@synapsor/runner 1.5.0 → 1.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/CHANGELOG.md +92 -3
  2. package/README.md +96 -109
  3. package/dist/authoring.d.ts +23 -0
  4. package/dist/authoring.d.ts.map +1 -0
  5. package/dist/authoring.mjs +1318 -0
  6. package/dist/cli.d.ts.map +1 -1
  7. package/dist/cli.js +4 -5
  8. package/dist/local-ui.d.ts +14 -0
  9. package/dist/local-ui.d.ts.map +1 -1
  10. package/dist/runner.mjs +10845 -5598
  11. package/dist/runtime.mjs +29 -1
  12. package/dist/shadow.d.ts +36 -0
  13. package/dist/shadow.d.ts.map +1 -0
  14. package/dist/shadow.mjs +5262 -0
  15. package/docs/README.md +25 -2
  16. package/docs/alternatives.md +122 -0
  17. package/docs/capability-authoring.md +43 -0
  18. package/docs/client-recipes.md +218 -0
  19. package/docs/contract-testing.md +9 -7
  20. package/docs/cursor-plugin.md +78 -0
  21. package/docs/effect-regression.md +39 -2
  22. package/docs/fresh-developer-usability.md +110 -0
  23. package/docs/getting-started-own-database.md +96 -2
  24. package/docs/host-compatibility.md +59 -0
  25. package/docs/local-mode.md +6 -5
  26. package/docs/mcp-audit.md +166 -2
  27. package/docs/mcp-client-setup.md +4 -0
  28. package/docs/mcp-clients.md +33 -4
  29. package/docs/oss-vs-cloud.md +3 -0
  30. package/docs/release-notes.md +90 -4
  31. package/docs/security-boundary.md +20 -5
  32. package/docs/shadow-studies.md +47 -4
  33. package/docs/troubleshooting-first-run.md +46 -0
  34. package/examples/support-billing-agent/README.md +18 -0
  35. package/examples/support-billing-agent/app/README.md +6 -0
  36. package/examples/support-billing-agent/app/contract.ts +28 -0
  37. package/examples/support-billing-agent/app/effect-adapter.mjs +23 -0
  38. package/examples/support-billing-agent/app/record-shadow-outcomes.mjs +44 -0
  39. package/examples/support-billing-agent/scripts/run-evaluation.sh +6 -5
  40. package/examples/support-plan-credit/README.md +48 -2
  41. package/examples/support-plan-credit/mcp-client-examples/README.md +23 -0
  42. package/examples/support-plan-credit/mcp-client-examples/claude-code.sh +34 -0
  43. package/examples/support-plan-credit/mcp-client-examples/codex.config.toml +24 -0
  44. package/examples/support-plan-credit/mcp-client-examples/generic-stdio.mjs +35 -0
  45. package/examples/support-plan-credit/mcp-client-examples/generic-streamable-http.mjs +31 -0
  46. package/examples/support-plan-credit/mcp-client-examples/google-adk.py +40 -0
  47. package/examples/support-plan-credit/mcp-client-examples/langchain.mjs +29 -0
  48. package/examples/support-plan-credit/mcp-client-examples/llamaindex.py +36 -0
  49. package/examples/support-plan-credit/mcp-client-examples/openai-agents-stdio.ts +1 -1
  50. package/examples/support-plan-credit/mcp-client-examples/openai-agents-streamable-http.ts +1 -1
  51. package/examples/support-plan-credit/mcp-client-examples/vscode.mcp.json +20 -0
  52. package/examples/support-plan-credit/synapsor/actions/support.propose_plan_credit.contract-tests.generated.json +221 -0
  53. package/examples/support-plan-credit/synapsor/actions/support.propose_plan_credit.ts +34 -0
  54. package/fixtures/mcp-audit/README.md +14 -0
  55. package/fixtures/mcp-audit/cursor-bypass-config.json +38 -0
  56. package/fixtures/mcp-audit/dangerous-tools-list.json +33 -0
  57. package/fixtures/mcp-audit/reviewed-proposal-tools-list.json +60 -0
  58. package/package.json +18 -3
  59. package/schemas/mcp-audit-report.schema.json +100 -1
  60. package/schemas/synapsor.contract-tests.schema.json +1 -1
