@synapsor/runner 1.5.3 → 1.5.4

package/CHANGELOG.md

@@ -1,6 +1,48 @@
 # Changelog
 
-## 1.5.3 (prepared, not published)
+## 1.5.4 (prepared, not published)
+
+### Networked MCP authentication hardening
+
+- Defines explicit local-loopback, remote single-tenant, and shared multi-tenant
+  HTTP security profiles while preserving zero-configuration local stdio.
+- Refuses non-loopback cleartext listeners before bind unless the operator
+  explicitly selects a trusted TLS proxy or authenticated break-glass posture.
+  Runner-owned TLS and optional mTLS remain supported.
+- Hardens opaque endpoint tokens with environment-only provisioning, production
+  entropy checks, constant-time comparison, one bounded previous-token rotation
+  slot, and per-session credential pinning. Opaque tokens remain service access
+  credentials, not tenant or user identity.
+- Requires verified signed identity for shared deployments. Runner validates
+  algorithm, signature, issuer, audience/resource, time, scope, tenant, and
+  principal on every request, including requests for existing MCP sessions.
+- Adds RFC 9728 protected-resource metadata and standards-correct Bearer
+  challenges for external authorization servers. Runner remains a protected
+  resource and does not issue passwords, access tokens, or refresh tokens.
+- Adds exact Origin and Host policy, bounded headers/bodies/connections/sessions,
+  TLS preflight, bounded public-only JWKS handling, and safe overload responses.
+- Expands `doctor`, help, client generators, fleet examples, and deployment docs
+  so operators can distinguish TLS, Bearer presentation, opaque tokens, JWTs,
+  MCP session IDs, trusted context, database scope, and operator authority
+  without printing credential values.
+- Adds read-only, no-ID-first `lifecycle` inspection across local SQLite and
+  shared PostgreSQL runtime stores. Latest, filtered business-object lookup, and
+  proposal/evidence/replay/job/intent/receipt/audit handles resolve one typed,
+  redacted proposal-to-receipt/replay timeline without creating jobs, leases,
+  source calls, or Cloud synchronization.
+- Makes UPDATE conflict guarding exact by default in the SQL-like DSL.
+  Omitting `CONFLICT GUARD <column>` now fails. The explicit legacy
+  `CONFLICT GUARD WEAK ROW HASH ACKNOWLEDGED` form is limited to ordinary
+  single-row source-DB UPDATE and warns that projection hashing can miss outside
+  changes.
+- Preserves canonical `SESSION` for implementations with a real typed session
+  boundary while making Runner fail closed with
+  `SESSION_BINDING_UNSUPPORTED`. Runner-targeted DSL validation, contract load,
+  lint/explain, and runtime no longer allow an environment fallback.
+- Prepares `@synapsor/runner@1.5.4` and `@synapsor/dsl@1.4.4`;
+  `@synapsor/spec@1.4.2` and the Cloud CLI remain unchanged.
+
+## 1.5.3 (published 2026-07-21)
 
 ### Intent to Safe Action
 
@@ -26,7 +68,7 @@
   publishes an honest alternatives guide, and adds a deterministic 36-second
   support-plan-credit cut backed by real PostgreSQL proposal, receipt, retry,
   and stale-conflict evidence.
-- Prepares only `@synapsor/runner@1.5.3`; `@synapsor/spec@1.4.2`,
+- Published only `@synapsor/runner@1.5.3`; `@synapsor/spec@1.4.2`,
   `@synapsor/dsl@1.4.3`, and the Cloud CLI remain unchanged.
 
 ## 1.5.2 (prepared, not published)

package/README.md

@@ -21,8 +21,7 @@ No database, Docker, config, MCP client, LLM, or account is required:
 npx -y @synapsor/runner try --prove
 ```
 
-The four-second product measurement begins after package resolution. A cold
-`npx` download is recorded separately because registry and network time vary.
+Timing begins after package resolution; cold `npx` download time varies.
 
 The embedded synthetic source requests a $55 waiver and proves:
 
@@ -34,9 +33,9 @@ Restart-safe retry: yes; duplicate mutations: 0
 Stale apply refused: yes
 ```
 
-Review happens outside the model-facing tools. The command stores inspectable
-state under `./.synapsor/try/`; it teaches the boundary and does not claim to
-test your database connection. `demo --quick` remains a noninteractive compatibility alias.
+Review happens outside model-facing tools. State is stored under
+`./.synapsor/try/`; this proves the boundary, not your database connection.
+`demo --quick` remains a noninteractive compatibility alias.
 
