gina 0.3.6 → 0.3.7-alpha.2

package/.github/workflows/security.yml

@@ -7,8 +7,8 @@ on:
     branches: [develop, master]
 
 jobs:
-  claude-leak-check:
-    name: Claude-leak scan
+  local-leak-check:
+    name: Local-tool leak scan
     runs-on: ubuntu-latest
 
     steps:
@@ -16,17 +16,17 @@ jobs:
 
       # #S6 — Backs up the local pre-commit hook (#S5) and the publish-boundary
       # gate in prepare_version.js (#S3). Fails the build if any tracked path
-      # matches (^|/)(CLAUDE\.md|\.claude[a-z]*). Also retroactively catches
+      # matches local-tool configuration paths. Also retroactively catches
       # leaks that landed before the active defenses were wired.
-      - name: Scan tracked files for Claude-related paths
+      - name: Scan tracked files for local-tool paths
         run: |
           matches=$(git ls-files | grep -iE '(^|/)(CLAUDE\.md|\.claude[a-z]*)' || true)
           if [ -n "$matches" ]; then
-            echo "::error::Claude-related paths detected in git index:"
+            echo "::error::local-tool paths detected in git index:"
             echo "$matches" | sed 's/^/  - /'
             echo ""
             echo "These paths must never be tracked. Remove with: git rm --cached <path>"
             echo "If pushed already, scrub history with git filter-repo."
             exit 1
           fi
-          echo "OK: no Claude-related paths in git index."
+          echo "OK: no local-tool paths in git index."

package/.github/workflows/test.yml

@@ -29,6 +29,23 @@ jobs:
           npm install --ignore-scripts
           ln -sf $(pwd) node_modules/gina
 
+      - name: Prepare framework dependencies
+        run: |
+          VERSION=$(node -p "require('./package.json').version")
+          FW_DIR="framework/v${VERSION}"
+          if [ ! -f "${FW_DIR}/package.json" ]; then
+            cat > "${FW_DIR}/package.json" <<EOF
+          {
+            "name": "gina-framework",
+            "version": "${VERSION}",
+            "dependencies": {
+              "@rhinostone/swig": "^1.6.0"
+            }
+          }
+          EOF
+          fi
+          (cd "${FW_DIR}" && npm install --ignore-scripts)
+
       - name: Run tests
         run: |
           node --test \

package/AUTHORS

@@ -1,6 +1,6 @@
 # Authors (sorted alphabetically)
 
-John Doe <fabrice.delaneau@gina.io>
+Fabrice DELANEAU <fabrice.delaneau@gina.io>
 Martin Luther ETOUMAN <martin-luther.etouman@gina.io>
 
 # Contributors (sorted alphabetically)

package/CHANGELOG.md

@@ -15,10 +15,10 @@ and is generated by [Changie](https://github.com/miniscruff/changie).
 * Surfacing the real cause when `prepare_version.js` is run against a stale `~/.gina/<release>/settings.json` `dir` field. Publish now fails fast with an actionable message instead of wedging at `pushChangesToGitIfNeeded` with a misleading "No branch selected" error.
 * Preventing CORS preflight failure when a bundle's env.json `access-control-allow-headers` list omits a header the client actually sends. `completeHeaders()` no longer overwrites the echo that `checkPreflightRequest()` sets from the incoming `access-control-request-headers` (#B13).
 ### Security
-* Added pre-commit hook (.githooks/pre-commit) that blocks Claude-related paths (CLAUDE.md, .claude*) from entering git history. post_install.js installs core.hooksPath=.githooks for contributor clones only (gated on .git presence in gina repo root). #S5 follow-up to #S3.
-* Added GitHub Actions workflow (.github/workflows/security.yml) that greps the git index on every push/PR to develop and master for Claude-related paths (CLAUDE.md, .claude*). Fails the build if any are tracked. Backs up the local pre-commit hook (#S5) and publish-boundary gate (#S3). #S6 follow-up to #S3.
-* Added private-token leak gate (script/check_no_claude_leak.js) wired into the npm prepack hook and the prepare_version.js self.* chain before any git add --all. Fails the publish if the tarball listing contains Claude-related paths OR if pack contents contain private-token patterns (phone, private email, private address, private domain, co-author legal name). #G1 follow-up to #S3/#S4.
-* Added opt-in pre-commit hook (resources/git-hooks/pre-commit) that blocks commits authored under a private-domain git identity (.local hostnames, internal domains). Contributors install it once via cp resources/git-hooks/pre-commit .git/hooks/pre-commit. Complements the CI-side Claude-path guard (#S5/#S6). #G5.
+* Added pre-commit hook (.githooks/pre-commit) that blocks local-tool configuration paths from entering git history. post_install.js installs core.hooksPath=.githooks for contributor clones only (gated on .git presence in gina repo root). #S5 follow-up to #S3.
+* Added GitHub Actions workflow (.github/workflows/security.yml) that greps the git index on every push/PR to develop and master for local-tool configuration paths. Fails the build if any are tracked. Backs up the local pre-commit hook (#S5) and publish-boundary gate (#S3). #S6 follow-up to #S3.
+* Added private-token leak gate (script/check_no_local_leak.js) wired into the npm prepack hook and the prepare_version.js self.* chain before any git add --all. Fails the publish if the tarball listing contains local-tool configuration paths OR if pack contents contain private-token patterns (phone, private email, private address, private domain, co-author legal name). #G1 follow-up to #S3/#S4.
+* Added opt-in pre-commit hook (resources/git-hooks/pre-commit) that blocks commits authored under a private-domain git identity (.local hostnames, internal domains). Contributors install it once via cp resources/git-hooks/pre-commit .git/hooks/pre-commit. Complements the CI-side local-tool guard (#S5/#S6). #G5.
 * Redacting secret-looking fields from the dev-mode Inspector feed before any sink (window.__ginaData, localStorage.__ginaData, /_gina/agent SSE, engine.io push, ginaToolbar forms/XHR overlays). New lib/inspector-redact deep-clones the Inspector payload and replaces values whose keys match the default regex (password, pwd, secret, token, apikey, cvv, ssn, authorization, credentials, private_key) with [redacted]. Two complementary carve-outs preserve validation metadata: (1) NON_SECRET_SUFFIX — keys ending in rule/rules/policy/policies/validator/config/configuration/settings/requirements/strength/constraint/options/schema/definition/spec pass through untouched (e.g. passwordRule, passwordPolicy describe form rules, not user input); (2) primitive-only redaction — when a matched secret key holds an object or array, the walker recurses into it instead of replacing it, because such values are always metadata (e.g. rules.account[password] = {isRequired: true, isString: 7} — an HTML form field name under a rules: section). Nested primitive secrets inside preserved objects are still caught on recursion. Client-side shim in statusbar.html mirrors both carve-outs and additionally redacts any DOM input whose type matches configured types (default: password). Configurable via settings.json inspector.redact.{patterns,types,replacement}. Dev-mode only — the actual HTTP response body is never touched. #R7.
 
