gina 0.3.3-alpha.1 → 0.3.4-alpha.1

package/CHANGELOG.md

@@ -6,6 +6,35 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html),
 and is generated by [Changie](https://github.com/miniscruff/changie).
 
 
+## 0.3.3 - 2026-04-11
+### Added
+* Live database index introspection for Inspector Query tab — SQL connectors (MySQL, PostgreSQL, SQLite) now report actual database indexes without requiring manual indexes.sql files
+* Implement `framework:get` CLI command — read one or all keys from ~/.gina/settings.json (`gina get --key`, `gina get all`). Completes the `gina set` / `gina get` pair.
+* Implement `port:set` CLI command — set or update a port number for a bundle/environment/protocol/scheme combination. Supports both positional syntax (`gina port:set http/1.1:3200 frontend @myproject/dev`) and flag syntax (`--protocol=`, `--scheme=`, `--port=`, `--env=`), with interactive prompts for missing values.
+### Changed
+* Improved popin loading and opening performance: parallel resource loading via DOM injection (replaces sequential XHR + eval), eliminated redundant DOM binding on open, reduced DOM scans with querySelectorAll, classList API, cached RegExp, lightweight ID counter, per-load XHR for concurrent popins
+* Replacing uuid/crypto.randomUUID() with internal lib/uuid — lightweight base-62 ID generator using crypto.getRandomValues with bitmask bias avoidance, zero external dependencies
+* Replaced vendored swig-1.4.2 with @rhinostone/swig npm dependency in framework/v*/package.json
+### Fixed
+* Fixed malformed regex in events.js XHR error handler, operator precedence bug in binding.js error logging, typo in events.js header loop variable, implemented popinDestroy (was a stub), and fixed registeredPopins duplicate-check array never being populated
+* explainForIndexes crashes on bulkInsert path where conn._cluster is undefined (conn is a scope object, cluster lives at conn._scope._bucket._cluster). The crash occurs before self.emit(trigger), silently hanging the entity callback and causing a 504 timeout with no error in logs. Fixed by resolving the cluster from either conn shape, with early-return guard and internal try/catch so dev-mode instrumentation never blocks the emit path.
+* Validator global validation pass no longer displays errors for untouched fields. On every field blur, the validator runs a full-form validation to determine submit button state (isFormValid). Previously, the global pass displayed errors for ALL invalid fields — untouched fields would suddenly show errors when the user interacted with a different field. Now only the field the user actually touched (event.target.name) shows errors. Two call sites fixed in validator/src/main.js (~line 3337 and ~line 4865).
+* Vendoring streamsearch-1.1.0 to fix busboy MODULE_NOT_FOUND crash in Docker containers after framework directory rename
+* Forwarding emerg message to CLI output and docker logs when a bundle aborts during startup
+* Config loader checks MIDDLEWARE file existence before reading — prevents crash in containers or environments where the file is absent
+* requireJSON now tolerates trailing commas in JSON config files — strips them and warns instead of calling emerg+exit, preventing bundle abort on common authoring mistakes
+
+## 0.3.3-alpha.3 - 2026-04-09
+### Added
+* TypeScript declaration files (`types/index.d.ts`, `types/globals.d.ts`, `types/gna.d.ts`) — `.d.ts` declarations for the public surface: `SuperController`, `EntitySuper`, global helpers, connector config shapes, `routing.json` schema, all config file interfaces, `GinaRequest`/`GinaResponse` types, `PathObject`, `uuid`, and the `Gna` lifecycle module. Zero TS migration of internals — declarations only. Enables IDE autocomplete and static analysis for consumer projects. `package.json` wired with `"types"` and `"typesVersions"`.
+* Explicit exports via `require('gina/gna')` — all global helpers (`getContext`, `setContext`, `_`, `requireJSON`, `onCompleteCall`, `getModel`, `uuid`, `ApiError`, etc.), `SuperController`, and `EntitySuper` available as named imports. Uses lazy getters so symbols resolve at access time (after framework boot). Enables IDE go-to-definition and `import { getContext } from 'gina/gna'`-style usage alongside the existing global injection.
+
+## 0.3.3-alpha.2 - 2026-04-08
+### Added
+* `bundle:openapi` CLI command — generates an OpenAPI 3.1.0 specification from `routing.json` for one or more bundles. Alias: `bundle:oas`. Supports `--output` flag for custom output path. Zero manual spec writing — `url`, `method`, `param.control`, `namespace`, `requirements`, `_comment`, `_sample`, `middleware`, and `cache` fields all map to their OpenAPI equivalents. Makes any Gina app consumable by AI agents, API gateways, and testing tools.
