@synapsor/runner 1.0.0 → 1.1.1

package/examples/runner-fleet/synapsor.runner.json

@@ -0,0 +1,105 @@
+{
+  "version": 1,
+  "mode": "review",
+  "storage": {
+    "shared_postgres": {
+      "mode": "runtime_store",
+      "url_env": "SYNAPSOR_LEDGER_DATABASE_URL",
+      "schema": "synapsor_runner",
+      "lock_timeout_ms": 5000,
+      "max_entries": 5000
+    }
+  },
+  "sources": {
+    "fleet_postgres": {
+      "engine": "postgres",
+      "read_url_env": "FLEET_POSTGRES_READ_URL",
+      "write_url_env": "FLEET_POSTGRES_WRITE_URL",
+      "statement_timeout_ms": 3000,
+      "pool": {
+        "max_connections": 2,
+        "connection_timeout_ms": 2000,
+        "idle_timeout_ms": 30000,
+        "queue_timeout_ms": 1000,
+        "queue_limit": 8
+      }
+    }
+  },
+  "trusted_context": {
+    "provider": "http_claims",
+    "values": {
+      "tenant_id_key": "tenant_id",
+      "principal_key": "sub"
+    }
+  },
+  "session_auth": {
+    "provider": "jwt_hs256",
+    "secret_env": "SYNAPSOR_SESSION_JWT_SECRET",
+    "issuer": "https://fleet.example.invalid",
+    "audience": "synapsor-runner-fleet",
+    "tenant_claim": "tenant_id",
+    "principal_claim": "sub",
+    "clock_skew_seconds": 10
+  },
+  "rate_limits": {
+    "enabled": true,
+    "default": { "requests": 20, "window_seconds": 60 },
+    "capabilities": {
+      "billing.inspect_invoice": { "requests": 3, "window_seconds": 60 }
+    }
+  },
+  "metrics": {
+    "enabled": true,
+    "token_env": "SYNAPSOR_METRICS_TOKEN"
+  },
+  "capabilities": [
+    {
+      "name": "billing.inspect_invoice",
+      "kind": "read",
+      "source": "fleet_postgres",
+      "target": {
+        "schema": "public",
+        "table": "invoices",
+        "primary_key": "id",
+        "tenant_key": "tenant_id"
+      },
+      "args": {
+        "invoice_id": { "type": "string", "required": true, "max_length": 128 }
+      },
+      "lookup": { "id_from_arg": "invoice_id" },
+      "visible_columns": ["id", "tenant_id", "status", "late_fee_cents", "waiver_reason", "updated_at"],
+      "evidence": "required",
+      "max_rows": 1
+    },
+    {
+      "name": "billing.propose_late_fee_waiver",
+      "kind": "proposal",
+      "source": "fleet_postgres",
+      "target": {
+        "schema": "public",
+        "table": "invoices",
+        "primary_key": "id",
+        "tenant_key": "tenant_id"
+      },
+      "args": {
+        "invoice_id": { "type": "string", "required": true, "max_length": 128 },
+        "reason": { "type": "string", "required": true, "max_length": 500 }
+      },
+      "lookup": { "id_from_arg": "invoice_id" },
+      "visible_columns": ["id", "tenant_id", "status", "late_fee_cents", "waiver_reason", "updated_at"],
+      "evidence": "required",
+      "max_rows": 1,
+      "patch": {
+        "late_fee_cents": { "fixed": 0 },
+        "waiver_reason": { "from_arg": "reason" }
+      },
+      "allowed_columns": ["late_fee_cents", "waiver_reason"],
+      "conflict_guard": { "column": "updated_at" },
+      "approval": {
+        "mode": "human",
+        "required_role": "billing_lead",
+        "required_approvals": 2
+      }
+    }
+  ]
+}