 ## 0.3.5 - 2026-04-13
@@ -167,7 +167,7 @@ Internal version bump — no user-facing changes. Repository URLs updated from R
 * Added GitHub Actions CI pipeline — runs the full test suite (494+ tests) on Node.js 18, 20, and 22 on every push and PR to `develop` and `master` (#A1)
 * Stable release now auto-tags, merges to master, and publishes the next alpha to npm
 * SQLite ORM connector v2: entity wiring + SQL method generation from .sql files, Option-B Promise/.onComplete() pattern, connector.js (WAL, FK, synchronous open), 56 unit tests
-* Added llms.txt — LLM-optimised framework reference for Cursor, Copilot, Claude.ai
+* Added llms.txt — machine-readable framework reference following the llms.txt standard for IDE coding assistants
 * Added peerDependencies (all optional) for connector client libraries: couchbase, ioredis, mysql2, pg, mongodb, @scylladb/scylla-driver
 * Added GitHub issue templates (bug_report, feature_request) and PR template
 * SQLite state storage for ~/.gina/ config files (CN2 v3): lib/state.js StateStore routes all state-file writes through node:sqlite (DatabaseSync) for atomic writes and concurrent access safety; JSON sidecars kept for backwards-compat read paths
@@ -324,4 +324,4 @@ Internal version bump — no user-facing changes. Repository URLs updated from R
 ### Security
 * Fixed directory traversal vulnerability (CVE-2023-25345) in the swig template engine: a malicious template using `{% extends %}` or a path starting with `./`, `/`, or `\` could read arbitrary files outside the template root.
 * Removed dead framework version v0.1.1-alpha.1 from the repository. Its package.json declared sanitize-html ^2.5.0 (CVE-2021-26539, CVE-2021-26540 — XSS, high severity) and busboy ^0.2.14 (dicer ReDoS). Neither version nor its dependencies were in use.
-* Removed internal development files from the npm package. The published tarball no longer includes .env, CLAUDE.md, .claude/ (internal notes), .changes/ (changie entries), .changie.yaml, services/ (WIP bundles), vendor benchmark and CI files, library example and test files, locale build sources, and stray backup files. Previously .npmignore did not cover these paths.
+* Removed internal development files from the npm package. The published tarball no longer includes .env, local IDE and tooling configuration files, .changes/ (changie entries), .changie.yaml, services/ (WIP bundles), vendor benchmark and CI files, library example and test files, locale build sources, and stray backup files. Previously .npmignore did not cover these paths.

package/CONTRIBUTING.md

@@ -223,4 +223,4 @@ Open a GitHub issue describing the use case **before** writing code. Features th
 | Name | Role | Profile |
 | --- | --- | --- |
 | Martin Luther | Lead maintainer | [rhinostone.com](https://rhinostone.com) |
-| John Doe | Co-author | [fdelaneau.com](https://fdelaneau.com) |
+| Fabrice DELANEAU | Co-author | [fdelaneau.com](https://fdelaneau.com) |

