tina4-nodejs 3.13.86 → 3.13.88

package/packages/core/dist/index.js

@@ -1674,18 +1674,21 @@ var init_postgres = __esm({
       }
       async startTransactionAsync() {
         await this.executeAsync("BEGIN");
+        this._inTransaction = true;
       }
       commit() {
         throw new Error("Use commitAsync() for PostgreSQL.");
       }
       async commitAsync() {
         await this.executeAsync("COMMIT");
+        this._inTransaction = false;
       }
       rollback() {
         throw new Error("Use rollbackAsync() for PostgreSQL.");
       }
       async rollbackAsync() {
         await this.executeAsync("ROLLBACK");
+        this._inTransaction = false;
       }
       tables() {
         throw new Error("Use tablesAsync() for PostgreSQL.");
@@ -2704,10 +2707,35 @@ var init_firebird = __esm({
         translated = SQLTranslator.ilikeToLike(translated);
         return translated;
       }
+      /**
+       * The handle every statement runs on. While an explicit transaction is open
+       * (startTransactionAsync set `this.transaction`), statements MUST run on that
+       * transaction object so they are undone by rollbackAsync() / persisted by
+       * commitAsync() — node-firebird's transaction exposes the same
+       * query()/execute() as the connection. With no transaction open we run on
+       * `this.db`, whose per-statement work auto-commits on the connection.
+       *
+       * This matches the Python master's contract (tina4_python/database/firebird.py):
+       * there, ALL statements run on the single connection and start_transaction()
+       * merely suppresses the per-statement autocommit in execute() so the batch
+       * stays open until commit()/rollback(). node-firebird has no such suppression
+       * hook — its `db.query/execute` always auto-commit — so the equivalent is to
+       * route statements through the transaction object instead. Same observable
+       * behaviour: an open transaction is atomic and rolls back cleanly.
+       *
+       * Previously every statement ran on `this.db` unconditionally, so the
+       * transaction created by startTransactionAsync() never saw a single statement
+       * — rollbackAsync() rolled back an EMPTY transaction and the already
+       * auto-committed write survived (silent no-op). Twin of the PHP pdo_firebird
+       * bug fixed in 3.13.86.
+       */
+      statementHandle() {
+        return this.transaction ?? this.db;
+      }
       queryPromise(sql, params) {
         return new Promise((resolve21, reject) => {
           const translated = this.translateSql(sql);
-          this.db.query(translated, params ?? [], (err, result) => {
+          this.statementHandle().query(translated, params ?? [], (err, result) => {
             if (err) reject(err);
             else resolve21(result ?? []);
           });
@@ -2716,7 +2744,7 @@ var init_firebird = __esm({
       executePromise(sql, params) {
         return new Promise((resolve21, reject) => {
           const translated = this.translateSql(sql);
-          this.db.execute(translated, params ?? [], (err) => {
+          this.statementHandle().execute(translated, params ?? [], (err) => {
