tina4ruby 3.11.11 → 3.11.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 27b0a9fcfbd4fb2873e490aac1cc5743784214da09d8f7be199adcb7aefbd159
-  data.tar.gz: af42dff46d929b795e2139a439d1a23c2e0822fed7616e7abe03222673b02539
+  metadata.gz: ca811aa2cb83ea336ce8be177f6f3688d014d6a7cb2ad4b90304a752a163d6aa
+  data.tar.gz: 51208212f5cf5b7c49fde4f77d80b042a99d65ec615f9e422228299dd04993c9
 SHA512:
-  metadata.gz: 316581b5698cabf6953d7af3e7aaec76535d22a25b9fb5332729553f5f0aa1e9edcb3078fe01435818340ea4464bf74b52a8e96b8f40ba79fc528c54e6298aa3
-  data.tar.gz: 80a0bfab88b1ffeb4d93576e47bf6a093ae7f7c3b2642eb897e479d5e06e2b78adf55067c330f3024b750dd961a829933621ce853f692a21fe949622e548b8c1
+  metadata.gz: 8baf46841c98a50c37b767ce9f963404c04250802e58b33c97d4927847fd7895098e243affbde71caae19d872fd6238b388c2d08affc5d157f9b9a51aae73e46
+  data.tar.gz: bcc3047216b640f05573f7f450f6f591b8e3467979f12c503f80d2a652cdbb17cc513ed373b7e881b6c1305502b420910941bba6aefba401d827e45b21d918ec

data/README.md

@@ -4,11 +4,11 @@
 <h1 align="center">Tina4 Ruby</h1>
 <h3 align="center">TINA4 — The Intelligent Native Application 4ramework</h3>
 <p align="center"><em>Simple. Fast. Human. &nbsp;|&nbsp; Built for AI. Built for you.</em></p>
-<p align="center">54 built-in features. Zero runtime dependencies. One require, everything works.</p>
+<p align="center">55 built-in features. Zero runtime dependencies. One require, everything works.</p>
 <p align="center">
   <a href="https://rubygems.org/gems/tina4ruby"><img src="https://img.shields.io/gem/v/tina4ruby?color=7b1fa2&label=RubyGems" alt="RubyGems"></a>
-  <img src="https://img.shields.io/badge/tests-1%2C578%20passing-brightgreen" alt="Tests">
-  <img src="https://img.shields.io/badge/features-54-blue" alt="Features">
+  <img src="https://img.shields.io/badge/tests-2%2C508%20passing-brightgreen" alt="Tests">
+  <img src="https://img.shields.io/badge/features-55-blue" alt="Features">
   <img src="https://img.shields.io/badge/dependencies-0-brightgreen" alt="Zero Deps">
   <a href="https://tina4.com"><img src="https://img.shields.io/badge/docs-tina4.com-7b1fa2" alt="Docs"></a>
 </p>
@@ -18,6 +18,12 @@
 ## Quick Start
 
 ```bash
+# With the Tina4 CLI (recommended — enables SCSS + live reload)
+cargo install tina4    # or grab a binary from https://github.com/tina4stack/tina4/releases
+tina4 init ruby ./my-app
+cd my-app && tina4 serve
+
+# Without the Tina4 CLI
 gem install tina4ruby
 tina4ruby init my-app
 cd my-app && tina4ruby serve
@@ -60,7 +66,7 @@ db = Tina4::Database.new("sqlite://app.db")
 | **Developer Tools** (7) | Dev dashboard (11 tabs), dev toolbar, error overlay (Catppuccin Mocha), dev mailbox, hot reload + CSS hot-reload, code metrics (complexity, coupling, maintainability), AI context installer (7 tools) |
 | **Utilities** (7) | DI container (transient + singleton), HtmlElement builder, inline testing (`@tests` decorator), i18n (6 languages), Swagger/OpenAPI auto-generation, CLI scaffolding (`generate model/route/migration/middleware`), structured logging |
 
-**1,793 tests. Zero runtime dependencies. Full parity across Python, PHP, Ruby, and Node.js.**
+**2,508 tests. Zero runtime dependencies. Full parity across Python, PHP, Ruby, and Node.js.**
 
 ---
 
@@ -82,10 +88,10 @@ Benchmarked with `wrk` — 5,000 requests, 50 concurrent, median of 3 runs:
 
 | Framework | JSON req/s | Deps | Features |
 |-----------|-----------|------|----------|
-| **Tina4 Ruby** | **10,243** | 0 | 54 |
+| **Tina4 Ruby** | **10,243** | 0 | 55 |
 | Sinatra | 9,548 | 5+ | ~4 |
 
-Tina4 Ruby outperforms Sinatra while delivering **54 features vs ~4** — with zero runtime dependencies.
+Tina4 Ruby outperforms Sinatra while delivering **55 features vs ~4** — with zero runtime dependencies.
