@band-app/server 0.16.8 → 0.16.9

package/dist/server/assets/{sankeyDiagram-TZEHDZUN-XynupQoy.js → sankeyDiagram-TZEHDZUN-uzNSHudY.js}

@@ -1,5 +1,5 @@
 var _a, _b, _c;
-import { ai as setDiagramTitle, aj as getDiagramTitle, Z as setAccDescription, _ as getAccDescription, a0 as setAccTitle, $ as getAccTitle, a1 as __name, a2 as getConfig2, ap as defaultConfig2, a3 as select, a$ as setupGraphViewbox, ao as clear, ab as common_default } from "./router-DqGeMR0F.js";
+import { ai as setDiagramTitle, aj as getDiagramTitle, Z as setAccDescription, _ as getAccDescription, a0 as setAccTitle, $ as getAccTitle, a1 as __name, a2 as getConfig2, ap as defaultConfig2, a3 as select, a$ as setupGraphViewbox, ao as clear, ab as common_default } from "./router-GhGSLKfP.js";
 import { o as ordinal } from "./ordinal-CxptdPJm.js";
 import "../server.js";
 import "node:async_hooks";

package/dist/server/assets/{sequenceDiagram-WL72ISMW-Cnkmy2xq.js → sequenceDiagram-WL72ISMW-C_wFtq8b.js}

@@ -1,7 +1,7 @@
 var _a;
-import { a as drawBackgroundRect, b as getTextObj, g as getNoteRect, d as drawRect, c as drawEmbeddedImage, e as drawImage } from "./chunk-TZMSLE5B-CbK3gIHb.js";
-import { a1 as __name, ae as setConfig2, a2 as getConfig2, a3 as select, a4 as log, a9 as distExports, a5 as configureSvgSize, a6 as assignWithDepth_default, ab as common_default, a0 as setAccTitle, Z as setAccDescription, ai as setDiagramTitle, $ as getAccTitle, _ as getAccDescription, aj as getDiagramTitle, ak as load, al as JSON_SCHEMA, ao as clear, a8 as sanitizeText, ah as utils_default, aR as hasKatex, aS as calculateMathMLDimensions, aT as parseFontSize, aU as ZERO_WIDTH_SPACE, aV as getUrl, aW as renderKatexSanitized, ax as getConfig } from "./router-DqGeMR0F.js";
-import { I as ImperativeState } from "./chunk-QZHKN3VN-CXCmBbbu.js";
+import { a as drawBackgroundRect, b as getTextObj, g as getNoteRect, d as drawRect, c as drawEmbeddedImage, e as drawImage } from "./chunk-TZMSLE5B-38NhX5at.js";
+import { a1 as __name, ae as setConfig2, a2 as getConfig2, a3 as select, a4 as log, a9 as distExports, a5 as configureSvgSize, a6 as assignWithDepth_default, ab as common_default, a0 as setAccTitle, Z as setAccDescription, ai as setDiagramTitle, $ as getAccTitle, _ as getAccDescription, aj as getDiagramTitle, ak as load, al as JSON_SCHEMA, ao as clear, a8 as sanitizeText, ah as utils_default, aR as hasKatex, aS as calculateMathMLDimensions, aT as parseFontSize, aU as ZERO_WIDTH_SPACE, aV as getUrl, aW as renderKatexSanitized, ax as getConfig } from "./router-GhGSLKfP.js";
+import { I as ImperativeState } from "./chunk-QZHKN3VN-BL6_-at8.js";
 import "../server.js";
 import "node:async_hooks";
 import "node:stream";

package/dist/server/assets/{square-terminal-D7AxF9nB.js → square-terminal-cghvb5Il.js}

@@ -1,4 +1,4 @@
-import { E as createLucideIcon } from "./router-DqGeMR0F.js";
+import { E as createLucideIcon } from "./router-GhGSLKfP.js";
 const __iconNode = [
   ["path", { d: "m7 11 2-2-2-2", key: "1lz0vl" }],
   ["path", { d: "M11 13h4", key: "1p7l4v" }],

package/dist/server/assets/{stateDiagram-FKZM4ZOC-Chk4nsf_.js → stateDiagram-FKZM4ZOC-B9MGwsuS.js}

