@brust/core 2.0.0-alpha.35 → 2.0.0-alpha.36

package/README.md

@@ -131,7 +131,8 @@ A loader or job call that has not settled within `BRUST_CALL_TIMEOUT_MS` answers
 slot stays claimed until the call settles (the late result is discarded), so a stuck call costs one
 slot, never a frozen worker. Waiting for a free slot is the separate 503 "all workers busy".
 `GET /_brust/cache/stats` reports L1/job cache counters plus `loader_calls` / `job_calls` /
-`timed_out_calls`.
+`timed_out_calls`. It is off by default (404): set `[server] stats` to `"public"` or `"token"` (`stats_token = "env:NAME"`)
+to read it; `brust dev` serves it.
 
 ## Worker wire (contract 7, `crates/brust-server/src/protocol.rs`)
 

package/native/index.d.ts

@@ -263,6 +263,13 @@ export interface StartOptions {
   l2?: NapiL2Options
   /** `brust dev` only (L14): a request carrying this token in `x-brust-dev-token` is traced. Absent in production. */
   devToken?: string
+  /** F507: who may read `/_brust/cache/stats`: `"off"` (the default when absent), `"public"` or `"token"`. */
+  stats?: string
+  /**
+   * F507: the secret `stats = "token"` compares `Authorization: Bearer` with (resolved from its env reference by the
+   * JS side); never logged. Boot error `stats: …` for a mode and token that do not go together.
+   */
+  statsToken?: string
 }
 
 /**

package/native/index.js

@@ -89,8 +89,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-android-arm64')
         const bindingPackageVersion = require('@brust/native-android-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -105,8 +105,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-android-arm-eabi')
         const bindingPackageVersion = require('@brust/native-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -126,8 +126,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-win32-x64-gnu')
           const bindingPackageVersion = require('@brust/native-win32-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -142,8 +142,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-win32-x64-msvc')
           const bindingPackageVersion = require('@brust/native-win32-x64-msvc/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -159,8 +159,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-win32-ia32-msvc')
         const bindingPackageVersion = require('@brust/native-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -175,8 +175,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-win32-arm64-msvc')
         const bindingPackageVersion = require('@brust/native-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -194,8 +194,8 @@ function requireNative() {
     try {
       const binding = require('@brust/native-darwin-universal')
       const bindingPackageVersion = require('@brust/native-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -210,8 +210,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-darwin-x64')
         const bindingPackageVersion = require('@brust/native-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -226,8 +226,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-darwin-arm64')
         const bindingPackageVersion = require('@brust/native-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -246,8 +246,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-freebsd-x64')
         const bindingPackageVersion = require('@brust/native-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -262,8 +262,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-freebsd-arm64')
         const bindingPackageVersion = require('@brust/native-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -283,8 +283,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-x64-musl')
           const bindingPackageVersion = require('@brust/native-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -299,8 +299,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-x64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -317,8 +317,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm64-musl')
           const bindingPackageVersion = require('@brust/native-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -333,8 +333,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -351,8 +351,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm-musleabihf')
           const bindingPackageVersion = require('@brust/native-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -367,8 +367,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-arm-gnueabihf')
           const bindingPackageVersion = require('@brust/native-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -385,8 +385,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-loong64-musl')
           const bindingPackageVersion = require('@brust/native-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -401,8 +401,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-loong64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -419,8 +419,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-riscv64-musl')
           const bindingPackageVersion = require('@brust/native-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -435,8 +435,8 @@ function requireNative() {
         try {
           const binding = require('@brust/native-linux-riscv64-gnu')
           const bindingPackageVersion = require('@brust/native-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -452,8 +452,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-linux-ppc64-gnu')
         const bindingPackageVersion = require('@brust/native-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -468,8 +468,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-linux-s390x-gnu')
         const bindingPackageVersion = require('@brust/native-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -488,8 +488,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-arm64')
         const bindingPackageVersion = require('@brust/native-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -504,8 +504,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-x64')
         const bindingPackageVersion = require('@brust/native-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -520,8 +520,8 @@ function requireNative() {
       try {
         const binding = require('@brust/native-openharmony-arm')
         const bindingPackageVersion = require('@brust/native-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '2.0.0-alpha.35' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '2.0.0-alpha.36' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -661,8 +661,8 @@ if (!nativeBinding || forceWasi) {
       if (!candidateFailed) {
         if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
           const bindingPackageVersion = require('@brust/native-wasm32-wasi/package.json').version
-          if (bindingPackageVersion !== '2.0.0-alpha.35') {
-            throw new Error(`WASI binding package version mismatch, expected 2.0.0-alpha.35 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '2.0.0-alpha.36') {
+            throw new Error(`WASI binding package version mismatch, expected 2.0.0-alpha.36 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
         }
         wasiBinding = require('@brust/native-wasm32-wasi')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brust/core",
-  "version": "2.0.0-alpha.35",
+  "version": "2.0.0-alpha.36",
   "description": "brust v2 — React components compiled to Rust-rendered templates",
   "license": "MIT",
   "homepage": "https://brust.dev",
@@ -57,7 +57,7 @@
     ]
   },
   "dependencies": {
-    "@brust/runtime-dom": "2.0.0-alpha.35",
+    "@brust/runtime-dom": "2.0.0-alpha.36",
     "tsconfig-paths": "4.2.0"
   },
   "peerDependencies": {
@@ -101,13 +101,13 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "@brust/native-darwin-x64": "2.0.0-alpha.35",
-    "@brust/native-darwin-arm64": "2.0.0-alpha.35",
-    "@brust/native-linux-x64-gnu": "2.0.0-alpha.35",
-    "@brust/native-linux-arm64-gnu": "2.0.0-alpha.35",
-    "@brust/native-linux-x64-musl": "2.0.0-alpha.35",
-    "@brust/native-linux-arm64-musl": "2.0.0-alpha.35",
-    "@brust/native-win32-x64-msvc": "2.0.0-alpha.35",
-    "@brust/core-cf": "2.0.0-alpha.35"
+    "@brust/native-darwin-x64": "2.0.0-alpha.36",
+    "@brust/native-darwin-arm64": "2.0.0-alpha.36",
+    "@brust/native-linux-x64-gnu": "2.0.0-alpha.36",
+    "@brust/native-linux-arm64-gnu": "2.0.0-alpha.36",
+    "@brust/native-linux-x64-musl": "2.0.0-alpha.36",
+    "@brust/native-linux-arm64-musl": "2.0.0-alpha.36",
+    "@brust/native-win32-x64-msvc": "2.0.0-alpha.36",
+    "@brust/core-cf": "2.0.0-alpha.36"
   }
 }

package/src/build/bundle.ts

@@ -54,11 +54,32 @@ export interface BrowserCtx {
   clientDir?: string
   /** F480: load-time writers shipped into an island chunk (F230), by real path: why each is there. A server-only import
    * reached through one names that chain in `server-only-in-client`. */
-  loadWriters?: Map<string, string>
+  loadWriters?: Map<string, LoadWriter>
   /** F495 `[server] base_path`: every `/_brust/…` URL a bundle names carries it (`/portal/_brust/…`); absent or `''` = the root. */
   basePath?: string
 }
 
