@synapsor/runner 1.4.122 → 1.5.0

package/schemas/effect-fixture.schema.json

@@ -0,0 +1,191 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/effect-fixture.schema.json",
+  "title": "Synapsor effect regression fixture",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "fixture_id",
+    "fixture_digest",
+    "name",
+    "business_request",
+    "source",
+    "evidence",
+    "expected"
+  ],
+  "properties": {
+    "$schema": { "type": "string" },
+    "schema_version": { "const": "synapsor.effect-fixture.v1" },
+    "fixture_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "fixture_digest": { "$ref": "#/$defs/sha256" },
+    "name": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "business_request": { "type": "string", "minLength": 1, "maxLength": 2000 },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "reference_id", "captured_digest"],
+      "properties": {
+        "kind": { "enum": ["replay", "proposal", "shadow_case"] },
+        "reference_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "proposal_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "captured_digest": { "$ref": "#/$defs/sha256" }
+      }
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "mode",
+        "bundle_ids",
+        "query_fingerprints",
+        "snapshot",
+        "source_reads_during_evaluation"
+      ],
+      "properties": {
+        "mode": { "const": "replay_snapshot" },
+        "bundle_ids": {
+          "type": "array",
+          "maxItems": 100,
+          "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+        },
+        "query_fingerprints": {
+          "type": "array",
+          "maxItems": 100,
+          "items": { "$ref": "#/$defs/sha256" }
+        },
+        "snapshot": { "type": "array", "maxItems": 1000 },
+        "source_reads_during_evaluation": { "const": false }
+      }
+    },
+    "expected": { "$ref": "#/$defs/expected" },
+    "baseline_history": {
+      "type": "array",
+      "maxItems": 50,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "actor",
+          "reason",
+          "accepted_at",
+          "previous_expected_digest",
+          "accepted_expected_digest"
+        ],
+        "properties": {
+          "actor": { "type": "string", "minLength": 1, "maxLength": 256 },
+          "reason": { "type": "string", "minLength": 1, "maxLength": 2000 },
+          "accepted_at": { "type": "string", "format": "date-time" },
+          "previous_expected_digest": { "$ref": "#/$defs/sha256" },
+          "accepted_expected_digest": { "$ref": "#/$defs/sha256" }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "trusted_context": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["tenant_id", "principal"],
+      "properties": {
+        "tenant_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "principal": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "provenance": {
+          "enum": [
+            "environment",
+            "static_dev",
+            "http_claims",
+            "cloud_session",
+            "trusted_session"
+          ]
+        }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["business_object", "object_id"],
+      "properties": {
+        "business_object": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "object_id": { "type": "string", "minLength": 1, "maxLength": 256 }
+      }
+    },
+    "diff_value": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "before": { "type": ["string", "number", "boolean", "null"] },
+        "proposed": { "type": ["string", "number", "boolean", "null"] }
+      }
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["decision"],
+      "properties": {
+        "decision": {
+          "enum": ["pending_review", "auto_approved", "denied", "not_applicable"]
+        },
+        "required_role": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "required_approvals": { "type": "integer", "minimum": 1, "maximum": 10 },
+        "reason_code": { "type": "string", "minLength": 1, "maxLength": 256 }
+      }
+    },
+    "proposal": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["result_category", "policy"],
+      "properties": {
+        "result_category": {
+          "enum": [
+            "proposal_created",
+            "policy_denied",
+            "unable_to_propose",
+            "stale_conflict",
+            "invalid_unsafe_scope_attempt"
+          ]
+        },
+        "capability": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "contract_version": { "type": "string", "minLength": 1, "maxLength": 256 },
+        "target": { "$ref": "#/$defs/target" },
+        "diff": {
+          "type": "object",
+          "maxProperties": 256,
+          "additionalProperties": { "$ref": "#/$defs/diff_value" }
+        },
+        "policy": { "$ref": "#/$defs/policy" },
+        "error_code": { "type": "string", "minLength": 1, "maxLength": 256 }
+      }
+    },
+    "expected": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "capability_calls",
+        "trusted_context",
+        "proposal",
+        "hidden_fields",
+        "source_database_changed"
+      ],
+      "properties": {
+        "capability_calls": {
+          "type": "array",
+          "maxItems": 100,
+          "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+        },
+        "trusted_context": { "$ref": "#/$defs/trusted_context" },
+        "proposal": { "$ref": "#/$defs/proposal" },
+        "hidden_fields": {
+          "type": "array",
+          "maxItems": 256,
+          "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+        },
+        "source_database_changed": { "const": false }
+      }
+    }
+  }
+}