package/CONVENTIONS.md

@@ -542,6 +542,40 @@ var bundles = [
 
 ---
 
+## 18. CLI Command Conventions
+
+### Scope grammar — positional-absence, not flags
+
+Gina CLI commands that apply to either a single bundle or the whole project use positional-absence to signal scope — **never** a flag like `--scope=bundle` or `--shared`:
+
+| Command form | Scope |
+|---|---|
+| `gina <group>:<action> <bundle> @<project>` | Bundle-only |
+| `gina <group>:<action> @<project>` | Project-wide (all bundles + any `shared/config/` overlay) |
+
+Precedents: `bundle:list`, `service:list`, `inspector:open`, `connector:list` / `add` / `rm` / `migrate` (#CN10).
+
+**Why no `--scope`:** the word `scope` is reserved in gina for data isolation (`local` / `beta` / `production` / `testing`) — mixing CLI-scope meaning into the same word is ambiguous.
+
+**Why no `--shared`:** positional-absence is shorter, consistent with the existing grammar, and doesn't invent a new flag surface. If a command needs to address the `shared/config/` file specifically (vs. "all bundles"), document the semantics on that command instead of adding a flag.
+
+**Rule:** when a new CLI command needs a bundle-or-project distinction, follow the `[<bundle>] @<project>` pattern. Do not reintroduce flag-based scope selection.
+
+### Reserved CLI flags — `--port` and `--version`
+
+Two flag names are reserved by the framework's global CLI parser and must **not** be used as subcommand-specific flags:
+
+| Reserved flag | Framework meaning |
+|---|---|
+| `--port` | Runtime bundle port (consumed by `bundle:start` and related runtime commands) |
+| `--version` | Global gina version request (handled before subcommand dispatch) |
+
+**If a subcommand genuinely needs one of these semantics for a different purpose, rename with a qualified prefix.** Precedent set by #CN10 session 2 (`connector:add`): `--connector-port=` for the connector-entry port, `--driver-version=` for the npm driver version range. The un-prefixed forms are swallowed by the framework parser and the subcommand never sees them.
+
+**Rule:** at design time for any new CLI command, grep `lib/cmd/**/arguments.json` and the global parser for reserved names before settling on flag names. If a candidate name collides, prefix it with the subcommand's domain (`--connector-port`, `--driver-version`, etc.) instead of hoping the parser will route it correctly.
+
+---
+
 ## Known Anti-Patterns
 
 | Anti-pattern | Location | Risk | Roadmap item |
@@ -604,3 +638,21 @@ it('name', async function() {
 **Rule**
 
 > Every async `it()` block must either be declared `async` or explicitly `return` a Promise. Any test that calls an async API without doing either will silently pass without testing anything.
+
+---
+
+## Debugging — measurement gotchas
+
+Two reusable lessons that sit under the global "no fix without measurement" rule and refine *how* to measure.
+
+### `setAttribute` writes are not painting
+
+A DOM attribute mutation is only a visible change if a CSS selector or JS observer reads it. Before treating an attribute write as the user-visible bug, confirm a reader exists — grep the deployed CSS for the selector, grep the JS for `getAttribute` / `MutationObserver` / `querySelector` on the attr. If nothing reads it, the write is dead metadata and cannot be the symptom no matter how often it fires. Same applies to class additions that have no rule, dataset writes that no script consumes, and ARIA attributes with no AT in the loop.
+
+### Pre-state matters more than the action
+
+When a bug is described as "X happens when I do Y", lock the visible **pre-state of X** before running Y. The same Y can produce wildly different measurements against different pre-states.
+
+In DOM bugs especially, "errors visible" (post-paint) and "errors appearing" (paint event) look identical in a screenshot but mean opposite things in a diff. If the pre-state already contains the symptom, the action diff is silent and you'll wrongly conclude "not reproducing."
+
+Operational shortcut: ask the reporter for one sentence in user words describing the scenario before guessing the pre-state from code. A single sentence ("other fields not already filled get error messages") can disambiguate hours of wrong-pre-state runs in seconds.

package/GOVERNANCE.md

@@ -2,7 +2,7 @@
 
 Gina follows the **BDFL** (Benevolent Dictator For Life) model with a commitment to transparency.
 
-Gina is co-authored by **Martin Luther** ([Rhinostone](https://rhinostone.com)) and **John Doe** ([fdelaneau.com](https://fdelaneau.com)). Final decisions on direction, API design, and releases rest with Martin Luther. Community contributions and RFCs are welcome and taken seriously.
+Gina is co-authored by **Martin Luther** ([Rhinostone](https://rhinostone.com)) and **Fabrice DELANEAU** ([fdelaneau.com](https://fdelaneau.com)). Final decisions on direction, API design, and releases rest with Martin Luther. Community contributions and RFCs are welcome and taken seriously.
 
 ## How decisions are made
 

package/LICENSE

@@ -1,3 +1,5 @@
+MIT License
+
 Copyright (c) 2009-2026 Rhinostone <contact@gina.io>
 
