webspresso 0.0.89 → 0.0.91

package/index.js

@@ -10,9 +10,21 @@ const {
   getAppContext,
   getDb,
   hasDb,
+  getShutdownManager,
+  hasShutdownManager,
+  getServiceRegistry,
+  hasServiceRegistry,
   resetAppContext,
   setAppContext,
 } = require('./src/app-context');
+const {
+  createServiceRegistry,
+  defineService,
+  ServiceRegistry,
+} = require('./src/services');
+const { ShutdownManager, NodeHttpAdapter } = require('./core/shutdown');
+const compression = require('./core/compression');
+const errors = require('./core/errors');
 const { 
   mountPages, 
   filePathToRoute, 
@@ -64,6 +76,17 @@ const {
   rateLimitPlugin,
   contentPlugin,
   csrfPlugin,
+  corsPlugin,
+  emailPlugin,
+  basicAuthPlugin,
+  realtimePlugin,
+  realtime,
+  createRealtime,
+  websocket,
+  sse,
+  socketIo,
+  redis,
+  createRedisAdapter,
 } = require('./plugins');
 
 const content = require('./core/content');
@@ -78,8 +101,67 @@ module.exports = {
   getAppContext,
   getDb,
   hasDb,
+  getShutdownManager,
+  hasShutdownManager,
+  getServiceRegistry,
+  hasServiceRegistry,
   resetAppContext,
   setAppContext,
+
+  // Services Layer
+  createServiceRegistry,
+  defineService,
+  service: defineService,
+  ServiceRegistry,
+  memoize: require('./src/services').memoize,
+  parseTtlMs: require('./src/services').parseTtlMs,
+  stableCacheKey: require('./src/services').stableCacheKey,
+  sanitizeInput: require('./src/services').sanitizeInput,
+  maskSensitiveData: require('./src/services').maskSensitiveData,
+  discoverServices: require('./src/services').discoverServices,
+  filePathToServiceName: require('./src/services').filePathToServiceName,
+  toCamelCase: require('./src/services').toCamelCase,
+  createAuthServices: require('./src/services').createAuthServices,
+  createMailServices: require('./src/services').createMailServices,
+  createMediaServices: require('./src/services').createMediaServices,
+  createSystemServices: require('./src/services').createSystemServices,
+  createExchangeServices: require('./src/services').createExchangeServices,
+  validateServiceInput: require('./src/services').validateServiceInput,
+  executeService: require('./src/services').executeService,
+
+  // Shutdown & Lifecycle
+  ShutdownManager,
+  NodeHttpAdapter,
+
+  // HTTP Response Compression
+  compression,
+  createCompressionMiddleware: compression.createCompressionMiddleware,
+
+  // Exceptions & Error Handling
+  errors,
+  WebspressoError: errors.WebspressoError,
+  HttpError: errors.HttpError,
+  BadRequestError: errors.BadRequestError,
+  UnauthorizedError: errors.UnauthorizedError,
+  ForbiddenError: errors.ForbiddenError,
+  NotFoundError: errors.NotFoundError,
+  MethodNotAllowedError: errors.MethodNotAllowedError,
+  ConflictError: errors.ConflictError,
+  PayloadTooLargeError: errors.PayloadTooLargeError,
+  UnsupportedMediaTypeError: errors.UnsupportedMediaTypeError,
+  UnprocessableEntityError: errors.UnprocessableEntityError,
+  TooManyRequestsError: errors.TooManyRequestsError,
+  ValidationError: errors.ValidationError,
+  ConfigurationError: errors.ConfigurationError,
+  PluginError: errors.PluginError,
+  SecurityError: errors.SecurityError,
+  RequestError: errors.RequestError,
+  RequestAbortedError: errors.RequestAbortedError,
+  RouterError: errors.RouterError,
+  RouteNotFoundError: errors.RouteNotFoundError,
+  RouteGenerationError: errors.RouteGenerationError,
+  normalizeError: errors.normalizeError,
+  toErrorResponseObject: errors.toErrorResponseObject,
   