package/schemas/effect-result.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/effect-result.schema.json",
+  "title": "Synapsor imported effect result",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "fixture_id",
+    "capability_calls",
+    "trusted_context",
+    "proposal",
+    "observed_fields",
+    "evidence",
+    "source_database_changed"
+  ],
+  "properties": {
+    "$schema": { "type": "string" },
+    "schema_version": { "const": "synapsor.effect-result.v1" },
+    "fixture_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "capability_calls": {
+      "type": "array",
+      "maxItems": 100,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name"],
+        "properties": {
+          "name": { "type": "string", "minLength": 1, "maxLength": 256 },
+          "args": { "type": "object" }
+        }
+      }
+    },
+    "trusted_context": { "$ref": "effect-fixture.schema.json#/$defs/trusted_context" },
+    "proposal": { "$ref": "effect-fixture.schema.json#/$defs/proposal" },
+    "observed_fields": {
+      "type": "array",
+      "maxItems": 1000,
+      "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "new_source_reads"],
+      "properties": {
+        "mode": { "enum": ["fixture", "live"] },
+        "new_source_reads": { "type": "boolean" }
+      }
+    },
+    "source_database_changed": { "type": "boolean" }
+  }
+}

package/schemas/mcp-audit-candidates.schema.json

@@ -0,0 +1,41 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/mcp-audit-candidates.schema.json",
+  "title": "Synapsor MCP Audit Candidate Directory Marker",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "owner",
+    "source_digest",
+    "activation",
+    "deterministic",
+    "files"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "synapsor.audit-candidates.v1"
+    },
+    "owner": {
+      "const": "@synapsor/runner"
+    },
+    "source_digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "activation": {
+      "const": "blocked_unreviewed"
+    },
+    "deterministic": {
+      "const": true
+    },
+    "files": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "string"
+      }
+    }
+  }
+}

package/schemas/mcp-audit-report.schema.json

@@ -0,0 +1,104 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/mcp-audit-report.schema.json",
+  "title": "Synapsor MCP Audit Report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "target",
+    "disclaimer",
+    "generated_at",
+    "summary",
+    "findings"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "synapsor.mcp-audit.v1"
+    },
+    "target": {
+      "type": "string"
+    },
+    "disclaimer": {
+      "const": "This is a static risk review, not proof that an MCP server is secure."
+    },
+    "generated_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "tools_inspected",
+        "high",
+        "medium",
+        "low",
+        "total_findings"
+      ],
+      "properties": {
+        "tools_inspected": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "high": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "medium": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "low": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "total_findings": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "findings": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "severity",
+          "code",
+          "message",
+          "evidence",
+          "recommendation"
+        ],
+        "properties": {
+          "severity": {
+            "enum": [
+              "HIGH",
+              "MEDIUM",
+              "LOW"
+            ]
+          },
+          "code": {
+            "type": "string"
+          },
+          "tool": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          },
+          "evidence": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "recommendation": {
+            "type": "string"
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/schema-candidate-review.schema.json

