Add file deletion endpoint with multi-tag filtering support and redesigned editor UI with icon-only buttons

backend/main.py

@@ -231,6 +231,35 @@ async def api_file_save(vault_name: str, path: str = Query(..., description="Rel
         raise HTTPException(status_code=500, detail=f"Error saving file: {str(e)}")
 
 
+@app.delete("/api/file/{vault_name}")
+async def api_file_delete(vault_name: str, path: str = Query(..., description="Relative path to file")):
+    """Delete a file."""
+    vault_data = get_vault_data(vault_name)
+    if not vault_data:
+        raise HTTPException(status_code=404, detail=f"Vault '{vault_name}' not found")
+
+    vault_root = Path(vault_data["path"])
+    file_path = vault_root / path
+
+    try:
+        file_path.resolve().relative_to(vault_root.resolve())
+    except ValueError:
+        raise HTTPException(status_code=403, detail="Access denied: path outside vault")
+
+    if not file_path.exists() or not file_path.is_file():
+        raise HTTPException(status_code=404, detail=f"File not found: {path}")
+
+    try:
+        file_path.unlink()
+        logger.info(f"File deleted: {vault_name}/{path}")
+        return {"status": "ok", "vault": vault_name, "path": path}
+    except PermissionError:
+        raise HTTPException(status_code=403, detail="Permission denied: vault may be read-only")
+    except Exception as e:
+        logger.error(f"Error deleting file {vault_name}/{path}: {e}")
+        raise HTTPException(status_code=500, detail=f"Error deleting file: {str(e)}")
+
+
 @app.get("/api/file/{vault_name}")
 async def api_file(vault_name: str, path: str = Query(..., description="Relative path to file")):
     """Return rendered HTML + metadata for a file."""