 ## Protect One Action In Your Application
 
@@ -86,9 +85,15 @@ The agent has no approval or commit tool. Runner rechecks scope, policy, row
 version, bounds, and idempotency before returning a receipt; a retry cannot
 duplicate the mutation and a stale proposal conflicts.
 
-See the [own-database guide](docs/getting-started-own-database.md) for the full
-staging path and [Cursor plugin guide](docs/cursor-plugin.md) for
-`/synapsor-protect` and the plugin boundary.
+Inspect the latest lifecycle without copying an id:
+
+```bash
+synapsor-runner lifecycle --details --store ./.synapsor/local.db
+```
+
+See the [own-database guide](docs/getting-started-own-database.md),
+[Cursor plugin guide](docs/cursor-plugin.md), and
+[store lifecycle guide](docs/store-lifecycle.md) for the complete paths.
 
 ## Audit An Existing MCP Server
 
@@ -155,10 +160,12 @@ not make raw SQL or prompt-injection-prone clients safe.
 | `postgres_rls` | PostgreSQL also checks transaction-bound tenant/principal scope. Arbitrary trusted-context or credential control remains outside this guarantee. |
 | `tenant_bound` | Authenticated context selects a restricted per-tenant credential or process. |
 
-Stdio commonly trusts process environment; shared HTTP must use verified signed
-claims. Model arguments, query parameters, and arbitrary tenant headers are
-never trusted. MySQL has no native RLS; use restricted views or tenant
-credentials. See [Database scope] and the
+Use stdio; no socket opens. HTTP requires authentication; non-loopback
+listeners require TLS or an explicit trusted TLS proxy. Shared services require
+signed claims. Model-controlled input and MCP session IDs never establish
+identity. See [HTTP MCP].
+MySQL has no native RLS; use restricted views or tenant credentials. See
+[Database scope] and the
 [build-vs-adopt guide](docs/why-synapsor-vs-app-guardrails.md).
 
 ## Connect A Staging Database
@@ -216,6 +223,7 @@ See [Security Boundary](docs/security-boundary.md) and
 [Current Limitations](docs/limitations.md).
 
 [Database scope]: docs/database-enforced-scope.md
+[HTTP MCP]: docs/http-mcp.md
 
 ## Operate The Approval Loop
 

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAoX,KAAK,WAAW,EAAyJ,MAAM,6BAA6B,CAAC;AAIxkB,OAAO,EAsBL,KAAK,qBAAqB,EAK3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAmI,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAqG,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAEnY,OAAO,EAQL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAaL,KAAK,yBAAyB,EAG/B,MAAM,8BAA8B,CAAC;AAsWtC,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoE1D;AAwID,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA+YjB;AA89ID,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAc/H;AAojBD,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,YAAY,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GACxC,OAAO,CAAC,IAAI,CAAC,CA4Gf;AA0+CD,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,yBAAyB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAKxH;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,yBAAyB,EACtC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,EAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,CAgH9D"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAYA,OAAO,EAAoX,KAAK,WAAW,EAAyJ,MAAM,6BAA6B,CAAC;AAIxkB,OAAO,EAsBL,KAAK,qBAAqB,EAK3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAmI,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,KAAK,kBAAkB,EAAqG,KAAK,YAAY,EAAwB,MAAM,2BAA2B,CAAC;AAEnY,OAAO,EAQL,KAAK,gBAAgB,EAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAaL,KAAK,yBAAyB,EAG/B,MAAM,8BAA8B,CAAC;AAuWtC,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAqE1D;AAwID,KAAK,SAAS,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9E,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,GAAE;IACP,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;CACvC,GACL,OAAO,CAAC,MAAM,CAAC,CA+YjB;AA+tJD,wBAAsB,0BAA0B,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAc/H;AAojBD,wBAAsB,6BAA6B,CACjD,GAAG,EAAE,YAAY,EACjB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GACxC,OAAO,CAAC,IAAI,CAAC,CA4Gf;AAugDD,wBAAgB,8BAA8B,CAAC,WAAW,EAAE,yBAAyB,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAKxH;AAED,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,WAAW,EAAE,yBAAyB,EACtC,OAAO,EAAE,SAAS,GAAG,UAAU,GAAG,QAAQ,EAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,kBAAkB,GAAG,kBAAkB,GAAG,kBAAkB,CAgH9D"}