@geode/opengeodeweb-front 10.34.0-rc.9 → 10.34.0

package/internal/utils/viewer_call.ts

@@ -1,11 +1,9 @@
-// Not auto-fixable (eslint's sort-imports core rule has no autofixer) and this file's import order doesn't match its syntax-kind-then-alphabetical requirement - left as-is rather than manually reordered across the codebase for a purely cosmetic rule.
-// oxlint-disable eslint/sort-imports
+import type { JsonRpcSchema, RequestHandlersWithValidation } from "@ogw_shared/utils/types.js";
 import { endRequestLog, startRequestLog } from "@ogw_front/utils/log";
+import type { Microservice } from "./api_fetch.js";
+import type { RpcClient } from "@ogw_shared/utils/call_raw.js";
 import { callSchema } from "@ogw_shared/utils/call_schema";
 import { useFeedbackStore } from "@ogw_front/stores/feedback";
-import type { JsonRpcSchema, RequestHandlersWithValidation } from "@ogw_shared/utils/types.js";
-import type { RpcClient } from "@ogw_shared/utils/call_raw.js";
-import type { Microservice } from "./api_fetch.js";
 
 interface ViewerMicroservice extends Microservice {
   client: RpcClient;
@@ -23,7 +21,17 @@ interface RpcErrorLike {
   message?: string;
 }
 
-function viewer_call(
+function toRpcErrorLike(value: unknown): RpcErrorLike {
+  if (typeof value !== "object" || value === null) {
+    return {};
+  }
+  return {
+    code: "code" in value && typeof value.code === "number" ? value.code : undefined,
+    message: "message" in value && typeof value.message === "string" ? value.message : undefined,
+  };
+}
+
+async function viewer_call(
   microservice: ViewerMicroservice,
   { schema, params = {}, timeout }: ViewerCallParams,
   {
@@ -31,12 +39,13 @@ function viewer_call(
     response_function,
     response_error_function,
   }: RequestHandlersWithValidation = {},
-) {
+): Promise<unknown> {
   const feedbackStore = useFeedbackStore();
   const { client } = microservice;
+  microservice.start_request();
 
   const requestStartingTime = startRequestLog(microservice, schema);
-  return callSchema(
+  const result = await callSchema(
     {
       schema,
       params,
@@ -46,7 +55,7 @@ function viewer_call(
     {
       request_error_function(error: unknown) {
         microservice.stop_request();
-        const typedError = error as RpcErrorLike;
+        const typedError = toRpcErrorLike(error);
         feedbackStore.add_error(
           typedError.code ?? 0,
           schema.$id,
@@ -54,7 +63,7 @@ function viewer_call(
           typedError.message ?? "",
         );
         if (request_error_function) {
-          request_error_function(error);
+          void request_error_function(error);
         }
       },
       response_function(data: unknown) {
@@ -66,8 +75,7 @@ function viewer_call(
       },
       response_error_function(response: unknown) {
         microservice.stop_request();
-        // Pre-existing bug: this used an undefined `error` identifier (ReferenceError at runtime); fixed to use `response`, mirroring request_error_function above.
-        const typedResponse = response as RpcErrorLike;
+        const typedResponse = toRpcErrorLike(response);
         feedbackStore.add_error(
           typedResponse.code ?? 0,
           schema.$id,
@@ -75,7 +83,7 @@ function viewer_call(
           typedResponse.message ?? "",
         );
         if (response_error_function) {
-          response_error_function(response);
+          void response_error_function(response);
         }
       },
       validation_error_function({ code, name, error }) {
@@ -84,6 +92,7 @@ function viewer_call(
       },
     },
   );
+  return result;
 }
 
 export { viewer_call };

