webspresso 0.0.90 → 0.0.93

package/index.js

@@ -10,9 +10,21 @@ const {
   getAppContext,
   getDb,
   hasDb,
+  getShutdownManager,
+  hasShutdownManager,
+  getServiceRegistry,
+  hasServiceRegistry,
   resetAppContext,
   setAppContext,
 } = require('./src/app-context');
+const {
+  createServiceRegistry,
+  defineService,
+  ServiceRegistry,
+} = require('./src/services');
+const { ShutdownManager, NodeHttpAdapter } = require('./core/shutdown');
+const compression = require('./core/compression');
+const errors = require('./core/errors');
 const { 
   mountPages, 
   filePathToRoute, 
@@ -43,7 +55,7 @@ const {
 // ORM exports (lazy loaded)
 const orm = require('./core/orm');
 
-/** Application kernel (event bus, plugin shell, view resolver, flows). Use `kernel.createApp`; not the framework SSR `createApp`. */
+/** Standalone experimental application kernel (event bus, plugin shell, view resolver, flows). Distinct from framework SSR `createApp`. */
 const kernel = require('./core/kernel');
 
 // Built-in plugins
@@ -64,6 +76,20 @@ const {
   rateLimitPlugin,
   contentPlugin,
   csrfPlugin,
+  corsPlugin,
+  emailPlugin,
+  basicAuthPlugin,
+  realtimePlugin,
+  realtime,
+  createRealtime,
+  websocket,
+  sse,
+  socketIo,
+  redis,
+  createRedisAdapter,
+  mcpPlugin,
+  createMcpServer,
+  McpServer,
 } = require('./plugins');
 
 const content = require('./core/content');
@@ -78,8 +104,67 @@ module.exports = {
   getAppContext,
   getDb,
   hasDb,
+  getShutdownManager,
+  hasShutdownManager,
+  getServiceRegistry,
+  hasServiceRegistry,
   resetAppContext,
   setAppContext,
+
+  // Services Layer
+  createServiceRegistry,
+  defineService,
+  service: defineService,
+  ServiceRegistry,
+  memoize: require('./src/services').memoize,
+  parseTtlMs: require('./src/services').parseTtlMs,
+  stableCacheKey: require('./src/services').stableCacheKey,
+  sanitizeInput: require('./src/services').sanitizeInput,
+  maskSensitiveData: require('./src/services').maskSensitiveData,
+  discoverServices: require('./src/services').discoverServices,
+  filePathToServiceName: require('./src/services').filePathToServiceName,
+  toCamelCase: require('./src/services').toCamelCase,
+  createAuthServices: require('./src/services').createAuthServices,
+  createMailServices: require('./src/services').createMailServices,
+  createMediaServices: require('./src/services').createMediaServices,
+  createSystemServices: require('./src/services').createSystemServices,
+  createExchangeServices: require('./src/services').createExchangeServices,
+  validateServiceInput: require('./src/services').validateServiceInput,
+  executeService: require('./src/services').executeService,
+
+  // Shutdown & Lifecycle
+  ShutdownManager,
+  NodeHttpAdapter,
+
+  // HTTP Response Compression
+  compression,
+  createCompressionMiddleware: compression.createCompressionMiddleware,
+
+  // Exceptions & Error Handling
+  errors,
+  WebspressoError: errors.WebspressoError,
+  HttpError: errors.HttpError,
+  BadRequestError: errors.BadRequestError,
+  UnauthorizedError: errors.UnauthorizedError,
+  ForbiddenError: errors.ForbiddenError,
+  NotFoundError: errors.NotFoundError,
+  MethodNotAllowedError: errors.MethodNotAllowedError,
+  ConflictError: errors.ConflictError,
+  PayloadTooLargeError: errors.PayloadTooLargeError,
+  UnsupportedMediaTypeError: errors.UnsupportedMediaTypeError,
+  UnprocessableEntityError: errors.UnprocessableEntityError,
+  TooManyRequestsError: errors.TooManyRequestsError,
+  ValidationError: errors.ValidationError,
+  ConfigurationError: errors.ConfigurationError,
+  PluginError: errors.PluginError,
+  SecurityError: errors.SecurityError,
+  RequestError: errors.RequestError,
+  RequestAbortedError: errors.RequestAbortedError,
+  RouterError: errors.RouterError,
+  RouteNotFoundError: errors.RouteNotFoundError,
+  RouteGenerationError: errors.RouteGenerationError,
+  normalizeError: errors.normalizeError,
+  toErrorResponseObject: errors.toErrorResponseObject,
   
