dist-cjs/synth/minimize.js +0 -41
- package/dist-cjs/synth/permit-context.d.ts +0 -15
- package/dist-cjs/synth/permit-context.js +0 -119
- package/dist-cjs/synth/predicate-literals.d.ts +0 -5
- package/dist-cjs/synth/predicate-literals.js +0 -28
- package/dist-cjs/synth/synthesize-from-mandate.d.ts +0 -20
- package/dist-cjs/synth/synthesize-from-mandate.js +0 -62
- package/dist-cjs/verify/envelope.d.ts +0 -15
- package/dist-cjs/verify/envelope.js +0 -23
- package/dist-cjs/verify/index.d.ts +0 -3
- package/dist-cjs/verify/index.js +0 -8
- package/dist-cjs/verify/simulate.d.ts +0 -31
- package/dist-cjs/verify/simulate.js +0 -261
- package/dist-cjs/verify/verify.d.ts +0 -21
- package/dist-cjs/verify/verify.js +0 -192
- package/src/adapters/interpreter/index.ts +0 -8
- package/src/adapters/oz/adapter.ts +0 -376
- package/src/adapters/oz/index.ts +0 -9
- package/src/codegen/compile-gate.ts +0 -167
- package/src/codegen/index.ts +0 -17
- package/src/codegen/template.ts +0 -165
- package/src/install/authority-overlap.ts +0 -0
- package/src/install/build-merge-policy.ts +0 -219
- package/src/install/plan-merge-policy.ts +0 -133
- package/src/install/read-account-rules.ts +0 -376
- package/src/ir/index.ts +0 -13
- package/src/ir/types.ts +0 -132
- package/src/mandate/index.ts +0 -4
- package/src/mandate/to-ir.ts +0 -71
- package/src/mandate/types.ts +0 -21
- package/src/seams/index.ts +0 -11
- package/src/seams/types.ts +0 -81
- package/src/synth/deny-cases.ts +0 -663
- package/src/synth/evaluate.ts +0 -613
- package/src/synth/harness.ts +0 -68
- package/src/synth/minimize.ts +0 -48
- package/src/synth/permit-context.ts +0 -136
- package/src/synth/predicate-literals.ts +0 -27
- package/src/synth/synthesize-from-mandate.ts +0 -82
- package/src/verify/envelope.ts +0 -28
- package/src/verify/index.ts +0 -5
- package/src/verify/simulate.ts +0 -311
- package/src/verify/verify.ts +0 -243
package/dist-cjs/types.d.ts
CHANGED
|
@@ -77,13 +77,11 @@ export declare const MAX_SCVAL_CLONE_DEPTH: 30;
|
|
|
77
77
|
* - MAX_DEPTH = 5: 3 walkthroughs need depth 2; budget = 2x growth + 1 for `not` chain.
|
|
78
78
|
* - MAX_LEAVES = 200: allowlists (recipients, paths) typically < 100; budget = 2x + 1 nested allowlist.
|
|
79
79
|
* - MAX_PREDICATE_BYTES = 32 KB: well under the per-ledger-entry 64 KB persistent-storage limit.
|
|
80
|
-
* - MAX_ORACLE_READS = 6: two-round confirmation per asset consumes 2 reads; cap accommodates a predicate that references up to 3 unique oracle assets (3 * 2 = 6 reads). Stays a fail-closed install-time cap.
