From 78e0a01b9fd136e40db0a8cbb44240a3f0ca0f3b Mon Sep 17 00:00:00 2001
From: Jonathan Hefner <jonathan@hefner.pro>
Date: Wed, 4 Feb 2026 17:21:06 -0600
Subject: [PATCH] docs: add missing code fences to JSDoc `@example` blocks

Add triple-backtick code fences to 5 JSDoc comments that had code
examples without proper markdown fencing:

- `createPrivateKeyJwtAuth()` in `authExtensions.ts`
- `ClientCredentialsProvider` in `authExtensions.ts`
- `PrivateKeyJwtProvider` in `authExtensions.ts`
- `fetchToken()` in `auth.ts`
- `hostHeaderValidationResponse()` in `hostHeaderValidation.ts`

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 packages/client/src/client/auth.ts                   |  2 ++
 packages/client/src/client/authExtensions.ts         | 12 +++++++++---
 .../src/server/middleware/hostHeaderValidation.ts    |  2 ++
 3 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/packages/client/src/client/auth.ts b/packages/client/src/client/auth.ts
index 7804aea47..09869ee8f 100644
--- a/packages/client/src/client/auth.ts
+++ b/packages/client/src/client/auth.ts
@@ -1206,6 +1206,7 @@ export async function refreshAuthorization(
  * @throws {Error} When provider doesn't implement prepareTokenRequest or token fetch fails
  *
  * @example
+ * ```typescript
  * // Provider for client_credentials:
  * class MyProvider implements OAuthClientProvider {
  *   prepareTokenRequest(scope) {
@@ -1217,6 +1218,7 @@ export async function refreshAuthorization(
  * }
  *
  * const tokens = await fetchToken(provider, authServerUrl, { metadata });
+ * ```
  */
 export async function fetchToken(
     provider: OAuthClientProvider,
diff --git a/packages/client/src/client/authExtensions.ts b/packages/client/src/client/authExtensions.ts
index d5f63bd66..017684f18 100644
--- a/packages/client/src/client/authExtensions.ts
+++ b/packages/client/src/client/authExtensions.ts
@@ -13,9 +13,11 @@ import type { AddClientAuthentication, OAuthClientProvider } from './auth.js';
 /**
  * Helper to produce a private_key_jwt client authentication function.
  *
- * Usage:
- *   const addClientAuth = createPrivateKeyJwtAuth({ issuer, subject, privateKey, alg, audience? });
- *   // pass addClientAuth as provider.addClientAuthentication implementation
+ * @example
+ * ```typescript
+ * const addClientAuth = createPrivateKeyJwtAuth({ issuer, subject, privateKey, alg, audience? });
+ * // pass addClientAuth as provider.addClientAuthentication implementation
+ * ```
  */
 export function createPrivateKeyJwtAuth(options: {
     issuer: string;
@@ -114,6 +116,7 @@ export interface ClientCredentialsProviderOptions {
  * the client authenticates using a client_id and client_secret.
  *
  * @example
+ * ```typescript
  * const provider = new ClientCredentialsProvider({
  *   clientId: 'my-client',
  *   clientSecret: 'my-secret'
@@ -122,6 +125,7 @@ export interface ClientCredentialsProviderOptions {
  * const transport = new StreamableHTTPClientTransport(serverUrl, {
  *   authProvider: provider
  * });
+ * ```
  */
 export class ClientCredentialsProvider implements OAuthClientProvider {
     private _tokens?: OAuthTokens;
@@ -222,6 +226,7 @@ export interface PrivateKeyJwtProviderOptions {
  * the client authenticates using a signed JWT assertion (RFC 7523 Section 2.2).
  *
  * @example
+ * ```typescript
  * const provider = new PrivateKeyJwtProvider({
  *   clientId: 'my-client',
  *   privateKey: pemEncodedPrivateKey,
@@ -231,6 +236,7 @@ export interface PrivateKeyJwtProviderOptions {
  * const transport = new StreamableHTTPClientTransport(serverUrl, {
  *   authProvider: provider
  * });
+ * ```
  */
 export class PrivateKeyJwtProvider implements OAuthClientProvider {
     private _tokens?: OAuthTokens;
diff --git a/packages/server/src/server/middleware/hostHeaderValidation.ts b/packages/server/src/server/middleware/hostHeaderValidation.ts
index e63452639..c442d8fe9 100644
--- a/packages/server/src/server/middleware/hostHeaderValidation.ts
+++ b/packages/server/src/server/middleware/hostHeaderValidation.ts
@@ -44,7 +44,9 @@ export function localhostAllowedHostnames(): string[] {
 /**
  * Web-standard Request helper for DNS rebinding protection.
  * @example
+ * ```typescript
  * const result = validateHostHeader(req.headers.get('host'), ['localhost'])
+ * ```
  */
 export function hostHeaderValidationResponse(req: Request, allowedHostnames: string[]): Response | undefined {
     const result = validateHostHeader(req.headers.get('host'), allowedHostnames);