+* `framework:get` CLI command — read one or all keys from `~/.gina/settings.json`
+* `port:set` CLI command — set or update a specific port for a bundle/env/protocol/scheme combination
+
 ## 0.3.2 - 2026-04-07
 ### Added
 * JSON Schema files for all config files (app, connectors, manifest, routing, settings, watchers, crons) — published at gina.io/schema/*

package/README.md

@@ -1,6 +1,6 @@
 # Gina
 
-[![npm version](https://badge.fury.io/js/gina.svg)](https://badge.fury.io/js/gina) [![GitHub version](https://badge.fury.io/gh/gina-io%2Fgina.svg)](https://badge.fury.io/gh/gina-io%2Fgina) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![Node.js >= 22](https://img.shields.io/badge/node-%3E%3D%2022-brightgreen)](https://nodejs.org) [![Tests](https://github.com/gina-io/gina/actions/workflows/test.yml/badge.svg)](https://github.com/gina-io/gina/actions/workflows/test.yml)
+[![npm version](https://badge.fury.io/js/gina.svg)](https://badge.fury.io/js/gina) [![npm downloads](https://img.shields.io/npm/dm/gina)](https://www.npmjs.com/package/gina) [![GitHub stars](https://img.shields.io/github/stars/gina-io/gina)](https://github.com/gina-io/gina/stargazers) [![GitHub version](https://badge.fury.io/gh/gina-io%2Fgina.svg)](https://badge.fury.io/gh/gina-io%2Fgina) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![Node.js >= 22](https://img.shields.io/badge/node-%3E%3D%2022-brightgreen)](https://nodejs.org) [![Tests](https://github.com/gina-io/gina/actions/workflows/test.yml/badge.svg)](https://github.com/gina-io/gina/actions/workflows/test.yml) [![Socket Badge](https://socket.dev/api/badge/npm/package/gina)](https://socket.dev/npm/package/gina)
 
 > **Documentation:** [gina.io/docs](https://gina.io/docs/) · **Issues:** [GitHub](https://github.com/gina-io/gina/issues) · **Changelog:** [CHANGELOG.md](./CHANGELOG.md)
 
@@ -37,14 +37,17 @@ gina bundle:start api @myproject
 open https://localhost:3100
 ```
 
-## What's in 0.3.2
+## What's in 0.3.3
 
-- **JSON Schema for config files** — 7 schemas published at `gina.io/schema/*` (app, connectors, manifest, routing, settings, watchers, crons)
-- **Model loading without `onInitialize`** — entities load correctly when the model has no `onInitialize` hook
-- **Entity short-name aliases** — use `self.getEntity('user')` instead of the full `self.getEntity('user/user')`
-- **`getConfig()` proxy override fix** — guards against undefined `PROXY_HOSTNAME` on same-origin POST requests
-- **Inspector polish** — tab layout presets (Balanced/Backend/Frontend/Custom with drag-to-reorder), query performance banners, missing-index banners, cross-bundle QI propagation, `render-json` Inspector data feed
-- **CLI stability fixes** — `bundle:start` crash on unregistered bundle, install path edge cases
+- **Live database index introspection** — Inspector Query tab now queries actual database indexes (MySQL, PostgreSQL, SQLite) without requiring manual `indexes.sql` files
+- **`bundle:openapi`** — generate an OpenAPI 3.1.0 spec from `routing.json` with `gina bundle:openapi @myproject`
+- **`framework:get` and `port:set` CLI commands** — read settings and set individual bundle ports without a full reset
+- **Swig migration** — vendored `swig-1.4.2` replaced with `@rhinostone/swig` npm dependency (maintained fork with CVE-2023-25345 patched)
+- **Internal `lib/uuid`** — lightweight base-62 ID generator replaces external uuid dependency
+- **Popin performance** — parallel DOM-injected resource loading, `popinDestroy()`, `classList` API, cached RegExp
+- **Validator fix** — global validation pass no longer shows errors for untouched fields
+- **Docker fixes** — vendored `streamsearch` for busboy, emerg forwarding to CLI output and docker logs
+- **requireJSON resilience** — trailing commas in config files now produce a warning instead of aborting the bundle
 
 See the full [Changelog](./CHANGELOG.md) and [Roadmap](./ROADMAP.md).