package/internal/utils/ws_client.ts

@@ -1,32 +1,43 @@
-// Not auto-fixable (eslint's sort-imports core rule has no autofixer) and this file's import order doesn't match its syntax-kind-then-alphabetical requirement - left as-is rather than manually reordered across the codebase for a purely cosmetic rule.
-// oxlint-disable eslint/sort-imports
 // Third party imports
-import vtkWSLinkClient, { newInstance } from "@kitware/vtk.js/IO/Core/WSLinkClient";
-// oxlint-disable-next-line eslint/no-duplicate-imports
-import type { vtkWSLinkClient as VtkWSLinkClient } from "@kitware/vtk.js/IO/Core/WSLinkClient";
+import vtkWSLinkClient, {
+  type vtkWSLinkClient as VtkWSLinkClient,
+  newInstance,
+} from "@kitware/vtk.js/IO/Core/WSLinkClient";
 import SmartConnect from "wslink/src/SmartConnect";
-import _ from "lodash";
 
 interface WsClientCallbacks {
   onConnectionClose?: () => void;
 }
 
+// Wslink's connection event shape is untyped upstream; this describes the fields we read.
+interface WsConnectionEvent {
+  response?: { error?: string };
+}
+
+function isVtkWSLinkClient(value: unknown): value is VtkWSLinkClient {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    "connect" in value &&
+    "onConnectionError" in value &&
+    "onConnectionClose" in value
+  );
+}
+
 async function initWebSocketClient(
   baseUrl: string,
   initialClient: unknown = {},
   { onConnectionClose }: WsClientCallbacks = {},
 ): Promise<VtkWSLinkClient> {
   vtkWSLinkClient.setSmartConnectClass(SmartConnect);
-  const client = (_.isEmpty(initialClient) ? newInstance() : initialClient) as VtkWSLinkClient;
+  const client = isVtkWSLinkClient(initialClient) ? initialClient : newInstance();
 
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- wslink's httpReq shape is untyped upstream.
-  client.onConnectionError((httpReq: any) => {
-    const message = httpReq?.response?.error || `Connection error`;
+  client.onConnectionError((httpReq: WsConnectionEvent) => {
+    const message = httpReq.response?.error ?? "Connection error";
     console.error(message);
   });
-  // eslint-disable-next-line @typescript-eslint/no-explicit-any -- wslink's httpReq shape is untyped upstream.
-  client.onConnectionClose((httpReq: any) => {
-    const message = httpReq?.response?.error || `Connection close`;
+  client.onConnectionClose((httpReq: WsConnectionEvent) => {
+    const message = httpReq.response?.error ?? "Connection close";
     onConnectionClose?.();
     console.error(message);
   });

package/nuxt.config.ts

@@ -1,4 +1,5 @@
 // Node imports
+import fs from "node:fs";
 import path from "node:path";
 
 // Third party imports
@@ -9,6 +10,28 @@ import package_json from "./package.json";
 
 const __dirname = import.meta.dirname;
 
