tina4-nodejs 3.13.110 → 3.13.112

package/packages/cli/dist/bin.js

@@ -16918,6 +16918,775 @@ var init_docstore = __esm({
   }
 });
 
+// ../orm/src/graph/graphUrl.ts
+var SCHEME_ENGINE, ENGINE_DEFAULT_PORT, GraphUrl;
+var init_graphUrl = __esm({
+  "../orm/src/graph/graphUrl.ts"() {
+    "use strict";
+    SCHEME_ENGINE = {
+      ultipa: "ultipa",
+      ultipas: "ultipa",
+      // TLS variant
+      neo4j: "bolt",
+      "neo4j+s": "bolt",
+      bolt: "bolt",
+      "bolt+s": "bolt",
+      memgraph: "bolt",
+      arango: "arango",
+      arangodb: "arango"
+    };
+    ENGINE_DEFAULT_PORT = {
+      ultipa: 60061,
+      bolt: 7687,
+      arango: 8529
+    };
+    GraphUrl = class _GraphUrl {
+      raw;
+      scheme;
+      engine;
+      host;
+      port;
+      /** The graph/database name (leading slash stripped), or null when absent. */
+      graph;
+      username;
+      password;
+      params;
+      useTls;
+      constructor(url) {
+        this.raw = url;
+        let parsed;
+        try {
+          parsed = new URL(url);
+        } catch {
+          throw new Error(
+            `Unsupported graph URL '${url}' \u2014 expected scheme://[user[:password]@]host[:port]/graph (e.g. ultipa://host:60061/mygraph).`
+          );
+        }
+        const scheme = parsed.protocol.replace(/:$/, "").toLowerCase();
+        const engine = SCHEME_ENGINE[scheme];
+        if (engine === void 0) {
+          throw new Error(
+            `Unsupported graph URL scheme '${scheme}'. Supported: ${Object.keys(SCHEME_ENGINE).sort().join(", ")} (e.g. ultipa://host:60061/mygraph).`
+          );
+        }
+        this.scheme = scheme;
+        this.engine = engine;
+        this.host = parsed.hostname || "localhost";
+        this.port = parsed.port ? parseInt(parsed.port, 10) : ENGINE_DEFAULT_PORT[engine];
+        const path8 = (parsed.pathname || "").replace(/^\//, "");
+        this.graph = path8 === "" ? null : path8;
+        this.username = parsed.username ? decodeURIComponent(parsed.username) : null;
+        this.password = parsed.password ? decodeURIComponent(parsed.password) : null;
+        this.params = {};
+        for (const [key, value] of parsed.searchParams) {
+          if (!(key in this.params)) this.params[key] = value;
+        }
+        this.useTls = scheme.endsWith("s") || this.params.tls === "1" || this.params.tls === "true";
+      }
+      /** host:port/graph — for messages, never carrying credentials. */
+      getDsn() {
+        const target = this.port ? `${this.host}:${this.port}` : this.host;
+        return this.graph ? `${target}/${this.graph}` : target;
+      }
+      static fromEnv(envKey = "TINA4_GRAPH_URL") {
+        const url = (process.env[envKey] ?? "").trim();
+        return url === "" ? null : new _GraphUrl(url);
+      }
+    };
+  }
+});
+
+// ../orm/src/graph/errors.ts
+var GraphError, GraphConnectTimeout;
+var init_errors = __esm({
+  "../orm/src/graph/errors.ts"() {
+    "use strict";
+    GraphError = class extends Error {
+      constructor(message, cause) {
+        super(message, cause === void 0 ? void 0 : { cause });
+        this.name = "GraphError";
+      }
+    };
+    GraphConnectTimeout = class extends GraphError {
+      constructor(message, cause) {
+        super(message, cause);
+        this.name = "GraphConnectTimeout";
+      }
+    };
+  }
+});
+
+// ../orm/src/graph/shapes.ts
+var GraphNode, GraphEdge, GraphResult;
+var init_shapes = __esm({
+  "../orm/src/graph/shapes.ts"() {
+    "use strict";
+    GraphNode = class {
+      id;
+      labels;
+      properties;
+      constructor(id, labels = null, properties = null) {
+        this.id = id;
+        this.labels = [...labels ?? []];
+        this.properties = { ...properties ?? {} };
+      }
+      toDict() {
+        return { id: this.id, labels: this.labels, properties: this.properties };
+      }
+    };
+    GraphEdge = class {
+      id;
+      type;
+      from;
+      to;
+      properties;
+      constructor(id, type2, from, to, properties = null) {
+        this.id = id;
+        this.type = type2;
+        this.from = from;
+        this.to = to;
+        this.properties = { ...properties ?? {} };
+      }
+      toDict() {
+        return {
+          id: this.id,
+          type: this.type,
+          from: this.from,
+          to: this.to,
+          properties: this.properties
+        };
+      }
+    };
+    GraphResult = class {
+      records;
+      columns;
+      constructor(records = null, columns = null) {
+        this.records = [...records ?? []];
+        this.columns = [...columns ?? []];
+      }
+      toArray() {
+        return this.records;
+      }
+      /** The first value of the first record, or null. */
+      scalar() {
+        if (this.records.length === 0) return null;
+        const values = Object.values(this.records[0]);
+        return values.length ? values[0] : null;
+      }
+      [Symbol.iterator]() {
+        return this.records[Symbol.iterator]();
+      }
+      get length() {
+        return this.records.length;
+      }
+    };
+  }
+});
+
+// ../orm/src/graph/connectTimeout.ts
+function resolveGraphConnectTimeout() {
+  const raw = (process.env[GRAPH_CONNECT_TIMEOUT_VARIABLE] ?? "").trim();
+  if (raw === "") {
+    return DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS;
+  }
+  const seconds = Number(raw);
+  if (!Number.isFinite(seconds)) {
+    Log.warning(
+      `${GRAPH_CONNECT_TIMEOUT_VARIABLE}="${raw}" is not a number of seconds \u2014 bounding graph connects at the ${DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS}s default instead`
+    );
+    return DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS;
+  }
+  return seconds <= 0 ? null : seconds;
+}
+var GRAPH_CONNECT_TIMEOUT_VARIABLE, DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS;
+var init_connectTimeout2 = __esm({
+  "../orm/src/graph/connectTimeout.ts"() {
+    "use strict";
+    init_src3();
+    GRAPH_CONNECT_TIMEOUT_VARIABLE = "TINA4_GRAPH_CONNECT_TIMEOUT";
+    DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS = 10;
+  }
+});
+
+// ../orm/src/graph/adapters/ultipa.ts
+var ultipa_exports = {};
+__export(ultipa_exports, {
+  UltipaGraphAdapter: () => UltipaGraphAdapter
+});
+function propClause(properties) {
+  const props = properties ?? {};
+  const keys = Object.keys(props);
+  if (keys.length === 0) return { clause: "{}", params: {} };
+  const pairs = keys.map((key) => `${key}: $p_${key}`).join(", ");
+  const params = {};
+  for (const key of keys) params[`p_${key}`] = props[key];
+  return { clause: `{${pairs}}`, params };
+}
+function errorMessage(exc) {
+  if (exc instanceof Error) return exc.message;
+  return String(exc);
+}
+var DRIVER_PACKAGE, driver, UltipaClient, UltipaConnectError, UNBOUNDED_CONNECT_SECONDS, UltipaGraphAdapter;
+var init_ultipa = __esm({
+  async "../orm/src/graph/adapters/ultipa.ts"() {
+    "use strict";
+    init_shapes();
+    init_errors();
+    init_connectTimeout2();
+    DRIVER_PACKAGE = "tina4-ultipa";
+    driver = await import(DRIVER_PACKAGE);
+    UltipaClient = driver.UltipaClient;
+    UltipaConnectError = driver.UltipaConnectError;
+    UNBOUNDED_CONNECT_SECONDS = 31536e4;
+    UltipaGraphAdapter = class {
+      url;
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      client;
+      lastError = null;
