tina4-nodejs 3.2.1 → 3.5.0

package/CLAUDE.md

@@ -587,7 +587,7 @@ When adding new features, add a corresponding `test/<feature>.test.ts` file.
 - **`npx tina4nodejs generate`**: model, route, migration, middleware scaffolding
 - **Database**: 5 engines (SQLite, PostgreSQL, MySQL, MSSQL, Firebird), query caching (`TINA4_DB_CACHE=true`)
 - **Sessions**: file backend (default)
-- **Queue**: SQLite/RabbitMQ/Kafka backends, configured via env vars
+- **Queue**: SQLite/RabbitMQ/Kafka/MongoDB backends, configured via env vars
 - **Cache**: memory/Redis/file backends
 - **Messenger**: .env driven SMTP/IMAP
 - **ORM relationships**: `hasMany`, `hasOne`, `belongsTo` with eager loading (`include`)

package/README.md

@@ -86,7 +86,7 @@ Every feature is built from scratch -- no npm install, no node_modules bloat, no
 | **Database** | SQLite, PostgreSQL, MySQL, MSSQL/SQL Server, Firebird -- unified adapter interface, query caching (TINA4_DB_CACHE=true for 4x speedup) |
 | **Auth** | Zero-dep JWT (HS256 + RS256), sessions (file backend), PBKDF2 password hashing, form tokens |
 | **API** | Swagger/OpenAPI auto-generation, GraphQL with schema builder and GraphiQL IDE |
-| **Background** | Queue (SQLite/RabbitMQ/Kafka) with priority, delayed jobs, retry, batch processing |
+| **Background** | Queue (SQLite/RabbitMQ/Kafka/MongoDB) with priority, delayed jobs, retry, batch processing |
 | **Real-time** | Native WebSocket (RFC 6455), per-path routing, connection manager, broadcast |
 | **Frontend** | tina4-css (~24 KB), frond.js helper, SCSS compiler, live reload, CSS hot-reload |
 | **DX** | Dev admin dashboard, error overlay, request inspector, hot-reload, Carbonah green benchmarks |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tina4-nodejs",
-  "version": "3.2.1",
+  "version": "3.5.0",
   "type": "module",
   "description": "This is not a framework. Tina4 for Node.js/TypeScript — zero deps, 38 built-in features.",
   "keywords": ["tina4", "framework", "web", "api", "orm", "graphql", "websocket", "typescript"],

package/packages/cli/src/bin.ts

@@ -2,6 +2,8 @@ import { initProject } from "./commands/init.js";
 import { serveProject } from "./commands/serve.js";
 import { runMigrations } from "./commands/migrate.js";
 import { createMigration } from "./commands/migrateCreate.js";
+import { migrateStatus } from "./commands/migrateStatus.js";
+import { migrateRollback } from "./commands/migrateRollback.js";
 import { listRoutes } from "./commands/routes.js";
 import { runTests } from "./commands/test.js";
 import { generate } from "./commands/generate.js";
@@ -16,7 +18,9 @@ const HELP = `
     tina4nodejs init [dir]            Create a new Tina4 project (default: current directory)
     tina4nodejs serve                 Start the dev server with hot-reload
     tina4nodejs migrate               Run pending SQL migrations
-    tina4nodejs migrate:create <desc> Create a new migration file
+    tina4nodejs migrate:create <desc> Create a new migration file pair (.sql + .down.sql)
+    tina4nodejs migrate:status        Show completed and pending migrations
+    tina4nodejs migrate:rollback      Roll back the last batch of migrations
     tina4nodejs routes                List all registered routes
     tina4nodejs test [file]           Run project tests
     tina4nodejs generate <what> <name> Generate scaffolding (model, route, migration, middleware)
@@ -52,6 +56,14 @@ async function main(): Promise<void> {
       await createMigration(description || undefined);
       break;
     }
+    case "migrate:status": {
+      await migrateStatus(args[1]);
+      break;
+    }
+    case "migrate:rollback": {
+      await migrateRollback(args[1]);
+      break;
+    }
     case "routes": {
       await listRoutes();
       break;

package/packages/cli/src/commands/migrate.ts

@@ -1,8 +1,12 @@
 /**
  * CLI command: migrate — Run pending SQL migration files.
  *
- * Scans the migrations/ directory for .sql files, executes them in order,
- * and records each as applied via the ORM migration tracker.
+ * Scans the migrations/ directory for .sql files (excluding .down.sql),
+ * executes them in order, and records each as applied with a batch number.
+ *
+ * Supports both naming patterns:
+ *   - Sequential: 000001_name.sql
+ *   - Timestamp:  YYYYMMDDHHMMSS_name.sql
  */
 import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { join, resolve } from "node:path";
@@ -45,10 +49,20 @@ export async function runMigrations(migrationDir?: string): Promise<void> {
 
   ensureMigrationTable();
 