@@ -1,9 +1,9 @@
-import { s as styles_default, a as stateDiagram_default, S as StateDB } from "./chunk-DI55MBZ5-q0pODS0a.js";
-import { a1 as __name, a2 as getConfig2, a3 as select, a4 as log, a5 as configureSvgSize, ab as common_default, aY as line, aZ as curveBasis, aV as getUrl, ah as utils_default } from "./router-DqGeMR0F.js";
-import { G as Graph } from "./graph-CGXsNa6T.js";
-import { l as layout } from "./layout-D6n2z2ff.js";
-import "./chunk-55IACEB6-jZmh1Z5I.js";
-import "./chunk-QN33PNHL-Dam5gy0m.js";
+import { s as styles_default, a as stateDiagram_default, S as StateDB } from "./chunk-DI55MBZ5-DuGkdvte.js";
+import { a1 as __name, a2 as getConfig2, a3 as select, a4 as log, a5 as configureSvgSize, ab as common_default, aY as line, aZ as curveBasis, aV as getUrl, ah as utils_default } from "./router-GhGSLKfP.js";
+import { G as Graph } from "./graph-gBFInK6H.js";
+import { l as layout } from "./layout-JjP5jdu6.js";
+import "./chunk-55IACEB6-BUgBPiJd.js";
+import "./chunk-QN33PNHL-BM_oi8-e.js";
 import "../server.js";
 import "node:async_hooks";
 import "node:stream";
@@ -15,8 +15,8 @@ import "node:stream/web";
 import "node:process";
 import "node:path";
 import "node:url";
-import "./_baseUniq-DB6mvOCI.js";
-import "./_basePickBy-BG2OhlJc.js";
+import "./_baseUniq-DeF47vVO.js";
+import "./_basePickBy-C7CNOUDi.js";
 var drawStartState = /* @__PURE__ */ __name((g) => g.append("circle").attr("class", "start-state").attr("r", getConfig2().state.sizeUnit).attr("cx", getConfig2().state.padding + getConfig2().state.sizeUnit).attr("cy", getConfig2().state.padding + getConfig2().state.sizeUnit), "drawStartState");
 var drawDivider = /* @__PURE__ */ __name((g) => g.append("line").style("stroke", "grey").style("stroke-dasharray", "3").attr("x1", getConfig2().state.textHeight).attr("class", "divider").attr("x2", getConfig2().state.textHeight * 2).attr("y1", 0).attr("y2", 0), "drawDivider");
 var drawSimpleState = /* @__PURE__ */ __name((g, stateDef) => {

package/dist/server/assets/{stateDiagram-v2-4FDKWEC3-DNIM2ODr.js → stateDiagram-v2-4FDKWEC3-CLHd8oUa.js}

@@ -1,7 +1,7 @@
-import { s as styles_default, b as stateRenderer_v3_unified_default, a as stateDiagram_default, S as StateDB } from "./chunk-DI55MBZ5-q0pODS0a.js";
-import { a1 as __name } from "./router-DqGeMR0F.js";
-import "./chunk-55IACEB6-jZmh1Z5I.js";
-import "./chunk-QN33PNHL-Dam5gy0m.js";
+import { s as styles_default, b as stateRenderer_v3_unified_default, a as stateDiagram_default, S as StateDB } from "./chunk-DI55MBZ5-DuGkdvte.js";
+import { a1 as __name } from "./router-GhGSLKfP.js";
+import "./chunk-55IACEB6-BUgBPiJd.js";
+import "./chunk-QN33PNHL-BM_oi8-e.js";
 import "../server.js";
 import "node:async_hooks";
 import "node:stream";

package/dist/server/assets/{timeline-definition-IT6M3QCI-Fz2nlxYj.js → timeline-definition-IT6M3QCI-CqKot5RT.js}

@@ -1,5 +1,5 @@
-import { a1 as __name, a2 as getConfig2, a4 as log, a3 as select, a$ as setupGraphViewbox, b0 as isDark, b1 as lighten, b2 as darken, at as __export, b3 as commonDb_exports, ao as clear } from "./router-DqGeMR0F.js";
-import { d as d3arc } from "./arc-DaVwrLrM.js";
+import { a1 as __name, a2 as getConfig2, a4 as log, a3 as select, a$ as setupGraphViewbox, b0 as isDark, b1 as lighten, b2 as darken, at as __export, b3 as commonDb_exports, ao as clear } from "./router-GhGSLKfP.js";
+import { d as d3arc } from "./arc-P5FY7IYH.js";
 import "../server.js";
 import "node:async_hooks";
 import "node:stream";

package/dist/server/assets/{treemap-GDKQZRPO-DNxd_7q0.js → treemap-GDKQZRPO-mMRojqRQ.js}

@@ -1,6 +1,6 @@
-import { h as createTreemapServices } from "./mermaid-parser.core-DRwka5gl.js";
-import { T } from "./mermaid-parser.core-DRwka5gl.js";
-import "./router-DqGeMR0F.js";
+import { h as createTreemapServices } from "./mermaid-parser.core-CKKZ1VFr.js";
+import { T } from "./mermaid-parser.core-CKKZ1VFr.js";
+import "./router-GhGSLKfP.js";
 import "../server.js";
 import "node:async_hooks";
 import "node:stream";
@@ -12,9 +12,9 @@ import "node:stream/web";
 import "node:process";
 import "node:path";
 import "node:url";
-import "./_baseUniq-DB6mvOCI.js";
-import "./_basePickBy-BG2OhlJc.js";
-import "./clone-CN5lfg2Z.js";
+import "./_baseUniq-DeF47vVO.js";
+import "./_basePickBy-C7CNOUDi.js";
+import "./clone-BXHuGM8i.js";
 import "path";
 import "os";
 import "net";

package/dist/server/assets/{workspace._workspaceId-KoR0msx0.js → workspace._workspaceId-DwsRTXCg.js}

