@synapsor/runner 1.4.1 → 1.4.12

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 1.4.12 (prepared, not published)
+
+### Runtime-store smoke-call consistency
+
+- Fixes BUG-017: `smoke call` now lets the MCP runtime resolve storage from the
+  complete config instead of injecting a local SQLite `ProposalStore`.
+- In `runtime_store` mode, proposal, evidence, query-audit, event, and replay
+  records land in the authoritative shared Postgres ledger and are visible to
+  other Runner processes and normal approve/apply commands.
+- Shared-ledger failures return a redacted, retryable availability result with
+  a nonzero CLI status and never create a local fallback proposal.
+- Keeps local SQLite and mirror modes unchanged. The source database still
+  remains untouched until external approval and guarded apply.
+- Adds focused no-fallback coverage and a disposable two-process fleet proof
+  covering ownership, approval/apply, one source receipt, replay, and safe
+  ledger unavailability.
+- Stages only `@synapsor/runner@1.4.12`; `@synapsor/dsl` remains `1.4.1` and
+  `@synapsor/spec` remains `1.4.0`. Nothing is published by this change.
+
 ## 1.4.1 (prepared, not published)
 
 ### Canonical Bounded-Set Digest Verification

package/README.md

@@ -215,6 +215,10 @@ remains the default. See
 [Production](docs/production.md) and the
 [Runner Config Reference](docs/runner-config-reference.md).
 
+`smoke call` honors `runtime_store`: artifacts go to shared Postgres; failures
+never fall back to SQLite. `--store` is compatibility plumbing. Requires
+`1.4.12`+.
+
 For a small multi-tenant fleet, bind every capability context to verified HTTP
 claims, use `jwt_asymmetric` session auth, and share a bounded Postgres
 `runtime_store`. Never assume a global `http_claims` setting overrides an

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAoP,KAAK,WAAW,EAA0H,MAAM,6BAA6B,CAAC;AAIza,OAAO,EAgBL,KAAK,qBAAqB,EAK3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAgI,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAuD,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAElV,OAAO,EAQL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAUL,KAAK,yBAAyB,EAE/B,MAAM,8BAA8B,CAAC;AAyUtC,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA6D1D;AA0FD,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA0YjB;AAgmGD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAS/H;AAs4CD,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,yBAAyB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAKxH;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,yBAAyB,EACtC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,EAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,CAgH9D"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAoP,KAAK,WAAW,EAA0H,MAAM,6BAA6B,CAAC;AAIza,OAAO,EAgBL,KAAK,qBAAqB,EAK3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAgI,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAuD,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAElV,OAAO,EAQL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAUL,KAAK,yBAAyB,EAE/B,MAAM,8BAA8B,CAAC;AAyUtC,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA6D1D;AA0FD,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA2YjB;AAqmGD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAS/H;AAs4CD,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,yBAAyB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAKxH;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,yBAAyB,EACtC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,EAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,CAgH9D"}