-  // Collect .sql files sorted alphabetically
+  // Collect .sql files, excluding .down.sql, sorted by numeric prefix
   const files = readdirSync(dir)
-    .filter((f) => f.endsWith(".sql"))
-    .sort();
+    .filter((f) => f.endsWith(".sql") && !f.endsWith(".down.sql"))
+    .sort((a, b) => {
+      const aMatch = a.match(/^(\d+)/);
+      const bMatch = b.match(/^(\d+)/);
+      if (aMatch && bMatch) {
+        const aNum = BigInt(aMatch[1]);
+        const bNum = BigInt(bMatch[1]);
+        if (aNum < bNum) return -1;
+        if (aNum > bNum) return 1;
+      }
+      return a.localeCompare(b);
+    });
 
   if (files.length === 0) {
     console.log("  No .sql migration files found.");

package/packages/cli/src/commands/migrateCreate.ts

@@ -1,11 +1,13 @@
 /**
- * CLI command: migrate:create — Create a new SQL migration file.
+ * CLI command: migrate:create — Create a new SQL migration file pair.
  *
  * Usage:
  *   tina4 migrate:create "create users table"
  *   tina4 migrate:create add_email_to_users
  *
- * Creates migrations/000001_description.sql (next sequence number).
+ * Creates both:
+ *   migrations/YYYYMMDDHHMMSS_description.sql       (up migration)
+ *   migrations/YYYYMMDDHHMMSS_description.down.sql   (rollback)
  */
 import { existsSync, mkdirSync, readdirSync, writeFileSync } from "node:fs";
 import { join, resolve } from "node:path";
@@ -24,36 +26,35 @@ export async function createMigration(description?: string): Promise<void> {
     mkdirSync(dir, { recursive: true });
   }
 
-  // Determine the next sequence number
-  const existing = existsSync(dir)
-    ? readdirSync(dir).filter((f) => f.endsWith(".sql")).sort()
-    : [];
-
-  let nextSeq = 1;
-  if (existing.length > 0) {
-    const last = existing[existing.length - 1];
-    const match = last.match(/^(\d+)/);
-    if (match) {
-      nextSeq = parseInt(match[1], 10) + 1;
-    }
-  }
-
   // Sanitise description for filename
   const safeName = description
     .toLowerCase()
     .replace(/[^a-z0-9]+/g, "_")
     .replace(/^_|_$/g, "");
 
-  const seqStr = String(nextSeq).padStart(6, "0");
-  const fileName = `${seqStr}_${safeName}.sql`;
-  const filePath = join(dir, fileName);
-
-  const template = `-- Migration: ${description}
--- Created: ${new Date().toISOString()}
-
-`;
-
-  writeFileSync(filePath, template, "utf-8");
-  console.log(`  Created migration: ${fileName}`);
-  console.log(`  Path: ${filePath}`);
+  // Use YYYYMMDDHHMMSS timestamp prefix
+  const now = new Date();
+  const timestamp = [
+    now.getFullYear(),
+    String(now.getMonth() + 1).padStart(2, "0"),
+    String(now.getDate()).padStart(2, "0"),
+    String(now.getHours()).padStart(2, "0"),
+    String(now.getMinutes()).padStart(2, "0"),
+    String(now.getSeconds()).padStart(2, "0"),
+  ].join("");
+
+  const upFileName = `${timestamp}_${safeName}.sql`;
+  const downFileName = `${timestamp}_${safeName}.down.sql`;
+  const upPath = join(dir, upFileName);
+  const downPath = join(dir, downFileName);
+
+  const upTemplate = `-- Migration: ${description}\n-- Created: ${now.toISOString()}\n\n`;
+  const downTemplate = `-- Rollback: ${description}\n-- Created: ${now.toISOString()}\n\n`;
+
+  writeFileSync(upPath, upTemplate, "utf-8");
+  writeFileSync(downPath, downTemplate, "utf-8");
+
+  console.log(`  Created migration:  ${upFileName}`);
+  console.log(`  Created rollback:   ${downFileName}`);
+  console.log(`  Path: ${dir}`);
 }

package/packages/cli/src/commands/migrateRollback.ts

@@ -0,0 +1,59 @@
+/**
+ * CLI command: migrate:rollback — Roll back the last batch of migrations.
+ *
+ * Looks for .down.sql files corresponding to each migration in the last batch,
+ * executes the SQL, and removes the tracking records.
+ *
+ * Usage:
+ *   tina4 migrate:rollback
+ *   tina4 migrate:rollback ./path/to/migrations
+ */
+import { resolve } from "node:path";
+
+export async function migrateRollback(migrationDir?: string): Promise<void> {
+  const dir = resolve(migrationDir ?? "migrations");
+
+  let initDatabase: typeof import("@tina4/orm").initDatabase;
+  let ensureMigrationTable: typeof import("@tina4/orm").ensureMigrationTable;
+  let rollbackFn: typeof import("@tina4/orm").rollback;
+  let getLastBatchMigrations: typeof import("@tina4/orm").getLastBatchMigrations;
+
+  try {
+    const orm = await import("@tina4/orm");
+    initDatabase = orm.initDatabase;
+    ensureMigrationTable = orm.ensureMigrationTable;
+    rollbackFn = orm.rollback;
+    getLastBatchMigrations = orm.getLastBatchMigrations;
+  } catch {
+    console.error("  Error: @tina4/orm is required to rollback migrations.");
+    process.exit(1);
+  }
+
+  // Ensure database is initialised
+  try {
+    initDatabase();
+  } catch {
+    // Adapter may already be set — ignore
+  }
+
+  ensureMigrationTable();
+
+  const lastBatch = getLastBatchMigrations();
+  if (lastBatch.length === 0) {
+    console.log("  Nothing to rollback — no migrations have been applied.");
+    return;
+  }
+
+  console.log(`  Rolling back batch ${lastBatch[0].batch} (${lastBatch.length} migration(s))...`);
+
+  const rolledBack = rollbackFn(dir);
+
+  if (rolledBack.length === 0) {
+    console.log("  Nothing was rolled back.");
+  } else {
+    for (const name of rolledBack) {
+      console.log(`    Rolled back: ${name}`);
+    }
+    console.log(`  Rolled back ${rolledBack.length} migration(s).`);
+  }
+}

