Add workspace zip download

README.md

@@ -67,6 +67,10 @@ These behaviors are intentional Space-only deltas:
   `run_.../agent_trace/` for traces and `_session_state.json`.
 - Uploaded images are saved under `agent_workspace/inputs/images/` and are also
   passed to the model as image inputs when supported.
+- Users can download files created or handled by the agent with the
+  `Download workspace.zip` button. The zip contains only the current chat's
+  `agent_workspace/`; it does not include `agent_trace/`, server files, or
+  Space secrets.
 - The frontend exposes a per-run model dropdown. Current options are `gpt-5.5`
   and `claude-opus-4-7`; the selection must stay local to that run and must not
   mutate global process environment variables.
@@ -132,7 +136,9 @@ Configure these as Hugging Face Space secrets before starting the app:
     └── agent_trace/              # trace JSONL and _session_state.json
 ```
 
-The frontend only exposes the chat UI. The workspace path is managed by the server so hosted users cannot browse or select server folders.
+The frontend exposes the chat UI and a single `Download workspace.zip` action
+for the current chat. The workspace path is managed by the server so hosted
+users cannot browse or select server folders.
 
 ## Trajectory Collection
 

check_space_runtime.py

@@ -2,8 +2,11 @@ from __future__ import annotations
 
 import asyncio
 import tempfile
+import zipfile
 from pathlib import Path
 
+from fastapi.testclient import TestClient
+
 from frontend import local_server
 
 
@@ -36,6 +39,18 @@ def main() -> int:
             run_root = Path(bridge.managed_run_root)
             (workspace_root / "answer.txt").write_text("ok\n", encoding="utf-8")
             Path(trace_dir, "trace.jsonl").write_text('{"ok": true}\n', encoding="utf-8")
+            client = TestClient(local_server.app)
+            zip_response = client.get(f"/api/workspace.zip?token={bridge.download_token}")
+            if zip_response.status_code != 200:
+                raise RuntimeError(f"workspace zip endpoint returned {zip_response.status_code}")
+            workspace_zip = Path(tmp) / "workspace.zip"
+            workspace_zip.write_bytes(zip_response.content)
+            with zipfile.ZipFile(workspace_zip) as archive:
+                names = set(archive.namelist())
+                if "answer.txt" not in names:
+                    raise RuntimeError("workspace zip did not include agent workspace file")
+                if any(name.startswith("agent_trace/") for name in names):
+                    raise RuntimeError("workspace zip must not include trace files")
             bundle = local_server._write_collection_bundle(
                 run_root,
                 {"result_text": "ok", "termination": "result"},

frontend/local_server.py

@@ -7,6 +7,7 @@ import json
 import os
 import re
 import shutil
+import tempfile
 import threading
 import time
 import traceback
@@ -15,9 +16,10 @@ from pathlib import Path
 from typing import Any
 from uuid import uuid4
 
-from fastapi import FastAPI, WebSocket, WebSocketDisconnect
+from fastapi import FastAPI, HTTPException, WebSocket, WebSocketDisconnect
 from fastapi.responses import FileResponse
 from fastapi.staticfiles import StaticFiles
+from starlette.background import BackgroundTask
 
 from agent_base.react_agent import MultiTurnReactAgent, default_llm_config
 from agent_base.utils import (
@@ -35,6 +37,8 @@ from agent_base.utils import (
 STATIC_DIR = Path(__file__).resolve().parent / "static"
 MAX_UPLOAD_IMAGES = 12
 MAX_IMAGE_BYTES = 12 * 1024 * 1024
+MAX_WORKSPACE_DOWNLOAD_BYTES = 100 * 1024 * 1024
+MAX_WORKSPACE_DOWNLOAD_FILES = 5000
