@nanobpm/nano-workforce 0.86.0 → 0.87.0

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+# [0.87.0](https://github.com/nanobpm/nano-workforce/compare/v0.86.0...v0.87.0) (2026-08-18)
+
+
+### Features
+
+* **agentic:** frictionless zero-config cockpit — LOCAL mode accepts a tokenless upgrade ([#283](https://github.com/nanobpm/nano-workforce/issues/283)) ([b23dfbb](https://github.com/nanobpm/nano-workforce/commit/b23dfbb018241e4719c6ea664f6428d094069aa6)), closes [#278](https://github.com/nanobpm/nano-workforce/issues/278) [#224](https://github.com/nanobpm/nano-workforce/issues/224) [#282](https://github.com/nanobpm/nano-workforce/issues/282)
+
 # [0.86.0](https://github.com/nanobpm/nano-workforce/compare/v0.85.3...v0.86.0) (2026-08-18)
 
 

package/app/agentic/channel.test.ts

@@ -294,6 +294,77 @@ test("LOCAL mode still rejects a wrong token (4401)", async (t) => {
   assertEquals(channel.hub.connectionCount, 0);
 });
 
+// --- Frictionless zero-config: LOCAL mode accepts a TOKENLESS upgrade (#282) ---
+// The well-known LOCAL token is public, so requiring the client to echo it is pure friction: a
+// genuinely zero-config cockpit (no `?token=`) must attach on the trusted LAN. LOCAL mode therefore
+// treats a missing token as presenting the well-known token.
+
+test("LOCAL mode (secure:false): a TOKENLESS upgrade opens (zero-config, #282)", async (t) => {
+  const { server, port } = await startHttp();
+  const channel = await mountAgenticChannel({
+    server,
+    secret: "",
+    secure: false,
+    data: undefined,
+    log: noopLog(),
+  });
+  t.after(async () => {
+    await channel.teardown();
+    await closeServer(server);
+  });
+
+  // No query at all — the browser cockpit's zero-config default (`defaultRelayUrl` sends no token).
+  const ws = await connect(port, "");
+  assertEquals(ws.readyState, WebSocket.OPEN);
+  assertEquals(channel.hub.connectionCount, 1);
+  ws.close();
+});
+
+test("SECURE mode still REJECTS a tokenless upgrade (4401) — substitution is LOCAL-only (#282)", async (t) => {
+  const { server, port } = await startHttp();
+  const channel = await mountAgenticChannel({
+    server,
+    secret: SECRET,
+    secure: true,
+    data: undefined,
+    log: noopLog(),
+  });
+  t.after(async () => {
+    await channel.teardown();
+    await closeServer(server);
+  });
+
+  const closedCode = await rejectionCode(port, "");
+  assertEquals(closedCode, 4401);
+  assertEquals(channel.hub.connectionCount, 0);
+});
+
+test("LOCAL mode with a CUSTOM token still REJECTS a tokenless upgrade (no bypass, #282)", async (t) => {
+  const { server, port } = await startHttp();
+  // A caller opting into a non-default token in LOCAL mode (secure:false + a custom secret) is NOT
+  // the frictionless well-known-token posture — the tokenless substitution must NOT apply, so a
+  // client cannot bypass the custom token by omitting `?token=`.
+  const channel = await mountAgenticChannel({
+    server,
+    secret: "custom-local-token",
+    secure: false,
+    data: undefined,
+    log: noopLog(),
+  });
+  t.after(async () => {
+    await channel.teardown();
+    await closeServer(server);
+  });
+
+  const closedCode = await rejectionCode(port, "");
+  assertEquals(closedCode, 4401);
+  assertEquals(channel.hub.connectionCount, 0);
+  // The custom token itself still upgrades.
+  const ws = await connect(port, "?token=custom-local-token");
+  assertEquals(ws.readyState, WebSocket.OPEN);
+  ws.close();
+});
+
 /** A capturing `Logger`: records every `(level, msg)` pair the sink receives. */
 function capturingLog(): { log: ReturnType<typeof noopLog>; records: Array<{ level: string; msg: string }> } {
   const records: Array<{ level: string; msg: string }> = [];

package/app/agentic/channel.ts

@@ -15,6 +15,7 @@
 // is untouched; advisory semantics preserved (a family never gates a BPMN sequence flow).
 import type { Server } from "node:http";
 import type { AddressInfo } from "node:net";
+import type { HandshakeRequest } from "@nanobpm/agentic/channel";
 import {
   AgenticHub,
   sharedSecretAuthenticator,
@@ -133,7 +134,22 @@ export async function mountAgenticChannel(
   // credential is intentionally NOT required — nano-workforce never verified it (accept-any), so it
   // was pure configuration friction; a real ADR 0028 capability check can reintroduce it later by
   // passing a verifier.
-  const authenticator = sharedSecretAuthenticator({ secret, requireCredential: false });
+  const baseAuthenticator = sharedSecretAuthenticator({ secret, requireCredential: false });
+  // LOCAL mode is frictionless-first (#282): the well-known token is PUBLIC, so requiring a client to
+  // echo it adds no security — only friction. A genuinely zero-config cockpit (`defaultRelayUrl`
+  // sends no `?token=`) must attach on the trusted LAN, so a TOKENLESS upgrade is treated as
+  // presenting the well-known token. This substitution is scoped to the DEFAULT LOCAL posture only
+  // (`secret === LOCAL_AGENTIC_TOKEN`): a caller that opts into a CUSTOM token in LOCAL mode
+  // (`secure:false` + a non-default `secret`) still requires that token — a tokenless client can't
+  // bypass it. SECURE mode is likewise unaffected: it keeps demanding the real secret, so a tokenless
+  // (or wrong) upgrade is still rejected (4401).
+  const substituteWellKnownToken = !secure && secret === LOCAL_AGENTIC_TOKEN;
+  const authenticator = substituteWellKnownToken
+    ? (req: HandshakeRequest) =>
+        req.token === undefined && req.query?.token === undefined
+          ? baseAuthenticator({ ...req, token: secret })
+          : baseAuthenticator(req)
+    : baseAuthenticator;
   const hub = new AgenticHub({
     transport,
     // A valid identity token upgrades (4401 on mismatch). SECURE mode's token is the real secret;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanobpm/nano-workforce",
-  "version": "0.86.0",
+  "version": "0.87.0",
   "description": "Nano Workforce — an Agent Graph Orchestration application for Agentic SDLC: durable BPMN processes that coordinate a graph of AI agents across the software delivery lifecycle.",
   "type": "module",
   "main": "main.ts",