package/packages/cli/src/commands/migrateStatus.ts

@@ -0,0 +1,62 @@
+/**
+ * CLI command: migrate:status — Show which migrations are applied and which are pending.
+ *
+ * Usage:
+ *   tina4 migrate:status
+ *   tina4 migrate:status ./path/to/migrations
+ */
+import { resolve } from "node:path";
+
+export async function migrateStatus(migrationDir?: string): Promise<void> {
+  const dir = resolve(migrationDir ?? "migrations");
+
+  let initDatabase: typeof import("@tina4/orm").initDatabase;
+  let ensureMigrationTable: typeof import("@tina4/orm").ensureMigrationTable;
+  let statusFn: typeof import("@tina4/orm").status;
+
+  try {
+    const orm = await import("@tina4/orm");
+    initDatabase = orm.initDatabase;
+    ensureMigrationTable = orm.ensureMigrationTable;
+    statusFn = orm.status;
+  } catch {
+    console.error("  Error: @tina4/orm is required to check migration status.");
+    process.exit(1);
+  }
+
+  // Ensure database is initialised
+  try {
+    initDatabase();
+  } catch {
+    // Adapter may already be set — ignore
+  }
+
+  ensureMigrationTable();
+
+  const result = await statusFn(undefined, { migrationsDir: dir });
+
+  console.log("");
+  console.log("  Migration Status");
+  console.log("  ─────────────────────────────────────");
+
+  if (result.completed.length === 0 && result.pending.length === 0) {
+    console.log("  No migration files found.");
+    return;
+  }
+
+  if (result.completed.length > 0) {
+    console.log(`  Completed (${result.completed.length}):`);
+    for (const file of result.completed) {
+      console.log(`    ✓ ${file}`);
+    }
+  }
+
+  if (result.pending.length > 0) {
+    console.log(`  Pending (${result.pending.length}):`);
+    for (const file of result.pending) {
+      console.log(`    ○ ${file}`);
+    }
+  }
+
+  console.log("");
+}

package/packages/core/public/js/tina4-dev-admin.min.js

@@ -21,7 +21,7 @@ document.getElementById('routes-count').textContent = d.count;
 document.getElementById('routes-body').innerHTML = d.routes.map(r => `
 <tr>
 <td><span class="method method-${r.method.toLowerCase()}">${r.method}</span></td>
-<td class="path">${r.path}</td>
+<td class="path"><a href="${r.path}" target="_blank" title="${r.method !== 'GET' ? r.method + ' route \u2014 may not respond to browser GET' : 'Open in new tab'}" style="color:inherit;text-decoration:underline dotted;${r.method !== 'GET' ? 'opacity:0.7' : ''}">${r.path}</a></td>
 <td>${r.auth_required ? '<span class="badge-pill bg-reserved">auth</span>' : '<span class="badge-pill bg-success">open</span>'}</td>
 <td class="text-sm text-muted">${r.handler} <small>(${r.module})</small></td>
 </tr>`).join('');