@@ -1,6 +1,6 @@
 import { j as jsxRuntimeExports, r as reactExports, u as useRouterState, O as Outlet } from "../server.js";
-import { be as MessageSquare, bf as GitCompare, bg as FolderOpen, bh as Route, u as useIsDesktop, bi as useDashboardStore, i as isDesktop, f as useNavigate, t as trpc, bj as DesktopDragRegion, bk as ArrowLeft, bl as QuickOpenDialog, bm as SearchFilesDialog, bn as useDiffTarget } from "./router-DqGeMR0F.js";
-import { S as SquareTerminal } from "./square-terminal-D7AxF9nB.js";
+import { be as MessageSquare, bf as GitCompare, bg as FolderOpen, bh as Route, u as useIsDesktop, bi as useDashboardStore, i as isDesktop, f as useNavigate, t as trpc, bj as DesktopDragRegion, bk as ArrowLeft, bl as QuickOpenDialog, bm as SearchFilesDialog, bn as useDiffTarget } from "./router-GhGSLKfP.js";
+import { S as SquareTerminal } from "./square-terminal-cghvb5Il.js";
 import { S as SessionListContext, A as AgentSwitcherContext } from "./useSessionListContext-D_vX6E2e.js";
 import "node:async_hooks";
 import "node:stream";

package/dist/server/assets/{workspace._workspaceId.changes-BJoSmFXW.js → workspace._workspaceId.changes-C6vwSbUh.js}

@@ -1,5 +1,5 @@
 import { r as reactExports, j as jsxRuntimeExports } from "../server.js";
-import { e as Route, f as useNavigate, g as useDiffStatsContext, h as useFindInFileContext, D as DiffView } from "./router-DqGeMR0F.js";
+import { e as Route, f as useNavigate, g as useDiffStatsContext, h as useFindInFileContext, D as DiffView } from "./router-GhGSLKfP.js";
 import "node:async_hooks";
 import "node:stream";
 import "util";

package/dist/server/assets/{workspace._workspaceId.code._-D3Ifnqrr.js → workspace._workspaceId.code._-BJdg1-Gs.js}

@@ -1,5 +1,5 @@
 import { r as reactExports, j as jsxRuntimeExports } from "../server.js";
-import { l as Route, f as useNavigate, h as useFindInFileContext, k as CodeBrowserView } from "./router-DqGeMR0F.js";
+import { l as Route, f as useNavigate, h as useFindInFileContext, k as CodeBrowserView } from "./router-GhGSLKfP.js";
 import "node:async_hooks";
 import "node:stream";
 import "util";

package/dist/server/assets/{workspace._workspaceId.code.index-DZZZQ6sT.js → workspace._workspaceId.code.index-CE_CMD_I.js}

@@ -1,5 +1,5 @@
 import { r as reactExports, j as jsxRuntimeExports } from "../server.js";
-import { j as Route, f as useNavigate, h as useFindInFileContext, k as CodeBrowserView } from "./router-DqGeMR0F.js";
+import { j as Route, f as useNavigate, h as useFindInFileContext, k as CodeBrowserView } from "./router-GhGSLKfP.js";
 import "node:async_hooks";
 import "node:stream";
 import "util";

package/dist/server/assets/{workspace._workspaceId.index-D1ULJxZJ.js → workspace._workspaceId.index-BPhXMwl8.js}