 Permission is hereby granted, free of charge, to any person obtaining a copy

package/README.md

@@ -37,12 +37,14 @@ gina bundle:start api @myproject
 open https://localhost:3100
 ```
 
-## What's in 0.3.6
+## What's in 0.3.7
 
-- **Inspector payload redaction** — passwords, tokens, API keys, and secret-like fields are automatically stripped from all four Inspector data sinks (`window.__ginaData`, `localStorage`, `/_gina/agent` SSE, `ginaToolbar.update`). Configurable patterns via `inspector.redact` in bundle settings. Metadata carve-outs preserve validation rules and object-valued config under secret keys
-- **CORS preflight fix** — `completeHeaders()` no longer overwrites the echoed `access-control-allow-headers` on preflight responses, fixing browser CORS errors when the bundle's static ACAH list didn't include all client-sent headers
-- **Whisper silent-pass** — `whisper()` no longer emits a red stack trace on missing dictionary keys (first-install UX fix); `post_install.js` now seeds `def_global_mode` so the key is always present
-- See 0.3.5 for the swig 1.5.0 security extension, and 0.3.4 for the `require('gina/gna')` stale-path fix
+- **Model Context Protocol (MCP) support** — `gina bundle:mcp` generates an MCP tool manifest (`mcp.json`) from `routing.json`. `gina bundle:mcp-start` runs a live MCP server over stdio (JSON-RPC 2.0) that dispatches `tools/call` as real HTTP requests against the running bundle. Any Gina app is now consumable by MCP-compatible IDE and agent tooling out of the box. MCP spec revision 2025-06-18
+- **Standalone Inspector SPA + dual-mode resolution** — Inspector can now run as a separate single-page app served from its own origin, with the target bundle passed as `?target=<origin>`. The dev-mode statusbar and `gina inspector:open` both resolve the URL via a 4-level fallback (`--url=` → bundle `config/settings.json > inspector.url` → `~/.gina/<shortVersion>/settings.json > inspector.url` → embedded `<target>/_gina/inspector/`), covering host-SPA + Docker-bundle splits
+- **Inspector Reveal toggle** — dev-mode red-tinted toggle that swaps the redacted `__ginaData` for the unredacted snapshot via `/_gina/reveal`; only bundles running in `local` scope serve it, beta/production/testing return 403. Redactor now tokenizes camelCase so identifiers like `companyName` / `passportRequired` are no longer false-positive-redacted
+- **`service:list` + `bundle:list` port and running-state columns** — both commands now show each bundle's preferred dev port and whether the process is alive, read from `~/.gina/ports.reverse.json` and `~/.gina/run/<bundle>@<project>.pid`
+- **Explicit exports from `require('gina')`** — every framework-injected global (`getContext`, `_`, `requireJSON`, `merge`, …) is now also reachable as a named property on `require('gina')` / `require('gina/gna')`, with JSDoc and auto-generated `types/gna.d.ts`. Runtime globals unchanged
+- See 0.3.6 for Inspector payload redaction + CORS preflight fix, and 0.3.5 for the swig 1.5.0 security extension
 
 See the full [Changelog](./CHANGELOG.md) and [Roadmap](./ROADMAP.md).
 
@@ -65,7 +67,7 @@ Full installation guide, tutorials, configuration reference, and API docs at **[
 
 ## Governance
 
-Gina is co-authored by **Martin Luther** ([Rhinostone](https://rhinostone.com)) and **John Doe** ([fdelaneau.com](https://fdelaneau.com)). Final decisions on direction, API design, and releases rest with Martin Luther. Community contributions and RFCs are welcome and taken seriously. See [GOVERNANCE.md](./GOVERNANCE.md) for details.
+Gina is co-authored by **Martin Luther** ([Rhinostone](https://rhinostone.com)) and **Fabrice DELANEAU** ([fdelaneau.com](https://fdelaneau.com)). Final decisions on direction, API design, and releases rest with Martin Luther. Community contributions and RFCs are welcome and taken seriously. See [GOVERNANCE.md](./GOVERNANCE.md) for details.
 
 ## License (MIT)
 

package/ROADMAP.md

@@ -100,6 +100,7 @@ Stub commands confirmed in source — handler files exist but are empty or comme
 | --- | --- | --- | --- |
 | ✅ | **Explicit exports for global helpers** — `getContext`, `setContext`, `_`, `requireJSON` etc. available as explicit `require('gina/gna').getContext` imports alongside the existing global injection. Enables IDE navigation and static analysis. | `0.3.3-alpha.3` | 2026-04-09 |
 | ✅ | **TypeScript declaration files** — `.d.ts` declarations for the public surface: `SuperController`, `EntitySuper`, connector config shapes, `routing.json` schema, `PathObject`, `uuid`, all config file interfaces, `GinaRequest`/`GinaResponse`. No TS migration of internals — just declarations for consumer projects. `package.json` wired with `"types"` and `"typesVersions"`. | `0.3.3-alpha.3` | 2026-04-09 |