package/packages/core/public/js/tina4js.min.js

@@ -0,0 +1,47 @@
+"use strict";var Tina4=(()=>{var H=Object.defineProperty;var pe=Object.getOwnPropertyDescriptor;var ge=Object.getOwnPropertyNames;var he=Object.prototype.hasOwnProperty;var me=(e,n)=>{for(var t in n)H(e,t,{get:n[t],enumerable:!0})},ye=(e,n,t,o)=>{if(n&&typeof n=="object"||typeof n=="function")for(let r of ge(n))!he.call(e,r)&&r!==t&&H(e,r,{get:()=>n[r],enumerable:!(o=pe(n,r))||o.enumerable});return e};var ve=e=>ye(H({},"__esModule",{value:!0}),e);var Ae={};me(Ae,{Tina4Element:()=>I,api:()=>ie,batch:()=>q,computed:()=>z,effect:()=>m,html:()=>X,isSignal:()=>w,navigate:()=>L,pwa:()=>le,route:()=>oe,router:()=>re,signal:()=>h,ws:()=>ue});var C=null,_=null,M=null;function b(e){M=e}function J(){return M}var B=null,V=null;var N=0,P=new Set;function h(e,n){let t=e,o=new Set,r={_t4:!0,get value(){if(C&&(o.add(C),_)){let a=C;_.push(()=>o.delete(a))}return t},set value(a){if(Object.is(a,t))return;let i=t;if(t=a,r._debugInfo&&r._debugInfo.updateCount++,V&&V(r,i,a),N>0)for(let s of o)P.add(s);else{let s;for(let c of[...o])try{c()}catch(l){s===void 0&&(s=l)}if(s!==void 0)throw s}},_subscribe(a){return o.add(a),()=>{o.delete(a)}},peek(){return t}};return B&&(r._debugInfo={label:n,createdAt:Date.now(),updateCount:0,subs:o},B(r,n)),r}function z(e){let n=h(void 0);return m(()=>{n.value=e()}),{_t4:!0,get value(){return n.value},set value(t){throw new Error("[tina4] computed signals are read-only")},_subscribe(t){return n._subscribe(t)},peek(){return n.peek()}}}function m(e){let n=!1,t=[],o=()=>{if(n)return;for(let s of t)s();t=[];let a=C,i=_;C=o,_=t;try{e()}finally{C=a,_=i}};o();let r=()=>{n=!0;for(let a of t)a();t=[]};return M&&M.push(r),r}function q(e){N++;try{e()}finally{if(N--,N===0){let n=[...P];P.clear();let t;for(let o of n)try{o()}catch(r){t===void 0&&(t=r)}if(t!==void 0)throw t}}}function w(e){return e!==null&&typeof e=="object"&&e._t4===!0}var Q=new WeakMap,D="t4:";function X(e,...n){let t=Q.get(e);if(!t){t=document.createElement("template");let i="";for(let s=0;s<e.length;s++)i+=e[s],s<n.length&&(Te(i)?i+=`__t4_${s}__`:i+=`<!--${D}${s}-->`);t.innerHTML=i,Q.set(e,t)}let o=t.content.cloneNode(!0),r=be(o);for(let{marker:i,index:s}of r)ke(i,n[s]);let a=we(o);for(let i of a)Ce(i,n);return o}function be(e){let n=[];return W(e,t=>{if(t.nodeType===8){let o=t.data;if(o&&o.startsWith(D)){let r=parseInt(o.slice(D.length),10);n.push({marker:t,index:r})}}}),n}function we(e){let n=[];return W(e,t=>{t.nodeType===1&&n.push(t)}),n}function W(e,n){let t=e.childNodes;for(let o=0;o<t.length;o++){let r=t[o];n(r),W(r,n)}}function ke(e,n){let t=e.parentNode;if(t)if(w(n)){let o=document.createTextNode("");t.replaceChild(o,e),m(()=>{o.data=String(n.value??"")})}else if(typeof n=="function"){let o=document.createComment("");t.replaceChild(o,e);let r=[],a=[];m(()=>{for(let d of a)d();a=[];let i=[],s=J();b(i);let c=n();b(s),a=i;for(let d of r)d.parentNode?.removeChild(d);r=[];let l=F(c),f=o.parentNode;if(f)for(let d of l)f.insertBefore(d,o),r.push(d)})}else if(Y(n))t.replaceChild(n,e);else if(n instanceof Node)t.replaceChild(n,e);else if(Array.isArray(n)){let o=document.createDocumentFragment();for(let r of n){let a=F(r);for(let i of a)o.appendChild(i)}t.replaceChild(o,e)}else{let o=document.createTextNode(String(n??""));t.replaceChild(o,e)}}function Ce(e,n){let t=[];for(let o of Array.from(e.attributes)){let r=o.name,a=o.value;if(r.startsWith("@")){let s=r.slice(1),c=a.match(/__t4_(\d+)__/);if(c){let l=n[parseInt(c[1],10)];typeof l=="function"&&e.addEventListener(s,f=>q(()=>l(f)))}t.push(r);continue}if(r.startsWith("?")){let s=r.slice(1),c=a.match(/__t4_(\d+)__/);if(c){let l=n[parseInt(c[1],10)];if(w(l)){let f=l;m(()=>{f.value?e.setAttribute(s,""):e.removeAttribute(s)})}else typeof l=="function"?m(()=>{l()?e.setAttribute(s,""):e.removeAttribute(s)}):l&&e.setAttribute(s,"")}t.push(r);continue}if(r.startsWith(".")){let s=r.slice(1),c=a.match(/__t4_(\d+)__/);if(c){let l=n[parseInt(c[1],10)];w(l)?m(()=>{e[s]=l.value}):e[s]=l}t.push(r);continue}let i=a.match(/__t4_(\d+)__/);if(i){let s=n[parseInt(i[1],10)];if(w(s)){let c=s;m(()=>{e.setAttribute(r,String(c.value??""))})}else typeof s=="function"?m(()=>{e.setAttribute(r,String(s()??""))}):e.setAttribute(r,String(s??""))}}for(let o of t)e.removeAttribute(o)}function F(e){if(e==null||e===!1)return[];if(Y(e))return Array.from(e.childNodes);if(e instanceof Node)return[e];if(Array.isArray(e)){let n=[];for(let t of e)n.push(...F(t));return n}return[document.createTextNode(String(e))]}function Y(e){return e!