@synapsor/runner 1.4.12 → 1.4.122

package/schemas/synapsor.runner.schema.json

@@ -176,6 +176,23 @@
         "token_env": { "$ref": "#/$defs/env_name" }
       }
     },
+    "graduated_trust": {
+      "description": "Disabled-by-default operator criteria for bounded policy recommendations. Recommendations never activate contracts.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "enabled": { "type": "boolean", "default": false },
+        "kill_switch": { "type": "boolean", "default": false },
+        "workspace_id": { "type": "string", "minLength": 1 },
+        "project_id": { "type": "string", "minLength": 1 },
+        "criteria": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/graduated_trust_criterion" }
+        }
+      }
+    },
     "operator_identity": {
       "description": "Operator identity used by approve, reject, and apply. signed_key verifies a registered key; jwt_oidc verifies asymmetric JWT claims and Runner-attests the decision; dev_env is local-development compatibility only.",
       "type": "object",
@@ -304,6 +321,28 @@
         "window_seconds": { "type": "integer", "minimum": 1, "maximum": 86400 }
       }
     },
+    "graduated_trust_criterion": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "capability", "policy", "field", "minimum_human_reviews", "window_days",
+        "maximum_rejection_rate", "maximum_conflict_rate", "maximum_failure_rate",
+        "maximum_revert_rate", "maximum_threshold_increase", "absolute_ceiling"
+      ],
+      "properties": {
+        "capability": { "$ref": "#/$defs/qualified_name" },
+        "policy": { "type": "string", "minLength": 1 },
+        "field": { "$ref": "#/$defs/identifier" },
+        "minimum_human_reviews": { "type": "integer", "minimum": 10, "maximum": 10000 },
+        "window_days": { "type": "integer", "minimum": 1, "maximum": 365 },
+        "maximum_rejection_rate": { "type": "number", "minimum": 0, "maximum": 1 },
+        "maximum_conflict_rate": { "type": "number", "minimum": 0, "maximum": 1 },
+        "maximum_failure_rate": { "type": "number", "minimum": 0, "maximum": 1 },
+        "maximum_revert_rate": { "type": "number", "minimum": 0, "maximum": 1 },
+        "maximum_threshold_increase": { "type": "number", "exclusiveMinimum": 0 },
+        "absolute_ceiling": { "type": "number", "exclusiveMinimum": 0 }
+      }
+    },
     "env_name": {
       "type": "string",
       "pattern": "^[A-Z_][A-Z0-9_]*$"
@@ -444,14 +483,27 @@
     "capability": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["name", "kind", "source", "target", "args", "lookup", "visible_columns"],
+      "required": ["name", "kind", "source", "target", "args"],
+      "allOf": [
+        {
+          "if": { "properties": { "kind": { "const": "aggregate_read" } }, "required": ["kind"] },
+          "then": { "required": ["aggregate", "evidence"] },
+          "else": {
+            "required": ["lookup", "visible_columns"],
+            "properties": {
+              "args": { "minProperties": 1 },
+              "visible_columns": { "minItems": 1 }
+            }
+          }
+        }
+      ],
       "properties": {
         "name": {
           "$ref": "#/$defs/qualified_name"
         },
         "kind": {
           "type": "string",
-          "enum": ["read", "proposal"]
+          "enum": ["read", "aggregate_read", "proposal"]
         },
         "description": {
           "description": "Model-facing text shown in MCP tools/list. Describe when to use the tool.",
@@ -480,7 +532,7 @@
         },
         "args": {
           "type": "object",
-          "minProperties": 1,
+          "minProperties": 0,
           "additionalProperties": {
             "$ref": "#/$defs/arg"
           }
@@ -498,7 +550,7 @@
         },
         "visible_columns": {
           "type": "array",
-          "minItems": 1,
+          "minItems": 0,
           "items": {
             "$ref": "#/$defs/identifier"
           }
@@ -510,6 +562,9 @@
           "type": "integer",
           "minimum": 1
         },
+        "aggregate": {
+          "$ref": "#/$defs/aggregate_read"
+        },
         "patch": {
           "type": "object",
           "additionalProperties": {
@@ -771,6 +826,39 @@
         }
       }
     },
+    "aggregate_read": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["function", "minimum_group_size"],
+      "properties": {
+        "function": { "enum": ["count", "sum", "avg"] },
+        "count_mode": { "enum": ["rows", "non_null"] },
+        "column": { "$ref": "#/$defs/identifier" },
+        "selection": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["all"],
+          "properties": {
+            "all": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 8,
+              "items": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["column", "operator", "value"],
+                "properties": {
+                  "column": { "$ref": "#/$defs/identifier" },
+                  "operator": { "const": "eq" },
+                  "value": { "$ref": "#/$defs/scalar" }
+                }
+              }
+            }
+          }
+        },
+        "minimum_group_size": { "type": "integer", "minimum": 2, "maximum": 1000000 }
+      }
+    },
     "numeric_bound": {
       "type": "object",
       "additionalProperties": false,