   // Router utilities (for advanced use)
   mountPages,
@@ -97,6 +182,11 @@ module.exports = {
   // Template helpers
   createHelpers,
   utils,
+
+  // SSR Streaming
+  ssr: require('./core/ssr'),
+  renderStream: require('./core/ssr').renderStream,
+  createHtmlStream: require('./core/ssr').createHtmlStream,
   
   // Asset management
   AssetManager,
@@ -135,7 +225,26 @@ module.exports = {
   rateLimitPlugin,
   contentPlugin,
   csrfPlugin,
+  corsPlugin,
+  emailPlugin,
+  basicAuthPlugin,
+  realtimePlugin,
+  realtime,
+  createRealtime,
+  websocket,
+  sse,
+  socketIo,
+  redis,
+  createRedisAdapter,
+  queuePlugin: require('./plugins/queue'),
+  queue: require('./core/queue'),
+  createQueueManager: require('./core/queue').createQueueManager,
+  QueueManager: require('./core/queue').QueueManager,
+  mcpPlugin,
+  createMcpServer,
+  McpServer,
 
   // Schema-driven CMS core (framework-agnostic)
   content,
 };
+

package/package.json

@@ -1,14 +1,34 @@
 {
   "name": "webspresso",
-  "version": "0.0.90",
+  "version": "0.0.93",
   "description": "Minimal, production-ready SSR framework for Node.js with file-based routing, Nunjucks templating, built-in i18n, and CLI tooling",
   "main": "index.js",
   "types": "index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "default": "./index.js"
+    },
+    "./errors": {
+      "types": "./index.d.ts",
+      "default": "./core/errors/index.js"
+    },
+    "./plugins": "./plugins/index.js",
+    "./plugins/*": "./plugins/*",
+    "./realtime": "./core/realtime/index.js",
+    "./core/*": "./core/*",
+    "./src/*": "./src/*",
+    "./views/*": "./views/*",
+    "./templates/*": "./templates/*",
+    "./package.json": "./package.json"
+  },
   "bin": {
     "webspresso": "./bin/webspresso.js"
   },
   "scripts": {
     "test": "vitest run",
+    "test:security": "vitest run tests/security/",
+    "security": "npm run test:security && npm audit",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
     "test:e2e": "playwright test",
@@ -22,6 +42,10 @@
     "bench:ci:local": "npm run bench:baseline && npm run bench:ci",
     "check:types": "tsc --project tests/ts-smoke/tsconfig.json",
     "rebuild:native": "npm rebuild better-sqlite3 bcrypt sharp",
+    "docs:dev": "docboot dev ./docs",
+    "docs:build": "docboot build ./docs",
+    "docs:serve": "docboot serve dist",
+    "docs:doctor": "docboot doctor ./docs",
     "release": "release-it"
   },
   "keywords": [
@@ -62,7 +86,7 @@
     "csv-parse": "^5.6.0",
     "dayjs": "^1.11.19",
     "exceljs": "^4.4.0",
-    "express": "^4.18.2",
+    "express": "^5.2.1",
     "express-session": "^1.18.0",
     "helmet": "^7.2.0",
     "inquirer": "^8.2.6",
@@ -114,6 +138,7 @@
     "@vitest/coverage-v8": "^3.0.0",
     "better-sqlite3": "^11.10.0",
     "chokidar": "^3.5.3",
+    "docboot": "^0.3.0",
     "dotenv": "^16.3.1",
     "express-rate-limit": "^8.4.1",
     "release-it": "^20.2.1",
@@ -129,5 +154,8 @@
     "tar": "^7.5.11",
     "undici": "^6.24.0",
     "uuid": "^11.1.1"
+  },
+  "allowScripts": {
+    "better-sqlite3@11.10.0": true
   }
 }

package/plugins/admin-panel/api.js

@@ -384,6 +384,9 @@ function isColumnSortable(name, meta, model) {
 
       // Apply filters
       for (const [colName, filter] of Object.entries(filterParams)) {
+        if (!model.columns.has(colName) || !filter || typeof filter !== 'object') {
+          continue;
+        }
         const colMeta = model.columns.get(colName);
         const colType = colMeta?.type || 'string';
         const op = filter.op || (colType === 'boolean' ? 'eq' : 'contains');
@@ -568,6 +571,32 @@ function isColumnSortable(name, meta, model) {
     }
   }
 
