witnora 0.13.8 → 0.13.10

package/README.md

@@ -1,5 +1,14 @@
 # Witnora CLI
 
+## Customer Evaluator Kit
+
+`witnora/evaluator-kit` exports `createBusinessTaskEvaluatorServer()` for the customer-side
+Replay and Shadow evaluator consumed by the managed Workflow Harness. It listens only on a
+literal loopback address, requires a pinned bearer credential and contract digest, validates
+the exact Business Task binding, and returns only the structured evaluation report. Customer
+scenario inputs and candidate callbacks stay in the customer process. Replay can execute only
+through the supplied synthetic sandbox harness; Shadow exposes no write interface.
+
 Unified release assurance, evidence, corpus, monitor, and lab CLI for Witnora.
 
 Witnora checks what an agent may do, whether it passed pre-release evidence,

package/dist/gateway.js

@@ -578,7 +578,8 @@ export async function createConfiguredWorkflowHarness(input) {
     const healthBody = await health.json().catch(() => ({}));
     if (!health.ok
         || healthBody.schemaVersion !== "witnora.business_task_evaluator.v0.1"
-        || healthBody.contractSha256 !== input.config.evaluatorContractSha256) {
+        || healthBody.contractSha256 !== input.config.evaluatorContractSha256
+        || healthBody.ready !== true) {
         throw new Error("Managed Workflow evaluator health did not match its pinned local contract.");
     }
     const hosted = input.managed.createManagedWorkflowHostedClient({

package/dist/vendor/onegent-runtime/business-task-evaluator.d.ts

@@ -0,0 +1,50 @@
+import type { SandboxCertificationHarness } from "./sandbox-harness.js";
+import { type ShadowCandidateEvaluation, type TaskCandidateEvaluation, type TaskEvaluationContract, type TaskEvaluationScenario } from "./task-evaluation.js";
+export declare const BUSINESS_TASK_EVALUATOR_SCHEMA_VERSION: "witnora.business_task_evaluator.v0.1";
+export declare const BUSINESS_TASK_EVALUATION_REQUEST_SCHEMA_VERSION: "witnora.business_task_evaluation_request.v0.1";
+export interface BusinessTaskEvaluationBinding {
+    nodeId: string;
+    taskContractId: string;
+    taskContractDigestSha256: string;
+    taskKey: string;
+    agentId: string;
+    agentVersion: string;
+    baselineAgentVersion?: string;
+    mode: "REPLAY" | "SHADOW";
+}
+export interface BusinessTaskEvaluatorServerOptions {
+    credential: string;
+    contractSha256: string;
+    host?: "127.0.0.1" | "::1";
+    port?: number;
+    maxBodyBytes?: number;
+    maxConcurrency?: number;
+    evaluationTimeoutMs?: number;
+    loadReplayScenarios?(task: TaskEvaluationContract, binding: BusinessTaskEvaluationBinding, signal: AbortSignal): Promise<TaskEvaluationScenario[]>;
+    createReplayHarness?(task: TaskEvaluationContract, binding: BusinessTaskEvaluationBinding, signal: AbortSignal): Promise<{
+        harness: SandboxCertificationHarness;
+        tenantId: string;
+    }>;
+    evaluateReplayCandidate?(scenario: {
+        id: string;
+        source: TaskEvaluationScenario["source"];
+        input: unknown;
+    }, task: TaskEvaluationContract, binding: BusinessTaskEvaluationBinding, signal: AbortSignal): Promise<TaskCandidateEvaluation>;
+    loadShadowObservations?(task: TaskEvaluationContract, binding: BusinessTaskEvaluationBinding, signal: AbortSignal): Promise<TaskEvaluationScenario[]>;
+    evaluateShadowCandidate?(context: {
+        id: string;
+        source: "LIVE_SHADOW";
+        input: unknown;
+        propose: (intent: {
+            pathId: string;
+            parametersDigestSha256: string;
+        }) => void;
+    }, task: TaskEvaluationContract, binding: BusinessTaskEvaluationBinding, signal: AbortSignal): Promise<ShadowCandidateEvaluation>;
+}
+export declare function createBusinessTaskEvaluatorServer(options: BusinessTaskEvaluatorServerOptions): {
+    start(): Promise<{
+        origin: string;
+    }>;
+    close(): Promise<void>;
+};
+//# sourceMappingURL=business-task-evaluator.d.ts.map