+// Oxlint's type-aware linter auto-discovers each file's nearest tsconfig.json
+// By walking up directories, and any "extends" on that discovered file makes
+// Its whole type-aware resolution collapse: every symbol coming through the
+// Aliases normally only defined in .nuxt/tsconfig.json (@ogw_shared, etc.,
+// But also Nuxt's own #app/#imports/defineStore auto-imports) becomes an
+// `error` type, even though tsc/vue-tsc resolve the exact same "extends"
+// Chain correctly (oxc-project/oxc#22345). The only fix is for the root
+// Tsconfig.json to be fully self-contained: no "extends", with its own copy
+// Of .nuxt/tsconfig.json's compilerOptions.paths (re-relativized here, since
+// They're written relative to .nuxt/) and a deliberately project-wide
+// "include" (unlike .nuxt/tsconfig.json's own include, which only covers
+// Nuxt's conventional folders and would otherwise silently drop internal/,
+// Tests/, etc. from the program). Regenerated on every Nuxt prepare so it
+// Can never drift from what Nuxt actually resolves.
+function remap_path_to_root(target: string, build_dir: string): string {
+  const relative = path
+    .relative(__dirname, path.resolve(build_dir, target))
+    .split(path.sep)
+    .join("/");
+  return relative.startsWith("./") || relative.startsWith("../") ? relative : `./${relative}`;
+}
+
 // Nuxt requires this file's config object as the default export; the shared org lint config's no-default-export override only lists *.config.js, not *.config.ts, since this file predates the TypeScript migration.
 // oxlint-disable-next-line import/no-default-export
 export default defineNuxtConfig({
@@ -17,7 +40,7 @@ export default defineNuxtConfig({
       COMMAND_BACK: "opengeodeweb-back",
       COMMAND_VIEWER: "opengeodeweb-viewer",
       NUXT_ROOT_PATH: __dirname,
-      MODE: process.env.MODE || "CLOUD",
+      MODE: process.env.MODE ?? "CLOUD",
       PROJECT: package_json.name,
     },
   },
@@ -108,4 +131,38 @@ export default defineNuxtConfig({
       ],
     },
   },
+  typescript: {
+    tsConfig: {
+      compilerOptions: {
+        types: ["node", "ws", "busboy"],
+      },
+    },
+  },
+
+  hooks: {
+    "prepare:types": ({ tsConfig }) => {
+      const paths = tsConfig.compilerOptions?.paths;
+      if (!paths) {
+        return;
+      }
+      const build_dir = path.resolve(__dirname, ".nuxt");
+      const root_paths = Object.fromEntries(
+        Object.entries(paths).map(([alias, targets]) => [
+          alias,
+          targets.map((target) => remap_path_to_root(target, build_dir)),
+        ]),
+      );
+      fs.writeFileSync(
+        path.resolve(__dirname, "tsconfig.json"),
+        `${JSON.stringify(
+          {
+            compilerOptions: { ...tsConfig.compilerOptions, paths: root_paths },
+            include: ["**/*", "./.nuxt/nuxt.d.ts"],
+          },
+          undefined,
+          2,
+        )}\n`,
+      );
+    },
+  },
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geode/opengeodeweb-front",
-  "version": "10.34.0-rc.9",
+  "version": "10.34.0",
   "description": "OpenSource Vue/Nuxt/Pinia/Vuetify framework for web applications",
   "homepage": "https://github.com/Geode-solutions/OpenGeodeWeb-Front",
   "bugs": {
@@ -21,6 +21,7 @@
     "internal",
     "server",
     "shared",
+    ".build",
     "nuxt.config.ts",
     "opengeodeweb_front_schemas.json",
     "opengeodeweb_front_schemas.js",
@@ -32,6 +33,14 @@
   "main": "./nuxt.config.ts",
   "exports": {
     ".": "./nuxt.config.ts",
+    "./server/utils/*.js": {
+      "types": "./server/utils/*.ts",
+      "default": "./.build/server/utils/*.js"
+    },
+    "./shared/*.js": {
+      "types": "./shared/*.ts",
+      "default": "./.build/shared/*.js"
+    },
     "./*": "./*"
   },
   "publishConfig": {
@@ -53,13 +62,15 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@geode/opengeodeweb-back": "next",
-    "@geode/opengeodeweb-viewer": "next",
-    "@google-cloud/run": "3.2.0",
+    "@geode/opengeodeweb-back": "latest",
+    "@geode/opengeodeweb-viewer": "latest",
+    "@google-cloud/run": "4.1.0",
     "@kitware/vtk.js": "33.3.0",
     "@mdi/font": "7.4.47",
     "@pinia/nuxt": "1.0.1",
-    "@types/node": "22.15.3",
+    "@types/busboy": "1.5.4",
+    "@types/node": "22.20.3",
+    "@types/ws": "8.18.1",
     "@vueuse/components": "13.1.0",
     "@vueuse/core": "13.1.0",
     "@vueuse/nuxt": "13.1.0",
@@ -69,8 +80,8 @@
     "conf": "15.1.0",
     "dexie": "4.2.1",
     "get-port-please": "3.2.0",
-    "google-auth-library": "10.6.1",
-    "googleapis": "171.4.0",
+    "google-auth-library": "11.0.2",
+    "googleapis": "181.0.0",
     "js-file-download": "0.4.12",
     "jszip": "3.10.1",
     "lodash": "4.18.1",
@@ -89,7 +100,8 @@
     "vuetify": "4.2.0",
     "vuetify-nuxt-module": "1.0.0-rc.5",
     "ws": "8.21.2",
-    "wslink": "1.12.4"
+    "wslink": "1.12.4",
+    "zod": "4.4.3"
   },
   "devDependencies": {
     "@nuxt/test-utils": "4.1.0",

