webspresso 0.0.98 → 0.0.100

package/index.js

@@ -29,6 +29,8 @@ const {
   mountPages, 
   filePathToRoute, 
   extractMethodFromFilename,
+  isRouteGroupSegment,
+  stripRouteGroups,
   scanDirectory,
   loadI18n,
   createTranslator,
@@ -144,6 +146,8 @@ module.exports = {
   mountPages,
   filePathToRoute,
   extractMethodFromFilename,
+  isRouteGroupSegment,
+  stripRouteGroups,
   scanDirectory,
   loadI18n,
   createTranslator,
@@ -186,20 +190,56 @@ module.exports = {
   compileRouteTable,
   RouteTable,
   mountDiscoveredRoutes,
+  resolveMiddlewares: require('./src/routing/middleware-resolver').resolveMiddlewares,
 };
 
 // Define lazy getters for plugins and heavy core subsystems
 Object.defineProperties(module.exports, {
   ...Object.getOwnPropertyDescriptors(plugins),
 
+  // Cascading Middleware & Layouts
+  cascading: { get: () => require('./src/routing/cascading'), enumerable: true, configurable: true },
+
   // SSR Streaming
   ssr: { get: () => require('./core/ssr'), enumerable: true, configurable: true },
   renderStream: { get: () => require('./core/ssr').renderStream, enumerable: true, configurable: true },
   createHtmlStream: { get: () => require('./core/ssr').createHtmlStream, enumerable: true, configurable: true },
 
+  // Server-Sent Events (SSE) Streaming
+  sse: { get: () => require('./core/sse'), enumerable: true, configurable: true },
+  createSseStream: { get: () => require('./core/sse').createSseStream, enumerable: true, configurable: true },
+  ServerSentEventsStream: { get: () => require('./core/sse').ServerSentEventsStream, enumerable: true, configurable: true },
+
   /** Event bus / plugin shell / view resolver / flows (`kernel.createApp` is distinct from SSR `createApp`) */
   kernel: { get: () => require('./core/kernel'), enumerable: true, configurable: true },
 
+  // Authentication & OAuth
+  auth: { get: () => require('./core/auth'), enumerable: true, configurable: true },
+  createAuth: { get: () => require('./core/auth').createAuth, enumerable: true, configurable: true },
+  quickAuth: { get: () => require('./core/auth').quickAuth, enumerable: true, configurable: true },
+
+  // 2FA / TOTP (RFC 6238, RFC 4226, RFC 4648)
+  totp: { get: () => require('./core/auth/totp'), enumerable: true, configurable: true },
+  base32Encode: { get: () => require('./core/auth/totp').base32Encode, enumerable: true, configurable: true },
+  base32Decode: { get: () => require('./core/auth/totp').base32Decode, enumerable: true, configurable: true },
+  generateTotpSecret: { get: () => require('./core/auth/totp').generateTotpSecret, enumerable: true, configurable: true },
+  generateHotp: { get: () => require('./core/auth/totp').generateHotp, enumerable: true, configurable: true },
+  verifyHotp: { get: () => require('./core/auth/totp').verifyHotp, enumerable: true, configurable: true },
+  generateTotp: { get: () => require('./core/auth/totp').generateTotp, enumerable: true, configurable: true },
+  verifyTotp: { get: () => require('./core/auth/totp').verifyTotp, enumerable: true, configurable: true },
+  generateTotpUri: { get: () => require('./core/auth/totp').generateTotpUri, enumerable: true, configurable: true },
+  generateTotpQrSvg: { get: () => require('./core/auth/totp').generateTotpQrSvg, enumerable: true, configurable: true },
+  generateTotpQrDataUri: { get: () => require('./core/auth/totp').generateTotpQrDataUri, enumerable: true, configurable: true },
+  generateRecoveryCodes: { get: () => require('./core/auth/totp').generateRecoveryCodes, enumerable: true, configurable: true },
+  hashRecoveryCode: { get: () => require('./core/auth/totp').hashRecoveryCode, enumerable: true, configurable: true },
+  verifyRecoveryCode: { get: () => require('./core/auth/totp').verifyRecoveryCode, enumerable: true, configurable: true },
+  createTotpSetup: { get: () => require('./core/auth/totp').createTotpSetup, enumerable: true, configurable: true },
+  createQrMatrix: { get: () => require('./core/auth/totp').createQrMatrix, enumerable: true, configurable: true },
+  generateQrSvg: { get: () => require('./core/auth/qrcode').generateQrSvg, enumerable: true, configurable: true },
+  generateQrDataUri: { get: () => require('./core/auth/qrcode').generateQrDataUri, enumerable: true, configurable: true },
+  createAuthMiddleware: { get: () => require('./core/auth').createAuthMiddleware, enumerable: true, configurable: true },
+  setupAuthMiddleware: { get: () => require('./core/auth').setupAuthMiddleware, enumerable: true, configurable: true },
+
   // Validation
   z: { get: () => require('./core/validation').z, enumerable: true, configurable: true },
 