package/dist/vendor/onegent-runtime/business-task-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"business-task-evaluator.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/business-task-evaluator.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE3B,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,sCAAsC,EAAG,sCAA+C,CAAC;AACtG,eAAO,MAAM,+CAA+C,EAAG,+CAAwD,CAAC;AAExH,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAC3B;AAED,MAAM,WAAW,kCAAkC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,mBAAmB,CAAC,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACnJ,mBAAmB,CAAC,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,2BAA2B,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrL,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IAC1O,sBAAsB,CAAC,CAAC,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtJ,uBAAuB,CAAC,CAAC,OAAO,EAAE;QAChC,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,aAAa,CAAC;QACtB,KAAK,EAAE,OAAO,CAAC;QACf,OAAO,EAAE,CAAC,MAAM,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,sBAAsB,EAAE,MAAM,CAAA;SAAE,KAAK,IAAI,CAAC;KAC/E,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACnI;AAED,wBAAgB,iCAAiC,CAAC,OAAO,EAAE,kCAAkC;aA+C1E,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;aAQ3B,OAAO,CAAC,IAAI,CAAC;EAK/B"}

package/dist/vendor/onegent-runtime/business-task-evaluator.js

@@ -0,0 +1,187 @@
+import { timingSafeEqual } from "node:crypto";
+import { createServer } from "node:http";
+import { runReplayEvaluation, runShadowEvaluation, } from "./task-evaluation.js";
+export const BUSINESS_TASK_EVALUATOR_SCHEMA_VERSION = "witnora.business_task_evaluator.v0.1";
+export const BUSINESS_TASK_EVALUATION_REQUEST_SCHEMA_VERSION = "witnora.business_task_evaluation_request.v0.1";
+export function createBusinessTaskEvaluatorServer(options) {
+    const host = options.host ?? "127.0.0.1";
+    if (host !== "127.0.0.1" && host !== "::1")
+        throw new Error("Business Task Evaluator accepts only a literal loopback host.");
+    const credential = required(options.credential, "credential");
+    const contractSha256 = digest(options.contractSha256, "contractSha256");
+    const port = bounded(options.port ?? 0, 0, 65_535, "port");
+    const maxBodyBytes = bounded(options.maxBodyBytes ?? 1_048_576, 1_024, 4_194_304, "maxBodyBytes");
+    const maxConcurrency = bounded(options.maxConcurrency ?? 4, 1, 16, "maxConcurrency");
+    const evaluationTimeoutMs = bounded(options.evaluationTimeoutMs ?? 120_000, 1_000, 600_000, "evaluationTimeoutMs");
+    const modes = [
+        ...(options.loadReplayScenarios && options.createReplayHarness && options.evaluateReplayCandidate ? ["REPLAY"] : []),
+        ...(options.loadShadowObservations && options.evaluateShadowCandidate ? ["SHADOW"] : []),
+    ];
+    let active = 0;
+    const server = createServer(async (request, response) => {
+        response.setHeader("cache-control", "no-store");
+        response.setHeader("content-type", "application/json; charset=utf-8");
+        try {
+            if (!authorized(request, credential))
+                return send(response, 401, { error: "unauthorized" });
+            if (request.method === "GET" && request.url === "/healthz") {
+                return send(response, 200, {
+                    schemaVersion: BUSINESS_TASK_EVALUATOR_SCHEMA_VERSION,
+                    contractSha256,
+                    ready: modes.length > 0,
+                    modes,
+                    boundary: { host, productionWrites: 0, rawInputsRetainedByCustomer: true },
+                });
+            }
+            if (request.method !== "POST" || request.url !== "/v1/evaluate")