 
@@ -58,6 +61,13 @@ Full installation guide, tutorials, configuration reference, and API docs at **[
 - [Configuration reference](https://gina.io/docs/reference/)
 - [Security & CVE compliance](https://gina.io/docs/security)
 
+## Ecosystem
+
+| Package | Description |
+| --- | --- |
+| [@rhinostone/swig](https://github.com/gina-io/swig) | Maintained fork of the Swig template engine (upstream abandoned since 2015). CVE-2023-25345 patched. |
+| [gina-starter](https://github.com/gina-io/gina-starter) | Minimal starter project — one bundle, one route, Docker Compose included |
+
 ## Governance
 
 Gina is co-authored by **Martin Luther** ([Rhinostone](https://rhinostone.com)) and **Fabrice Delaneau** ([fdelaneau.com](https://fdelaneau.com)). Final decisions on direction, API design, and releases rest with Martin Luther. Community contributions and RFCs are welcome and taken seriously. See [GOVERNANCE.md](./GOVERNANCE.md) for details.

package/ROADMAP.md

@@ -14,8 +14,9 @@ This roadmap covers planned features, architectural improvements, new connectors
 | **Q2 2026** | `0.2.0` ✅ | Stability · WatcherService · Redis & SQLite connectors · K8s session storage · Startup cache · Pointer compression · Couchbase v2 deprecation · Couchbase security & critical bug fixes · HTTP/2 security hardening |
 | **Q3 2026** | `0.3.0` ✅ | Async/await · Dev hot-reload · MySQL & PostgreSQL connectors · AI Phase 2 · Tutorials · Mobile backend guide · Route radix tree · Connector peerDependencies · 103 Early Hints · HTTP/2 observability · Security & CVE page · Couchbase connector hardening · Inspector Phase 1 + Phase 2 · CLI Tier 1 (project lifecycle, port:set, framework:get) |
 | **Q3 2026** | `0.3.1` ✅ | Release workflow fixes · SQL index reporting Phase A · HTTP/2 direct stream for HTML · Dependency reduction (`ssl-checker`, `colors`, `uuid` removed — engine.io sole runtime dep) |
-| **Q3 2026** | `0.3.2` | Publish JSON Schema files for config files · Model loading fixes · Entity short-name aliases |
-| **Q4 2026** | `0.4.0` | TypeScript declarations · AI agents (OpenAPI, MCP) · ScyllaDB connector · PWA scaffold · Prometheus metrics · Advanced tutorial · Website redesign · Docs offline ZIP · Bun investigation · Couchbase v2 removal · HTTP/2 hardening · Trailer support · CLI Tier 2 (bundle/project status, rename, copy, protocol:remove, minions) |
+| **Q3 2026** | `0.3.2` ✅ | JSON Schema for config files · Entity short-name aliases · Model loading fix · getConfig() proxy fix · Inspector tab presets & QI propagation |
+| **Q3 2026** | `0.3.3` | OpenAPI spec generation · CLI port:set & framework:get · TypeScript declarations · Explicit exports |
+| **Q4 2026** | `0.4.0` | AI agents (MCP) · ScyllaDB connector · PWA scaffold · Prometheus metrics · Advanced tutorial · Website redesign · Docs offline ZIP · Bun investigation · Couchbase v2 removal · HTTP/2 hardening · Trailer support · CLI Tier 2 (bundle/project status, rename, copy, protocol:remove, minions) |
 | **Q1 2027** | `0.5.0` | ESM support · Template engine migration · Structured logging · Alt-Svc · HTTP/2 priorities · WebSocket over HTTP/2 · Inspector Production · CLI Tier 3 (project:move, framework:update, backup/restore, man pages) |
 | **Q3 2027** | `1.0.0` | First stable release — Windows alpha compatibility is a hard gate |
 
@@ -43,8 +44,8 @@ Stub commands confirmed in source — handler files exist but are empty or comme
 | Status | Feature | Version | Target |
 | --- | --- | --- | --- |
 | ✅ | **`project:start` / `project:stop` / `project:restart`** — Start, stop, or restart all bundles in a project with one command. Each delegates to `gina bundle:start/stop/restart @<project>` (bulk mode). `start` and `restart` accept `--env`, `--scope`, `--inspect-brk` (flags forwarded). 41 unit tests. | `0.3.0-alpha.1` | 2026-04-02 |
-| 📋 | **`framework:get`** — Read one or all keys from `~/.gina/settings.json`. Completes the `gina set` / `gina get` pair. Handler is 0 lines; workaround is `env:get`. | `0.3.0` | Q3 2026 |