@@ -0,0 +1,167 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/schema-candidate-review.schema.json",
+  "title": "Synapsor Schema/API Candidate Review",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "format",
+    "source_digest",
+    "activation",
+    "summary",
+    "warnings",
+    "objects"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "synapsor.schema-candidates.v1"
+    },
+    "format": {
+      "enum": [
+        "prisma",
+        "drizzle",
+        "openapi"
+      ]
+    },
+    "source_digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "activation": {
+      "const": "blocked_unreviewed"
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "objects",
+        "fields",
+        "capabilities",
+        "write_candidates"
+      ],
+      "properties": {
+        "objects": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "fields": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "capabilities": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "write_candidates": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "warnings": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "objects": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "name",
+          "table",
+          "structural_primary_key_candidates",
+          "potential_tenant_fields",
+          "potential_principal_fields",
+          "potential_conflict_fields",
+          "potentially_sensitive_fields",
+          "suggested_kept_out_fields",
+          "suggested_visible_fields",
+          "possible_actions",
+          "uncertain_assumptions",
+          "unsupported_or_dynamic"
+        ],
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "table": {
+            "type": "string"
+          },
+          "structural_primary_key_candidates": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "potential_tenant_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "potential_principal_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "potential_conflict_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "potentially_sensitive_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "suggested_kept_out_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "suggested_visible_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "possible_actions": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "name",
+                "kind",
+                "allowed_field_candidates",
+                "requires_business_logic",
+                "requires_app_owned_handler"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string"
+                },
+                "kind": {
+                  "enum": [
+                    "read",
+                    "proposal"
+                  ]
+                },
+                "allowed_field_candidates": {
+                  "$ref": "#/$defs/stringArray"
+                },
+                "requires_business_logic": {
+                  "type": "boolean"
+                },
+                "requires_app_owned_handler": {
+                  "type": "boolean"
+                }
+              }
+            }
+          },
+          "uncertain_assumptions": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "unsupported_or_dynamic": {
+            "$ref": "#/$defs/stringArray"
+          }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "stringArray": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    }
+  }
+}

package/schemas/schema-candidates.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/schema-candidates.schema.json",
+  "title": "Synapsor Schema/API Candidate Directory Marker",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "owner",
+    "format",
+    "source_digest",
+    "activation",
+    "deterministic",
+    "files"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "synapsor.schema-candidates.v1"
+    },
+    "owner": {
+      "const": "@synapsor/runner"
+    },
+    "format": {
+      "enum": [
+        "prisma",
+        "drizzle",
+        "openapi"
+      ]
+    },
+    "source_digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "activation": {
+      "const": "blocked_unreviewed"
+    },
+    "deterministic": {
+      "const": true
+    },
+    "files": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "string"
+      }
+    }
+  }
+}

package/schemas/synapsor.runner.schema.json

@@ -394,6 +394,57 @@
             "queue_limit": { "type": "integer", "minimum": 0, "maximum": 100000 }
           }
         },
+        "database_scope": {
+          "description": "Database-side scope enforcement. application uses Runner predicates; postgres_rls also binds trusted context into transaction-local PostgreSQL settings and requires verified RLS policies.",
+          "oneOf": [
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["mode"],
+              "properties": {
+                "mode": { "const": "application" }
+              }
+            },
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["mode", "tenant_setting", "principal_setting"],
+              "properties": {
+                "mode": { "const": "postgres_rls" },
+                "tenant_setting": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z_][A-Za-z0-9_]*(\\.[A-Za-z_][A-Za-z0-9_]*)+$"
+                },
+                "principal_setting": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z_][A-Za-z0-9_]*(\\.[A-Za-z_][A-Za-z0-9_]*)+$"
+                }
+              }
+            }
+          ]
+        },
+        "credential_scope": {
+          "description": "Connection authority. tenant_resolver names an application-supplied resolver; it never embeds credentials.",
+          "oneOf": [
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["mode"],
+              "properties": {
+                "mode": { "const": "shared" }
+              }
+            },
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["mode", "resolver"],
+              "properties": {
+                "mode": { "const": "tenant_resolver" },
+                "resolver": { "$ref": "#/$defs/identifier" }
+              }
+            }
+          ]
+        },
         "receipts": {
           "type": "object",
           "additionalProperties": false,