+/** F480/F481: a load writer shipped into island chunks (F230): its path, every island whose chunk carries it, and the modules it is judged to write. */
+export interface LoadWriter {
+  rel: string
+  islands: string[]
+  writes: string[]
+}
+
+/** F481: `a, b, c and 2 more`: at most `cap` names, in sorted order, then the rest as a count. */
+export function namedCapped(names: Iterable<string>, cap = 3): string {
+  const all = [...new Set(names)].sort()
+  return all.length <= cap ? all.join(', ') : `${all.slice(0, cap).join(', ')} and ${all.length - cap} more`
+}
+
+/** The sentence a server-only refusal carries for the load writers it reached: every writer and every island, capped. */
+export function loadWriterReason(writers: LoadWriter[]): string {
+  const one = (w: LoadWriter) => `${w.rel} is loaded into the React ${w.islands.length > 1 ? 'islands' : 'island'} ${namedCapped(w.islands)} because it is judged to write ${namedCapped(w.writes, 99)} when it loads: F230 load writes`
+  const sorted = [...writers].sort((a, b) => (a.rel < b.rel ? -1 : a.rel > b.rel ? 1 : 0))
+  const shown = sorted.slice(0, 3).map(one).join('; ')
+  return sorted.length > 3 ? `${shown}; and ${sorted.length - 3} more load writers` : shown
+}
+
 /** F495: brust's own URL prefix for a build, `/_brust` or `<base>/_brust`. */
 export const brustRoot = (ctx: { basePath?: string }): string => `${ctx.basePath ?? ''}/_brust`
 
@@ -186,9 +207,9 @@ function isServerOnly(spec: string, importer: string, ctx: BrowserCtx): boolean
  * offending import is stubbed so the bundler gets as far as it can; `browserBuild` then throws
  * `server-only-in-client` naming every `<importer> imports <spec>`. */
 function serverOnlyPlugin(ctx: BrowserCtx, violations: string[]): BunPlugin {
-  const writers = ctx.loadWriters ?? new Map<string, string>()
-  // F480: who first imported each file (real paths), kept only while a load writer ships, to name the writer chain.
-  const importerOf = new Map<string, string>()
+  const writers = ctx.loadWriters ?? new Map<string, LoadWriter>()
+  // F480/F481: who imports each file (real paths; every importer, not the first), kept only while a load writer ships, to name the writer chain.
+  const importersOf = new Map<string, Set<string>>()
   const real = (f: string) => {
     try {
       return realpathSync(f)
@@ -200,17 +221,28 @@ function serverOnlyPlugin(ctx: BrowserCtx, violations: string[]): BunPlugin {
     const from = real(ctx.sourceOf.get(importer) ?? importer)
     try {
       const file = real(isAbsolute(spec) ? spec : Bun.resolveSync(spec, dirname(from)))
-      if (!importerOf.has(file)) importerOf.set(file, from)
+      let set = importersOf.get(file)
+      if (!set) importersOf.set(file, (set = new Set()))
+      set.add(from)
     } catch {}
   }
+  /** Every load writer a module is reached through (a walk up all its importers, stopping at a writer), as the refusal's reason. */
   const writerChain = (importer: string): string => {
     const seen = new Set<string>()
-    for (let f: string | undefined = real(ctx.sourceOf.get(importer) ?? importer); f !== undefined && !seen.has(f); f = importerOf.get(f)) {
+    const found: LoadWriter[] = []
+    const stack = [real(ctx.sourceOf.get(importer) ?? importer)]
+    while (stack.length > 0) {
+      const f = stack.pop()!
+      if (seen.has(f)) continue
       seen.add(f)
-      const why = writers.get(f)
-      if (why !== undefined) return ` (${why})`
+      const w = writers.get(f)
+      if (w !== undefined) {
+        found.push(w)
+        continue
+      }
+      stack.push(...(importersOf.get(f) ?? []))
     }
-    return ''
+    return found.length > 0 ? ` (${loadWriterReason(found)})` : ''
   }
   return {
     name: 'brust-server-only',

package/src/build/cf-workerd.ts

@@ -0,0 +1,63 @@
+// F482: the newest `compatibility_date` the app's installed workerd runs. `wrangler dev` (and so `brust dev --target
+// cloudflare`) refuses a date newer than that, while the default date is the @brust/core-cf build date, which can be newer.
+// workerd's npm package carries its own answer: `lib/main.js` exports `compatibilityDate` (the date part of its version,
+// `1.YYYYMMDD.n`). Read statically (the package is never imported).
+import { existsSync, readFileSync, realpathSync, statSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+
+export interface WorkerdDate {
+  /** `YYYY-MM-DD`: the newest compatibility date this workerd supports. */
+  date: string
+  version: string
+  /** The package directory it was read from. */
+  dir: string
+}
+
+/** The directory of package `name` as Node resolves it from `from`: the nearest `node_modules/<name>` up the tree
+ * (package managers that nest, like pnpm, keep a package's own dependencies beside its real directory). */
+function findPackage(name: string, from: string): string | null {
+  for (let dir = from; ; dir = dirname(dir)) {
+    const p = join(dir, 'node_modules', name)
+    if (existsSync(join(p, 'package.json'))) return realpathSync(p)
+    if (dirname(dir) === dir) return null
+  }
+}
+
+const readJson = (file: string): { version?: unknown } | null => {
+  try {
+    return JSON.parse(readFileSync(file, 'utf8')) as { version?: unknown }
+  } catch {
+    return null
+  }
+}
+
+/** The compatibility date of the workerd in package directory `dir`, or null when it cannot be told. */
+function dateOf(dir: string): WorkerdDate | null {
+  const version = String(readJson(join(dir, 'package.json'))?.version ?? '')
+  let main = ''
+  try {
+    const f = join(dir, 'lib', 'main.js')
+    if (statSync(f).isFile()) main = readFileSync(f, 'utf8')
+  } catch {}
+  const exported = /\bcompatibilityDate\s*=\s*"(\d{4}-\d{2}-\d{2})"/.exec(main)?.[1]
+  const v = /^1\.(\d{4})(\d{2})(\d{2})\./.exec(version)
+  const date = exported ?? (v ? `${v[1]}-${v[2]}-${v[3]}` : undefined)
+  return date ? { date, version, dir } : null
+}
+
+/** The workerd the app's wrangler runs: wrangler → miniflare → workerd, each resolved from the real directory of the one
+ * before it (so a nested install is the right copy); else a `workerd` the app resolves itself; else null. */
+export function installedWorkerd(appRoot: string): WorkerdDate | null {
+  let from = appRoot
+  for (const name of ['wrangler', 'miniflare']) {
+    const dir = findPackage(name, from)
+    if (!dir) {
+      from = ''
+      break
+    }
+    from = dir
+  }
+  const viaWrangler = from ? findPackage('workerd', from) : null
+  const dir = viaWrangler ?? findPackage('workerd', appRoot)
+  return dir ? dateOf(dir) : null
+}

