@synapsor/runner 1.1.1 → 1.4.1

package/fixtures/protocol/writeback-job.compensation-update.v4.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": "synapsor.writeback-job.v4",
+  "writeback_job_id": "wbj_revert_1",
+  "proposal_id": "wrp_revert_1",
+  "proposal_version": 1,
+  "proposal_hash": "sha256:revert-proposal",
+  "runner_scope": { "project_id": "local", "source_id": "src_1" },
+  "engine": "postgres",
+  "operation": "restore_update",
+  "target": { "schema": "public", "table": "customers", "primary_key": { "column": "id", "value": "CUS-1" } },
+  "tenant_guard": { "column": "tenant_id", "value": "acme" },
+  "allowed_columns": ["plan_credit_cents"],
+  "patch": {},
+  "compensation": {
+    "schema_version": "synapsor.inverse-descriptor.v1",
+    "availability": "available",
+    "reason_codes": [],
+    "operation": "restore_update",
+    "cardinality": "single",
+    "forward_proposal_id": "wrp_forward_1",
+    "forward_writeback_job_id": "wbj_forward_1",
+    "target": { "source_id": "src_1", "schema": "public", "table": "customers", "primary_key_column": "id" },
+    "tenant_guard": { "column": "tenant_id", "value": "acme" },
+    "allowed_columns": ["plan_credit_cents"],
+    "members": [{ "primary_key": { "column": "id", "value": "CUS-1" }, "expected_state": { "plan_credit_cents": 2500, "version": 8 }, "restore_values": { "plan_credit_cents": 0 } }],
+    "max_rows": 1,
+    "aggregate_bounds": [],
+    "version_advance": { "column": "version", "strategy": "integer_increment" },
+    "lineage": { "root_proposal_id": "wrp_forward_1", "parent_proposal_id": "wrp_forward_1", "reverts_proposal_id": "wrp_forward_1", "depth": 1 }
+  },
+  "forward_receipt_hash": "sha256:forward-receipt",
+  "idempotency_key": "revert:wrp_forward_1:wrp_revert_1",
+  "lease": { "lease_id": "lease_revert_1", "attempt": 1, "expires_at": "2026-07-13T23:59:59Z" }
+}

package/fixtures/protocol/writeback-job.delete.v2.json

@@ -0,0 +1,22 @@
+{
+  "schema_version": "synapsor.writeback-job.v2",
+  "writeback_job_id": "wbj_delete_2003",
+  "proposal_id": "wrp_delete_2003",
+  "proposal_version": 1,
+  "proposal_hash": "sha256:delete-proposal",
+  "runner_scope": { "project_id": "project_demo", "source_id": "src_support_demo" },
+  "engine": "mysql",
+  "target": {
+    "schema": "support",
+    "table": "pending_tasks",
+    "primary_key": { "column": "id", "value": "task_2003" }
+  },
+  "tenant_guard": { "column": "tenant_id", "value": "tenant_demo" },
+  "allowed_columns": [],
+  "mutation": {
+    "kind": "single_row_delete",
+    "conflict_guard": { "kind": "column", "column": "version", "expected_value": 4 }
+  },
+  "idempotency_key": "idem_delete_2003",
+  "lease": { "lease_id": "lease_delete_2003", "attempt": 1, "expires_at": "2026-07-13T19:02:00Z" }
+}

package/fixtures/protocol/writeback-job.insert.v2.json

@@ -0,0 +1,28 @@
+{
+  "schema_version": "synapsor.writeback-job.v2",
+  "writeback_job_id": "wbj_insert_2002",
+  "proposal_id": "wrp_insert_2002",
+  "proposal_version": 1,
+  "proposal_hash": "sha256:insert-proposal",
+  "runner_scope": { "project_id": "project_demo", "source_id": "src_billing_demo" },
+  "engine": "postgres",
+  "target": {
+    "schema": "public",
+    "table": "account_credits",
+    "primary_key": { "column": "id" }
+  },
+  "tenant_guard": { "column": "tenant_id", "value": "tenant_demo" },
+  "allowed_columns": ["amount_cents", "reason"],
+  "mutation": {
+    "kind": "single_row_insert",
+    "values": { "amount_cents": 2500, "reason": "service interruption" },
+    "deduplication": {
+      "components": [
+        { "column": "tenant_id", "value": "tenant_demo", "source": "trusted_tenant" },
+        { "column": "request_id", "value": "wrp_insert_2002", "source": "proposal_id" }
+      ]
+    }
+  },
+  "idempotency_key": "idem_insert_2002",
+  "lease": { "lease_id": "lease_insert_2002", "attempt": 1, "expires_at": "2026-07-13T19:01:00Z" }
+}