             if (err) reject(err);
             else resolve21();
           });
@@ -4690,14 +4718,15 @@ var init_database = __esm({
       async executeMany(sql, paramSets = []) {
         const adapter = this.getNextAdapter();
         const results = [];
-        await adapterStartTransaction(adapter);
+        const owns = !this.inExplicitTransaction();
+        if (owns) await adapterStartTransaction(adapter);
         try {
           for (const params of paramSets) {
             results.push(await adapterExecute(adapter, sql, params));
           }
-          await adapterCommit(adapter);
+          if (owns) await adapterCommit(adapter);
         } catch (e) {
-          await adapterRollback(adapter);
+          if (owns) await adapterRollback(adapter);
           throw e;
         }
         return results;
@@ -12750,11 +12779,32 @@ var init_request = __esm({
 var engine_exports = {};
 __export(engine_exports, {
   Frond: () => Frond,
+  TEMPLATE_CACHE_MAX: () => TEMPLATE_CACHE_MAX,
   setFormTokenSessionId: () => setFormTokenSessionId
 });
 import { createHash as createHash2, createHmac as createHmac3, randomBytes as randomBytes4 } from "node:crypto";
 import { readFileSync as readFileSync6, existsSync as existsSync8, statSync as statSync6 } from "node:fs";
 import { join as join10, resolve as resolve6 } from "node:path";
+function jsonText(value) {
+  try {
+    const text = JSON.stringify(value);
+    return text === void 0 ? "null" : text;
+  } catch {
+    const seen = /* @__PURE__ */ new WeakSet();
+    const text = JSON.stringify(value, (_key, v) => {
+      if (typeof v === "bigint") return v.toString();
+      if (typeof v === "object" && v !== null) {
+        if (seen.has(v)) return null;
+        seen.add(v);
+      }
+      return v;
+    });
+    return text === void 0 ? "null" : text;
+  }
+}
+function jsonSafe(value) {
+  return new SafeString(jsonText(value).replace(JSON_UNSAFE_RE, (c) => JSON_UNSAFE_MAP[c]));
+}
 function inspectValue(value, seen = /* @__PURE__ */ new WeakSet(), depth = 0) {
   if (value === null) return "null";
   if (value === void 0) return "undefined";
@@ -12825,6 +12875,14 @@ function renderDump(value) {
 function liveAttr(value) {
   return String(value).replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
+function capCache(cache, maxEntries) {
+  if (cache.size < maxEntries) return;
+  let drop = Math.floor(maxEntries / 2);
+  for (const key of cache.keys()) {
+    cache.delete(key);
+    if (--drop <= 0) break;
+  }
+}
 function tokenize(source) {
   const rawBlocks = [];
   source = source.replace(RAW_BLOCK_RE, (_match, content) => {
@@ -13176,6 +13234,9 @@ function evalExpr(expr, context) {
       }).join("");
     }
   }
+  if (expr.startsWith("not ")) {
+    return evalComparison(expr, context);
+  }
   for (const op of [" not in ", " in ", " is not ", " is ", "!=", "==", ">=", "<=", ">", "<", " and ", " or ", " not "]) {
     if (findOutsideQuotes(expr, op) >= 0) {
       return evalComparison(expr, context);
@@ -13731,7 +13792,7 @@ function _generateFormToken(descriptor = "") {
 function _generateFormTokenValue(descriptor = "") {
   return new SafeString(_buildFormTokenJwt(descriptor));
 }