+  /** Extract structured field errors from Zod, ORM or database validation exceptions */
+  function extractValidationErrors(error) {
+    if (!error) return null;
+    const fields = {};
+    if (error.errors && typeof error.errors === 'object') {
+      if (Array.isArray(error.errors)) {
+        for (const item of error.errors) {
+          if (item.path && item.message) {
+            const key = Array.isArray(item.path) ? item.path.join('.') : String(item.path);
+            fields[key] = item.message;
+          }
+        }
+      } else {
+        Object.assign(fields, error.errors);
+      }
+    } else if (error.issues && Array.isArray(error.issues)) {
+      for (const issue of error.issues) {
+        const key = issue.path && issue.path.length > 0 ? issue.path.join('.') : 'root';
+        fields[key] = issue.message;
+      }
+    } else if (error.fields && typeof error.fields === 'object') {
+      Object.assign(fields, error.fields);
+    }
+    return Object.keys(fields).length > 0 ? fields : null;
+  }
+
   /**
    * Create record
    */
@@ -588,7 +617,8 @@ function isColumnSortable(name, meta, model) {
           const value = req.body[colName];
           if (isRichTextEmpty(value)) {
             return res.status(400).json({ 
-              error: `Field "${colName}" is required` 
+              error: `Field "${colName}" is required`,
+              fields: { [colName]: `Field "${colName}" is required` },
             });
           }
         }
@@ -599,7 +629,8 @@ function isColumnSortable(name, meta, model) {
 
       res.status(201).json({ data: sanitizeForOutput(record, model) });
     } catch (error) {
-      res.status(400).json({ error: error.message });
+      const fields = extractValidationErrors(error);
+      res.status(400).json({ error: error.message, ...(fields ? { fields } : {}) });
     }
   }
 
@@ -623,7 +654,8 @@ function isColumnSortable(name, meta, model) {
           const value = req.body[colName];
           if (isRichTextEmpty(value)) {
             return res.status(400).json({ 
-              error: `Field "${colName}" is required` 
+              error: `Field "${colName}" is required`,
+              fields: { [colName]: `Field "${colName}" is required` },
             });
           }
         }
@@ -638,7 +670,8 @@ function isColumnSortable(name, meta, model) {
 
       res.json({ data: sanitizeForOutput(record, model) });
     } catch (error) {
-      res.status(400).json({ error: error.message });
+      const fields = extractValidationErrors(error);
+      res.status(400).json({ error: error.message, ...(fields ? { fields } : {}) });
     }
   }
 