package/server/api/cloud/extensions/run.post.ts

@@ -2,7 +2,7 @@
 import fs from "node:fs";
 
 // Third party imports
-import { createError, defineEventHandler, readBody } from "h3";
+import { type H3Event, createError, defineEventHandler, readBody } from "h3";
 
 // Local imports
 import {
@@ -25,15 +25,13 @@ interface RunExtensionsBody {
   projectName: string;
 }
 
-export default defineEventHandler(async (event) => {
+export default defineEventHandler(async (event: H3Event) => {
   try {
     console.log("NITRO: runExtensions", event);
     const { projectFolderPath, projectName } = await readBody<RunExtensionsBody>(event);
     const extensionsConfig = extensionsConf(projectName);
     const extensionsArray = await Promise.all(
-      Object.keys(extensionsConfig).map(async (extensionId) => {
-        // Safe: extensionId comes from Object.keys(extensionsConfig) itself.
-        const extensionPath = extensionsConfig[extensionId]!.path;
+      Object.entries(extensionsConfig).map(async ([extensionId, { path: extensionPath }]) => {
         const unzippedExtensionPath = await unzipFile(
           extensionPath,
           extensionFolderPath(projectFolderPath, extensionId),
@@ -49,12 +47,10 @@ export default defineEventHandler(async (event) => {
         const port = await runExtension(id, backendExecutable, unzippedExtensionPath, {
           projectFolderPath,
         });
-        await addMicroserviceMetadatas(projectFolderPath, {
+        addMicroserviceMetadatas(projectFolderPath, {
           type: "back",
           name,
-          // RunExtension can exhaust its port-conflict retries and return undefined
-          // (pre-existing bug: addMicroserviceMetadatas/URLs then embed "undefined").
-          port: port as number,
+          port,
         });
         return {
           id,
@@ -74,7 +70,7 @@ export default defineEventHandler(async (event) => {
     console.error("Error running extensions:", error);
     throw createError({
       statusCode: 500,
-      statusMessage: (error as Error).message,
+      statusMessage: error instanceof Error ? error.message : String(error),
     });
   }
 });

package/server/api/local/app/project_folder_path.post.ts

@@ -1,7 +1,7 @@
 // Node imports
 
 // Third party imports
-import { createError, defineEventHandler, readBody } from "h3";
+import { type H3Event, createError, defineEventHandler, readBody } from "h3";
 
 // Local imports
 import {
@@ -13,11 +13,11 @@ interface ProjectFolderPathBody {
   PROJECT: string;
 }
 
-export default defineEventHandler(async (event) => {
+export default defineEventHandler(async (event: H3Event) => {
   try {
     const { PROJECT } = await readBody<ProjectFolderPathBody>(event);
     const projectFolderPath = generateProjectFolderPath(PROJECT);
-    await createPath(projectFolderPath);
+    createPath(projectFolderPath);
 
     return {
       statusCode: 200,
@@ -27,7 +27,7 @@ export default defineEventHandler(async (event) => {
     console.log(error);
     throw createError({
       statusCode: 500,
-      statusMessage: (error as Error).message,
+      statusMessage: error instanceof Error ? error.message : String(error),
     });
   }
 });

package/server/api/local/app/run_back.post.ts

@@ -1,7 +1,7 @@
 // Node imports
 
 // Third party imports
-import { createError, defineEventHandler, readBody } from "h3";
+import { type H3Event, createError, defineEventHandler, readBody } from "h3";
 