@@ -207,6 +247,10 @@ Object.defineProperties(module.exports, {
   queue: { get: () => require('./core/queue'), enumerable: true, configurable: true },
   createQueueManager: { get: () => require('./core/queue').createQueueManager, enumerable: true, configurable: true },
   QueueManager: { get: () => require('./core/queue').QueueManager, enumerable: true, configurable: true },
+  TaskScheduler: { get: () => require('./core/queue').TaskScheduler, enumerable: true, configurable: true },
+  CronExpression: { get: () => require('./core/queue').CronExpression, enumerable: true, configurable: true },
+  parseCron: { get: () => require('./core/queue').parseCron, enumerable: true, configurable: true },
+  isValidCron: { get: () => require('./core/queue').isValidCron, enumerable: true, configurable: true },
 
   // Schema-driven CMS core (framework-agnostic)
   content: { get: () => require('./core/content'), enumerable: true, configurable: true },
@@ -228,5 +272,9 @@ Object.defineProperties(module.exports, {
   createDevProfilerMiddleware: { get: () => require('./src/dev').createDevProfilerMiddleware, enumerable: true, configurable: true },
   generateTypes: { get: () => require('./src/dev/typegen').generateTypes, enumerable: true, configurable: true },
   typegen: { get: () => require('./src/dev/typegen'), enumerable: true, configurable: true },
+
+  // Webhooks plugin
+  webhooks: { get: () => require('./plugins/webhooks'), enumerable: true, configurable: true },
+  webhooksPlugin: { get: () => require('./plugins/webhooks').webhooksPlugin, enumerable: true, configurable: true },
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "webspresso",
-  "version": "0.0.98",
+  "version": "0.0.100",
   "description": "Minimal, production-ready SSR framework for Node.js with file-based routing, Nunjucks templating, built-in i18n, and CLI tooling",
   "main": "index.js",
   "types": "index.d.ts",
@@ -126,7 +126,7 @@
     "nodemailer": "^10.0.10",
     "nunjucks": "^3.2.4",
     "sanitize-html": "^2.17.7",
-    "sharp": "^0.35.4",
+    "sharp": "^0.35.5",
     "swup": "^4.8.3",
     "yaml": "^2.8.3",
     "zod": "^3.23.0",
@@ -167,7 +167,7 @@
     "@types/node": "^20.14.0",
     "@vitest/coverage-v8": "^4.1.11",
     "better-sqlite3": "^11.10.0",
-    "chokidar": "^3.5.3",
+    "chokidar": "^4.0.3",
     "docboot": "^0.3.0",
     "dotenv": "^16.3.1",
     "express-rate-limit": "^8.4.1",
@@ -181,9 +181,11 @@
     "node": ">=20.0.0"
   },
   "overrides": {
-    "basic-ftp": "^5.3.0",
+    "basic-ftp": "^6.2.1",
+    "chokidar": "^4.0.3",
+    "katex": "^0.18.2",
     "tar": "^7.5.11",
-    "undici": "^6.24.0",
+    "undici": "^6.28.1",
     "uuid": "^11.1.1",
     "js-yaml": "^5.4.2",
     "qs": "^6.16.0"

