Files

Gated private file upload/replacement, bounded inventory/status and exact-generation or immutable attachment downloads.

📄️Download Message Attachment Copy

Download only a retained immutable message copy with exact G03 principal/message lineage and known scan provenance. No mutable filespace-node fallback; same bounded checksum snapshot and private response policy. Requires `agents:read`. Current principal/owner/filespace/origin authority is required. New local private intake requires API_REST_FILES_ENABLED and direct-upload scanning; admission defaults off. Active and pending generations remain separate; shared filespaces are not principal confidentiality compartments.

📄️List Agent Files

List files in the default filespace, including nested files. Signed 24-hour cursors bind principal, owner, filespace and page size. Limit defaults 40 and is 1–100; inventory is not a snapshot. Requires `agents:read`. Current principal/owner/filespace/origin authority is required. New local private intake requires API_REST_FILES_ENABLED and direct-upload scanning; admission defaults off. Active and pending generations remain separate; shared filespaces are not principal confidentiality compartments.

📄️Upload Agent File

Stage one bounded multipart file in private quarantine. Required replay key binds exact bytes/name/parent/type. 202 is acceptance, not a clean verdict; poll detail. Size uses MAX_FILE_SIZE, 10 MiB/default and fallback. Requires `agents:operate`. Current principal/owner/filespace/origin authority is required. New local private intake requires API_REST_FILES_ENABLED and direct-upload scanning; admission defaults off. Active and pending generations remain separate; shared filespaces are not principal confidentiality compartments.

📄️Get Agent File Status

Read authorized availability, active/pending generation UUIDs and scan status. No scanner internals or storage locations are returned. Requires `agents:read`. Current principal/owner/filespace/origin authority is required. New local private intake requires API_REST_FILES_ENABLED and direct-upload scanning; admission defaults off. Active and pending generations remain separate; shared filespaces are not principal confidentiality compartments.

📄️Replace Agent File Content

Replace content of a stable file UUID with exactly one multipart file and a required replay key. Latest pending generation supersedes prior pending content; old clean bytes remain available until clean promotion. Requires `agents:operate`. Current principal/owner/filespace/origin authority is required. New local private intake requires API_REST_FILES_ENABLED and direct-upload scanning; admission defaults off. Active and pending generations remain separate; shared filespaces are not principal confidentiality compartments.

📄️Download Agent File Generation

Download an exact active generation after bounded checksum snapshot and final current-authority validation. Private octet-stream attachment with no-store/nosniff; no storage URL. Admitted HTTP bytes cannot be recalled. Requires `agents:read`. Current principal/owner/filespace/origin authority is required. New local private intake requires API_REST_FILES_ENABLED and direct-upload scanning; admission defaults off. Active and pending generations remain separate; shared filespaces are not principal confidentiality compartments.