tina4ruby 3.11.35 → 3.12.0

data/lib/tina4/rack_app.rb

@@ -200,7 +200,7 @@ module Tina4
         end
 
         # API_KEY bypass — matches tina4_python behavior
-        api_key = ENV["TINA4_API_KEY"] || ENV["API_KEY"]
+        api_key = ENV["TINA4_API_KEY"]
         if api_key && !api_key.empty? && token == api_key
           env["tina4.auth_payload"] = { "api_key" => true }
         elsif token
@@ -330,18 +330,28 @@ module Tina4
     end
 
     def handle_404(path)
-      # Try serving a template file (e.g. /hello -> src/templates/hello.twig or hello.html)
+      # Try serving a template file (e.g. /hello -> src/templates/pages/hello.twig)
       template_response = try_serve_template(path)
       return template_response if template_response
 
-      # Show landing page for GET "/"
-      return render_landing_page if path == "/"
+      # Show landing page for GET "/" — but ONLY in dev mode.
+      # Production never shows it, so the framework version, dev-admin link,
+      # and gallery never leak to real users. Symmetric with /__dev/* gating.
+      return render_landing_page if path == "/" && dev_mode?
 
       Tina4::Log.warning("404 Not Found: #{path}")
       body = Tina4::Template.render_error(404, { "path" => path }) rescue "404 Not Found"
       [404, { "content-type" => "text/html" }, [body]]
     end
 
+    # Honour TINA4_TEMPLATE_ROUTING=off|false|0|no|disabled as an explicit
+    # kill switch. Default: enabled. Drop a file in src/templates/pages/ and
+    # it serves at the matching URL — the zero-config Tina4 convention.
+    def template_auto_routing_enabled?
+      val = ENV.fetch("TINA4_TEMPLATE_ROUTING", "on").to_s.strip.downcase
+      !%w[off false 0 no disabled].include?(val)
+    end
+
     def should_show_landing_page?
       # Check if any index template exists in src/templates/
       templates_dir = File.join(@root_dir, "src", "templates")
@@ -357,19 +367,39 @@ module Tina4
       [200, { "content-type" => "text/html" }, [body]]
     end
 
-    # Resolve a URL path to a template file.
+    # Resolve a URL path to a template file in src/templates/pages/.
+    #
+    # Only files inside ``src/templates/pages/`` auto-route from a URL.
+    # Anything in ``src/templates/`` outside ``pages/`` (partials, layouts,
+    # base.twig, errors, components) is never served standalone — those
+    # remain renderable via {% include %} / {% extends %} / explicit render
+    # calls but never auto-serve from a URL.
+    #
+    # Files starting with ``_`` (e.g. pages/_helper.twig) are always skipped
+    # even within pages/ — Hugo/Jekyll convention for private partials.
+    #
     # Dev mode: checks filesystem every time for live changes.
     # Production: uses a cached lookup built once at startup.
+    #
+    # The whole feature can be turned off with ``TINA4_TEMPLATE_ROUTING=off``.
     def resolve_template(path)
+      return nil unless template_auto_routing_enabled?
+
       clean_path = path.sub(%r{^/}, "")
       clean_path = "index" if clean_path.empty?
+
+      # Skip underscore-prefixed segments — private files even within pages/.
+      return nil if clean_path.split("/").any? { |seg| seg.start_with?("_") }
+
       is_dev = %w[true 1 yes].include?(ENV.fetch("TINA4_DEBUG", "false").downcase)
 
       if is_dev
-        templates_dir = File.join(@root_dir, "src", "templates")
+        pages_dir = File.join(@root_dir, "src", "templates", "pages")
         %w[.twig .html].each do |ext|
-          candidate = clean_path + ext
-          return candidate if File.file?(File.join(templates_dir, candidate))
+          candidate_inside_pages = clean_path + ext
+          if File.file?(File.join(pages_dir, candidate_inside_pages))
+            return File.join("pages", candidate_inside_pages)
+          end
         end
         return nil
       end
@@ -379,15 +409,22 @@ module Tina4
       @template_cache[clean_path]
     end
 
