@vurb/core 3.2.3 → 3.3.4

package/dist/cli/constants.js

@@ -33,64 +33,64 @@ export const VALID_TRANSPORTS = ['stdio', 'sse'];
 export const VALID_VECTORS = ['vanilla', 'prisma', 'n8n', 'openapi', 'oauth'];
 // ─── Help Text ───────────────────────────────────────────────────
 /** @internal exported for testing */
-export const HELP = `
-vurb — Vurb CLI
-
-USAGE
-  vurb create <name>                Scaffold a new Vurb server
-  vurb dev --server <entry>         Start HMR dev server with auto-reload
-  vurb lock                         Generate or update ${LOCKFILE_NAME}
-  vurb lock --check                 Verify lockfile is up to date (CI gate)
-  vurb deploy                       Bundle, compress & deploy to Edge
-  vurb remote                       Show current remote configuration
-  vurb inspect                      Launch the real-time TUI dashboard
-  vurb insp --demo                  Launch TUI with built-in simulator
-
-CREATE OPTIONS
-  --transport <stdio|sse>  Transport layer (default: stdio)
-  --vector <type>          Ingestion vector: vanilla, prisma, n8n, openapi, oauth
-  --testing                Include test suite (default: true)
-  --no-testing             Skip test suite
-  --yes, -y                Skip prompts, use defaults
-
-DEV OPTIONS
-  --server, -s <path>      Path to server entrypoint (default: auto-detect)
-  --dir, -d <path>         Directory to watch for changes (default: auto-detect from server)
-
-DEPLOY OPTIONS
-  --server, -s <path>      Path to server entrypoint (default: auto-detect)
-  --token <token>          Override VURB_DEPLOY_TOKEN (connection token)
-  --allow-insecure         Suppress HTTP plaintext warning
-
-REMOTE OPTIONS
-  vurb remote <url>          Override API endpoint (default: Vinkius Cloud)
-  vurb remote --server-id <id>  Set target server UUID
-
-INSPECTOR OPTIONS
-  --demo, -d               Launch with built-in simulator (no server needed)
-  --out, -o <mode>         Output: tui (default), stderr (headless ECS/K8s)
-  --pid, -p <pid>          Connect to a specific server PID
-  --path <path>            Custom IPC socket/pipe path
-
-LOCK OPTIONS
-  --server, -s <path>      Path to server entrypoint
-  --name, -n <name>        Server name for lockfile header
-  --cwd <dir>              Project root directory
-
-GLOBAL
-  --help, -h               Show this help message
-
-EXAMPLES
-  vurb create my-server
-  vurb create my-server -y
-  vurb create my-server --vector prisma --transport sse
-  vurb dev --server ./src/server.ts
-  vurb dev --server ./src/server.ts --dir ./src/tools
-  vurb lock --server ./src/server.ts
-  vurb deploy
-  vurb remote --server-id abc-123-def
-  vurb remote http://localhost:8080 --server-id abc-123-def
-  vurb inspect --demo
-  vurb insp --pid 12345
+export const HELP = `
+vurb — Vurb CLI
+
+USAGE
+  vurb create <name>                Scaffold a new Vurb server
+  vurb dev --server <entry>         Start HMR dev server with auto-reload
+  vurb lock                         Generate or update ${LOCKFILE_NAME}
+  vurb lock --check                 Verify lockfile is up to date (CI gate)
+  vurb deploy                       Bundle, compress & deploy to Edge
+  vurb remote                       Show current remote configuration
+  vurb inspect                      Launch the real-time TUI dashboard
+  vurb insp --demo                  Launch TUI with built-in simulator
+
+CREATE OPTIONS
+  --transport <stdio|sse>  Transport layer (default: stdio)
+  --vector <type>          Ingestion vector: vanilla, prisma, n8n, openapi, oauth
+  --testing                Include test suite (default: true)
+  --no-testing             Skip test suite
+  --yes, -y                Skip prompts, use defaults
+
+DEV OPTIONS
+  --server, -s <path>      Path to server entrypoint (default: auto-detect)
+  --dir, -d <path>         Directory to watch for changes (default: auto-detect from server)
+
+DEPLOY OPTIONS
+  --server, -s <path>      Path to server entrypoint (default: auto-detect)
+  --token <token>          Override VURB_DEPLOY_TOKEN (connection token)
+  --allow-insecure         Suppress HTTP plaintext warning
+
+REMOTE OPTIONS
+  vurb remote <url>          Override API endpoint (default: Vinkius Cloud)
+  vurb remote --server-id <id>  Set target server UUID
+
+INSPECTOR OPTIONS
+  --demo, -d               Launch with built-in simulator (no server needed)
+  --out, -o <mode>         Output: tui (default), stderr (headless ECS/K8s)
+  --pid, -p <pid>          Connect to a specific server PID
+  --path <path>            Custom IPC socket/pipe path
+
+LOCK OPTIONS
+  --server, -s <path>      Path to server entrypoint
+  --name, -n <name>        Server name for lockfile header
+  --cwd <dir>              Project root directory
+
+GLOBAL
+  --help, -h               Show this help message
+
+EXAMPLES
+  vurb create my-server
+  vurb create my-server -y
+  vurb create my-server --vector prisma --transport sse
+  vurb dev --server ./src/server.ts
+  vurb dev --server ./src/server.ts --dir ./src/tools
+  vurb lock --server ./src/server.ts
+  vurb deploy
+  vurb remote --server-id abc-123-def
+  vurb remote http://localhost:8080 --server-id abc-123-def
+  vurb inspect --demo
+  vurb insp --pid 12345
 `.trim();
 //# sourceMappingURL=constants.js.map

