tina4ruby 3.13.37 → 3.13.39

data/lib/tina4.rb

@@ -1,13 +1,5 @@
 # frozen_string_literal: true
 
-# ── Fast JSON: use oj if available, fall back to stdlib json ──────────
-begin
-  require "oj"
-  Oj.default_options = { mode: :compat, symbol_keys: false }
-rescue LoadError
-  # oj not installed — stdlib json is fine
-end
-
 # ── Core (always loaded) ──────────────────────────────────────────────
 require_relative "tina4/version"
 require_relative "tina4/constants"
@@ -108,6 +100,9 @@ module Tina4
   autoload :WebSocket,           File.expand_path("tina4/websocket", __dir__)
   autoload :WebSocketConnection, File.expand_path("tina4/websocket", __dir__)
   autoload :DevReload,           File.expand_path("tina4/websocket", __dir__)
+  autoload :WebSocketBackplane,  File.expand_path("tina4/websocket_backplane", __dir__)
+  autoload :RedisBackplane,      File.expand_path("tina4/websocket_backplane", __dir__)
+  autoload :NATSBackplane,       File.expand_path("tina4/websocket_backplane", __dir__)
   autoload :Testing,             File.expand_path("tina4/testing", __dir__)
   autoload :ScssCompiler,        File.expand_path("tina4/scss_compiler", __dir__)
   autoload :FakeData,            File.expand_path("tina4/seeder", __dir__)
@@ -188,13 +183,20 @@ module Tina4
       # Print banner
       print_banner
 
-      # Load environment
+      # Load environment. Precedence: real-env > .env.local > .env
+      # (.env.local loads first, both first-wins, so a real env var always wins).
       Tina4::Env.load_env(root_dir)
 
       # Setup debug logging
       Tina4::Log.configure(root_dir)
       Tina4::Log.info("Tina4 Ruby v#{VERSION} initializing...")
 
+      # Fail-safe dev secret: in dev (and NOT CI/prod) mint a per-machine
+      # random TINA4_SECRET into gitignored .env.local if it is blank; in
+      # CI/prod with a blank secret, emit the actionable warning. Runs once at
+      # boot after env load, before any auth use. Never crashes boot.
+      Tina4::Auth.ensure_dev_secret(root_dir)
+
       # Setup auth keys
       Tina4::Auth.setup(root_dir)
 
@@ -210,6 +212,10 @@ module Tina4
       # Auto-discover routes
       auto_discover(root_dir)
 
+      # Apply pending DB migrations on startup (non-breaking — see method doc).
+      # Runs AFTER route discovery / DB bind, BEFORE serving.
+      auto_migrate_on_startup!(root_dir)
+
       Tina4::Log.info("Tina4 initialized successfully")
     end
 
@@ -381,9 +387,17 @@ module Tina4
       Tina4::Router.group(prefix, auth_handler: auth, &block)
     end
 
-    # WebSocket route registration
-    def websocket(path, &block)
-      Tina4::Router.websocket(path, &block)
+    # WebSocket route registration. PUBLIC by default (mirrors GET). Pass
+    # secure: true OR chain .secure on the returned route to require a valid JWT
+    # on the upgrade.
+    def websocket(path, secure: false, &block)
+      Tina4::Router.websocket(path, secure: secure, &block)
+    end
+
+    # Register a SECURED WebSocket route — declarative sibling of
+    # Tina4.websocket(...).secure, mirroring secure_get/secure_post.
+    def secure_websocket(path, &block)
+      Tina4::Router.secure_websocket(path, &block)
     end
 