package/dist/runner.mjs

@@ -16939,7 +16939,7 @@ function isRecord7(value) {
 // apps/runner/package.json
 var package_default = {
   name: "@synapsor/runner",
-  version: "1.4.1",
+  version: "1.4.12",
   description: "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
   license: "Apache-2.0",
   type: "module",
@@ -17957,6 +17957,7 @@ async function runInitWizard(args, options = {}) {
 `);
     const smoke2 = await maybeRunGeneratedSmokeCall({
       config: generated.config,
+      configPath: outputPath,
       env: options.env ?? process2.env,
       input: { [lookupArg]: smokeObjectId },
       readUrlEnv: configDatabaseUrlEnv,
@@ -18399,14 +18400,18 @@ async function maybeRunGeneratedSmokeCall(input) {
       ""
     ].join("\n");
   }
-  const store = new ProposalStore(input.storePath);
-  const runtime = createMcpRuntime(input.config, { store, env: input.env, readRow: input.readRow });
+  const runtime = createMcpRuntime(input.config, { storePath: input.storePath, env: input.env, readRow: input.readRow });
   try {
     const result = await runtime.callTool(input.toolName, input.input);
     return [
-      "Smoke call ran successfully.",
+      result.ok === false ? "Smoke call attempted but did not pass." : "Smoke call ran successfully.",
       "",
-      formatSmokeCallResult(input.toolName, input.input, result, input.storePath)
+      formatSmokeCallResult(input.toolName, input.input, result, {
+        configPath: input.configPath,
+        storePath: input.storePath,
+        storeAuthority: "local_sqlite",
+        sharedPostgresSchema: "synapsor_runner"
+      })
     ].join("\n");
   } catch (error) {
     const message2 = error instanceof Error ? error.message : String(error);
@@ -23486,8 +23491,7 @@ async function smokeCall(args) {
   const storePath = optionalArg(args, "--store") ?? process2.env.SYNAPSOR_LOCAL_STORE ?? defaultStorePath;
   const config = await readRuntimeConfig(configPath);
   const env = envWithDemoDefaults(config, configPath);
-  const store = new ProposalStore(storePath);
-  const runtime = createMcpRuntime(config, { store, env });
+  const runtime = createMcpRuntime(config, { storePath, env });
   try {
     const tools2 = runtime.listTools();
     const requestedTool = firstPositional(args);
@@ -23499,13 +23503,28 @@ async function smokeCall(args) {
     if (!capability && config.mode !== "cloud") throw new Error(`capability not found in ${configPath}: ${toolName}`);
     const input = capability ? await smokeToolInput(args, capability) : await smokeInputFromArgs(args);
     const result = await runtime.callTool(toolName, input);
+    const ok = result.ok !== false;
+    const storeAuthority = config.storage?.shared_postgres?.mode === "runtime_store" ? "shared_postgres" : "local_sqlite";
     if (args.includes("--json")) {
-      process2.stdout.write(`${JSON.stringify({ ok: true, tool: toolName, input, result, store_path: storePath }, null, 2)}
+      process2.stdout.write(`${JSON.stringify({
+        ok,
+        tool: toolName,
+        input,
+        result,
+        store_path: storePath,
+        store_authority: storeAuthority,
+        ...storeAuthority === "shared_postgres" ? { shared_postgres_schema: config.storage?.shared_postgres?.schema ?? "synapsor_runner" } : {}
+      }, null, 2)}
 `);
     } else {
-      process2.stdout.write(formatSmokeCallResult(toolName, input, result, storePath));
+      process2.stdout.write(formatSmokeCallResult(toolName, input, result, {
+        configPath,
+        storePath,
+        storeAuthority,
+        sharedPostgresSchema: config.storage?.shared_postgres?.schema ?? "synapsor_runner"
+      }));
     }
-    return 0;
+    return ok ? 0 : 1;
   } finally {
     await runtime.close();
   }
@@ -23722,13 +23741,25 @@ async function smokeInputFromArgs(args, capability) {
   if (sample) return {};
   return {};
 }
-function formatSmokeCallResult(toolName, input, result, storePath) {
-  const evidenceId = stringField(result, "evidence_bundle_id");
-  const proposalId = stringField(result, "proposal_id");
+function formatSmokeCallResult(toolName, input, result, topology) {
+  const proposal = isRecord8(result.proposal) ? result.proposal : void 0;
+  const evidence2 = isRecord8(result.evidence) ? result.evidence : void 0;
+  const error = isRecord8(result.error) ? result.error : void 0;
+  const evidenceId = stringField(result, "evidence_bundle_id") ?? (evidence2 ? stringField(evidence2, "bundle_id") : void 0);
+  const proposalId = stringField(result, "proposal_id") ?? (proposal ? stringField(proposal, "id") : void 0);
   const replayResource = stringField(result, "replay_resource");
   const sourceChanged = result.source_database_changed === true || result.source_database_mutated === true;
+  const ok = result.ok !== false;
+  const storeLines = topology.storeAuthority === "shared_postgres" ? [
+    "Authoritative ledger:",
+    `shared Postgres (${topology.sharedPostgresSchema})`,
+    "",
+    "Local --store path:",
+    `${topology.storePath} (compatibility path only; no authoritative smoke records are written here)`,
+    ""
+  ] : ["Local ledger:", topology.storePath, ""];
   const lines = [
-    "Synapsor smoke call: ok",
+    `Synapsor smoke call: ${ok ? "ok" : "failed"}`,
     "",
     "Tool:",
     toolName,
@@ -23741,20 +23772,32 @@ function formatSmokeCallResult(toolName, input, result, storePath) {
     "",
     "Evidence:",
     evidenceId || "(not returned)",
-    ""
+    "",
+    ...storeLines
   ];
+  if (!ok) {
+    lines.push("Error:", error ? stringField(error, "code") ?? "UNCLASSIFIED" : "UNCLASSIFIED");
+    if (error?.retryable === true) {
+      lines.push("Retryable:", "yes");
+      const retryAfter = error.retry_after_ms;
+      if (typeof retryAfter === "number") lines.push("Retry after:", `${retryAfter} ms`);
+    }
+    return `${lines.join("\n")}
+`;
+  }
   if (proposalId) {
     lines.push("Proposal:", proposalId, "", "Replay:", replayResource || `synapsor://replay/replay_${proposalId}`, "");
   }
+  const storeSuffix = topology.storeAuthority === "shared_postgres" ? ` --config ${topology.configPath} --store ${topology.storePath}` : ` --store ${topology.storePath}`;
   lines.push("Next:");
-  if (evidenceId) lines.push(`  ${cliCommandName()} evidence show ${evidenceId} --store ${storePath}`);
+  if (evidenceId) lines.push(`  ${cliCommandName()} evidence show ${evidenceId}${storeSuffix}`);
   if (proposalId) {
-    lines.push(`  ${cliCommandName()} proposals show ${proposalId} --store ${storePath}`);
-    lines.push(`  ${cliCommandName()} proposals approve ${proposalId} --store ${storePath}`);
-    lines.push(`  ${cliCommandName()} apply ${proposalId} --store ${storePath}`);
-    lines.push(`  ${cliCommandName()} replay show --proposal ${proposalId} --store ${storePath}`);
+    lines.push(`  ${cliCommandName()} proposals show ${proposalId}${storeSuffix}`);
+    lines.push(`  ${cliCommandName()} proposals approve ${proposalId}${storeSuffix}`);
+    lines.push(`  ${cliCommandName()} apply ${proposalId}${storeSuffix}`);
+    lines.push(`  ${cliCommandName()} replay show --proposal ${proposalId}${storeSuffix}`);
   } else if (evidenceId) {
-    lines.push(`  ${cliCommandName()} query-audit list --evidence ${evidenceId} --store ${storePath}`);
+    lines.push(`  ${cliCommandName()} query-audit list --evidence ${evidenceId}${storeSuffix}`);
   }
   return `${lines.join("\n")}
 `;

