witnora 0.20.8 → 0.20.10

package/dist/cli.js

@@ -162,6 +162,7 @@ else if (command === "onboard") {
         actionTransport: readActionTransport(readFlag("--action-transport")),
         waitForActionPathMs: readActionTransport(readFlag("--action-transport")) && !readBoolFlag("--no-wait-for-action-path") ? 10 * 60 * 1_000 : 0,
         openBrowser: readBoolFlag("--no-browser") ? async () => { } : undefined,
+        confirmRunDetectedAgent: readBoolFlag("--no-run-agent") ? undefined : confirmDetectedAgentRun,
     });
 }
 else if (command === "mcp") {
@@ -1045,6 +1046,12 @@ async function promptValue(label) {
         prompt.close();
     }
 }
+async function confirmDetectedAgentRun(command) {
+    if (!process.stdin.isTTY || !process.stdout.isTTY)
+        return false;
+    const answer = (await promptValue(`Run ${command.join(" ")} safely once now in this terminal? [Y/n] `)).toLowerCase();
+    return answer === "" || answer === "y" || answer === "yes";
+}
 async function promptSecret(label) {
     if (!process.stdin.isTTY || !process.stdout.isTTY || !process.stdin.setRawMode) {
         throw new Error("Missing project API key. Set WITNORA_API_KEY (or legacy AGENTCERT_API_KEY) or pass --api-key in a trusted environment.");

package/dist/command-help.js

@@ -56,6 +56,7 @@ Options:
   --repo <directory>      Repository to configure (default: current directory)
   --template <type>       Override automatic repository detection
   --action-transport <t>  Test HTTP or MCP against the exact generated sandbox Action path
+  --no-run-agent          Do not offer to run a detected bounded Agent command in this terminal
   --no-browser            Print the approval URL without opening it
 `;
     if (command === "mcp")

package/dist/gateway-exec.js

@@ -1,6 +1,6 @@
 import { spawn } from "node:child_process";
-import { readFile } from "node:fs/promises";
-import { join, resolve } from "node:path";
+import { access, readFile } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
 export async function runCustomerGatewayCommand(options) {
     const repository = resolve(options.repository);
     const gatewayDirectory = resolve(options.gatewayDirectory ?? join(repository, ".witnora", "gateway"));
@@ -14,8 +14,9 @@ export async function runCustomerGatewayCommand(options) {
     if (!host || !Number.isInteger(port) || port < 1 || port > 65_535 || !gatewayToken) {
         throw new Error("The local Gateway binding is incomplete. Run witnora onboard from this repository before starting the Agent workflow.");
     }
+    const launch = await resolveLaunch(options.command, options.args ?? []);
     return await new Promise((resolveChild, rejectChild) => {
-        const child = spawn(options.command, options.args ?? [], {
+        const child = spawn(launch.command, launch.args, {
             cwd: repository,
             env: {
                 ...process.env,
@@ -29,6 +30,24 @@ export async function runCustomerGatewayCommand(options) {
         child.once("exit", (code) => resolveChild({ exitCode: code ?? 1 }));
     });
 }
+async function resolveLaunch(command, args) {
+    const packageManager = basename(command).toLowerCase();
+    if (process.platform !== "win32" || packageManager !== "npm" && packageManager !== "npx")
+        return { command, args };
+    const cliName = packageManager === "npm" ? "npm-cli.js" : "npx-cli.js";
+    const candidates = [
+        packageManager === "npm" ? process.env.npm_execpath : undefined,
+        join(dirname(process.execPath), "node_modules", "npm", "bin", cliName),
+    ].filter((candidate) => Boolean(candidate));
+    for (const candidate of candidates) {
+        try {
+            await access(candidate);
+            return { command: process.execPath, args: [candidate, ...args] };
+        }
+        catch { /* try the next customer-local Node installation path */ }
+    }
+    throw new Error(`Could not locate ${packageManager} for the Agent workflow. Run the repository's direct Node or Python command instead.`);
+}
 async function readJson(path, label) {
     try {
         const value = JSON.parse(await readFile(path, "utf8"));