package/dist/cli/templates/config.js

@@ -85,47 +85,47 @@ export function tsconfig() {
 }
 /** Generate `.gitignore` */
 export function gitignore() {
-    return `node_modules/
-dist/
-*.tsbuildinfo
-.env
-.env.local
-coverage/
+    return `node_modules/
+dist/
+*.tsbuildinfo
+.env
+.env.local
+coverage/
 `;
 }
 /** Generate `.env.example` with vector-specific vars */
 export function envExample(config) {
-    let env = `# ── Vurb Server Environment ─────────────────────
-# Copy this to .env and fill in your values.
-
-# Server
-NODE_ENV=development
+    let env = `# ── Vurb Server Environment ─────────────────────
+# Copy this to .env and fill in your values.
+
+# Server
+NODE_ENV=development
 `;
     if (config.vector === 'prisma') {
-        env += `
-# Database (Prisma)
-DATABASE_URL="postgresql://user:password@localhost:5432/mydb?schema=public"
+        env += `
+# Database (Prisma)
+DATABASE_URL="postgresql://user:password@localhost:5432/mydb?schema=public"
 `;
     }
     if (config.vector === 'n8n') {
-        env += `
-# n8n Workflow Automation
-N8N_BASE_URL=http://localhost:5678
-N8N_API_KEY=your-api-key-here
+        env += `
+# n8n Workflow Automation
+N8N_BASE_URL=http://localhost:5678
+N8N_API_KEY=your-api-key-here
 `;
     }
     if (config.vector === 'oauth') {
-        env += `
-# OAuth Device Flow (RFC 8628)
-OAUTH_CLIENT_ID=your-client-id
-OAUTH_AUTH_ENDPOINT=https://api.example.com/oauth/device/code
-OAUTH_TOKEN_ENDPOINT=https://api.example.com/oauth/device/token
+        env += `
+# OAuth Device Flow (RFC 8628)
+OAUTH_CLIENT_ID=your-client-id
+OAUTH_AUTH_ENDPOINT=https://api.example.com/oauth/device/code
+OAUTH_TOKEN_ENDPOINT=https://api.example.com/oauth/device/token
 `;
     }
     if (config.transport === 'sse') {
-        env += `
-# Streamable HTTP Transport
-PORT=3001
+        env += `
+# Streamable HTTP Transport
+PORT=3001
 `;
     }
     return env;