 // Local imports
 import {
@@ -15,16 +15,14 @@ interface RunBackBody {
   args: { projectFolderPath: string; [key: string]: unknown };
 }
 
-export default defineEventHandler(async (event) => {
+export default defineEventHandler(async (event: H3Event) => {
   try {
     const { COMMAND_BACK, NUXT_ROOT_PATH, args } = await readBody<RunBackBody>(event);
     const port = await runBack(COMMAND_BACK, NUXT_ROOT_PATH, args);
-    await addMicroserviceMetadatas(args.projectFolderPath, {
+    addMicroserviceMetadatas(args.projectFolderPath, {
       type: "back",
       name: COMMAND_BACK,
-      // RunBack can exhaust its port-conflict retries and return undefined
-      // (pre-existing bug: addMicroserviceMetadatas/URLs then embed "undefined").
-      port: port as number,
+      port,
     });
 
     return {
@@ -35,7 +33,7 @@ export default defineEventHandler(async (event) => {
     console.log(error);
     throw createError({
       statusCode: 500,
-      statusMessage: (error as Error).message,
+      statusMessage: error instanceof Error ? error.message : String(error),
     });
   }
 });

package/server/api/local/app/run_viewer.post.ts

@@ -1,7 +1,7 @@
 // Node imports
 
 // Third party imports
-import { createError, defineEventHandler, readBody } from "h3";
+import { type H3Event, createError, defineEventHandler, readBody } from "h3";
 
 // Local imports
 import {
@@ -15,16 +15,14 @@ interface RunViewerBody {
   args: { projectFolderPath: string; [key: string]: unknown };
 }
 
-export default defineEventHandler(async (event) => {
+export default defineEventHandler(async (event: H3Event) => {
   try {
     const { COMMAND_VIEWER, NUXT_ROOT_PATH, args } = await readBody<RunViewerBody>(event);
     const port = await runViewer(COMMAND_VIEWER, NUXT_ROOT_PATH, args);
-    await addMicroserviceMetadatas(args.projectFolderPath, {
+    addMicroserviceMetadatas(args.projectFolderPath, {
       type: "viewer",
       name: COMMAND_VIEWER,
-      // RunViewer can exhaust its port-conflict retries and return undefined
-      // (pre-existing bug: addMicroserviceMetadatas/URLs then embed "undefined").
-      port: port as number,
+      port,
     });
 
     return {
@@ -35,7 +33,7 @@ export default defineEventHandler(async (event) => {
     console.log(error);
     throw createError({
       statusCode: 500,
-      statusMessage: (error as Error).message,
+      statusMessage: error instanceof Error ? error.message : String(error),
     });
   }
 });

package/server/api/local/extensions/kill.post.ts

@@ -1,7 +1,7 @@
 // Node imports
 
 // Third party imports
-import { createError, defineEventHandler, readBody } from "h3";
+import { type H3Event, createError, defineEventHandler, readBody } from "h3";
 
 // Local imports
 import {
@@ -19,7 +19,7 @@ interface KillExtensionBody {
   extensionId: string;
 }
 
-export default defineEventHandler(async (event) => {
+export default defineEventHandler(async (event: H3Event) => {
   try {
     const body = await readBody<KillExtensionBody>(event);
     const { projectFolderPath, projectName, extensionId } = body;
@@ -43,7 +43,8 @@ export default defineEventHandler(async (event) => {
     console.error("Error killing extension:", error);
     throw createError({
       statusCode: 500,
-      statusMessage: (error as Error).message,
+
+      statusMessage: error instanceof Error ? error.message : String(error),
     });
   }
 });

package/server/api/local/extensions/run.post.ts

@@ -2,7 +2,7 @@
 import fs from "node:fs";
 
 // Third party imports
-import { createError, defineEventHandler, readBody } from "h3";
+import { type H3Event, createError, defineEventHandler, readBody } from "h3";
 