+| ✅ | **Auto-generated `types/gna.d.ts` from JSDoc** (#M9) — `script/generate_gna_types.js` reads the `GLOBAL_EXPORTS` inventory from the gna-exports unit test plus the JSDoc on `framework/v*/core/gna.js` and emits `types/gna.d.ts` with one entry per global export. Two npm scripts: `npm run types:gen` regenerates, `npm run types:check` exits non-zero if drifted. A `gna-types-drift.test.js` unit test re-runs the generator in memory on every test pass — the JSDoc on `core/gna.js` is the single source of truth. Closes the #M8 → #M9 loop and removes the hand-written declaration. | `0.3.7-alpha.2` | 2026-04-18 |
 | 📋 | **`gina connector:audit [@project]`** — reads `connectors.json`, maps each declared connector to its npm peer package (`mysql2`, `pg`, `ioredis`, `couchbase`, `openai`, `@anthropic-ai/sdk`, etc.), and runs `npm audit --json` scoped to those packages in the project's `node_modules`. Reports CVEs with severity and fix availability. If `socket` is installed in the project, delegates to it for supply-chain analysis (malware, typosquatting, protestware) instead of `npm audit`. Exit code 1 on any high/critical finding — CI-friendly. Only audits packages actually declared in `connectors.json`, not the full dependency tree. | `0.4.0` | Q4 2026 |
 
 ### Phase 5 — Future
@@ -107,7 +108,7 @@ Stub commands confirmed in source — handler files exist but are empty or comme
 | Status | Feature | Version | Target |
 | --- | --- | --- | --- |
 | 📋 | **ESM compatibility layer** — Dual CJS/ESM entry points via `"exports"` in `package.json`. Framework internals stay CJS; public API gets ESM re-exports. | `0.5.0` | Q1 2027 |
-| 📋 | **Pluggable template engine** — Swig 1.4.2 stays fully integrated and remains the default. Nunjucks added as a supported alternative (opt-in per project via config). The render layer is abstracted behind a common interface so both engines co-exist. Switching to Nunjucks requires a per-project migration guide (breaking differences: `{% parent %}` → `{{ super() }}`, filter renames, autoescape default, `date` format strings, no `{% spaceless %}` — see docs). | `0.5.0` | Q1 2027 |
+| 🚧 | **Pluggable template engine** — **Partially shipped in `0.3.7`**: opt-in `render.engine = "nunjucks"` dispatch per bundle. The project installs `nunjucks` itself (no framework dep); Gina loads it via `lib/nunjucks-resolver` and routes through `controller.render-nunjucks.js`. Swig remains the default, runs unchanged. Inspector dev payload and HTTP/2 `stream.respond()` direct path both shipped in `0.3.7` follow-ups. **Remaining `0.5.0` scope**: feature parity with render-swig (Early Hints 103 auto-send, static HTML cache, `setResources` / asset cataloguing, error-page template routing, within-Inspector `statusbar.html` include + flow/queries pipelines); per-template-extension dispatch so a single bundle can mix engines (`.swig` / `.njk`); optional auto-detect on `.njk` presence. Breaking syntax differences (`{% parent %}` → `{{ super() }}`, filter renames, `autoescape` default, `date` format strings, no `{% spaceless %}`) are nunjucks's own — Gina doesn't paper over them. | `0.5.0` | Q1 2027 |
 | 📋 | **Structured logging** — JSON log output (`{ level, message, bundle, requestId, durationMs }`). Additive — existing consumers are unaffected. Enables log aggregation (Loki, Datadog, CloudWatch). | `0.5.0` | Q1 2027 |
 | 📋 | **Research `AsyncLocalStorage` for request context** — Evaluate `node:async_hooks` `AsyncLocalStorage` as a replacement for the `local` closure pattern, giving true async isolation across `setTimeout`, Promises, and `async/await` chains without any closure threading. Output: decision doc + proof-of-concept branch. | `0.5.0` | Q1 2027 |
 
@@ -128,6 +129,7 @@ New database connectors follow the same interface as the existing Couchbase conn
 | ✅ | **Couchbase SDK v2 deprecation** | `0.2.0` | 2026-03-27 | Couchbase Server SDK v2 reached end-of-life in 2021. `connector.v2.js` now logs a deprecation warning at connection time, and a fatal error when V8 pointer compression is active (NAN bindings are incompatible). Upgrade path: set `sdk.version` to `3` or `4` in your bundle's `connectors.json`. |
 | 📋 | **Couchbase SDK v2 removal** | `0.4.0` | Q4 2026 | `connector.v2.js` and all `sdk.version <= 2` branches removed. Default falls back to v3 when `sdk.version` is unset. Full migration guide in `CHANGELOG.md`. |
 | ✅ | **`peerDependencies` for connector clients** | `0.3.0` | 2026-04-01 | All connector client libraries (`ioredis`, `mysql2`, `pg`, `mongodb`, `@scylladb/scylla-driver`, `couchbase`, `openai`, `@anthropic-ai/sdk`) are declared as optional `peerDependencies`. Signals the tested version range to npm/yarn and surfaces a compatibility warning when a user pins an untested version. Zero framework runtime dependency — clients are always loaded from the project's `node_modules`. |