package/src/build/cloudflare.ts

@@ -14,6 +14,7 @@ import { type CfConfigJson, cfEntrySource } from './cf-entry'
 import { type CoreCf, resolveCoreCf } from './cf-core'
 import { type CacheNeed, mergeWrangler, readUserWrangler, renderWrangler, type UserWrangler, verifyCacheBindings } from './cf-wrangler'
 import { type CloudflareBuildConfig, CF_MIN_COMPAT_DATE } from './config'
+import { installedWorkerd } from './cf-workerd'
 import { MANIFEST_VERSION } from './manifest'
 import { exposePlugin, PRODUCTION, type SourceOf, sourceDirPlugin } from './bundle'
 import type { Compiled } from './compile'
@@ -42,9 +43,25 @@ const DEFAULT_CFG: CloudflareBuildConfig = { name: undefined, compatibilityDate:
 
 /** Everything that can fail on the app's own input or install, before a byte is written (index.ts rule). */
 export async function prepareCloudflare(appRoot: string, cfg: CloudflareBuildConfig | null, flags: CfFlags): Promise<CfPrepared> {
-  const core = resolveCoreCf({ appRoot, fromSource: flags.fromSource, env: flags.env })
+  const resolved = resolveCoreCf({ appRoot, fromSource: flags.fromSource, env: flags.env })
   const user = await readUserWrangler(appRoot)
-  const warnings = [...core.warnings]
+  const warnings = [...resolved.warnings]
+  // F482: the default date is the core's build date, bounded by what the installed workerd runs (wrangler dev refuses a newer
+  // one). An explicit date is used as written, with a warning when it outruns workerd. Not resolvable: today's behaviour.
+  const workerd = installedWorkerd(appRoot)
+  let core = resolved
+  if (cfg?.compatibilityDate !== undefined) {
+    if (workerd && cfg.compatibilityDate > workerd.date)
+      warnings.push(
+        `[brust] warning cf-compat-date compatibility_date ${cfg.compatibilityDate} in brust.toml is newer than ${workerd.date}, the newest the installed workerd ${workerd.version} runs: \`wrangler dev\` and \`brust dev --target cloudflare\` will not start; lower it or upgrade wrangler`,
+      )
+  } else if (workerd && workerd.date < resolved.meta.compatibilityDate) {
+    if (workerd.date >= CF_MIN_COMPAT_DATE) core = { ...resolved, meta: { ...resolved.meta, compatibilityDate: workerd.date } }
+    else
+      warnings.push(
+        `[brust] warning cf-compat-date the installed workerd ${workerd.version} runs dates only up to ${workerd.date}, older than ${CF_MIN_COMPAT_DATE}, the oldest brust supports: the build keeps ${resolved.meta.compatibilityDate}, but \`wrangler dev\` will not start; upgrade wrangler`,
+      )
+  }
   try {
     const toml = Bun.file(join(appRoot, 'brust.toml'))
     if (await toml.exists()) {

package/src/build/config.ts

@@ -22,7 +22,7 @@ import {
   streamEntryError,
 } from '../actions/prefix'
 import { ADAPTER_NAMES, BUILTINS, installHint } from '../cache-adapter/load'
-import { normalizeBasePath } from '../config'
+import { checkTrailingSlash, normalizeBasePath, type TrailingSlash } from '../config'
 import { BuildError } from './errors'
 import { posixOf } from './posix'
 
@@ -111,6 +111,8 @@ export interface BuildConfig {
   sourceRoots: string[]
   /** `[server] base_path` (F495), normalised (`/portal`); `''` = the app is mounted at the root. Baked into every URL brust emits. */
   basePath: string
+  /** `[server] trailing_slash` (F506), baked into the manifest; `strict` (the default) = the path is matched as written. */
+  trailingSlash: TrailingSlash
 }
 
 const isTable = (v: unknown): v is Record<string, unknown> => v !== null && typeof v === 'object' && !Array.isArray(v)
@@ -414,10 +416,18 @@ function parseBasePath(file: string, server: unknown): string {
   return r.value
 }
 
+/** `[server] trailing_slash` (F506): the one validator is config.ts's; a bad value is a build error here too. */
+function parseTrailingSlash(file: string, server: unknown): TrailingSlash {
+  if (!isTable(server) || server.trailing_slash === undefined) return 'strict'
+  const r = checkTrailingSlash(server.trailing_slash)
+  if (!r.ok) throw new BuildError('config', `${file}: server.trailing_slash ${r.why}`)
+  return r.value
+}
+
 export async function loadBuildConfig(appRoot: string, o: { actionsOnly?: boolean } = {}): Promise<BuildConfig> {
   const file = join(appRoot, 'brust.toml')
   const f = Bun.file(file)
-  if (!(await f.exists())) return { serverOnly: [], actions: null, cloudflare: null, cache: null, cssGlobal: [], sourceRoots: [], basePath: '' }
+  if (!(await f.exists())) return { serverOnly: [], actions: null, cloudflare: null, cache: null, cssGlobal: [], sourceRoots: [], basePath: '', trailingSlash: 'strict' }
   let parsed: unknown
   try {
     parsed = Bun.TOML.parse(await f.text())
@@ -426,17 +436,18 @@ export async function loadBuildConfig(appRoot: string, o: { actionsOnly?: boolea
   }
   const root = (parsed ?? {}) as Record<string, unknown>
   const basePath = parseBasePath(file, root.server)
+  const trailingSlash = parseTrailingSlash(file, root.server)
   const actions = parseActions(file, root.actions, o.actionsOnly === true, basePath)
   const cloudflare = parseCloudflare(file, appRoot, root.cloudflare)
   const cache = await parseCache(file, appRoot, root.cache)
   const cssGlobal = parseCss(file, root.css)
   const build = root.build
-  if (build === undefined) return { serverOnly: [], actions, cloudflare, cache, cssGlobal, sourceRoots: [], basePath }
+  if (build === undefined) return { serverOnly: [], actions, cloudflare, cache, cssGlobal, sourceRoots: [], basePath, trailingSlash }
   if (build === null || typeof build !== 'object' || Array.isArray(build)) throw new BuildError('config', `${file}: [build] must be a table`)
   const sourceRoots = parseSourceRoots(file, appRoot, (build as Record<string, unknown>).source_roots)
   const so = (build as Record<string, unknown>).server_only
-  if (so === undefined) return { serverOnly: [], actions, cloudflare, cache, cssGlobal, sourceRoots, basePath }
+  if (so === undefined) return { serverOnly: [], actions, cloudflare, cache, cssGlobal, sourceRoots, basePath, trailingSlash }
   if (!Array.isArray(so) || so.some((p) => typeof p !== 'string' || p.trim() === ''))
     throw new BuildError('config', `${file}: build.server_only must be an array of non-empty strings`)
-  return { serverOnly: so.map((p: string) => posixOf(p.trim()).replace(/^\.\//, '')), actions, cloudflare, cache, cssGlobal, sourceRoots, basePath }
+  return { serverOnly: so.map((p: string) => posixOf(p.trim()).replace(/^\.\//, '')), actions, cloudflare, cache, cssGlobal, sourceRoots, basePath, trailingSlash }
 }