 FRONTEND_MANAGED_RUNS_DIR: str | None = None
 FRONTEND_CLEANUP_RETENTION_SECONDS = 6 * 60 * 60
 FRONTEND_CLEANUP_MAX_RUNS = 40
@@ -46,6 +50,8 @@ FRONTEND_COLLECTION_MAX_BUNDLE_BYTES = 20 * 1024 * 1024
 _CLEANUP_THREAD_STARTED = False
 _ACTIVE_MANAGED_RUNS: set[str] = set()
 _ACTIVE_MANAGED_RUNS_LOCK = threading.Lock()
+_DOWNLOAD_WORKSPACES: dict[str, str] = {}
+_DOWNLOAD_WORKSPACES_LOCK = threading.Lock()
 _COLLECTION_LOCK = threading.Lock()
 _COLLECTION_CONFIG_WARNED: set[str] = set()
 
@@ -104,6 +110,7 @@ class FrontendRunBridge:
         self.managed_run_root: str = ""
         self.managed_workspace_root: str = ""
         self.managed_trace_dir: str = ""
+        self.download_token: str = ""
         self._pending_answers: dict[str, str] = {}
         self._pending_events: dict[str, threading.Event] = {}
         self._lock = threading.Lock()
@@ -167,13 +174,40 @@ def _mark_managed_run_active(run_root: Path) -> None:
         _ACTIVE_MANAGED_RUNS.add(str(run_root.resolve()))
 
 
+def _register_download_workspace(workspace_root: Path) -> str:
+    token = uuid4().hex
+    with _DOWNLOAD_WORKSPACES_LOCK:
+        _DOWNLOAD_WORKSPACES[token] = str(workspace_root.resolve())
+    return token
+
+
+def _unregister_download_workspace(token: str) -> None:
+    if not token:
+        return
+    with _DOWNLOAD_WORKSPACES_LOCK:
+        _DOWNLOAD_WORKSPACES.pop(token, None)
+
+
+def _download_workspace_for_token(token: str) -> Path:
+    with _DOWNLOAD_WORKSPACES_LOCK:
+        workspace_text = _DOWNLOAD_WORKSPACES.get(str(token or ""))
+    if not workspace_text:
+        raise HTTPException(status_code=404, detail="No downloadable workspace is available for this chat.")
+    workspace_root = Path(workspace_text).resolve()
+    if not workspace_root.is_dir():
+        raise HTTPException(status_code=404, detail="The workspace is no longer available.")
+    return workspace_root
+
+
 def _release_managed_run(bridge: FrontendRunBridge) -> None:
+    _unregister_download_workspace(bridge.download_token)
     if bridge.managed_run_root:
         with _ACTIVE_MANAGED_RUNS_LOCK:
             _ACTIVE_MANAGED_RUNS.discard(str(Path(bridge.managed_run_root).resolve()))
     bridge.managed_run_root = ""
     bridge.managed_workspace_root = ""
     bridge.managed_trace_dir = ""
+    bridge.download_token = ""
 
 
 def _create_managed_run(bridge: FrontendRunBridge) -> tuple[Path, str]:
@@ -185,6 +219,7 @@ def _create_managed_run(bridge: FrontendRunBridge) -> tuple[Path, str]:
     bridge.managed_run_root = str(run_root)
     bridge.managed_workspace_root = str(workspace_root)
     bridge.managed_trace_dir = str(trace_dir)
+    bridge.download_token = _register_download_workspace(workspace_root)
     _mark_managed_run_active(run_root)
     return workspace_root, str(trace_dir)
 
@@ -439,6 +474,46 @@ def _collect_finished_managed_run(run_root_text: str, result: dict[str, Any]) ->
     threading.Thread(target=_flush_collection_batches, daemon=True).start()
 
 
+def _workspace_download_files(workspace_root: Path) -> list[Path]:
+    files: list[Path] = []
+    total_bytes = 0
+    for path in sorted(workspace_root.rglob("*")):
+        if path.is_symlink() or not path.is_file():
+            continue
+        try:
+            resolved = path.resolve()
+            resolved.relative_to(workspace_root)
+            size = resolved.stat().st_size
+        except (OSError, ValueError):
+            continue
+        files.append(resolved)
+        total_bytes += size
+        if len(files) > MAX_WORKSPACE_DOWNLOAD_FILES:
+            raise HTTPException(status_code=413, detail="Workspace has too many files to download as one zip.")