package/plugins/admin-panel/client/parts/05-rich-text-file-helpers.js

@@ -61,6 +61,33 @@ const RichTextField = {
                 onchange(content);
               }
             });
+
+            // Hook Quill image toolbar button to Media Library picker if available
+            try {
+              const toolbar = quill.getModule('toolbar');
+              if (toolbar && typeof window !== 'undefined') {
+                toolbar.addHandler('image', function() {
+                  if (typeof window.__openFileManagerPicker === 'function') {
+                    window.__openFileManagerPicker({
+                      accept: 'image/*',
+                      title: 'Insert Image (Media Library)',
+                      onSelect: function(pickedUrl) {
+                        const range = quill.getSelection(true) || { index: quill.getLength() };
+                        quill.insertEmbed(range.index, 'image', pickedUrl);
+                        quill.setSelection(range.index + 1);
+                      }
+                    });
+                  } else {
+                    const url = prompt('Image URL:');
+                    if (url) {
+                      const range = quill.getSelection(true) || { index: quill.getLength() };
+                      quill.insertEmbed(range.index, 'image', url);
+                      quill.setSelection(range.index + 1);
+                    }
+                  }
+                });
+              }
+            } catch (_) {}
           }
           
           editorEl._quill = quill;
@@ -134,9 +161,28 @@ function renderUploadedFilePreview(url, options) {
   var accept = options.accept;
   var readonly = options.readonly;
   var onRemove = options.onRemove;
+  var onSelectLibrary = options.onSelectLibrary;
   var label = options.label;
   if (!url) return null;
 
+  var actionsRow = !readonly ? m('div.flex.items-center.gap-3.flex-wrap', [
+    typeof window !== 'undefined' && window.__openFileManagerPicker && onSelectLibrary
+      ? m('button.text-indigo-600.dark:text-indigo-400.hover:text-indigo-800.dark:hover:text-indigo-300.text-xs.font-medium.flex.items-center.gap-1', {
+          type: 'button',
+          onclick: onSelectLibrary,
+        }, [
+          m('span', '📁'),
+          m('span', 'Change from Library')
+        ])
+      : null,
+    onRemove
+      ? m('button.text-red-600.dark:text-red-400.hover:text-red-800.dark:hover:text-red-300.text-xs.font-medium', {
+          type: 'button',
+          onclick: onRemove,
+        }, 'Remove')
+      : null,
+  ]) : null;
+
   if (shouldShowImagePreview(url, accept)) {
     return m('.mt-3.flex.flex-col.items-start.gap-2', [
       m('a.block', { href: url, target: '_blank', rel: 'noopener noreferrer' },
@@ -147,12 +193,7 @@ function renderUploadedFilePreview(url, options) {
         })
       ),
       m('p.text-xs.text-gray-500.dark:text-slate-400.break-all', url),
-      !readonly && onRemove
-        ? m('button.text-red-600.dark:text-red-400.hover:text-red-800.dark:hover:text-red-300.text-sm', {
-            type: 'button',
-            onclick: onRemove,
-          }, 'Remove')
-        : null,
+      actionsRow,
     ]);
   }
 
@@ -162,12 +203,7 @@ function renderUploadedFilePreview(url, options) {
       target: '_blank',
       rel: 'noopener noreferrer',
     }, url),
-    !readonly && onRemove
-      ? m('button.text-red-600.dark:text-red-400.hover:text-red-800.dark:hover:text-red-300.text-sm', {
-          type: 'button',
-          onclick: onRemove,
-        }, 'Remove')
-      : null,
+    actionsRow,
   ]);
 }
 
