witnora 0.15.1 → 0.16.0

package/dist/cli.js

@@ -2,6 +2,7 @@
 import { appendFile, mkdir, readFile, writeFile } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import { createInterface } from "node:readline/promises";
+import { fileURLToPath } from "node:url";
 import { validateEvidenceArtifacts } from "./artifact-validation.js";
 import { renderAgentCertBadge } from "./badge.js";
 import { buildEvidenceBundle } from "./bundle.js";
@@ -39,7 +40,8 @@ import { runOnboard } from "./onboard.js";
 import { inspectRepository } from "./onboard.js";
 import { renderReleaseEvaluation, runReleaseEvaluation } from "./release-evaluation.js";
 import { runPrivateCapabilityDiscovery } from "./private-discovery.js";
-import { configureManagedWorkflowHarness, doctorCustomerGateway, initializeCustomerGateway, isGatewayDoctorReady, readManagedCustomerGatewayLogs, renderGatewayDoctor, renderManagedGatewayStatus, restartManagedCustomerGateway, runCustomerGateway, startManagedCustomerGateway, statusManagedCustomerGateway, stopManagedCustomerGateway, } from "./gateway.js";
+import { configureManagedWorkflowHarness, doctorCustomerGateway, initializeCustomerGateway, isGatewayDoctorReady, readManagedCustomerGatewayLogs, renderGatewayDoctor, renderManagedGatewayStatus, restartManagedCustomerGateway, runCustomerGateway, startManagedCustomerGateway, statusManagedCustomerGateway, stopManagedCustomerGateway, superviseManagedCustomerGateway, } from "./gateway.js";
+import { installCurrentGatewayService, restartCurrentGatewayService, uninstallCurrentGatewayService } from "./gateway-service.js";
 import { verifyEvidencePacketV02 } from "./evidence-v02.js";
 process.on("uncaughtException", reportFatalError);
 process.on("unhandledRejection", reportFatalError);
@@ -224,6 +226,37 @@ else if (command === "gateway") {
         const result = await restartManagedCustomerGateway({ repository: readFlag("--repo") ?? process.cwd(), dir: readFlag("--dir") });
         process.stdout.write(readBoolFlag("--json") ? `${JSON.stringify(result, null, 2)}\n` : renderManagedGatewayStatus(result));
     }
+    else if (action === "repair") {
+        const repository = readFlag("--repo") ?? process.cwd();
+        const dir = readFlag("--dir");
+        const service = await installCurrentGatewayService({ repository, gatewayDirectory: dir, cliEntry: fileURLToPath(import.meta.url) });
+        await restartCurrentGatewayService({ repository, gatewayDirectory: dir, cliEntry: fileURLToPath(import.meta.url) });
+        const result = await startManagedCustomerGateway({ repository, dir });
+        const doctor = await doctorCustomerGateway({ repository, dir });
+        if (!isGatewayDoctorReady(doctor))
+            throw new Error(`Connection repair did not restore a ready Gateway. ${doctor.nextAction}`);
+        process.stdout.write(`Connection repaired. ${service.plan.kind} ${service.plan.id} is installed and the Gateway is healthy.\n`);
+        process.stdout.write(renderManagedGatewayStatus(result));
+    }
+    else if (action === "service") {
+        const serviceAction = process.argv[4] ?? "install";
+        const repository = readFlag("--repo") ?? process.cwd();
+        const gatewayDirectory = readFlag("--dir");
+        const cliEntry = fileURLToPath(import.meta.url);
+        if (serviceAction === "install") {
+            const result = await installCurrentGatewayService({ repository, gatewayDirectory, cliEntry });
+            process.stdout.write(`Installed ${result.plan.kind} service ${result.plan.id}.\n`);
+        }
+        else if (serviceAction === "uninstall") {
+            const result = await uninstallCurrentGatewayService({ repository, gatewayDirectory, cliEntry });
+            process.stdout.write(`Removed Gateway service ${result.plan.id}.\n`);
+        }
+        else
+            throw new Error("Use witnora gateway service install|uninstall.");
+    }
+    else if (action === "supervise") {
+        await superviseManagedCustomerGateway({ repository: readFlag("--repo") ?? process.cwd(), dir: readFlag("--dir"), output: (message) => process.stdout.write(message) });
+    }
     else if (action === "stop") {
         const result = await stopManagedCustomerGateway({ repository: readFlag("--repo") ?? process.cwd(), dir: readFlag("--dir") });
         process.stdout.write(readBoolFlag("--json") ? `${JSON.stringify(result, null, 2)}\n` : renderManagedGatewayStatus(result));
@@ -249,7 +282,7 @@ else if (command === "gateway") {
         process.stdout.write(`Configured the Managed Workflow Harness for ${result.config.workflowIds?.length ?? "all active"} Workflow Contract(s).\nConfig: ${result.path}\nRestart the managed Gateway to activate it.\n`);
     }
     else {
-        throw new Error("Use witnora gateway init|doctor|start|status|logs|restart|stop|run|workflow-harness.");
+        throw new Error("Use witnora gateway init|doctor|start|status|logs|restart|repair|service|stop|run|workflow-harness.");
     }
 }
 else if (command === "discover") {

