/api/fs
1 route under /api/fs.
Cockpit server REST reference, v0.8.
All routes sit below the Cockpit server's session gate (app.use('/api', auth.requireSession)) except /api/health. Generated from the real route table in ui/server/src.
GET /api/fs/browse#
- allowlisted, directories-only folder browser for the project picker. The ONLY root is the workspace (never $HOME, never a client-set list); a relative
pathis workspace-relative; anything that resolves outside it by realpath is refused. All listing logic lives in src/dir-browser.mjs (+ ./dirBrowse.mjs adapter).
Source: ui/server/src/index.mjs.