Upload 17 files

dashboardlogic.js

@@ -474,24 +474,25 @@ async function downloadPreviewFile() {
     }
 }
 
-// Upload file using Gradio JS client to /upload_file_secure
+// Upload file (single file) via server-side endpoint so private HF token stays on the server
 async function handleUpload(input) {
-    if (!input.files || !input.files[0]) return;    const file = input.files[0];
+    if (!input.files || !input.files[0]) return;
+    const file = input.files[0];
     try {
         loading(true);
-        // Match known-working version: rely on existing connected client and pass tokens with the request
-        console.log('Uploading file:', file, 'type:', file.constructor.name);
-        // Ensure client is connected with HF token for private Space (token set by login as hf_server_token)
-        if (!client) {
-            const hfToken = getWriteToken() || getReadToken();
-            client = await Client.connect("pockit-cloud/main", { hf_token: hfToken });
-        }
-        const result = await client.predict("/upload_file_secure", withTokens({
-            user_id: currentUser,
-            password: currentPassword,
-            filepath: file,
-            custom_name: file.name,
-        }));
+        const formData = new FormData();
+        formData.append('file', file);
+        formData.append('user_id', currentUser);
+        formData.append('password', currentPassword);
+        formData.append('custom_name', file.name);
+
+        const resp = await fetch('/api/upload', {
+            method: 'POST',
+            body: formData,
+        });
+        if (!resp.ok) throw new Error('Upload HTTP ' + resp.status);
+        const result = await resp.json();
+
         console.log('Uploaded:', file.name);
         // Update storage
         const [status, capacityUsed, usedTotal] = result.data;
@@ -505,8 +506,9 @@ async function handleUpload(input) {
         input.value = '';
     } catch (err) {
         console.error('Upload error:', err);
-        loading(false);
         showToast('Upload failed');
+    } finally {
+        loading(false);
     }
 }