package/dist/onboard.js

@@ -13,6 +13,7 @@ import { discoverRuntimeReferences, planRuntimeSandboxModules } from "./runtime-
 import { automaticRuntimeReferencesUsable, bootstrapLocalRuntime, verifyAutomaticRuntimeProbe } from "./runtime-bootstrap.js";
 import { activateRealPathIntegrations } from "./real-path-activation.js";
 import { installCurrentGatewayService, stopCurrentGatewayService } from "./gateway-service.js";
+import { runCustomerGatewayCommand } from "./gateway-exec.js";
 export async function runOnboard(options) {
     const requestFetch = options.fetch ?? fetch;
     const output = options.output ?? ((message) => process.stdout.write(message));
@@ -125,6 +126,7 @@ export async function runOnboard(options) {
     let assuranceHarnessChanged = false;
     let httpActionSetup;
     let continuousService;
+    let localOutputTaskConfirmed = false;
     const prepareRuntime = async (operation) => {
         const delays = [250, 500, 1_000, 2_000, 4_000, 8_000];
         let lastError;
@@ -330,15 +332,37 @@ export async function runOnboard(options) {
         });
         if (actionTransportTest?.state === "WAITING_FOR_ACTION_PATH" && (options.waitForActionPathMs ?? 0) > 0) {
             output("\nBase setup is complete. Onboarding is waiting for the Business Task and Action path; it has not claimed completion.\n");
-            output(agentRunCommand
-                ? `Open a second terminal in this repository and run the Agent safely once:\n${agentRunCommand}\n`
-                : "Run the Agent normally in its sandbox. If it has no work now, you may enter the workspace and finish Action verification after its first real run.\n");
+            let ranDetectedAgent = false;
+            if (localWorkflowCommand && options.confirmRunDetectedAgent) {
+                output(`Detected Agent command: ${localWorkflowCommand.join(" ")}\n`);
+                if (await options.confirmRunDetectedAgent(localWorkflowCommand)) {
+                    output("Running this Agent safely once in the current terminal...\n");
+                    const [command, ...args] = localWorkflowCommand;
+                    const result = await (options.runGatewayCommand ?? runCustomerGatewayCommand)({ repository: repositoryPath, command: command, args });
+                    if (result.exitCode !== 0)
+                        throw new Error(`The detected Agent command exited with code ${result.exitCode}. Onboarding remains fail closed.`);
+                    output("Agent run completed. Keep the browser open and confirm the Business Task; this command will finish automatically.\n");
+                    ranDetectedAgent = true;
+                }
+            }
+            if (!ranDetectedAgent)
+                output(agentRunCommand
+                    ? `Run the Agent in its normal environment, or use this command from another terminal:\n${agentRunCommand}\n`
+                    : "Run the Agent normally in its sandbox. If it has no work now, you may enter the workspace and finish Action verification after its first real run.\n");
             output(`Keep this command open for up to ${Math.max(1, Math.ceil((options.waitForActionPathMs ?? 0) / 60_000))} minutes. It will finish automatically after you confirm the Business Task in the browser; no second onboard command is required. Press Ctrl+C to pause safely.\n`);
-            const lateActivation = await waitForRealPathActivation({
+            const resolution = await waitForOnboardingResolution({
                 repository: repositoryPath, server, projectId: token.projectId, apiKey: token.apiKey,
                 env: options.env, fetch: requestFetch, sleep: options.sleep, timeoutMs: options.waitForActionPathMs ?? 0,
             });
-            if (lateActivation) {
+            if (resolution?.kind === "LOCAL_OUTPUT") {
+                localOutputTaskConfirmed = true;
+                actionTransportTest = undefined;
+                if (assuranceHarnessReadiness.state === "WAITING_FOR_CUSTOMER_HARNESS") {
+                    assuranceHarnessReadiness = { state: "NOT_REQUIRED_FOR_LOCAL_OUTPUT" };
+                }
+            }
+            else if (resolution?.kind === "REAL_PATH") {
+                const lateActivation = resolution.activation;
                 realPathActivation = lateActivation;
                 generatedFiles.push(...lateActivation.generatedFiles);
                 const harness = await activateManagedWorkflowHarness({ repository: repositoryPath, realPathActivations: lateActivation.activations, previousGeneratedModuleSha256: lateActivation.previousGeneratedModuleSha256 });
@@ -383,7 +407,9 @@ export async function runOnboard(options) {
             : `Runtime: RECORDED_ONLY. ${runtimeReadiness.limitations[0]}\n`);
         output(assuranceHarnessReadiness.state === "ACTIVE"