   // Router utilities (for advanced use)
   mountPages,
@@ -97,6 +179,11 @@ module.exports = {
   // Template helpers
   createHelpers,
   utils,
+
+  // SSR Streaming
+  ssr: require('./core/ssr'),
+  renderStream: require('./core/ssr').renderStream,
+  createHtmlStream: require('./core/ssr').createHtmlStream,
   
   // Asset management
   AssetManager,
@@ -135,7 +222,23 @@ module.exports = {
   rateLimitPlugin,
   contentPlugin,
   csrfPlugin,
+  corsPlugin,
+  emailPlugin,
+  basicAuthPlugin,
+  realtimePlugin,
+  realtime,
+  createRealtime,
+  websocket,
+  sse,
+  socketIo,
+  redis,
+  createRedisAdapter,
+  queuePlugin: require('./plugins/queue'),
+  queue: require('./core/queue'),
+  createQueueManager: require('./core/queue').createQueueManager,
+  QueueManager: require('./core/queue').QueueManager,
 
   // Schema-driven CMS core (framework-agnostic)
   content,
 };
+

package/package.json

@@ -1,14 +1,34 @@
 {
   "name": "webspresso",
-  "version": "0.0.89",
+  "version": "0.0.91",
   "description": "Minimal, production-ready SSR framework for Node.js with file-based routing, Nunjucks templating, built-in i18n, and CLI tooling",
   "main": "index.js",
   "types": "index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "default": "./index.js"
+    },
+    "./errors": {
+      "types": "./index.d.ts",
+      "default": "./core/errors/index.js"
+    },
+    "./plugins": "./plugins/index.js",
+    "./plugins/*": "./plugins/*",
+    "./realtime": "./core/realtime/index.js",
+    "./core/*": "./core/*",
+    "./src/*": "./src/*",
+    "./views/*": "./views/*",
+    "./templates/*": "./templates/*",
+    "./package.json": "./package.json"
+  },
   "bin": {
     "webspresso": "./bin/webspresso.js"
   },
   "scripts": {
     "test": "vitest run",
+    "test:security": "vitest run tests/security/",
+    "security": "npm run test:security && npm audit",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "test:e2e": "playwright test",
@@ -62,7 +82,7 @@
     "csv-parse": "^5.6.0",
     "dayjs": "^1.11.19",
     "exceljs": "^4.4.0",
-    "express": "^4.18.2",
+    "express": "^5.2.1",
     "express-session": "^1.18.0",
     "helmet": "^7.2.0",
     "inquirer": "^8.2.6",

package/plugins/admin-panel/api.js

@@ -384,6 +384,9 @@ function isColumnSortable(name, meta, model) {
 
       // Apply filters
       for (const [colName, filter] of Object.entries(filterParams)) {
+        if (!model.columns.has(colName) || !filter || typeof filter !== 'object') {
+          continue;
+        }
         const colMeta = model.columns.get(colName);
         const colType = colMeta?.type || 'string';
         const op = filter.op || (colType === 'boolean' ? 'eq' : 'contains');
@@ -568,6 +571,32 @@ function isColumnSortable(name, meta, model) {
     }
   }
 
+  /** Extract structured field errors from Zod, ORM or database validation exceptions */
+  function extractValidationErrors(error) {
+    if (!error) return null;
+    const fields = {};
+    if (error.errors && typeof error.errors === 'object') {
+      if (Array.isArray(error.errors)) {
+        for (const item of error.errors) {
+          if (item.path && item.message) {
+            const key = Array.isArray(item.path) ? item.path.join('.') : String(item.path);
+            fields[key] = item.message;
+          }
+        }
+      } else {
+        Object.assign(fields, error.errors);
+      }
+    } else if (error.issues && Array.isArray(error.issues)) {
+      for (const issue of error.issues) {
+        const key = issue.path && issue.path.length > 0 ? issue.path.join('.') : 'root';
+        fields[key] = issue.message;
+      }
+    } else if (error.fields && typeof error.fields === 'object') {
+      Object.assign(fields, error.fields);
+    }
+    return Object.keys(fields).length > 0 ? fields : null;
+  }
+
   /**
    * Create record
    */
@@ -588,7 +617,8 @@ function isColumnSortable(name, meta, model) {
           const value = req.body[colName];
           if (isRichTextEmpty(value)) {
             return res.status(400).json({ 
-              error: `Field "${colName}" is required` 
+              error: `Field "${colName}" is required`,
+              fields: { [colName]: `Field "${colName}" is required` },
             });
           }
         }
@@ -599,7 +629,8 @@ function isColumnSortable(name, meta, model) {
 
       res.status(201).json({ data: sanitizeForOutput(record, model) });
     } catch (error) {
-      res.status(400).json({ error: error.message });
+      const fields = extractValidationErrors(error);
+      res.status(400).json({ error: error.message, ...(fields ? { fields } : {}) });
     }
   }
 
