@synapsor/runner 1.6.3 → 1.6.5

package/examples/retail-clean-room/view-recipe/average-retained-revenue.synapsor.sql

@@ -0,0 +1,21 @@
+CREATE AGENT CONTEXT retail_analytics_context
+  BIND tenant_id FROM ENVIRONMENT SYNAPSOR_TENANT_ID REQUIRED
+  BIND principal FROM ENVIRONMENT SYNAPSOR_PRINCIPAL REQUIRED
+  TENANT BINDING tenant_id
+  PRINCIPAL BINDING principal
+END
+
+CREATE CAPABILITY retail.average_net_revenue_retention_pacific
+  DESCRIPTION 'Return the privacy-suppressed average net-to-gross revenue retention rate for Pacific orders assigned to the trusted manager.'
+  RETURNS HINT 'Returns one scalar average in basis points or a suppression result; never order rows.'
+  USING CONTEXT retail_analytics_context
+  SOURCE retail_postgres
+  ON public.reviewed_order_performance
+  PRIMARY KEY order_id
+  TENANT KEY merchant_id
+  PRINCIPAL SCOPE KEY assigned_manager_id
+  AGGREGATE READ AVG net_revenue_retention_basis_points
+  SELECT WHERE region_id = 'region-pacific'
+  MIN GROUP SIZE 5
+  REQUIRE EVIDENCE
+END

package/examples/retail-clean-room/view-recipe/synapsor.runner.json

@@ -0,0 +1,25 @@
+{
+  "version": 1,
+  "mode": "review",
+  "storage": {
+    "sqlite_path": "./.synapsor/view-recipe.db"
+  },
+  "contracts": [
+    "./average-retained-revenue.contract.json"
+  ],
+  "sources": {
+    "retail_postgres": {
+      "engine": "postgres",
+      "read_url_env": "DATABASE_URL",
+      "statement_timeout_ms": 3000,
+      "database_scope": {
+        "mode": "postgres_rls",
+        "tenant_setting": "app.tenant_id",
+        "principal_setting": "app.principal"
+      },
+      "credential_scope": {
+        "mode": "shared"
+      }
+    }
+  }
+}

package/examples/support-plan-credit/mcp-client-examples/claude-code.sh

@@ -8,10 +8,7 @@ claude mcp add-json --scope project synapsor "$(cat <<'JSON'
   "type": "stdio",
   "command": "npx",
   "args": [
-    "-y",
-    "-p",
-    "@synapsor/runner",
-    "synapsor-runner",
+    "-y", "@synapsor/runner",
     "mcp",
     "serve",
     "--config",

package/examples/support-plan-credit/mcp-client-examples/claude-desktop.json

@@ -3,10 +3,7 @@
     "synapsor-runner": {
       "command": "npx",
       "args": [
-        "-y",
-        "-p",
-        "@synapsor/runner",
-        "synapsor-runner",
+        "-y", "@synapsor/runner",
         "mcp",
         "serve",
         "--config",

package/examples/support-plan-credit/mcp-client-examples/codex.config.toml

@@ -4,10 +4,7 @@
 [mcp_servers.synapsor]
 command = "npx"
 args = [
-  "-y",
-  "-p",
-  "@synapsor/runner",
-  "synapsor-runner",
+  "-y", "@synapsor/runner",
   "mcp",
   "serve",
   "--config",

package/examples/support-plan-credit/mcp-client-examples/cursor-global.mcp.json

@@ -4,10 +4,7 @@
       "type": "stdio",
       "command": "npx",
       "args": [
-        "-y",
-        "-p",
-        "@synapsor/runner",
-        "synapsor-runner",
+        "-y", "@synapsor/runner",
         "mcp",
         "serve",
         "--config",

package/examples/support-plan-credit/mcp-client-examples/cursor-project.mcp.json

@@ -4,10 +4,7 @@
       "type": "stdio",
       "command": "npx",
       "args": [
-        "-y",
-        "-p",
-        "@synapsor/runner",
-        "synapsor-runner",
+        "-y", "@synapsor/runner",
         "mcp",
         "serve",
         "--config",

