gina 0.3.2-alpha.1 → 0.3.3-alpha.1

package/CHANGELOG.md

@@ -6,6 +6,19 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
 and is generated by [Changie](https://github.com/miniscruff/changie).
 
 
+## 0.3.2 - 2026-04-07
+### Added
+* JSON Schema files for all config files (app, connectors, manifest, routing, settings, watchers, crons) — published at gina.io/schema/*
+* Entity short-name aliases — use self.getEntity('user') instead of self.getEntity('user/user')
+### Changed
+* Server engines — font MIME types (woff/woff2/otf/ttf) and Inspector endpoint improvements
+* Inspector UI — tab layout presets (Balanced/Backend/Frontend/Custom with drag-to-reorder), query performance banners, missing-index banners, cross-bundle QI propagation, render-json Inspector data feed, _inspectorActive profiling gate
+### Fixed
+* Model loading without onInitialize hook — entities load correctly when the model has no onInitialize
+* CLI stability and install path edge cases
+* getConfig() proxy override — guards against undefined PROXY_HOSTNAME on same-origin POST requests with Origin header
+* bundle:start crash on unregistered bundle — isDefined guard moved before property access
+
 ## 0.3.1 - 2026-04-06
 ### Added
 * SQL index reporting Phase A (#QI1): connectors read indexes.sql at startup and populate query instrumentation index badges in the Inspector

package/CONVENTIONS.md

@@ -500,6 +500,48 @@ All planned releases should stay in the `0.1.x` series (see roadmap) to avoid th
 
 ---
 
+## 17. Comma-First Object Literals (JS only)
+
+**Current practice:** Multi-line object and array literals use comma-first style with colon alignment. This applies to JavaScript source files only — JSON config files (`routing.json`, `settings.json`, `env.json`, etc.) use standard trailing-comma JSON syntax.
+
+```js
+// correct — comma-first with colon alignment
+var note = {
+    id        : store.nextId++
+  , text      : text
+  , createdAt : new Date().toISOString()
+};
+
+var options = {
+    hostname : target.hostname
+  , port     : target.port
+  , path     : target.path
+  , method   : 'GET'
+  , headers  : headers
+};
+
+// also applies to arrays when elements are on separate lines
+var bundles = [
+    'api'
+  , 'dashboard'
+  , 'public'
+];
+```
+
+**Rules:**
+- First property on the opening `{` / `[` line (no leading comma)
+- Subsequent properties prefixed with `, ` (comma + space) at the same indentation level as the first property's key, minus 2 characters
+- Colons aligned with spaces (matching §7 alignment conventions)
+- **JS only** — JSON files cannot use comma-first (JSON syntax requires trailing commas between values, and the last value must have no trailing comma)
+- Do not mix comma-first and comma-last in the same file
+
+**Why:**
+- Cleaner diffs — adding or removing a property touches exactly one line
+- Missing commas are immediately visible (they line up vertically)
+- Aligns naturally with Gina's colon-alignment style
+
+---
+
 ## Known Anti-Patterns
 
