@vurb/core 3.3.4 → 3.6.0

package/dist/cli/templates/vectors/database.js

@@ -4,79 +4,79 @@
  */
 /** Generate `prisma/schema.prisma` */
 export function prismaSchema() {
-    return `// Prisma Schema — Database-Driven MCP Server
-//
-// The @vurb/prisma-gen generator reads annotations
-// and auto-generates Presenters + ToolBuilders with:
-// - Field-level security (/// @vurb.hide)
-// - Tenant isolation
-// - OOM protection
-
-generator client {
-    provider = "prisma-client-js"
-}
-
-generator vurb {
-    provider = "@vurb/prisma-gen"
-}
-
-datasource db {
-    provider = "postgresql"
-    url      = env("DATABASE_URL")
-}
-
-model User {
-    id        String   @id @default(cuid())
-    email     String   @unique
-    name      String
-
-    /// @vurb.hide — Stripped by the Egress Firewall before reaching the LLM
-    password  String
-
-    role      String   @default("USER")
-    createdAt DateTime @default(now())
-    updatedAt DateTime @updatedAt
-
-    posts     Post[]
-}
-
-model Post {
-    id        String   @id @default(cuid())
-    title     String
-    content   String?
-    published Boolean  @default(false)
-    createdAt DateTime @default(now())
-
-    author    User     @relation(fields: [authorId], references: [id])
-    authorId  String
-}
+    return `// Prisma Schema — Database-Driven MCP Server
+//
+// The @vurb/prisma-gen generator reads annotations
+// and auto-generates Presenters + ToolBuilders with:
+// - Field-level security (/// @vurb.hide)
+// - Tenant isolation
+// - OOM protection
+
+generator client {
+    provider = "prisma-client-js"
+}
+
+generator vurb {
+    provider = "@vurb/prisma-gen"
+}
+
+datasource db {
+    provider = "postgresql"
+    url      = env("DATABASE_URL")
+}
+
+model User {
+    id        String   @id @default(cuid())
+    email     String   @unique
+    name      String
+
+    /// @vurb.hide — Stripped by the Egress Firewall before reaching the LLM
+    password  String
+
+    role      String   @default("USER")
+    createdAt DateTime @default(now())
+    updatedAt DateTime @updatedAt
+
+    posts     Post[]
+}
+
+model Post {
+    id        String   @id @default(cuid())
+    title     String
+    content   String?
+    published Boolean  @default(false)
+    createdAt DateTime @default(now())
+
+    author    User     @relation(fields: [authorId], references: [id])
+    authorId  String
+}
 `;
 }
 /** Generate `src/tools/db/users.ts` */
 export function dbUsersToolTs() {
-    return `/**
- * Database Users Tool — Prisma-Driven CRUD (Fluent API)
- *
- * Demonstrates:
- * - f.query() with .withOptionalNumber() typed parameter
- * - .handle(input, ctx) — input.take is typed as number | undefined
- * - Implicit success() wrapping
- */
-import { f } from '../../vurb.js';
-
-export default f.query('db.list_users')
-    .describe('List users from the database')
-    .withOptionalNumber('take', 'Max results (1-50)')
-    .handle(async (input, ctx) => {
-        // TODO: Replace with your Prisma client
-        // const users = await ctx.db.user.findMany({ take: input.take ?? 10 });
-        // return users;
-
-        return {
-            hint: 'Connect your Prisma client in src/context.ts to enable database queries.',
-            example: 'const users = await ctx.db.user.findMany({ take: 10 })',
-        };
-    });
+    return `/**
+ * Database Users Tool — Prisma-Driven CRUD (Fluent API)
+ *
+ * Demonstrates:
+ * - f.query() with .withOptionalNumber() typed parameter
+ * - .handle(input, ctx) — input.take is typed as number | undefined
+ * - Implicit success() wrapping
+ */
+import { f } from '../../vurb.js';
+
+export default f.query('db.list_users')
+    .describe('List users from the database')
+    .withOptionalNumber('take', 'Max results (1-50)')
+    .handle(async (input, ctx) => {
+        // TODO: Replace with your Prisma client
+        // const users = await ctx.db.user.findMany({ take: input.take ?? 10 });
+        // return users;
+
+        return {
+            hint: 'Connect your Prisma client in src/context.ts to enable database queries.',
+            example: 'const users = await ctx.db.user.findMany({ take: 10 })',
+        };
+    });
 `;
 }
 //# sourceMappingURL=database.js.map