package/src/build/css.ts

@@ -224,9 +224,9 @@ export async function buildCss(
       if (hit === undefined) via.set(k, (hit = tailwindUse([k]).using.length > 0))
       return hit
     }
-    // F501: the output dirs of this app that Tailwind must not scan, as app-root-relative patterns (only those under it).
-    const own = (o.ownOutput ?? []).map((d) => relative(real(appRoot), real(d)).split(sep).join('/')).filter((r) => r !== '' && r !== '..' && !r.startsWith('../') && !isAbsolute(r))
-    plugins.push(await loadTailwind(appRoot, tw.using[0]!, uses, o.log, [...new Set(own)]))
+    // F501/F505: brust's own output dirs, as real absolute paths: each is the base of its own negation in the scan.
+    const own = [...new Set((o.ownOutput ?? []).map(real))]
+    plugins.push(await loadTailwind(appRoot, tw.using[0]!, uses, o.log, own))
     if (tw.imports.length > 1)
       o.log?.(
         `[brust] warning tailwind @import "tailwindcss" is in ${tw.imports.length} files (${tw.imports.map((f) => relative(appRoot, f)).join(', ')}): each one ships the whole of Tailwind; import it once (e.g. app.css) and use @reference elsewhere`,

package/src/build/index.ts

@@ -130,7 +130,7 @@ export async function runBuild(opts: {
   process.env.BRUST_BASE_PATH = built.basePath
   if (opts.actionsOnly)
     return runActionsOnly({ appRoot, dist, config: built, target: opts.target, wasmFromSource: opts.wasmFromSource === true, statOk, assertSafeOutDir, log: opts.log })
-  const { serverOnly, cloudflare, cache, cssGlobal, sourceRoots, basePath } = built
+  const { serverOnly, cloudflare, cache, cssGlobal, sourceRoots, basePath, trailingSlash } = built
   // L16 R16.4b: `[actions]` with a `base_url` and no actions file (the default name, not one written in the toml)
   // is a page-only build: the app is deployed elsewhere, so nothing is bundled or mounted here.
   const remote =
@@ -198,7 +198,7 @@ export async function runBuild(opts: {
   rmSync(tmp, { recursive: true, force: true })
   mkdirSync(tmp, { recursive: true })
   try {
-    await buildInto(tmp, { dev: opts.dev === true, appRoot, entry, dist, leaves, componentFile, componentIssue, appModules, appGraph, serverOnly, actions, actionsEntry, cache, cacheModule, cf, hybrid, cssGlobal, sourceRoots, basePath, actionsRemote: remote?.prefix ?? null, log: opts.log })
+    await buildInto(tmp, { dev: opts.dev === true, appRoot, entry, dist, leaves, componentFile, componentIssue, appModules, appGraph, serverOnly, actions, actionsEntry, cache, cacheModule, cf, hybrid, cssGlobal, sourceRoots, basePath, trailingSlash, actionsRemote: remote?.prefix ?? null, log: opts.log })
     if (ssgPlan) {
       // Rendered from the finished temp dist, so a failed render leaves the previous dist untouched.
       const version: string = (await Bun.file(join(import.meta.dir, '../../package.json')).json()).version
@@ -243,6 +243,8 @@ async function buildInto(
     sourceRoots: string[]
     /** `[server] base_path` (F495), `''` = the root. */
     basePath: string
+    /** `[server] trailing_slash` (F506); `strict` = the default (not written). */
+    trailingSlash: import('../config').TrailingSlash
     /** L16 R16.4b: the prefix of an actions app deployed elsewhere (a page-only build); absent = a local app or none. */
     actionsRemote: string | null
     /** `--target static` with `[actions]`: the worker is built without the cache (static pages are never cached). */
@@ -258,7 +260,7 @@ async function buildInto(
   const serverCss = [o.actionsEntry, o.cacheModule].flatMap((f) => (f ? graph.of(f) : []))
   mkdirSync(join(out, 'client'), { recursive: true })
   // Review N3: `brust dev` builds with BRUST_BUILD_MODE=development (as the JS bundles): readable, unminified CSS.
-  const css = await buildCss(out, [...new Set([...[...routeCss.values()].flat(), ...serverCss])], process.env.BRUST_BUILD_MODE !== 'development', { appRoot, log: o.log, basePath: o.basePath, ownOutput: [o.dist, join(appRoot, '.brust')] })
+  const css = await buildCss(out, [...new Set([...[...routeCss.values()].flat(), ...serverCss])], process.env.BRUST_BUILD_MODE !== 'development', { appRoot, log: o.log, basePath: o.basePath, ownOutput: [o.dist, join(appRoot, 'dist'), join(appRoot, '.brust')] })
   for (const c of directCss(entry))
     o.log(`[brust] warning css ${relative(appRoot, entry)} imports ${c}: the route entry belongs to no route, so it is linked nowhere; import it from a layout, or list it in [css] global`)
   const ctx: BrowserCtx = { sourceOf: new Map(), appRoot, serverOnly: o.serverOnly, serverFiles: o.actionsEntry ? [realpathSync(o.actionsEntry)] : [], cssMaps: css.maps, clientDir: join(out, 'client'), basePath: o.basePath }
@@ -297,8 +299,10 @@ async function buildInto(
       o.log(`[brust] warning load-writer-in-client ${relPosix(appRoot, w.file)} is imported into the browser chunk of the React island ${c.id}: it changes ${mods} when it loads, and the island reads that module (F230). Its code ships to the browser: keep secrets and server-only code out of it, or write the value in the module that declares it`)
       // F480: a server-only import reached through this writer names the chain in `server-only-in-client`.
       ctx.loadWriters ??= new Map()
-      if (!ctx.loadWriters.has(w.file))
-        ctx.loadWriters.set(w.file, `${relPosix(appRoot, w.file)} is loaded into the React island ${c.id} because it is judged to write ${mods} when it loads: F230 load writes`)
+      const lw = ctx.loadWriters.get(w.file) ?? { rel: relPosix(appRoot, w.file), islands: [], writes: [] }
+      if (!lw.islands.includes(c.id)) lw.islands.push(c.id)
+      for (const m of mods.split(', ')) if (!lw.writes.includes(m)) lw.writes.push(m)
+      ctx.loadWriters.set(w.file, lw)
     }
     return [...new Set(out.map((w) => w.file))]
   }
@@ -359,6 +363,8 @@ async function buildInto(
   await buildJobs(out, compiled, ctx.sourceOf, appRoot, storeModules(manifest), css.maps, routeRoots, reachedJobs(manifest), writers, o.basePath)
   // F495: absent without a base path, so an app at the root writes the manifest it always did.
   if (o.basePath !== '') manifest.base_path = o.basePath
+  // F506: absent when strict (the default), so an app that sets nothing writes the manifest it always did.
+  if (o.trailingSlash !== 'strict') manifest.trailing_slash = o.trailingSlash
   manifest.actions =
     o.actions && o.actionsEntry
       ? { entry: await buildActions(out, o.actionsEntry, css.maps, o.basePath), prefix: o.actions.prefix, maxBodyBytes: o.actions.maxBodyBytes, maxResponseBytes: o.actions.maxResponseBytes, crossSite: o.actions.crossSite, ...o.actions.stream }

