@synapsor/runner 0.1.16 → 1.1.0

package/schemas/synapsor.runner.schema.json

@@ -58,6 +58,42 @@
           "description": "SQLite ledger path. The file can contain visible business-data evidence and is created with owner-only permissions on POSIX.",
           "type": "string",
           "minLength": 1
+        },
+        "shared_postgres": {
+          "description": "Optional shared Postgres ledger. mode=mirror coordinates bounded CLI mutations with a schema-scoped advisory lock while the live runtime store remains local SQLite. mode=runtime_store makes MCP serving use Postgres as the primary proposal/evidence/replay store.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["mode", "url_env"],
+          "properties": {
+            "mode": {
+              "type": "string",
+              "enum": ["mirror", "runtime_store", "disabled"]
+            },
+            "url_env": {
+              "description": "Environment variable containing the shared ledger Postgres URL. The URL itself must not be stored in config.",
+              "type": "string",
+              "pattern": "^[A-Z_][A-Z0-9_]*$"
+            },
+            "schema": {
+              "description": "Postgres schema for shared ledger tables.",
+              "type": "string",
+              "pattern": "^[A-Za-z_][A-Za-z0-9_]*$",
+              "default": "synapsor_runner"
+            },
+            "lock_timeout_ms": {
+              "description": "How long mirror-mode CLI commands wait for the schema-scoped advisory lock.",
+              "type": "integer",
+              "minimum": 0,
+              "default": 10000
+            },
+            "max_entries": {
+              "description": "Safety bound for the bounded runtime-store bridge. Operations fail closed rather than copying an unbounded ledger.",
+              "type": "integer",
+              "minimum": 100,
+              "maximum": 100000,
+              "default": 10000
+            }
+          }
         }
       }
     },
@@ -117,6 +153,129 @@
         "disable_auto_approval": { "type": "boolean" }
       }
     },
+    "rate_limits": {
+      "description": "Operational fixed-window request limits keyed from verified tenant context and reviewed capability. These are deployment controls, not portable contract policy.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean", "default": true },
+        "default": { "$ref": "#/$defs/rate_limit_rule" },
+        "capabilities": {
+          "type": "object",
+          "propertyNames": { "$ref": "#/$defs/qualified_name" },
+          "additionalProperties": { "$ref": "#/$defs/rate_limit_rule" }
+        }
+      }
+    },
+    "metrics": {
+      "description": "Scrapeable HTTP metrics. Disabled by default; non-loopback exposure requires a separate bearer token.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean" },
+        "token_env": { "$ref": "#/$defs/env_name" }
+      }
+    },
+    "operator_identity": {
+      "description": "Operator identity used by approve, reject, and apply. signed_key verifies a registered key; jwt_oidc verifies asymmetric JWT claims and Runner-attests the decision; dev_env is local-development compatibility only.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["provider"],
+      "allOf": [
+        {
+          "if": { "properties": { "provider": { "const": "signed_key" } }, "required": ["provider"] },
+          "then": { "required": ["operators"] }
+        },
+        {
+          "if": { "properties": { "provider": { "const": "jwt_oidc" } }, "required": ["provider"] },
+          "then": {
+            "required": ["algorithms"],
+            "oneOf": [
+              { "required": ["jwks_url_env"] },
+              { "required": ["public_key_env"] },
+              { "required": ["public_key_path"] }
+            ]
+          }
+        }
+      ],
+      "properties": {
+        "provider": { "enum": ["dev_env", "signed_key", "jwt_oidc"] },
+        "actor_env": { "$ref": "#/$defs/env_name" },
+        "roles_env": { "$ref": "#/$defs/env_name" },
+        "apply_roles": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/identifier" } },
+        "operators": {
+          "type": "object",
+          "minProperties": 1,
+          "additionalProperties": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["public_key_path", "roles"],
+            "properties": {
+              "public_key_path": { "type": "string", "minLength": 1 },
+              "roles": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/identifier" } }
+            }
+          }
+        },
+        "token_env": { "$ref": "#/$defs/env_name" },
+        "token_file_env": { "$ref": "#/$defs/env_name" },
+        "token_stdin": { "type": "boolean" },
+        "roles_claim": { "$ref": "#/$defs/identifier" },
+        "subject_claim": { "$ref": "#/$defs/identifier" },
+        "attestation_secret_env": { "$ref": "#/$defs/env_name" },
+        "algorithms": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "enum": ["RS256", "ES256"] } },
+        "jwks_url_env": { "$ref": "#/$defs/env_name" },
+        "public_key_env": { "$ref": "#/$defs/env_name" },
+        "public_key_path": { "type": "string", "minLength": 1 },
+        "issuer": { "type": "string", "minLength": 1 },
+        "audience": { "type": "string", "minLength": 1 },
+        "clock_skew_seconds": { "type": "integer", "minimum": 0, "maximum": 300 },
+        "jwks_cache_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 },
+        "jwks_cooldown_seconds": { "type": "integer", "minimum": 1, "maximum": 3600 },
+        "fetch_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 30000 },
+        "max_response_bytes": { "type": "integer", "minimum": 1024, "maximum": 10485760 }
+      }
+    },
+    "session_auth": {
+      "description": "Signed per-session identity for Streamable HTTP http_claims contexts. HS256 is retained for development; asymmetric verification uses only JWKS or public PEM material.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["provider"],
+      "allOf": [
+        {
+          "if": { "properties": { "provider": { "const": "jwt_hs256" } }, "required": ["provider"] },
+          "then": { "required": ["secret_env"] }
+        },
+        {
+          "if": { "properties": { "provider": { "const": "jwt_asymmetric" } }, "required": ["provider"] },
+          "then": {
+            "required": ["algorithms"],
+            "oneOf": [
+              { "required": ["jwks_url_env"] },
+              { "required": ["public_key_env"] },
+              { "required": ["public_key_path"] }
+            ]
+          }
+        }
+      ],
+      "properties": {
+        "provider": { "enum": ["jwt_hs256", "jwt_asymmetric"] },
+        "secret_env": { "$ref": "#/$defs/env_name" },
+        "previous_secret_env": { "$ref": "#/$defs/env_name" },
+        "algorithms": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "enum": ["HS256", "RS256", "ES256"] } },
+        "jwks_url_env": { "$ref": "#/$defs/env_name" },
+        "public_key_env": { "$ref": "#/$defs/env_name" },
+        "public_key_path": { "type": "string", "minLength": 1 },
+        "issuer": { "type": "string", "minLength": 1 },
+        "audience": { "type": "string", "minLength": 1 },
+        "tenant_claim": { "$ref": "#/$defs/identifier" },
+        "principal_claim": { "$ref": "#/$defs/identifier" },
+        "clock_skew_seconds": { "type": "integer", "minimum": 0, "maximum": 300 },
+        "jwks_cache_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 },
+        "jwks_cooldown_seconds": { "type": "integer", "minimum": 1, "maximum": 3600 },
+        "fetch_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 30000 },
+        "max_response_bytes": { "type": "integer", "minimum": 1024, "maximum": 10485760 }
+      }
+    },
     "cloud": {
       "type": "object",
       "additionalProperties": false,
@@ -136,6 +295,15 @@
     }
   },
   "$defs": {
+    "rate_limit_rule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requests", "window_seconds"],
+      "properties": {
+        "requests": { "type": "integer", "minimum": 1, "maximum": 1000000 },
+        "window_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 }
+      }
+    },
     "env_name": {
       "type": "string",
       "pattern": "^[A-Z_][A-Z0-9_]*$"
@@ -176,6 +344,17 @@
           "type": "integer",
           "minimum": 1
         },
+        "pool": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "max_connections": { "type": "integer", "minimum": 1, "maximum": 1000 },
+            "connection_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 300000 },
+            "idle_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 3600000 },
+            "queue_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 300000 },
+            "queue_limit": { "type": "integer", "minimum": 0, "maximum": 100000 }
+          }
+        },
         "ssl": {
           "type": "object",
           "additionalProperties": true
@@ -366,6 +545,11 @@
             "required_role": {
               "type": "string"
             },
+            "required_approvals": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 10
+            },
             "policy": {
               "type": "string",
               "minLength": 1
@@ -521,6 +705,30 @@
               "max": { "type": "integer", "minimum": 0 }
             }
           }
+        },
+        "limits": {
+          "description": "Reviewed aggregate ceilings for policy auto-approval. Exceeding one falls back to human review.",
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["kind", "max", "period"],
+            "allOf": [
+              {
+                "if": { "properties": { "kind": { "const": "total" } }, "required": ["kind"] },
+                "then": { "required": ["field"] },
+                "else": { "not": { "required": ["field"] } }
+              }
+            ],
+            "properties": {
+              "kind": { "enum": ["count", "total"] },
+              "max": { "type": "integer", "minimum": 0 },
+              "period": { "const": "day" },
+              "field": { "$ref": "#/$defs/identifier" },
+              "scope": { "enum": ["tenant_policy", "tenant_policy_object"] }
+            }
+          }
         }
       }
     }