@synapsor/runner 1.6.3 → 1.6.4

package/fixtures/compatibility/published-1.6.3/sources/packages/spec/fixtures/conformance/bounded-set-threats/contract.json

@@ -0,0 +1,115 @@
+{
+  "spec_version": "0.1",
+  "kind": "SynapsorContract",
+  "metadata": { "name": "bounded-set-threats", "version": "1.0.0" },
+  "contexts": [
+    {
+      "name": "trusted_operator",
+      "bindings": [
+        { "name": "tenant_id", "source": "environment", "key": "SYNAPSOR_TENANT_ID", "required": true },
+        { "name": "principal", "source": "environment", "key": "SYNAPSOR_PRINCIPAL", "required": true }
+      ],
+      "tenant_binding": "tenant_id",
+      "principal_binding": "principal"
+    }
+  ],
+  "capabilities": [
+    {
+      "name": "billing.close_overdue_invoices",
+      "kind": "proposal",
+      "context": "trusted_operator",
+      "source": "local_postgres",
+      "subject": { "schema": "public", "table": "invoices", "primary_key": "id", "tenant_key": "tenant_id", "conflict_key": "version" },
+      "args": { "reason": { "type": "string", "required": true, "max_length": 500 } },
+      "visible_fields": ["id", "tenant_id", "status", "balance_cents", "version"],
+      "kept_out_fields": ["internal_risk_score"],
+      "evidence": { "required": true, "query_audit": true },
+      "proposal": {
+        "action": "close_overdue",
+        "operation": {
+          "kind": "update",
+          "cardinality": "set",
+          "selection": { "all": [{ "column": "status", "operator": "eq", "value": "overdue" }] },
+          "max_rows": 10,
+          "aggregate_bounds": [{ "column": "balance_cents", "measure": "before", "maximum": 50000 }],
+          "version_advance": { "column": "version", "strategy": "integer_increment" }
+        },
+        "allowed_fields": ["status", "close_reason"],
+        "patch": { "status": { "fixed": "closed" }, "close_reason": { "from_arg": "reason" } },
+        "conflict_guard": { "column": "version" },
+        "approval": { "mode": "human", "required_role": "billing_reviewer" },
+        "writeback": { "mode": "direct_sql" }
+      }
+    },
+    {
+      "name": "billing.delete_expired_drafts",
+      "kind": "proposal",
+      "context": "trusted_operator",
+      "source": "local_postgres",
+      "subject": { "schema": "public", "table": "invoice_drafts", "primary_key": "id", "tenant_key": "tenant_id", "conflict_key": "version" },
+      "args": { "reason": { "type": "string", "required": true, "max_length": 500 } },
+      "visible_fields": ["id", "tenant_id", "status", "estimated_cents", "version"],
+      "evidence": { "required": true, "query_audit": true },
+      "proposal": {
+        "action": "delete_expired_drafts",
+        "operation": {
+          "kind": "delete",
+          "cardinality": "set",
+          "selection": { "all": [{ "column": "status", "operator": "eq", "value": "expired" }] },
+          "max_rows": 5,
+          "aggregate_bounds": [{ "column": "estimated_cents", "measure": "before", "maximum": 10000 }]
+        },
+        "allowed_fields": [],
+        "patch": {},
+        "conflict_guard": { "column": "version" },
+        "approval": { "mode": "human", "required_role": "billing_reviewer", "required_approvals": 2 },
+        "writeback": { "mode": "direct_sql" }
+      }
+    },
+    {
+      "name": "billing.create_credits",
+      "kind": "proposal",
+      "context": "trusted_operator",
+      "source": "local_postgres",
+      "subject": { "schema": "public", "table": "account_credits", "primary_key": "id", "tenant_key": "tenant_id" },
+      "args": {
+        "items": {
+          "type": "object_array",
+          "required": true,
+          "max_items": 10,
+          "fields": {
+            "id": { "type": "string", "required": true, "max_length": 128 },
+            "external_id": { "type": "string", "required": true, "max_length": 128 },
+            "amount_cents": { "type": "number", "required": true, "minimum": 1, "maximum": 2500 },
+            "reason": { "type": "string", "required": true, "max_length": 500 }
+          }
+        }
+      },
+      "visible_fields": ["id", "tenant_id", "external_id", "amount_cents", "reason", "version"],
+      "kept_out_fields": ["internal_note"],
+      "evidence": { "required": true, "query_audit": true },
+      "proposal": {
+        "action": "create_credits",
+        "operation": {
+          "kind": "insert",
+          "cardinality": "set",
+          "batch": { "items_from_arg": "items" },
+          "max_rows": 10,
+          "aggregate_bounds": [{ "column": "amount_cents", "measure": "after", "maximum": 25000 }],
+          "deduplication": {
+            "components": [
+              { "column": "tenant_id", "source": "trusted_tenant" },
+              { "column": "id", "source": "item_field", "item_field": "id" },
+              { "column": "external_id", "source": "item_field", "item_field": "external_id" }
+            ]
+          }
+        },
+        "allowed_fields": ["amount_cents", "reason"],
+        "patch": { "amount_cents": { "from_item": "amount_cents" }, "reason": { "from_item": "reason" } },
+        "numeric_bounds": { "amount_cents": { "minimum": 1, "maximum": 2500 } },
+        "approval": { "mode": "human", "required_role": "billing_reviewer" },
+        "writeback": { "mode": "direct_sql" }
+      }
+    }
+  ]
+}

package/fixtures/compatibility/published-1.6.3/sources/packages/spec/fixtures/conformance/principal-row-scope/contract.json

@@ -0,0 +1,78 @@
+{
+  "spec_version": "0.1",
+  "kind": "SynapsorContract",
+  "metadata": {
+    "name": "trusted principal row scope",
+    "description": "Tenant-additive row authority for two case managers in one hospital."
+  },
+  "contexts": [
+    {
+      "name": "care_session",
+      "bindings": [
+        {
+          "name": "hospital_id",
+          "source": "http_claim",
+          "key": "hospital_id",
+          "required": true
+        },
+        {
+          "name": "principal",
+          "source": "http_claim",
+          "key": "sub",
+          "required": true
+        }
+      ],
+      "tenant_binding": "hospital_id",
+      "principal_binding": "principal"
+    }
+  ],
+  "resources": [],
+  "capabilities": [
+    {
+      "name": "care.inspect_assigned_patient",
+      "description": "Inspect one patient assigned to the authenticated case manager within the trusted hospital.",
+      "returns_hint": "Returns reviewed patient fields and evidence only when both tenant and assignee locks match.",
+      "kind": "read",
+      "context": "care_session",
+      "source": "local_postgres",
+      "subject": {
+        "schema": "public",
+        "table": "patients",
+        "primary_key": "id",
+        "tenant_key": "hospital_id",
+        "principal_scope_key": "assigned_to",
+        "conflict_key": "updated_at"
+      },
+      "args": {
+        "patient_id": {
+          "type": "string",
+          "required": true,
+          "description": "Reviewed patient identifier.",
+          "max_length": 128
+        }
+      },
+      "lookup": {
+        "id_from_arg": "patient_id"
+      },
+      "visible_fields": [
+        "id",
+        "hospital_id",
+        "display_name",
+        "care_status",
+        "updated_at"
+      ],
+      "kept_out_fields": [
+        "assigned_to",
+        "diagnosis_notes",
+        "insurance_member_id"
+      ],
+      "evidence": {
+        "required": true,
+        "query_audit": true
+      },
+      "max_rows": 1
+    }
+  ],
+  "workflows": [],
+  "policies": []
+}

package/fixtures/compatibility/published-1.6.3/sources/packages/spec/fixtures/conformance/proposal-capability/contract.json

@@ -0,0 +1,101 @@
+{
+  "spec_version": "0.1",
+  "kind": "SynapsorContract",
+  "metadata": {
+    "name": "proposal capability conformance"
+  },
+  "resources": [
+    {
+      "name": "billing_invoices",
+      "engine": "postgres",
+      "schema": "public",
+      "table": "invoices",
+      "primary_key": "id",
+      "tenant_key": "tenant_id",
+      "conflict_key": "updated_at"
+    }
+  ],
+  "contexts": [
+    {
+      "name": "local_operator",
+      "bindings": [
+        {
+          "name": "tenant_id",
+          "source": "environment",
+          "key": "SYNAPSOR_TENANT_ID"
+        },
+        {
+          "name": "principal",
+          "source": "environment",
+          "key": "SYNAPSOR_PRINCIPAL"
+        }
+      ],
+      "tenant_binding": "tenant_id",
+      "principal_binding": "principal"
+    }
+  ],
+  "capabilities": [
+    {
+      "name": "billing.propose_late_fee_waiver",
+      "kind": "proposal",
+      "context": "local_operator",
+      "source": "local_postgres",
+      "subject": {
+        "resource": "billing_invoices"
+      },
+      "args": {
+        "invoice_id": {
+          "type": "string",
+          "required": true
+        },
+        "waiver_reason": {
+          "type": "string",
+          "required": true
+        }
+      },
+      "lookup": {
+        "id_from_arg": "invoice_id"
+      },
+      "visible_fields": [
+        "id",
+        "tenant_id",
+        "late_fee_cents",
+        "waiver_reason",
+        "updated_at"
+      ],
+      "kept_out_fields": [
+        "card_token"
+      ],
+      "evidence": {
+        "required": true,
+        "query_audit": true
+      },
+      "max_rows": 1,
+      "proposal": {
+        "action": "billing.waive_late_fee",
+        "allowed_fields": [
+          "late_fee_cents",
+          "waiver_reason"
+        ],
+        "patch": {
+          "late_fee_cents": {
+            "fixed": 0
+          },
+          "waiver_reason": {
+            "from_arg": "waiver_reason"
+          }
+        },
+        "conflict_guard": {
+          "column": "updated_at"
+        },
+        "approval": {
+          "mode": "human",
+          "required_role": "billing_lead"
+        },
+        "writeback": {
+          "mode": "direct_sql"
+        }
+      }
+    }
+  ]
+}

package/fixtures/compatibility/published-1.6.3/sources/packages/spec/fixtures/conformance/reversible-change-sets/contract.json

@@ -0,0 +1,98 @@
+{
+  "spec_version": "0.1",
+  "kind": "SynapsorContract",
+  "metadata": {
+    "name": "reviewed-reversible-change-sets",
+    "version": "1.4.0"
+  },
+  "contexts": [
+    {
+      "name": "trusted_operator",
+      "bindings": [
+        { "name": "tenant_id", "source": "environment", "key": "SYNAPSOR_TENANT_ID", "required": true },
+        { "name": "principal", "source": "environment", "key": "SYNAPSOR_PRINCIPAL", "required": true }
+      ],
+      "tenant_binding": "tenant_id",
+      "principal_binding": "principal"
+    }
+  ],
+  "capabilities": [
+    {
+      "name": "billing.adjust_credit",
+      "kind": "proposal",
+      "context": "trusted_operator",
+      "source": "local_postgres",
+      "subject": {
+        "schema": "public",
+        "table": "account_credits",
+        "primary_key": "id",
+        "tenant_key": "tenant_id",
+        "conflict_key": "version"
+      },
+      "args": {
+        "credit_id": { "type": "string", "required": true, "max_length": 128 },
+        "amount_cents": { "type": "number", "required": true, "minimum": 0, "maximum": 2500 }
+      },
+      "lookup": { "id_from_arg": "credit_id" },
+      "visible_fields": ["id", "tenant_id", "amount_cents", "version"],
+      "kept_out_fields": ["internal_note"],
+      "evidence": { "required": true, "query_audit": true },
+      "proposal": {
+        "action": "adjust_credit",
+        "operation": {
+          "kind": "update",
+          "cardinality": "single",
+          "version_advance": { "column": "version", "strategy": "integer_increment" }
+        },
+        "allowed_fields": ["amount_cents"],
+        "patch": { "amount_cents": { "from_arg": "amount_cents" } },
+        "numeric_bounds": { "amount_cents": { "minimum": 0, "maximum": 2500 } },
+        "reversibility": { "mode": "reviewed_inverse" },
+        "conflict_guard": { "column": "version" },
+        "approval": { "mode": "human", "required_role": "billing_reviewer", "required_approvals": 2 },
+        "writeback": { "mode": "direct_sql" }
+      }
+    },
+    {
+      "name": "billing.create_credit",
+      "kind": "proposal",
+      "context": "trusted_operator",
+      "source": "local_postgres",
+      "subject": {
+        "schema": "public",
+        "table": "account_credits",
+        "primary_key": "id",
+        "tenant_key": "tenant_id"
+      },
+      "args": {
+        "amount_cents": { "type": "number", "required": true, "minimum": 1, "maximum": 2500 },
+        "reason": { "type": "string", "required": true, "max_length": 500 }
+      },
+      "visible_fields": ["id", "tenant_id", "amount_cents", "reason"],
+      "kept_out_fields": ["internal_note"],
+      "evidence": { "required": true, "query_audit": true },
+      "proposal": {
+        "action": "create_credit",
+        "operation": {
+          "kind": "insert",
+          "cardinality": "single",
+          "deduplication": {
+            "components": [
+              { "column": "tenant_id", "source": "trusted_tenant" },
+              { "column": "id", "source": "proposal_id" }
+            ]
+          }
+        },
+        "allowed_fields": ["amount_cents", "reason"],
+        "patch": {
+          "amount_cents": { "from_arg": "amount_cents" },
+          "reason": { "from_arg": "reason" }
+        },
+        "numeric_bounds": { "amount_cents": { "minimum": 1, "maximum": 2500 } },
+        "reversibility": { "mode": "reviewed_inverse" },
+        "approval": { "mode": "human", "required_role": "billing_reviewer" },
+        "writeback": { "mode": "direct_sql" }
+      }
+    }
+  ]
+}

package/fixtures/compatibility/published-1.6.3/sources/packages/spec/fixtures/valid/basic-read.contract.json

@@ -0,0 +1,60 @@
+{
+  "spec_version": "0.1",
+  "kind": "SynapsorContract",
+  "contexts": [
+    {
+      "name": "local_operator",
+      "bindings": [
+        {
+          "name": "tenant_id",
+          "source": "environment",
+          "key": "SYNAPSOR_TENANT_ID"
+        },
+        {
+          "name": "principal",
+          "source": "environment",
+          "key": "SYNAPSOR_PRINCIPAL"
+        }
+      ],
+      "tenant_binding": "tenant_id",
+      "principal_binding": "principal"
+    }
+  ],
+  "capabilities": [
+    {
+      "name": "billing.inspect_invoice",
+      "kind": "read",
+      "context": "local_operator",
+      "subject": {
+        "schema": "public",
+        "table": "invoices",
+        "primary_key": "id",
+        "tenant_key": "tenant_id",
+        "conflict_key": "updated_at"
+      },
+      "args": {
+        "invoice_id": {
+          "type": "string",
+          "required": true
+        }
+      },
+      "lookup": {
+        "id_from_arg": "invoice_id"
+      },
+      "visible_fields": [
+        "id",
+        "tenant_id",
+        "late_fee_cents",
+        "updated_at"
+      ],
+      "kept_out_fields": [
+        "card_token"
+      ],
+      "evidence": {
+        "required": true,
+        "query_audit": true
+      },
+      "max_rows": 1
+    }
+  ]
+}

package/llms.txt

@@ -18,17 +18,22 @@ Start here:
 
 Current adoption loop:
 Connect staging -> deterministic whole-schema draft -> human boundary review ->
-bounded row or PM-style aggregate Explore in local Cursor -> Protect This Query
--> digest-bound human activation -> named production capability -> proposal ->
-external approval -> guarded commit -> receipt and replay.
+bounded row or PM-style aggregate Explore in Workbench or an MCP client ->
+Protect This Query -> digest-bound human activation -> named production
+capability -> proposal -> external approval -> guarded commit -> receipt and
+replay.
 
 Important boundaries:
 - No raw SQL or SQL-string tool argument.
 - Scoped Explore is disabled by default and is local development/staging
   authoring only. Production and shared/remote HTTP never advertise it.
 - Aggregate Explore is a reviewed analytical cube: approved measures,
-  dimensions, time buckets, filters, at most one proven many-to-one path,
-  suppression, and extraction/differencing budgets.
+  dimensions, time buckets, filters, and at most three activated paths of one
+  or two catalog-proven many-to-one links, plus suppression and
+  extraction/differencing budgets.
+- Optional local Workbench Ask can use OpenAI, Anthropic, or a tested
+  OpenAI-compatible endpoint, but it calls only the exact reviewed tools and
+  adds no activation, approval, or commit authority.
 - Auto Boundary and Protect are deterministic and use no LLM.
 - Generated authority starts disabled. The model cannot activate, approve,
   apply, commit, or widen it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@synapsor/runner",
-  "version": "1.6.3",
+  "version": "1.6.4",
   "description": "Open-source MCP runtime for governed Postgres/MySQL access with reviewed capabilities, proposals, guarded writes, receipts, and replay.",
   "license": "Apache-2.0",
   "type": "module",
@@ -8,6 +8,10 @@
     "synapsor-runner": "dist/cli.js"
   },
   "exports": {
+    "./cli": {
+      "types": "./dist/cli.d.ts",
+      "import": "./dist/runner.mjs"
+    },
     "./authoring": {
       "types": "./dist/authoring.d.ts",
       "import": "./dist/authoring.mjs"
@@ -41,6 +45,8 @@
     "examples/dangerous-mcp-tools.json",
     "examples/app-owned-writeback/**",
     "examples/auto-boundary-churn/**",
+    "examples/community-solar-clean-room/**",
+    "examples/retail-clean-room/**",
     "examples/fitflow-guided-onboarding/**",
     "examples/claude-desktop-postgres/**",
     "examples/cursor-postgres/**",
@@ -87,7 +93,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.29.0",
-    "@synapsor/spec": "^1.6.0",
+    "@synapsor/spec": "^1.7.0",
     "jose": "6.2.3",
     "mysql2": "^3.11.0",
     "pdf-lib": "1.17.1",