witnora 0.20.9 → 0.20.10

package/dist/cli.js

@@ -162,6 +162,7 @@ else if (command === "onboard") {
         actionTransport: readActionTransport(readFlag("--action-transport")),
         waitForActionPathMs: readActionTransport(readFlag("--action-transport")) && !readBoolFlag("--no-wait-for-action-path") ? 10 * 60 * 1_000 : 0,
         openBrowser: readBoolFlag("--no-browser") ? async () => { } : undefined,
+        confirmRunDetectedAgent: readBoolFlag("--no-run-agent") ? undefined : confirmDetectedAgentRun,
     });
 }
 else if (command === "mcp") {
@@ -1045,6 +1046,12 @@ async function promptValue(label) {
         prompt.close();
     }
 }
+async function confirmDetectedAgentRun(command) {
+    if (!process.stdin.isTTY || !process.stdout.isTTY)
+        return false;
+    const answer = (await promptValue(`Run ${command.join(" ")} safely once now in this terminal? [Y/n] `)).toLowerCase();
+    return answer === "" || answer === "y" || answer === "yes";
+}
 async function promptSecret(label) {
     if (!process.stdin.isTTY || !process.stdout.isTTY || !process.stdin.setRawMode) {
         throw new Error("Missing project API key. Set WITNORA_API_KEY (or legacy AGENTCERT_API_KEY) or pass --api-key in a trusted environment.");

package/dist/command-help.js

@@ -56,6 +56,7 @@ Options:
   --repo <directory>      Repository to configure (default: current directory)
   --template <type>       Override automatic repository detection
   --action-transport <t>  Test HTTP or MCP against the exact generated sandbox Action path
+  --no-run-agent          Do not offer to run a detected bounded Agent command in this terminal
   --no-browser            Print the approval URL without opening it
 `;
     if (command === "mcp")

package/dist/gateway-exec.js

@@ -1,6 +1,6 @@
 import { spawn } from "node:child_process";
-import { readFile } from "node:fs/promises";
-import { join, resolve } from "node:path";
+import { access, readFile } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
 export async function runCustomerGatewayCommand(options) {
     const repository = resolve(options.repository);
     const gatewayDirectory = resolve(options.gatewayDirectory ?? join(repository, ".witnora", "gateway"));
@@ -14,8 +14,9 @@ export async function runCustomerGatewayCommand(options) {
     if (!host || !Number.isInteger(port) || port < 1 || port > 65_535 || !gatewayToken) {
         throw new Error("The local Gateway binding is incomplete. Run witnora onboard from this repository before starting the Agent workflow.");
     }
+    const launch = await resolveLaunch(options.command, options.args ?? []);
     return await new Promise((resolveChild, rejectChild) => {
-        const child = spawn(options.command, options.args ?? [], {
+        const child = spawn(launch.command, launch.args, {
             cwd: repository,
             env: {
                 ...process.env,
@@ -29,6 +30,24 @@ export async function runCustomerGatewayCommand(options) {
         child.once("exit", (code) => resolveChild({ exitCode: code ?? 1 }));
     });
 }
+async function resolveLaunch(command, args) {
+    const packageManager = basename(command).toLowerCase();
+    if (process.platform !== "win32" || packageManager !== "npm" && packageManager !== "npx")
+        return { command, args };
+    const cliName = packageManager === "npm" ? "npm-cli.js" : "npx-cli.js";
+    const candidates = [
+        packageManager === "npm" ? process.env.npm_execpath : undefined,
+        join(dirname(process.execPath), "node_modules", "npm", "bin", cliName),
+    ].filter((candidate) => Boolean(candidate));
+    for (const candidate of candidates) {
+        try {
+            await access(candidate);
+            return { command: process.execPath, args: [candidate, ...args] };
+        }
+        catch { /* try the next customer-local Node installation path */ }
+    }
+    throw new Error(`Could not locate ${packageManager} for the Agent workflow. Run the repository's direct Node or Python command instead.`);
+}
 async function readJson(path, label) {
     try {
         const value = JSON.parse(await readFile(path, "utf8"));

