@danieltmn/tamnora 0.9.5 → 0.10.0

package/harness/packages/server/src/static.js

@@ -11,6 +11,7 @@ const MIME = {
   '.mjs': 'text/javascript; charset=utf-8',
   '.css': 'text/css; charset=utf-8',
   '.json': 'application/json; charset=utf-8',
+  '.webmanifest': 'application/manifest+json; charset=utf-8',
   '.svg': 'image/svg+xml',
   '.png': 'image/png',
   '.jpg': 'image/jpeg',

package/harness/packages/server/test/security.test.js

@@ -74,6 +74,21 @@ test('localOk exige loopback en remoteAddress y sin tunel activo', async () => {
   }
 });
 
+test('un bridge de tailscale no degrada localOk (red privada por loopback)', async () => {
+  const { instance } = await startServer();
+  try {
+    await writeFile(
+      bridgeStatePath(),
+      `${JSON.stringify({ pid: process.pid, url: 'https://pc.tailnet.ts.net', provider: 'tailscale', port: 4517 })}\n`
+    );
+    await new Promise((r) => setTimeout(r, 1100));
+    assert.ok(localOk({ socket: { remoteAddress: '127.0.0.1' } }), 'loopback sigue siendo local con tailscale');
+  } finally {
+    await clearTunnel();
+    await instance.close();
+  }
+});
+
 test('POST /api/shell responde 403 mientras el tunel esta activo', async () => {
   const { instance, base } = await startServer();
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danieltmn/tamnora",
-  "version": "0.9.5",
+  "version": "0.10.0",
   "description": "Harness local para IAs: agente CLI-first con TUI, consola web y evaluacion. Node puro, sin dependencias.",
   "type": "module",
   "packageManager": "pnpm@11.25.0",