package/fixtures/protocol/writeback-job.update.v2.json

@@ -0,0 +1,24 @@
+{
+  "schema_version": "synapsor.writeback-job.v2",
+  "writeback_job_id": "wbj_update_2001",
+  "proposal_id": "wrp_update_2001",
+  "proposal_version": 1,
+  "proposal_hash": "sha256:update-proposal",
+  "runner_scope": { "project_id": "project_demo", "source_id": "src_billing_demo" },
+  "engine": "postgres",
+  "target": {
+    "schema": "public",
+    "table": "account_credits",
+    "primary_key": { "column": "id", "value": "credit_2001" }
+  },
+  "tenant_guard": { "column": "tenant_id", "value": "tenant_demo" },
+  "allowed_columns": ["amount_cents"],
+  "mutation": {
+    "kind": "single_row_update",
+    "values": { "amount_cents": 2500 },
+    "conflict_guard": { "kind": "column", "column": "version", "expected_value": 7 },
+    "version_advance": { "column": "version", "strategy": "integer_increment" }
+  },
+  "idempotency_key": "idem_update_2001",
+  "lease": { "lease_id": "lease_update_2001", "attempt": 1, "expires_at": "2026-07-13T19:00:00Z" }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synapsor/runner",
-  "version": "1.1.1",
+  "version": "1.4.1",
   "description": "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
   "license": "Apache-2.0",
   "type": "module",
@@ -35,6 +35,7 @@
     "AGENTS.md",
     "CHANGELOG.md",
     "CONTRIBUTING.md",
+    "SECURITY.md",
     "LICENSE",
     "NOTICE",
     "THREAT_MODEL.md",