@@ -1,5 +1,5 @@
 import { j as jsxRuntimeExports, r as reactExports } from "../server.js";
-import { R as Route, u as useIsDesktop, a as Navigate, i as isDesktop, b as useSettingsQuery, t as trpc, c as agentTypeSupportsSessionListing, C as ChatView } from "./router-DqGeMR0F.js";
+import { R as Route, u as useIsDesktop, a as Navigate, i as isDesktop, b as useSettingsQuery, t as trpc, c as agentTypeSupportsSessionListing, C as ChatView } from "./router-GhGSLKfP.js";
 import { u as useSessionListContext, a as useAgentSwitcherContext } from "./useSessionListContext-D_vX6E2e.js";
 import "node:async_hooks";
 import "node:stream";
@@ -35,6 +35,7 @@ function MobileChatContent({
   const [supportsSessionListing, setSupportsSessionListing] = reactExports.useState(false);
   const [initialSessionId, setInitialSessionId] = reactExports.useState(void 0);
   const [sessionQueryDone, setSessionQueryDone] = reactExports.useState(false);
+  const [sessionPaneKey, setSessionPaneKey] = reactExports.useState(0);
   const {
     showSessionList,
     setShowSessionList
@@ -88,8 +89,23 @@ function MobileChatContent({
       cancelled = true;
     };
   }, [workspaceId, chatId, chatKey, settings]);
+  const onSwitchSession = reactExports.useCallback(async (sessionId) => {
+    if (!chatId) return;
+    try {
+      await trpc.chats.setActiveSession.mutate({
+        workspaceId,
+        chatId,
+        sessionId: sessionId ?? void 0
+      });
+    } catch (err) {
+      console.error("[MobileChatContent] error persisting active session:", err);
+      return;
+    }
+    setInitialSessionId(sessionId);
+    setSessionPaneKey((k) => k + 1);
+  }, [workspaceId, chatId]);
   if (!chatId) return null;
-  return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex min-h-0 flex-1 flex-col", children: /* @__PURE__ */ jsxRuntimeExports.jsx(ChatView, { chatKey, workspaceId, chatId, workspaceName: workspaceId, supportsSessionListing, initialSessionId, sessionQueryDone, showSessionList, onShowSessionListChange: setShowSessionList, onStreamingChange: setTaskRunning, onNewSessionRef: newSessionRef, agentType, codingAgentId, onSwitchAgent: switchAgent }, chatKey) });
+  return /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "flex min-h-0 flex-1 flex-col", children: /* @__PURE__ */ jsxRuntimeExports.jsx(ChatView, { chatKey, workspaceId, chatId, workspaceName: workspaceId, supportsSessionListing, initialSessionId, sessionQueryDone, showSessionList, onShowSessionListChange: setShowSessionList, onStreamingChange: setTaskRunning, onNewSessionRef: newSessionRef, onSwitchSession, agentType, codingAgentId, onSwitchAgent: switchAgent }, `${chatKey}-${sessionPaneKey}`) });
 }
 export {
   WorkspaceIndex as component

package/dist/server/assets/{workspace._workspaceId.terminal-BaKW7ZGQ.js → workspace._workspaceId.terminal-BdVDaWNH.js}

@@ -1,5 +1,5 @@
 import { j as jsxRuntimeExports, r as reactExports } from "../server.js";
-import { d as Route } from "./router-DqGeMR0F.js";
+import { d as Route } from "./router-GhGSLKfP.js";
 import "node:async_hooks";
 import "node:stream";
 import "util";
@@ -10,7 +10,7 @@ import "node:stream/web";
 import "node:process";
 import "node:path";
 import "node:url";
-const DockviewTerminalContainer = reactExports.lazy(() => import("./DockviewTerminalContainer-Dl-H-7q5.js").then((m) => ({
+const DockviewTerminalContainer = reactExports.lazy(() => import("./DockviewTerminalContainer-BbMZgBJ8.js").then((m) => ({
   default: m.DockviewTerminalContainer
 })));
 function WorkspaceTerminal() {

package/dist/server/assets/{xychartDiagram-PRI3JC2R-DtoxEUbW.js → xychartDiagram-PRI3JC2R-j8PckQEj.js}

@@ -1,8 +1,8 @@
 var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
-import { Z as setAccDescription, _ as getAccDescription, aj as getDiagramTitle, ai as setDiagramTitle, $ as getAccTitle, a0 as setAccTitle, a1 as __name, a4 as log, az as selectSvgElement, a5 as configureSvgSize, ao as clear, ax as getConfig, a8 as sanitizeText, av as cleanAndMerge, aw as defaultConfig_default, aQ as getThemeVariables3, bY as computeDimensionOfText, aY as line } from "./router-DqGeMR0F.js";
+import { Z as setAccDescription, _ as getAccDescription, aj as getDiagramTitle, ai as setDiagramTitle, $ as getAccTitle, a0 as setAccTitle, a1 as __name, a4 as log, az as selectSvgElement, a5 as configureSvgSize, ao as clear, ax as getConfig, a8 as sanitizeText, av as cleanAndMerge, aw as defaultConfig_default, aQ as getThemeVariables3, bY as computeDimensionOfText, aY as line } from "./router-GhGSLKfP.js";
 import { i as initRange } from "./init-ZxktEp_H.js";
 import { o as ordinal } from "./ordinal-CxptdPJm.js";
-import { l as linear } from "./linear-BDP9KC1O.js";
+import { l as linear } from "./linear-BJgoq5J4.js";
 import "../server.js";
 import "node:async_hooks";
 import "node:stream";