package/dist/cli/templates/vectors/oauth.js

@@ -4,73 +4,73 @@
  */
 /** Generate `src/auth.ts` — OAuth Device Flow setup */
 export function oauthSetupTs(config) {
-    return `/**
- * OAuth Setup — Device Flow Authentication (RFC 8628)
- *
- * Pre-configured \`createAuthTool()\` with login, complete, status, logout actions.
- * The \`requireAuth()\` middleware protects any tool with one line.
- *
- * 1. Set CLIENT_ID and AUTH endpoints in .env
- * 2. Register the auth tool in server.ts
- * 3. Use \`requireAuth()\` on protected tools
- */
-import { createAuthTool, TokenManager } from '@vurb/oauth';
-import type { ToolRegistry } from '@vurb/core';
-
-export function registerAuth<TContext>(registry: ToolRegistry<TContext>): void {
-    const clientId = process.env['OAUTH_CLIENT_ID'];
-    const authEndpoint = process.env['OAUTH_AUTH_ENDPOINT'];
-    const tokenEndpoint = process.env['OAUTH_TOKEN_ENDPOINT'];
-
-    if (!clientId || !authEndpoint || !tokenEndpoint) {
-        console.error('⚠️  OAUTH_CLIENT_ID, OAUTH_AUTH_ENDPOINT, OAUTH_TOKEN_ENDPOINT are required in .env');
-        return;
-    }
-
-    const auth = createAuthTool({
-        clientId,
-        authorizationEndpoint: authEndpoint,
-        tokenEndpoint,
-        tokenManager: {
-            configDir: '.${config.name}',
-            envVar: '${config.name.toUpperCase().replace(/-/g, '_')}_TOKEN',
-        },
-    });
-
-    registry.register(auth);
-    console.error('🔐 OAuth Device Flow registered (auth.login → auth.complete → auth.status)');
-}
+    return `/**
+ * OAuth Setup — Device Flow Authentication (RFC 8628)
+ *
+ * Pre-configured \`createAuthTool()\` with login, complete, status, logout actions.
+ * The \`requireAuth()\` middleware protects any tool with one line.
+ *
+ * 1. Set CLIENT_ID and AUTH endpoints in .env
+ * 2. Register the auth tool in server.ts
+ * 3. Use \`requireAuth()\` on protected tools
+ */
+import { createAuthTool, TokenManager } from '@vurb/oauth';
+import type { ToolRegistry } from '@vurb/core';
+
+export function registerAuth<TContext>(registry: ToolRegistry<TContext>): void {
+    const clientId = process.env['OAUTH_CLIENT_ID'];
+    const authEndpoint = process.env['OAUTH_AUTH_ENDPOINT'];
+    const tokenEndpoint = process.env['OAUTH_TOKEN_ENDPOINT'];
+
+    if (!clientId || !authEndpoint || !tokenEndpoint) {
+        console.error('⚠️  OAUTH_CLIENT_ID, OAUTH_AUTH_ENDPOINT, OAUTH_TOKEN_ENDPOINT are required in .env');
+        return;
+    }
+
+    const auth = createAuthTool({
+        clientId,
+        authorizationEndpoint: authEndpoint,
+        tokenEndpoint,
+        tokenManager: {
+            configDir: '.${config.name}',
+            envVar: '${config.name.toUpperCase().replace(/-/g, '_')}_TOKEN',
+        },
+    });
+
+    registry.register(auth);
+    console.error('🔐 OAuth Device Flow registered (auth.login → auth.complete → auth.status)');
+}
 `;
 }
 /** Generate `src/middleware/auth.ts` — requireAuth middleware */
 export function oauthMiddlewareTs() {
-    return `/**
- * Auth Middleware — Protect tools with requireAuth()
- *
- * @example
- * \`\`\`ts
- * import { withAuth } from '../middleware/auth.js';
- *
- * export default f.query('projects.list')
- *     .describe('List all projects')
- *     .use(withAuth)
- *     .handle(async (input, ctx) => { /* authenticated */ });
- * \`\`\`
- */
-import { requireAuth } from '@vurb/oauth';
-
-/**
- * Pre-configured auth middleware.
- * Rejects unauthenticated requests with \`AUTH_REQUIRED\` + self-healing hints.
- */
-export const withAuth = requireAuth({
-    extractToken: (ctx: unknown) => {
-        const obj = ctx as Record<string, unknown>;
-        return typeof obj['token'] === 'string' ? obj['token'] : null;
-    },
-    recoveryHint: 'Call auth action=login to authenticate via browser',
-    recoveryAction: 'auth',
-});
+    return `/**
+ * Auth Middleware — Protect tools with requireAuth()
+ *
+ * @example
+ * \`\`\`ts
+ * import { withAuth } from '../middleware/auth.js';
+ *
+ * export default f.query('projects.list')
+ *     .describe('List all projects')
+ *     .use(withAuth)
+ *     .handle(async (input, ctx) => { /* authenticated */ });
+ * \`\`\`
+ */
+import { requireAuth } from '@vurb/oauth';
+
+/**
+ * Pre-configured auth middleware.
+ * Rejects unauthenticated requests with \`AUTH_REQUIRED\` + self-healing hints.
+ */
+export const withAuth = requireAuth({
+    extractToken: (ctx: unknown) => {
+        const obj = ctx as Record<string, unknown>;
+        return typeof obj['token'] === 'string' ? obj['token'] : null;
+    },
+    recoveryHint: 'Call auth action=login to authenticate via browser',
+    recoveryAction: 'auth',
+});
 `;
 }
 //# sourceMappingURL=oauth.js.map

