brustjs 0.1.50-alpha → 0.1.52-alpha

package/runtime/index.d.ts

@@ -75,6 +75,38 @@ export interface NapiCompiledJsx {
   warnings: Array<string>
 }
 
+/**
+ * Global CORS policy (maps onto `brust_core::CorsConfig`). napi-rs camelCases
+ * the fields, so the TS runtime sends `origins`, `methods`, `headers`,
+ * `exposeHeaders`, `credentials`, `maxAgeSeconds`.
+ */
+export interface NapiCorsOptions {
+  /**
+   * Allowed origins (exact scheme+host+port match). `['*']` — or any list
+   * CONTAINING `'*'` — allows every origin (echoed as the literal `*`).
+   */
+  origins: Array<string>
+  /**
+   * Preflight `Access-Control-Allow-Methods`. Omit for the default
+   * `GET,POST,PUT,PATCH,DELETE,OPTIONS`.
+   */
+  methods?: Array<string>
+  /**
+   * Preflight `Access-Control-Allow-Headers`. Omit to echo the request's
+   * `Access-Control-Request-Headers`.
+   */
+  headers?: Array<string>
+  /** `Access-Control-Expose-Headers` on actual responses. Omit for none. */
+  exposeHeaders?: Array<string>
+  /**
+   * Emit `Access-Control-Allow-Credentials: true`. INVALID with a wildcard
+   * origin — serve() throws at boot.
+   */
+  credentials?: boolean
+  /** Preflight `Access-Control-Max-Age` seconds. Omit for 600. */
+  maxAgeSeconds?: number
+}
+
 /**
  * Dev-mode: broadcast one JSON control frame (building / reload / css-update /
  * error / ok) to every connected `/_brust/dev` client. Called from the main
@@ -87,6 +119,12 @@ export interface NapiCompiledJsx {
  */
 export declare function napiDevBroadcast(json: string): void
 
+/** R1 — true when `name` resolves in either tier (dynamic first, then boot). */
+export declare function napiHasTemplate(name: string): boolean
+
+/** R1 — names of runtime-registered templates (dynamic tier only). */
+export declare function napiListDynamicTemplates(): Array<string>
+
 /**
  * Sub-project J — boot-time listing of registered minijinja templates.
  * JS dispatcher uses this to validate every `native: true` route's
@@ -110,6 +148,13 @@ export declare function napiLoadJinjaTemplates(dir: string): Array<string>
  */
 export declare function napiRegisterSsePaths(paths: Array<string>): NapiResult<undefined>
 
+/**
+ * R1 dynamic template registry — register (or replace) a runtime template.
+ * Errors (name validation / jinja syntax) surface as a thrown JS Error with
+ * the minijinja message (includes line info).
+ */
+export declare function napiRegisterTemplate(name: string, source: string): NapiResult<undefined>
+
 /**
  * Boot-time registry of literal WS paths. Mirror of napi_register_sse_paths.
  * Call once before begin_serve; exact-match only (parameterized routes are a
@@ -117,6 +162,12 @@ export declare function napiRegisterSsePaths(paths: Array<string>): NapiResult<u
  */
 export declare function napiRegisterWsPaths(paths: Array<string>): NapiResult<undefined>
 
+/**
+ * R1 — remove a runtime-registered template. Returns whether it existed.
+ * Boot-tier (directory-loaded) templates are not removable.
+ */
+export declare function napiRemoveTemplate(name: string): boolean
+
 /**
  * Worker-driven render chunk delivery. Worker calls this once per chunk
  * it wants to emit; final call uses `len = 0` to close the channel.
@@ -177,6 +228,13 @@ export declare function napiRenderChunkFinal(workerId: number, slot: number, len
  */
 export declare function napiRenderJinja(workerId: number, slot: number, dataLen: number, templateName: string, status?: number | undefined | null): NapiResult<number>
 