package/dist/cli/templates/constants.d.ts

@@ -2,7 +2,7 @@
  * Template Constants — Version pins for generated package.json
  * @module
  */
-export declare const CORE_VERSION = "^2.12.0";
+export declare const CORE_VERSION = "^3.2.0";
 export declare const TESTING_VERSION = "^1.0.0";
 export declare const MCP_SDK_VERSION = "^1.12.1";
 export declare const ZOD_VERSION = "^3.25.1";

package/dist/cli/templates/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/cli/templates/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,YAAY,YAAY,CAAC;AACtC,eAAO,MAAM,eAAe,WAAW,CAAC;AACxC,eAAO,MAAM,eAAe,YAAY,CAAC;AACzC,eAAO,MAAM,WAAW,YAAY,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/cli/templates/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,YAAY,WAAW,CAAC;AACrC,eAAO,MAAM,eAAe,WAAW,CAAC;AACxC,eAAO,MAAM,eAAe,YAAY,CAAC;AACzC,eAAO,MAAM,WAAW,YAAY,CAAC"}

package/dist/cli/templates/constants.js

@@ -2,7 +2,7 @@
  * Template Constants — Version pins for generated package.json
  * @module
  */
-export const CORE_VERSION = '^2.12.0';
+export const CORE_VERSION = '^3.2.0';
 export const TESTING_VERSION = '^1.0.0';
 export const MCP_SDK_VERSION = '^1.12.1';
 export const ZOD_VERSION = '^3.25.1';

package/dist/cli/templates/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/cli/templates/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC;AACtC,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AACxC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AACzC,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/cli/templates/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC;AACrC,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AACxC,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC;AACzC,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC"}

package/dist/cli/templates/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/cli/templates/core.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,2DAA2D;AAC3D,wBAAgB,MAAM,IAAI,MAAM,CAa/B;AAED,qEAAqE;AACrE,wBAAgB,SAAS,IAAI,MAAM,CA8BlC;AAED,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAyItD"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/cli/templates/core.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,2DAA2D;AAC3D,wBAAgB,MAAM,IAAI,MAAM,CAa/B;AAED,qEAAqE;AACrE,wBAAgB,SAAS,IAAI,MAAM,CA8BlC;AAED,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAgEtD"}