 // Local imports
 import {
@@ -25,15 +25,13 @@ interface RunExtensionsBody {
   projectName: string;
 }
 
-export default defineEventHandler(async (event) => {
+export default defineEventHandler(async (event: H3Event) => {
   try {
     console.log("NITRO: runExtensions", event);
     const { projectFolderPath, projectName } = await readBody<RunExtensionsBody>(event);
     const extensionsConfig = extensionsConf(projectName);
     const extensionsArray = await Promise.all(
-      Object.keys(extensionsConfig).map(async (extensionId) => {
-        // Safe: extensionId comes from Object.keys(extensionsConfig) itself.
-        const extensionPath = extensionsConfig[extensionId]!.path;
+      Object.entries(extensionsConfig).map(async ([extensionId, { path: extensionPath }]) => {
         const unzippedExtensionPath = await unzipFile(
           extensionPath,
           extensionFolderPath(projectFolderPath, extensionId),
@@ -49,12 +47,10 @@ export default defineEventHandler(async (event) => {
         const port = await runBack(backendExecutable, unzippedExtensionPath, {
           projectFolderPath,
         });
-        await addMicroserviceMetadatas(projectFolderPath, {
+        addMicroserviceMetadatas(projectFolderPath, {
           type: "back",
           name,
-          // RunBack can exhaust its port-conflict retries and return undefined
-          // (pre-existing bug: addMicroserviceMetadatas/URLs then embed "undefined").
-          port: port as number,
+          port,
         });
         return {
           id,
@@ -74,7 +70,8 @@ export default defineEventHandler(async (event) => {
     console.error("Error running extensions:", error);
     throw createError({
       statusCode: 500,
-      statusMessage: (error as Error).message,
+
+      statusMessage: error instanceof Error ? error.message : String(error),
     });
   }
 });

package/server/api/local/extensions/upload.put.ts

@@ -1,81 +1,71 @@
-// Not auto-fixable (eslint's sort-imports core rule has no autofixer) and this file's import order doesn't match its syntax-kind-then-alphabetical requirement - left as-is rather than manually reordered across the codebase for a purely cosmetic rule.
-// oxlint-disable eslint/sort-imports
-/// <reference path="../../../types/vendor.d.ts" />
 // Node imports
-import { finished, pipeline } from "node:stream/promises";
 import { Readable } from "node:stream";
-import type { ReadableStream as NodeReadableStream } from "node:stream/web";
 import fs from "node:fs";
+import { pipeline } from "node:stream/promises";
 
 // Third party imports
-import { createError, defineEventHandler, getRequestHeaders, getRequestWebStream } from "h3";
-import busboy from "busboy";
+import { type H3Event, createError, defineEventHandler, getQuery, getRequestWebStream } from "h3";
 
 // Local imports
 import {
   registerExtensionFile,
   targetExtensionFilePath,
 } from "@geode/opengeodeweb-front/server/utils/app_config.ts";
+import { BYTES_PER_KIBIBYTE } from "@ogw_shared/utils/file.js";
+import { toNodeWebStream } from "@geode/opengeodeweb-front/server/utils/stream.ts";
 
+const CODE_200 = 200;
 const CODE_201 = 201;
-const BYTES_PER_KIBIBYTE = 1024;
 const MAX_FILE_MEGABYTES = 500;
 const FILE_SIZE_LIMIT = MAX_FILE_MEGABYTES * BYTES_PER_KIBIBYTE * BYTES_PER_KIBIBYTE;
 
-export default defineEventHandler(async (event) => {
-  const writePromises: Promise<void>[] = [];
-  const savedFiles: string[] = [];
-
-  const busboyInstance = busboy({
-    headers: getRequestHeaders(event),
-    limits: {
-      fileSize: FILE_SIZE_LIMIT,
-      files: 1,
-    },
-  });
-  let projectName = "";
-  busboyInstance.on("field", (name, value) => {
-    console.log(`Field ${name}: ${value}`);
-    if (name === "projectName") {
-      projectName = value;
-    }
-  });
+function requiredQueryString(event: H3Event, key: string): string {
+  const value = getQuery(event)[key];
+  if (typeof value !== "string" || value.length === 0) {
+    throw createError({ statusCode: 400, message: `Missing "${key}" query parameter` });
+  }
+  return value;
+}
 
-  busboyInstance.on("file", (fieldname, fileStream, info) => {
-    if (fieldname !== "file") {
-      // Drain & ignore unwanted fields
-      fileStream.resume();
-      return;
-    }
-    const targetPath = targetExtensionFilePath(projectName, info.filename);
-    const writePromise = (async () => {
-      const writeStream = fs.createWriteStream(targetPath);
-      await pipeline(fileStream, writeStream);
-      savedFiles.push(targetPath);
-      console.log("File written:", targetPath);
-    })();
-    writePromises.push(writePromise);
-    fileStream.on("limit", () => busboyInstance.destroy(new Error("File too large")));
-  });
+function requiredQueryInt(event: H3Event, key: string): number {
+  const parsed = Math.trunc(Number(requiredQueryString(event, key)));
+  if (!Number.isInteger(parsed) || parsed < 0) {
+    throw createError({ statusCode: 400, message: `Invalid "${key}" query parameter` });
+  }
+  return parsed;
+}
 
-  busboyInstance.on("filesLimit", () => busboyInstance.destroy(new Error("Too many files")));
-  busboyInstance.on("partsLimit", () => busboyInstance.destroy(new Error("Too many parts")));
+// The file is sent as a raw (non-multipart) body, split into sequential chunks the client uploads in order (see OpenGeodeWeb-Front's upload_file.ts and OpenGeodeWeb-Back's upload_file route, which use the same protocol). Each chunk is appended to a `.part` file; the last one triggers the existing zip-metadata registration.
+export default defineEventHandler(async (event: H3Event) => {
+  const projectName = requiredQueryString(event, "projectName");
+  const filename = requiredQueryString(event, "filename");
+  const totalChunks = requiredQueryInt(event, "total_chunks");
+  const chunkIndex = requiredQueryInt(event, "chunk_index");
+  if (chunkIndex >= totalChunks) {
+    throw createError({ statusCode: 400, message: "chunk_index must be less than total_chunks" });
+  }
 
   const webStream = getRequestWebStream(event);
   if (!webStream) {
     throw createError({ statusCode: 400, message: "No request body received" });
   }
-  // H3's ReadableStream (lib.dom) and Node's stream/web ReadableStream are structurally
-  // The same at runtime but the two ambient type declarations aren't nominally compatible.
-  Readable.fromWeb(webStream as unknown as NodeReadableStream).pipe(busboyInstance);
-  await finished(busboyInstance);
-  if (writePromises.length > 0) {
-    await Promise.all(writePromises);
-    console.log("All disk writes completed");
+
+  const targetPath = targetExtensionFilePath(projectName, filename);
+  const partPath = `${targetPath}.part`;
+  const writeStream = fs.createWriteStream(partPath, { flags: chunkIndex === 0 ? "w" : "a" });
+  await pipeline(Readable.fromWeb(toNodeWebStream(webStream)), writeStream);
+
+  const { size } = await fs.promises.stat(partPath);
+  if (size > FILE_SIZE_LIMIT) {
+    await fs.promises.unlink(partPath);
+    throw createError({ statusCode: 400, message: "File too large" });
   }
-  if (savedFiles.length === 0) {
-    throw createError({ statusCode: 400, message: "No file received" });
+
+  if (chunkIndex < totalChunks - 1) {
+    return { statusCode: CODE_200 };
   }
-  await Promise.all(savedFiles.map(async (file) => await registerExtensionFile(projectName, file)));
+
+  await fs.promises.rename(partPath, targetPath);
+  await registerExtensionFile(projectName, targetPath);
   return { statusCode: CODE_201 };
 });