-var SafeString, NUMERIC_RE, METHOD_CALL_RE, FN_CALL_RE, IS_NOT_RE, IS_RE, NOT_IN_RE, IN_RE, DIVISIBLE_BY_RE, FILTER_WITH_ARGS_RE, FILTER_COMPARISON_RE, TITLE_WORD_RE, STRIP_TAGS_RE, FORMAT_RE, LEADING_WS_RE, TRAILING_WS_RE, THOUSANDS_RE, LIVE_RE, LIVE_WS_RE, LIVE_SRC_RE, filterChainCache, pathParseCache, TOKEN_RE, RAW_BLOCK_RE, VarRef, BUILTIN_FILTERS, _formTokenSessionId, Frond;
+var SafeString, JSON_UNSAFE_RE, JSON_UNSAFE_MAP, NUMERIC_RE, METHOD_CALL_RE, FN_CALL_RE, IS_NOT_RE, IS_RE, NOT_IN_RE, IN_RE, DIVISIBLE_BY_RE, FILTER_WITH_ARGS_RE, FILTER_COMPARISON_RE, TITLE_WORD_RE, STRIP_TAGS_RE, FORMAT_RE, LEADING_WS_RE, TRAILING_WS_RE, THOUSANDS_RE, LIVE_RE, LIVE_WS_RE, LIVE_SRC_RE, filterChainCache, pathParseCache, TEMPLATE_CACHE_MAX, TOKEN_RE, RAW_BLOCK_RE, VarRef, BUILTIN_FILTERS, _formTokenSessionId, Frond;
 var init_engine = __esm({
   "../frond/src/engine.ts"() {
     "use strict";
@@ -13743,6 +13804,15 @@ var init_engine = __esm({
         return this.value;
       }
     };
+    JSON_UNSAFE_RE = /[<>&'\u2028\u2029]/g;
+    JSON_UNSAFE_MAP = {
+      "<": "\\u003c",
+      ">": "\\u003e",
+      "&": "\\u0026",
+      "'": "\\u0027",
+      "\u2028": "\\u2028",
+      "\u2029": "\\u2029"
+    };
     NUMERIC_RE = /^-?\d+(\.\d+)?$/;
     METHOD_CALL_RE = /^(\w+)\s*\(([\s\S]*)?\)$/;
     FN_CALL_RE = /^([\w.]+)\s*\(([\s\S]*)?\)$/;
@@ -13764,6 +13834,7 @@ var init_engine = __esm({
     LIVE_SRC_RE = /src\s+["']([^"']+)["']/;
     filterChainCache = /* @__PURE__ */ new Map();
     pathParseCache = /* @__PURE__ */ new Map();
+    TEMPLATE_CACHE_MAX = 256;
     TOKEN_RE = /(\{%-?\s*[\s\S]*?\s*-?%\})|(\{\{-?\s*[\s\S]*?\s*-?\}\})|(\{#[\s\S]*?#\})/g;
     RAW_BLOCK_RE = /\{%-?\s*raw\s*-?%\}([\s\S]*?)\{%-?\s*endraw\s*-?%\}/g;
     VarRef = class {
@@ -13832,7 +13903,7 @@ var init_engine = __esm({
       int: (v) => v ? parseInt(String(v), 10) || 0 : 0,
       float: (v) => v ? parseFloat(String(v)) || 0 : 0,
       string: (v) => String(v),
-      json_encode: (v) => JSON.stringify(v),
+      json_encode: (v) => jsonSafe(v),
       json_decode: (v) => typeof v === "string" ? JSON.parse(v) : v,
       keys: (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? Object.keys(v) : [],
       values: (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? Object.values(v) : [],
@@ -13977,8 +14048,12 @@ var init_engine = __esm({
       form_token: (v) => _generateFormToken(v != null ? String(v) : ""),
       formTokenValue: (v) => _generateFormTokenValue(v != null ? String(v) : ""),
       form_token_value: (v) => _generateFormTokenValue(v != null ? String(v) : ""),
-      tojson: (v, indent) => new SafeString(indent !== void 0 ? JSON.stringify(v, null, parseInt(String(indent), 10)) : JSON.stringify(v)),
-      to_json: (v, indent) => new SafeString(indent !== void 0 ? JSON.stringify(v, null, parseInt(String(indent), 10)) : JSON.stringify(v)),
+      // Same serializer as json_encode -- the three names are one behaviour. The
+      // old indent argument is gone: PHP cannot honour an arbitrary indent
+      // (JSON_PRETTY_PRINT is fixed at four spaces), so honouring it here alone
+      // broke byte-parity for the one filter whose whole job is a wire format.