package/dist/cli/templates/vectors/openapi.js

@@ -1,106 +1,106 @@
 /** Generate `openapi.yaml` — Sample OpenAPI spec */
 export function openapiYaml(config) {
-    return `# OpenAPI 3.0 Specification — Sample
-#
-# Replace this with your actual API spec, then run:
-#   npx @vurb/openapi-gen ./openapi.yaml --outDir ./src/generated
-#
-# The generator creates Presenters, Tools, Registry, and server
-# bootstrap — all configurable via YAML annotations.
-
-openapi: '3.0.3'
-info:
-  title: '${config.name} API'
-  version: '0.1.0'
-  description: Sample API for Vurb OpenAPI generation
-
-servers:
-  - url: http://localhost:3000/api
-
-paths:
-  /health:
-    get:
-      operationId: getHealth
-      summary: Health check endpoint
-      responses:
-        '200':
-          description: Server health status
-          content:
-            application/json:
-              schema:
-                type: object
-                properties:
-                  status:
-                    type: string
-                    example: healthy
-                  uptime:
-                    type: number
-                    example: 12345.67
-
-  /users:
-    get:
-      operationId: listUsers
-      summary: List all users
-      parameters:
-        - name: limit
-          in: query
-          schema:
-            type: integer
-            minimum: 1
-            maximum: 100
-            default: 10
-      responses:
-        '200':
-          description: List of users
-          content:
-            application/json:
-              schema:
-                type: array
-                items:
-                  $ref: '#/components/schemas/User'
-
-components:
-  schemas:
-    User:
-      type: object
-      properties:
-        id:
-          type: string
-        name:
-          type: string
-        email:
-          type: string
+    return `# OpenAPI 3.0 Specification — Sample
+#
+# Replace this with your actual API spec, then run:
+#   npx @vurb/openapi-gen ./openapi.yaml --outDir ./src/generated
+#
+# The generator creates Presenters, Tools, Registry, and server
+# bootstrap — all configurable via YAML annotations.
+
+openapi: '3.0.3'
+info:
+  title: '${config.name} API'
+  version: '0.1.0'
+  description: Sample API for Vurb OpenAPI generation
+
+servers:
+  - url: http://localhost:3000/api
+
+paths:
+  /health:
+    get:
+      operationId: getHealth
+      summary: Health check endpoint
+      responses:
+        '200':
+          description: Server health status
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  status:
+                    type: string
+                    example: healthy
+                  uptime:
+                    type: number
+                    example: 12345.67
+
+  /users:
+    get:
+      operationId: listUsers
+      summary: List all users
+      parameters:
+        - name: limit
+          in: query
+          schema:
+            type: integer
+            minimum: 1
+            maximum: 100
+            default: 10
+      responses:
+        '200':
+          description: List of users
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/User'
+
+components:
+  schemas:
+    User:
+      type: object
+      properties:
+        id:
+          type: string
+        name:
+          type: string
+        email:
+          type: string
 `;
 }
 /** Generate `SETUP.md` — OpenAPI generation instructions */
 export function openapiSetupMd() {
-    return `# OpenAPI Generator Setup
-
-This project is configured for the **Legacy API Proxy** ingestion vector.
-
-## Steps
-
-1. Replace \`openapi.yaml\` with your actual OpenAPI 3.x spec
-
-2. Generate the MCP server from the spec:
-   \`\`\`bash
-   npx @vurb/openapi-gen ./openapi.yaml --outDir ./src/generated
-   \`\`\`
-
-3. The generator creates:
-   - Presenters with Zod schemas (Egress Firewall)
-   - Tool builders with typed handlers
-   - Registry setup with all endpoints
-
-4. Import and register in \`src/server.ts\`:
-   \`\`\`typescript
-   import { generatedTools } from './generated/registry.js';
-   registry.registerAll(...generatedTools);
-   \`\`\`
-
-## Documentation
-
-See: [OpenAPI Generator](https://vurb.vinkius.com/openapi-gen)
+    return `# OpenAPI Generator Setup
+
+This project is configured for the **Legacy API Proxy** ingestion vector.
+
+## Steps
+
+1. Replace \`openapi.yaml\` with your actual OpenAPI 3.x spec
+
+2. Generate the MCP server from the spec:
+   \`\`\`bash
+   npx @vurb/openapi-gen ./openapi.yaml --outDir ./src/generated
+   \`\`\`
+
+3. The generator creates:
+   - Presenters with Zod schemas (Egress Firewall)
+   - Tool builders with typed handlers
+   - Registry setup with all endpoints
+
+4. Import and register in \`src/server.ts\`:
+   \`\`\`typescript
+   import { generatedTools } from './generated/registry.js';
+   registry.registerAll(...generatedTools);
+   \`\`\`
+
+## Documentation
+
+See: [OpenAPI Generator](https://vurb.vinkius.com/openapi-gen)
 `;
 }
 //# sourceMappingURL=openapi.js.map