package/fixtures/protocol/MANIFEST.json

@@ -33,7 +33,7 @@
     {
       "kind": "schema",
       "name": "change-set.v1.schema.json",
-      "sha256": "4e52b369b0d3bea30b0ed7b61ec239fc67de3dc691ed4014d6d5eabc7d2be4de"
+      "sha256": "119ac84f7189e9433d4eaac4defb6ef7c459a14e55e1563aa7948b746d816af5"
     },
     {
       "kind": "schema",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synapsor/runner",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "description": "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
   "license": "Apache-2.0",
   "type": "module",
@@ -25,6 +25,7 @@
     "examples/openai-agents-stdio/**",
     "examples/raw-sql-vs-synapsor/**",
     "examples/reference-support-billing-app/**",
+    "examples/runner-fleet/**",
     "examples/support-plan-credit/**",
     "examples/support-billing-agent/**",
     "fixtures/**",
@@ -58,6 +59,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
+    "jose": "6.2.3",
     "mysql2": "^3.11.0",
     "pg": "^8.13.0",
     "zod": "^3.25.0"

package/schemas/change-set.v1.schema.json

@@ -95,7 +95,8 @@
       "required": ["status"],
       "properties": {
         "status": { "enum": ["pending", "approved", "rejected", "canceled"] },
-        "required_role": { "type": "string" }
+        "required_role": { "type": "string" },
+        "required_approvals": { "type": "integer", "minimum": 1, "maximum": 10 }
       }
     },
     "writeback": {