 | Anti-pattern | Location | Risk | Roadmap item |

package/README.md

@@ -37,12 +37,14 @@ gina bundle:start api @myproject
 open https://localhost:3100
 ```
 
-## What's in 0.3.1
-
-- **Dependency reduction** — `ssl-checker`, `colors`, and `uuid` removed; engine.io is now the sole runtime dependency
-- **HTTP/2 direct stream for HTML** — `render-swig.js` uses `stream.respond()` + `stream.end()` directly, bypassing the HTTP/1.1 compat layer
-- **SQL index reporting** — MySQL, PostgreSQL, and SQLite connectors read `indexes.sql` at startup; Inspector Query tab shows index badges per query
-- **Release workflow fixes** — auto-delete publish branch; stable docs merge to main
+## What's in 0.3.2
+
+- **JSON Schema for config files** — 7 schemas published at `gina.io/schema/*` (app, connectors, manifest, routing, settings, watchers, crons)
+- **Model loading without `onInitialize`** — entities load correctly when the model has no `onInitialize` hook
+- **Entity short-name aliases** — use `self.getEntity('user')` instead of the full `self.getEntity('user/user')`
+- **`getConfig()` proxy override fix** — guards against undefined `PROXY_HOSTNAME` on same-origin POST requests
+- **Inspector polish** — tab layout presets (Balanced/Backend/Frontend/Custom with drag-to-reorder), query performance banners, missing-index banners, cross-bundle QI propagation, `render-json` Inspector data feed
+- **CLI stability fixes** — `bundle:start` crash on unregistered bundle, install path edge cases
 
 See the full [Changelog](./CHANGELOG.md) and [Roadmap](./ROADMAP.md).
 

package/ROADMAP.md

@@ -13,7 +13,8 @@ This roadmap covers planned features, architectural improvements, new connectors
 | **Apr 2026** | `0.1.8` ✅ | Scaffold correctness · K8s support · Dependency injection · Automatic version migration |
 | **Q2 2026** | `0.2.0` ✅ | Stability · WatcherService · Redis & SQLite connectors · K8s session storage · Startup cache · Pointer compression · Couchbase v2 deprecation · Couchbase security & critical bug fixes · HTTP/2 security hardening |
 | **Q3 2026** | `0.3.0` ✅ | Async/await · Dev hot-reload · MySQL & PostgreSQL connectors · AI Phase 2 · Tutorials · Mobile backend guide · Route radix tree · Connector peerDependencies · 103 Early Hints · HTTP/2 observability · Security & CVE page · Couchbase connector hardening · Inspector Phase 1 + Phase 2 · CLI Tier 1 (project lifecycle, port:set, framework:get) |
-| **Q3 2026** | `0.3.1` | Release workflow fixes · SQL query index reporting · HTTP/2 performance · Dependency reduction (`ssl-checker`, `colors`, `uuid` → Node.js built-ins) |
+| **Q3 2026** | `0.3.1` ✅ | Release workflow fixes · SQL index reporting Phase A · HTTP/2 direct stream for HTML · Dependency reduction (`ssl-checker`, `colors`, `uuid` removed — engine.io sole runtime dep) |
+| **Q3 2026** | `0.3.2` | Publish JSON Schema files for config files · Model loading fixes · Entity short-name aliases |
 | **Q4 2026** | `0.4.0` | TypeScript declarations · AI agents (OpenAPI, MCP) · ScyllaDB connector · PWA scaffold · Prometheus metrics · Advanced tutorial · Website redesign · Docs offline ZIP · Bun investigation · Couchbase v2 removal · HTTP/2 hardening · Trailer support · CLI Tier 2 (bundle/project status, rename, copy, protocol:remove, minions) |
 | **Q1 2027** | `0.5.0` | ESM support · Template engine migration · Structured logging · Alt-Svc · HTTP/2 priorities · WebSocket over HTTP/2 · Inspector Production · CLI Tier 3 (project:move, framework:update, backup/restore, man pages) |
 | **Q3 2027** | `1.0.0` | First stable release — Windows alpha compatibility is a hard gate |
@@ -206,6 +207,7 @@ A cold audit of the Couchbase connector identified two critical security vulnera
 | Status | Feature | Version | Target |
 | --- | --- | --- | --- |
 | ✅ | **JSON Schemas for config files** — Machine-readable schemas for `routing.json`, `connectors.json`, `app.json`, `settings.json`, `app.crons.json`. Adds `"$schema"` references to generated scaffold files. Gives editors free validation and autocomplete; gives AI assistants authoritative field names so generated config is correct on the first attempt. | `0.2.0` | Q2 2026 |
+| ✅ | **Publish JSON Schema files at `gina.io/schema/*`** — 7 JSON Schema files published: `app.json`, `app.crons.json`, `connectors.json`, `manifest.json`, `routing.json`, `settings.json`, `watchers.json`. IDEs can now download and validate config files automatically. | `0.3.2` | Q3 2026 |
