I’m tracing the request guard from the route boundary through the workspace context.
› Explored 7 files · 3 searches
⌘ Ran npm test -- host-guard
✓ 18 tests passed
Duration 412ms
No skipped cases
✎ Edited src/server/server.ts
@@ request origin guard
+ reject non-loopback host
+ preserve /api/health behavior
The focused checks pass. I also verified the failure response in the browser:
Zoomable screenshot attachment · 1280×720
⌘ Ran npm run typecheck
✓ completed with exit code 0
No blocking findings. The renderer, grouping, tool results and attachments match the main session.
↓ Jump to latest