@synapsor/runner 0.1.13 → 0.1.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -2,6 +2,18 @@
2
2
 
3
3
  ## Unreleased
4
4
 
5
+ ### README Path Polish
6
+
7
+ - Makes the audit, demo, and staging-database adoption sequence explicit for
8
+ readers scanning the first minute of the README.
9
+ - Trims the inline JSON example to the reviewed capability entry and links the
10
+ generated storage, source, trusted-context, and timeout wiring to the full
11
+ own-database guide.
12
+ - Stages `@synapsor/runner@0.1.14`; `@synapsor/spec` and `@synapsor/dsl` remain
13
+ unchanged.
14
+
15
+ ## 0.1.13
16
+
5
17
  ### Front-Door Documentation
6
18
 
7
19
  - Rewrites the GitHub and npm READMEs around an audit-first 60-second proof,
@@ -15,6 +27,8 @@
15
27
  - Stages `@synapsor/runner@0.1.13`; `@synapsor/spec` and `@synapsor/dsl` remain
16
28
  unchanged.
17
29
 
30
+ ## 0.1.12
31
+
18
32
  ### Runner Version Invocation
19
33
 
20
34
  - Stages `@synapsor/runner@0.1.12` without changing or republishing
package/README.md CHANGED
@@ -14,6 +14,10 @@ surface.
14
14
 
15
15
  ## Prove It In 60 Seconds
16
16
 
17
+ The path is: **audit** your existing MCP risk, then **demo** the safety
18
+ boundary, then **connect** a staging database. The first two commands finish in
19
+ seconds and touch nothing but a local fixture file.
20
+
17
21
  First, inspect the risk in a typical raw-SQL database MCP server. This works
18
22
  even if you never adopt Runner:
19
23
 
@@ -77,48 +81,30 @@ creates trusted context, generates reviewed capabilities, previews the MCP tool
77
81
  surface, and prints the next smoke and serve commands. It stores environment
78
82
  variable names, not connection strings.
79
83
 
80
- A minimal generated read-only configuration looks like this:
84
+ The interesting part of the generated configuration is the capability entry: a
85
+ reviewed, tenant-scoped read with an explicit column allowlist and required
86
+ evidence. The storage, source, and trusted-context wiring around it (including
87
+ statement timeouts) is generated for you; the full file is in the
88
+ [own-database guide](docs/getting-started-own-database.md).
81
89
 
82
90
  ```json
83
91
  {
84
- "version": 1,
85
- "mode": "read_only",
86
- "result_format": 2,
87
- "storage": { "sqlite_path": "./.synapsor/local.db" },
88
- "sources": {
89
- "app_postgres": {
90
- "engine": "postgres",
91
- "read_url_env": "DATABASE_URL",
92
- "statement_timeout_ms": 3000
93
- }
92
+ "name": "billing.inspect_invoice",
93
+ "kind": "read",
94
+ "source": "app_postgres",
95
+ "target": {
96
+ "schema": "public",
97
+ "table": "invoices",
98
+ "primary_key": "id",
99
+ "tenant_key": "tenant_id"
94
100
  },
95
- "trusted_context": {
96
- "provider": "environment",
97
- "values": {
98
- "tenant_id_env": "SYNAPSOR_TENANT_ID",
99
- "principal_env": "SYNAPSOR_PRINCIPAL"
100
- }
101
+ "args": {
102
+ "invoice_id": { "type": "string", "required": true, "max_length": 128 }
101
103
  },
102
- "capabilities": [
103
- {
104
- "name": "billing.inspect_invoice",
105
- "kind": "read",
106
- "source": "app_postgres",
107
- "target": {
108
- "schema": "public",
109
- "table": "invoices",
110
- "primary_key": "id",
111
- "tenant_key": "tenant_id"
112
- },
113
- "args": {
114
- "invoice_id": { "type": "string", "required": true, "max_length": 128 }
115
- },
116
- "lookup": { "id_from_arg": "invoice_id" },
117
- "visible_columns": ["id", "tenant_id", "status", "late_fee_cents", "updated_at"],
118
- "evidence": "required",
119
- "max_rows": 1
120
- }
121
- ]
104
+ "lookup": { "id_from_arg": "invoice_id" },
105
+ "visible_columns": ["id", "tenant_id", "status", "late_fee_cents", "updated_at"],
106
+ "evidence": "required",
107
+ "max_rows": 1
122
108
  }
123
109
  ```
124
110
 
package/dist/runner.mjs CHANGED
@@ -8439,7 +8439,7 @@ function stringOrDefault(value, fallback) {
8439
8439
  // apps/runner/package.json
8440
8440
  var package_default = {
8441
8441
  name: "@synapsor/runner",
8442
- version: "0.1.13",
8442
+ version: "0.1.14",
8443
8443
  description: "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
8444
8444
  license: "Apache-2.0",
8445
8445
  type: "module",
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@synapsor/runner",
3
- "version": "0.1.13",
3
+ "version": "0.1.14",
4
4
  "description": "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
5
5
  "license": "Apache-2.0",
6
6
  "type": "module",