package/schemas/change-set.v2.schema.json

@@ -0,0 +1,245 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.change-set.v2.schema.json",
+  "title": "Synapsor Change Set v2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "proposal_id",
+    "proposal_version",
+    "action",
+    "operation",
+    "mode",
+    "principal",
+    "scope",
+    "source",
+    "before",
+    "patch",
+    "after",
+    "guards",
+    "evidence",
+    "approval",
+    "writeback",
+    "source_database_mutated",
+    "integrity",
+    "created_at"
+  ],
+  "properties": {
+    "schema_version": { "const": "synapsor.change-set.v2" },
+    "proposal_id": { "type": "string", "minLength": 1 },
+    "proposal_version": { "type": "integer", "minimum": 1 },
+    "action": { "type": "string", "minLength": 1 },
+    "operation": { "enum": ["single_row_update", "single_row_insert", "single_row_delete"] },
+    "mode": { "enum": ["read_only", "shadow", "review_required", "approved_for_writeback"] },
+    "principal": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "source"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1 },
+        "source": { "enum": ["trusted_session", "cloud_session", "environment", "static_dev"] }
+      }
+    },
+    "scope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["tenant_id", "business_object", "object_id"],
+      "properties": {
+        "tenant_id": { "type": "string", "minLength": 1 },
+        "business_object": { "type": "string", "minLength": 1 },
+        "object_id": { "type": "string", "minLength": 1 }
+      }
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "source_id", "schema", "table", "primary_key"],
+      "properties": {
+        "kind": { "enum": ["external_postgres", "external_mysql", "synapsor_table"] },
+        "source_id": { "type": "string", "minLength": 1 },
+        "schema": { "$ref": "#/$defs/safeIdentifier" },
+        "table": { "$ref": "#/$defs/safeIdentifier" },
+        "primary_key": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["column"],
+          "properties": {
+            "column": { "$ref": "#/$defs/safeIdentifier" },
+            "value": { "$ref": "#/$defs/scalar" }
+          }
+        }
+      }
+    },
+    "before": { "$ref": "#/$defs/scalarRecord" },
+    "patch": { "$ref": "#/$defs/scalarRecord" },
+    "after": { "$ref": "#/$defs/scalarRecord" },
+    "guards": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["tenant", "allowed_columns"],
+      "properties": {
+        "tenant": { "$ref": "#/$defs/columnValue" },
+        "allowed_columns": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/safeIdentifier" },
+          "maxItems": 256,
+          "uniqueItems": true
+        },
+        "expected_version": { "$ref": "#/$defs/columnValue" },
+        "version_advance": { "$ref": "#/$defs/versionAdvance" },
+        "deduplication": { "$ref": "#/$defs/deduplication" }
+      }
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": true,
+      "required": ["bundle_id", "query_fingerprint", "items"],
+      "properties": {
+        "bundle_id": { "type": "string", "minLength": 1 },
+        "query_fingerprint": { "$ref": "#/$defs/sha256" },
+        "items": { "type": "array", "maxItems": 1000 }
+      }
+    },
+    "approval": {
+      "type": "object",
+      "additionalProperties": true,
+      "required": ["status"],
+      "properties": {
+        "status": { "enum": ["pending", "approved", "rejected", "canceled"] },
+        "required_role": { "type": "string" },
+        "required_approvals": { "type": "integer", "minimum": 1, "maximum": 10 }
+      }
+    },
+    "writeback": {
+      "type": "object",
+      "additionalProperties": true,
+      "required": ["status", "mode"],
+      "properties": {
+        "status": { "enum": ["not_applied", "pending_worker", "applied", "conflict", "failed", "canceled", "reconciliation_required"] },
+        "mode": { "enum": ["trusted_worker_required", "synapsor_merge", "read_only"] }
+      }
+    },
+    "source_database_mutated": { "type": "boolean" },
+    "integrity": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["proposal_hash"],
+      "properties": { "proposal_hash": { "$ref": "#/$defs/sha256" } }
+    },
+    "created_at": { "type": "string", "format": "date-time" }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "operation": { "const": "single_row_insert" } } },
+      "then": {
+        "properties": {
+          "before": { "maxProperties": 0 },
+          "patch": { "minProperties": 1 },
+          "after": { "minProperties": 1 },
+          "guards": {
+            "required": ["deduplication"],
+            "not": { "anyOf": [{ "required": ["expected_version"] }, { "required": ["version_advance"] }] },
+            "properties": {
+              "allowed_columns": { "minItems": 1 },
+              "deduplication": {
+                "properties": {
+                  "components": {
+                    "allOf": [
+                      { "contains": { "properties": { "source": { "const": "proposal_id" } }, "required": ["source"] } },
+                      { "contains": { "properties": { "source": { "const": "trusted_tenant" } }, "required": ["source"] } }
+                    ]
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    {
+      "if": { "properties": { "operation": { "const": "single_row_update" } } },
+      "then": {
+        "properties": {
+          "source": { "properties": { "primary_key": { "required": ["value"] } } },
+          "before": { "minProperties": 1 },
+          "patch": { "minProperties": 1 },
+          "after": { "minProperties": 1 },
+          "guards": {
+            "required": ["expected_version"],
+            "not": { "required": ["deduplication"] },
+            "properties": { "allowed_columns": { "minItems": 1 } }
+          }
+        }
+      }
+    },
+    {
+      "if": { "properties": { "operation": { "const": "single_row_delete" } } },
+      "then": {
+        "properties": {
+          "source": { "properties": { "primary_key": { "required": ["value"] } } },
+          "before": { "minProperties": 1 },
+          "patch": { "maxProperties": 0 },
+          "after": { "maxProperties": 0 },
+          "guards": {
+            "required": ["expected_version"],
+            "not": { "anyOf": [{ "required": ["version_advance"] }, { "required": ["deduplication"] }] },
+            "properties": { "allowed_columns": { "maxItems": 0 } }
+          }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "safeIdentifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "scalar": { "type": ["string", "number", "boolean", "null"] },
+    "scalarRecord": {
+      "type": "object",
+      "propertyNames": { "$ref": "#/$defs/safeIdentifier" },
+      "additionalProperties": { "$ref": "#/$defs/scalar" },
+      "maxProperties": 256
+    },
+    "columnValue": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["column", "value"],
+      "properties": {
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "value": { "$ref": "#/$defs/scalar" }
+      }
+    },
+    "versionAdvance": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["column", "strategy"],
+      "properties": {
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "strategy": { "enum": ["integer_increment", "database_generated"] }
+      }
+    },
+    "deduplicationComponent": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["column", "value", "source"],
+      "properties": {
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "value": { "$ref": "#/$defs/scalar" },
+        "source": { "enum": ["proposal_id", "trusted_tenant", "fixed"] }
+      }
+    },
+    "deduplication": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["components"],
+      "properties": {
+        "components": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/deduplicationComponent" },
+          "minItems": 1,
+          "maxItems": 8
+        }
+      }
+    }
+  }
+}

