netzilo 4.3.17 → 5.0.0

package/README.md

@@ -33,7 +33,6 @@ await netzilo.start({
 });
 
 netzilo.isRunning();                                  // -> boolean: true once policy has synced (ready to govern)
-netzilo.mcpGatewayPort();                             // -> number: scanner gateway port in use (auto-picked)
 const { allowed, reason } = netzilo.isAllowed("Bash", { command: "rm -rf /" });
 netzilo.reportResult("Bash", "<stdout>");             // post-tool observability
 netzilo.flush();                                      // force-deliver buffered events to management
@@ -126,7 +125,6 @@ already sanitized.
 | `server` | Your Netzilo management server URL. |
 | `pat` / `setupKey` | Credential used to enroll the agent. |
 | `agentName` | Identifier this agent reports as (used for event attribution). |
-| `mcpGatewayPort` | Optional; defaults to an auto-picked free port. `mcpGatewayPort: 0` disables governance. |
 | `enableAdvancedGovernance` | Optional (default off). Deep inspection of the agent's own outbound traffic with semantic classification. |
 | `logLevel` / `logFile` | Logging verbosity and destination. |
 

package/dist/index.d.ts

@@ -10,8 +10,6 @@ export interface StartOptions {
     agentName?: string;
     /** Config file path (default: ~/.netzilo-sdk/config.json). */
     configPath?: string;
-    /** Scanner gateway port (default: an auto-picked free port). Set 0 to disable governance. */
-    mcpGatewayPort?: number;
     /**
      * Deep inspection of the agent's OWN outbound traffic (beyond framework
      * hooks): full prompt/response and tool-call analysis with semantic
@@ -30,12 +28,6 @@ export interface StartOptions {
  * Returns 0 on launch, 1 if already running, 2 on bad config.
  */
 export declare function start(opts?: StartOptions): Promise<number>;
-/**
- * Port the in-process scanner (MCP) gateway is listening on. Auto-picked at
- * start() unless one was passed explicitly. Returns 0 if not started or
- * governance is disabled (mcpGatewayPort: 0).
- */
-export declare function mcpGatewayPort(): number;
 /** Egress port used by advanced governance. Returns 0 if not started. */
 export declare function socks5Port(): number;
 /**

package/dist/index.js

@@ -35,7 +35,6 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_CONFIG_PATH = void 0;
 exports.start = start;
-exports.mcpGatewayPort = mcpGatewayPort;
 exports.socks5Port = socks5Port;
 exports.stop = stop;
 exports.flush = flush;
@@ -75,8 +74,8 @@ const loader_1 = require("./loader");
 // Default config location — callers shouldn't have to specify it.
 exports.DEFAULT_CONFIG_PATH = path.join(os.homedir(), ".netzilo-sdk", "config.json");
 // Ports actually used by the running client, filled in by start(). Exposed via
-// mcpGatewayPort()/socks5Port() so the host can route traffic / introspect.
-const resolvedPorts = { mcpGatewayPort: 0, socks5Port: 0 };
+// socks5Port() so the host can route traffic / introspect.
+const resolvedPorts = { socks5Port: 0 };
 // Config directory of the running client (dirname of configPath), set by
 // start(). Used by the advanced-governance setup to locate per-install state.
 let configDir = "";
@@ -130,20 +129,12 @@ async function start(opts = {}) {
         cfg.log_level = opts.logLevel;
     if (opts.logFile)
         cfg.log_file = opts.logFile;
-    // Auto-pick free ports for the scanner gateway and the advanced-governance
-    // egress when unset, so they never collide with Netzilo.app or a second SDK
-    // process. Pick both at once so they can't clash with each other. Pass an
-    // explicit port to override, or mcpGatewayPort: 0 to disable governance.
-    const needMcp = opts.mcpGatewayPort === undefined;
-    const needSocks = opts.socks5Port === undefined;
-    if (needMcp || needSocks) {
-        const picked = await freePorts((needMcp ? 1 : 0) + (needSocks ? 1 : 0));
-        let i = 0;
-        cfg.mcp_gateway_port = needMcp ? picked[i++] : opts.mcpGatewayPort;
-        cfg.socks5_port = needSocks ? picked[i++] : opts.socks5Port;
+    // Auto-pick a free port for the advanced-governance egress when unset, so
+    // it never collides with Netzilo.app or a second SDK process.
+    if (opts.socks5Port === undefined) {
+        cfg.socks5_port = (await freePorts(1))[0];
     }
     else {
-        cfg.mcp_gateway_port = opts.mcpGatewayPort;
         cfg.socks5_port = opts.socks5Port;
     }
     // Advanced governance: publish the security-probe socket path BEFORE the
@@ -158,7 +149,6 @@ async function start(opts = {}) {
     const lib = (0, loader_1.load)();
     const rc = lib.Start(JSON.stringify(cfg));
     if (rc === 0) {
-        resolvedPorts.mcpGatewayPort = cfg.mcp_gateway_port || 0;
         resolvedPorts.socks5Port = cfg.socks5_port || 0;
         configDir = path.dirname(cfg.config_path);
         if (!exitHookRegistered) {
@@ -200,14 +190,6 @@ async function enableAdvancedGovernance() {
         console.warn("netzilo: advanced governance setup failed:", err);
     }
 }
-/**
- * Port the in-process scanner (MCP) gateway is listening on. Auto-picked at
- * start() unless one was passed explicitly. Returns 0 if not started or
- * governance is disabled (mcpGatewayPort: 0).
- */
-function mcpGatewayPort() {
-    return resolvedPorts.mcpGatewayPort;
-}
 /** Egress port used by advanced governance. Returns 0 if not started. */
 function socks5Port() {
     return resolvedPorts.socks5Port;
@@ -221,7 +203,6 @@ function socks5Port() {
 function stop() {
     const lib = (0, loader_1.load)();
     const rc = lib.Stop();
-    resolvedPorts.mcpGatewayPort = 0;
     resolvedPorts.socks5Port = 0;
     // Undo advanced-governance traffic routing so a host process that keeps
     // running after stop() doesn't route to the now-closed egress port.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "netzilo",
-  "version": "4.3.17",
+  "version": "5.0.0",
   "description": "Netzilo AI Detection & Response (AIDR) — governance for Node.js/TypeScript AI agents.",
   "license": "Commercial",
   "author": "Netzilo",
@@ -35,11 +35,11 @@
     "koffi": "^2.9.0"
   },
   "optionalDependencies": {
-    "netzilo-darwin-arm64": "4.3.17",
-    "netzilo-darwin-x64": "4.3.17",
-    "netzilo-linux-arm64": "4.3.17",
-    "netzilo-linux-x64": "4.3.17",
-    "netzilo-windows-x64": "4.3.17"
+    "netzilo-darwin-arm64": "5.0.0",
+    "netzilo-darwin-x64": "5.0.0",
+    "netzilo-linux-arm64": "5.0.0",
+    "netzilo-linux-x64": "5.0.0",
+    "netzilo-windows-x64": "5.0.0"
   },
   "peerDependencies": {
     "undici": "^8.5.0"