package/src/build/manifest.ts

@@ -102,6 +102,8 @@ export interface ManifestJson {
   actions_only?: true
   /** F495 `[server] base_path`: set only for an app mounted under a path. The server answers under it alone and every URL brust owns lies below it. */
   base_path?: string
+  /** F506 `[server] trailing_slash`: set only when it is not `strict` (`redirect` | `ignore`). */
+  trailing_slash?: 'redirect' | 'ignore'
   /** L16 R16.4b: a page-only build: no local actions app, `base_url` points at the deployment that has it. */
   actions_remote?: { prefix: string }
   /** `[cache]` (cache adapters); absent without one (the manifest is then byte-identical). */

package/src/build/static.ts

@@ -177,6 +177,10 @@ export async function writeStatic(
     o.log(w)
   }
   for (const w of assets.warnings) o.log(w)
+  // F506: a static host serves the files as it likes; brust's trailing-slash policy applies to `brust start` only.
+  const ts = (JSON.parse(readFileSync(join(dist, 'manifest.json'), 'utf8')) as { trailing_slash?: string }).trailing_slash
+  if (ts !== undefined && ts !== 'strict')
+    warn(`warning trailing-slash-static server.trailing_slash = ${JSON.stringify(ts)} does not apply to --target static: the static host decides how a path ending in '/' is served`)
 
   // R9.4: [cache] does not apply to static files, so the render must not need its adapter (a Redis
   // that is not running at build time): the render reads a manifest without `cache`, and the dist

package/src/build/tailwind.ts

@@ -68,8 +68,7 @@ const addCommand = (v: string) => `bun add -d --exact ${TAILWIND_PACKAGES.map((p
 /** The Tailwind plugin of the CSS build, resolved from the app. Missing packages → `tailwind-missing` with the
  * exact install command; versions that differ → one warning through `log` with the command that aligns them.
  * `uses(file)` says whether a stylesheet needs the compiler (it, or a relative `@import` of it, uses Tailwind);
- * other stylesheets stay Bun's. `ownOutput`: app-root-relative, `/`-separated directories of brust's own output that no
- * scan may read (F501). */
+ * other stylesheets stay Bun's. `ownOutput`: absolute directories of brust's own output that no scan may read (F501, F505). */
 export async function loadTailwind(
   appRoot: string,
   usedBy: string,
@@ -112,9 +111,12 @@ export async function loadTailwind(
         const compiler = await node.compile(css, { base: dirname(a.path), from: a.path, shouldRewriteUrls: true, onDependency: () => {} })
         const root: SourceEntry[] =
           compiler.root === 'none' ? [] : compiler.root === null ? [{ base: appRoot, pattern: '**/*', negated: false }] : [{ ...compiler.root, negated: false }]
-        // F501: brust's own output (the dist dir, `.brust`) is never a source, whatever the ignore files say and whatever
+        // F501: brust's own output (the dist dirs, `.brust`) is never a source, whatever the ignore files say and whatever
         // the stylesheet's `source(...)` and `@source` lines add: last, so a stale build can never feed the next one.
-        const own: SourceEntry[] = ownOutput.map((dir) => ({ base: appRoot, pattern: `${dir}/**`, negated: true }))
+        // F505: each directory is the BASE of its own negation (verified: oxide honours a negated entry whose base differs
+        // from the scanned root, a base outside the root, a base that does not exist yet, and a name with glob characters
+        // such as `dist[1]`, none of which a pattern relative to the app root would survive).
+        const own: SourceEntry[] = ownOutput.map((dir) => ({ base: dir, pattern: '**/*', negated: true }))
         const scanner = new oxide.Scanner({ sources: [...root, ...compiler.sources, ...own] })
         let out = compiler.build(scanner.scan())
         // `@reference "./app.css"` pulls in Tailwind's license banner too; only the file that imports Tailwind ships it

package/src/config.ts

@@ -1,8 +1,8 @@
 // Runtime configuration (spec §8). Precedence, high → low:
 //   env (BRUST_ADDR / BRUST_PORT / BRUST_WORKERS / BRUST_RENDER_SLOTS / BRUST_DRAIN_TIMEOUT_MS /
-//        BRUST_BOOT_TIMEOUT_MS / BRUST_CALL_TIMEOUT_MS / BRUST_SLOT_BYTES / BRUST_MAX_LOADER_RESPONSE_BYTES)
+//        BRUST_BOOT_TIMEOUT_MS / BRUST_CALL_TIMEOUT_MS / BRUST_SLOT_BYTES / BRUST_MAX_LOADER_RESPONSE_BYTES / BRUST_STATS)
 //   > CLI flags (`brust start --port/--workers`) and `run({ config })`
-//   > brust.toml ([server] address / port / base_path / max_loader_response_bytes, [workers] count / slot_bytes, [cors], [actions] base_url / credentials)
+//   > brust.toml ([server] address / port / base_path / stats / stats_token / max_loader_response_bytes, [workers] count / slot_bytes, [cors], [actions] base_url / credentials)
 //   > defaults (localhost, 1337, availableParallelism(), 1, 10000, 30000, 30000, 262144, 8388608).
 // L16 R16.1: `actionsBaseUrl` follows env (BRUST_ACTIONS_BASE_URL) > run({ config }) > toml `[actions] base_url`.
 // `cors` has no env layer; `run({ config: { cors } })` replaces a toml `[cors]` as a whole (never merged), and
@@ -24,6 +24,20 @@ export interface CorsConfig {
   maxAgeSeconds?: number
 }
 