+                return send(response, 404, { error: "not_found" });
+            if (!String(request.headers["content-type"] ?? "").toLowerCase().startsWith("application/json")) {
+                return send(response, 415, { error: "json_required" });
+            }
+            if (active >= maxConcurrency)
+                return send(response, 429, { error: "evaluator_busy" });
+            const body = await readJson(request, maxBodyBytes);
+            const parsed = parseRequest(body);
+            validateBinding(parsed.task, parsed.evaluation);
+            active += 1;
+            try {
+                const report = await withTimeout((signal) => evaluate(options, parsed.task, parsed.evaluation, signal), evaluationTimeoutMs);
+                return send(response, 200, { schemaVersion: BUSINESS_TASK_EVALUATOR_SCHEMA_VERSION, report });
+            }
+            finally {
+                active -= 1;
+            }
+        }
+        catch (error) {
+            const status = error instanceof EvaluatorError ? error.status : 422;
+            return send(response, status, { error: error instanceof EvaluatorError ? error.code : "evaluation_failed" });
+        }
+    });
+    return {
+        async start() {
+            if (!server.listening)
+                await new Promise((resolve, reject) => {
+                    server.once("error", reject);
+                    server.listen(port, host, () => { server.off("error", reject); resolve(); });
+                });
+            const address = server.address();
+            return { origin: `http://${host === "::1" ? "[::1]" : host}:${address.port}` };
+        },
+        async close() {
+            if (!server.listening)
+                return;
+            await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+        },
+    };
+}
+async function evaluate(options, task, binding, signal) {
+    if (binding.mode === "REPLAY") {
+        if (!options.loadReplayScenarios || !options.createReplayHarness || !options.evaluateReplayCandidate) {
+            throw new EvaluatorError(409, "replay_not_configured");
+        }
+        const [{ harness, tenantId }, scenarios] = await Promise.all([
+            options.createReplayHarness(task, binding, signal), options.loadReplayScenarios(task, binding, signal),
+        ]);
+        return runReplayEvaluation({
+            task, harness, tenantId, scenarios,
+            evaluateCandidate: (scenario) => options.evaluateReplayCandidate(scenario, task, binding, signal),
+        });
+    }
+    if (!options.loadShadowObservations || !options.evaluateShadowCandidate)
+        throw new EvaluatorError(409, "shadow_not_configured");
+    return runShadowEvaluation({
+        task,
+        observations: await options.loadShadowObservations(task, binding, signal),
+        evaluateCandidate: (context) => options.evaluateShadowCandidate(context, task, binding, signal),
+    });
+}
+function parseRequest(input) {
+    const body = object(input, "request");
+    exactKeys(body, ["schemaVersion", "task", "evaluation"], "request");
+    if (body.schemaVersion !== BUSINESS_TASK_EVALUATION_REQUEST_SCHEMA_VERSION)
+        throw new EvaluatorError(422, "invalid_schema");
+    const evaluation = object(body.evaluation, "evaluation");
+    exactKeys(evaluation, ["nodeId", "taskContractId", "taskContractDigestSha256", "taskKey", "agentId", "agentVersion", "baselineAgentVersion", "mode"], "evaluation");
+    if (evaluation.mode !== "REPLAY" && evaluation.mode !== "SHADOW")
+        throw new EvaluatorError(422, "invalid_mode");
