@synapsor/runner 1.6.0 → 1.6.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synapsor/runner",
-  "version": "1.6.0",
+  "version": "1.6.1",
   "description": "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
   "license": "Apache-2.0",
   "type": "module",
@@ -83,8 +83,14 @@
   "engines": {
     "node": ">=22.13.0"
   },
+  "scripts": {
+    "build": "tsc -b && node ../../scripts/build-runner-package.mjs",
+    "prepack": "cd ../.. && corepack pnpm build:runner-package",
+    "test": "vitest run"
+  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
+    "@synapsor/spec": "workspace:^",
     "jose": "6.2.3",
     "mysql2": "^3.11.0",
     "pdf-lib": "1.17.1",
@@ -93,8 +99,7 @@
     "vscode-languageserver": "9.0.1",
     "vscode-languageserver-textdocument": "1.0.12",
     "yaml": "2.8.3",
-    "zod": "^3.25.0",
-    "@synapsor/spec": "^1.5.0"
+    "zod": "^3.25.0"
   },
   "devDependencies": {
     "@types/pg": "^8.11.0",
@@ -111,9 +116,5 @@
   },
   "publishConfig": {
     "access": "public"
-  },
-  "scripts": {
-    "build": "tsc -b && node ../../scripts/build-runner-package.mjs",
-    "test": "vitest run"
   }
-}
+}

package/schemas/change-set.v1.schema.json

@@ -80,6 +80,7 @@
         "expected_version": { "$ref": "#/$defs/columnValue" }
       }
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "evidence": {
       "type": "object",
       "additionalProperties": true,

package/schemas/change-set.v2.schema.json

@@ -92,6 +92,7 @@
         "deduplication": { "$ref": "#/$defs/deduplication" }
       }
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "evidence": {
       "type": "object",
       "additionalProperties": true,

package/schemas/change-set.v3.schema.json

@@ -42,6 +42,7 @@
         "version_advance": { "$ref": "#/$defs/versionAdvance" }
       }
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "frozen_set": { "$ref": "#/$defs/frozenSet" },
     "evidence": {
       "type": "object", "additionalProperties": true, "required": ["bundle_id", "query_fingerprint", "items"],

package/schemas/freshness-authority.v1.schema.json

@@ -0,0 +1,89 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json",
+  "title": "Synapsor Freshness Authority v1",
+  "description": "Reviewed, immutable authority for target and supporting-row freshness checks. Digests are validated by the protocol runtime.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "required", "target", "dependencies", "dependency_set_digest"],
+  "properties": {
+    "schema_version": { "const": "synapsor.freshness-authority.v1" },
+    "required": { "const": true },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "member_count"],
+      "properties": {
+        "mode": { "enum": ["exact_guard", "frozen_set", "not_applicable"] },
+        "member_count": { "type": "integer", "minimum": 0, "maximum": 100 }
+      }
+    },
+    "dependencies": {
+      "type": "array",
+      "maxItems": 16,
+      "items": { "$ref": "#/$defs/dependency" }
+    },
+    "dependency_set_digest": { "$ref": "#/$defs/sha256" }
+  },
+  "$defs": {
+    "safeIdentifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
+    "capabilityName": {
+      "type": "string",
+      "pattern": "^[A-Za-z_][A-Za-z0-9_.-]*\\.[A-Za-z_][A-Za-z0-9_.-]*$"
+    },
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "scalar": { "type": ["string", "number", "boolean", "null"] },
+    "columnValue": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["column", "value"],
+      "properties": {
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "value": { "$ref": "#/$defs/scalar" }
+      }
+    },
+    "dependency": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "capability",
+        "source_id",
+        "engine",
+        "target",
+        "expected_version",
+        "evidence",
+        "descriptor_digest"
+      ],
+      "properties": {
+        "id": { "$ref": "#/$defs/safeIdentifier" },
+        "capability": { "$ref": "#/$defs/capabilityName" },
+        "source_id": { "type": "string", "minLength": 1, "maxLength": 160 },
+        "engine": { "enum": ["postgres", "mysql"] },
+        "target": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["schema", "table", "primary_key", "tenant_column"],
+          "properties": {
+            "schema": { "$ref": "#/$defs/safeIdentifier" },
+            "table": { "$ref": "#/$defs/safeIdentifier" },
+            "primary_key": { "$ref": "#/$defs/columnValue" },
+            "tenant_column": { "$ref": "#/$defs/safeIdentifier" },
+            "principal_column": { "$ref": "#/$defs/safeIdentifier" }
+          }
+        },
+        "expected_version": { "$ref": "#/$defs/columnValue" },
+        "evidence": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["bundle_id", "query_fingerprint"],
+          "properties": {
+            "bundle_id": { "type": "string", "minLength": 1, "maxLength": 200 },
+            "query_fingerprint": { "$ref": "#/$defs/sha256" }
+          }
+        },
+        "descriptor_digest": { "$ref": "#/$defs/sha256" }
+      }
+    }
+  }
+}

