Files

List entries under the requested directory. Omitting path uses the daemon work directory. depth defaults to 1 and recursive listings are capped at 10,000 entries.

Delete one file. Directories require recursive=true or recursive=1.

Stream a multipart response with file parts for successful paths and error parts carrying error envelopes for per-path failures. The outer response stays 200 on partial success.

Stream multipart uploads correlated by files[i].path and files[i].file. Partial success is reported in the JSON body: each destination is created and opened under the same rules as /files/upload (paths normalized lexically, created files and directories handed to the sandbox default OS user, and — when one is configured — every write and every directory creation opened as that user could have; a per-entry refusal appears in errors and creates nothing). When atomic=true, each successful file is written through a temporary file + rename with no non-atomic fallback, and an unsupported atomic rename is reported in that entry's errors slot while the rest of the batch continues.

Stream one file as application/octet-stream. Directories are rejected.

Walk the tree rooted at path and return literal substring matches with one-based line numbers.

Create the requested directory tree. Omitting mode uses the route default.

Return one FileInfo record for the requested path.

Rename the path when possible, or copy-then-remove across filesystems.

Change mode and, on platforms that support it, owner and group.

Replace a literal substring across the requested files. File-specific failures stay inside the 200 response body.

Walk the tree rooted at path and return absolute file paths whose base name matches the glob pattern.

Stream the multipart part named file to the destination path from the query string. The path is normalized lexically (.. collapsed) before use. A newly created file — and every parent directory this call created — is owned by the sandbox default OS user when one is configured; a pre-existing file is rewritten in place and never re-owned. A symlink at the path is followed one hop, opened without following further links, and never re-owned. When atomic=true, the daemon writes a temporary file in the destination directory, fsyncs it, applies the destination mode, and renames it over the target with no non-atomic fallback. When a default OS user is configured every write — and every directory this call would create — is opened as that user could have: search permission on every directory, write permission on the destination (or on the deepest existing directory when parents are missing), symlinks anywhere on the path followed under the same rules; otherwise 403 FILE_ACCESS_DENIED and nothing is created.

Server-sent events for one directory. The stream emits start with {}, fs with WatchFsEvent, and overflow with WatchOverflowEvent. follow=true is accepted and ignored for compatibility.