fix: File preview for secure data and open .dart files in Flutter IDE with content

app/components/Desktop.tsx

@@ -194,9 +194,17 @@ export function Desktop() {
 
 
   const openFlutterCodeEditor = () => {
-    setFlutterCodeEditorOpen(true)
-    setFlutterCodeEditorMinimized(false)
-    setWindowZIndices(prev => ({ ...prev, flutterCodeEditor: getNextZIndex() }))
+    // Check if there's file content stored from File Manager
+    const storedContent = sessionStorage.getItem('flutterFileContent')
+    if (storedContent) {
+      setActiveFlutterApp({ dartCode: storedContent })
+      sessionStorage.removeItem('flutterFileContent') // Clean up
+    } else {
+      setActiveFlutterApp(null) // Use default template
+    }
+    setFlutterRunnerOpen(true)
+    setFlutterRunnerMinimized(false)
+    setWindowZIndices(prev => ({ ...prev, flutterRunner: getNextZIndex() }))
   }
 
   const closeFlutterCodeEditor = () => {

app/components/FileManager.tsx

@@ -496,13 +496,31 @@ export function FileManager({ currentPath, onNavigate, onClose, onOpenFlutterApp
                           className="group relative"
                         >
                           <button
-                            onDoubleClick={() => {
+                            onDoubleClick={async () => {
                               if (file.type === 'folder') {
                                 onNavigate(file.path)
                               } else if (file.type === 'flutter_app' && onOpenFlutterApp) {
                                 onOpenFlutterApp(file)
                               } else if (file.extension === 'dart' || file.extension === 'flutter') {
-                                if (onOpenApp) onOpenApp('flutter-editor')
+                                // Load the file content and open Flutter IDE with it
+                                try {
+                                  let fileContent = ''
+                                  if (sidebarSelection === 'secure' && passkey) {
+                                    const response = await fetch(`/api/data?key=${encodeURIComponent(passkey)}&folder=`)
+                                    const data = await response.json()
+                                    const fileData = data.files?.find((f: any) => f.name === file.name)
+                                    fileContent = fileData?.content || ''
+                                  }
+                                  // Open Flutter IDE with the file content
+                                  if (onOpenApp) {
+                                    // Store the content temporarily for the Flutter IDE to pick up
+                                    sessionStorage.setItem('flutterFileContent', fileContent)
+                                    onOpenApp('flutter-editor')
+                                  }
+                                } catch (error) {
+                                  console.error('Error loading file:', error)
+                                  if (onOpenApp) onOpenApp('flutter-editor')
+                                }
                               } else if (file.extension === 'tex') {
                                 if (onOpenApp) onOpenApp('latex-editor')
                               } else {
@@ -636,6 +654,8 @@ export function FileManager({ currentPath, onNavigate, onClose, onOpenFlutterApp
           file={previewFile}
           onClose={() => setPreviewFile(null)}
           onDownload={() => handleDownload(previewFile)}
+          passkey={passkey}
+          isPublic={sidebarSelection === 'public'}
         />
       )}
     </>

app/components/FilePreview.tsx

@@ -15,9 +15,11 @@ interface FilePreviewProps {
   }
   onClose: () => void
   onDownload: () => void
+  passkey?: string
+  isPublic?: boolean
 }
 
-export function FilePreview({ file, onClose, onDownload }: FilePreviewProps) {
+export function FilePreview({ file, onClose, onDownload, passkey, isPublic = true }: FilePreviewProps) {
   const [content, setContent] = useState<any>(null)
   const [loading, setLoading] = useState(true)
   const [error, setError] = useState<string | null>(null)
@@ -26,7 +28,11 @@ export function FilePreview({ file, onClose, onDownload }: FilePreviewProps) {
   // Excel specific state
   const [activeSheet, setActiveSheet] = useState(0)
 
-  const previewUrl = `/api/download?path=${encodeURIComponent(file.path)}&preview=true`
+  // For secure data, we read directly from /api/data
+  // For public, use the download API
+  const previewUrl = isPublic
+    ? `/api/download?path=${encodeURIComponent(file.path)}&preview=true`
+    : `/api/data?key=${encodeURIComponent(passkey || '')}&path=${encodeURIComponent(file.path)}`
   const ext = file.extension?.toLowerCase() || ''
 
   useEffect(() => {
@@ -69,6 +75,8 @@ export function FilePreview({ file, onClose, onDownload }: FilePreviewProps) {
         case 'sh':
         case 'yaml':
         case 'yml':
+        case 'dart':
+        case 'tex':
           await loadTextFile()
           break
         case 'csv':
@@ -124,9 +132,21 @@ export function FilePreview({ file, onClose, onDownload }: FilePreviewProps) {
 
   const loadTextFile = async () => {
     try {
-      const response = await fetch(previewUrl)
-      const text = await response.text()
-      setContent({ type: 'text', data: text })
+      // For secure data files, read from /api/data which returns file list with content
+      if (!isPublic && passkey) {
+        const response = await fetch(`/api/data?key=${encodeURIComponent(passkey)}&folder=`)
+        const data = await response.json()
+        const fileData = data.files?.find((f: any) => f.name === file.name)
+        if (fileData && fileData.content) {
+          setContent({ type: 'text', data: fileData.content })
+        } else {
+          throw new Error('File content not available')
+        }
+      } else {
+        const response = await fetch(previewUrl)
+        const text = await response.text()
+        setContent({ type: 'text', data: text })
+      }
     } catch (err) {
       throw new Error('Failed to load text file')
     }
@@ -234,9 +254,8 @@ export function FilePreview({ file, onClose, onDownload }: FilePreviewProps) {
               <button
                 key={index}
                 onClick={() => setActiveSheet(index)}
-                className={`px-3 py-1 rounded ${
-                  activeSheet === index ? 'bg-blue-500 text-white' : 'bg-gray-100'
-                }`}
+                className={`px-3 py-1 rounded ${activeSheet === index ? 'bg-blue-500 text-white' : 'bg-gray-100'
+                  }`}
               >
                 {sheet.name}
               </button>

test-mcp-endpoint.js

@@ -0,0 +1,150 @@
+// Test script for MCP handler API
+// Run with: node test-mcp-endpoint.js
+
+const BASE_URL = 'https://mcp-1st-birthday-reuben-os.hf.space';
+const API_URL = `${BASE_URL}/api/mcp-handler`;
+
+async function testMCPEndpoint() {
+    console.log('🧪 Testing MCP Handler API on Hugging Face...\n');
+
+    // Test 1: GET without passkey (should fail with error)
+    console.log('Test 1: GET without passkey');
+    try {
+        const response = await fetch(API_URL);
+        const data = await response.json();
+        console.log('✅ Response:', JSON.stringify(data, null, 2));
+        console.log('Expected error message: ✓\n');
+    } catch (error) {
+        console.log('❌ Error:', error.message, '\n');
+    }
+
+    // Test 2: POST - Save a test file to public folder
+    console.log('Test 2: POST - Save public file');
+    try {
+        const response = await fetch(API_URL, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                action: 'save_file',
+                fileName: 'test.txt',
+                content: 'Hello from MCP test!',
+                isPublic: true,
+            }),
+        });
+        const data = await response.json();
+        console.log('✅ Response:', JSON.stringify(data, null, 2));
+        if (data.success) {
+            console.log('✓ File saved successfully to public folder!\n');
+        } else {
+            console.log('✗ Save failed:', data.error, '\n');
+        }
+    } catch (error) {
+        console.log('❌ Error:', error.message, '\n');
+    }
+
+    // Test 3: GET - List public files
+    console.log('Test 3: GET - List public files');
+    try {
+        const url = new URL(API_URL);
+        url.searchParams.set('isPublic', 'true');
+
+        const response = await fetch(url);
+        const data = await response.json();
+        console.log('✅ Response:', JSON.stringify(data, null, 2));
+        if (data.success) {
+            console.log(`✓ Found ${data.count} public file(s)\n`);
+        }
+    } catch (error) {
+        console.log('❌ Error:', error.message, '\n');
+    }
+
+    // Test 4: POST - Save with passkey
+    console.log('Test 4: POST - Save with passkey');
+    const testPasskey = 'test-passkey-123';
+    try {
+        const response = await fetch(API_URL, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                passkey: testPasskey,
+                action: 'save_file',
+                fileName: 'secure_test.dart',
+                content: `// Flutter test file\nvoid main() {\n  print('Hello from secure storage!');\n}`,
+                isPublic: false,
+            }),
+        });
+        const data = await response.json();
+        console.log('✅ Response:', JSON.stringify(data, null, 2));
+        if (data.success) {
+            console.log('✓ File saved successfully to secure storage!\n');
+        }
+    } catch (error) {
+        console.log('❌ Error:', error.message, '\n');
+    }
+
+    // Test 5: GET - List files with passkey
+    console.log('Test 5: GET - List files with passkey');
+    try {
+        const url = new URL(API_URL);
+        url.searchParams.set('passkey', testPasskey);
+
+        const response = await fetch(url);
+        const data = await response.json();
+        console.log('✅ Response:', JSON.stringify(data, null, 2));
+        if (data.success) {
+            console.log(`✓ Found ${data.count} file(s) for passkey: ${testPasskey}\n`);
+        }
+    } catch (error) {
+        console.log('❌ Error:', error.message, '\n');
+    }
+
+    // Test 6: Deploy a test quiz
+    console.log('Test 6: POST - Deploy quiz');
+    try {
+        const quizData = {
+            title: 'Test Quiz',
+            description: 'A test quiz from MCP',
+            questions: [
+                {
+                    id: 'q1',
+                    question: 'What is 2+2?',
+                    type: 'multiple-choice',
+                    options: ['3', '4', '5', '6'],
+                    correctAnswer: 1,
+                    points: 1,
+                },
+            ],
+        };
+
+        const response = await fetch(API_URL, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                passkey: testPasskey,
+                action: 'deploy_quiz',
+                fileName: 'quiz.json',
+                content: JSON.stringify(quizData, null, 2),
+                isPublic: false,
+            }),
+        });
+        const data = await response.json();
+        console.log('✅ Response:', JSON.stringify(data, null, 2));
+        if (data.success) {
+            console.log('✓ Quiz deployed successfully!\n');
+        }
+    } catch (error) {
+        console.log('❌ Error:', error.message, '\n');
+    }
+
+    console.log('🎉 All tests completed!\n');
+    console.log('Summary:');
+    console.log('- MCP Handler API is accessible');
+    console.log('- Public file uploads work');
+    console.log('- Passkey-protected uploads work');
+    console.log('- File listing works');
+    console.log('- Quiz deployment works');
+    console.log('\n✅ Claude Desktop can now upload files to ReubenOS!');
+}
+
+// Run tests
+testMCPEndpoint().catch(console.error);