package/schemas/freshness-proof.v1.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.freshness-proof.v1.schema.json",
+  "title": "Synapsor Freshness Proof v1",
+  "description": "Bounded immutable result of a live freshness preflight. Digest and cross-field integrity are validated by the protocol runtime.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "proposal_id",
+    "proposal_hash",
+    "proposal_version",
+    "dependency_set_digest",
+    "checked_at",
+    "valid_until",
+    "source_adapters",
+    "result",
+    "safe_code",
+    "target_count",
+    "supporting_count",
+    "checks",
+    "proof_digest"
+  ],
+  "properties": {
+    "schema_version": { "const": "synapsor.freshness-proof.v1" },
+    "proposal_id": { "type": "string", "minLength": 1 },
+    "proposal_hash": { "$ref": "#/$defs/sha256" },
+    "proposal_version": { "type": "integer", "minimum": 1 },
+    "dependency_set_digest": { "$ref": "#/$defs/sha256" },
+    "checked_at": { "type": "string", "format": "date-time" },
+    "valid_until": { "type": "string", "format": "date-time" },
+    "source_adapters": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 8,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["source_id", "engine"],
+        "properties": {
+          "source_id": { "type": "string", "minLength": 1, "maxLength": 160 },
+          "engine": { "enum": ["postgres", "mysql"] }
+        }
+      }
+    },
+    "result": { "enum": ["fresh", "stale", "unavailable", "invalid", "unsupported"] },
+    "safe_code": { "$ref": "#/$defs/safeCode" },
+    "target_count": { "type": "integer", "minimum": 0, "maximum": 100 },
+    "supporting_count": { "type": "integer", "minimum": 0, "maximum": 16 },
+    "checks": {
+      "type": "array",
+      "maxItems": 116,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "kind", "status", "safe_code"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1, "maxLength": 160 },
+          "kind": { "enum": ["target", "supporting"] },
+          "status": { "enum": ["fresh", "stale", "not_applicable", "unavailable", "invalid", "unsupported"] },
+          "safe_code": { "$ref": "#/$defs/safeCode" },
+          "expected_version_digest": { "$ref": "#/$defs/sha256" },
+          "observed_version_digest": { "$ref": "#/$defs/sha256" }
+        }
+      }
+    },
+    "proof_digest": { "$ref": "#/$defs/sha256" }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "safeCode": { "type": "string", "pattern": "^[A-Z][A-Z0-9_]*$" }
+  }
+}

package/schemas/synapsor.runner.schema.json

@@ -162,6 +162,38 @@
       "type": "array",
       "items": { "$ref": "#/$defs/policy" }
     },
+    "proposal_freshness": {
+      "description": "Optional fail-closed live freshness policy for reviewed proposal capabilities. The model cannot configure or widen these dependencies.",
+      "type": "object",
+      "propertyNames": { "$ref": "#/$defs/qualified_name" },
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["approval"],
+        "properties": {
+          "approval": {
+            "description": "Require a live source freshness proof immediately before every approval decision.",
+            "const": "required"
+          },
+          "dependencies": {
+            "description": "Reviewed same-source single-row reads whose exact versions must still match at approval and apply.",
+            "type": "array",
+            "maxItems": 16,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["id", "capability", "identity_from_arg", "version_column"],
+              "properties": {
+                "id": { "$ref": "#/$defs/identifier" },
+                "capability": { "$ref": "#/$defs/qualified_name" },
+                "identity_from_arg": { "$ref": "#/$defs/identifier" },
+                "version_column": { "$ref": "#/$defs/identifier" }
+              }
+            }
+          }
+        }
+      }
+    },
     "approvals": {
       "description": "Local approval behavior overrides.",
       "type": "object",

package/schemas/writeback-job.v1.schema.json

@@ -88,6 +88,7 @@
         }
       ]
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": {
       "type": "object",

package/schemas/writeback-job.v2.schema.json

@@ -118,6 +118,7 @@
         }
       ]
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": {
       "type": "object",

package/schemas/writeback-job.v3.schema.json

@@ -21,6 +21,7 @@
     "patch": { "$ref": "#/$defs/scalarRecord" },
     "version_advance": { "$ref": "#/$defs/versionAdvance" },
     "frozen_set": { "$ref": "#/$defs/frozenSet" },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": { "type": "object", "additionalProperties": false, "required": ["lease_id", "attempt", "expires_at"], "properties": { "lease_id": { "type": "string", "minLength": 1 }, "attempt": { "type": "integer", "minimum": 1 }, "expires_at": { "type": "string", "format": "date-time" } } }
   },