+/** F507 `[server] stats`: who may read `/_brust/cache/stats`. */
+export const STATS_MODES = ['off', 'public', 'token'] as const
+export type StatsMode = (typeof STATS_MODES)[number]
+/** F507 `[server] stats_token`: an env reference only, never the secret itself (like `[cache.redis] url`). */
+const STATS_TOKEN_REF = /^env:[A-Za-z_][A-Za-z0-9_]*$/
+
+/** Why `[server] stats` / `stats_token` (or `run({ config })`) are wrong, or `undefined`. The secret never appears in the message. */
+function statsError(mode: unknown, token: unknown, where: string): string | undefined {
+  if (mode !== undefined && !STATS_MODES.includes(mode as StatsMode)) return `${where}stats must be one of ${STATS_MODES.join(', ')} (got ${JSON.stringify(mode)})`
+  if (token !== undefined && (typeof token !== 'string' || !STATS_TOKEN_REF.test(token)))
+    return `${where}stats_token must be "env:NAME" (a literal token is refused: it would sit in a file)`
+  return undefined
+}
+
 export interface BrustConfig {
   host: string
   port: number
@@ -47,6 +61,15 @@ export interface BrustConfig {
    * root), absent when nothing set it. A build setting too (`brust build` bakes it into the manifest): `brust start` refuses a manifest
    * built for another one, and with none set serves the one the manifest names. */
   basePath?: string
+  /** F506 `[server] trailing_slash` / `run({ config: { trailingSlash } })`: what a page request whose path ends in `/` gets — `strict` (matched
+   * as written, the default), `redirect` (GET/HEAD answer 308 to the path without it, query kept) or `ignore` (the slash is dropped before
+   * matching). A build setting too (baked into the manifest): `brust start` refuses a manifest built with another one. */
+  trailingSlash?: TrailingSlash
+  /** F507 `[server] stats` / `run({ config: { stats } })`: who may read `/_brust/cache/stats` (`off` = 404, `public`, `token` = a bearer
+   * token). Absent = `off` for `brust start`, `public` under `brust dev`. */
+  stats?: StatsMode
+  /** F507 `[server] stats_token` / `run({ config: { statsToken } })`: `"env:NAME"`, the variable that holds the bearer token (`stats = "token"` only). */
+  statsToken?: string
   /** L16 R16.1: the origin the browser `client()` calls (page script `__BRUST_ACTION_BASE__`); absent = same origin. */
   actionsBaseUrl?: string
   /** L16 R16.2: the client's default `RequestInit.credentials` (`__BRUST_ACTION_CREDENTIALS__`); absent = `same-origin`. */
@@ -56,6 +79,16 @@ export interface BrustConfig {
 /** What `run({ config })` / `loadConfig`'s `cli` accepts: any setting, and `cors: null` to turn a toml `[cors]` off. */
 export type ConfigOverrides = Omit<Partial<BrustConfig>, 'cors'> & { cors?: (Omit<CorsConfig, 'credentials'> & { credentials?: boolean }) | null }
 