package/examples/support-plan-credit/mcp-client-examples/generic-stdio.json

@@ -3,10 +3,7 @@
   "transport": "stdio",
   "command": "npx",
   "args": [
-    "-y",
-    "-p",
-    "@synapsor/runner",
-    "synapsor-runner",
+    "-y", "@synapsor/runner",
     "mcp",
     "serve",
     "--config",

package/examples/support-plan-credit/mcp-client-examples/generic-stdio.mjs

@@ -4,7 +4,7 @@ import { StdioClientTransport } from "@modelcontextprotocol/sdk/client/stdio.js"
 const transport = new StdioClientTransport({
   command: "npx",
   args: [
-    "-y", "-p", "@synapsor/runner", "synapsor-runner", "mcp", "serve",
+    "-y", "@synapsor/runner", "mcp", "serve",
     "--config", "./examples/support-plan-credit/synapsor.runner.json",
     "--store", "./tmp/support-plan-credit/local.db",
   ],

package/examples/support-plan-credit/mcp-client-examples/google-adk.py

@@ -21,7 +21,7 @@ root_agent = LlmAgent(
                 server_params=StdioServerParameters(
                     command="npx",
                     args=[
-                        "-y", "-p", "@synapsor/runner", "synapsor-runner",
+                        "-y", "@synapsor/runner",
                         "mcp", "serve", "--config",
                         "./examples/support-plan-credit/synapsor.runner.json",
                         "--store", "./tmp/support-plan-credit/local.db",

package/examples/support-plan-credit/mcp-client-examples/langchain.mjs

@@ -5,7 +5,7 @@ const client = new MultiServerMCPClient({
     transport: "stdio",
     command: "npx",
     args: [
-      "-y", "-p", "@synapsor/runner", "synapsor-runner", "mcp", "serve",
+      "-y", "@synapsor/runner", "mcp", "serve",
       "--config", "./examples/support-plan-credit/synapsor.runner.json",
       "--store", "./tmp/support-plan-credit/local.db",
     ],

package/examples/support-plan-credit/mcp-client-examples/llamaindex.py

@@ -7,7 +7,7 @@ async def main() -> None:
     client = BasicMCPClient(
         "npx",
         args=[
-            "-y", "-p", "@synapsor/runner", "synapsor-runner", "mcp", "serve",
+            "-y", "@synapsor/runner", "mcp", "serve",
             "--config", "./examples/support-plan-credit/synapsor.runner.json",
             "--store", "./tmp/support-plan-credit/local.db",
         ],

package/examples/support-plan-credit/mcp-client-examples/openai-agents-stdio.ts

@@ -2,7 +2,7 @@ import { Agent, MCPServerStdio, run } from "@openai/agents";
 
 const synapsor = new MCPServerStdio({
   name: "Synapsor Runner",
-  fullCommand: "npx -y -p @synapsor/runner synapsor-runner mcp serve --config examples/support-plan-credit/synapsor.runner.json --store ./tmp/support-plan-credit/local.db --alias-mode openai",
+  fullCommand: "npx -y @synapsor/runner mcp serve --config examples/support-plan-credit/synapsor.runner.json --store ./tmp/support-plan-credit/local.db --alias-mode openai",
 });
 
 await synapsor.connect();

package/examples/support-plan-credit/mcp-client-examples/vscode.mcp.json

@@ -4,10 +4,7 @@
       "type": "stdio",
       "command": "npx",
       "args": [
-        "-y",
-        "-p",
-        "@synapsor/runner",
-        "synapsor-runner",
+        "-y", "@synapsor/runner",
         "mcp",
         "serve",
         "--config",