=null&&typeof e=="object"&&e.nodeType===11}function Te(e){let n=!1,t=!1,o=!1;for(let r=0;r<e.length;r++){let a=e[r];a==="<"&&!n&&!t&&(o=!0),a===">"&&!n&&!t&&(o=!1),o&&(a==='"'&&!n&&(t=!t),a==="'"&&!t&&(n=!n))}return o}var Z=null,ee=null;var I=class extends HTMLElement{constructor(){super();this._props={};this._rendered=!1;let t=this.constructor;this._root=t.shadow?this.attachShadow({mode:"open"}):this;for(let[o,r]of Object.entries(t.props))this._props[o]=h(this._coerce(this.getAttribute(o),r))}static{this.props={}}static{this.styles=""}static{this.shadow=!0}static get observedAttributes(){return Object.keys(this.props)}connectedCallback(){if(this._rendered)return;this._rendered=!0;let t=this.constructor;if(t.styles&&t.shadow&&this._root instanceof ShadowRoot){let r=document.createElement("style");r.textContent=t.styles,this._root.appendChild(r)}let o=this.render();o&&this._root.appendChild(o),this.onMount(),Z&&Z(this)}disconnectedCallback(){this.onUnmount(),ee&&ee(this)}attributeChangedCallback(t,o,r){let i=this.constructor.props[t];i&&this._props[t]&&(this._props[t].value=this._coerce(r,i))}prop(t){if(!this._props[t])throw new Error(`[tina4] Prop '${t}' not declared in static props of <${this.tagName.toLowerCase()}>`);return this._props[t]}emit(t,o){this.dispatchEvent(new CustomEvent(t,{bubbles:!0,composed:!0,...o}))}onMount(){}onUnmount(){}_coerce(t,o){return o===Boolean?t!==null:o===Number?t!==null?Number(t):0:t??""}};var U=[],T=null,S="history",_e=!1,E=[],O=[],te=0;function oe(e,n){let t=[],o;e==="*"?o=".*":o=e.replace(/\{(\w+)\}/g,(a,i)=>(t.push(i),"([^/]+)"));let r=new RegExp(`^${o}$`);typeof n=="function"?U.push({pattern:e,regex:r,paramNames:t,handler:n}):U.push({pattern:e,regex:r,paramNames:t,handler:n.handler,guard:n.guard})}function L(e,n){if(S==="hash")if(n?.replace){let t=new URL(location.href);t.hash="#"+e,history.replaceState(null,"",t.toString()),R()}else location.hash="#"+e;else n?.replace?history.replaceState(null,"",e):history.pushState(null,"",e),R()}function R(){if(!T)return;let e=performance.now(),n=++te,t=S==="hash"?location.hash.slice(1)||"/":location.pathname;for(let o of U){let r=t.match(o.regex);if(!r)continue;let a={};if(o.paramNames.forEach((c,l)=>{a[c]=decodeURIComponent(r[l+1])}),o.guard){let c=o.guard();if(c===!1)return;if(typeof c=="string"){L(c,{replace:!0});return}}for(let c of O)c();O=[],T.innerHTML="";let i=[];b(i);let s=o.handler(a);if(s instanceof Promise)s.then(c=>{if(b(null),n!==te){for(let f of i)f();return}ne(T,c),O=i;let l=performance.now()-e;for(let f of E)f({path:t,params:a,pattern:o.pattern,durationMs:l})});else{b(null),ne(T,s),O=i;let c=performance.now()-e;for(let l of E)l({path:t,params:a,pattern:o.pattern,durationMs:c})}return}}function ne(e,n){n instanceof DocumentFragment||n instanceof Node?e.replaceChildren(n):typeof n=="string"?e.innerHTML=n:n!=null&&e.replaceChildren(document.createTextNode(String(n)))}var re={start(e){if(T=document.querySelector(e.target),!T)throw new Error(`[tina4] Router target '${e.target}' not found in DOM`);S=e.mode??"history",_e=!0,window.addEventListener("popstate",R),S==="hash"&&window.addEventListener("hashchange",R),document.addEventListener("click",n=>{if(n.metaKey||n.ctrlKey||n.shiftKey||n.altKey)return;let t=n.target.closest("a[href]");if(!t||t.origin!==location.origin||t.hasAttribute("target")||t.hasAttribute("download")||t.getAttribute("rel")?.includes("external"))return;n.preventDefault();let o=S==="hash"?t.getAttribute("href"):t.pathname;L(o)}),R()},on(e,n){return E.push(n),()=>{let t=E.indexOf(n);t>=0&&E.splice(t,1)}}};var y={baseUrl:"",auth:!1,tokenKey:"tina4_token",headers:{}},j=[],K=[],Se=0;function se(){try{return localStorage.getItem(y.tokenKey)}catch{return null}}function Ee(e){try{localStorage.setItem(y.tokenKey,e)}catch{}}async function x(e,n,t,o){let r={method:e,headers:{"Content-Type":"application/json",...y.headers}};if(y.auth){let d=se();d&&(r.headers.Authorization=`Bearer ${d}`)}if(t!==void 0&&e!=="GET"){let d=typeof t=="object"&&t!==null?{...t}:t;if(y.auth&&typeof d=="object"&&d!==null){let p=se();p&&(d.formToken=p)}r.body=JSON.stringify(d)}if(o?.headers&&Object.assign(r.headers,o.headers),o?.params){let d=Object.entries(o.params).map(([p,v])=>`${encodeURIComponent(p)}=${encodeURIComponent(String(v))}`).join("&");n+=(n.includes("?")?"&":"?")+d}let a=y.baseUrl+n;r._url=a,r._requestId=++Se;for(let d of j){let p=d(r);p&&(r=p)}let i=await fetch(a,r),s=i.headers.get("FreshToken");s&&Ee(s);let c=i.headers.get("Content-Type")??"",l;c.includes("json")?l=await i.json():l=await i.text();let f={status:i.status,data:l,ok:i.ok,headers:i.headers,_requestId:r._requestId};for(let d of K){let p=d(f);p&&(f=p)}if(!i.ok)throw f;return f.data}var ie={configure(e){Object.assign(y,e)},get(e,n){return x("GET",e,void 0,n)},post(e,n,t){return x("POST",e,n,t)},put(e,n,t){return x("PUT",e,n,t)},patch(e,n,t){return x("PATCH",e,n,t)},delete(e,n){return x("DELETE",e,void 0,n)},intercept(e,n){e==="request"?j.push(n):K.push(n)},_reset(){y.baseUrl="",y.auth=!1,y.tokenKey="tina4_token",y.headers={},j.length=0,K.length=0}};function ae(e){let n=e.cacheStrategy??"network-first",t=JSON.stringify(e.precache??[]),o=e.offlineRoute?`'${e.offlineRoute}'`:"null";return`