package/dist/cli/templates/core.js

@@ -1,186 +1,113 @@
 /** Generate `src/vurb.ts` — The one-file context center */
 export function vurbTs() {
-    return `/**
- * Vurb Instance — Context Initialization
- *
- * Define your context type ONCE. Every f.query(), f.mutation(),
- * f.presenter(), f.prompt(), and f.middleware() call inherits
- * AppContext — zero generic repetition anywhere in the codebase.
- */
-import { initVurb } from '@vurb/core';
-import type { AppContext } from './context.js';
-
-export const f = initVurb<AppContext>();
+    return `/**
+ * Vurb Instance — Context Initialization
+ *
+ * Define your context type ONCE. Every f.query(), f.mutation(),
+ * f.presenter(), f.prompt(), and f.middleware() call inherits
+ * AppContext — zero generic repetition anywhere in the codebase.
+ */
+import { initVurb } from '@vurb/core';
+import type { AppContext } from './context.js';
+
+export const f = initVurb<AppContext>();
 `;
 }
 /** Generate `src/context.ts` — Application context type + factory */
 export function contextTs() {
-    return `/**
- * Application Context — Shared State for Every Tool Handler
- *
- * Every f.query() / f.mutation() handler receives (input, ctx)
- * where ctx is this AppContext. Extend it with your own services
- * (DB client, auth, external APIs, etc.)
- */
-
-export interface AppContext {
-    /** Current user role for RBAC checks */
-    role: 'ADMIN' | 'USER' | 'GUEST';
-
-    /** Tenant identifier (multi-tenancy) */
-    tenantId: string;
-}
-
-/**
- * Create the application context for each tool invocation.
- *
- * In production, hydrate this from the MCP session metadata,
- * JWT tokens, or environment variables.
- */
-export function createContext(): AppContext {
-    return {
-        role: 'ADMIN',
-        tenantId: 'default',
-    };
-}
+    return `/**
+ * Application Context — Shared State for Every Tool Handler
+ *
+ * Every f.query() / f.mutation() handler receives (input, ctx)
+ * where ctx is this AppContext. Extend it with your own services
+ * (DB client, auth, external APIs, etc.)
+ */
+
+export interface AppContext {
+    /** Current user role for RBAC checks */
+    role: 'ADMIN' | 'USER' | 'GUEST';
+
+    /** Tenant identifier (multi-tenancy) */
+    tenantId: string;
+}
+
+/**
+ * Create the application context for each tool invocation.
+ *
+ * In production, hydrate this from the MCP session metadata,
+ * JWT tokens, or environment variables.
+ */
+export function createContext(): AppContext {
+    return {
+        role: 'ADMIN',
+        tenantId: 'default',
+    };
+}
 `;
 }
 /** Generate `src/server.ts` — Bootstrap with autoDiscover + transport */
 export function serverTs(config) {
     if (config.transport === 'stdio') {
         // Simplified: one-liner bootstrap via startServer()
-        return `/**
- * Server Bootstrap — Vurb
- *
- * Tools are auto-discovered from src/tools/.
- * Drop a file, it becomes a tool.
- */
-import { fileURLToPath } from 'node:url';
-import { autoDiscover, PromptRegistry, startServer } from '@vurb/core';
-import { createContext } from './context.js';
-import { f } from './vurb.js';
-import { GreetPrompt } from './prompts/greet.js';
-
-// ── Registry ─────────────────────────────────────────────
-const registry = f.registry();
-const prompts = new PromptRegistry();
-
-// ── Auto-Discover & Register ─────────────────────────────
-await autoDiscover(registry, fileURLToPath(new URL('./tools', import.meta.url)));
-prompts.register(GreetPrompt);
-
-// ── Start ────────────────────────────────────────────────
-await startServer({
-    name: '${config.name}',
-    registry,
-    prompts,
-    contextFactory: () => createContext(),
-});
+        return `/**
+ * Server Bootstrap — Vurb
+ *
+ * Tools are auto-discovered from src/tools/.
+ * Drop a file, it becomes a tool.
+ */
+import { fileURLToPath } from 'node:url';
+import { autoDiscover, PromptRegistry, startServer } from '@vurb/core';
+import { createContext } from './context.js';
+import { f } from './vurb.js';
+import { GreetPrompt } from './prompts/greet.js';
+
+// ── Registry ─────────────────────────────────────────────
+const registry = f.registry();
+const prompts = new PromptRegistry();
+
+// ── Auto-Discover & Register ─────────────────────────────
+await autoDiscover(registry, fileURLToPath(new URL('./tools', import.meta.url)));
+prompts.register(GreetPrompt);
+
+// ── Start ────────────────────────────────────────────────
+await startServer({
+    name: '${config.name}',
+    registry,
+    prompts,
+    contextFactory: () => createContext(),
+});
 `;
     }
-    // Streamable HTTP transport — manual setup required (startServer is stdio-only)
-    return `/**
- * Server Bootstrap — Vurb with Streamable HTTP Transport
- *
- * Tools are auto-discovered from src/tools/.
- * Drop a file, it becomes a tool.
- */
-import { fileURLToPath } from 'node:url';
-import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import { createServer } from 'node:http';
-import { autoDiscover, PromptRegistry } from '@vurb/core';
-import { createContext } from './context.js';
-import { f } from './vurb.js';
-import { GreetPrompt } from './prompts/greet.js';
-
-// ── Registry ─────────────────────────────────────────────
-const registry = f.registry();
-const prompts = new PromptRegistry();
-
-// ── Auto-Discover & Register ─────────────────────────────
-await autoDiscover(registry, fileURLToPath(new URL('./tools', import.meta.url)));
-prompts.register(GreetPrompt);
-
-// ── Server ───────────────────────────────────────────────
-const server = new McpServer(
-    { name: '${config.name}', version: '0.1.0' },
-);
-
-registry.attachToServer(server, {
-    contextFactory: () => createContext(),
-    prompts,
-});
-
-// ── Transport ────────────────────────────────────────────
-const PORT = Number(process.env['PORT'] ?? 3001);
-const sessions = new Map<string, StreamableHTTPServerTransport>();
-
-const httpServer = createServer(async (req, res) => {
-    try {
-        const url = new URL(req.url ?? '/', \`http://localhost:\${PORT}\`);
-
-        if (url.pathname !== '/mcp') {
-            res.writeHead(404).end();
-            return;
-        }
-
-        if (req.method === 'POST') {
-            // Parse JSON body
-            const chunks: Buffer[] = [];
-            for await (const chunk of req) chunks.push(chunk as Buffer);
-            const body = JSON.parse(Buffer.concat(chunks).toString());
-
-            const sessionId = req.headers['mcp-session-id'] as string | undefined;
-
-            // Existing session — route to its transport
-            if (sessionId && sessions.has(sessionId)) {
-                const transport = sessions.get(sessionId)!;
-                await transport.handleRequest(req, res, body);
-                return;
-            }
-
-            // New session — create transport
-            const transport = new StreamableHTTPServerTransport({
-                sessionIdGenerator: () => crypto.randomUUID(),
-                onsessioninitialized: (id) => {
-                    sessions.set(id, transport);
-                },
-            });
-            transport.onclose = () => {
-                const id = [...sessions.entries()].find(([, t]) => t === transport)?.[0];
-                if (id) sessions.delete(id);
-            };
-            await server.connect(transport);
-            await transport.handleRequest(req, res, body);
-        } else if (req.method === 'GET') {
-            const sessionId = req.headers['mcp-session-id'] as string | undefined;
-            if (sessionId && sessions.has(sessionId)) {
-                const transport = sessions.get(sessionId)!;
-                await transport.handleRequest(req, res);
-            } else {
-                res.writeHead(400).end('Missing or invalid session');
-            }
-        } else if (req.method === 'DELETE') {
-            const sessionId = req.headers['mcp-session-id'] as string | undefined;
-            if (sessionId && sessions.has(sessionId)) {
-                const transport = sessions.get(sessionId)!;
-                await transport.handleRequest(req, res);
-            } else {
-                res.writeHead(400).end('Missing or invalid session');
-            }
-        } else {
-            res.writeHead(405).end();
-        }
-    } catch (err) {
-        console.error('[Vurb] Unhandled error in HTTP handler:', err);
-        if (!res.headersSent) res.writeHead(500).end();
-    }
-});
-
-httpServer.listen(PORT, () => {
-    console.error(\`⚡ Vurb server on http://localhost:\${PORT}/mcp\`);
-});
+    // Streamable HTTP transport — startServer handles all HTTP plumbing
+    return `/**
+ * Server Bootstrap — Vurb with Streamable HTTP Transport
+ *
+ * Tools are auto-discovered from src/tools/.
+ * Drop a file, it becomes a tool.
+ */
+import { fileURLToPath } from 'node:url';
+import { autoDiscover, PromptRegistry, startServer } from '@vurb/core';
+import { createContext } from './context.js';
+import { f } from './vurb.js';
+import { GreetPrompt } from './prompts/greet.js';
+
+// ── Registry ─────────────────────────────────────────────
+const registry = f.registry();
+const prompts = new PromptRegistry();
+
+// ── Auto-Discover & Register ─────────────────────────────
+await autoDiscover(registry, fileURLToPath(new URL('./tools', import.meta.url)));
+prompts.register(GreetPrompt);
+
+// ── Start ────────────────────────────────────────────────
+await startServer({
+    name: '${config.name}',
+    registry,
+    prompts,
+    contextFactory: () => createContext(),
+    transport: 'http',
+    port: Number(process.env['PORT'] ?? 3001),
+});
 `;
 }
 //# sourceMappingURL=core.js.map