package/docs/getting-started-own-database.md

@@ -368,7 +368,14 @@ npx -y -p @synapsor/runner synapsor-runner smoke call --config ./synapsor.runner
 
 `smoke call` uses the same runtime as the MCP server. It records evidence and
 query audit for read tools, or creates a proposal for proposal tools, then
-prints the commands to inspect evidence/proposals/replay from the local store.
+prints the commands to inspect evidence/proposals/replay. With the default
+storage topology those records are in local SQLite. With
+`storage.shared_postgres.mode = "runtime_store"`, Runner `1.4.12` and later
+write them to the authoritative shared Postgres ledger and include `--config`
+in follow-up commands. The supplied `--store` path is compatibility plumbing
+for those CLI commands; it does not receive an orphan proposal copy. If the
+shared ledger is unavailable, `smoke call` fails safely and does not fall back
+to SQLite.
 
 The snippets contain the local command and args. They must not contain database
 URLs, passwords, approval tools, commit tools, or write credentials.

package/docs/production.md

@@ -340,6 +340,16 @@ from `url_env`, auto-runs the shared-ledger migration, and serializes runtime
 mutations with a transaction-scoped advisory lock. The MCP tools still expose no
 database URLs or write credentials to the model.
 
+`smoke call` uses the same runtime-store resolver as MCP serving. Its evidence,
+query audit, proposal, events, and replay records therefore land directly in
+the shared Postgres ledger and are immediately visible to another Runner using
+the same config. `--store` remains accepted so the printed follow-up CLI
+commands have a compatibility/bridge path, but that SQLite path is not an
+authoritative copy and normally is not created by the smoke call. Shared-ledger
+connection failure returns the safe availability error and a nonzero exit; it
+never causes a local fallback. This consistency fix is present in Runner
+`1.4.12` and later.
+
 `runtime_store` covers MCP serving, CLI approval/apply, and supervised worker
 runs. For CLI mutations, Runner restores the shared ledger into a temporary
 local store while holding the Postgres advisory lock, runs the existing local

package/docs/release-notes.md

@@ -10,6 +10,24 @@ npx -y -p @synapsor/runner synapsor-runner demo --quick
 The OSS runner command is `synapsor-runner`. The `synapsor` command is reserved
 for the Synapsor Cloud CLI.
 
+## 1.4.12 (prepared, not published)
+
+### Runtime-store smoke-call consistency
+
+- Fixes BUG-017, where `smoke call` could put proposal artifacts in the
+  requested local SQLite path even though the config selected authoritative
+  shared Postgres `runtime_store` mode.
+- Smoke calls now use the same runtime storage resolver as MCP tool calls. A
+  second Runner can immediately inspect the proposal, evidence, query audit,
+  events, and replay from the shared ledger.
+- Shared-ledger unavailability fails closed with a safe retryable error,
+  nonzero exit status, no credential leakage, and no local orphan proposal.
+- Local SQLite and mirror modes retain their existing behavior; no source row
+  changes before the normal external approval/apply path.
+
+Prepared package version: `@synapsor/runner@1.4.12`.
+`@synapsor/dsl` remains `1.4.1`; `@synapsor/spec` remains `1.4.0`.
+
 ## 1.4.1 (prepared, not published)
 
 ### Bounded-set digest compatibility patch

package/docs/troubleshooting-first-run.md

@@ -12,6 +12,26 @@ Use JSON for automation:
 npx -y -p @synapsor/runner synapsor-runner doctor --first-run --json
 ```
 
+## Smoke Proposal Missing From Another Runner
+
+What happened:
+
+`smoke call` returned a proposal id, but `proposals list --config ...` on a
+second Runner cannot find it.
+
+Fix:
+
+1. Verify `synapsor-runner --version` is `1.4.12` or later.
+2. Confirm both commands use a config whose
+   `storage.shared_postgres.mode` is `runtime_store` and whose `url_env` and
+   `schema` identify the same ledger.
+3. Run `store shared-postgres status --url-env <ENV> --schema <SCHEMA>`.
+
+In `runtime_store` mode, `--store` is not the authoritative ledger. Runner does
+not fall back to that SQLite path when shared Postgres is unavailable. Versions
+before `1.4.12` could orphan smoke-call artifacts locally; recreate that test
+proposal after upgrading.
+
 ## Docker Missing
 
 What happened:

package/examples/runner-fleet/seed/postgres.sql

@@ -64,6 +64,7 @@ INSERT INTO public.invoices (id, tenant_id, status, late_fee_cents, waiver_reaso
   ('INV-ACME', 'acme', 'overdue', 2500, NULL, '2026-07-12T12:00:00Z'),
   ('INV-GLOBEX', 'globex', 'overdue', 3100, NULL, '2026-07-12T12:00:00Z'),
   ('INV-RATECO', 'rateco', 'overdue', 900, NULL, '2026-07-12T12:00:00Z'),
+  ('INV-SMOKE-CALL', 'acme', 'overdue', 2100, NULL, '2026-07-12T12:00:00Z'),
   ('INV-BATCH-A', 'acme', 'overdue', 1100, NULL, '2026-07-12T12:00:00Z'),
   ('INV-BATCH-B', 'acme', 'overdue', 1300, NULL, '2026-07-12T12:00:00Z'),
   ('INV-QUORUM-RACE', 'acme', 'overdue', 1400, NULL, '2026-07-12T12:00:00Z'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synapsor/runner",
-  "version": "1.4.1",
+  "version": "1.4.12",
   "description": "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
   "license": "Apache-2.0",
   "type": "module",