+    # Scan src/templates/pages/ once and build url_path -> template_file lookup.
+    # Only files under pages/ are eligible — partials, layouts, base.twig,
+    # errors etc. remain renderable via explicit render calls but never
+    # auto-serve from a URL.
     def build_template_cache
       cache = {}
-      templates_dir = File.join(@root_dir, "src", "templates")
-      return cache unless File.directory?(templates_dir)
-
-      Dir.glob(File.join(templates_dir, "**", "*.{twig,html}")).each do |f|
-        rel = f.sub(templates_dir + File::SEPARATOR, "").tr("\\", "/")
-        url_path = rel.sub(/\.(twig|html)$/, "")
-        cache[url_path] ||= rel
+      pages_dir = File.join(@root_dir, "src", "templates", "pages")
+      return cache unless File.directory?(pages_dir)
+
+      Dir.glob(File.join(pages_dir, "**", "*.{twig,html}")).each do |f|
+        rel_inside_pages = f.sub(pages_dir + File::SEPARATOR, "").tr("\\", "/")
+        # Skip private files even within pages/ (e.g. pages/_helper.twig)
+        next if rel_inside_pages.split("/").any? { |seg| seg.start_with?("_") }
+        url_path = rel_inside_pages.sub(/\.(twig|html)$/, "")
+        rel_from_templates = "pages/#{rel_inside_pages}"
+        cache[url_path] ||= rel_from_templates
       end
       cache
     end
@@ -714,10 +751,55 @@ module Tina4
             <span style="color:#ffeb3b;">req:#{request_id}</span>
             <span style="color:#90caf9;">#{route_count} routes</span>
             <span style="color:#888;">Ruby #{RUBY_VERSION}</span>
-            <a href="#" onclick="(function(e){e.preventDefault();var p=document.getElementById('tina4-dev-panel');if(p){p.style.display=p.style.display==='none'?'block':'none';return;}var c=document.createElement('div');c.id='tina4-dev-panel';c.style.cssText='position:fixed;top:3rem;left:0;right:0;bottom:2rem;z-index:99998;transition:all 0.2s';var f=document.createElement('iframe');f.src='/__dev';f.style.cssText='width:100%;height:100%;border:1px solid #CC342D;border-radius:0.5rem;box-shadow:0 8px 32px rgba(0,0,0,0.5);background:#0f172a';c.appendChild(f);document.body.appendChild(c);})(event)" style="color:#ef9a9a;margin-left:auto;text-decoration:none;cursor:pointer;">Dashboard &#8599;</a>
+            <a href="#" onclick="window.__tina4ToggleOverlay(event)" style="color:#ef9a9a;margin-left:auto;text-decoration:none;cursor:pointer;">Dashboard &#8599;</a>
             <span onclick="this.parentElement.style.display='none'" style="cursor:pointer;color:#888;margin-left:8px;">&#10005;</span>
         </div>
         <script>
+        // Overlay open/toggle helper + auto-restore. Persist the dev-admin
+        // iframe's open/closed state across parent reloads so saving a
+        // file doesn't lose the user's dev-admin context. Cross-framework
+        // parity with PHP / Python / Node — same localStorage key.
+        (function(){
+            var STATE_KEY = 'tina4_dev_overlay_open';
+            function buildOverlay() {
+                var c = document.createElement('div');
+                c.id = 'tina4-dev-panel';
+                c.style.cssText = 'position:fixed;top:3rem;left:0;right:0;bottom:2rem;z-index:99998;transition:all 0.2s';
+                var f = document.createElement('iframe');
+                f.src = '/__dev';
+                f.style.cssText = 'width:100%;height:100%;border:1px solid #CC342D;border-radius:0.5rem;box-shadow:0 8px 32px rgba(0,0,0,0.5);background:#0f172a';
+                c.appendChild(f);
+                document.body.appendChild(c);
+                return c;
+            }
+            window.__tina4ToggleOverlay = function(e) {
+                if (e) e.preventDefault();
+                var p = document.getElementById('tina4-dev-panel');
+                if (p) {
+                    var hide = p.style.display !== 'none';
+                    p.style.display = hide ? 'none' : 'block';
+                    try { localStorage.setItem(STATE_KEY, hide ? '0' : '1'); } catch (_) {}
+                    return;
+                }
+                buildOverlay();
+                try { localStorage.setItem(STATE_KEY, '1'); } catch (_) {}
+            };
+            function restoreIfOpen() {
+                try {
+                    if (location.pathname.indexOf('/__dev') === 0) return;
+                    if (localStorage.getItem(STATE_KEY) === '1' && !document.getElementById('tina4-dev-panel')) {
+                        buildOverlay();
+                    }
+                } catch (_) {}
+            }
+            if (document.readyState === 'loading') {
+                document.addEventListener('DOMContentLoaded', restoreIfOpen);
+            } else {
+                restoreIfOpen();
+            }
+        })();
+        </script>
+        <script>
         function tina4VersionModal(){
             var m=document.getElementById('tina4-ver-modal');
             if(m.style.display==='block'){m.style.display='none';return;}

data/lib/tina4/response.rb

@@ -151,6 +151,9 @@ module Tina4
       self
     end
 
+    # Render a Frond/Twig template file with data and return self. Tries
+    # the user template directory first, falling back to the framework's
+    # built-in templates. Sets the response body to the rendered HTML.
     def render(template_path, data = {}, status: 200, template_dir: nil)
       @status_code = status
       @headers["content-type"] = HTML_CONTENT_TYPE

data/lib/tina4/session.rb

@@ -16,7 +16,7 @@ module Tina4
 
     def initialize(env, options = {})
       @options = DEFAULT_OPTIONS.merge(options)
-      @options[:secret] ||= ENV["SECRET"] || "tina4-default-secret"
+      @options[:secret] ||= ENV["TINA4_SECRET"] || "tina4-default-secret"
       @handler = create_handler
       @id = extract_session_id(env) || SecureRandom.hex(32)
       @data = load_session

data/lib/tina4/session_handlers/database_handler.rb

@@ -17,7 +17,7 @@ module Tina4
 
       def initialize(options = {})
         @ttl = options[:ttl] || 86400
-        @db = options[:db] || Tina4::Database.new(ENV["DATABASE_URL"])
+        @db = options[:db] || Tina4::Database.new(ENV["TINA4_DATABASE_URL"])
         ensure_table
       end
 

data/lib/tina4/shutdown.rb

@@ -53,6 +53,16 @@ module Tina4
           end
         end
 
+        # Stop background tasks
+        if defined?(Tina4::Background)
+          begin
+            Tina4::Background.stop_all
+            Tina4::Log.info("Background tasks stopped")
+          rescue => e
+            Tina4::Log.error("Error stopping background tasks: #{e.message}")
+          end
+        end
+
         # Close database connections
         if Tina4.database
           begin

data/lib/tina4/swagger.rb

@@ -19,9 +19,9 @@ module Tina4
         {
           "openapi" => "3.0.3",
           "info" => {
-            "title" => ENV["SWAGGER_TITLE"] || ENV["PROJECT_NAME"] || "Tina4 API",
-            "version" => ENV["VERSION"] || Tina4::VERSION,
-            "description" => "Auto-generated API documentation"
+            "title" => ENV["TINA4_SWAGGER_TITLE"] || ENV["PROJECT_NAME"] || "Tina4 API",
+            "version" => ENV["TINA4_SWAGGER_VERSION"] || Tina4::VERSION,
+            "description" => ENV["TINA4_SWAGGER_DESCRIPTION"] || "Auto-generated API documentation"
           },
           "servers" => [
             { "url" => "/" }

data/lib/tina4/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Tina4
-  VERSION = "3.11.35"
+  VERSION = "3.12.0"
 end

data/lib/tina4/webserver.rb

@@ -54,6 +54,9 @@ module Tina4
     end
 
     def start
+      # Refuse to boot with v3.11 / v2 era un-prefixed env vars set.
+      Tina4.check_legacy_env_vars!
+
       is_managed = ARGV.include?('--managed')
       unless is_managed || ENV['TINA4_OVERRIDE_CLIENT'] == 'true'
         puts

data/lib/tina4.rb

@@ -35,11 +35,14 @@ require_relative "tina4/cors"
 require_relative "tina4/rate_limiter"
 require_relative "tina4/health"
 require_relative "tina4/shutdown"
+require_relative "tina4/background"
 require_relative "tina4/localization"
 require_relative "tina4/container"
 require_relative "tina4/queue"
 require_relative "tina4/service_runner"
 require_relative "tina4/events"
+require_relative "tina4/plan"
+require_relative "tina4/project_index"
 require_relative "tina4/dev_admin"
 require_relative "tina4/messenger"
 require_relative "tina4/dev_mailbox"
@@ -50,6 +53,7 @@ require_relative "tina4/response_cache"
 require_relative "tina4/html_element"
 require_relative "tina4/error_overlay"
 require_relative "tina4/test_client"
+require_relative "tina4/docs"
 require_relative "tina4/mcp"
 
 module Tina4
@@ -383,6 +387,16 @@ module Tina4
       Tina4::ServiceRunner.register(name, nil, options, &block)
     end
 
+    # Register a periodic background task.
+    # Mirrors Python's tina4_python.core.server.background(fn, interval) and
+    # PHP's $app->background($callback, $interval).
+    #
+    #   Tina4.background(interval: 5.0) { drain_queue }
+    #   Tina4.background(method(:health_check), interval: 30.0)
+    def background(callback = nil, interval: 1.0, &block)
+      Tina4::Background.register(callback, interval: interval, &block)
+    end
+
     # DI container shortcuts
     def register(name, instance = nil, &block)
       Tina4::Container.register(name, instance, &block)
@@ -426,7 +440,7 @@ module Tina4
     end
 
     def setup_database
-      db_url = ENV["DATABASE_URL"] || ENV["DB_URL"]
+      db_url = ENV["TINA4_DATABASE_URL"]
       if db_url && !db_url.empty?
         begin
           @database = Tina4::Database.new(db_url)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: tina4ruby
 version: !ruby/object:Gem::Version
-  version: 3.11.35
+  version: 3.12.0
 platform: ruby
 authors:
 - Tina4 Team
@@ -281,6 +281,7 @@ files:
 - lib/tina4/api.rb
 - lib/tina4/auth.rb
 - lib/tina4/auto_crud.rb
+- lib/tina4/background.rb
 - lib/tina4/cache.rb
 - lib/tina4/cli.rb
 - lib/tina4/constants.rb
@@ -294,6 +295,7 @@ files:
 - lib/tina4/dev.rb
 - lib/tina4/dev_admin.rb
 - lib/tina4/dev_mailbox.rb
+- lib/tina4/docs.rb
 - lib/tina4/drivers/firebird_driver.rb
 - lib/tina4/drivers/mongodb_driver.rb
 - lib/tina4/drivers/mssql_driver.rb
@@ -333,11 +335,14 @@ files:
 - lib/tina4/middleware.rb
 - lib/tina4/migration.rb
 - lib/tina4/orm.rb
+- lib/tina4/plan.rb
+- lib/tina4/project_index.rb
 - lib/tina4/public/css/tina4.css
 - lib/tina4/public/css/tina4.min.css
 - lib/tina4/public/favicon.ico
 - lib/tina4/public/images/logo.svg
 - lib/tina4/public/images/tina4-logo-icon.webp
+- lib/tina4/public/js/frond.js
 - lib/tina4/public/js/frond.min.js
 - lib/tina4/public/js/tina4-dev-admin.js
 - lib/tina4/public/js/tina4-dev-admin.min.js