package/dist/command-help.js

@@ -63,6 +63,8 @@ Options:
   witnora gateway status
   witnora gateway logs [--lines 100]
   witnora gateway restart
+  witnora gateway repair
+  witnora gateway service install|uninstall
   witnora gateway stop
   witnora gateway run
   witnora gateway workflow-harness --workflow <id> --evaluator-origin http://127.0.0.1:<port>/ \\
@@ -71,8 +73,10 @@ Options:
 Initializes and manages a customer-owned, metadata-only collector beside the Agent.
 The browser approval issues a collector-scoped credential; no API key is copied into
 the repository or exposed to the Agent. The local queue and source signing key remain
-under customer control. Onboard uses background start by default. The run command is
-the foreground debugging path.
+under customer control. The service command installs an OS-native auto-start and restart
+boundary. Repair safely reinstalls that boundary, restarts the existing generated Gateway,
+and reruns digest, credential, Probe, and health checks. The run command is the foreground
+debugging path.
 
 The reference Gateway establishes RECORDED evidence only. ENFORCED requires target
 write credentials behind a controlled execution adapter. OUTCOME VERIFIED requires a

package/dist/gateway-service.js

@@ -0,0 +1,104 @@
+import { createHash } from "node:crypto";
+import { execFile } from "node:child_process";
+import { mkdir, rm, writeFile } from "node:fs/promises";
+import { homedir, userInfo } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+export async function installGatewayService(input) {
+    const plan = createGatewayServicePlan(input);
+    await input.writeDefinition(plan.definitionPath, plan.definition);
+    if (plan.kind === "SYSTEMD_USER")
+        await input.run("systemctl", ["--user", "daemon-reload"]);
+    await input.run(plan.install.command, plan.install.args);
+    if (plan.kind !== "SYSTEMD_USER")
+        await input.run(plan.start.command, plan.start.args);
+    return { installed: true, plan };
+}
+export async function installCurrentGatewayService(options) {
+    const planInput = currentPlanInput(options);
+    return installGatewayService({ ...planInput,
+        writeDefinition: async (path, value) => { await mkdir(dirname(path), { recursive: true }); await writeFile(path, value, { encoding: "utf8", mode: 0o600 }); },
+        run: options.run ?? runCommand,
+    });
+}
+export async function uninstallCurrentGatewayService(options) {
+    const plan = createGatewayServicePlan(currentPlanInput(options));
+    const run = options.run ?? runCommand;
+    await run(plan.uninstall.command, plan.uninstall.args);
+    if (plan.kind === "SYSTEMD_USER")
+        await run("systemctl", ["--user", "daemon-reload"]);
+    await rm(plan.definitionPath, { force: true });
+    return { uninstalled: true, plan };
+}
+export async function restartCurrentGatewayService(options) {
+    const plan = createGatewayServicePlan(currentPlanInput(options));
+    const run = options.run ?? runCommand;
+    await run(plan.stop.command, plan.stop.args).catch(() => undefined);
+    await run(plan.start.command, plan.start.args);
+    return plan;
+}
+export function createGatewayServicePlan(input) {
+    const suffix = createHash("sha256").update(`${input.repository}\n${input.gatewayDirectory}`).digest("hex").slice(0, 12);
+    const id = `witnora-gateway-${suffix}`;
+    const superviseArgs = [input.cliEntry, "gateway", "supervise", "--repo", input.repository, "--dir", input.gatewayDirectory];
+    if (input.platform === "win32")
+        return windowsPlan(input, id, superviseArgs);
+    if (input.platform === "darwin")
+        return launchdPlan(input, id, superviseArgs);
+    if (input.platform === "linux")
+        return systemdPlan(input, id, superviseArgs);
+    throw new Error(`Gateway service installation is not supported on ${input.platform}.`);
+}
+function windowsPlan(input, id, args) {
+    const definitionPath = `${input.serviceHome}\\${id}.xml`;
+    const argumentsValue = args.map(windowsArgument).join(" ");
+    const definition = `<?xml version="1.0" encoding="UTF-8"?>
+<Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
+  <Triggers><LogonTrigger><Enabled>true</Enabled><UserId>${xml(input.userId)}</UserId></LogonTrigger></Triggers>