package/schemas/writeback-job.v1.schema.json

@@ -49,6 +49,7 @@
       }
     },
     "tenant_guard": { "$ref": "#/$defs/columnValue" },
+    "principal_scope": { "$ref": "#/$defs/principalScope" },
     "allowed_columns": {
       "type": "array",
       "items": { "$ref": "#/$defs/safeIdentifier" },
@@ -116,6 +117,19 @@
         "column": { "$ref": "#/$defs/safeIdentifier" },
         "value": { "$ref": "#/$defs/scalar" }
       }
+    },
+    "principalScope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema_version", "column", "binding", "provider", "value_fingerprint"],
+      "properties": {
+        "schema_version": { "const": "synapsor.principal-scope.v1" },
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "binding": { "$ref": "#/$defs/safeIdentifier" },
+        "provider": { "enum": ["environment", "http_claims", "cloud_session", "static_dev"] },
+        "value_fingerprint": { "type": "string", "pattern": "^sha256:.+" },
+        "value": { "$ref": "#/$defs/scalar" }
+      }
     }
   }
 }

package/schemas/writeback-job.v2.schema.json

@@ -54,6 +54,7 @@
       }
     },
     "tenant_guard": { "$ref": "#/$defs/columnValue" },
+    "principal_scope": { "$ref": "#/$defs/principalScope" },
     "allowed_columns": {
       "type": "array",
       "items": { "$ref": "#/$defs/safeIdentifier" },
@@ -173,6 +174,19 @@
         "value": { "$ref": "#/$defs/scalar" }
       }
     },
+    "principalScope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["schema_version", "column", "binding", "provider", "value_fingerprint"],
+      "properties": {
+        "schema_version": { "const": "synapsor.principal-scope.v1" },
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "binding": { "$ref": "#/$defs/safeIdentifier" },
+        "provider": { "enum": ["environment", "http_claims", "cloud_session", "static_dev"] },
+        "value_fingerprint": { "$ref": "#/$defs/sha256" },
+        "value": { "$ref": "#/$defs/scalar" }
+      }
+    },
     "conflictGuard": {
       "oneOf": [
         {

package/schemas/writeback-job.v3.schema.json

@@ -16,6 +16,7 @@
     "operation": { "enum": ["set_update", "set_delete", "batch_insert"] },
     "target": { "type": "object", "additionalProperties": false, "required": ["schema", "table", "primary_key"], "properties": { "schema": { "$ref": "#/$defs/safeIdentifier" }, "table": { "$ref": "#/$defs/safeIdentifier" }, "primary_key": { "type": "object", "additionalProperties": false, "required": ["column"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" } } } } },
     "tenant_guard": { "$ref": "#/$defs/columnValue" },
+    "principal_scope": { "$ref": "#/$defs/principalScope" },
     "allowed_columns": { "type": "array", "items": { "$ref": "#/$defs/safeIdentifier" }, "maxItems": 256, "uniqueItems": true },
     "patch": { "$ref": "#/$defs/scalarRecord" },
     "version_advance": { "$ref": "#/$defs/versionAdvance" },
@@ -43,6 +44,7 @@
     "scalar": { "type": ["string", "number", "boolean", "null"] },
     "scalarRecord": { "type": "object", "propertyNames": { "$ref": "#/$defs/safeIdentifier" }, "additionalProperties": { "$ref": "#/$defs/scalar" }, "maxProperties": 256 },
     "columnValue": { "type": "object", "additionalProperties": false, "required": ["column", "value"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" }, "value": { "$ref": "#/$defs/scalar" } } },
+    "principalScope": { "type": "object", "additionalProperties": false, "required": ["schema_version", "column", "binding", "provider", "value_fingerprint"], "properties": { "schema_version": { "const": "synapsor.principal-scope.v1" }, "column": { "$ref": "#/$defs/safeIdentifier" }, "binding": { "$ref": "#/$defs/safeIdentifier" }, "provider": { "enum": ["environment", "http_claims", "cloud_session", "static_dev"] }, "value_fingerprint": { "$ref": "#/$defs/sha256" }, "value": { "$ref": "#/$defs/scalar" } } },
     "versionAdvance": { "type": "object", "additionalProperties": false, "required": ["column", "strategy"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" }, "strategy": { "enum": ["integer_increment", "database_generated"] } } },
     "deduplicationComponent": { "type": "object", "additionalProperties": false, "required": ["column", "value", "source"], "properties": { "column": { "$ref": "#/$defs/safeIdentifier" }, "value": { "$ref": "#/$defs/scalar" }, "source": { "enum": ["proposal_id", "trusted_tenant", "fixed"] } } },
     "deduplication": { "type": "object", "additionalProperties": false, "required": ["components"], "properties": { "components": { "type": "array", "items": { "$ref": "#/$defs/deduplicationComponent" }, "minItems": 1, "maxItems": 8 } } },

