fix: trash bin, boolean validation, download scheme, and dependency updates

- Wire elFinder trash bin per volume: assign unique trash dirs under
  uploads/.bitapps-fm-trash/{n}/ (writable path), set explicit volume id
  on each trash FileRoot so trashHash resolves correctly for restore
- Add custom BooleanRule class; remove conflicting sanitize:text from
  boolean fields in Settings and Permissions request validators
- Normalize AJAX URL scheme client-side to fix insecure-download warning
  behind SSL-terminating reverse proxies
- Wrap elfinder-editors.js in jQuery IIFE via Vite writeBundle plugin
- Upgrade frontend deps: React 19, antd 6, react-query 5, TypeScript 6,
  Vite 8, ESLint 10 (flat config)

Assisted-By: AI

Author: abdul-kaioum

.eslintignore

@@ -1,6 +1,3 @@
-[submodule "submodule/sources/elFinder"]
-	path = submodule/sources/elFinder
-	url = git@github.com:Bit-Apps-Pro/elFinder.git
 [submodule "submodule/sources/elFinder-Material-Theme"]
 	path = submodule/sources/elFinder-Material-Theme
 	url = git@github.com:RobiNN1/elFinder-Material-Theme.git

.eslintrc.js

@@ -234,7 +234,9 @@ public static function uploadBaseURL()
 
     public static function getTrashDir()
     {
-        return self::uploadBaseDir() . DIRECTORY_SEPARATOR . '.trash';
+        $uploadDir = wp_upload_dir();
+
+        return $uploadDir['basedir'] . DIRECTORY_SEPARATOR . '.bitapps-fm-trash';
     }
 
     /**

.gitmodules

@@ -92,20 +92,49 @@ public function getFinderOptions()
         $allVolumes         = $this->getFileRoots();
         $volumeCount        = \count($allVolumes);
         $invalidVolumeCount = 0;
+
+        $isTrashAllowed = Plugin::instance()->preferences()->isTrashAllowed();
+        $trashVolumes   = [];
+
         foreach ($allVolumes as $root) {
             if (!$root->isReadable()) {
                 $invalidVolumeCount++;
 
                 continue;
             }
 
+            if ($isTrashAllowed) {
+                // Each volume gets its own trash folder so deletions are isolated.
+                // Trash driver uses id 't'; Nth trash volume root hash = "t{N}_Lw"
+                // (base64('/') = 'Lw', the encoded root-relative path '/').
+                $trashSeq  = \count($trashVolumes) + 1;
+                $trashHash = 't' . $trashSeq . '_Lw';
+                $trashDir  = Config::getTrashDir() . DIRECTORY_SEPARATOR . $trashSeq;
+
+                $root->setTrashHash($trashHash);
+                $trashVolumes[] = $trashDir;
+            }
+
             $finderOptions->setRoot($root);
         }
 
         if ($volumeCount === $invalidVolumeCount) {
             throw new PreCommandException(esc_html__('There is no readable volume. Please select an readable folder from settings', 'file-manager'));
         }
 
+        foreach ($trashVolumes as $trashSeq => $trashDir) {
+            if (!is_dir($trashDir)) {
+                wp_mkdir_p($trashDir);
+            }
+
+            if (is_dir($trashDir)) {
+                $trashRoot = new FileRoot($trashDir, '', 'Trash', 'Trash');
+                // Explicitly set id so the volume hash is predictable: t{trashSeq}_Lw
+                $trashRoot->setOption('id', $trashSeq + 1);
+                $finderOptions->setRoot($trashRoot);
+            }
+        }
+
         return $finderOptions;
     }
 