+/**
+ * R1 — render a template (either tier) to an HTML string. NOT the request
+ * hot path (allocates a JS string per call; the fast lane is
+ * napi_render_jinja via SAB) — intended for handlers/loaders/tooling.
+ */
+export declare function napiRenderTemplate(name: string, dataJson: string): NapiResult<string>
+
 /**
  * Drop the connection's sender, which signals the per-conn task to exit
  * and close the TCP socket. Idempotent — a missing conn is a no-op.
@@ -300,6 +358,11 @@ export interface ServeOptions {
    * configured (cert + key present). An unrecognized value is rejected.
    */
   tlsMinVersion?: string
+  /**
+   * Optional global CORS policy. Omit to keep CORS disabled (byte-identical
+   * default behavior: no `Access-Control-*` headers, OPTIONS still 405).
+   */
+  cors?: NapiCorsOptions
 }
 
 /**

package/runtime/index.js

@@ -77,8 +77,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-android-arm64')
         const bindingPackageVersion = require('brustjs-android-arm64/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -93,8 +93,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-android-arm-eabi')
         const bindingPackageVersion = require('brustjs-android-arm-eabi/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -114,8 +114,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-win32-x64-gnu')
         const bindingPackageVersion = require('brustjs-win32-x64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -130,8 +130,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-win32-x64-msvc')
         const bindingPackageVersion = require('brustjs-win32-x64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -147,8 +147,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-win32-ia32-msvc')
         const bindingPackageVersion = require('brustjs-win32-ia32-msvc/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -163,8 +163,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-win32-arm64-msvc')
         const bindingPackageVersion = require('brustjs-win32-arm64-msvc/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -182,8 +182,8 @@ function requireNative() {
     try {
       const binding = require('brustjs-darwin-universal')
       const bindingPackageVersion = require('brustjs-darwin-universal/package.json').version
-      if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-        throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
       }
       return binding
     } catch (e) {
@@ -198,8 +198,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-darwin-x64')
         const bindingPackageVersion = require('brustjs-darwin-x64/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -214,8 +214,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-darwin-arm64')
         const bindingPackageVersion = require('brustjs-darwin-arm64/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -234,8 +234,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-freebsd-x64')
         const bindingPackageVersion = require('brustjs-freebsd-x64/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -250,8 +250,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-freebsd-arm64')
         const bindingPackageVersion = require('brustjs-freebsd-arm64/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -271,8 +271,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-x64-musl')
           const bindingPackageVersion = require('brustjs-linux-x64-musl/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -287,8 +287,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-x64-gnu')
           const bindingPackageVersion = require('brustjs-linux-x64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -305,8 +305,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-arm64-musl')
           const bindingPackageVersion = require('brustjs-linux-arm64-musl/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -321,8 +321,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-arm64-gnu')
           const bindingPackageVersion = require('brustjs-linux-arm64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -339,8 +339,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-arm-musleabihf')
           const bindingPackageVersion = require('brustjs-linux-arm-musleabihf/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -355,8 +355,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-arm-gnueabihf')
           const bindingPackageVersion = require('brustjs-linux-arm-gnueabihf/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -373,8 +373,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-loong64-musl')
           const bindingPackageVersion = require('brustjs-linux-loong64-musl/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -389,8 +389,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-loong64-gnu')
           const bindingPackageVersion = require('brustjs-linux-loong64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -407,8 +407,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-riscv64-musl')
           const bindingPackageVersion = require('brustjs-linux-riscv64-musl/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -423,8 +423,8 @@ function requireNative() {
         try {
           const binding = require('brustjs-linux-riscv64-gnu')
           const bindingPackageVersion = require('brustjs-linux-riscv64-gnu/package.json').version
-          if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-            throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
           }
           return binding
         } catch (e) {
@@ -440,8 +440,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-linux-ppc64-gnu')
         const bindingPackageVersion = require('brustjs-linux-ppc64-gnu/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -456,8 +456,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-linux-s390x-gnu')
         const bindingPackageVersion = require('brustjs-linux-s390x-gnu/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -476,8 +476,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-openharmony-arm64')
         const bindingPackageVersion = require('brustjs-openharmony-arm64/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -492,8 +492,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-openharmony-x64')
         const bindingPackageVersion = require('brustjs-openharmony-x64/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -508,8 +508,8 @@ function requireNative() {
       try {
         const binding = require('brustjs-openharmony-arm')
         const bindingPackageVersion = require('brustjs-openharmony-arm/package.json').version
-        if (bindingPackageVersion !== '0.1.50-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
-          throw new Error(`Native binding package version mismatch, expected 0.1.50-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        if (bindingPackageVersion !== '0.1.52-alpha' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.1.52-alpha but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
         }
         return binding
       } catch (e) {
@@ -590,13 +590,18 @@ module.exports.islandCacheInvalidate = nativeBinding.islandCacheInvalidate
 module.exports.islandCacheSet = nativeBinding.islandCacheSet
 module.exports.isWorker = nativeBinding.isWorker
 module.exports.napiDevBroadcast = nativeBinding.napiDevBroadcast
+module.exports.napiHasTemplate = nativeBinding.napiHasTemplate
+module.exports.napiListDynamicTemplates = nativeBinding.napiListDynamicTemplates
 module.exports.napiListNativeTemplates = nativeBinding.napiListNativeTemplates
 module.exports.napiLoadJinjaTemplates = nativeBinding.napiLoadJinjaTemplates
 module.exports.napiRegisterSsePaths = nativeBinding.napiRegisterSsePaths
+module.exports.napiRegisterTemplate = nativeBinding.napiRegisterTemplate
 module.exports.napiRegisterWsPaths = nativeBinding.napiRegisterWsPaths
+module.exports.napiRemoveTemplate = nativeBinding.napiRemoveTemplate
 module.exports.napiRenderChunk = nativeBinding.napiRenderChunk
 module.exports.napiRenderChunkFinal = nativeBinding.napiRenderChunkFinal
 module.exports.napiRenderJinja = nativeBinding.napiRenderJinja
+module.exports.napiRenderTemplate = nativeBinding.napiRenderTemplate
 module.exports.napiSseClose = nativeBinding.napiSseClose
 module.exports.napiSseRegisterAbort = nativeBinding.napiSseRegisterAbort
 module.exports.napiSseSignalOpen = nativeBinding.napiSseSignalOpen

