@synapsor/runner 1.6.0 → 1.6.2

package/fixtures/protocol/freshness-proof.fresh.v1.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": "synapsor.freshness-proof.v1",
+  "proposal_id": "wrp_update_2001",
+  "proposal_hash": "sha256:update-proposal",
+  "proposal_version": 1,
+  "dependency_set_digest": "sha256:720d1300cc30f5732c864f41ef79767268095483b0bac93d871b19299886141b",
+  "checked_at": "2026-07-23T18:00:00.000Z",
+  "valid_until": "2026-07-23T18:00:30.000Z",
+  "source_adapters": [
+    {
+      "source_id": "src_billing_demo",
+      "engine": "postgres"
+    }
+  ],
+  "result": "fresh",
+  "safe_code": "FRESHNESS_FRESH",
+  "target_count": 1,
+  "supporting_count": 1,
+  "checks": [
+    {
+      "id": "target",
+      "kind": "target",
+      "status": "fresh",
+      "safe_code": "FRESHNESS_TARGET_FRESH",
+      "expected_version_digest": "sha256:cf6cbc0a5d9b4fe7d9d3fd832e5e1b05b73fa6eefdc496fd95d7268ab1d9268c",
+      "observed_version_digest": "sha256:cf6cbc0a5d9b4fe7d9d3fd832e5e1b05b73fa6eefdc496fd95d7268ab1d9268c"
+    },
+    {
+      "id": "invoice_eligibility",
+      "kind": "supporting",
+      "status": "fresh",
+      "safe_code": "FRESHNESS_DEPENDENCY_FRESH",
+      "expected_version_digest": "sha256:cf6cbc0a5d9b4fe7d9d3fd832e5e1b05b73fa6eefdc496fd95d7268ab1d9268c",
+      "observed_version_digest": "sha256:cf6cbc0a5d9b4fe7d9d3fd832e5e1b05b73fa6eefdc496fd95d7268ab1d9268c"
+    }
+  ],
+  "proof_digest": "sha256:0030e42a6f494acdfd65fb4042c917444f2c6df621fcae5021b3d7d15fdc1877"
+}

package/fixtures/protocol/writeback-job.freshness-update.v2.json

@@ -0,0 +1,50 @@
+{
+  "schema_version": "synapsor.writeback-job.v2",
+  "writeback_job_id": "wbj_update_2001",
+  "proposal_id": "wrp_update_2001",
+  "proposal_version": 1,
+  "proposal_hash": "sha256:update-proposal",
+  "runner_scope": { "project_id": "project_demo", "source_id": "src_billing_demo" },
+  "engine": "postgres",
+  "target": {
+    "schema": "public",
+    "table": "account_credits",
+    "primary_key": { "column": "id", "value": "credit_2001" }
+  },
+  "tenant_guard": { "column": "tenant_id", "value": "tenant_demo" },
+  "allowed_columns": ["amount_cents"],
+  "mutation": {
+    "kind": "single_row_update",
+    "values": { "amount_cents": 2500 },
+    "conflict_guard": { "kind": "column", "column": "version", "expected_value": 7 },
+    "version_advance": { "column": "version", "strategy": "integer_increment" }
+  },
+  "freshness": {
+    "schema_version": "synapsor.freshness-authority.v1",
+    "required": true,
+    "target": { "mode": "exact_guard", "member_count": 1 },
+    "dependencies": [
+      {
+        "id": "invoice_eligibility",
+        "capability": "billing.inspect_invoice",
+        "source_id": "src_billing_demo",
+        "engine": "postgres",
+        "target": {
+          "schema": "public",
+          "table": "invoices",
+          "primary_key": { "column": "invoice_id", "value": "INV-3001" },
+          "tenant_column": "tenant_id"
+        },
+        "expected_version": { "column": "version", "value": 7 },
+        "evidence": {
+          "bundle_id": "ev_invoice_3001",
+          "query_fingerprint": "sha256:invoice-evidence"
+        },
+        "descriptor_digest": "sha256:c7f183d5697eff084d30ead6602383f6a0033c13080a859d2eb514d71ec4e9bf"
+      }
+    ],
+    "dependency_set_digest": "sha256:720d1300cc30f5732c864f41ef79767268095483b0bac93d871b19299886141b"
+  },
+  "idempotency_key": "idem_update_2001",
+  "lease": { "lease_id": "lease_update_2001", "attempt": 1, "expires_at": "2026-07-23T19:00:00Z" }
+}

package/llms.txt

@@ -10,6 +10,7 @@ Start here:
 - Auto Boundary, Scoped Explore, and Protect: https://github.com/Synapsor/Synapsor-Runner/blob/main/docs/auto-boundary-and-scoped-explore.md
 - Connect a staging database: https://github.com/Synapsor/Synapsor-Runner/blob/main/docs/getting-started-own-database.md
 - Security boundary: https://github.com/Synapsor/Synapsor-Runner/blob/main/docs/security-boundary.md
+- Proposal and evidence freshness: https://github.com/Synapsor/Synapsor-Runner/blob/main/docs/proposal-evidence-freshness.md
 - Current scope: https://github.com/Synapsor/Synapsor-Runner/blob/main/docs/current-scope.md
 - Current limitations: https://github.com/Synapsor/Synapsor-Runner/blob/main/docs/limitations.md
 - DSL reference: https://github.com/Synapsor/Synapsor-Runner/blob/main/docs/dsl-reference.md

