@vellumai/assistant 0.8.9-staging.4 → 0.8.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/src/__tests__/gateway-only-guard.test.ts +5 -0
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@vellumai/assistant",
3
- "version": "0.8.9-staging.4",
3
+ "version": "0.8.9",
4
4
  "license": "MIT",
5
5
  "type": "module",
6
6
  "exports": {
package/src/__tests__/gateway-only-guard.test.ts CHANGED
@@ -88,6 +88,11 @@ function isGatewayInternal(filePath: string): boolean {
88
88
  /** Additional files allowed for the interpolated-port check only (use gateway port, not runtime). */
89
89
  const INTERPOLATED_PORT_ALLOWLIST = new Set([
90
90
  "apps/macos/src/main/bundle-flow.ts",
91
+ // Electron main bridges the host proxy to a local assistant's gateway
92
+ // (gatewayPort) over loopback with a Guardian-minted gateway token — same
93
+ // class as bundle-flow.ts. Added with #34049 (host proxy for cloud/managed
94
+ // assistants); the allowlist entry was missed there.
95
+ "apps/macos/src/main/host-proxy-router.ts",
91
96
  ]);
92
97
 
93
98
  /** Shared violation filter: exempt test files, gateway internals, and allowlisted paths. */