@synapsor/runner 1.4.121 → 1.4.123

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## 1.4.123 (prepared, not published)
+
+### Advisory capability-surface fitness lint
+
+- Adds deterministic `contract lint` advisories for generic query-like string
+  arguments, more than eight capabilities on one normalized target,
+  non-business-operation names, and structurally near-duplicate capabilities.
+- Keeps canonical validation, compilation, MCP serving, and runtime enforcement
+  unchanged. Advisories succeed by default; explicit `--strict` or
+  `--fail-on warning` remains the opt-in CI policy gate.
+- Adds stable structured details and surface metrics to JSON/SARIF output, plus
+  a concise text summary. No database connection, environment value, source
+  row, or probabilistic classifier is involved.
+- Stages only `@synapsor/runner@1.4.123`; `@synapsor/spec@1.4.2`,
+  `@synapsor/dsl@1.4.3`, and `@synapsor/cli@0.1.0-beta.1` are unchanged.
+
+## 1.4.122 (2026-07-16)
+
+### Trusted principal row scope and Cloud-linked governance
+
+- Adds a canonical reviewer-fixed principal row scope that is always
+  AND-composed with tenant scope and resolved only from a required trusted
+  context binding. Missing or invalid principal authority fails closed.
+- Enforces the bound principal predicate in PostgreSQL and MySQL reads,
+  proposals, aggregates, guarded CRUD, bounded sets, executor envelopes,
+  receipts, replay, and reviewed compensation. Same-tenant cross-principal
+  access uses the same generic miss as cross-tenant or absent rows.
+- Preserves the scope through DSL parse/format/compile, Spec validation and
+  digesting, config normalization, protocol jobs, C++/Cloud round trips,
+  contract explanation/testing, and scoped evidence/proposal/resource handles.
+- Adds explicit `local_only` and `cloud_linked` authority behavior. Cloud-linked
+  proposals use a durable idempotent outbox, metadata-only evidence residency,
+  Cloud-governed approval/leasing, terminal-state reconciliation, and no local
+  approval/apply fallback while Cloud is unavailable.
+- Separates contract-registry human/service credentials from Runner machine
+  tokens. Cloud push no longer accepts secrets through command arguments or a
+  Runner-token fallback.
+- Introduces the separately packable `@synapsor/cli@0.1.0-beta.1` Cloud client;
+  `synapsor-runner` remains the local MCP/database enforcement boundary.
+- Published `@synapsor/spec@1.4.2`, `@synapsor/dsl@1.4.3`, and
+  `@synapsor/runner@1.4.122`.
+
 ## 1.4.121 (prepared, not published)
 
 ### Contract trust surface and bounded-set parser correctness

package/README.md

@@ -14,9 +14,8 @@ surface.
 
 ## Prove It In 60 Seconds
 
-The path is: **audit** your existing MCP risk, then **demo** the safety
-boundary, then **connect** a staging database. The first two commands finish in
-seconds and touch nothing but a local fixture file.
+Path: **audit** MCP risk, **demo** the boundary, then **connect** staging. The
+first two commands touch only a local fixture.
 
 First, inspect the risk in a typical raw-SQL database MCP server. This works
 even if you never adopt Runner:
@@ -25,18 +24,16 @@ even if you never adopt Runner:
 npx -y @synapsor/runner audit --example dangerous-db-mcp
 ```
 
-Then point the same static review at your own exported tool manifest, remote
-`tools/list` endpoint, or stdio MCP server:
+Audit your own tool manifest, remote `tools/list`, or stdio server:
 