 | 📋 | **TypeScript declaration files** — Cross-listed with Modernisation Phase 4. Essential for AI code generation accuracy. | `0.4.0` | Q4 2026 |
 
 ### Phase 2 — Gina apps can use AI
@@ -277,7 +279,8 @@ Gina's built-in per-bundle inspector. Phases 1–2 ship as an embedded SPA at `/
 | Status | Feature | Version | Target |
 | --- | --- | --- | --- |
 | 🔨 | **`services/src/inspector/` standalone bundle** — ~~Rename `services/src/toolbar/` to `services/src/inspector/`~~ (done). Inspector SPA as a standalone gina bundle on port 4101. Connects to bundles via authenticated WebSocket. The embedded SPA at `/_gina/inspector/` remains for quick dev-mode access. | `0.5.0` | Q1 2027 |
-| 🔨 | **Agent endpoint (`/_gina/agent`)** — ~~Dev-mode SSE endpoint — combined data + log stream, CORS, HTTP/2 support, Inspector SPA `tryAgent()` with `?target=` param~~ (done). Remaining: upgrade to authenticated WebSocket, API key gating, production-safe toggle. | `0.5.0` | Q1 2027 |
+| ✅ | **Agent endpoint — dev-mode SSE (`/_gina/agent`)** — Combined data + log SSE stream. CORS, server.js + server.isaac.js (HTTP/2), Inspector SPA `tryAgent()` with `?target=` param. Named events (`event: data`, `event: log`). Manual connect form on "No source" overlay. | `0.3.0` | 2026-04-05 |
+| 📋 | **Agent endpoint — production auth** — Upgrade `/_gina/agent` to authenticated WebSocket. API key gating (`inspector.agent_key` in `settings.json`), production-safe toggle. | `0.5.0` | Q1 2027 |
 | 📋 | **Toggleable instrumentation** — Runtime toggle for query instrumentation independent of `NODE_ENV_IS_DEV`. Enable in production for a time window without full dev mode. Minimal overhead when disabled. | `0.5.0` | Q1 2027 |
 | 📋 | **Multi-bundle dashboard** — Discover all running bundles via `ports.json`, connect to each agent. Full-stack request tracing across bundle boundaries. | post-1.0.0 | — |
 | 📋 | **Browser extension companion** — Chrome/Firefox DevTools panel. Thin UI shell connecting to the standalone Inspector via WebSocket. Optional — not a replacement. | post-1.0.0 | — |

package/bin/cli

@@ -304,6 +304,7 @@ async function onExec() {
         'cache:',
         'dev:',
         'env:',
+        'inspector:',
         'scope:',
         'framework:',
         'minion:',

package/bin/gina

@@ -121,6 +121,10 @@ function runAsSubProcess() {
     var error = null;
     child.stderr.on('data', function(err) {
         error = err.toString();
+        // Skip Node.js ExperimentalWarning messages (benign — e.g., SQLite on Node 25+)
+        if (/ExperimentalWarning/.test(error)) {
+            return;
+        }
         if (/Debugger listening|Debugger attached|Warning|address already in use/i.test(error)) {
             console.warn(error);
             return process.exit(1);

package/framework/v0.3.3-alpha.1/VERSION

@@ -0,0 +1 @@
+0.3.3-alpha.1

package/framework/{v0.3.2-alpha.1 → v0.3.3-alpha.1}/core/asset/plugin/dist/vendor/gina/inspector/index.html

@@ -87,10 +87,14 @@
           Custom
         </button>
       </div>
+      <button class="bm-btn bm-layout-reset fade-out" id="bm-layout-reset">Reset</button>
       <div class="bm-layout-preview" id="bm-layout-preview"></div>
     </div>
     <!-- Environment info (different bg, resizable) -->
     <div class="bm-settings-env-wrap" id="bm-settings-env-wrap">
+      <button class="bm-env-copy" id="bm-env-copy" title="Copy environment info">
+        <svg viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect x="5" y="5" width="8" height="8" rx="1"/><path d="M3 11V3a1 1 0 0 1 1-1h8"/></svg>
+      </button>
       <div class="bm-settings-env" id="bm-settings-env"></div>
       <div class="bm-resize-handle" id="bm-env-resize" title="Drag to resize">&#x2261;</div>
     </div>

package/framework/{v0.3.2-alpha.1 → v0.3.3-alpha.1}/core/asset/plugin/dist/vendor/gina/inspector/inspector.css

@@ -2,7 +2,7 @@
 /* ── Font ─────────────────────────────────────────────────────────────────── */
 @font-face {
   font-family: "have_heart_oneregular";
-  src: url("https://gina.io/css/fonts/have_heart_one-webfont.woff2") format("woff2"), url("https://gina.io/css/fonts/have_heart_one-webfont.woff") format("woff");
+  src: url("have_heart_one-webfont.woff2") format("woff2");
   font-weight: normal;
   font-style: normal;
   font-display: swap;
@@ -495,6 +495,11 @@ input:checked ~ .bm-toggle-track::after {
   letter-spacing: 0.02em;
 }
 