package/dist/server/server.js

@@ -19380,7 +19380,7 @@ function getResponse() {
   return event.res;
 }
 async function getStartManifest(matchedRoutes) {
-  const { tsrStartManifest } = await import("./assets/_tanstack-start-manifest_v-2XlZMknZ.js");
+  const { tsrStartManifest } = await import("./assets/_tanstack-start-manifest_v-BNCQ-izx.js");
   const startManifest = tsrStartManifest();
   const rootRoute = startManifest.routes[rootRouteId] = startManifest.routes[rootRouteId] || {};
   rootRoute.assets = rootRoute.assets || [];
@@ -19956,7 +19956,7 @@ let entriesPromise;
 let baseManifestPromise;
 let cachedFinalManifestPromise;
 async function loadEntries() {
-  const routerEntry = await import("./assets/router-DqGeMR0F.js").then((n2) => n2.d8);
+  const routerEntry = await import("./assets/router-GhGSLKfP.js").then((n2) => n2.dp);
   const startEntry = await import("./assets/start-HYkvq4Ni.js");
   return { startEntry, routerEntry };
 }

package/dist/start-server.mjs

@@ -118092,6 +118092,19 @@ function getOrCreateDefaultChat(workspaceId) {
 
 // src/lib/queued-message-store.ts
 import { randomUUID } from "node:crypto";
+function toWireQueuedMessages(messages) {
+  return messages.map((m11) => ({
+    id: m11.id,
+    text: m11.text,
+    ...m11.files && m11.files.length > 0 && {
+      files: m11.files.map((f10) => ({
+        mediaType: f10.mediaType,
+        url: f10.url,
+        ...f10.filename !== void 0 && { filename: f10.filename }
+      }))
+    }
+  }));
+}
 var QUEUED_KEY = Symbol.for("band.queued-messages");
 var LISTENERS_KEY = Symbol.for("band.queued-messages.listeners");
 var g10 = globalThis;
@@ -118187,7 +118200,7 @@ function clearQueuedMessages(chatId) {
 // src/lib/task-runner.ts
 init_src();
 import { mkdirSync as mkdirSync4, readdirSync as readdirSync6 } from "node:fs";
-import { join as join16 } from "node:path";
+import { join as join15 } from "node:path";
 
 // src/lib/mime-types.ts
 import { extname } from "node:path";
@@ -118420,38 +118433,6 @@ function rowToRecord(row) {
   };
 }
 
-// src/lib/upload-utils.ts
-import { mkdir, writeFile } from "node:fs/promises";
-import { join as join15 } from "node:path";
-async function saveUploadedFilesDetailed(fileParts) {
-  const uploadDir = join15(bandHome(), "uploads");
-  await mkdir(uploadDir, { recursive: true });
-  const baseTimestamp = Date.now();
-  const saved = [];
-  for (let i2 = 0; i2 < fileParts.length; i2++) {
-    const part = fileParts[i2];
-    const dataUrlMatch = part.url.match(/^data:[^;]+;base64,(.+)$/);
-    if (!dataUrlMatch) continue;
-    const buffer = Buffer.from(dataUrlMatch[1], "base64");
-    const filename = part.filename || `file-${baseTimestamp}`;
-    const safeOriginal = filename.replace(/[^a-zA-Z0-9._-]/g, "_");
-    const storedName = `${baseTimestamp}-${i2}-${safeOriginal}`;
-    const filePath = join15(uploadDir, storedName);
-    await writeFile(filePath, buffer);
-    saved.push({
-      path: filePath,
-      storedName,
-      mediaType: part.mediaType,
-      originalName: part.filename
-    });
-  }
-  return saved;
-}
-async function saveUploadedFiles(fileParts) {
-  const saved = await saveUploadedFilesDetailed(fileParts);
-  return saved.map((f10) => f10.path);
-}
-
 // src/lib/workspace.ts
 function resolveWorkspace(workspaceId) {
   const state2 = loadState();
@@ -118718,7 +118699,7 @@ async function runTask(chatId, task) {
   updateChatStatus(chatId, "running");
   const working = upsertWorkspaceStatus(task.workspaceId, { status: "working" });
   emit({ kind: "update", status: working });
-  const sharedDir = join16(bandHome(), "shared", task.workspaceId);
+  const sharedDir = join15(bandHome(), "shared", task.workspaceId);
   mkdirSync4(sharedDir, { recursive: true });
   const INTERACTIVE_TOOLS = /* @__PURE__ */ new Set(["AskUserQuestion", "ExitPlanMode"]);
   let textPartId = "";
@@ -119030,17 +119011,17 @@ async function runTask(chatId, task) {
         let agentPrompt;
         let displayFiles;
         if (queued.files && queued.files.length > 0) {
-          const saved = await saveUploadedFilesDetailed(queued.files);
-          if (saved.length > 0) {
-            const fileList = saved.map((s6) => `- ${s6.path}`).join("\n");
+          const usableFiles = queued.files.filter((f10) => f10.path);
+          if (usableFiles.length > 0) {
+            const fileList = usableFiles.map((f10) => `- ${f10.path}`).join("\n");
             agentPrompt = `I'm sharing these files with you:
 ${fileList}
 
