@ggui-ai/dev-stack 0.2.0-alpha.4 → 0.4.0-rc.0

package/dist/dev-server/auth.js

@@ -6,7 +6,7 @@
  * - The dev server binds to `127.0.0.1` by default, so the *primary*
  *   trust boundary is the loopback interface. This module adds a
  *   belt-and-suspenders token + origin check so the same server can
- *   also be reached by a browser-side Studio preview opened in a
+ *   also be reached by a browser-side preview UI opened in a
  *   different localhost port (different origin → CORS-regulated)
  *   without inventing a wide-open public-by-default posture.
  *
@@ -15,7 +15,7 @@
  *   `crypto.randomBytes(24)` on boot. The CLI prints the token + a
  *   ready-to-curl `Authorization` header so the developer can paste
  *   it wherever they need. `/health` is intentionally unauthenticated
- *   — any reachability check, Studio handshake probe, or liveness
+ *   — any reachability check, client handshake probe, or liveness
  *   monitor wants this path without needing the token first.
  *
  * - Origin allowlist: browser clients must send `Origin` matching an
@@ -23,7 +23,7 @@
  *   port (`http(s)://localhost:NNNN` / `http(s)://127.0.0.1:NNNN`).
  *   Extra origins can be declared via `GGUI_DEV_ORIGINS` as a
  *   comma-separated exact-match list — no wildcards by design,
- *   Studio's real hostname goes in explicitly or not at all.
+ *   a remote client's real hostname goes in explicitly or not at all.
  *
  * - Non-browser clients (no `Origin` header) pass the origin check;
  *   they are gated by the bearer token alone. That matches `curl`

package/dist/dev-server/events.js

@@ -19,8 +19,8 @@ export function openEventStream(req, res, registry, options = {}) {
         'x-accel-buffering': 'no',
     });
     // Initial hello — lets the client know the stream is live
-    // before any UI event fires. Studio uses this to flip its
-    // status indicator to "live."
+    // before any UI event fires. An authoring UI uses this to flip
+    // its status indicator to "live."
     res.write(`event: hello\ndata: {"ok":true}\n\n`);
     const unsubscribe = registry.subscribe((event) => {
         try {

package/dist/dev-server/http.d.ts

@@ -10,7 +10,7 @@
  *
  * No write verbs, no subscribe. The `UiRegistry.capabilities` probe
  * exposed on `LocalUiRegistry` already declares this publicly; the
- * endpoints are strictly GETs so hosts / Studio can't accidentally
+ * endpoints are strictly GETs so consuming hosts can't accidentally
  * attempt a publish against a read-only source.
  *
  * Security posture:

package/dist/dev-server/http.js

@@ -10,7 +10,7 @@
  *
  * No write verbs, no subscribe. The `UiRegistry.capabilities` probe
  * exposed on `LocalUiRegistry` already declares this publicly; the
- * endpoints are strictly GETs so hosts / Studio can't accidentally
+ * endpoints are strictly GETs so consuming hosts can't accidentally
  * attempt a publish against a read-only source.
  *
  * Security posture:
@@ -201,8 +201,8 @@ async function handleRequest(req, res, options) {
                     writeJson(res, 404, { error: 'not-found', id });
                     return;
                 case 'missing-entry':
-                    // 404 still — the contract is "no bundle," Studio collapses
-                    // this to the "no preview available" state. The body gives
+                    // 404 still — the contract is "no bundle," consumers
+                    // collapse this to a "no preview available" state. The body gives
                     // the developer the exact list of paths we searched so they
                     // know what to add (a `ggui.ui.tsx` beside the manifest, or
                     // an `entryPoint` field in `ggui.ui.json`).
@@ -218,8 +218,8 @@ async function handleRequest(req, res, options) {
                     // 422 Unprocessable Entity — the server understood the
                     // request but couldn't produce output because the source
                     // fails to compile. Body carries structured esbuild errors
-                    // so Studio can render the first error with its file /
-                    // line / column / highlighted line.
+                    // so a consuming UI can render the first error with its
+                    // file / line / column / highlighted line.
                     writeJson(res, 422, {
                         error: 'compile-failed',
                         id,

package/dist/dev-server/hub.d.ts

@@ -8,7 +8,7 @@
  *           compile/runtime errors, recent runtime events/logs,
  *           code-first local observability
  *
- *   IS NOT: Studio-lite, starter gallery, no-code authoring,
+ *   IS NOT: a full authoring UI, starter gallery, no-code authoring,
  *           billing/workspace UI, NL playground, deploy flow,
  *           tunnel flow
  *

package/dist/dev-server/hub.js

@@ -202,7 +202,7 @@ button.preview-clear:hover { color: #e7e7e7; border-color: #3a3a3a; }
  *     send `Authorization`). On every `event: ui` frame, refreshes
  *     the registry-panel fetches immediately — so the `Discovered
  *     UIs` list + registry counts flip on save before the next
- *     poll tick fires. Same HMR mechanism Studio uses.
+ *     poll tick fires. Same HMR mechanism an authoring UI uses.
  *   - Live indicator (`#live`) paints connecting / live /
  *     reconnecting / offline; independent from the data-freshness
  *     tick.
@@ -531,8 +531,8 @@ const HUB_JS = `
   }
 
   /**
-   * Minimal SSE parser — same shape the dev server emits and the
-   * Studio local source consumes. Normalises CRLF, splits on the
+   * Minimal SSE parser — same shape the dev server emits and an
+   * authoring-UI local source consumes. Normalises CRLF, splits on the
    * blank-line delimiter, ignores ':keep-alive' comment frames,
    * and only dispatches 'event: ui' with a valid JSON body.
    */