+    const binding = {
+        nodeId: requiredString(evaluation.nodeId), taskContractId: requiredString(evaluation.taskContractId),
+        taskContractDigestSha256: digest(String(evaluation.taskContractDigestSha256 ?? ""), "taskContractDigestSha256"),
+        taskKey: requiredString(evaluation.taskKey), agentId: requiredString(evaluation.agentId),
+        agentVersion: requiredString(evaluation.agentVersion),
+        ...(evaluation.baselineAgentVersion === undefined ? {} : { baselineAgentVersion: requiredString(evaluation.baselineAgentVersion) }),
+        mode: evaluation.mode,
+    };
+    return { task: object(body.task, "task"), evaluation: binding };
+}
+function validateBinding(task, binding) {
+    if (task.id !== binding.taskContractId || task.digestSha256 !== binding.taskContractDigestSha256
+        || task.taskKey !== binding.taskKey || task.subject?.agentId !== binding.agentId
+        || task.subject?.agentVersion !== (binding.baselineAgentVersion ?? binding.agentVersion))
+        throw new EvaluatorError(409, "task_binding_mismatch");
+}
+function authorized(request, credential) {
+    const supplied = String(request.headers.authorization ?? "").replace(/^Bearer\s+/i, "");
+    const left = Buffer.from(supplied);
+    const right = Buffer.from(credential);
+    return left.length === right.length && left.length > 0 && timingSafeEqual(left, right);
+}
+async function readJson(request, limit) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of request) {
+        const value = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        size += value.length;
+        if (size > limit)
+            throw new EvaluatorError(413, "body_too_large");
+        chunks.push(value);
+    }
+    try {
+        return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+    }
+    catch {
+        throw new EvaluatorError(400, "invalid_json");
+    }
+}
+async function withTimeout(execute, timeoutMs) {
+    const controller = new AbortController();
+    let timer;
+    try {
+        return await Promise.race([execute(controller.signal), new Promise((_, reject) => {
+                timer = setTimeout(() => { controller.abort(); reject(new EvaluatorError(504, "evaluation_timeout")); }, timeoutMs);
+                timer.unref?.();
+            })]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+function send(response, status, body) { response.statusCode = status; response.end(JSON.stringify(body)); }
+function object(value, name) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new EvaluatorError(422, `invalid_${name}`);
+    return value;
+}
+function exactKeys(value, allowed, name) {
+    const keys = new Set(allowed);
+    if (Object.keys(value).some((key) => !keys.has(key)))
+        throw new EvaluatorError(422, `unexpected_${name}_field`);
+}
+function required(value, name) { const result = value.trim(); if (!result)
+    throw new Error(`${name} is required.`); return result; }
+function requiredString(value) { if (typeof value !== "string" || !value.trim())
+    throw new EvaluatorError(422, "invalid_binding"); return value.trim(); }
+function digest(value, name) { if (!/^[a-f0-9]{64}$/.test(value))
+    throw new Error(`${name} must be a lowercase SHA-256 digest.`); return value; }
+function bounded(value, min, max, name) { if (!Number.isInteger(value) || value < min || value > max)
+    throw new Error(`${name} must be between ${min} and ${max}.`); return value; }
+class EvaluatorError extends Error {
+    status;
+    code;
+    constructor(status, code) {
+        super(code);
+        this.status = status;
+        this.code = code;
+    }
+}

package/dist/vendor/onegent-runtime/managed-workflow-harness.d.ts

@@ -29,8 +29,37 @@ export interface ManagedWorkflowReadyEvaluation {
     taskKey: string;
     agentId: string;
     agentVersion: string;
+    baselineAgentVersion?: string;
     mode: ManagedWorkflowEvaluationMode;
 }
+export interface ManagedAutopilotDispatchPlan {
+    schemaVersion: "witnora.nora_assurance_autopilot.v0.1";
+    projectId: string;
+    generatedAt: string;
+    dispatches: Array<{
+        id: string;
+        projectId: string;
+        taskContractId: string;
+        taskContractDigestSha256: string;
+        taskKey: string;
+        taskVersion: number;
+        agentId: string;
+        baselineAgentVersion: string;
+        candidateAgentVersion: string;
+        mode: ManagedWorkflowEvaluationMode;
+        changeIds: string[];
+        changeSetDigestSha256: string;
+        affectedActionPathIds: string[];
+        status: "READY" | "RUNNING" | "COMPLETED" | "NEEDS_DECISION" | "BLOCKED";
+    }>;
+    safety: {
+        productionWrites: 0;
+        rawInputsRetainedByCustomer: true;
+        customerHarnessRequired: true;
+        policyAuthorityGranted: false;
+    };
+    limitations: string[];
+}
 export interface ManagedWorkflowHostedClient {
     listActiveWorkflows(): Promise<Array<{
         id: string;
@@ -39,8 +68,10 @@ export interface ManagedWorkflowHostedClient {
     }>>;
     getExecutionPlan(workflowId: string): Promise<ManagedWorkflowExecutionPlan>;
     getTask(taskContractId: string): Promise<TaskEvaluationContract>;
+    getAutopilotPlan?(): Promise<ManagedAutopilotDispatchPlan>;
     upload(report: TaskEvaluationReport, input: {
         externalId: string;
+        autopilot?: ManagedAutopilotDispatchPlan["dispatches"][number];
     }): Promise<unknown>;
 }
 export declare function createManagedWorkflowHostedClient(options: {
@@ -71,6 +102,7 @@ export declare class FileWorkflowEvaluationCheckpointStore implements WorkflowEv
 }
 export interface ManagedBusinessWorkflowHarnessResult {
     workflowsInspected: number;
+    autopilotDispatchesInspected: number;
     evaluationsCompleted: number;
     evaluationsFailed: number;
     limitations: string[];

package/dist/vendor/onegent-runtime/managed-workflow-harness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"managed-workflow-harness.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/managed-workflow-harness.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGzF,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhE,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,+CAA+C,CAAC;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;KAAE,CAAC;IAC7E,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,gBAAgB,GAAG,WAAW,CAAA;KAAE,CAAC,CAAC;IACvG,gBAAgB,EAAE,8BAA8B,EAAE,CAAC;IACnD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE;QAAE,gBAAgB,EAAE,CAAC,CAAC;QAAC,uBAAuB,EAAE,KAAK,CAAC;QAAC,uBAAuB,EAAE,IAAI,CAAA;KAAE,CAAC;IAC/F,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,6BAA6B,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,mBAAmB,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC,CAAC;IAC1G,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5E,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvF;AAED,wBAAgB,iCAAiC,CAAC,OAAO,EAAE;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,GAAG,2BAA2B,CA4C9B;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,qBAAa,uCAAwC,YAAW,iCAAiC;;IAGzF,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAK5D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3C;AAED,qBAAa,qCAAsC,YAAW,iCAAiC;IACjF,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM;IAIxC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAS5D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C,OAAO,CAAC,IAAI;CAGb;AAED,MAAM,WAAW,oCAAoC;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,qBAAa,8BAA8B;;gBAO7B,OAAO,EAAE;QACnB,MAAM,EAAE,2BAA2B,CAAC;QACpC,WAAW,EAAE,iCAAiC,CAAC;QAC/C,QAAQ,EAAE,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE,sBAAsB,CAAC;YAAC,UAAU,EAAE,8BAA8B,CAAA;SAAE,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACjI,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB;IAUD,IAAI,IAAI,OAAO,CAAC,oCAAoC,CAAC;YAMvC,OAAO;CA6CtB"}
+{"version":3,"file":"managed-workflow-harness.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/managed-workflow-harness.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGzF,MAAM,MAAM,6BAA6B,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAEhE,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,+CAA+C,CAAC;IAC/D,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;KAAE,CAAC;IAC7E,KAAK,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,gBAAgB,GAAG,WAAW,CAAA;KAAE,CAAC,CAAC;IACvG,gBAAgB,EAAE,8BAA8B,EAAE,CAAC;IACnD,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE;QAAE,gBAAgB,EAAE,CAAC,CAAC;QAAC,uBAAuB,EAAE,KAAK,CAAC;QAAC,uBAAuB,EAAE,IAAI,CAAA;KAAE,CAAC;IAC/F,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,wBAAwB,EAAE,MAAM,CAAC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,EAAE,6BAA6B,CAAC;CACrC;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,uCAAuC,CAAC;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,KAAK,CAAC;QAChB,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,wBAAwB,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAC9H,OAAO,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,6BAA6B,CAAC;QAClH,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,qBAAqB,EAAE,MAAM,CAAC;QAAC,qBAAqB,EAAE,MAAM,EAAE,CAAC;QACpF,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,gBAAgB,GAAG,SAAS,CAAC;KAC1E,CAAC,CAAC;IACH,MAAM,EAAE;QAAE,gBAAgB,EAAE,CAAC,CAAC;QAAC,2BAA2B,EAAE,IAAI,CAAC;QAAC,uBAAuB,EAAE,IAAI,CAAC;QAAC,sBAAsB,EAAE,KAAK,CAAA;KAAE,CAAC;IACjI,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,2BAA2B;IAC1C,mBAAmB,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC,CAAC;IAC1G,gBAAgB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5E,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjE,gBAAgB,CAAC,IAAI,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC3D,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,4BAA4B,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACvJ;AAED,wBAAgB,iCAAiC,CAAC,OAAO,EAAE;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,GAAG,2BAA2B,CAqD9B;AAED,MAAM,WAAW,iCAAiC;IAChD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,qBAAa,uCAAwC,YAAW,iCAAiC;;IAGzF,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAK5D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG3C;AAED,qBAAa,qCAAsC,YAAW,iCAAiC;IACjF,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,MAAM;IAIxC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAS5D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C,OAAO,CAAC,IAAI;CAGb;AAED,MAAM,WAAW,oCAAoC;IACnD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,4BAA4B,EAAE,MAAM,CAAC;IACrC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,qBAAa,8BAA8B;;gBAO7B,OAAO,EAAE;QACnB,MAAM,EAAE,2BAA2B,CAAC;QACpC,WAAW,EAAE,iCAAiC,CAAC;QAC/C,QAAQ,EAAE,CAAC,KAAK,EAAE;YAAE,IAAI,EAAE,sBAAsB,CAAC;YAAC,UAAU,EAAE,8BAA8B,CAAA;SAAE,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACjI,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB;IAUD,IAAI,IAAI,OAAO,CAAC,oCAAoC,CAAC;YAMvC,OAAO;CAsFtB"}

package/dist/vendor/onegent-runtime/managed-workflow-harness.js

@@ -32,12 +32,21 @@ export function createManagedWorkflowHostedClient(options) {
         },
         getExecutionPlan: async (workflowId) => await hostedJson(requestFetch, `${projectUrl}/business-workflows/${encodeURIComponent(required(workflowId, "workflowId"))}/execution-plan`, apiKey),
         getTask: async (taskContractId) => await hostedJson(requestFetch, `${projectUrl}/business-tasks/${encodeURIComponent(required(taskContractId, "taskContractId"))}`, apiKey),
+        getAutopilotPlan: async () => await hostedJson(requestFetch, `${projectUrl}/nora/autopilot`, apiKey),
         upload: async (report, input) => await uploadTaskEvaluationReport(report, {
             baseUrl,
             projectId,
             apiKey,
             externalId: input.externalId,
             fetch: requestFetch,
+            ...(input.autopilot ? { autopilot: {
+                    dispatchId: input.autopilot.id,
+                    changeSetDigestSha256: input.autopilot.changeSetDigestSha256,
+                    candidateAgentVersion: input.autopilot.candidateAgentVersion,
+                    baselineAgentVersion: input.autopilot.baselineAgentVersion,
+                    changeIds: input.autopilot.changeIds,
+                    affectedActionPathIds: input.autopilot.affectedActionPathIds,
+                } } : {}),
         }),
     };
 }
@@ -153,7 +162,68 @@ export class ManagedBusinessWorkflowHarness {
                     break;
             }
         }
-        return { workflowsInspected: workflows.length, evaluationsCompleted, evaluationsFailed, limitations };
+        const autopilot = this.#client.getAutopilotPlan ? await this.#client.getAutopilotPlan() : {
+            schemaVersion: "witnora.nora_assurance_autopilot.v0.1",
+            projectId: "legacy-client",
+            generatedAt: new Date(0).toISOString(),
+            dispatches: [],
+            safety: { productionWrites: 0, rawInputsRetainedByCustomer: true, customerHarnessRequired: true, policyAuthorityGranted: false },
+            limitations: ["This client does not expose Nora Autopilot dispatches."],
+        };
+        validateAutopilotPlan(autopilot);
+        const readyDispatches = autopilot.dispatches.filter((dispatch) => dispatch.status === "READY");
+        const autopilotResults = await mapLimit(readyDispatches, this.#maxConcurrency, async (dispatch) => {
+            const evaluation = {
+                nodeId: `autopilot:${dispatch.id}`,
+                taskContractId: dispatch.taskContractId,
+                taskContractDigestSha256: dispatch.taskContractDigestSha256,
+                taskKey: dispatch.taskKey,
+                agentId: dispatch.agentId,
+                agentVersion: dispatch.candidateAgentVersion,
+                baselineAgentVersion: dispatch.baselineAgentVersion,
+                mode: dispatch.mode,
+            };
+            const key = `autopilot:${autopilot.projectId}:${dispatch.id}`;
+            try {
+                const task = await this.#client.getTask(dispatch.taskContractId);
+                validateTask(task, evaluation);
+                let report = await this.#checkpoints.load(key);
+                if (!report) {
+                    report = await this.#evaluate({ task: structuredClone(task), evaluation: structuredClone(evaluation) });
+                    validateReport(report, task, evaluation);
+                    await this.#checkpoints.save(key, report);
+                }
+                else
+                    validateReport(report, task, evaluation);
+                await this.#client.upload(report, { externalId: `autopilot:${dispatch.id}`, autopilot: dispatch });
+                await this.#checkpoints.complete(key);
+                return true;
+            }
+            catch {
+                limitations.push(`Autopilot evaluation ${dispatch.taskKey}:${dispatch.mode} failed closed; no policy or release state changed.`);
+                return false;
+            }
+        });
+        evaluationsCompleted += autopilotResults.filter(Boolean).length;
+        evaluationsFailed += autopilotResults.filter((value) => !value).length;
+        return { workflowsInspected: workflows.length, autopilotDispatchesInspected: readyDispatches.length, evaluationsCompleted, evaluationsFailed, limitations };
+    }
+}
+function validateAutopilotPlan(plan) {
+    if (plan.schemaVersion !== "witnora.nora_assurance_autopilot.v0.1"
+        || plan.safety.productionWrites !== 0 || plan.safety.rawInputsRetainedByCustomer !== true
+        || plan.safety.customerHarnessRequired !== true || plan.safety.policyAuthorityGranted !== false
+        || plan.dispatches.length > 200)
+        throw new Error("Managed Workflow Harness rejected an unsafe Nora Autopilot plan.");
+    const seen = new Set();
+    for (const dispatch of plan.dispatches) {
+        if (dispatch.projectId !== plan.projectId || seen.has(dispatch.id) || !/^[a-f0-9]{64}$/.test(dispatch.id)
+            || !/^[a-f0-9]{64}$/.test(dispatch.taskContractDigestSha256) || !/^[a-f0-9]{64}$/.test(dispatch.changeSetDigestSha256)
+            || (dispatch.mode !== "REPLAY" && dispatch.mode !== "SHADOW") || !dispatch.agentId || !dispatch.baselineAgentVersion || !dispatch.candidateAgentVersion
+            || !Array.isArray(dispatch.changeIds) || !dispatch.changeIds.length || !Array.isArray(dispatch.affectedActionPathIds)) {
+            throw new Error("Managed Workflow Harness rejected an invalid Nora Autopilot dispatch.");
+        }
+        seen.add(dispatch.id);
     }
 }
 function validatePlan(plan, workflow) {
@@ -190,7 +260,7 @@ function validateTask(task, evaluation) {
         || task.digestSha256 !== evaluation.taskContractDigestSha256
         || task.taskKey !== evaluation.taskKey
         || task.subject.agentId !== evaluation.agentId
-        || task.subject.agentVersion !== evaluation.agentVersion) {
+        || task.subject.agentVersion !== (evaluation.baselineAgentVersion ?? evaluation.agentVersion)) {
         throw new Error("Managed Workflow Harness rejected a Business Task that did not match the execution plan.");
     }
 }