+const CACHE = 'tina4-v1';
+const PRECACHE = ${t};
+const OFFLINE = ${o};
+
+self.addEventListener('install', (e) => {
+  e.waitUntil(
+    caches.open(CACHE).then((c) => c.addAll(PRECACHE)).then(() => self.skipWaiting())
+  );
+});
+
+self.addEventListener('activate', (e) => {
+  e.waitUntil(self.clients.claim());
+});
+
+self.addEventListener('fetch', (e) => {
+  const req = e.request;
+  if (req.method !== 'GET') return;
+
+  ${n==="cache-first"?`
+  e.respondWith(
+    caches.match(req).then((cached) => cached || fetch(req).then((res) => {
+      const clone = res.clone();
+      caches.open(CACHE).then((c) => c.put(req, clone));
+      return res;
+    })).catch(() => OFFLINE ? caches.match(OFFLINE) : new Response('Offline', { status: 503 }))
+  );`:n==="stale-while-revalidate"?`
+  e.respondWith(
+    caches.match(req).then((cached) => {
+      const fetched = fetch(req).then((res) => {
+        caches.open(CACHE).then((c) => c.put(req, res.clone()));
+        return res;
+      });
+      return cached || fetched;
+    }).catch(() => OFFLINE ? caches.match(OFFLINE) : new Response('Offline', { status: 503 }))
+  );`:`
+  e.respondWith(
+    fetch(req).then((res) => {
+      const clone = res.clone();
+      caches.open(CACHE).then((c) => c.put(req, clone));
+      return res;
+    }).catch(() => caches.match(req).then((cached) =>
+      cached || (OFFLINE ? caches.match(OFFLINE) : new Response('Offline', { status: 503 }))
+    ))
+  );`}
+});
+`.trim()}function ce(e){let n={name:e.name,short_name:e.shortName??e.name,start_url:"/",display:e.display??"standalone",background_color:e.backgroundColor??"#ffffff",theme_color:e.themeColor??"#000000"};return e.icon&&(n.icons=[{src:e.icon,sizes:"192x192",type:"image/png"},{src:e.icon,sizes:"512x512",type:"image/png"}]),n}var le={register(e){let n=ce(e),t=new Blob([JSON.stringify(n)],{type:"application/json"}),o=document.createElement("link");o.rel="manifest",o.href=URL.createObjectURL(t),document.head.appendChild(o);let r=document.querySelector('meta[name="theme-color"]');if(r||(r=document.createElement("meta"),r.name="theme-color",document.head.appendChild(r)),r.content=e.themeColor??"#000000","serviceWorker"in navigator){let a=ae(e),i=new Blob([a],{type:"text/javascript"}),s=URL.createObjectURL(i);navigator.serviceWorker.register(s).catch(c=>{console.warn("[tina4] Service worker registration failed:",c)})}},generateServiceWorker(e){return ae(e)},generateManifest(e){return ce(e)}};var Re={reconnect:!0,reconnectDelay:1e3,reconnectMaxDelay:3e4,reconnectAttempts:1/0,protocols:[]};function xe(e,n={}){let t={...Re,...n},o=h("connecting"),r=h(!1),a=h(null),i=h(null),s=h(0),c={message:[],open:[],close:[],error:[]},l=null,f=!1,d=t.reconnectDelay,p=null,v=0;function de(u){if(typeof u!="string")return u;try{return JSON.parse(u)}catch{return u}}function $(){o.value=v>0?"reconnecting":"connecting";try{l=new WebSocket(e,t.protocols)}catch{o.value="closed",r.value=!1;return}l.onopen=()=>{o.value="open",r.value=!0,i.value=null,v=0,d=t.reconnectDelay,s.value=0;for(let u of c.open)u()},l.onmessage=u=>{let g=de(u.data);a.value=g;for(let k of c.message)k(g)},l.onclose=u=>{o.value="closed",r.value=!1;for(let g of c.close)g(u.code,u.reason);!f&&t.reconnect&&v<t.reconnectAttempts&&fe()},l.onerror=u=>{i.value=u;for(let g of c.error)g(u)}}function fe(){v++,s.value=v,o.value="reconnecting",p=setTimeout(()=>{p=null,$()},d),d=Math.min(d*2,t.reconnectMaxDelay)}let G={status:o,connected:r,lastMessage:a,error:i,reconnectCount:s,send(u){if(!l||l.readyState!==WebSocket.OPEN)throw new Error("[tina4] WebSocket is not connected");let g=typeof u=="string"?u:JSON.stringify(u);l.send(g)},on(u,g){return c[u].push(g),()=>{let k=c[u],A=k.indexOf(g);A>=0&&k.splice(A,1)}},pipe(u,g){let k=A=>{u.value=g(A,u.value)};return G.on("message",k)},close(u,g){f=!0,p&&(clearTimeout(p),p=null),l&&l.close(u??1e3,g??""),o.value="closed",r.value=!1}};return $(),G}var ue={connect:xe};return ve(Ae);})();