|
|
81
80
|
* - MAX_IN_OPERAND_COUNT = 32: allowlist < 32 is a UX-natural bound. */
|
|
82
81
|
export declare const PREDICATE_CAPS: {
|
|
83
82
|
readonly MAX_DEPTH: 5;
|
|
84
83
|
readonly MAX_LEAVES: 200;
|
|
85
84
|
readonly MAX_PREDICATE_BYTES: number;
|
|
86
|
-
readonly MAX_ORACLE_READS: 6;
|
|
87
85
|
readonly MAX_IN_OPERAND_COUNT: 32;
|
|
88
86
|
};
|
|
89
87
|
/** OZ context-rule draft - the unit the install builder builds add_context_rule from. */
|
|
@@ -118,19 +116,20 @@ export type SignerDraft = {
|
|
|
118
116
|
};
|
|
119
117
|
/** Reference to one policy attached to a context rule. */
|
|
120
118
|
export type PolicyRef = {
|
|
121
|
-
kind: 'oz_builtin';
|
|
122
|
-
primitive: OZPrimitiveConfig;
|
|
123
|
-
instanceAddress: string;
|
|
124
|
-
} | {
|
|
125
119
|
kind: 'interpreter';
|
|
126
120
|
interpreterAddress: string;
|
|
127
121
|
predicateBlobBase64: string;
|
|
128
122
|
};
|
|
123
|
+
/** Grammar version baked into the interpreter wasm, mirroring `SELF_VERSION` in
|
|
124
|
+
* `contracts/policy-interpreter/src/version.rs`. Every value this package puts on
|
|
125
|
+
* the wire derives from here; `grammar-version-parity.test.ts` pins it to the
|
|
126
|
+
* contract so a skew cannot pass a green test run. */
|
|
127
|
+
export declare const GRAMMAR_VERSION: 3;
|
|
129
128
|
/** A serialised predicate document stored against a (smart_account, rule_id) pair. */
|
|
130
129
|
export interface PolicyDocument {
|
|
131
130
|
/** Grammar version baked into the interpreter wasm. Fail-closed strict match at install
|
|
132
131
|
* AND at evaluate (defence in depth). NOT the per-edit revision. */
|
|
133
|
-
grammarVersion:
|
|
132
|
+
grammarVersion: typeof GRAMMAR_VERSION;
|
|
134
133
|
/** Per-rule install nonce. Must equal the interpreter's stored nonce + 1 at install.
|
|
135
134
|
* First install accepts nonce = 1 with stored nonce = 0. Re-install is structurally
|
|
136
135
|
* possible by incrementing the nonce; uninstall removes the nonce with state so a
|
|
@@ -142,32 +141,17 @@ export interface PolicyDocument {
|
|
|
142
141
|
/** Hash of the post-canonicalisation bytes of encodedPredicate. Stored alongside the
|
|
143
142
|
* doc and re-verified at evaluate. */
|
|
144
143
|
predicateHash: string;
|
|
145
|
-
/** Per-policy overrides of oracle thresholds; absent = use defaults.
|
|
146
|
-
* Overrides may TIGHTEN only (never widen) - the interpreter rejects any per-policy
|
|
147
|
-
* value looser than the wasm-level defaults at install. */
|
|
148
|
-
oracleParams?: {
|
|
149
|
-
/** Seconds; must be <= MAX_ORACLE_STALENESS_SECONDS (600). */
|
|
150
|
-
maxStalenessSeconds?: number;
|
|
151
|
-
/** Basis points; must be <= MAX_ORACLE_DEVIATION_BPS (200). */
|
|
152
|
-
maxDeviationBps?: number;
|
|
153
|
-
};
|
|
154
144
|
}
|
|
155
145
|
/** The versioned predicate AST (interpreter side). Tagged union. */
|
|
156
146
|
export type PredicateNode = {
|
|
157
147
|
op: 'and';
|
|
158
148
|
children: PredicateNode[];
|
|
159
|
-
} | {
|
|
160
|
-
op: 'or';
|
|
161
|
-
children: PredicateNode[];
|
|
162
|
-
} | {
|
|
163
|
-
op: 'not';
|
|
164
|
-
child: PredicateNode;
|
|
165
149
|
} | {
|
|
166
150
|
op: 'eq';
|
|
167
151
|
left: PredicateLeaf;
|
|
168
152
|
right: PredicateLeaf;
|
|
169
153
|
} | {
|
|
170
|
-
op: '
|
|
154
|
+
op: 'lte';
|
|
171
155
|
left: PredicateLeaf;
|
|
172
156
|
right: PredicateLeaf;
|
|
173
157