-| 📋 | **`port:set`** — Set or update a specific port for a bundle/env/protocol/scheme combination without a full `port:reset`. Syntax: `gina port:set <protocol>:<port> <bundle> @<project>/<env>`. Handler is 0 lines despite being documented in `port/help.txt`. | `0.3.0` | Q3 2026 |
+| ✅ | **`framework:get`** — Read one or all keys from `~/.gina/settings.json`. Completes the `gina set` / `gina get` pair. Supports `--flag`, bare key names, and `all` keyword. | `0.3.3-alpha.2` | 2026-04-08 |
+| ✅ | **`port:set`** — Set or update a specific port for a bundle/env/protocol/scheme combination without a full `port:reset`. Positional syntax: `gina port:set <protocol>:<port> <bundle> @<project>/<env>`. Flag syntax: `--protocol=`, `--scheme=`, `--port=`, `--env=`. Prompts interactively for missing values. | `0.3.3-alpha.2` | 2026-04-08 |
 
 ### Tier 2 — `0.4.0`
 
@@ -97,8 +98,8 @@ Stub commands confirmed in source — handler files exist but are empty or comme
 
 | Status | Feature | Version | Target |
 | --- | --- | --- | --- |
-| 📋 | **Explicit exports for global helpers** — `getContext`, `setContext`, `_`, `requireJSON` etc. available as explicit `require('gina/gna').getContext` imports alongside the existing global injection. Enables IDE navigation and static analysis. | `0.4.0` | Q4 2026 |
-| 📋 | **TypeScript declaration files** — `.d.ts` declarations for the public surface: `SuperController`, `EntitySuper`, connector config shapes, `routing.json` schema. No TS migration of internals — just declarations for consumer projects. | `0.4.0` | Q4 2026 |
+| ✅ | **Explicit exports for global helpers** — `getContext`, `setContext`, `_`, `requireJSON` etc. available as explicit `require('gina/gna').getContext` imports alongside the existing global injection. Enables IDE navigation and static analysis. | `0.3.3-alpha.3` | 2026-04-09 |
+| ✅ | **TypeScript declaration files** — `.d.ts` declarations for the public surface: `SuperController`, `EntitySuper`, connector config shapes, `routing.json` schema, `PathObject`, `uuid`, all config file interfaces, `GinaRequest`/`GinaResponse`. No TS migration of internals — just declarations for consumer projects. `package.json` wired with `"types"` and `"typesVersions"`. | `0.3.3-alpha.3` | 2026-04-09 |
 | 📋 | **`gina connector:audit [@project]`** — reads `connectors.json`, maps each declared connector to its npm peer package (`mysql2`, `pg`, `ioredis`, `couchbase`, `openai`, `@anthropic-ai/sdk`, etc.), and runs `npm audit --json` scoped to those packages in the project's `node_modules`. Reports CVEs with severity and fix availability. If `socket` is installed in the project, delegates to it for supply-chain analysis (malware, typosquatting, protestware) instead of `npm audit`. Exit code 1 on any high/critical finding — CI-friendly. Only audits packages actually declared in `connectors.json`, not the full dependency tree. | `0.4.0` | Q4 2026 |
 
 ### Phase 5 — Future
@@ -208,7 +209,7 @@ A cold audit of the Couchbase connector identified two critical security vulnera
 | --- | --- | --- | --- |
 | ✅ | **JSON Schemas for config files** — Machine-readable schemas for `routing.json`, `connectors.json`, `app.json`, `settings.json`, `app.crons.json`. Adds `"$schema"` references to generated scaffold files. Gives editors free validation and autocomplete; gives AI assistants authoritative field names so generated config is correct on the first attempt. | `0.2.0` | Q2 2026 |
 | ✅ | **Publish JSON Schema files at `gina.io/schema/*`** — 7 JSON Schema files published: `app.json`, `app.crons.json`, `connectors.json`, `manifest.json`, `routing.json`, `settings.json`, `watchers.json`. IDEs can now download and validate config files automatically. | `0.3.2` | Q3 2026 |
-| 📋 | **TypeScript declaration files** — Cross-listed with Modernisation Phase 4. Essential for AI code generation accuracy. | `0.4.0` | Q4 2026 |
+| ✅ | **TypeScript declaration files** — Cross-listed with Modernisation Phase 4. Essential for AI code generation accuracy. | `0.3.3-alpha.3` | 2026-04-09 |
 