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synapsor/runner",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "description": "Stop giving AI agents execute_sql; expose reviewed Postgres/MySQL MCP actions with proposals, approval, writeback, and replay.",
   "license": "Apache-2.0",
   "type": "module",
@@ -85,6 +85,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
+    "@synapsor/spec": "^1.5.0",
     "jose": "6.2.3",
     "mysql2": "^3.11.0",
     "pdf-lib": "1.17.1",
@@ -93,8 +94,7 @@
     "vscode-languageserver": "9.0.1",
     "vscode-languageserver-textdocument": "1.0.12",
     "yaml": "2.8.3",
-    "zod": "^3.25.0",
-    "@synapsor/spec": "^1.5.0"
+    "zod": "^3.25.0"
   },
   "devDependencies": {
     "@types/pg": "^8.11.0",
@@ -114,6 +114,7 @@
   },
   "scripts": {
     "build": "tsc -b && node ../../scripts/build-runner-package.mjs",
+    "check:publish-manifest": "node ../../scripts/check-runner-publish-manifest.mjs --source",
     "test": "vitest run"
   }
 }

package/schemas/change-set.v1.schema.json

@@ -80,6 +80,7 @@
         "expected_version": { "$ref": "#/$defs/columnValue" }
       }
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "evidence": {
       "type": "object",
       "additionalProperties": true,

package/schemas/change-set.v2.schema.json

@@ -92,6 +92,7 @@
         "deduplication": { "$ref": "#/$defs/deduplication" }
       }
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "evidence": {
       "type": "object",
       "additionalProperties": true,

package/schemas/change-set.v3.schema.json

@@ -42,6 +42,7 @@
         "version_advance": { "$ref": "#/$defs/versionAdvance" }
       }
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "frozen_set": { "$ref": "#/$defs/frozenSet" },
     "evidence": {
       "type": "object", "additionalProperties": true, "required": ["bundle_id", "query_fingerprint", "items"],

package/schemas/freshness-authority.v1.schema.json

@@ -0,0 +1,89 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json",
+  "title": "Synapsor Freshness Authority v1",
+  "description": "Reviewed, immutable authority for target and supporting-row freshness checks. Digests are validated by the protocol runtime.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "required", "target", "dependencies", "dependency_set_digest"],
+  "properties": {
+    "schema_version": { "const": "synapsor.freshness-authority.v1" },
+    "required": { "const": true },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "member_count"],
+      "properties": {
+        "mode": { "enum": ["exact_guard", "frozen_set", "not_applicable"] },
+        "member_count": { "type": "integer", "minimum": 0, "maximum": 100 }
+      }
+    },
+    "dependencies": {
+      "type": "array",
+      "maxItems": 16,
+      "items": { "$ref": "#/$defs/dependency" }
+    },
+    "dependency_set_digest": { "$ref": "#/$defs/sha256" }
+  },
+  "$defs": {
+    "safeIdentifier": { "type": "string", "pattern": "^[A-Za-z_][A-Za-z0-9_]*$" },
+    "capabilityName": {
+      "type": "string",
+      "pattern": "^[A-Za-z_][A-Za-z0-9_.-]*\\.[A-Za-z_][A-Za-z0-9_.-]*$"
+    },
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "scalar": { "type": ["string", "number", "boolean", "null"] },
+    "columnValue": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["column", "value"],
+      "properties": {
+        "column": { "$ref": "#/$defs/safeIdentifier" },
+        "value": { "$ref": "#/$defs/scalar" }
+      }
+    },
+    "dependency": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "capability",
+        "source_id",
+        "engine",
+        "target",
+        "expected_version",
+        "evidence",
+        "descriptor_digest"
+      ],
+      "properties": {
+        "id": { "$ref": "#/$defs/safeIdentifier" },
+        "capability": { "$ref": "#/$defs/capabilityName" },
+        "source_id": { "type": "string", "minLength": 1, "maxLength": 160 },
+        "engine": { "enum": ["postgres", "mysql"] },
+        "target": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["schema", "table", "primary_key", "tenant_column"],
+          "properties": {
+            "schema": { "$ref": "#/$defs/safeIdentifier" },
+            "table": { "$ref": "#/$defs/safeIdentifier" },
+            "primary_key": { "$ref": "#/$defs/columnValue" },
+            "tenant_column": { "$ref": "#/$defs/safeIdentifier" },
+            "principal_column": { "$ref": "#/$defs/safeIdentifier" }
+          }
+        },
+        "expected_version": { "$ref": "#/$defs/columnValue" },
+        "evidence": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["bundle_id", "query_fingerprint"],
+          "properties": {
+            "bundle_id": { "type": "string", "minLength": 1, "maxLength": 200 },
+            "query_fingerprint": { "$ref": "#/$defs/sha256" }
+          }
+        },
+        "descriptor_digest": { "$ref": "#/$defs/sha256" }
+      }
+    }
+  }
+}