|
} | {
|
|
@@ -190,32 +174,6 @@ export type PredicateLeaf = {
|
|
|
190
174
|
index: number;
|
|
191
175
|
element: number;
|
|
192
176
|
field: string;
|
|
193
|
-
} | {
|
|
194
|
-
kind: 'call_arg_scaled';
|
|
195
|
-
index: number;
|
|
196
|
-
num: string;
|
|
197
|
-
den: string;
|
|
198
|
-
} | {
|
|
199
|
-
kind: 'amount';
|
|
200
|
-
token: string;
|
|
201
|
-
} | {
|
|
202
|
-
kind: 'window_spent';
|
|
203
|
-
token: string;
|
|
204
|
-
windowSeconds: number;
|
|
205
|
-
} | {
|
|
206
|
-
kind: 'now';
|
|
207
|
-
} | {
|
|
208
|
-
kind: 'valid_until';
|
|
209
|
-
} | {
|
|
210
|
-
kind: 'invocation_count_in_window';
|
|
211
|
-
windowSecs: number;
|
|
212
|
-
} | {
|
|
213
|
-
kind: 'oracle_price';
|
|
214
|
-
asset: string;
|
|
215
|
-
} | {
|
|
216
|
-
kind: 'oracle_threshold';
|
|
217
|
-
value: string;
|
|
218
|
-
decimals: number;
|
|
219
177
|
} | {
|
|
220
178
|
kind: 'literal_address';
|
|
221
179
|
value: string;
|
|
@@ -228,20 +186,10 @@ export type PredicateLeaf = {
|
|
|
228
186
|
} | {
|
|
229
187
|
kind: 'literal_u32';
|
|
230
188
|
value: number;
|
|
231
|
-
} | {
|
|
232
|
-
kind: 'literal_u64';
|
|
233
|
-
value: string;
|
|
234
|
-
} | {
|
|
235
|
-
kind: 'literal_bytes';
|
|
236
|
-
value: string;
|
|
237
189
|
} | {
|
|
238
190
|
kind: 'literal_vec';
|
|
239
191
|
elements: PredicateLeaf[];
|
|
240
192
|
};
|
|
241
|
-
export interface OZPrimitiveConfig {
|
|
242
|
-
primitive: 'spending_limit' | 'simple_threshold' | 'weighted_threshold';
|
|
243
|
-
params: Record<string, unknown>;
|
|
244
|
-
}
|
|
245
193
|
export interface ContractInvocation {
|
|
246
194
|
contract: string;
|
|
247
195
|
fn: string;
|
|
@@ -297,7 +245,7 @@ export interface AmbiguityPrompt {
|
|
|
297
245
|
/** Catalogue of named ambiguity codes (the skill's prompt files are one-per-code).
|
|
298
246
|
* Adding a code is a synthesizer decision; the prompt authoring must not
|
|
299
247
|
* invent codes outside this union. */
|
|
300
|
-
export type AmbiguityCode = 'DURATION_UNSPECIFIED' | 'AMOUNT_BOUND_MISSING' | 'RECIPIENT_ALLOWLIST_EMPTY' | 'FREQUENCY_BOUND_MISSING' | '
|
|
248
|
+
export type AmbiguityCode = 'DURATION_UNSPECIFIED' | 'AMOUNT_BOUND_MISSING' | 'RECIPIENT_ALLOWLIST_EMPTY' | 'FREQUENCY_BOUND_MISSING' | 'MULTIPLE_UNRELATED_TARGETS';
|
|
301
249
|
/** Structured recording freshness. `overall` is the gate threshold (default 1.0); the
|
|
302
250
|
* breakdown is the diagnostic the user / agent sees when the gate fires. The
|
|
303
251
|
* computation rule is pinned: `overall = 1 - (unknownContracts + opaqueScVals) / total`.
|
package/dist-cjs/types.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
// src/types.ts - shared domain types (single source of truth)
|
|
3
3
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
4
|
-
exports.PREDICATE_CAPS = exports.MAX_SCVAL_CLONE_DEPTH = exports.MAX_SCVAL_DEPTH = exports.SOROBAN_LIMITS = exports.OZ_LIMITS = void 0;
|
|
4
|
+
exports.GRAMMAR_VERSION = exports.PREDICATE_CAPS = exports.MAX_SCVAL_CLONE_DEPTH = exports.MAX_SCVAL_DEPTH = exports.SOROBAN_LIMITS = exports.OZ_LIMITS = void 0;
|
|
5
5
|
/** OZ Accounts framework hard limits (verified against canonical OZ source). */
|
|
6
6
|
exports.OZ_LIMITS = {
|
|
7
7
|
maxPoliciesPerRule: 5,
|
|
@@ -44,12 +44,15 @@ exports.MAX_SCVAL_CLONE_DEPTH = 30;
|
|
|
44
44
|
* - MAX_DEPTH = 5: 3 walkthroughs need depth 2; budget = 2x growth + 1 for `not` chain.