+| ✅ | **`connector:*` CLI group + lint/fix migration** | `0.3.8` | Q2 2026 | New CLI for managing `connectors.json` at project (shared) or bundle scope: `connector:list`, `connector:add`, `connector:rm`, `connector:migrate`. Positional-absence signals scope — omit `<bundle>` to operate on `shared/config/connectors.json`, include it to operate on the bundle's own. `list` cross-references declared connectors against the project's `node_modules` and prints install status per driver. `add` writes the JSON entry and prints the exact `npm install <driver>@<range>` command (no auto-install in v1). `rm` supports `--dry-run` / `--force` and scans sibling bundles for usage before removing at project scope. `migrate` lints every `connectors.json` (or a single bundle's file) and, with `--fix`, injects missing `$schema` entries while preserving comment headers and key order — dry-run by default. Framework-side auto-migrate hook deferred to `0.4.0` alongside the Couchbase SDK v2 removal where a concrete old-shape → new-shape delta will justify touching the boot path. Adds a `version` property to the `connectors.json` schema for install-version resolution. Optional follow-up: `--install` flag with lockfile-based package manager detection. **Session 1 (`connector:list`) shipped 2026-04-21, `0.3.7-alpha.3`** — read-only lister with overlay/override detection, driver install probing, version-pin disagreement warnings, JSON output, 89 source-inspection unit tests. **Session 2 (`connector:add` + schema `version`) shipped 2026-04-21, `0.3.7-alpha.3`** — writes shared or bundle-scoped connector entries, infers type from `<name>`, preserves comment headers and key order, pins `$schema` at the top, rejects overwrites without `--force`, prints `npm install <pkg>@"<range>"` install hint (AI resolves per protocol scheme, sqlite short-circuits to built-in note), adds `version` property to `schema/connectors.json`. 94 source-inspection unit tests; 7 live smoke tests. CLI flag rename (`--connector-port=`/`--driver-version=`) avoids framework-reserved `--port`/`--version`. **Session 3 (`connector:rm`) shipped 2026-04-21, `0.3.7-alpha.3`** — removes shared or bundle-scoped entries via positional-absence scoping (`remove` alias accepted); `--dry-run` previews without writing; `--force` skips the project-level usage guard that otherwise refuses when any bundle still references the same logical name; driver-retention hint prints after every removal naming sibling bundles that still use the same driver (sqlite exempt — built-in); inherited-from-shared hint fires when rm from a bundle targets an entry declared only in shared. Never runs `npm uninstall`. 81 source-inspection unit tests. **Session 4 (`connector:migrate`) shipped 2026-04-21, `0.3.7-alpha.3`** — CLI-only linter: dry-run by default, `--fix` applies auto-fixable issues in place. Two detection types: `missing-schema` (auto-fixable, injects `"$schema": "https://gina.io/schema/connectors.json"` pinned at top while preserving comment header and key order) and `bare-key-no-connector` (entry key not in `couchbase, mysql, postgresql, sqlite, redis, ai` enum with no `connector` field — warn-only since driver cannot be inferred). Two invocation modes via positional-absence: `@<project>` scans shared + every bundle; `<bundle> @<project>` scans just that bundle. `--format=json` emits `{project, scope, bundle, fixApplied, files[]}` envelope for CI. Registered as offline — no framework socket required. Idempotent. Never modifies `core/config.js` and never runs at bundle boot — explicit and opt-in. Real framework-side hook deferred to `0.4.0` alongside Couchbase SDK v2 removal. 87 source-inspection unit tests; full write-path smoke test on a disposable sandbox (shared + two bundles), plus a no-false-positive smoke on a real 7-bundle project. |
 
 ---
 
@@ -224,7 +226,7 @@ A cold audit of the Couchbase connector identified two critical security vulnera
 | Status | Feature | Version | Target |
 | --- | --- | --- | --- |
 | ✅ | **OpenAPI spec generation** — `gina bundle:openapi @myproject` emits `openapi.json` from `routing.json`. Zero manual spec writing — route annotations become `description` fields. Makes any Gina app consumable by AI agents, API gateways, and testing tools. Alias: `bundle:oas`. Supports `--output` flag for custom path. | `0.3.3-alpha.2` | 2026-04-08 |
-| 📋 | **MCP server wrapper** — `gina bundle:mcp @myproject` exposes `routing.json` routes as MCP (Model Context Protocol) tools. Makes any Gina app a native MCP server discoverable by AI agents. | `0.4.0` | Q4 2026 |
+| ✅ | **MCP server wrapper** — Phase 1 (done, `0.3.7-alpha.2`, 2026-04-18): `gina bundle:mcp @myproject` emits a static MCP tool manifest (`mcp.json`) targeting MCP spec revision 2025-06-18. Phase 2a (done, `0.3.7-alpha.3`, 2026-04-18): `gina bundle:mcp-start <bundle> @myproject` serves the manifest as a live MCP server over stdio (JSON-RPC 2.0, newline-delimited). `tools/call` is dispatched as real HTTP requests against the running bundle. Phase 2b (done, `0.3.7-alpha.2`, 2026-04-22): Streamable HTTP transport for remote/containerised agents — `gina bundle:mcp-start <bundle> @myproject --transport=http`. Opt-in static bearer auth via `--auth-token`, built-in loopback `Origin` allowlist, full CORS echo, SSE response mode, JSON-RPC 2.0 batch, `Mcp-Session-Id` lifecycle. OAuth 2.1 intentionally out of scope — deploy behind a reverse proxy. Live end-to-end smoke recipe ready for the next alpha release. | `0.3.7-alpha.2` | 2026-04-22 |
 