package/packages/core/src/auth.ts

@@ -3,10 +3,10 @@
  *
  * Uses only Node.js built-in `crypto` module. No external dependencies.
  *
- *   import { createToken, validateToken, hashPassword, checkPassword } from "./auth.js";
+ *   import { getToken, validToken, hashPassword, checkPassword } from "./auth.js";
  *
- *   const token = createToken({ userId: 1 }, "my-secret");
- *   const payload = validateToken(token, "my-secret");
+ *   const token = getToken({ userId: 1 }, "my-secret");
+ *   const payload = validToken(token, "my-secret");
  *
  *   const hash = hashPassword("secret123");
  *   checkPassword("secret123", hash);  // true
@@ -38,7 +38,7 @@ function base64urlDecode(str: string): Buffer {
  * @param algorithm - "HS256" or "RS256" (default "HS256")
  * @returns Signed JWT string: header.payload.signature
  */
-export function createToken(
+export function getToken(
   payload: Record<string, unknown>,
   secret: string,
   expiresIn: number = 3600,
@@ -63,7 +63,7 @@ export function createToken(
 /**
  * Validate a JWT token and return the decoded payload, or null if invalid/expired.
  */
-export function validateToken(
+export function validToken(
   token: string,
   secret: string,
   algorithm: string = "HS256",
@@ -199,7 +199,7 @@ export function authMiddleware(secret: string, algorithm: string = "HS256"): Mid
     }
 
     const token = authHeader.slice(7);
-    const payload = validateToken(token, secret, algorithm);
+    const payload = validToken(token, secret, algorithm);
 
     if (payload === null) {
       res({ error: "Unauthorized" }, 401);
@@ -229,12 +229,12 @@ export function refreshToken(
   expiresIn: number = 3600,
   algorithm: string = "HS256",
 ): string | null {
-  const payload = validateToken(token, secret, algorithm);
+  const payload = validToken(token, secret, algorithm);
   if (payload === null) return null;
 
-  // Strip standard timing claims so createToken sets fresh ones
+  // Strip standard timing claims so getToken sets fresh ones
   const { iat: _iat, exp: _exp, ...claims } = payload;
-  return createToken(claims, secret, expiresIn, algorithm);
+  return getToken(claims, secret, expiresIn, algorithm);
 }
 
 // ── Request Authentication ───────────────────────────────────────
@@ -258,9 +258,17 @@ export function authenticateRequest(
   if (!authHeader.startsWith("Bearer ")) return null;
 
   const token = authHeader.slice(7);
-  return validateToken(token, secret, algorithm);
+  return validToken(token, secret, algorithm);
 }
 
+// ── Backward-Compatible Aliases ──────────────────────────────────
+
+/** Alias for getToken() — kept for backward compatibility. */
+export const createToken = getToken;
+
+/** Alias for validToken() — kept for backward compatibility. */
+export const validateToken = validToken;
+
 // ── API Key Validation ───────────────────────────────────────────
 
 /**
@@ -285,3 +293,29 @@ export function validateApiKey(
   if (a.length !== b.length) return false;
   return timingSafeEqual(a, b);
 }
+
+// ── Auth Class Wrapper ──────────────────────────────────────────
+
+/**
+ * Auth class that wraps the standalone auth functions so both patterns work:
+ *
+ *   import { Auth } from "tina4-nodejs";
+ *   const token = Auth.getToken(payload, secret);
+ *
+ *   import { getToken } from "tina4-nodejs";
+ *   const token = getToken(payload, secret);
+ */
+export class Auth {
+  static getToken = getToken;
+  static validToken = validToken;
+  static getPayload = getPayload;
+  static hashPassword = hashPassword;
+  static checkPassword = checkPassword;
+  static authMiddleware = authMiddleware;
+  static refreshToken = refreshToken;
+  static authenticateRequest = authenticateRequest;
+  static validateApiKey = validateApiKey;
+  // Legacy aliases
+  static createToken = getToken;
+  static validateToken = validToken;
+}