package/schemas/freshness-proof.v1.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.synapsor.ai/synapsor.freshness-proof.v1.schema.json",
+  "title": "Synapsor Freshness Proof v1",
+  "description": "Bounded immutable result of a live freshness preflight. Digest and cross-field integrity are validated by the protocol runtime.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "proposal_id",
+    "proposal_hash",
+    "proposal_version",
+    "dependency_set_digest",
+    "checked_at",
+    "valid_until",
+    "source_adapters",
+    "result",
+    "safe_code",
+    "target_count",
+    "supporting_count",
+    "checks",
+    "proof_digest"
+  ],
+  "properties": {
+    "schema_version": { "const": "synapsor.freshness-proof.v1" },
+    "proposal_id": { "type": "string", "minLength": 1 },
+    "proposal_hash": { "$ref": "#/$defs/sha256" },
+    "proposal_version": { "type": "integer", "minimum": 1 },
+    "dependency_set_digest": { "$ref": "#/$defs/sha256" },
+    "checked_at": { "type": "string", "format": "date-time" },
+    "valid_until": { "type": "string", "format": "date-time" },
+    "source_adapters": {
+      "type": "array",
+      "minItems": 1,
+      "maxItems": 8,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["source_id", "engine"],
+        "properties": {
+          "source_id": { "type": "string", "minLength": 1, "maxLength": 160 },
+          "engine": { "enum": ["postgres", "mysql"] }
+        }
+      }
+    },
+    "result": { "enum": ["fresh", "stale", "unavailable", "invalid", "unsupported"] },
+    "safe_code": { "$ref": "#/$defs/safeCode" },
+    "target_count": { "type": "integer", "minimum": 0, "maximum": 100 },
+    "supporting_count": { "type": "integer", "minimum": 0, "maximum": 16 },
+    "checks": {
+      "type": "array",
+      "maxItems": 116,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["id", "kind", "status", "safe_code"],
+        "properties": {
+          "id": { "type": "string", "minLength": 1, "maxLength": 160 },
+          "kind": { "enum": ["target", "supporting"] },
+          "status": { "enum": ["fresh", "stale", "not_applicable", "unavailable", "invalid", "unsupported"] },
+          "safe_code": { "$ref": "#/$defs/safeCode" },
+          "expected_version_digest": { "$ref": "#/$defs/sha256" },
+          "observed_version_digest": { "$ref": "#/$defs/sha256" }
+        }
+      }
+    },
+    "proof_digest": { "$ref": "#/$defs/sha256" }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^sha256:.+" },
+    "safeCode": { "type": "string", "pattern": "^[A-Z][A-Z0-9_]*$" }
+  }
+}

package/schemas/synapsor.runner.schema.json

@@ -162,6 +162,38 @@
       "type": "array",
       "items": { "$ref": "#/$defs/policy" }
     },
+    "proposal_freshness": {
+      "description": "Optional fail-closed live freshness policy for reviewed proposal capabilities. The model cannot configure or widen these dependencies.",
+      "type": "object",
+      "propertyNames": { "$ref": "#/$defs/qualified_name" },
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["approval"],
+        "properties": {
+          "approval": {
+            "description": "Require a live source freshness proof immediately before every approval decision.",
+            "const": "required"
+          },
+          "dependencies": {
+            "description": "Reviewed same-source single-row reads whose exact versions must still match at approval and apply.",
+            "type": "array",
+            "maxItems": 16,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["id", "capability", "identity_from_arg", "version_column"],
+              "properties": {
+                "id": { "$ref": "#/$defs/identifier" },
+                "capability": { "$ref": "#/$defs/qualified_name" },
+                "identity_from_arg": { "$ref": "#/$defs/identifier" },
+                "version_column": { "$ref": "#/$defs/identifier" }
+              }
+            }
+          }
+        }
+      }
+    },
     "approvals": {
       "description": "Local approval behavior overrides.",
       "type": "object",

package/schemas/writeback-job.v1.schema.json

@@ -88,6 +88,7 @@
         }
       ]
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": {
       "type": "object",

package/schemas/writeback-job.v2.schema.json

@@ -118,6 +118,7 @@
         }
       ]
     },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": {
       "type": "object",

package/schemas/writeback-job.v3.schema.json

@@ -21,6 +21,7 @@
     "patch": { "$ref": "#/$defs/scalarRecord" },
     "version_advance": { "$ref": "#/$defs/versionAdvance" },
     "frozen_set": { "$ref": "#/$defs/frozenSet" },
+    "freshness": { "$ref": "https://schemas.synapsor.ai/synapsor.freshness-authority.v1.schema.json" },
     "idempotency_key": { "type": "string", "minLength": 1 },
     "lease": { "type": "object", "additionalProperties": false, "required": ["lease_id", "attempt", "expires_at"], "properties": { "lease_id": { "type": "string", "minLength": 1 }, "attempt": { "type": "integer", "minimum": 1 }, "expires_at": { "type": "string", "format": "date-time" } } }
   },