@synapsor/runner 1.5.0 → 1.5.4

package/fixtures/mcp-audit/dangerous-tools-list.json

@@ -0,0 +1,33 @@
+{
+  "jsonrpc": "2.0",
+  "id": 1,
+  "result": {
+    "tools": [
+      {
+        "name": "execute_sql",
+        "description": "Execute arbitrary SQL against the application database.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "sql": { "type": "string" },
+            "tenant_id": { "type": "string" },
+            "table_name": { "type": "string" },
+            "where": { "type": "string" }
+          },
+          "required": ["sql"]
+        }
+      },
+      {
+        "name": "approve_and_apply_change",
+        "description": "Approve and apply a database change immediately.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "change_id": { "type": "string" }
+          },
+          "required": ["change_id"]
+        }
+      }
+    ]
+  }
+}

package/fixtures/mcp-audit/reviewed-proposal-tools-list.json

@@ -0,0 +1,60 @@
+{
+  "jsonrpc": "2.0",
+  "id": 1,
+  "result": {
+    "tools": [
+      {
+        "name": "billing.inspect_invoice",
+        "description": "Inspect one tenant-scoped invoice through reviewed visible fields.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "invoice_id": { "type": "string", "maxLength": 128 }
+          },
+          "required": ["invoice_id"]
+        },
+        "outputSchema": {
+          "type": "object",
+          "properties": {
+            "status": { "type": "string" },
+            "evidence_bundle_id": { "type": "string" }
+          },
+          "required": ["status", "evidence_bundle_id"]
+        },
+        "annotations": {
+          "readOnlyHint": true,
+          "destructiveHint": false
+        },
+        "x_synapsor_test_fixture": "billing-invoice-safe"
+      },
+      {
+        "name": "billing.propose_late_fee_waiver",
+        "description": "Create an exact evidence-backed proposal for review before trusted writeback.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "invoice_id": { "type": "string", "maxLength": 128 },
+            "reason": { "type": "string", "maxLength": 500 }
+          },
+          "required": ["invoice_id", "reason"]
+        },
+        "outputSchema": {
+          "type": "object",
+          "properties": {
+            "status": { "type": "string" },
+            "proposal_id": { "type": "string" },
+            "receipt_hash": { "type": "string" },
+            "retryable": { "type": "boolean" },
+            "source_database_changed": { "type": "boolean" }
+          },
+          "required": ["status", "proposal_id", "source_database_changed"]
+        },
+        "annotations": {
+          "readOnlyHint": false,
+          "destructiveHint": false
+        },
+        "x_synapsor_test_fixture": "billing-waiver-proposal-safe"
+      }
+    ]
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synapsor/runner",
-  "version": "1.5.0",
+  "version": "1.5.4",
   "description": "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
   "license": "Apache-2.0",
   "type": "module",
@@ -8,6 +8,14 @@
     "synapsor-runner": "dist/cli.js"
   },
   "exports": {
+    "./authoring": {
+      "types": "./dist/authoring.d.ts",
+      "import": "./dist/authoring.mjs"
+    },
+    "./shadow": {
+      "types": "./dist/shadow.d.ts",
+      "import": "./dist/shadow.mjs"
+    },
     "./runtime": {
       "types": "./dist/runtime.d.ts",
       "import": "./dist/runtime.mjs"
@@ -23,6 +31,12 @@
     "dist/runtime.mjs",
     "dist/runtime.d.ts",
     "dist/runtime.d.ts.map",
+    "dist/authoring.mjs",
+    "dist/authoring.d.ts",
+    "dist/authoring.d.ts.map",
+    "dist/shadow.mjs",
+    "dist/shadow.d.ts",
+    "dist/shadow.d.ts.map",
     "docs/**/*.md",
     "examples/dangerous-mcp-tools.json",
     "examples/app-owned-writeback/**",
@@ -65,10 +79,11 @@
     "model-context-protocol"
   ],
   "engines": {
-    "node": ">=22.5.0"
+    "node": ">=22.13.0"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
+    "@synapsor/spec": "^1.4.2",
     "jose": "6.2.3",
     "mysql2": "^3.11.0",
     "pdf-lib": "1.17.1",
@@ -76,7 +91,7 @@
     "typescript": "5.9.3",
     "vscode-languageserver": "9.0.1",
     "vscode-languageserver-textdocument": "1.0.12",
-    "yaml": "2.8.1",
+    "yaml": "2.8.3",
     "zod": "^3.25.0"
   },
   "devDependencies": {

