tina4ruby 3.11.12 → 3.11.14

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1ffc1ea931cf8203378e774e1efb4b3dbec399dd4309757200f8cd7967732b8b
-  data.tar.gz: 5141bdc93061f5eafa53e40098732d5342f645a69cd6978f3380bd7e2c3f1606
+  metadata.gz: 0306b1bed1468e9d48729f576f4494f01f0ba42bd0868f137c56a533d4d3a987
+  data.tar.gz: 500e0e589914771bdc96b5b901dc0b9948ecf901df072b0ed845fd31efe7ff34
 SHA512:
-  metadata.gz: 10b0c0e20c2389c088b494a6db800b3ea95aae3317d826491ebc4f610d6dd11e6ce13d3cc79eba23e4bde0adba2ff9fe76a4d9bbe91b10bdb47ead3ac333933a
-  data.tar.gz: a748a5ce83aa37858b99a7a1ed204385ce09f2c43886fe6742dffe2332fb5ffba56849f0f3c81e046b31d6bed17f7d1a4d5f1ba7c61365398c0863dce0c6cf7f
+  metadata.gz: 225d391063a44527dc0df900ee7cce8fa20151be48a6a786fd41e2f6130253cff8899e1939a1a067e2d3f6879463f8b5cd7c888a85af29baaac85c8608a1607e
+  data.tar.gz: 0ece15acd6ebdeef69e90f67e10b250a3c1e05dee513ea3fad2f5794df93abc10141471362e59040bcff03f3aeeb2986dc4e7e6e1e1670a7721e26af82e0d902

data/README.md

@@ -4,11 +4,11 @@
 <h1 align="center">Tina4 Ruby</h1>
 <h3 align="center">TINA4 — The Intelligent Native Application 4ramework</h3>
 <p align="center"><em>Simple. Fast. Human. &nbsp;|&nbsp; Built for AI. Built for you.</em></p>
-<p align="center">54 built-in features. Zero runtime dependencies. One require, everything works.</p>
+<p align="center">55 built-in features. Zero runtime dependencies. One require, everything works.</p>
 <p align="center">
   <a href="https://rubygems.org/gems/tina4ruby"><img src="https://img.shields.io/gem/v/tina4ruby?color=7b1fa2&label=RubyGems" alt="RubyGems"></a>
-  <img src="https://img.shields.io/badge/tests-1%2C578%20passing-brightgreen" alt="Tests">
-  <img src="https://img.shields.io/badge/features-54-blue" alt="Features">
+  <img src="https://img.shields.io/badge/tests-2%2C508%20passing-brightgreen" alt="Tests">
+  <img src="https://img.shields.io/badge/features-55-blue" alt="Features">
   <img src="https://img.shields.io/badge/dependencies-0-brightgreen" alt="Zero Deps">
   <a href="https://tina4.com"><img src="https://img.shields.io/badge/docs-tina4.com-7b1fa2" alt="Docs"></a>
 </p>
@@ -18,6 +18,12 @@
 ## Quick Start
 
 ```bash
+# With the Tina4 CLI (recommended — enables SCSS + live reload)
+cargo install tina4    # or grab a binary from https://github.com/tina4stack/tina4/releases
+tina4 init ruby ./my-app
+cd my-app && tina4 serve
+
+# Without the Tina4 CLI
 gem install tina4ruby
 tina4ruby init my-app
 cd my-app && tina4ruby serve
@@ -60,7 +66,7 @@ db = Tina4::Database.new("sqlite://app.db")
 | **Developer Tools** (7) | Dev dashboard (11 tabs), dev toolbar, error overlay (Catppuccin Mocha), dev mailbox, hot reload + CSS hot-reload, code metrics (complexity, coupling, maintainability), AI context installer (7 tools) |
 | **Utilities** (7) | DI container (transient + singleton), HtmlElement builder, inline testing (`@tests` decorator), i18n (6 languages), Swagger/OpenAPI auto-generation, CLI scaffolding (`generate model/route/migration/middleware`), structured logging |
 
-**1,793 tests. Zero runtime dependencies. Full parity across Python, PHP, Ruby, and Node.js.**
+**2,508 tests. Zero runtime dependencies. Full parity across Python, PHP, Ruby, and Node.js.**
 
 ---
 
@@ -82,10 +88,10 @@ Benchmarked with `wrk` — 5,000 requests, 50 concurrent, median of 3 runs:
 
 | Framework | JSON req/s | Deps | Features |
 |-----------|-----------|------|----------|
-| **Tina4 Ruby** | **10,243** | 0 | 54 |
+| **Tina4 Ruby** | **10,243** | 0 | 55 |
 | Sinatra | 9,548 | 5+ | ~4 |
 
-Tina4 Ruby outperforms Sinatra while delivering **54 features vs ~4** — with zero runtime dependencies.