+        if total_bytes > MAX_WORKSPACE_DOWNLOAD_BYTES:
+            raise HTTPException(status_code=413, detail="Workspace is too large to download as one zip.")
+    if not files:
+        raise HTTPException(status_code=404, detail="The agent workspace has no downloadable files yet.")
+    return files
+
+
+def _create_workspace_zip(workspace_root: Path) -> Path:
+    files = _workspace_download_files(workspace_root)
+    handle = tempfile.NamedTemporaryFile(prefix="rh_workspace_", suffix=".zip", delete=False)
+    zip_path = Path(handle.name)
+    handle.close()
+    try:
+        with zipfile.ZipFile(zip_path, "w", compression=zipfile.ZIP_DEFLATED) as archive:
+            for path in files:
+                archive.write(path, path.relative_to(workspace_root).as_posix())
+        if zip_path.stat().st_size > MAX_WORKSPACE_DOWNLOAD_BYTES:
+            raise HTTPException(status_code=413, detail="Workspace zip is too large to download.")
+    except Exception:
+        zip_path.unlink(missing_ok=True)
+        raise
+    return zip_path
+
+
 class FrontendInteractiveAgent(MultiTurnReactAgent):
     def __init__(self, *, bridge: FrontendRunBridge, **kwargs: Any):
         super().__init__(**kwargs)
@@ -546,6 +621,7 @@ def _run_agent_thread(
                 "model": agent.model,
                 "workspace_root": str(workspace_root),
                 "trace_dir": trace_dir,
+                "download_token": bridge.download_token,
             }
         )
         result = agent._run_session(
@@ -583,6 +659,19 @@ def favicon() -> FileResponse:
     return FileResponse(STATIC_DIR / "favicon.svg", media_type="image/svg+xml")
 
 
+@app.get("/api/workspace.zip")
+def download_workspace_zip(token: str) -> FileResponse:
+    workspace_root = _download_workspace_for_token(token)
+    zip_path = _create_workspace_zip(workspace_root)
+    filename = f"{workspace_root.parent.name}_agent_workspace.zip"
+    return FileResponse(
+        zip_path,
+        media_type="application/zip",
+        filename=filename,
+        background=BackgroundTask(lambda path: Path(path).unlink(missing_ok=True), str(zip_path)),
+    )
+
+
 @app.websocket("/ws")
 async def websocket_endpoint(websocket: WebSocket) -> None:
     await websocket.accept()

frontend/static/app.css

@@ -319,9 +319,10 @@ button {
   position: sticky;
   top: 66px;
   z-index: 8;
-  display: grid;
-  grid-template-columns: minmax(0, 1fr);
+  display: flex;
   align-items: center;
+  justify-content: space-between;
+  gap: 12px;
   margin-top: 10px;
   border-radius: 18px;
   padding: 9px 12px;
@@ -336,7 +337,6 @@ button {
 .workspace-strip span {
   display: block;
   min-width: 0;
-  max-width: 100%;
   color: var(--muted);
   font-size: 0.82rem;
   overflow-wrap: anywhere;
@@ -344,6 +344,24 @@ button {
   white-space: normal;
 }
 
+.download-workspace {
+  flex: 0 0 auto;
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  background: var(--panel-strong);
+  color: var(--text);
+  font-size: 0.78rem;
+  font-weight: 850;
+  padding: 7px 11px;
+  transition: transform 0.18s ease, border-color 0.18s ease, background 0.18s ease;
+}
+
+.download-workspace:hover:not(:disabled),
+.download-workspace:focus-visible {
+  border-color: rgba(var(--glow-rgb), 0.38);
+  transform: translateY(-1px);
+}
+
 .messages {
   display: flex;
   flex-direction: column;
@@ -904,13 +922,18 @@ button:disabled {
   }
 
   .workspace-strip {
-    display: grid;
+    align-items: stretch;
+    flex-direction: column;
   }
 
   .workspace-strip span {
     max-width: none;
   }
 
+  .download-workspace {
+    width: 100%;
+  }
+
   .message,
   .event {
     max-width: 96%;

frontend/static/app.js

@@ -128,6 +128,7 @@
   var keepSubmittedMessageOnReset = false;
   var autoFollowTimeline = true;
   var conversationStarted = false;
+  var downloadToken = "";
   var images = [];
   var COLLAPSED_STEP_HEIGHT = 220;
 
@@ -145,6 +146,8 @@
   var dropZone = document.getElementById("dropZone");
   var timeline = document.getElementById("timeline");
   var statusPill = document.getElementById("statusPill");
+  var workspaceMeta = document.getElementById("workspaceMeta");
+  var downloadWorkspaceBtn = document.getElementById("downloadWorkspaceBtn");
   var defaultPromptPlaceholder = promptInput.getAttribute("placeholder") || "Message ResearchHarness";
 
   function escapeHtml(value) {
@@ -215,6 +218,26 @@
     statusPill.className = "status " + (kind || "idle");
   }
 
+  function updateDownloadWorkspaceButton() {
+    if (!downloadWorkspaceBtn) return;
+    downloadWorkspaceBtn.disabled = !downloadToken;
+    downloadWorkspaceBtn.title = downloadToken
+      ? "Download files created or handled by the agent in this chat."
