witnora 0.20.8 → 0.20.9

package/dist/onboard.js

@@ -125,6 +125,7 @@ export async function runOnboard(options) {
     let assuranceHarnessChanged = false;
     let httpActionSetup;
     let continuousService;
+    let localOutputTaskConfirmed = false;
     const prepareRuntime = async (operation) => {
         const delays = [250, 500, 1_000, 2_000, 4_000, 8_000];
         let lastError;
@@ -334,11 +335,19 @@ export async function runOnboard(options) {
                 ? `Open a second terminal in this repository and run the Agent safely once:\n${agentRunCommand}\n`
                 : "Run the Agent normally in its sandbox. If it has no work now, you may enter the workspace and finish Action verification after its first real run.\n");
             output(`Keep this command open for up to ${Math.max(1, Math.ceil((options.waitForActionPathMs ?? 0) / 60_000))} minutes. It will finish automatically after you confirm the Business Task in the browser; no second onboard command is required. Press Ctrl+C to pause safely.\n`);
-            const lateActivation = await waitForRealPathActivation({
+            const resolution = await waitForOnboardingResolution({
                 repository: repositoryPath, server, projectId: token.projectId, apiKey: token.apiKey,
                 env: options.env, fetch: requestFetch, sleep: options.sleep, timeoutMs: options.waitForActionPathMs ?? 0,
             });
-            if (lateActivation) {
+            if (resolution?.kind === "LOCAL_OUTPUT") {
+                localOutputTaskConfirmed = true;
+                actionTransportTest = undefined;
+                if (assuranceHarnessReadiness.state === "WAITING_FOR_CUSTOMER_HARNESS") {
+                    assuranceHarnessReadiness = { state: "NOT_REQUIRED_FOR_LOCAL_OUTPUT" };
+                }
+            }
+            else if (resolution?.kind === "REAL_PATH") {
+                const lateActivation = resolution.activation;
                 realPathActivation = lateActivation;
                 generatedFiles.push(...lateActivation.generatedFiles);
                 const harness = await activateManagedWorkflowHarness({ repository: repositoryPath, realPathActivations: lateActivation.activations, previousGeneratedModuleSha256: lateActivation.previousGeneratedModuleSha256 });
@@ -383,7 +392,9 @@ export async function runOnboard(options) {
             : `Runtime: RECORDED_ONLY. ${runtimeReadiness.limitations[0]}\n`);
         output(assuranceHarnessReadiness.state === "ACTIVE"
             ? `Assurance Harness: ACTIVE. Nora can dispatch authority-ready Replay and no-write Shadow evaluations without manual Workflow IDs, evaluator origins, credentials, or contract digests.${realPathActivation.activations.length ? ` ${realPathActivation.activations.length} exact sandbox real-path binding(s) passed read-only preflight.` : ""}\n`
-            : `Assurance Harness: WAITING_FOR_CUSTOMER_HARNESS. ${assuranceHarnessReadiness.limitation}\n`);
+            : assuranceHarnessReadiness.state === "NOT_REQUIRED_FOR_LOCAL_OUTPUT"
+                ? "Assurance Harness: NOT_REQUIRED_FOR_LOCAL_OUTPUT. The approved read-only local-output task is confirmed; no external Action transport is required.\n"
+                : `Assurance Harness: WAITING_FOR_CUSTOMER_HARNESS. ${assuranceHarnessReadiness.limitation}\n`);
         if (httpActionSetup?.state === "READY" && httpActionSetup.action) {
             output(`HTTP Action: READY. POST ${managedGateway.baseUrl}${httpActionSetup.action.path}; copy the action-scoped token and request example from .witnora/gateway/HTTP_ACTION.md.\n`);
         }
@@ -393,9 +404,11 @@ export async function runOnboard(options) {
         else if (actionTransportTest) {
             output(`Action transport: ${actionTransportTest.transport.toUpperCase()} is waiting for one exact sandbox Task/action path. ${actionTransportTest.limitation}\n`);
         }
-        output(actionTransportTest?.state === "WAITING_FOR_ACTION_PATH"
-            ? `Base Gateway connected, but ${actionTransportTest.transport.toUpperCase()} Action is not verified yet. Run the Agent once and confirm its Business Task in the browser. Recovery only: rerun this command if the original waiting process was closed.\n`
-            : "Connected. Nora is monitoring this Agent. Run it normally whenever it is ready; the first source-signed activity will appear automatically without blocking setup.\n");
+        output(localOutputTaskConfirmed
+            ? "Connected. Nora is monitoring this Agent. The approved read-only local-output task is confirmed; no external Action transport is required.\n"
+            : actionTransportTest?.state === "WAITING_FOR_ACTION_PATH"
+                ? `Base Gateway connected, but ${actionTransportTest.transport.toUpperCase()} Action is not verified yet. Run the Agent once and confirm its Business Task in the browser. Recovery only: rerun this command if the original waiting process was closed.\n`
+                : "Connected. Nora is monitoring this Agent. Run it normally whenever it is ready; the first source-signed activity will appear automatically without blocking setup.\n");
         output(localWorkflowCommand
             ? `Local sandbox command: ${agentRunCommand}\n`
             : `For a local sandbox workflow, use npx --yes witnora@${cliVersion} gateway exec -- <your normal sandbox command> so the Gateway token stays out of shell history.\n`);
@@ -458,14 +471,17 @@ async function loadMatchingOnboardConnection(options) {
         return undefined;
     }
 }
-async function waitForRealPathActivation(options) {
+async function waitForOnboardingResolution(options) {
     const sleep = options.sleep ?? ((milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)));
     let waited = 0;
     let delay = 2_000;
     while (waited < options.timeoutMs) {
         const activation = await activateRealPathIntegrations(options);
         if (activation.activations.length)
-            return activation;
+            return { kind: "REAL_PATH", activation };
+        const onboarding = await jsonRequest(options.fetch, `${options.server}/v1/projects/${encodeURIComponent(options.projectId)}/onboarding`, { method: "GET", headers: { authorization: `Bearer ${options.apiKey}` } });
+        if (onboarding.localOutputTaskConfirmed)
+            return { kind: "LOCAL_OUTPUT" };
         const interval = Math.min(delay, options.timeoutMs - waited);
         await sleep(interval);
         waited += interval;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "witnora",
-  "version": "0.20.8",
+  "version": "0.20.9",
   "description": "Independent assurance for covered agent action paths across models and frameworks.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",