@synapsor/runner 1.5.4 → 1.6.1

package/schemas/freshness-authority.v1.schema.json

@@ -0,0 +1,89 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json",
+  "title": "Synapsor Freshness Authority v1",
+  "description": "Reviewed, immutable authority for target and supporting-row freshness checks. Digests are validated by the protocol runtime.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "required", "target", "dependencies", "dependency_set_digest"],
+  "properties": {
+    "schema_version": { "const": "synapsor.freshness-authority.v1" },
+    "required": { "const": true },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "member_count"],
+      "properties": {
+        "mode": { "enum": ["exact_guard", "frozen_set", "not_applicable"] },
+        "member_count": { "type": "integer", "minimum": 0, "maximum": 100 }
+      }
+    },
+    "dependencies": {
+      "type": "array",
+      "maxItems": 16,
+      "items": { "$ref": "#/$defs/dependency" }
+    },
+    "dependency_set_digest": { "$ref": "#/$defs/sha256" }
+  },
+  "$defs": {
+    "safeIdentifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
+    "capabilityName": {
+      "type": "string",
+      "pattern": "^[A-Za-z_][A-Za-z0-9_.-]*\\.[A-Za-z_][A-Za-z0-9_.-]*$"
+    },
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "scalar": { "type": ["string", "number", "boolean", "null"] },
+    "columnValue": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["column", "value"],
+      "properties": {
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "value": { "$ref": "#/$defs/scalar" }
+      }
+    },
+    "dependency": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "capability",
+        "source_id",
+        "engine",
+        "target",
+        "expected_version",
+        "evidence",
+        "descriptor_digest"
+      ],
+      "properties": {
+        "id": { "$ref": "#/$defs/safeIdentifier" },
+        "capability": { "$ref": "#/$defs/capabilityName" },
+        "source_id": { "type": "string", "minLength": 1, "maxLength": 160 },
+        "engine": { "enum": ["postgres", "mysql"] },
+        "target": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["schema", "table", "primary_key", "tenant_column"],
+          "properties": {
+            "schema": { "$ref": "#/$defs/safeIdentifier" },
+            "table": { "$ref": "#/$defs/safeIdentifier" },
+            "primary_key": { "$ref": "#/$defs/columnValue" },
+            "tenant_column": { "$ref": "#/$defs/safeIdentifier" },
+            "principal_column": { "$ref": "#/$defs/safeIdentifier" }
+          }
+        },
+        "expected_version": { "$ref": "#/$defs/columnValue" },
+        "evidence": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["bundle_id", "query_fingerprint"],
+          "properties": {
+            "bundle_id": { "type": "string", "minLength": 1, "maxLength": 200 },
+            "query_fingerprint": { "$ref": "#/$defs/sha256" }
+          }
+        },
+        "descriptor_digest": { "$ref": "#/$defs/sha256" }
+      }
+    }
+  }
+}

package/schemas/freshness-proof.v1.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.freshness-proof.v1.schema.json",
+  "title": "Synapsor Freshness Proof v1",
+  "description": "Bounded immutable result of a live freshness preflight. Digest and cross-field integrity are validated by the protocol runtime.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "proposal_id",
+    "proposal_hash",
+    "proposal_version",
+    "dependency_set_digest",
+    "checked_at",
+    "valid_until",
+    "source_adapters",
+    "result",
+    "safe_code",
+    "target_count",
+    "supporting_count",
+    "checks",
+    "proof_digest"
+  ],
+  "properties": {
+    "schema_version": { "const": "synapsor.freshness-proof.v1" },
+    "proposal_id": { "type": "string", "minLength": 1 },
+    "proposal_hash": { "$ref": "#/$defs/sha256" },
+    "proposal_version": { "type": "integer", "minimum": 1 },
+    "dependency_set_digest": { "$ref": "#/$defs/sha256" },
+    "checked_at": { "type": "string", "format": "date-time" },
+    "valid_until": { "type": "string", "format": "date-time" },
+    "source_adapters": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 8,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["source_id", "engine"],
+        "properties": {
+          "source_id": { "type": "string", "minLength": 1, "maxLength": 160 },
+          "engine": { "enum": ["postgres", "mysql"] }
+        }
+      }
+    },
+    "result": { "enum": ["fresh", "stale", "unavailable", "invalid", "unsupported"] },
+    "safe_code": { "$ref": "#/$defs/safeCode" },
+    "target_count": { "type": "integer", "minimum": 0, "maximum": 100 },
+    "supporting_count": { "type": "integer", "minimum": 0, "maximum": 16 },
+    "checks": {
+      "type": "array",
+      "maxItems": 116,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "kind", "status", "safe_code"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1, "maxLength": 160 },
+          "kind": { "enum": ["target", "supporting"] },
+          "status": { "enum": ["fresh", "stale", "not_applicable", "unavailable", "invalid", "unsupported"] },
+          "safe_code": { "$ref": "#/$defs/safeCode" },
+          "expected_version_digest": { "$ref": "#/$defs/sha256" },
+          "observed_version_digest": { "$ref": "#/$defs/sha256" }
+        }
+      }
+    },
+    "proof_digest": { "$ref": "#/$defs/sha256" }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "safeCode": { "type": "string", "pattern": "^[A-Z][A-Z0-9_]*$" }
+  }
+}

