registry / @antigma/ante-remote-host / 0.3.0

@antigma/ante-remote-host@0.3.0

Local Ante and Codex host daemon for Ante Remote.

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The explicit CLI starts a remote-host daemon and connects to a configured relay. It forwards user/browser conversation commands to locally installed Ante or Codex while relaying approval requests.

Static reason

No blocking static signals were detected.

Trigger

User runs `ante-remote-host`.

Impact

Remote use of the local configured workspace is bounded by runtime approval and sandbox defaults; no unconsented install-time action is present.

Mechanism

WebSocket relay bridge to local Ante/Codex processes.

Rationale

Source implements the declared remote-host capability when explicitly executed, without lifecycle execution or covert exfiltration/persistence. The relay and subprocess behavior are package-aligned and guarded by user-configured runtime permissions.

Evidence

package.jsondist/index.jsdist/config.jsdist/remoteHost.jsdist/runtime/anteRuntime.jsdist/runtime/codexRuntime.jsdist/runtime/codexAppServerClient.js

Network endpoints2

ws://127.0.0.1:8787/ws/host/pendingws://127.0.0.1:8787/ws/host/${machineId}

@antigma/ante-remote-host@0.3.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code