+/** F506: the `[server] trailing_slash` values. */
+export const TRAILING_SLASH = ['strict', 'redirect', 'ignore'] as const
+export type TrailingSlash = (typeof TRAILING_SLASH)[number]
+
+/** F506: `[server] trailing_slash`, validated; the reason it is refused otherwise. */
+export function checkTrailingSlash(raw: unknown): { ok: true; value: TrailingSlash } | { ok: false; why: string } {
+  if (typeof raw === 'string' && (TRAILING_SLASH as readonly string[]).includes(raw)) return { ok: true, value: raw as TrailingSlash }
+  return { ok: false, why: `must be one of ${TRAILING_SLASH.map((v) => JSON.stringify(v)).join(', ')} (got ${JSON.stringify(raw)})` }
+}
+
 /** F495: `[server] base_path`, validated: `/seg[/seg…]`, no trailing `/`, each segment `[A-Za-z0-9._~-]+` (not `.`/`..`), the
  * same alphabet as the actions prefix, so it needs no percent-encoding anywhere it is printed. `""` and `"/"` mean the
  * root (`""`). Returns the value, or the reason it is refused. */
@@ -116,6 +149,11 @@ export async function loadConfig(cwd: string = process.cwd(), cli: ConfigOverrid
   checkCli(cli)
   // cli (validated, normalised) over toml as a whole object (R10.2); `null` = off.
   const cors = cli.cors === undefined ? fromToml.cors : cli.cors === null ? undefined : checkCors(cli.cors, 'config.cors', null, false)
+  // F507: the two keys belong together, wherever each one came from.
+  const stats = env.stats ?? cli.stats ?? fromToml.stats
+  const statsToken = cli.statsToken ?? fromToml.statsToken
+  if (stats === 'token' && statsToken === undefined) throw new BrustConfigError('stats = "token" needs stats_token = "env:NAME" (the variable that holds the bearer token)', null)
+  if (statsToken !== undefined && stats !== 'token') throw new BrustConfigError('stats_token is used only with stats = "token"', null)
   return {
     host: env.host ?? cli.host ?? fromToml.host ?? DEFAULTS.host,
     port: env.port ?? cli.port ?? fromToml.port ?? DEFAULTS.port,
@@ -130,6 +168,9 @@ export async function loadConfig(cwd: string = process.cwd(), cli: ConfigOverrid
     ioThreads: env.ioThreads ?? cli.ioThreads,
     ...(cors ? { cors } : {}),
     ...pick('basePath', cli.basePath ?? fromToml.basePath),
+    ...pick('trailingSlash', cli.trailingSlash ?? fromToml.trailingSlash),
+    ...pick('stats', stats),
+    ...pick('statsToken', statsToken),
     ...pick('actionsBaseUrl', env.actionsBaseUrl ?? cli.actionsBaseUrl ?? fromToml.actionsBaseUrl),
     ...pick('actionsCredentials', cli.actionsCredentials ?? fromToml.actionsCredentials),
   }
@@ -173,6 +214,12 @@ function checkCli(cli: ConfigOverrides): void {
     if (!r.ok) throw new BrustConfigError(`config.basePath ${r.why}`, null)
     cli.basePath = r.value
   }
+  if (cli.trailingSlash !== undefined) {
+    const r = checkTrailingSlash(cli.trailingSlash)
+    if (!r.ok) throw new BrustConfigError(`config.trailingSlash ${r.why}`, null)
+  }
+  const badStats = statsError(cli.stats, cli.statsToken, 'config.')
+  if (badStats) throw new BrustConfigError(badStats, null)
   if (cli.actionsBaseUrl !== undefined) {
     const why = baseUrlError(cli.actionsBaseUrl)
     if (why) throw new BrustConfigError(`config.actionsBaseUrl ${why}`, null)
@@ -204,6 +251,15 @@ function fromTomlTable(parsed: unknown, file: string): Partial<BrustConfig> {
       if (!r.ok) throw new BrustConfigError(`${file}: server.base_path ${r.why}`, file)
       out.basePath = r.value
     }
+    if (server.trailing_slash !== undefined) {
+      const r = checkTrailingSlash(server.trailing_slash)
+      if (!r.ok) throw new BrustConfigError(`${file}: server.trailing_slash ${r.why}`, file)
+      out.trailingSlash = r.value
+    }
+    const bad = statsError(server.stats, server.stats_token, `${file}: server.`)
+    if (bad) throw new BrustConfigError(bad, file)
+    if (server.stats !== undefined) out.stats = server.stats as StatsMode
+    if (server.stats_token !== undefined) out.statsToken = server.stats_token as string
     const cap = tomlInt(server.max_loader_response_bytes, 'server.max_loader_response_bytes', MIN_LOADER_RESPONSE_BYTES, MAX_LOADER_RESPONSE_BYTES, file)
     if (cap !== undefined) out.maxLoaderResponseBytes = cap
     if (port !== undefined) {
@@ -320,6 +376,11 @@ function fromEnv(): Partial<BrustConfig> {
   out.slotBytes = envInt('BRUST_SLOT_BYTES', MIN_SLOT_BYTES, MAX_SLOT_BYTES, `an integer in ${MIN_SLOT_BYTES}..${MAX_SLOT_BYTES}`)
   out.maxLoaderResponseBytes = envInt('BRUST_MAX_LOADER_RESPONSE_BYTES', MIN_LOADER_RESPONSE_BYTES, MAX_LOADER_RESPONSE_BYTES, `an integer in ${MIN_LOADER_RESPONSE_BYTES}..${MAX_LOADER_RESPONSE_BYTES}`)
   out.ioThreads = envInt('BRUST_WORKER_THREADS', 1, MAX_IO_THREADS, `an integer in 1..${MAX_IO_THREADS}`)
+  const stats = process.env.BRUST_STATS
+  if (stats !== undefined && stats !== '') {
+    if (!STATS_MODES.includes(stats as StatsMode)) throw new BrustConfigError(`BRUST_STATS must be one of ${STATS_MODES.join(', ')} (got ${JSON.stringify(stats)})`, null)
+    out.stats = stats as StatsMode
+  }
   const base = process.env.BRUST_ACTIONS_BASE_URL
   if (base !== undefined && base !== '') {
     const why = baseUrlError(base)

package/src/launcher-watch.ts

@@ -15,12 +15,63 @@ export function pidAlive(pid: number): boolean {
   }
 }
 
+/** F492 (PID reuse): the identity of a process that outlives a PID: its creation time (a FILETIME, 100 ns ticks since 1601), read once
+ * through kernel32 `GetProcessTimes` (`OpenProcess` with the query-limited right: no elevation, no process table, no PowerShell). A PID
+ * that is reused by another process has another creation time. `undefined` when it cannot be read (not Windows, the process is gone, no
+ * access, `bun:ffi` missing): the watch then keeps its pid-only behaviour. Synchronous, a few microseconds, nothing awaited. */
+export function processIdentity(pid: number): string | undefined {
+  if (process.platform !== 'win32') return undefined
+  const k = kernel32()
+  if (!k) return undefined
+  try {
+    const h = k.OpenProcess(0x1000 /* PROCESS_QUERY_LIMITED_INFORMATION */, 0, pid)
+    if (!h) return undefined
+    try {
+      const t = new BigUint64Array(4) // creation, exit, kernel, user
+      const base = k.ptr(t)
+      if (!k.GetProcessTimes(h, base, k.ptr(t, 8), k.ptr(t, 16), k.ptr(t, 24))) return undefined
+      return t[0]!.toString()
+    } finally {
+      k.CloseHandle(h)
+    }
+  } catch {
+    return undefined
+  }
+}
+
+type Kernel32 = {
+  OpenProcess(access: number, inherit: number, pid: number): unknown
+  GetProcessTimes(h: unknown, a: unknown, b: unknown, c: unknown, d: unknown): number
+  CloseHandle(h: unknown): number
+  ptr: (view: ArrayBufferView, offset?: number) => never
+}
+let k32: Kernel32 | null | undefined
+/** The three kernel32 bindings, opened ONCE for the life of the process: `dlopen` compiles a binding per symbol and holds it until
+ * the library is closed, and the watch reads the identity every tick of a long-running server. `null` = unavailable (kept). */
+function kernel32(): Kernel32 | null {
+  if (k32 !== undefined) return k32
+  try {
+    const { dlopen, FFIType, ptr } = require('bun:ffi') as typeof import('bun:ffi')
+    const s = dlopen('kernel32.dll', {
+      OpenProcess: { args: [FFIType.u32, FFIType.i32, FFIType.u32], returns: FFIType.ptr },
+      GetProcessTimes: { args: [FFIType.ptr, FFIType.ptr, FFIType.ptr, FFIType.ptr, FFIType.ptr], returns: FFIType.i32 },
+      CloseHandle: { args: [FFIType.ptr], returns: FFIType.i32 },
+    }).symbols
+    k32 = { ...(s as unknown as Omit<Kernel32, 'ptr'>), ptr: ptr as Kernel32['ptr'] }
+  } catch {
+    k32 = null
+  }
+  return k32
+}
+
 export interface LauncherWatchOptions {
   /** Runs once, when the parent is gone. */
   onGone: (pid: number) => void
   platform?: NodeJS.Platform
   ppid?: number
   alive?: (pid: number) => boolean
+  /** The parent's identity (default: its creation time, win32). Read once at boot and again on each tick while the pid answers alive: a different value means the pid was reused, so the launcher is gone. */
+  identity?: (pid: number) => string | undefined
   intervalMs?: number
   log?: (line: string) => void
 }
@@ -35,8 +86,10 @@ export function watchLauncher(opts: LauncherWatchOptions): { pid: number | undef
     ;(opts.log ?? console.error)(`[brust] launcher (pid ${ppid}) is already gone at boot: not watching it`)
     return none
   }
+  const identity = opts.identity ?? processIdentity
+  const born = identity(ppid)
   const timer = setInterval(() => {
-    if (alive(ppid)) return
+    if (alive(ppid) && (born === undefined || identity(ppid) === born)) return
     clearInterval(timer)
     opts.onGone(ppid)
   }, opts.intervalMs ?? 1000)

