Repository navigation
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
clbotdev
marked this pull request as ready for review
October 11, 2026 08:17
The web app now goes through session routes on the API for everything it does with files. The app's API key no longer leaves the API. API - Add session routes for uploads: POST /api/apps/:keyId/media/signature and POST /api/apps/:keyId/media/:mediaId/seal. They share the signature and seal logic with the public routes. - Add single and bulk delete. Bulk delete looks files up in one query, removes up to 10 at a time, and reports deleted and failed counts. - Add GET /api/apps/:keyId/summary and an "others" count per app. - Classify file kinds with one rule (media/kind.ts) and its SQL twin, so counts, filters and storage totals agree whatever the MIME type's case. Dashboard media responses now include `kind`. - Validate page (whole number from 1) and limit (1 to 100), and cap search at 200 characters. - Resolve the session once per request and rate-limit dashboard routes per user. - Test the dashboard routes against PGlite: sessions, ownership, summaries, filters, paging, signatures, sealing and bulk delete. Web - Upload with @medialit/uploader (resumable tus), then seal. Remove the web routes for upload, seal, delete and get-media; the browser calls the API through the /api proxy. - Rework the file preview dialog: real file preview, access details, and "Copy temporary link" for private files. - Add bulk select and delete with confirmation, a table view, and a sort menu. - Take file counts and kinds from the API, and show --endpoint in CLI instructions unless the API is the CLI's default endpoint. - Drop session checks in server actions that the API already makes, and remove a leftover debug log. - Align buttons, the account menu, loaders and file cards with the design system, and keep card metadata on one line.
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
@codelitdev/design-system.Validation
bun run lintbun run prettierbun run testbun --filter @medialit/api buildbun --filter @medialit/web buildbun run test:integration:stack(REST, MCP, and CLI suites passed locally using the shared Mailpit)