@thevinci/web 1.2.1 → 1.3.1

package/dist/index.html

@@ -532,8 +532,8 @@
         pointer-events: none;
       }
     </style>
-    <script type="module" crossorigin src="/assets/main-DvKMcqtE.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/index-DbxIdVC4.js">
+    <script type="module" crossorigin src="/assets/main-7cePcdQe.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/index-BW75F1_U.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-.bun-DgrCmzWD.js">
     <link rel="stylesheet" crossorigin href="/assets/index-B_msE9DC.css">
     <link rel="stylesheet" crossorigin href="/assets/vendor--DaW60Aqe.css">

package/dist/mini-chat.html

@@ -4,8 +4,8 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no, viewport-fit=cover" />
     <title>Vinci Mini Chat</title>
-    <script type="module" crossorigin src="/assets/miniChat-DsZ_1ciq.js"></script>
-    <link rel="modulepreload" crossorigin href="/assets/index-DbxIdVC4.js">
+    <script type="module" crossorigin src="/assets/miniChat-DEMXzB4E.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/index-BW75F1_U.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-.bun-DgrCmzWD.js">
     <link rel="stylesheet" crossorigin href="/assets/index-B_msE9DC.css">
     <link rel="stylesheet" crossorigin href="/assets/vendor--DaW60Aqe.css">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thevinci/web",
-  "version": "1.2.1",
+  "version": "1.3.1",
   "license": "MIT",
   "private": false,
   "type": "module",
@@ -29,6 +29,7 @@
     "@opencode-ai/sdk": "1.15.10",
     "@simplewebauthn/server": "13.3.0",
     "adm-zip": "^0.5.16",
+    "busboy": "^1.6.0",
     "better-sqlite3": "^11.7.0",
     "bun-pty": "^0.4.5",
     "compression": "^1.8.1",

package/server/lib/fs/routes.js

@@ -741,6 +741,87 @@ export const registerFsRoutes = (app, dependencies) => {
     }
   });
 
+  // --- File upload (multipart/form-data) ---
+  app.post('/api/fs/upload', async (req, res) => {
+    const Busboy = (await import('busboy')).default;
+    const busboy = Busboy({ headers: req.headers, limits: { files: 50 } });
+
+    let targetDir = '';
+    const uploadedFiles = [];
+    const errors = [];
+    let responseSent = false;
+
+    const sendError = (status, error) => {
+      if (responseSent) return;
+      responseSent = true;
+      return res.status(status).json({ error: error || 'Upload failed' });
+    };
+
+    busboy.on('field', (fieldname, value) => {
+      if (fieldname === 'path' && typeof value === 'string') {
+        targetDir = value;
+      }
+    });
+
+    busboy.on('file', (fieldname, file, info) => {
+      const filename = info?.filename || fieldname;
+      const resolvedTarget = targetDir ? `${targetDir}/${filename}` : filename;
+
+      const writePromise = (async () => {
+        const resolved = await resolveWorkspacePathFromContext({
+          req,
+          targetPath: resolvedTarget,
+          resolveProjectDirectory,
+          path,
+          os,
+          normalizeDirectoryPath,
+          vinciUserConfigRoot,
+        });
+        if (!resolved.ok) {
+          file.resume();
+          throw new Error(resolved.error || 'Path is outside of active workspace');
+        }
+
+        await fsPromises.mkdir(path.dirname(resolved.resolved), { recursive: true });
+
+        const chunks = [];
+        for await (const chunk of file) {
+          chunks.push(chunk);
+        }
+        const buffer = Buffer.concat(chunks);
+        await fsPromises.writeFile(resolved.resolved, buffer);
+        return { path: resolved.resolved, size: buffer.length };
+      })();
+
+      writePromise
+        .then((result) => uploadedFiles.push(result))
+        .catch((err) => {
+          console.error(`[upload] Failed to write ${filename}:`, err.message);
+          errors.push({ filename, error: err.message });
+        });
+    });
+
+    busboy.on('finish', () => {
+      if (responseSent) return;
+      responseSent = true;
+      if (errors.length > 0 && uploadedFiles.length === 0) {
+        return res.status(500).json({ error: errors[0].error || 'Upload failed', errors });
+      }
+      return res.json({ success: true, files: uploadedFiles, errors: errors.length > 0 ? errors : undefined });
+    });
+
+    busboy.on('error', (err) => {
+      console.error('[upload] Busboy error:', err);
+      return sendError(500, 'Upload failed');
+    });
+
+    req.on('aborted', () => {
+      console.error('[upload] Request aborted');
+    });
+
+    req.pipe(busboy);
+  });
+
   app.post('/api/fs/delete', async (req, res) => {
     const { path: targetPath } = req.body || {};
     if (!targetPath || typeof targetPath !== 'string') {