+.bm-lp-pill-hidden {
+  opacity: 0.35;
+  text-decoration: line-through;
+}
+
 .bm-lp-arrow {
   color: var(--text-dim);
   font-size: 10px;
@@ -502,6 +507,26 @@ input:checked ~ .bm-toggle-track::after {
   margin: 0 1px;
 }
 
+.bm-lp-arrow-dim {
+  opacity: 0.25;
+}
+
+/* Reset — .bm-btn sized for the settings row, fade in/out with Custom */
+.bm-layout-reset {
+  height: 22px;
+  font-size: 10px;
+  line-height: 22px;
+  padding: 0 8px;
+  opacity: 1;
+  visibility: visible;
+  transition: color 0.15s, border-color 0.15s, background 0.15s, opacity 0.25s ease, visibility 0.25s ease;
+}
+.bm-layout-reset.fade-out {
+  opacity: 0;
+  visibility: hidden;
+  pointer-events: none;
+}
+
 /* Light theme adjustments */
 [data-theme=light] .bm-layout-btn.active {
   color: #fff;
@@ -544,6 +569,58 @@ input:checked ~ .bm-toggle-track::after {
   position: relative;
 }
 
+/* ── Tab close button (custom mode — hide tabs) ────────────────────── */
+.bm-tab-close {
+  display: none;
+  font-size: 13px;
+  line-height: 1;
+  color: var(--text-dim);
+  opacity: 0;
+  margin-left: 4px;
+  padding: 0 2px;
+  cursor: pointer;
+  transition: opacity 0.15s, color 0.15s;
+  vertical-align: middle;
+}
+
+.bm-tabs.bm-drag-mode .bm-tab-close {
+  display: inline;
+}
+
+.bm-tabs.bm-drag-mode .bm-tab:hover .bm-tab-close {
+  opacity: 0.6;
+}
+
+.bm-tab-close:hover {
+  opacity: 1 !important;
+  color: var(--err);
+}
+
+/* Nudge animation — staggered wiggle when entering custom mode */
+@keyframes bm-nudge {
+  0% {
+    transform: translateX(0);
+  }
+  20% {
+    transform: translateX(-3px);
+  }
+  40% {
+    transform: translateX(3px);
+  }
+  60% {
+    transform: translateX(-2px);
+  }
+  80% {
+    transform: translateX(1px);
+  }
+  100% {
+    transform: translateX(0);
+  }
+}
+.bm-tab-nudge {
+  animation: bm-nudge 0.35s ease-in-out;
+}
+
 /* ── Footer ─────────────────────────────────────────────────────────── */
 .bm-footer {
   display: flex;
@@ -557,18 +634,26 @@ input:checked ~ .bm-toggle-track::after {
 }
 
 .bm-footer-version {
-  color: var(--text-dim);
-  font: 10px var(--sans);
-  white-space: nowrap;
-  opacity: 0.7;
+  display: flex;
+  align-items: baseline;
+  gap: 5px;
   flex-shrink: 0;
+  white-space: nowrap;
 }
 
 .bm-footer-brand {
   font-family: "have_heart_oneregular";
   font-weight: 400;
-  font-size: 13px;
-  vertical-align: baseline;
+  font-size: 18px;
+  color: var(--text-dim);
+  opacity: 0.5;
+  letter-spacing: 0.02em;
+}
+
+.bm-footer-ver {
+  font: 9px var(--mono);
+  color: var(--text-dim);
+  opacity: 0.5;
 }
 
 /* Memory gauge (inside footer) */
@@ -653,6 +738,37 @@ input:checked ~ .bm-toggle-track::after {
   word-break: break-all;
 }
 
+/* Copy env button */
+.bm-env-copy {
+  position: absolute;
+  top: 6px;
+  right: 8px;
+  z-index: 2;
+  background: none;
+  border: 1px solid transparent;
+  border-radius: 4px;
+  padding: 3px;
+  cursor: pointer;
+  color: var(--text-dim);
+  opacity: 0.4;
+  transition: opacity 0.15s, color 0.15s, border-color 0.15s;
+}
+.bm-env-copy svg {
+  width: 13px;
+  height: 13px;
+  display: block;
+}
+.bm-env-copy:hover {
+  opacity: 1;
+  color: var(--accent);
+  border-color: var(--border);
+}
+.bm-env-copy.copied {
+  opacity: 1;
+  color: var(--ok);
+  border-color: var(--ok);
+}
+
 /* Resize handle */
 .bm-resize-handle {
   position: absolute;
@@ -1261,6 +1377,39 @@ details[open] > summary.bm-summary::before {
   font-style: italic;
 }
 
+/* ── Tab empty state (JSON-only APIs — no view/forms) ──────────────── */
+.bm-tab-empty {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  padding: 48px 24px;
+  text-align: center;
+  min-height: 200px;
+}
+
+.bm-tab-empty-icon {
+  width: 40px;
+  height: 40px;
+  color: var(--text-dim);
+  opacity: 0.35;
+  margin-bottom: 16px;
+}
+
+.bm-tab-empty p {
+  font-size: 14px;
+  color: var(--text-dim);
+  margin: 0 0 8px;
+}
+
+.bm-tab-empty-hint {
+  font-size: 11px;
+  color: var(--text-dim);
+  opacity: 0.6;
+  max-width: 280px;
+  line-height: 1.5;
+}
+
 .bm-hint {
   color: var(--text-dim);
   font: 12px var(--sans);
@@ -3261,11 +3410,13 @@ details[open] > summary.bm-summary::before {
     font-size: 9px;
   }
   .bm-footer-version {
-    font-size: 9px;
     padding-left: 4px;
   }
   .bm-footer-brand {
-    font-size: 11px;
+    font-size: 15px;
+  }
+  .bm-footer-ver {
+    font-size: 8px;
   }
   /* Scroll area: tighter padding */
   .bm-scroll-area {