witnora 0.18.7 → 0.18.8

package/LICENSE

@@ -0,0 +1,17 @@
+Witnora CLI Commercial License
+
+Copyright (c) 2026 the Witnora copyright holders. All rights reserved.
+
+This package may be installed and used to connect customer-owned Agents to an
+authorized Witnora service. Redistribution, modification, reverse engineering,
+or use to operate a competing hosted service is not permitted without written
+permission from the copyright holders.
+
+Historical package versions released under Apache License 2.0 retain the rights
+granted with those versions. Public schemas, SDKs, Runtime interfaces, Probe,
+and offline verifiers are available separately in `witnora-framework` under
+Apache License 2.0.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR
+A PARTICULAR PURPOSE, AND NONINFRINGEMENT.

package/dist/gateway-service.js

@@ -58,13 +58,15 @@ export function createGatewayServicePlan(input) {
 }
 function windowsPlan(input, id, args) {
     const definitionPath = `${input.serviceHome}\\${id}.xml`;
-    const argumentsValue = args.map(windowsArgument).join(" ");
+    const hiddenCommand = `& ${[input.nodeExecutable, ...args].map(powerShellArgument).join(" ")}`;
+    const argumentsValue = ["-NoLogo", "-NoProfile", "-NonInteractive", "-WindowStyle", "Hidden", "-Command", hiddenCommand]
+        .map(windowsArgument).join(" ");
     const definition = `<?xml version="1.0" encoding="UTF-16"?>
 <Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
   <Triggers><LogonTrigger><Enabled>true</Enabled><UserId>${xml(input.userId)}</UserId></LogonTrigger></Triggers>
   <Principals><Principal id="Author"><UserId>${xml(input.userId)}</UserId><LogonType>InteractiveToken</LogonType><RunLevel>LeastPrivilege</RunLevel></Principal></Principals>
   <Settings><MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy><StartWhenAvailable>true</StartWhenAvailable><ExecutionTimeLimit>PT0S</ExecutionTimeLimit><RestartOnFailure><Interval>PT1M</Interval><Count>999</Count></RestartOnFailure></Settings>
-  <Actions Context="Author"><Exec><Command>${xml(input.nodeExecutable)}</Command><Arguments>${xml(argumentsValue)}</Arguments><WorkingDirectory>${xml(input.repository)}</WorkingDirectory></Exec></Actions>
+  <Actions Context="Author"><Exec><Command>powershell.exe</Command><Arguments>${xml(argumentsValue)}</Arguments><WorkingDirectory>${xml(input.repository)}</WorkingDirectory></Exec></Actions>
 </Task>`;
     return { id, kind: "WINDOWS_TASK", definitionPath, definition,
         install: { command: "schtasks.exe", args: ["/Create", "/TN", id, "/XML", definitionPath, "/F"] },
@@ -106,5 +108,6 @@ function launchdPlan(input, id, args) {
         uninstall: { command: "launchctl", args: ["bootout", domain, definitionPath] } };
 }
 function windowsArgument(value) { return `"${value.replaceAll('"', '\\"')}"`; }
+function powerShellArgument(value) { return `'${value.replaceAll("'", "''")}'`; }
 function systemd(value) { return `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`; }
 function xml(value) { return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&apos;"); }

package/dist/onboard.js

@@ -240,7 +240,9 @@ export async function runOnboard(options) {
             ? { state: "LOCAL_SANDBOX_READY", checkedAt: new Date().toISOString(), limitations: [] }
             : { state: "RECORDED_ONLY", checkedAt: new Date().toISOString(), limitations: [runtimeLimitation ?? "The local sandbox Runtime worker has not established exact adapter, probe, source-key, identity, mandate, and readiness bindings."] };
         await reportInstall(requestFetch, server, token.projectId, token.apiKey, setupPlan.id, {
-            status: "verified", attemptId, generatedFiles: relativeGeneratedFiles(repositoryPath, generatedFiles), runtimeReadiness, ...(runtimeBinding ? { runtimeBinding } : {}),
+            status: "verified", attemptId, generatedFiles: relativeGeneratedFiles(repositoryPath, generatedFiles), runtimeReadiness,
+            connectedAgent: { externalId: repository.name, name: humanizeAgentName(repository.name), version: repository.version, framework: frameworkForTemplate(repository.template) },
+            ...(runtimeBinding ? { runtimeBinding } : {}),
         });
         output(`\nWitnora Setup Autopilot completed for ${repository.name}.\n`);
         output(`Project: ${token.projectId}\nTemplate: ${repository.template} (${repository.kind})\n`);
@@ -256,7 +258,7 @@ export async function runOnboard(options) {
         output(assuranceHarnessReadiness.state === "ACTIVE"
             ? `Assurance Harness: ACTIVE. Nora can dispatch authority-ready Replay and no-write Shadow evaluations without manual Workflow IDs, evaluator origins, credentials, or contract digests.${realPathActivation.activations.length ? ` ${realPathActivation.activations.length} exact Stripe test-mode real-path binding(s) passed read-only preflight.` : ""}\n`
             : `Assurance Harness: WAITING_FOR_CUSTOMER_HARNESS. ${assuranceHarnessReadiness.limitation}\n`);
-        output("The self-test remains isolated. The Gateway is ready in the background; run the agent normally. The first source-signed, server-reconciled Gateway run completes onboarding.\n");
+        output("Connected. Nora is monitoring this Agent. Run it normally whenever it is ready; the first source-signed activity will appear automatically without blocking setup.\n");
         return { projectId: token.projectId, connectionName: token.connectionName, credentialsPath, template: repository.template,
             repositoryKind: repository.kind, generatedFiles, receiptPath, discovery, setupPlanId: setupPlan.id,
             gatewayDirectory: join(repositoryPath, ".witnora", "gateway"), gatewayArchiveDirectory: gatewayMigration?.archiveDirectory,
@@ -389,6 +391,7 @@ export async function inspectRepository(repositoryPath, explicitTemplate) {
     const rawName = typeof packageJson?.name === "string" ? packageJson.name : basename(repositoryPath);
     const name = rawName.replace(/^@[^/]+\//, "") || "agent-repository";
     const slug = (name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "agent-repository").slice(0, 64);
+    const version = typeof packageJson?.version === "string" && packageJson.version.trim() ? packageJson.version.trim() : "local";
     const fingerprintSha256 = createHash("sha256").update(JSON.stringify({ kind, name, files: names.filter((value) => !value.startsWith(".")).slice(0, 200) })).digest("hex");
     const dependencyNames = packageJson ? [
         ...Object.keys(record(packageJson.dependencies)),
@@ -397,7 +400,21 @@ export async function inspectRepository(repositoryPath, explicitTemplate) {
     ] : [];
     const manifest = await optionalJson(join(repositoryPath, "witnora.discovery.json"));
     const capabilities = inferPrivateCapabilities({ dependencyNames, topLevelNames: names, manifest });
-    return { kind, name, slug, template, fingerprintSha256, capabilities };
+    return { kind, name, slug, version, template, fingerprintSha256, capabilities };
+}
+function frameworkForTemplate(template) {
+    if (template === "coding")
+        return "coding-agent";
+    if (template === "workflow")
+        return "workflow-engine";
+    if (template === "data")
+        return "data-agent";
+    if (template === "browser")
+        return "browser-agent";
+    return "mcp";
+}
+function humanizeAgentName(value) {
+    return value.replace(/[-_.]+/g, " ").replace(/\b\w/g, (character) => character.toUpperCase()).trim() || value;
 }
 async function generateRepositoryConfig(repositoryPath, template, subject) {
     const files = new Map();

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "witnora",
-  "version": "0.18.7",
+  "version": "0.18.8",
   "description": "Independent assurance for covered agent action paths across models and frameworks.",
   "type": "module",
-  "license": "Apache-2.0",
+  "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://witnora.com/",
   "repository": {
     "type": "git",
@@ -64,6 +64,7 @@
   "files": [
     "dist",
     "README.md",
+    "LICENSE",
     "package.json"
   ],
   "scripts": {