package/schemas/change-set.v3.schema.json

@@ -0,0 +1,112 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.change-set.v3.schema.json",
+  "title": "Synapsor Bounded Change Set v3",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "proposal_id", "proposal_version", "action", "operation", "mode", "principal", "scope", "source", "before", "patch", "after", "guards", "frozen_set", "evidence", "approval", "writeback", "source_database_mutated", "integrity", "created_at"],
+  "properties": {
+    "schema_version": { "const": "synapsor.change-set.v3" },
+    "proposal_id": { "type": "string", "minLength": 1 },
+    "proposal_version": { "type": "integer", "minimum": 1 },
+    "action": { "type": "string", "minLength": 1 },
+    "operation": { "$ref": "#/$defs/setOperation" },
+    "mode": { "enum": ["read_only", "shadow", "review_required", "approved_for_writeback"] },
+    "principal": {
+      "type": "object", "additionalProperties": false, "required": ["id", "source"],
+      "properties": { "id": { "type": "string", "minLength": 1 }, "source": { "enum": ["trusted_session", "cloud_session", "environment", "static_dev"] } }
+    },
+    "scope": {
+      "type": "object", "additionalProperties": false, "required": ["tenant_id", "business_object", "object_id"],
+      "properties": { "tenant_id": { "type": "string", "minLength": 1 }, "business_object": { "type": "string", "minLength": 1 }, "object_id": { "type": "string", "minLength": 1 } }
+    },
+    "source": {
+      "type": "object", "additionalProperties": false, "required": ["kind", "source_id", "schema", "table", "primary_key"],
+      "properties": {
+        "kind": { "enum": ["external_postgres", "external_mysql", "synapsor_table"] },
+        "source_id": { "type": "string", "minLength": 1 },
+        "schema": { "$ref": "#/$defs/safeIdentifier" },
+        "table": { "$ref": "#/$defs/safeIdentifier" },
+        "primary_key": { "type": "object", "additionalProperties": false, "required": ["column"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" } } }
+      }
+    },
+    "before": { "$ref": "#/$defs/scalarRecord" },
+    "patch": { "$ref": "#/$defs/scalarRecord" },
+    "after": { "$ref": "#/$defs/scalarRecord" },
+    "guards": {
+      "type": "object", "additionalProperties": false, "required": ["tenant", "allowed_columns"],
+      "properties": {
+        "tenant": { "$ref": "#/$defs/columnValue" },
+        "allowed_columns": { "type": "array", "items": { "$ref": "#/$defs/safeIdentifier" }, "maxItems": 256, "uniqueItems": true },
+        "version_advance": { "$ref": "#/$defs/versionAdvance" }
+      }
+    },
+    "frozen_set": { "$ref": "#/$defs/frozenSet" },
+    "evidence": {
+      "type": "object", "additionalProperties": true, "required": ["bundle_id", "query_fingerprint", "items"],
+      "properties": { "bundle_id": { "type": "string", "minLength": 1 }, "query_fingerprint": { "$ref": "#/$defs/sha256" }, "items": { "type": "array", "maxItems": 100 } }
+    },
+    "approval": {
+      "type": "object", "additionalProperties": true, "required": ["status", "mode"],
+      "properties": { "status": { "enum": ["pending", "approved", "rejected", "canceled"] }, "mode": { "enum": ["human", "operator"] }, "required_role": { "type": "string", "minLength": 1 }, "required_approvals": { "type": "integer", "minimum": 1, "maximum": 10 } }
+    },
+    "writeback": {
+      "type": "object", "additionalProperties": true, "required": ["status", "mode", "executor"],
+      "properties": { "status": { "enum": ["not_applied", "pending_worker", "applied", "conflict", "failed", "canceled", "reconciliation_required"] }, "mode": { "const": "trusted_worker_required" }, "executor": { "const": "sql_update" } }
+    },
+    "source_database_mutated": { "type": "boolean" },
+    "integrity": { "type": "object", "additionalProperties": false, "required": ["proposal_hash"], "properties": { "proposal_hash": { "$ref": "#/$defs/sha256" } } },
+    "created_at": { "type": "string", "format": "date-time" }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "operation": { "const": "set_update" } }, "required": ["operation"] },
+      "then": {
+        "properties": {
+          "patch": { "minProperties": 1 },
+          "guards": { "required": ["version_advance"], "properties": { "allowed_columns": { "minItems": 1 }, "version_advance": { "properties": { "strategy": { "const": "integer_increment" } } } } },
+          "frozen_set": { "properties": { "members": { "items": { "required": ["expected_version", "before_digest", "after_digest"], "not": { "anyOf": [{ "required": ["tombstone_digest"] }, { "required": ["deduplication"] }] } } } } }
+        }
+      }
+    },
+    {
+      "if": { "properties": { "operation": { "const": "set_delete" } }, "required": ["operation"] },
+      "then": {
+        "properties": {
+          "patch": { "maxProperties": 0 },
+          "guards": { "not": { "required": ["version_advance"] }, "properties": { "allowed_columns": { "maxItems": 0 } } },
+          "frozen_set": { "properties": { "members": { "items": { "required": ["expected_version", "before_digest", "tombstone_digest"], "properties": { "after": { "maxProperties": 0 } }, "not": { "anyOf": [{ "required": ["after_digest"] }, { "required": ["deduplication"] }] } } } } }
+        }
+      }
+    },
+    {
+      "if": { "properties": { "operation": { "const": "batch_insert" } }, "required": ["operation"] },
+      "then": {
+        "properties": {
+          "guards": { "not": { "required": ["version_advance"] }, "properties": { "allowed_columns": { "minItems": 1 } } },
+          "frozen_set": { "properties": { "members": { "items": { "required": ["after_digest", "deduplication"], "properties": { "before": { "maxProperties": 0 }, "after": { "minProperties": 1 } }, "not": { "anyOf": [{ "required": ["expected_version"] }, { "required": ["before_digest"] }, { "required": ["tombstone_digest"] }] } } } } }
+        }
+      }
+    }
+  ],
+  "$defs": {
+    "safeIdentifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "scalar": { "type": ["string", "number", "boolean", "null"] },
+    "scalarRecord": { "type": "object", "propertyNames": { "$ref": "#/$defs/safeIdentifier" }, "additionalProperties": { "$ref": "#/$defs/scalar" }, "maxProperties": 256 },
+    "setOperation": { "enum": ["set_update", "set_delete", "batch_insert"] },
+    "columnValue": { "type": "object", "additionalProperties": false, "required": ["column", "value"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" }, "value": { "$ref": "#/$defs/scalar" } } },
+    "versionAdvance": { "type": "object", "additionalProperties": false, "required": ["column", "strategy"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" }, "strategy": { "enum": ["integer_increment", "database_generated"] } } },
+    "deduplicationComponent": { "type": "object", "additionalProperties": false, "required": ["column", "value", "source"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" }, "value": { "$ref": "#/$defs/scalar" }, "source": { "enum": ["proposal_id", "trusted_tenant", "fixed"] } } },
+    "deduplication": { "type": "object", "additionalProperties": false, "required": ["components"], "properties": { "components": { "type": "array", "items": { "$ref": "#/$defs/deduplicationComponent" }, "minItems": 1, "maxItems": 8 } } },
+    "aggregateBound": { "type": "object", "additionalProperties": false, "required": ["column", "measure", "maximum", "actual"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" }, "measure": { "enum": ["before", "after", "absolute_delta"] }, "maximum": { "type": "number", "minimum": 0 }, "actual": { "type": "number", "minimum": 0 } } },
+    "frozenMember": {
+      "type": "object", "additionalProperties": false, "required": ["primary_key", "before", "after"],
+      "properties": { "primary_key": { "$ref": "#/$defs/columnValue" }, "expected_version": { "$ref": "#/$defs/columnValue" }, "before": { "$ref": "#/$defs/scalarRecord" }, "after": { "$ref": "#/$defs/scalarRecord" }, "before_digest": { "$ref": "#/$defs/sha256" }, "after_digest": { "$ref": "#/$defs/sha256" }, "tombstone_digest": { "$ref": "#/$defs/sha256" }, "deduplication": { "$ref": "#/$defs/deduplication" } }
+    },
+    "frozenSet": {
+      "type": "object", "additionalProperties": false, "required": ["max_rows", "row_count", "aggregate_bounds", "members", "set_digest"],
+      "properties": { "max_rows": { "type": "integer", "minimum": 1, "maximum": 100 }, "row_count": { "type": "integer", "minimum": 1, "maximum": 100 }, "aggregate_bounds": { "type": "array", "items": { "$ref": "#/$defs/aggregateBound" }, "minItems": 1, "maxItems": 8 }, "members": { "type": "array", "items": { "$ref": "#/$defs/frozenMember" }, "minItems": 1, "maxItems": 100 }, "set_digest": { "$ref": "#/$defs/sha256" } }
+    }
+  }
+}

package/schemas/compensation-change-set.v1.schema.json

@@ -0,0 +1,32 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.compensation-change-set.v1.schema.json",
+  "title": "Synapsor Reviewed Compensation Change Set v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "proposal_id", "proposal_version", "action", "mode", "principal", "scope", "source", "before", "patch", "after", "compensation", "guards", "evidence", "approval", "writeback", "source_database_mutated", "integrity", "created_at"],
+  "properties": {
+    "schema_version": { "const": "synapsor.compensation-change-set.v1" },
+    "proposal_id": { "type": "string", "minLength": 1 },
+    "proposal_version": { "type": "integer", "minimum": 1 },
+    "action": { "type": "string", "minLength": 1 },
+    "mode": { "const": "review_required" },
+    "principal": { "type": "object", "additionalProperties": false, "required": ["id", "source"], "properties": { "id": { "type": "string", "minLength": 1 }, "source": { "enum": ["trusted_session", "cloud_session", "environment", "static_dev"] } } },
+    "scope": { "type": "object", "additionalProperties": false, "required": ["tenant_id", "business_object", "object_id"], "properties": { "tenant_id": { "type": "string", "minLength": 1 }, "business_object": { "type": "string", "minLength": 1 }, "object_id": { "type": "string", "minLength": 1 } } },
+    "source": { "type": "object", "additionalProperties": false, "required": ["kind", "source_id", "schema", "table", "primary_key"], "properties": { "kind": { "enum": ["external_postgres", "external_mysql"] }, "source_id": { "type": "string", "minLength": 1 }, "schema": { "$ref": "#/$defs/identifier" }, "table": { "$ref": "#/$defs/identifier" }, "primary_key": { "type": "object", "additionalProperties": false, "required": ["column"], "properties": { "column": { "$ref": "#/$defs/identifier" }, "value": { "$ref": "#/$defs/scalar" } } } } },
+    "before": { "$ref": "#/$defs/record" }, "patch": { "$ref": "#/$defs/record" }, "after": { "$ref": "#/$defs/record" },
+    "compensation": { "type": "object", "additionalProperties": false, "required": ["descriptor", "forward_receipt_hash"], "properties": { "descriptor": { "$ref": "inverse-descriptor.v1.schema.json" }, "forward_receipt_hash": { "$ref": "#/$defs/sha256" } } },
+    "guards": { "type": "object", "additionalProperties": false, "required": ["tenant", "allowed_columns"], "properties": { "tenant": { "$ref": "#/$defs/columnValue" }, "allowed_columns": { "type": "array", "items": { "$ref": "#/$defs/identifier" }, "maxItems": 256, "uniqueItems": true } } },
+    "evidence": { "type": "object", "required": ["bundle_id", "query_fingerprint", "items"], "properties": { "bundle_id": { "type": "string", "minLength": 1 }, "query_fingerprint": { "$ref": "#/$defs/sha256" }, "items": { "type": "array", "maxItems": 100 } } },
+    "approval": { "type": "object", "required": ["status", "mode"], "properties": { "status": { "enum": ["pending", "approved", "rejected", "canceled"] }, "mode": { "enum": ["human", "operator"] }, "required_role": { "type": "string", "minLength": 1 }, "required_approvals": { "type": "integer", "minimum": 1, "maximum": 10 } } },
+    "writeback": { "type": "object", "additionalProperties": false, "required": ["status", "mode", "executor"], "properties": { "status": { "const": "not_applied" }, "mode": { "const": "trusted_worker_required" }, "executor": { "const": "sql_update" } } },
+    "source_database_mutated": { "const": false },
+    "integrity": { "type": "object", "additionalProperties": false, "required": ["proposal_hash"], "properties": { "proposal_hash": { "$ref": "#/$defs/sha256" } } },
+    "created_at": { "type": "string", "format": "date-time" }
+  },
+  "$defs": {
+    "identifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" }, "sha256": { "type": "string", "pattern": "^sha256:.+" }, "scalar": { "type": ["string", "number", "boolean", "null"] },
+    "record": { "type": "object", "propertyNames": { "$ref": "#/$defs/identifier" }, "additionalProperties": { "$ref": "#/$defs/scalar" }, "maxProperties": 256 },
+    "columnValue": { "type": "object", "additionalProperties": false, "required": ["column", "value"], "properties": { "column": { "$ref": "#/$defs/identifier" }, "value": { "$ref": "#/$defs/scalar" } } }
+  }
+}

package/schemas/execution-receipt.v2.schema.json

@@ -0,0 +1,106 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.execution-receipt.v2.schema.json",
+  "title": "Synapsor Execution Receipt v2",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "writeback_job_id",
+    "proposal_id",
+    "proposal_hash",
+    "approval_id",
+    "runner_id",
+    "operation",
+    "receipt_authority",
+    "status",
+    "target",
+    "rows_affected",
+    "idempotency_key",
+    "source_database_mutated",
+    "safe_outcome_code",
+    "executed_at",
+    "receipt_hash"
+  ],
+  "properties": {
+    "schema_version": { "const": "synapsor.execution-receipt.v2" },
+    "writeback_job_id": { "type": "string", "minLength": 1 },
+    "proposal_id": { "type": "string", "minLength": 1 },
+    "proposal_hash": { "$ref": "#/$defs/sha256" },
+    "approval_id": { "type": "string", "minLength": 1 },
+    "runner_id": { "type": "string", "minLength": 1 },
+    "operation": { "enum": ["single_row_update", "single_row_insert", "single_row_delete"] },
+    "receipt_authority": { "enum": ["source_db", "runner_ledger"] },
+    "status": { "enum": ["applied", "conflict", "failed", "canceled", "already_applied", "reconciliation_required"] },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["source_id", "schema", "table", "identity"],
+      "properties": {
+        "source_id": { "type": "string", "minLength": 1 },
+        "schema": { "$ref": "#/$defs/safeIdentifier" },
+        "table": { "$ref": "#/$defs/safeIdentifier" },
+        "identity": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/columnValue" },
+          "minItems": 1,
+          "maxItems": 8
+        }
+      }
+    },
+    "rows_affected": { "type": "integer", "minimum": 0, "maximum": 1 },
+    "idempotency_key": { "type": "string", "minLength": 1 },
+    "before_digest": { "$ref": "#/$defs/sha256" },
+    "after_digest": { "$ref": "#/$defs/sha256" },
+    "tombstone_digest": { "$ref": "#/$defs/sha256" },
+    "source_database_mutated": { "type": "boolean" },
+    "safe_outcome_code": { "$ref": "#/$defs/code" },
+    "safe_error_code": { "$ref": "#/$defs/code" },
+    "executed_at": { "type": "string", "format": "date-time" },
+    "receipt_hash": { "$ref": "#/$defs/sha256" },
+    "reconciliation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["intent_id", "reason"],
+      "properties": {
+        "intent_id": { "type": "string", "minLength": 1 },
+        "reason": { "type": "string", "minLength": 1 }
+      }
+    }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "status": { "const": "reconciliation_required" } } },
+      "then": { "required": ["reconciliation"] }
+    },
+    {
+      "if": {
+        "properties": {
+          "operation": { "const": "single_row_delete" },
+          "status": { "enum": ["applied", "already_applied"] }
+        },
+        "required": ["operation", "status"]
+      },
+      "then": { "required": ["tombstone_digest"] }
+    },
+    {
+      "if": { "properties": { "rows_affected": { "minimum": 1 } } },
+      "then": { "properties": { "source_database_mutated": { "const": true } } }
+    }
+  ],
+  "$defs": {
+    "safeIdentifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "code": { "type": "string", "pattern": "^[A-Z][A-Z0-9_]*$" },
+    "scalar": { "type": ["string", "number", "boolean", "null"] },
+    "columnValue": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["column", "value"],
+      "properties": {
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "value": { "$ref": "#/$defs/scalar" }
+      }
+    }
+  }
+}