package/runtime/index.ts

@@ -21,6 +21,45 @@ function defaultRenderSlots(): number {
   return Math.min(Math.max(cores, 1), 16)
 }
 
+/** Global CORS policy (one policy for the whole deployment — pages, actions,
+ * static assets alike; brust has no per-route CORS). Opt-in: omit to keep CORS
+ * disabled (byte-identical default — no `Access-Control-*` headers, OPTIONS
+ * still 405). Threaded into Rust, which answers preflights before the render
+ * pipeline and stamps actual responses at a single chokepoint. */
+export interface CorsOptions {
+  /** Allowed origins, exact scheme+host+port match (no wildcard subdomains).
+   * A list CONTAINING `'*'` is treated as wildcard: every origin allowed,
+   * echoed as the literal `*`. */
+  origins: string[]
+  /** Preflight `Access-Control-Allow-Methods`. Default: GET,POST,PUT,PATCH,DELETE,OPTIONS. */
+  methods?: string[]
+  /** Preflight `Access-Control-Allow-Headers`. Default: echo the request's
+   * `Access-Control-Request-Headers`. */
+  headers?: string[]
+  /** `Access-Control-Expose-Headers` on actual responses. Default: none. */
+  exposeHeaders?: string[]
+  /** Emit `Access-Control-Allow-Credentials: true`. INVALID combined with a
+   * wildcard origin — serve() throws at boot (browsers silently reject
+   * `Allow-Credentials` with `Allow-Origin: *`; we make it loud). */
+  credentials?: boolean
+  /** Preflight `Access-Control-Max-Age` seconds. Default 600. */
+  maxAgeSeconds?: number
+}
+
+/** Fail-fast CORS validation, mirroring Rust's `CorsConfig::validate` so a bad
+ * config throws in TS before the native call (clearer stack, same message
+ * shape). Exported for unit testing. */
+export function validateCorsOptions(cors: CorsOptions): void {
+  if (!Array.isArray(cors.origins) || cors.origins.length === 0) {
+    throw new Error('cors.origins must be non-empty')
+  }
+  if (cors.origins.includes('*') && cors.credentials) {
+    throw new Error(
+      "cors.credentials cannot be combined with a wildcard origin '*' — browsers reject Access-Control-Allow-Credentials with Access-Control-Allow-Origin: *",
+    )
+  }
+}
+
 export interface ServeOptions {
   /** Host/address to bind on. A hostname (e.g. `localhost`, resolved Rust-side)
    * or a literal IP such as `0.0.0.0` / `127.0.0.1`. */
@@ -36,6 +75,10 @@ export interface ServeOptions {
   /** URL prefix the action router mounts under (e.g. `/_actions`). Threaded
    * into Rust's ServeOptions.action_prefix. */
   actionPrefix?: string
+  /** Optional global CORS policy — see {@link CorsOptions}. Validated at boot
+   * (TS first, Rust mirrors): `origins` non-empty; `credentials` + wildcard
+   * origin throws. */
+  cors?: CorsOptions
   /** MCP support — pass a manifest built via brust.buildMcpManifest. brust.serve
    * does NOT auto-wire MCP into workers; the worker branch of the entry file must
    * call brust.loadMcpManifest() + makeMcpServer() itself and pass the McpServer
@@ -148,6 +191,9 @@ async function readManifestFromPath(
 
