Update app.py

app.py

@@ -1,7 +1,10 @@
-from fastapi import FastAPI, Request
+from fastapi import FastAPI, Request, UploadFile, File, HTTPException
+from fastapi.responses import JSONResponse
 from fastapi.middleware.cors import CORSMiddleware
 from pydantic import BaseModel
-from pc_agent import run_command, list_files, cleanup
+from pc_agent import run_command, list_files, cleanup, ensure_workspace
+import aiofiles
+import os
 
 app = FastAPI()
 app.add_middleware(CORSMiddleware, allow_origins=["*"], allow_methods=["*"], allow_headers=["*"])
@@ -11,7 +14,9 @@ class CommandRequest(BaseModel):
 
 @app.post("/agent/run")
 async def execute_command(req: CommandRequest):
-    return run_command(req.cmd)
+    res = run_command(req.cmd)
+    status = res.pop("code", 200)
+    return JSONResponse(status_code=status, content=res)
 
 @app.get("/agent/files")
 async def get_files():
@@ -22,6 +27,19 @@ async def reset_workspace():
     cleanup()
     return {"status": "workspace cleared"}
 
+@app.post("/agent/upload")
+async def upload_file(file: UploadFile = File(...)):
+    ws = ensure_workspace()
+    dest = ws / "uploads" / file.filename
+    # منع تجاوز المسار
+    if not str(dest.resolve()).startswith(str(ws.resolve())):
+        raise HTTPException(400, "Invalid file path")
+    
+    async with aiofiles.open(dest, "wb") as out_file:
+        content = await file.read()
+        await out_file.write(content)
+    return {"status": "uploaded", "path": f"uploads/{file.filename}"}
+
 @app.get("/health")
 def health():
     return {"status": "pc_agent_online"}