package/schemas/synapsor.runner.schema.json

@@ -85,6 +85,13 @@
               "type": "integer",
               "minimum": 0,
               "default": 10000
+            },
+            "max_entries": {
+              "description": "Safety bound for the bounded runtime-store bridge. Operations fail closed rather than copying an unbounded ledger.",
+              "type": "integer",
+              "minimum": 100,
+              "maximum": 100000,
+              "default": 10000
             }
           }
         }
@@ -146,8 +153,31 @@
         "disable_auto_approval": { "type": "boolean" }
       }
     },
+    "rate_limits": {
+      "description": "Operational fixed-window request limits keyed from verified tenant context and reviewed capability. These are deployment controls, not portable contract policy.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean", "default": true },
+        "default": { "$ref": "#/$defs/rate_limit_rule" },
+        "capabilities": {
+          "type": "object",
+          "propertyNames": { "$ref": "#/$defs/qualified_name" },
+          "additionalProperties": { "$ref": "#/$defs/rate_limit_rule" }
+        }
+      }
+    },
+    "metrics": {
+      "description": "Scrapeable HTTP metrics. Disabled by default; non-loopback exposure requires a separate bearer token.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean" },
+        "token_env": { "$ref": "#/$defs/env_name" }
+      }
+    },
     "operator_identity": {
-      "description": "Operator identity used by approve, reject, and apply. signed_key verifies possession of a registered private key; dev_env is local-development compatibility only.",
+      "description": "Operator identity used by approve, reject, and apply. signed_key verifies a registered key; jwt_oidc verifies asymmetric JWT claims and Runner-attests the decision; dev_env is local-development compatibility only.",
       "type": "object",
       "additionalProperties": false,
       "required": ["provider"],
@@ -155,10 +185,21 @@
         {
           "if": { "properties": { "provider": { "const": "signed_key" } }, "required": ["provider"] },
           "then": { "required": ["operators"] }
+        },
+        {
+          "if": { "properties": { "provider": { "const": "jwt_oidc" } }, "required": ["provider"] },
+          "then": {
+            "required": ["algorithms"],
+            "oneOf": [
+              { "required": ["jwks_url_env"] },
+              { "required": ["public_key_env"] },
+              { "required": ["public_key_path"] }
+            ]
+          }
         }
       ],
       "properties": {
-        "provider": { "enum": ["dev_env", "signed_key"] },
+        "provider": { "enum": ["dev_env", "signed_key", "jwt_oidc"] },
         "actor_env": { "$ref": "#/$defs/env_name" },
         "roles_env": { "$ref": "#/$defs/env_name" },
         "apply_roles": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/identifier" } },
@@ -174,23 +215,65 @@
               "roles": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/identifier" } }
             }
           }
-        }
+        },
+        "token_env": { "$ref": "#/$defs/env_name" },
+        "token_file_env": { "$ref": "#/$defs/env_name" },
+        "token_stdin": { "type": "boolean" },
+        "roles_claim": { "$ref": "#/$defs/identifier" },
+        "subject_claim": { "$ref": "#/$defs/identifier" },
+        "attestation_secret_env": { "$ref": "#/$defs/env_name" },
+        "algorithms": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "enum": ["RS256", "ES256"] } },
+        "jwks_url_env": { "$ref": "#/$defs/env_name" },
+        "public_key_env": { "$ref": "#/$defs/env_name" },
+        "public_key_path": { "type": "string", "minLength": 1 },
+        "issuer": { "type": "string", "minLength": 1 },
+        "audience": { "type": "string", "minLength": 1 },
+        "clock_skew_seconds": { "type": "integer", "minimum": 0, "maximum": 300 },
+        "jwks_cache_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 },
+        "jwks_cooldown_seconds": { "type": "integer", "minimum": 1, "maximum": 3600 },
+        "fetch_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 30000 },
+        "max_response_bytes": { "type": "integer", "minimum": 1024, "maximum": 10485760 }
       }
     },
     "session_auth": {
-      "description": "Signed per-session identity for Streamable HTTP http_claims contexts. The HMAC secret stays in an environment variable.",
+      "description": "Signed per-session identity for Streamable HTTP http_claims contexts. HS256 is retained for development; asymmetric verification uses only JWKS or public PEM material.",
       "type": "object",
       "additionalProperties": false,
-      "required": ["provider", "secret_env"],
+      "required": ["provider"],
+      "allOf": [
+        {
+          "if": { "properties": { "provider": { "const": "jwt_hs256" } }, "required": ["provider"] },
+          "then": { "required": ["secret_env"] }
+        },
+        {
+          "if": { "properties": { "provider": { "const": "jwt_asymmetric" } }, "required": ["provider"] },
+          "then": {
+            "required": ["algorithms"],
+            "oneOf": [
+              { "required": ["jwks_url_env"] },
+              { "required": ["public_key_env"] },
+              { "required": ["public_key_path"] }
+            ]
+          }
+        }
+      ],
       "properties": {
-        "provider": { "const": "jwt_hs256" },
+        "provider": { "enum": ["jwt_hs256", "jwt_asymmetric"] },
         "secret_env": { "$ref": "#/$defs/env_name" },
         "previous_secret_env": { "$ref": "#/$defs/env_name" },
+        "algorithms": { "type": "array", "minItems": 1, "uniqueItems": true, "items": { "enum": ["HS256", "RS256", "ES256"] } },
+        "jwks_url_env": { "$ref": "#/$defs/env_name" },
+        "public_key_env": { "$ref": "#/$defs/env_name" },
+        "public_key_path": { "type": "string", "minLength": 1 },
         "issuer": { "type": "string", "minLength": 1 },
         "audience": { "type": "string", "minLength": 1 },
         "tenant_claim": { "$ref": "#/$defs/identifier" },
         "principal_claim": { "$ref": "#/$defs/identifier" },
-        "clock_skew_seconds": { "type": "integer", "minimum": 0, "maximum": 300 }
+        "clock_skew_seconds": { "type": "integer", "minimum": 0, "maximum": 300 },
+        "jwks_cache_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 },
+        "jwks_cooldown_seconds": { "type": "integer", "minimum": 1, "maximum": 3600 },
+        "fetch_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 30000 },
+        "max_response_bytes": { "type": "integer", "minimum": 1024, "maximum": 10485760 }
       }
     },
     "cloud": {
@@ -212,6 +295,15 @@
     }
   },
   "$defs": {
+    "rate_limit_rule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requests", "window_seconds"],
+      "properties": {
+        "requests": { "type": "integer", "minimum": 1, "maximum": 1000000 },
+        "window_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 }
+      }
+    },
     "env_name": {
       "type": "string",
       "pattern": "^[A-Z_][A-Z0-9_]*$"
@@ -252,6 +344,17 @@
           "type": "integer",
           "minimum": 1
         },
+        "pool": {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "max_connections": { "type": "integer", "minimum": 1, "maximum": 1000 },
+            "connection_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 300000 },
+            "idle_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 3600000 },
+            "queue_timeout_ms": { "type": "integer", "minimum": 100, "maximum": 300000 },
+            "queue_limit": { "type": "integer", "minimum": 0, "maximum": 100000 }
+          }
+        },
         "ssl": {
           "type": "object",
           "additionalProperties": true
@@ -442,6 +545,11 @@
             "required_role": {
               "type": "string"
             },
+            "required_approvals": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 10
+            },
             "policy": {
               "type": "string",
               "minLength": 1