 ### Phase 2 — Gina apps can use AI
 
@@ -222,7 +223,7 @@ A cold audit of the Couchbase connector identified two critical security vulnera
 
 | Status | Feature | Version | Target |
 | --- | --- | --- | --- |
-| 📋 | **OpenAPI spec generation** — `gina bundle:openapi @myproject` emits `openapi.json` from `routing.json`. Zero manual spec writing — route annotations become `description` fields. Makes any Gina app consumable by AI agents, API gateways, and testing tools. | `0.4.0` | Q4 2026 |
+| ✅ | **OpenAPI spec generation** — `gina bundle:openapi @myproject` emits `openapi.json` from `routing.json`. Zero manual spec writing — route annotations become `description` fields. Makes any Gina app consumable by AI agents, API gateways, and testing tools. Alias: `bundle:oas`. Supports `--output` flag for custom path. | `0.3.3-alpha.2` | 2026-04-08 |
 | 📋 | **MCP server wrapper** — `gina bundle:mcp @myproject` exposes `routing.json` routes as MCP (Model Context Protocol) tools. Makes any Gina app a native MCP server discoverable by AI agents. | `0.4.0` | Q4 2026 |
 
 ---
@@ -309,4 +310,4 @@ Gina's built-in per-bundle inspector. Phases 1–2 ship as an embedded SPA at `/
 
 ---
 
-*Last updated: 2026-04-04 (Inspector Phase 2 polish — drag-to-select log rows, copy badge fade-out, left accent selection styling, logo watermark, window geometry and env panel persistence; HTTP/2 client retry with backoff and pre-flight PING validation) · To suggest a feature, [open an issue](https://github.com/gina-io/gina/issues).*
+*Last updated: 2026-04-09 (0.3.3-alpha.3 — TypeScript declarations, explicit exports via require('gina/gna')) · To suggest a feature, [open an issue](https://github.com/gina-io/gina/issues).*

package/framework/v0.3.4-alpha.1/VERSION

@@ -0,0 +1 @@
+0.3.4-alpha.1

package/framework/{v0.3.3-alpha.1 → v0.3.4-alpha.1}/core/asset/plugin/README.md

@@ -202,14 +202,13 @@ socket.on('open', function(){
 ### uuid
 
 ```javascript
-var uuid = require('uuid');
-console.log('id -> ', uuid.v4() )
-```
-
-Sample output
+var uuid = require('lib/uuid');
+uuid();    // 'aB3x'  (4 chars, base-62 default)
+uuid(8);   // 'kQ7mZp2R'
 
-```tty
-id ->  f66f698f-9e17-41f9-a3f2-a25b38d6e379
+// Custom alphabet
+var hex = uuid.customAlphabet('0123456789abcdef', 8);
+hex();     // 'f47ac10b'
 ```
 
-Reference: visite the official [repository](https://github.com/broofa/node-uuid)
+Lightweight, zero-dependency ID generator using `crypto.getRandomValues` with bitmask bias avoidance.

package/framework/{v0.3.3-alpha.1 → v0.3.4-alpha.1}/core/asset/plugin/dist/vendor/gina/html/toolbar.html

@@ -90,7 +90,7 @@
                         ------------------------------------------------------------------
                         [+] [200] /favicon.ico
                         ------------------------------------------------------------------
-                        [+] [200] /js/jquery.min.js
+                        [+] [200] /js/gina.min.js
                         ------------------------------------------------------------------
                         [+] [404] https://domain.com/js/external.min.js
                         ------------------------------------------------------------------

package/framework/{v0.3.3-alpha.1 → v0.3.4-alpha.1}/core/asset/plugin/dist/vendor/gina/inspector/inspector.js

@@ -1756,6 +1756,14 @@
     var QUERY_PAGE_SIZE = 20;
     /** @type {boolean} Whether all query cards should be shown (pagination override) */
     var _queryShowAll = false;
+    /**
+     * #QI2 — Cached live index data from /_gina/indexes endpoint.
+     * null = not yet fetched; object = fetched (may be empty).
+     * @type {?{connectors: Object.<string, {type: string, database: string, tables: Object}>}}
+     */
+    var _liveIndexes = null;
+    /** @type {boolean} Whether a /_gina/indexes fetch is in progress */
+    var _liveIndexesFetching = false;
 
     /**
      * Format a byte size into a human-readable string.
