This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
Summary
AI summaryFixed vurb deployment module resolution bugs and added a CLI token command.
Full changelog
Fixed
-
vurb deploy — Cannot find module 'vurb' (Bug #151) — Three cascading bugs:
- require.resolve('vurb') — package is @vurb/core
- require.resolve('@vurb/core') — exports map is ESM-only, CJS resolution fails
- esbuild alias — prefix matching turns fs/promises into edge-stub.js/promises
Fix: esbuild plugin (onResolve + onLoad) with CJS Proxy catch-all.
Uses builtinModules from node:module (dynamic, future-proof).
Known exports (EventEmitter, Buffer, etc.) resolve normally.
Unknown names (readFile, createServer, etc.) return CRASH function. -
token.ts exactOptionalPropertyTypes compliance
-
Dead dirname import in deploy.ts
Added
- CLI token command — vurb token, vurb token --clear, vurb token
Test Suite
- 19 regression tests in deployEdgeStub-bug151.test.ts including:
- 2 real esbuild integration tests (17 node:* imports including subpaths)
- Regex coverage for ALL builtinModules
- Source analysis and compiled output verification
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About vinkius-labs/mcp-fusion
A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.
Related context
Related tools
Beta — feedback welcome: [email protected]