+      : "Run the agent first, then download the generated workspace files.";
+  }
+
+  function setDownloadToken(token) {
+    downloadToken = String(token || "");
+    updateDownloadWorkspaceButton();
+  }
+
+  function updateWorkspaceHint(hasWorkspace) {
+    if (!workspaceMeta) return;
+    workspaceMeta.textContent = hasWorkspace
+      ? "If you want to download files created or handled by the agent, click Download workspace.zip."
+      : "Managed temporary workspace. After a run, click Download workspace.zip to download files created or handled by the agent.";
+  }
+
   function closeModelDropdown() {
     if (!modelDropdown || !modelDropdownButton) return;
     modelDropdown.classList.remove("open");
@@ -516,6 +539,8 @@
       setStatus("Connected", "idle");
     };
     ws.onclose = function () {
+      setDownloadToken("");
+      updateWorkspaceHint(false);
       clearAskRequest();
       setRunning(false, "Disconnected");
       setStatus("Disconnected", "error");
@@ -525,6 +550,8 @@
       if (message.type === "ready") {
         setStatus("Connected", "idle");
       } else if (message.type === "conversation_reset") {
+        setDownloadToken("");
+        updateWorkspaceHint(false);
         if (keepSubmittedMessageOnReset) {
           keepSubmittedMessageOnReset = false;
           ensureTimelineReady();
@@ -536,6 +563,8 @@
       } else if (message.type === "uploaded_images") {
         addEvent("runtime", "Uploaded images saved", "<pre>" + escapeHtml((message.paths || []).join("\n")) + "</pre>", []);
       } else if (message.type === "run_started") {
+        setDownloadToken(message.download_token || "");
+        updateWorkspaceHint(Boolean(message.download_token));
         setRunning(true, "Running");
       } else if (message.type === "interrupt_requested") {
         interrupting = true;
@@ -691,9 +720,18 @@
       clearTimeline();
       clearAskRequest();
       conversationStarted = false;
+      setDownloadToken("");
+      updateWorkspaceHint(false);
       setRunning(false, "Idle");
     }
   });
+  if (downloadWorkspaceBtn) {
+    downloadWorkspaceBtn.addEventListener("click", function () {
+      if (!downloadToken) return;
+      window.location.href = "/api/workspace.zip?token=" + encodeURIComponent(downloadToken);
+    });
+    updateDownloadWorkspaceButton();
+  }
   attachBtn.addEventListener("click", function () {
     imageInput.click();
   });

frontend/static/index.html

@@ -35,7 +35,10 @@
       </header>
 
       <section id="workspaceStrip" class="workspace-strip">
-        <span id="workspaceMeta">Managed temporary workspace. Each chat uses an isolated runtime directory.</span>
+        <span id="workspaceMeta">Managed temporary workspace. After a run, click Download workspace.zip to download files created or handled by the agent.</span>
+        <button id="downloadWorkspaceBtn" class="download-workspace" type="button" disabled>
+          Download workspace.zip
+        </button>
       </section>
 
       <section id="timeline" class="messages">