@helloleo/plugins 0.2.25 → 0.2.27

package/dist/index.js

@@ -21,7 +21,7 @@ var WRITE_TOOLS = new Set(["write", "edit", "apply_patch"]);
 var CHECKED = /\.(?:[cm]?tsx?|[cm]?jsx?)$/;
 var SKIPPED = /(?:^|[/\\])(?:node_modules|dist|build|\.wrangler|\.output)[/\\]/;
 var MAX_LINES = 6;
-var MAX_BYTES = 2000000;
+var MAX_BYTES = 262144;
 function loaderFor(file) {
   const tsx = file.endsWith("x");
   return file.includes(".ts") ? tsx ? "tsx" : "ts" : tsx ? "jsx" : "js";
@@ -55,7 +55,7 @@ function parse(file) {
       line,
       col: item?.position?.column ?? 0,
       message: item?.message ?? "Syntax error.",
-      source: item?.position?.lineText ?? lines[line - 1] ?? ""
+      source: lines[line - 1] ?? ""
     });
   }
   return findings;
@@ -25009,9 +25009,8 @@ function resolveTemplateId() {
 function projectUuidFromDir(dir) {
   return path3.basename(dir);
 }
-function integrationProxyUrl(projectUuid) {
-  const base = (process.env.PLUGINS_INTEGRATION_PROXY_URL || "https://api.app.helloleo.dev").replace(/\/+$/, "");
-  return `${base}/api/integration-proxy/${projectUuid}`;
+function integrationProxyBase() {
+  return (process.env.PLUGINS_INTEGRATION_PROXY_URL || "https://api.app.helloleo.dev").replace(/\/+$/, "");
 }
 var scaffoldOptionsSchema = exports_external2.object({
   name: exports_external2.string().describe("Human-readable name for SEO, e.g. 'Shipping Platform'"),
@@ -25028,7 +25027,7 @@ async function writeBaseScaffold({ name, description }, dir) {
     LEO_SLUG: slugify(name),
     LEO_DESCRIPTION: description,
     LEO_PROJECT_UUID: projectUuid,
-    LEO_INTEGRATION_PROXY_URL: integrationProxyUrl(projectUuid)
+    LEO_INTEGRATION_PROXY_URL: `${integrationProxyBase()}/api/integration-proxy/${projectUuid}`
   }, dir);
   await mkdir(path3.join(dir, ".leo"), { recursive: true });
   const leoPath = path3.join(".leo", "project.json");

package/dist/templates/tanstack-start-2026-07-30/src/lib/proxy.ts

@@ -1,5 +1,5 @@
 /*
- * HelloLeo Integration Proxy -- runtime helper for connected integrations.
+ * HelloLeo Integration Proxy: runtime helper for connected integrations.
  *
  * All third-party APIs (Odoo, Airtable, HubSpot, Stripe, Notion, Gladia,
  * Microsoft 365, Klaviyo, Supabase, DimoMaint, etc.) are reachable through
@@ -19,7 +19,12 @@
  *   Native integrations (odoo, airtable) keep their plain name.
  *
  * Response shape (always wrapped):
- *   { success: boolean, status: number, data: <provider payload> }
+ *   { success: boolean, status: number, data: <provider payload>, docs: string }
+ *
+ *   - `status` is the UPSTREAM status, not the proxy's.
+ *   - `success` is false whenever that status is >= 400.
+ *   - `data` is null when the upstream returned no body.
+ *   - `docs` links the proxy's own reference.
  *
  *   Unwrap "data" by provider:
  *     odoo            -> data.result
@@ -34,6 +39,17 @@
  *   Read pagination metadata from the response to build the next call.
  *   Never .filter() large lists in the frontend -- paginate server-side.
  *
+ * Sending files:
+ *   Most APIs take a file as base64 inside the normal JSON body. Odoo is the
+ *   common case: ir.attachment.create with the bytes in `datas` and BOTH
+ *   `res_model` and `res_id` set, or the file is stored but appears on no
+ *   record. Nothing special is needed for those.
+ *
+ *   Some upload endpoints accept only multipart/form-data and answer JSON with
+ *   HTTP 415. For those set bodyEncoding: 'multipart' (see uploadFile below).
+ *   Never set a Content-Type header for multipart, the proxy lets fetch
+ *   generate the boundary. Not accepted for odoo, which has no multipart API.
+ *
  * Secrets for non-integration APIs (e.g. raw OpenAI): store them in
  * HelloLeo Cloud -> Settings -> Cloud -> Secrets, and read via env.SECRET_NAME
  * from a Worker. Never embed secrets in frontend code.
@@ -64,18 +80,38 @@ function proxyUrl(): string {
   return env === 'production' ? `${INTEGRATION_PROXY_URL}?env=production` : INTEGRATION_PROXY_URL;
 }
 
+export interface MultipartFile {
+  /** Form field name the upstream expects, e.g. 'content' or 'file'. */
+  name: string;
+  filename: string;
+  contentType?: string;
+  /** File bytes, base64-encoded (no data: prefix). */
+  dataBase64: string;
+}
+
+export interface MultipartBody {
+  fields?: Record<string, string>;
+  files?: MultipartFile[];
+}
+
 export interface ProxyRequest {
   integration: string;
   endpoint: string;
   method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
   body?: unknown;
   headers?: Record<string, string>;
+  /** Omit for JSON. 'multipart' when the upstream upload endpoint rejects JSON with 415. */
+  bodyEncoding?: 'json' | 'multipart';
 }
 
 export interface ProxyResponse<T = unknown> {
   success: boolean;
+  /** The UPSTREAM status, not the proxy's. */
   status: number;
-  data: T;
+  /** Null when the upstream returned no body. */
+  data: T | null;
+  /** The proxy's own reference, on every response. */
+  docs: string;
 }
 
 export async function callIntegration<T = unknown>(
@@ -95,6 +131,24 @@ export async function callIntegration<T = unknown>(
   return res.json();
 }
 
+/**
+ * Upload a file to an integration whose endpoint requires multipart/form-data
+ * (Zoho WorkDrive and similar). For Odoo, do NOT use this -- create an
+ * ir.attachment with the bytes base64-encoded in `datas` instead.
+ */
+export async function uploadFile<T = unknown>(
+  req: Omit<ProxyRequest, 'body' | 'bodyEncoding'> & { body: MultipartBody },
+): Promise<ProxyResponse<T>> {
+  return callIntegration<T>({ method: 'POST', ...req, bodyEncoding: 'multipart' });
+}
+
+export async function fileToBase64(file: Blob): Promise<string> {
+  const bytes = new Uint8Array(await file.arrayBuffer());
+  let binary = '';
+  for (let i = 0; i < bytes.length; i += 1) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary);
+}
+
 /* Example -- Odoo search_read:
  *
  *   const r = await callIntegration({
@@ -108,4 +162,21 @@ export async function callIntegration<T = unknown>(
  *     },
  *   });
  *   const products = r.data?.result ?? [];
+ *
+ * Example -- multipart upload (Zoho WorkDrive):
+ *
+ *   const r = await uploadFile({
+ *     integration: 'zoho_workdrive',
+ *     endpoint: '/api/v1/upload',
+ *     body: {
+ *       fields: { parent_id: folderId, 'override-name-exist': 'true' },
+ *       files: [{
+ *         name: 'content',
+ *         filename: file.name,
+ *         contentType: file.type,
+ *         dataBase64: await fileToBase64(file),
+ *       }],
+ *     },
+ *   });
+ *   if (!r.success) throw new Error(String(r.data));
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helloleo/plugins",
-  "version": "0.2.25",
+  "version": "0.2.27",
   "description": "OpenCode plugins for HelloLeo",
   "license": "UNLICENSED",
   "type": "module",