|
|
45
45
|
* - MAX_LEAVES = 200: allowlists (recipients, paths) typically < 100; budget = 2x + 1 nested allowlist.
|
|
46
46
|
* - MAX_PREDICATE_BYTES = 32 KB: well under the per-ledger-entry 64 KB persistent-storage limit.
|
|
47
|
-
* - MAX_ORACLE_READS = 6: two-round confirmation per asset consumes 2 reads; cap accommodates a predicate that references up to 3 unique oracle assets (3 * 2 = 6 reads). Stays a fail-closed install-time cap.
|
|
48
47
|
* - MAX_IN_OPERAND_COUNT = 32: allowlist < 32 is a UX-natural bound. */
|
|
49
48
|
exports.PREDICATE_CAPS = {
|
|
50
49
|
MAX_DEPTH: 5,
|
|
51
50
|
MAX_LEAVES: 200,
|
|
52
51
|
MAX_PREDICATE_BYTES: 32 * 1024,
|
|
53
|
-
MAX_ORACLE_READS: 6,
|
|
54
52
|
MAX_IN_OPERAND_COUNT: 32,
|
|
55
53
|
};
|
|
54
|
+
/** Grammar version baked into the interpreter wasm, mirroring `SELF_VERSION` in
|
|
55
|
+
* `contracts/policy-interpreter/src/version.rs`. Every value this package puts on
|
|
56
|
+
* the wire derives from here; `grammar-version-parity.test.ts` pins it to the
|
|
57
|
+
* contract so a skew cannot pass a green test run. */
|
|
58
|
+
exports.GRAMMAR_VERSION = 3;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@crediolabs/policy-synth",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.3.1",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"description": "Off-chain TypeScript synthesis core for the OZ Accounts Policy Builder. Records Soroban transactions, synthesises the minimal policy that permits exactly that flow, verifies it, and returns an unsigned install transaction.",
|
|
6
6
|
"type": "module",
|
|
@@ -12,12 +12,12 @@
|
|
|
12
12
|
},
|
|
13
13
|
"repository": {
|
|
14
14
|
"type": "git",
|
|
15
|
-
"url": "https://github.com/untangledfinance/
|
|
15
|
+
"url": "https://github.com/untangledfinance/oz-policy-builder.git",
|
|
16
16
|
"directory": "packages/policy-synth"
|
|
17
17
|
},
|
|
18
|
-
"homepage": "https://github.com/untangledfinance/
|
|
18
|
+
"homepage": "https://github.com/untangledfinance/oz-policy-builder#readme",
|
|
19
19
|
"bugs": {
|
|
20
|
-
"url": "https://github.com/untangledfinance/
|
|
20
|
+
"url": "https://github.com/untangledfinance/oz-policy-builder/issues"
|
|
21
21
|
},
|
|
22
22
|
"keywords": [
|
|
23
23
|
"stellar",
|
|
@@ -67,7 +67,7 @@
|
|
|
67
67
|
},
|
|
68
68
|
"scripts": {
|
|
69
69
|
"test": "bun test",
|
|
70
|
-
"build": "tsc -p tsconfig.build.json && tsc -p tsconfig.build.cjs.json && node scripts/write-cjs-package-json.cjs",
|
|
70
|
+
"build": "rm -rf dist dist-cjs && tsc -p tsconfig.build.json && tsc -p tsconfig.build.cjs.json && node scripts/write-cjs-package-json.cjs",
|
|
71
71
|
"build:esm": "tsc -p tsconfig.build.json",
|
|
72
72
|
"build:cjs": "tsc -p tsconfig.build.cjs.json && node scripts/write-cjs-package-json.cjs",
|
|
73
73
|
"prepublishOnly": "bun run build && bun test",
|