package/dist/core/builder/BuildPipeline.d.ts

@@ -0,0 +1,56 @@
+/**
+ * BuildPipeline — Compiles FluentToolBuilder state into a GroupedToolBuilder.
+ *
+ * Extracts the `_build()` pipeline from FluentToolBuilder into a
+ * standalone function for SRP compliance. Handles:
+ * - Name parsing (`domain.action`)
+ * - Description compilation (instructions + sandbox prompting)
+ * - Semantic defaults resolution
+ * - Handler wrapping (implicit `success()`)
+ * - GroupedToolBuilder assembly + middleware propagation
+ *
+ * @module
+ */
+import { type ZodObject, type ZodRawShape } from 'zod';
+import { GroupedToolBuilder } from './GroupedToolBuilder.js';
+import { type ToolResponse, type MiddlewareFn } from '../types.js';
+import { type Presenter } from '../../presenter/Presenter.js';
+import { type ConcurrencyConfig } from '../execution/ConcurrencyGuard.js';
+import { type SandboxConfig } from '../../sandbox/SandboxEngine.js';
+import { type SemanticDefaults } from './SemanticDefaults.js';
+/**
+ * Configuration object assembled from FluentToolBuilder state.
+ * Passed to `buildToolFromFluent()` to produce a `GroupedToolBuilder`.
+ */
+export interface FluentBuildConfig<TContext, TCtx> {
+    name: string;
+    description: string | undefined;
+    instructions: string | undefined;
+    withParams: Record<string, import('zod').ZodType>;
+    inputSchema?: ZodObject<ZodRawShape>;
+    tags: string[];
+    middlewares: MiddlewareFn<TContext>[];
+    returns: Presenter<unknown> | undefined;
+    semanticDefaults: SemanticDefaults;
+    readOnly: boolean | undefined;
+    destructive: boolean | undefined;
+    idempotent: boolean | undefined;
+    toonMode: boolean;
+    annotations: Record<string, unknown> | undefined;
+    invalidatesPatterns: string[];
+    cacheControl: 'no-store' | 'immutable' | undefined;
+    concurrency: ConcurrencyConfig | undefined;
+    egressMaxBytes: number | undefined;
+    sandboxConfig: SandboxConfig | undefined;
+    fsmStates: string[] | undefined;
+    fsmTransition: string | undefined;
+    handler: (input: Record<string, unknown>, ctx: TCtx) => Promise<ToolResponse | unknown>;
+}
+/**
+ * Compile FluentToolBuilder state into a GroupedToolBuilder.
+ *
+ * @param config - Assembled configuration from builder state
+ * @returns A `GroupedToolBuilder` ready for registration
+ */
+export declare function buildToolFromFluent<TContext, TCtx>(config: FluentBuildConfig<TContext, TCtx>): GroupedToolBuilder<TContext>;
+//# sourceMappingURL=BuildPipeline.d.ts.map

package/dist/core/builder/BuildPipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"BuildPipeline.d.ts","sourceRoot":"","sources":["../../../src/core/builder/BuildPipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,KAAK,CAAC;AAEvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EAAE,KAAK,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAEpE,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE9D;;;GAGG;AACH,MAAM,WAAW,iBAAiB,CAAC,QAAQ,EAAE,IAAI;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,WAAW,CAAC,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC;IACxC,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACjD,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,YAAY,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;IACnD,WAAW,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC3C,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IACzC,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAChC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,OAAO,EAAE,CACL,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,GAAG,EAAE,IAAI,KACR,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,CAAC;CACxC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,IAAI,EAC9C,MAAM,EAAE,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,GAC1C,kBAAkB,CAAC,QAAQ,CAAC,CA4H9B"}