module OpenUI::Rails::Actions

Server-authoritative action loop: an allowlist registry, arg validation, a host authorizer, stale-surface protection and idempotency, shared by both component actions and browser tool calls.