 ${queued.text}`;
-            displayFiles = saved.map((s6) => ({
-              mediaType: s6.mediaType,
-              url: `/api/uploads/${s6.storedName}`,
-              filename: s6.originalName
+            displayFiles = usableFiles.map((f10) => ({
+              mediaType: f10.mediaType,
+              url: f10.url,
+              filename: f10.filename
             }));
           }
         }
@@ -119229,7 +119210,7 @@ async function handleChatEvents(req, res, chatId) {
   });
   emit2(writer, {
     type: "queue-updated",
-    messages: getQueuedMessages(chatId),
+    messages: toWireQueuedMessages(getQueuedMessages(chatId)),
     eventId: nextSyntheticId--
   });
   if (resolvedSessionId) {
@@ -119270,7 +119251,7 @@ async function handleChatEvents(req, res, chatId) {
     if (qChatId !== chatId) return;
     queue.push({
       type: "queue-updated",
-      messages,
+      messages: toWireQueuedMessages(messages),
       eventId: nextSyntheticId--
     });
     notify2?.();
@@ -119532,6 +119513,40 @@ function chunkToChatEvent(chunk, _sessionId) {
 
 // src/api/chat-submit.ts
 init_src();
+
+// src/lib/upload-utils.ts
+import { mkdir, writeFile } from "node:fs/promises";
+import { join as join16 } from "node:path";
+async function saveUploadedFilesDetailed(fileParts) {
+  const uploadDir = join16(bandHome(), "uploads");
+  await mkdir(uploadDir, { recursive: true });
+  const baseTimestamp = Date.now();
+  const saved = [];
+  for (let i2 = 0; i2 < fileParts.length; i2++) {
+    const part = fileParts[i2];
+    const dataUrlMatch = part.url.match(/^data:[^;]+;base64,(.+)$/);
+    if (!dataUrlMatch) continue;
+    const buffer = Buffer.from(dataUrlMatch[1], "base64");
+    const filename = part.filename || `file-${baseTimestamp}`;
+    const safeOriginal = filename.replace(/[^a-zA-Z0-9._-]/g, "_");
+    const storedName = `${baseTimestamp}-${i2}-${safeOriginal}`;
+    const filePath = join16(uploadDir, storedName);
+    await writeFile(filePath, buffer);
+    saved.push({
+      path: filePath,
+      storedName,
+      mediaType: part.mediaType,
+      originalName: part.filename
+    });
+  }
+  return saved;
+}
+async function saveUploadedFiles(fileParts) {
+  const saved = await saveUploadedFilesDetailed(fileParts);
+  return saved.map((f10) => f10.path);
+}
+
+// src/api/chat-submit.ts
 var log13 = createLogger("chat-submit");
 function readBody(req) {
   return new Promise((resolve7, reject) => {
@@ -119565,15 +119580,22 @@ async function handleChatSubmit(req, res, chatId) {
   const resumeSessionId = sessionId ?? getChat(chatId)?.activeSessionId;
   let agentPrompt;
   let displayFiles;
+  let savedFiles = [];
   if (files && files.length > 0) {
-    const saved = await saveUploadedFilesDetailed(files);
-    if (saved.length > 0) {
-      const fileList = saved.map((s6) => `- ${s6.path}`).join("\n");
+    savedFiles = await saveUploadedFilesDetailed(files);
+    if (savedFiles.length !== files.length) {
+      log13.warn(
+        { chatId, submitted: files.length, saved: savedFiles.length },
+        "chat-submit: some file uploads were dropped (malformed data URL?)"
+      );
+    }
+    if (savedFiles.length > 0) {
+      const fileList = savedFiles.map((s6) => `- ${s6.path}`).join("\n");
       agentPrompt = `I'm sharing these files with you:
 ${fileList}
 
