Upload 17 files

dashboardlogic.js

@@ -17,6 +17,17 @@ function withTokens(obj = {}) {
     };
 }
 
+// Helper to call secure server-side proxy
+async function callSecureApi(fn, args) {
+    const resp = await fetch('/api/proxy', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ fn, args })
+    });
+    if (!resp.ok) throw new Error('Proxy error: ' + resp.status);
+    return await resp.json();
+}
+
 let client;
 let currentUser = null;
 let currentPassword = null;
@@ -52,19 +63,15 @@ async function initDashboard() {
     }
     
     try {
-        client = await Client.connect("pockit-cloud/main", { 
-          hf_token: getReadToken() || getWriteToken() 
-        });
-        console.log('✓ Connected to API');
-        
-        // Update account info
+        // Update account info first
         const initials = currentUser.substring(0, 2).toUpperCase();
         document.querySelector('.avatar').textContent = initials;
         document.querySelector('.account-name').textContent = currentUser;
         
-        // Load data
+        // Load data using proxy
         await loadUserData();
         await loadFiles();
+        console.log('✓ Dashboard loaded');
         
     } catch (err) {
         console.error('Init error:', err);
@@ -77,7 +84,7 @@ async function initDashboard() {
 async function loadUserData() {
     try {
         console.log('Loading user data...');
-        const result = await client.predict("/search_user", withTokens({ user_id: currentUser }));
+        const result = await callSecureApi("/search_user", withTokens({ user_id: currentUser }));
         const [log, isDev, isPro, isTester, capacityUsed, usedTotal] = result.data;
         
         // Determine role
@@ -124,7 +131,7 @@ async function loadFiles() {
     try {
         console.log('Loading files...');
         loading(true);
-        const result = await client.predict("/get_files_secure", withTokens({
+        const result = await callSecureApi("/get_files_secure", withTokens({
             user_id: currentUser,
             password: currentPassword,
         }));
@@ -303,7 +310,7 @@ async function loadPreviewContent(file) {
     previewContainer.innerHTML = '<span style="color:#aaa">Loading preview...</span>';
     try {
         // Try /handle_preview_secure first
-        const result = await client.predict("/handle_preview_secure", withTokens({
+        const result = await callSecureApi("/handle_preview_secure", withTokens({
             user_id: currentUser,
             password: currentPassword,
             filename: file.name,
@@ -321,7 +328,7 @@ async function loadPreviewContent(file) {
             previewHtml = `<pre class="pv-code">${escapeHtml(result.data[4])}</pre>`;
         } else {
             // Try /get_preview_text_action for text preview
-            const textResult = await client.predict("/get_preview_text_action", withTokens({
+            const textResult = await callSecureApi("/get_preview_text_action", withTokens({
                 user_id: currentUser,
                 password: currentPassword,
                 filename: file.name,
@@ -356,7 +363,7 @@ async function deleteFile(id) {
     
     try {
         loading(true);
-        const result = await client.predict("/delete_file_secure", withTokens({
+        const result = await callSecureApi("/delete_file_secure", withTokens({
             user_id: currentUser,
             password: currentPassword,
             filename: file.name,
@@ -415,7 +422,7 @@ async function downloadFile(id) {
     try {
         loading(true);
         // Use /get_download_link_action to get the raw download link
-        const result = await client.predict("/get_download_link_action", withTokens({
+        const result = await callSecureApi("/get_download_link_action", withTokens({
             user_id: currentUser,
             password: currentPassword,
             filename: file.name,
@@ -434,7 +441,7 @@ async function downloadFile(id) {
                     status: response.status,
                     statusText: response.statusText
                 });
-                throw new Error('Network response was not ok (status ' + response.status + '): ' + response.statusText);
+                throw new Error('Network response was not ok');
             }
             const blob = await response.blob();
             const url = window.URL.createObjectURL(blob);
@@ -455,7 +462,7 @@ async function downloadFile(id) {
     } catch (err) {
         console.error('Download error:', err);
         loading(false);
-        showToast('Download failed: ' + (err && err.message ? err.message : ''));
+        showToast('Download failed');
     }
 }
 
@@ -467,20 +474,22 @@ async function downloadPreviewFile() {
     }
 }
 
-// Upload file
+// Upload file - use proxy endpoint for upload
 async function handleUpload(input) {
     if (!input.files || !input.files[0]) return;
     const file = input.files[0];
     try {
         loading(true);
-        // Use File object and pass custom_name for filename preservation
-        console.log('Uploading file:', file, 'type:', file.constructor.name);
-        const result = await client.predict("/upload_file_secure", withTokens({
-            user_id: currentUser,
-            password: currentPassword,
-            filepath: file,
-            custom_name: file.name,
-        }));
+        const formData = new FormData();
+        formData.append('file', file);
+        formData.append('user_id', currentUser);
+        formData.append('password', currentPassword);
+        formData.append('custom_name', file.name);
+        const resp = await fetch('/api/upload', {
+            method: 'POST',
+            body: formData
+        });
+        const result = await resp.json();
         console.log('Uploaded:', file.name);
         // Update storage
         const [status, capacityUsed, usedTotal] = result.data;
@@ -549,7 +558,7 @@ async function changePassword() {
     
     try {
         loading(true);
-        const result = await client.predict("/update_password", withTokens({
+        const result = await callSecureApi("/update_password", withTokens({
             user_id: currentUser,
             new_password: p1,
         }));
@@ -615,6 +624,7 @@ window.toggleSelect = toggleSelect;
 window.clearSelection = clearSelection;
 window.handleSelectAll = handleSelectAll;
 window.openPreview = openPreview;
+window.loadPreviewContent = loadPreviewContent;
 window.deleteFile = deleteFile;
 window.deleteSelected = deleteSelected;
 window.deletePreviewFile = deletePreviewFile;
@@ -631,3 +641,4 @@ window.openModal = openModal;
 window.closeModal = closeModal;
 window.loading = loading;
 window.showToast = showToast;
+