package/schemas/mcp-audit-report.schema.json

@@ -10,6 +10,7 @@
     "disclaimer",
     "generated_at",
     "summary",
+    "authority_map",
     "findings"
   ],
   "properties": {
@@ -59,6 +60,99 @@
         }
       }
     },
+    "authority_map": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "items",
+        "visibility_limit"
+      ],
+      "properties": {
+        "items": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "authority",
+              "label",
+              "status",
+              "tools",
+              "evidence"
+            ],
+            "properties": {
+              "authority": { "type": "string" },
+              "label": { "type": "string" },
+              "status": {
+                "enum": [
+                  "observed",
+                  "not_observed",
+                  "requires_operator_verification",
+                  "outside_static_audit_visibility"
+                ]
+              },
+              "tools": {
+                "type": "array",
+                "items": { "type": "string" }
+              },
+              "evidence": { "type": "string" }
+            }
+          }
+        },
+        "visibility_limit": { "type": "string" }
+      }
+    },
+    "bypass_check": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "mode",
+        "servers",
+        "direct_bypass_observed",
+        "unverified_servers",
+        "warning"
+      ],
+      "properties": {
+        "mode": {
+          "enum": ["static_config", "selected_live_tools_list"]
+        },
+        "servers": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "server",
+              "status",
+              "transport",
+              "tools_observed",
+              "evidence",
+              "remediation"
+            ],
+            "properties": {
+              "server": { "type": "string" },
+              "status": {
+                "enum": [
+                  "observed_direct_authority",
+                  "no_direct_authority_observed",
+                  "requires_operator_verification"
+                ]
+              },
+              "transport": { "enum": ["stdio", "remote", "unknown"] },
+              "tools_observed": {
+                "type": "array",
+                "items": { "type": "string" }
+              },
+              "evidence": { "type": "string" },
+              "remediation": { "type": "string" }
+            }
+          }
+        },
+        "direct_bypass_observed": { "type": "boolean" },
+        "unverified_servers": { "type": "integer", "minimum": 0 },
+        "warning": { "type": "string" }
+      }
+    },
     "findings": {
       "type": "array",
       "items": {
@@ -69,7 +163,8 @@
           "code",
           "message",
           "evidence",
-          "recommendation"
+          "recommendation",
+          "remediation_url"
         ],
         "properties": {
           "severity": {
@@ -96,6 +191,10 @@
           },
           "recommendation": {
             "type": "string"
+          },
+          "remediation_url": {
+            "type": "string",
+            "format": "uri"
           }
         }
       }

package/schemas/synapsor.contract-tests.schema.json

@@ -19,7 +19,7 @@
         "properties": {
           "id": { "type": "string", "minLength": 1 },
           "kind": {
-            "enum": ["tool_allow", "tool_deny", "cross_principal_deny", "hide_fields", "argument_constraint", "transition_guard", "set_cap", "source_unchanged_before_approval", "operator_boundary"]
+            "enum": ["tool_allow", "tool_deny", "cross_principal_deny", "hide_fields", "argument_constraint", "transition_guard", "set_cap", "proposal_effect", "conflict_guard", "trusted_scope", "evidence_requirement", "approval_boundary", "source_unchanged_before_approval", "operator_boundary"]
           },
           "capability": { "type": "string", "minLength": 1 },
           "args": { "type": "object" },