package/dist/onboard.js

@@ -13,6 +13,7 @@ import { discoverRuntimeReferences, planRuntimeSandboxModules } from "./runtime-
 import { automaticRuntimeReferencesUsable, bootstrapLocalRuntime, verifyAutomaticRuntimeProbe } from "./runtime-bootstrap.js";
 import { activateRealPathIntegrations } from "./real-path-activation.js";
 import { installCurrentGatewayService, stopCurrentGatewayService } from "./gateway-service.js";
+import { runCustomerGatewayCommand } from "./gateway-exec.js";
 export async function runOnboard(options) {
     const requestFetch = options.fetch ?? fetch;
     const output = options.output ?? ((message) => process.stdout.write(message));
@@ -331,9 +332,23 @@ export async function runOnboard(options) {
         });
         if (actionTransportTest?.state === "WAITING_FOR_ACTION_PATH" && (options.waitForActionPathMs ?? 0) > 0) {
             output("\nBase setup is complete. Onboarding is waiting for the Business Task and Action path; it has not claimed completion.\n");
-            output(agentRunCommand
-                ? `Open a second terminal in this repository and run the Agent safely once:\n${agentRunCommand}\n`
-                : "Run the Agent normally in its sandbox. If it has no work now, you may enter the workspace and finish Action verification after its first real run.\n");
+            let ranDetectedAgent = false;
+            if (localWorkflowCommand && options.confirmRunDetectedAgent) {
+                output(`Detected Agent command: ${localWorkflowCommand.join(" ")}\n`);
+                if (await options.confirmRunDetectedAgent(localWorkflowCommand)) {
+                    output("Running this Agent safely once in the current terminal...\n");
+                    const [command, ...args] = localWorkflowCommand;
+                    const result = await (options.runGatewayCommand ?? runCustomerGatewayCommand)({ repository: repositoryPath, command: command, args });
+                    if (result.exitCode !== 0)
+                        throw new Error(`The detected Agent command exited with code ${result.exitCode}. Onboarding remains fail closed.`);
+                    output("Agent run completed. Keep the browser open and confirm the Business Task; this command will finish automatically.\n");
+                    ranDetectedAgent = true;
+                }
+            }
+            if (!ranDetectedAgent)
+                output(agentRunCommand
+                    ? `Run the Agent in its normal environment, or use this command from another terminal:\n${agentRunCommand}\n`
+                    : "Run the Agent normally in its sandbox. If it has no work now, you may enter the workspace and finish Action verification after its first real run.\n");
             output(`Keep this command open for up to ${Math.max(1, Math.ceil((options.waitForActionPathMs ?? 0) / 60_000))} minutes. It will finish automatically after you confirm the Business Task in the browser; no second onboard command is required. Press Ctrl+C to pause safely.\n`);
             const resolution = await waitForOnboardingResolution({
                 repository: repositoryPath, server, projectId: token.projectId, apiKey: token.apiKey,
@@ -677,6 +692,11 @@ function relativeGeneratedFiles(repositoryPath, files) {
 }
 function randomSuffix() { return Math.random().toString(36).slice(2, 10); }
 async function detectLocalWorkflowCommand(repositoryPath) {
+    const manifest = await optionalJson(join(repositoryPath, "package.json"));
+    const scripts = manifest?.scripts;
+    if (scripts && typeof scripts === "object" && !Array.isArray(scripts) && typeof scripts.agent === "string") {
+        return ["npm", "run", "agent"];
+    }
     if (await exists(join(repositoryPath, "scripts", "run_workflow.py")))
         return ["python", "scripts/run_workflow.py"];
     if (await exists(join(repositoryPath, "scripts", "run-workflow.mjs")))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "witnora",
-  "version": "0.20.9",
+  "version": "0.20.10",
   "description": "Independent assurance for covered agent action paths across models and frameworks.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",