+      tojson: (v) => jsonSafe(v),
+      to_json: (v) => jsonSafe(v),
       js_escape: (v) => new SafeString(String(v).replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t"))
     };
     _formTokenSessionId = "";
@@ -14169,6 +14244,7 @@ var init_engine = __esm({
         const source = readFileSync6(filePath, "utf-8");
         const mtime = statSync6(filePath).mtimeMs;
         const tokens = tokenize(source);
+        capCache(this.compiled, TEMPLATE_CACHE_MAX);
         this.compiled.set(template, { tokens, mtime, cachedAt: Date.now() });
         return this.executeWithSource(source, tokens, context);
       }
@@ -14183,6 +14259,7 @@ var init_engine = __esm({
           }
         }
         const tokens = tokenize(source);
+        capCache(this.compiledStrings, TEMPLATE_CACHE_MAX);
         this.compiledStrings.set(key, { tokens, cachedAt: Date.now() });
         return this.executeCached(tokens, context);
       }
@@ -14398,6 +14475,9 @@ var init_engine = __esm({
             } else if (tag === "macro") {
               const skip = this.handleMacro(tokens, i, context);
               i = skip;
+            } else if (tag === "import") {
+              this.handleImportAs(content, context);
+              i++;
             } else if (tag === "from") {
               this.handleFromImport(content, context);
               i++;
@@ -14713,7 +14793,7 @@ var init_engine = __esm({
                 value = typeof value === "object" && value !== null && !Array.isArray(value) ? Object.values(value) : [];
                 continue;
               case "json_encode":
-                value = JSON.stringify(value);
+                value = jsonSafe(value);
                 continue;
               case "dump":
                 value = renderDump(value);
@@ -14964,7 +15044,7 @@ var init_engine = __esm({
           return i2;
         }
         const macroName = m[1];
-        const paramNames = m[2].split(",").map((p) => p.trim()).filter(Boolean);
+        const params = _Frond.parseMacroParams(m[2]);
         const bodyTokens = [];
         let i = start2 + 1;
         while (i < tokens.length) {
@@ -14979,13 +15059,94 @@ var init_engine = __esm({
         const capturedContext = { ...context };
         context[macroName] = (...args) => {
           const macroCtx = { ...capturedContext };
-          for (let pi = 0; pi < paramNames.length; pi++) {
-            macroCtx[paramNames[pi]] = pi < args.length ? args[pi] : null;
+          for (let pi = 0; pi < params.length; pi++) {
+            const [pname, pdefault] = params[pi];
+            macroCtx[pname] = pi < args.length ? args[pi] : pdefault;
           }
           return new SafeString(engine.renderTokens([...bodyTokens], macroCtx));
         };
         return i;
       }
+      /**
+       * Parse a macro parameter list into [name, default] pairs.
+       *
+       * Handles: name, name="default", name='default'. Splitting on "," alone left a
+       * defaulted parameter literally NAMED `greeting='Hello'`, so the body's
+       * {{ greeting }} matched nothing (rendered empty) AND the caller's positional
+       * argument was stored under that junk key and lost. Mirrors the Python master's
+       * _parse_macro_params. The default is null when none is declared.
+       */
+      static parseMacroParams(rawParams) {
+        return rawParams.split(",").map((p) => p.trim()).filter(Boolean).map((p) => {
+          const eq = p.indexOf("=");
+          if (eq === -1) return [p, null];
+          const name = p.slice(0, eq).trim();
+          let dflt = p.slice(eq + 1).trim();
+          if (dflt.length >= 2 && (dflt.startsWith('"') && dflt.endsWith('"') || dflt.startsWith("'") && dflt.endsWith("'"))) {
+            dflt = dflt.slice(1, -1);
+          }
+          return [name, dflt];
+        });
+      }
+      /**
+       * {% import "file" as alias %} -- load EVERY macro in a file under one namespace.
+       *
+       * The alias is bound as a plain object of macro functions, so {{ alias.greet(x) }}
+       * resolves through the engine's existing dotted-call path and each macro keeps the
+       * same argument binding, default handling and SafeString output as any other macro.
+       * A namespace object (not a class) is deliberate: a function stored as a class
+       * attribute binds as a method and would inject the namespace as the first argument,
+       * which is exactly the argument-shift bug the Python master carried (fixed there
+       * with types.SimpleNamespace). Both import forms must render identically.