+  <Principals><Principal id="Author"><UserId>${xml(input.userId)}</UserId><LogonType>InteractiveToken</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>
+  <Settings><MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy><StartWhenAvailable>true</StartWhenAvailable><ExecutionTimeLimit>PT0S</ExecutionTimeLimit><RestartOnFailure><Interval>PT1M</Interval><Count>999</Count></RestartOnFailure></Settings>
+  <Actions Context="Author"><Exec><Command>${xml(input.nodeExecutable)}</Command><Arguments>${xml(argumentsValue)}</Arguments><WorkingDirectory>${xml(input.repository)}</WorkingDirectory></Exec></Actions>
+</Task>`;
+    return { id, kind: "WINDOWS_TASK", definitionPath, definition,
+        install: { command: "schtasks.exe", args: ["/Create", "/TN", id, "/XML", definitionPath, "/F"] },
+        start: { command: "schtasks.exe", args: ["/Run", "/TN", id] },
+        stop: { command: "schtasks.exe", args: ["/End", "/TN", id] },
+        uninstall: { command: "schtasks.exe", args: ["/Delete", "/TN", id, "/F"] } };
+}
+function currentPlanInput(options) {
+    const platform = options.platform ?? process.platform;
+    if (platform !== "win32" && platform !== "linux" && platform !== "darwin")
+        throw new Error(`Gateway service installation is not supported on ${platform}.`);
+    const repository = resolve(options.repository ?? process.cwd());
+    const env = options.env ?? process.env;
+    const serviceHome = platform === "win32" ? join(env.LOCALAPPDATA ?? join(homedir(), "AppData", "Local"), "Witnora", "services")
+        : platform === "darwin" ? join(homedir(), "Library", "LaunchAgents") : join(homedir(), ".config", "systemd", "user");
+    return { platform, repository, gatewayDirectory: resolve(repository, options.gatewayDirectory ?? ".witnora/gateway"), cliEntry: resolve(options.cliEntry), nodeExecutable: options.nodeExecutable ?? process.execPath, serviceHome, userId: platform === "win32" ? `${env.USERDOMAIN ? `${env.USERDOMAIN}\\` : ""}${env.USERNAME ?? userInfo().username}` : userInfo().username };
+}
+async function runCommand(command, args) { await execFileAsync(command, args, { windowsHide: true }); }
+function systemdPlan(input, id, args) {
+    const unit = `${id}.service`;
+    const definitionPath = `${input.serviceHome}/${unit}`;
+    const definition = `[Unit]\nDescription=Witnora customer-owned Gateway\nAfter=network-online.target\nWants=network-online.target\n\n[Service]\nType=simple\nWorkingDirectory=${systemd(input.repository)}\nExecStart=${[input.nodeExecutable, ...args].map(systemd).join(" ")}\nRestart=always\nRestartSec=5\n\n[Install]\nWantedBy=default.target\n`;
+    return { id, kind: "SYSTEMD_USER", definitionPath, definition,
+        install: { command: "systemctl", args: ["--user", "enable", "--now", unit] },
+        start: { command: "systemctl", args: ["--user", "start", unit] },
+        stop: { command: "systemctl", args: ["--user", "stop", unit] },
+        uninstall: { command: "systemctl", args: ["--user", "disable", "--now", unit] } };
+}
+function launchdPlan(input, id, args) {
+    const label = `com.witnora.${id}`;
+    const definitionPath = `${input.serviceHome}/${label}.plist`;
+    const programArguments = [input.nodeExecutable, ...args].map((value) => `<string>${xml(value)}</string>`).join("");
+    const definition = `<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Label</key><string>${label}</string><key>ProgramArguments</key><array>${programArguments}</array><key>WorkingDirectory</key><string>${xml(input.repository)}</string><key>RunAtLoad</key><true/><key>KeepAlive</key><true/><key>ThrottleInterval</key><integer>5</integer></dict></plist>`;
+    const domain = `gui/${process.getuid?.() ?? input.userId}`;
+    return { id, kind: "LAUNCHD_AGENT", definitionPath, definition,
+        install: { command: "launchctl", args: ["bootstrap", domain, definitionPath] },
+        start: { command: "launchctl", args: ["kickstart", `${domain}/${label}`] },
+        stop: { command: "launchctl", args: ["kill", "SIGTERM", `${domain}/${label}`] },
+        uninstall: { command: "launchctl", args: ["bootout", domain, definitionPath] } };
+}
+function windowsArgument(value) { return `"${value.replaceAll('"', '\\"')}"`; }
+function systemd(value) { return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`; }
+function xml(value) { return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;"); }

