@synapsor/runner 1.4.123 → 1.5.3

package/schemas/effect-result.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/effect-result.schema.json",
+  "title": "Synapsor imported effect result",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "fixture_id",
+    "capability_calls",
+    "trusted_context",
+    "proposal",
+    "observed_fields",
+    "evidence",
+    "source_database_changed"
+  ],
+  "properties": {
+    "$schema": { "type": "string" },
+    "schema_version": { "const": "synapsor.effect-result.v1" },
+    "fixture_id": { "type": "string", "minLength": 1, "maxLength": 256 },
+    "capability_calls": {
+      "type": "array",
+      "maxItems": 100,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["name"],
+        "properties": {
+          "name": { "type": "string", "minLength": 1, "maxLength": 256 },
+          "args": { "type": "object" }
+        }
+      }
+    },
+    "trusted_context": { "$ref": "effect-fixture.schema.json#/$defs/trusted_context" },
+    "proposal": { "$ref": "effect-fixture.schema.json#/$defs/proposal" },
+    "observed_fields": {
+      "type": "array",
+      "maxItems": 1000,
+      "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+    },
+    "evidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "new_source_reads"],
+      "properties": {
+        "mode": { "enum": ["fixture", "live"] },
+        "new_source_reads": { "type": "boolean" }
+      }
+    },
+    "source_database_changed": { "type": "boolean" }
+  }
+}

package/schemas/mcp-audit-candidates.schema.json

@@ -0,0 +1,41 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/mcp-audit-candidates.schema.json",
+  "title": "Synapsor MCP Audit Candidate Directory Marker",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "owner",
+    "source_digest",
+    "activation",
+    "deterministic",
+    "files"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "synapsor.audit-candidates.v1"
+    },
+    "owner": {
+      "const": "@synapsor/runner"
+    },
+    "source_digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "activation": {
+      "const": "blocked_unreviewed"
+    },
+    "deterministic": {
+      "const": true
+    },
+    "files": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "string"
+      }
+    }
+  }
+}

package/schemas/mcp-audit-report.schema.json

@@ -0,0 +1,203 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/mcp-audit-report.schema.json",
+  "title": "Synapsor MCP Audit Report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "target",
+    "disclaimer",
+    "generated_at",
+    "summary",
+    "authority_map",
+    "findings"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "synapsor.mcp-audit.v1"
+    },
+    "target": {
+      "type": "string"
+    },
+    "disclaimer": {
+      "const": "This is a static risk review, not proof that an MCP server is secure."
+    },
+    "generated_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "tools_inspected",
+        "high",
+        "medium",
+        "low",
+        "total_findings"
+      ],
+      "properties": {
+        "tools_inspected": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "high": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "medium": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "low": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "total_findings": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "authority_map": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "items",
+        "visibility_limit"
+      ],
+      "properties": {
+        "items": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "authority",
+              "label",
+              "status",
+              "tools",
+              "evidence"
+            ],
+            "properties": {
+              "authority": { "type": "string" },
+              "label": { "type": "string" },
+              "status": {
+                "enum": [
+                  "observed",
+                  "not_observed",
+                  "requires_operator_verification",
+                  "outside_static_audit_visibility"
+                ]
+              },
+              "tools": {
+                "type": "array",
+                "items": { "type": "string" }
+              },
+              "evidence": { "type": "string" }
+            }
+          }
+        },
+        "visibility_limit": { "type": "string" }
+      }
+    },
+    "bypass_check": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "mode",
+        "servers",
+        "direct_bypass_observed",
+        "unverified_servers",
+        "warning"
+      ],
+      "properties": {
+        "mode": {
+          "enum": ["static_config", "selected_live_tools_list"]
+        },
+        "servers": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "server",
+              "status",
+              "transport",
+              "tools_observed",
+              "evidence",
+              "remediation"
+            ],
+            "properties": {
+              "server": { "type": "string" },
+              "status": {
+                "enum": [
+                  "observed_direct_authority",
+                  "no_direct_authority_observed",
+                  "requires_operator_verification"
+                ]
+              },
+              "transport": { "enum": ["stdio", "remote", "unknown"] },
+              "tools_observed": {
+                "type": "array",
+                "items": { "type": "string" }
+              },
+              "evidence": { "type": "string" },
+              "remediation": { "type": "string" }
+            }
+          }
+        },
+        "direct_bypass_observed": { "type": "boolean" },
+        "unverified_servers": { "type": "integer", "minimum": 0 },
+        "warning": { "type": "string" }
+      }
+    },
+    "findings": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "severity",
+          "code",
+          "message",
+          "evidence",
+          "recommendation",
+          "remediation_url"
+        ],
+        "properties": {
+          "severity": {
+            "enum": [
+              "HIGH",
+              "MEDIUM",
+              "LOW"
+            ]
+          },
+          "code": {
+            "type": "string"
+          },
+          "tool": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          },
+          "evidence": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "recommendation": {
+            "type": "string"
+          },
+          "remediation_url": {
+            "type": "string",
+            "format": "uri"
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/schema-candidate-review.schema.json