+      constructor(graphUrl, credentials = {}) {
+        this.url = graphUrl;
+        const timeout = resolveGraphConnectTimeout();
+        this.client = new UltipaClient({
+          host: graphUrl.host,
+          port: graphUrl.port,
+          username: graphUrl.username || credentials.username || null,
+          password: graphUrl.password || credentials.password || null,
+          graph: graphUrl.graph,
+          connectTimeout: timeout ?? UNBOUNDED_CONNECT_SECONDS,
+          useTls: graphUrl.useTls
+        });
+      }
+      // -- connection + raw pass-through -------------------------------------
+      async run(gql, params = null, readOnly = true) {
+        try {
+          await this.client.connect();
+        } catch (exc) {
+          this.lastError = errorMessage(exc);
+          if (exc instanceof UltipaConnectError || exc?.name === "UltipaConnectError") {
+            const elapsed = typeof exc?.elapsed === "number" ? exc.elapsed : 0;
+            throw new GraphConnectTimeout(
+              `Graph connect to ${this.url.host}:${this.url.port} timed out after ${elapsed.toFixed(1)}s (${GRAPH_CONNECT_TIMEOUT_VARIABLE}). Raise ${GRAPH_CONNECT_TIMEOUT_VARIABLE} if the server is simply slow, or set it to 0 to wait indefinitely.`,
+              exc
+            );
+          }
+          throw new GraphError(this.lastError, exc);
+        }
+        try {
+          return await this.client.query(gql, { params: params ?? null, readOnly });
+        } catch (exc) {
+          this.lastError = errorMessage(exc);
+          throw new GraphError(this.lastError, exc);
+        }
+      }
+      async query(text, params = null) {
+        const result = await this.run(text, params, true);
+        return new GraphResult(result.dicts(), result.columns);
+      }
+      async execute(text, params = null) {
+        const result = await this.run(text, params, false);
+        return new GraphResult(result.dicts(), result.columns);
+      }
+      // -- portable node/edge/traverse core (GQL) ----------------------------
+      nodeFromRow(row) {
+        if (row === null || row === void 0) return null;
+        return new GraphNode(
+          String(row.id),
+          row.labels ?? [],
+          row.props ?? {}
+        );
+      }
+      async addNode(label, properties = null) {
+        const { clause, params } = propClause(properties);
+        const gql = `INSERT (n:\`${label}\` ${clause}) RETURN id(n) AS id, labels(n) AS labels, properties(n) AS props`;
+        const rows = (await this.run(gql, params, false)).dicts();
+        return rows.length ? this.nodeFromRow(rows[0]) : null;
+      }
+      async addEdge(fromId, toId, type2, properties = null) {
+        const { clause, params } = propClause(properties);
+        params.from_id = fromId;
+        params.to_id = toId;
+        const gql = `MATCH (a), (b) WHERE id(a) = $from_id AND id(b) = $to_id INSERT (a)-[e:\`${type2}\` ${clause}]->(b) RETURN id(e) AS id, type(e) AS type, id(a) AS f, id(b) AS t, properties(e) AS props`;
+        const rows = (await this.run(gql, params, false)).dicts();
+        if (rows.length === 0) return null;
+        const row = rows[0];
+        return new GraphEdge(
+          String(row.id),
+          String(row.type),
+          String(row.f),
+          String(row.t),
+          row.props ?? {}
+        );
+      }
+      async getNode(nodeId) {
+        const gql = `MATCH (n) WHERE id(n) = $id RETURN id(n) AS id, labels(n) AS labels, properties(n) AS props`;
+        const rows = (await this.run(gql, { id: nodeId }, true)).dicts();
+        return rows.length ? this.nodeFromRow(rows[0]) : null;
+      }
+      async updateNode(nodeId, properties) {
+        const props = properties ?? {};
+        const keys = Object.keys(props);
+        const sets = keys.map((key) => `n.${key} = $p_${key}`).join(", ");
+        const params = { id: nodeId };
+        for (const key of keys) params[`p_${key}`] = props[key];
+        const gql = `MATCH (n) WHERE id(n) = $id SET ${sets} RETURN id(n) AS id, labels(n) AS labels, properties(n) AS props`;
+        const rows = (await this.run(gql, params, false)).dicts();
+        return rows.length ? this.nodeFromRow(rows[0]) : null;
+      }
+      async deleteNode(nodeId) {
+        const gql = "MATCH (n) WHERE id(n) = $id DETACH DELETE n";
+        await this.run(gql, { id: nodeId }, false);
+        return true;
+      }
+      async neighbors(nodeId, options = {}) {
+        const direction = options.direction ?? "both";
+        const limit = options.limit ?? 100;
+        const edge = options.edgeType ? `:\`${options.edgeType}\`` : "";
+        const pattern = {
+          out: `(n)-[${edge}]->(m)`,
+          in: `(n)<-[${edge}]-(m)`,
+          both: `(n)-[${edge}]-(m)`
+        }[direction];
+        const gql = `MATCH ${pattern} WHERE id(n) = $id RETURN DISTINCT id(m) AS id, labels(m) AS labels, properties(m) AS props LIMIT ${Math.trunc(limit)}`;
+        const rows = (await this.run(gql, { id: nodeId }, true)).dicts();
+        return rows.map((row) => this.nodeFromRow(row)).filter((node) => node !== null);
+      }
+      async traverse(startId, options = {}) {
+        const depth = options.depth ?? 1;
+        const direction = options.direction ?? "both";
+        const limit = options.limit ?? 1e3;
+        const edge = options.edgeType ? `:\`${options.edgeType}\`` : "";
+        const quant = `{1,${Math.trunc(depth)}}`;
+        const pattern = {
+          out: `(n)-[${edge}]->${quant}(m)`,
+          in: `(n)<-[${edge}]-${quant}(m)`,
+          both: `(n)-[${edge}]-${quant}(m)`
+        }[direction];
+        const gql = `MATCH ${pattern} WHERE id(n) = $start RETURN DISTINCT id(m) AS id, labels(m) AS labels, properties(m) AS props LIMIT ${Math.trunc(limit)}`;
+        const rows = (await this.run(gql, { start: startId }, true)).dicts();
+        return rows.map((row) => this.nodeFromRow(row)).filter((node) => node !== null);
+      }
+      close() {
+        this.client.close();
+      }
+      getError() {
+        return this.lastError;
+      }
+    };
+  }
+});
+
+// ../orm/src/graph/adapters/bolt.ts
+var bolt_exports = {};
+__export(bolt_exports, {
+  BoltGraphAdapter: () => BoltGraphAdapter
+});
+function errorMessage2(exc) {
+  if (exc instanceof Error) return exc.message;
+  return String(exc);
+}
+function boltId(id) {
+  const value = Number(id);
+  return Number.isNaN(value) ? -1 : value;
+}
+var DRIVER_PACKAGE2, driverModule, neo4j, BoltGraphAdapter;
+var init_bolt = __esm({
+  async "../orm/src/graph/adapters/bolt.ts"() {
+    "use strict";
+    init_shapes();
+    init_errors();
+    init_connectTimeout2();
+    DRIVER_PACKAGE2 = "neo4j-driver";
+    driverModule = await import(DRIVER_PACKAGE2);
+    neo4j = driverModule.default ?? driverModule;
+    BoltGraphAdapter = class {
+      url;
+      database;
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      driver;
+      lastError = null;
+      constructor(graphUrl, credentials = {}) {
+        this.url = graphUrl;
+        this.database = graphUrl.graph || null;
+        const user = graphUrl.username || credentials.username || "neo4j";
+        const pwd = graphUrl.password || credentials.password || "";
+        const scheme = graphUrl.useTls ? "bolt+s" : "bolt";
+        const uri = `${scheme}://${graphUrl.host}:${graphUrl.port}`;
