gina 0.6.2 → 0.6.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gina",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "description": "MVC framework for Node.js and Bun with built-in HTTP/2, multi-bundle architecture, and scope-based data isolation — no Express dependency",
   "keywords": [
     "nodejs",
@@ -76,12 +76,12 @@
     "gina-container": "bin/gina-container",
     "gina-init": "bin/gina-init"
   },
-  "main": "./framework/v0.6.2/core/gna",
+  "main": "./framework/v0.6.3/core/gna",
   "exports": {
     ".": {
       "types": "./types/index.d.ts",
       "import": "./index.mjs",
-      "require": "./framework/v0.6.2/core/gna.js"
+      "require": "./framework/v0.6.3/core/gna.js"
     },
     "./gna": {
       "types": "./types/gna.d.ts",
@@ -131,6 +131,7 @@
     "typescript": "^7.0.2"
   },
   "overrides": {
-    "ws": "^8.21.0"
+    "ws": "^8.21.0",
+    "object-assign": "npm:@socketregistry/object-assign@^1.0.5"
   }
 }

package/schema/connectors.json

@@ -123,7 +123,7 @@
         },
         "ttl": {
           "type": "number",
-          "description": "Redis, SQLite, MongoDB and ScyllaDB session stores. Default TTL in seconds for session entries. When omitted, the session record follows the cookie's `maxAge`, falling back to 86400 only when the cookie has none. The Couchbase stores read `ttl` as a constructor option only, never from this file."
+          "description": "Redis, SQLite, MongoDB and ScyllaDB session stores. Default TTL in seconds for session entries. When omitted, the session record follows the cookie's `maxAge`, falling back to 86400 only when the cookie has none. Must be a positive number of seconds — a non-positive value (including 0) is refused at bundle init. The Couchbase stores read `ttl` as a constructor option only, never from this file."
         },
         "cluster": {
           "type": "array",
@@ -149,7 +149,7 @@
         },
         "useScopeAndCollections": {
           "type": "boolean",
-          "description": "Couchbase only. Enable scope and collection support (SDK v3+). Defaults to true.",
+          "description": "Couchbase only. Accepted but currently inert — the connector partitions data via _scope/_collection document fields (one bucket, default collection); named-collection KV access is available per call via entity.getConnection(scope, collection). Reserved for a possible future native scope/collection routing mode.",
           "default": true
         },
         "timeouts": {

package/schema/routing.json

@@ -122,6 +122,11 @@
             "enum": ["local", "beta", "production", "testing"]
           }
         },
+        "negotiate": {
+          "type": "boolean",
+          "default": false,
+          "description": "Opt this route into content negotiation (#SPA1). When true, a request carrying `X-Gina-Navigate: fragment` receives the route's layoutless body instead of the full page, and the response advertises `Vary: X-Gina-Navigate`. Absent or false, the route renders exactly as before. A negotiable route never participates in the render cache: the cache key carries no shape dimension, and both serve points run before the shape is resolved — so pairing `negotiate` with `cache` would risk serving a fragment to a page request."
+        },
         "cache": {
           "description": "Response caching configuration. Use a string for the cache type shorthand, or an object for full control.",
           "oneOf": [

package/schema/settings.json

@@ -177,7 +177,7 @@
             "secret": {
               "type": "string",
               "minLength": 1,
-              "description": "The HMAC signing key. A literal, or a `${secret:VAR}` placeholder resolved at config load (VAR must NOT be GINA_-prefixed — the CLI sweeps GINA_* out of process.env before config load; use GINA_AUDIT_SECRET for the environment path instead). Optional here: when omitted the key is read from the GINA_AUDIT_SECRET environment variable. A key shorter than 32 characters boots with a warning. Enabling the chain with no key from either source refuses the boot."
+              "description": "The HMAC signing key. A literal, or a `${secret:VAR}` placeholder resolved at config load — the variable is read from the framework environment first, then `process.env`, so GINA_-prefixed names resolve too (before 0.6.3 the CLI sweep made them unresolvable). Optional here: when omitted the key is read from the GINA_AUDIT_SECRET environment variable. A key shorter than 32 characters boots with a warning. Enabling the chain with no key from either source refuses the boot."
             }
           }
         }
@@ -300,6 +300,11 @@
         "store": {
           "type": "string",
           "description": "Required for `redis`: the name of a `connectors.json` entry ({ \"<name>\": { \"connector\": \"redis\", \"host\": …, \"port\": … } }) providing the L2 connection. Ignored for memory / fs."
+        },
+        "name": {
+          "type": "string",
+          "pattern": "^[A-Za-z][A-Za-z0-9._-]{0,63}$",
+          "description": "Optional RFC 9211 Cache-Status identifier for this bundle's render/output cache (default `gina-cache`). Grammar is a conservative RFC 8941 token subset: a letter, then up to 63 of [A-Za-z0-9._-]. An invalid value is ignored with a boot warn. When `server.hidePoweredBy` is true and the cache is enabled, leaving it unset logs a boot warn naming the disclosure — set any token (e.g. `cache`) to close it, or explicitly `gina-cache` to keep the default wire and silence the warn."
         }
       }
     },

package/script/generate_gna_types.js

@@ -388,7 +388,7 @@ const SECTIONS = [
       names: ['run'] },
     { header: 'Env helpers',
       names: ['getUserHome', 'getEnvVar', 'getEnvVars', 'setEnvVar',
-              'getProtected', 'filterArgs', 'getLogDir', 'getRunDir', 'getTmpDir',
+              'getProtected', 'filterArgs', 'importEnvVars', 'getLogDir', 'getRunDir', 'getTmpDir',
               'getBundleStartingArgv', 'getVendorsConfig', 'setVendorsConfig',
               'defineDefault', 'parseTimeout', 'merge'] },
     { header: 'ApiError',