package/schemas/synapsor.runner.schema.json

@@ -132,6 +132,23 @@
         "minLength": 1
       }
     },
+    "generated_authority": {
+      "description": "Opt-in fail-closed drift enforcement for Auto Boundary and Protect This Query output. Legacy/manual projects omit this object and are not scanned.",
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["generation_lock_path", "enforcement"],
+      "properties": {
+        "generation_lock_path": {
+          "description": "Local generation-lock file. Relative paths resolve from this config file's directory.",
+          "type": "string",
+          "minLength": 1,
+          "not": { "pattern": "://" }
+        },
+        "enforcement": {
+          "const": "required"
+        }
+      }
+    },
     "capabilities": {
       "description": "Embedded compatibility capabilities. May be empty when contracts supplies the capability catalog.",
       "type": "array",
@@ -145,6 +162,38 @@
       "type": "array",
       "items": { "$ref": "#/$defs/policy" }
     },
+    "proposal_freshness": {
+      "description": "Optional fail-closed live freshness policy for reviewed proposal capabilities. The model cannot configure or widen these dependencies.",
+      "type": "object",
+      "propertyNames": { "$ref": "#/$defs/qualified_name" },
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["approval"],
+        "properties": {
+          "approval": {
+            "description": "Require a live source freshness proof immediately before every approval decision.",
+            "const": "required"
+          },
+          "dependencies": {
+            "description": "Reviewed same-source single-row reads whose exact versions must still match at approval and apply.",
+            "type": "array",
+            "maxItems": 16,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["id", "capability", "identity_from_arg", "version_column"],
+              "properties": {
+                "id": { "$ref": "#/$defs/identifier" },
+                "capability": { "$ref": "#/$defs/qualified_name" },
+                "identity_from_arg": { "$ref": "#/$defs/identifier" },
+                "version_column": { "$ref": "#/$defs/identifier" }
+              }
+            }
+          }
+        }
+      }
+    },
     "approvals": {
       "description": "Local approval behavior overrides.",
       "type": "object",
@@ -488,7 +537,7 @@
             {
               "type": "object",
               "additionalProperties": false,
-              "required": ["mode", "tenant_setting", "principal_setting"],
+              "required": ["mode", "tenant_setting"],
               "properties": {
                 "mode": { "const": "postgres_rls" },
                 "tenant_setting": {

package/schemas/writeback-job.v1.schema.json

@@ -88,6 +88,7 @@
         }
       ]
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": {
       "type": "object",

package/schemas/writeback-job.v2.schema.json

@@ -118,6 +118,7 @@
         }
       ]
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": {
       "type": "object",

package/schemas/writeback-job.v3.schema.json

@@ -21,6 +21,7 @@
     "patch": { "$ref": "#/$defs/scalarRecord" },
     "version_advance": { "$ref": "#/$defs/versionAdvance" },
     "frozen_set": { "$ref": "#/$defs/frozenSet" },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": { "type": "object", "additionalProperties": false, "required": ["lease_id", "attempt", "expires_at"], "properties": { "lease_id": { "type": "string", "minLength": 1 }, "attempt": { "type": "integer", "minimum": 1 }, "expires_at": { "type": "string", "format": "date-time" } } }
   },