package/schemas/mcp-audit-report.schema.json CHANGED
@@ -10,6 +10,7 @@
10
10
  "disclaimer",
11
11
  "generated_at",
12
12
  "summary",
13
+ "authority_map",
13
14
  "findings"
14
15
  ],
15
16
  "properties": {
@@ -59,6 +60,99 @@
59
60
  }
60
61
  }
61
62
  },
63
+ "authority_map": {
64
+ "type": "object",
65
+ "additionalProperties": false,
66
+ "required": [
67
+ "items",
68
+ "visibility_limit"
69
+ ],
70
+ "properties": {
71
+ "items": {
72
+ "type": "array",
73
+ "items": {
74
+ "type": "object",
75
+ "additionalProperties": false,
76
+ "required": [
77
+ "authority",
78
+ "label",
79
+ "status",
80
+ "tools",
81
+ "evidence"
82
+ ],
83
+ "properties": {
84
+ "authority": { "type": "string" },
85
+ "label": { "type": "string" },
86
+ "status": {
87
+ "enum": [
88
+ "observed",
89
+ "not_observed",
90
+ "requires_operator_verification",
91
+ "outside_static_audit_visibility"
92
+ ]
93
+ },
94
+ "tools": {
95
+ "type": "array",
96
+ "items": { "type": "string" }
97
+ },
98
+ "evidence": { "type": "string" }
99
+ }
100
+ }
101
+ },
102
+ "visibility_limit": { "type": "string" }
103
+ }
104
+ },
105
+ "bypass_check": {
106
+ "type": "object",
107
+ "additionalProperties": false,
108
+ "required": [
109
+ "mode",
110
+ "servers",
111
+ "direct_bypass_observed",
112
+ "unverified_servers",
113
+ "warning"
114
+ ],
115
+ "properties": {
116
+ "mode": {
117
+ "enum": ["static_config", "selected_live_tools_list"]
118
+ },
119
+ "servers": {
120
+ "type": "array",
121
+ "items": {
122
+ "type": "object",
123
+ "additionalProperties": false,
124
+ "required": [
125
+ "server",
126
+ "status",
127
+ "transport",
128
+ "tools_observed",
129
+ "evidence",
130
+ "remediation"
131
+ ],
132
+ "properties": {
133
+ "server": { "type": "string" },
134
+ "status": {
135
+ "enum": [
136
+ "observed_direct_authority",
137
+ "no_direct_authority_observed",
138
+ "requires_operator_verification"
139
+ ]
140
+ },
141
+ "transport": { "enum": ["stdio", "remote", "unknown"] },
142
+ "tools_observed": {
143
+ "type": "array",
144
+ "items": { "type": "string" }
145
+ },
146
+ "evidence": { "type": "string" },
147
+ "remediation": { "type": "string" }
148
+ }
149
+ }
150
+ },
151
+ "direct_bypass_observed": { "type": "boolean" },
152
+ "unverified_servers": { "type": "integer", "minimum": 0 },
153
+ "warning": { "type": "string" }
154
+ }
155
+ },
62
156
  "findings": {
63
157
  "type": "array",
64
158
  "items": {
@@ -69,7 +163,8 @@
69
163
  "code",
70
164
  "message",
71
165
  "evidence",
72
- "recommendation"
166
+ "recommendation",
167
+ "remediation_url"
73
168
  ],
74
169
  "properties": {
75
170
  "severity": {
@@ -96,6 +191,10 @@
96
191
  },
97
192
  "recommendation": {
98
193
  "type": "string"
194
+ },
195
+ "remediation_url": {
196
+ "type": "string",
197
+ "format": "uri"
99
198
  }
100
199
  }
101
200
  }
package/schemas/synapsor.contract-tests.schema.json CHANGED
@@ -19,7 +19,7 @@
19
19
  "properties": {
20
20
  "id": { "type": "string", "minLength": 1 },
21
21
  "kind": {
22
- "enum": ["tool_allow", "tool_deny", "cross_principal_deny", "hide_fields", "argument_constraint", "transition_guard", "set_cap", "source_unchanged_before_approval", "operator_boundary"]
22
+ "enum": ["tool_allow", "tool_deny", "cross_principal_deny", "hide_fields", "argument_constraint", "transition_guard", "set_cap", "proposal_effect", "conflict_guard", "trusted_scope", "evidence_requirement", "approval_boundary", "source_unchanged_before_approval", "operator_boundary"]
23
23
  },
24
24
  "capability": { "type": "string", "minLength": 1 },
25
25
  "args": { "type": "object" },