package/schemas/synapsor.runner.schema.json

@@ -293,6 +293,80 @@
         "max_response_bytes": { "type": "integer", "minimum": 1024, "maximum": 10485760 }
       }
     },
+    "http_security": {
+      "description": "Runner-only deployment security for networked MCP. Credential values remain in environment or secret-manager wiring and never enter portable contracts.",
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "deployment": {
+          "description": "Trust topology. shared requires signed per-session http_claims identity; single_tenant may use one opaque service token.",
+          "enum": ["loopback", "single_tenant", "shared"]
+        },
+        "channel": {
+          "description": "How a remote listener is protected in transit. insecure_http_break_glass is unsafe and still requires authentication.",
+          "enum": ["direct_tls", "trusted_tls_proxy", "insecure_http_break_glass"]
+        },
+        "static_token": {
+          "description": "Environment-variable names for the current opaque endpoint token and at most one previous rotation token.",
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "active_env": { "$ref": "#/$defs/env_name" },
+            "previous_env": { "$ref": "#/$defs/env_name" }
+          }
+        },
+        "oauth_resource": {
+          "description": "RFC 9728 metadata for Runner as an OAuth protected resource. The external authorization server issues tokens; Runner only verifies them.",
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["resource", "authorization_servers"],
+          "properties": {
+            "resource": { "type": "string", "pattern": "^https://" },
+            "authorization_servers": {
+              "type": "array",
+              "minItems": 1,
+              "maxItems": 8,
+              "uniqueItems": true,
+              "items": { "type": "string", "pattern": "^https://" }
+            },
+            "scopes_supported": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "$ref": "#/$defs/oauth_scope" } },
+            "required_scopes": { "type": "array", "minItems": 1, "maxItems": 64, "uniqueItems": true, "items": { "$ref": "#/$defs/oauth_scope" } },
+            "resource_name": { "type": "string", "minLength": 1, "maxLength": 128 },
+            "resource_documentation": { "type": "string", "pattern": "^https://" }
+          }
+        },
+        "allowed_origins": {
+          "description": "Exact browser origins accepted on HTTP MCP requests. Native clients may omit Origin. Wildcards are forbidden.",
+          "type": "array",
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": { "type": "string", "pattern": "^https?://[^/*]+(?::[0-9]+)?$" }
+        },
+        "allowed_hosts": {
+          "description": "Exact HTTP Host authorities accepted by the direct listener or trusted proxy. Forwarded host headers are never authority.",
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 32,
+          "uniqueItems": true,
+          "items": { "type": "string", "minLength": 1, "maxLength": 255, "pattern": "^(?:\\[[0-9A-Fa-f:.]+\\]|[A-Za-z0-9.-]+)(?::[0-9]{1,5})?$" }
+        },
+        "limits": {
+          "description": "Bounded HTTP request, header, connection, and session resource limits.",
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "max_request_bytes": { "type": "integer", "minimum": 1024, "maximum": 16777216 },
+            "max_header_bytes": { "type": "integer", "minimum": 4096, "maximum": 65536 },
+            "max_sessions": { "type": "integer", "minimum": 1, "maximum": 100000 },
+            "session_idle_timeout_seconds": { "type": "integer", "minimum": 10, "maximum": 86400 },
+            "request_timeout_ms": { "type": "integer", "minimum": 1000, "maximum": 300000 },
+            "headers_timeout_ms": { "type": "integer", "minimum": 1000, "maximum": 120000 },
+            "keep_alive_timeout_ms": { "type": "integer", "minimum": 1000, "maximum": 120000 },
+            "max_connections": { "type": "integer", "minimum": 1, "maximum": 100000 }
+          }
+        }
+      }
+    },
     "cloud": {
       "type": "object",
       "additionalProperties": false,
@@ -347,6 +421,12 @@
       "type": "string",
       "pattern": "^[A-Z_][A-Z0-9_]*$"
     },
+    "oauth_scope": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 128,
+      "pattern": "^[!#-\\[\\]-~]+$"
+    },
     "identifier": {
       "type": "string",
       "pattern": "^[A-Za-z_][A-Za-z0-9_]*$"