package/plugins/admin-panel/app.js

@@ -247,36 +247,76 @@ function wrapCustomPageWithLayout(page, rawComp) {
 
   return {
     oninit: function(vnode) {
-      vnode.state.instance = typeof rawComp === 'function' ? rawComp.call(this, vnode) : rawComp;
-      if (vnode.state.instance && typeof vnode.state.instance.oninit === 'function') {
-        return vnode.state.instance.oninit.call(this, vnode);
+      try {
+        vnode.state.instance = typeof rawComp === 'function' ? rawComp.call(this, vnode) : rawComp;
+        if (vnode.state.instance && typeof vnode.state.instance.oninit === 'function') {
+          return vnode.state.instance.oninit.call(this, vnode);
+        }
+      } catch (err) {
+        console.error('[Admin Panel] Error in oninit for custom page "' + page.id + '":', err);
+        vnode.state.renderError = err;
       }
     },
     oncreate: function(vnode) {
-      const comp = vnode.state.instance || rawComp;
-      if (comp && typeof comp.oncreate === 'function') return comp.oncreate.call(this, vnode);
+      try {
+        const comp = vnode.state.instance || rawComp;
+        if (comp && typeof comp.oncreate === 'function') return comp.oncreate.call(this, vnode);
+      } catch (err) {
+        console.error('[Admin Panel] Error in oncreate for custom page "' + page.id + '":', err);
+      }
     },
     onupdate: function(vnode) {
-      const comp = vnode.state.instance || rawComp;
-      if (comp && typeof comp.onupdate === 'function') return comp.onupdate.call(this, vnode);
+      try {
+        const comp = vnode.state.instance || rawComp;
+        if (comp && typeof comp.onupdate === 'function') return comp.onupdate.call(this, vnode);
+      } catch (err) {
+        console.error('[Admin Panel] Error in onupdate for custom page "' + page.id + '":', err);
+      }
     },
     onbeforeremove: function(vnode) {
-      const comp = vnode.state.instance || rawComp;
-      if (comp && typeof comp.onbeforeremove === 'function') return comp.onbeforeremove.call(this, vnode);
+      try {
+        const comp = vnode.state.instance || rawComp;
+        if (comp && typeof comp.onbeforeremove === 'function') return comp.onbeforeremove.call(this, vnode);
+      } catch (err) {
+        console.error('[Admin Panel] Error in onbeforeremove for custom page "' + page.id + '":', err);
+      }
     },
     onremove: function(vnode) {
-      const comp = vnode.state.instance || rawComp;
-      if (comp && typeof comp.onremove === 'function') return comp.onremove.call(this, vnode);
+      try {
+        const comp = vnode.state.instance || rawComp;
+        if (comp && typeof comp.onremove === 'function') return comp.onremove.call(this, vnode);
+      } catch (err) {
+        console.error('[Admin Panel] Error in onremove for custom page "' + page.id + '":', err);
+      }
     },
     view: function(vnode) {
+      if (vnode.state.renderError) {
+        var err = vnode.state.renderError;
+        var breadcrumbs = [{ label: page.title, href: page.path }];
+        return m(Layout, [
+          m(Breadcrumb, { items: breadcrumbs }),
+          m('.p-6.bg-red-50.border.border-red-200.rounded-xl', [
+            m('h3.text-lg.font-semibold.text-red-800', 'Sayfa Yüklenirken Hata Oluştu'),
+            m('p.text-sm.text-red-600.mt-1', err.message || String(err)),
+          ])
+        ]);
+      }
       const comp = vnode.state.instance || rawComp;
       var content;
-      if (comp && typeof comp.view === 'function') {
-        content = comp.view.call(this, vnode);
-      } else if (typeof comp === 'function') {
-        content = comp.call(this, vnode);
-      } else {
-        content = comp;
+      try {
+        if (comp && typeof comp.view === 'function') {
+          content = comp.view.call(this, vnode);
+        } else if (typeof comp === 'function') {
+          content = comp.call(this, vnode);
+        } else {
+          content = comp;
+        }
+      } catch (err) {
+        console.error('[Admin Panel] Error rendering custom page "' + page.id + '":', err);
+        content = m('.p-6.bg-red-50.border.border-red-200.rounded-xl', [
+          m('h3.text-lg.font-semibold.text-red-800', 'Sayfa Çizilirken Hata Oluştu'),
+          m('p.text-sm.text-red-600.mt-1', err.message || String(err)),
+        ]);
       }
       if (content && (content.tag === Layout || (content.tag && content.tag.name === 'Layout'))) {
         return content;

package/plugins/admin-panel/client/parts/01-state-api-breadcrumb.js

@@ -18,7 +18,10 @@ const api = {
       if (response.status === 401 && path.indexOf('/auth/') !== 0) {
         redirectToLogin();
       }
-      throw new Error(error.error || 'Request failed');
+      const err = new Error(error.error || 'Request failed');
+      if (error.fields) err.fields = error.fields;
+      err.response = error;
+      throw err;
     }
     
     return response.json();
@@ -56,10 +59,15 @@ async function downloadDataExchangeXlsx(modelName, payload) {
   const blob = await res.blob();
   var url = URL.createObjectURL(blob);
   var a = document.createElement('a');
+  a.style.display = 'none';
   a.href = url;
   a.download = modelName + '-export.xlsx';
+  document.body.appendChild(a);
   a.click();
-  URL.revokeObjectURL(url);
+  setTimeout(function () {
+    if (a.parentNode) a.parentNode.removeChild(a);
+    URL.revokeObjectURL(url);
+  }, 1000);
 }
 
 // Helper: Capitalize first letter of each word