 ---
 

package/bin/cli

@@ -1,6 +1,17 @@
 #!/usr/bin/env node
 'use strict';
 
+// MCP stdio transport isolation (#AI8b).
+// `gina bundle:mcp-start` speaks JSON-RPC on stdout. Anything else written
+// to process.stdout (framework logger, bootstrap noise, console.log) would
+// corrupt the wire and kill the MCP client parser on the first byte.
+// Stash the real write and redirect the rest to stderr before any framework
+// module loads. The handler reads the real write from process.__ginaMcpStdout.
+if (process.argv.indexOf('bundle:mcp-start') > -1) {
+    process.__ginaMcpStdout = process.stdout.write.bind(process.stdout);
+    process.stdout.write = process.stderr.write.bind(process.stderr);
+}
+
 var fs              = require('fs');
 var net             = require('net');
 var util            = require('util');
@@ -302,6 +313,7 @@ async function onExec() {
         'build:',
         'bundle:',
         'cache:',
+        'connector:',
         'dev:',
         'env:',
         'inspector:',
@@ -312,6 +324,7 @@ async function onExec() {
         'project:',
         'protocol:',
         'scheme:',
+        'service:',
         'view:',
         '--', //options or other aliases.
         '-' //options or other aliases.

package/framework/{v0.3.6 → v0.3.7-alpha.2}/AUTHORS

@@ -3,5 +3,5 @@
 #
 
 Martin Luther ETOUMAN <contact@gina.io>
-John Doe <contact+gina@fdelaneau.com>
+Fabrice DELANEAU <contact+gina@fdelaneau.com>
 Stephane HEAV <stephane.heav@gmail.com>

package/framework/{v0.3.6/lib/inherits → v0.3.7-alpha.2}/LICENSE

@@ -1,3 +1,5 @@
+MIT License
+
 Copyright (c) 2009-2026 Rhinostone <contact@gina.io>
 
 Permission is hereby granted, free of charge, to any person obtaining a copy

package/framework/v0.3.7-alpha.2/VERSION

@@ -0,0 +1 @@
+0.3.7-alpha.2

package/framework/{v0.3.6 → v0.3.7-alpha.2}/core/asset/plugin/dist/vendor/gina/html/statusbar.html

@@ -24,22 +24,45 @@
     } else {
         _rdcTypes['password'] = true;
     }
+    // Patterns are anchored (`^(?:...)$`) and tested against tokens, not raw
+    // substrings. So `apikey` covers `apiKey` / `api_key` / `apikey` while
+    // `companyName` no longer false-positives on `pan`. Mirrors the server-side
+    // DEFAULT_PATTERNS in lib/inspector-redact — keep both in sync.
     var _rdcRe = [];
     var _rdcSrc = Array.isArray(_rdc.patterns) ? _rdc.patterns
-        : ['password','passwd','pwd','secret','token','apikey','api[_-]?key','cvv','cvc','ccv','pan','ssn','authorization','credentials','private[_-]?key'];
+        : ['password','passwd','pwd','secret','token','apikey','cvv','cvc','ccv','pan','ssn','authorization','credentials','privatekey'];
     for (var _ri = 0; _ri < _rdcSrc.length; _ri++) {
-        try { _rdcRe.push(new RegExp(_rdcSrc[_ri], 'i')); } catch (e) { /* skip */ }
+        try { _rdcRe.push(new RegExp('^(?:' + _rdcSrc[_ri] + ')$', 'i')); } catch (e) { /* skip */ }
     }
-    // Keys ending in rule/policy/config/validator suffixes describe validation
-    // metadata, not user input — must not be redacted even when the name
-    // contains a secret keyword (e.g. `passwordRule`). Mirrors the server-side
+    // Anchored both ends — applied against the LAST token, not the raw key.
+    // Keys whose final token is a metadata word (rule/policy/config/etc.)
+    // describe validation, not user input. Mirrors the server-side
     // NON_SECRET_SUFFIX regex in lib/inspector-redact.
-    var _rdcNonSecret = /(rule|rules|policy|policies|validator|config|configuration|settings|setting|meta|metadata|format|requirements|strength|constraint|constraints|options|option|schema|definition|definitions|spec|specs)$/i;
+    var _rdcNonSecret = /^(rule|rules|policy|policies|validator|config|configuration|settings|setting|meta|metadata|format|requirements|strength|constraint|constraints|options|option|schema|definition|definitions|spec|specs)$/i;
+    function _rdcTokenize(k) {
+        if (typeof k !== 'string' || k.length === 0) return [];
+        var spaced = k
+            .replace(/([a-z0-9])([A-Z])/g, '$1 $2')
+            .replace(/([A-Z]+)([A-Z][a-z])/g, '$1 $2');
+        var parts = spaced.split(/[\s_\-.\[\]:\/]+/);
+        var out = [];
+        for (var i = 0; i < parts.length; i++) {
+            if (parts[i].length > 0) out.push(parts[i].toLowerCase());
+        }
+        return out;
+    }
     function _rdcKeyHit(k) {
         if (typeof k !== 'string') return false;
-        if (_rdcNonSecret.test(k)) return false;
+        var tokens = _rdcTokenize(k);
+        if (tokens.length === 0) return false;
+        if (_rdcNonSecret.test(tokens[tokens.length - 1])) return false;
+        var joined = tokens.join('');
         for (var i = 0; i < _rdcRe.length; i++) {
-            if (_rdcRe[i].test(k)) return true;
+            var re = _rdcRe[i];