+        const timeout = resolveGraphConnectTimeout();
+        const config = { disableLosslessIntegers: true };
+        if (timeout !== null) {
+          const ms = Math.max(1, Math.ceil(timeout * 1e3));
+          config.connectionTimeout = ms;
+          config.connectionAcquisitionTimeout = ms;
+          config.maxTransactionRetryTime = ms;
+        }
+        this.driver = neo4j.driver(uri, neo4j.auth.basic(user, pwd), config);
+      }
+      // -- connection + raw pass-through -------------------------------------
+      async run(cypher, params = null) {
+        const session = this.database ? this.driver.session({ database: this.database }) : this.driver.session();
+        try {
+          const result = await session.run(cypher, params ?? {});
+          return result.records.map((record) => record.toObject());
+        } catch (exc) {
+          this.lastError = errorMessage2(exc);
+          const code = exc?.code ?? "";
+          const message = this.lastError.toLowerCase();
+          if (code === "ServiceUnavailable" || code === neo4j.error?.SERVICE_UNAVAILABLE || message.includes("timed out") || message.includes("timeout")) {
+            throw new GraphConnectTimeout(
+              `Graph connect to ${this.url.host}:${this.url.port} timed out (${GRAPH_CONNECT_TIMEOUT_VARIABLE}). Raise ${GRAPH_CONNECT_TIMEOUT_VARIABLE} if the server is simply slow, or set it to 0 to wait indefinitely.`,
+              exc
+            );
+          }
+          throw new GraphError(this.lastError, exc);
+        } finally {
+          await session.close();
+        }
+      }
+      async query(text, params = null) {
+        const rows = await this.run(text, params);
+        const columns = rows.length ? Object.keys(rows[0]) : [];
+        return new GraphResult(rows, columns);
+      }
+      async execute(text, params = null) {
+        return this.query(text, params);
+      }
+      // -- portable node/edge/traverse core (Cypher) -------------------------
+      nodeFromRow(row) {
+        if (row === null || row === void 0) return null;
+        return new GraphNode(
+          String(row.id),
+          row.labels ?? [],
+          row.props ?? {}
+        );
+      }
+      async addNode(label, properties = null) {
+        const cypher = `CREATE (n:\`${label}\` $props) RETURN id(n) AS id, labels(n) AS labels, properties(n) AS props`;
+        const rows = await this.run(cypher, { props: properties ?? {} });
+        return rows.length ? this.nodeFromRow(rows[0]) : null;
+      }
+      async addEdge(fromId, toId, type2, properties = null) {
+        const cypher = `MATCH (a), (b) WHERE id(a) = $from_id AND id(b) = $to_id CREATE (a)-[e:\`${type2}\` $props]->(b) RETURN id(e) AS id, type(e) AS type, id(a) AS f, id(b) AS t, properties(e) AS props`;
+        const rows = await this.run(cypher, {
+          from_id: boltId(fromId),
+          to_id: boltId(toId),
+          props: properties ?? {}
+        });
+        if (rows.length === 0) return null;
+        const row = rows[0];
+        return new GraphEdge(
+          String(row.id),
+          String(row.type),
+          String(row.f),
+          String(row.t),
+          row.props ?? {}
+        );
+      }
+      async getNode(nodeId) {
+        const cypher = `MATCH (n) WHERE id(n) = $id RETURN id(n) AS id, labels(n) AS labels, properties(n) AS props`;
+        const rows = await this.run(cypher, { id: boltId(nodeId) });
+        return rows.length ? this.nodeFromRow(rows[0]) : null;
+      }
+      async updateNode(nodeId, properties) {
+        const cypher = `MATCH (n) WHERE id(n) = $id SET n += $props RETURN id(n) AS id, labels(n) AS labels, properties(n) AS props`;
+        const rows = await this.run(cypher, { id: boltId(nodeId), props: properties ?? {} });
+        return rows.length ? this.nodeFromRow(rows[0]) : null;
+      }
+      async deleteNode(nodeId) {
+        await this.run("MATCH (n) WHERE id(n) = $id DETACH DELETE n", { id: boltId(nodeId) });
+        return true;
+      }
+      async neighbors(nodeId, options = {}) {
+        const direction = options.direction ?? "both";
+        const limit = options.limit ?? 100;
+        const edge = options.edgeType ? `:\`${options.edgeType}\`` : "";
+        const pattern = {
+          out: `(n)-[${edge}]->(m)`,
+          in: `(n)<-[${edge}]-(m)`,
+          both: `(n)-[${edge}]-(m)`
+        }[direction];
+        const cypher = `MATCH ${pattern} WHERE id(n) = $id RETURN DISTINCT id(m) AS id, labels(m) AS labels, properties(m) AS props LIMIT ${Math.trunc(limit)}`;
+        const rows = await this.run(cypher, { id: boltId(nodeId) });
+        return rows.map((row) => this.nodeFromRow(row)).filter((node) => node !== null);
+      }
+      async traverse(startId, options = {}) {
+        const depth = options.depth ?? 1;
+        const direction = options.direction ?? "both";
+        const limit = options.limit ?? 1e3;
+        const edge = options.edgeType ? `:\`${options.edgeType}\`` : "";
+        const range = `*1..${Math.trunc(depth)}`;
+        const arrow = {
+          out: `-[${edge}${range}]->`,
+          in: `<-[${edge}${range}]-`,
+          both: `-[${edge}${range}]-`
+        }[direction];
+        const cypher = `MATCH (n)${arrow}(m) WHERE id(n) = $start RETURN DISTINCT id(m) AS id, labels(m) AS labels, properties(m) AS props LIMIT ${Math.trunc(limit)}`;
+        const rows = await this.run(cypher, { start: boltId(startId) });
+        return rows.map((row) => this.nodeFromRow(row)).filter((node) => node !== null);
+      }
+      async close() {
+        await this.driver.close();
+      }
+      getError() {
+        return this.lastError;
+      }
+    };
+  }
+});
+
+// ../orm/src/graph/adapters/arango.ts
+var arango_exports = {};
+__export(arango_exports, {
+  ArangoGraphAdapter: () => ArangoGraphAdapter
+});
+function cleanProps(doc) {
+  const props = {};
+  for (const [key, value] of Object.entries(doc)) {
+    if (!RESERVED.has(key)) props[key] = value;
+  }
+  return props;
+}
+function errorMessage3(exc) {
+  if (exc instanceof Error) return exc.message;
+  return String(exc);
+}
+var DRIVER_PACKAGE3, driverModule2, ArangoDatabase, VERTEX_COLLECTION, EDGE_COLLECTION, RESERVED, ArangoGraphAdapter;
+var init_arango = __esm({
+  async "../orm/src/graph/adapters/arango.ts"() {
+    "use strict";
+    init_shapes();
+    init_errors();
+    init_connectTimeout2();
+    DRIVER_PACKAGE3 = "arangojs";
+    driverModule2 = await import(DRIVER_PACKAGE3);
+    ArangoDatabase = driverModule2.Database ?? driverModule2.default?.Database;
+    VERTEX_COLLECTION = "tina4_nodes";
+    EDGE_COLLECTION = "tina4_edges";
+    RESERVED = /* @__PURE__ */ new Set(["_id", "_key", "_rev", "_from", "_to", "_labels", "_type"]);
+    ArangoGraphAdapter = class {
+      url;
+      // eslint-disable-next-line @typescript-eslint/no-explicit-any
+      db;
+      ensured = false;
+      lastError = null;
+      constructor(graphUrl, credentials = {}) {
+        this.url = graphUrl;
+        const scheme = graphUrl.useTls ? "https" : "http";
+        const user = graphUrl.username || credentials.username || "root";
+        const pwd = graphUrl.password || credentials.password || "";
+        const database = graphUrl.graph || "_system";
+        const timeout = resolveGraphConnectTimeout();