+       */
+      handleImportAs(content, context) {
+        const m = content.match(/^import\s+["'](.+?)["']\s+as\s+(\w+)/);
+        if (!m) return;
+        const filename = m[1];
+        const alias = m[2];
+        const namespace = {};
+        const source = this.load(filename);
+        const tokens = tokenize(source);
+        let i = 0;
+        while (i < tokens.length) {
+          const [ttype, raw] = tokens[i];
+          if (ttype === "BLOCK") {
+            const [tagContent] = stripTag(raw);
+            if ((tagContent.split(/\s+/)[0] || "") === "macro") {
+              const macroM = tagContent.match(/^macro\s+(\w+)\s*\(([^)]*)\)/);
+              if (macroM) {
+                const macroName = macroM[1];
+                const params = _Frond.parseMacroParams(macroM[2]);
+                const bodyTokens = [];
+                i++;
+                while (i < tokens.length) {
+                  if (tokens[i][0] === "BLOCK" && tokens[i][1].includes("endmacro")) {
+                    i++;
+                    break;
+                  }
+                  bodyTokens.push(tokens[i]);
+                  i++;
+                }
+                const capturedBody = [...bodyTokens];
+                const capturedParams = [...params];
+                const capturedCtx = { ...context };
+                const engine = this;
+                namespace[macroName] = (...args) => {
+                  const macroCtx = { ...capturedCtx };
+                  for (let pi = 0; pi < capturedParams.length; pi++) {
+                    const [pname, pdefault] = capturedParams[pi];
+                    macroCtx[pname] = pi < args.length ? args[pi] : pdefault;
+                  }
+                  return new SafeString(engine.renderTokens([...capturedBody], macroCtx));
+                };
+                continue;
+              }
+            }
+          }
+          i++;
+        }
+        context[alias] = namespace;
+      }
       handleFromImport(content, context) {
         const m = content.match(/^from\s+["'](.+?)["']\s+import\s+(.+)/);
         if (!m) return;
@@ -15003,7 +15164,7 @@ var init_engine = __esm({
               const macroM = tagContent.match(/^macro\s+(\w+)\s*\(([^)]*)\)/);
               if (macroM && names.includes(macroM[1])) {
                 const macroName = macroM[1];
-                const paramNames = macroM[2].split(",").map((p) => p.trim()).filter(Boolean);
+                const paramNames = _Frond.parseMacroParams(macroM[2]);
                 const bodyTokens = [];
                 i++;
                 while (i < tokens.length) {
@@ -15021,7 +15182,8 @@ var init_engine = __esm({
                 context[macroName] = (...args) => {
                   const macroCtx = { ...capturedCtx };
                   for (let pi = 0; pi < capturedParams.length; pi++) {
-                    macroCtx[capturedParams[pi]] = pi < args.length ? args[pi] : null;
+                    const [pname, pdefault] = capturedParams[pi];
+                    macroCtx[pname] = pi < args.length ? args[pi] : pdefault;
                   }
                   return new SafeString(engine.renderTokens([...capturedBody], macroCtx));
                 };
@@ -18128,7 +18290,14 @@ function fullAnalysis(root = "src") {
     total_functions: allFunctions.length,
     avg_complexity: Math.round(avgCC * 100) / 100,
     avg_maintainability: Math.round(avgMI * 10) / 10,
+    // Display-only: the top-15 for the "most complex functions" report.
+    // Do NOT source offenders / --fail-on from this — capping here silently
+    // hides the 16th+ over-threshold function from the gate. offenders()
+    // reads "all_functions" (below) instead.
     most_complex_functions: allFunctions.slice(0, 15),
+    // Full, uncapped, complexity-sorted list — offenders()/--fail-on use this
+    // so no function over the complexity threshold ever escapes the gate.
+    all_functions: allFunctions,
     file_metrics: fileMetrics,
     violations,
     dependency_graph: importGraph,

package/packages/core/src/metrics.ts

@@ -1183,7 +1183,14 @@ export function fullAnalysis(root: string = "src"): Record<string, any> {
     total_functions: allFunctions.length,
     avg_complexity: Math.round(avgCC * 100) / 100,
     avg_maintainability: Math.round(avgMI * 10) / 10,
+    // Display-only: the top-15 for the "most complex functions" report.
+    // Do NOT source offenders / --fail-on from this — capping here silently
+    // hides the 16th+ over-threshold function from the gate. offenders()
+    // reads "all_functions" (below) instead.
     most_complex_functions: allFunctions.slice(0, 15),
+    // Full, uncapped, complexity-sorted list — offenders()/--fail-on use this
+    // so no function over the complexity threshold ever escapes the gate.
+    all_functions: allFunctions,
     file_metrics: fileMetrics,
     violations,
     dependency_graph: importGraph,
@@ -1243,8 +1250,10 @@ export function offenders(root: string = "src", top: number = 20): OffendersResu
 
   const items: Offender[] = [];
 
-  // Function-level: cyclomatic complexity.
