@synapsor/runner 1.4.1 → 1.4.121

package/examples/support-plan-credit/synapsor.contract-tests.json

@@ -0,0 +1,53 @@
+{
+  "$schema": "../../schemas/synapsor.contract-tests.schema.json",
+  "version": 1,
+  "name": "support-plan-credit contract boundary",
+  "tests": [
+    {
+      "id": "operator-controls-stay-outside-mcp",
+      "kind": "operator_boundary",
+      "capability": "support.propose_plan_credit"
+    },
+    {
+      "id": "private-customer-fields-stay-hidden",
+      "kind": "hide_fields",
+      "capability": "support.inspect_customer",
+      "args": { "customer_id": "CUS-3001" },
+      "trusted_context": { "tenant_id": "acme", "principal": "contract_test" },
+      "fields": ["card_token", "raw_payment_method", "internal_risk_score", "private_notes"]
+    },
+    {
+      "id": "credit-amount-is-bounded",
+      "kind": "argument_constraint",
+      "capability": "support.propose_plan_credit_record",
+      "argument": "credit_cents",
+      "expected": { "minimum": 1, "maximum": 50000 }
+    },
+    {
+      "id": "trusted-tenant-can-read-own-customer",
+      "kind": "tool_allow",
+      "capability": "support.inspect_customer",
+      "args": { "customer_id": "CUS-3001" },
+      "trusted_context": { "tenant_id": "acme", "principal": "contract_test" }
+    },
+    {
+      "id": "trusted-tenant-cannot-read-other-customer",
+      "kind": "tool_deny",
+      "capability": "support.inspect_customer",
+      "args": { "customer_id": "CUS-9001" },
+      "trusted_context": { "tenant_id": "acme", "principal": "contract_test" },
+      "expected_code": "NOT_FOUND_IN_TENANT"
+    },
+    {
+      "id": "proposal-does-not-write-before-approval",
+      "kind": "source_unchanged_before_approval",
+      "capability": "support.propose_plan_credit",
+      "args": {
+        "customer_id": "CUS-3001",
+        "credit_cents": 10000,
+        "reason": "synthetic conformance check"
+      },
+      "trusted_context": { "tenant_id": "acme", "principal": "contract_test" }
+    }
+  ]
+}

package/fixtures/dsl/aggregate-read.synapsor.sql

@@ -0,0 +1,21 @@
+CREATE AGENT CONTEXT finance_operator
+  BIND tenant_id FROM ENVIRONMENT SYNAPSOR_TENANT_ID REQUIRED
+  BIND principal FROM ENVIRONMENT SYNAPSOR_PRINCIPAL REQUIRED
+  TENANT BINDING tenant_id
+  PRINCIPAL BINDING principal
+END
+
+CREATE CAPABILITY billing.overdue_balance_total
+  DESCRIPTION 'Return one suppressed overdue-balance aggregate for the trusted tenant.'
+  RETURNS HINT 'Returns one scalar or a suppression result; never member rows.'
+  USING CONTEXT finance_operator
+  SOURCE local_postgres
+  ON public.invoices
+  PRIMARY KEY id
+  TENANT KEY tenant_id
+  AGGREGATE READ SUM balance_cents
+  SELECT WHERE status = 'overdue'
+  MIN GROUP SIZE 5
+  KEEP OUT customer_email, private_notes
+  REQUIRE EVIDENCE
+END

package/fixtures/dsl/bounded-set-multi-term.synapsor.sql

@@ -0,0 +1,30 @@
+CREATE AGENT CONTEXT local_operator
+  BIND tenant_id FROM ENVIRONMENT SYNAPSOR_TENANT_ID REQUIRED
+  BIND principal FROM ENVIRONMENT SYNAPSOR_PRINCIPAL REQUIRED
+  TENANT BINDING tenant_id
+  PRINCIPAL BINDING principal
+END
+
+CREATE CAPABILITY cases.close_high_risk
+  DESCRIPTION 'Close active high-risk support cases within reviewed row and value caps.'
+  RETURNS HINT 'Returns a proposal for the exact reviewed set; source rows remain unchanged.'
+  USING CONTEXT local_operator
+  SOURCE support_db
+  ON public.support_cases
+  PRIMARY KEY id
+  TENANT KEY tenant_id
+  CONFLICT GUARD version
+  LOOKUP reason BY id
+  ARG reason STRING REQUIRED MAX LENGTH 100
+  ALLOW READ id, tenant_id, risk_level, case_status, exposure_cents, version
+  REQUIRE EVIDENCE
+  PROPOSE ACTION close_high_risk UPDATE SET
+  SELECT WHERE risk_level = 'high' AND case_status = 'active'
+  MAX ROWS 10
+  MAX TOTAL exposure_cents BEFORE 50000
+  ALLOW WRITE case_status
+  PATCH case_status = 'closed'
+  ADVANCE VERSION version USING INTEGER INCREMENT
+  APPROVAL ROLE support_manager
+  WRITEBACK DIRECT SQL
+END

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synapsor/runner",
-  "version": "1.4.1",
+  "version": "1.4.121",
   "description": "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
   "license": "Apache-2.0",
   "type": "module",
@@ -62,7 +62,10 @@
     "@modelcontextprotocol/sdk": "1.29.0",
     "jose": "6.2.3",
     "mysql2": "^3.11.0",
+    "pdf-lib": "1.17.1",
     "pg": "^8.13.0",
+    "vscode-languageserver": "9.0.1",
+    "vscode-languageserver-textdocument": "1.0.12",
     "zod": "^3.25.0"
   },
   "devDependencies": {

package/schemas/synapsor.contract-tests.schema.json

@@ -0,0 +1,44 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.contract-tests.schema.json",
+  "title": "Synapsor adopter contract conformance manifest",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["version", "tests"],
+  "properties": {
+    "$schema": { "type": "string", "minLength": 1 },
+    "version": { "const": 1 },
+    "name": { "type": "string", "minLength": 1 },
+    "tests": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "kind", "capability"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1 },
+          "kind": {
+            "enum": ["tool_allow", "tool_deny", "hide_fields", "argument_constraint", "transition_guard", "set_cap", "source_unchanged_before_approval", "operator_boundary"]
+          },
+          "capability": { "type": "string", "minLength": 1 },
+          "args": { "type": "object" },
+          "trusted_context": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["tenant_id", "principal"],
+            "properties": {
+              "tenant_id": { "type": "string", "minLength": 1 },
+              "principal": { "type": "string", "minLength": 1 },
+              "provenance": { "enum": ["environment", "static_dev", "http_claims", "cloud_session"] }
+            }
+          },
+          "expected_code": { "type": "string", "minLength": 1 },
+          "fields": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 }, "uniqueItems": true },
+          "argument": { "type": "string", "minLength": 1 },
+          "expected": { "type": "object" }
+        }
+      }
+    }
+  }
+}