+Tina4 Ruby outperforms Sinatra while delivering **55 features vs ~4** — with zero runtime dependencies.
 
 **Across all 4 Tina4 implementations:**
 
@@ -93,21 +99,21 @@ Tina4 Ruby outperforms Sinatra while delivering **54 features vs ~4** — with z
 |---|--------|-----|------|---------|
 | **JSON req/s** | 6,508 | 29,293 | 10,243 | 84,771 |
 | **Dependencies** | 0 | 0 | 0 | 0 |
-| **Features** | 54 | 54 | 54 | 54 |
+| **Features** | 55 | 55 | 55 | 55 |
 
 ---
 
 ## Cross-Framework Parity
 
-Tina4 ships identical features across four languages — same architecture, same conventions, same 54 features:
+Tina4 ships identical features across four languages — same architecture, same conventions, same 55 features:
 
 | | Python | PHP | Ruby | Node.js |
 |---|--------|-----|------|---------|
-| **Package** | `tina4-python` | `tina4stack/tina4php` | `tina4ruby` | `tina4-nodejs` |
-| **Tests** | 2,066 | 1,427 | 1,793 | 1,950 |
-| **Default port** | 7145 | 7146 | 7147 | 7148 |
+| **Package** | `tina4-python` | `tina4stack/tina4php` | `tina4ruby` | `@tina4/core` |
+| **Tests (v3.11.12)** | 2,281 | 2,073 | 2,508 | 2,897 |
+| **Default port** | 7146 | 7145 | 7147 | 7148 |
 
-**7,236 tests** across all 4 frameworks. See [tina4.com](https://tina4.com).
+**~9,700 tests** across all 4 frameworks. See [tina4.com](https://tina4.com).
 
 ---
 

data/lib/tina4/drivers/firebird_driver.rb

@@ -34,11 +34,12 @@ module Tina4
       end
 
       def execute_query(sql, params = [])
-        if params.empty?
-          @connection.query(:hash, sql)
-        else
-          @connection.query(:hash, sql, *params)
-        end.map { |row| stringify_keys(row) }
+        rows = if params.empty?
+                 @connection.query(:hash, sql)
+               else
+                 @connection.query(:hash, sql, *params)
+               end
+        rows.map { |row| decode_blobs(stringify_keys(row)) }
       end
 
       def execute(sql, params = [])
@@ -105,6 +106,19 @@ module Tina4
       def stringify_keys(hash)
         hash.each_with_object({}) { |(k, v), h| h[k.to_s] = v }
       end
+
+      # Ensure Firebird BLOB columns are proper byte strings.
+      # The Fb gem may return BLOBs as resource handles or IO objects —
+      # read them into strings if needed.
+      def decode_blobs(row)
+        row.each do |key, value|
+          if value.respond_to?(:read)
+            row[key] = value.read
+            value.close if value.respond_to?(:close)
+          end
+        end
+        row
+      end
     end
   end
 end

data/lib/tina4/drivers/postgres_driver.rb

@@ -28,7 +28,7 @@ module Tina4
                  else
                    @connection.exec_params(converted_sql, params)
                  end
-        result.map { |row| symbolize_keys(row) }
+        result.map { |row| decode_blobs(symbolize_keys(row)) }
       end
 
       def execute(sql, params = [])
@@ -101,6 +101,16 @@ module Tina4
       def symbolize_keys(hash)
         hash.each_with_object({}) { |(k, v), h| h[k.to_sym] = v }
       end
+
+      # Ensure binary (bytea) columns are proper byte strings.
+      # PostgreSQL's pg gem returns bytea as ASCII-8BIT encoded strings —
+      # they're already raw bytes, just tag them so Ruby treats them right.
