feat: ZIP archive download endpoint (POST /files/archive)

Add a single POST /files/archive endpoint that bundles one or more
files and directories into a ZIP archive for download.

- Accepts a list of paths (files and/or directories)
- Directories are recursively included with relative paths preserved
- Multi-user access control enforced via UserFS
- Cross-platform ZIP format (Windows, macOS, Linux)
- Archive name derived from input (single item = item name, multiple = download.zip)

Closes #92

Author: tjbck

CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.11.28] - 2026-03-24
+
+### Added
+
+- 📦 **Compressed directory download** (`POST /files/archive`) — bundle one or more files and directories into a ZIP archive for download. Cross-platform compatible (Windows, macOS, Linux). Multi-user access control enforced.
+
 ## [0.11.27] - 2026-03-22
 
 ### Added

open_terminal/main.py

@@ -922,6 +922,73 @@ async def upload_file(
     return {"path": path, "size": len(content)}
 
 
+class ArchiveRequest(BaseModel):
+    paths: list[str] = Field(
+        ...,
+        description="List of file or directory paths to include in the ZIP archive.",
+    )
+
+
+@app.post(
+    "/files/archive",
+    include_in_schema=False,
+    dependencies=[Depends(verify_api_key)],
+)
+async def archive_paths(
+    request: ArchiveRequest,
+    fs: UserFS = Depends(get_filesystem),
+):
+    """Bundle files and/or directories into a single ZIP archive."""
+    import io
+    import zipfile
+
+    if not request.paths:
+        raise HTTPException(status_code=400, detail="No paths provided")
+
+    resolved = []
+    for p in request.paths:
+        target = fs.resolve_path(p)
+        if not await fs.exists(target):
+            raise HTTPException(status_code=404, detail=f"Path not found: {p}")
+        resolved.append(target)
+
+    # Derive a meaningful archive name from the input paths.
+    if len(resolved) == 1:
+        archive_name = os.path.basename(resolved[0].rstrip("/\\")) or "archive"
+    else:
+        archive_name = "download"
+
+    def _build_zip() -> bytes:
+        buf = io.BytesIO()
+        with zipfile.ZipFile(buf, "w", zipfile.ZIP_DEFLATED) as zf:
+            for target in resolved:
+                if os.path.isfile(target):
+                    zf.write(target, os.path.basename(target))
+                elif os.path.isdir(target):
+                    dirname = os.path.basename(target.rstrip("/\\")) or "dir"
+                    for dirpath, dirnames, filenames in os.walk(target):
+                        dirnames[:] = [
+                            d for d in dirnames
+                            if fs.is_path_allowed(os.path.join(dirpath, d))
+                        ]
+                        for fname in filenames:
+                            full = os.path.join(dirpath, fname)
+                            if not fs.is_path_allowed(full):
+                                continue
+                            arcname = os.path.join(
+                                dirname, os.path.relpath(full, target)
+                            )
+                            zf.write(full, arcname)
+        return buf.getvalue()
+
+    data = await asyncio.to_thread(_build_zip)
+    return Response(
+        content=data,
+        media_type="application/zip",
+        headers={
+            "Content-Disposition": f'attachment; filename="{archive_name}.zip"',
+        },
+    )
 
 
 # ---------------------------------------------------------------------------

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "open-terminal"
-version = "0.11.27"
+version = "0.11.28"
 description = "A remote terminal API."
 readme = "README.md"
 authors = [