package/dist/gateway.js

@@ -514,6 +514,10 @@ export async function runCustomerGateway(options) {
             host: process.env.WITNORA_GATEWAY_HOST?.trim() || config.host,
             port: gatewayPort(process.env.WITNORA_GATEWAY_PORT, config.port),
             environment: "customer-owned",
+            onRepairRequested: async ({ requestId }) => {
+                process.stderr.write(`Hosted connection repair ${requestId} requested a verified Gateway restart.\n`);
+                setTimeout(() => process.exit(75), 25).unref();
+            },
             ...(actionWorker && config.runtimeWorker ? { actionWorker: {
                     track: (input) => isConfiguredRuntimeProposal(input.proposal, config.runtimeWorker) ? actionWorker.track(input) : Promise.resolve(undefined),
                     status: async () => {
@@ -1056,6 +1060,25 @@ export async function restartManagedCustomerGateway(options = {}) {
     await stopManagedCustomerGateway(options);
     return startManagedCustomerGateway(options);
 }
+export async function superviseManagedCustomerGateway(options = {}) {
+    const inspect = options.inspect ?? (() => statusManagedCustomerGateway({ repository: options.repository, dir: options.dir }));
+    const start = options.start ?? (() => startManagedCustomerGateway({ repository: options.repository, dir: options.dir }));
+    const sleep = options.sleep ?? wait;
+    const maxCycles = options.maxCycles ?? Number.POSITIVE_INFINITY;
+    let recoveries = 0;
+    for (let cycle = 0; cycle < maxCycles; cycle += 1) {
+        const status = await inspect();
+        if (status.state === "CONFLICT")
+            throw new Error(status.detail);
+        if (status.state === "STOPPED" || status.state === "STALE") {
+            await start();
+            recoveries += 1;
+            options.output?.(`Recovered customer-owned Gateway (${recoveries}).\n`);
+        }
+        if (cycle + 1 < maxCycles)
+            await sleep(options.intervalMs ?? 5_000);
+    }
+}
 export async function readManagedCustomerGatewayLogs(options = {}) {
     const repository = resolve(options.repository ?? process.cwd());
     const directory = resolve(repository, options.dir ?? ".witnora/gateway");

package/dist/internal/control-client/collector-gateway.d.ts

@@ -50,6 +50,10 @@ export interface CustomerOwnedCollectorGatewayOptions {
         status(): Promise<AssuranceHarnessHeartbeat>;
     };
     runtimeBinding?: RuntimeReadinessBinding;
+    onRepairRequested?: (request: {
+        requestId: string;
+        action: "RESTART_AND_VERIFY";
+    }) => void | Promise<void>;
 }
 export interface CustomerOwnedCollectorGateway {
     baseUrl: string;