@@ -0,0 +1,167 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/schema-candidate-review.schema.json",
+  "title": "Synapsor Schema/API Candidate Review",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "format",
+    "source_digest",
+    "activation",
+    "summary",
+    "warnings",
+    "objects"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "synapsor.schema-candidates.v1"
+    },
+    "format": {
+      "enum": [
+        "prisma",
+        "drizzle",
+        "openapi"
+      ]
+    },
+    "source_digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "activation": {
+      "const": "blocked_unreviewed"
+    },
+    "summary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "objects",
+        "fields",
+        "capabilities",
+        "write_candidates"
+      ],
+      "properties": {
+        "objects": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "fields": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "capabilities": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "write_candidates": {
+          "type": "integer",
+          "minimum": 0
+        }
+      }
+    },
+    "warnings": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    },
+    "objects": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": [
+          "name",
+          "table",
+          "structural_primary_key_candidates",
+          "potential_tenant_fields",
+          "potential_principal_fields",
+          "potential_conflict_fields",
+          "potentially_sensitive_fields",
+          "suggested_kept_out_fields",
+          "suggested_visible_fields",
+          "possible_actions",
+          "uncertain_assumptions",
+          "unsupported_or_dynamic"
+        ],
+        "properties": {
+          "name": {
+            "type": "string"
+          },
+          "table": {
+            "type": "string"
+          },
+          "structural_primary_key_candidates": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "potential_tenant_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "potential_principal_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "potential_conflict_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "potentially_sensitive_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "suggested_kept_out_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "suggested_visible_fields": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "possible_actions": {
+            "type": "array",
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": [
+                "name",
+                "kind",
+                "allowed_field_candidates",
+                "requires_business_logic",
+                "requires_app_owned_handler"
+              ],
+              "properties": {
+                "name": {
+                  "type": "string"
+                },
+                "kind": {
+                  "enum": [
+                    "read",
+                    "proposal"
+                  ]
+                },
+                "allowed_field_candidates": {
+                  "$ref": "#/$defs/stringArray"
+                },
+                "requires_business_logic": {
+                  "type": "boolean"
+                },
+                "requires_app_owned_handler": {
+                  "type": "boolean"
+                }
+              }
+            }
+          },
+          "uncertain_assumptions": {
+            "$ref": "#/$defs/stringArray"
+          },
+          "unsupported_or_dynamic": {
+            "$ref": "#/$defs/stringArray"
+          }
+        }
+      }
+    }
+  },
+  "$defs": {
+    "stringArray": {
+      "type": "array",
+      "items": {
+        "type": "string"
+      }
+    }
+  }
+}

package/schemas/schema-candidates.schema.json

@@ -0,0 +1,49 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://synapsor.ai/schemas/schema-candidates.schema.json",
+  "title": "Synapsor Schema/API Candidate Directory Marker",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "owner",
+    "format",
+    "source_digest",
+    "activation",
+    "deterministic",
+    "files"
+  ],
+  "properties": {
+    "schema_version": {
+      "const": "synapsor.schema-candidates.v1"
+    },
+    "owner": {
+      "const": "@synapsor/runner"
+    },
+    "format": {
+      "enum": [
+        "prisma",
+        "drizzle",
+        "openapi"
+      ]
+    },
+    "source_digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "activation": {
+      "const": "blocked_unreviewed"
+    },
+    "deterministic": {
+      "const": true
+    },
+    "files": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": {
+        "type": "string"
+      }
+    }
+  }
+}

package/schemas/synapsor.contract-tests.schema.json

@@ -19,7 +19,7 @@
         "properties": {
           "id": { "type": "string", "minLength": 1 },
           "kind": {
-            "enum": ["tool_allow", "tool_deny", "cross_principal_deny", "hide_fields", "argument_constraint", "transition_guard", "set_cap", "source_unchanged_before_approval", "operator_boundary"]
+            "enum": ["tool_allow", "tool_deny", "cross_principal_deny", "hide_fields", "argument_constraint", "transition_guard", "set_cap", "proposal_effect", "conflict_guard", "trusted_scope", "evidence_requirement", "approval_boundary", "source_unchanged_before_approval", "operator_boundary"]
           },
           "capability": { "type": "string", "minLength": 1 },
           "args": { "type": "object" },

package/schemas/synapsor.runner.schema.json

@@ -394,6 +394,57 @@
             "queue_limit": { "type": "integer", "minimum": 0, "maximum": 100000 }
           }
         },
+        "database_scope": {
+          "description": "Database-side scope enforcement. application uses Runner predicates; postgres_rls also binds trusted context into transaction-local PostgreSQL settings and requires verified RLS policies.",
+          "oneOf": [
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["mode"],
+              "properties": {
+                "mode": { "const": "application" }
+              }
+            },
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["mode", "tenant_setting", "principal_setting"],
+              "properties": {
+                "mode": { "const": "postgres_rls" },
+                "tenant_setting": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z_][A-Za-z0-9_]*(\\.[A-Za-z_][A-Za-z0-9_]*)+$"
+                },
+                "principal_setting": {
+                  "type": "string",
+                  "pattern": "^[A-Za-z_][A-Za-z0-9_]*(\\.[A-Za-z_][A-Za-z0-9_]*)+$"
+                }
+              }
+            }
+          ]
+        },
+        "credential_scope": {
+          "description": "Connection authority. tenant_resolver names an application-supplied resolver; it never embeds credentials.",
+          "oneOf": [
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["mode"],
+              "properties": {
+                "mode": { "const": "shared" }
+              }
+            },
+            {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["mode", "resolver"],
+              "properties": {
+                "mode": { "const": "tenant_resolver" },
+                "resolver": { "$ref": "#/$defs/identifier" }
+              }
+            }
+          ]
+        },
         "receipts": {
           "type": "object",
           "additionalProperties": false,