witnora 0.20.4 → 0.20.6

package/dist/cli.js

@@ -41,7 +41,7 @@ import { inspectRepository } from "./onboard.js";
 import { renderReleaseEvaluation, runReleaseEvaluation } from "./release-evaluation.js";
 import { runPrivateCapabilityDiscovery } from "./private-discovery.js";
 import { configureManagedWorkflowHarness, doctorCustomerGateway, initializeCustomerGateway, isGatewayDoctorReady, readManagedCustomerGatewayLogs, renderGatewayDoctor, renderManagedGatewayStatus, restartManagedCustomerGateway, runCustomerGateway, startManagedCustomerGateway, statusManagedCustomerGateway, stopManagedCustomerGateway, superviseManagedCustomerGateway, } from "./gateway.js";
-import { installCurrentGatewayService, uninstallCurrentGatewayService } from "./gateway-service.js";
+import { installCurrentGatewayService, stopCurrentGatewayOwners, uninstallCurrentGatewayService } from "./gateway-service.js";
 import { verifyEvidencePacketV02 } from "./evidence-v02.js";
 process.on("uncaughtException", reportFatalError);
 process.on("unhandledRejection", reportFatalError);
@@ -265,7 +265,15 @@ else if (command === "gateway") {
         await superviseManagedCustomerGateway({ repository: readFlag("--repo") ?? process.cwd(), dir: readFlag("--dir"), configHome: readFlag("--config-home"), serviceLeasePath: readFlag("--service-lease"), serviceGeneration: readFlag("--service-generation"), output: (message) => process.stdout.write(message) });
     }
     else if (action === "stop") {
-        const result = await stopManagedCustomerGateway({ repository: readFlag("--repo") ?? process.cwd(), dir: readFlag("--dir") });
+        const repository = readFlag("--repo") ?? process.cwd();
+        const dir = readFlag("--dir");
+        const configHome = readFlag("--config-home");
+        const result = await stopCurrentGatewayOwners({
+            repository,
+            gatewayDirectory: dir,
+            cliEntry: fileURLToPath(import.meta.url),
+            configHome,
+        }, () => stopManagedCustomerGateway({ repository, dir, configHome }));
         process.stdout.write(readBoolFlag("--json") ? `${JSON.stringify(result, null, 2)}\n` : renderManagedGatewayStatus(result));
     }
     else if (action === "run") {

package/dist/gateway-service.js

@@ -78,6 +78,13 @@ export async function stopCurrentGatewayService(options) {
     }
     return plan;
 }
+export async function stopCurrentGatewayOwners(options, stopManagedGateway) {
+    await stopCurrentGatewayService(options);
+    const result = await stopManagedGateway();
+    if (result.healthy)
+        throw new Error("The customer-owned Gateway remained healthy after its operating-system supervisor was stopped.");
+    return result.stopped ? result : { ...result, stopped: true };
+}
 export function createGatewayServicePlan(input) {
     const suffix = createHash("sha256").update(`${input.repository}\n${input.gatewayDirectory}`).digest("hex").slice(0, 12);
     const id = `witnora-gateway-${suffix}`;

package/dist/gateway.js

@@ -576,6 +576,10 @@ export async function runCustomerGateway(options) {
                 FileActionCheckpointStore: (await durableWorker).FileActionCheckpointStore,
             })
             : undefined;
+        const probeCredentialReady = createBoundedRuntimeProbeReadiness({
+            check: () => runtimeProbeCredentialReady(config, options.configHome),
+            initialReady: true,
+        });
         const assuranceController = await createContinuousAssuranceController({
             repository: resolve(directory, "..", ".."), directory, projectId: config.projectId, server: config.server,
             apiKey: connection.apiKey, config, sourceSigner: () => keyRing.activeSigner(),
@@ -598,7 +602,7 @@ export async function runCustomerGateway(options) {
                     track: (input) => isConfiguredRuntimeProposal(input.proposal, config.runtimeWorker) ? actionWorker.track(input) : Promise.resolve(undefined),
                     status: async () => {
                         const status = await actionWorker.status();
-                        const probeReady = await runtimeProbeCredentialReady(config, options.configHome);
+                        const probeReady = await probeCredentialReady();
                         return {
                             ...status,
                             ready: status.ready === true && probeReady,
@@ -2221,6 +2225,34 @@ function wait(milliseconds) {
 function safeSlug(value) {
     return (value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "agent-repository").slice(0, 48);
 }
+export function createBoundedRuntimeProbeReadiness(input) {
+    const now = input.now ?? Date.now;
+    const successTtlMs = input.successTtlMs ?? 300_000;
+    const failureTtlMs = input.failureTtlMs ?? 15_000;
+    let ready = input.initialReady ?? false;
+    let checkedAt = input.initialReady === undefined ? Number.NEGATIVE_INFINITY : now();
+    let pending;
+    return async () => {
+        const ttl = ready ? successTtlMs : failureTtlMs;
+        if (now() - checkedAt < ttl)
+            return ready;
+        if (pending)
+            return pending;
+        pending = input.check()
+            .then((nextReady) => {
+            ready = nextReady;
+            checkedAt = now();
+            return ready;
+        })
+            .catch(() => {
+            ready = false;
+            checkedAt = now();
+            return false;
+        })
+            .finally(() => { pending = undefined; });
+        return pending;
+    };
+}
 function collectorIdForRepository(repository, projectId) {
     const readable = safeSlug(basename(repository)).slice(0, 36);
     const identity = createHash("sha256").update(`${resolve(repository)}\n${projectId}`).digest("hex").slice(0, 10);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "witnora",
-  "version": "0.20.4",
+  "version": "0.20.6",
   "description": "Independent assurance for covered agent action paths across models and frameworks.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",