package/src/native.ts

@@ -46,6 +46,10 @@ export interface StartOptions {
   l2?: L2Options
   /** `brust dev` only (L14): a request carrying this token (`x-brust-dev-token`) is traced; absent in production. */
   devToken?: string
+  /** F507: who may read `/_brust/cache/stats`; absent = `off` (404). Boot error `stats: …` for a mode and token that do not go together. */
+  stats?: 'off' | 'public' | 'token'
+  /** F507: the secret `stats: 'token'` compares `Authorization: Bearer` with, resolved from its env reference; never logged. */
+  statsToken?: string
 }
 /** napi `NapiL2Options`; defaults 50 ms, 1048576 bytes. */
 export interface L2Options {

package/src/run.ts

@@ -37,6 +37,8 @@ export interface RunManifest {
   cache?: { adapter: string; getTimeoutMs: number; maxBodyBytes: number; namespace: string; buildId: string } | null
   /** F495: the `[server] base_path` the build baked in; absent = the app is at the root. */
   base_path?: string
+  /** F506: the `[server] trailing_slash` the build baked in; absent = `strict`. */
+  trailing_slash?: string
   /** F165: `false` = no route can call a worker; absent (older manifests) = the pool is needed. */
   needs_workers?: boolean
 }
@@ -57,7 +59,9 @@ export function workerCount(cfg: BrustConfig, m: RunManifest): number {
 }
 
 /** Pure: the napi `StartOptions`. No actions/cors/cache → exactly the pre-actions keys. */
-export function startOptions(cfg: BrustConfig, distDir: string, m: RunManifest, version: string, devToken?: string): StartOptions {
+export function startOptions(cfg: BrustConfig, distDir: string, m: RunManifest, version: string, devToken?: string, env: Record<string, string | undefined> = process.env): StartOptions {
+  // F507: `/_brust/cache/stats` is off unless set; `brust dev` (its server carries a dev token) defaults to public.
+  const stats = cfg.stats ?? (devToken ? 'public' : 'off')
   return {
     host: cfg.host,
     port: cfg.port,
@@ -71,10 +75,19 @@ export function startOptions(cfg: BrustConfig, distDir: string, m: RunManifest,
     ...(actionsClient(cfg, m) ? { actionsClient: actionsClient(cfg, m) } : {}),
     ...(cfg.cors ? { cors: cfg.cors } : {}),
     ...(devToken ? { devToken } : {}),
+    ...(stats !== 'off' ? { stats, ...(stats === 'token' ? { statsToken: statsTokenOf(cfg.statsToken, env) } : {}) } : {}),
     ...(m.cache ? { l2: { adapter: m.cache.adapter, getTimeoutMs: m.cache.getTimeoutMs, maxBodyBytes: m.cache.maxBodyBytes, namespace: m.cache.namespace, buildId: m.cache.buildId } } : {}),
   }
 }
 
+/** F507: the bearer token `[server] stats_token = "env:NAME"` names; a boot error naming the variable (never a value) when it is unset or empty. */
+function statsTokenOf(ref: string | undefined, env: Record<string, string | undefined>): string {
+  const name = (ref ?? '').replace(/^env:/, '')
+  const v = name ? env[name] : undefined
+  if (!v) throw new Error(`stats: [server] stats_token is "env:${name}" but ${name} is not set (or empty)`)
+  return v
+}
+
 /** L16: what the page tells the browser `client()` (R16.1/R16.2); absent while it would only repeat the prefix script. */
 function actionsClient(cfg: BrustConfig, m: RunManifest): NonNullable<StartOptions['actionsClient']> | undefined {
   const credentials = cfg.actionsCredentials !== undefined && cfg.actionsCredentials !== 'same-origin' ? cfg.actionsCredentials : undefined
@@ -92,6 +105,14 @@ export function basePathMismatch(cfg: Pick<BrustConfig, 'basePath'>, m: Pick<Run
   return `base-path-mismatch: server.base_path is ${show(cfg.basePath)} but this build is for ${show(built)}; the base path is baked in at build time, so rebuild (brust build)`
 }
 
+/** F506: the message when the config names a trailing-slash policy other than the one the manifest was built with
+ * (`trailing-slash-mismatch`), else null. A config that sets none serves the manifest's. */
+export function trailingSlashMismatch(cfg: Pick<BrustConfig, 'trailingSlash'>, m: Pick<RunManifest, 'trailing_slash'>): string | null {
+  const built = m.trailing_slash ?? 'strict'
+  if (cfg.trailingSlash === undefined || cfg.trailingSlash === built) return null
+  return `trailing-slash-mismatch: server.trailing_slash is ${JSON.stringify(cfg.trailingSlash)} but this build is for ${JSON.stringify(built)}; it is baked in at build time, so rebuild (brust build)`
+}
+
 /** Every worker's response buffer, kept reachable until the process exits (see run()). */
 const workerBuffers: SharedArrayBuffer[] = []
 
@@ -122,7 +143,7 @@ export async function run(opts: RunOptions = {}): Promise<void> {
     fail((e as Error).message)
   }
 
-  const mismatch = basePathMismatch(cfg, m)
+  const mismatch = basePathMismatch(cfg, m) ?? trailingSlashMismatch(cfg, m)
   if (mismatch) fail(mismatch)
   // `basePath` of `@brust/core` in the app's modules (the workers inherit the env).
   process.env.BRUST_BASE_PATH = m.base_path ?? ''
@@ -210,6 +231,8 @@ export async function run(opts: RunOptions = {}): Promise<void> {
   // F485 P12: on Windows Ctrl+C (SIGINT) drains; SIGTERM handlers rarely fire and a kill ends the process without a drain (POSIX-only).
   process.on('SIGINT', () => onSignal(130))
   process.on('SIGTERM', () => onSignal(143))
+  // F492: a console Ctrl+Break (and closing the console) reaches Bun as SIGBREAK on Windows: drain like Ctrl+C.
+  if (process.platform === 'win32') process.on('SIGBREAK', () => onSignal(149))
 
   // F488 (Windows only): a killed `bun run start` wrapper takes the shim (our parent) down but leaves this process running; drain when the
   // parent is gone (same path as Ctrl+C). Synchronous, nothing awaited. Not for a one-shot (`opts.onReady`: a static render that exits itself).