 export const brust = {
   async serve(opts: ServeOptions): Promise<void> {
+    // Fail fast on a bad CORS config BEFORE touching native state (Rust
+    // re-validates in begin_serve — same rules, second line of defense).
+    if (opts.cors) validateCorsOptions(opts.cors)
     if (opts.actions) {
       // Register endpoint method/path with Rust. The router keys each by its
       // registration index; the worker dispatches on that same index string.
@@ -167,6 +213,9 @@ export const brust = {
       // `actionPrefix` (not snake_case). A snake_case key is silently dropped,
       // leaving the prefix at its default — which broke custom-prefix routing.
       actionPrefix: opts.actionPrefix,
+      // Optional global CORS policy (camelCase fields — napi-rs maps them onto
+      // NapiCorsOptions' snake_case Rust fields).
+      cors: opts.cors,
       // X-Powered-By value from the build's generator.json (stashed by view
       // boot; artifact fallback covers any ordering edge). Single word — no
       // napi case-mapping trap possible.
@@ -208,6 +257,11 @@ export const brust = {
     const gracefulExit = (code: number) => {
       if (draining) process.exit(code)
       draining = true
+      // R9: stop cache-sync (close redis clients, cancel backoff timers) so a
+      // retry can't fire between drain and exit. Best-effort and PARALLEL to
+      // the drain — it must never delay exit (the dynamic import resolves from
+      // cache when sync was configured, and is a no-op module load otherwise).
+      import('./cache-sync.ts').then((m) => m.stopCacheSync()).catch(() => {})
       ;(native as any)
         .beginDrain(drainTimeoutMs)
         .catch(() => {})
@@ -261,9 +315,16 @@ export const brust = {
     // before any traffic hits.
     const expected = routes.filter((r) => r.nativeTemplate).map((r) => r.nativeTemplate!)
     if (expected.length > 0) {
-      const registered = new Set<string>((native as any).napiListNativeTemplates() ?? [])
+      // Dual-tier check (boot env + R1 dynamic registry). `napiHasTemplate`
+      // may be absent on a stale addon — fall back to the boot-tier list.
+      const hasTemplate: (name: string) => boolean = (native as any).napiHasTemplate
+        ? (name) => (native as any).napiHasTemplate(name)
+        : (() => {
+            const registered = new Set<string>((native as any).napiListNativeTemplates() ?? [])
+            return (name) => registered.has(name)
+          })()
       for (const name of expected) {
-        if (!registered.has(name)) {
+        if (!hasTemplate(name)) {
           console.warn(
             `[brust] native: true route expects template "${name}.jinja" but it's not registered (boot warning — request will 500)`,
           )
@@ -378,6 +439,9 @@ export const brust = {
     actions?: import('./define-actions.ts').ActionsBuilder
     /** URL prefix the action router mounts under. Threaded to serve(). */
     actionPrefix?: string
+    /** Optional global CORS policy — see {@link CorsOptions}. Threaded to
+     * serve() like `actionPrefix`. */
+    cors?: CorsOptions
     /** Overrides merged into the underlying `serve()` call (main thread). */
     serve?: Partial<Omit<ServeOptions, 'entry' | 'actions' | 'mcp'>>
     /** Per-worker SAB size in bytes. Default 256 KB. */
@@ -425,13 +489,18 @@ export const brust = {
     const endpoints: EndpointDef[] = opts.actions?.endpoints ?? []
 
