@helloleo/plugins 0.2.26 → 0.2.28

package/dist/index.js

@@ -21,7 +21,7 @@ var WRITE_TOOLS = new Set(["write", "edit", "apply_patch"]);
 var CHECKED = /\.(?:[cm]?tsx?|[cm]?jsx?)$/;
 var SKIPPED = /(?:^|[/\\])(?:node_modules|dist|build|\.wrangler|\.output)[/\\]/;
 var MAX_LINES = 6;
-var MAX_BYTES = 2000000;
+var MAX_BYTES = 262144;
 function loaderFor(file) {
   const tsx = file.endsWith("x");
   return file.includes(".ts") ? tsx ? "tsx" : "ts" : tsx ? "jsx" : "js";
@@ -25009,9 +25009,8 @@ function resolveTemplateId() {
 function projectUuidFromDir(dir) {
   return path3.basename(dir);
 }
-function integrationProxyUrl(projectUuid) {
-  const base = (process.env.PLUGINS_INTEGRATION_PROXY_URL || "https://api.app.helloleo.dev").replace(/\/+$/, "");
-  return `${base}/api/integration-proxy/${projectUuid}`;
+function integrationProxyBase() {
+  return (process.env.PLUGINS_INTEGRATION_PROXY_URL || "https://api.app.helloleo.dev").replace(/\/+$/, "");
 }
 var scaffoldOptionsSchema = exports_external2.object({
   name: exports_external2.string().describe("Human-readable name for SEO, e.g. 'Shipping Platform'"),
@@ -25028,7 +25027,7 @@ async function writeBaseScaffold({ name, description }, dir) {
     LEO_SLUG: slugify(name),
     LEO_DESCRIPTION: description,
     LEO_PROJECT_UUID: projectUuid,
-    LEO_INTEGRATION_PROXY_URL: integrationProxyUrl(projectUuid)
+    LEO_INTEGRATION_PROXY_URL: `${integrationProxyBase()}/api/integration-proxy/${projectUuid}`
   }, dir);
   await mkdir(path3.join(dir, ".leo"), { recursive: true });
   const leoPath = path3.join(".leo", "project.json");

package/dist/templates/tanstack-start-2026-07-30/package.json

@@ -44,9 +44,9 @@
     "@radix-ui/react-toggle-group": "^1.1.14",
     "@radix-ui/react-tooltip": "^1.2.11",
     "@tailwindcss/vite": "^4.3.2",
-    "@tanstack/react-query": "^5.101.2",
+    "@tanstack/react-query": "^5.102.8",
     "@tanstack/react-router": "^1.170.17",
-    "@tanstack/react-router-with-query": "^1.130.17",
+    "@tanstack/react-router-ssr-query": "^1.167.2",
     "@tanstack/react-start": "^1.168.27",
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",

package/dist/templates/tanstack-start-2026-07-30/src/lib/proxy.ts

@@ -1,5 +1,5 @@
 /*
- * HelloLeo Integration Proxy -- runtime helper for connected integrations.
+ * HelloLeo Integration Proxy: runtime helper for connected integrations.
  *
  * All third-party APIs (Odoo, Airtable, HubSpot, Stripe, Notion, Gladia,
  * Microsoft 365, Klaviyo, Supabase, DimoMaint, etc.) are reachable through
@@ -19,7 +19,12 @@
  *   Native integrations (odoo, airtable) keep their plain name.
  *
  * Response shape (always wrapped):
- *   { success: boolean, status: number, data: <provider payload> }
+ *   { success: boolean, status: number, data: <provider payload>, docs: string }
+ *
+ *   - `status` is the UPSTREAM status, not the proxy's.
+ *   - `success` is false whenever that status is >= 400.
+ *   - `data` is null when the upstream returned no body.
+ *   - `docs` links the proxy's own reference.
  *
  *   Unwrap "data" by provider:
  *     odoo            -> data.result
@@ -34,6 +39,17 @@
  *   Read pagination metadata from the response to build the next call.
  *   Never .filter() large lists in the frontend -- paginate server-side.
  *
+ * Sending files:
+ *   Most APIs take a file as base64 inside the normal JSON body. Odoo is the
+ *   common case: ir.attachment.create with the bytes in `datas` and BOTH
+ *   `res_model` and `res_id` set, or the file is stored but appears on no
+ *   record. Nothing special is needed for those.
+ *
+ *   Some upload endpoints accept only multipart/form-data and answer JSON with
+ *   HTTP 415. For those set bodyEncoding: 'multipart' (see uploadFile below).
+ *   Never set a Content-Type header for multipart, the proxy lets fetch
+ *   generate the boundary. Not accepted for odoo, which has no multipart API.
+ *
  * Secrets for non-integration APIs (e.g. raw OpenAI): store them in
  * HelloLeo Cloud -> Settings -> Cloud -> Secrets, and read via env.SECRET_NAME
  * from a Worker. Never embed secrets in frontend code.
@@ -64,18 +80,38 @@ function proxyUrl(): string {
   return env === 'production' ? `${INTEGRATION_PROXY_URL}?env=production` : INTEGRATION_PROXY_URL;
 }
 
+export interface MultipartFile {
+  /** Form field name the upstream expects, e.g. 'content' or 'file'. */
+  name: string;
+  filename: string;
+  contentType?: string;
+  /** File bytes, base64-encoded (no data: prefix). */
+  dataBase64: string;
+}
+
+export interface MultipartBody {
+  fields?: Record<string, string>;
+  files?: MultipartFile[];
+}
+
 export interface ProxyRequest {
   integration: string;
   endpoint: string;
   method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
   body?: unknown;
   headers?: Record<string, string>;
+  /** Omit for JSON. 'multipart' when the upstream upload endpoint rejects JSON with 415. */
+  bodyEncoding?: 'json' | 'multipart';
 }
 
 export interface ProxyResponse<T = unknown> {
   success: boolean;
+  /** The UPSTREAM status, not the proxy's. */
   status: number;
-  data: T;
+  /** Null when the upstream returned no body. */
+  data: T | null;
+  /** The proxy's own reference, on every response. */
+  docs: string;
 }
 
 export async function callIntegration<T = unknown>(
@@ -95,6 +131,24 @@ export async function callIntegration<T = unknown>(
   return res.json();
 }
 
+/**
+ * Upload a file to an integration whose endpoint requires multipart/form-data
+ * (Zoho WorkDrive and similar). For Odoo, do NOT use this -- create an
+ * ir.attachment with the bytes base64-encoded in `datas` instead.
+ */
+export async function uploadFile<T = unknown>(
+  req: Omit<ProxyRequest, 'body' | 'bodyEncoding'> & { body: MultipartBody },
+): Promise<ProxyResponse<T>> {
+  return callIntegration<T>({ method: 'POST', ...req, bodyEncoding: 'multipart' });
+}
+
+export async function fileToBase64(file: Blob): Promise<string> {
+  const bytes = new Uint8Array(await file.arrayBuffer());
+  let binary = '';
+  for (let i = 0; i < bytes.length; i += 1) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary);
+}
+
 /* Example -- Odoo search_read:
  *
  *   const r = await callIntegration({
@@ -108,4 +162,21 @@ export async function callIntegration<T = unknown>(
  *     },
  *   });
  *   const products = r.data?.result ?? [];
+ *
+ * Example -- multipart upload (Zoho WorkDrive):
+ *
+ *   const r = await uploadFile({
+ *     integration: 'zoho_workdrive',
+ *     endpoint: '/api/v1/upload',
+ *     body: {
+ *       fields: { parent_id: folderId, 'override-name-exist': 'true' },
+ *       files: [{
+ *         name: 'content',
+ *         filename: file.name,
+ *         contentType: file.type,
+ *         dataBase64: await fileToBase64(file),
+ *       }],
+ *     },
+ *   });
+ *   if (!r.success) throw new Error(String(r.data));
  */

package/dist/templates/tanstack-start-2026-07-30/src/router.tsx

@@ -1,31 +1,31 @@
 import { QueryClient } from '@tanstack/react-query'
 import { createRouter as createTanStackRouter } from '@tanstack/react-router'
-import { routerWithQueryClient } from '@tanstack/react-router-with-query'
+import { setupRouterSsrQueryIntegration } from '@tanstack/react-router-ssr-query'
 import { routeTree } from './routeTree.gen'
 import { DefaultErrorComponent } from '@/components/error-component'
 
-// TanStack Start calls getRouter() on both server and client. routerWithQueryClient
-// wires the QueryClient into the router context and handles SSR dehydration /
-// rehydration, so loaders can call context.queryClient.ensureQueryData() and the
-// client picks the cache up without refetching.
+// TanStack Start calls getRouter() on both server and client.
+// setupRouterSsrQueryIntegration wires the QueryClient into the router context
+// and handles SSR dehydration / rehydration, so loaders can call
+// context.queryClient.ensureQueryData() and the client picks the cache up
+// without refetching.
 export function getRouter() {
   const queryClient = new QueryClient()
 
-  const router = routerWithQueryClient(
-    createTanStackRouter({
-      routeTree,
-      context: { queryClient },
-      scrollRestoration: true,
-      // Catches uncaught render/loader errors on any route. Routes can still
-      // set their own `errorComponent` to override this.
-      defaultErrorComponent: DefaultErrorComponent,
-      defaultPreload: 'intent',
-      // With React Query we never want loader data to be stale -- the loader runs
-      // on every preload/visit and React Query owns caching from there.
-      defaultPreloadStaleTime: 0,
-    }),
-    queryClient,
-  )
+  const router = createTanStackRouter({
+    routeTree,
+    context: { queryClient },
+    scrollRestoration: true,
+    // Catches uncaught render/loader errors on any route. Routes can still
+    // set their own `errorComponent` to override this.
+    defaultErrorComponent: DefaultErrorComponent,
+    defaultPreload: 'intent',
+    // With React Query we never want loader data to be stale -- the loader runs
+    // on every preload/visit and React Query owns caching from there.
+    defaultPreloadStaleTime: 0,
+  })
+
+  setupRouterSsrQueryIntegration({ router, queryClient })
 
   return router
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helloleo/plugins",
-  "version": "0.2.26",
+  "version": "0.2.28",
   "description": "OpenCode plugins for HelloLeo",
   "license": "UNLICENSED",
   "type": "module",