tina4-nodejs 3.13.124 → 3.13.130

package/packages/cli/dist/bin.js

@@ -1186,8 +1186,8 @@ function hashPassword(password, salt, iterations = 26e4) {
 }
 function checkPassword(password, hash) {
   try {
-    const delimiter4 = hash.includes("$") ? "$" : ":";
-    const parts = hash.split(delimiter4);
+    const delimiter5 = hash.includes("$") ? "$" : ":";
+    const parts = hash.split(delimiter5);
     if (parts.length !== 4 || parts[0] !== "pbkdf2_sha256") return false;
     const iterations = parseInt(parts[1], 10);
     const salt = parts[2];
@@ -6375,6 +6375,38 @@ var init_sqlTranslator = __esm({
             return sql;
         }
       }
+      /**
+       * Translate SQLite-canonical DDL column TYPES + CREATE-TABLE options to the
+       * target engine.
+       *
+       * ONLY acts on `CREATE TABLE` / `ALTER TABLE` statements, so a query or INSERT
+       * that happens to contain the word `TEXT` (a column name, a string literal) is
+       * never rewritten. Complements `autoIncrementSyntax` (which maps the id
+       * keyword) so ONE portable migration — and every `Model.createTable()` DDL,
+       * which is also SQLite-canonical — applies on every engine instead of failing
+       * on Firebird/MSSQL.
+       *
+       *   * Firebird has no `TEXT` (-607), no `REAL`, and no `CREATE TABLE IF NOT
+       *     EXISTS`.
+       *   * MSSQL has no `CREATE TABLE IF NOT EXISTS` and its `TIMESTAMP` is a
+       *     rowversion, not a datetime — a `created_at TIMESTAMP` there is wrong.
+       *   * MySQL's `TIMESTAMP` carries auto-update / 2038 surprises, so a datetime
+       *     column maps to `DATETIME` (matching the adapters' createTableAsync).
+       */
+      static ddlTypes(sql, engine) {
+        const head = sql.replace(/^(?:\s*--[^\n]*\n)+/, "");
+        if (!/^\s*(?:CREATE\s+TABLE|ALTER\s+TABLE)\b/i.test(head)) return sql;
+        switch ((engine ?? "").toLowerCase()) {
+          case "firebird":
+            return sql.replace(/\bIF\s+NOT\s+EXISTS\b/gi, "").replace(/\bBLOB\s+SUB_TYPE\s+TEXT\b/gi, "\0FBTEXT\0").replace(/\bTEXT\b/gi, "BLOB SUB_TYPE TEXT").replaceAll("\0FBTEXT\0", "BLOB SUB_TYPE TEXT").replace(/\bREAL\b/gi, "DOUBLE PRECISION");
+          case "mssql":
+            return sql.replace(/\bIF\s+NOT\s+EXISTS\b/gi, "").replace(/\bTIMESTAMP\b/gi, "DATETIME2");
+          case "mysql":
+            return sql.replace(/\bTIMESTAMP\b/gi, "DATETIME");
+          default:
+            return sql;
+        }
+      }
       /**
        * Convert ? placeholders to engine-specific style.
        *
@@ -8416,6 +8448,8 @@ var init_mysql = __esm({
       translateSql(sql) {
         let translated = SQLTranslator.concatPipesToFunc(sql);
         translated = SQLTranslator.ilikeToLike(translated);
+        translated = SQLTranslator.autoIncrementSyntax(translated, "mysql");
+        translated = SQLTranslator.ddlTypes(translated, "mysql");
         return translated;
       }
       execute(sql, params) {
@@ -8837,6 +8871,9 @@ var init_mssql = __esm({
         let translated = SQLTranslator.limitToTop(sql);
         translated = SQLTranslator.concatPipesToFunc(translated);
         translated = SQLTranslator.ilikeToLike(translated);
+        translated = SQLTranslator.autoIncrementSyntax(translated, "mssql");
+        translated = SQLTranslator.booleanToInt(translated);
+        translated = SQLTranslator.ddlTypes(translated, "mssql");
         return translated;
       }
       execSqlPromise(sql, params) {
@@ -9467,6 +9504,8 @@ var init_firebird = __esm({
         let translated = SQLTranslator.limitToRows(sql);
         translated = SQLTranslator.booleanToInt(translated);
         translated = SQLTranslator.ilikeToLike(translated);
+        translated = SQLTranslator.autoIncrementSyntax(translated, "firebird");
+        translated = SQLTranslator.ddlTypes(translated, "firebird");
         return translated;
       }
       /**
@@ -12555,7 +12594,7 @@ async function removeMigrationRecord(name) {
     [name]
   );
 }
-async function rollback(migrationsDir, delimiter4) {
+async function rollback(migrationsDir, delimiter5) {
   if (migrationsDir instanceof Map) {
     const downFunctions = migrationsDir;
     const migrations2 = await getLastBatchMigrations();
@@ -12574,7 +12613,7 @@ async function rollback(migrationsDir, delimiter4) {
     return rolledBack2;
   }
   const dir = resolve5(migrationsDir ?? "migrations");
-  const delim = delimiter4 ?? ";";
+  const delim = delimiter5 ?? ";";
   const db = getAdapter();
   const migrations = await getLastBatchMigrations();
   const rolledBack = [];
@@ -12625,12 +12664,12 @@ function parseSetTerm(statement) {
   const m = statement.trim().match(SET_TERM_RE);
   return m ? m[1] : null;
 }
-function splitStatements(sql, delimiter4 = ";") {
+function splitStatements(sql, delimiter5 = ";") {
   sql = normalizeQuotes(sql);
   const statements = [];
   let current = "";
   const n = sql.length;
-  let dlen = delimiter4.length;
+  let dlen = delimiter5.length;
   let i = 0;
   let inDollarBlock = false;
   let inSlashBlock = false;
@@ -12699,15 +12738,15 @@ function splitStatements(sql, delimiter4 = ";") {
       }
       continue;
     }
-    if (dlen > 0 && sql.startsWith(delimiter4, i)) {
+    if (dlen > 0 && sql.startsWith(delimiter5, i)) {
       i += dlen;
       const stmt2 = current.trim();
       current = "";
       if (stmt2) {
         const newTerm = parseSetTerm(stmt2);
         if (newTerm !== null) {
-          delimiter4 = newTerm;
-          dlen = delimiter4.length;
+          delimiter5 = newTerm;
+          dlen = delimiter5.length;
         } else {
           statements.push(stmt2);
         }
@@ -12746,7 +12785,7 @@ function warnUnprefixedMigrations(files) {
 async function migrate(adapter, options) {
   const db = adapter ?? getAdapter();
   const dir = resolve5(options?.migrationsDir ?? "migrations");
-  const delimiter4 = options?.delimiter ?? ";";
+  const delimiter5 = options?.delimiter ?? ";";
   const result = { applied: [], skipped: [], failed: [] };
   if (!existsSync6(dir)) {
     return result;
@@ -12789,7 +12828,7 @@ async function migrate(adapter, options) {
       result.skipped.push(file);
       continue;
     }
-    const statements = splitStatements(sqlContent, delimiter4);
+    const statements = splitStatements(sqlContent, delimiter5);
     try {
       await adapterStartTransaction(db);
       for (const stmt of statements) {
@@ -15418,7 +15457,7 @@ function mulberry32(seed) {
     return ((t ^ t >>> 14) >>> 0) / 4294967296;
   };
 }
-var FIRST_NAMES, LAST_NAMES, DOMAINS, WORDS, CITIES, COUNTRIES, STREETS, JOB_TITLES, CURRENCIES, FakeData;
+var FIRST_NAMES, LAST_NAMES, DOMAINS, WORDS, CITIES, COUNTRIES, STREETS, JOB_TITLES, CURRENCIES, PRODUCT_ADJECTIVES, PRODUCT_NOUNS, FakeData;
 var init_fakeData = __esm({
   "../core/src/fakeData.ts"() {
     "use strict";
@@ -15680,6 +15719,59 @@ var init_fakeData = __esm({
       "ZAR",
       "INR"
     ];
+    PRODUCT_ADJECTIVES = [
+      "Wireless",
+      "Organic",
+      "Premium",
+      "Classic",
+      "Eco",
+      "Smart",
+      "Portable",
+      "Deluxe",
+      "Compact",
+      "Rustic",
+      "Handcrafted",
+      "Vintage",
+      "Modern",
+      "Ergonomic",
+      "Stainless",
+      "Bamboo",
+      "Recycled",
+      "Artisan",
+      "Professional",
+      "Ultra",
+      "Insulated",
+      "Lightweight",
+      "Adjustable",
+      "Foldable"
+    ];
+    PRODUCT_NOUNS = [
+      "Keyboard",
+      "Coffee Beans",
+      "Backpack",
+      "Water Bottle",
+      "Desk Lamp",
+      "Headphones",
+      "Notebook",
+      "Sneakers",
+      "Sunglasses",
+      "Wallet",
+      "Mug",
+      "Chair",
+      "Blender",
+      "Speaker",
+      "Charger",
+      "Umbrella",
+      "Toothbrush",
+      "Jacket",
+      "Watch",
+      "Kettle",
+      "Picture Frame",
+      "Planter",
+      "Cutlery Set",
+      "Yoga Mat",
+      "Phone Case"
+    ];
     FakeData = class _FakeData {
       rng;
       seeded;
@@ -15751,6 +15843,16 @@ var init_fakeData = __esm({
       jobTitle() {
         return this.pick(JOB_TITLES);
       }
+      /**
+       * A plausible product name, e.g. "Wireless Keyboard" or "Organic Coffee
+       * Beans" — an adjective + noun from the product vocabulary. Deterministic
+       * under a seed like every other generator (draws from the same instance
+       * PRNG). Used to seed a generic `name` column on a product-ish table instead
+       * of a person name (see the ORM FakeData `forField` heuristic).
+       */
+      product() {
+        return `${this.pick(PRODUCT_ADJECTIVES)} ${this.pick(PRODUCT_NOUNS)}`;
+      }
       paragraph(sentences = 4) {
         const parts = [];
         for (let i = 0; i < sentences; i++) {
@@ -15874,11 +15976,27 @@ var init_fakeData = __esm({
 });
 
 // ../orm/src/fakeData.ts
-var FakeData2;
+function isProductTable(table2) {
+  const t = (table2 ?? "").toLowerCase();
+  return PRODUCT_TABLE_HINTS.some((hint) => t.includes(hint));
+}
+var PRODUCT_TABLE_HINTS, FakeData2;
 var init_fakeData2 = __esm({
   "../orm/src/fakeData.ts"() {
     "use strict";
     init_fakeData();
+    PRODUCT_TABLE_HINTS = [
+      "product",
+      "item",
+      "catalog",
+      "inventory",
+      "goods",
+      "merchandise",
+      "sku",
+      "listing",
+      "stock",
+      "ware"
+    ];
     FakeData2 = class extends FakeData {
       constructor(seed) {
         super(seed);
@@ -15900,8 +16018,11 @@ var init_fakeData2 = __esm({
        *
        * @param fieldDef - An ORM FieldDefinition object
        * @param columnName - Optional column name for heuristic matching (e.g. "email", "phone")
+       * @param table - Optional table/model name. A generic `name`/`full_name`
+       *   column on a product-ish table (see {@link isProductTable}) gets a
+       *   product name; with no table context it stays a person name (back-compat).
        */
-      forField(fieldDef, columnName) {
+      forField(fieldDef, columnName, table2) {
         if (fieldDef.primaryKey && fieldDef.autoIncrement) {
           return void 0;
         }
@@ -15911,7 +16032,9 @@ var init_fakeData2 = __esm({
         const col = (columnName ?? "").toLowerCase();
         if (col.includes("email")) return this.email();
         if (col.includes("phone") || col.includes("mobile") || col.includes("tel")) return this.phone();
-        if (col === "name" || col === "full_name" || col === "fullname") return this.name();
+        if (col === "name" || col === "full_name" || col === "fullname") {
+          return isProductTable(table2) ? this.product() : this.name();
+        }
         if (col === "first_name" || col === "firstname") return this.firstName();
         if (col === "last_name" || col === "lastname" || col === "surname") return this.lastName();
         if (col.includes("address")) return this.address();
@@ -15998,7 +16121,7 @@ async function autoFieldMap(db, table2, fake = new FakeData2()) {
       continue;
     }
     const fieldType = sqlTypeToFieldType(sqlType);
-    fieldMap[name] = () => fake.forField({ type: fieldType }, name);
+    fieldMap[name] = () => fake.forField({ type: fieldType }, name, table2);
   }
   return fieldMap;
 }
@@ -16144,7 +16267,7 @@ async function seedOrm(ormClass, count = 10, overrides, seed, opts, fkPools) {
         } else if (pools[name] && pools[name].length > 0) {
           attrs[name] = fake.choice(pools[name]);
         } else {
-          attrs[name] = fake.forField(def, name);
+          attrs[name] = fake.forField(def, name, modelName);
         }
       }
       validateTypes(fields, attrs, modelName);
@@ -21179,14 +21302,14 @@ function extractBoundary(contentType) {
 function parseMultipart(body, boundary) {
   const fields = {};
   const files = {};
-  const delimiter4 = Buffer.from(`--${boundary}`);
+  const delimiter5 = Buffer.from(`--${boundary}`);
   const closeDelimiter = Buffer.from(`--${boundary}--`);
   const crlf = Buffer.from("\r\n");
   const doubleCrlf = Buffer.from("\r\n\r\n");
   let offset = 0;
-  const firstIdx = bufferIndexOf(body, delimiter4, offset);
+  const firstIdx = bufferIndexOf(body, delimiter5, offset);
   if (firstIdx === -1) return { fields, files };
-  offset = firstIdx + delimiter4.length;
+  offset = firstIdx + delimiter5.length;
   if (body[offset] === 13 && body[offset + 1] === 10) {
     offset += 2;
   }
@@ -21195,7 +21318,7 @@ function parseMultipart(body, boundary) {
     if (headersEnd === -1) break;
     const headersStr = body.subarray(offset, headersEnd).toString("utf-8");
     offset = headersEnd + doubleCrlf.length;
-    const nextDelimIdx = bufferIndexOf(body, delimiter4, offset);
+    const nextDelimIdx = bufferIndexOf(body, delimiter5, offset);
     if (nextDelimIdx === -1) break;
     const contentEnd = nextDelimIdx - crlf.length;
     const content = body.subarray(offset, contentEnd);
@@ -21218,7 +21341,7 @@ function parseMultipart(body, boundary) {
     } else if (disposition.name) {
       fields[disposition.name] = content.toString("utf-8");
     }
-    offset = nextDelimIdx + delimiter4.length;
+    offset = nextDelimIdx + delimiter5.length;
     if (body[offset] === 45 && body[offset + 1] === 45) {
       break;
     }
@@ -24391,6 +24514,7 @@ __export(generate_exports, {
   parseEvery: () => parseEvery,
   parseFields: () => parseFields,
   pluralizeReserved: () => pluralizeReserved,
+  resolveTable: () => resolveTable,
   toPascal: () => toPascal,
   toSnake: () => toSnake,
   toTableName: () => toTableName
@@ -24433,12 +24557,35 @@ function toTableName(name) {
       from: raw,
       to: safe,
       reason: `SQL reserved word '${raw}' would break CREATE TABLE`,
-      override: `--table ${raw} --quote (requires quoted-identifier mode, not yet implemented)`
+      override: `--table-name <name> (table names interpolate unquoted; forcing a reserved name is yours to quote in raw SQL)`
     });
     return safe;
   }
   return raw;
 }
+function resolveTable(name, flags, opts = {}) {
+  const announce = opts.announce ?? false;
+  const override = (flags ?? {})["table-name"];
+  if (typeof override === "string" && override) {
+    if (announce && SQL_RESERVED_TABLE_NAMES.has(toSnake(override))) {
+      console.error(
+        `  ! table_name '${override}' is a SQL reserved word. Tina4 interpolates table names UNQUOTED, so the ORM's generated SQL will fail on it -- quote it yourself in raw SQL and migrations.`
+      );
+    }
+    return override;
+  }
+  const bare = toSnake(name);
+  if (!SQL_RESERVED_TABLE_NAMES.has(bare)) {
+    return bare;
+  }
+  const table2 = toTableName(name);
+  if (announce) {
+    console.error(
+      `  \xB7 '${bare}' is a SQL reserved word; using table_name '${table2}' (Tina4 interpolates table names unquoted). Override with --table-name <name>.`
+    );
+  }
+  return table2;
+}
 function resetResolution(target, input, opts) {
   __resolution.target = target;
   __resolution.input = input;
@@ -24537,10 +24684,11 @@ function printResolution() {
     lines.push(`  migration  ${b.migration_path}`);
   }
   const reserved = b.transformations.find((t) => t.kind === "reserved_word_pluralize");
-  if (reserved && reserved.from && reserved.override) {
+  if (reserved && reserved.from) {
     lines.push("");
-    lines.push(`  To keep the raw name '${reserved.from}' as the table:`);
-    lines.push(`    tina4nodejs generate ${__resolution.target} ${__resolution.input.name} ${reserved.override}`);
+    lines.push(`  To set the table name yourself:`);
+    lines.push(`    tina4nodejs generate ${__resolution.target} ${__resolution.input.name} --table-name <name>`);
+    lines.push(`  Tina4 interpolates table names unquoted; if you force the reserved '${reserved.from}', you own the quoting in raw SQL.`);
   }
   if (b.test_paths && b.test_paths.length > 0) {
     lines.push("");
@@ -24676,6 +24824,7 @@ async function generate(what, name, extraArgs = []) {
     console.error("  Usage: tina4nodejs generate <what> <name> [options]");
     console.error(`  Generators: ${GENERATOR_LIST}`);
     console.error('  Options:    --fields "name:string,price:float"  --model ModelName');
+    console.error("              --table-name <name>       force the model's table name (else derived; reserved words auto-pluralise)");
     console.error("              --public                 open a route's writes (default: secure)");
     console.error('              --every 5m | --cron "\u2026"   service schedule');
     console.error("              --json                    emit machine-readable resolution envelope on stdout");
@@ -24726,7 +24875,7 @@ async function generateProgrammatic(what, name, extraArgs = []) {
 }
 function generateModel(name, flags, emitTest = true) {
   const fields = fieldsOrDefault(flags.fields || "");
-  const table2 = toTableName(name);
+  const table2 = resolveTable(name, flags, { announce: true });
   const dir = resolve11("src/models");
   ensureDir(dir);
   const path8 = join21(dir, `${name}.ts`);
@@ -24777,7 +24926,7 @@ function generateRoute(name, flags, emitTest = true) {
   if (__resolution.target === "route") {
     setResolutionField("file_path", `src/routes/api/${routePath}/get.ts`);
   }
-  const table2 = model ? toTableName(model) : "";
+  const table2 = model ? resolveTable(model, flags, { announce: false }) : "";
   const modelImportBase = model ? `import ${model} from "../../../models/${model}.js";
 ` : "";
   const modelImportId = model ? `import ${model} from "../../../../models/${model}.js";
@@ -24998,7 +25147,7 @@ ${aiFill(`delete_${singular}`, {
   }
 }
 function generateCrud(name, flags) {
-  const table2 = toTableName(name);
+  const table2 = resolveTable(name, flags, { announce: false });
   const routeName = toPlural(table2);
   const isPublic = Boolean(flags.public);
   if (!__resolution.jsonMode) console.log(`
@@ -25025,7 +25174,7 @@ function generateMigration(name, flags, fieldsOverride, tableOverride, emitTest
     table2 = tableOverride;
   } else {
     const raw = name.replace(/^create_/, "").replace(/^add_/, "").replace(/^drop_/, "");
-    table2 = toTableName(raw);
+    table2 = resolveTable(raw, flags, { announce: false });
   }
   if (__resolution.target === "migration") {
     setResolutionField("table_name", table2);
@@ -25048,7 +25197,7 @@ function generateMigration(name, flags, fieldsOverride, tableOverride, emitTest
       const defaultClause = info.defaultVal !== "NULL" ? ` DEFAULT ${info.defaultVal}` : "";
       colLines.push(`    ${fname} ${info.sql}${defaultClause}`);
     }
-    colLines.push("    created_at TEXT DEFAULT CURRENT_TIMESTAMP");
+    colLines.push("    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP");
     upSql = `CREATE TABLE IF NOT EXISTS ${table2} (
     -- tina4:edit  add columns beyond id + created_at
 ${colLines.join(",\n")}
@@ -25251,7 +25400,7 @@ void test${titleName};
 }
 function generateForm(name, flags) {
   const fields = fieldsOrDefault(flags.fields || "");
-  const table2 = toTableName(name);
+  const table2 = resolveTable(name, flags, { announce: false });
   const routeName = toPlural(table2);
   const inputTypes = {
     string: "text",
@@ -25317,7 +25466,7 @@ function generateForm(name, flags) {
 }
 function generateView(name, flags) {
   const fields = fieldsOrDefault(flags.fields || "");
-  const table2 = toTableName(name);
+  const table2 = resolveTable(name, flags, { announce: false });
   const routeName = toPlural(table2);
   const cols = fields.map(([f]) => f);
   const dir = resolve11("src/templates/pages");
@@ -25672,8 +25821,8 @@ ${rules}  validator.required("name");   // starter rule (matches the model's def
   writeFileSafe(path8, content);
   emitValidatorTest(name, toSnake(name), toPascal(name));
 }
-function generateSeeder(name, _flags) {
-  const table2 = toTableName(name);
+function generateSeeder(name, flags) {
+  const table2 = resolveTable(name, flags, { announce: false });
   const dir = resolve11("src/seeds");
   ensureDir(dir);
   const path8 = join21(dir, `${table2}_seeder.ts`);
@@ -26191,8 +26340,8 @@ var init_generate = __esm({
   "src/commands/generate.ts"() {
     "use strict";
     FIELD_TYPE_MAP = {
-      string: { orm: '"string"', sql: "TEXT", defaultVal: "''" },
-      str: { orm: '"string"', sql: "TEXT", defaultVal: "''" },
+      string: { orm: '"string"', sql: "VARCHAR(255)", defaultVal: "''" },
+      str: { orm: '"string"', sql: "VARCHAR(255)", defaultVal: "''" },
       int: { orm: '"integer"', sql: "INTEGER", defaultVal: "0" },
       integer: { orm: '"integer"', sql: "INTEGER", defaultVal: "0" },
       float: { orm: '"number"', sql: "REAL", defaultVal: "0" },
@@ -26202,7 +26351,7 @@ var init_generate = __esm({
       bool: { orm: '"boolean"', sql: "INTEGER", defaultVal: "0" },
       boolean: { orm: '"boolean"', sql: "INTEGER", defaultVal: "0" },
       text: { orm: '"string"', sql: "TEXT", defaultVal: "''" },
-      datetime: { orm: '"datetime"', sql: "TEXT", defaultVal: "NULL" },
+      datetime: { orm: '"datetime"', sql: "TIMESTAMP", defaultVal: "NULL" },
       blob: { orm: '"string"', sql: "BLOB", defaultVal: "NULL" }
     };
     SQL_RESERVED_TABLE_NAMES = /* @__PURE__ */ new Set([
@@ -26298,7 +26447,7 @@ var init_generate = __esm({
     TINA4_EDIT_MARKER = /^\s*(?:\/\/|--|\{#|#)\s*tina4:edit\s+(.+?)(?:\s*#\})?\s*$/;
     DEFAULT_FIELDS = [["name", "string"]];
     GENERATORS = {
-      model: { handler: generateModel, usage: '<Name> [--fields "name:string,price:float"]', summary: "ORM model + matching migration" },
+      model: { handler: generateModel, usage: '<Name> [--fields "name:string,price:float"] [--table-name <name>]', summary: "ORM model + matching migration" },
       route: { handler: generateRoute, usage: "<name> [--model Name] [--public]", summary: "CRUD route file, secure by default (--public opens writes)" },
       crud: { handler: generateCrud, usage: '<Name> [--fields "..."] [--public]', summary: "Model + migration + routes + form + view + test" },
       migration: { handler: (n, f) => generateMigration(n, f, void 0, void 0, !f["no-test"]), usage: "<description>", summary: "Timestamped migration file (UP/DOWN)" },
@@ -36995,23 +37144,23 @@ var init_devAdmin = __esm({
       });
     };
     handleDevAdminJs = async (_req, res) => {
-      const { readFileSync: readFileSync29, existsSync: existsSync36 } = await import("node:fs");
-      const { dirname: dirname17, join: join39, resolve: resolve29 } = await import("node:path");
+      const { readFileSync: readFileSync30, existsSync: existsSync37 } = await import("node:fs");
+      const { dirname: dirname18, join: join40, resolve: resolve29 } = await import("node:path");
       const { fileURLToPath: fileURLToPath10 } = await import("node:url");
-      const dir = dirname17(fileURLToPath10(import.meta.url));
+      const dir = dirname18(fileURLToPath10(import.meta.url));
       const candidates = [
-        join39(dir, "..", "public", "js", "tina4-dev-admin.min.js"),
+        join40(dir, "..", "public", "js", "tina4-dev-admin.min.js"),
         // src/../public/js/
-        join39(dir, "..", "..", "public", "js", "tina4-dev-admin.min.js"),
+        join40(dir, "..", "..", "public", "js", "tina4-dev-admin.min.js"),
         // deeper nesting
         resolve29(process.cwd(), "node_modules", "tina4-nodejs", "packages", "core", "public", "js", "tina4-dev-admin.min.js"),
         resolve29(process.cwd(), "public", "js", "tina4-dev-admin.min.js")
         // project public/
       ];
       for (const jsPath of candidates) {
-        if (existsSync36(jsPath)) {
+        if (existsSync37(jsPath)) {
           try {
-            const content = readFileSync29(jsPath, "utf-8");
+            const content = readFileSync30(jsPath, "utf-8");
             res.raw.writeHead(200, { "Content-Type": "application/javascript; charset=utf-8", "Cache-Control": "no-cache" });
             res.raw.end(content);
             return;
@@ -40888,23 +41037,23 @@ function guessContentType(filename) {
 }
 function buildMultipartBody(boundary, fieldName, filename, fileContent, contentType, extraFields) {
   const crlf = "\r\n";
-  const delimiter4 = `--${boundary}`;
+  const delimiter5 = `--${boundary}`;
   const parts = [];
   if (extraFields) {
     for (const [key, value] of Object.entries(extraFields)) {
-      parts.push(Buffer.from(delimiter4 + crlf, "utf-8"));
+      parts.push(Buffer.from(delimiter5 + crlf, "utf-8"));
       parts.push(Buffer.from(`Content-Disposition: form-data; name="${key}"` + crlf + crlf, "utf-8"));
       parts.push(Buffer.from(String(value) + crlf, "utf-8"));
     }
   }
-  parts.push(Buffer.from(delimiter4 + crlf, "utf-8"));
+  parts.push(Buffer.from(delimiter5 + crlf, "utf-8"));
   parts.push(
     Buffer.from(`Content-Disposition: form-data; name="${fieldName}"; filename="${filename}"` + crlf, "utf-8")
   );
   parts.push(Buffer.from(`Content-Type: ${contentType}` + crlf + crlf, "utf-8"));
   parts.push(fileContent);
   parts.push(Buffer.from(crlf, "utf-8"));
-  parts.push(Buffer.from(delimiter4 + "--" + crlf, "utf-8"));
+  parts.push(Buffer.from(delimiter5 + "--" + crlf, "utf-8"));
   return Buffer.concat(parts);
 }
 async function* parseLineStream(chunks) {
@@ -47461,8 +47610,8 @@ async function runTests(testPath) {
   console.log(`  Found ${testFiles.length} test file(s)
 `);
   for (const file of testFiles) {
-    const relative11 = file.replace(cwd + "/", "");
-    console.log(`  Running: ${relative11}`);
+    const relative12 = file.replace(cwd + "/", "");
+    console.log(`  Running: ${relative12}`);
     try {
       execSync3(`npx tsx "${file}"`, { cwd, stdio: "inherit" });
     } catch {
@@ -47472,19 +47621,233 @@ async function runTests(testPath) {
   process.exit(inlineFailed || fileFailed ? 1 : 0);
 }
 
+// src/commands/lint.ts
+import { existsSync as existsSync33, readdirSync as readdirSync20, readFileSync as readFileSync28, statSync as statSync20, writeFileSync as writeFileSync20 } from "node:fs";
+import { createRequire as createRequire9 } from "node:module";
+import { delimiter as delimiter2, dirname as dirname16, join as join35, relative as relative11 } from "node:path";
+import { spawnSync as spawnSync3 } from "node:child_process";
+var LINT_EXTENSIONS = [".ts", ".mts", ".cts", ".js", ".mjs", ".cjs"];
+var JS_EXTENSIONS = [".js", ".mjs", ".cjs"];
+var SKIP_DIRS3 = /* @__PURE__ */ new Set(["node_modules", "dist", ".git"]);
+function isLintFile(name) {
+  if (name.endsWith(".d.ts")) return false;
+  return LINT_EXTENSIONS.some((ext) => name.endsWith(ext));
+}
+function walkSource2(dir, out) {
+  let entries;
+  try {
+    entries = readdirSync20(dir);
+  } catch {
+    return;
+  }
+  for (const name of entries) {
+    if (SKIP_DIRS3.has(name)) continue;
+    const full = join35(dir, name);
+    let st;
+    try {
+      st = statSync20(full);
+    } catch {
+      continue;
+    }
+    if (st.isDirectory()) {
+      walkSource2(full, out);
+    } else if (isLintFile(name)) {
+      out.push(full);
+    }
+  }
+}
+function collectAppFiles(cwd) {
+  const files = [];
+  const srcDir = join35(cwd, "src");
+  try {
+    if (statSync20(srcDir).isDirectory()) walkSource2(srcDir, files);
+  } catch {
+  }
+  for (const entry of ["app.ts", "app.mts", "app.js", "app.mjs"]) {
+    const p = join35(cwd, entry);
+    try {
+      if (statSync20(p).isFile()) files.push(p);
+    } catch {
+    }
+  }
+  return files;
+}
+var ESLINT_FLAT_CONFIGS = [
+  "eslint.config.js",
+  "eslint.config.mjs",
+  "eslint.config.cjs",
+  "eslint.config.ts",
+  "eslint.config.mts",
+  "eslint.config.cts"
+];
+var ESLINT_SCAFFOLD_FILE = "eslint.config.js";
+var ESLINT_SCAFFOLD = `import js from "@eslint/js";
+import tseslint from "typescript-eslint";
+export default [js.configs.recommended, ...tseslint.configs.recommended];
+`;
+function findEslintConfig(cwd) {
+  for (const name of ESLINT_FLAT_CONFIGS) {
+    const p = join35(cwd, name);
+    if (existsSync33(p)) return p;
+  }
+  return null;
+}
+function resolvePackageBin(cwd, pkg, binRelative) {
+  const direct = join35(cwd, "node_modules", pkg, binRelative);
+  if (existsSync33(direct)) return direct;
+  const require3 = createRequire9(join35(cwd, "package.json"));
+  let entry;
+  try {
+    entry = require3.resolve(pkg);
+  } catch {
+    return null;
+  }
+  let dir = dirname16(entry);
+  for (let i = 0; i < 8; i++) {
+    const pkgJson = join35(dir, "package.json");
+    if (existsSync33(pkgJson)) {
+      try {
+        if (JSON.parse(readFileSync28(pkgJson, "utf-8")).name === pkg) {
+          const bin = join35(dir, binRelative);
+          return existsSync33(bin) ? bin : null;
+        }
+      } catch {
+      }
+    }
+    const parent = dirname16(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
+function resolveEslintBin(cwd) {
+  return resolvePackageBin(cwd, "eslint", "bin/eslint.js");
+}
+function hasPackage(cwd, pkg) {
+  return existsSync33(join35(cwd, "node_modules", ...pkg.split("/"), "package.json"));
+}
+function resolveNpm() {
+  const windows = process.platform === "win32";
+  const names = windows ? ["npm.cmd", "npm.exe", "npm"] : ["npm"];
+  for (const dir of (process.env.PATH ?? "").split(delimiter2)) {
+    if (!dir) continue;
+    for (const name of names) {
+      const candidate = join35(dir, name);
+      try {
+        if (statSync20(candidate).isFile()) return candidate;
+      } catch {
+      }
+    }
+  }
+  return null;
+}
+function runLint(args) {
+  const fix = args.includes("--fix");
+  const noInstall = args.includes("--no-install");
+  const cwd = process.cwd();
+  const files = collectAppFiles(cwd);
+  if (files.length === 0) {
+    console.log("  lint: nothing to lint (no src/ or app.ts).");
+    process.exit(0);
+  }
+  let eslintBin = resolveEslintBin(cwd);
+  let eslintConfig = findEslintConfig(cwd);
+  if (!noInstall && (!eslintBin || !eslintConfig)) {
+    const npm = resolveNpm();
+    if (!npm) {
+      console.log("  \xB7 npm not found \u2014 using the zero-dependency baseline.");
+    } else {
+      if (!eslintBin) {
+        console.log("  \xB7 installing eslint (npm i -D eslint @eslint/js typescript-eslint)...");
+        const rc = spawnSync3(npm, ["install", "-D", "eslint", "@eslint/js", "typescript-eslint"], {
+          cwd,
+          stdio: "inherit"
+        }).status;
+        if (rc === 0) {
+          eslintBin = resolveEslintBin(cwd);
+        } else {
+          console.log("  \xB7 could not install eslint \u2014 using the zero-dependency baseline.");
+        }
+      }
+      if (eslintBin && !eslintConfig && hasPackage(cwd, "@eslint/js") && hasPackage(cwd, "typescript-eslint")) {
+        const scaffold = join35(cwd, ESLINT_SCAFFOLD_FILE);
+        try {
+          writeFileSync20(scaffold, ESLINT_SCAFFOLD, "utf-8");
+          eslintConfig = scaffold;
+          console.log(`  \xB7 scaffolded ${ESLINT_SCAFFOLD_FILE} (@eslint/js + typescript-eslint recommended).`);
+        } catch (err) {
+          console.log(
+            `  \xB7 could not scaffold ${ESLINT_SCAFFOLD_FILE} (${err instanceof Error ? err.message : String(err)}).`
+          );
+        }
+      }
+    }
+  }
+  if (eslintBin && eslintConfig) {
+    const label = fix ? "eslint --fix" : "eslint";
+    const eslintArgs = [eslintBin, ...files, ...fix ? ["--fix"] : []];
+    const code = spawnSync3(process.execPath, eslintArgs, { cwd, stdio: "inherit" }).status ?? 1;
+    if (code !== 0) {
+      console.log(`  \u2717 lint failed \u2014 ${files.length} file(s) [${label}]`);
+      process.exit(1);
+    }
+    console.log(`  \u2713 lint clean \u2014 ${files.length} file(s) [${label}]`);
+    process.exit(0);
+  }
+  if (fix) {
+    console.log("  \xB7 --fix needs eslint \u2014 the baseline check has no autofix.");
+  }
+  const hasTsconfig = existsSync33(join35(cwd, "tsconfig.json"));
+  const tscBin = hasTsconfig ? resolvePackageBin(cwd, "typescript", "bin/tsc") : null;
+  if (tscBin) {
+    const code = spawnSync3(process.execPath, [tscBin, "--noEmit"], { cwd, stdio: "inherit" }).status ?? 1;
+    if (code !== 0) {
+      console.log(`  \u2717 lint failed \u2014 ${files.length} file(s) [tsc]`);
+      process.exit(1);
+    }
+    console.log(`  \u2713 lint clean \u2014 ${files.length} file(s) [tsc]`);
+    process.exit(0);
+  }
+  const jsFiles = files.filter((f) => JS_EXTENSIONS.some((ext) => f.endsWith(ext)));
+  if (jsFiles.length === 0) {
+    console.log(
+      "  lint: no JavaScript files to check \u2014 add tsconfig.json + typescript to type-check .ts files."
+    );
+    process.exit(0);
+  }
+  let syntaxErrors = 0;
+  for (const file of jsFiles) {
+    const result = spawnSync3(process.execPath, ["--check", file], { cwd, encoding: "utf-8" });
+    if ((result.status ?? 1) !== 0) {
+      const stderr = (result.stderr || "").trim();
+      const detail = stderr.split("\n").reverse().find((line) => line.includes("Error:")) || "syntax error";
+      console.log(`  \u2717 ${relative11(cwd, file)}: ${detail.trim()}`);
+      syntaxErrors++;
+    }
+  }
+  if (syntaxErrors > 0) {
+    console.log(
+      `  \u2717 lint failed \u2014 ${syntaxErrors} syntax error(s) in ${jsFiles.length} file(s) [node --check]`
+    );
+    process.exit(1);
+  }
+  console.log(`  \u2713 lint clean \u2014 ${jsFiles.length} file(s) [node --check]`);
+  process.exit(0);
+}
+
 // src/bin.ts
 init_generate();
 
 // src/commands/seed.ts
-import { existsSync as existsSync33, readdirSync as readdirSync20 } from "node:fs";
-import { resolve as resolve28, join as join35 } from "node:path";
+import { existsSync as existsSync34, readdirSync as readdirSync21 } from "node:fs";
+import { resolve as resolve28, join as join36 } from "node:path";
 import { execSync as execSync4 } from "node:child_process";
 async function runSeeds(seedPath) {
   const cwd = process.cwd();
   const seedDir = resolve28(cwd, "src/seeds");
   if (seedPath) {
     const file = resolve28(seedPath);
-    if (!existsSync33(file)) {
+    if (!existsSync34(file)) {
       console.error(`  Error: Seed file not found: ${seedPath}`);
       process.exit(1);
     }
@@ -47497,14 +47860,14 @@ async function runSeeds(seedPath) {
     }
     return;
   }
-  if (!existsSync33(seedDir)) {
+  if (!existsSync34(seedDir)) {
     console.log("  No seeds directory found.");
     console.log("  Create seed files in src/seeds/ (e.g. src/seeds/001-users.ts)");
     return;
   }
   let seedFiles;
   try {
-    seedFiles = readdirSync20(seedDir).filter((f) => f.endsWith(".ts")).sort().map((f) => join35(seedDir, f));
+    seedFiles = readdirSync21(seedDir).filter((f) => f.endsWith(".ts")).sort().map((f) => join36(seedDir, f));
   } catch {
     console.log("  Could not read src/seeds/ directory.");
     return;
@@ -47517,8 +47880,8 @@ async function runSeeds(seedPath) {
 `);
   let failed = false;
   for (const file of seedFiles) {
-    const relative11 = file.replace(cwd + "/", "");
-    console.log(`  Seeding: ${relative11}`);
+    const relative12 = file.replace(cwd + "/", "");
+    console.log(`  Seeding: ${relative12}`);
     try {
       execSync4(`npx tsx "${file}"`, { cwd, stdio: "inherit" });
     } catch {
@@ -47535,8 +47898,8 @@ async function runSeeds(seedPath) {
 // src/commands/queue.ts
 init_dotenv();
 init_queue();
-import { readdirSync as readdirSync21, statSync as statSync20 } from "node:fs";
-import { extname as extname8, join as join36 } from "node:path";
+import { readdirSync as readdirSync22, statSync as statSync21 } from "node:fs";
+import { extname as extname8, join as join37 } from "node:path";
 import { pathToFileURL as pathToFileURL3 } from "node:url";
 var BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["once", "json"]);
 function parseFlags(args) {
@@ -47567,8 +47930,8 @@ function parseFlags(args) {
 async function resolveQueueHandler(servicesDir, topic) {
   let entries;
   try {
-    if (!statSync20(servicesDir).isDirectory()) return null;
-    entries = readdirSync21(servicesDir);
+    if (!statSync21(servicesDir).isDirectory()) return null;
+    entries = readdirSync22(servicesDir);
   } catch {
     return null;
   }
@@ -47576,9 +47939,9 @@ async function resolveQueueHandler(servicesDir, topic) {
     if (entry.startsWith("_")) continue;
     const ext = extname8(entry);
     if (ext !== ".ts" && ext !== ".js") continue;
-    const fullPath = join36(servicesDir, entry);
+    const fullPath = join37(servicesDir, entry);
     try {
-      if (!statSync20(fullPath).isFile()) continue;
+      if (!statSync21(fullPath).isFile()) continue;
       const mod = await import(pathToFileURL3(fullPath).href);
       const config = mod.default ?? mod;
       if (config && typeof config === "object" && config.topic === topic && typeof config.handle === "function") {
@@ -47728,9 +48091,9 @@ async function queueCommand(args = []) {
 }
 
 // src/commands/build.ts
-import { accessSync as accessSync2, constants as constants2, existsSync as existsSync34, statSync as statSync21 } from "node:fs";
-import { basename as basename8, delimiter as delimiter2, join as join37 } from "node:path";
-import { spawnSync as spawnSync3 } from "node:child_process";
+import { accessSync as accessSync2, constants as constants2, existsSync as existsSync35, statSync as statSync22 } from "node:fs";
+import { basename as basename8, delimiter as delimiter3, join as join38 } from "node:path";
+import { spawnSync as spawnSync4 } from "node:child_process";
 function parseFlags2(args) {
   const flags = {};
   let i = 0;
@@ -47755,13 +48118,13 @@ function whichDocker() {
   const pathValue = process.env.PATH || process.env.Path || "";
   if (!pathValue) return null;
   const exts = process.platform === "win32" ? (process.env.PATHEXT || ".EXE;.CMD;.BAT;.COM").split(";") : [""];
-  for (const dir of pathValue.split(delimiter2)) {
+  for (const dir of pathValue.split(delimiter3)) {
     if (!dir) continue;
     for (const ext of exts) {
-      const candidate = join37(dir, `docker${ext}`);
+      const candidate = join38(dir, `docker${ext}`);
       try {
         accessSync2(candidate, constants2.X_OK);
-        if (statSync21(candidate).isFile()) return candidate;
+        if (statSync22(candidate).isFile()) return candidate;
       } catch {
       }
     }
@@ -47776,7 +48139,7 @@ function buildImage(args) {
     tag = `${dirName || "tina4app"}:latest`;
   }
   const dockerfile = typeof flags.file === "string" && flags.file ? flags.file : "Dockerfile";
-  if (!existsSync34(dockerfile) || !statSync21(dockerfile).isFile()) {
+  if (!existsSync35(dockerfile) || !statSync22(dockerfile).isFile()) {
     console.log(`  \u2717 No ${dockerfile} found.`);
     console.log("  A Tina4 app deploys as a container. Scaffold a Dockerfile first:");
     console.log("      tina4 deploy docker        (or: tina4nodejs init)");
@@ -47790,7 +48153,7 @@ function buildImage(args) {
     process.exit(1);
   }
   console.log(`  Building image ${tag} from ${dockerfile} ...`);
-  const result = spawnSync3(docker, ["build", "-t", tag, "-f", dockerfile, "."], {
+  const result = spawnSync4(docker, ["build", "-t", tag, "-f", dockerfile, "."], {
     stdio: "inherit"
   });
   const code = result.status ?? 1;
@@ -47803,22 +48166,22 @@ function buildImage(args) {
 }
 
 // src/bin.ts
-import { spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync35, readFileSync as readFileSync28, statSync as statSync22 } from "node:fs";
-import { delimiter as delimiter3, dirname as dirname16, join as join38 } from "node:path";
+import { spawnSync as spawnSync5 } from "node:child_process";
+import { existsSync as existsSync36, readFileSync as readFileSync29, statSync as statSync23 } from "node:fs";
+import { delimiter as delimiter4, dirname as dirname17, join as join39 } from "node:path";
 import { fileURLToPath as fileURLToPath9, pathToFileURL as pathToFileURL4 } from "node:url";
 function readCliVersion() {
-  let dir = dirname16(fileURLToPath9(import.meta.url));
+  let dir = dirname17(fileURLToPath9(import.meta.url));
   for (let i = 0; i < 6; i++) {
-    const pkgPath = join38(dir, "package.json");
-    if (existsSync35(pkgPath)) {
+    const pkgPath = join39(dir, "package.json");
+    if (existsSync36(pkgPath)) {
       try {
-        const pkg = JSON.parse(readFileSync28(pkgPath, "utf-8"));
+        const pkg = JSON.parse(readFileSync29(pkgPath, "utf-8"));
         if (typeof pkg.version === "string" && pkg.version) return pkg.version;
       } catch {
       }
     }
-    const parent = dirname16(dir);
+    const parent = dirname17(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -48034,6 +48397,13 @@ var COMMANDS = {
     usage: "[file]",
     summary: "Run project tests"
   },
+  lint: {
+    handler: (a) => {
+      runLint(a);
+    },
+    usage: "[--fix] [--no-install]",
+    summary: "Lint the project (eslint, installed dev-only on demand; else tsc/node --check baseline)"
+  },
   queue: {
     handler: async (a) => {
       await queueCommand(a);
@@ -48108,12 +48478,12 @@ var CLIENT_INSTALL_HINT = "  Install it:  curl -fsSL https://tina4.com/install.s
 function findClient() {
   const windows = process.platform === "win32";
   const names = windows ? [`${CLIENT_BINARY}.exe`, `${CLIENT_BINARY}.cmd`, `${CLIENT_BINARY}.bat`] : [CLIENT_BINARY];
-  for (const dir of (process.env.PATH ?? "").split(delimiter3)) {
+  for (const dir of (process.env.PATH ?? "").split(delimiter4)) {
     if (!dir) continue;
     for (const name of names) {
-      const candidate = join38(dir, name);
+      const candidate = join39(dir, name);
       try {
-        if (statSync22(candidate).isFile()) return candidate;
+        if (statSync23(candidate).isFile()) return candidate;
       } catch {
       }
     }
@@ -48141,7 +48511,7 @@ ${CLIENT_INSTALL_HINT}
     );
     return EXIT_CLIENT_UNAVAILABLE;
   }
-  const result = spawnSync4(client, [command, ...args], {
+  const result = spawnSync5(client, [command, ...args], {
     stdio: "inherit",
     env: { ...process.env, [DELEGATION_GUARD_ENV]: command }
   });