Changelog¶

All notable changes to this project are documented here.

[Unreleased]¶

WebSocket Accept option functions: Added option functions for all fields in AcceptOptions, allowing fluent configuration of WebSocket accept behavior (e.g., SetInsecureSkipVerify, SetOriginPatterns, SetCompressionMode).
WebSocket AcceptOptions field parity: All fields from the underlying websocket.AcceptOptions are now mirrored in the framework's AcceptOptions struct for complete configuration support.

WebSocket lazy initialization: WebSocket connections are now lazily initialized on first read/write using sync.Once, preventing unnecessary resource allocation and fixing connection handoff in OpenStream.
WebSocket wrapper: Introduced WebSocketStream wrapper around WebSocket connections with proper connection lifecycle management and thread-safe initialization.
Component independent modules: All packages under component/ are now independent Go modules with their own go.mod and version tags — auth, cache, captcha, cors, localcache, qrcode, ratelimit, schedule, validator each have component/<name>/v1.0.14 tags.

Nil pointer in AddHandles: Added nil check to prevent panic when route handles are missing.
WebSocket data race and context leak: Fixed a race condition in lazy connection initialization and a context leak from uncanceled background goroutines.
WebSocket retry loop: Stopped infinite retrying after the first Accept failure — now returns the error immediately.
Unsynchronized fast path in getConn: Removed the unsynchronized fast path that could cause concurrent read/write races on WebSocket connections.
Empty slice initialization in AcceptOptions: Slice fields in AcceptOptions are now properly initialized to empty slices instead of nil.
GORM Model on Joins: The GORM Model() clause is now set when Joins are used, not just Preloads, fixing association resolution in join queries.
Query.One() error handling: When no record is found, Query.One() now returns a zero value and nil error instead of wrapping gorm.ErrRecordNotFound. Callers should check the return value for zero/nil to determine if a record exists.

MemFileSystem.ExistsFile(): Checks whether a path exists as a file (not a directory) with a single Stat call, used in SPA 404 fallback to avoid matching directories.
Table.Model(): New Model(value) method on db.Table wrapping GORM's Model, required for Preload to resolve associations correctly.
Server.ServerConfig(): Exposes the Server's configuration object for external access.
Server.Listen() / Server.ListenTLS(): HTTP/TLS listen logic moved from Runner to Server for independent usage.
Server.AddFilters(): Convenience method for adding multiple filters at once.
Access logging: Debug-level request logging in optionsMiddleware printing HTTP method and path.
util.DefaultPage(): Centralized pagination defaults (PageNo=1, PageSize=10), replacing duplicate validation across query methods.

core/server.go: Removed Init() phase — servers are now created on demand during Run(); added AddIRunner/AddRestGroup.
core/context.go: NewContext no longer takes *web.Server; removed server field from root Context.
core/rest.go: Handles flows through RestGroup to Server; Build() constructs the struct directly.
web/runner.go: Listen logic delegated to Server.Listen/ListenTLS; removed duplicate implementations and dead logTLSListen.
web_frame.go: No longer pre-creates Server; handles passed through RestGroup; simplified init flow.
component/cors/cors.go: Extracted crosHandlerFunc, added nil guard in Handle.
model/clause.go: ListPage/ExecPage/Page all use DefaultPage, eliminating duplicate validation.

SPA 404 fallback now uses ExistsFile instead of Exists to avoid matching directories.
initServer properly propagates server creation errors with errors.WithStackIf instead of swallowing nil.
Runner Init moved from Run() to web_frame.init() to avoid runners depending on uninitialized REST routes.
optionsMiddleware registered before justInitRoute for correct middleware ordering.

Self-Signed Certificate Generation: When no wildcard certificate matches a host, the framework now automatically generates an in-memory ECDSA P-256 self-signed certificate (valid for 1 year) and caches it. Eliminates the need for external certs in development.
IPv6 TLS Support: Self-signed certificates correctly handle IPv6 addresses, including bracketed format ([::1], [::1]:8443) from HTTP Host headers.
Servers.GetHandler(): Returns an http.Handler that dispatches requests to the correct Server engine based on the port in the Host header. Each server's routes, filters, and ContextPath remain fully independent.
WebFrame.GetHandler(): Initializes the full application (DB, services, routes) and returns an http.Handler for use with httptest.NewServer().
core.Server.GetHandler(): Exposes the underlying Servers.GetHandler() for test and embedding scenarios.
Multi-domain server listening — all matched domains now log their own URL on startup.

certStore.init() now collects all certificate errors instead of failing on the first one, ensuring as many certs as possible are loaded.
Certificate loading failures no longer block HTTP server startup — errors are logged and the server continues without TLS.
Various MkDocs 2.0 compatibility fixes (removed deprecated plugins, empty overrides, invalid icons).

core.NewServer() now accepts an external *web.Servers parameter, ensuring builder-registered routes are available through GetHandler().
Docs rewritten with standard markdown for MkDocs 2.0 compatibility.

Version	Date	Highlights
1.0.14	2026-07-16	WebSocket AcceptOptions, lazy init, data race fixes, component modules
1.0.13	2026-07-16	WebSocket AcceptOptions, lazy init, data race fixes, Query.One() fix
1.0.12	2026-07-15	ExistsFile, Model/Preload associations, core refactor, DefaultPage
1.0.11	2026-07-11	Self-signed certs, GetHandler for testing, TLS error resilience
1.0.0	2026-04-07	Initial release with core features