@@ -623,7 +654,8 @@ function isColumnSortable(name, meta, model) {
           const value = req.body[colName];
           if (isRichTextEmpty(value)) {
             return res.status(400).json({ 
-              error: `Field "${colName}" is required` 
+              error: `Field "${colName}" is required`,
+              fields: { [colName]: `Field "${colName}" is required` },
             });
           }
         }
@@ -638,7 +670,8 @@ function isColumnSortable(name, meta, model) {
 
       res.json({ data: sanitizeForOutput(record, model) });
     } catch (error) {
-      res.status(400).json({ error: error.message });
+      const fields = extractValidationErrors(error);
+      res.status(400).json({ error: error.message, ...(fields ? { fields } : {}) });
     }
   }
 

package/plugins/admin-panel/app.js

@@ -171,6 +171,16 @@ var routes = {
       return ProfilePage;
     }
   },
+  '/admins': {
+    onmatch: async () => {
+      const isAuth = await checkAuth();
+      if (!isAuth) {
+        redirectToLogin();
+        return;
+      }
+      return AdminUsersPage;
+    }
+  },
   '/users/sessions': {
     onmatch: async () => {
       if (!(await guardUserManagementRoutes())) return;
@@ -237,36 +247,76 @@ function wrapCustomPageWithLayout(page, rawComp) {
 
   return {
     oninit: function(vnode) {
-      vnode.state.instance = typeof rawComp === 'function' ? rawComp.call(this, vnode) : rawComp;
-      if (vnode.state.instance && typeof vnode.state.instance.oninit === 'function') {
-        return vnode.state.instance.oninit.call(this, vnode);
+      try {
+        vnode.state.instance = typeof rawComp === 'function' ? rawComp.call(this, vnode) : rawComp;
+        if (vnode.state.instance && typeof vnode.state.instance.oninit === 'function') {
+          return vnode.state.instance.oninit.call(this, vnode);
+        }
+      } catch (err) {
+        console.error('[Admin Panel] Error in oninit for custom page "' + page.id + '":', err);
+        vnode.state.renderError = err;
       }
     },
     oncreate: function(vnode) {
-      const comp = vnode.state.instance || rawComp;
-      if (comp && typeof comp.oncreate === 'function') return comp.oncreate.call(this, vnode);
+      try {
+        const comp = vnode.state.instance || rawComp;
+        if (comp && typeof comp.oncreate === 'function') return comp.oncreate.call(this, vnode);
+      } catch (err) {
+        console.error('[Admin Panel] Error in oncreate for custom page "' + page.id + '":', err);
+      }
     },
     onupdate: function(vnode) {
-      const comp = vnode.state.instance || rawComp;
-      if (comp && typeof comp.onupdate === 'function') return comp.onupdate.call(this, vnode);
+      try {
+        const comp = vnode.state.instance || rawComp;
+        if (comp && typeof comp.onupdate === 'function') return comp.onupdate.call(this, vnode);
+      } catch (err) {
+        console.error('[Admin Panel] Error in onupdate for custom page "' + page.id + '":', err);
+      }
     },
     onbeforeremove: function(vnode) {
-      const comp = vnode.state.instance || rawComp;
-      if (comp && typeof comp.onbeforeremove === 'function') return comp.onbeforeremove.call(this, vnode);
+      try {
+        const comp = vnode.state.instance || rawComp;
+        if (comp && typeof comp.onbeforeremove === 'function') return comp.onbeforeremove.call(this, vnode);
+      } catch (err) {
+        console.error('[Admin Panel] Error in onbeforeremove for custom page "' + page.id + '":', err);
+      }
     },
     onremove: function(vnode) {
-      const comp = vnode.state.instance || rawComp;
-      if (comp && typeof comp.onremove === 'function') return comp.onremove.call(this, vnode);
+      try {
+        const comp = vnode.state.instance || rawComp;
+        if (comp && typeof comp.onremove === 'function') return comp.onremove.call(this, vnode);
+      } catch (err) {
+        console.error('[Admin Panel] Error in onremove for custom page "' + page.id + '":', err);
+      }
     },
     view: function(vnode) {
+      if (vnode.state.renderError) {
+        var err = vnode.state.renderError;
+        var breadcrumbs = [{ label: page.title, href: page.path }];
+        return m(Layout, [
+          m(Breadcrumb, { items: breadcrumbs }),
+          m('.p-6.bg-red-50.border.border-red-200.rounded-xl', [
+            m('h3.text-lg.font-semibold.text-red-800', 'Sayfa Yüklenirken Hata Oluştu'),
+            m('p.text-sm.text-red-600.mt-1', err.message || String(err)),
+          ])
+        ]);
+      }
       const comp = vnode.state.instance || rawComp;
       var content;
-      if (comp && typeof comp.view === 'function') {
-        content = comp.view.call(this, vnode);
-      } else if (typeof comp === 'function') {
-        content = comp.call(this, vnode);
-      } else {
-        content = comp;
+      try {
+        if (comp && typeof comp.view === 'function') {
+          content = comp.view.call(this, vnode);
+        } else if (typeof comp === 'function') {
+          content = comp.call(this, vnode);
+        } else {
+          content = comp;
+        }
+      } catch (err) {
+        console.error('[Admin Panel] Error rendering custom page "' + page.id + '":', err);
+        content = m('.p-6.bg-red-50.border.border-red-200.rounded-xl', [
+          m('h3.text-lg.font-semibold.text-red-800', 'Sayfa Çizilirken Hata Oluştu'),
+          m('p.text-sm.text-red-600.mt-1', err.message || String(err)),
+        ]);
       }
       if (content && (content.tag === Layout || (content.tag && content.tag.name === 'Layout'))) {
         return content;