+        const config = {
+          url: `${scheme}://${graphUrl.host}:${graphUrl.port}`,
+          databaseName: database,
+          auth: { username: user, password: pwd }
+        };
+        if (timeout !== null) config.timeout = Math.max(1, Math.ceil(timeout * 1e3));
+        this.db = new ArangoDatabase(config);
+      }
+      connectOrError(exc) {
+        const text = errorMessage3(exc).toLowerCase();
+        if (text.includes("timed out") || text.includes("timeout") || text.includes("connection") || text.includes("econnrefused") || text.includes("etimedout") || text.includes("max retries")) {
+          return new GraphConnectTimeout(
+            `Graph connect to ${this.url.host}:${this.url.port} timed out (${GRAPH_CONNECT_TIMEOUT_VARIABLE}). Raise ${GRAPH_CONNECT_TIMEOUT_VARIABLE} if the server is simply slow, or set it to 0 to wait indefinitely.`,
+            exc
+          );
+        }
+        return new GraphError(errorMessage3(exc), exc);
+      }
+      async ensureCollections() {
+        if (this.ensured) return;
+        try {
+          const nodes = this.db.collection(VERTEX_COLLECTION);
+          if (!await nodes.exists()) await this.db.createCollection(VERTEX_COLLECTION);
+          const edges = this.db.collection(EDGE_COLLECTION);
+          if (!await edges.exists()) await this.db.createEdgeCollection(EDGE_COLLECTION);
+          this.ensured = true;
+        } catch (exc) {
+          this.lastError = errorMessage3(exc);
+          throw this.connectOrError(exc);
+        }
+      }
+      async aql(query, bind2 = null) {
+        await this.ensureCollections();
+        try {
+          const cursor = await this.db.query({ query, bindVars: bind2 ?? {} });
+          return await cursor.all();
+        } catch (exc) {
+          this.lastError = errorMessage3(exc);
+          throw this.connectOrError(exc);
+        }
+      }
+      async query(text, params = null) {
+        const rows = await this.aql(text, params);
+        const first = rows[0];
+        const columns = rows.length && first && typeof first === "object" ? Object.keys(first) : [];
+        return new GraphResult(rows, columns);
+      }
+      async execute(text, params = null) {
+        return this.query(text, params);
+      }
+      // -- portable node/edge/traverse core (AQL) ----------------------------
+      nodeFromDoc(doc) {
+        if (doc === null || doc === void 0) return null;
+        return new GraphNode(
+          String(doc._id),
+          doc._labels ?? [],
+          cleanProps(doc)
+        );
+      }
+      async addNode(label, properties = null) {
+        const doc = { ...properties ?? {}, _labels: [label] };
+        const rows = await this.aql(`INSERT @doc INTO ${VERTEX_COLLECTION} RETURN NEW`, { doc });
+        return rows.length ? this.nodeFromDoc(rows[0]) : null;
+      }
+      async addEdge(fromId, toId, type2, properties = null) {
+        const doc = { ...properties ?? {}, _from: fromId, _to: toId, _type: type2 };
+        const rows = await this.aql(`INSERT @doc INTO ${EDGE_COLLECTION} RETURN NEW`, { doc });
+        if (rows.length === 0) return null;
+        const row = rows[0];
+        return new GraphEdge(
+          String(row._id),
+          String(row._type),
+          String(row._from),
+          String(row._to),
+          cleanProps(row)
+        );
+      }
+      async getNode(nodeId) {
+        const rows = await this.aql("RETURN DOCUMENT(@id)", { id: nodeId });
+        return rows.length && rows[0] ? this.nodeFromDoc(rows[0]) : null;
+      }
+      async updateNode(nodeId, properties) {
+        const rows = await this.aql(
+          `UPDATE PARSE_IDENTIFIER(@id).key WITH @props IN ${VERTEX_COLLECTION} RETURN NEW`,
+          { id: nodeId, props: properties ?? {} }
+        );
+        return rows.length ? this.nodeFromDoc(rows[0]) : null;
+      }
+      async deleteNode(nodeId) {
+        await this.aql(
+          `FOR e IN ${EDGE_COLLECTION} FILTER e._from == @id OR e._to == @id REMOVE e IN ${EDGE_COLLECTION}`,
+          { id: nodeId }
+        );
+        await this.aql(
+          `REMOVE PARSE_IDENTIFIER(@id).key IN ${VERTEX_COLLECTION}`,
+          { id: nodeId }
+        );
+        return true;
+      }
+      async neighbors(nodeId, options = {}) {
+        const direction = options.direction ?? "both";
+        const limit = options.limit ?? 100;
+        const arangoDir = { out: "OUTBOUND", in: "INBOUND", both: "ANY" }[direction];
+        const typeFilter = options.edgeType ? "FILTER e._type == @etype " : "";
+        const bind2 = { start: nodeId, limit: Math.trunc(limit) };
+        if (options.edgeType) bind2.etype = options.edgeType;
+        const rows = await this.aql(
+          `FOR v, e IN 1..1 ${arangoDir} @start ${EDGE_COLLECTION} ${typeFilter}LIMIT @limit RETURN DISTINCT v`,
+          bind2
+        );
+        return rows.map((doc) => this.nodeFromDoc(doc)).filter((node) => node !== null);
+      }
+      async traverse(startId, options = {}) {
+        const depth = options.depth ?? 1;
+        const direction = options.direction ?? "both";
+        const limit = options.limit ?? 1e3;
+        const arangoDir = { out: "OUTBOUND", in: "INBOUND", both: "ANY" }[direction];
+        const typeFilter = options.edgeType ? "FILTER e._type == @etype " : "";
+        const bind2 = { start: startId, limit: Math.trunc(limit) };
+        if (options.edgeType) bind2.etype = options.edgeType;
+        const rows = await this.aql(
+          `FOR v, e IN 1..${Math.trunc(depth)} ${arangoDir} @start ${EDGE_COLLECTION} ${typeFilter}LIMIT @limit RETURN DISTINCT v`,
+          bind2
+        );
+        return rows.map((doc) => this.nodeFromDoc(doc)).filter((node) => node !== null);
+      }
+      async close() {
+        if (typeof this.db.close === "function") this.db.close();
+      }
+      getError() {
+        return this.lastError;
+      }
+    };
+  }
+});
+
+// ../orm/src/graph/graphDatabase.ts
+var ENGINE_ADAPTERS, GraphDatabase;
+var init_graphDatabase = __esm({
+  "../orm/src/graph/graphDatabase.ts"() {
+    "use strict";
+    init_graphUrl();
+    init_errors();
+    ENGINE_ADAPTERS = {
+      ultipa: {
+        load: () => init_ultipa().then(() => ultipa_exports),
+        className: "UltipaGraphAdapter",
+        package: "tina4-ultipa",
+        installCommand: "npm install tina4-ultipa"
+      },
+      bolt: {
+        // Neo4j AND Memgraph — both speak Bolt/Cypher over the neo4j-driver package.
+        load: () => init_bolt().then(() => bolt_exports),
+        className: "BoltGraphAdapter",
+        package: "neo4j-driver",
+        installCommand: "npm install neo4j-driver"
+      },
+      arango: {
+        load: () => init_arango().then(() => arango_exports),
+        className: "ArangoGraphAdapter",
+        package: "arangojs",
+        installCommand: "npm install arangojs"
+      }
+    };
+    GraphDatabase = class _GraphDatabase {
+      /**
+       * Parse the URL, pick the engine adapter, connect lazily.
+       *
+       * The engine driver is imported only here (first use of that engine); if it is
+       * absent the error names the package and the install command. Async because the
+       * driver import is dynamic — the connect itself still happens lazily on first
+       * operation (mirroring the relational adapters).