@@ -178,7 +214,7 @@ function revokeLocalPreview(state) {
   }
 }
 
-// File upload field (multipart POST to settings.uploadUrl; field name "file")
+// File upload field (supports local drag & drop, manual URL, and Media Library Picker)
 const FileUploadField = {
   oninit: function (vnode) {
     vnode.state.localPreview = null;
@@ -190,7 +226,7 @@ const FileUploadField = {
     const col = vnode.attrs.col;
     const readonly = vnode.attrs.readonly;
     if (readonly) return;
-    var cfg = window.__ADMIN_CONFIG__;
+    var cfg = (typeof window !== 'undefined' && window.__ADMIN_CONFIG__) ? window.__ADMIN_CONFIG__ : null;
     var uploadUrl = (cfg && cfg.settings && cfg.settings.uploadUrl) ? String(cfg.settings.uploadUrl) : '';
     if (!uploadUrl) return;
     const dropZoneId = 'drop-zone-' + col.name;
@@ -242,7 +278,7 @@ const FileUploadField = {
     const required = !col.nullable && !readonly;
     var uploadUrl = '';
     try {
-      var cfg2 = window.__ADMIN_CONFIG__;
+      var cfg2 = (typeof window !== 'undefined' && window.__ADMIN_CONFIG__) ? window.__ADMIN_CONFIG__ : null;
       uploadUrl = (cfg2 && cfg2.settings && cfg2.settings.uploadUrl) ? String(cfg2.settings.uploadUrl) : '';
     } catch (e) { uploadUrl = ''; }
     var maxSize = meta.maxSize || meta.maxBytes || (10 * 1024 * 1024);
@@ -253,6 +289,18 @@ const FileUploadField = {
       revokeLocalPreview(state);
       if (onChange) onChange('');
     };
+    var openLibraryPicker = function() {
+      if (typeof window !== 'undefined' && window.__openFileManagerPicker) {
+        window.__openFileManagerPicker({
+          accept: accept,
+          title: 'Choose from Media Library',
+          onSelect: function(pickedUrl) {
+            revokeLocalPreview(state);
+            if (onChange) onChange(pickedUrl);
+          }
+        });
+      }
+    };
     var error = vnode.attrs.error;
     var borderClass = error ? 'border-red-500 dark:border-red-500' : 'border-gray-300 dark:border-slate-600';
     if (readonly) {
@@ -270,7 +318,21 @@ const FileUploadField = {
           label,
           required ? m('span.text-red-500', ' *') : null,
         ]),
-        m('p.text-xs.text-amber-700.dark:text-amber-400.mb-2', 'Upload URL is not configured. Enter a public URL or path manually.'),
+        typeof window !== 'undefined' && window.__openFileManagerPicker
+          ? m('div.mb-2.flex.items-center.gap-2.flex-wrap', [
+              m('button.px-3.py-1.5.text-xs.font-semibold.bg-indigo-600.hover:bg-indigo-700.text-white.rounded-lg.flex.items-center.gap-1.5.shadow-sm.transition', {
+                type: 'button',
+                onclick: function(e) {
+                  e.preventDefault();
+                  openLibraryPicker();
+                }
+              }, [
+                m('span', '📁'),
+                m('span', 'Choose from Media Library')
+              ]),
+              m('span.text-xs.text-gray-400.dark:text-slate-500', 'or enter external URL:')
+            ])
+          : m('p.text-xs.text-amber-700.dark:text-amber-400.mb-2', 'Upload URL is not configured. Enter a public URL or path manually.'),
         m('input.w-full.px-3.py-2.border.rounded-md.bg-white.dark:bg-slate-900/70.text-gray-900.dark:text-slate-100.placeholder-gray-400.dark:placeholder-slate-500', {
           type: 'text',
           id: col.name,
@@ -281,7 +343,7 @@ const FileUploadField = {
           class: borderClass,
           oninput: function (e) { if (onChange) onChange(e.target.value); },
         }),
-        value ? renderUploadedFilePreview(value, { accept: accept, readonly: false, onRemove: clearValue, label: label }) : null,
+        value ? renderUploadedFilePreview(value, { accept: accept, readonly: false, onRemove: clearValue, onSelectLibrary: openLibraryPicker, label: label }) : null,
         error ? m('p.text-xs.text-red-600.dark:text-red-400.mt-1.font-medium', error) : (hint ? m('p.text-xs.text-gray-500.dark:text-slate-400.mt-1', hint) : null),
       ]);
     }
@@ -291,7 +353,7 @@ const FileUploadField = {
         required ? m('span.text-red-500', ' *') : null,
       ]),
       displayUrl
-        ? renderUploadedFilePreview(displayUrl, { accept: accept, readonly: false, onRemove: clearValue, label: label })
+        ? renderUploadedFilePreview(displayUrl, { accept: accept, readonly: false, onRemove: clearValue, onSelectLibrary: openLibraryPicker, label: label })
         : null,
       m('div#' + dropZoneId + '.border-2.border-dashed.rounded-lg.p-6.text-center.bg-gray-50.dark:bg-slate-900/40', { class: borderClass, style: 'cursor: pointer;' }, [
         m('input[type=file].hidden', {
@@ -313,17 +375,11 @@ const FileUploadField = {
                   onclick: function(e) {
                     e.preventDefault();
                     e.stopPropagation();
-                    window.__openFileManagerPicker({
-                      accept: accept,
-                      title: '📁 Ortam Kütüphanesinden Seç',
-                      onSelect: function(pickedUrl) {
-                        if (onChange) onChange(pickedUrl);
-                      }
-                    });
+                    openLibraryPicker();
                   }
                 }, [
                   m('span', '•'),
-                  m('span', 'Kütüphaneden Seç')
+                  m('span', 'Choose from Media Library')
                 ])
               : null
           ])
@@ -336,10 +392,167 @@ const FileUploadField = {
   },
 };
 
+// Multiple files upload field (supports drag-and-drop, multiple uploads, and Media Library Picker)
+const FilesUploadField = {
+  oninit: function(vnode) {
+    vnode.state.uploading = false;
+  },
+  oncreate: function(vnode) {
+    const col = vnode.attrs.col;
+    const readonly = vnode.attrs.readonly;
+    if (readonly) return;
+    const dropZoneId = 'drop-zone-multiple-' + col.name;
+    const dropZone = document.getElementById(dropZoneId);
+    if (!dropZone) return;
+    const meta = col.ui || {};
+    const onChange = vnode.attrs.onChange;
+    const state = vnode.state;
+
+    ['dragenter', 'dragover', 'dragleave', 'drop'].forEach(function(eventName) {
+      dropZone.addEventListener(eventName, function(e) {
+        e.preventDefault();
+        e.stopPropagation();
+      });
+    });
+    ['dragenter', 'dragover'].forEach(function(eventName) {
+      dropZone.addEventListener(eventName, function() {
+        dropZone.classList.add('border-blue-500', 'bg-blue-50', 'dark:bg-slate-800');
+      });
+    });
+    ['dragleave', 'drop'].forEach(function(eventName) {
+      dropZone.addEventListener(eventName, function() {
+        dropZone.classList.remove('border-blue-500', 'bg-blue-50', 'dark:bg-slate-800');
+      });
+    });
+    dropZone.addEventListener('drop', function(e) {
+      const files = e.dataTransfer.files;
+      if (files.length > 0) {
+        handleAdminMultipleFilesUpload(files, onChange, meta, state, vnode.attrs.value);
+      }
+    });
+    const fileInput = dropZone.querySelector('input[type=file]');
+    if (fileInput) {
+      fileInput.addEventListener('change', function(e) {
+        if (e.target.files.length > 0) {
+          handleAdminMultipleFilesUpload(e.target.files, onChange, meta, state, vnode.attrs.value);
+        }
+      });
+    }
+  },
+  view: function(vnode) {
+    const col = vnode.attrs.col;
+    const rawVal = vnode.attrs.value;
+    const urls = Array.isArray(rawVal) ? rawVal : (typeof rawVal === 'string' && rawVal ? (function() {
+      try {
+        const parsed = JSON.parse(rawVal);
+        return Array.isArray(parsed) ? parsed : [rawVal];
+      } catch (e) {
+        return [rawVal];
+      }
+    })() : []);
+    const onChange = vnode.attrs.onChange;
+    const readonly = vnode.attrs.readonly || false;
+    const state = vnode.state;
+    const meta = col.ui || {};
+    const label = meta.label || formatColumnLabel(col.name);
+    const hint = meta.hint || '';
+    const required = !col.nullable && !readonly;
+    const maxSize = meta.maxSize || meta.maxBytes || (10 * 1024 * 1024);
+    const accept = meta.accept || '*/*';
+    const dropZoneId = 'drop-zone-multiple-' + col.name;
+    const error = vnode.attrs.error;
+    const borderClass = error ? 'border-red-500 dark:border-red-500' : 'border-gray-300 dark:border-slate-600';
+
+    const openLibraryPicker = function() {
+      if (typeof window !== 'undefined' && window.__openFileManagerPicker) {
+        window.__openFileManagerPicker({
+          accept: accept,
+          title: 'Choose from Media Library',
+          onSelect: function(pickedUrl) {
+            if (onChange) {
+              onChange([...urls, pickedUrl]);
+            }
+          }
+        });
+      }
+    };
+
+    return m('.mb-4', [
+      m('label.block.text-sm.font-medium.text-gray-700.dark:text-slate-300.mb-1', [
+        label,
+        required ? m('span.text-red-500', ' *') : null,
+      ]),
+      // Thumbnails Grid
+      urls.length > 0 ? m('div.grid.grid-cols-2.sm:grid-cols-3.md:grid-cols-4.gap-3.mb-3', urls.map(function(url, idx) {
+        return m('div.relative.group.border.border-gray-200.dark:border-slate-700.rounded-lg.p-2.bg-white.dark:bg-slate-900.shadow-sm', [
+          shouldShowImagePreview(url, accept)
+            ? m('a.block', { href: url, target: '_blank', rel: 'noopener noreferrer' },
+                m('img.h-28.w-full.rounded.object-contain.bg-gray-50.dark:bg-slate-950', { src: url, alt: `${label} ${idx + 1}`, loading: 'lazy' })
+              )
+            : m('a.flex.items-center.justify-center.h-28.w-full.text-xs.text-indigo-600.dark:text-indigo-400.break-all.p-1.text-center', {
+                href: url, target: '_blank', rel: 'noopener noreferrer'
+              }, url.substring(url.lastIndexOf('/') + 1) || url),
+          !readonly && onChange ? m('button.absolute.top-1.right-1.bg-red-500.text-white.rounded-full.w-6.h-6.flex.items-center.justify-center.shadow-md.opacity-0.group-hover:opacity-100.hover:bg-red-700.transition-opacity', {
+            type: 'button',
+            title: 'Remove',
+            onclick: function() {
+              const updated = urls.filter(function(_, i) { return i !== idx; });
+              onChange(updated);
+            }
+          }, '✕') : null,
+        ]);
+      })) : null,
+
+      // Dropzone & Media Library Action
+      !readonly ? m('div#' + dropZoneId + '.border-2.border-dashed.rounded-lg.p-6.text-center.bg-gray-50.dark:bg-slate-900/40', {
+        class: borderClass,
+        style: 'cursor: pointer;'
+      }, [
+        m('input[type=file].hidden', {
+          id: 'file-input-multiple-' + col.name,
+          accept: accept,
+          multiple: true,
+          onchange: function(e) {
+            if (e.target.files.length > 0) {
+              handleAdminMultipleFilesUpload(e.target.files, onChange, meta, state, urls);
+            }
+          }
+        }),
+        state.uploading
+          ? m('p.text-indigo-600.dark:text-indigo-400.animate-pulse.text-sm.font-medium', 'Uploading files...')
+          : m('div', [
+              m('p.text-gray-600.dark:text-slate-400.mb-2.text-sm', 'Drag and drop files here, or'),
+              m('div.flex.items-center.justify-center.gap-3.flex-wrap', [
+                m('label.text-blue-600.hover:text-blue-800.dark:text-blue-400.cursor-pointer.font-medium.text-sm', {
+                  for: 'file-input-multiple-' + col.name
+                }, 'browse'),
+                typeof window !== 'undefined' && window.__openFileManagerPicker
+                  ? m('button.text-indigo-600.hover:text-indigo-800.dark:text-indigo-400.cursor-pointer.font-medium.flex.items-center.gap-1.text-sm', {
+                      type: 'button',
+                      onclick: function(e) {
+                        e.preventDefault();
+                        e.stopPropagation();
+                        openLibraryPicker();
+                      }
+                    }, [
+                      m('span', '•'),
+                      m('span', 'Add from Media Library')
+                    ])
+                  : null
+              ])
+            ])
+      ]) : null,
+      m('input[type=hidden]', { name: col.name, value: JSON.stringify(urls) }),
+      m('p.text-xs.text-gray-500.dark:text-slate-400.mt-1', 'Max ' + Math.round(maxSize / 1024 / 1024) + ' MB per file'),
+      error ? m('p.text-xs.text-red-600.dark:text-red-400.mt-1.font-medium', error) : (hint ? m('p.text-xs.text-gray-500.dark:text-slate-400.mt-1', hint) : null),
+    ]);
+  }
+};
+
 async function handleAdminFileUpload(file, onChange, meta, state) {
   var uploadUrl = '';
   try {
-    var cfg = window.__ADMIN_CONFIG__;
+    var cfg = (typeof window !== 'undefined' && window.__ADMIN_CONFIG__) ? window.__ADMIN_CONFIG__ : null;
     uploadUrl = (cfg && cfg.settings && cfg.settings.uploadUrl) ? String(cfg.settings.uploadUrl) : '';
   } catch (e) {}
   if (!uploadUrl) {
@@ -379,6 +592,52 @@ async function handleAdminFileUpload(file, onChange, meta, state) {
   }
 }
 
+async function handleAdminMultipleFilesUpload(files, onChange, meta, state, currentUrls = []) {
+  var uploadUrl = '';
+  try {
+    var cfg = (typeof window !== 'undefined' && window.__ADMIN_CONFIG__) ? window.__ADMIN_CONFIG__ : null;
+    uploadUrl = (cfg && cfg.settings && cfg.settings.uploadUrl) ? String(cfg.settings.uploadUrl) : '';
+  } catch (e) {}
+
+  if (!uploadUrl) {
+    notifyError('Upload URL is not configured.');
+    return;
+  }
+  var maxSize = meta.maxSize || meta.maxBytes || (10 * 1024 * 1024);
+  var baseUrls = Array.isArray(currentUrls) ? [...currentUrls] : (currentUrls ? [currentUrls] : []);
+
+  state.uploading = true;
+  if (typeof m !== 'undefined' && m.redraw) m.redraw();
+
+  try {
+    for (var i = 0; i < files.length; i++) {
+      var file = files[i];
+      if (file.size > maxSize) {
+        notifyWarning('File ' + file.name + ' too large.');
+        continue;
+      }
+      var fd = new FormData();
+      fd.append('file', file);
+      try {
+        var res = await fetch(uploadUrl, { method: 'POST', body: fd, credentials: 'include' });
+        var data = {};
+        try { data = await res.json(); } catch (_) { data = {}; }
+        if (res.ok && (data.url || data.publicUrl)) {
+          baseUrls.push(data.url || data.publicUrl);
+        } else {
+          notifyError('Upload failed: ' + (data.message || data.error || res.status));
+        }
+      } catch (err) {
+        notifyError('Upload failed for ' + file.name + ': ' + err.message);
+      }
+    }
+    if (onChange) onChange(baseUrls);
+  } finally {
+    state.uploading = false;
+    if (typeof m !== 'undefined' && m.redraw) m.redraw();
+  }
+}
+
 // Get appropriate renderer for a column type
 function getFieldRenderer(col, modelMeta) {
   // Check for custom field first
@@ -395,7 +654,7 @@ function getFieldRenderer(col, modelMeta) {
         });
       };
     }
-    if (col.customField.type === 'file-upload') {
+    if (col.customField.type === 'file-upload' || col.customField.type === 'file' || col.customField.type === 'image') {
       return (col, value, onChange, readonly, error) => {
         return m(FileUploadField, {
           col,
@@ -406,6 +665,17 @@ function getFieldRenderer(col, modelMeta) {
         });
       };
     }
+    if (col.customField.type === 'files' || col.customField.type === 'files-upload') {
+      return (col, value, onChange, readonly, error) => {
+        return m(FilesUploadField, {
+          col,
+          value: value || [],
+          onChange,
+          readonly: readonly || false,
+          error,
+        });
+      };
+    }
     if (col.customField.type === 'belongsTo') {
       return FieldRenderers.belongsTo;
     }
@@ -414,7 +684,7 @@ function getFieldRenderer(col, modelMeta) {
     }
 