+      def decode_blobs(row)
+        # No conversion needed — pg gem returns bytea as ASCII-8BIT strings
+        # which are raw bytes. Users can .force_encoding("UTF-8") for text
+        # BLOBs or use the bytes directly for binary data.
+        row
+      end
     end
   end
 end

data/lib/tina4/rack_app.rb

@@ -560,13 +560,13 @@ module Tina4
                     var maxAttempts = 5;
                     function pollRoute() {
                         fetch(tryUrl, {method: 'HEAD'}).then(function() {
-                            window.location.href = tryUrl;
+                            window.open(tryUrl, '_blank');
                         }).catch(function() {
                             attempts++;
                             if (attempts < maxAttempts) {
                                 setTimeout(pollRoute, 500);
                             } else {
-                                window.location.href = tryUrl;
+                                window.open(tryUrl, '_blank');
                             }
                         });
                     }

data/lib/tina4/router.rb

@@ -98,6 +98,27 @@ module Tina4
       p
     end
 
+    # Supported typed-parameter constraints. Mirrored verbatim in
+    # tina4-python / tina4-php / tina4-nodejs for cross-framework parity.
+    #
+    # Any type name not in this table raises ``ArgumentError`` at route
+    # registration — we never silently fall through to the default matcher,
+    # because a typo like ``{id:inetger}`` would otherwise match anything
+    # and create a security footgun (see tina4-book#125).
+    PARAM_TYPE_PATTERNS = {
+      "string"  => "[^/]+",                                            # default, any non-slash segment
+      "int"     => '\d+',
+      "integer" => '\d+',
+      "float"   => '[\d.]+',
+      "number"  => '[\d.]+',
+      "alpha"   => "[A-Za-z]+",                                        # letters only
+      "alnum"   => "[A-Za-z0-9]+",                                     # letters + digits
+      "slug"    => "[a-z0-9-]+",                                       # URL slug
+      "uuid"    => "[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}",
+      "path"    => ".+",                                               # greedy
+      ".*"      => ".+",
+    }.freeze
+
     def compile_pattern(path)
       return Regexp.new("\\A/\\z") if path == "/"
 
@@ -113,23 +134,19 @@ module Tina4
           # to match Python/PHP/Node parity (docs say `request.params["*"]`).
           @param_names << { name: :"*", type: "path" }
           '(.+)'
-        elsif part =~ /\A\{(\w+)(?::(\w+))?\}\z/
+        elsif part =~ /\A\{(\w+)(?::([\w.*]+))?\}\z/
           # Tina4/Python-style brace params: {id} or {id:int}
           # This is the ONLY supported param syntax, matching Python exactly.
           # Do NOT add :id (colon) style params.
           name = Regexp.last_match(1)
           type = Regexp.last_match(2) || "string"
-          @param_names << { name: name.to_sym, type: type }
-          case type
-          when "int", "integer"
-            '(\d+)'
-          when "float", "number"
-            '([\d.]+)'
-          when "path"
-            '(.+)'
-          else
-            '([^/]+)'
+          unless PARAM_TYPE_PATTERNS.key?(type)
+            valid = PARAM_TYPE_PATTERNS.keys.reject { |k| k == ".*" }.sort.join(", ")
+            raise ArgumentError,
+                  "Unknown param type '#{type}' in route '#{path}'. Valid types: #{valid}."
           end
+          @param_names << { name: name.to_sym, type: type }
+          "(#{PARAM_TYPE_PATTERNS[type]})"
         else
           Regexp.escape(part)
         end

data/lib/tina4/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Tina4
-  VERSION = "3.11.12"
+  VERSION = "3.11.14"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tina4ruby
 version: !ruby/object:Gem::Version
-  version: 3.11.12
+  version: 3.11.14
 platform: ruby
 authors:
 - Tina4 Team
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-04-16 00:00:00.000000000 Z
+date: 2026-04-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -179,33 +179,33 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.8'
 - !ruby/object:Gem::Dependency
-  name: listen
+  name: sqlite3
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
-  type: :development
+        version: '2.0'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
-  name: sqlite3
+  name: listen
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '3.8'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '3.8'
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement