@synapsor/runner 0.1.6 → 0.1.8

package/CHANGELOG.md

@@ -2,7 +2,58 @@
 
 ## Unreleased
 
-No unreleased changes yet.
+### DSL / JSON Contract Parity
+
+- Adds portable spec fields for capability `returns_hint`, proposal
+  `numeric_bounds`, and proposal `transition_guards` so reviewed safety
+  metadata can live in canonical contracts instead of runner-private config.
+- Extends the DSL with `DESCRIPTION`, `RETURNS HINT`, arg descriptions,
+  numeric arg min/max, text `MAX LENGTH`, patch `BOUND`, and `TRANSITION`
+  clauses.
+- Adds DSL warnings and `--strict` mode so weak proposal contracts fail CI
+  instead of silently compiling.
+- Preserves compiled bounds through `contracts: []` into Runner propose-time
+  enforcement and accepts pure-contract configs with `capabilities: []`.
+- Adds `docs/dsl-json-parity.md` so developers can see which fields are
+  authored in DSL, validated in JSON, enforced by Runner, and accepted by
+  C++/Cloud.
+
+### Cloud Registry Push
+
+- Wires non-dry-run `synapsor-runner cloud push` to the Synapsor Cloud control
+  API. The CLI validates locally, posts normalized `@synapsor/spec` JSON, and
+  reports Cloud contract/version/digest details only after the server confirms
+  storage.
+- Keeps `--dry-run` network-free and updates error handling for invalid tokens,
+  missing workspace permissions, validation errors, conflicts, and network
+  failures without printing bearer tokens.
+- Documents the project-scoped Cloud registry path and backend runner-bundle
+  export foundation.
+
+### Release Verification
+
+- Adds `corepack pnpm test:live-apply` as the documented Docker-backed live
+  apply smoke. It aliases the existing MCP local examples proof and verifies
+  proposal diffs, approval outside MCP, guarded writeback, idempotent retry,
+  stale-row conflict, receipts, and replay against disposable Postgres/MySQL
+  databases.
+
+## 0.1.7
+
+### Contract Writeback Resolution
+
+- Fixes contract-authored proposal capabilities loaded through `contracts: []`
+  so `apply` resolves the same reviewed capability catalog used by serve,
+  tools, propose, and doctor.
+- Rejects duplicate capability names across embedded runner config and
+  referenced contracts instead of silently shadowing a safety contract.
+- Preserves canonical contract writeback modes, including direct SQL,
+  app-owned handler, cloud-worker, and proposal-only/no-local-writeback
+  semantics.
+- Fails broken applyable writeback definitions at propose/doctor time before a
+  human approves a proposal.
+- Creates local store parent directories automatically and trims env-derived
+  URLs, tokens, and trusted context values before use.
 
 ## 0.1.5
 

package/README.md

@@ -235,6 +235,8 @@ CREATE AGENT CONTEXT local_operator
 END
 
 CREATE CAPABILITY billing.inspect_invoice
+  DESCRIPTION 'Inspect one invoice in the trusted tenant before proposing a waiver.'
+  RETURNS HINT 'Returns reviewed invoice fields plus evidence/query-audit handles.'
   USING CONTEXT local_operator
   SOURCE local_postgres
   ON public.invoices
@@ -242,13 +244,15 @@ CREATE CAPABILITY billing.inspect_invoice
   TENANT KEY tenant_id
   CONFLICT GUARD updated_at
   LOOKUP invoice_id BY id
-  ARG invoice_id STRING REQUIRED MAX 128
+  ARG invoice_id STRING REQUIRED MAX LENGTH 128 DESCRIPTION 'Invoice id such as INV-3001.'
   ALLOW READ id, tenant_id, status, late_fee_cents, updated_at
   REQUIRE EVIDENCE
   MAX ROWS 1
 END
 
 CREATE CAPABILITY billing.propose_late_fee_waiver
+  DESCRIPTION 'Propose waiving one invoice late fee after inspecting invoice and policy evidence.'
+  RETURNS HINT 'Returns a review-required proposal id, exact diff, evidence handle, and source_database_changed:false.'
   USING CONTEXT local_operator
   SOURCE local_postgres
   ON public.invoices
@@ -256,8 +260,8 @@ CREATE CAPABILITY billing.propose_late_fee_waiver
   TENANT KEY tenant_id
   CONFLICT GUARD updated_at
   LOOKUP invoice_id BY id
-  ARG invoice_id STRING REQUIRED MAX 128
-  ARG reason TEXT REQUIRED MAX 500
+  ARG invoice_id STRING REQUIRED MAX LENGTH 128 DESCRIPTION 'Invoice id such as INV-3001.'
+  ARG reason TEXT REQUIRED MAX LENGTH 500 DESCRIPTION 'Business reason for the proposed waiver.'
   ALLOW READ id, tenant_id, status, late_fee_cents, waiver_reason, updated_at
   REQUIRE EVIDENCE
   MAX ROWS 1
@@ -265,6 +269,7 @@ CREATE CAPABILITY billing.propose_late_fee_waiver
   ALLOW WRITE late_fee_cents, waiver_reason
   PATCH late_fee_cents = 0
   PATCH waiver_reason = ARG reason
+  BOUND late_fee_cents 0..10000
   APPROVAL ROLE billing_lead
   WRITEBACK DIRECT SQL
 END
@@ -273,20 +278,33 @@ END
 Compile, validate, and serve it:
 
 ```bash
-synapsor-runner dsl compile ./contract.synapsor --out ./synapsor.contract.json
+synapsor-runner dsl compile ./contract.synapsor --out ./synapsor.contract.json --strict
 synapsor-runner contract validate ./synapsor.contract.json
 synapsor-runner contract bundle ./synapsor.contract.json --out ./synapsor-runner-bundle
 synapsor-runner cloud push ./synapsor.contract.json --dry-run
+synapsor-runner cloud push ./synapsor.contract.json \
+  --api-url "$SYNAPSOR_CLOUD_BASE_URL" \
+  --token "$SYNAPSOR_CLOUD_TOKEN" \
+  --workspace "$SYNAPSOR_PROJECT_ID" \
+  --name billing-late-fee
 cd ./synapsor-runner-bundle
 cp .env.example .env  # fill in and export your read-only database values
 synapsor-runner mcp serve --config ./synapsor.runner.json --store ./.synapsor/local.db
 ```
 
+`--strict` treats DSL safety warnings as errors, so CI catches proposal
+capabilities that are missing descriptions, returns hints, or numeric patch
+bounds.
+
 The `contract bundle` step generates `synapsor.runner.json` (with env-var
 placeholders) inside the bundle directory, which is why `mcp serve` runs from
 there. The server keeps stdout clean for MCP protocol frames and prints its
 ready line on stderr.
 
+See [`docs/dsl-json-parity.md`](docs/dsl-json-parity.md) for the current
+field-by-field support matrix across JSON spec, DSL, runner enforcement,
+C++/Cloud compatibility, and Cloud push.
+
 Your `synapsor.runner.json` supplies local wiring: database env var names,
 SQLite store path, MCP transport settings, and local debug options. The
 contract supplies the portable meaning: contexts, capabilities, evidence,
@@ -406,6 +424,18 @@ and proves the proposal-first write path:
 npx -y -p @synapsor/runner synapsor-runner demo
 ```
 
+For contributor/release verification from a checkout, the live apply smoke uses
+disposable Postgres/MySQL containers and the official MCP stdio client transport:
+
+```bash
+corepack pnpm test:live-apply
+```
+
+It verifies semantic tool listing, proposal diffs, source rows unchanged before
+approval, guarded writeback, idempotent retry, stale-row conflict, receipts, and
+replay. See [`docs/local-mode.md`](docs/local-mode.md#local-mcp-smoke) for
+prerequisites and expected output.
+
 After the demo prints its generated config and store path, run the happy path it
 prints. The shape is:
 
@@ -1205,6 +1235,11 @@ Portable contracts can be checked locally before Cloud import:
 synapsor-runner contract validate ./synapsor.contract.json
 synapsor-runner contract bundle ./synapsor.contract.json --out ./synapsor-runner-bundle
 synapsor-runner cloud push ./synapsor.contract.json --dry-run
+synapsor-runner cloud push ./synapsor.contract.json \
+  --api-url "$SYNAPSOR_CLOUD_BASE_URL" \
+  --token "$SYNAPSOR_CLOUD_TOKEN" \
+  --workspace "$SYNAPSOR_PROJECT_ID" \
+  --name billing-late-fee
 ```
 
 ## Current Limitations

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAqG,KAAK,WAAW,EAA2F,MAAM,6BAA6B,CAAC;AAoB3P,OAAO,EAA6G,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAE/L,OAAO,EAOL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AA6U3C,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqD1D;AA+DD,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA2TjB;AA8mED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAM/H"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAoN,KAAK,WAAW,EAA2F,MAAM,6BAA6B,CAAC;AAoB1W,OAAO,EAA6G,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAE/L,OAAO,EAOL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AA6U3C,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqD1D;AA+DD,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA2TjB;AAmsED,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAS/H"}