backend/app/Config.php

@@ -6,6 +6,7 @@
     exit;
 }
 
+use BitApps\FM\Http\Rules\BooleanRule;
 use BitApps\FM\Http\Rules\ValidateCommandsRule;
 use BitApps\FM\Http\Rules\ValidateRolesRule;
 use BitApps\FM\Http\Rules\ValidateUsersRule;
@@ -23,7 +24,7 @@ public function authorize()
     public function rules()
     {
         return [
-            'do_not_use_for_admin' => ['sanitize:text', 'nullable','boolean'],
+            'do_not_use_for_admin' => ['nullable', BooleanRule::class],
             'fileType'             => ['nullable','array'],
             'file_size'            => ['sanitize:text', 'nullable','Integer'],
             'root_folder'          => ['sanitize:text', 'nullable', ValidPathRule::class],
@@ -36,7 +37,7 @@ public function rules()
             'by_role.*.path'       => ['nullable', ValidPathRule::class],
             'by_role.*.commands'   => ['nullable', ValidateCommandsRule::class],
             'guest.path'           => ['sanitize:text', 'nullable','string', ValidPathRule::class],
-            'guest.can_download'   => ['sanitize:text', 'nullable', 'boolean'],
+            'guest.can_download'   => ['nullable', BooleanRule::class],
         ];
     }
 }

backend/app/Http/Controllers/FileManagerController.php

@@ -6,6 +6,7 @@
     exit;
 }
 
+use BitApps\FM\Http\Rules\BooleanRule;
 use BitApps\FM\Http\Rules\ValidPathRule;
 use BitApps\FM\Http\Rules\ValidUIOptionRule;
 use BitApps\FM\Vendor\BitApps\WPKit\Http\Request\Request;
@@ -21,13 +22,13 @@ public function authorize()
     public function rules()
     {
         return [
-            'show_url_path'               => ['sanitize:text', 'nullable','boolean'],
-            'show_hidden_files'           => ['sanitize:text', 'nullable','boolean'],
-            'wp_media_sync'               => ['sanitize:text', 'nullable','boolean'],
-            'create_trash_files_folders'  => ['sanitize:text', 'nullable','boolean'],
-            'create_hidden_files_folders' => ['sanitize:text', 'nullable','boolean'],
-            'remember_last_dir'           => ['sanitize:text', 'nullable','boolean'],
-            'clear_history_on_reload'     => ['sanitize:text', 'nullable','boolean'],
+            'show_url_path'               => ['nullable', BooleanRule::class],
+            'show_hidden_files'           => ['nullable', BooleanRule::class],
+            'wp_media_sync'               => ['nullable', BooleanRule::class],
+            'create_trash_files_folders'  => ['nullable', BooleanRule::class],
+            'create_hidden_files_folders' => ['nullable', BooleanRule::class],
+            'remember_last_dir'           => ['nullable', BooleanRule::class],
+            'clear_history_on_reload'     => ['nullable', BooleanRule::class],
             'root_folder_name'            => ['sanitize:text', 'required','string'],
             'theme'                       => ['sanitize:text', 'required','string'],
             'language'                    => ['sanitize:text', 'required','string'],

backend/app/Http/Requests/Permissions/PermissionsUpdateRequest.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace BitApps\FM\Http\Rules;
+
+if (! \defined('ABSPATH')) {
+    exit;
+}
+
+use BitApps\FM\Vendor\BitApps\WPValidator\Rule;
+
+class BooleanRule extends Rule
+{
+    private $_message = 'The :attribute field must be true or false';
+
+    public function validate($value): bool
+    {
+        return \in_array($value, [true, false, 'true', 'false', '1', '0', 1, 0, 'on', 'off', 'yes', 'no'], true);
+    }
+
+    public function message()
+    {
+        return $this->_message;
+    }
+}

backend/app/Http/Requests/Settings/SettingsUpdateRequest.php

@@ -2,6 +2,8 @@
 
 namespace BitApps\FM\Providers\FileManager;
 
+use function BitApps\FM\Functions\fileSystemAdapter;
+
 use Exception;
 
 \defined('ABSPATH') || exit();
@@ -527,7 +529,7 @@ public function __construct($path, $url, $alias = null, $driver = 'LocalFileSyst
      */
     public function isReadable()
     {
-        return is_readable($this->_path);
+        return fileSystemAdapter()->is_readable($this->_path);
     }
 
     /**