+       */
+      static async create(url, credentials = {}) {
+        const graphUrl = new GraphUrl(url);
+        const registration = ENGINE_ADAPTERS[graphUrl.engine];
+        if (registration === void 0) {
+          throw new GraphError(
+            `No graph adapter for engine '${graphUrl.engine}' yet (scheme '${graphUrl.scheme}'). Available: ${Object.keys(ENGINE_ADAPTERS).sort().join(", ")}.`
+          );
+        }
+        let module;
+        try {
+          module = await registration.load();
+        } catch (cause) {
+          throw new GraphError(
+            `The graph driver for '${graphUrl.engine}' is not installed (${registration.package}). Install it with:
+    ${registration.installCommand}`,
+            cause
+          );
+        }
+        const AdapterClass = module[registration.className];
+        if (AdapterClass === void 0) {
+          throw new GraphError(
+            `The graph adapter '${registration.className}' is missing from its module for engine '${graphUrl.engine}'.`
+          );
+        }
+        return new AdapterClass(graphUrl, credentials);
+      }
+      /** Build from TINA4_GRAPH_URL (+ TINA4_GRAPH_USERNAME/_PASSWORD). */
+      static async fromEnv(envKey = "TINA4_GRAPH_URL") {
+        const url = (process.env[envKey] ?? "").trim();
+        if (url === "") return null;
+        return _GraphDatabase.create(url, {
+          username: process.env.TINA4_GRAPH_USERNAME,
+          password: process.env.TINA4_GRAPH_PASSWORD
+        });
+      }
+    };
+  }
+});
+
 // ../orm/src/realtime/models/workspace.ts
 var Workspace;
 var init_workspace = __esm({
@@ -17476,6 +18245,7 @@ __export(src_exports, {
   CachedDatabaseAdapter: () => CachedDatabaseAdapter,
   Cursor: () => Cursor,
   DEFAULT_DATABASE_CONNECT_TIMEOUT_SECONDS: () => DEFAULT_DATABASE_CONNECT_TIMEOUT_SECONDS,
+  DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS: () => DEFAULT_GRAPH_CONNECT_TIMEOUT_SECONDS,
   DEFAULT_SRID: () => DEFAULT_SRID,
   Database: () => Database,
   DatabaseResult: () => DatabaseResult,
@@ -17483,6 +18253,14 @@ __export(src_exports, {
   DocStoreDriverMissing: () => DocStoreDriverMissing,
   FakeData: () => FakeData2,
   FirebirdAdapter: () => FirebirdAdapter,
+  GRAPH_CONNECT_TIMEOUT_VARIABLE: () => GRAPH_CONNECT_TIMEOUT_VARIABLE,
+  GraphConnectTimeout: () => GraphConnectTimeout,
+  GraphDatabase: () => GraphDatabase,
+  GraphEdge: () => GraphEdge,
+  GraphError: () => GraphError,
+  GraphNode: () => GraphNode,
+  GraphResult: () => GraphResult,
+  GraphUrl: () => GraphUrl,
   InvalidId: () => InvalidId,
   LocalStorage: () => LocalStorage,
   Migration: () => Migration,
@@ -17564,6 +18342,7 @@ __export(src_exports, {
   resetRequestCaches: () => resetRequestCaches,
   resolveDbPool: () => resolveDbPool,
   resolveFirebirdCharset: () => resolveFirebirdCharset,
+  resolveGraphConnectTimeout: () => resolveGraphConnectTimeout,
   rollback: () => rollback,
   seedModels: () => seedModels,
   seedOrm: () => seedOrm,
@@ -17613,6 +18392,11 @@ var init_src = __esm({
     init_firebird();
     init_mongodb();
     init_odbc();
+    init_graphDatabase();
+    init_graphUrl();
+    init_shapes();
+    init_errors();
+    init_connectTimeout2();
     init_realtime2();
   }
 });
@@ -21308,7 +22092,7 @@ var init_mongoHandler = __esm({
 // ../core/src/sessionHandlers/sqlClient.ts
 import { createRequire as createRequire7 } from "node:module";
 function driverPath(engine) {
-  const packageName = DRIVER_PACKAGE[engine];
+  const packageName = DRIVER_PACKAGE4[engine];
   try {
     return requireFromHere.resolve(packageName);
   } catch {
@@ -21332,14 +22116,14 @@ function sqlCommandSync(target, sql, params = [], label = "Database session") {
     return [];
   }
 }
-var SQL_SESSION_ENGINES, CONNECT_TIMEOUT_MS2, DRIVER_PACKAGE, requireFromHere, SQL_WORKER;
+var SQL_SESSION_ENGINES, CONNECT_TIMEOUT_MS2, DRIVER_PACKAGE4, requireFromHere, SQL_WORKER;
 var init_sqlClient = __esm({
   "../core/src/sessionHandlers/sqlClient.ts"() {
     "use strict";
     init_syncBridge();
     SQL_SESSION_ENGINES = ["sqlite", "postgres", "mysql", "mssql", "firebird"];
     CONNECT_TIMEOUT_MS2 = 3e3;
-    DRIVER_PACKAGE = {
+    DRIVER_PACKAGE4 = {
       postgres: "pg",
       mysql: "mysql2",
       mssql: "tedious",
@@ -32070,47 +32854,120 @@ function renderToolbarHtml(ctx) {
   const method = escapeHtml(ctx.method);
   const path8 = escapeHtml(ctx.path);
   const matchedPattern = escapeHtml(ctx.matchedPattern);
-  return `<div id="tina4-dev-toolbar" style="position:fixed;bottom:0;left:0;right:0;background:#333;color:#fff;font-family:monospace;font-size:12px;padding:6px 16px;z-index:99999;display:flex;align-items:center;gap:16px;">
-    <span id="tina4-ver-btn" style="color:#2e7d32;font-weight:bold;cursor:pointer;text-decoration:underline dotted;" onclick="tina4VersionModal()" title="Click to check for updates">Tina4 v${ctx.version}</span>
-    <div id="tina4-ver-modal" style="display:none;position:fixed;bottom:3rem;left:1rem;background:#1e1e2e;border:1px solid #2e7d32;border-radius:8px;padding:16px 20px;z-index:100000;min-width:320px;box-shadow:0 8px 32px rgba(0,0,0,0.5);font-family:monospace;font-size:13px;color:#cdd6f4;">
-      <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:12px;">
-        <strong style="color:#89b4fa;">Version Info</strong>
-        <span onclick="document.getElementById('tina4-ver-modal').style.display='none'" style="cursor:pointer;color:#888;">&times;</span>
+  const reload = ctx.reload === false ? "0" : "1";
+  return `<link rel="stylesheet" href="/__dev/toolbar.css">
+<div id="tina4-dev-toolbar" data-reload="${reload}">
+    <span id="tina4-ver-btn" title="Click to check for updates">Tina4 v${ctx.version}</span>
+    <div id="tina4-ver-modal">
+      <div class="t4-modal-head">
+        <strong class="t4-modal-title">Version Info</strong>
+        <span id="tina4-ver-close" class="t4-x">&times;</span>
       </div>
-      <div id="tina4-ver-body" style="line-height:1.8;">
-        <div>Current: <strong style="color:#a6e3a1;">v${ctx.version}</strong></div>
-        <div id="tina4-ver-latest" style="color:#888;">Checking for updates...</div>
+      <div id="tina4-ver-body">
+        <div>Current: <strong class="t4-ok">v${ctx.version}</strong></div>
+        <div id="tina4-ver-latest" class="t4-dim">Checking for updates...</div>
       </div>
     </div>
-    <span style="color:#4caf50;">${method}</span>
+    <span class="t4-green">${method}</span>
     <span>${path8}</span>
-    <span style="color:#666;">&rarr; ${matchedPattern}</span>
-    <span style="color:#ffeb3b;">req:${ctx.requestId}</span>
-    <span style="color:#90caf9;">${ctx.routeCount} routes</span>
-    <span style="color:#888;">Node.js ${nodeVersion}</span>
-    <a href="#" onclick="window.__tina4ToggleOverlay(event)" style="color:#ef9a9a;margin-left:auto;text-decoration:none;cursor:pointer;">Dashboard &#8599;</a>
-    <span onclick="this.parentElement.style.display='none'" style="cursor:pointer;color:#888;margin-left:8px;">&#10005;</span>
+    <span class="t4-arrow">&rarr; ${matchedPattern}</span>
+    <span class="t4-yellow">req:${ctx.requestId}</span>
+    <span class="t4-blue">${ctx.routeCount} routes</span>
+    <span class="t4-dim">Node.js ${nodeVersion}</span>
+    <a href="#" id="tina4-dash-link" class="t4-dash">Dashboard &#8599;</a>
+    <span id="tina4-bar-close" class="t4-x t4-bar-close">&#10005;</span>
 </div>
-<script>
-// Overlay open/toggle helper + auto-restore. Persist the dev-admin
-// iframe's open/closed state across parent reloads so saving a file
-// doesn't lose the user's dev-admin context. Cross-framework parity
-// with PHP / Python / Ruby \u2014 same localStorage key.
-(function(){
+<script src="/__dev/toolbar.js"></script>`;
+}
+function toolbarCss() {
+  return `#tina4-dev-toolbar{position:fixed;bottom:0;left:0;right:0;background:#333;color:#fff;font-family:monospace;font-size:12px;padding:6px 16px;z-index:99999;display:flex;align-items:center;gap:16px}
+#tina4-dev-toolbar a{text-decoration:none}
+#tina4-ver-btn{color:#2e7d32;font-weight:bold;cursor:pointer;text-decoration:underline dotted}
+#tina4-ver-modal{display:none;position:fixed;bottom:3rem;left:1rem;background:#1e1e2e;border:1px solid #2e7d32;border-radius:8px;padding:16px 20px;z-index:100000;min-width:320px;box-shadow:0 8px 32px rgba(0,0,0,.5);font-family:monospace;font-size:13px;color:#cdd6f4}
+.t4-modal-head{display:flex;justify-content:space-between;align-items:center;margin-bottom:12px}
+.t4-modal-title{color:#89b4fa}
+#tina4-ver-body{line-height:1.8}
+.t4-x{cursor:pointer;color:#888}
+.t4-bar-close{margin-left:8px}
+.t4-green{color:#4caf50}
+.t4-dim{color:#888}
+.t4-arrow{color:#666}
+.t4-yellow{color:#ffeb3b}
+.t4-blue{color:#90caf9}
+.t4-ok{color:#a6e3a1}
+.t4-warn{color:#f9e2af}
+.t4-err{color:#f38ba8}
+.t4-purple{color:#cba6f7}
+.t4-link{color:#89b4fa}
+.t4-code{background:#313244;padding:2px 6px;border-radius:3px}
+.t4-note{margin-top:6px}
+.t4-dash{color:#ef9a9a;margin-left:auto;cursor:pointer}
+#tina4-dev-panel{position:fixed;top:3rem;left:0;right:0;bottom:2rem;z-index:99998;transition:all .2s}
+#tina4-dev-panel iframe{width:100%;height:100%;border:1px solid #2e7d32;border-radius:.5rem;box-shadow:0 8px 32px rgba(0,0,0,.5);background:#0f172a}`;
+}
+function toolbarJs() {
+  return `(function () {
+    var bar = document.getElementById('tina4-dev-toolbar');
+    if (!bar) { return; }
+
+    var modal = document.getElementById('tina4-ver-modal');
+    function upToDate(el, latest) {
+        el.className = 't4-ok';
+        el.innerHTML = 'Latest: <strong class="t4-ok">v' + latest + '</strong> &mdash; You are up to date!';
+    }
+    function checkVersion() {
+        if (modal.style.display === 'block') { modal.style.display = 'none'; return; }
+        modal.style.display = 'block';
+        var el = document.getElementById('tina4-ver-latest');
+        el.className = 't4-dim';
+        el.textContent = 'Checking for updates...';
+        fetch('/__dev/api/version-check').then(function (r) { return r.json(); }).then(function (d) {
+            var latest = d.latest, current = d.current;
+            if (latest === current) { upToDate(el, latest); return; }
+            var cP = current.split('.').map(Number), lP = latest.split('.').map(Number);
+            var isNewer = false, i, c, l;
+            for (i = 0; i < Math.max(cP.length, lP.length); i++) { c = cP[i] || 0; l = lP[i] || 0; if (l > c) { isNewer = true; break; } if (l < c) { break; } }
+            var isAhead = false;
+            if (!isNewer) { for (i = 0; i < Math.max(cP.length, lP.length); i++) { var c2 = cP[i] || 0, l2 = lP[i] || 0; if (c2 > l2) { isAhead = true; break; } if (c2 < l2) { break; } } }
+            if (isNewer) {
+                var breaking = (lP[0] !== cP[0] || lP[1] !== cP[1]);
+                el.className = '';
+                el.innerHTML = 'Latest: <strong class="t4-warn">v' + latest + '</strong>';
+                if (breaking) {
+                    el.innerHTML += '<div class="t4-err t4-note">&#9888; Major/minor version change &mdash; check the <a href="https://github.com/tina4stack/tina4-nodejs/releases" target="_blank" class="t4-link">changelog</a> for breaking changes before upgrading.</div>';
+                } else {
+                    el.innerHTML += '<div class="t4-warn t4-note">Patch update available. Run: <code class="t4-code">npm install tina4-nodejs@latest</code></div>';
+                }
+            } else if (isAhead) {
+                el.className = 't4-purple';
+                el.innerHTML = 'You are running <strong class="t4-purple">v' + current + '</strong> (ahead of npm <strong>v' + latest + '</strong> &mdash; not yet published).';
+            } else {
+                upToDate(el, latest);
+            }
+        }).catch(function () {
+            el.className = 't4-err';
+            el.textContent = 'Could not check for updates (offline?)';
+        });
+    }
+    var verBtn = document.getElementById('tina4-ver-btn');
+    if (verBtn) { verBtn.addEventListener('click', checkVersion); }
+    var verClose = document.getElementById('tina4-ver-close');
+    if (verClose) { verClose.addEventListener('click', function () { modal.style.display = 'none'; }); }
+    var barClose = document.getElementById('tina4-bar-close');
+    if (barClose) { barClose.addEventListener('click', function () { bar.style.display = 'none'; }); }
+
     var STATE_KEY = 'tina4_dev_overlay_open';
     function buildOverlay() {
         var c = document.createElement('div');
         c.id = 'tina4-dev-panel';
-        c.style.cssText = 'position:fixed;top:3rem;left:0;right:0;bottom:2rem;z-index:99998;transition:all 0.2s';
         var f = document.createElement('iframe');
         f.src = '/__dev';
-        f.style.cssText = 'width:100%;height:100%;border:1px solid #2e7d32;border-radius:0.5rem;box-shadow:0 8px 32px rgba(0,0,0,0.5);background:#0f172a';
         c.appendChild(f);
         document.body.appendChild(c);
         return c;
     }
-    window.__tina4ToggleOverlay = function(e) {
-        if (e) e.preventDefault();
+    function toggleOverlay(e) {
+        if (e) { e.preventDefault(); }
         var p = document.getElementById('tina4-dev-panel');
         if (p) {
             var hide = p.style.display !== 'none';
@@ -32120,137 +32977,61 @@ function renderToolbarHtml(ctx) {
         }
         buildOverlay();
         try { localStorage.setItem(STATE_KEY, '1'); } catch (_) {}
-    };
-    function restoreIfOpen() {
-        try {
-            if (location.pathname.indexOf('/__dev') === 0) return;
-            if (localStorage.getItem(STATE_KEY) === '1' && !document.getElementById('tina4-dev-panel')) {
-                buildOverlay();
-            }
-        } catch (_) {}
     }
-    if (document.readyState === 'loading') {
-        document.addEventListener('DOMContentLoaded', restoreIfOpen);
-    } else {
-        restoreIfOpen();
-    }
-})();
-</script>
-<script>
-function tina4VersionModal(){
-    var m=document.getElementById('tina4-ver-modal');
-    if(m.style.display==='block'){m.style.display='none';return;}
-    m.style.display='block';
-    var el=document.getElementById('tina4-ver-latest');
-    el.innerHTML='Checking for updates...';
-    el.style.color='#888';
-    fetch('/__dev/api/version-check')
-    .then(function(r){return r.json()})
-    .then(function(d){
-        var latest=d.latest;
-        var current=d.current;
-        if(latest===current){
-            el.innerHTML='Latest: <strong style="color:#a6e3a1;">v'+latest+'</strong> &mdash; You are up to date!';
-            el.style.color='#a6e3a1';
-        }else{
-            var cParts=current.split('.').map(Number);
-            var lParts=latest.split('.').map(Number);
-            var isNewer=false;
-            for(var i=0;i<Math.max(cParts.length,lParts.length);i++){
-                var c=cParts[i]||0,l=lParts[i]||0;
-                if(l>c){isNewer=true;break;}
-                if(l<c)break;
-            }
-            var isAhead=false;
-            if(!isNewer){for(var i=0;i<Math.max(cParts.length,lParts.length);i++){var c2=cParts[i]||0,l2=lParts[i]||0;if(c2>l2){isAhead=true;break;}if(c2<l2)break;}}
-            if(isNewer){
-                var breaking=(lParts[0]!==cParts[0]||lParts[1]!==cParts[1]);
-                el.innerHTML='Latest: <strong style="color:#f9e2af;">v'+latest+'</strong>';
-                if(breaking){
-                    el.innerHTML+='<div style="color:#f38ba8;margin-top:6px;">&#9888; Major/minor version change &mdash; check the <a href="https://github.com/tina4stack/tina4-nodejs/releases" target="_blank" style="color:#89b4fa;">changelog</a> for breaking changes before upgrading.</div>';
-                }else{
-                    el.innerHTML+='<div style="color:#f9e2af;margin-top:6px;">Patch update available. Run: <code style="background:#313244;padding:2px 6px;border-radius:3px;">npm install tina4-nodejs@latest</code></div>';
-                }
-            }else if(isAhead){
-                el.innerHTML='You are running <strong style="color:#cba6f7;">v'+current+'</strong> (ahead of npm <strong>v'+latest+'</strong> &mdash; not yet published).';
-                el.style.color='#cba6f7';
-            }else{
-                el.innerHTML='Latest: <strong style="color:#a6e3a1;">v'+latest+'</strong> &mdash; You are up to date!';
-                el.style.color='#a6e3a1';
-            }
-        }
-    })
-    .catch(function(){
-        el.innerHTML='Could not check for updates (offline?)';
-        el.style.color='#f38ba8';
-    });
-}
-</script>
-<script>
-(function(){
-    // WebSocket-primary dev reloader. The running server re-imports changed
-    // src/ routes in-process and pushes a {type,file,mtime} message over
-    // /__dev_reload \u2014 no respawn, instant refresh. The mtime poll below is a
-    // FALLBACK only, started when the socket is down and stopped on connect.
-    var _t4_css_exts=['.css','.scss'],_t4_debounce=null;
-    var _t4_interval=3000;
-    var _t4_ws=null,_t4_poll_timer=null,_t4_mtime=null;
-    function _t4_apply(d){
-        d=d||{};
-        var f=d.file||'',t=d.type||'';
-        var isCss=t==='css'||_t4_css_exts.some(function(e){return f.endsWith(e)});
-        if(isCss){
-            var links=document.querySelectorAll('link[rel="stylesheet"]');
-            links.forEach(function(l){
-                var href=l.getAttribute('href');
-                if(href){l.setAttribute('href',href.split('?')[0]+'?_t4='+(d.mtime||Date.now()))}
+    var dash = document.getElementById('tina4-dash-link');
+    if (dash) { dash.addEventListener('click', toggleOverlay); }
+    try {
+        if (location.pathname.indexOf('/__dev') !== 0
+            && localStorage.getItem(STATE_KEY) === '1'
+            && !document.getElementById('tina4-dev-panel')) {
+            buildOverlay();
+        }
+    } catch (_) {}
+
+    if (bar.getAttribute('data-reload') !== '1') { return; }
+    var cssExts = ['.css', '.scss'], debounce = null, interval = 3000;
+    var ws = null, pollTimer = null, mtime = null;
+    function apply(d) {
+        d = d || {};
+        var f = d.file || '', t = d.type || '';
+        var isCss = t === 'css' || cssExts.some(function (e) { return f.endsWith(e); });
+        if (isCss) {
+            document.querySelectorAll('link[rel="stylesheet"]').forEach(function (l) {
+                var href = l.getAttribute('href');
+                if (href) { l.setAttribute('href', href.split('?')[0] + '?_t4=' + (d.mtime || Date.now())); }
             });
-        }else{
+        } else {
             location.reload();
         }
     }
-    function _t4_poll(){
-        fetch('/__dev/api/mtime').then(function(r){return r.json()}).then(function(d){
-            // Sentinel: first poll only records the baseline. Use !== (not >) so
-            // the first change after load is not swallowed and a counter reset on
-            // server restart still triggers a reload.
-            if(_t4_mtime===null){_t4_mtime=d.mtime;return;}
-            if(d.mtime!==_t4_mtime){
-                _t4_mtime=d.mtime;
-                if(_t4_debounce)clearTimeout(_t4_debounce);
-                _t4_debounce=setTimeout(function(){_t4_apply(d);},500);
-            }
-        }).catch(function(){});
-    }
-    function _t4_startPoll(){
-        if(_t4_poll_timer)return;
-        _t4_mtime=null;
-        _t4_poll_timer=setInterval(_t4_poll,_t4_interval);
-    }
-    function _t4_stopPoll(){
-        if(_t4_poll_timer){clearInterval(_t4_poll_timer);_t4_poll_timer=null;}
-    }
-    function _t4_connect(){
-        var url=(location.protocol==='https:'?'wss':'ws')+'://'+location.host+'/__dev_reload';
-        try{_t4_ws=new WebSocket(url);}catch(_){_t4_startPoll();return;}
-        _t4_ws.addEventListener('open',function(){_t4_stopPoll();});
-        _t4_ws.addEventListener('message',function(ev){
-            var d=null;
-            try{d=typeof ev.data==='string'?JSON.parse(ev.data):null;}catch(_){}
-            if(!d)return;
-            if(d.type==='reload'||d.type==='change'||d.type==='css'){
-                if(_t4_debounce)clearTimeout(_t4_debounce);
-                _t4_debounce=setTimeout(function(){_t4_apply(d);},150);
+    function poll() {
+        fetch('/__dev/api/mtime').then(function (r) { return r.json(); }).then(function (d) {
+            if (mtime === null) { mtime = d.mtime; return; }
+            if (d.mtime !== mtime) { mtime = d.mtime; if (debounce) { clearTimeout(debounce); } debounce = setTimeout(function () { apply(d); }, 500); }
+        }).catch(function () {});
+    }
+    function startPoll() { if (pollTimer) { return; } mtime = null; pollTimer = setInterval(poll, interval); }
+    function stopPoll() { if (pollTimer) { clearInterval(pollTimer); pollTimer = null; } }
+    function connect() {
+        var url = (location.protocol === 'https:' ? 'wss' : 'ws') + '://' + location.host + '/__dev_reload';
+        try { ws = new WebSocket(url); } catch (_) { startPoll(); return; }
+        ws.addEventListener('open', function () { stopPoll(); });
+        ws.addEventListener('message', function (ev) {
+            var d = null;
+            try { d = typeof ev.data === 'string' ? JSON.parse(ev.data) : null; } catch (_) {}
+            if (!d) { return; }
+            if (d.type === 'reload' || d.type === 'change' || d.type === 'css') {
+                if (debounce) { clearTimeout(debounce); }
+                debounce = setTimeout(function () { apply(d); }, 150);
             }
         });
-        _t4_ws.addEventListener('close',function(){_t4_ws=null;_t4_startPoll();setTimeout(_t4_connect,2000);});
-        _t4_ws.addEventListener('error',function(){try{_t4_ws&&_t4_ws.close();}catch(_){}});
+        ws.addEventListener('close', function () { ws = null; startPoll(); setTimeout(connect, 2000); });
+        ws.addEventListener('error', function () { try { ws && ws.close(); } catch (_) {} });
     }
-    _t4_connect();
-})();
-</script>`;
+    connect();
+})();`;
 }
-var cpuCount, DEV_SAFE_METHODS, DEV_MCP_PREFIXES, DEV_SECRET_BASENAMES, DEV_SECRET_SUFFIXES, MessageLog, RequestInspector, ErrorTracker, DevMailboxStore, DevQueue, WsTracker, DevAdmin, handleDashboard, _reloadMtime, _reloadFile, handleMtime, handleReload, handleMessages, handleMessagesClear, handleRequests, handleRequestsClear, handleSystem, handleMessagesSearch, handleQueue, handleQueueTopics, handleQueueDeadLetters, handleQueueRetry, handleQueuePurge, handleQueueReplay, handleMailbox, handleMailboxRead, handleMailboxSeed, handleMailboxClear, handleTable, handleTables, handleSeed, handleQuery, handleBroken, handleBrokenResolve, handleBrokenClear, handleWebsockets, handleWebsocketsDisconnect, handleTool, handleChat, DEFAULT_MCP_URL, handleGroundingStatus, handleGroundingToken, handleMigrate, handleSeedRun, handleTest, handleThreads, handleThreadsSub, handleConnections, handleConnectionsTest, handleConnectionsSave, __devAdminFilename, __devAdminDirname, handleGalleryList, handleVersionCheck, handleThoughts, handleSuperviseStub, handleExecute, DEV_FILES_IGNORED, handleFiles, DEV_ADMIN_LANG_MAP, handleFileRead, handleFileSave, handleFileRaw, handleFileRename, handleFileDelete, handleDepsSearch, handleDepsInstall, handleGitStatus, handleMcpTools, handleMcpCall, handleMcpStreamable, handleMcpDelete, handleMcpGet405, handleMcpLegacyMessage, handleMcpSse, handleScaffoldList, handleScaffoldRun, handlePlanCurrent, handlePlanList, handlePlanCreate, handlePlanSwitch, handlePlanCompleteStep, handlePlanAddStep, handlePlanNote, handlePlanArchive, handlePlanRead, handlePlanFlesh, handleIndexRebuild, handleIndexSearch, handleIndexFile, handleIndexOverview, handleDocsSearch, handleDocsClass, handleDocsMethod, handleDocsIndex, handleDocsWellKnown, handleDevAdminJs;
+var cpuCount, DEV_SAFE_METHODS, DEV_MCP_PREFIXES, DEV_SECRET_BASENAMES, DEV_SECRET_SUFFIXES, MessageLog, RequestInspector, ErrorTracker, DevMailboxStore, DevQueue, WsTracker, DevAdmin, handleDashboard, _reloadMtime, _reloadFile, handleMtime, handleReload, handleMessages, handleMessagesClear, handleRequests, handleRequestsClear, handleSystem, handleMessagesSearch, handleQueue, handleQueueTopics, handleQueueDeadLetters, handleQueueRetry, handleQueuePurge, handleQueueReplay, handleMailbox, handleMailboxRead, handleMailboxSeed, handleMailboxClear, handleTable, handleTables, handleSeed, handleQuery, handleBroken, handleBrokenResolve, handleBrokenClear, handleWebsockets, handleWebsocketsDisconnect, handleTool, handleChat, DEFAULT_MCP_URL, handleGroundingStatus, handleGroundingToken, handleMigrate, handleSeedRun, handleTest, handleThreads, handleThreadsSub, handleConnections, handleConnectionsTest, handleConnectionsSave, __devAdminFilename, __devAdminDirname, handleGalleryList, handleVersionCheck, handleThoughts, handleSuperviseStub, handleExecute, DEV_FILES_IGNORED, handleFiles, DEV_ADMIN_LANG_MAP, handleFileRead, handleFileSave, handleFileRaw, handleFileRename, handleFileDelete, handleDepsSearch, handleDepsInstall, handleGitStatus, handleMcpTools, handleMcpCall, handleMcpStreamable, handleMcpDelete, handleMcpGet405, handleMcpLegacyMessage, handleMcpSse, handleScaffoldList, handleScaffoldRun, handlePlanCurrent, handlePlanList, handlePlanCreate, handlePlanSwitch, handlePlanCompleteStep, handlePlanAddStep, handlePlanNote, handlePlanArchive, handlePlanRead, handlePlanFlesh, handleIndexRebuild, handleIndexSearch, handleIndexFile, handleIndexOverview, handleDocsSearch, handleDocsClass, handleDocsMethod, handleDocsIndex, handleDocsWellKnown, handleDevAdminJs, handleToolbarCss, handleToolbarJs;
 var init_devAdmin = __esm({
   "../core/src/devAdmin.ts"() {
     "use strict";
@@ -32716,7 +33497,12 @@ var init_devAdmin = __esm({
           { method: "GET", pattern: "/__dev/api/docs/index", handler: handleDocsIndex },
           { method: "GET", pattern: "/__dev/api/docs/.well-known.json", handler: handleDocsWellKnown },
           // JS asset
-          { method: "GET", pattern: "/__dev/js/tina4-dev-admin.min.js", handler: handleDevAdminJs }
+          { method: "GET", pattern: "/__dev/js/tina4-dev-admin.min.js", handler: handleDevAdminJs },
+          // Dev-toolbar assets — served as external CSS/JS so the injected toolbar is
+          // CSP-clean (no inline style=, onclick=, or <script>) under a strict
+          // `default-src 'self'`. Parity with PHP's /__dev/toolbar.css + toolbar.js.
+          { method: "GET", pattern: "/__dev/toolbar.css", handler: handleToolbarCss },
+          { method: "GET", pattern: "/__dev/toolbar.js", handler: handleToolbarJs }
         ];
         for (const route of routes) {
           router.addRoute({
@@ -34152,6 +34938,14 @@ var init_devAdmin = __esm({
       res.raw.writeHead(404, { "Content-Type": "text/plain" });
       res.raw.end("tina4-dev-admin.min.js not found");
     };
+    handleToolbarCss = (_req, res) => {
+      res.raw.writeHead(200, { "Content-Type": "text/css; charset=utf-8", "Cache-Control": "no-cache" });
+      res.raw.end(toolbarCss());
+    };
+    handleToolbarJs = (_req, res) => {
+      res.raw.writeHead(200, { "Content-Type": "application/javascript; charset=utf-8", "Cache-Control": "no-cache" });
+      res.raw.end(toolbarJs());
+    };
   }
 });
 
@@ -36013,7 +36807,11 @@ function injectIntoHtml(ctx, devToolbar, html) {
     path: ctx.pathname,
     matchedPattern: ctx.matchedPattern.value || ctx.pathname,
     requestId: ctx.requestId,
-    routeCount: ctx.router.getRoutes().length
+    routeCount: ctx.router.getRoutes().length,
+    // Suppress the live reloader on the AI/stable port (data-reload="0"); the
+    // toolbar JS early-returns when data-reload !== "1". Mirrors PHP's
+    // suppressReload flag.
+    reload: !ctx.isAiPortRequest
   };
   return injectFeedbackWidget(ctx.req, injectDevToolbar(html, toolbarCtx));
 }