@ggui-ai/dev-stack 0.14.0 → 0.16.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -96,7 +96,7 @@ export function createSecurityPolicy(options = {}) {
96
96
  return { outcome: 'handled' };
97
97
  }
98
98
  // Origin check — browser-only. Non-browser clients (`curl`, agent
99
- // pods, etc.) omit `Origin` and are gated by the token alone.
99
+ // processes, etc.) omit `Origin` and are gated by the token alone.
100
100
  if (origin !== null && !isOriginAllowed(origin, allowedOrigins)) {
101
101
  res.writeHead(403, { 'content-type': 'application/json' });
102
102
  res.end(JSON.stringify({ error: 'origin-not-allowed', origin }));