Add VM file management API endpoints

README.md

@@ -91,6 +91,10 @@ uvicorn api_app:app --host 0.0.0.0 --port 8000
 - `POST /chat/stream` – stream the assistant's response as plain text.
 - `POST /upload` – upload a document that can be referenced in chats.
 - `GET /sessions/{user}` – list available session names for a user.
+- `GET /vm/{user}/list` – list files in a directory under `/data`.
+- `GET /vm/{user}/file` – read a file from the VM.
+- `POST /vm/{user}/file` – create or overwrite a file in the VM.
+- `DELETE /vm/{user}/file` – delete a file or directory from the VM.
 
 Example request:
 

api_app/__init__.py

@@ -1,14 +1,17 @@
 from __future__ import annotations
 
-from fastapi import FastAPI, UploadFile, File, Form
+from fastapi import FastAPI, UploadFile, File, Form, HTTPException
 from fastapi.responses import StreamingResponse
-from fastapi import HTTPException
 from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel
 import asyncio
 import os
 import tempfile
 from pathlib import Path
+from typing import List
+import shutil
+
+from src.config import UPLOAD_DIR
 
 from src.team import TeamChatSession
 from src.log import get_logger
@@ -24,6 +27,26 @@ class ChatRequest(BaseModel):
     prompt: str
 
 
+class FileWriteRequest(BaseModel):
+    path: str
+    content: str
+
+
+def _vm_host_path(user: str, vm_path: str) -> Path:
+    """Return the host path for a given ``vm_path`` inside ``/data``."""
+
+    try:
+        rel = Path(vm_path).relative_to("/data")
+    except ValueError as exc:  # pragma: no cover - invalid path
+        raise HTTPException(status_code=400, detail="Path must start with /data") from exc
+
+    base = (Path(UPLOAD_DIR) / user).resolve()
+    target = (base / rel).resolve()
+    if not target.is_relative_to(base):
+        raise HTTPException(status_code=400, detail="Invalid path")
+    return target
+
+
 def create_app() -> FastAPI:
     app = FastAPI(title="LLM Backend API")
 
@@ -84,6 +107,49 @@ def create_app() -> FastAPI:
     async def health():
         return {"status": "ok"}
 
+    @app.get("/vm/{user}/list")
+    async def list_vm_dir(user: str, path: str = "/data"):
+        target = _vm_host_path(user, path)
+        if not target.exists():
+            raise HTTPException(status_code=404, detail="Directory not found")
+        if not target.is_dir():
+            raise HTTPException(status_code=400, detail="Not a directory")
+        entries: List[dict[str, str | bool]] = []
+        for entry in sorted(target.iterdir()):
+            entries.append({"name": entry.name, "is_dir": entry.is_dir()})
+        return {"entries": entries}
+
+    @app.get("/vm/{user}/file")
+    async def read_vm_file(user: str, path: str):
+        target = _vm_host_path(user, path)
+        if not target.exists():
+            raise HTTPException(status_code=404, detail="File not found")
+        if target.is_dir():
+            raise HTTPException(status_code=400, detail="Path is a directory")
+        try:
+            content = target.read_text()
+        except UnicodeDecodeError:
+            raise HTTPException(status_code=400, detail="Binary file not supported")
+        return {"content": content}
+
+    @app.post("/vm/{user}/file")
+    async def write_vm_file(user: str, req: FileWriteRequest):
+        target = _vm_host_path(user, req.path)
+        target.parent.mkdir(parents=True, exist_ok=True)
+        target.write_text(req.content)
+        return {"status": "ok"}
+
+    @app.delete("/vm/{user}/file")
+    async def delete_vm_file(user: str, path: str):
+        target = _vm_host_path(user, path)
+        if target.is_dir():
+            shutil.rmtree(target)
+        elif target.exists():
+            target.unlink()
+        else:
+            raise HTTPException(status_code=404, detail="File not found")
+        return {"status": "deleted"}
+
     return app