+            if (re.test(joined)) return true;
+            for (var t = 0; t < tokens.length; t++) {
+                if (re.test(tokens[t])) return true;
+            }
         }
         return false;
     }
@@ -211,12 +234,25 @@
         + '<span>' + bundle + '@' + envName + '</span>'
         + '<a id="insp">Inspector &#8599;</a>'
         + '</div>';
-    var inspUrl = webroot + '_gina/inspector/';
+    // Standalone Inspector URL — set in bundle settings.json as
+    // `inspector.url` (e.g. "http://localhost:4200/inspector/"). When present,
+    // the statusbar link opens the standalone SPA in a new tab with
+    // ?target=<this-origin+webroot>. When absent, falls back to the embedded
+    // same-origin popup at {webroot}/_gina/inspector/ (legacy behaviour).
+    var _standaloneUrl = (window.__ginaData && window.__ginaData.gina
+        && window.__ginaData.gina.inspectorUrl) ? window.__ginaData.gina.inspectorUrl : null;
+    var _embeddedUrl   = webroot + '_gina/inspector/';
     function inject() {
         if (document.body) document.body.appendChild(el);
         var link = sr.getElementById('insp');
         if (link) link.addEventListener('click', function (ev) {
             ev.preventDefault();
+            if (_standaloneUrl) {
+                var _base   = _standaloneUrl.replace(/\/+$/, '') + '/';
+                var _target = location.origin + webroot.replace(/\/$/, '');
+                window.open(_base + '?target=' + encodeURIComponent(_target), '_blank');
+                return;
+            }
             var w = Math.round(screen.availWidth / 3);
             var h = screen.availHeight;
             var left = screen.availWidth - w;
@@ -228,7 +264,7 @@
                 }
             } catch (e) {}
             window.open(
-                inspUrl,
+                _embeddedUrl,
                 'gina-inspector',
                 'width=' + w + ',height=' + h + ',left=' + left + ',top=' + top
                 + ',menubar=no,toolbar=no,location=no,status=no,resizable=yes,scrollbars=yes'

package/framework/{v0.3.6 → v0.3.7-alpha.2}/core/asset/plugin/dist/vendor/gina/inspector/index.html

@@ -36,7 +36,7 @@
         Logs<span class="bm-log-dot" id="bm-log-dot"></span></button>
     </nav>
     <div class="bm-header-spacer"></div>
-    <button class="bm-refresh-btn" id="bm-refresh" title="Refresh now" aria-label="Refresh data">
+    <button class="bm-refresh-btn" id="bm-refresh" title="Refresh now (Shift+click: reload page)" aria-label="Refresh data">
       <svg viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg"><path d="M8 1.5A6.5 6.5 0 0114.5 8h-2A4.5 4.5 0 008 3.5a4.48 4.48 0 00-3.18 1.32L6.5 6.5H1.5v-5l1.82 1.82A6.47 6.47 0 018 1.5zM1.5 8a6.5 6.5 0 006.5 6.5 6.47 6.47 0 004.68-1.98l-1.82-1.82a4.48 4.48 0 01-2.86 1.3 4.5 4.5 0 01-4.5-4h-2z"/></svg>
     </button>
     <div class="bm-header-end">
@@ -113,6 +113,9 @@
       <button class="bm-icon-btn" id="bm-download" title="Download as JSON">
         <svg viewBox="0 0 16 16"><path d="M.5 9.9a.5.5 0 01.5.5v2.5a1 1 0 001 1h12a1 1 0 001-1v-2.5a.5.5 0 011 0v2.5a2 2 0 01-2 2H2a2 2 0 01-2-2v-2.5a.5.5 0 01.5-.5z"/><path d="M7.646 11.854a.5.5 0 00.708 0l3-3a.5.5 0 00-.708-.708L8.5 10.293V1.5a.5.5 0 00-1 0v8.793L5.354 8.146a.5.5 0 10-.708.708l3 3z"/></svg>
       </button>
+      <button class="bm-icon-btn bm-hidden" id="bm-reveal" title="Reveal redacted secrets (local scope only)">
+        <svg viewBox="0 0 16 16"><path d="M16 8s-3-5.5-8-5.5S0 8 0 8s3 5.5 8 5.5S16 8 16 8zM1.173 8a13.133 13.133 0 011.66-2.043C4.12 4.668 5.88 3.5 8 3.5c2.12 0 3.879 1.168 5.168 2.457A13.133 13.133 0 0114.828 8c-.058.087-.122.183-.195.288-.335.48-.83 1.12-1.465 1.755C11.879 11.332 10.119 12.5 8 12.5c-2.12 0-3.879-1.168-5.168-2.457A13.134 13.134 0 011.172 8z"/><path d="M8 5.5a2.5 2.5 0 100 5 2.5 2.5 0 000-5zM4.5 8a3.5 3.5 0 117 0 3.5 3.5 0 01-7 0z"/></svg>
+      </button>
     </div>
     <div class="bm-scroll-area" data-tab="data">
       <div class="bm-tree-root" id="tree-data"></div>

package/framework/{v0.3.6 → v0.3.7-alpha.2}/core/asset/plugin/dist/vendor/gina/inspector/inspector.css

@@ -830,6 +830,8 @@ body {
   cursor: pointer;
   padding: 4px;
   transition: border-color 0.15s, background 0.15s;
+  /* Reveal toggle — red tint when active so the unredacted state is visually
+     distinct from the regular amber `.active` state used by RAW / fold-all. */
 }
 .bm-icon-btn svg {
   width: 14px;
@@ -850,6 +852,16 @@ body {
 .bm-icon-btn.active svg {
   fill: var(--accent);
 }
+.bm-icon-btn.bm-hidden {
+  display: none;
+}
+.bm-icon-btn#bm-reveal.active {
+  border-color: var(--err);
+  background: rgba(231, 76, 60, 0.12);
+}
+.bm-icon-btn#bm-reveal.active svg {
+  fill: var(--err);
+}
 
 /* ── Data search bar ─────────────────────────────────────────────────────── */
 .bm-data-search {
@@ -3591,5 +3603,3 @@ details[open] > summary.bm-summary::before {
     text-align: left;
   }
 }
-
-/*# sourceMappingURL=inspector.css.map */