     # Middleware hooks
@@ -438,8 +452,73 @@ module Tina4
       Tina4::Container.get(name)
     end
 
+    # Apply pending DB migrations on startup — NON-BREAKING. Public so it can be
+    # called explicitly (and unit-tested) as `Tina4.auto_migrate_on_startup!`.
+    #
+    # When a migrations/ folder exists (with at least one .sql file) and
+    # TINA4_AUTO_MIGRATE is not disabled, pending migrations are applied during
+    # boot so the schema is current with no manual `tina4ruby migrate` step. A
+    # failure here is logged LOUD and the service STILL starts — a bad migration
+    # must never take the backend down. (The explicit `tina4ruby migrate` CLI
+    # stays fail-fast so CI still gets a non-zero exit.)
+    #
+    # Disable with TINA4_AUTO_MIGRATE=false (also 0/no/off) — e.g. multi-instance
+    # production that migrates as a separate deploy step (concurrent first-apply
+    # can race).
+    def auto_migrate_on_startup!(root_dir = Dir.pwd)
+      # Gate 1: a migrations folder with at least one .sql file must exist.
+      migrations_dir = resolve_startup_migrations_dir(root_dir)
+      return unless migrations_dir
+
+      # Gate 2: TINA4_AUTO_MIGRATE not disabled (default "true"; false/0/no/off off).
+      unless Tina4::Env.is_truthy(ENV.fetch("TINA4_AUTO_MIGRATE", "true"))
+        Tina4::Log.debug("TINA4_AUTO_MIGRATE is off — skipping startup migrations")
+        return
+      end
+
+      # Gate 3: a database must be resolvable.
+      db = Tina4.database
+      unless db
+        Tina4::Log.debug("Startup migrations skipped (no database configured)")
+        return
+      end
+
+      begin
+        migration = Tina4::Migration.new(db, migrations_dir: migrations_dir)
+        results = migration.run
+        applied = Array(results).count { |r| r[:status] == "success" }
+        Tina4::Log.info("Applied #{applied} pending migration(s) on startup") if applied.positive?
+        # A migration that records as "failed" surfaces in `run`'s results but
+        # does NOT raise from the runner; treat a recorded failure as loud-log too.
+        if Array(results).any? { |r| r[:status] == "failed" }
+          Tina4::Log.error(
+            "Startup auto-migration failed — the service is starting anyway. " \
+            "Run `tina4ruby migrate` to retry."
+          )
+        end
+      rescue => e
+        # NON-BREAKING: never re-raise out of the startup hook.
+        Tina4::Log.error(
+          "Startup auto-migration failed: #{e.message} — the service is starting " \
+          "anyway. Run `tina4ruby migrate` to retry."
+        )
+      end
+    end
+
     private
 
+    # Resolve the migrations directory for startup auto-migration, returning it
+    # only when it exists AND contains at least one .sql file. Prefers
+    # src/migrations, falls back to migrations/ (mirrors Migration#resolve_migrations_dir).
+    def resolve_startup_migrations_dir(root_dir)
+      %w[src/migrations migrations].each do |rel|
+        dir = File.join(root_dir, rel)
+        next unless Dir.exist?(dir)
+        return dir unless Dir.glob(File.join(dir, "*.sql")).empty?
+      end
+      nil
+    end
+
     # Resolve auth option for route registration
     # :default => use bearer auth (default for POST/PUT/PATCH/DELETE)
     # false    => no auth (public route)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tina4ruby
 version: !ruby/object:Gem::Version
-  version: 3.13.37
+  version: 3.13.39
 platform: ruby
 authors:
 - Tina4 Team
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-06-17 00:00:00.000000000 Z
+date: 2026-06-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -52,20 +52,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '6.0'
-- !ruby/object:Gem::Dependency
-  name: dotenv
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: jwt
   requirement: !ruby/object:Gem::Requirement
@@ -80,20 +66,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.7'
-- !ruby/object:Gem::Dependency
-  name: bcrypt
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.1'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.1'
 - !ruby/object:Gem::Dependency
   name: net-smtp
   requirement: !ruby/object:Gem::Requirement
@@ -136,20 +108,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.7'
-- !ruby/object:Gem::Dependency
-  name: oj
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.16'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.16'
 - !ruby/object:Gem::Dependency
   name: rexml
   requirement: !ruby/object:Gem::Requirement
@@ -277,8 +235,9 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.50'
 description: 'TINA4: The Intelligent Native Application 4ramework for Ruby — Simple.
-  Fast. Human. Built for AI. Built for you. 54 built-in features, zero dependencies.
-  Full parity with Python, PHP, and Node.js.'
+  Fast. Human. Built for AI. Built for you. 54 built-in features, minimal dependencies
+  (Rack-based; the runtime gems are production-deployment essentials, not framework
+  bloat). Full parity with Python, PHP, and Node.js.'
 email:
 - info@tina4.com
 executables:
@@ -460,5 +419,5 @@ requirements: []
 rubygems_version: 3.4.19
 signing_key:
 specification_version: 4
-summary: Tina4 for Ruby — 54 built-in features, zero dependencies
+summary: Tina4 for Ruby — 54 built-in features, minimal dependencies
 test_files: []