package/packages/core/src/devAdmin.ts

@@ -862,31 +862,29 @@ const handleConnectionsTest: RouteHandler = async (req, res) => {
     let version = "Connected";
     let tableCount = 0;
     try {
-      if (db.tables) {
-        const tables = await db.tables();
-        tableCount = Array.isArray(tables) ? tables.length : 0;
-      }
+      const tables = db.getTables();
+      tableCount = Array.isArray(tables) ? tables.length : 0;
     } catch { tableCount = 0; }
     try {
       const urlLower = url.toLowerCase();
       if (urlLower.includes("sqlite")) {
-        const row = await db.execute("SELECT sqlite_version() as v");
-        version = `SQLite ${row?.[0]?.v ?? ""}`;
+        const row = db.execute("SELECT sqlite_version() as v") as Record<string, unknown>[] | undefined;
+        version = `SQLite ${(row as any)?.[0]?.v ?? ""}`;
       } else if (urlLower.includes("postgres")) {
-        const row = await db.execute("SELECT version() as v");
-        version = (row?.[0]?.v ?? "PostgreSQL").toString().split(",")[0];
+        const row = db.execute("SELECT version() as v") as Record<string, unknown>[] | undefined;
+        version = ((row as any)?.[0]?.v ?? "PostgreSQL").toString().split(",")[0];
       } else if (urlLower.includes("mysql")) {
-        const row = await db.execute("SELECT version() as v");
-        version = `MySQL ${row?.[0]?.v ?? ""}`;
+        const row = db.execute("SELECT version() as v") as Record<string, unknown>[] | undefined;
+        version = `MySQL ${(row as any)?.[0]?.v ?? ""}`;
       } else if (urlLower.includes("mssql")) {
-        const row = await db.execute("SELECT @@VERSION as v");
-        version = (row?.[0]?.v ?? "MSSQL").toString().split("\n")[0];
+        const row = db.execute("SELECT @@VERSION as v") as Record<string, unknown>[] | undefined;
+        version = ((row as any)?.[0]?.v ?? "MSSQL").toString().split("\n")[0];
       } else if (urlLower.includes("firebird")) {
-        const row = await db.execute("SELECT rdb$get_context('SYSTEM', 'ENGINE_VERSION') as v FROM rdb$database");
-        version = `Firebird ${row?.[0]?.v ?? ""}`;
+        const row = db.execute("SELECT rdb$get_context('SYSTEM', 'ENGINE_VERSION') as v FROM rdb$database") as Record<string, unknown>[] | undefined;
+        version = `Firebird ${(row as any)?.[0]?.v ?? ""}`;
       }
     } catch { /* keep version as Connected */ }
-    if (db.close) await db.close();
+    db.close();
     res.json({ success: true, version, tables: tableCount });
   } catch (e: unknown) {
     const msg = e instanceof Error ? e.message : String(e);
@@ -1085,7 +1083,7 @@ function renderDevAdminJs(): string {
     "        document.getElementById('routes-body').innerHTML = d.routes.map(function(r) {",
     "            return '<tr>' +",
     "                '<td><span class=\"method method-' + r.method.toLowerCase() + '\">' + r.method + '</span></td>' +",
-    "                '<td class=\"path\">' + (r.path || r.pattern || '') + '</td>' +",
+    "                '<td class=\"path\"><a href=\"' + (r.path || r.pattern || '') + '\" target=\"_blank\" title=\"' + (r.method !== 'GET' ? r.method + ' route \\u2014 may not respond to browser GET' : 'Open in new tab') + '\" style=\"color:inherit;text-decoration:underline dotted;' + (r.method !== 'GET' ? 'opacity:0.7' : '') + '\">' + (r.path || r.pattern || '') + '</a></td>' +",
     "                '<td>' + (r.auth_required || r.secure ? '<span class=\"badge-pill bg-reserved\">auth</span>' : '<span class=\"badge-pill bg-success\">open</span>') + '</td>' +",
     "                '<td class=\"text-sm text-muted\">' + (r.handler || '') + (r.module ? ' <small>(' + r.module + ')</small>' : '') + '</td>' +",
     "            '</tr>';",

package/packages/core/src/index.ts

@@ -13,11 +13,11 @@ export type {
 } from "./types.js";
 
 export { startServer, resolvePortAndHost } from "./server.js";
-export { Router, RouteGroup, defaultRouter, runRouteMiddlewares } from "./router.js";
+export { Router, RouteGroup, RouteRef, defaultRouter, runRouteMiddlewares } from "./router.js";
 export { get, post, put, patch, del, any, websocket, del as delete } from "./router.js";
 export type { RouteInfo } from "./router.js";
 export { discoverRoutes } from "./routeDiscovery.js";
-export { MiddlewareChain, cors, requestLogger } from "./middleware.js";
+export { MiddlewareChain, MiddlewareRunner, cors, requestLogger, CorsMiddleware, RateLimiterMiddleware, RequestLogger } from "./middleware.js";
 export type { CorsConfig } from "./middleware.js";
 export { createRequest, parseBody } from "./request.js";
 export { createResponse } from "./response.js";
@@ -38,10 +38,11 @@ export {
   APPLICATION_OCTET, TEXT_HTML, TEXT_PLAIN, TEXT_CSV, TEXT_XML,
 } from "./constants.js";
 export {
-  createToken, validateToken, getPayload,
+  getToken, validToken, createToken, validateToken, getPayload,
   hashPassword, checkPassword,
   authMiddleware,
   refreshToken, authenticateRequest, validateApiKey,
+  Auth,
 } from "./auth.js";
 export { Session, FileSessionHandler, RedisSessionHandler } from "./session.js";
 export type { SessionConfig, SessionHandler } from "./session.js";
@@ -82,10 +83,16 @@ export { RabbitMQBackend } from "./queueBackends/rabbitmqBackend.js";
 export type { RabbitMQConfig } from "./queueBackends/rabbitmqBackend.js";
 export { KafkaBackend } from "./queueBackends/kafkaBackend.js";
 export type { KafkaConfig } from "./queueBackends/kafkaBackend.js";
+export { MongoBackend } from "./queueBackends/mongoBackend.js";
+export type { MongoConfig as MongoQueueConfig } from "./queueBackends/mongoBackend.js";
+export { DatabaseSessionHandler } from "./sessionHandlers/databaseHandler.js";
+export type { DatabaseSessionConfig } from "./sessionHandlers/databaseHandler.js";
 export { MongoSessionHandler } from "./sessionHandlers/mongoHandler.js";
 export type { MongoSessionConfig } from "./sessionHandlers/mongoHandler.js";
 export { ValkeySessionHandler } from "./sessionHandlers/valkeyHandler.js";
 export type { ValkeySessionConfig } from "./sessionHandlers/valkeyHandler.js";
+export { RedisNpmSessionHandler } from "./sessionHandlers/redisHandler.js";
+export type { RedisNpmSessionConfig } from "./sessionHandlers/redisHandler.js";
 export { tests, assertEqual, assertThrows, assertTrue, assertFalse, runAllTests, resetTests } from "./testing.js";
 export { Container, container } from "./container.js";
 export type { WebSocketConnection } from "./websocketConnection.js";