witnora 0.18.0 → 0.18.1

package/dist/onboard.js

@@ -61,7 +61,7 @@ export async function runOnboard(options) {
             const references = localRuntime.references;
             const modules = references?.sandboxOrigin && references.adapterDigestSha256 && references.probeDigestSha256 && references.fixtureContractDigestSha256
                 ? { sandboxOrigin: references.sandboxOrigin, adapterDigestSha256: references.adapterDigestSha256, probeDigestSha256: references.probeDigestSha256, fixtureContractDigestSha256: references.fixtureContractDigestSha256 }
-                : await planRuntimeSandboxModules();
+                : await planRuntimeSandboxModules({ excludedPorts: configuredGatewayPorts(options.env ?? process.env) });
             const bootstrap = await bootstrapLocalRuntime({
                 projectId: token.projectId,
                 planId: setupPlan.id,
@@ -273,6 +273,13 @@ export async function runOnboard(options) {
         throw new Error(`Witnora Setup Autopilot rolled back this install attempt: ${diagnosis}`);
     }
 }
+function configuredGatewayPorts(environment) {
+    const value = environment.WITNORA_GATEWAY_PORT?.trim();
+    if (!value)
+        return new Set();
+    const port = Number(value);
+    return Number.isInteger(port) && port > 0 && port <= 65_535 ? new Set([port]) : new Set();
+}
 async function inspectGatewayBinding(directory, projectId, server) {
     let value;
     try {

package/dist/runtime-sandbox-fixture.js

@@ -10,14 +10,20 @@ const MAX_AUDIT_BYTES = 10 * 1024 * 1024;
 const MAX_RESOURCES = 1_000;
 const RESOURCE = /^\/mock-state\/([A-Za-z0-9._:-]{1,128})$/;
 const AUDIT = /^\/audit\/actions\/([A-Za-z0-9._:-]{1,256})\/sessions\/([A-Za-z0-9._:-]{1,256})$/;
-export async function findAvailableRuntimeSandboxOrigin() {
-    const server = createServer();
-    await listen(server, 0);
-    const address = server.address();
-    if (!address || typeof address === "string")
-        throw new Error("Could not allocate a localhost sandbox port.");
-    await close(server);
-    return `http://127.0.0.1:${address.port}`;
+export async function findAvailableRuntimeSandboxOrigin(excludedPorts = new Set()) {
+    for (let attempt = 0; attempt < 20; attempt += 1) {
+        const server = createServer();
+        await listen(server, 0);
+        const address = server.address();
+        if (!address || typeof address === "string") {
+            await close(server);
+            throw new Error("Could not allocate a localhost sandbox port.");
+        }
+        await close(server);
+        if (!excludedPorts.has(address.port))
+            return `http://127.0.0.1:${address.port}`;
+    }
+    throw new Error("Could not allocate a localhost sandbox port distinct from the customer Gateway.");
 }
 export async function startRuntimeSandboxFixture(input) {
     const origin = exactOrigin(input.origin);

package/dist/runtime-sandbox-kit.js

@@ -90,8 +90,8 @@ export async function saveRuntimeReferenceManifest(path, projectId, server, refe
     await rename(temporary, path);
     await chmod(path, 0o600).catch(() => undefined);
 }
-export async function planRuntimeSandboxModules() {
-    const sandboxOrigin = await findAvailableRuntimeSandboxOrigin();
+export async function planRuntimeSandboxModules(options = {}) {
+    const sandboxOrigin = await findAvailableRuntimeSandboxOrigin(options.excludedPorts);
     const generated = generateRuntimeSandboxKit(sandboxOrigin);
     return {
         sandboxOrigin,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "witnora",
-  "version": "0.18.0",
+  "version": "0.18.1",
   "description": "Independent assurance for covered agent action paths across models and frameworks.",
   "type": "module",
   "license": "Apache-2.0",