-  for (const fn of analysis.most_complex_functions || []) {
+  // Function-level: cyclomatic complexity. Use the FULL function list (not the
+  // display-capped most_complex_functions[:15]) so a 16th+ over-threshold
+  // function is never silently dropped from the offenders list or --fail-on.
+  for (const fn of analysis.all_functions || analysis.most_complex_functions || []) {
     const cc: number = fn.complexity;
     if (cc > 10) {
       items.push({

package/packages/frond/dist/index.js

@@ -10,6 +10,35 @@ var SafeString = class {
     return this.value;
   }
 };
+function jsonText(value) {
+  try {
+    const text = JSON.stringify(value);
+    return text === void 0 ? "null" : text;
+  } catch {
+    const seen = /* @__PURE__ */ new WeakSet();
+    const text = JSON.stringify(value, (_key, v) => {
+      if (typeof v === "bigint") return v.toString();
+      if (typeof v === "object" && v !== null) {
+        if (seen.has(v)) return null;
+        seen.add(v);
+      }
+      return v;
+    });
+    return text === void 0 ? "null" : text;
+  }
+}
+var JSON_UNSAFE_RE = /[<>&'\u2028\u2029]/g;
+var JSON_UNSAFE_MAP = {
+  "<": "\\u003c",
+  ">": "\\u003e",
+  "&": "\\u0026",
+  "'": "\\u0027",
+  "\u2028": "\\u2028",
+  "\u2029": "\\u2029"
+};
+function jsonSafe(value) {
+  return new SafeString(jsonText(value).replace(JSON_UNSAFE_RE, (c) => JSON_UNSAFE_MAP[c]));
+}
 function inspectValue(value, seen = /* @__PURE__ */ new WeakSet(), depth = 0) {
   if (value === null) return "null";
   if (value === void 0) return "undefined";
@@ -101,6 +130,15 @@ function liveAttr(value) {
 }
 var filterChainCache = /* @__PURE__ */ new Map();
 var pathParseCache = /* @__PURE__ */ new Map();
+var TEMPLATE_CACHE_MAX = 256;
+function capCache(cache, maxEntries) {
+  if (cache.size < maxEntries) return;
+  let drop = Math.floor(maxEntries / 2);
+  for (const key of cache.keys()) {
+    cache.delete(key);
+    if (--drop <= 0) break;
+  }
+}
 var TOKEN_RE = /(\{%-?\s*[\s\S]*?\s*-?%\})|(\{\{-?\s*[\s\S]*?\s*-?\}\})|(\{#[\s\S]*?#\})/g;
 var RAW_BLOCK_RE = /\{%-?\s*raw\s*-?%\}([\s\S]*?)\{%-?\s*endraw\s*-?%\}/g;
 function tokenize(source) {
@@ -454,6 +492,9 @@ function evalExpr(expr, context) {
       }).join("");
     }
   }
+  if (expr.startsWith("not ")) {
+    return evalComparison(expr, context);
+  }
   for (const op of [" not in ", " in ", " is not ", " is ", "!=", "==", ">=", "<=", ">", "<", " and ", " or ", " not "]) {
     if (findOutsideQuotes(expr, op) >= 0) {
       return evalComparison(expr, context);
@@ -1037,7 +1078,7 @@ var BUILTIN_FILTERS = {
   int: (v) => v ? parseInt(String(v), 10) || 0 : 0,
   float: (v) => v ? parseFloat(String(v)) || 0 : 0,
   string: (v) => String(v),
-  json_encode: (v) => JSON.stringify(v),
+  json_encode: (v) => jsonSafe(v),
   json_decode: (v) => typeof v === "string" ? JSON.parse(v) : v,
   keys: (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? Object.keys(v) : [],
   values: (v) => typeof v === "object" && v !== null && !Array.isArray(v) ? Object.values(v) : [],
@@ -1182,8 +1223,12 @@ var BUILTIN_FILTERS = {
   form_token: (v) => _generateFormToken(v != null ? String(v) : ""),
   formTokenValue: (v) => _generateFormTokenValue(v != null ? String(v) : ""),
   form_token_value: (v) => _generateFormTokenValue(v != null ? String(v) : ""),
-  tojson: (v, indent) => new SafeString(indent !== void 0 ? JSON.stringify(v, null, parseInt(String(indent), 10)) : JSON.stringify(v)),
-  to_json: (v, indent) => new SafeString(indent !== void 0 ? JSON.stringify(v, null, parseInt(String(indent), 10)) : JSON.stringify(v)),
+  // Same serializer as json_encode -- the three names are one behaviour. The
+  // old indent argument is gone: PHP cannot honour an arbitrary indent
+  // (JSON_PRETTY_PRINT is fixed at four spaces), so honouring it here alone
+  // broke byte-parity for the one filter whose whole job is a wire format.