 
 **Across all 4 Tina4 implementations:**
 
@@ -93,21 +99,21 @@ Tina4 Ruby outperforms Sinatra while delivering **54 features vs ~4** — with z
 |---|--------|-----|------|---------|
 | **JSON req/s** | 6,508 | 29,293 | 10,243 | 84,771 |
 | **Dependencies** | 0 | 0 | 0 | 0 |
-| **Features** | 54 | 54 | 54 | 54 |
+| **Features** | 55 | 55 | 55 | 55 |
 
 ---
 
 ## Cross-Framework Parity
 
-Tina4 ships identical features across four languages — same architecture, same conventions, same 54 features:
+Tina4 ships identical features across four languages — same architecture, same conventions, same 55 features:
 
 | | Python | PHP | Ruby | Node.js |
 |---|--------|-----|------|---------|
-| **Package** | `tina4-python` | `tina4stack/tina4php` | `tina4ruby` | `tina4-nodejs` |
-| **Tests** | 2,066 | 1,427 | 1,793 | 1,950 |
-| **Default port** | 7145 | 7146 | 7147 | 7148 |
+| **Package** | `tina4-python` | `tina4stack/tina4php` | `tina4ruby` | `@tina4/core` |
+| **Tests (v3.11.12)** | 2,281 | 2,073 | 2,508 | 2,897 |
+| **Default port** | 7146 | 7145 | 7147 | 7148 |
 
-**7,236 tests** across all 4 frameworks. See [tina4.com](https://tina4.com).
+**~9,700 tests** across all 4 frameworks. See [tina4.com](https://tina4.com).
 
 ---
 

data/lib/tina4/database/sqlite3_adapter.rb

@@ -14,7 +14,7 @@ module Tina4
 
       def connect(connection_string)
         require "sqlite3"
-        @db_path = connection_string.to_s.sub(/^sqlite3?:\/\//, "").sub(/^sqlite3?:/, "")
+        @db_path = self.class.resolve_path(connection_string)
         @connection = SQLite3::Database.new(@db_path)
         @connection.results_as_hash = true
         @connection.execute("PRAGMA journal_mode=WAL")
@@ -22,6 +22,32 @@ module Tina4
         self
       end
 
+      # Resolve a SQLite URL / path against the project root (cwd).
+      # Convention matches Tina4::Drivers::SqliteDriver.resolve_path —
+      # three slashes = relative, four = absolute, drive letter = Windows abs.
+      def self.resolve_path(connection_string)
+        return ":memory:" if connection_string == "sqlite::memory:" || connection_string == "sqlite:///:memory:"
+
+        raw = connection_string.to_s
+          .sub(/^sqlite3?:\/\/\//, "")
+          .sub(/^sqlite3?:\/\//, "")
+          .sub(/^sqlite3?:/, "")
+        return ":memory:" if raw == ":memory:"
+
+        is_windows_abs = raw.match?(/^[A-Za-z]:[\/\\]/)
+        is_unix_abs    = raw.start_with?("/")
+
+        if is_windows_abs || is_unix_abs
+          raw
+        else
+          resolved = File.join(Dir.pwd, raw)
+          parent = File.dirname(resolved)
+          require "fileutils"
+          FileUtils.mkdir_p(parent) unless File.directory?(parent)
+          resolved
+        end
+      end
+
       def close
         @connection.close if @connection
         @connection = nil

data/lib/tina4/drivers/sqlite_driver.rb

@@ -7,10 +7,7 @@ module Tina4
 
       def connect(connection_string, username: nil, password: nil)
         require "sqlite3"
-        db_path = connection_string.sub(/^sqlite:\/\//, "").sub(/^sqlite:/, "")
-        # Windows: sqlite:///C:/Users/app.db → /C:/Users/app.db after stripping scheme.
-        # The leading / before the drive letter must be removed.
-        db_path = db_path[1..] if db_path.match?(/^\/[A-Za-z]:/)
+        db_path = self.class.resolve_path(connection_string)
 
         @connection = SQLite3::Database.new(db_path)
         @connection.results_as_hash = true
@@ -18,6 +15,42 @@ module Tina4
         @connection.execute("PRAGMA foreign_keys=ON")
       end
 
+      # Resolve a SQLite URL / path against the project root (cwd).
+      #
+      # Convention (matches tina4-python, tina4-php, tina4-nodejs):
+      #   sqlite::memory:              → :memory:
+      #   sqlite:///:memory:           → :memory:
+      #   sqlite:///app.db             → {cwd}/app.db  (relative)
+      #   sqlite:///data/app.db        → {cwd}/data/app.db  (relative; auto-mkdir under cwd)
+      #   sqlite:////var/data/app.db   → /var/data/app.db  (absolute; no auto-mkdir)
+      #   sqlite:///C:/Users/app.db    → C:/Users/app.db  (Windows absolute)
+      #
+      # Never mkdir outside cwd — that was the root cause of the
+      # "Read-only file system: '/data'" crash on macOS.