package/fixtures/compatibility/published-1.6.3/manifest.json

@@ -0,0 +1,76 @@
+{
+  "schema_version": "synapsor.published-compatibility.v1",
+  "published_packages": {
+    "@synapsor/runner": {
+      "version": "1.6.3",
+      "npm_shasum": "bc0131f3452a9ad1ef53b5ba3c60b2ff4f776f84"
+    },
+    "@synapsor/dsl": {
+      "version": "1.6.0",
+      "npm_shasum": "b2010be0b7bcd45ee70a7539e4150c3a680ee37f"
+    },
+    "@synapsor/spec": {
+      "version": "1.6.0",
+      "npm_shasum": "cc162e525dc36e2aaa9dd7953465f2ba7bdbf042"
+    }
+  },
+  "contracts": [
+    {
+      "path": "packages/spec/fixtures/valid/basic-read.contract.json",
+      "source_sha256": "5ec499965f639d784603b7942390d18a3e742d79e4d510dbea470e166a743972",
+      "canonical_sha256": "9d3addfde77eb6528aae7b9e81ae0f582b5c002aa77ebb2d7381fe663f5f5b1e"
+    },
+    {
+      "path": "packages/spec/fixtures/conformance/aggregate-read/contract.json",
+      "source_sha256": "830bc208b749bb9ed6a4b4468571d58d68bc8a2b6e1072fc45fb87d1c68697e7",
+      "canonical_sha256": "ccc6ea17f449bfc207d1cea70ef3320d575c450a3904c850dcb631132c6e5602"
+    },
+    {
+      "path": "packages/spec/fixtures/conformance/proposal-capability/contract.json",
+      "source_sha256": "d4c25fb8f79f04c13bdb3daf8c18a44d4f1c61596660a67bf35d46d0f94f4100",
+      "canonical_sha256": "d895081246d41a072892b5dde6929099302492a77a229033fbfa5052cce34b18"
+    },
+    {
+      "path": "packages/spec/fixtures/conformance/bounded-set-threats/contract.json",
+      "source_sha256": "c902d45457789a6d87504ca434c8b299f3e09be779f3bfdf7bbd8684d575a10e",
+      "canonical_sha256": "64c7078ff1687762d95c17873238759b3572dce499f903a8d6f1aaa8faae5f24"
+    },
+    {
+      "path": "packages/spec/fixtures/conformance/reversible-change-sets/contract.json",
+      "source_sha256": "7e4f8da90a4b235097f76e70a7f550153bbf62d219e7ef6f4f2194f6c36fa205",
+      "canonical_sha256": "181f2e93ad3c53b9a1345a4ed6c8b5e24ab0201c00159f38659f0c2a00c037de"
+    },
+    {
+      "path": "packages/spec/fixtures/conformance/principal-row-scope/contract.json",
+      "source_sha256": "00a05c1f4e82cc9c4e5d2d68c9c9201cd9512ac42d63292314bb7b4845026996",
+      "canonical_sha256": "fc96a5327ab0f4b311c90da9b5585348e81349ed66bd3a22e41e5f29804c32a8"
+    },
+    {
+      "path": "packages/spec/fixtures/conformance/approval-quorum/contract.json",
+      "source_sha256": "dde6b328f648ba60d837fa363494d764d7eb0d2d9a8a81ff70a9c077edde410c",
+      "canonical_sha256": "9407a7d0cc4439c773c3caf721aaed6c6e163c403fa67518632829d8c5de33e7"
+    }
+  ],
+  "dsl_sources": [
+    {
+      "path": "packages/dsl/examples/aggregate-read.synapsor.sql",
+      "source_sha256": "bccac4c2eb0ab7b2fc099c7fb3f6fdc25ee2e6e534282aa19b46f0aec8191b8d",
+      "canonical_sha256": "0cc2d892f00a31a3582d773812a26c6c45c0ce343e1d8d09da226a5bbb7c93eb"
+    },
+    {
+      "path": "packages/dsl/examples/billing-late-fee.synapsor.sql",
+      "source_sha256": "f5c462cff7aa0cd01a08543c6096ee1d225ebba449d65b7470815b1aa7ec42cd",
+      "canonical_sha256": "d495df575d64e798a730dad385e097dfc2c2f371a1505865bc45179ad3c479f2"
+    },
+    {
+      "path": "packages/dsl/examples/bounded-set-multi-term.synapsor.sql",
+      "source_sha256": "0ae199034ebba8b25146435c911576118f948b55b54636a5e68f46002cd1c6dd",
+      "canonical_sha256": "5b3e84cf8f5062a8afcd50763bde907e6a141977456e74a81d01f8b3a484e422"
+    },
+    {
+      "path": "packages/dsl/examples/principal-row-scope.synapsor.sql",
+      "source_sha256": "08ccd769d633417ea45d478383d9628991f43262223f12c78bbd776202b10253",
+      "canonical_sha256": "e29f2819c267210e54f783c40d0f550d11d0d1de844dbe1590ed8c3405af3cf7"
+    }
+  ]
+}

package/fixtures/compatibility/published-1.6.3/sources/packages/dsl/examples/aggregate-read.synapsor.sql