package/dist/internal/control-client/collector-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collector-gateway.d.ts","sourceRoot":"","sources":["../../../../agentcert-sdk/src/collector-gateway.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,qBAAqB,EAGrB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjJ,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClH,SAAS,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;QAAC,gBAAgB,CAAC,EAAE,yBAAyB,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnP,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7F,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3G,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjI;AAED,MAAM,WAAW,oCAAoC;IACnD,MAAM,EAAE,wBAAwB,CAAC;IACjC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE;QACb,KAAK,CAAC,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACxF,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,cAAc,CAAC,EAAE;YAAE,cAAc,EAAE,oBAAoB,CAAC;YAAC,OAAO,EAAE,uBAAuB,CAAC;YAAC,YAAY,EAAE,OAAO,CAAC;YAAC,WAAW,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KAC3I,CAAC;IACF,gBAAgB,CAAC,EAAE;QAAE,MAAM,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAA;KAAE,CAAC;IACpE,cAAc,CAAC,EAAE,uBAAuB,CAAC;CAC1C;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,MAAM,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,kDAAkD,CAAC;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;CAC9C;AAUD,wBAAsB,kCAAkC,CAAC,OAAO,EAAE,oCAAoC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAqM9I"}
+{"version":3,"file":"collector-gateway.d.ts","sourceRoot":"","sources":["../../../../agentcert-sdk/src/collector-gateway.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,qBAAqB,EAGrB,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,yBAAyB,EAC/B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjJ,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClH,SAAS,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;QAAC,gBAAgB,CAAC,EAAE,yBAAyB,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnP,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7F,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3G,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjI;AAED,MAAM,WAAW,oCAAoC;IACnD,MAAM,EAAE,wBAAwB,CAAC;IACjC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE;QACb,KAAK,CAAC,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QACxF,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,cAAc,CAAC,EAAE;YAAE,cAAc,EAAE,oBAAoB,CAAC;YAAC,OAAO,EAAE,uBAAuB,CAAC;YAAC,YAAY,EAAE,OAAO,CAAC;YAAC,WAAW,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;KAC3I,CAAC;IACF,gBAAgB,CAAC,EAAE;QAAE,MAAM,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAA;KAAE,CAAC;IACpE,cAAc,CAAC,EAAE,uBAAuB,CAAC;IACzC,iBAAiB,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,oBAAoB,CAAA;KAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5G;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,MAAM,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,kDAAkD,CAAC;IAClE,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;CAC9C;AAUD,wBAAsB,kCAAkC,CAAC,OAAO,EAAE,oCAAoC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CA0M9I"}

package/dist/internal/control-client/collector-gateway.js

@@ -176,7 +176,7 @@ export async function startCustomerOwnedCollectorGateway(options) {
         try {
             await ensureSourceKeyRegistered();
             const workerStatus = options.actionWorker ? await options.actionWorker.status() : undefined;
-            await options.client.heartbeat({
+            const response = await options.client.heartbeat({
                 collectorId: activeCollector.id,
                 signer,
                 pendingRecordCount: current.pendingRecordCount,
@@ -184,6 +184,13 @@ export async function startCustomerOwnedCollectorGateway(options) {
                 runtime: runtimeBinding && workerStatus ? runtimeHeartbeat(runtimeBinding, workerStatus, options.actionWorker?.runtimeBinding?.fixtureReady) : undefined,
                 assuranceHarness: options.assuranceHarness ? await options.assuranceHarness.status() : undefined,
             });
+            const repair = response.repair;
+            if (repair && typeof repair === "object" && !Array.isArray(repair)) {
+                const requestId = repair.requestId;
+                const action = repair.action;
+                if (typeof requestId === "string" && action === "RESTART_AND_VERIFY")
+                    await options.onRepairRequested?.({ requestId, action });
+            }
             lastRemoteSuccessAt = new Date().toISOString();
             lastRemoteError = undefined;
         }