 ${text3}`;
-      displayFiles = saved.map((s6) => ({
+      displayFiles = savedFiles.map((s6) => ({
         mediaType: s6.mediaType,
         url: `/api/uploads/${s6.storedName}`,
         filename: s6.originalName
@@ -119599,7 +119621,14 @@ ${text3}`;
     if (err instanceof TaskConflictError) {
       pushQueuedMessage(chatId, {
         text: text3,
-        ...displayFiles && displayFiles.length > 0 && { files: displayFiles }
+        ...savedFiles.length > 0 && {
+          files: savedFiles.map((s6) => ({
+            mediaType: s6.mediaType,
+            url: `/api/uploads/${s6.storedName}`,
+            path: s6.path,
+            filename: s6.originalName
+          }))
+        }
       });
       log13.info({ chatId, workspaceId }, "chat-submit: task busy, message queued");
       sendJson(res, 200, { ok: true, queued: true });
@@ -136826,8 +136855,86 @@ var historyRouter = t2.router({
 var queuedFileSchema = external_exports.object({
   mediaType: external_exports.string(),
   url: external_exports.string(),
+  path: external_exports.string().optional(),
   filename: external_exports.string().optional()
 });
+function isPathWithinUploadDir(p6) {
+  const uploadDir = join23(bandHome(), "uploads");
+  const normalized = resolve5(p6);
+  if (normalized !== uploadDir && !normalized.startsWith(uploadDir + sep2)) {
+    return false;
+  }
+  try {
+    const canonicalUploadDir = realpathSync5(uploadDir);
+    const canonicalPath = realpathSync5(p6);
+    return canonicalPath === canonicalUploadDir || canonicalPath.startsWith(canonicalUploadDir + sep2);
+  } catch {
+    return true;
+  }
+}
+async function resolveQueuedFiles(chatId, files) {
+  if (!files || files.length === 0) return void 0;
+  const resolved = [];
+  const needsSave = [];
+  const needsSaveIdx = [];
+  for (let i2 = 0; i2 < files.length; i2++) {
+    const file = files[i2];
+    const uploadsUrlMatch = file.url.match(/^\/api\/uploads\/(.+)$/);
+    const derivedPath = file.path ?? (uploadsUrlMatch ? join23(bandHome(), "uploads", uploadsUrlMatch[1]) : void 0);
+    if (derivedPath) {
+      if (!isPathWithinUploadDir(derivedPath)) {
+        log28.warn(
+          { chatId, path: derivedPath, filename: file.filename },
+          "queue: dropping file with path outside uploads directory"
+        );
+        continue;
+      }
+      resolved.push({
+        mediaType: file.mediaType,
+        url: file.url,
+        path: derivedPath,
+        ...file.filename !== void 0 && { filename: file.filename }
+      });
+      continue;
+    }
+    if (file.url.startsWith("data:")) {
+      needsSave.push(file);
+      needsSaveIdx.push(resolved.length);
+      resolved.push({
+        mediaType: file.mediaType,
+        url: file.url,
+        path: "",
+        filename: file.filename
+      });
+      continue;
+    }
+    log28.warn(
+      { chatId, url: file.url, filename: file.filename },
+      "queue: dropping file with no path and non-data URL \u2014 cannot recover disk path"
+    );
+  }
+  if (needsSave.length > 0) {
+    const saved = await saveUploadedFilesDetailed(needsSave);
+    if (saved.length !== needsSave.length) {
+      log28.error(
+        { chatId, expected: needsSave.length, got: saved.length },
+        "queue: saveUploadedFilesDetailed returned unexpected count \u2014 dropping data-URL files (cannot map 1:1)"
+      );
+    } else {
+      for (let k4 = 0; k4 < saved.length; k4++) {
+        const target = needsSaveIdx[k4];
+        resolved[target] = {
+          mediaType: saved[k4].mediaType,
+          url: `/api/uploads/${saved[k4].storedName}`,
+          path: saved[k4].path,
+          ...saved[k4].originalName !== void 0 && { filename: saved[k4].originalName }
+        };
+      }
+    }
+  }
+  const finalized = resolved.filter((f10) => f10.path !== "");
+  return finalized.length > 0 ? finalized : void 0;
+}
 var queueRouter = t2.router({
   push: publicProcedure.input(
     external_exports.object({
@@ -136836,10 +136943,24 @@ var queueRouter = t2.router({
       text: external_exports.string(),
       files: external_exports.array(queuedFileSchema).optional()
     })
-  ).mutation(({ input }) => {
+  ).mutation(async ({ input }) => {
     const chatId = input.chatId ?? getOrCreateDefaultChat(input.workspaceId).id;
-    const message = pushQueuedMessage(chatId, { text: input.text, files: input.files });
-    return { ok: true, message, messages: getQueuedMessages(chatId) };
+    let files;
+    try {
+      files = await resolveQueuedFiles(chatId, input.files);
+    } catch (err) {
+      log28.error(
+        { chatId, err: err instanceof Error ? err.message : err },
+        "queue.push: failed to persist file uploads; enqueuing text only"
+      );
+      files = void 0;
