init

app.rb

@@ -0,0 +1,21 @@
+require 'roda'
+require_relative './auth_middleware'
+require_relative './secure_app'
+
+class App < Roda
+  route do |r|
+    r.root do
+      "Welcome to the public API"
+    end
+
+    r.get "hello" do
+      { message: "Public hello" }.to_json
+    end
+
+    # ✅ Apply middleware to the entire /secure/* route
+    r.on "secure" do
+      r.run AuthMiddleware.new(SecureApp.freeze.app)
+    end
+  end
+end
+