package/dist/onboard.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { access, mkdir, readFile, readdir, rename, rm, writeFile } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 import { DEFAULT_WITNORA_SERVER, saveConnection } from "./credentials.js";
 import { authorizeProjectConnection } from "./device-authorization.js";
 import { verifyControlPlaneConnection } from "./control-plane.js";
@@ -11,6 +12,7 @@ import { doctorCustomerGateway, activateManagedWorkflowHarness, initializeCustom
 import { discoverRuntimeReferences, planRuntimeSandboxModules } from "./runtime-sandbox-kit.js";
 import { automaticRuntimeReferencesUsable, bootstrapLocalRuntime, verifyAutomaticRuntimeProbe } from "./runtime-bootstrap.js";
 import { activateRealPathIntegrations } from "./real-path-activation.js";
+import { installCurrentGatewayService } from "./gateway-service.js";
 export async function runOnboard(options) {
     const requestFetch = options.fetch ?? fetch;
     const output = options.output ?? ((message) => process.stdout.write(message));
@@ -91,6 +93,7 @@ export async function runOnboard(options) {
         limitation: "No approved customer Harness module is bound to this Agent repository.",
     };
     let assuranceHarnessChanged = false;
+    let continuousService;
     await reportInstall(requestFetch, server, token.projectId, token.apiKey, setupPlan.id, { status: "installing", attemptId });
     try {
         generatedFiles.push(...await generateRepositoryConfig(repositoryPath, repository.template, repository.name));
@@ -176,6 +179,10 @@ export async function runOnboard(options) {
                 }
             }
             else {
+                const stopped = await gatewayLifecycle.stop({ repository: repositoryPath, configHome: options.configHome, fetch: requestFetch });
+                if (stopped.state === "STOPPED" || stopped.state === "STALE") {
+                    output(`\nStopped the managed Gateway for project ${binding.projectId} before rebinding this repository.\n`);
+                }
                 await assertGatewayStopped(requestFetch, binding.host, binding.port, binding.projectId, token.projectId);
                 gatewayMigration = await archiveGateway(gatewayState.directory, repositoryPath, binding.projectId);
                 output(`\nExisting Gateway belongs to project ${binding.projectId}; archived it at ${gatewayMigration.archiveDirectory}.\n`);
@@ -209,6 +216,10 @@ export async function runOnboard(options) {
             if (stopped.state !== "STOPPED" && stopped.state !== "STALE")
                 throw new Error("The prior managed Gateway process did not stop before Assurance Harness activation.");
         }
+        if (!options.gatewayLifecycle) {
+            const installed = await installCurrentGatewayService({ repository: repositoryPath, cliEntry: fileURLToPath(new URL("./cli.js", import.meta.url)) });
+            continuousService = { state: "INSTALLED", kind: installed.plan.kind, id: installed.plan.id };
+        }
         managedGateway = await gatewayLifecycle.start({
             repository: repositoryPath,
             configHome: options.configHome,
@@ -233,6 +244,8 @@ export async function runOnboard(options) {
         output(`Private discovery: ${discovery.capabilityCount} capability group(s); ${discovery.unknownCapabilityCount} pending confirmation.\n`);
         output("Installed: customer-owned Gateway, default-deny policy, independent-probe contract, review contract, and PR/release/nightly CI.\n");
         output(`Gateway: ${managedGateway.state} at ${managedGateway.baseUrl}${managedGateway.pid ? ` (process ${managedGateway.pid})` : ""}.\n`);
+        if (continuousService)
+            output(`Continuous operation: ${continuousService.kind} ${continuousService.id} will start at login and recover the Gateway after process failure.\n`);
         output(runtimeReadiness.state === "LOCAL_SANDBOX_READY"
             ? "Runtime: LOCAL_SANDBOX_READY. This proves only the generated localhost sandbox loop is ready; it does not establish coverage, CURRENT, or a verified customer outcome.\n"
             : `Runtime: RECORDED_ONLY. ${runtimeReadiness.limitations[0]}\n`);
@@ -243,7 +256,7 @@ export async function runOnboard(options) {
         return { projectId: token.projectId, connectionName: token.connectionName, credentialsPath, template: repository.template,
             repositoryKind: repository.kind, generatedFiles, receiptPath, discovery, setupPlanId: setupPlan.id,
             gatewayDirectory: join(repositoryPath, ".witnora", "gateway"), gatewayArchiveDirectory: gatewayMigration?.archiveDirectory,
-            gateway: managedGateway, runtimeReadiness, assuranceHarnessReadiness };
+            gateway: managedGateway, runtimeReadiness, assuranceHarnessReadiness, continuousService };
     }
     catch (error) {
         const diagnosis = error instanceof Error ? error.message : String(error);

package/dist/runtime-bootstrap.js

@@ -49,8 +49,11 @@ export async function bootstrapLocalRuntime(input) {
         body: JSON.stringify({ ...contract, contractFingerprintSha256 }),
     });
     const body = await response.json().catch(() => ({}));
-    if (!response.ok)
-        throw new Error(`Hosted Runtime bootstrap did not complete (HTTP ${response.status}).`);
+    if (!response.ok) {
+        const detail = typeof body.error === "string" ? body.error : typeof body.message === "string" ? body.message : undefined;
+        const code = typeof body.code === "string" ? body.code : undefined;
+        throw new Error(`Hosted Runtime bootstrap did not complete (HTTP ${response.status})${code ? ` [${code}]` : ""}${detail ? `: ${detail.slice(0, 300)}` : "."}`);
+    }
     const issued = validateResponse(body, contractFingerprintSha256, attempt.deliveryPublicKeyPem);
     const probeCredentialPath = join(directory, "outcome-probe-api-key.txt");
     const probeCredentialMetadataPath = join(directory, "outcome-probe-api-key.json");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "witnora",
-  "version": "0.15.1",
+  "version": "0.16.0",
   "description": "Independent assurance for covered agent action paths across models and frameworks.",
   "type": "module",
   "license": "Apache-2.0",