+  tojson: (v) => jsonSafe(v),
+  to_json: (v) => jsonSafe(v),
   js_escape: (v) => new SafeString(String(v).replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t"))
 };
 function _b64url(data) {
@@ -1409,6 +1454,7 @@ var Frond = class _Frond {
     const source = readFileSync(filePath, "utf-8");
     const mtime = statSync(filePath).mtimeMs;
     const tokens = tokenize(source);
+    capCache(this.compiled, TEMPLATE_CACHE_MAX);
     this.compiled.set(template, { tokens, mtime, cachedAt: Date.now() });
     return this.executeWithSource(source, tokens, context);
   }
@@ -1423,6 +1469,7 @@ var Frond = class _Frond {
       }
     }
     const tokens = tokenize(source);
+    capCache(this.compiledStrings, TEMPLATE_CACHE_MAX);
     this.compiledStrings.set(key, { tokens, cachedAt: Date.now() });
     return this.executeCached(tokens, context);
   }
@@ -1638,6 +1685,9 @@ var Frond = class _Frond {
         } else if (tag === "macro") {
           const skip = this.handleMacro(tokens, i, context);
           i = skip;
+        } else if (tag === "import") {
+          this.handleImportAs(content, context);
+          i++;
         } else if (tag === "from") {
           this.handleFromImport(content, context);
           i++;
@@ -1953,7 +2003,7 @@ var Frond = class _Frond {
             value = typeof value === "object" && value !== null && !Array.isArray(value) ? Object.values(value) : [];
             continue;
           case "json_encode":
-            value = JSON.stringify(value);
+            value = jsonSafe(value);
             continue;
           case "dump":
             value = renderDump(value);
@@ -2204,7 +2254,7 @@ var Frond = class _Frond {
       return i2;
     }
     const macroName = m[1];
-    const paramNames = m[2].split(",").map((p) => p.trim()).filter(Boolean);
+    const params = _Frond.parseMacroParams(m[2]);
     const bodyTokens = [];
     let i = start + 1;
     while (i < tokens.length) {
@@ -2219,13 +2269,94 @@ var Frond = class _Frond {
     const capturedContext = { ...context };
     context[macroName] = (...args) => {
       const macroCtx = { ...capturedContext };
-      for (let pi = 0; pi < paramNames.length; pi++) {
-        macroCtx[paramNames[pi]] = pi < args.length ? args[pi] : null;
+      for (let pi = 0; pi < params.length; pi++) {
+        const [pname, pdefault] = params[pi];
+        macroCtx[pname] = pi < args.length ? args[pi] : pdefault;
       }
       return new SafeString(engine.renderTokens([...bodyTokens], macroCtx));
     };
     return i;
   }
+  /**
+   * Parse a macro parameter list into [name, default] pairs.
+   *
+   * Handles: name, name="default", name='default'. Splitting on "," alone left a
+   * defaulted parameter literally NAMED `greeting='Hello'`, so the body's
+   * {{ greeting }} matched nothing (rendered empty) AND the caller's positional
+   * argument was stored under that junk key and lost. Mirrors the Python master's
+   * _parse_macro_params. The default is null when none is declared.
+   */
+  static parseMacroParams(rawParams) {
+    return rawParams.split(",").map((p) => p.trim()).filter(Boolean).map((p) => {
+      const eq = p.indexOf("=");
+      if (eq === -1) return [p, null];
+      const name = p.slice(0, eq).trim();
+      let dflt = p.slice(eq + 1).trim();
+      if (dflt.length >= 2 && (dflt.startsWith('"') && dflt.endsWith('"') || dflt.startsWith("'") && dflt.endsWith("'"))) {
+        dflt = dflt.slice(1, -1);
+      }
+      return [name, dflt];
+    });
+  }
+  /**
+   * {% import "file" as alias %} -- load EVERY macro in a file under one namespace.
+   *
+   * The alias is bound as a plain object of macro functions, so {{ alias.greet(x) }}
+   * resolves through the engine's existing dotted-call path and each macro keeps the
+   * same argument binding, default handling and SafeString output as any other macro.
+   * A namespace object (not a class) is deliberate: a function stored as a class
+   * attribute binds as a method and would inject the namespace as the first argument,
+   * which is exactly the argument-shift bug the Python master carried (fixed there
+   * with types.SimpleNamespace). Both import forms must render identically.
+   */
+  handleImportAs(content, context) {
+    const m = content.match(/^import\s+["'](.+?)["']\s+as\s+(\w+)/);
+    if (!m) return;
+    const filename = m[1];
+    const alias = m[2];
+    const namespace = {};
+    const source = this.load(filename);
+    const tokens = tokenize(source);
+    let i = 0;
+    while (i < tokens.length) {
+      const [ttype, raw] = tokens[i];
+      if (ttype === "BLOCK") {
+        const [tagContent] = stripTag(raw);
+        if ((tagContent.split(/\s+/)[0] || "") === "macro") {
+          const macroM = tagContent.match(/^macro\s+(\w+)\s*\(([^)]*)\)/);
+          if (macroM) {
+            const macroName = macroM[1];
+            const params = _Frond.parseMacroParams(macroM[2]);
+            const bodyTokens = [];
+            i++;
+            while (i < tokens.length) {
+              if (tokens[i][0] === "BLOCK" && tokens[i][1].includes("endmacro")) {
+                i++;
+                break;
+              }
+              bodyTokens.push(tokens[i]);
+              i++;
+            }
+            const capturedBody = [...bodyTokens];
+            const capturedParams = [...params];
+            const capturedCtx = { ...context };
+            const engine = this;
+            namespace[macroName] = (...args) => {
+              const macroCtx = { ...capturedCtx };
+              for (let pi = 0; pi < capturedParams.length; pi++) {
+                const [pname, pdefault] = capturedParams[pi];
+                macroCtx[pname] = pi < args.length ? args[pi] : pdefault;
+              }
+              return new SafeString(engine.renderTokens([...capturedBody], macroCtx));
+            };
+            continue;
+          }
+        }
+      }
+      i++;
+    }
+    context[alias] = namespace;
+  }
   handleFromImport(content, context) {
     const m = content.match(/^from\s+["'](.+?)["']\s+import\s+(.+)/);
     if (!m) return;
@@ -2243,7 +2374,7 @@ var Frond = class _Frond {
           const macroM = tagContent.match(/^macro\s+(\w+)\s*\(([^)]*)\)/);
           if (macroM && names.includes(macroM[1])) {
             const macroName = macroM[1];
-            const paramNames = macroM[2].split(",").map((p) => p.trim()).filter(Boolean);
+            const paramNames = _Frond.parseMacroParams(macroM[2]);
             const bodyTokens = [];
             i++;
             while (i < tokens.length) {
@@ -2261,7 +2392,8 @@ var Frond = class _Frond {
             context[macroName] = (...args) => {
               const macroCtx = { ...capturedCtx };
               for (let pi = 0; pi < capturedParams.length; pi++) {
-                macroCtx[capturedParams[pi]] = pi < args.length ? args[pi] : null;
+                const [pname, pdefault] = capturedParams[pi];
+                macroCtx[pname] = pi < args.length ? args[pi] : pdefault;
               }
               return new SafeString(engine.renderTokens([...capturedBody], macroCtx));
             };