 ```bash
 npx -y @synapsor/runner audit ./tools-list.json
 ```
 
-The audit flags raw SQL, arbitrary table/column inputs, model-controlled tenant
-or principal authority, model-facing approval/writeback tools, and missing
-conflict or idempotency signals. It does not call business tools, and it is a
-risk review rather than proof that a server is secure. See [MCP Database Risk
-Review](docs/mcp-audit.md) for remote, stdio, JSON, and Markdown workflows.
+It flags raw SQL, arbitrary identifiers, model-controlled authority,
+model-facing approval/writeback, and missing conflict or idempotency signals.
+It does not call business tools. See [MCP Database Risk
+Review](docs/mcp-audit.md) for supported workflows and limits.
 
 Then see the proposal, approval boundary, evidence, and replay loop. It needs no
 database, Docker, config file, MCP client, or Synapsor account:
@@ -169,8 +166,8 @@ compensation.
 ## Review And Prove Your Contract
 
 Before serving a contract, use `contract explain` for a reviewer-readable
-boundary, `contract lint --strict` for deterministic CI checks, and `contract
-test` for adopter-owned allow/deny/redaction cases. The built-in language
+boundary, `contract lint --strict` for deterministic surface-fitness CI checks,
+and `contract test` for adopter-owned allow/deny/redaction cases. The built-in language
 server supplies diagnostics, completion, hover, and formatting for
 `.synapsor.sql` and legacy `.synapsor` files. See [Contract
 Review](docs/contract-review.md) and [Contract
@@ -197,6 +194,10 @@ trust boundaries, covered threats, non-goals, and required operator controls.
 - MCP proposal, evidence, and replay handles are references rather than bearer
   authority: resource reads re-check the owning tenant and principal against
   the current trusted session.
+- Same-tenant owner/assignee isolation uses a reviewed
+  [`PRINCIPAL SCOPE KEY`](docs/capability-authoring.md#same-tenant-principal-row-scope)
+  composed with mandatory tenant scope; `test:principal-scope` proves generic
+  cross-principal denial and evidence-handle isolation on Postgres and MySQL.
 - `test:live-apply`, `test:guarded-crud`, `test:bounded-set`, and
   `test:reversible` run disposable PostgreSQL/MySQL scenarios. They prove no
   pre-approval mutation, guarded single-row CRUD, idempotent retry,
@@ -229,6 +230,7 @@ and [Small Runner Fleets](docs/running-a-runner-fleet.md).
 | `@synapsor/runner` | CLI, MCP runtime, local ledger, proposals, approval, guarded writeback, replay, and MCP audit. |
 | `@synapsor/spec` | Canonical portable contracts for contexts, capabilities, workflows, evidence, proposals, receipts, and replay. |
 | `@synapsor/dsl` | SQL-like authoring that compiles contexts, capabilities, and workflow declarations into canonical contract JSON. |
+| `@synapsor/cli` | Synapsor Cloud administration, contract governance, human review, Runner connections, and shared audit records. |
 
 Runner executes locally. The spec is shared by Runner and Cloud/C++; the DSL
 is its reviewable source format. Start with [Capability
@@ -248,12 +250,20 @@ deployments: your database remains the source of truth and Runner stores review
 artifacts in the default local SQLite ledger or an opt-in shared Postgres
 runtime store.
 Synapsor Cloud adds a shared contract registry, immutable versions,
-downloadable Runner bundles, and team activity, evidence, and approval
-surfaces. See [OSS Runner vs Synapsor Cloud](docs/oss-vs-cloud.md) for the
-detailed boundary.
+source-scoped Runner connections, downloadable bundles, a human approval
+inbox, durable leased writeback jobs, and a redacted shared activity/receipt
+chronology. Database credentials and guarded execution remain local. See [Cloud
+Mode](docs/cloud-mode.md) for the design-partner path and [OSS Runner vs
+Synapsor Cloud](docs/oss-vs-cloud.md) for the detailed boundary.
+
+`synapsor-runner` owns the local MCP/database boundary. `synapsor` from
+`@synapsor/cli` manages Cloud review and audit. Both Cloud push commands use
+the same contract digest and scoped service-key API. See the [Cloud CLI
+guide](https://github.com/Synapsor/Synapsor-Runner/blob/main/docs/cloud-cli.md).
 
 ## Next Steps
 
+- Follow the [step-by-step Synapsor Tutorial](https://github.com/sandeshtiwari/Synapsor-Tutorial).
 - Run the [`support-plan-credit` flagship example](examples/support-plan-credit).
 - Connect [Claude, Cursor, OpenAI Agents SDK, or another MCP client](docs/mcp-clients.md).
 - Author and [push a validated contract to Cloud](docs/cloud-push.md).

package/dist/cli.d.ts

@@ -14,6 +14,9 @@ export declare function runInitWizard(args: string[], options?: {
     stdout?: Pick<NodeJS.WriteStream, "write">;
 }): Promise<number>;
 export declare function resolveSqlWriteDatabaseUrl(job: WritebackJob, configPath: string, env: NodeJS.ProcessEnv): Promise<string>;
+export declare function verifyLocalWritebackAuthority(job: WritebackJob, configPath: string, storePath?: string, options?: {
+    cloudApproved?: boolean;
+}): Promise<void>;
 export declare function reconciliationSupportedOutcome(observation: ReconciliationObservation): "applied" | "conflict" | "failed";
 export declare function reconciliationReceipt(intent: StoredWritebackIntent, observation: ReconciliationObservation, outcome: "applied" | "conflict" | "failed", runnerId: string, reason: string): ExecutionReceiptV2 | ExecutionReceiptV3 | ExecutionReceiptV4;
 export {};

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAoP,KAAK,WAAW,EAA0H,MAAM,6BAA6B,CAAC;AAIza,OAAO,EAiBL,KAAK,qBAAqB,EAK3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAgI,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAuD,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAElV,OAAO,EAQL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAUL,KAAK,yBAAyB,EAE/B,MAAM,8BAA8B,CAAC;AA8UtC,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgE1D;AA0FD,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA2YjB;AA2/GD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAS/H;AAs4CD,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,yBAAyB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAKxH;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,yBAAyB,EACtC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,EAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,CAgH9D"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAkU,KAAK,WAAW,EAA0H,MAAM,6BAA6B,CAAC;AAIvf,OAAO,EAkBL,KAAK,qBAAqB,EAK3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAgI,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAqG,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAEhY,OAAO,EAQL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAWL,KAAK,yBAAyB,EAG/B,MAAM,8BAA8B,CAAC;AA8UtC,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAgE1D;AA0FD,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA2YjB;AA4mHD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAS/H;AAojBD,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,YAAY,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GACxC,OAAO,CAAC,IAAI,CAAC,CAgGf;AA0lCD,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,yBAAyB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAKxH;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,yBAAyB,EACtC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,EAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,CAgH9D"}