@synapsor/runner 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -4,6 +4,17 @@
 
 No unreleased changes yet.
 
+## 0.1.2
+
+### Contract Compatibility
+
+- Documents the canonical `synapsor.contract.json` path for contracts produced
+  by the DSL, Cloud, or the C++ exporter.
+- Adds OSS-side conformance notes for C++/Cloud export snapshots that validate
+  with `@synapsor/spec` and load in Runner.
+- Keeps `@synapsor/runner` publishable after `0.1.1` by reserving the next
+  stable patch version for this contract round-trip readiness pass.
+
 ## 0.1.1
 
 ### Launch Readiness

package/README.md

@@ -92,6 +92,38 @@ Full disposable proof -> npx -y -p @synapsor/runner synapsor-runner demo
 Inspect MCP risk       -> npx -y -p @synapsor/runner synapsor-runner audit --example dangerous-db-mcp
 ```
 
+## Why Not Just Build This Yourself?
+
+You can build the outline in an afternoon:
+
+```text
+model calls a function
+-> app stores a pending change
+-> human approves
+-> app runs SQL
+```
+
+That is useful, but it is not the safety layer. The repeated hard parts are
+tenant scope, no raw SQL exposure, evidence, query audit, exact diffs,
+approval outside the model-facing tool surface, idempotency, stale-row conflict
+checks, affected-row checks, receipts, and replay.
+
+Synapsor Runner gives you those pieces as a local runtime:
+
+- reviewed semantic capabilities instead of `execute_sql`;
+- trusted tenant/principal/object bindings from your server-side context;
+- scoped reads with evidence handles and query audit;
+- saved proposals with exact before/after changes;
+- approval and writeback commands that are not exposed to the model;
+- guarded direct writeback for one-row updates;
+- app-owned executors for richer writes;
+- idempotency receipts and replay so you can inspect what happened later.
+
+If all you need is restricted reads, a read-only database user and safe views
+are a good start. Use Runner when you need the agent-facing boundary around
+those reads, or when database-backed actions must become proposals before any
+durable write happens.
+
 ## Connect Your Postgres Or MySQL
 
 Use a staging or disposable database first:
@@ -119,6 +151,34 @@ synapsor-runner smoke call --config ./synapsor.runner.json --store ./.synapsor/l
 synapsor-runner up --serve --config ./synapsor.runner.json --store ./.synapsor/local.db
 ```
 
+If you already have a canonical `synapsor.contract.json` from the DSL, Cloud,
+or the C++ exporter, keep it as the source of truth and reference it from local
+runner wiring:
+
+```json
+{
+  "version": 1,
+  "mode": "review",
+  "contracts": ["./synapsor.contract.json"],
+  "sources": {
+    "local_postgres": {
+      "engine": "postgres",
+      "read_url_env": "DATABASE_URL"
+    }
+  },
+  "storage": {
+    "sqlite_path": "./.synapsor/local.db"
+  }
+}
+```
+
+Preview the model-facing tool surface before connecting an MCP client:
+
+```bash
+synapsor-runner contract validate ./synapsor.contract.json
+synapsor-runner tools preview --config ./synapsor.runner.json --store ./.synapsor/local.db
+```
+
 ## What Runner Does
 
 When an agent uses Runner:
@@ -201,6 +261,10 @@ changes.
 
 Authoring reference:
 
+- [Migrating To `@synapsor/spec`](docs/migrating-to-synapsor-spec.md):
+  split portable contract semantics from local runner wiring.
+- [Conformance Fixtures](docs/conformance.md): how the shared fixture suite
+  keeps Runner and Cloud/C++ contract semantics from drifting.
 - [Capability Authoring](docs/capability-authoring.md): read/proposal tools,
   model-facing descriptions, result envelope v2, trusted context, and writeback
   guards.
@@ -1084,6 +1148,9 @@ Complete limits: [docs/limitations.md](docs/limitations.md).
 
 Security boundary: [docs/security-boundary.md](docs/security-boundary.md).
 
+Single-node production-candidate runbook:
+[docs/production.md](docs/production.md).
+
 Release notes and stable-tag policy:
 [docs/release-notes.md](docs/release-notes.md).
 

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAqG,KAAK,WAAW,EAA2F,MAAM,6BAA6B,CAAC;AAmB3P,OAAO,EAA6G,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAC/L,OAAO,EAOL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AA4U3C,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAmD1D;AA+DD,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA2TjB;AAo7DD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAM/H"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAqG,KAAK,WAAW,EAA2F,MAAM,6BAA6B,CAAC;AAoB3P,OAAO,EAA6G,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAE/L,OAAO,EAOL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AA6U3C,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqD1D;AA+DD,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA2TjB;AA8mED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAM/H"}