     if (!isWorker) {
-      const { host, port, workers, cacheMaxEntries, cachePageMaxEntries } = await loadConfig(
-        process.cwd(),
-        {
-          host: opts.address,
-          port: opts.port,
-        },
-      )
+      const {
+        host,
+        port,
+        workers,
+        cacheMaxEntries,
+        cachePageMaxEntries,
+        cacheSyncUrl,
+        cacheSyncChannel,
+      } = await loadConfig(process.cwd(), {
+        host: opts.address,
+        port: opts.port,
+      })
       console.log(`[brust] main: spawning ${workers} worker threads`)
       if (cacheMaxEntries !== undefined || cachePageMaxEntries !== undefined)
         this.configureCache({
@@ -439,6 +508,23 @@ export const brust = {
           pageMaxEntries: cachePageMaxEntries ?? 1000,
         })
 
+      if (cacheSyncUrl) {
+        // R9 cross-process invalidation. Env is set BEFORE serve() spawns
+        // workers (baseEnv = { ...process.env }) so worker isolates can
+        // publish from loaders/actions; the subscriber lives HERE in the main
+        // isolate only (the NAPI caches are process-global, so workers see
+        // applied invalidations implicitly). The sender token identifies this
+        // process so the subscriber skips its own published messages.
+        const cacheSync = await import('./cache-sync.ts')
+        process.env.BRUST_CACHE_SYNC_URL = cacheSyncUrl
+        // Always write the RESOLVED channel: a TOML-only channel would
+        // otherwise reach the subscriber here but not the workers' env —
+        // publishers and subscriber would silently split onto two channels.
+        process.env.BRUST_CACHE_SYNC_CHANNEL = cacheSyncChannel ?? cacheSync.CHANNEL_DEFAULT
+        process.env.BRUST_CACHE_SYNC_SENDER ??= crypto.randomUUID()
+        cacheSync.startCacheSync({ url: cacheSyncUrl, channel: cacheSyncChannel })
+      }
+
       // md routes present? (leaf carries `__mdSource`, attached by mdRoutes()).
       // Checked inline — no md-module import — so md-free apps never load the
       // markdown pipeline. Gates the md emits below AND in the dev coordinator.
@@ -863,6 +949,7 @@ export const brust = {
         entry: opts.entry,
         actions: opts.actions,
         actionPrefix: opts.actionPrefix,
+        cors: opts.cors,
         ...(mcpManifest ? { mcp: { manifest: mcpManifest } } : {}),
         ...opts.serve,
       })
@@ -1025,6 +1112,8 @@ export {
   notFound,
   redirect,
   isNativeVerdict,
+  httpError,
+  isHttpErrorTrigger,
 } from './routes.ts'
 export type {
   Route,
@@ -1036,6 +1125,8 @@ export type {
   RouteResponse,
   Middleware,
   NativeVerdict,
+  HttpErrorOpts,
+  HttpErrorTrigger,
 } from './routes.ts'
 
 export { defineActions, isValidEndpointPath } from './define-actions.ts'
@@ -1078,12 +1169,20 @@ export type { StoreHandle, Snapshot, Signal, Computed } from './store/index.ts'
 // exported.
 export { dedupe, cachedFetch } from './loader-cache.ts'
 
+// R4 — public fragment rendering: a React component → static HTML string with
+// the request/store/loader-cache contexts scoped per call (no island hydration;
+// native/jinja fragments are `templates.render`).
+export { renderFragment } from './render/fragment.ts'
+export type { RenderFragmentOpts } from './render/fragment.ts'
+
 export { buildIslands } from './islands/build.ts'
 export type { IslandsBuildResult, BuildIslandsOptions } from './islands/build.ts'
 
 export { cache } from './cache.ts'
 export type { InvalidateArgs } from './cache.ts'
 
+export { templates } from './templates.ts'
+
 export { getRequestContext } from './request-context.ts'
 export { cookies } from './cookies.ts'
 export type { CookieOptions } from './cookies.ts'