package/schemas/synapsor.runner.schema.json

@@ -176,6 +176,23 @@
         "token_env": { "$ref": "#/$defs/env_name" }
       }
     },
+    "graduated_trust": {
+      "description": "Disabled-by-default operator criteria for bounded policy recommendations. Recommendations never activate contracts.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean", "default": false },
+        "kill_switch": { "type": "boolean", "default": false },
+        "workspace_id": { "type": "string", "minLength": 1 },
+        "project_id": { "type": "string", "minLength": 1 },
+        "criteria": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/graduated_trust_criterion" }
+        }
+      }
+    },
     "operator_identity": {
       "description": "Operator identity used by approve, reject, and apply. signed_key verifies a registered key; jwt_oidc verifies asymmetric JWT claims and Runner-attests the decision; dev_env is local-development compatibility only.",
       "type": "object",
@@ -304,6 +321,28 @@
         "window_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 }
       }
     },
+    "graduated_trust_criterion": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "capability", "policy", "field", "minimum_human_reviews", "window_days",
+        "maximum_rejection_rate", "maximum_conflict_rate", "maximum_failure_rate",
+        "maximum_revert_rate", "maximum_threshold_increase", "absolute_ceiling"
+      ],
+      "properties": {
+        "capability": { "$ref": "#/$defs/qualified_name" },
+        "policy": { "type": "string", "minLength": 1 },
+        "field": { "$ref": "#/$defs/identifier" },
+        "minimum_human_reviews": { "type": "integer", "minimum": 10, "maximum": 10000 },
+        "window_days": { "type": "integer", "minimum": 1, "maximum": 365 },
+        "maximum_rejection_rate": { "type": "number", "minimum": 0, "maximum": 1 },
+        "maximum_conflict_rate": { "type": "number", "minimum": 0, "maximum": 1 },
+        "maximum_failure_rate": { "type": "number", "minimum": 0, "maximum": 1 },
+        "maximum_revert_rate": { "type": "number", "minimum": 0, "maximum": 1 },
+        "maximum_threshold_increase": { "type": "number", "exclusiveMinimum": 0 },
+        "absolute_ceiling": { "type": "number", "exclusiveMinimum": 0 }
+      }
+    },
     "env_name": {
       "type": "string",
       "pattern": "^[A-Z_][A-Z0-9_]*$"
@@ -444,14 +483,27 @@
     "capability": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["name", "kind", "source", "target", "args", "lookup", "visible_columns"],
+      "required": ["name", "kind", "source", "target", "args"],
+      "allOf": [
+        {
+          "if": { "properties": { "kind": { "const": "aggregate_read" } }, "required": ["kind"] },
+          "then": { "required": ["aggregate", "evidence"] },
+          "else": {
+            "required": ["lookup", "visible_columns"],
+            "properties": {
+              "args": { "minProperties": 1 },
+              "visible_columns": { "minItems": 1 }
+            }
+          }
+        }
+      ],
       "properties": {
         "name": {
           "$ref": "#/$defs/qualified_name"
         },
         "kind": {
           "type": "string",
-          "enum": ["read", "proposal"]
+          "enum": ["read", "aggregate_read", "proposal"]
         },
         "description": {
           "description": "Model-facing text shown in MCP tools/list. Describe when to use the tool.",
@@ -480,7 +532,7 @@
         },
         "args": {
           "type": "object",
-          "minProperties": 1,
+          "minProperties": 0,
           "additionalProperties": {
             "$ref": "#/$defs/arg"
           }
@@ -498,7 +550,7 @@
         },
         "visible_columns": {
           "type": "array",
-          "minItems": 1,
+          "minItems": 0,
           "items": {
             "$ref": "#/$defs/identifier"
           }
@@ -510,6 +562,9 @@
           "type": "integer",
           "minimum": 1
         },
+        "aggregate": {
+          "$ref": "#/$defs/aggregate_read"
+        },
         "patch": {
           "type": "object",
           "additionalProperties": {
@@ -771,6 +826,39 @@
         }
       }
     },
+    "aggregate_read": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["function", "minimum_group_size"],
+      "properties": {
+        "function": { "enum": ["count", "sum", "avg"] },
+        "count_mode": { "enum": ["rows", "non_null"] },
+        "column": { "$ref": "#/$defs/identifier" },
+        "selection": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["all"],
+          "properties": {
+            "all": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 8,
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["column", "operator", "value"],
+                "properties": {
+                  "column": { "$ref": "#/$defs/identifier" },
+                  "operator": { "const": "eq" },
+                  "value": { "$ref": "#/$defs/scalar" }
+                }
+              }
+            }
+          }
+        },
+        "minimum_group_size": { "type": "integer", "minimum": 2, "maximum": 1000000 }
+      }
+    },
     "numeric_bound": {
       "type": "object",
       "additionalProperties": false,