@@ -1769,6 +1777,85 @@
         return (bytes / (1024 * 1024)).toFixed(1) + ' MB';
     }
 
+    /**
+     * #QI2 — Fetch live index data from the /_gina/indexes endpoint.
+     * Called when the Query tab renders queries with N/A index badges.
+     * On success, caches the result and re-renders the Query tab.
+     *
+     * @inner
+     */
+    function fetchLiveIndexes() {
+        if (_liveIndexes !== null || _liveIndexesFetching) return;
+        _liveIndexesFetching = true;
+        var base = window.location.pathname.replace(/\/_gina\/inspector.*$/, '');
+        var url  = base + '/_gina/indexes';
+        try {
+            var xhr = new XMLHttpRequest();
+            xhr.open('GET', url, true);
+            xhr.onload = function() {
+                _liveIndexesFetching = false;
+                if (xhr.status === 200) {
+                    try {
+                        _liveIndexes = JSON.parse(xhr.responseText);
+                        // Re-render query tab if we have queries
+                        if (_lastQueries) {
+                            var el = document.getElementById('tab-query');
+                            if (el) {
+                                var content = el.querySelector('.bm-scroll-area');
+                                if (content) content.innerHTML = renderQueryContent(_lastQueries);
+                            }
+                        }
+                    } catch (e) { _liveIndexes = { connectors: {} }; }
+                }
+            };
+            xhr.onerror = function() { _liveIndexesFetching = false; };
+            xhr.send();
+        } catch (e) { _liveIndexesFetching = false; }
+    }
+
+    /**
+     * #QI2 — Resolve live index data for a query entry that has null indexes.
+     * Looks up the connector:database key in _liveIndexes, then resolves by
+     * extracting the target table from the statement.
+     *
+     * @inner
+     * @param {object} q - Query entry with `q.indexes === null`
+     * @returns {?Array<{name: string, primary: boolean}>} Resolved indexes, or null
+     */
+    function resolveLiveIndexes(q) {
+        if (!_liveIndexes || !_liveIndexes.connectors) return null;
+        // Try connector:database key; fall back to first matching connector type
+        var connKey = null;
+        var keys = Object.keys(_liveIndexes.connectors);
+        for (var k = 0; k < keys.length; k++) {
+            if (_liveIndexes.connectors[keys[k]].type === q.connector) {
+                connKey = keys[k];
+                break;
+            }
+        }
+        if (!connKey) return null;
+        var tables = _liveIndexes.connectors[connKey].tables;
+        if (!tables) return null;
+        // Use the table field if available; otherwise extract from statement
+        var tbl = q.table || extractTableFromStatement(q.statement);
+        if (!tbl) return null;
+        return tables[tbl] || [];
+    }
+
+    /**
+     * #QI2 — Simple client-side table name extraction from SQL statements.
+     * @inner
+     * @param {string} stmt - SQL or N1QL statement
+     * @returns {?string} Lowercase table name, or null
+     */
+    function extractTableFromStatement(stmt) {
+        if (!stmt) return null;
+        var m = stmt.match(/\bFROM\s+[`"']?(\w+)[`"']?/i)
+            || stmt.match(/\bINTO\s+[`"']?(\w+)[`"']?/i)
+            || stmt.match(/\bUPDATE\s+[`"']?(\w+)[`"']?/i);
+        return m ? m[1].toLowerCase() : null;
+    }
+
     /**
      * Compile a query by replacing `$1`, `$2`, ... positional placeholders
      * with their actual parameter values. Replaces from highest index first
@@ -2203,6 +2290,12 @@
             if (q.statement) {
                 var compiled = compileQuery(q.statement, q.params);
 
+                // #QI2 — resolve live indexes for N/A entries
+                if ((q.indexes === null || q.indexes === undefined) && _liveIndexes) {
+                    var _resolved = resolveLiveIndexes(q);
+                    if (_resolved !== null) q.indexes = _resolved;
+                }
+
                 // Index badges (inline in stmt meta bar, left of rows count)
                 var indexHtml = '';
                 if (q.indexes !== null && q.indexes !== undefined) {
@@ -2311,6 +2404,16 @@
             h = pbanner + h;
         }
 
+        // #QI2 — trigger live index fetch if any queries still show N/A
+        if (_liveIndexes === null && !_liveIndexesFetching) {
+            for (var na = 0; na < filtered.length; na++) {
+                if (filtered[na].indexes === null || filtered[na].indexes === undefined) {
+                    fetchLiveIndexes();
+                    break;
+                }
+            }
+        }
+
         return h;
     }