+      def self.resolve_path(connection_string)
+        return ":memory:" if connection_string == "sqlite::memory:" || connection_string == "sqlite:///:memory:"
+
+        # Strip the scheme + up to three slashes, preserving a potential fourth
+        # slash (absolute) or drive letter.
+        raw = connection_string.sub(/^sqlite:\/\/\//, "").sub(/^sqlite:\/\//, "").sub(/^sqlite:/, "")
+        return ":memory:" if raw == ":memory:"
+
+        is_windows_abs = raw.match?(/^[A-Za-z]:[\/\\]/)
+        is_unix_abs    = raw.start_with?("/")
+
+        if is_windows_abs || is_unix_abs
+          # Absolute — trust the user; don't auto-mkdir outside cwd.
+          raw
+        else
+          # Relative — resolve under cwd; auto-mkdir parent dir.
+          resolved = File.join(Dir.pwd, raw)
+          parent = File.dirname(resolved)
+          require "fileutils"
+          FileUtils.mkdir_p(parent) unless File.directory?(parent)
+          resolved
+        end
+      end
+
       def close
         @connection&.close
       end

data/lib/tina4/rack_app.rb

@@ -560,13 +560,13 @@ module Tina4
                     var maxAttempts = 5;
                     function pollRoute() {
                         fetch(tryUrl, {method: 'HEAD'}).then(function() {
-                            window.location.href = tryUrl;
+                            window.open(tryUrl, '_blank');
                         }).catch(function() {
                             attempts++;
                             if (attempts < maxAttempts) {
                                 setTimeout(pollRoute, 500);
                             } else {
-                                window.location.href = tryUrl;
+                                window.open(tryUrl, '_blank');
                             }
                         });
                     }

data/lib/tina4/router.rb

@@ -98,6 +98,27 @@ module Tina4
       p
     end
 
+    # Supported typed-parameter constraints. Mirrored verbatim in
+    # tina4-python / tina4-php / tina4-nodejs for cross-framework parity.
+    #
+    # Any type name not in this table raises ``ArgumentError`` at route
+    # registration — we never silently fall through to the default matcher,
+    # because a typo like ``{id:inetger}`` would otherwise match anything
+    # and create a security footgun (see tina4-book#125).
+    PARAM_TYPE_PATTERNS = {
+      "string"  => "[^/]+",                                            # default, any non-slash segment
+      "int"     => '\d+',
+      "integer" => '\d+',
+      "float"   => '[\d.]+',
+      "number"  => '[\d.]+',
+      "alpha"   => "[A-Za-z]+",                                        # letters only
+      "alnum"   => "[A-Za-z0-9]+",                                     # letters + digits
+      "slug"    => "[a-z0-9-]+",                                       # URL slug
+      "uuid"    => "[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}",
+      "path"    => ".+",                                               # greedy
+      ".*"      => ".+",
+    }.freeze
+
     def compile_pattern(path)
       return Regexp.new("\\A/\\z") if path == "/"
 
@@ -113,23 +134,19 @@ module Tina4
           # to match Python/PHP/Node parity (docs say `request.params["*"]`).
           @param_names << { name: :"*", type: "path" }
           '(.+)'
-        elsif part =~ /\A\{(\w+)(?::(\w+))?\}\z/
+        elsif part =~ /\A\{(\w+)(?::([\w.*]+))?\}\z/
           # Tina4/Python-style brace params: {id} or {id:int}
           # This is the ONLY supported param syntax, matching Python exactly.
           # Do NOT add :id (colon) style params.
           name = Regexp.last_match(1)
           type = Regexp.last_match(2) || "string"
-          @param_names << { name: name.to_sym, type: type }
-          case type
-          when "int", "integer"
-            '(\d+)'
-          when "float", "number"
-            '([\d.]+)'
-          when "path"
-            '(.+)'
-          else
-            '([^/]+)'
+          unless PARAM_TYPE_PATTERNS.key?(type)
+            valid = PARAM_TYPE_PATTERNS.keys.reject { |k| k == ".*" }.sort.join(", ")
+            raise ArgumentError,
+                  "Unknown param type '#{type}' in route '#{path}'. Valid types: #{valid}."
           end
+          @param_names << { name: name.to_sym, type: type }
+          "(#{PARAM_TYPE_PATTERNS[type]})"
         else
           Regexp.escape(part)
         end

data/lib/tina4/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Tina4
-  VERSION = "3.11.11"
+  VERSION = "3.11.13"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: tina4ruby
 version: !ruby/object:Gem::Version
-  version: 3.11.11
+  version: 3.11.13
 platform: ruby
 authors:
 - Tina4 Team
@@ -179,33 +179,33 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.8'
 - !ruby/object:Gem::Dependency
-  name: listen
+  name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
-  type: :development
+        version: '2.0'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
-  name: sqlite3
+  name: listen
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '3.8'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '3.8'
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement