tina4-nodejs 3.13.19 → 3.13.20

package/CLAUDE.md

@@ -1,10 +1,10 @@
-# CLAUDE.md — AI Developer Guide for tina4-nodejs (v3.13.19)
+# CLAUDE.md — AI Developer Guide for tina4-nodejs (v3.13.20)
 
 > This file helps AI assistants (Claude, Copilot, Cursor, etc.) understand and work on this codebase effectively.
 
 ## What This Project Is
 
-Tina4 for Node.js/TypeScript v3.13.19 — The Intelligent Native Application 4ramework. A convention-over-configuration structural paradigm. The developer writes TypeScript; Tina4 is invisible infrastructure.
+Tina4 for Node.js/TypeScript v3.13.20 — The Intelligent Native Application 4ramework. A convention-over-configuration structural paradigm. The developer writes TypeScript; Tina4 is invisible infrastructure.
 
 The philosophy: zero ceremony, batteries included, file system as source of truth.
 
@@ -1098,7 +1098,7 @@ When adding new features, add a corresponding `test/<feature>.test.ts` file.
 ## v3 Features Summary
 
 - **45 built-in features**, zero third-party dependencies
-- **3,679 tests** passing across all modules
+- **3,684 tests** passing across all modules
 - **Race-safe `getNextId()`** with atomic sequence table (`tina4_sequences`) for SQLite/MySQL/MSSQL; PostgreSQL auto-creates sequences
 - **Frond template engine optimizations**: pre-compiled regexes, lazy loop context (copy-on-write), filter chain caching, path split caching, inline common filters (11-15% speedup)
 - **Production server auto-detect**: `npx tina4nodejs serve --production` auto-uses cluster mode

package/package.json

@@ -3,7 +3,7 @@
 
 
 
-  "version": "3.13.19",
+  "version": "3.13.20",
 
   "type": "module",
   "description": "Tina4 for Node.js/TypeScript \u2014 54 built-in features, zero dependencies",

package/packages/core/src/server.ts

@@ -12,7 +12,7 @@ import { validToken, getPayload, refreshToken } from "./auth.js";
 import { discoverRoutes } from "./routeDiscovery.js";
 import { createRequest } from "./request.js";
 import { createResponse, setDefaultTemplatesDir } from "./response.js";
-import { MiddlewareChain, cors, requestLogger } from "./middleware.js";
+import { MiddlewareChain, MiddlewareRunner, cors, requestLogger } from "./middleware.js";
 import { tryServeStatic } from "./static.js";
 import { loadEnv, isTruthy } from "./dotenv.js";
 import { createHealthRoutes } from "./health.js";
@@ -1108,6 +1108,19 @@ ${reset}
         req.params = match.params;
         matchedPattern = match.pattern;
 
+        // Global class-based middleware registered via Router.use(...) /
+        // MiddlewareRunner.use(...) — run the beforeX hooks before the handler.
+        // beforeX may set response headers (they persist through the handler's
+        // write), mutate the request, or short-circuit on a >= 400 status.
+        // (Parity with Python/PHP/Ruby, whose Router.use class middleware runs.)
+        const globalMiddleware = [
+          ...new Set([...Router.getClassMiddlewares(), ...MiddlewareRunner.getGlobal()]),
+        ];
+        if (globalMiddleware.length > 0) {
+          const [, , proceed] = MiddlewareRunner.runBefore(globalMiddleware, req, res);
+          if (!proceed || res.raw.writableEnded) return;
+        }
+
         // Run per-route middlewares if any
         if (match.middlewares && match.middlewares.length > 0) {
           const proceed = await runRouteMiddlewares(match.middlewares, req, res);
@@ -1198,6 +1211,13 @@ ${reset}
           await res.render(match.template, result as Record<string, unknown>);
         }
 
+        // Global class-based middleware afterX hooks (logging / post-processing).
+        // Header mutations here are no-ops once the response is flushed (Node
+        // sends headers with the body) — set response headers in beforeX.
+        if (globalMiddleware.length > 0) {
+          MiddlewareRunner.runAfter(globalMiddleware, req, res);
+        }
+
         if (!res.raw.writableEnded) {
           res.raw.end();
         }