tina4ruby 3.13.137 → 3.13.138

data/lib/tina4/gallery/auth/src/routes/api/gallery_auth.rb

@@ -1,3 +1,9 @@
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 # Gallery: Auth — JWT login with a visual demo page.
 
 Tina4::Router.get("/gallery/auth") do |request, response|

data/lib/tina4/gallery/database/src/routes/api/gallery_db.rb

@@ -1,3 +1,9 @@
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 # Gallery: Database — raw SQL query demo.
 
 Tina4::Router.get("/api/gallery/db/tables") do |request, response|

data/lib/tina4/gallery/error-overlay/src/routes/api/gallery_crash.rb

@@ -1,3 +1,9 @@
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 # Gallery: Error Overlay — deliberately crash to demo the debug overlay.
 #
 # This route deliberately raises an error to showcase the error overlay.

data/lib/tina4/gallery/orm/src/routes/api/gallery_products.rb

@@ -1,3 +1,9 @@
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 # Gallery: ORM — Product CRUD endpoints.
 
 Tina4::Router.get("/api/gallery/products") do |request, response|

data/lib/tina4/gallery/queue/src/routes/api/gallery_queue.rb

@@ -1,3 +1,9 @@
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 # Gallery: Queue — interactive queue demo with visual web UI.
 #
 # Uses a SQLite database directly for the demo queue table,

data/lib/tina4/gallery/rest-api/src/routes/api/gallery_hello.rb

@@ -1,3 +1,9 @@
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 # Gallery: REST API — simple JSON endpoints.
 
 Tina4::Router.get("/api/gallery/hello") do |request, response|

data/lib/tina4/gallery/templates/src/routes/gallery_page.rb

@@ -1,3 +1,9 @@
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 # Gallery: Templates — render an HTML page with dynamic data via template.
 
 Tina4::Router.get "/gallery/page", template: "gallery_page.twig" do |request, response|

data/lib/tina4/graph.rb

@@ -1,4 +1,10 @@
 # frozen_string_literal: true
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 
 require "uri"
 

data/lib/tina4/graphql.rb

@@ -1,6 +1,13 @@
 # frozen_string_literal: false
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 
 require "json"
+require_relative "parse_json"
 
 module Tina4
   # Lightweight, zero-dependency GraphQL implementation for Tina4 Ruby.
@@ -140,9 +147,15 @@ module Tina4
       # ── Queries ──
 
       # Single record: user(id: ID!): User
+      # The row an ID argument addresses, or nil. The ID is bound, never
+      # interpolated, and a non-integer ID on an integer key addresses nothing.
+      find_addressed = lambda do |raw_id|
+        pk_value = klass.respond_to?(:coerce_primary_key) ? klass.coerce_primary_key(raw_id) : raw_id
+        pk_value.nil? ? nil : klass.find_by_id(pk_value)
+      end
+
       add_query(table_lower, { pk_field => { type: "ID!" } }, type_name) do |_root, args, _ctx|
-        record = klass.find_by_id(args[pk_field])
-        record&.to_hash
+        find_addressed.call(args[pk_field])&.to_hash
       end
 
       # List: users(limit: Int, offset: Int): [User]
@@ -163,8 +176,10 @@ module Tina4
 
       # Update
       add_mutation("update#{model_name}", { pk_field => { type: "ID!" }, "input" => { type: "#{type_name}Input!" } }, type_name) do |_root, args, _ctx|
-        record = klass.find_by_id(args[pk_field])
-        return nil unless record
+        record = find_addressed.call(args[pk_field])
+        # `next`, not `return`: this block outlives from_orm, so a `return` here
+        # raised LocalJumpError (an internal error) for a non-matching id.
+        next nil unless record
         (args["input"] || {}).each { |k, v| record.send(:"#{k}=", v) if record.respond_to?(:"#{k}=") }
         record.save
         record.to_hash
@@ -172,8 +187,8 @@ module Tina4
 
       # Delete
       add_mutation("delete#{model_name}", { pk_field => { type: "ID!" } }, "Boolean") do |_root, args, _ctx|
-        record = klass.find_by_id(args[pk_field])
-        return false unless record
+        record = find_addressed.call(args[pk_field])
+        next false unless record
         record.delete
         true
       end
@@ -217,8 +232,6 @@ module Tina4
     def parse
       document = { kind: :document, definitions: [] }
       while current
-        skip(:comma)
-        break unless current
         document[:definitions] << parse_definition
       end
       document
@@ -234,8 +247,10 @@ module Tina4
       while i < src.length
         ch = src[i]
 
-        # Skip whitespace
-        if ch =~ /\s/
+        # Skip whitespace. Commas are insignificant in GraphQL (spec 2.1.7) and
+        # are skipped with it; emitting them as punctuation made every
+        # comma-separated argument or field list a parse error.
+        if ch =~ /\s/ || ch == ","
           i += 1
           next
         end
@@ -247,7 +262,7 @@ module Tina4
         end
 
         # Punctuation
-        if "{}()[]!:=@$,".include?(ch)
+        if "{}()[]!:=@$".include?(ch)
           tokens << Token.new(:punct, ch, i)
           i += 1
           next
@@ -355,10 +370,6 @@ module Tina4
       advance
     end
 
-    def skip(type, value = nil)
-      match(type, value) while current && current.type == type && (value.nil? || current.value == value)
-    end
-
     # ── Parse rules ──
 
     def parse_definition
@@ -401,8 +412,6 @@ module Tina4
       expect(:punct, "(")
       vars = []
       until current&.value == ")"
-        skip(:comma)
-        break if current&.value == ")"
         expect(:punct, "$")
         vname = expect(:name).value
         expect(:punct, ":")
@@ -433,8 +442,6 @@ module Tina4
       expect(:punct, "{")
       selections = []
       until current&.value == "}"
-        skip(:comma)
-        break if current&.value == "}"
 
         if current&.type == :spread
           selections << parse_fragment_spread
@@ -496,8 +503,6 @@ module Tina4
       expect(:punct, "(")
       args = {}
       until current&.value == ")"
-        skip(:comma)
-        break if current&.value == ")"
         arg_name = expect(:name).value
         expect(:punct, ":")
         args[arg_name] = parse_value
@@ -547,8 +552,6 @@ module Tina4
       expect(:punct, "[")
       items = []
       until current&.value == "]"
-        skip(:comma)
-        break if current&.value == "]"
         items << parse_value
       end
       expect(:punct, "]")
@@ -559,8 +562,6 @@ module Tina4
       expect(:punct, "{")
       obj = {}
       until current&.value == "}"
-        skip(:comma)
-        break if current&.value == "}"
         key = expect(:name).value
         expect(:punct, ":")
         obj[key] = parse_value
@@ -1057,7 +1058,7 @@ module Tina4
 
     # Handle an HTTP request body (JSON string)
     def handle_request(body, context: {})
-      payload = JSON.parse(body)
+      payload = Tina4.parse_json(body)
       query = payload["query"] || ""
       variables = payload["variables"] || {}
       op_name = payload["operationName"]
@@ -1094,7 +1095,7 @@ module Tina4
         query = request.query["query"]
         if query
           variables = request.query["variables"]
-          variables = JSON.parse(variables) if variables.is_a?(String) && !variables.empty?
+          variables = Tina4.parse_json(variables) if variables.is_a?(String) && !variables.empty?
           result = graphql.execute(query, variables: variables || {}, context: { request: request })
           response.json(result)
         else

data/lib/tina4/health.rb

@@ -1,4 +1,10 @@
 # frozen_string_literal: true
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 
 require "json"
 

data/lib/tina4/html_element.rb

@@ -1,4 +1,10 @@
 # frozen_string_literal: true
+# Copyright (c) 2026 Code Infinity
+# SPDX-License-Identifier: MPL-2.0
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
 
 module Tina4
   # Marker for trusted, pre-sanitised HTML that must render UNESCAPED.