@@ -0,0 +1,21 @@
+CREATE AGENT CONTEXT finance_operator
+  BIND tenant_id FROM ENVIRONMENT SYNAPSOR_TENANT_ID REQUIRED
+  BIND principal FROM ENVIRONMENT SYNAPSOR_PRINCIPAL REQUIRED
+  TENANT BINDING tenant_id
+  PRINCIPAL BINDING principal
+END
+
+CREATE CAPABILITY billing.overdue_balance_total
+  DESCRIPTION 'Return one suppressed overdue-balance aggregate for the trusted tenant.'
+  RETURNS HINT 'Returns one scalar or a suppression result; never member rows.'
+  USING CONTEXT finance_operator
+  SOURCE local_postgres
+  ON public.invoices
+  PRIMARY KEY id
+  TENANT KEY tenant_id
+  AGGREGATE READ SUM balance_cents
+  SELECT WHERE status = 'overdue'
+  MIN GROUP SIZE 5
+  KEEP OUT customer_email, private_notes
+  REQUIRE EVIDENCE
+END

package/fixtures/compatibility/published-1.6.3/sources/packages/dsl/examples/billing-late-fee.synapsor.sql

@@ -0,0 +1,56 @@
+CREATE AGENT CONTEXT local_operator
+  BIND tenant_id FROM ENVIRONMENT SYNAPSOR_TENANT_ID REQUIRED
+  BIND principal FROM ENVIRONMENT SYNAPSOR_PRINCIPAL REQUIRED
+  TENANT BINDING tenant_id
+  PRINCIPAL BINDING principal
+END
+
+CREATE CAPABILITY billing.inspect_invoice
+  DESCRIPTION 'Inspect one invoice in the trusted tenant before proposing a waiver.'
+  RETURNS HINT 'Returns reviewed invoice fields plus evidence/query-audit handles.'
+  USING CONTEXT local_operator
+  SOURCE local_postgres
+  ON public.invoices
+  PRIMARY KEY id
+  TENANT KEY tenant_id
+  CONFLICT GUARD updated_at
+  LOOKUP invoice_id BY id
+  ARG invoice_id STRING REQUIRED MAX LENGTH 128 DESCRIPTION 'Invoice id such as INV-3001.'
+  ALLOW READ id, tenant_id, customer_id, status, late_fee_cents, waiver_reason, updated_at
+  KEEP OUT card_token, internal_risk_score
+  REQUIRE EVIDENCE
+  MAX ROWS 1
+END
+
+CREATE CAPABILITY billing.propose_late_fee_waiver
+  DESCRIPTION 'Propose waiving one invoice late fee after inspecting invoice and policy evidence.'
+  RETURNS HINT 'Returns a review-required proposal id, exact diff, evidence handle, and source_database_changed:false.'
+  USING CONTEXT local_operator
+  SOURCE local_postgres
+  ON public.invoices
+  PRIMARY KEY id
+  TENANT KEY tenant_id
+  CONFLICT GUARD updated_at
+  LOOKUP invoice_id BY id
+  ARG invoice_id STRING REQUIRED MAX LENGTH 128 DESCRIPTION 'Invoice id such as INV-3001.'
+  ARG waiver_reason TEXT REQUIRED MAX LENGTH 500 DESCRIPTION 'Business reason for the proposed waiver.'
+  ALLOW READ id, tenant_id, customer_id, status, late_fee_cents, waiver_reason, updated_at
+  KEEP OUT card_token, internal_risk_score
+  REQUIRE EVIDENCE
+  MAX ROWS 1
+  PROPOSE ACTION billing.waive_late_fee
+  ALLOW WRITE late_fee_cents, waiver_reason
+  PATCH late_fee_cents = 0
+  PATCH waiver_reason = ARG waiver_reason
+  APPROVAL ROLE billing_lead
+  WRITEBACK DIRECT SQL
+END
+
+CREATE AGENT WORKFLOW billing.late_fee_review
+  USING CONTEXT local_operator
+  ALLOW CAPABILITY billing.inspect_invoice
+  ALLOW CAPABILITY billing.propose_late_fee_waiver
+  REQUIRE EVIDENCE
+  APPROVAL REQUIRED ROLE billing_lead
+  CHECKPOINT PROPOSAL ONLY
+END

package/fixtures/compatibility/published-1.6.3/sources/packages/dsl/examples/bounded-set-multi-term.synapsor.sql

@@ -0,0 +1,30 @@
+CREATE AGENT CONTEXT local_operator
+  BIND tenant_id FROM ENVIRONMENT SYNAPSOR_TENANT_ID REQUIRED
+  BIND principal FROM ENVIRONMENT SYNAPSOR_PRINCIPAL REQUIRED
+  TENANT BINDING tenant_id
+  PRINCIPAL BINDING principal
+END
+
+CREATE CAPABILITY cases.close_high_risk
+  DESCRIPTION 'Close active high-risk support cases within reviewed row and value caps.'
+  RETURNS HINT 'Returns a proposal for the exact reviewed set; source rows remain unchanged.'
+  USING CONTEXT local_operator
+  SOURCE support_db
+  ON public.support_cases
+  PRIMARY KEY id
+  TENANT KEY tenant_id
+  CONFLICT GUARD version
+  LOOKUP reason BY id
+  ARG reason STRING REQUIRED MAX LENGTH 100
+  ALLOW READ id, tenant_id, risk_level, case_status, exposure_cents, version
+  REQUIRE EVIDENCE
+  PROPOSE ACTION close_high_risk UPDATE SET
+  SELECT WHERE risk_level = 'high' AND case_status = 'active'
+  MAX ROWS 10
+  MAX TOTAL exposure_cents BEFORE 50000
+  ALLOW WRITE case_status
+  PATCH case_status = 'closed'
+  ADVANCE VERSION version USING INTEGER INCREMENT
+  APPROVAL ROLE support_manager
+  WRITEBACK DIRECT SQL
+END

package/fixtures/compatibility/published-1.6.3/sources/packages/dsl/examples/principal-row-scope.synapsor.sql

@@ -0,0 +1,23 @@
+CREATE AGENT CONTEXT care_session
+  BIND hospital_id FROM HTTP_CLAIM hospital_id REQUIRED
+  BIND principal FROM HTTP_CLAIM sub REQUIRED
+  TENANT BINDING hospital_id
+  PRINCIPAL BINDING principal
+END
+
+CREATE CAPABILITY care.inspect_assigned_patient
+  DESCRIPTION 'Inspect one patient assigned to the authenticated case manager within the trusted hospital.'
+  RETURNS HINT 'Returns reviewed patient fields and evidence only when both tenant and assignee locks match.'
+  USING CONTEXT care_session
+  SOURCE local_postgres
+  ON public.patients
+  PRIMARY KEY id
+  TENANT KEY hospital_id
+  PRINCIPAL SCOPE KEY assigned_to
+  LOOKUP patient_id BY id
+  ARG patient_id STRING REQUIRED MAX LENGTH 128 DESCRIPTION 'Reviewed patient identifier.'
+  ALLOW READ id, hospital_id, display_name, care_status, updated_at
+  KEEP OUT assigned_to, diagnosis_notes, insurance_member_id
+  REQUIRE EVIDENCE
+  MAX ROWS 1
+END

package/fixtures/compatibility/published-1.6.3/sources/packages/spec/fixtures/conformance/aggregate-read/contract.json

@@ -0,0 +1,119 @@
+{
+  "spec_version": "0.1",
+  "kind": "SynapsorContract",
+  "metadata": {
+    "name": "aggregate read and enum conformance",
+    "version": "1.0.0"
+  },
+  "resources": [
+    {
+      "name": "billing_invoices",
+      "engine": "postgres",
+      "schema": "public",
+      "table": "invoices",
+      "primary_key": "id",
+      "tenant_key": "tenant_id"
+    }
+  ],
+  "contexts": [
+    {
+      "name": "billing_context",
+      "bindings": [
+        {
+          "name": "tenant_id",
+          "source": "environment",
+          "key": "SYNAPSOR_TENANT_ID"
+        },
+        {
+          "name": "principal",
+          "source": "environment",
+          "key": "SYNAPSOR_PRINCIPAL"
+        }
+      ],
+      "tenant_binding": "tenant_id",
+      "principal_binding": "principal"
+    }
+  ],
+  "capabilities": [
+    {
+      "name": "billing.sum_overdue_balance",
+      "description": "Return one privacy-suppressed aggregate for the trusted tenant.",
+      "returns_hint": "Returns one scalar or a suppression result; never member rows.",
+      "kind": "aggregate_read",
+      "context": "billing_context",
+      "source": "local_postgres",
+      "subject": {
+        "resource": "billing_invoices"
+      },
+      "args": {},
+      "visible_fields": [],
+      "kept_out_fields": [
+        "customer_email",
+        "private_notes"
+      ],
+      "evidence": {
+        "required": true,
+        "query_audit": true
+      },
+      "aggregate": {
+        "function": "sum",
+        "column": "balance_cents",
+        "selection": {
+          "all": [
+            {
+              "column": "status",
+              "operator": "eq",
+              "value": "overdue"
+            }
+          ]
+        },
+        "minimum_group_size": 5
+      }
+    },
+    {
+      "name": "billing.inspect_invoice",
+      "description": "Inspect one tenant-scoped invoice using a reviewed risk enum.",
+      "kind": "read",
+      "context": "billing_context",
+      "source": "local_postgres",
+      "subject": {
+        "resource": "billing_invoices"
+      },
+      "args": {
+        "invoice_id": {
+          "type": "string",
+          "required": true,
+          "max_length": 128
+        },
+        "risk_level": {
+          "type": "string",
+          "required": true,
+          "enum": [
+            "low",
+            "medium",
+            "high"
+          ]
+        }
+      },
+      "lookup": {
+        "id_from_arg": "invoice_id"
+      },
+      "visible_fields": [
+        "id",
+        "tenant_id",
+        "status",
+        "balance_cents"
+      ],
+      "kept_out_fields": [
+        "customer_email",
+        "private_notes"
+      ],
+      "evidence": {
+        "required": true,
+        "query_audit": true
+      },
+      "max_rows": 1
+    }
+  ]
+}
+

package/fixtures/compatibility/published-1.6.3/sources/packages/spec/fixtures/conformance/approval-quorum/contract.json

@@ -0,0 +1,44 @@
+{
+  "spec_version": "0.1",
+  "kind": "SynapsorContract",
+  "contexts": [
+    {
+      "name": "local_operator",
+      "bindings": [
+        { "name": "tenant_id", "source": "environment", "key": "SYNAPSOR_TENANT_ID" },
+        { "name": "principal", "source": "environment", "key": "SYNAPSOR_PRINCIPAL" }
+      ],
+      "tenant_binding": "tenant_id",
+      "principal_binding": "principal"
+    }
+  ],
+  "capabilities": [
+    {
+      "name": "billing.propose_late_fee_waiver",
+      "kind": "proposal",
+      "context": "local_operator",
+      "subject": {
+        "schema": "public",
+        "table": "invoices",
+        "primary_key": "id",
+        "tenant_key": "tenant_id",
+        "conflict_key": "updated_at"
+      },
+      "args": { "invoice_id": { "type": "string" } },
+      "lookup": { "id_from_arg": "invoice_id" },
+      "visible_fields": ["id", "tenant_id", "late_fee_cents", "updated_at"],
+      "proposal": {
+        "action": "billing.waive_late_fee",
+        "allowed_fields": ["late_fee_cents"],
+        "patch": { "late_fee_cents": { "fixed": 0 } },
+        "conflict_guard": { "column": "updated_at" },
+        "approval": {
+          "mode": "human",
+          "required_role": "billing_lead",
+          "required_approvals": 2
+        },
+        "writeback": { "mode": "direct_sql" }
+      }
+    }
+  ]
+}