package/plugins/admin-panel/client/parts/01-state-api-breadcrumb.js

@@ -18,7 +18,10 @@ const api = {
       if (response.status === 401 && path.indexOf('/auth/') !== 0) {
         redirectToLogin();
       }
-      throw new Error(error.error || 'Request failed');
+      const err = new Error(error.error || 'Request failed');
+      if (error.fields) err.fields = error.fields;
+      err.response = error;
+      throw err;
     }
     
     return response.json();

package/plugins/admin-panel/client/parts/03-pagination-intro.js

@@ -16,52 +16,59 @@ const Pagination = {
       pages.push(i);
     }
     
-    return m('.flex.items-center.justify-between.px-4.py-3.bg-white dark:bg-slate-800.border-t', [
-      m('.text-sm.text-gray-700', [
+    return m('.flex.flex-col.sm:flex-row.items-center.justify-between.gap-3.px-4.py-3.bg-white.dark:bg-slate-800.border-t.border-gray-200.dark:border-slate-700', [
+      m('.text-xs.sm:text-sm.text-gray-600.dark:text-slate-400.text-center.sm:text-left', [
         'Showing ',
-        m('span.font-medium', ((page - 1) * perPage) + 1),
+        m('span.font-semibold.text-gray-900.dark:text-slate-200', ((page - 1) * perPage) + 1),
         ' to ',
-        m('span.font-medium', Math.min(page * perPage, total)),
+        m('span.font-semibold.text-gray-900.dark:text-slate-200', Math.min(page * perPage, total)),
         ' of ',
-        m('span.font-medium', total),
+        m('span.font-semibold.text-gray-900.dark:text-slate-200', total),
         ' results',
       ]),
-      m('nav.flex.items-center.space-x-1', [
+      m('nav.flex.items-center.gap-1', [
         // Previous button
-        m('button.px-3.py-1.rounded.border.text-sm', {
+        m('button.px-3.py-1.5.rounded-lg.border.border-gray-200.dark:border-slate-600.text-xs.sm:text-sm.font-medium.transition-colors', {
           disabled: page <= 1,
-          class: page <= 1 ? 'text-gray-300 cursor-not-allowed' : 'text-gray-700 hover:bg-gray-100 dark:hover:bg-slate-700 dark:hover:bg-slate-700',
+          class: page <= 1 
+            ? 'text-gray-300 dark:text-slate-600 cursor-not-allowed bg-gray-50 dark:bg-slate-900/50' 
+            : 'text-gray-700 dark:text-slate-200 hover:bg-gray-100 dark:hover:bg-slate-700 bg-white dark:bg-slate-800',
           onclick: () => page > 1 && onPageChange(page - 1),
         }, '← Prev'),
+
+        // Mobile page indicator
+        m('span.sm:hidden.px-2.text-xs.font-medium.text-gray-600.dark:text-slate-400', `${page} / ${totalPages}`),
         