package/dist/vendor/onegent-runtime/task-evaluation-hosted.d.ts

@@ -5,6 +5,14 @@ export interface TaskEvaluationHostedOptions {
     apiKey: string;
     externalId?: string;
     fetch?: typeof fetch;
+    autopilot?: {
+        dispatchId: string;
+        changeSetDigestSha256: string;
+        candidateAgentVersion: string;
+        baselineAgentVersion: string;
+        changeIds: string[];
+        affectedActionPathIds: string[];
+    };
 }
 export interface TaskEvaluationHostedResult {
     run: Record<string, unknown>;

package/dist/vendor/onegent-runtime/task-evaluation-hosted.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-evaluation-hosted.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/task-evaluation-hosted.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAyDrC;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B1H"}
+{"version":3,"file":"task-evaluation-hosted.d.ts","sourceRoot":"","sources":["../../../../onegent-runtime/src/task-evaluation-hosted.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,SAAS,CAAC,EAAE;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,qBAAqB,EAAE,MAAM,CAAC;QAC9B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,qBAAqB,EAAE,MAAM,EAAE,CAAC;KACjC,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAuErC;AAED,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+B1H"}

package/dist/vendor/onegent-runtime/task-evaluation-hosted.js

@@ -26,7 +26,21 @@ export async function uploadTaskEvaluationReport(report, options) {
                     mode: report.mode,
                     writesBlocked: true,
                     rawInputsRetainedByCustomer: true,
-                } },
+                    ...(options.autopilot ? {
+                        schemaVersion: "witnora.task_evaluation_binding.v0.2",
+                        baselineAgentVersion: options.autopilot.baselineAgentVersion,
+                        candidateAgentVersion: options.autopilot.candidateAgentVersion,
+                    } : {}),
+                }, ...(options.autopilot ? { noraAutopilot: {
+                        schemaVersion: "witnora.nora_autopilot_evaluation_binding.v0.1",
+                        dispatchId: options.autopilot.dispatchId,
+                        changeSetDigestSha256: options.autopilot.changeSetDigestSha256,
+                        taskContractId: report.task.id,
+                        candidateAgentVersion: options.autopilot.candidateAgentVersion,
+                        mode: report.mode,
+                        changeIds: [...options.autopilot.changeIds],
+                        affectedActionPathIds: [...options.autopilot.affectedActionPathIds],
+                    } } : {}) },
         }),
     });
     if (typeof run.id !== "string" || !run.id)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "witnora",
-  "version": "0.13.8",
+  "version": "0.13.10",
   "description": "Independent assurance for covered agent action paths across models and frameworks.",
   "type": "module",
   "license": "Apache-2.0",
@@ -40,6 +40,10 @@
       "types": "./dist/vendor/onegent-runtime/browser-adapter-kit.d.ts",
       "import": "./dist/vendor/onegent-runtime/browser-adapter-kit.js"
     },
+    "./evaluator-kit": {
+      "types": "./dist/vendor/onegent-runtime/business-task-evaluator.d.ts",
+      "import": "./dist/vendor/onegent-runtime/business-task-evaluator.js"
+    },
     "./deployment-enforcement": {
       "types": "./dist/internal/control-client/deployment-enforcement.d.ts",
       "import": "./dist/internal/control-client/deployment-enforcement.js"