package/schemas/writeback-job.v4.schema.json

@@ -9,9 +9,9 @@
     "runner_scope": { "type": "object", "additionalProperties": false, "required": ["project_id", "source_id"], "properties": { "project_id": { "type": "string", "minLength": 1 }, "source_id": { "type": "string", "minLength": 1 } } },
     "engine": { "enum": ["postgres", "mysql"] }, "operation": { "enum": ["restore_update", "remove_insert", "restore_insert"] },
     "target": { "type": "object", "additionalProperties": false, "required": ["schema", "table", "primary_key"], "properties": { "schema": { "$ref": "#/$defs/identifier" }, "table": { "$ref": "#/$defs/identifier" }, "primary_key": { "type": "object", "additionalProperties": false, "required": ["column"], "properties": { "column": { "$ref": "#/$defs/identifier" }, "value": { "$ref": "#/$defs/scalar" } } } } },
-    "tenant_guard": { "$ref": "#/$defs/columnValue" }, "allowed_columns": { "type": "array", "items": { "$ref": "#/$defs/identifier" }, "maxItems": 256, "uniqueItems": true }, "patch": { "type": "object", "maxProperties": 0 },
+    "tenant_guard": { "$ref": "#/$defs/columnValue" }, "principal_scope": { "$ref": "#/$defs/principalScope" }, "allowed_columns": { "type": "array", "items": { "$ref": "#/$defs/identifier" }, "maxItems": 256, "uniqueItems": true }, "patch": { "type": "object", "maxProperties": 0 },
     "compensation": { "$ref": "inverse-descriptor.v1.schema.json" }, "forward_receipt_hash": { "$ref": "#/$defs/sha256" }, "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": { "type": "object", "additionalProperties": false, "required": ["lease_id", "attempt", "expires_at"], "properties": { "lease_id": { "type": "string", "minLength": 1 }, "attempt": { "type": "integer", "minimum": 1 }, "expires_at": { "type": "string", "format": "date-time" } } }
   },
-  "$defs": { "identifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" }, "sha256": { "type": "string", "pattern": "^sha256:.+" }, "scalar": { "type": ["string", "number", "boolean", "null"] }, "columnValue": { "type": "object", "additionalProperties": false, "required": ["column", "value"], "properties": { "column": { "$ref": "#/$defs/identifier" }, "value": { "$ref": "#/$defs/scalar" } } } }
+  "$defs": { "identifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" }, "sha256": { "type": "string", "pattern": "^sha256:.+" }, "scalar": { "type": ["string", "number", "boolean", "null"] }, "columnValue": { "type": "object", "additionalProperties": false, "required": ["column", "value"], "properties": { "column": { "$ref": "#/$defs/identifier" }, "value": { "$ref": "#/$defs/scalar" } } }, "principalScope": { "type": "object", "additionalProperties": false, "required": ["schema_version", "column", "binding", "provider", "value_fingerprint"], "properties": { "schema_version": { "const": "synapsor.principal-scope.v1" }, "column": { "$ref": "#/$defs/identifier" }, "binding": { "$ref": "#/$defs/identifier" }, "provider": { "enum": ["environment", "http_claims", "cloud_session", "static_dev"] }, "value_fingerprint": { "$ref": "#/$defs/sha256" }, "value": { "$ref": "#/$defs/scalar" } } } }
 }