             ? `Assurance Harness: ACTIVE. Nora can dispatch authority-ready Replay and no-write Shadow evaluations without manual Workflow IDs, evaluator origins, credentials, or contract digests.${realPathActivation.activations.length ? ` ${realPathActivation.activations.length} exact sandbox real-path binding(s) passed read-only preflight.` : ""}\n`
-            : `Assurance Harness: WAITING_FOR_CUSTOMER_HARNESS. ${assuranceHarnessReadiness.limitation}\n`);
+            : assuranceHarnessReadiness.state === "NOT_REQUIRED_FOR_LOCAL_OUTPUT"
+                ? "Assurance Harness: NOT_REQUIRED_FOR_LOCAL_OUTPUT. The approved read-only local-output task is confirmed; no external Action transport is required.\n"
+                : `Assurance Harness: WAITING_FOR_CUSTOMER_HARNESS. ${assuranceHarnessReadiness.limitation}\n`);
         if (httpActionSetup?.state === "READY" && httpActionSetup.action) {
             output(`HTTP Action: READY. POST ${managedGateway.baseUrl}${httpActionSetup.action.path}; copy the action-scoped token and request example from .witnora/gateway/HTTP_ACTION.md.\n`);
         }
@@ -393,9 +419,11 @@ export async function runOnboard(options) {
         else if (actionTransportTest) {
             output(`Action transport: ${actionTransportTest.transport.toUpperCase()} is waiting for one exact sandbox Task/action path. ${actionTransportTest.limitation}\n`);
         }
-        output(actionTransportTest?.state === "WAITING_FOR_ACTION_PATH"
-            ? `Base Gateway connected, but ${actionTransportTest.transport.toUpperCase()} Action is not verified yet. Run the Agent once and confirm its Business Task in the browser. Recovery only: rerun this command if the original waiting process was closed.\n`
-            : "Connected. Nora is monitoring this Agent. Run it normally whenever it is ready; the first source-signed activity will appear automatically without blocking setup.\n");
+        output(localOutputTaskConfirmed
+            ? "Connected. Nora is monitoring this Agent. The approved read-only local-output task is confirmed; no external Action transport is required.\n"
+            : actionTransportTest?.state === "WAITING_FOR_ACTION_PATH"
+                ? `Base Gateway connected, but ${actionTransportTest.transport.toUpperCase()} Action is not verified yet. Run the Agent once and confirm its Business Task in the browser. Recovery only: rerun this command if the original waiting process was closed.\n`
+                : "Connected. Nora is monitoring this Agent. Run it normally whenever it is ready; the first source-signed activity will appear automatically without blocking setup.\n");
         output(localWorkflowCommand
             ? `Local sandbox command: ${agentRunCommand}\n`
             : `For a local sandbox workflow, use npx --yes witnora@${cliVersion} gateway exec -- <your normal sandbox command> so the Gateway token stays out of shell history.\n`);
@@ -458,14 +486,17 @@ async function loadMatchingOnboardConnection(options) {
         return undefined;
     }
 }
-async function waitForRealPathActivation(options) {
+async function waitForOnboardingResolution(options) {
     const sleep = options.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
     let waited = 0;
     let delay = 2_000;
     while (waited < options.timeoutMs) {
         const activation = await activateRealPathIntegrations(options);
         if (activation.activations.length)
-            return activation;
+            return { kind: "REAL_PATH", activation };
+        const onboarding = await jsonRequest(options.fetch, `${options.server}/v1/projects/${encodeURIComponent(options.projectId)}/onboarding`, { method: "GET", headers: { authorization: `Bearer ${options.apiKey}` } });
+        if (onboarding.localOutputTaskConfirmed)
+            return { kind: "LOCAL_OUTPUT" };
         const interval = Math.min(delay, options.timeoutMs - waited);
         await sleep(interval);
         waited += interval;
@@ -661,6 +692,11 @@ function relativeGeneratedFiles(repositoryPath, files) {
 }
 function randomSuffix() { return Math.random().toString(36).slice(2, 10); }
 async function detectLocalWorkflowCommand(repositoryPath) {
+    const manifest = await optionalJson(join(repositoryPath, "package.json"));
+    const scripts = manifest?.scripts;
+    if (scripts && typeof scripts === "object" && !Array.isArray(scripts) && typeof scripts.agent === "string") {
+        return ["npm", "run", "agent"];
+    }
     if (await exists(join(repositoryPath, "scripts", "run_workflow.py")))
         return ["python", "scripts/run_workflow.py"];
     if (await exists(join(repositoryPath, "scripts", "run-workflow.mjs")))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "witnora",
-  "version": "0.20.8",
+  "version": "0.20.10",
   "description": "Independent assurance for covered agent action paths across models and frameworks.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",