package/dist/cli/templates/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../src/cli/templates/core.ts"],"names":[],"mappings":"AAQA,2DAA2D;AAC3D,MAAM,UAAU,MAAM;IAClB,OAAO;;;;;;;;;;;CAWV,CAAC;AACF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,SAAS;IACrB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BV,CAAC;AACF,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,MAAqB;IAC1C,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAC/B,oDAAoD;QACpD,OAAO;;;;;;;;;;;;;;;;;;;;;;aAsBF,MAAM,CAAC,IAAI;;;;;CAKvB,CAAC;IACE,CAAC;IAED,gFAAgF;IAChF,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;eAyBI,MAAM,CAAC,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6EzB,CAAC;AACF,CAAC"}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../src/cli/templates/core.ts"],"names":[],"mappings":"AAQA,2DAA2D;AAC3D,MAAM,UAAU,MAAM;IAClB,OAAO;;;;;;;;;;;CAWV,CAAC;AACF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,SAAS;IACrB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4BV,CAAC;AACF,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,MAAqB;IAC1C,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAC/B,oDAAoD;QACpD,OAAO;;;;;;;;;;;;;;;;;;;;;;aAsBF,MAAM,CAAC,IAAI;;;;;CAKvB,CAAC;IACE,CAAC;IAED,oEAAoE;IACpE,OAAO;;;;;;;;;;;;;;;;;;;;;;aAsBE,MAAM,CAAC,IAAI;;;;;;;CAOvB,CAAC;AACF,CAAC"}

