Files

List entries under the requested directory. Omitting path uses the sandbox’s default working directory. depth defaults to 1 and recursive listings are capped at 10,000 entries.

Delete one file. Directories require recursive=true or recursive=1.

Stream regular files at absolute paths using the sandbox user's permissions. Invalid paths, non-regular files and permission denials discovered before streaming refuse the request with 400 or 403. Other failures, including failures after streaming starts, use error parts carrying error envelopes; the outer response then stays 200.

Upload files using paired absolute files[i].path and files[i].file multipart fields. A relative or empty path, or a non-regular destination, returns 400 INVALID_FILE_PATH; non-regular destinations use <path>: not a regular file. Earlier uploads are not rolled back. Other partial success is reported per file in the JSON body. New files and directories belong to the configured sandbox user, and writes require that user’s permissions. With atomic=true, each successful file is replaced atomically; unsupported atomic replacement is reported for that file while other files continue.

Stream one regular file at an absolute path as application/octet-stream, using the sandbox user's permissions. Directories, FIFOs, sockets and devices are refused without reading them.

Walk the tree rooted at the absolute path as the sandbox user and return literal substring matches with one-based line numbers. Non-regular files are skipped. Directories and files below the root that the sandbox user cannot read are skipped and listed in skipped (at most 1000); only an unreadable root fails the request.

Create the requested directory tree. Omitting mode uses the route default.

Return one FileInfo record for the requested path.

Move or rename a path, including between filesystems.

Change mode and, on platforms that support it, owner and group.

Replace a literal substring across regular files at absolute paths as the sandbox user. Permission denials return 403; other file-specific failures, including skipped non-regular files, stay inside the 200 response body. Earlier replacements are not rolled back when a later file fails.

Walk the tree rooted at path as the sandbox user and return absolute file paths whose base name matches the glob pattern. Directories and files below the root that the sandbox user cannot read are skipped and listed in skipped (at most 1000); only an unreadable root fails the request.

Upload the multipart part named file to the query’s absolute destination path. Existing destinations must be regular files; directories, FIFOs, sockets and devices return 400 INVALID_FILE_PATH with <path>: not a regular file, without writing to them. New files and parent directories belong to the configured sandbox user; existing files retain their ownership, except that atomic=true over a file the sandbox user cannot give back to its owner leaves the replacement owned by the sandbox user. Writes require that user’s permissions, otherwise return 403 FILE_ACCESS_DENIED without creating a destination. With atomic=true, replace the destination atomically or fail if unsupported.

Server-sent events for one absolute directory path, using the sandbox user's permissions. The stream emits start with {}, fs with WatchFsEvent, and overflow with WatchOverflowEvent. On macOS, a permission denial discovered after streaming starts emits error with an error envelope and closes the stream. follow=true is accepted and ignored for compatibility.