-        // Page numbers
+        // Page numbers (desktop only)
         start > 1 ? [
-          m('button.px-3.py-1.rounded.text-sm.text-gray-700 dark:text-slate-300.hover:bg-gray-100 dark:hover:bg-slate-700 dark:hover:bg-slate-700', {
+          m('button.hidden.sm:inline-flex.px-3.py-1.5.rounded-lg.text-xs.sm:text-sm.font-medium.text-gray-700.dark:text-slate-300.hover:bg-gray-100.dark:hover:bg-slate-700.transition-colors', {
             onclick: () => onPageChange(1),
           }, '1'),
-          start > 2 ? m('span.px-2.text-gray-400', '...') : null,
+          start > 2 ? m('span.hidden.sm:inline-flex.px-1.text-gray-400.dark:text-slate-500', '...') : null,
         ] : null,
         
         ...pages.map(p => 
-          m('button.px-3.py-1.rounded.text-sm', {
+          m('button.hidden.sm:inline-flex.px-3.py-1.5.rounded-lg.text-xs.sm:text-sm.font-medium.transition-colors', {
             class: p === page 
-              ? 'bg-blue-600 text-white' 
-              : 'text-gray-700 hover:bg-gray-100 dark:hover:bg-slate-700 dark:hover:bg-slate-700',
+              ? 'bg-blue-600 dark:bg-blue-500 text-white shadow-sm' 
+              : 'text-gray-700 dark:text-slate-300 hover:bg-gray-100 dark:hover:bg-slate-700',
             onclick: () => onPageChange(p),
           }, p)
         ),
         
         end < totalPages ? [
-          end < totalPages - 1 ? m('span.px-2.text-gray-400', '...') : null,
-          m('button.px-3.py-1.rounded.text-sm.text-gray-700 dark:text-slate-300.hover:bg-gray-100 dark:hover:bg-slate-700 dark:hover:bg-slate-700', {
+          end < totalPages - 1 ? m('span.hidden.sm:inline-flex.px-1.text-gray-400.dark:text-slate-500', '...') : null,
+          m('button.hidden.sm:inline-flex.px-3.py-1.5.rounded-lg.text-xs.sm:text-sm.font-medium.text-gray-700.dark:text-slate-300.hover:bg-gray-100.dark:hover:bg-slate-700.transition-colors', {
             onclick: () => onPageChange(totalPages),
           }, totalPages),
         ] : null,
         
         // Next button
-        m('button.px-3.py-1.rounded.border.text-sm', {
+        m('button.px-3.py-1.5.rounded-lg.border.border-gray-200.dark:border-slate-600.text-xs.sm:text-sm.font-medium.transition-colors', {
           disabled: page >= totalPages,
-          class: page >= totalPages ? 'text-gray-300 cursor-not-allowed' : 'text-gray-700 hover:bg-gray-100 dark:hover:bg-slate-700 dark:hover:bg-slate-700',
+          class: page >= totalPages 
+            ? 'text-gray-300 dark:text-slate-600 cursor-not-allowed bg-gray-50 dark:bg-slate-900/50' 
+            : 'text-gray-700 dark:text-slate-200 hover:bg-gray-100 dark:hover:bg-slate-700 bg-white dark:bg-slate-800',
           onclick: () => page < totalPages && onPageChange(page + 1),
         }, 'Next →'),
       ]),