     // Check registered custom field renderers in browser
-    const custom = window.__customFieldRenderers && window.__customFieldRenderers[col.customField.type];
+    const custom = (typeof window !== 'undefined' && window.__customFieldRenderers) ? window.__customFieldRenderers[col.customField.type] : null;
     if (custom) {
       return (col, value, onChange, readonly, error) => {
         try {
@@ -432,7 +702,7 @@ function getFieldRenderer(col, modelMeta) {
   }
 
   // Check schema type custom field renderers
-  if (col.type && window.__customFieldRenderers && window.__customFieldRenderers[col.type]) {
+  if (col.type && typeof window !== 'undefined' && window.__customFieldRenderers && window.__customFieldRenderers[col.type]) {
     const custom = window.__customFieldRenderers[col.type];
     return (col, value, onChange, readonly, error) => {
       try {
@@ -448,7 +718,7 @@ function getFieldRenderer(col, modelMeta) {
     };
   }
 
-  if (col.type === 'file') {
+  if (col.type === 'file' || col.type === 'image' || (col.ui && (col.ui.widget === 'file' || col.ui.widget === 'image'))) {
     return (col, value, onChange, readonly, error) => {
       return m(FileUploadField, {
         col,
@@ -460,11 +730,30 @@ function getFieldRenderer(col, modelMeta) {
     };
   }
 
+  if (col.type === 'files' || (col.ui && col.ui.widget === 'files')) {
+    return (col, value, onChange, readonly, error) => {
+      return m(FilesUploadField, {
+        col,
+        value: value || [],
+        onChange,
+        readonly: readonly || false,
+        error,
+      });
+    };
+  }
+
   // Auto-detect belongsTo relation for foreign key columns (ends with _id or has references)
   if (!col.primary && !col.autoIncrement && ((col.name && col.name.endsWith('_id')) || col.references)) {
     return FieldRenderers.belongsTo;
   }
 
+  // Attach file renderers to FieldRenderers object
+  FieldRenderers['file-upload'] = (col, value, onChange, readonly, error) => m(FileUploadField, { col, value: value || '', onChange, readonly: readonly || false, error });
+  FieldRenderers.file = FieldRenderers['file-upload'];
+  FieldRenderers.image = FieldRenderers['file-upload'];
+  FieldRenderers.files = (col, value, onChange, readonly, error) => m(FilesUploadField, { col, value: value || [], onChange, readonly: readonly || false, error });
+  FieldRenderers['files-upload'] = FieldRenderers.files;
+
   // Fallback to standard type renderers
   const typeMap = {
     string: 'string',
@@ -480,6 +769,9 @@ function getFieldRenderer(col, modelMeta) {
     enum: 'enum',
     json: 'json',
     array: 'array',
+    file: 'file',
+    files: 'files',
+    image: 'image',
     uuid: 'string',
     nanoid: 'string',
     belongsTo: 'belongsTo',

package/plugins/admin-panel/client/parts/08-record-list.js

@@ -134,6 +134,11 @@ async function executeRecordAction(action, record, modelName, modelMeta, onSucce
     if (msg) {
       notifySuccess(msg);
     }
+    const redirectUrl = res?.result?.redirect || res?.redirect;
+    if (redirectUrl) {
+      m.route.set(redirectUrl);
+      return;
+    }
     if (typeof onSuccess === 'function') {
       await onSuccess(res);
     } else if (typeof loadRecords === 'function' && state.pagination) {

package/plugins/admin-panel/client/verify-spa-parts.js

@@ -9,11 +9,13 @@
 const path = require('path');
 const { buildComponentsBody } = require(path.join(__dirname, 'load-parts.js'));
 
+const vm = require('vm');
 const body = buildComponentsBody();
 const checks = [
   ['has api helper', () => body.includes('const api =')],
   ['has Mithril globals', () => body.includes('window.__ADMIN_COMPONENTS__')],
   ['has reasonable size', () => body.length > 50_000],
+  ['valid JS syntax', () => { vm.compileFunction(body); return true; }],
 ];
 
 let failed = false;