package/dist/cli/templates/middleware.js

@@ -4,31 +4,31 @@
  */
 /** Generate `src/middleware/auth.ts` — RBAC middleware */
 export function authMiddlewareTs() {
-    return `/**
- * Auth Middleware — RBAC Guard (Fluent API)
- *
- * Demonstrates f.middleware() — tRPC-style context derivation.
- * Rejects GUEST requests with a structured error.
- *
- * Usage in tools:
- *   f.query('users.list')
- *     .use(withAuth)
- *     .handle(async (input, ctx) => {
- *       // ctx now has ctx.role guaranteed non-GUEST
- *     });
- *
- * In production, replace with JWT validation,
- * API key checks, or OAuth token verification.
- */
-import { f } from '../vurb.js';
-import { error } from '@vurb/core';
-
-export const withAuth = f.middleware(async (ctx) => {
-    if (ctx.role === 'GUEST') {
-        throw error('Access denied. Authentication required.');
-    }
-    return { verified: true as const };
-});
+    return `/**
+ * Auth Middleware — RBAC Guard (Fluent API)
+ *
+ * Demonstrates f.middleware() — tRPC-style context derivation.
+ * Rejects GUEST requests with a structured error.
+ *
+ * Usage in tools:
+ *   f.query('users.list')
+ *     .use(withAuth)
+ *     .handle(async (input, ctx) => {
+ *       // ctx now has ctx.role guaranteed non-GUEST
+ *     });
+ *
+ * In production, replace with JWT validation,
+ * API key checks, or OAuth token verification.
+ */
+import { f } from '../vurb.js';
+import { error } from '@vurb/core';
+
+export const withAuth = f.middleware(async (ctx) => {
+    if (ctx.role === 'GUEST') {
+        throw error('Access denied. Authentication required.');
+    }
+    return { verified: true as const };
+});
 `;
 }
 //# sourceMappingURL=middleware.js.map