+    }
+    const message = pushQueuedMessage(chatId, { text: input.text, files });
+    return {
+      ok: true,
+      message: toWireQueuedMessages([message])[0],
+      messages: toWireQueuedMessages(getQueuedMessages(chatId))
+    };
   }),
   set: publicProcedure.input(
     external_exports.object({
@@ -136853,20 +136974,44 @@ var queueRouter = t2.router({
         })
       )
     })
-  ).mutation(({ input }) => {
+  ).mutation(async ({ input }) => {
     const chatId = input.chatId ?? getOrCreateDefaultChat(input.workspaceId).id;
-    setQueuedMessages(chatId, input.messages);
-    return { ok: true, messages: getQueuedMessages(chatId) };
+    const messages = await Promise.all(
+      input.messages.map(async (m11) => {
+        try {
+          return {
+            ...m11.id !== void 0 && { id: m11.id },
+            text: m11.text,
+            files: await resolveQueuedFiles(chatId, m11.files)
+          };
+        } catch (err) {
+          log28.error(
+            { chatId, messageId: m11.id, err: err instanceof Error ? err.message : err },
+            "queue: failed to resolve files for queued message; dropping its files"
+          );
+          return {
+            ...m11.id !== void 0 && { id: m11.id },
+            text: m11.text,
+            files: void 0
+          };
+        }
+      })
+    );
+    setQueuedMessages(chatId, messages);
+    return { ok: true, messages: toWireQueuedMessages(getQueuedMessages(chatId)) };
   }),
   get: publicProcedure.input(external_exports.object({ workspaceId: external_exports.string(), chatId: external_exports.string().optional() })).query(({ input }) => {
     const chatId = input.chatId ?? getOrCreateDefaultChat(input.workspaceId).id;
-    const messages = getQueuedMessages(chatId);
-    return { messages };
+    return { messages: toWireQueuedMessages(getQueuedMessages(chatId)) };
   }),
   remove: publicProcedure.input(external_exports.object({ workspaceId: external_exports.string(), chatId: external_exports.string().optional(), id: external_exports.string() })).mutation(({ input }) => {
     const chatId = input.chatId ?? getOrCreateDefaultChat(input.workspaceId).id;
     const removed = removeQueuedMessage(chatId, input.id);
-    return { ok: true, removed, messages: getQueuedMessages(chatId) };
+    return {
+      ok: true,
+      removed,
+      messages: toWireQueuedMessages(getQueuedMessages(chatId))
+    };
   }),
   update: publicProcedure.input(
     external_exports.object({
@@ -136878,12 +137023,16 @@ var queueRouter = t2.router({
   ).mutation(({ input }) => {
     const chatId = input.chatId ?? getOrCreateDefaultChat(input.workspaceId).id;
     const updated = updateQueuedMessage(chatId, input.id, input.text);
-    return { ok: true, updated, messages: getQueuedMessages(chatId) };
+    return {
+      ok: true,
+      updated,
+      messages: toWireQueuedMessages(getQueuedMessages(chatId))
+    };
   }),
   shift: publicProcedure.input(external_exports.object({ workspaceId: external_exports.string(), chatId: external_exports.string().optional() })).mutation(({ input }) => {
     const chatId = input.chatId ?? getOrCreateDefaultChat(input.workspaceId).id;
     const message = shiftQueuedMessage(chatId);
-    return { message };
+    return { message: message ? toWireQueuedMessages([message])[0] : null };
   }),
   clear: publicProcedure.input(external_exports.object({ workspaceId: external_exports.string(), chatId: external_exports.string().optional() })).mutation(({ input }) => {
     const chatId = input.chatId ?? getOrCreateDefaultChat(input.workspaceId).id;
@@ -136903,12 +137052,13 @@ var queueRouter = t2.router({
       unsubscribe();
       resolve7?.();
     });
-    yield { messages: getQueuedMessages(chatId) };
+    yield { messages: toWireQueuedMessages(getQueuedMessages(chatId)) };
     queue.length = 0;
     try {
       while (!opts.signal?.aborted) {
         while (queue.length > 0) {
-          yield queue.shift();
+          const update = queue.shift();
+          yield { messages: toWireQueuedMessages(update.messages) };
         }
         await new Promise((r6) => {
           resolve7 = r6;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@band-app/server",
-  "version": "0.16.8",
+  "version": "0.16.9",
   "type": "module",
   "bin": {
     "band-server": "./bin/band-server.mjs"
@@ -114,9 +114,9 @@
     "ws": "^8.18.0",
     "zod": "^3.25.67",
     "zustand": "^5.0.0",
-    "@band-app/coding-agent": "^0.16.8",
-    "@band-app/ui": "^0.16.8",
-    "@band-app/logger": "^0.16.8"
+    "@band-app/coding-agent": "^0.16.9",
+    "@band-app/ui": "^0.16.9",
+    "@band-app/logger": "^0.16.9"
   },
   "scripts": {
     "dev": "NODE_ENV=development tsx watch start-server.ts",